RSA SecurID New User Quick Start Guide - J.P. Morgan

1 July 2019 This Guide is confidential and proprietary to Morgan and is provided for your general information only. It is subject to change without notice and is not intended to be legally binding. All services described in this Guide are subject to applicable laws and regulations and service terms. Not all products and services are available in all locations. Eligibility for particular products and services will be determined by JPMorgan Chase Bank, or its affiliates. Morgan makes no representation as to the legal, regulatory or tax implications of the matters referred to in this Guide . Morgan is a marketing name for the Treasury Services and Merchant Services businesses of JPMorgan Chase Bank, , member FDIC, and its affiliates worldwide. 2019 JPMorgan Chase & Co. All rights reserved. RSA SecurID Software Token New user Quick Start Guide Installing the App for Apple iOS and Android Importing a Software Token Generating a Software Token Code 2 Overview Morgan Access clients that use RSA SecurID security tokens now have a new software token option available that will enable users to generate a token code from an Apple iOS or Android mobile device using the RSA SecurID Software Token App.

2 Getting Started Check with your Security Administrator to make sure they have taken the necessary steps in Administration Credential Management to move you onto an RSA Software Token, including validation of your correct Mobile Phone Number in Credential Management. You must have a mobile number in your Access profile before a software token is assigned to you. This will allow you to receive an activation code to register the software token. Once your Security Administrator assigns you a software token, you will receive a text message with the software token activation code as well as a notification email, which will have the RSA Soft Token Registration instructions in an Adobe PDF format attached. Follow these instructions to activate your soft token. If you are a new Access user , you will also receive an email that will contain a temporary password and instructions to set up a new password for your software token.

3 Notes: Make sure you have a stable mobile phone cellular/data connection. An unstable connection may impact your Activation and Authentication experience. If you are a current user with a hardware token, you can use either a hardware token or a software token; you cannot use both. 3 Installing the App When you import a software token into the RSA SecurID Software Token app, you will be able to verify your identity, or authenticate, for Access with a one-time password or token code generated on your device. The token code screen in the app displays a six-digit code which you then enter along with your user ID and Password on the Morgan Access Log On Apple iOS Devices You can either install the app directly onto your device from the Apple App store, or launch the App store in iTunes , download the app to your computer, and then sync it onto your device.

4 To install the app directly to your device: 1. Open the App store on your device. 2. Tap Search, and then enter the keywords RSA SecurID Token. 3. Select RSA SecurID Software Token, and then tap Get. 4. If prompted, enter your Apple ID or iTunes account credentials. To install the app with iTunes: 1. Connect your device to a USB port on your computer, and then launch the App store in iTunes. 2. In the Search field, enter RSA SecurID Token, and then download the app to your computer. 3. If prompted, authenticate with your Apple ID or iTunes account credentials. 4. Instruct iTunes to sync the app onto your device and apply the changes. To Start the app, tap the Software Token app icon. The app will prompt you to contact your administrator to request a token. (You must install a token before you can use the app to generate the Token Code. Go to the Import Software Token section of this Guide for instructions.)

5 RSA SecurID Software Token App 4 Android Devices: To install the app from Google Play : 1. In your list of apps, tap the app store icon. 2. Tap Search, and then enter RSA SecurID . 3. Select RSA SecurID Software Token, and then tap Install or Get. 4. Tap OK or Download to Start the download. Notes: When the download is complete, a notification icon appears in the status bar. The app is also listed in the notifications window. To Start the app: 1. In your app list, tap the Token icon. 2. If your administrator sent you a software token without asking for your device ID, go to the Import Software Token section of this Guide for instructions. RSA SecurID Software Token App 5 Import a Software Token Use your Mail app on your device to import a software token. Follow the RSA Soft Token Registration instructions provided by your Security Administrator to activate and import your token.

6 Apple iOS Devices 1. Tap the Token app on your device to launch the application. 2. From the Welcome screen, tap the + icon. 3. Do one of the following: a. Select Scan QR Code, and refer to the Registration instructions pdf you received via email. Or, b. Select Enter Link to copy and paste the URL provided in the email you received, and then tap Submit. Note: In some instances, you may need to manually enter the correct URL if you do not have a company email app on your device or if your device is not allowing copy and paste. 4. On the Token Import screen, enter the activation code you received via SMS on your device, and then tap Done to complete the import of the token. 5. Once successfully imported, a "Token successfully imported" acknowledgement message will display. Tap OK. Notes: The Activation Code is valid for only five days. Once the token is successfully imported, the six-digit Token Code will display.

7 When ready to log on to Access, enter this number in the Token Code field in the Access Log On page. If you are entitled to Access Mobile, after an initial log on using a desktop or laptop, you can copy the Token Code from the RSA app by clicking the Copy icon, and pasting into the Mobile app's Token Code field. Use y 6 Android Devices 1. Tap the Token app on your device to launch the application. 2. From the Welcome screen, select Import Token. 3. Do one of the following: a. Select Scan QR Code, and refer to the Registration instructions pdf you received via email. Or, b. Select Import URL to copy and paste the URL provided in the email you received, and then tap Import. Note: In some instances, you may need to manually enter the correct URL if you do not have a company email app on your device or if your device is not allowing copy and paste. 4.

8 When prompted, enter the activation code you received via SMS on your device, and then tap OK to complete the import of the token. 5. Once successfully imported, a "Token successfully imported" acknowledgement message will display. Tap OK. Notes: The Activation Code is valid for only five days. Once the token is successfully imported, the six-digit Token Code will display. When ready to log on to Access, enter this number in the Token Code field in the Access Log On page. If you are entitled to Access Mobile, after an initial log on using a desktop or laptop, you can copy the Token Code from the RSA app by clicking the Copy icon, and pasting into the Mobile app's Token Code field. Use your M1 2 3 3b 4 4 5 7 Generate a Token Code from an Apple iOS Device to Authenticate Access 1. Open Access and enter your user ID and Password. 2. On your device, Start the Software Token app and then enter the code displayed on your device, without spaces, in the Token Code field in the Access Log On page.

9 Notes: If you have several software tokens on your device and the active token is not your Access token, go to the My Tokens screen to select your Access token. A countdown timer will indicate how many seconds the displayed code will remain active. If the code changes before you can enter it in Access, enter the new code that displays to complete your log on. Sometimes you may need to enter the next token code to complete authentication to log on to Access. (This may happen for different reasons, for example, you incorrectly entered your user ID, your Access password or the Token Code.) Return to the Token app on your device, and tap the next code icon (>) or swipe left to display the next code. 8 Generate a Token Code from an Android Device to Authenticate Access 1. Open Access and enter your user ID and Password. 2. On your device, Start the Token app.

10 3. If your token does not require a PIN, enter the code that is displayed on your device in the Token Code field in Access. Notes: If you have several software tokens on your device and the active token is not your Access token, go to the Token List to select your Access token. If the code displayed on your device changes before you can enter it in Access, enter that code to complete your log on. Sometimes you may need to enter the next token code to complete authentication to log on to Access. (This may happen for different reasons, for example, you incorrectly entered your user ID, your Access password or the Token Code.) Return to the Token app on your device, and tap Next Code. 9 Rename a Software Token in the RSA SecurID App for iOS 1. Tap the Menu icon. 2. From the My Tokens screen that displays, tap Settings for the token you want to rename.