Proprietary and Confidential rev. 3/2012 Topic Module Overview 1 Consumer Experience2 Administrator Set-Up3 System Maintenance4 User Maintenance 5 Reports6 Marketing Tools7 Resources8 Internet Banking Certification Training Table of Contents

Module 1: Overview Intuit Financial Services University Internet Banking Certification Training

Internet Banking Certification Page 3 Module 1: Overview © 2012 Intuit Financial Services All rights reserved. CONFIDENTIAL AND PROPRIETARY. Overview - Objectives By the end of this section, you will learn the following for Internet Banking and Admin Platform:  key terms to know and benefits  overview of Admin Platform  technical considerations  security features

Internet Banking Certification Page 4 Module 1: Overview © 2012 Intuit Financial Services All rights reserved. CONFIDENTIAL AND PROPRIETARY. Key Terms To Know Internet Banking (IB) – Admin Platform (AP) – Super User— Financial Institution (FI) Administrator— Consumer / User –

Internet Banking Certification Page 5 Module 1: Overview © 2012 Intuit Financial Services All rights reserved. CONFIDENTIAL AND PROPRIETARY. Benefits of Internet Banking and Admin Platform Convenience Consumers can log in at any time of day or night to check balances and perform banking tasks. Security Intuit Financial Services banking products offer security at every level of an Internet Banking transaction. This ensures not only the security of consumer transactions but also the security of information on your host computers. Reliability Intuit Financial Services banking products average a very high up time, ensuring that you and your consumers can access the system when you need to. Scalability As the number of your consumers grows, your Internet Banking product grows with you.

Internet Banking Certification Page 6 Module 1: Overview © 2012 Intuit Financial Services All rights reserved. CONFIDENTIAL AND PROPRIETARY. Admin Platform Overview The Admin Platform (AP) provides access to all administrative functions for Internet Banking. These tools reside under the Management Console menu in the navigation. In addition, AP combines access to MySupport, Marketing, Product, Training and GRS Gateway resources under a single login.

Internet Banking Certification Page 7 Module 1: Overview © 2012 Intuit Financial Services All rights reserved. CONFIDENTIAL AND PROPRIETARY. Technical Considerations Technical considerations for Internet Banking are found by searching for ‘browser policy’ in the Intuit Financial Services Knowledge Base. The Knowledge is accessed through MySupport (Home > MySupport). Once in MySupport, the Knowledge Base link is located on the left navigation. The information below provides our main policy on browsers and related information. General Notes: The screens in the Internet Banking system have been designed to support a resolution of 1024 xs768 pixels or higher. You must enable Java Script and Java in your browser. You must enable cookies in your browser. You must use a supported browser and operating system.

Internet Banking Certification Page 8 Module 1: Overview © 2012 Intuit Financial Services All rights reserved. CONFIDENTIAL AND PROPRIETARY. Compatibility Test By clicking on a link on the Internet Banking Sign-On Page/Area, a consumer can run a test to determine if their current system’s configuration meets Internet Banking’s preferred system requirements. The benefits to your financial institution are: Ensures Internet Banking’s preferred system requirements are met – Your financial institution will be able to alert the consumer if their system configuration does not meet preferred system requirements and provide instructions on how to make the changes needed to get the best experience with our site. Make sure you train your call center staff to ask consumers to test their system compatibility! Reduces support and maintenance costs – Allows your financial institution to be proactive by informing consumers of potential problems related to their system configuration up-front. Increases client satisfaction – Being proactive with compatibility issues can keep consumer experience issues to a minimum, and consumers and potential consumers will enjoy the full experience of your site as you intended.

Internet Banking Certification Page 9 Module 1: Overview © 2012 Intuit Financial Services All rights reserved. CONFIDENTIAL AND PROPRIETARY. Compatibility Test Results The Compatibility Test looks at the following: Operating System Browser Cookie Settings JavaScript Settings Result #1: Success – Everything is compatible: Result #2: Consumer’s system does not meet preferred settings. SSL Size Screen Resolution Adobe Acrobat

Internet Banking Certification Page 10 Module 1: Overview © 2012 Intuit Financial Services All rights reserved. CONFIDENTIAL AND PROPRIETARY. Internet Banking Security User ID and Password (PIN) Protection To access Internet Banking, you are required to enter a User ID and Password. Financial institutions may impose a periodic change of passwords. Failure to select a new password before the password expiration date results in having to choose a new password before logging onto Internet Banking. If a consumer’s password is about to expire, a warning message will be displayed upon login. This message will indicate when the current password expires and prompts the consumer to change it. Auto Timeout Screen Blanking After a certain amount of time of non-activity (the consumer chooses this; default is 5 minutes) the auto timeout feature will automatically log you out of the product. This feature in Internet Banking warns you 30 seconds prior to a pending timeout. If you do not acknowledge the message (by pressing Continue), the Internet Banking session is halted and you are presented once again with the log-on screen.

Internet Banking Certification Page 11 Module 1: Overview © 2012 Intuit Financial Services All rights reserved. CONFIDENTIAL AND PROPRIETARY. Internet Banking Security (cont’d) Sign-off Button The Sign-Off Button properly ends the Internet Banking session by deleting the session cookie that is created upon the consumer logging in to Internet Banking. If the consumer does not use the sign off button (and closes the browser window instead) the consumer will get a message stating that there is currently a session running if they try to log in again. The consumer will have to either close all browser windows, wait until the cookie's session times out, or delete their cookies. Failed Log-on Attempts The Internet Banking system denies access to a consumer after a pre- determined number of failed log-on attempts (as set by the financial institution during implementation). If you have been locked out due to this situation, you must contact the financial institution in order to be re- initialized. Encryption Data encryption is a way of translating data into a form that is unintelligible without a deciphering mechanism. Encryption helps to protect against proprietary information getting into unauthorized hands. For example, the password that is entered during the registration process is encrypted. IFS requires browsers to have 128-bit encryption.

Internet Banking Certification Page 12 Module 1: Overview © 2012 Intuit Financial Services All rights reserved. CONFIDENTIAL AND PROPRIETARY. MFA Overview:  MFA requires online consumers to provide something additional beyond username and password to login.  This enhanced security means that even if a consumer has their password stolen in a phishing attack or by malicious software, the fraudster cannot access online accounts because they do not possess the additional factors needed, which are harder to steal.  By offering MFA, you can give your consumers and businesses peace of mind when using online products and services.  MFA for Internet Banking is a contract item. Certification Training: Training is online. In addition, you’ll attend (or may have already attended) a Configuration online course to learn how to select your options. This training is also valuable for your front-line staff. The links to the courses are in MySupport as part of your MFA tasks. Multifactor Authentication (Consumers) MFA Details: On computer of consumer’s choice, a unique, secure device ID (a cookie) will be placed in the browser of the consumer’s PC Links the computer to the consumer for login During subsequent logins, Intuit Financial Services will check for both correct password & matching device ID If a consumer logs in from an enrolled PC, then no change from current login experience If device ID is not present or mismatched, login is only allowed if temporary security code sent via or challenge question answers are entered No limit on number of computers a consumer can enroll

Internet Banking Certification Page 13 Module 1: Overview © 2012 Intuit Financial Services All rights reserved. CONFIDENTIAL AND PROPRIETARY. Security The Admin Platform will recognize financial institution users’ computers and challenge for a one-time access code delivered via SMS-text, Automated Voice, or when logging in from an unrecognized computer. Enhanced Multi-Factor Authentication 6 to 12 characters in length Must be unique within the organization Can be any combination of letters and numbers and can include period (.), underscore (_), and dash (-) but no other special characters nor empty spaces. Login ID Requirements 8 to 75 characters in length Must include at least 1 number and 2 special characters Forced password change upon initial login, after a password reset and every 13 weeks. The new password cannot be the same as the last 6 passwords. Password Requirements / Forced Password Change A user is allowed five (5) sequential failed logins in a 24 hour period before their account is locked out. Failed Login Attempts A timeout warning is displayed after 20 minutes. Click ‘Extend’ to remain logged in. Inactivity Timeout Feature Admin Platform Security

Internet Banking Certification Page 14 Module 1: Overview © 2012 Intuit Financial Services All rights reserved. CONFIDENTIAL AND PROPRIETARY. Admin Platform Login Site Address – be sure to access this login screen via SSL ( and note that the address is case-sensitive Login – individual financial institution user accounts are managed in the Admin Platform by a Super User. Password – passwords lock out after 5 bad attempts. Passwords can be reset by an authorized User Administrator or Super User. A User Administrator may not reset other User Administrator passwords. Detailed in-product help is accessible in the Admin Platform. (Replace w ​ ww.yourfi.com with your web address)

Internet Banking Certification Page 15 Module 1: Overview © 2012 Intuit Financial Services All rights reserved. CONFIDENTIAL AND PROPRIETARY. Admin Platform MFA Upon first log in, the system presents the Enhanced Multi-Factor Authentication wizard. A prompt requires at least one of the following delivery methods to be set up: SMS-text, Automated Voice or . Multiple addresses or phone numbers may be added through the wizard. Each financial institution user is prompted to enter the Enhanced Multi-Factor Authentication details for their individual account. Details may be changed per user once logged in to the Admin Platform.

Internet Banking Certification Page 16 Module 1: Overview © 2012 Intuit Financial Services All rights reserved. CONFIDENTIAL AND PROPRIETARY. Admin Platform MFA The financial institution user is prompted to select a delivery method to authenticate the current computer for Admin Platform access. In this example, the one-time access code will be sent via . The financial institution user enters the one-time access code and selects Continue in order to complete authentication for the current computer. Each computer may be saved as Public or Private. Computers saved as Private retain these settings for future visits.

Internet Banking Certification Page 17 Module 1: Overview © 2012 Intuit Financial Services All rights reserved. CONFIDENTIAL AND PROPRIETARY. Overview - Objectives In this section, you learned the following for Internet Banking and Admin Platform:  key terms to know and benefits  overview of Admin Platform  technical considerations  security features