Initialising a bank access with EBICS 2.5 and 3.0

 
Procedure

1.

On the start page, in the area Your bank access "<name of bank access>" has not been initialised yet, click on Initialise now.

2.

Click on Start wizard.



3.

In the field Name, enter the name of the bank access.

4.

Click on Next step.

The mask for sending the certificate opens.

5.

Read the information on the mask.

To exchange the public keys with the financial institution, click on Send certificate.

6.

Confirm the sending of the certificate with your security medium.

7.

If successful, you will be offered the INI letter for download (unless you have activated an automatic bank key activation by your operator).

Confirm the download with your security medium.

8.

Click on Open INI letter and save the INI letter on your computer.

9.

Print out the INI letter, sign it and send it to your financial institution.

10.

Click on Resume later.

11.

Confirm the warning message with Suspend.

The bank must activate your access. Depending on how your financial institution works, the release of the public keys may be automated or take some time (up to several days). If your financial institution releases the keys automatically, continue with the optional step for setting up push notifications (see section Configuring push notifications).

Once the bank has activated your access and has not automatically released the keys, you will be informed of this on the start page of the application.

If you download the bank keys before they are activated by the bank, an error message is displayed.

Log out from the application.

12.

Log in to the application.

When your bank access has been activated you will be informed of this on the start page after you log in.

13.

Click on Continue now.

Alternatively, proceed as follows:

1.

Select Settings ➔ User settings, tab Bank accesses.

2.

Select the bank access for editing.

3.

Click on Continue initialisation.

The mask with your certificate opens.



14.

A green checkmark is displayed as a processing indicator next to the button Download bank keys.

In this case, your financial institution supports the EBICS protocol versions 2.x and 3.0. To be able to use the bank access to the full extent, activate both keys.

You can usually find the certificates in the BPD letter you received from your financial institution. If this function has been set up by your provider, the application offers you a link in this mask which you can use to view the certificates of the financial institution.

15.

Activate the keys.

The operator of the application defines whether you activate the keys with or without a hash value check.

In the above example, the keys were automatically activated.

Activation with hash value check

Click on Activation with a hash value check.

Bank access with protocol version EBICS 2.5: enter the hash values of the authentication key and encryption key of the financial institution in the mask.

Bank access with protocol version EBICS 3.0: enter the hash values of the certificates of the financial institution in the mask.

The operator defines how many characters you have to enter for the respective key.



The application helps you with information texts.

Confirm your entry by clicking on Release bank keys.

Activation without a hash value check

Click on Activation without a hash value check.

16.

Click on Next step.

The certificate and key exchange is completed.

17.

To download the BTFs assigned to you (i.e. your protocol user) at the bank server, click on Download order types/BTFs.

If the button is not selectable, you either do not have the right Protocol user bank accesses: assign order types/BTFs from bank server or the financial institution sends the BTFs automatically.

In that case, skip the step.


18.

Click on Next step.

Your bank access has been initialised successfully. You can use this bank access to execute business transactions that are assigned to you at the bank server, for example signing payment orders and transferring them to the financial institution.

If your bank access is assigned the EBICS profile EBICS-FR with the CFONB profile Submitting party profile (T), you cannot provide EBICS signatures, i.e. you cannot sign bank-technical orders.

To subsequently change your bank access, e.g. assign ordering party accounts (not included in the standard scope of the application, see section Assigning ordering party accounts to a bank access), select Settings ➔ User settings, tab Bank accesses.