MCBDirect Corporate
Logging on using a Soft Token
Document issue: 2.1
Date of issue: September 2014
Contents
About Soft Token authentication ....................................................................................... 3
Logging onto MCBDirect Corporate online banking ........................................................ 4
Soft Token maintenance ................................................................................................... 7
Change the Soft Token PIN code .......................................................................................................... 7
Unlock your Soft Token after wrong PIN entry ...................................................................................... 9
Page | 2
About Soft Token authentication
MCBDirect Corporate online banking requires two-factor authentication for logging on, first a User
ID and Password authentication (1st factor authentication), followed by Soft Token authentication
(2nd factor authentication).
Two-factor authentication provides greater security than just a single factor of authentication.
While 1st factor authentication uses information the user knows - a User ID and Password – 2nd
factor authentication challenges often also require something the user is holding, such as an eGrid
or (soft) token.
Soft Token authentication involves authenticating using a Security Code dynamically generated
by a Soft Token. A Soft Token is a small software application. See for example the Microsoft®
Windows® Soft Token application below.
Authenticating to the MCBDirect Corporate online banking application using Soft Token
authentication requires the Soft Token software to be installed on a supported computer or mobile
device.
We have chosen the world-wide leading provider Entrust for our Soft Token solution. Entrust
provides a user friendly application Entrust IdentityGuard Soft Token as a desktop solution
supported by Microsoft® Windows® & Macintosh® computers, or as the Mobile app Entrust
IdentityGuard, supported on mobile devices running iOS, Android, BlackBerry OS or Windows
Mobile.
This Soft Token software is easy to replace and maintain via the Self-Service Portal.
Page | 3
Logging onto MCBDirect Corporate online banking
After downloading & activating a Soft Token via the Self-Service Portal, you can log onto
MCBDirect Corporate online banking using the Soft Token.
Step 1Open a web browser and navigate to MCBDirect Corporate online banking by using the
online banking link on www.cmbnv.com, or by entering the following URL into the Web browser:
https://mcbdirect.mcbbonaire.com/corporate
A Logon page appears.
Enter your User ID and Password.
Click Next, the Soft Token page appears.
Page | 4
The Soft Token page prompts you to provide a Security Code.
Step 2On your computer or mobile device, open the installed Soft Token application.
Step 3Enter the PIN code that you have chosen during the installation of the Soft Token
application.
Important: 1. Never give your PIN code to anyone.
2. In the event the computer or mobile device that holds the Soft Token is lost or
stolen, immediately notify the bank.
Page | 5
The token displays a Security Code.
Tip: On a PC/Mac you can copy
and paste the Security Code using
the small ‘Copy to Clipboard’ icon.
Step 4Enter the Security Code (token response) into the Security Code field on the MCBDirect
Corporate web page and click the Submit button.
Important: You have 30 seconds to enter the Security Code on the web page before it expires.
Congratulations! After a successful authentication, you are logged onto the MCBDirect
Corporate online banking website.
Page | 6
Soft Token maintenance
This section describes how to change your PIN code and how to unlock your Soft Token in case
you have entered a wrong PIN code more than 5 consecutive times.
Change the Soft Token PIN code
You can change your PIN code after a successful user authentication. If you don’t know your PIN
code anymore, please refer to the “Wrong PIN code entry” section below.
Step 1To access the Settings menu, right-click at the moment that the mouse cursor is above the
Soft Token application and select from the small pop-up menu. The Settings screen appears.
Step 2Click the Change PIN button and follow the instructions. First enter your current PIN
code.
Page | 7
Important: The Soft Token application is configured to check for weak (that is, easy to guess)
PIN codes and reject them. If you entered a weak PIN code, the Soft Token application
displays a message telling you that the entered PIN is not secure enough and tells you to try
a different new PIN code.
Step 3Enter a new PIN code, followed by a confirmation of your new PIN code.
After a successful PIN code change, the Settings menu shows.
Step 4Click the Cancel button to go back to normal operations.
Page | 8
Unlock your Soft Token after wrong PIN entry
Your Soft Token is configured to use the lock mechanism as a protection against wrong PIN code
entries. After you enter 5 consecutive wrong PIN codes, the Soft Token will automatically lock.
Important: Once the Soft Token is locked, you will have to obtain the unlock code from the
bank before you can continue using the Soft Token. Before proceeding with the steps below,
first contact the bank.
Step 1On your computer or mobile device, open the installed Soft Token application.
Step 2During contact with the bank, the support officer will ask you for the PIN Reset Code.
This code is displayed in the Soft Token application, after you have clicked the Unlock button.
In return, the support officer will give you an Unlock Code.
Page | 9
Step 3Enter the code into the Soft Token application and click the Unlock button.
If the unlock code is correct, the Soft Token unlocks and prompts you to enter a PIN code, followed
by a re-entry of the same new PIN code. (refer to “Change the Soft Token PIN code” on page 7 for
instructions.)
Note: If the unlock code is incorrect, the Soft Token application displays an error message,
and remains locked until a valid unlock code is entered.
Page | 10