SYSTEM CONFIGURATION SETTINGS FOR ACCESS

To ensure that your NBANow Network transactions are protected with the highest level of security currently available for Internet access, the following security settings must be established on your browser. THESE SETTINGS ARE REQUIRED WHEN YOU ARE ACCESSING THE SYSTEM VIA THE INTERNET.

** Please ensure the URL address (web site address) indicates "https" and not "http" - The "s" is required for the secured server environment. The URL address must be as follows…

The following browsers have been certified for use on NBANow Network:

Microsoft Internet Explorer (IE) ~ Versions 5.5 SP2 through 6.0
Netscape ~ Versions 6.2 through 7.0

The following browsers are no longer supported and should not be used.

Internet Explorer versions prior to 5.5 are no longer supported.
Netscape versions prior to 6.2 are no longer supported.

Browsers specific to Apple MacIntosh and PDA's.

Use of browsers, other than those that are certified, could cause inconsistencies in system performance and is strongly discouraged. In addition, if you are currently using Netscape 6.0, we recommend that it be uninstalled and replaced with a certified browser version. This is due to design changes and associated security risks associated with Netscape version 6.0.

The cipher strength must be 128 bit encryption.

A DST Root certificate must be included in the list of Trusted Root Certificates.

VERIFYING AND SETTING ENCRYPTION STRENGTH

To check the encryption strength in the Browser and configure to 128 bit encryption:

For Internet Explorer :

Click on Help
Select “About Internet Explorer”

The browser information will be displayed. Encryption cipher strength should be 128-bit. If less than 128-bit, dial into the Microsoft web site and follow the instructions for downloading the 128-bit encryption pack.

For Netscape Navigator/Communicator:

Click on “Edit”
Select “Preferences…”
Double click on “Privacy & Security”, click on “SSL”
Under “SSL Protocol Versions” click “Edit Ciphers…”
Under the “SSL2” tab verify all 128-bit encryption selections are indicated.
Under the “SSL3/TLS” tab verify all 128-bit encryption selections are indicated.
Under the “Extra SSL3/TLS” tab verify all 128-bit encryption selections are indicated.

VERIFYING AND CONFIGURING DST ROOT CERTIFICATE

You must ensure that your browser is configured with a DST Root Certificate. The following browsers already contain the DST Root Certificate and do not require upgrade.

Netscape 4.51 or higher
Internet Explorer 5.0 or higher

To check whether your browser is configured with a DST Root Certificate

For Internet Explorer:

Click on Tools and select Internet Options
Within Internet Options, select Content and then click on Certificates. Under Certificate Manager, click on Trusted Root Certificate Authorities. Look for DST RootCA X1.

If there is no reference to DST RootCA X1 in the list of Trusted Root Certificate Authorities, please

contact Cash Management Customer Service at (888) 316-6500 and the Root Certificate will

be e-mailed to you. Be sure you specify that you are requesting DST RootCA X1. Upon receipt,

upload to your browser.

For Netscape Navigator:

Click on “Edit”
Select “Preferences…”
Double click on “Privacy & Security”
Select “Certificates”, under “Manage Certificate” click “Manage Certificates…”
Click on the “Authorities” tab, scroll down to locate “Digital Signature Trust Co. > DST RootCA X1 and > DST RootCA X2

PLEASE NOTE:

ONCE INTERNET ACCESS TO NBANOW NETWORK IS ENABLED, FAILURE TO CONFIGURE YOUR BROWSER WITH THE PROPER ENCRYTION STRENGTH AND DST ROOT CERTIFICATE WILL PREVENT YOUR TRANSACTIONS FROM BEING PROCESSED.