Setting up your Admin System

1. Setting up your Admin System Intuit Financial Services University Business Banking Certification

2. Section Objectives By the end of this section, you will know how to: • set up the Admin Platform to test and launch the product • set up a new company • utilize various communication tools

3. Accessing your FI Admin Platform

4. Terms to Know: FIAP • Super User - Intuit Financial Services grants full access to the FI Admin Platform for only one person at the financial institution; this person is the Super User. • FI administrator – The Super User can set up other administrators at the financial institution and delegate any access except the ability to add/edit/delete administrators. • User ID - must be 4 to 16 characters and may contain letters and numbers. • Password – Your financial institution may customize the requirements to be between 8 and 16 characters in length and may require uppercase letters, lowercase letters, numbers, and/or special characters. This password expires every 30 days. Provide IP addresses to Intuit Financial Services for your FI administrators in order to limit where a person can access the FI Admin Platform.

5. Extra Security: Enhanced MFA or Tokens Upon every login, further authentication is required in addition to the ID and password. Either Enhanced MFA or Business Banking VIP provides this extra layer of security. If Enhanced Multifactor Authentication is enabled, this sends a passcode to the FI administrator’s email address, and that passcode is entered on this screen. If Business Banking VIP is enabled, the FI administrator obtains a token authorization code from a physical token and enters it here to gain access to the FIAP. Note: For details on Enhanced MFA or Business Banking VIP, be sure to take the respective eLearning course (available in MyDI).

6. Financial Institution Administration

7. Accessing the Admin Platform • Practical Applications • How does the Super User get a User ID and Password? • Can a financial institution have more than one Super User? • What does the Super User do if they forget their User ID and/or Password? • How does an FI Administrator get their User ID and Password? • What does an FI Administrator do if they forget their User ID and/or Password? • Can the Super User get locked out?

8. This page intentionally left blank.

9. Setting up your Admins and Policies

10. Security – FI Admin Profile Maintenance FI Administrator Profile Maintenance: Allows the Super User to add FI Administrators and control the features they can access. Do not grant full access to Customer Maintenance or Add New Customer to one administrator - require dual control for this job.

11. Security – End User Password Duration End User Password Duration: Allows the financial institution to control the number of days before Company User passwords become invalid and must be reset for continued access to the Business Banking system.

12. Maintenance – Policies Policies: Allows the financial institution to enable global settings and features for their existing company profiles as well as establish initial settings when creating new company profiles. Imaging Control how many calendar days the Imagingfeature provides access to an online check image and/or a deposit slip image. Zero (0) means that the financial institution is not offering images. This requires a separate contract and is covered in a separate training. Balance Alert-Balance Types When a company sets up an alert to get an email notification if a balance goes above or below a certain amount, the financial institution determines which balance types display. Available Balance is enabled by default; Current Balance, Ledger Balance and Collected Balance may also display and are host dependent.

13. Maintenance – Policies (cont’d) • Balance Reporting • Globally enable or disable various balance reporting features. Web Connect for Quicken, QuickBooks, and/or Money will display if your financial institution purchased these products. • Use Host Provided BAI Codes for BAI Export: Uses the BAI Code sent from the host instead of the BAI Mapping table. If the BAI code does not fall between 001-999, then the BAI mapping will be used. If the BAI mapping table is not populated, or the description does not match anything, then the default values of 409 (debits) and 108 (credits) will be used. • Sweeps: Globally enable or disable Line of Credit accounts as being eligible for the Sweeps function only as the account to adjust, not the account to check. This enables the Sweeps function for all Line of Credit accounts. • Loan Account Details Display: Based on your host, your financial institution may breakout loan transactions into principal, interest, and escrow amounts that display on the CCP Account Details screen. NOTE: If checked off here, these fields will appear on the Account Details screen regardless of whether or not the host provides the data.

14. Maintenance – Policies (cont’d) • Book Transfer • Transfer Across Companies: • Globally enables the option for companies to initiate book transfers between accounts of different companies linked to the same Primary Company. Note: If the host does not support cross company transfers, this setting does not display here. • Allow Transfers from Overdrawn Accounts: If this setting is enabled AND the account level NSF Book Transfer option is checked, it allows overdrawn accounts to display in the book transfer “From Account” drop down list on both the Add Transfer and Add Recurring Book Transfer screens in the Customer Platform. • Loan Payment Types: Globally enable certain loan payments types (based on your host). Regular Payment is available to all FIs so this option does not display. Additional options may include Multiple Payment, Interest Only Payment, Principal Only, Payment, Excess Payment to Interest, Excess Payment to Principal, Escrow Only Payment, Fee Only Payment. • Balance to Check: Define which balance is checked to determine sufficient funds to initiate same-day transfers and sweeps. Select one of the following balances: Available (default value), Current, Ledger or Collected, depending on which balances are available from the host.

15. Maintenance – Policies (cont’d) ACH/EFTPS ACH Cutoff Time: Set the time at which companies can no longer submit ACH/EFTPS files to your financial institution for next-day processing (in military time). Suppress ACH Email Notification: Prevent the system from generating an email to your financial institution upon a company submitting an ACH or Tax Payment file. This also suppresses the email back to the company when your financial institution processes the file. (The financial institution email address is specified on the Workflow Email Routing screen.) Update Invalid Effective Entry Date for ACH Send: Means the system automatically update the effective date when a company uploads an ACH file with an invalid effective date. An invalid date is defined as the previous, current, or non-processing day within the effective date control setting. The effective date will be updated to be next business day after the date in the file. Yet if the effective date is any day past the effective date control setting, the upload will fail. Regardless of this selection, the system will always input the following business day if the effective date is missing. ACH Reversal: Grants global access to an online form that allows a company to request a reversal on an ACH transaction. Effective Date Control ACH/EFTPS: Select the number of days (1-30) in which a company can future-date an ACH or EFTPS file. Do not select any of the suppress email options. Communication and timely information is important!

16. Maintenance – Policies (cont’d) • Stop Payment • Range Stop Payment Limit: Define the maximum (1-25) range of checks that a company can request a stop payment. • Suppress Range Stop Payments: Globally disables the ability for companies to request a range of stop payments. • Suppress Stop Payments Email Notification: Check this box to prevent the system from generating an email to your financial institution upon a company submitting a stop pay request. This also suppresses the email back to the company when your financial institution processes the request. (The email address is specified on the Workflow Email Routing screen.) Wires Wire Transfer Cutoff Time: Set the time at which companies can no longer submit Wire files to your financial institution for same-day processing (set in military time, e.g., 15:00 = 3:00pm). Suppress Wire Transfer Email Notification: Prevents the system from generating an email to your financial institution upon a company submitting a wire. This also suppresses the email back to the company when your financial institution processes the file. (The email address is specified on the Workflow Email Routing screen.)

17. Maintenance – Policies (cont’d) Online Services Minimum number of checks to reorder: Define the minimum number of checks that a company can request to be reordered. Multifactor Authentication (MFA): Increase the assurance of the correct user authenticating access to the Customer Platform. This requires a separate contract and is covered in a separate training. Additional Options Allow User to Change Email Address: Allows users to change their own email address in the Company Platform. NOTE: Does not automatically update bill pay (if enabled in Business Banking). To update the bill pay vendor, run the “change email address” Activity Report (in Management Console for FIS Bill Pay or in PartnerCare for Fiserv Bill Pay). Show Admin Suppress Paper Statement Option: Grants global access to Company Administrators to submit a request form to stop receiving paper statements for certain accounts. Three-Part Login for All Customers: Changes the Customer Platform login screen for all customers to display only three fields (disables the Company Password).

18. Maintenance – Policies (cont’d) Reconciliation Services Account Reconciliation and Positive Pay service – This requires a separate contract and is covered in a separate training. Online Statements This requires a separate contract and is covered in a separate training. Single Sign-On Globally enable or disable access to a single sign-on product (e.g. Bill Pay or Secure Chat). NOTE: This setting can be changed for a particular company. These require a separate contract for each and some have a separate training.

19. Maintenance – Policies (cont’d) New Customer Defaults: Establish the initial state of features when creating new company profiles. These settings can be changed for a particular company during company setup. NOTE: These settings do NOT impact existing clients.

20. Setting up the System • Practical Applications • What are the minimum and maximum number of days for the End User Password Duration? • Is the End User Password Duration a global or individual setting? • Are there a maximum number of FI Administrators that can be set up by the Super User? • Is there risk in setting up all FI Administrators with unlimited access to every function? • What is the current cutoff time for ACH/EFTPS files on the Policies screen? • What ‘New Customer Defaults’ have been set on the Policies screen? • Are Policy settings global or individual settings for companies?

21. Establishing Communications

22. Communications – Messages Messages: Allows the FI Administrator to create text messages that will be displayed on the company’s Business Banking screens. Some HTML tags can be used when creating these messages.

23. Communications – Messages (cont’d) List: Displays all current messages by location. TIP: Refer to the Job Aids PPT on the Resources page (https://www.diclientsite.com/university/class/post-bb.html) for recommended message text for each screen.

24. Communications – Wire Transfer Threshold Limit Wire Transfer Threshold Limit: When an FI Administrator downloads a wire or group of wires that exceed this amount, a designated financial institution employee receives an email notification (as established on the Workflow Email Routing screen). This limit does not affect companies when they initiate wires.

25. Communications – Workflow Email Routing Workflow Email Routing: Allows the FI Administrator to enter multiple email addresses (up to 255 characters) to receive the corresponding notification/ request form that a company submits online (Exception: The ‘From Email Address’ only allows for one email address). NOTE: Separate emails with a semicolon and a space.  From Email - when system generated emails are sent to companies, the email appears to be coming from the email address listed in this field. Reply To Email - upon a company replying to a system generated email, the email is sent to the email addresses listed in this field. FI Administrators should provide a copy of the ‘Setup Information’ guide to their network administrators prior to adding the From Email Address. Be aware of what’s going on in your system! Enter at least one email address for every field.

26. Communications – Change Colors Change Colors: Allows the FI Administrator to customize the HTML colors codes used on all Business Banking Customer Platform screens. The Default button restores the site to the original blue pallet. NOTE: The settings are global (i.e., all clients will see the same color and font settings).

27. Establishing Communications • Practical Applications • What is a benefit of posting messages on screens within Business Banking? • What page should be selected to post a global message for all users? • How can you see which pages have messages on them (and which pages don’t) without having to lookup each page individually? • What is the purpose of the Wire Transfer Threshold Limit? • How many characters can be entered in each field on the Workflow Email Routing screen? • What character should be used to separate email addresses on the Workflow Email Routing screen? • What type of color codes are used on the Change Colors screen?

28. This page intentionally left blank.

29. Mapping BAI Transactions

30. Maintenance – BAI2 Mapping Table BAI2  - (Bank Administration Institute) is a file format used to download financial transactions into most accounting software programs such as Peachtree and Great Plains. • Accept Mapping: Click this button to accept a default mapping of BAI transaction codes. NOTE: The financial institution must click the Accept Mapping button in order to enable this feature for any company. • If your host supports BAI codes, you will see the Host Tran Types mapped to the appropriate BAI code. • If your host does not support BAI codes, you will see the DI Tran Types mapped to the appropriate BAI code. Edit, Delete, Add New: Click these links to customize, delete, or add new transaction codes to the mapping table.

31. Setting up Companies

32. Maintenance – Add New Customer • TIN (or CIF, CIS, PIN, etc) – Entered in main “key” field in order to begin adding a new customer. At least 2 characters are required. Populates as the “Primary” number on the Add New Customer screen (cannot be edited). • Customer Name - pre-populated by host • Company ID - cannot be edited after entered here • Company Password - Company Admin is forced to change upon first login. This field does not show if the “Three Part Login for All Customers” box is checked on the Policies page. • Billing Account (optional) – flag one account to use for assessing fees for Business Banking. Tied to the Billing Reports in the FIAP. • Company Administrator – enter this information on the right side • User ID - 4 to 16 characters and may include letters and numbers • User Password – Default is 6 to 16 characters with a minimum of 1 alpha and 1 numeric character (may be customized). Company Admin is forced to change upon second login (or first login if Company Password is suppressed – see above). • MFA Security Code Delivery Options – covered in the MFA training

33. Maintenance – Add New Customer (cont’d) Account List: Business Banking Services that have been enabled for your financial institution during Implementations display in each column. Any accounts that have been enabled on your host for Business Banking display in each row. A checked box in a row/column position indicates that the company has permission to use that column’s service with that row’s account. NOTE:Some services cannot be used with some account types. The system automatically disables the checkboxes in such cases, so you cannot inadvertently assign an invalid permission.

34. Maintenance – Add New Customer (cont’d)

35. Maintenance – Add New Customer (cont’d) • Sweeps • Allows the Company Administrator to set up automated sweeps on accounts in order to keep balances within specified limits. • Line of Credit: Check this box to allow Line of Credit accounts to appear in ‘Accounts to Adjust’ dropdown (not eligible as an ‘Account to Check’). Sweeps are not enabled on a per account basis. • Balance Reporting • Suppress Float: Check this box to prevent the company from having access to the float data transmitted by the host. • BAI2: Check this box to allow the company the ability to export transactions into a BAI2 file format. • WebConnect for Quicken: Check this box to allow the company the ability to export transactions into a QFX file type. (Required for versions of Quicken 2005 through today.) • WebConnect for QuickBooks: Check this box to allow the company the ability to export transactions into a QBO file type. • Money (OFX): Check this box to allow the company the ability to export transactions into an OFX file type.

36. Maintenance – Add New Customer (cont’d) Deposit Online Statements Determine if Online Statements should be enabled for deposit accounts. Book Transfers Check this box to allow the company the ability to transfer funds between accounts linked to the same Primary Company. Transfer Across Companies: allows the company to initiate book transfers between accounts of different companies linked to the same Primary Company. Stop Payments Check this box to allow the company to submit stop payment requests.

37. Maintenance – Add New Customer (cont’d) • Require Approval: Check this box torequire approval on all initiated files, regardless of amount. The user that initiated the file can approve the file if they have been designated as an approver. NOTE: Without this box checked, approval is required only when the initiator’s user limits are exceeded. • Require Approval by Other User: Check this box along with Require Approval torequire another user’s approval on all initiated files, regardless of amount. Check the box by itself to require another user’s approval only on files over the initiator’s user limits. • Restrict ACH Initiation if User Limits are exceeded: Check this box to make the user’s limits absolute limits that cannot be exceeded. The system will reject any transaction exceeding the user’s transaction or daily limit. ACH Daily limits: Define the absolute limits for the sum total of transactions a company may request per day. ACH limits are split into credit and debit origination limits. NOTE: The offsetting transaction is not included in these amounts (i.e for a payroll file, only the credit limit is used for the amount of the payroll file). Balanced Batches Required: Select this radio button toforce the company to balance the credits or debits in an ACH batch with an equal offsetting transaction. Balanced and Unbalanced Batches Allowed: Select this radio button to allowthe company to submit balanced or unbalanced batches (batches without an offsetting transaction). Business Banking VIP is a token-based MFA product that deters fraudulent transactions and is required to offer ACH, EFTPS, or Wire Transfers to any business, Business Banking VIP has a dedicated training course.

38. ACH/Wire/Tax Payment Approval Scenarios *If financial institution checks the “Restrict initiation if User Limits are exceeded” box, the last column does not apply. Select all three checkboxes for highest fraud protection - Require Approval, Require Approval by Other User, and Restrict Initiation if User Limits are Exceeded.

39. Maintenance – Add New Customer (cont’d) • Suppress ACH ID Validation: Check this box to have the system bypass the default system validation (on ACH IDs in files uploaded via the Send ACH File feature) to ensure that the ACH IDs linked to the company match the ACH IDs in the FI Admin Platform. • ACH ID and ACH Description: Define the primary ACH ID and ACH Description for the company. ACH IDs should be “1” followed by the TIN. NOTE: Additional ACH IDs can be entered on the Customer Maintenance screen. • Effective Date Control ACH/EFTPS: Select the number of days (1-30) for which a company may future-date ACH and EFTPS files. The ‘Default’ option is the value that was set in FI Admin Platform -> Policies yet it can be changed here for a particular company. ACH (continued) Suppress ACH Send File: Check this box to restrict the company from uploading a completed ACH batch from a external/third party source. Re-presented Check: Check this box toallow the company tore-present checks that have been processed through the check collection system and returned because of insufficient or uncollected funds. NOTE: The FI admin must also select the SEC code of RCK.

40. Maintenance – Add New Customer (cont’d) • Tax Payments • Daily limits: Define the absolute limits for the sum total of transactions a company may request per day. • Allow Unbalanced Files: Check this box to allow the company to create balanced or unbalanced files. • Require Approval: Check this box torequire approval on all initiated files, regardless of amount. The user that initiated the file can approve the file if they have been designated as an approver. NOTE: Without this box checked, approval is required only when the initiator’s user limits are exceeded. • Require Approval by Other User: Check this box along with Require Approval torequire another user’s approval on all initiated files, regardless of amount. Check the box by itself to require another user’s approval only on files over the initiator’s user limits. • Restrict Tax Payment Initiation if User Limits are exceeded: Check this box to make the user’s limits absolute limits that cannot be exceeded. The system will reject any transaction exceeding the user’s transaction or daily limit. • Tax ID and Taxpayer Name: Enter the Tax Identification Number and name of the company. • NOTE: Additional Tax IDs can be entered on the Customer Maintenance screen. Establish risk assessment policy for setting ACH, EFTPS, and Wire limits. Ideas: Examine past activity, consult the insurance policy for wires and ACH, have a SOP for requests to extend limits, and set limits that would not jeopardize the health of the financial institution.

41. Maintenance – Add New Customer (cont’d) • Wires • Daily limits: Define the absolute limits for the sum total of wire transactions a company may request per day. • Require Approval: Check this box torequire approval on all initiated files, regardless of amount. The user that initiated the file can approve the file if they have been designated as an approver. NOTE: Without this box checked, approval is required only when the initiator’s user limits are exceeded. • Require Approval by Other User: Check this box along with Require Approval torequire another user’s approval on all initiated files, regardless of amount. Check the box by itself to require another user’s approval only on files over the initiator’s user limits. • Restrict Wire Initiation if User Limits are exceeded: Check this box to make the user’s limits absolute limits that cannot be exceeded. The system will reject any transaction exceeding the user’s transaction or daily limit. • Allow Freeform: Check this box to allow the company to initiate freeform Wire Transfers. NOTE: The company will not be required to create a wire template before initiating a wire request. • Require Beneficiary Address: Check this box to make the following fields required on a freeform or template-based wire: Beneficiary Address 1, City, State. NOTE: If the company initiates foreign wires, then the financial institution should not enable this setting.

42. Maintenance – Add New Customer (cont’d) • Online Services • Check any box(es) to allow the company to access any online request forms such as Photocopy Request, Check Reorder, Account Research, Cash/Change Order Form, or Bill Pay Research. • Reconciliation Services • Reconciliation Services is covered in a separate training. User Profile Maintenance Approval Required Check this box to require an approval process whenever a user profile is added, updated, deleted or the login credentials reset by the company administrator or user administrator. NOTE: The Company Administrator must set up least two users as "User Administrators" with the "User Profile Approver" permission. Single Sign-on Check any box(es) to allow the company to access any Single Sign-on (SSO) products that the financial institution has enabled in the FIAP (e.g. CheckFree Web Pay for Small Business, FIS Bill Pay and Presentment, Check Reorders, Live Person Chat/ Email, and more).

43. Managing Companies

44. Maintenance – Customer Maintenance Customer Maintenance: Allows the FI Administrator to update/delete company information and control company access to the Business Banking system. Search: Select the value to search on: Company ID, Company Name, Host Key (TIN, CIF, CIS, etc.) or Email. NOTE:A wildcard search can be used by placing an asterisk (*) before or after the value to search. IndexA-Z or 0-9: Lists all company records with names beginning with the letter/number selected. Locked Out: Lists all companies that are either manually locked out by the FI or Company Administrators that are systematically locked out by exceeding the failed login attempts. TIP: To differentiate between companies that have been locked out by the financial institution and companies whose Company Admin is locked out, click on the business’s name in the list and if the button on the screen says “Unlock”, the financial institution has locked out the companies’ users. If the button on the screen says “Lock Out”, the Company Admin has locked themselves out of the Customer Platform by entering their User Password incorrectly 5 or more consecutive times. Password Maintenance: Lists all new companies that were added to Business Banking by an FI Admin who does not have User Password Maintenance permissions (User Password Maintenance Restricted has been check off in FIAP Security FI Admin Profile Maintenance). Another administrator, without this restriction, needs to complete the setup by entering initial passwords for these companies.

45. Maintenance – Customer Maintenance Billing Account: Select one of the company’s account(s) to be debited for any Business Banking fees. Company Segments: Choose one or more segments that can be used for billing purposes. Segments are created via "Billing & Reporting“ > "Billing Report and Segmentation". Lock Out Company: Temporarily restrict all of the company's users' access.  The button will change to "Unlock Company" when users are locked out. Unlock Company Administrator: Sets the Company Administrator’s number of failed login attempts back to zero.

46. Maintenance – Customer Maintenance Refresh Accounts: Provides the most current list of the company's accounts that have been enabled for Business Banking. If the financial institution has flagged/enabled any additional accounts for the company on their host after initial setup, the account(s) will NOT show here until this button is clicked. Multi-TIN Account Access (a.k.a. Multi-Company Account Access): Allows Super User to add “secondary” companies to the initial (“primary”) company. This allows Company users to view account information for multiple companies under one login, where each company has a unique TIN, CIF, CIS, Member Number, etc. If required, the secondary company must be flagged on the host just as needed for the primary company. NOTE: This button displays only to the Super User.

47. Maintenance – Customer Maintenance • After adding the account: • Click Refresh Accounts (populates the secondary company in the dropdown box). • Select the new secondary company from the dropdown. • Click Refresh Accounts again to retrieve the secondary company’s accounts. • Assign the account services to the desired accounts for the secondary company. • Notes: • A maximum of 50 host IDs can be added under the primary host ID. Each host ID will allow a maximum of 500 accounts. • All setup under Banking Services pertains to the Primary and Secondary companies, for example, approval requirements for Wires and balanced batches required for ACH. • Limits set for ACH, Wires, and EFTPS are cumulative for all companies within the Primary Company.

48. Maintenance – Customer Maintenance ACH ID: The financial institution can enter an additional 999 ACH IDs and corresponding descriptions for a particular company. The financial institution can also update descriptions and delete records here. These IDs populate in the Customer Platform when a company is creating an ACH batch template. ACH IDs in a Send ACH file must match up with this table (unless the Suppress ACH ID validation box (in FIAP Maintenance Customer Maintenance) has been checked for the company).

49. Maintenance – Customer Maintenance SEC: The financial institution can determine which SEC codes they want to make available to a particular company. Select CCD and PPD in order for the company to have the ability to build ACH files from scratch inside Business Banking. Select RCK in order for the company to have the ability to represent checks electronically as an ACH inside Business Banking. The other SEC codes are applicable to ACH Send files.

50. Maintenance – Customer Maintenance • SEC Codes: • PPD - Pre-arranged Payment or Deposit – Used for initiating ACH transactions to and from individuals, most commonly used for purposes of Direct Deposit and Direct Payment. • CCD - Cash Concentration or Disbursement – Funds are either distributed or consolidated between corporate entities. This application can serve as a stand-alone funds transfer, or it can support a limited amount of payment related data with the funds transfer. • CTX – Corporate Trade Exchange - The transfer of funds within a trading partner relationship in which a full ANSI ASC X12 message or payment related UN/EDIFACT information is sent with the funds transfer. • RCK – Re-presented Check Entry - A single entry ACH debit application used by originators to re-present a check that has been processed through the check collection system and returned because of insufficient or uncollected funds. • ARC – Accounts Receivable Entry - An application that enables an Originator to convert to a single entry ACH debit a consumer check received via the U.S. mail or at a drop box location for the payment of goods or services. • WEB – Internet-Initiated Entry - An ACH debit application to a consumer’s account pursuant to an authorization that is obtained from the Receiver via the Internet. • TEL – Telephone-Initiated Entry - A single entry debit transaction to a consumer’s account pursuant to an oral authorization obtained from the consumer via the telephone.