BOCI Securities Limited Security Token User Guide (for Securities Account) Content I. Activating your BOCI Security Token (P.2-6) II. Login your Online Securities Account with BOCI Security Token (P.7-8) III. Adding Devices as Security Token (P.9) IV. Deactivating a registered Device (P.10)
I. Activating your BOCI Security Token Activating your BOCI Security Token is simple. Have the following items ready to begin registration: A mobile device for Security Token installation Access to BOCI Web Trading Platform www.bocionline.com Log in to your Online Securities trading account. 1. The following message will be prompted if your account has not registered BOCI Security Token. Click Register to start registration. 2. Click Register on the pop-up window. 3. Answer 3 security questions and click Submit. Page 2
4. Download the BOCI Security Token App via one of the following methods: I. Scan QR code II. Press download link button III. Search BOCI Securities Limited Security Token from App store or Google Play TM 5. Select a mobile number from the dropdown menu to receive your Activation Password via SMS. 6. Create a Device Name for the device being registered. The name should be able to signify your device and easy to remember for identification and future maintenance (e.g. Mary iphone, Peter GalaxyS8) 7. Click Next to proceed. Page 3
8. A one-time Activation Password will be sent to the mobile number you have selected in Step 5 via SMS. The Activation Password will be valid for 30 minutes. 9. You will be given 2 options to bind your trading account to the Security Token: Option 1) Account Binding - Scan QR Code OR Option 2) Account Binding - Manual Input Page 4
Launch the BOCI Security Token App on your device. 10. Choose your preference to bind your trading account to the Security Token. Option 1) Account Binding Scan QR Code Scan the colorful QR code as shown on page 4 in Step 9 and input the Activation Password received via SMS on the next screen, then click OK. Option 2) Account Binding Manual Input Input the Token Serial No. and Authorization Code manually as shown on page 4 in Step 9 follow by entering the Activation Password received via SMS, then click OK. Page 5
11. Create a Token Name for the security token being setup. The Token Name should make reference to the account being bound for easy recognition. (e.g. Mary Sec Account, Peter Fut Account, Company ABC Sec) 12. Setup and confirm token password, then click OK. 13. Upon successful activation, the app will prompt a confirmation message, click OK. The successful account binding notification will also be sent to the registered mobile number and email address of the account holder. Your BOCI Security Token has now been activated and is ready to use! Page 6
II. Log in to your Online Securities Account with BOCI Security Token 1. Log in to your online securities account and enter your login ID and password. 2. Select a device from the dropdown menu to receive a Login Request Notification and click Send. This page will only appear if more than one Device is registered to your account. Confirm the Login Request using your selected device. The session will expire in 5 minutes. Page 7
3. Launch the BOCI Security Token from your device and select the corresponding token. Enter your token password or use Biometric Authentication to log in. Click Confirm to approve login. Apple users can tap the Login Request Notification message to access the corresponding token directly. Log in to the Token and click Confirm to approve the pending login request. You will be automatically logged in to your online trading account upon successful confirmation of Login Request. Page 8
III. Adding Devices as Security Token Simply follow the below steps if you would like to register Security Token on additional devices for login purpose. 1. Log in to your online securities account via the Web Trading Platform (www.bocionline.com) with your registered Security Token. 2. Click Security Token on the top right hand corner of the main trading page. 3. Click Add Device on the pop-up window. 4. Repeat steps 5-13 in Part I Activating your BOCI Security Token on page 3-6 to add devices as security token for your account. Please note that each online account can be bound to a maximum of 10 devices concurrently and the Security Token App is allowed to setup 10 tokens in maximum (i.e. each device can bind with 10 accounts at most). Page 9
IV. Deactivate and Add New Device If you have changed/lost your registered device, or forgot the password of Security Token, please follow below steps to deactivate the token for security purpose. 1. Login your online account via the Web Trading Platform (www.bocionline.com). 2. Click the Deactivate and Add New Device on waiting for token confirmation page. 3. Enter the Two-factor Authentication Code received via SMS. 4. Click Continue to proceed. Page 10
5. Click the Delete next to the Device which you would like to deactivate. 6. Click the Confirm to proceed. At the moment, a SMS notification and an email will also be sent to the registered mobile number and email address of the account holder. 7. Click Add Device 8. Repeat steps 5-13 in Part I Activating your BOCI Security Token on page 3-6 to add devices as security token for your account Page 11
Note: Deleting a security token from your device does not mean that you have deactivated the binding between your device and the corresponding account. You must follow the above instructions to properly deactivate a registered device. The system will continue to ask you to confirm login request through your selected device on your subsequent online account logins if you have only deleted the security token on the app. If you are unable to complete the deactivation process on your own, or encounter difficulties during the process, please do not hesitate to call our Customer Service Hotline at (852) 2718 9666. For more information regarding your BOCI Security Token, please contact our Call Center at (852) 2718-9666. Page 12