As previously announced (PDF), common with security best practices of industry leaders, we regularly evaluate and enhance the security technology components used to access our services. In response to customer feedback and in an effort to more effectively and securely deliver our services, FedLine user authentication will be upgraded over the next few years. The changes noted below will begin to impact Subscriber authentication in the coming months. We will publish the effective date in a future issue of the FedFlash® publication and will notify impacted organizations once these changes are implemented.
As part of these changes, Subscribers will no longer be issued a User ID and password as part of the security authorization to access FedCash® and/or Check Services via the FedLine Web® access solution. Instead, all new FedCash Services Subscribers will be issued FedLine security tokens, and all new Check Services Subscribers will be issued digital certificates, unless the Subscriber has other services that require a FedLine security token.
For Subscribers currently utilizing a User ID and password to access these services, the Federal Reserve Banks will notify the respective End User Authorization Contacts (EUACs) at the appropriate time to transition their Subscribers to a FedLine security token or digital certificate. Please note these changes will be applied earlier than their transition time if current Subscribers request changes or updates to their credentials on or after the effective date. Additionally, Subscriber requests for credential changes that are in the process of being updated as of the effective date will similarly be issued either a digital certificate or FedLine security token, depending on their service usage.
In preparation, please ensure that your organization’s list of EUACs and Subscribers, including their respective contact and/or service information, is current and complete. Additionally, review the latest hardware and software requirements for the FedLine Web access solution to ensure compatibility for each PC used to access the FedLine Web access solution. It is also important for you to ensure that your organization is able to accommodate the use a FedLine security token or the use of a digital certificate on computers that connect to the FedLine Web access solution.
The Event Tracker Report and the Subscriber and Roles Report will reflect changes after the effective date. The Event Tracker Report will provide credential issuance and maintenance activity information in real-time. The Subscriber and Roles Report will also provide real-time information detailing Subscribers’ service access.
FedLine® user authentication will be upgraded over the next few years. The Federal Reserve Banks will be contacting impacted organizations regarding these planned upgrades in the coming months. For more information about FedLine user authentication upgrades, please visit our Online Resource Center or call the Customer Contact Center (CCC) at (888) 333-7010, option 1.
Address comments and questions to the Financial Services Webmaster.
©2013 Federal Reserve Banks