Home  About BOSdeal  FAQs  Security  Support  Legal Notice
 
 
 
Security
The following section provides useful answers to common questions about BOSdeal:
Are my transactions via BOSdeal secure?
 

We use a high level of tiered security for the private trading areas of BOSdeal and achieve multifactor authentication by splitting the customer validation process into three components:

  1. Bank of Scotland Treasury Digital Certificate
  2. Unique user name and password
  3. 128-bit encryption through a Secure Sockets Layer (SSL)

This tiered security provides the following benefits:

Authentication - proof of identity for any electronic transaction
Integrity - proof that message content has not been altered, deliberately or accidentally, during transmission
Confidentiality - data is protected by Bank of Scotland Treasury through a range of sophisticated firewalls and security devices.
What is a Digital Certificate?
 

A digital certificate is an electronic identity card. When you log in to BOSdeal we use your unique digital certificate to identify you. Only a valid certificate with the correct user name and password will enable access to the service. By using digital certificates we provide an extra level of security over and above user name and password authentication. We can accurately identify users of our service and provide you with the added confidence that no one else can access your details on BOSdeal.

What is Encryption?
 
Encryption is a way of scrambling messages so that they cannot be read without decryption keys. Encryption is used to establish a Secure Sockets Layer. For example, a 128-bit Encryption/128-bit Secure Sockets Layer refers to the length of the key that is required to encrypt messages in a Secure Sockets Layer. The longer the key, the more secure it is.
What is a Secure Sockets Layer (SSL)?
 
A Secure Sockets Layer (SSL) is a technology developed to provide authentication, security and privacy over the Internet. SSL provides protection against eavesdropping, tampering and forgery, by establishing a secure 128b Internet link, or 'pipe' between your computer and our server.
How are funds transferred?
 

To ensure you have control of your funds at all times, BOSdeal will only transfer funds to your pre-arranged bank accounts, known as "standard settlement instructions".

If you hold Bank of Scotland accounts we will automatically transfer your funds on the same day.

Alternatively if you maintain accounts with other financial institutions, then it is your responsibility to remit funds to us via standard industry same-day value clearing systems e.g. CHAPS & SWIFT.

Can I define different User Roles?
 

Yes; you can set up several BOSdeal users within your organisation, each having different trading limits. It is also possible to create a zero limit for a user – effectively creating a 'view only' role.

Each individual user with trading limits has the ability to trade – and only one user is required to validate the transaction.

How do I get a Bank of Scotland Treasury Digital Certificate?
 
Your Treasury Relationship Manager will be able to complete the registration process for you. Alternatively contact us for further information.
  1. After passing security checks you will be provided with your unique digital certificate which is downloaded onto your PC.
  2. Your user name and password will then be issued, enabling access to the BOSdeal application.
Will I need numerous passwords and PIN numbers?
 
No; a username and password will enable your initial access to BOSdeal. Once logged on you will then be able to change your password to protect your digital certificate from being accessed by someone else using your computer, which we advise you to do on a monthly basis.
What if I forget my user name or password?
 
You will need to contact us. After you have passed our security checks we will issue you with a new username and/or password.
Can I have more than one Digital Certificate on my computer?
 
Yes. The standard certificate management facility on your Internet browser can store a number of digital certificates. For example, if two colleagues registered separately from the same computer, they would have to choose which digital certificate to use, along with the correct user name and password, to gain access to the BOSdeal site.
How can I keep my Digital Certificate secure?
 
The digital certificate is installed on your internet browser, so it's important to ensure that only you have access to your browser. If you change your PC you can either export the certificate from your browser or contact us to cancel it for you and re-issue a new one.
How do I check if I have a Digital Certificate?
 
You can use the Certificate Management facility on your browser to view your digital certificate(s). Please note that the domain settings on your computer may prevent you from accessing this function within your browser – please refer to your organisation's technical support team for assistance.

Follow the instructions below:

  • Microsoft Internet Explorer:
    1. Select 'Tools' from the menu at the top of the Internet Browser
    2. Select 'Internet Options'
    3. Select 'Content'
    4. Select 'Certificates'
    5. The Digital Certificate will be displayed in the 'Certificate Manager' window
  • Mozilla Firefox:
    1. Select 'Tools' from the menu at the top of the Internet Browser
    2. Select 'Options' and choose 'Advanced' from the menu bar
    3. Within the 'Encryption' tab, select 'View Certificates'
    4. The Digital Certificate will be displayed in the 'Certificate Manager' window as part of the 'Your Certificates' tab
  • Apple's Safari (on Windows):
    1. This is located outside of the Safari browser
    2. From the Windows 'Start' bar, choose 'Control Panel'
    3. Select 'Internet Options'
    4. Select 'Content'
    5. Select 'Certificates'
    6. The Digital Certificate will be displayed in the 'Certificate Manager' window
  • Opera:
    1. Select 'Tools' from the menu at the top of the Browser
    2. Select 'Preferences' and choose the 'Advanced' tab
    3. From the left hand menu select 'Security'
    4. Select 'Manage Certificates' button
    5. The Digital Certificate will be displayed in the 'Certificate Manager' window, under the 'Personal' tab
What happens if I lose or corrupt my Digital Certificate?
 
Contact us and we will cancel the original certificate for you. We will then re-issue you with a replacement certificate.
Do Digital Certificates expire?
 
The certificates we issue last 12 months. You will be notified shortly before yours is due to expire and given a replacement.
Does the site use cookies?
 
Bank of Scotland Treasury may gather and analyse information regarding usage of this web site, including domain name, number of hits, pages visited, previous/subsequent sites visited and length of user session. This information may be gathered by using a cookie which is a small text file placed on your hard drive by our web page server. You can choose if you wish to use a cookie by altering the settings on your browser. A cookie will allow quicker and easier usage of this website.
Who can I contact for further information?
 
Please contact us at Bank of Scotland Treasury for further information.
Money Market Deposits Demo
Click on the link below to view a demonstration of our online Money Market Deposit system.
 
Money Market Deposits Demo
 
Foreign Exchange Demo
Click on the link below to view a demonstration of our online FX system.
 
Foreign Exchange Demo
 
   
     
 © 2008 Bank of Scotland plc