J.P. MORGAN CHASE - Laserfiche WebLink

Home Browse Search

Addendum to Client Access Service Terms for File Management Services) �. P. MoR�saN III�I'�1�9'�IIIII V 7.3- 11 -24 -08 When offered by the Bank for an Application, the Customer and the Bank will use the following procedures for digital- signature public key management using a certificate. The Customer will designate at least two individuals authorized on their behalf to request the Bank to add, update or delete keys. These individuals will be designated as Security Administrators ( "SA ") on the Security Administrator Designation Form ( "BADE ") for the relevant service or services. The Bank shall have the right to rely on any request which the Bank believes in good faith to have been sent by a SA pursuant to the above, notwithstanding such SA may be a third party agent acting on behalf of the client. All requests to add, update or delete keys will be coordinated through the Client's Customer Service Officer (or other designated Bank representative as the Bank may direct). Client shall provide a request and supplementary material (such as a text file or other physical representation of the public keys of the relevant certificate) in accordance with the Bank's administrative control procedures of the action to be taken, a request for a suggested date and time the action is to be taken, and an attached file containing the certificate. The Bank shall effect such change requests within a reasonable period of time; however such requests must be received at least two U.S. banking days prior to the key implementation date. Upon receipt of Client request, the Bank will validate the request. Upon successful confirmation, the Bank will reply confirming receipt of the key £le and the scheduled date and time for the action to take place. Requests for key addkions, updates or deletions will be actioned during the course of normal business hours, Monday through Friday, 8:30 AM — 5:30 PM Eastern Time (United States). The Bank shall not take any action until a request has been received from Client which the Bank acting in good faith believes to be an authorized request, in the form the Bank advises the Customer. Customer agrees to abide by Bank's administrative control procedures for security certificates, including the following: (i) Certificates must have a validity period of one to two years. (ii) No certificate shall be accepted unless it adheres to the following cryptographic specrFcation: • Message digest: SHA -� Asymmetric algorithm: RSA • Asymmetric algorithm key length: � 024 bits or more To prevent any lapse in service or emergency procedures, the Customer must request a key change at least one month prior to actual certificate expiration. In the event of a emergency (during normal business hours), the Customer will call the Bank's Technical Support team immediately. The Customer will use the contact information and adhere to the procedure instructions provided by the Bank. PIV: 363374 DOC IDr 7cfry of saivra aaa - /VOV. �s, 2o'foPage 19 oj'25