Vasco Digipass 270XH User manual

Deutsche Bank
Global Transaction Banking
www.db.com
Digipass 270XH
Getting Started

Digipass 270 XH – Getting Started 02
April 2018
Contents
1. What is a Digipass 270XH 03
2. Prepare your Digipass 04
3. Log-in 05
4. Authorisation with your Digipass 07
5. Vasco Initialization (unassigned) 08
6. Vasco Initialisation for Existing Users 09
7. Unlocking your Digipass 11
8. Using Online Services securely 12
9. Frequently asked questions 13
The information contained herein is the property of Deutsche Bank Group and may not be copied, used or disclosed in whole or in part,
stored in a retrieval system or transmitted in any form or by any means (electronic, mechanical, repro-graphic, recording or otherwise) outside
of Deutsche Bank Group without prior written permission.

Digipass 270 XH – Getting Started 03
April 2018
1. What is a Digipass 270XH
The Digipass 270XH (Digipass) is a PIN protected personal identication device which is used for
the login and/or payment authorisation process. Upon entering a personalised PIN, the Digipass
token generates a One Time Password (OTP). This unique code allows you to login securely into the
Autobahn App Market and to authorize your payments online.
1Press the ‘Power On’ button and hold for 5 seconds to activate the device. Post-activation,
the ‘Power On’ button can be pressed to generate an OTP.
2Generating a Challenge Response code for one-step Signing
3Generating a Challenge Response code for two-step Signing
* Please note that the displayed Token is a Digipass 270XH. Dierent support collateral exists for
DigipassXpress as well as Digipass 300.
3
2 1

Digipass 270 XH – Getting Started 04
April 2018
2. Prepare your Digipass
Prior to using the Digipass for the rst time, you have to set it up.
On initial activation of your security token device a PIN code shall need to be initialised.
1. Press and hold the power on key for 5 seconds to turn on the device.
2. Enter a PIN code of your choice. Press Sign 1 to submit.
3. Conrm your PIN by entering it again. ‘Autobahn’ shall be displayed on the token post
successful PIN set up.
Your token is now ready to use.
Press the Power on button again to generate your eight digit security code (OTP).

Digipass 270 XH – Getting Started 05
April 2018
3. Log-in
If you want to login to Deutsche Bank’s Autobahn App Market with your Digipass,
Go to: www.autobahn.db.com/login
The Autobahn Authentication Gateway will appear.
— Change the Login Mode from Password to Digipass, by selecting Digipass from
the drop-down menu.

Digipass 270 XH – Getting Started 06
April 2018
A
— Enter your Username in the login space (A). (Example: [email protected])
Press and hold the power on key for 5 seconds to turn on the device
— Type in your PIN code. If you make a mistake, press to clear the digits.
— Autobahn shall be displayed on the token post successful activation.
— Press when ‘Autobahn’ appears on the display. Your Digipass will generate an eight-digit
Security Code that will enable you to login.
— Enter the ‘Security Code’ and Click ‘Submit’. Now you are securely logged into the
Autobahn App Market.

Digipass 270 XH – Getting Started 07
April 2018
4. Authorisation with your Digipass
To authorise your transactions, you require a dynamic numerical code from your security device. To
generate the code with your Digipass, you may be required to perform a 1 Step sign or a 2 Step sign
based on the instructions submitted for Authorisation.
One-step Sign – Steps for Instruction Authentication/Authorisation
1. Activate your device by pressing the power on key and entering your personalized PIN.
2. Press Sign 1 and enter the Challenge code as shown on the screen and Press Sign 1 again.
3. Enter the 6 digit Response Code from the device into the password eld. You have now securely
authorized your transaction.
Two-step Sign – Steps for Instruction Authorisation*
1. Activate your device by pressing the Power on and entering your personalized PIN.
2. Press Sign 2 and on Prompt enter Challenge code 1 as shown on the screen.
3. Press Sign 1 and enter Challenge code 2 and Press Sign 1 again.
4. Enter the 6 digit Response code from the device into the password eld. You have now securely
authorized your transaction.
*Two-step sign required for Instruction authorisation involving a DB Singapore account.

Digipass 270 XH – Getting Started 08
April 2018
5. Vasco Initialization (unassigned)
First Time Initialization – Only required if your Digipass is not assigned to you yet.
1. Click on the link ‘Register Security Device’ below the ‘Submit’ button on the Autobahn
login screen
2. The system will display a new screen where you may enter your User ID and temporary password
3. After successful authentication, you will be presented with the Vasco device self-registration screen
4. Enter the Vasco Digipass serial number and the OTP one-time key generated from your device.
5. Click the ‘Submit’ button. The system will validate the entered serial number and key.
6. Once the validation has been successful and the device is considered initialised, you may from
then on login to Autobahn by entering your User ID and Digipass as the device mode.

Digipass 270 XH – Getting Started 09
April 2018
6. Vasco Initialisation for Existing Users
1. If you are an existing user of the Autobahn App Market and have been issued with a more
secure two factor authentication device you will be presented with a registration screen after
accessing the Autobahn App Market with your existing credentials.
Log-in as usual on www.autobahn.db.com/login

Digipass 270 XH – Getting Started 10
April 2018
2. On the registration screen presented next you will be advised to perform a new device
registration or can continue to use your existing device for a dened time period. If you proceed
with registration of your new security device then please enter your Token serial number
(omitting the dashes) which is present at the back side of your Digipass token device. You will
also need to enter the One Time Password (OTP) generated by the device into the security code
eld. To proceed click on ‘Register Now’
3. Post successful registration you can login into the application with your Username and OTP
value as generated by the Digipass device. Kindly note the Login mode ‘Digipass’ will not need
to be selected on the Autobahn log-in screen.
User issues with a newly issued Digipass have a period of 30 days to perform a registration and
migration on to the new tokens. For the 30 day grace period users can continue to use their existing
credentials after which the registration will be mandated.

Digipass 270 XH – Getting Started 11
April 2018
7. Unlocking your Digipass
What happens if you key in an incorrect PIN code? After the rst failed attempt, “FAIL 1” appears on
the display, and “FAIL 2” appears after the second failed attempt. After three failed attempts, your
Digipass is locked. A seven-digit lock code is displayed. Now you can no longer use the Digipass until
you have unlocked it. This requires the following six-step procedure:
1. Phone the helpdesk* and tell our employee the seven-digit lock code.
2. You can see this code by switching on your Digipass again.
3. You will receive an unlock code, which you can use to unlock
your Digipass.
4. Switch on your Digipass: press and hold for 5 seconds to activate
the token. The lock code appears on the display again.
5. Press and key in the seven-digit unlock code.
6. Key in a new ve-digit PIN code of your choice. Do not choose a code
that is easy to guess, such as 12345. Press (Sign 1) to submit.
7. Key in your chosen ve-digit PIN code again “NEW PIN CONF”
appears on the Digipass display after you have successfully entered your
new PIN code.
8. “Autobahn” will appear on the screen. Now you can use your Digipass again.
* If you are part of a Customer Self Administration (CSA) domain, please contact your Administrator
to unlock your device.

Digipass 270 XH – Getting Started 12
April 2018
8. Using Online Services securely
Your Digipass generates your own “digital signature”. This prevents others from viewing or forging
your online transactions. Security is assured by the combination of the following elements:
— Your Digipass, which generates a unique code that is only valid for a short time.
— Your user name, which you must enter in order to log in.
— Your PIN code, which you must enter in order to activate the Digipass.
We strongly urge you to additionally take the following precautions:
— Never choose an obvious or easily guessed PIN code.
— Keep your PIN code secret.
— Never store your PIN code together with your Digipass.
— Never leave your computer unattended when you are logged in.
— If you notice something suspicious while using Online Services, warn us immediately and have
us block access to your account.

Digipass 270 XH – Getting Started 13
April 2018
9. Frequently asked questions
— The battery of your Digipass is empty? When the battery of your Digipass is nearly empty,
“LOW BATTERY” appears on the display. Phone the helpdesk. You will receive a new Digipass.
— Your Digipass is lost or defective? Phone the helpdesk. You will receive a new Digipass.
— You forgot your PIN code? Lock your Digipass by entering an incorrect PIN code three times
in a row. “LOCK CODE” will appear on the display. Then follow the procedure described under
“Unlocking your Digipass”.
— You want to change your PIN code? Turn on your Digipass and enter your PIN code. When
“Autobahn” appears on the display, press and hold for 2 seconds until “NEW PIN” appears.
Enter a new PIN code and press (Sign 1). When “PIN CONF” appears, repeat the new
PIN code again.
This document is for information purposes only and is designed to serve as a general overview regarding the services of Deutsche Bank AG,
any of its branches and aliates. The general description in this document relates to services oered by Global Transaction Banking of Deutsche
Bank AG, any of its branches and aliates to customers as of April 2016, which may be subject to change in the future. This presentation and
the general description of the services are in their nature only illustrative, do neither explicitly nor implicitly make an oer and therefore do not
contain or cannot result in any contractual or non-contractual obligation or liability of Deutsche Bank AG, any of its branches or aliates.
Deutsche Bank AG is authorised under German Banking Law (competent authorities: European Central Bank and German Federal Financial
Supervisory Authority (BaFin)) and, in the United Kingdom, by the Prudential Regulation Authority. It is subject to supervision by the European
Central Bank and the BaFin, and to limited supervision in the United Kingdom by the Prudential Regulation Authority and the Financial Conduct
Authority. Details about the extent of our authorisation and supervision by these authorities are available on request.
Copyright©April 2016 Deutsche Bank AG. All rights reserved.