Internet Banking
Multifactor Authentication Activation Notice

As required by the FFIEC guidelines set forth by FDIC and other regulatory agencies, we will be activating Multifactor authentication on our internet banking product. To meet this requirement, Parkway Bank has partnered with Q2 Software Inc. to provide a security solution that naturally integrates with our current Internet Banking services.

The Q2Factor solution will allow Parkway Bank to meet the Dual Authentication requirements in a manner that provides the best of both worlds: enhanced customer security and little customer impact. On November 17th, 2008, we will be implementing the “Browser Registration” method for Multifactor compliance. This method requires each user to authenticate the browser on the PC they use to log into online banking via an encrypted token in the form of a “Cookie”. Once authenticated, the browser may be registered allowing subsequent logins thru “User ID and Password” only, allowing for security while maintaining convenience.

Please take this opportunity to update your contact information within online banking to ensure correct delivery of your Temporary Access Code (TAC) necessary to authenticate you. The TAC is delivered via email or phone. While logged in, just click on “Users” from the “Preferences” section of the menu on the left side of the page, and fill in your current email address and phone number.

The Bank is committed to meeting the FFIEC requirements, but also meeting the needs and demands of our customers.

As always, please feel free to contact us with questions or comments at any time via one of the following methods.

The Web => After you have logged into your Internet Banking account. Simply choose Messages from the Services section of the menu, then “Create a new message”.

Email =>info@parkway-bank.com(Note: Please do not send personal/private information, such as Account Numbers, SSN’s, etc. through any email service, unless encryption is used!!)

Phone => (877) 464-9797

FFIEC guidelines require multiple levels of authentication for consumers using electronic banking. The Q2 solution is referred to as “Multifactor”. This process employs the use of email and/or voice delivery of a temporary access code to satisfy the requirements of a user both “knowing” and “having” the data elements necessary for authorized access to online banking.

Secure Access Code Delivery

Via Telephone:

• Secure Access Codes are never left on voice mail.
• Secure Access Code length is determined by the financial institution.
• Secure Access Codes are only used in combination with the requesting customer’s User ID and Password.
• Unused Secure Access Codes expire after a designated number of minutes (default is 20 min).
• Used Secure Access Codes immediately expire and cannot be reused.
• If the user believes the Secure Access Code request is fraudulent, they are presented with the option to immediately disable their online and/or voice account access.

Via E-mail delivery:

• “From” address is set by the financial institution to restrict replies or forwarding.
• Secure Access Code length is determined by the financial institution.
• Secure Access Codes are only used in combination with the requesting customer’s User ID and Password.
• Unused Secure Access Codes expire after a designated number of minutes (default is 20 min).
• Used Secure Access Codes immediately expire and cannot be reused.

Login Steps Utilizing Multifactor (for users that have previously logged in)

Login Steps Continued