Setting up Multi Factor Authentication for Box File Transfer Service

What is Multi Factor Authentication?

MFA stands for Multi Factor Authentication and is another way of identifying yourself - beyond login and password - used by many organisations and cloud-based systems. It is an important security measure to keep our information safe. We will be using an authenticator app as this is the most secure option.

Why are we using an authenticator app?

Authenticator apps are the safest way to perform MFA. There are known security vulnerabilities with using SMS (or text message) for MFA. Authenticator apps are more secure because they use algorithms to generate one-time passwords or codes, which are unique, random, generated on demand, and expire after a short and defined period.

Your existing authenticator application will work. But if you do not currently have one, we recommend the Microsoft Authenticator app, as used in the guide below.

If you need help during this process, please log a request via the Box Service Help Desk portal.

Logging in to Box File Transfer Service for the first time

Before you begin:

• Have your tablet or mobile phone nearby, you will need it from step 8.
• Ensure you have access to your Apple Account and the App Store for iOS; or Google Account and Play Store for Android
• We recommend that you ensure you have the latest software update installed on your device.

Start this process on your computer

The following screen shots might look a bit different when compared to your phone, depending on what type of phone you are on!

1. You will receive an email from Box, informing you that the Reserve Bank of New Zealand has created an account for you.
   1. As part of this log in process you will receive more emails from Box. You are not required to keep these.
      
      
2. In the email, click Log in now to set up your account.
3. An internet browser will open. Enter a password for Box File Transfer Service.
   1. The password must be 8 or more characters in length and have at least two numbers.
      
      
4. When you have entered your password into both fields, click Create.
   1. Your password will need to be reset every 90 days. Please ensure you log in at least once during each 90 day period to keep your account active.
5. Enter your email address and click Next.
   
6. Enter the password you just created and click Next.
7. You will be asked to set up 2-step verification, otherwise known as MFA.
8. When you see the below on your screen, keep the screen open. The next few steps will involve your phone or tablet.
   
9. Go to your mobile phone or tablet.
10. Do you have an app called Microsoft Authenticator?
    
    
    1. If YES, open it and go to the next step.
    2. If NO, download the Microsoft Authenticator app from the Apple App Store or Google Play Store. When it has finished downloading, open the app.
11. Click on Add account or the + icon in the top right-hand corner.
    
12. Select Work or school account from the options list.
    
13. The Authenticator app will give you the options of Sign in or Scan QR code. Select Scan QR code.
    
14. You might see a pop-up asking for permission to use your device’s camera - if you do, please click OK to accept this request.
    
15. Point the camera on your device at your computer screen that you left open and line up the QR code (the square barcode image) inside the square frame on your device. Your device will read the QR code automatically.
    1. If you need to, there is also an option on your device to enter the code manually.
       
       
16. The app will now display your Box File Transfer Service account and a one-time code with a timer.
    1. Leave the Authenticator app open on your device.
       
       
17. Back on your computer screen, type in the one-time code from the Authenticator app and click Submit.
    
18. Your Authenticator app is now configured, and you will be logged in to Box File Transfer Service.
    
19. You can ignore the Welcome to Box pop-up and the Get Started with Box PDF, as they both contain generic information that is not relevant for our use of Box.
20. To remove the Welcome to Box pop-up, click Dismiss and then close the pop-up Box.
    
    

Please back up app and save to “Cloud backup” or “icloud backup” before deleting apps. This will let you keep your account credentials and related app setting and potentially avoid getting locked out or having to recreate accounts.