Enrollment Overview

Every CDR user account must be approved. The first user account for each organization will be designated as the Delegated Site Administrator (DSA). The DSA is responsible for approving or denying all subsequent user accounts and assigning roles that determine the CDR access rights for the user.   Additionally, the DSA will manage the user accounts by activating or deactivating accounts and changing roles. Each organization should set up and maintain two or more DSAs to ensure adequate user support.   There is no limit to the number of DSAs that can be assigned.  

Process for Enrolling the First DSA

1. User submits a Request for an Account.  
2. An FFIEC Security Administrator is notified that an account request has been submitted and will approve or deny the account request and assign Roles to the user.   Note: The first user for the vendor will be setup as the DSA and will approve, deny and manage subsequent users for the organization.
3. The CDR sends an e-mail message to the DSA once the account has been created by the FFIEC Security Administrator.
4. The DSA will login and complete the Security Awareness Training and access the CDR.
   
   Instructions for establishing additional user accounts can be found in the Subsequent Software Vendor Users section below.

Enrolling the First DSA

Preparation

Determine who will serve as the Delegated Site Administrator – first user account.   Determine roles of others including those that will also be DSAs.

Process

1. Go to the url: https://CDR.FFIEC.GOV/CDR
   
   
2. Click on LOGIN to access the User Account screen.
   
   
3. Select Request An Account at the bottom portion of the blue box.
   
   
4. Go to the Software Vendors box and select Enroll Here.
   
   
5. Review the FFIEC Legal Notice and Privacy Policy and select Accept and Continue.
   
   
6. Enter requested User Account information.
   1. Click the Select Organization to lookup your Organization.
      • Enter the Organization name and click on the Search tab at the top.
      • Identify the Organizational name from the returned search. By clicking on the name, the Organization name will automatically populate in the appropriate box.
   2. If applicable, select Yes for the Delegated Site Administrator (DSA) account.
   3. Follow the instructions on the page for creating acceptable user name and passwords.
   4. Secret questions are used for resetting forgotten passwords.
   5. Review and agree to the User Notice and Privacy Policy.
   6. Click Request Your Account tab at the top of the page.
      
      

7. Select Click to Exit at the Registration Completed page.   You will receive an e-mail notification when your account has been created.
    
8. An FFIEC Security Administrator will be notified via email of a new user registration and will review the account request for approval.
   
   
9. A confirmation e-mail message will be sent to the user when the request has been approved.   A link will be provided to return to the CDR and at that time you may return to the CDR to login.
   
   
10. Enter User Name and Password at CDR Application Login screen and click on Login.
    
    
11. Complete the CDR Security Awareness Training (SAT) and continue to the CDR Homepage. The account has now been successfully created. Note: SAT training is required annually.

Subsequent Users

1. Click on LOGIN to access the User Account screen.
   
   
2. Select Request An Account at the bottom portion of the blue box.
   
   
3. Go to the Software Vendor box and select Software Vendor Enroll Here.
   
   
4. Review the FFIEC Legal Notice and Privacy Policy and select Accept and Continue.
   
   
5. Determine if the account should be created as a Delegated Site Administrator.   This should be done in consultation with the first DSA who established the first account for the organization.   If you do not know who the DSA is, please contact others in your organization that have been working on the CDR project.
   
   Note: In cases where the account was created and the DSA question was answered in error, the DSA can override the account Roles, as described in the Account Request Approval Guidelines section.
   
   
6. Enter requested User Account information.
   1. Click the Select Organization to lookup your Organization.
      • Enter the Organization name and click on the Search tab at the top.
      • Identify the Organizational name from the returned search. By clicking on the name, the Organization name will automatically populate in the appropriate box.
   2. If applicable, select Yes for the Delegated Site Administrator (DSA) account. Otherwise, leave as No.
   3. Follow the instructions on the page for creating acceptable user name and passwords.
   4. Secret questions are used for resetting forgotten passwords.
   5. Review and agree to the User Notice and Privacy Policy.
   6. Click Request Your Account tab at the top of the page.
      
      

7. Select Click to Exit at the Registration Completed page.   You will receive an e-mail notification when your account has been created.  
   
   
8. The DSA(s) for your organization is (are) notified via email of a new user registration and will review the account request for approval.   Refer to Account Request Approval Guidelines (See below). Please note, only DSAs can perform this step.
   
   
9. A confirmation e-mail message will be sent when the request has been approved.   A link will be provided to return to the CDR and at that time you may return to the CDR to login.
   
   
10. Enter User Name and Password at CDR Application Login screen and click on Login.
    
    
11. Complete the CDR Security Awareness Training (SAT) and continue to the CDR Homepage. The account has now been successfully created.
    
    

Account Request Approval Guidelines

1. When a new user submits an account request, the DSA can accept or deny the request. The DSA is notified via e-mail that a user has submitted a registration.

2. Review the requested account for the new user by logging on to the CDR at https://cdr.ffiec.gov/CDR. Go to the Administration tab >> User Management >> Requested Accounts and click on the User Name hyperlink.

3. Approve the request by clicking on Create Account or decline by clicking on Delete Request Account.   If approved, CDR prompts for a verification message. Click Yes.

4. The DSA must determine the Role(s) the user should be assigned.   There are four roles available and entitlements associated with each role:  
   
   

   ROLE	ENTITLEMENTS
   Delegated Site Administrator	Approve or Deny Requested AccountsAssign or Remove Roles
   	Assign or Remove Roles
   	Edit User Accounts
   	Activate or Deactivate User Accounts
   	Accept or Deny or Delete Vendor Affiliations
   Call Report Submitter	Access Vendor Affiliation Utilities
   	View a facsimile of the submitted Call Report data
   	Download test Call Report Data
   	Submit Call Report data
   Test Call Report Submitter	Access FI Affiliation Utilities
   	Download test Call Report Data
   	Submit a test Call Report
   Vendor	Access Bank and Vendor Utilities
   	Access FI Affiliation Status
   	Access Request FI Affiliation Utility
   	Download a Call Report Instance
   	Download Taxonomy
   	Download a test Call Report Instance
   	Request a FI Affiliation

                               

5. DSA may Update User Roles or exit the CDR. Only update the requested account to a DSA, if appropriate.   Vendors are encouraged to maintain at least two DSA accounts to ensure adequate user support.

Forgotten Password

The CDR has a facility to reset a password.   A password may also be reset by contacting the Help Desk.

Process

1. Click on LOGIN to access the User Account screen:

2. From the CDR Application Login screen, click the Forgot Your Password? button.

3. Enter the User Name and Email Address that were supplied when the account was created or when the account information was last updated. Select the Reset Password tab at the top of the screen. Note: Clicking Go To Login returns to the CDR Application Login screen and is used if the user no longer desires to reset the password.

4. The CDR will display an onscreen message that an e-mail notification will be sent to the user with instructions for continuing the process and a Personal Identification Number (PIN) that is needed for the next step.   The user should logoff the system and wait for the e-mail message.
   
   A password rest notification will be sent to the email address saved in your user profile. The notification will contain a PIN and instructions to Logon to the CDR website.

5. Once the e-mail notification is received, the user should copy (CTRL C) the PIN and click on the url link to return to the CDR.

6. The CDR will display the User Name and the user’s Secret Question.  The user will:
• Enter the answer to the secret question (case sensitive)
• Paste (CTRL V) or enter the PIN
• Click on the Reset Password tab

7. The CDR will display a new password that must be changed when used when logging in.   The on screen message is as follows:
   
   Your new Password is XXXXXXX
   
   You will be required to change your password when you log on. Please remember your new password and Click on the Log In button to access the CDR.
   
   Select the Go To Logon In tab
   
   
8. The CDR Change Password screen is displayed.   The following password requirements are provided:
   
   • The password must contain at least one Uppercase Letter, one Lowercase letter and one number
   • The system will not allow use of your previous four passwords
   • The password may not contain the User Name
     

     Current Password                Enter the CDR provided password
     New Password                    Enter a new password that follows the rules above
     Confirm Password               Reenter the new password

     Select the Change Password tab

9. The CDR will display a message that the Password has been changed.   Click on Go to Log In tab at the top on the screen to log into the CDR.   Use the User Name and new password to login to the CDR.

Account Locked

When a user enters an incorrect User Name and Password three times, the CDR user’s account will be locked.   The account will automatically unlock after 30 minutes.   The user may then retry their User Name and Password combination.   The user should follow the procedures for Forgotten Password if the user does not know the correct User Name and Password combination.   If this is not an option, please contact the Help Desk.

Changing My Profile

The user’s Name, Address, Phone Number, Fax Number, E-Mail Address, and Secret Question/Answer information may be changed by the user at any time after they have successfully logged in to the CDR.  

Select My Account at the top right of the screen.   Select My Profile to display the user account information.   Update any fields that are displayed.   Note: User Name, Organization and Roles may not be updated here.

Changing My Password

The user’s password may be changed by the user at anytime after they have successfully logged in to the CDR.

Select My Account at the top right of the screen.   Select Change Password to display the change screen.   The length of the password is based on whether the user is a DSA.   The minimum length of the password requirement will be displayed on this screen.  

The user enters the Current Password, a New Password and Confirm Password.   When finished, select the Change Password tab at the top of the screen.   The new password will be required for the next login to the CDR.