Updated: 2015-07-16

Page 1 of 16

PrimeTrade

Credit Suisse PrimeTrade Security and Installation Notes

Table of Contents:

Introduction 2

Installation Guide (Auto Deployment) 3

Installation Guide via Installer 5

Hardware Requirements 10

Detailed Notes and Appendices 11

Network Requirements 11

Testing the Connection 12

PrimeTrade with Proxy Servers 12

PrimeTrade Security 13

Password Issues 14

Frequently Asked Questions 16

Updated: 2015-07-16

Page 2 of 16

Introduction

This document is intended to assist with the following: 1. The installation of PrimeTrade on an end user’s machine. 2. Update of a previously installed version of PrimeTrade to the current version. 3. Answer any “Frequently Asked Questions”. 4. Provide contact information for any issues not answered in this document.

About PrimeTrade PrimeTrade is an internet based, real-time, global trading platform that provides enhanced electronic access to Listed Derivatives; Cash Equities; European Government Bonds & Eurobonds; US Treasury Bonds & Agencies; Emerging Markets Bonds; Australian and Japanese Government Bonds; as well as global Foreign Exchange products.

The client software is written in Java and will run on a number of platforms.

All user settings and portfolios are stored on the PrimeTrade central servers, allowing users to log on to different workstations without the need to save their individual settings.

Access points are available in New York, London, Tokyo, and Sydney

The auto updating feature ensures access to the newest features and best performance.

PrimeTrade uses advanced security features to ensure a secure connection (see notes for more details).

For immediate access to support, please contact any of the following phone numbers or send an email to primetrade.it@credit-suisse.com

New York: +1 212 325 6888 London: +44 20 7883 5888 Singapore: +65 6212 4888

Updated: 2015-07-16

Page 3 of 16

Installation Guide (Auto Deployment)

The auto deployment mechanism described below allows you to install PrimeTrade for the first time or update your current PrimeTrade version to allow automatic updates when available. 1) To Install PrimeTrade from the Auto Deployment website, follow the link: https://primetrade.credit-suisse.com/primetrade/prod 2) Click the Launch button and the Web Application will launch and install PrimeTrade on your machine; select yes when prompted for the Security Certificate.

(SCR1: Screenshot of the Installation website)

3) Please enable the checkbox, “Always Trust Content from this Publisher” and select “Yes”. The application will check to see if PrimeTrade is currently installed on your home directory (%USERPROFILE%\primetrade). Once the check is complete, PrimeTrade will begin installing on your machine.

Updated: 2015-07-16

Page 4 of 16

4) Once installation is complete you will be prompted with a login screen. Provide your username and password to login. In addition, a desktop shortcut will be created and PrimeTrade will also be available from the Start Menu under “Programs”, “PrimeTrade AD”.

(SCR2: Screenshot of the PrimeTrade Login Screen)

Updated: 2015-07-16

Page 5 of 16

Installation Guide (Auto Deployment Installer)

The auto deployment installer is an alternative to the auto deployment mechanism for installing PrimeTrade on an end user’s machine. There are no differences in the end result between the two methods; each will install the same features of PrimeTrade. 1) To Install PrimeTrade from the Auto Deployment website, follow the link: https://primetrade.credit-suisse.com/primetrade/prod; select yes when prompted for the Security Certificate. 2) Select the “Download Executable” link in the “How to Install” section. Select “Run” and “Run” for the two prompts that appear once the link is selected. After the download is complete, select “Run” once again when prompted, and the installation setup screen will appear on your desktop.

(SCR3: Screenshot of PrimeTrade setup installation)

Updated: 2015-07-16

Page 6 of 16

3) Select “Next” and select “Regular” (custom allows you to change the installation path), the next dialog box prompts you to choose a directory to install PrimeTrade in. This defaults to the current Windows user’s home directory.

4) The next screen requests the region where the user will be using PrimeTrade. Select the region nearest your location and select next.

Updated: 2015-07-16

Page 7 of 16

5) The next screen alerts about the shortcut on the Desktop and start menu. Please confirm by selecting next.

6) Unselect the checkbox to NOT have a shortcut created on your desktop.

Updated: 2015-07-16

Page 8 of 16

7) The next screen confirms that all necessary information has been entered, please click install.

8) The installation will being and can take several minutes to complete.

Updated: 2015-07-16

Page 9 of 16

9) Once the installation has complete the user is presented with a final screen confirming the successful installation. Click Finish. PrimeTrade can now be launched from the Start -> All Programs PrimeTrade.

. Additional Notes on Installation:

If a new update is available upon log in, then the previous Updating PrimeTrade dialog box is displayed. Any pending updates are downloaded and installed and PrimeTrade is started with new patches applied. When a new PrimeTrade patch is available while PrimeTrade is open, a dialog box will alert the user of a new patch. It gives the option of restart the application to install the patch or to be reminded to restart at a specified time. PrimeTrade, by default, installs files into %USERPROFILE%\primetrade. The files in %USERPROFILE%\primetrade\prod\clientdata are never overwritten on an update, so custom settings input in the custom property files will not be changed when upgrading PrimeTrade. In this directory is a pt_custom.prop file that can be edited to save proxy settings and other company specific connection properties. In this file automatic updates can also be turned off by setting auto deploy to false. The software may be installed on an individual workstation but not on a network file server. User must have write and execute access to PrimeTrade directory and subdirectories.

Updated: 2015-07-16

Page 10 of 16

Hardware Requirements

Component Minimum Specifications Notes

Processor Intel® Core™ i5 Processors Up-to-date processor recommended

Memory 8 GB or more We recommend 4 GB or more if running other applications

Monitor 21” Larger monitor preferred for larger viewing area

Graphics 2+ GB video RAM 1280x1024, 65,000 color palette

Soundcard Any sound card with built in speakers

Windows Version Windows 7 or greater Windows XP / Vista are confirmed to work, although not recommended

Bandwidth High Speed internet connection

Bandwidth requirements are dependent on the types of products traded

Web Browser Internet Explorer 8 or above

Java Sun‘s Java Plug-in v 1.6.1 for web applet

This can be downloaded from Sun‘s website: http://java.sun.com/products/plugin/

Updated: 2015-07-16

Page 11 of 16

Detailed Notes and Appendices Network Requirements

The PrimeTrade client software initiates an outbound, encrypted TCP/IP socket connection from your network to a PrimeTrade Access Point. The PrimeTrade servers never initiate a connection into your network. The PrimeTrade client software must be able to make a connection with the two following PrimeTrade Access Points through port 32000 for each region: Access Point Server Name (AP Address) Port

New York

primetrade1.ny.csfb.com (199.53.16.54) 32000 primetrade2.ny.csfb.com (199.53.16.55 32000

London

primetrade1.ln.csfb.com (199.53.18.54) 32000 primetrade2.ln.csfb.com (199.53.18.55) 32000

Tokyo

primetrade1.tk.csfb.com (199.53.20.54) 32000 primetrade2.tk.csfb.com (199.53.20.55) 32000

Sydney

primetrade1.sy.csfb.com (199.53.22.54) 32000 primetrade2.sy.csfb.com (199.53.22.55) 32000

There are two servers at each PrimeTrade Access Point. If one server becomes unavailable, the PrimeTrade client software will automatically fail-over onto the other machine at the same location. For optimum reliability, we recommend that client workstations are configured so they can see all Access Points. As an alternative to opening port 32000, tunneling via 443 or 80 is an option but may result in slowness, as the traffic could be unnecessarily virus-scanned. There are two options for connecting to PrimeTrade; by internet or a dedicated Leased Line service. Both are described below. The Auto-Update component of PrimeTrade requires the ability to connect to the below specified addresses 'unchallenged' by your proxy. In the case where clients have an NTLM style proxy, you will be required to configure proxy bypass rules to allow unchallenged connections to the following addresses depending on your region. Global Link: https://primetrade.credit-suisse.com/primetrade/* In the Americas Region: https://primetrade-cdc.credit-suisse.com/primetrade/* In the European Region: https://primetrade-sos.credit-suisse.com/primetrade/* In the Asia Region: https://primetrade-tk.credit-suisse.com/primetrade/* In the Australian Region: https://primetrade-tk.credit-suisse.com/primetrade/* Internet

PrimeTrade can be accessed via the Internet. In this configuration, the client needs a connection to their local ISP (Internet Service Provider). This can be an ISDN link or a leased line. To install this type of connection, the client needs to contact their local IT support or Internet provider. The only notable disadvantage is that there is no guarantee of bandwidth or reliability. Performance of PrimeTrade will greatly depend on bandwidth availability and the actual path taken through the internet at that time.

Updated: 2015-07-16

Page 12 of 16

Leased Line

A dedicated circuit connection can be installed between the client site and CREDIT-SUISSE via an access provider, i.e. Radianz, TNS or AT&T. Advantages of the Leased Line service are: • guaranteed minimum bandwidth, which can be exceeded to cater for peak times, • dedicated bandwidth • higher level of security • ease of upgrade Testing PrimeTrade connection

Once port 32000 is opened on the firewall, the connection can be test by telnetting to the IPs listed for your region. Open a windows command prompt by going to the Start menu, selecting Run… and typing in cmd into the window that opens. Once in the command prompt, type “telnet 199.53.16.54 32000” (or the IP of the region you are trying to connect to, and then 32000) and make a connection to our servers. If the connection is made, then PrimeTrade is ready to be installed, If not, something is blocking the traffic over the port 32000. Please make sure the port 32000 is open and that your ISP is not blocking the traffic. If the ping is successful, then you are ready to install PrimeTrade. Complete list of telnet commands below: telnet primetrade1.ny.csfb.com 32000 telnet primetrade2.ny.csfb.com 32000 telnet primetrade1.ln.csfb.com 32000 telnet primetrade2.ln.csfb.com 32000 telnet primetrade1.tk.csfb.com 32000 telnet primetrade2.tk.csfb.com 32000 telnet primetrade1.sy.csfb.com 32000 telnet primetrade2.sy.csfb.com 32000 PrimeTrade with Proxy Servers

PrimeTrade client software normally tries to connect directly to a PrimeTrade Access Point. If you are connecting across the Internet and your organization has a firewall and/or proxy server installed, you may not be allowed to connect directly to the outside world. In this case, you will need to install a TCP proxy to relay traffic from your workstations, across the firewall. CREDIT- SUISSE has tested PrimeTrade with a number of third party proxy solutions including: • Microsoft Proxy (requires —basic“ authentication) • plug-gw from http://www.tis.com If you are using a proxy server to connect PrimeTrade Servers, your %USERPROFILE%\primetrade\prod\pt_custom.prop file needs to be modified (NOTE: If you have already configured this file in a previous version you can copy this from your previous version‘s directory and reuse it in this version). Enter your proxy server hostname and proxy port on each region‘s line in the setup section below as follows. You would replace the hostname — proxyexample1“ and —8080“ with your own proxy server and port number. Broker.httpProxyHostname = Local HTTP Proxy Host Name Broker.httpProxyPort = Local HTTP Proxy Port Number If your proxy server requires a username & password to login you can specify it in the following section as follows. Note: This is the proxy server‘s username/password, not your PrimeTrade username/password. Broker.httpProxyUsername = Local Proxy authentication user name Broker.httpProxyPassword = Local Proxy authentication user password

Updated: 2015-07-16

Page 13 of 16

Broker.connectionMethod = Connection Method From Following Options: HttpTunnellingUserSetProxy, HttpTunnellingDefaultProxy, HttpTunnellingPromptProxy, HttpTunnellingNoProxy Alternatively to setup Proxy details via the PT GUI please go to Session -> Proxy Configuration and provide details as applicable and save. For any help, please contact our support (details below).

PrimeTrade's Security

The client software initiates an outbound, encrypted session to a PrimeTrade Access Point. On top of this, each trader requires a user ID and password to access their terminal and trade. Trading privileges are assigned centrally by CREDIT-SUISSE on a user-by-user basis. The user is authenticated on each connection to PrimeTrade. New users are assigned a temporary password and will be asked to change it once they log in. The client communicates with a PrimeTrade access point over a proprietary secure TCP/IP socket connection. The Windows-based install program can place the software in any directory. The software uses the Java Runtime Engine (JRE), which is supplied in the download. The installation process does not install any DLLs in the Windows directories or change any registry settings. This simplicity makes it easy to deploy across a large number of workstations very quickly.

Updated: 2015-07-16

Page 14 of 16

Password Notes Changing Passwords

There are several situations where the user can or must change their password: ° user’s password has expired ° user’s password has been reset by CREDIT-SUISSE ° user changes their own password If the user violates any of the password composition check rules, they will be presented with a dialog, indicating they cannot log in. It should be also noted that all password resetting is done over a secure (SSL) connection. User’s Password Expired

Whenever a user‘s password has expired, either by achieving its maximum lifetime or having been manually expired by a CREDIT-SUISSE Administrator, they will be presented with the —“Choose a new password“ dialog. The user must set a new password to continue logging in. If your password has been reset by an Administrator within CREDIT-SUISSE, you will receive an e-mail titled “Information you requested.” Your new password will be contained within the message; please keep in mind the temporary password is case sensitive User Password Reset (User)

A user can reset their own password at any time by selecting the —Change Password option from under Preferences | User sub-menu.

Updated: 2015-07-16

Page 15 of 16

--Forgot your password link on the Login Dialogue

--Via the following URL: https://primetrade.credit-suisse.com/ptsupport/ptrade/pwdUserInfo_en_US.jsp When a user selects the “Change Password” option they are presented with the — “Change Password” dialog.

The user must then correctly enter: their current password, a new password, and then confirm their new password. Please note: You cannot change your password to a password used previously for PrimeTrade.

Updated: 2015-07-16

Page 16 of 16

Frequently Asked Questions

Cannot log in to broker

• Either your PrimeTrade password is incorrect, or you entered the incorrect login. On the login screen, click on the link —“forgot your password” and you will be able to enter your email or PrimeTrade ID and reset your password automatically Correct login/password, but the error —“Database service unavailable” appears and your session stops.

• You may be using an old/decommissioned version of PrimeTrade. Consult with support for the correct version. You may click on the menu —Help —About PrimeTrade for the version you are using. • There may be a problem with your login (misconfiguration). Contact the help desk. • You may be accessing PrimeTrade during a maintenance window (weekend) and the database may be offline. Contact the help desk. • If you are not using a shortcut and are launching directly from the Start menu, find the ptradeny.bat file under ~/PrimeTrade/bin and set the memory option in the same way. PrimeTrade Installation Directory

Prime Trade installs in the the current users home directory in %USERPROFILE%\primetrade. This is determined by taking the parent directory of the current user’s “Desktop” location. The installer uses: reg query “HKCU\Software\Microsoft\Windows\CurrentVersion\Exokirer\Shell Folders” /v Desktop Error to Fetch Exchange

• This message appears when your setup has an error, preventing you from connecting to futures or equity exchanges. You will see prices for what is in your futures blotter, but will be unable to add products and unable to trade. Contact support. Note: non-futures/equity users will not see this error message. Derivative service unavailable

• Futures service is not running. Contact support. • Your second level setup for futures and/or equities was incorrectly set up. Contact support A proxy pop up message appears when logging in to PrimeTrade

• PrimeTrade cannot connect and is asking for a proxy server as a last resort to make the connection. If you have a proxy, enter the information here to complete the login. It would be prudent to enter that information into the prop file (see above). • If you do not use a proxy, then you no longer have access through the firewall to connect via port 32000. Contact your firewall/network security team. • Your ISP is down. Contact your ISP helpdesk A pop up window with an error code and no explanation appears when logging into PrimeTrade and your login fails

• Your version of PrimeTrade is out of date and you need to upgrade. • Your version of PrimeTrade is current, but you are using an old prop file, modified to connect to different servers. Contact support or upgrade to sync the files.

PrimeTrade Support Contact Information:

New York: +1 212 325 6888 London: +44 20 7883 5888 Singapore: +65 6212 4888 Primetrade.it@credit-suisse.com