Ecms Praesentationsunterlage Access Gui Data
Ecms Praesentationsunterlage Access Gui Data
Ecms Praesentationsunterlage Access Gui Data
Deutsche Bundesbank
Training materials
We will provide you with following training materials for this event:
# Presentation slides # ECMS video(s).
For data protection reasons, the training course will NOT be recorded.
Q&A
Please feel free to ask questions or add to the discussion as we go along. A separate Q&A session
will also be held at the end of each training section.
If you have any questions or wish to say something, please use the chat function.
Training feedback
When you were invited to this event, you were sent a link to a standardised and anonymised
feedback form.
Once the event has ended, please take a few moments to fill out the form and give us honest
feedback on this training course. Thank you!
Deutsche Bundesbank
20 March 2023
Slide 3
Agenda ECMS | Access & GUI
1. ECMS | Access
(Network Service Provider (NSP) & Eurosystem Single Market Infrastructure Gateway (ESMIG),
authentication & authorisation, certificate & login name, connection timeout (U2A), GUI login
(ESMIG))
Deutsche Bundesbank
20 March 2023
Slide 4
1. Access NSP & ESMIG (overview)
Deutsche Bundesbank
20 March 2023
Slide 5 Source: ECMS information pack – access and connectivity (europa.eu)
1. Access NSP (details)
When connecting to ESMIG, ECMS actors can choose between SWIFT or SIA/Colt as licensed
NSPs.
The NSPs manage the registration process for ESMIG access, the assignment of digital
certificates and the ECMS Closed Group of Users (CGU) for the connection to ECMS.
CGUs are closed user groups that include the relevant TARGET Services actors for both the
production (PROD) and test environments (EAC & UTEST).
There is a CGU for each environment and each market infrastructure of the Eurosystem (T2,
T2S, TIPS, ECMS).
The ordering process generally consists of two steps: 1) Subscription: contract with NSP
2) Configuration: provision of access to the TARGET Service(s).
There is no automatic subscription for ECMS if other TARGET Services are already in use. In
other words, existing customers have to reorder the specific ECMS service for the relevant
environment from the NSP.
Step Action TARGET Activity (Additional Details to Steps 6 to 8 in left Table) Actor
Service
1. Creation of NCB/CSD/TPA party ECMS Operator
1 Select the NSP of choice and select the related Services. ALL
2a. Creation of NCB user(s) with the role ‘NCB Admin’ ECMS Operator
2 Ask the NSP’s for an offer and order the related products. ALL 2b. Creation of CSD/TPA A2A user without any role attached
(assigning a role is not needed for starting connectivity testing)
3 Connectivity setup with the NSP. ALL
As from 2b. CSD/TPA A2A connectivity testing can be done CSD/TPA A2A User
4 Subscribe to the NSP’s Services for TARGET Services ALL
(e.g. inclusion into the CGU). 3. Connection to the ECMS GUI landing page (and the user can access NCB Admin
menu corresponding to his role)
5 Request for the NSP PKI certificates. ALL
4a. Creation of NCB A2A user without any role attached (not needed NCB Admin
6 Create the Party in Reference Data in ECMS ECMS for connectivity testing)
4b. Creation of NCB User(s) with the role ‘NCB – U2A General
7 Create Party administrators in ECMS ECMS
Reference Data Execution’ (as from that moment the NCB user can
8 Create the users and the Distinguish Name in ECMS ECMS access the menu corresponding to his role)
9 Connectivity test with TARGET Services ALL As from 4a. NCB A2A connectivity testing can be done NCB A2A User
A2A
5. Creation of the CPTY party NCB User in U2A
• in case of schema validation error, the user will receive
(cf. Step 4b)
an admi.007 message
• business validation errors will trigger the relevant 6. Creation of the CPTY user(s) with the role ‘CTPY Admin’ NCB Admin
business response message (eg. Pacs.002, camt.025
and reda.xxx according to the service/component the 7. Connection to the ECMS GUI landing page (and the user can access CTPY Admin
message has been sent to) menu corresponding to his role)
U2A
• the user will be able to reach the ESMIG landing page 8. Creation of CTPY A2A user without any role attached (not needed CTPY Admin
for connectivity testing)
See the annex for the workflow relating to step 6. As from 8. CTPY A2A connectivity testing can be done CTPY A2A User
Deutsche Bundesbank
20 March 2023
Slide 7 Source: TARGET Services Connectivity Guide v2.0
1. Access ESMIG (details)
ESMIG provides all ECMS parties with a single (central) access point to all TARGET Services
(ECMS, T2, T2S and TIPS, as well as potential future services).
Participants in the various market infrastructures can access the respective systems via a
single platform.
ESMIG is network operator-independent component and allows ECMS actors to connect to the
ECMS via one or more NSPs (SWIFT and/or SIA-Colt).
ESMIG centralises the various networks and harmonises the protocols, the graphical
interfaces and the management of certificates.
ESMIG is available during the operating hours defined by the ECMS business day. The ESMIG
channel is closed outside of these operating hours.
Users can sign in to ALL TARGET Services using a single sign-on and a single certificate.
ESMIG authenticates the users and checks whether they are authorised to use the ECMS.
Users can communicate with the ECMS via ESMIG in two ways: in A2A mode via XML messages
(ISO-20022 compliant) or in U2A mode via a graphical user interface (ECMS GUI).
Deutsche Bundesbank
20 March 2023
Slide 8 Source: TARGET Services Connectivity Guide v2.0
1. Access Authentication & authorisation
Each ECMS user needs a unique login name* and a certificate to access the ECMS.
Linked to the Distinguished Name (DN) Assigned by the NSP to the ECMS
defined by the NSP. user (person or application).
* CN=max-mueller, OU=esmig1, O=MARKDEFFXXX, O=nsp
The technical sender is the ECMS actor submitting the request to the ECMS.
Each technical sender is identified by means of a certificate issued by the NSP, i.e. the NSP
authenticates the technical sender on the basis of this/its certificate.
The certificate DN of the technical sender represents the technical address used by the technical
sender to connect to the ECMS.
Once ESMIG has authenticated the user and checked that the user is authorised to address the
ECMS, the ECMS checks the rights of the user to carry out a specific function in the ECMS
Authorisation is granted based on the user’s privileges (embedded in predefined roles) which are
stored in the ECMS reference data.
Deutsche Bundesbank
20 March 2023
Slide 9 Source: ECMS information pack – access and connectivity (europa.eu)
1. Access Certificate & login name
Each system user* (human or application) that is assigned a digital certificate is given a
unique login name (Distinguished Name (DN)/certificate DN).
One certificate can be linked to one or more ECMS users, even users belonging to
different counterparties and/or of different countries.
An ECMS user can be linked only to one certificate.
If an ECMS party uses two NSPs (SWIFT and SIA-Colt), separate certificates must
be provided by each NSP.
* As a general rule, system users can be:
• For U2A communication ==> an employee, e.g. of a counterparty or an NCB
• For A2A communication ==> an application, e.g. of a counterparty or an NCB
Deutsche Bundesbank
20 March 2023
Slide 10 Source : ECMS Training – 1.0 – Access to ECMS – Connectivity.
1. Access Connection timeout (U2A)
U2A timeout – session management
The ECMS session of a U2A user will remain active Connection
Idle timeout = 15 mins intimeout (U2A):
ESMIG. In the ECMS 15
eachmins inhas
module ESMIG, 15 mins
an idle timeout inmins.
of 15 ECMS per
until an idle time is reached or until the U2A user logs module
ECMS ESMIG ECMS Module 1 ECMS Module 2 ECMS Module 3
off or closes the ECMS browser window. user via
U2A
page in the browser by pressing F5, which will start a continue working in M1
Idle
new session for this module.
Idle
If ESMIG or the NSP initiates a new session (e.g. in
order to call up another TARGET Service) after a
Navigate in
timeout, a new session in the ECMS will only be (5) Back to M1.
Refresh the page module 1
initiated if the ECMS session also times out.
Idle Idle
Deutsche Bundesbank
20 March 2023
Slide 11 Source : ECMS Training – 1.0 – Access to ECMS – Connectivity.
1. Access GUI login (ESMIG)
On the ESMIG portal login screen, the user is requested to authenticate themselves via the
certificate* used together with their password (session PIN).
Both pieces of information are only required once at the beginning of every session and the
authentication remains active for the entire session.
The ESMIG portal guides the person wishing to access the ECMS to:
choose the service among the authorised services accessible via at least one user ID;
choose the component/application among the authorised components/applications accessible
via at least one user ID;
choose the user authorised to access the selected application.
After this process, the ESMIG portal will redirect the user to the ECMS homepage
(if selected).
* The user must first use the smart card, USB token or remote Hardware Security Module (HSM) containing the certificate for accessing
ESMIG. The PIN code displayed on the token must be entered by the user. The user must have saved the ESMIG digital certificates
on their PC. The same certificate can be used for all TARGET services. If desired, the same certificate can be used by multiple users.
Deutsche Bundesbank
20 March 2023
Slide 12 Source: ECMS UHB CPTY v1.1, p. 6, p. 15
1. Access GUI login (ESMIG)
3 4 *
After logging in, the user is taken to the ECMS module
“Collateral and Credit” by default
(ECMS homepage).
* A system administrator must be created for each NCB before the GUI
is accessed for the first time. The respective NCB admin creates the
users. These users can then access the GUI. Only registered users
5 have ECMS GUI access.
Deutsche Bundesbank
20 March 2023
Slide 13 Source: ECMS EAC 9 November 2022/17 November 2022.
1. Access GUI login (ESMIG)
Deutsche Bundesbank
20 March 2023
Slide 14 Sources: ESMIG UDFS v2.4.0, pp. 39 f., ECMS EAC 9 November 2022.
1. Access Important documents
Connectivity_ESMIG-SWIFT
ESMIG_SIA-Colt_Solution_Overview_ECMS_v1.1
Deutsche Bundesbank
20 March 2023
Slide 15
Q&A ECMS | Access & GUI
Deutsche Bundesbank
20 March 2023
Slide 16
Agenda ECMS | Access & GUI
1. ECMS | Access
(Network Service Provider (NSP) & Eurosystem Single Market Infrastructure Gateway (ESMIG),
authentication & authorisation, certificate & login name, connection timeout (U2A), GUI login
(ESMIG)
Deutsche Bundesbank
20 March 2023
Slide 17
2. GUI overview Hardware & software requirements (GUI)
Hardware requirements
Graphics card:
Microsoft DirectX 9 graphics devices with Windows Display Driver Model (WDDM) supported
Screen settings:
minimum resolution of 1280 x 720 pixels with a colour depth of at least 24-bit (true colour). A higher
colour depth of 32 bits is supported. Higher screen resolutions are recommended. Using lower
screen resolutions may result in the GUI being displayed incorrectly.
Deutsche Bundesbank
20 March 2023
Slide 18 Source: ECMS UHB CTPY v1.1, p. 14
2. GUI overview Hardware & software requirements (GUI)
Software requirements
Operating system
No particular operating system (OS) or other important software is required. Basically, any OS that
supports the following browsers can be used.
Supported browsers
Microsoft Internet Explorer (11)/Microsoft Edge/Google Chrome (40+)/Firefox (32+).
JavaScript and Java applets are used for client-side validations, which is why JavaScript and cookies
need to be enabled. No additional plug-in based internet applications like Flash or Silverlight are
required. Recommended cache size: between 1 and 2 MB.
A full definition of eligible browsers and their minimum versions and the complete replacement of applet technology
are defined in ESMIG; see the ESMIG UDFS.*
* https://www.bundesbank.de/en/homepage/eurosystem-single-market-infrastructure-gateway-user-detailed-
functional-specifications-esmig-udfs--799238
Deutsche Bundesbank
20 March 2023
Slide 19 Source: ECMS UHB CPTY v1.1, p. 14 f.
2. GUI overview GUI login (ESMIG)
Deutsche Bundesbank
20 March 2023
Slide 20
2. GUI overview GUI structure (modules & menu structure)
The ECMS GUI is divided into four different modules (Reference Data, Instructions
and Positions, Corporate Actions, Collateral and Credit).
Each module contains three hierarchical levels:
The first level of each module is presented as a menu bar containing items that
can be clicked at this level (see the annex for the main menu for each module).
The second and third level items are accessible via mouse-over on the first and
second level items respectively.
The entries at the second menu level are GUI menus, while the entries at the third
level are screens.
1 2 3
Deutsche Bundesbank
20 March 2023
Slide 21 Sources: ECMS UHB CPTY v1.1, pp. 16 f., ECMS EAC 4 November 2022.
2. GUI overview Main menu: modules (look & feel)
Main menu
Reference Data module (MegaCommon)
[see screenshot on the left]
Main menu
Instructions and Positions module (MegaCustody)
[see screenshot on the right]
Deutsche Bundesbank
20 March 2023
Slide 22 Source: ECMS EAC 17 March 2023
2. GUI overview Main menu: modules (look & feel)
Main menu
Corporate Actions module (MegaCor)
[see screenshot on the left]
Main menu
Collateral and Credit module (MegaLend)
[see screenshot on the right]
Deutsche Bundesbank
20 March 2023
Slide 23 Source: ECMS EAC 4 November 2022.
2. GUI overview GUI structure (menu bar/Reference Data)
Deutsche Bundesbank
20 March 2023
Slide 24 Source: ECMS EAC 4 November 2022.
2. GUI overview GUI structure (menu bar/Instructions and Positions)
Deutsche Bundesbank
20 March 2023
Slide 25 Source: ECMS EAC 4 November 2022.
2. GUI overview GUI structure (menu bar/Corporate Actions)
Deutsche Bundesbank
20 March 2023
Slide 26 Source: ECMS EAC 4 November 2022.
2. GUI overview GUI structure (menu bar part 1/Collateral and Credit)
Deutsche Bundesbank
20 March 2023
Slide 27 Source: ECMS EAC 4 November 2022.
2. GUI overview GUI structure (menu bar part 2/Collateral and Credit)
Deutsche Bundesbank
20 March 2023
Slide 28 Source: ECMS EAC 4 November 2022.
2. GUI overview GUI structure (screen structure)
Each screen of the ECMS GUI has the same layout, containing a header and a content area. A user
can have up to 10 tabs (screens) open at the same time.
Header with menu icon, home icon, screen bar/menu name (level 2) and information panel (user)
Content area with screen name (level 3), input/select fields, minimise icon and button bar
Deutsche Bundesbank
20 March 2023
Slide 29 Source: ECMS UHB CPTY v1.1, pp. 17 ff.
2. GUI overview GUI structure (header)
1 Menu icon: Clicking on it displays the menu bar of the main menu of the module that is currently open.
2 Home icon: Takes the user to the homepage of the relevant ECMS module they currently have open.
Screen bar: Shows the menu options selected by the user (level 2) as screen tabs.
3
A maximum of 10 tabs (screens) are allowed at one time.
Information panel: Shows the environment, tenants, business date, alerts and login names.
4
Clicking on the login name displays some information about the user.
Deutsche Bundesbank
20 March 2023
Slide 30 Source: ECMS UHB CPTY v1.1, pp. 17 ff.
2. GUI overview GUI structure (content area)
Deutsche Bundesbank
20 March 2023
Slide 31 Source: ECMS UHB CTPY v1.1, pp. 17 ff.
2. GUI overview Screen types (overview)
Search Create/display: Allows the user to query the ECMS data using a predefined set of search criteria.
Search criteria: Searches are case-sensitive.
A maximum of five latest searches are shown.
List Search result: Allows the user to query ECMS data by entering search criteria. After executing a
List: search, a list of data records matching the search criteria is displayed in a table. It is also
possible not to enter any search criteria. In this case no record will be excluded from the
results.
The user can sort the search result by clicking on the description of the respective
column.
The results displayed are limited to a maximum of 10,000 records. The user can
configure the number of records to be listed (10, 15, 20, 25, 100 and 150).
Edit Edit: Allows the user to edit existing data records (“edit mode”).
Details View: Details of a data record. The user can only access this screen via the list screen.
History History: Allows the user to check the information that has been updated since the creation of the
History result: record.
Deutsche Bundesbank
20 March 2023
Slide 32 Source: ECMS CPTY UHB v1.1, pp. 17 ff.
2. GUI overview “Welcome” screen (look & feel)
After logging in, the user is taken to the ECMS module “Collateral and Credit” by default
(ECMS homepage).
A system administrator must be created for each NCB before the GUI is accessed for the first time. The respective
NCB admin creates the users, who can then access the GUI. Only registered users have access to the ECMS GUI.
Deutsche Bundesbank
20 March 2023
Slide 33 Source: ECMS EAC 17 November 2022.
2. GUI overview “Create” screen (look & feel)
Deutsche Bundesbank
20 March 2023
Slide 34 Source: ECMS UHB (NCB) v1.1, p. 33
2. GUI overview “Search” screen (look & feel)
Allows the user to query the ECMS data using a predefined set of search criteria.
Deutsche Bundesbank
20 March 2023
Slide 35 Source: ECMS UHB CPTY v1.1, p. 26, ECMS UHB v1.1 (NCB) p. 815.
2. GUI overview “List” screen (look & feel)
A list of data records that match the search criteria will be displayed in a table.
Deutsche Bundesbank
20 March 2023
Slide 36 Source: ECMS UHB CPTY v1.1, p. 27, p. 126
2. GUI overview “Edit” screen (look & feel)
Deutsche Bundesbank
20 March 2023
Slide 37 Source: ECMS UHB (NCB) v1.1, p. 40.
2. GUI overview “Details” screen (look & feel)
Details of a data record. This screen can only be accessed via the list screen.
Deutsche Bundesbank
20 March 2023
Slide 38 Source: ECMS UHB CTPY v1.1, p. 30
2. GUI overview “History” screen (look & feel)
Allows the user to check the information that has been updated since the creation of the record.
Deutsche Bundesbank
20 March 2023
Slide 39 Source: ECMS UHB (NCB) v1.1, p. 46, ECMS UHB CPTY v1.1, p. 133
2. GUI overview Screen elements (fields & buttons/selection)
On search and create/edit screens, users can enter information via input fields and select fields.
Input fields
Select boxes Select fields Permitted characters
a-z A-Z
0-9
-
:
Check boxes ( )
.
,
´
Various buttons allow the user to open the respective functions on a screen: Space (blank)
Deutsche Bundesbank
20 March 2023
Slide 40 Source: ECMS UHB CPTY v1.1, p. 20 f., ECMS EAC 17 November 2022.
2. GUI overview Screen elements (icons/selection)
Icon Description
Minimises the screen
Maximises the screen
Shows the number of hits displayed in a list (maximum of 10,000 hits/data records)
Enables you to export the results to an Excel file
Enables you to export the results in different formats (.pdf, .csv, .xml)
Enables you to filter the results
Enables you to delete the selected data record
On the search and list screens: enables you to save the current search or select a saved search
Enables you to refresh the current search
Enables you to save the reason for deactivating the reference data element
Enables you to edit the selected data record* (partially replaces edit button)
Enables you to select a date from a calendar
Enables you to search for data from a selection screen* (partially replaces search button)
Deutsche Bundesbank
20 March 2023
Slide 41 Source: ECMS UHB CPTY v1.1, pp. 21 f.
2. GUI overview Screen elements (search operators)
Operator Description
== Equal to
!= Different from
" Field is null (empty)
!" Field is not null (not empty)
> Superior to
< Inferior to
>= Superior or equal to
<= Inferior or equal to
[] Between two values, e.g. [1000;2000]
() In a list of values separated by ;
!() Not in the list of values separated by ;
~ Looks like the text, using % to replace any character
^ Text starts with
Deutsche Bundesbank
20 March 2023
Slide 42 Source: ECMS UHB CTPY v1.1, pp. 22 f.
2. GUI overview Validation (U2A)
Front-end validation
Part one of the validation process: comprises both field validation
(= prescribed format) and cross-field validation (= data consistency across
Validation: Success message
multiple fields). Click on a button to carry out this process.
Confirmation prompt
For activities in 2-eyes mode, a confirmation prompt is shown following
successful front-end validation to allow users to send or reject them
(does not appear in 4-eyes mode).
Back-end validation
Part two of the validation process: following successful front-end validation, the request is sent to the back-
end and checked for compliance with the business validation rules. In the event of failure, an error message
is displayed.
(Validation) result
After each validation, the ECMS GUI informs you about the result.
There are two message types available:
the error message and the success message. Validation: Error message
Deutsche Bundesbank
20 March 2023
Slide 43 Source: ECMS UHB CTPY v1.1, p. 23, ECMS EAC 23 November 2022.
2. GUI overview Validation (U2A)
4-eyes mode
Depending on the access rights setup, you can use the ECMS in 2-eyes mode or 4-eyes mode. The 2-eyes
mode and the 4-eyes mode apply to input screens and to any kind of deletion processes. If you are a 4-eyes
mode user, your actions have to be confirmed by a second user in order to be processed.
First user
In 4-eyes mode the first user enters, changes or deletes the data on a screen
and afterwards submits the action by clicking on the submit button in the First user
button bar. The success message that appears after successful validation
contains a the 4-eyes principle. For final execution a second user is needed
to confirm the action.
Second user
Second user
After the first user has entered, changed or deleted the data, a second user (with the required privilege) has
to approve or revoke this action via the relevant screen either using the 4-eyes mode or the search
functionality. As soon as the data changes are positively approved, the ECMS marks these data as
approved and they are forwarded for further processing.
Deutsche Bundesbank
20 March 2023
Slide 44 Source: ECMS UHB CPTY v1.1, pp. 23 f., ECMS EAC 23 November 2022
2. GUI overview Validation (U2A)
This means that the user is asked to enter a PIN code for signature
purposes whenever an instruction is initiated. With the entry of the PIN, the
ECMS attaches a digital signature to the instruction entered by the user. Ascertia scope go-live*
5 U2A instructions
5 UHB screens
Users will have to install the Ascertia Go>Sign Desktop client on their New: April 2024
workstation in order to be able to use ECMS via U2A for screens subject
to a digital signature. Ascertia scope overall
177 U2A instructions
Ascertia is the only U2A NRO solution for TARGET Services. 135 UHB screens
New: Q4/2024
Only one version of the Go>Sign Desktop client will thus be used
and distributed across the different TARGET Services. * (De-)mobilisation of a marketable asset
* Deletion of a (de)mobilisation of a marketable asset
* Instruction from the counterparty in the case of a corporate action
transaction
* Deletion of the instruction from the counterparty in the case of a
corporate action transaction
* (De-)mobilisation of a credit claim
Deutsche Bundesbank
20 March 2023
Slide 45 Source: ECMS UHB CTPY v1.1, p. 24, ESMIG U2A Qualified Configurations v1_3 (europa.eu), S. 6 ff.
2. GUI overview Important documents
Deutsche Bundesbank
20 March 2023
Slide 46
Q&A ECMS | Access & GUI
Deutsche Bundesbank
20 March 2023
Slide 47
Training course feedback ECMS | Access & GUI
Deutsche Bundesbank
20 March 2023
Slide 48
Closing remarks ECMS | Access & GUI
ecms-training@bundesbank.de
Deutsche Bundesbank
20 March 2023
Slide 49
Annex ECMS | Access & GUI
Deutsche Bundesbank
20 March 2023
Slide 50
Annex Access (A2A & U2A)
Only ECMS operators, NCBs and counterparties can access the ECMS in U2A mode. CSDs and
TPAs do not have U2A access.
Provides counterparties with access to all ECMS functions, in particular for monitoring and
managing their collateral pools.
Deutsche Bundesbank
20 March 2023
Slide 51 Source: ECMS information pack – ECMS access and connectivity (europa.eu)
Annex CGU Subscription Approval workflow for TARGET Service Actors
(1/2)
, excluding (N)CB, CSD or TPA (Step 4 of Connectivity checklist)
Deutsche Bundesbank
20 March 2023
Slide 52 Source: TARGET Service Connectivity Guide v2.0
Annex CGU Subscription Approval workflow for TARGET Service Actors
(2/2)
(N)CB, CSD or TPA (Step 4 of Connectivity checklist)
Deutsche Bundesbank
20 March 2023
Slide 53 Source: TARGET Service Connectivity Guide v2.0
Annex ECMS registration process (NCBs and counterparties)
(Step 6/1. ff. of Connectivity checklist) (Step 6/5. ff. of Connectivity checklist)
Deutsche Bundesbank
20 March 2023
Slide 54 Source: TARGET Service Connectivity Guide v2.0