What is SecureMail?
SecureMail is an e-mail encryption solution provided by Voltage Security Inc and can be used with any e-mail application. SecureMail is compatible with desktops, laptops and netbooks.
If you receive a secure message this way, you will need to set up a SecureMail account. To set up the account and view your message, you will need connection to the internet and access to a web browser.
How secure are SecureMail messages?
The secure e-mail is encrypted with the equivalence of a 1024-bit key. It uses breakthrough identity-based encryption to ensure the privacy of confidential information without compromising ease of use. Each message is also signed by the sender to ensure authenticity of the sender and data integrity of the message.
In addition, all decrypted e-mail messages are viewed through your web browser using an SSL/TLS connection.
Is the SecureMail solution suitable for everyone?
Messages sent via SecureMail can be received securely by any e-mail application. To view the secure message, you must also be connected to the internet and have access to a web browser.
When I previously used SecureMail, I downloaded an application for my BlackBerry. This application no longer works. Why?
Due to changing technology on BlackBerry and customer feedback, it was felt this application should be withdrawn. Depending on your phone browser, you may still be able to access the message from your BlackBerry. Customers can down load from the Apple, Android and RIM application stores to improve their experience when using a mobile device. However, viewing SecureMail messages on your BlackBerry and other smartphones is not recommended, and HSBC do not support these devices on our current infrastructure.
Will using SecureMail to read my message cost me anything?
There are no cost implications to receive or reply to e-mails encrypted by SecureMail.
Will I have to download or purchase any software to receive secure e-mail via SecureMail?
There are no requirements to download or purchase any new software when using SecureMail.
I do not have TLS configured on my e-mail server and do not have a web browser to view a SecureMail message. How will I be able to view the secure message?
If you cannot accept TLS e-mail traffic and do not have a web browser to use SecureMail, we will not be able to send you the information securely by e-mail using Forced TLS or SecureMail. Contact the originator of the message, who can talk through appropriate solutions to sending the information via an alternative secure method.
Remember, it is against HSBC's policy to send information insecurely if the information could pose a risk to you, HSBC and other customers if intercepted by someone else.
How will I know the e-mail has come from HSBC via SecureMail?
Every e-mail that your recipient receives via SecureMail will contain the same anti-phishing image that is assigned to you on your first SecureMail e-mail from your HSBC relationship manager or HSBC representative. If you are ever in doubt, contact your HSBC relationship manager or HSBC representative by telephone rather than e-mail.
Can my company set up one SecureMail account for all their employees?
For security and technical reasons, each recipient of the e-mail must have a SecureMail account to ensure the e-mail is going to the authorised individual. Therefore, your company cannot set up one SecureMail account for all employees.
If the e-mail is sent to a shared e-mail account, the owner of the account will need to set up a SecureMail account and share the account access details in accordance with your company security policies.
What about the possibility of SecureMail being blocked by spam filters?
Spam filters work in different ways. They may filter e-mails by looking at the e-mail header, subject line, e-mail content or simply looking at the frequency the e-mail is received from a source that you have not authorised. Depending on the spam filter used by your e-mail service provider, e-mail from HSBC encrypted by the SecureMail may be blocked or placed in your junk mail. If you are expecting an e-mail but do not see it in your inbox, firstly check your junk box or if you have received notification that an e-mail has been blocked, check the sender’s e-mail address. If you trust the source, then you can continue to retrieve the e-mail in the way that you normally do. You may also need to change the settings on your own filter – for example some settings prevent encrypted e-mail being received.
Will all e-mails from HSBC be encrypted by SecureMail?
E-mails will only be encrypted if the information contained could pose a risk to you or HSBC if intercepted by unauthorised recipients. If a Forced TLS connection is not in place with you, your e-mail will be encrypted by SecureMail or an alternative approved solution that secures the information delivered to you.
I already receive e-mail via Forced TLS. Will I now receive secure e-mails via SecureMail?
Forced TLS is HSBC’s preferred e-mail encryption solution. If we already have Forced TLS in place with you, we will not encrypt the e-mail by SecureMail.
Where can I find more information about SecureMail?
Visit www.hsbc.com/secureemail for more information about SecureMail.
Who can I contact for more help with SecureMail?
If you cannot find the answers you are looking for here or from any information provided on the www.hsbc.com/secureemail website, contact your HSBC relationship manager or HSBC representative who sent you the e-mail.