Role of Account Management at ERCOT

Role of Account Management at ERCOT Market Participant Identity Management Overview (MPIM)

Introduction Welcome to Texas Market Link (TML) Market Participant Identity Management (MPIM) This tour will explain: • The User Interface (UI) • Business functions allowed by the system • When to expect Market Participant communications • Contact information for Help The following slides provide a tour of the new MPIM application to familiarize you with managing your USA certificate and your users certificates. It should be used as a compliment to the Introduction and Use of Market Participant Identity Management (MPIM) and Digital Certificates document.

Overview Objectives This overview presentation provides how to: • Access MPIM • Receive your ERCOT Digital Certificate (DC) • Create a new MP User • Create DC for MP User • Modify a current MP User’s information and Roles • Terminate and remove all access for a MP User • Add or revoke a MP User’s certificate • Run different reports for your entity

Current vs. New Digital Certificate Functionality

Overview Topics • Receiving your MP USA Digital Certificate • Accessing MPIM • Managing Users • Create User Accounts • Grant Certificates • Modify User Accounts • Terminate User Accounts • Run Reports • MPIM Errors • Losing MP USA access • Reference Documents / Important Contact information

Receiving a Digital Certificate Once ERCOT has received a Market Participant’s Application or Notice of Change of Information form (NCI), then ERCOT will begin the process of issuing the Digital Certificate (DC) for the MP USA(s) upon ERCOT authorization. ERCOT USA will then enroll the new USA(s) via the Market Participant Identity Management (MPIM) system.

Receiving a Digital Certificate (cont’d) After ERCOT USA has created an MP USA Account, the MP USA will receive an informational email notification from MPIM similar to the one below. From: helpdesk@ercot.com Date: 10/01/2007 12:00 PM To: user@ercot.com Cc: Subject: MPIM Notification: <Type> Creation <User (First Name Last Name)> Dear <User (First Name Last Name)>, Your account has successfully been created. Please contact your requestor <Requestor (First name Last Name)>, regarding the information for your account. If you have a question related to this email, then please contact the ERCOT Helpdesk at (512) 248-6800. Thank you, MPIM Administrator At this point, the MP USA does not have a Digital Certificate.

Receiving a Digital Certificate (cont’d) Upon authorization the ERCOT USA will then grant the MP USA a DC. Two notifications will be sent to the MP USA; one email containing a certificate URL link and ... Email containing certificate URL

Receiving a Digital Certificate (cont’d) … another containing a certificate password. Email containing certificate password From: helpdesk@ercot.com Date: 10/01/2007 12:00 PM To: user@ercot.com Cc: Subject: MPIM Notification: Certificate Pickup <User (First Name Last Name)> Dear <User (First Name Last Name)>, Your VeriSign Digital Certificate has been requested. Please contact your <Requestor (First Name Last Name)> for the next steps to download your digital certificate. Certificate URL Password: <Random generated password> If you have a question related to this email, then please contact the ERCOT Helpdesk at (512) 248-6800. Thank you, MPIM Administrator • A one time use password for ERCOT Digital Certificate is valid for 5 Days. • On day 6, MP USA will have to contact ERCOT Client Services at (512) 248-3900.

Receiving a Digital Certificate (cont’d) To download new DC, MP USA will contact ERCOT Client Services for their Username / Employee ID. Next click on the URL in the email and the ERCOT Digital Certificate (EDC) page will load. Using the Password from the email, the Employee ID from ERCOT Client Servicesand the DUNS number, fill out the login screen and download the certificate.

Receiving a Digital Certificate – EDC Click Yes

Receiving a Digital Certificate – EDC (cont’d) Click OK

Receiving a Digital Certificate – EDC (cont’d) Do not close browser during download!

Receiving a Digital Certificate – EDC Click Yes At this point, your Digital Certificate has been downloaded.

Accessing MPIM • Only users that have completed the mandatory paperwork and are in compliance with ERCOT Protocols, “User Security Administrator and Digital Certificates” regarding User Security Administrators (USA), will be granted access to MPIM. • Each Market Participant must appoint a USA and has the option to register a Secondary USA. A Secondary USA is encouraged because they will prevent the loss of ERCOT resource functionality in the event the Primary USA is unavailable or leaves. • Once the MP USA has been created in MPIM and receives their Digital Certificate, they can access MPIM through a link on TML. Please note that the MPIM system will eventually be accessed through the Nodal Market Information System (MIS).

Accessing MPIM as a MP USA Navigate to the TML Portal by inserting the following URL in a browser window: https://tml.ercot.com. Once prompted, select a certificate that corresponds to the entity you are managing, highlight the MP USA certificate, and click OK.

Accessing MPIM - TML Once in TML, click on the Identity Management link.

Managing Users – Create MPIM User Account MP USA clicks on the Create link. For more details to create MPIM User Account, please refer to Section 2.3 “Create MPIM User Account” of the Introduction and Use of Market Participant Identity Management (MPIM) and Digital Certificates document.

Managing Users – Create MPIM User Account (cont’d) MP USA fills out the required fields, assigns roles and clicks on the Submit button. Note: The MP USA can select the Role Information link to learn which applications/resources the MP User will access by receiving the role(s). User’s Email Address Adds a selected role Removes a selected role Adds all roles Removes all roles

Managing Users – Create MPIM User Account After the MP User account is successfully created, the following e-mail is generated and sent to the MP User. The notification is sent to the e-mail address provided during account creation. ====================================================================== From: helpdesk@ercot.com Date: 10/01/2007 12:00 PM To: user@ercot.com Cc: Subject: MPIM Notification: User Creation <User First Name User Last Name> Dear <User (First Name Last Name)>, Your account has successfully been created. Please contact your USA, <Requestor (First name Last Name)>, regarding the information for your account. If you have a question related to this email, please contact the ERCOT Helpdesk at (512) 248-6800. Thank you, MPIM Administrator

Managing Users – Create Application Programming Interface (API) MPIM User Account In order to create an API account within the MPIM system, the MP USA will start at the MPIM Manage User screen. For more details to create MPIM API Account, please refer to Section 2.4 “Create Application Programming Interface (API) MPIM Account” of the Introduction and Use of Market Participant Identity Management (MPIM) and Digital Certificatesdocument.

Managing Users – Create Application Programming Interface (API) MPIM User Account (cont’d) MP USA checks the API check box, fills out the required fields, assigns roles and clicks on the Submit button. Heselmeyer, Sarah Email address of API server manager • The API_ text will be prepended to the employee ID when the request is submitted.Employee ID should be the server or application name. EXAMPLES: API_SERVER_NAME or API_APPLICATION_NAME (min 4/max 19 characters) • First Name, Last Name and e-mail address should the contact information for the server/application owner.

Managing Users – Create Application Programming Interface (API) MPIM User Account (cont’d) After the API/MP User account is successfully created, the following e-mail is generated and sent to the User. The notification is sent to the e-mail address provided during account creation. From: helpdesk@ercot.com Date: 10/01/2007 12:00 PM To: user@ercot.com Cc: Subject: MPIM Notification: User Creation <User First Name User Last Name> Dear <User (First Name Last Name)>, Your account has successfully been created. Please contact your USA, <Requestor (First name Last Name)>, regarding the information for your account. If you have a question related to this email, please contact the ERCOT Helpdesk at (512) 248-6800. Thank you, MPIM Administrator

Managing Users – Creating User Certificate in MPIM After user account is created the MP USA is ready to create the associated users DC. MP USA clicks on the Certificates link. For more details to create MPIM User and API Digital Certificates, please refer to Section 2.6.1 “Creating User Certificate” in the Introduction and Use of Market Participant Identity Management (MPIM) and Digital Certificatesdocument.

Managing Users – Creating User Certificate in MPIM (cont’d) MP USA enters search parameters for a User (employee id, first name, or last name). MP USA clicks the Search button.

Managing Users – Creating User Certificate in MPIM (cont’d) MP USA checks the boxes of the User(s) for whom certificates should be generated. MP USA clicks the Submit button. • Multiple users can be granted certificates. • After the certificate is granted, the user must download the certificate before it will be considered Valid. • Certificates in any status but Valid or Revoking will appear on the Request Certificates page. • Certificates in Valid or Revoking status will appear on the Revoke Certificate page when the radio button is selected.

Managing Users – Creating User Certificate in MPIM (cont’d) The MP User receives the following two e-mails with information on how to retrieve their Digital Certificate. From: helpdesk@ercot.com Date: 10/01/2007 12:00 PM To: user@ercot.com Cc: Subject: MPIM Notification: Certificate Pickup <User (First Name Last Name)> Dear <User (First Name Last Name)>, Your VeriSign Digital Certificate has been requested. Please contact your requestor <Requestor (First Name Last Name)> for the next steps to download your digital certificate. Certificate URL Password: <Random generated password> If you have a question related to this email, then please contact the ERCOT Helpdesk at (512) 248-6800. From: helpdesk@ercot.com Date: 10/01/2007 12:00 PM To: user@ercot.com Cc: Subject: MPIM Notification: Certificate Pickup URL<User (First Name Last Name)> Dear <User (First Name Last Name)>, Your VeriSign Digital Certificate has been requested. Please contact your requestor <Requestor (First Name Last Name)> for the next steps to download your digital certificate. Certificate URL: <Certificate URL> If you have a question related to this email, then please contact the ERCOT Helpdesk at (512) 248-6800. Thank you, MPIM Administrator • A one time use password for Digital Certificate is valid for 5 Days. • On day 6, the User will have to contact their MP USA. MP USA will re-issue certificate for the User. • User will contact MP USA for their Employee ID.

Managing Users – Modifying a User and API MPIM Account with Roles MP USA clicks on the Modify link. Formore details to Modify MPIM User, please refer to Section 2.5“Modifying an User and API MPIM Account with Roles” in the Introduction and Use of Market Participant Identity Management (MPIM) and Digital Certificatesdocument.

Managing Users – Modifying a User and API MPIM Account with Roles (cont’d) MP USA enters search parameters for a User (employee id, first name, or last name). MP USA clicks the Search button.

Managing Users – Modifying a User and API MPIM Account with Roles (cont’d) MP USA selects a User. MP USA clicks on the Submit button.

Managing Users – Modifying a User and API MPIM Account with Roles (cont’d) MP USA modifies the required fields if needed. If a change is made to your First/Last Name or Email address through a modification, the MP USA must then revoke and reissue a new certificate through MPIM. This will update any new changes on the Digital Certificate.

Managing Users – Modifying a User and API MPIM Account with Roles (cont’d) After the user account is successfully modified, the following e-mail will be sent to the User. **NOTE**: The assignment of roles may generate additional e-mails. From: helpdesk@ercot.com Date: 10/01/2007 12:00 PM To: user@ercot.com Cc: Subject: MPIM Notification: User Modified <User (First Name Last Name)> Dear <User (First Name Last Name)>, Your account has successfully been modified. Please contact your USA, <Requestor (First name Last Name)>, regarding the information for your account. If you have a question related to this email, please contact the ERCOT Helpdesk at 512-248-6800. Thank you, MPIM Administrator

Overview Topics • Receiving your Digital Certificate • Accessing MPIM • Managing Users • Create User Accounts • Grant Certificates • Modify User Accounts • Terminate User Accounts • Run Reports • MPIM Errors • Losing MP USA access • Reference Documents / Important Contact information

Managing Users – Terminating a MPIM User Account MP USA clicks on the Terminate link. For more details to Terminate MPIM User Digital Certificates, please refer to Section 2.7 “Terminating a MPIM User Account” in the Introduction and Use of Market Participant Identity Management (MPIM) and Digital Certificatesdocument.

Managing Users – Terminating a MPIM User Account (cont’d) MP USA enters search parameters for a User (employee id, first name, or last name). MP USA clicks the Search button.

Managing Users – Terminating a MPIM User Account (cont’d) MP USA checks the boxes of the User(s) they would like to terminate. MP USA clicks on the Submit button. **NOTE**: Terminating a user will remove the user from the MPIM system and also revoke the user’s certificate and roles. **NOTE**: Once a user is Terminated, the account cannot be reactivated. A new account will need to be created for the User with a new Employee ID.

Managing Users – Terminating a MPIM User Account (cont’d) MPIM sends a revoke certificate email to the MP USA. From: helpdesk@ercot.com Date: 10/01/2007 12:00 PM To: requestor@ercot.com Cc: Subject: MPIM Notification: Certificate Revoked <User (First Name Last Name)> Dear <Requestor (First Name Last Name)>, The certificate belonging to <User (First Name Last Name)> has successfully been revoked. If you have a question related to this email, then please contact the ERCOT Helpdesk (512) 248-6800. Thank you, MPIM Administrator MPIM sends a successful notification to the MP USA. From: helpdesk@ercot.com Date: 10/01/2007 12:00 PM To: requestor@ercot.com Cc: Subject: MPIM Notification: User Disabled <User (First Name Last Name)> Dear <Requestor (First Name Last Name)>, The account belonging to <User (First Name Last Name)> has successfully been disabled. If the User had any resource accounts and/or certificates, then those accounts and certificates have also been successfully revoked. If you have a question related to this email, then please contact the ERCOT Helpdesk at (512) 248-6800. Thank you, MPIM Administrator

Overview Topics • Receiving your Digital Certificate • Accessing MPIM • Managing Users • Create User Accounts • Grant Certificates • Modify User Accounts • Terminate User Accounts • Run Reports • MPIM Errors • Losing MP USA access • Reference Documents / Important Contact information

Managing Users – Reports MP USA clicks on the Reports link. For more details to Run Reports for MPIM User Digital Certificates, please refer to Section 2.8 “Reporting” in the Introduction and Use of Market Participant Identity Management (MPIM) and Digital Certificatesdocument.

Managing Users – Reports (cont’d) MP USA clicks the link for the desired Report Type • Each report can be viewed in three formats: on screen, csv, and pdf. • Because some entities have many users, the reports may take longer than a few seconds to load. • Current Status Report will contain all Active Users for the Market Participant. • Full Report will contain all users, including inactive users for the Market Participant.

Managing Users – Reports (cont’d) If your organization’s ERCOT registered unique identifier (DUNs number plus four) contains 13 digits, it will appear in scientific notation. Also, if the unique identifier begins with a zero; the leading zeros will be cut off. To correct this in the downloaded MPIM reports, please follow the steps below. • MP USA right clicks on desired Report Type and Save Target to desired location. • Open Excel and click on Data Tab • Select Import External Data • Click on Import Data • Go to Desired File to be imported and click Open to import file

Managing Users – Reports (cont’d) • Text import wizard should appear, choose file type as Delimited

Managing Users – Reports (cont’d) • Select Delimiters as Tab and Comma then Click next

Managing Users – Reports (cont’d) • In Data Preview select third column in Column Data Format select Text then click Next and Finish

Managing Users – Reports (cont’d) • Click ok to Import Data into Excel and Duns number should display correctly

Managing Users – Summary Diagram This diagram describes the duties of an MP USA and their relationship to the MP User through MPIM. MPIM will automatically generate notifications to the MP User’s email address. Note: The specific format of each of these emails can be found in the Introduction and Use of Market Participant Identity Management (MPIM) and Digital Certificates Document.

Role of Account Management at ERCOT