Email Including Registrar S Balance and Upcoming Auto Renewals

Subject: Donuts Registry - July 2015 Release Notes

The Production environment will be updated with the new features that were deployed last week in OT&E. Please see the list of improvements and added functionality below.

Registrar web portal

Email including Registrar’s balance and upcoming auto renewals This feature allows Registrars to decide which notification contacts to opt-in to receive an email containing information about upcoming auto renewals, the expected charges of the renewals, and the resulting balance for each of the subsequent weeks. The web user can determine how frequently the notification contact will receive these emails: daily, weekly or monthly.

The email will include the following information for an upcoming four-week period from the date the email is sent: ● Current Balance: the current balance of the Registrar’s account. ● Auto Renewals: the number of upcoming auto renewals for the week. ● Expected Charges: the expected charges calculated based on the number of auto renewals for the week. ● Current Balance - Charges: the difference between the balance at the beginning of the week and the total expected charges for the week. ● Threshold: threshold information for the Registrar only when the final threshold is above zero.

Return host info to non-sponsoring Registrars New functionality has been implemented for non-sponsoring Registrars to receive information on a host by completing a host info command. This information can be returned from the web portal and also through EPP. With this functionality non-sponsoring Registrars are now able to receive results from a host info command on in-zone and out-of-zone hosts.

Unlock Registrar web portal users A Registrar web portal user is locked out of the system after 6 incorrect/failed attempts at the password. The lock-out duration is 30 minutes. During this period, web portal users with the Policy Group “Registrar Senior” will now be able to unlock the user.

The unlock function for web users will be available by navigating to the “Users > View Registrar Users page”. Under the “Account locked” column, the option “Unlock” will be shown for users with a locked account. Two-Step Authentication Two-step authentication is a method of securing accounts requiring that you not only know something (a password) to log in, but also that you possess something (your mobile device or computer) or an app (e.g. Google Authenticator app) that can generate a verification code to be entered by the user. The benefit of this approach to security is that even if someone guesses your password, they would also need to steal your possession in order to break into your account. This feature is not currently mandatory for Registrar users, however, it is strongly advised that Registrar users attempt to familiarize themselves with this security measure.

How to enable Two-Step Authentication Registrar Senior users can enable two-step authentication for any user including themselves through the web portal. A user can find out if they are a Registrar Senior member by logging in to the web portal, navigating to the “Profile” menu and then “View > Edit Profile” and checking under “System Groups”.

To enable two-step authentication, log on to the Registrar portal and select “Manage Security” found underneath the “Registrar” menu. From this page, select the box to enable two-factor authentication and this will subscribe all web users with this feature. Once an administrator has enabled two-step authentication on their account, this feature cannot be disabled. How to set up Two-Step Authentication When two-step authentication has been enabled for a Registrar account, the next time a web user logs in with the correct username and password, they will be presented with a QR code and a secret key that need to be validated by an authenticator. The steps to set up the Google Authenticator are listed on the same page, but any mobile or desktop authenticator application can be used. Once the user has provided the verification code successfully on the web portal, the system will prompt the user to enter the verification code on subsequent log in attempts. The user can select the option “Do not ask for codes again on this computer” for future attempts.

How to reset Two-Step Authentication If a Registrar web user needs to reset the two-step authentication, they should contact the Technical Support team. Technical Support will ask for the security phrase for this particular web user before taking any action. We strongly recommend that Registrar web users verify their security phrase, in order to avoid any delay in providing the web user with access to the portal. The Technical Support team cannot proceed with any amendments to the Two-Step Authentication process for a Registrar without the Registrar web user's security phrase.

Premium Name Reporting The Price Category domains report, found under the “Common Reports” section has been updated to only include available premium domains. This report will no longer include premium domains which have been registered or premium domains which are registry reserved and unavailable for general sale.

Scheduled Maintenance

We would like to remind you about the upcoming scheduled maintenance to the Production environment as set forth below.

Environment: Production Date: Monday, July 13th, 2015 Maintenance Window: 21:00h - 22:30h UTC Expected Duration: 90 minutes

We anticipate the maintenance to take 90 minutes with intermittent outages of the SRS and web portals during that time. All other registry services will continue to function normally. We aim to finish at the expected time but will notify you if there is any significant delay. When we start and complete the maintenance on Production environment notification emails will be sent. These notifications will be addressed to your Admin and Tech notification contacts created on your Production account.