A public accountant launches CDC Net on a Monday morning to validate a transfer before the cash closure, and the screen gets stuck on the authentication page. The work phone correctly displays the HID Approve application, but no notification arrives. This type of situation, far from being anecdotal, regularly affects users of the Caisse des Dépôts platform, especially during payment campaigns or budget deadlines.
Outdated phone number and mobile validation blocked on CDC Net
The majority of connection blocks to CDC Net do not stem from a forgotten password. They arise from a professional phone number that is no longer up to date in the user account.
The mechanism is simple: CDC Net relies on strong two-factor authentication. After entering the username, the system sends a validation request to the HID Approve application installed on the smartphone associated with the account. If this smartphone has changed, or if the number has been reassigned after a departure or transfer, the notification goes into the void.
The problem becomes critical because updating the number cannot be done in self-service. It requires going through a dedicated support circuit, via the assistance forms of the Banque des Territoires reserved for non-connected users. In other words, when the problem is discovered, one is already locked out.
To anticipate this type of blockage, it is better to regularly check the information related to the connection to the cdc net account before periods of high accounting activity.
The concrete workaround: every time an agent changes position or phone, the IT referent of the structure should update the number associated with the CDC Net account within 48 hours. Waiting for the next connection to realize it guarantees a blockage at the worst moment.
Incompatible browser: the silent blockage of CDC Net
CDC Net sometimes displays a message indicating that the browser used makes access impossible. The platform explicitly recommends switching to a recent version of Chrome, Firefox, or Safari. This is not a cosmetic warning: an outdated browser completely prevents the loading of the authentication page.
On the ground, feedback varies on this point. Some local authorities operate with IT parks whose updates are locked by the IT department. The agent finds themselves with a browser stuck in an old version, with no possibility of updating it themselves. The CDC Net portal then refuses the connection without an explicit error message, which wrongly points to an issue with the username or password.
Checks to make before contacting support
- Open CDC Net in another recent browser (latest version of Chrome or Firefox) to isolate the browser issue from the account issue
- Clear the cache and cookies of the browser used, as corrupted session data can block the authentication page in a loop
- Check that the site’s security certificate displays correctly (padlock in the address bar), as an unrecognized certificate may indicate a proxy or corporate firewall intercepting the connection
If the connection works from another browser, the problem is technical and local. No need to contact CDC Net support in this case: the solution lies with the IT department of the structure.
HID Approve application not enrolled: understanding the authentication refusal
The HID Approve application installed on the smartphone is not enough. It must be enrolled, meaning associated with the user’s CDC Net account through a specific activation process. A new phone with HID Approve downloaded but not enrolled will not receive any authentication notifications.
This scenario systematically occurs during a smartphone change. The user installs the application, expects to receive the validation request, and nothing happens. The old phone, meanwhile, is no longer in service.
Re-enrollment procedure after phone change
Re-enrollment cannot be done autonomously. It is necessary to contact the Banque des Territoires support via the form dedicated to non-connected users, specifying the client number and the new device. The processing time depends on the support load, but in the meantime, access to CDC Net remains blocked without a workaround.
For structures managing sensitive operations, it may be useful to designate a second authorized user on the account. The Banque des Territoires offers a system of continuity and temporary delegation accounts, which is still little used, allowing access to operations even when the main holder is blocked.
Blocked card PIN: a case distinct from mobile authentication
Some structures still use the ActivCard system, a physical device that generates a one-time code. The blockage occurs after several incorrect entries of the card’s PIN. This lockout is independent of smartphone authentication.
The difference with a HID Approve blockage is that unlocking an ActivCard goes through a distinct channel. It is useless to reinstall an application or change phones. The device itself must be reset, which requires intervention from technical support with user identification and the card’s serial number.
- Three consecutive incorrect PIN entries are usually enough to lock the card
- The unlocking code (PUK or equivalent) is not accessible online; it goes through support
- A defective device or one with a dead battery can produce invalid codes without the user realizing it, mimicking a PIN problem
Before declaring an incident, one can check that the device displays a readable and complete code by pressing the activation button. A partial display or a blank screen indicates a hardware problem, not an account issue.
Connection blocks to CDC Net can therefore be divided into three distinct categories: outdated phone and number, technical environment of the workstation, physical authentication device. Identifying the correct category before contacting support saves several days on the resolution time, especially during accounting closure periods when queues lengthen.