Canon imagePROGRAF TX-4100 MFP Z36 imagePROGRAF Network Security Guide
Canon imagePROGRAF TX-4100 MFP Z36 Manual
View all Canon imagePROGRAF TX-4100 MFP Z36 manuals
Add to My Manuals
Save this manual to your list of manuals |
Canon imagePROGRAF TX-4100 MFP Z36 manual content summary:
- Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 1
series NETWORK SECURITY GUIDE 1st Edition © CANON INC. 2021 - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 2
that are important to printer use, including access privileges and security. This guide serves as a common guide for all Canon Large Format Printers in the imagePROGRAF series. The models 560 / PRO-540 / PRO-520 / PRO-560S / PRO-540S Also see the online manual for each model. https://ij.start.canon 2 - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 3
Notations in This Guide Each chapter of this guide describes a function and its operation. Symbols The following symbols indicate descriptions of limitations or precautions to observe when handling the product. ! Important Important information to - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 4
Contents Overview...5 1 Before Using the Printer...7 1.1 Remote UI...7 Starting Remote UI...7 Items that Can Be Set from Remote UI 10 1.2 Changing/Setting Passwords...11 Changing/Setting the Administrator Password with Remote UI 11 Changing/Setting the Administrator Password with the Operation - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 5
Overview Sensitive information that is handled by information devices such as computers and printers is at times targeted by malicious third parties. However, in addition to unauthorized access and other such network attacks, carelessness or misoperation of the printer also have the potential to - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 6
Network Security You can make security settings for the network and protect valuable data and information. Firmware Updates Keep firmware updated to the latest version to enjoy smooth and secure printer operation. 6 - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 7
. Standard user mode allows the user to change only certain settings. Note Before using Remote UI, connect the printer to your network. See the online manual for your printer model for usable OSs and web browsers. Starting Remote UI Panel 1. Check the IP address of the printer (1) In the home - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 8
1 Before Using the Printer (3) Check [IPv4 address] on the displayed screen Remote UI 2. Open the web browser, and enter the IP address of the printer in the address bar Enter the IP address in the following format. http://XXX.XXX.XXX.XXX After gaining access, Remote UI starts, and a login screen is - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 9
1 Before Using the Printer 3. Select [Log in] A password authentication screen is displayed. ! Important If standard user mode is enabled, select whether to log on in administrator mode or in standard user mode. However, to change network and security settings you must log on in administrator - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 10
etc. are displayed. You can also access the support page and use the provided services. [Utilities] Perform printer maintenance such as cleaning. selection] (administrator mode) Change the display language. [Manual (Online)] Display the online manual. The computer on which Remote UI is open must - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 11
1 Before Using the Printer 1.2 Changing/Setting Passwords You can use Remote UI to check printer status and change settings over the network. Passwords can be set for both administrator mode and standard user mode. Logging on in administrator mode allows you to change all printer settings and to - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 12
] The administrator password is required when changing settings using the printer's operation panel, Remote UI, or other software. 6. Follow the onscreen instructions, enter the password and select [OK] 7. When the completion message is displayed, select [OK] Note After setting the administrator - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 13
1 Before Using the Printer Changing/Setting the Administrator Password with the Operation Panel Panel 1. In the home screen, select [Printer settings] 2. Select [Security settings] 3. Select [Administrator password settings] 4. Enter the administrator password in the entry screen, and select [OK] If - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 14
Remote UI 1. Start Remote UI Starting Remote UI 2. Select [Security] 3. Select [Standard user mode settings] 4. After a confirmation message is displayed, select [Yes] 5. Follow the onscreen instructions, enter the password and select [OK] 6. When the completion message is displayed, select [OK] 14 - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 15
Browser for SSL Communication How to install a root certificate depends on the web browser type and version. Microsoft Edge is described in this guide as an example. ! Important When installing a root certificate, check the web browser's URL box to ensure that the printer's IP address is correct - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 16
1 Before Using the Printer 4. After a download confirmation screen is displayed, select [Open] A [Certificate] screen is displayed. 5. Select [Install Certificate] A [Certificate Import Wizard] screen is displayed. 6. Select [Next] 7. Select [Place all certificates in the following store] 8. Select - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 17
2 Protection for Hard Disk Data Appropriately protecting data, such as by setting passwords to personal boxes, is recommended so as to prevent data saved on the printer's hard disk (print jobs and settings information) from inadvertently becoming accessible. Also be sure to erase data and take any - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 18
3. Select [Saved job] 2 Protection for Hard Disk Data 4. In the list, select the box 5. Select [Edit] 6. Select the [Set/change password] check box, and enter the password (7 digit number between 0000001 and 9999999) 7. Select [OK] 2.2 Completely Erasing Hard Disk Data Any data remaining in the - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 19
2 Protection for Hard Disk Data Panel 1. In the home screen, select [Printer settings] 2. Select [Hard disk settings] If the administrator password is set, enter the administrator password. 3. Select [Data deletion] 4. Select an erasing method [Fast] File management information for data on the hard - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 20
2 Protection for Hard Disk Data 2.3 Initializing Network Settings When reconfiguring network settings, first initialize the network settings from the printer's operation panel. Panel 1. In the home screen, select [LAN settings] If the administrator password is set, enter the administrator password. - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 21
2 Protection for Hard Disk Data 2.4 Initializing Settings Information Any personal information that has been registered to the printer is stored in the printer. To prevent leakage of information, initialize the printer's settings when it is being entrusted to others (when having it repaired, lending - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 22
2 Protection for Hard Disk Data Initializing from Remote UI Remote UI 1. Start Remote UI Starting Remote UI 2. Select [Printer settings] 3. Select [Initialize printer settings] 4. Check the onscreen message, and select [Yes] Initialization starts, and Remote UI disconnects. 22 - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 23
3 Network Security Eavesdropped communication, manipulated data, and identity theft by malicious third parties can cause serious damage. Network security to protect valuable data and information is described here. 3.1 Port Number Allocation 3.2 Enabling/Disabling the Interface 3.3 Enabling/ - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 24
OFF, it is necessary to allocate an IP address with a protocol other than DHCP or to set an IP address manually. ON Used for allocating an IPv6 address automatically. If set to OFF, it is necessary to use an address If set to OFF, it is necessary to correct the time on the printer manually. 24 - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 25
3 Network Security 3.2 Enabling/Disabling the Interface Of available Wi-Fi, Wireless Direct, and Wired LAN connections, only one connection can be enabled. Differing types of network connection cannot be used at the same time. Enabling/Disabling a Wi-Fi Connection Panel [LAN settings] [Wi-Fi] [ - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 26
3 Network Security 3.3 Enabling/Disabling Communication Protocols You can enable and disable use of communication protocols such as WSD, Bonjour, LPR, RAW, IPP, FTP, and SNMP. Use the printer's operation panel or Remote UI to enable or disable protocols. See "Starting Remote UI" for how to access - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 27
3 Network Security 3.4 Filtering to Restrict Communication Connecting communication devices, including your computer and Large Format Printer, to a network without appropriate security measures in place allows the risk of unintended and unauthorized access by a third party. Such risk can be reduced - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 28
3 Network Security 3.5 Encrypting Communication: SSL/TLS Set this encryption to increase the level of security for communication when the printer operates as a server (HTTP/IPP, etc.) A certificate and key pair is used in encrypted communication. Example of server authentication: Server (printer) - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 29
3 Network Security Patterns that can be used for registering a digital certificate for SSL/TLS communication are as follows. Select a pattern for registering the certificate. Use certificate issued by certificate authority (CA) NO YES Specify certificate parameters NO YES Issue certificate - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 30
3 Network Security (C) Register key and certificate (use an externally created certificate): You can use a key and certificate or CA certificate obtained from an issuing organization. Use Remote UI to upload the obtained key and certificate files. Remote UI [Security] [SSL/TLS settings] [Upload - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 31
3 Network Security ! Important To reset a generated server certificate, make the following setting in the home screen on the operation panel. Panel [LAN settings] [Wi-Fi], [Wireless Direct], or [Wired LAN] [Advanced] [Reset SSL certificates] [Settings] Note If it is not possible to connect to - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 32
3 Network Security 3.6 Settings for IEEE 802.1X Authentication IEEE 802.1X is one of several LAN standards, and is an authentication standard that enables authentication of a client using a networked communication control device as an authenticator. Authentication requires the following 3 elements. - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 33
3 Network Security Making IEEE 802.1X Settings 1. Enable the authentication method Set [Authentication] to [Enable] with the following step. Remote UI [Security] [IEEE802.1X settings] [Authentication] When [Enable] is selected, the following settings screen is displayed. 2. Set a Login name, - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 34
3 Network Security 3. Set an Authentication Method Select from [PEAP] / [EAP-TLS] / [EAP-TTLS]. [EAP-TLS] by default. Depending on the selected authentication method, additional settings may be available. When PEAP is selected • User name settings Set a user name up to 96 characters long to be used - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 35
When EAP-TTLS is selected 3 Network Security • Internal protocols used for authentication Select from [MSCHAPv2] / [PAP]. [MSCHAPv2] by default. • User name settings Set a user name up to 96 characters long to be used for authenticating connection to a network. • Password Set a password up to 24 - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 36
3 Network Security Registering Certificates 1. Register a client certificate When EAP-TLS is selected for the authentication method, it is necessary to upload (register) key and client certificates issued by a certificate authority with Remote UI. Remote UI [Security] [IEEE802.1X settings] [Key - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 37
IPv6IPsec • AH - HMAC-SHA-1-96 • ESP - HMAC-MD5-96 - DES-CBC - 3DES-CBC - AES-CBC (* 128, 192, and 256-bit key lengths supported) IKE-supporting protocols • IKEv1 • IKEv1 Phase1 - Main mode • Authentication method (IKEv1) - Pre-shared key (16 characters or less, 1-byte letters and numbers) • DH key - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 38
4 Appendix Describes how to update the printer's firmware and how to check the serial number. 4.1 Updating the Firmware 4.2 Checking the Printer's Serial Number 4.3 Algorithms and Formats for Registerable Keys and Certificates 4.1 Updating the Firmware When new firmware is released, it will be - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 39
4 Appendix 3. Select [Install update] 4. Select [Yes] 5. Check the message on the operation panel, and select [Start update] Updating the Firmware from Remote UI 1. Start Remote UI Starting Remote UI 2. Select [Firmware update] 3. Select [Install update] 4. Check the onscreen message, and select [ - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 40
4 Appendix 4.2 Checking the Printer's Serial Number The printer's serial number is 9 characters (4 letters followed by 5 numbers) and appears on a sticker on the printer. XXXX00000 Note The printer's serial number also appears on the warranty. 40 - Canon imagePROGRAF TX-4100 MFP Z36 | imagePROGRAF Network Security Guide - Page 41
RSA signature algorithm SHA-256 RSA public key algorithm (key length) RSA (2048 bits) DSA signature algorithm Not supported DSA public key algorithm (key length) Not supported ECDSA signature algorithm SHA-256 ECDSA public key algorithm (key length) ECDSA (P256 / P384 / P521) Certificate
series
NETWORK SECURITY GUIDE
1st Edition
© CANON INC. 2021