Konica Minolta bizhub 4752 bizhub 4752/4052 Security Function User Guide - Page 21

bizhub 4752/4052

1-17

1.4

Miscellaneous

1

Different types of boxes

A box may be a user box or a system box. The user can store documents in the User Box. Also, the user can

print a file from the User Box or send a file to another user. The System Box is used by the system to tem-

porarily store files when the user uses the facsimile or print function together with the file storage function of

the box.

The User Box (*) cannot be used under the operation and control of this machine.

Hardware and software used in the machine

The following lists the software, hardware, and their versions used for the ISO15408 evaluation for this ma-

chine and they are the same as those listed on the security target.

The ISO15408 evaluation assumes that the HDD is mounted in the machine. Any configuration not including

the HDD is not guaranteed by the ISO15408 evaluation.

The user should appropriately manage the hardware and software used with the machine on his or her own

responsibility.

Firmware integrity verification function

When the

main power switch

is turned ON with the Enhanced Security Mode set to [ON], the machine

checks the encryption key and the hash value to thereby determine that its firmware is fully operational.

If a fault occurs in the firmware, a malfunction screen appears when the machine is started, warning that a

fault has occurred. To reset the fault condition, turn [OFF] the Enhanced Security Mode and restart the ma-

chine, or update the firmware. For more details, consult your Service Representative.

Type

Description

Public User Box *

This is the public box in which all users can store documents and use

them. Note that a password is set for the box and the set password

needs to be entered before access can be gained to the box.

Personal User Box *

This is a personal box. Only users who have logged in to the system

can store and use documents in the Personal User Box.

Group User Box *

This is a group box. Only users belonging to the same department (or

group) can store and use documents in the Group User Box.

Secure Print Box

When you print a document from the PC or when you select the Se-

cure Print function using the printer driver, this data file is stored in the

Secure Print User Box.

Memory RX Box

When a facsimile is received by the Memory RX function, it is stored

in the Memory RX User Box.

ID & Print Box

When you print a document from the PC, the files transferred with the

ID & Print function are stored in the ID & Print User Box.

Annotation User Box

When a stored file is printed out or sent to another user, its date, time

and any annotations are added to this box automatically.

Password Encrypted PDF Box

When a password protected PDF file is printed out or stored in the

User Box, the file is stored in the Password Encrypted PDF User Box.

Hardware/software

Version, etc.

FAX Kit

FK-517

Printer Driver

PCL: Ver. 9.2.9.0

PS: Ver. 9.2.9.0

XPS: Ver. 9.2.9.0

Data Administrator with De-

vice Set-Up and Utilities

Ver. 1.0.09000

Data Administrator

Ver. 4.1.41000

External authentication server

Active directory mounted on Windows Server 2012 R2 Standard

DNS server

Windows Server 2012 R2 Standard

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Administrators	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	8
1.2 Security Functions	11
Check Count Clear Conditions	11
1.3 Precautions for Operation Control	13
Roles of the Owner of the Machine	13
Roles and Requirements of the Administrator	13
Password Usage Requirements	13
External authentication server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	16
Precautions for using the printer driver	16
1.4 Miscellaneous	17
Password Rules	17
Precautions for Use of Various Types of Applications	18
Encrypting communications	18
IPsec setting	18
Print functions	19
IPP printing	19
Items of Data Cleared by Overwrite All Data Function	20
USB keyboard	20
Different types of boxes	21
Hardware and software used in the machine	21
Firmware integrity verification function	21
CS Remote Care function	22
Terminating a Session and Logging out	22
Authentication error during external server authentication	22
2 Administrator Operations	24
2.1 Accessing the Administrator Mode	24
2.1.1 Accessing the Administrator Mode	24
2.1.2 Accessing the User Mode	30
2.2 Enhancing the Security Function	34
2.2.1 Items cleared by HDD Format	36
2.2.2 Setting the Password Rules	37
2.2.3 Setting the Enhanced Security Mode	39
2.3 Protecting Machine from Illegal Firmware Update	42
Setting the FW Update (USB) Password	42
2.4 Preventing Unauthorized Access	45
Setting Prohibited Functions When Authentication Error	45
2.5 Canceling the Operation Prohibited State	47
Performing Release Setting	47
2.6 Setting the Authentication Method	49
2.6.1 Setting the Authentication Method	49
2.6.2 Setting the External Server	52
2.7 ID & Print Setting Function	54
Setting ID & Print	54
2.8 Auth. Operation Setting when print Documents are Stored Function	56
Setting Auth. Operation Setting when print Documents are Stored Function	56
2.9 System Auto Reset Function	57
Setting the System Auto Reset function	57
2.10 User Setting Function	59
Making user setting	60
2.11 Account Track Setting Function	65
Making account setting	65
2.12 User Box Function	70
2.12.1 Setting the User Box	70
2.12.2 Changing the user/account attributes and box password	75
2.12.3 Setting Memory RX	80
2.13 Changing the Administrator Password	83
Changing the Administrator Password	83
2.14 Protecting Data in the HDD	86
2.14.1 Setting the Encryption Key (encryption word)	86
2.14.2 Changing the Encryption Key	90
2.14.3 Setting the Overwrite HDD Data	92
2.15 Overwrite All Data Function	94
Setting the Overwrite All Data function	94
2.16 Obtaining Job Log	96
2.16.1 Obtaining and deleting a Job Log	96
2.16.2 Downloading the Job Log data	99
Job Log data	101
2.17 Setting time/date in machine	110
2.17.1 Setting time/date	110
2.17.2 Setting daylight saving time	113
2.18 SSL Setting Function	115
2.18.1 Device Certificate Setting	115
2.18.2 SSL Setting	117
2.18.3 Removing a Certificate	118
2.19 TCP/IP Setting Function	119
2.19.1 Setting the IP Address	119
2.19.2 Registering the DNS Server	120
2.20 E-Mail Setting Function	121
Setting the SMTP Server (E-Mail Server)	121
3 User Operations	123
3.1 User Authentication Function	123
3.1.1 Performing user authentication	123
3.1.2 Accessing the ID & Print Document	127
3.2 Change Password Function	128
Performing Change Password	128
3.3 Secure Print Function	131
Accessing the Secure Print Document	131
3.4 User Box Function	134
3.4.1 Setting the User Box	134
3.4.2 Changing the user/account attributes and box password	139
3.4.3 Accessing the User Box and User Box file	145
4 Application Software	151
4.1 Data Administrator	151
4.1.1 Accessing from Data Administrator	151
4.1.2 Setting the user authentication method	154
4.1.3 Changing the authentication mode	155
4.1.4 Making the user settings	157
4.1.5 Making the account settings	158
4.1.6 DNS Server Setting Function	159

Konica Minolta bizhub 4752 bizhub 4752/4052 Security Function User Guide - Page 21

Different types of boxes, Hardware and software used in the machine

Page 21 highlights