Konica Minolta bizhub 808 bizhub 958/808 Security Operations User Manual - Page 18

bizhub 958/808/758/bizhub PRO 958

1-14

1.4

Miscellaneous

1

Precautions for Use of Various Types of Applications

Comply with the following requirements when using the

Web Connection

or an application of various other

types

The administrator should make sure that the user observes the following requirements.

-

The password control function of each application stores the password that has been entered in the PC

being used. Disable the password management function of each application and perform an operation

without storing a password.

Use a web browser or an application of various other types that shows "*" or "

-

" for the password en-

tered.

-

Once the password has been entered, do not leave your PC idle without logging on.

-

Set the web browser so that cache files are not saved.

-

Do not access any other site once you have logged onto the machine with the

Web Connection

. Ac-

cessing any other site or a link included in e-mail, in particular, can lead to execution of an unintended

type of operation. Whenever access to any other site is necessary, be sure first to log off from the ma-

chine through the

Web Connection

.

-

Using the same password a number of times increases the risk of spoofing.

-

If a web browser such as Internet Explorer is used on the client PC side, "TLS v1.0" or more should be

used for the SSL setting.

-

Optional applications not described in this User’s Guide are not covered by certification of ISO15408.

Encrypting communications

This machine guarantees encrypted communication via IPsec.

IPsec setting

This machine offers a choice of two authentication methods of [Pre-Shared Key] and [Digital Signature] for

authenticating the remote machine with which to communicate.

When [Pre-Shared Key] is to be used, control the pre-shared key appropriately to ensure that it is not leaked

to any third party other than the remote machine with which to communicate. For the shared key, set a value

that consists of a combination of eight or more alphanumeric characters and that cannot be easily guessed.

Do not set a value that can be easily guessed from your birthday, employee identification number, and the

like.

[Digital Signature] has a higher security strength than [Pre-Shared Key].

The ISO15408 evaluation for the machine is performed on the basis of the [Pre-Shared Key].

[Main Mode] and [Aggressive Mode] are available in [Negotiation Mode] of [IKE Settings]. The default setting

is [Main Mode]. The administrator should operate the machine with the [Main Mode] setting.

Leaking the pre shared key for IPsec set on the MFP increases the risk of spoofing of the MFP, etc. Therefore,

set machine-specific pre shared keys and manage them safely.

Note that unencrypted communication can be established if the IPsec setting is not made over the whole ad-

dress range (0 to 255 for IPv4) and an IP address outside the range is assigned to a client PC.

Use the following browsers to ensure safety. Use of any of the following browsers achieves communication

that ensures confidentiality of the image data transmitted and received.

Microsoft Internet Explorer

-

9/10/11

Mozilla Firefox

-

20 or later

Microsoft Internet Explorer 11 is used for the ISO15408 evaluation for this machine.

Print functions

Only the following procedures are guaranteed for the print functions performed from the client PC.

-

Use IPPS printing for the print functions performed using the printer driver.

-

Use direct printing from the

Web Connection

for the print functions not performed via the printer driver.

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Administrators	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	8
1.2 Security Functions	11
Check Count Clear Conditions	11
1.3 Precautions for Operation Control	13
Roles of the Owner of the Machine	13
Roles and Requirements of the Administrator	13
Password Usage Requirements	13
External authentication server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	16
Precautions for using the printer driver	16
1.4 Miscellaneous	17
Password Rules	17
Precautions for Use of Various Types of Applications	18
Encrypting communications	18
IPsec setting	18
Print functions	18
IPP printing	19
Items of Data Cleared by Overwrite All Data Function	19
Fax functions	20
USB keyboard	20
Different types of boxes	20
Hardware and software used in the machine	21
Firmware integrity verification function	21
CS Remote Care function	21
Terminating a Session and Logging out	21
Authentication error during external server authentication	22
2 Administrator Operations	24
2.1 Accessing the Administrator Mode	24
2.1.1 Accessing the Administrator Mode	24
2.1.2 Accessing the User Mode	30
2.2 Enhancing the Security Function	34
2.2.1 Items cleared by HDD Format	36
2.2.2 Setting the Password Rules	37
2.2.3 Setting the Enhanced Security Mode	39
2.3 Protecting Machine from Illegal Firmware Update	42
Setting the FW Update (USB) Password	42
2.4 Preventing Unauthorized Access	43
Setting Prohibited Functions When Authentication Error	43
2.5 Canceling the Operation Prohibited State	45
Performing Release Setting	45
2.6 Setting the Authentication Method	47
2.6.1 Setting the Authentication Method	47
2.6.2 Setting the External Server	50
2.7 ID & Print Setting Function	53
Setting ID & Print	53
2.8 System Auto Reset Function	55
Setting the System Auto Reset function	55
2.9 User Setting Function	57
Making user setting	58
2.10 Account Track Setting Function	63
Making account setting	63
2.11 User Box Function	68
2.11.1 Setting the User Box	68
2.11.2 Changing the user/account attributes and box password	73
2.11.3 Setting Memory RX	78
2.12 Changing the Administrator Password	81
Changing the Administrator Password	81
2.13 Protecting Data in the HDD	84
2.13.1 Setting the Encryption Key (encryption word)	84
2.13.2 Changing the Encryption Key	88
2.13.3 Setting the Overwrite HDD Data	90
2.14 Overwrite All Data Function	92
Setting the Overwrite All Data function	92
2.15 Obtaining Job Log	95
2.15.1 Obtaining and deleting a Job Log	95
2.15.2 Downloading the Job Log data	97
Job Log data	99
2.16 Setting time/date in machine	106
2.16.1 Setting time/date	106
2.16.2 Setting daylight saving time	109
2.17 SSL Setting Function	111
2.17.1 Device Certificate Setting	111
2.17.2 SSL Setting	113
2.17.3 Removing a Certificate	114
2.18 TCP/IP Setting Function	115
2.18.1 Setting the IP Address	115
2.18.2 Registering the DNS Server	116
2.19 AppleTalk Setting Function	117
Making the AppleTalk Setting	117
2.20 E-Mail Setting Function	118
Setting the SMTP Server (E-Mail Server)	118
3 User Operations	120
3.1 User Authentication Function	120
3.1.1 Performing user authentication	120
3.1.2 Accessing the ID & Print Document	124
3.2 Change Password Function	126
Performing Change Password	126
3.3 Secure Print Function	129
Accessing the Secure Print Document	129
3.4 User Box Function	132
3.4.1 Setting the User Box	132
3.4.2 Changing the user/account attributes and box password	137
3.4.3 Accessing the User Box and User Box file	143
4 Application Software	148
4.1 Data Administrator	148
4.1.1 Accessing from Data Administrator	148
4.1.2 Setting the user authentication method	151
4.1.3 Changing the authentication mode	152
4.1.4 Making the user settings	154
4.1.5 Making the account settings	155
4.1.6 DNS Server Setting Function	156
4.1.7 AppleTalk Setting Function	157

Konica Minolta bizhub 808 bizhub 958/808 Security Operations User Manual - Page 18

Precautions for Use of Various Types of Applications, Encrypting communications, IPsec setting

Page 18 highlights