Konica Minolta bizhub C360 bizhub C220/C280/C360 Security Operations User Guid - Page 10

bizhub C360/C280/C220

1-6

1.4

Precautions for Operation Control

1

1.4

Precautions for Operation Control

This machine and the data handled by this machine should be used in an office environment that meets the

following conditions. The machine must be controlled for its operation under the following conditions to pro-

tect the data that should be protected.

Roles and Requirements of the Administrator

The Administrator should take full responsibility for controlling the machine, thereby ensuring that no improp-

er operations are performed.

<To Achieve Effective Security>

-

A person who is capable of taking full responsibility for controlling the machine should be appointed as

the Administrator to make sure that no improper operations are performed.

-

When using an SMTP server (mail server) or an DNS server, each server should be appropriately man-

aged by the Administrator and should be periodically checked to confirm that settings have not been

changed without permission.

Password Usage Requirements

The Administrator must control the Administrator Password, Encryption Key, auth-Password, priv-Password,

and WebDAV Server Password appropriately so that they may not be leaked. These passwords should not

be ones that can be easily guessed. The user, on the other hand, should control the User Box Password,

Secure Print Password, and User Password appropriately so that they may not be leaked. Again, these pass-

words should not be ones that can be easily guessed. For the Public User Box shared among a number of

users, the User Box Password should be appropriately controlled so that it may not be leaked to anyone who

is not the user of the Public User Box.

<To Achieve Effective Security>

-

Make absolutely sure that only the Administrator knows the Administrator Password, Encryption Key,

auth-Password, priv-Password, and WebDAV Server Password.

-

The Administrator must change the Administrator Password, Encryption Key, auth-Password, priv-

Password, and WebDAV Server Password at regular intervals.

-

The Administrator should make sure that any number that can easily be guessed from birthdays, em-

ployee identification numbers, and the like is not set for the Administrator Password, Account Pass-

word, Encryption Key, auth-Password, priv-Password, and WebDAV Server Password.

-

If a User Password or User Box Password has been changed, the Administrator should have the cor-

responding user change the password as soon as possible.

-

The Administrator should change the Account Password set for each account at regular intervals and,

should one be changed, he or she should immediately inform users who implement Account Track of

the new Account Password.

-

If the Administrator Password has been changed by the Service Engineer, the Administrator should

change the Administrator Password as soon as possible.

-

The Administrator should have users ensure that the passwords set for the User Authentication, Secure

Print, and User Box are known only by the user concerned.

-

The Administrator should have users who implement Account Authentication ensure that the Account

Password set for the account is known by the users implementing Account Authentication only.

-

The Administrator should make sure that only the users who share a Public User Box and Group User

Box know the password set for it.

-

The Administrator should have users change the passwords set for the User Authentication and User

Box at regular intervals.

-

The Administrator should make sure that any user does not set any number that can easily be guessed

from birthdays, employee identification numbers, and the like for the passwords set for the User Au-

thentication, Secure Print, and User Box.

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	7
1.2 Security Functions	8
Check Count Clear Conditions	8
1.3 Data to be Protected	9
1.4 Precautions for Operation Control	10
Roles and Requirements of the Administrator	10
Password Usage Requirements	10
Network Connection Requirements for the Machine	11
User information control server control requirements	11
Security function operation setting operating requirements	11
Operation and control of the machine	11
Machine Maintenance Control	11
1.5 Miscellaneous	12
Password Rules	12
Precautions for Use of Various Types of Applications	12
Encrypting communications	13
IPP printing	13
Items of Data Cleared by Overwrite All Data Function	14
Fax functions	15
Bluetooth communication	15
2 Administrator Operations	17
2.1 Accessing the Administrator Settings	17
2.1.1 Accessing the Administrator Settings	17
2.1.2 Accessing the User Mode	19
2.2 Enhancing the Security Function	23
2.2.1 Items cleared by HDD Format	25
2.2.2 Setting the Enhanced Security Mode	25
2.3 Preventing Unauthorized Access	28
Setting Prohibited Functions When Authentication Error	28
2.4 Canceling the Operation Prohibited State	30
Performing Release Setting	30
2.5 Setting the Authentication Method	32
2.5.1 Setting the Authentication Method	32
2.5.2 Setting the External Server	34
2.6 ID & Print Setting Function	36
Setting ID & Print	36
2.7 System Auto Reset Function	38
Setting the System Auto Reset function	38
2.8 User Setting Function	40
Making user setting	40
2.9 Account Track Setting Function	46
Making account setting	46
2.10 User Box Function	51
2.10.1 Setting the User Box	51
2.10.2 Changing the user attributes and account attributes	57
2.11 Changing the Administrator Password	63
Changing the Administrator Password	63
2.12 Protecting Data in the HDD	65
2.12.1 Setting the Encryption Key (encryption word)	65
2.12.2 Changing the Encryption Key	70
2.13 Overwrite All Data Function	72
Setting the Overwrite All Data function	72
2.14 SSL Setting Function	74
2.14.1 Device Certificate Setting	74
2.14.2 SSL Setting	76
2.14.3 Removing a Certificate	77
2.15 S/MIME Communication Setting Function	78
2.15.1 Setting the S/MIME Communication	78
2.15.2 Registering the certificate	82
2.16 SNMP Setting Function	84
2.16.1 Changing the auth-password and priv-password	84
2.16.2 SNMP access authentication function	91
2.16.3 SNMP v3 setting function	91
2.16.4 SNMP network setting function	92
2.17 WebDAV Function	93
Setting the WebDAV Server Password	93
2.18 PC-Fax RX Setting Function	97
PC-Fax RX Setting	97
2.19 TSI User Box Setting Function	101
TSI User Box Setting	101
2.20 TCP/IP Setting Function	105
2.20.1 Setting the IP Address	105
2.20.2 Registering the DNS Server	106
2.21 NetWare Setting Function	107
Making the NetWare Setting	107
2.22 SMB Setting Function	108
Setting the NetBIOS Name	108
2.23 AppleTalk Setting Function	109
Making the AppleTalk Setting	109
2.24 E-Mail Setting Function	110
Setting the SMTP Server (E-Mail Server)	110
3 User Operations	112
3.1 User Authentication Function	112
3.1.1 Performing user authentication	112
3.1.2 Accessing the ID & Print Document	120
3.2 Change Password Function	122
Performing Change Password	122
3.3 Secure Print Function	125
Accessing the Secure Print Document	125
3.4 User Box Function	128
3.4.1 Setting the User Box	128
3.4.2 Changing the User Box Password and user attributes and account attributes	134
3.4.3 Accessing the User Box and User Box file	142
3.4.4 Sending S/MIME box files	146
4 Application Software	149
4.1 PageScope Data Administrator	149
4.1.1 Accessing from PageScope Data Administrator	149
4.1.2 Setting the user authentication method	151
4.1.3 Changing the authentication mode	153
4.1.4 Making the user settings	156
4.1.5 Making the account settings	157
4.1.6 Registering the certificate	158
4.1.7 SNMP Setting Function	160
4.1.8 DNS Server Setting Function	162
4.1.9 NetWare Setting Function	163
4.1.10 SMB Setting Function	164
4.1.11 AppleTalk Setting Function	165
4.1.12 E-Mail Setting Function	166
4.2 PageScope Box Operator	167
4.2.1 Accessing the User Box	167
4.2.2 Creating a User Box	169
4.2.3 Changing the User Box properties (user attributes, account attributes)	170
4.2.4 Accessing the User Box file	172
4.3 HDD TWAIN driver	173
Accessing from the HDD TWAIN driver	173
4.4 PageScope Direct Print	175
Printing through PageScope Direct Print	175
4.5 HDD Backup Utility	177
4.5.1 Backup	177

Konica Minolta bizhub C360 bizhub C220/C280/C360 Security Operations User Guid - Page 10

Precautions for Operation Control - administrator password

Page 10 highlights