Konica Minolta bizhub C360 bizhub C220/C280/C360 Security Operations User Guid - Page 13

bizhub C360/C280/C220

1-9

1.5

Miscellaneous

1

Encrypting communications

The following are the cryptographic algorithms of key exchange and communications encryption systems

supported in generation of encryption keys.

-

TLS_RSA_WITH_RC4_128_MD5

-

TLS_RSA_WITH_3DES_EDE_CBC_SHA

-

TLS_RSA_WITH_AES_128_CBC_SHA

-

TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA

-

TLS_DHE_RSA_WITH_AES_256_CBC_SHA

NOTICE

No algorithms can be selected during generation of encryption keys. SSL v3 is automatically selected for the

SSL setting according to the application and browser. Do not therefore change the setting manually to SSL

v2.

Use the following browsers to ensure SSL encryption communication with appropriate strength. Use of any

of the following browsers achieves SSL encryption communication that ensures confidentiality of the image

data transmitted and received.

Windows 98, Me, NT4.0, 2000, XP, Server2003

-

Recommended is Microsoft "Internet Explorer 6" or later.

If "Internet Explorer 5.x" is used, Microsoft XML parser "MSXML 3.x" or later must be installed.

-

Recommended is Netscape Navigator 7.02 or later.

-

Recommended is Mozilla Firefox 1.0 or later.

Macintosh MacOS 8.x, 9.x, MacOS X

-


-


Linux

-


-


SSL encryption communication with confidentiality properly maintained can be achieved in image data trans-

mitted and received in any of the following applications.

-

PageScope Box Operator

-

HDD TWAIN

-

PageScope Direct Print

-

HDD Backup Utility

NOTICE

SSL encryption communication is not applicable to transmission of Secure Print in PageScope Direct Print.

IPP printing

IPP (Internet Printing Protocol) is a function that allows Secure Print Documents and image data stored in

boxes to be printed via the Internet by using the HTTP (HyperText Transfer Protocol) of the TCP/IP Protocol.

IPPS (IPP over SSL/TLS) is the type of IPP that performs the SSL encryption communication.

<IPP setting on Windows Vista>

Windows Vista, which offers enhanced security functions, gives a certificate error message if the SSL certif-

icate is one that is not issued by a certification body. In such cases, it becomes necessary to register with

Windows Vista the certificate of this machine as that issued by a reliable party for the computer account.

First, register Host Name and IP address of this machine in the DNS server in advance. Then, in TCP/IP Set-

tings of PageScope Web Connection, set the DNS Host Name and DNS Default Domain Name registered

with the DNS server.

It should also be noted that, for the certificate to be imported, a certificate for SSL encryption communication

should be registered in PageScope Web Connection and exported in advance as the certificate including the

public key.

1

From "Continue to this website," call the PageScope Web Connection window to the screen.

2

Click "Certificate Error" to display the certificate. Then, click "Install Certificate" to install the certificate.

3

Display the physical stores. Then, deploy the certificate, which has earlier been exported, in "Local

Computer" of "Trusted Root Certification Authorities" to thereby import the certificate.

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	7
1.2 Security Functions	8
Check Count Clear Conditions	8
1.3 Data to be Protected	9
1.4 Precautions for Operation Control	10
Roles and Requirements of the Administrator	10
Password Usage Requirements	10
Network Connection Requirements for the Machine	11
User information control server control requirements	11
Security function operation setting operating requirements	11
Operation and control of the machine	11
Machine Maintenance Control	11
1.5 Miscellaneous	12
Password Rules	12
Precautions for Use of Various Types of Applications	12
Encrypting communications	13
IPP printing	13
Items of Data Cleared by Overwrite All Data Function	14
Fax functions	14
2 Administrator Operations	16
2.1 Accessing the Administrator Settings	16
2.1.1 Accessing the Administrator Settings	16
2.1.2 Accessing the User Mode	18
2.2 Enhancing the Security Function	22
2.2.1 Items cleared by HDD Format	24
2.2.2 Setting the Enhanced Security Mode	24
2.3 Preventing Unauthorized Access	27
Setting Prohibited Functions When Authentication Error	27
2.4 Canceling the Operation Prohibited State	29
Performing Release Setting	29
2.5 Setting the Authentication Method	31
2.5.1 Setting the Authentication Method	31
2.5.2 Setting the External Server	33
2.6 ID & Print Setting Function	35
Setting ID & Print	35
2.7 System Auto Reset Function	37
Setting the System Auto Reset function	37
2.8 User Setting Function	39
Making user setting	39
2.9 Account Track Setting Function	45
Making account setting	45
2.10 User Box Function	50
2.10.1 Setting the User Box	50
2.10.2 Changing the user attributes and account attributes	56
2.11 Changing the Administrator Password	62
Changing the Administrator Password	62
2.12 Protecting Data in the HDD	64
2.12.1 Setting the Encryption Key (encryption word)	64
2.12.2 Changing the Encryption Key	69
2.13 Overwrite All Data Function	71
Setting the Overwrite All Data function	71
2.14 SSL Setting Function	73
2.14.1 Device Certificate Setting	73
2.14.2 SSL Setting	75
2.14.3 Removing a Certificate	76
2.15 S/MIME Communication Setting Function	77
2.15.1 Setting the S/MIME Communication	77
2.15.2 Registering the certificate	81
2.16 SNMP Setting Function	83
2.16.1 Changing the auth-password and priv-password	83
2.16.2 SNMP access authentication function	90
2.16.3 SNMP v3 setting function	90
2.16.4 SNMP network setting function	91
2.17 WebDAV Function	92
Setting the WebDAV Server Password	92
2.18 PC-Fax RX Setting Function	96
PC-Fax RX Setting	96
2.19 TSI User Box Setting Function	100
TSI User Box Setting	100
2.20 TCP/IP Setting Function	104
2.20.1 Setting the IP Address	104
2.20.2 Registering the DNS Server	105
2.21 NetWare Setting Function	106
Making the NetWare Setting	106
2.22 SMB Setting Function	107
Setting the NetBIOS Name	107
2.23 AppleTalk Setting Function	108
Making the AppleTalk Setting	108
2.24 E-Mail Setting Function	109
Setting the SMTP Server (E-Mail Server)	109
3 User Operations	111
3.1 User Authentication Function	111
3.1.1 Performing user authentication	111
3.1.2 Accessing the ID & Print Document	119
3.2 Change Password Function	120
Performing Change Password	120
3.3 Secure Print Function	123
Accessing the Secure Print Document	123
3.4 User Box Function	126
3.4.1 Setting the User Box	126
3.4.2 Changing the User Box Password and user attributes and account attributes	132
3.4.3 Accessing the User Box and User Box file	140
3.4.4 Sending S/MIME box files	144
4 Application Software	147
4.1 PageScope Data Administrator	147
4.1.1 Accessing from PageScope Data Administrator	147
4.1.2 Setting the user authentication method	149
4.1.3 Changing the authentication mode	151
4.1.4 Making the user settings	154
4.1.5 Making the account settings	155
4.1.6 Registering the certificate	156
4.1.7 SNMP Setting Function	158
4.1.8 DNS Server Setting Function	160
4.1.9 NetWare Setting Function	161
4.1.10 SMB Setting Function	162
4.1.11 AppleTalk Setting Function	163
4.1.12 E-Mail Setting Function	164
4.2 PageScope Box Operator	165
4.2.1 Accessing the User Box	165
4.2.2 Creating a User Box	167
4.2.3 Changing the User Box properties (user attributes, account attributes)	168
4.2.4 Accessing the User Box file	170
4.3 HDD TWAIN driver	171
Accessing from the HDD TWAIN driver	171
4.4 PageScope Direct Print	173
Printing through PageScope Direct Print	173
4.5 HDD Backup Utility	175
4.5.1 Backup	175

Konica Minolta bizhub C360 bizhub C220/C280/C360 Security Operations User Guid - Page 13

Encrypting communications, IPP printing

Page 13 highlights