Home » Konica Minolta Manuals » Multifunction Devices » Konica Minolta bizhub C550 » Manual Viewer

Konica Minolta bizhub C550 bizhub C451/C550 Security Operations User Manual - Page 24

Enhancing the Security Function

View all Konica Minolta bizhub C550 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 24 highlights

Administrator Operations Chapter 2 Administrator Operations 2 2.2 Enhancing the Security Function When access to the Administrator of the machine by the Administrator Settings via the control panel is authenticated, the machine enables setting of the Enhanced Security Mode that allows settings for enhancing each of different security functions to be converted all at once. In the Enhanced Security Mode, the machine allows selection of whether to use the Enhanced Security Mode or not. If the Enhanced Security Mode is set to [ON], a count is taken of the number of unauthorized accesses to the Administrator Settings, User Authentication, Account Track, SNMP authentication, all Secure Print Documents, and all User Boxes. A function is also set that determines whether each password meets predetermined requirements. The security function is thus enhanced in the Enhanced Security Mode. The following settings must first be made before the Enhanced Security Mode is set to [ON]. 2 Note First, set the Encryption Key. To set the Encryption Key, HDD Format must first be executed. Execution of the HDD Format clears various setting values. For details of items that are cleared by HDD Format, see "Items cleared by HDD Format" on page 2-10. If both the HDD Lock Password and Encryption Key have been set, it is not possible to cancel the setting of either one of these. If initialization is executed by the Service Engineer, set the Administrator Password and turn [ON] the Enhanced Security Mode again. Settings to be Made in Advance Administrator Password User Authentication HDD Lock Password, Encryption Key Release Time Settings Certificate for SSL Image Controller Setting Management Function Choice CE Password CE Authentication CS Remote Care HDD Operation Ban Release Time Description An 8-digit password that meets the Password Rules. The factory setting is "12345678." Set to either [ON (MFP)] or [ON (External Server)] (Active Directory). Set the 20-digit HDD Lock Password or Encryption Key, or both. (Encryption Key can be set only when the Security Kit SC-503 is mounted). Set the release time to 5 min. or more. Register the self-signed certificate for SSL communications. Calls for setting made by the Service Engineer. For details, ask your Service Representative. Setting the Enhanced Security Mode to [ON] changes the setting values of the following functions. Function Name Password Rules Prohibited Functions When Authentication Error Public User Access User List Print Without Authentication User Box Admin. Setting SSL FTP Server SNMPv1/v2c Factory Setting Invalid Mode 1 Restrict OFF Restrict Restrict OFF ON Read/Write enabled When Enhanced Security Mode is set to [ON] Enable (not to be changed) Mode 2 (not to be changed) Three times is set. * In association with Confidential Document Access Method, the method is changed from authentication using Secure Print ID and password (Mode 1) to that using the password with the secure document first narrowed down by Secure Print ID (Mode 2). Restrict (not to be changed) OFF (not to be changed) Restrict (not to be changed) Restrict (not to be changed) ON (not to be changed) OFF (not to be changed) Only Read is enabled (not to be changed) C550/C451 2-9

Section	Page
Contents	2
1 Security	6
1.1 Introduction	7
Compliance with the ISO15408 Standard	7
Operating Precautions	7
INSTALLATION CHECKLIST	8
1.2 Security Functions	9
1.2.1 Check Count Clear Conditions	9
1.3 Data to be Protected	10
1.4 Precautions for Operation Control	11
Roles and Requirements of the Administrator	11
Password Usage Requirements	11
Network Connection Requirements for the Machine	12
User information control server control requirements	12
Security function operation setting operating requirements	12
Operation and control of the machine	12
Machine Maintenance Control	12
1.5 Miscellaneous	13
Password Rules	13
Precautions for Use of Various Types of Applications	13
Encrypting communications	13
IPP printing	14
Types of Data Cleared by Overwrite All Data Function	15
2 Administrator Operations	16
2.1 Accessing the Administrator Settings	17
2.1.1 Accessing the Administrator Settings	17
<From the Control Panel>	18
2.1.2 Accessing the User Mode	20
<From the Control Panel>	20
<From PageScope Web Connection>	22
2.2 Enhancing the Security Function	24
2.2.1 Items cleared by HDD Format	25
2.2.2 Setting the Enhanced Security Mode	26
<Setting can be made only from the control panel>	26
2.3 Preventing Unauthorized Access	29
2.3.1 Setting Prohibited Functions When Authentication Error	29
<Setting can be made only from the control panel>	30
2.4 Canceling the Operation Prohibited State	32
2.4.1 Performing Release Setting	32
<Setting can be made only from the control panel>	32
2.5 Setting the Authentication Method	34
2.5.1 Setting the Authentication Method	34
<Setting can be made only from the control panel>	34
2.5.2 Setting the External Server	37
<Setting can be made only from the control panel>	37
2.6 System Auto Reset Function	39
2.6.1 Setting the System Auto Reset function	39
<Setting can be made only from the control panel>	39
2.7 User Setting Function	41
2.7.1 Making user setting	42
<From the Control Panel>	42
<From PageScope Web Connection>	47
2.8 Account Track Setting Function	49
2.8.1 Making account setting	49
<From the Control Panel>	49
<From PageScope Web Connection>	53
2.9 User Box Function	55
2.9.1 Setting the User Box	55
<From the Control Panel>	55
<From PageScope Web Connection>	59
2.9.2 Changing the user attributes and account attributes	61
<From the Control Panel>	61
<From PageScope Web Connection>	65
2.10 Changing the Administrator Password	68
2.10.1 Changing the Administrator Password	68
<Setting can be made only from the control panel>	68
2.11 Protecting Data in the HDD	71
2.11.1 Setting the HDD Lock Password	71
<Setting can be made only from the control panel>	72
2.11.2 Changing the HDD Lock Password	74
<Setting can be made only from the control panel>	74
2.11.3 Setting the Encryption Key (encryption word)	77
<Setting can be made only from the control panel>	77
2.11.4 Changing the Encryption Key	83
<Setting can be made only from the control panel>	83
2.12 Overwrite All Data Function	86
2.12.1 Setting the Overwrite All Data function	86
<Setting can be made only from the control panel>	87
2.13 SSL Setting Function	89
2.13.1 Setting the SSL	89
<Setting can be made only from PageScope Web Connection>	89
2.13.2 Changing the Encryption Strength Setting	92
<Setting can be made only from PageScope Web Connection>	92
2.13.3 Changing the Mode Using SSL	93
<Setting can be made only from PageScope Web Connection>	93
2.13.4 Removing a Certificate	94
<Setting can be made only from PageScope Web Connection>	94
2.14 S/MIME Communication Setting Function	95
2.14.1 Setting the S/MIME Communication	95
<From the Control Panel>	95
<From PageScope Web Connection>	98
2.14.2 Registering the certificate	100
<From PageScope Web Connection>	100
2.15 SNMP Setting Function	102
2.15.1 Changing the auth-password and priv-password	102
<From the Control Panel>	102
<From PageScope Web Connection>	106
2.15.2 SNMP access authentication function	107
2.15.3 SNMP v3 setting function	107
2.15.4 SNMP network setting function	108
2.16 TCP/IP Setting Function	109
2.16.1 Setting the IP Address	109
<From the Control Panel>	109
<From PageScope Web Connection>	109
2.16.2 Registering the DNS Server	110
<From the Control Panel>	110
<From PageScope Web Connection>	110
2.17 NetWare Setting Function	111
2.17.1 Making the NetWare Setting	111
<From the Control Panel>	111
<From PageScope Web Connection>	111
2.18 SMB Setting Function	112
2.18.1 Setting the NetBIOS Name	112
<From the Control Panel>	112
<From PageScope Web Connection>	112
2.19 AppleTalk Setting Function	113
2.19.1 Making the AppleTalk Setting	113
<From the Control Panel>	113
<From PageScope Web Connection>	113
2.20 E-Mail Setting Function	114
2.20.1 Setting the SMTP Server (E-Mail Server)	114
<From the Control Panel>	114
<From PageScope Web Connection>	114
3 User Operations	116
3.1 User Authentication Function	117
3.1.1 Performing user authentication	117
<From the Control Panel>	118
<From PageScope Web Connection>	122
3.2 Change Password Function	124
3.2.1 Performing Change Password	124
<From the Control Panel>	124
<From PageScope Web Connection>	127
3.3 Secure Print Document Function	128
3.3.1 Accessing the Secure Print Document	128
<Setting can be made only from the control panel>	129
3.4 User Box Function	132
3.4.1 Setting the User Box	132
<From the Control Panel>	132
<From PageScope Web Connection>	136
3.4.2 Changing the User Box Password and user attributes and account attributes	138
<From the Control Panel>	138
<From PageScope Web Connection>	143
3.4.3 Accessing the User Box and User Box file	147
<From the Control Panel>	148
<From PageScope Web Connection>	150
3.4.4 Sending S/MIME box files	152
<From the Control Panel>	152
4 Application Software	154
4.1 PageScope Data Administrator	155
4.1.1 Gaining access from PageScope Data Administrator	155
<From the PC>	155
4.1.2 Setting the user authentication method	157
<From the PC>	157
4.1.3 Changing the authentication mode	159
<From the PC>	159
4.1.4 Making the user settings	162
<From the PC>	162
4.1.5 Making the account settings	164
<From the PC>	164
4.1.6 Registering the certificate	166
<From the PC>	166
4.2 PageScope Box Operator	168
4.2.1 Accessing User Box	168
<From the PC>	168
4.2.2 Creating a User Box	170
<From the PC>	170
4.2.3 Changing User Box properties (user attributes, account attributes)	172
<From the PC>	172
4.2.4 Accessing the User Box file	174
<From the PC>	174
4.3 PageScope Job Spooler	175
4.3.1 Accessing the User Box	176
<From the PC>	176
4.4 HDD TWAIN driver	180
4.4.1 Accessing from the HDD TWAIN driver	180
<From the PC>	180
4.5 PageScope Direct Print	182
4.5.1 Printing through PageScope Direct Print	182
<From the PC>	182
4.6 HDD Backup Utility	184
4.6.1 Backup	184
<From the PC>	184
4.6.2 Restore	188

Match case Limit results 1 per page

C550/C451

2-9

Administrator Operations

Chapter 2

2.2

Enhancing the Security Function

When access to the Administrator of the machine by the Administrator Settings via the control panel is au-

thenticated, the machine enables setting of the Enhanced Security Mode that allows settings for enhancing

each of different security functions to be converted all at once.

In the Enhanced Security Mode, the machine allows selection of whether to use the Enhanced Security Mode

or not. If the Enhanced Security Mode is set to [ON], a count is taken of the number of unauthorized accesses

to the Administrator Settings, User Authentication, Account Track, SNMP authentication, all Secure Print

Documents, and all User Boxes. A function is also set that determines whether each password meets prede-

termined requirements. The security function is thus enhanced in the Enhanced Security Mode.

The following settings must first be made before the Enhanced Security Mode is set to [ON].

Note

First, set the Encryption Key. To set the Encryption Key, HDD Format must first be executed. Execution

of the HDD Format clears various setting values. For details of items that are cleared by HDD Format,

see "Items cleared by HDD Format" on page 2-10.

If both the HDD Lock Password and Encryption Key have been set, it is not possible to cancel the set-

ting of either one of these.

If initialization is executed by the Service Engineer, set the Administrator Password and turn [ON] the

Enhanced Security Mode again.

Setting the Enhanced Security Mode to [ON] changes the setting values of the following functions.

Settings to be Made in Advance

Description

Administrator Password

An 8-digit password that meets the Password Rules.

The factory setting is "12345678."

User Authentication

Set to either [ON (MFP)] or [ON (External Server)] (Active Directory).

HDD Lock Password, Encryption Key

Set the 20-digit HDD Lock Password or Encryption Key, or both. (Encryption

Key can be set only when the Security Kit SC-503 is mounted).

Release Time Settings

Set the release time to 5 min. or more.

Certificate for SSL

Image Controller Setting

Calls for setting made by the Service Engineer. For details, ask your Service

Representative.

Management Function Choice

CE Password

CE Authentication

CS Remote Care

HDD

Operation Ban Release Time

Function Name

Factory Setting

When Enhanced Security Mode is set to [ON]

Password Rules

Invalid

Enable (not to be changed)

Prohibited Functions When

Authentication Error

Mode 1

Mode 2 (not to be changed)

Three times is set.

* In association with Confidential Document Access Meth-

od, the method is changed from authentication using Se-

cure Print ID and password (Mode 1) to that using the

password with the secure document first narrowed down

by Secure Print ID (Mode 2).

Public User Access

Restrict

Restrict (not to be changed)

User List

OFF

OFF (not to be changed)

Print Without Authentication

Restrict

Restrict (not to be changed)

User Box Admin. Setting

Restrict

Restrict (not to be changed)

SSL

OFF

ON (not to be changed)

FTP Server

OFF (not to be changed)

SNMPv1/v2c

Read/Write enabled

Only Read is enabled (not to be changed)