Home » Konica Minolta Manuals » Multifunction Devices » Konica Minolta bizhub C552 » Manual Viewer

Konica Minolta bizhub C552 bizhub C452/C552/C552DS/C652/C652DS Network Adminis - Page 33

Registering the certificate of this machine for SSL, communications

View all Konica Minolta bizhub C552 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 33 highlights

2.7 Registering the certificate of this machine for SSL communications 2 2.7 Registering the certificate of this machine for SSL communications Register the certificate of this machine (device certificate) to configure SSL communication settings. The device certificate is registered in this machine at the time of shipment; therefore, SSL-encrypted communication is enabled immediately after installation. This machine allows you to manage multiple device certificates. To register a new device certificate with this machine, create a self-signed certificate, or ask a certificate authority (CA) and install the issued certificate. You can also import an exported device certificate. When using this machine for the following purposes, you can encrypt a communication from a client computer to this machine using SSL. For details, refer to the relevant reference page. - "Using PageScope Web Connection" (p. 2-8) - "Print (IPPS)" (p. 2-97) - "Using Web services to secure communication from Vista/Server 2008 to this machine via SSL" (p. 2-112) - "Using IEEE802.1X authentication (for EAP-TLS)" (p. 2-166) - "Linking an OpenAPI system with this machine" (p. 2-173) - "Using the FTP server and WebDAV server functions (WebDAV server function only)" (p. 2-178) Also, if this machine is used for any of the following purposes, this machine submits (attaches) a device certificate that has been registered in this machine. For details, refer to the relevant reference page. - "Sending scanned data by E-mail (with digital signature)" (p. 2-54) - "Using IEEE802.1X authentication (for EAP-TLS or PEAP)" (p. 2-166) - "Using applications that communicate with this machine with TCP Socket" (p. 2-171) - To submit a certificate upon request from a server (SMTP, POP, LDAP, WebDAV) Use the following flowchart to configure settings. Clicking a step jumps to the associated procedure. Device Certificate Setting (1) Self-signed creation (2) Issuance by CA (3) Import (1) (2) (3) Creating and installing a self-signed certificate Requesting an issuance of certificate Import Certificates Install a Certificate SSL Setting Finish d Reference This machine enables you to use multiple registered device certificates depending on protocols. For details on how to use device certificates depending on purposes, refer to page 2-22. bizhub C652/C652DS/C552/C552DS/C452 2-15

Section	Page
Table of contents	2
1 Introduction	13
1.1 Welcome	13
1.1.1 User's guides	13
1.1.2 User's Guide	14
1.2 Conventions used in this manual	15
1.2.1 Symbols used in this manual.	15
To use this machine safely	15
Procedural instruction	15
Key symbols	16
1.2.2 Original and paper indications	16
Original and paper sizes	16
Original and paper indications	16
1.3 Display modes of PageScope Web Connection	17
1.3.1 \	17
1.3.2 \	17
Main Menu	18
2 Setting Items for each Procedure	20
2.1 Procedure list	20
2.1.1 Connecting to network	20
2.1.2 Using PageScope Web Connection	20
2.1.3 Scanning	20
2.1.4 Printing	20
2.1.5 Sending and receiving network faxes	21
2.1.6 Using User Authentication	21
2.1.7 Cooperating with applications	21
2.1.8 Reinforcing security	21
2.1.9 Managing	22
2.1.10 Registering	22
2.1.11 Configuring User Box settings	23
2.1.12 Configuring print settings	23
2.1.13 Configuring fax settings	23
2.2 Basic settings for TCP/IP communication	24
TCP/IP Settings	24
Device Setting	25
2.3 Using PageScope Web Connection	26
2.3.1 TCP/IP Settings	26
2.3.2 PSWC Settings	26
2.3.3 TCP Socket Settings	27
2.3.4 Device Certificate Setting	27
2.4 Logging in to the administrator mode	28
2.5 Using Popup Help	30
Help Display Setting	30
Popup Help Display Example	30
2.6 Configuring Settings for each Purpose via Wizard	31
2.6.1 Screen Components	31
2.6.2 Setting for each purpose	32
2.7 Registering the certificate of this machine for SSL communications	33
2.7.1 Device Certificate Setting	34
2.7.2 Creating and installing a self-signed certificate	35
2.7.3 Requesting an issuance of certificate	36
2.7.4 Install a Certificate	37
2.7.5 Import Certificates	38
2.7.6 SSL Setting	38
2.7.7 Removing a Certificate	39
2.8 Using device certificates depending on protocol	40
2.8.1 Registering a certificate	41
2.8.2 Protocol setting	41
2.9 Managing a device certificate	42
2.9.1 Registering a certificate	42
2.9.2 Exporting a certificate	42
2.10 Registering a user certificate in this machine	44
2.10.1 E-mail	45
2.10.2 Automatically Obtain Certificates	46
2.10.3 Certificate validation	47
Certificate Verification Level Settings	47
Certificate Verification Settings	47
2.11 Specifying the date and time of this machine	49
2.11.1 Manual Setting	50
2.11.2 TCP/IP Settings	50
2.11.3 Time Zone	50
2.11.4 Timer Adjustment Setting	51
2.12 Sending scanned data to a computer on network	52
2.12.1 TCP/IP Settings	52
2.12.2 Client Setting	53
2.12.3 WINS Setting	54
2.12.4 Direct Hosting Setting	55
2.12.5 LLMNR Setting	55
2.13 Sending scanned data to your computer (Scan to Home)	56
2.13.1 TCP/IP Settings	57
2.13.2 User authentication (Active Directory)	57
2.13.3 Scan to Home Settings	57
2.13.4 Client Setting	57
2.13.5 WINS Setting	57
2.13.6 Direct Hosting Setting	57
2.13.7 LLMNR Setting	57
2.14 Restricting the use of the SMB address registered in the address book	58
2.14.1 TCP/IP Settings	58
2.14.2 User Authentication	59
2.14.3 Scan to Authorized Folder Settings	59
2.14.4 Client Setting	59
2.14.5 WINS Setting	59
2.14.6 Direct Hosting Setting	59
2.14.7 LLMNR Setting	59
2.15 Sending scanned data by E-mail	60
2.15.1 TCP/IP Settings	60
2.15.2 E-mail Transmission (SMTP)	61
E-mail Transmission (SMTP)	61
Admin. E-mail Address	62
2.15.3 SMTP over SSL/Start TLS	63
E-mail Transmission (SMTP)	63
Certificate Verification Settings	64
2.15.4 SMTP Authentication	65
2.15.5 POP before SMTP	65
POP before SMTP	65
E-Mail RX (POP)	66
2.15.6 POP over SSL	67
E-Mail RX (POP)	67
Certificate Verification Settings	67
2.15.7 APOP Authentication	68
2.16 Sending scanned data to the user's E-mail address (Scan to Me)	69
2.16.1 TCP/IP Settings	69
2.16.2 User Authentication	70
When the MFP authentication is selected	70
When the Active Directory authentication is selected	70
When the NTLM or NDS authentication is selected	70
2.16.3 E-mail Transmission (SMTP)	70
2.16.4 SMTP over SSL/Start TLS	70
2.16.5 SMTP Authentication	70
2.16.6 POP before SMTP	70
2.16.7 POP over SSL	70
2.16.8 APOP Authentication	71
2.17 Sending scanned data by E-mail (with digital signature)	72
2.17.1 TCP/IP Settings	72
2.17.2 E-mail Transmission (SMTP)	72
2.17.3 Registering a certificate	73
2.17.4 S/MIME	73
2.17.5 SMTP over SSL/Start TLS	73
2.17.6 SMTP Authentication	73
2.17.7 POP before SMTP	73
2.17.8 POP over SSL	74
2.17.9 APOP Authentication	74
2.18 Sending scanned data by E-mail (Encryption by public key)	75
2.18.1 TCP/IP Settings	75
2.18.2 E-mail Transmission (SMTP)	76
2.18.3 S/MIME	76
2.18.4 SMTP over SSL/Start TLS	76
2.18.5 SMTP Authentication	76
2.18.6 POP before SMTP	76
2.18.7 POP over SSL	77
2.18.8 APOP Authentication	77
2.19 Searching for the E-mail address in the LDAP server	78
2.19.1 TCP/IP Settings	78
2.19.2 LDAP Settings	79
2.19.3 Setting up the LDAP server	80
2.19.4 LDAP over SSL	82
Setting up the LDAP server	82
Certificate Verification Settings	82
2.19.5 DNS server setting	83
2.19.6 Date/Time Setting	83
2.20 Sending scanned data to the FTP server	84
2.20.1 TCP/IP Settings	84
2.20.2 FTP transmission setting	84
2.21 Sending scanned data to the WebDAV server	86
2.21.1 TCP/IP Settings	86
2.21.2 WebDAV client settings	87
2.21.3 WebDAV over SSL	88
Certificate Verification Level Settings	88
Certificate Verification Settings	88
2.22 Sending Internet faxes	90
2.22.1 TCP/IP Settings	91
2.22.2 Network Fax Function Settings	91
2.22.3 Machine Setting	92
2.22.4 Header Information	93
2.22.5 E-mail Transmission (SMTP)	93
2.22.6 Network Fax Settings	93
I-Fax Advanced Setting	93
Black Compression Level	94
Color/Grayscale Multi-Value Compression Method	95
2.22.7 SMTP over SSL/Start TLS	95
2.22.8 SMTP Authentication	95
2.22.9 POP before SMTP	95
2.22.10 POP over SSL	95
2.22.11 APOP Authentication	95
2.23 Receiving Internet faxes	96
2.23.1 TCP/IP Settings	96
2.23.2 Network Fax Function Settings	96
2.23.3 E-Mail RX (POP)	97
2.23.4 Network Fax Settings	98
I-Fax Advanced Setting	98
Internet Fax RX Ability	99
2.23.5 POP over SSL	99
2.23.6 APOP Authentication	99
2.24 Sending and receiving IP address faxes	100
2.24.1 TCP/IP Settings	100
2.24.2 Network Fax Function Settings	101
2.24.3 SMTP TX Setting	102
2.24.4 SMTP RX Setting	103
2.24.5 Network Fax Settings	104
Black Compression Level	104
Color/Grayscale Multi-Value Compression Method	105
2.24.6 IP Address Fax Setting	105
2.24.7 Header Information	106
2.25 Importing images by TWAIN scan	107
2.25.1 TCP/IP Settings	107
2.25.2 SLP Setting	107
2.25.3 TCP Socket Settings	108
2.25.4 Network TWAIN	108
2.26 Printing (LPR/Port9100)	109
2.26.1 TCP/IP Settings	109
2.26.2 LPD Setting	109
2.26.3 RAW Port Number	109
2.27 Print (SMB)	110
2.27.1 TCP/IP Settings	110
2.27.2 Print Setting	111
2.27.3 WINS Setting	111
2.27.4 Direct Hosting Setting	111
2.27.5 LLMNR Setting	111
2.28 Print (IPP)	112
2.28.1 TCP/IP Settings	112
2.28.2 IPP Setting	113
2.28.3 IPP Authentication Setting	114
2.29 Print (IPPS)	115
2.29.1 TCP/IP Settings	115
2.29.2 IPP Setting	115
2.29.3 Device Certificate Setting	115
2.29.4 IPP Authentication Setting	116
2.30 Printing (Bonjour)	117
Bonjour Settings	117
2.31 Printing (AppleTalk)	118
AppleTalk Settings	118
2.32 Printing (Netware)	119
2.32.1 NetWare Settings	119
In Remote Printer mode using the NetWare 4.x Bindery Emulation	119
In Print Server mode using the NetWare 4.x Bindery Emulation	120
In NetWare 4.x Remote Printer mode (NDS)	121
In the NetWare 4.x/5.x/6 Print Server mode (NDS)	121
For NetWare 5.x/6 Novell Distributed Print Service (NDPS)	122
2.32.2 NetWare Status	123
2.33 Using the WS print function	124
2.33.1 TCP/IP Settings	124
2.33.2 Web Service Common Settings	124
2.33.3 Print Setting	125
2.34 Using Data Saved in a Cellular Phone or PDA	126
2.34.1 Bluetooth Setting	126
2.34.2 System Connection Setting	127
2.35 Using the WS scan function	128
2.35.1 TCP/IP Settings	128
2.35.2 Web Service Common Settings	128
2.35.3 Scanner Settings	129
2.36 Using Web services to secure communication from Vista/Server 2008 to this machine via SSL	130
2.36.1 TCP/IP Settings	130
2.36.2 Device Certificate Setting	130
2.36.3 Web Service Common Settings	130
2.37 Using Web services to establish an SSL communication from this machine to Vista/Server 2008	131
2.37.1 TCP/IP Settings	131
2.37.2 Web Service Common Settings	131
Certificate Verification Settings	132
2.38 Displaying this machine on the network map	133
2.38.1 TCP/IP Settings	133
2.38.2 LLTD Setting	133
2.39 Monitoring this machine by SNMP Manager	134
2.39.1 TCP/IP Settings	134
2.39.2 NetWare Settings	134
2.39.3 SNMP Settings	135
2.40 Reporting the status of this machine (by E-mail)	137
2.40.1 TCP/IP Settings	137
2.40.2 E-mail Transmission (SMTP)	138
2.40.3 Status Notification Setting	138
2.40.4 SMTP over SSL/Start TLS	139
2.40.5 SMTP Authentication	139
2.40.6 POP before SMTP	139
2.40.7 POP over SSL	139
2.40.8 APOP Authentication	139
2.41 Reporting the status of this machine (TRAP)	140
2.41.1 TCP/IP Settings	140
2.41.2 NetWare Settings	140
2.41.3 TRAP Settings	141
2.41.4 Status Notification Setting	141
2.42 Reporting the counter information of this machine (by E-mail)	143
2.42.1 TCP/IP Settings	143
2.42.2 E-mail Transmission (SMTP)	144
2.42.3 Total Counter Notification Setting	145
2.42.4 SMTP over SSL/Start TLS	146
2.42.5 SMTP Authentication	146
2.42.6 POP before SMTP	146
2.42.7 POP over SSL	146
2.42.8 APOP Authentication	146
2.43 Restricting users of this machine (MFP authentication)	147
2.43.1 General Settings	147
2.43.2 Administrative Setting	149
2.43.3 User Registration	151
2.43.4 Account Track Registration	153
2.44 Restricting users of this machine (Active Directory)	155
2.44.1 TCP/IP Settings	155
2.44.2 External Server Settings	156
2.44.3 General Settings	157
2.44.4 Administrative Setting	158
2.44.5 Default Function Permission	158
2.44.6 Date/Time Setting	159
2.45 Restricting users of this machine (Windows domain or workgroup)	160
2.45.1 TCP/IP Settings	160
2.45.2 External Server Settings	161
2.45.3 General Settings	162
2.45.4 Administrative Setting	162
2.45.5 Default Function Permission	162
2.45.6 Client Setting	163
2.45.7 WINS Setting	163
2.45.8 Direct Hosting Setting	163
2.46 Restricting users of this machine (NDS over IPX/SPX)	164
2.46.1 External Server Settings	164
2.46.2 General Settings	165
2.46.3 Administrative Setting	165
2.46.4 Default Function Permission	166
2.46.5 NetWare Settings	166
2.47 Restricting users of this machine (NDS over TCP/IP)	167
2.47.1 TCP/IP Settings	167
2.47.2 External Server Settings	168
2.47.3 General Settings	169
2.47.4 Administrative Setting	169
2.47.5 Default Function Permission	169
2.48 Restricting users of this machine (LDAP)	170
2.48.1 TCP/IP Settings	170
2.48.2 External Server Settings	171
2.48.3 General Settings	172
2.48.4 Administrative Setting	172
2.48.5 Default Function Permission	172
2.48.6 LDAP over SSL	172
External Server Settings	172
Setting Up LDAP (Certificate Verification Level Settings)	173
Certificate Verification Settings	173
2.49 Filtering IP addresses	175
2.49.1 TCP/IP Settings	175
2.49.2 IP Filtering	175
2.50 Communicating using IPv6	177
TCP/IP Setting	178
2.51 Communicating using IPsec	180
2.51.1 TCP/IP Settings	180
2.51.2 IPsec	181
2.51.3 IKE	181
IKE	181
IKE Setting	182
2.51.4 SA	182
SA	182
SA Setting	182
2.51.5 Peer	183
2.52 Using IEEE802.1X authentication	184
2.52.1 TCP/IP Settings	184
2.52.2 Device Certificate Setting	184
2.52.3 IEEE802.1X Authentication Setting	185
2.52.4 Certificate validation	187
IEEE802.1X Authentication Setting	187
Certificate Verification Settings	187
2.52.5 IEEE802.1X Authentication Trial	188
2.53 Using applications that communicate with this machine with TCP Socket	189
2.53.1 TCP/IP Settings	189
2.53.2 Device Certificate Setting	189
2.53.3 TCP Socket Settings	190
2.54 Linking an OpenAPI system with this machine	191
2.54.1 TCP/IP Settings	192
2.54.2 SSDP Settings	192
2.54.3 Device Certificate Setting	192
2.54.4 OpenAPI Setting	193
2.54.5 Certificate validation	194
Certificate Verification Level Settings	194
Certificate Verification Settings	194
2.55 Using the FTP server and WebDAV server functions	196
2.55.1 TCP/IP Settings	196
2.55.2 Device Certificate Setting	196
2.55.3 FTP Server Settings	197
2.55.4 WebDAV Server Settings	198
2.56 Settings under \	199
2.56.1 Checking the counter of this machine	199
Meter Count	199
2.56.2 Checking the machine ROM version	200
ROM Version	200
2.56.3 Importing and exporting the machine configuration information	201
Import/Export	201
2.56.4 Using the timer functions	202
Power Save Setting	202
Weekly Timer Setting	203
2.56.5 Displaying a network error code	204
Network Error Code Display Setting	204
2.56.6 Initializing the configuration information	205
Network Setting Clear	205
Reset	205
Format All Destination	206
2.56.7 Enhancing the functions of this machine	206
Get Request Code	207
Install License	207
2.56.8 Registering and editing font/macro	208
Edit Font/Macro	208
2.56.9 Outputting job logs	208
Creating job log data	209
Downloading job log data	209
2.57 Settings under \	210
2.57.1 Registering machine information	210
Machine Setting	210
2.57.2 Registering support information	211
Register Support Information	211
2.57.3 Configuring the environmental settings for using User Boxes	212
Delete Unused User Box	212
Delete Secure Print File	213
Delete Time Setting	213
Document Delete Time Setting	214
Document Hold Setting	215
External Memory Function Settings	217
User Box Operation	218
ID & Print Delete Time	219
2.57.4 Configuring stamp settings	220
Header/Footer Registration	220
Fax TX settings	221
2.57.5 Configuring settings for printing blank pages	222
Blank Page Print Settings	222
2.57.6 Configuring settings for skipping jobs	222
Skip Job Operation Settings	222
2.57.7 Disabling Flash View	223
Flash View Settings	223
2.57.8 Using the Fax Server Communicating in E-Mail Format	224
System Connection Setting	224
2.57.9 Canceling the connection with applications	225
System Connection Setting	225
2.57.10 Specifying the display mode of the administrator mode	226
Display Setting	226
Tab Function Display	226
List Function Display	226
2.57.11 Configuring Outline PDF Settings	227
Outline PDF Setting	227
2.58 Settings under \	228
2.58.1 Managing external certificates	228
External Certificate Setting	228
2.58.2 Limiting accessible destinations for each user	230
Registering reference allowed groups	230
2.58.3 Restricting Registration and Change by a User	231
Restrict User Access	231
2.58.4 Configuring Copy Security Settings	231
Copy Security	232
2.58.5 Specifying the automatic logout time of PageScope Web Connection	232
Auto Logout	232
2.58.6 Configuring the administrator password	233
Administrator Password Setting	233
2.59 Settings under \	234
2.59.1 Configuring the function permission of the public user	234
Public User	234
2.59.2 Specifying the maximum number of Public User Boxes	235
Public User Box Setting	235
2.59.3 Managing single color /2 Color output	236
User/Account Common Setting	236
2.59.4 Restricting specification of sending destinations	236
Scan to Authorized Folder Settings	237
2.60 Settings under \	238
2.60.1 Changing User Box settings	238
Open User Box	238
2.60.2 Creating new User Boxes	239
Create User Box	239
2.60.3 Changing System User Box settings	240
Open System User Box	240
2.60.4 Creating a new System User Box	242
Create System User Box	242
2.61 Settings under \	244
2.61.1 Configuring initial settings for the printer function	244
Basic Setting	244
2.61.2 Configuring the initial settings for the PCL print function	245
PCL Setting	245
2.61.3 Configuring the initial settings for the PS print function	246
PS Setting	246
2.61.4 Configuring the initial settings for the TIFF print function	247
TIFF Setting	247
2.61.5 Configuring the initial settings for the XPS print function	248
XPS Settings	248
2.61.6 Specifying the timeout of the interface	248
Interface Setting	248
2.61.7 Disabling the direct print function	249
Direct Print Settings	249
2.61.8 Restricting users from obtaining device information using password	249
Assign Account to Acquire Device Info	249
2.62 Settings under \	250
2.62.1 Registering Address Book	250
Address Registration	250
Icon	254
2.62.2 Registering a group	255
Group	255
2.62.3 Registering a program destination	256
Program	256
2.62.4 Registering Temporary One-Touch Destination	271
Temporary One-Touch	271
2.62.5 Registering the E-mail subject and body	272
Subject	272
Text	272
2.62.6 Using a fax server	273
Registering applications	273
2.62.7 Simplifying entering E-mail addresses	276
Prefix/Suffix	276
2.63 Settings under \	277
2.63.1 Configuring Header/Footer Position settings	277
Header/Footer Position	277
2.63.2 Configuring settings for telephone and fax lines	278
Line Parameter Setting	278
2.63.3 Configuring settings to send or receive faxes	279
TX/RX settings	279
2.63.4 Configuring settings for the fax functions	280
Function ON/OFF Setting	280
Memory RX Setting	281
Closed network RX	282
Forward TX Setting	283
Incomplete TX Hold	284
PC-FAX RX Setting	285
TSI User Box Setting	286
TSI User Box Registration	287
2.63.5 Configuring PBX connection settings	288

Match case Limit results 1 per page

bizhub C652/C652DS/C552/C552DS/C452

2-15

2.7

Registering the certificate of this machine for SSL communications

2.7

Registering the certificate of this machine for SSL

communications

The device certificate is registered in this machine at the time of shipment; therefore, SSL-encrypted

communication is enabled immediately after installation.

This machine allows you to manage multiple device certificates. To register a new device certificate with this

machine, create a self-signed certificate, or ask a certificate authority (CA) and install the issued certificate.

You can also import an exported device certificate.

When using this machine for the following purposes, you can encrypt a communication from a client

computer to this machine using SSL. For details, refer to the relevant reference page.

"Using PageScope Web Connection" (p. 2-8)

"Print (IPPS)" (p. 2-97)

"Using Web services to secure communication from Vista/Server 2008 to this machine via SSL"

(p. 2-112)

"Using IEEE802.1X authentication (for EAP-TLS)" (p. 2-166)

"Linking an OpenAPI system with this machine" (p. 2-173)

"Using the FTP server and WebDAV server functions (WebDAV server function only)" (p. 2-178)

Also, if this machine is used for any of the following purposes, this machine submits (attaches) a device

certificate that has been registered in this machine. For details, refer to the relevant reference page.

"Sending scanned data by E-mail (with digital signature)" (p. 2-54)

"Using IEEE802.1X authentication (for EAP-TLS or PEAP)" (p. 2-166)

"Using applications that communicate with this machine with TCP Socket" (p. 2-171)

To submit a certificate upon request from a server (SMTP, POP, LDAP, WebDAV)

Use the following flowchart to configure settings. Clicking a step jumps to the associated procedure.

Reference

This machine enables you to use multiple registered device certificates depending on protocols. For details

on how to use device certificates depending on purposes, refer to page 2-22.

Device Certificate Setting

(1) Self-signed creation

(2) Issuance by CA

(3) Import

(1)

(2)

(3)

Creating and installing a

self-signed certificate

Requesting an issuance of

certificate

Import Certificates

Install a Certificate

SSL Setting

Finish