Konica Minolta bizhub C35 bizhub C35 Security Operations User Guide - Page 12

bizhub C35

1-9

1.5

Miscellaneous

1

Encrypting communications

The following are the cryptographic algorithms of key exchange and communications encryption systems

supported in generation of encryption keys.

-

TLS_RSA_WITH_RC4_128_MD5

-

TLS_RSA_WITH_3DES_EDE_CBC_SHA

-

TLS_RSA_WITH_AES_128_CBC_SHA

-

TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA

-

TLS_DHE_RSA_WITH_AES_256_CBC_SHA

NOTICE

No algorithms can be selected during generation of encryption keys. SSL v3 is automatically selected for the

SSL setting according to the application and browser. Do not therefore change the setting manually to SSL

v2.

Use the following browsers to ensure SSL encryption communication with appropriate strength. Use of any

of the following browsers achieves SSL encryption communication that ensures confidentiality of the image

data transmitted and received.

Windows 2000, XP, Server2003, Vista, Server2008

-

Recommended is Microsoft "Internet Explorer 6" or later.

-

Recommended is Mozilla Firefox 2.0 or later.

Macintosh MacOS X

-


Linux

-


IPP printing

IPP (Internet Printing Protocol) is a function that allows Secured Job and image data stored in HDD to be

printed via the Internet by using the HTTP (HyperText Transfer Protocol) of the TCP/IP Protocol. IPPS (IPP

over SSL/TLS) is the type of IPP that performs the SSL encryption communication.

<Installing printer driver>

To perform IPP printing, the printer driver must be installed. From "Add Printer Wizard," select "Connect to

a printer on the Internet or on a home or office network" and type the URL of this machine in the following

format in the "URL" field. The printer, for which the settings have been made, can be used in the same manner

as the ordinary local printer.

http:// <IP address of this machine> /ipp

E.g.: If the machine IP address is 192.168.1.20

Type http://192.168.1.20/ipp

To set IPPS printing:

Type https:// <IP address of the machine> /ipp.

<Registering the certificate in Windows Vista/Server2008>

Windows Vista/Server2008, which offers enhanced security functions, gives a certificate error message if the

SSL certificate is one that is not issued by a certification body. In such cases, it becomes necessary to reg-

ister with Windows Vista the certificate of this machine as that issued by a reliable party for the computer

account.

First, register Host Name and IP address of this machine in the DNS server in advance. Then, in [TCP/IP Set-

tings] of PageScope Web Connection, set the DNS Host Name and DNS Default Domain Name registered

with the DNS server.

It should also be noted that, for the certificate to be imported, a certificate for SSL encryption communication

should be registered in PageScope Web Connection and exported in advance as the certificate including the

public key.

1

From "Continue to this website" call the PageScope Web Connection window to the screen.

2

Click "Certificate Error" to display the certificate. Then, click "Install Certificate" to install the certificate.

3

Display the physical stores. Then, deploy the certificate, which has earlier been exported, in "Local

Computer" of "Trusted Root Certification Authorities" to thereby import the certificate.

Section	Page
Contents	2
1 Security	5
1.1 Introduction	5
Compliance with the ISO15408 Standard	5
Operating Precautions	5
INSTALLATION CHECKLIST	6
1.2 Security Functions	7
Check Count Clear Conditions	7
1.3 Data to be Protected	8
1.4 Precautions for Operation Control	9
Roles and Requirements of the Administrator	9
Password Usage Requirements	9
Network Connection Requirements for the Machine	9
User information control system control requirements	9
Security function operation setting operating requirements	10
Operation and control of the machine	10
Machine Maintenance Control	10
Operating conditions for the IC card and IC card reader	10
IC card owner requirements	10
1.5 Miscellaneous	11
Password Rules	11
Precautions for Use of Various Types of Applications	11
Encrypting communications	12
IPP printing	12
Items of Data Cleared by Data Erase Function	13
HDD Format	14
Upgrading of the firmware	14
2 Administrator Operations	16
2.1 Accessing the Admin Settings	16
Accessing the Admin Settings	16
2.2 Enhancing the Security Function	19
Setting the Enhanced Security Mode	21
2.3 Setting the Authentication Method	23
Setting the Authentication Method	23
2.4 ID & Print Setting Function	26
Setting the ID & Print	26
2.5 Auto Reset Function	27
Setting the Auto Reset function	27
2.6 User Setting Function	30
Making user setting	30
2.7 IC card information Setting Function	32
Registering information from the control panel	32
2.8 Changing the Administrator Password	34
Changing the Administrator Password	34
2.9 Erasing data when the machine is to be discarded or use of a leased machine is terminated	36
2.9.1 Setting the Overwrite All Data	36
2.9.2 Setting the SSD Low-level Format	39
2.9.3 Setting the Restore All	40
2.10 SSL Setting Function	41
2.10.1 Device Certificate Setting	41
2.10.2 SSL Setting	43
2.10.3 Removing a Certificate	44
2.11 SNMP Setting Function	46
2.11.1 Changing the auth-password and priv-password	46
2.11.2 SNMP access authentication function	47
2.11.3 SNMP v3 setting function	47
2.11.4 SNMP network setting function	47
2.12 Accessing the Scan to HDD file	48
Accessing the image file	48
2.13 TCP/IP Setting Function	50
2.13.1 Setting the IP Address	50
2.13.2 Registering the DNS Server	50
2.14 NetWare Setting Function	51
Making the NetWare Setting	51
2.15 SMB Setting Function	52
Making the SMB Setting	52
2.16 AppleTalk Setting Function	53
Making the AppleTalk Setting	53
2.17 E-Mail Setting Function	54
Setting the SMTP Server (E-Mail Server)	54
3 User Operations	56
3.1 User Authentication Function	56
3.1.1 Performing user authentication (authentication through entry of the user name and user password)	57
3.1.2 Performing user authentication (identification through the IC card)	61
3.1.3 Performing user authentication (authentication through the IC card + user password)	62
3.2 ID & Print Function	66
3.2.1 Registering ID & Print files	66
3.2.2 Accessing the ID & Print file	68
3.3 Change Password Function	70
Performing Change Password	70
3.4 Secured Job Function	72
3.4.1 Registering Secured Job files	72
3.4.2 Accessing the Secured Job file	74
3.5 Scan to HDD Function	77
3.5.1 Registering image files	77
3.5.2 Accessing the image file	79
4 Application Software	83
4.1 PageScope Data Administrator	83
Precautions during backup or restore	83
4.1.1 Accessing from PageScope Data Administrator	83
4.1.2 Setting the user authentication method	85
4.1.3 Changing the authentication mode	87
4.1.4 Making the user settings	90
4.1.5 Setting the IC card information	91
4.2 TWAIN driver	93

Konica Minolta bizhub C35 bizhub C35 Security Operations User Guide - Page 12

Encrypting communications, IPP printing

Page 12 highlights