Home » Konica Minolta Manuals » Multifunction Devices » Konica Minolta bizhub 501 » Manual Viewer

Konica Minolta bizhub 501 bizhub 361/421/501 Security Function User Manual - Page 26

Enhancing the Security Function

View all Konica Minolta bizhub 501 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 26 highlights

Administrator Operations 2 2.2 Enhancing the Security Function When access to the Administrator of the machine by the Administrator Settings via the control panel is authenticated, the machine enables setting of the Enhanced Security Mode that allows settings for enhancing each of different security functions to be converted all at once. In the Enhanced Security Mode, the machine allows selection of whether to use the Enhanced Security Mode or not. If the Enhanced Security Mode is set to [ON], a count is taken of the number of unauthorized accesses to the Administrator Settings, User Authentication, Account Track, SNMP authentication, WebDAV authentication, all Secure Print Documents, and all User Boxes. A function is also set that determines whether each password meets predetermined requirements. The security function is thus enhanced in the Enhanced Security Mode. In advance, HD-509, provided as option, must be loaded and the following settings must first be made before the Enhanced Security Mode is set to [ON]. 2 Note When a service engineer initializes network, make the settings of the network functions including SSL certificate re-registration and set the Enhanced Security Mode to [ON] again. Settings to be Made in Advance Administrator Password User Authentication HDD Lock Password Flash Memory Lock Password Release Time Settings Certificate for SSL Management Function Choice CE Password CE Authentication CS Remote Care HDD Operation Ban Release Time Description An 8-digit password that meets the Password Rules. The factory setting is "12345678." Set to either [ON (MFP)] or [ON (External Server)] (Active Directory). Set the 20-digit HDD Lock Password. Set the 20-digit Flash Memory Lock Password. Set the release time to 5 min. or more. Register the self-signed certificate for SSL communications. Calls for setting made by the Service Engineer. For details, ask your Service Representative. Setting the Enhanced Security Mode to [ON] changes the setting values of the following functions. Function Name Password Rules Prohibited Functions When Authentication Error Security Print Access Public User Access User List Print Without Authentication User Box Admin. Setting SSL FTP Server SNMPv1/v2c Factory Setting Invalid Mode 1 Mode 1 Restrict OFF Restrict Restrict OFF ON Read/Write enabled When Enhanced Security Mode is set to [ON] Enable (not to be changed) Mode 2 (not to be changed) : Three times is set. * The number of times can be changed to once, twice, or three times (twice, four times, or six times for the WebDAV Server Password). Mode 2 (not to be changed) * In association with Prohibit Functions When Authentication Error the method is changed from authentication using Secure Print ID and password (Mode 1) to that using the password with the secure document first narrowed down by Secure Print ID (Mode 2). Restrict (not to be changed) OFF (not to be changed) Restrict (not to be changed) Restrict (not to be changed) ON (not to be changed) OFF (not to be changed) Only Read is enabled (not to be changed) 501/421/361 2-9

Section	Page
Contents	2
1 Security	8
1.1 Introduction	8
Compliance with the ISO15408 Standard	8
Operating Precautions	8
INSTALLATION CHECKLIST	9
1.2 Security Functions	10
1.2.1 Check Count Clear Conditions	10
1.3 Data to be Protected	12
1.4 Precautions for Operation Control	13
Roles and Requirements of the Administrator	13
Password Usage Requirements	13
Network Connection Requirements for the Machine	14
User information control server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	14
1.5 Miscellaneous	15
Password Rules	15
Precautions for Use of Various Types of Applications	15
Encrypting communications	15
IPP printing	16
Types of Data Cleared by Overwrite All Data Function	17
2 Administrator Operations	19
2.1 Accessing the Administrator Settings	19
2.1.1 Accessing the Administrator Settings	19
<From the Control Panel>	20
2.1.2 Accessing the User Mode	22
<From the Control Panel>	22
<From PageScope Web Connection>	24
2.2 Enhancing the Security Function	26
2.2.1 Items cleared by HDD Format	27
2.2.2 Setting the Enhanced Security Mode	28
<Setting can be made only from the control panel>	28
2.3 Preventing Unauthorized Access	31
2.3.1 Setting Prohibited Functions When Authentication Error	31
<Setting can be made only from the control panel>	32
2.4 Canceling the Operation Prohibited State	34
2.4.1 Performing Release Setting	34
<Setting can be made only from the control panel>	34
2.5 Setting the Authentication Method	36
2.5.1 Setting the Authentication Method	36
<Setting can be made only from the control panel>	36
2.5.2 Setting the External Server	39
<Setting can be made only from the control panel>	39
2.6 ID & Print Setting Function	41
2.6.1 Setting ID & Print	41
<Setting can be made only from the control panel>	41
2.7 System Auto Reset Function	43
2.7.1 Setting the System Auto Reset function	43
<Setting can be made only from the control panel>	43
2.8 User Setting Function	45
2.8.1 Making user setting	46
<From the Control Panel>	46
<From PageScope Web Connection>	51
2.9 Account Track Setting Function	53
2.9.1 Making account setting	53
<From the Control Panel>	53
<From PageScope Web Connection>	57
2.10 User Box Function	59
2.10.1 Setting the User Box	59
<From the Control Panel>	59
<From PageScope Web Connection>	63
2.10.2 Changing the user attributes and account attributes	65
<From the Control Panel>	65
<From PageScope Web Connection>	69
2.11 Changing the Administrator Password	72
2.11.1 Changing the Administrator Password	72
<Setting can be made only from the control panel>	72
2.12 Protecting Data in the HDD	75
2.12.1 Setting the HDD Lock Password	75
<Setting can be made only from the control panel>	76
2.12.2 Changing the HDD Lock Password	78
<Setting can be made only from the control panel>	78
2.12.3 Setting the Image Data Encryption Passphrase	81
<Setting can be made only from the control panel>	81
2.12.4 Changing and releasing the Image Data Encryption Passphrase	86
<Setting can be made only from the control panel>	86
2.13 Protecting Data Stored in the Flash Memory	91
2.13.1 Setting the Flash Memory Lock Password	91
<Setting can be made only from the control panel>	91
2.13.2 Changing the Flash Memory Lock Password	94
<Setting can be made only from the control panel>	94
2.14 Overwrite All Data Function	97
2.14.1 Setting the Overwrite All Data function	97
<Setting can be made only from the control panel>	98
2.15 SSL Setting Function	100
2.15.1 Setting the SSL	100
<Setting can be made only from PageScope Web Connection>	100
2.15.2 Changing the Encryption Strength Setting	103
<Setting can be made only from PageScope Web Connection>	103
2.15.3 Changing the Mode Using SSL	104
<Setting can be made only from PageScope Web Connection>	104
2.15.4 Removing a Certificate	105
<Setting can be made only from PageScope Web Connection>	105
2.16 S/MIME Communication Setting Function	106
2.16.1 Setting the S/MIME Communication	106
<From the Control Panel>	106
<From PageScope Web Connection>	109
2.16.2 Registering the certificate	111
<From PageScope Web Connection>	111
2.17 SNMP Setting Function	113
2.17.1 Changing the auth-password and priv-password	113
<From the Control Panel>	113
<From PageScope Web Connection>	117
2.17.2 SNMP access authentication function	119
2.17.3 SNMP v3 setting function	119
2.17.4 SNMP network setting function	120
2.18 WebDAV Function	121
2.18.1 Setting the WebDAV Server Password	121
<From the Control Panel>	121
<From PageScope Web Connection>	124
2.19 TCP/IP Setting Function	125
2.19.1 Setting the IP Address	125
<From the Control Panel>	125
<From PageScope Web Connection>	125
2.19.2 Registering the DNS Server	126
<From the Control Panel>	126
<From PageScope Web Connection>	126
2.20 NetWare Setting Function	127
2.20.1 Making the NetWare Setting	127
<From the Control Panel>	127
<From PageScope Web Connection>	127
2.21 SMB Setting Function	128
2.21.1 Setting the NetBIOS Name	128
<From the Control Panel>	128
<From PageScope Web Connection>	128
2.22 AppleTalk Setting Function	129
2.22.1 Making the AppleTalk Setting	129
<From the Control Panel>	129
<From PageScope Web Connection>	129
2.23 E-Mail Setting Function	130
2.23.1 Setting the SMTP Server (E-Mail Server)	130
<From the Control Panel>	130
<From PageScope Web Connection>	130
2.24 Setting PC-FAX receiving	131
2.24.1 Setting PC-FAX receive	131
<From the Control Panel>	131
2.25 Setting TSI distribution	132
2.25.1 Setting TSI distribution	132
<From the Control Panel>	132
2.25.2 Setting TSI distribution and register TSI distribution	132
<From the Control Panel>	132
2.25.3 Setting TSI distribution and register TSI distribution	133
<From the Control Panel>	133
3 User Operations	135
3.1 User Authentication Function	135
3.1.1 Performing user authentication	135
<From the Control Panel>	137
<From PageScope Web Connection>	142
3.1.2 Accessing the ID & Print Document	144
<Setting can be made only from the control panel>	144
3.2 Change Password Function	146
3.2.1 Performing Change Password	146
<From the Control Panel>	146
<From PageScope Web Connection>	149
3.3 Secure Print Document Function	150
3.3.1 Accessing the Secure Print Document	150
<Setting can be made only from the control panel>	151
3.4 User Box Function	154
3.4.1 Setting the User Box	154
<From the Control Panel>	154
<From PageScope Web Connection>	158
3.4.2 Changing the User Box Password and user attributes and account attributes	160
<From the Control Panel>	160
<From PageScope Web Connection>	165
3.4.3 Accessing the User Box and User Box file	169
<From the Control Panel>	170
<From PageScope Web Connection>	172
3.4.4 Sending S/MIME box files	174
<From the Control Panel>	174
3.5 Outline of document save	176
What Document save can do	176
Initial screen of Document save	176
Document save screen	177
File style	178
4 Application Software	180
4.1 PageScope Data Administrator	180
4.1.1 Gaining access from PageScope Data Administrator	180
<From the PC>	180
4.1.2 Setting the user authentication method	183
<From the PC>	183
4.1.3 Changing the authentication mode	185
<From the PC>	185
4.1.4 Making the user settings	188
<From the PC>	188
4.1.5 Making the account settings	189
<From the PC>	189
4.1.6 Registering the certificate	190
<From the PC>	190
4.1.7 SNMP Setting Function	192
<Changing the auth-password and priv-password>	192
4.1.8 DNS Server Setting Function	194
<Registering the DNS Server>	194
4.1.9 NetWare Setting Function	195
<Making the NetWare Setting>	195
4.1.10 SMB Setting Function	196
<Setting the NetBIOS Name>	196
4.1.11 AppleTalk Setting Function	197
<Making the AppleTalk Setting>	197
4.1.12 E-Mail Setting Function	198
<Setting the SMTP Server (E-Mail Server)>	198
4.2 PageScope Box Operator	199
4.2.1 Accessing User Box	199
<From the PC>	199
4.2.2 Creating a User Box	201
<From the PC>	201
4.2.3 Changing User Box properties (user attributes, account attributes)	203
<From the PC>	203
4.2.4 Accessing the User Box file	205
<From the PC>	205
4.3 HDD TWAIN driver	206
4.3.1 Accessing from the HDD TWAIN driver	206
<From the PC>	206
4.4 PageScope Direct Print	208
4.4.1 Printing through PageScope Direct Print	208
<From the PC>	208
4.5 HDD Backup Utility	210
4.5.1 Backup	210
<From the PC>	210
4.5.2 Restore	214

Match case Limit results 1 per page

501/421/361

2-9

Administrator Operations

2.2

Enhancing the Security Function

When access to the Administrator of the machine by the Administrator Settings via the control panel is au-

thenticated, the machine enables setting of the Enhanced Security Mode that allows settings for enhancing

each of different security functions to be converted all at once.

In the Enhanced Security Mode, the machine allows selection of whether to use the Enhanced Security Mode

or not. If the Enhanced Security Mode is set to [ON], a count is taken of the number of unauthorized accesses

to the Administrator Settings, User Authentication, Account Track, SNMP authentication, WebDAV authenti-

cation, all Secure Print Documents, and all User Boxes. A function is also set that determines whether each

password meets predetermined requirements. The security function is thus enhanced in the Enhanced Se-

curity Mode.

In advance, HD-509, provided as option, must be loaded and the following settings must first be made before

the Enhanced Security Mode is set to [ON].

Note

When a service engineer initializes network, make the settings of the network functions including SSL

certificate re-registration and set the Enhanced Security Mode to [ON] again.

Setting the Enhanced Security Mode to [ON] changes the setting values of the following functions.

Settings to be Made in Advance

Description

Administrator Password

An 8-digit password that meets the Password Rules.

The factory setting is "12345678."

User Authentication

Set to either [ON (MFP)] or [ON (External Server)] (Active Directory).

HDD Lock Password

Set the 20-digit HDD Lock Password.

Flash Memory Lock Password

Set the 20-digit Flash Memory Lock Password.

Release Time Settings

Set the release time to 5 min. or more.

Certificate for SSL

Management Function Choice

Calls for setting made by the Service Engineer. For details, ask your Service

Representative.

CE Password

CE Authentication

CS Remote Care

HDD

Operation Ban Release Time

Function Name

Factory Setting

When Enhanced Security Mode is set to [ON]

Password Rules

Invalid

Enable (not to be changed)

Prohibited Functions When

Authentication Error

Mode 1

Mode 2 (not to be changed) : Three times is set.

* The number of times can be changed to once, twice, or

three times (twice, four times, or six times for the WebDAV

Server Password).

Security Print Access

Mode 1

Mode 2 (not to be changed)

* In association with Prohibit Functions When Authentica-

tion Error the method is changed from authentication using

Secure Print ID and password (Mode 1) to that using the

password with the secure document first narrowed down

by Secure Print ID (Mode 2).

Public User Access

Restrict

Restrict (not to be changed)

User List

OFF

OFF (not to be changed)

Print Without Authentication

Restrict

Restrict (not to be changed)

User Box Admin. Setting

Restrict

Restrict (not to be changed)

SSL

OFF

ON (not to be changed)

FTP Server

OFF (not to be changed)

SNMPv1/v2c

Read/Write enabled

Only Read is enabled (not to be changed)