Home » Konica Minolta Manuals » Multifunction Devices » Konica Minolta bizhub 501 » Manual Viewer

Konica Minolta bizhub 501 bizhub 361/421/501 Security Function User Manual - Page 75

Protecting Data in the HDD

View all Konica Minolta bizhub 501 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 75 highlights

Administrator Operations 2 2.12 2.12.1 Protecting Data in the HDD When access to the Administrator of the machine by the Administrator Settings is authenticated, the machine enables the operation for setting and changing the HDD Lock Password. It also enables the operation for setting and changing the Image Data Encryption Passphrase when the optional Security Kit SC-505 is mounted. Should the HDD be removed unawares, the HDD Lock Password locks the HDD protecting data contained in the HDD. Furthermore, by setting the Image Data Encryption Passphrase, encrypt the image data which is registered by secure print or the image data which is saved in the user boxes and protect the data. The HDD Lock Password and Image Data Encryption Passphrase entered are displayed as "*." 2 Note Do not set any number that can easily be guessed from birthdays, employee identification numbers, and the like for the HDD Lock Password and Image Data Encryption Passphrase. Try to change the password at regular intervals. Make sure that nobody but the Administrator of the machine comes to know the HDD Lock Password or Image Data Encryption Passphrase. If only the Image Data Encryption Passphrase is to be set while the machine is being used without setting the HDD Lock Password or Image Data Encryption Passphrase, the Service Engineer must perform some setting procedures in advance. For more details, ask the Service Representative. 2 Reminder When the HDD Lock Password is set, HDD verification is carried out when the machine is started. If the HDD has been improperly replaced with another, or if the HDD Lock Password is yet to be set, a message appears that tells that there is a mismatch between the HDD and the HDD Lock Password. Further, the HDD has the following function. That is, if the HDD is illegally removed or replaced with another, detection of a wrong HDD Lock Password five consecutive times will lock the authentication function. Leak of data can thus be prevented. When an Image Data Encryption Passphrase (encryption word) is set using HDD Encryption Setting, an Image Data Encryption Passphrase with a key length of 256 bits is generated using the SHA-256 algorithm. The generated Image Data Encryption Passphrase is used to encrypt or decrypt data through AES encryption algorithm. Setting the HDD Lock Password 2 Note When the main power switch is turned off, then on again, wait at least 10 seconds to turn it on after turning it off. if there is no wait period between turning the main power switch off, then on again, the machine may not function properly. Here is the sequence, through which the main power switch and sub power switch are turned on and off: Turn off the sub power switch → Turn off the main power switch → Turn on the main power switch → Turn on the sub power switch Do not leave the machine with the setting screen of Administrator Settings left shown on the display. If it is absolutely necessary to leave the machine, be sure first to log off from the Administrator Settings. 501/421/361 2-58

Section	Page
Contents	2
1 Security	8
1.1 Introduction	8
Compliance with the ISO15408 Standard	8
Operating Precautions	8
INSTALLATION CHECKLIST	9
1.2 Security Functions	10
1.2.1 Check Count Clear Conditions	10
1.3 Data to be Protected	12
1.4 Precautions for Operation Control	13
Roles and Requirements of the Administrator	13
Password Usage Requirements	13
Network Connection Requirements for the Machine	14
User information control server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	14
1.5 Miscellaneous	15
Password Rules	15
Precautions for Use of Various Types of Applications	15
Encrypting communications	15
IPP printing	16
Types of Data Cleared by Overwrite All Data Function	17
2 Administrator Operations	19
2.1 Accessing the Administrator Settings	19
2.1.1 Accessing the Administrator Settings	19
<From the Control Panel>	20
2.1.2 Accessing the User Mode	22
<From the Control Panel>	22
<From PageScope Web Connection>	24
2.2 Enhancing the Security Function	26
2.2.1 Items cleared by HDD Format	27
2.2.2 Setting the Enhanced Security Mode	28
<Setting can be made only from the control panel>	28
2.3 Preventing Unauthorized Access	31
2.3.1 Setting Prohibited Functions When Authentication Error	31
<Setting can be made only from the control panel>	32
2.4 Canceling the Operation Prohibited State	34
2.4.1 Performing Release Setting	34
<Setting can be made only from the control panel>	34
2.5 Setting the Authentication Method	36
2.5.1 Setting the Authentication Method	36
<Setting can be made only from the control panel>	36
2.5.2 Setting the External Server	39
<Setting can be made only from the control panel>	39
2.6 ID & Print Setting Function	41
2.6.1 Setting ID & Print	41
<Setting can be made only from the control panel>	41
2.7 System Auto Reset Function	43
2.7.1 Setting the System Auto Reset function	43
<Setting can be made only from the control panel>	43
2.8 User Setting Function	45
2.8.1 Making user setting	46
<From the Control Panel>	46
<From PageScope Web Connection>	51
2.9 Account Track Setting Function	53
2.9.1 Making account setting	53
<From the Control Panel>	53
<From PageScope Web Connection>	57
2.10 User Box Function	59
2.10.1 Setting the User Box	59
<From the Control Panel>	59
<From PageScope Web Connection>	63
2.10.2 Changing the user attributes and account attributes	65
<From the Control Panel>	65
<From PageScope Web Connection>	69
2.11 Changing the Administrator Password	72
2.11.1 Changing the Administrator Password	72
<Setting can be made only from the control panel>	72
2.12 Protecting Data in the HDD	75
2.12.1 Setting the HDD Lock Password	75
<Setting can be made only from the control panel>	76
2.12.2 Changing the HDD Lock Password	78
<Setting can be made only from the control panel>	78
2.12.3 Setting the Image Data Encryption Passphrase	81
<Setting can be made only from the control panel>	81
2.12.4 Changing and releasing the Image Data Encryption Passphrase	86
<Setting can be made only from the control panel>	86
2.13 Protecting Data Stored in the Flash Memory	91
2.13.1 Setting the Flash Memory Lock Password	91
<Setting can be made only from the control panel>	91
2.13.2 Changing the Flash Memory Lock Password	94
<Setting can be made only from the control panel>	94
2.14 Overwrite All Data Function	97
2.14.1 Setting the Overwrite All Data function	97
<Setting can be made only from the control panel>	98
2.15 SSL Setting Function	100
2.15.1 Setting the SSL	100
<Setting can be made only from PageScope Web Connection>	100
2.15.2 Changing the Encryption Strength Setting	103
<Setting can be made only from PageScope Web Connection>	103
2.15.3 Changing the Mode Using SSL	104
<Setting can be made only from PageScope Web Connection>	104
2.15.4 Removing a Certificate	105
<Setting can be made only from PageScope Web Connection>	105
2.16 S/MIME Communication Setting Function	106
2.16.1 Setting the S/MIME Communication	106
<From the Control Panel>	106
<From PageScope Web Connection>	109
2.16.2 Registering the certificate	111
<From PageScope Web Connection>	111
2.17 SNMP Setting Function	113
2.17.1 Changing the auth-password and priv-password	113
<From the Control Panel>	113
<From PageScope Web Connection>	117
2.17.2 SNMP access authentication function	119
2.17.3 SNMP v3 setting function	119
2.17.4 SNMP network setting function	120
2.18 WebDAV Function	121
2.18.1 Setting the WebDAV Server Password	121
<From the Control Panel>	121
<From PageScope Web Connection>	124
2.19 TCP/IP Setting Function	125
2.19.1 Setting the IP Address	125
<From the Control Panel>	125
<From PageScope Web Connection>	125
2.19.2 Registering the DNS Server	126
<From the Control Panel>	126
<From PageScope Web Connection>	126
2.20 NetWare Setting Function	127
2.20.1 Making the NetWare Setting	127
<From the Control Panel>	127
<From PageScope Web Connection>	127
2.21 SMB Setting Function	128
2.21.1 Setting the NetBIOS Name	128
<From the Control Panel>	128
<From PageScope Web Connection>	128
2.22 AppleTalk Setting Function	129
2.22.1 Making the AppleTalk Setting	129
<From the Control Panel>	129
<From PageScope Web Connection>	129
2.23 E-Mail Setting Function	130
2.23.1 Setting the SMTP Server (E-Mail Server)	130
<From the Control Panel>	130
<From PageScope Web Connection>	130
2.24 Setting PC-FAX receiving	131
2.24.1 Setting PC-FAX receive	131
<From the Control Panel>	131
2.25 Setting TSI distribution	132
2.25.1 Setting TSI distribution	132
<From the Control Panel>	132
2.25.2 Setting TSI distribution and register TSI distribution	132
<From the Control Panel>	132
2.25.3 Setting TSI distribution and register TSI distribution	133
<From the Control Panel>	133
3 User Operations	135
3.1 User Authentication Function	135
3.1.1 Performing user authentication	135
<From the Control Panel>	137
<From PageScope Web Connection>	142
3.1.2 Accessing the ID & Print Document	144
<Setting can be made only from the control panel>	144
3.2 Change Password Function	146
3.2.1 Performing Change Password	146
<From the Control Panel>	146
<From PageScope Web Connection>	149
3.3 Secure Print Document Function	150
3.3.1 Accessing the Secure Print Document	150
<Setting can be made only from the control panel>	151
3.4 User Box Function	154
3.4.1 Setting the User Box	154
<From the Control Panel>	154
<From PageScope Web Connection>	158
3.4.2 Changing the User Box Password and user attributes and account attributes	160
<From the Control Panel>	160
<From PageScope Web Connection>	165
3.4.3 Accessing the User Box and User Box file	169
<From the Control Panel>	170
<From PageScope Web Connection>	172
3.4.4 Sending S/MIME box files	174
<From the Control Panel>	174
3.5 Outline of document save	176
What Document save can do	176
Initial screen of Document save	176
Document save screen	177
File style	178
4 Application Software	180
4.1 PageScope Data Administrator	180
4.1.1 Gaining access from PageScope Data Administrator	180
<From the PC>	180
4.1.2 Setting the user authentication method	183
<From the PC>	183
4.1.3 Changing the authentication mode	185
<From the PC>	185
4.1.4 Making the user settings	188
<From the PC>	188
4.1.5 Making the account settings	189
<From the PC>	189
4.1.6 Registering the certificate	190
<From the PC>	190
4.1.7 SNMP Setting Function	192
<Changing the auth-password and priv-password>	192
4.1.8 DNS Server Setting Function	194
<Registering the DNS Server>	194
4.1.9 NetWare Setting Function	195
<Making the NetWare Setting>	195
4.1.10 SMB Setting Function	196
<Setting the NetBIOS Name>	196
4.1.11 AppleTalk Setting Function	197
<Making the AppleTalk Setting>	197
4.1.12 E-Mail Setting Function	198
<Setting the SMTP Server (E-Mail Server)>	198
4.2 PageScope Box Operator	199
4.2.1 Accessing User Box	199
<From the PC>	199
4.2.2 Creating a User Box	201
<From the PC>	201
4.2.3 Changing User Box properties (user attributes, account attributes)	203
<From the PC>	203
4.2.4 Accessing the User Box file	205
<From the PC>	205
4.3 HDD TWAIN driver	206
4.3.1 Accessing from the HDD TWAIN driver	206
<From the PC>	206
4.4 PageScope Direct Print	208
4.4.1 Printing through PageScope Direct Print	208
<From the PC>	208
4.5 HDD Backup Utility	210
4.5.1 Backup	210
<From the PC>	210
4.5.2 Restore	214

Match case Limit results 1 per page

501/421/361

2-58

Administrator Operations

2.12

Protecting Data in the HDD

When access to the Administrator of the machine by the Administrator Settings is authenticated, the machine

enables the operation for setting and changing the HDD Lock Password. It also enables the operation for

setting and changing the Image Data Encryption Passphrase when the optional Security Kit SC-505 is

mounted.

Should the HDD be removed unawares, the HDD Lock Password locks the HDD protecting data contained

in the HDD. Furthermore, by setting the Image Data Encryption Passphrase, encrypt the image data which is

registered by secure print or the image data which is saved in the user boxes and protect the data. The HDD

Lock Password and Image Data Encryption Passphrase entered are displayed as "*."

Note

Do not set any number that can easily be guessed from birthdays, employee identification numbers,

and the like for the HDD Lock Password and Image Data Encryption Passphrase. Try to change the

password at regular intervals.

Make sure that nobody but the Administrator of the machine comes to know the HDD Lock Password

or Image Data Encryption Passphrase.

If only the Image Data Encryption Passphrase is to be set while the machine is being used without

setting the HDD Lock Password or Image Data Encryption Passphrase, the Service Engineer must

perform some setting procedures in advance. For more details, ask the Service Representative.

Reminder

When the HDD Lock Password is set, HDD verification is carried out when the machine is started. If the

HDD has been improperly replaced with another, or if the HDD Lock Password is yet to be set, a

message appears that tells that there is a mismatch between the HDD and the HDD Lock Password.

Further, the HDD has the following function. That is, if the HDD is illegally removed or replaced with

another, detection of a wrong HDD Lock Password five consecutive times will lock the authentication

function. Leak of data can thus be prevented.

When an Image Data Encryption Passphrase (encryption word) is set using HDD Encryption Setting, an

Image Data Encryption Passphrase with a key length of 256 bits is generated using the SHA-256

algorithm. The generated Image Data Encryption Passphrase is used to encrypt or decrypt data through

AES encryption algorithm.

2.12.1

Setting the HDD Lock Password

Note

When the main power switch is turned off, then on again, wait at least 10 seconds to turn it on after

turning it off. if there is no wait period between turning the main power switch off, then on again, the

machine may not function properly.

Here is the sequence, through which the main power switch and sub power switch are turned on and

off:

Turn off the sub power switch

→

Turn off the main power switch

→

Turn on the main power switch

→

Turn

on the sub power switch

Do not leave the machine with the setting screen of Administrator Settings left shown on the display. If

it is absolutely necessary to leave the machine, be sure first to log off from the Administrator Settings.