Konica Minolta bizhub 558e bizhub 658e/558e/458e Security Operations User Manu - Page 23

bizhub 658e/558e/458e

1-19

1.4

Miscellaneous

1

Hardware and software used in the machine

The following lists the software, hardware, and their versions used for the ISO15408 evaluation for this ma-

chine and they are the same as those listed on the security target.

The ISO15408 evaluation assumes that the HDD is mounted in the machine. Any configuration not including

the HDD is not guaranteed by the ISO15408 evaluation.

The user should appropriately manage the hardware and software used with the machine on his or her own

responsibility.

Firmware integrity verification function

When the

main power switch

is turned ON with the Enhanced Security Mode set to [ON], the machine

checks the encryption key and the hash value to thereby determine that its firmware is fully operational.

If a fault occurs in the firmware, a malfunction screen appears when the machine is started, warning that a

fault has occurred. To reset the fault condition, turn [OFF] the Enhanced Security Mode and restart the ma-

chine, or update the firmware. For more details, consult your Service Representative.

CS Remote Care function

CS Remote Care is a system that manages the machine through transmission and reception of various types

of data for managing the machine between the machine and the CS Remote Care center computer via a tele-

phone/fax line, a network, or E-mail. Functions are disabled to access the LAN from the telephone line and

to directly transfer received fax.

When the Enhanced Security Mode is set to [ON], the following functions are no longer usable: instructing to

rewrite the firmware, sending and receiving account counter information, rewriting settings of the machine,

and the Counter Remote Control function.

Terminating a Session and Logging out

The machine allows the operator to automatically log out from or terminate a session, if it is unable to detect

an operation on the control panel or a communication packet on the network. Additionally, if a user changes

the user password on the control panel while the same user accessing the machine via

Web Connection

,

the session of

Web Connection

is terminated.

The following shows the setting range and the default setting of each function. Set the time according to the

environment in which the machine is used.

The administrator should explain to the user that the following settings are made. The administrator should

also explain to the user immediately as soon as the setting has been changed.

Hardware/software

Version, etc.

Printer Driver

PCL: Ver. 10.1.1.0

PS: Ver. 10.1.1.0

Data Administrator with De-

vice Set-Up and Utilities

Ver. 1.0.09000

Data Administrator

Ver. 4.1.41000

External authentication server

Active directory mounted on Windows Server 2012 R2 Standard

DNS server

Windows Server 2012 R2 Standard

Function name/software, etc

Description

System Auto Reset

Setting range

•

[1] to [9] minutes, Default setting: [1] minute

Setting procedure

•

[Utility] - [Administrator Settings] - [System Settings] - [Reset Set-

tings] - [System Auto Reset]

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Administrators	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	8
1.2 Security Functions	11
Check Count Clear Conditions	11
1.3 Precautions for Operation Control	13
Roles of the Owner of the Machine	13
Roles and Requirements of the Administrator	13
Password Usage Requirements	13
External authentication server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	16
Precautions for using the printer driver	17
1.4 Miscellaneous	18
Password Rules	18
Precautions for Use of Various Types of Applications	19
Encrypting communications	19
IPsec setting	19
Print functions	20
IPP printing	20
Items of Data Cleared by Overwrite All Data Function	21
USB keyboard	22
Different types of boxes	22
Hardware and software used in the machine	23
Firmware integrity verification function	23
CS Remote Care function	23
Terminating a Session and Logging out	23
Authentication error during external server authentication	24
2 Administrator Operations	26
2.1 Accessing the Administrator Mode	26
2.1.1 Accessing the Administrator Mode	26
2.1.2 Accessing the User Mode	32
2.2 Enhancing the Security Function	36
2.2.1 Items cleared by HDD Format	38
2.2.2 Setting the Password Rules	39
2.2.3 Setting the Enhanced Security Mode	41
2.3 Protecting Machine from Illegal Firmware Update	44
Setting the FW Update (USB) Password	44
2.4 Preventing Unauthorized Access	47
Setting Prohibited Functions When Authentication Error	47
2.5 Canceling the Operation Prohibited State	49
Performing Release Setting	49
2.6 Setting the Authentication Method	51
2.6.1 Setting the Authentication Method	51
2.6.2 Setting the External Server	54
2.7 ID & Print Setting Function	56
Setting ID & Print	56
2.8 ID & Print Operation Setting Function	58
Making ID & Print Operation Setting	58
2.9 Auth. Operation Setting when print Documents are Stored Function	59
Setting Auth. Operation Setting when print Documents are Stored Function	59
2.10 System Auto Reset Function	60
Setting the System Auto Reset function	60
2.11 User Setting Function	62
Making user setting	63
2.12 Account Track Setting Function	68
Making account setting	68
2.13 User Box Function	73
2.13.1 Setting the User Box	73
2.13.2 Changing the user/account attributes and box password	78
2.13.3 Setting Memory RX	83
2.14 Changing the Administrator Password	86
Changing the Administrator Password	86
2.15 Protecting Data in the HDD	89
2.15.1 Setting the Encryption Key (encryption word)	89
2.15.2 Changing the Encryption Key	93
2.15.3 Setting the Overwrite HDD Data	95
2.16 Overwrite All Data Function	97
Setting the Overwrite All Data function	97
2.17 Obtaining Job Log	99
2.17.1 Obtaining and deleting a Job Log	99
2.17.2 Downloading the Job Log data	102
Job Log data	104
2.18 Setting time/date in machine	107
2.18.1 Setting time/date	107
2.18.2 Setting daylight saving time	110
2.19 SSL Setting Function	112
2.19.1 Device Certificate Setting	112
2.19.2 SSL Setting	114
2.19.3 Removing a Certificate	115
2.20 TCP/IP Setting Function	116
2.20.1 Setting the IP Address	116
2.20.2 Registering the DNS Server	117
2.21 E-Mail Setting Function	118
Setting the SMTP Server (E-Mail Server)	118
3 User Operations	120
3.1 User Authentication Function	120
3.1.1 Performing user authentication	120
3.1.2 Accessing the ID & Print Document	124
3.2 Change Password Function	125
Performing Change Password	125
3.3 Secure Print Function	128
Accessing the Secure Print Document	128
3.4 User Box Function	131
3.4.1 Setting the User Box	131
3.4.2 Changing the user/account attributes and box password	136
3.4.3 Accessing the User Box and User Box file	142
4 Application Software	148
4.1 Data Administrator	148
4.1.1 Accessing from Data Administrator	148
4.1.2 Setting the user authentication method	151
4.1.3 Changing the authentication mode	152
4.1.4 Making the user settings	154
4.1.5 Making the account settings	155
4.1.6 DNS Server Setting Function	156

Konica Minolta bizhub 558e bizhub 658e/558e/458e Security Operations User Manu - Page 23

Hardware and software used in the machine, Firmware integrity verification function

Page 23 highlights