Konica Minolta bizhub 558e bizhub 658e/558e/458e Security Operations User Manu - Page 8

bizhub 658e/558e/458e

1-4

1.1

Introduction

1

INSTALLATION CHECKLIST

This Installation Checklist contains items that are to be check by the Service Engineer installing this machine.

The Service Engineer should check the following items, then explain each checked item to the administrator

of the machine.

To Service Engineer

Make sure that each of these items is properly carried out by checking the box on the right of each item.

1.

Perform the following steps before installing this machine.

Check with the administrator of the machine to determine if the security functions of this

machine should be enhanced. If the functions should be enhanced, check the following.

If the security functions are not to be enhanced, quit the operation without checking the

following.

Before installing the machine, check with the administrator of the machine to determine if

the following is confirmed.

•

Whether the Service Engineer has been informed that the unpacking procedure is to

be performed by the Service Engineer in the presence of the administrator.

•

Whether the machine and the

Fax Kit FK-514

have been under the control of the ad-

ministrator of the machine with a check made to ensure that evidently the machine and

the

Fax Kit FK-514

have not been unpacked or used.

The Service Engineer should obtain the administrator's consent to the performance of this

item.

If the machine and the

Fax Kit FK-514

have been unpacked, check with the administrator

that it was the administrator who unpacked the machine and the

Fax Kit FK-514

and no-

body but the administrator has gain access to the machine and the

Fax Kit FK-514

after

the unpacking. Then, obtain the administrator's consent to the performance of the instal-

lation procedure for the unpacked machine and the

Fax Kit FK-514

before attempting to

start the procedure. If the administrator's consent cannot be obtained, call the dealer.

I swear that I would never disclose information as it relates to the settings of this machine

to anybody, or perform malicious or intentional act during setup and service procedures

for the machine.

When giving a copy of the User's Guide, explain the following to the administrator:

•

A digital signature is assigned to the data certified by ISO15408. To ensure integrity of

the file, have the administrator of the machine confirm the digital signature using the

property of the provided data file in the user's PC environment.

Confirm the digital signature as follows.

Right click the provided exe file to display the property screen.

Select [Digital Signatures] - [Details] - [General], and check that Konica Minolta, Inc. is

displayed in the Name of signer field.

Select [View Certificate] - [General]. Then, check that the signing time is within the val-

idated date of the certificate and that the certificate has been issued by a reliable cer-

tification authority.

Write down the serial number shown in [View Certificate] - [Details]. Access to the URL

for CRL Distribution Points and confirm that the serial number is not shown in

[Revocation List]. For confirmation, the Internet environment is required.

•

Two versions are available, the HTML version and User's Guide Security Operations

(this User's Guide).

•

In HTML version, option settings are described including functions those can be uni-

versally configured, but it does not mean that all of them are available.

•

This User's Guide must first be read and the conditions described in this User's Guide

take precedence over the HTML version.

•

If the security functions of the machine are to be enhanced, the machine and its sur-

rounding environment should be set up and operated according to this User's Guide.

Refer to the Service Manual and perform the required installation and setup steps.

During the installation and setup procedure, make sure that no unnecessary parts are

mounted on the machine and have the administrator of the machine confirm that no un-

necessary parts are mounted on the machine.

•

Explain to the administrator making him/her check the cover of the Service Manual to

be referred that it is for bizhub 658e/bizhub 558e/bizhub 458e (Version: G00-09).

Explain to the administrator that the following settings must be performed referring to

the manuals above.

•

The Service Engineer must have the administrator confirm that the digital signature is

assigned to the firmware and the version of the firmware to be updated is the one that

is written on the Service Manual.

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Administrators	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	8
1.2 Security Functions	11
Check Count Clear Conditions	11
1.3 Precautions for Operation Control	13
Roles of the Owner of the Machine	13
Roles and Requirements of the Administrator	13
Password Usage Requirements	13
External authentication server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	16
Precautions for using the printer driver	17
1.4 Miscellaneous	18
Password Rules	18
Precautions for Use of Various Types of Applications	19
Encrypting communications	19
IPsec setting	19
Print functions	20
IPP printing	20
Items of Data Cleared by Overwrite All Data Function	21
USB keyboard	22
Different types of boxes	22
Hardware and software used in the machine	23
Firmware integrity verification function	23
CS Remote Care function	23
Terminating a Session and Logging out	23
Authentication error during external server authentication	24
2 Administrator Operations	26
2.1 Accessing the Administrator Mode	26
2.1.1 Accessing the Administrator Mode	26
2.1.2 Accessing the User Mode	32
2.2 Enhancing the Security Function	36
2.2.1 Items cleared by HDD Format	38
2.2.2 Setting the Password Rules	39
2.2.3 Setting the Enhanced Security Mode	41
2.3 Protecting Machine from Illegal Firmware Update	44
Setting the FW Update (USB) Password	44
2.4 Preventing Unauthorized Access	47
Setting Prohibited Functions When Authentication Error	47
2.5 Canceling the Operation Prohibited State	49
Performing Release Setting	49
2.6 Setting the Authentication Method	51
2.6.1 Setting the Authentication Method	51
2.6.2 Setting the External Server	54
2.7 ID & Print Setting Function	56
Setting ID & Print	56
2.8 ID & Print Operation Setting Function	58
Making ID & Print Operation Setting	58
2.9 Auth. Operation Setting when print Documents are Stored Function	59
Setting Auth. Operation Setting when print Documents are Stored Function	59
2.10 System Auto Reset Function	60
Setting the System Auto Reset function	60
2.11 User Setting Function	62
Making user setting	63
2.12 Account Track Setting Function	68
Making account setting	68
2.13 User Box Function	73
2.13.1 Setting the User Box	73
2.13.2 Changing the user/account attributes and box password	78
2.13.3 Setting Memory RX	83
2.14 Changing the Administrator Password	86
Changing the Administrator Password	86
2.15 Protecting Data in the HDD	89
2.15.1 Setting the Encryption Key (encryption word)	89
2.15.2 Changing the Encryption Key	93
2.15.3 Setting the Overwrite HDD Data	95
2.16 Overwrite All Data Function	97
Setting the Overwrite All Data function	97
2.17 Obtaining Job Log	99
2.17.1 Obtaining and deleting a Job Log	99
2.17.2 Downloading the Job Log data	102
Job Log data	104
2.18 Setting time/date in machine	107
2.18.1 Setting time/date	107
2.18.2 Setting daylight saving time	110
2.19 SSL Setting Function	112
2.19.1 Device Certificate Setting	112
2.19.2 SSL Setting	114
2.19.3 Removing a Certificate	115
2.20 TCP/IP Setting Function	116
2.20.1 Setting the IP Address	116
2.20.2 Registering the DNS Server	117
2.21 E-Mail Setting Function	118
Setting the SMTP Server (E-Mail Server)	118
3 User Operations	120
3.1 User Authentication Function	120
3.1.1 Performing user authentication	120
3.1.2 Accessing the ID & Print Document	124
3.2 Change Password Function	125
Performing Change Password	125
3.3 Secure Print Function	128
Accessing the Secure Print Document	128
3.4 User Box Function	131
3.4.1 Setting the User Box	131
3.4.2 Changing the user/account attributes and box password	136
3.4.3 Accessing the User Box and User Box file	142
4 Application Software	148
4.1 Data Administrator	148
4.1.1 Accessing from Data Administrator	148
4.1.2 Setting the user authentication method	151
4.1.3 Changing the authentication mode	152
4.1.4 Making the user settings	154
4.1.5 Making the account settings	155
4.1.6 DNS Server Setting Function	156

Konica Minolta bizhub 558e bizhub 658e/558e/458e Security Operations User Manu - Page 8

INSTALLATION CHECKLIST, Select [Digital Signatures] - [Details] - [General]

Page 8 highlights