Konica Minolta bizhub 658e bizhub 658e/558e/458e Security Operations User Manu - Page 19

bizhub 658e/558e/458e

1-15

1.4

Miscellaneous

1

Precautions for Use of Various Types of Applications

Comply with the following requirements when using the

Web Connection

or an application of various other

types

The administrator should make sure that the user observes the following requirements.

-

The password control function of each application stores the password that has been entered in the PC

being used. Disable the password management function of each application and perform an operation

without storing a password.

Use a web browser or an application of various other types that shows "*" or "

-

" for the password en-

tered.

-

Once the password has been entered, do not leave your PC idle without logging on.

-

Set the web browser so that cache files are not saved.

-

To operate the machine through the configuration authenticated by the ISO15408, do not use any utility

that is available from the [Starting-up Data Management Utility] placed on the

Web connection

initial

screen.

-

Do not access any other site once you have logged onto the machine with the

Web Connection

. Ac-

cessing any other site or a link included in e-mail, in particular, can lead to execution of an unintended

type of operation. Whenever access to any other site is necessary, be sure first to log off from the ma-

chine through the

Web Connection

.

-

Using the same password a number of times increases the risk of spoofing.

-

If a web browser such as Internet Explorer is used on the client PC side, "TLS v1.0" or more should be

used for the SSL setting.

-

Optional applications not described in this User’s Guide are not covered by certification of ISO15408.

Encrypting communications

This machine guarantees encrypted communication via IPsec.

IPsec setting

This machine offers a choice of two authentication methods of [Pre-Shared Key] and [Digital Signature] for

authenticating the remote machine with which to communicate.

When [Pre-Shared Key] is to be used, control the pre-shared key appropriately to ensure that it is not leaked

to any third party other than the remote machine with which to communicate. For the shared key, set a value

that consists of a combination of eight to 128 alphanumeric characters and that cannot be easily guessed.

The number of characters and types of characters that can be used for the shared key are as follows:

-

Numeric characters: 0 to 9

-

Alpha characters: upper and lower case letters

-

Symbols: !, #, $, %, &, ', (, ), *, ,, -, ., /, :, ;, <, =, >, ?, @, [, \, ], ^, _, `, {, |, }, ~, +, SPACE

Selectable from among a total of 94 characters

Do not set a value that can be easily guessed from your birthday, employee identification number, and the

like.

[Digital Signature] has a higher security strength than [Pre-Shared Key].

The ISO15408 evaluation for the machine is performed on the basis of the [Pre-Shared Key].

Do not use DES or 3DES in the encryption algorithm of [IKE Settings]. Use AES. [Main Mode] and [Aggressive

Mode] are available in [Negotiation Mode]. The default setting is [Main Mode]. The administrator should op-

erate the machine with the [Main Mode] setting.

Leaking the pre shared key for IPsec set on the MFP increases the risk of spoofing of the MFP, etc. Therefore,

set machine-specific pre shared keys and manage them safely.

Using [Administrator Settings] - [Network Settings] - [TCP/IP Settings] - [IPsec Settings] - [Enable IPsec] -

[IPsec Policy] - [Common Settings], set [default action] to [Deny].

Select an ESP Encryption Algorithm from AES-GCM, AES-CBC, and AES-CTR for IPsec SA Settings. Fur-

thermore, when AES-CBC or AES-CTR is selected, select an ESP Authentication Algorithm from SHA-1,

SHA-2, and AES-XCBC.

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Administrators	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	8
1.2 Security Functions	11
Check Count Clear Conditions	11
1.3 Precautions for Operation Control	13
Roles of the Owner of the Machine	13
Roles and Requirements of the Administrator	13
Password Usage Requirements	13
External authentication server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	16
Precautions for using the printer driver	17
1.4 Miscellaneous	18
Password Rules	18
Precautions for Use of Various Types of Applications	19
Encrypting communications	19
IPsec setting	19
Print functions	20
IPP printing	20
Items of Data Cleared by Overwrite All Data Function	21
USB keyboard	22
Different types of boxes	22
Hardware and software used in the machine	23
Firmware integrity verification function	23
CS Remote Care function	23
Terminating a Session and Logging out	23
Authentication error during external server authentication	24
2 Administrator Operations	26
2.1 Accessing the Administrator Mode	26
2.1.1 Accessing the Administrator Mode	26
2.1.2 Accessing the User Mode	32
2.2 Enhancing the Security Function	36
2.2.1 Items cleared by HDD Format	38
2.2.2 Setting the Password Rules	39
2.2.3 Setting the Enhanced Security Mode	41
2.3 Protecting Machine from Illegal Firmware Update	44
Setting the FW Update (USB) Password	44
2.4 Preventing Unauthorized Access	47
Setting Prohibited Functions When Authentication Error	47
2.5 Canceling the Operation Prohibited State	49
Performing Release Setting	49
2.6 Setting the Authentication Method	51
2.6.1 Setting the Authentication Method	51
2.6.2 Setting the External Server	54
2.7 ID & Print Setting Function	56
Setting ID & Print	56
2.8 ID & Print Operation Setting Function	58
Making ID & Print Operation Setting	58
2.9 Auth. Operation Setting when print Documents are Stored Function	59
Setting Auth. Operation Setting when print Documents are Stored Function	59
2.10 System Auto Reset Function	60
Setting the System Auto Reset function	60
2.11 User Setting Function	62
Making user setting	63
2.12 Account Track Setting Function	68
Making account setting	68
2.13 User Box Function	73
2.13.1 Setting the User Box	73
2.13.2 Changing the user/account attributes and box password	78
2.13.3 Setting Memory RX	83
2.14 Changing the Administrator Password	86
Changing the Administrator Password	86
2.15 Protecting Data in the HDD	89
2.15.1 Setting the Encryption Key (encryption word)	89
2.15.2 Changing the Encryption Key	93
2.15.3 Setting the Overwrite HDD Data	95
2.16 Overwrite All Data Function	97
Setting the Overwrite All Data function	97
2.17 Obtaining Job Log	99
2.17.1 Obtaining and deleting a Job Log	99
2.17.2 Downloading the Job Log data	102
Job Log data	104
2.18 Setting time/date in machine	107
2.18.1 Setting time/date	107
2.18.2 Setting daylight saving time	110
2.19 SSL Setting Function	112
2.19.1 Device Certificate Setting	112
2.19.2 SSL Setting	114
2.19.3 Removing a Certificate	115
2.20 TCP/IP Setting Function	116
2.20.1 Setting the IP Address	116
2.20.2 Registering the DNS Server	117
2.21 E-Mail Setting Function	118
Setting the SMTP Server (E-Mail Server)	118
3 User Operations	120
3.1 User Authentication Function	120
3.1.1 Performing user authentication	120
3.1.2 Accessing the ID & Print Document	124
3.2 Change Password Function	125
Performing Change Password	125
3.3 Secure Print Function	128
Accessing the Secure Print Document	128
3.4 User Box Function	131
3.4.1 Setting the User Box	131
3.4.2 Changing the user/account attributes and box password	136
3.4.3 Accessing the User Box and User Box file	142
4 Application Software	148
4.1 Data Administrator	148
4.1.1 Accessing from Data Administrator	148
4.1.2 Setting the user authentication method	151
4.1.3 Changing the authentication mode	152
4.1.4 Making the user settings	154
4.1.5 Making the account settings	155
4.1.6 DNS Server Setting Function	156

Konica Minolta bizhub 658e bizhub 658e/558e/458e Security Operations User Manu - Page 19

Precautions for Use of Various Types of Applications, Encrypting communications, IPsec setting

Page 19 highlights