Konica Minolta bizhub C227 bizhub C287/C227 Security Operations User Manual - Page 18

bizhub C287/C227

1-14

1.4

Miscellaneous

1

-

Do not access any other site once you have logged onto the machine with the

Web Connection

. Ac-

cessing any other site or a link included in e-mail, in particular, can lead to execution of an unintended

type of operation. Whenever access to any other site is necessary, be sure first to log off from the ma-

chine through the

Web Connection

.

-

Using the same password a number of times increases the risk of spoofing.

-

If a web browser such as Internet Explorer is used on the client PC side, "TLS v1" should be used for

the SSL setting.

-

Optional applications not described in this User’s Guide are not covered by certification of ISO15408.

Encrypting communications

The following are the cryptographic algorithms of key exchange and communications encryption systems

supported in generation of encryption keys.

-

TLS_RSA_WITH_3DES_EDE_CBC_SHA

-

TLS_RSA_WITH_AES_128_CBC_SHA

-

TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA

-

TLS_DHE_RSA_WITH_AES_256_CBC_SHA

NOTICE

The administrator should make sure that SSL encryption communication is not performed with the SSL set in

SSL v3.

Do not use an SSL certificate that is electronically signed by MD5, as an increased risk results of data to be

protected being tampered with or leaked.

To eliminate the risk of the data to be protected being tampered with or leaked, refer to the recommended

ciphers list disclosed by, for example, NIST and CRYPTREC and use the appropriate cryptographic tech-

nique.

Use the following browsers to ensure SSL encryption communication with appropriate strength. Use of any

of the following browsers achieves SSL encryption communication that ensures confidentiality of the image

data transmitted and received.

Microsoft Internet Explorer

-

9/10/11

Mozilla Firefox

-

20 or later

Microsoft Internet Explorer 11 is used for the ISO15408 evaluation for this machine.

Print functions

Only the following procedures are guaranteed for the print functions performed from the client PC.

-

Use IPPS printing for the print functions performed using the printer driver.

-

Use direct printing from the

Web Connection

for the print functions not performed via the printer driver.

IPP printing

IPP (Internet Printing Protocol) is a function that allows Secure Print documents and image data stored in

boxes to be printed via the Internet by using the HTTP (HyperText Transfer Protocol) of the TCP/IP Protocol.

IPPS (IPP over SSL/TLS) is the type of IPP that performs the SSL encryption communication.

<Installing printer driver>

To perform IPPS printing, the printer driver must be installed. Start the printer addition wizard of the Windows

Vista/7/8/8.1/Server 2008/Server 2008 R2/Server 2012/Server 2012 R2 and type the IP address of this ma-

chine in the following format in the "URL" field.

https://[host name].[domain name]/ipp

For [host name] and [domain name], specify the names set with the DNS server.

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Administrators	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	8
1.2 Security Functions	11
Check Count Clear Conditions	11
1.3 Precautions for Operation Control	13
Roles of the Owner of the Machine	13
Roles and Requirements of the Administrator of the machine	13
Password Usage Requirements	13
External authentication server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	16
Precautions for using the printer driver	16
1.4 Miscellaneous	17
Password Rules	17
Precautions for Use of Various Types of Applications	17
Encrypting communications	18
Print functions	18
IPP printing	18
Items of Data Cleared by Overwrite All Data Function	19
Fax functions	20
USB keyboard	20
Different types of boxes	20
Hardware and software used in the machine	20
Firmware integrity verification function	21
IPsec setting	21
CS Remote Care function	21
Terminating a Session and Logging out	21
Authentication error during external server authentication	22
2 Administrator Operations	24
2.1 Accessing the Administrator Mode	24
2.1.1 Accessing the Administrator Mode	24
2.1.2 Accessing the User Mode	30
2.2 Enhancing the Security Function	34
2.2.1 Items cleared by HDD Format	36
2.2.2 Setting the Password Rules	37
2.2.3 Setting the Enhanced Security Mode	39
2.3 Preventing Unauthorized Access	42
Setting Prohibited Functions When Authentication Error	42
2.4 Canceling the Operation Prohibited State	44
Performing Release Setting	44
2.5 Setting the Authentication Method	46
2.5.1 Setting the Authentication Method	46
2.5.2 Setting the External Server	49
2.6 ID & Print Setting Function	52
Setting ID & Print	52
2.7 System Auto Reset Function	54
Setting the System Auto Reset function	54
2.8 User Setting Function	56
Making user setting	57
2.9 Account Track Setting Function	62
Making account setting	62
2.10 User Box Function	67
2.10.1 Setting the User Box	67
2.10.2 Changing the user/account attributes and box password	72
2.10.3 Setting Memory RX	77
2.11 Changing the Administrator Password	80
Changing the Administrator Password	80
2.12 Protecting Data in the HDD	83
2.12.1 Setting the Encryption Key (encryption word)	83
2.12.2 Changing the Encryption Key	87
2.12.3 Setting the Overwrite HDD Data	89
2.13 Overwrite All Data Function	91
Setting the Overwrite All Data function	91
2.14 Obtaining Job Log	94
2.14.1 Obtaining and deleting a Job Log	94
2.14.2 Downloading the Job Log data	96
Job Log data	98
2.15 Setting time/date in machine	105
2.15.1 Setting time/date	105
2.15.2 Setting daylight saving time	108
2.16 SSL Setting Function	110
2.16.1 Device Certificate Setting	110
2.16.2 SSL Setting	112
2.16.3 Removing a Certificate	113
2.17 TCP/IP Setting Function	114
2.17.1 Setting the IP Address	114
2.17.2 Registering the DNS Server	115
2.18 AppleTalk Setting Function	116
Making the AppleTalk Setting	116
2.19 E-Mail Setting Function	117
Setting the SMTP Server (E-Mail Server)	117
3 User Operations	119
3.1 User Authentication Function	119
3.1.1 Performing user authentication	119
3.1.2 Accessing the ID & Print Document	123
3.2 Change Password Function	125
Performing Change Password	125
3.3 Secure Print Function	128
Accessing the Secure Print Document	128
3.4 User Box Function	131
3.4.1 Setting the User Box	131
3.4.2 Changing the user/account attributes and box password	136
3.4.3 Accessing the User Box and User Box file	142
4 Application Software	147
4.1 Data Administrator	147
4.1.1 Accessing from Data Administrator	147
4.1.2 Setting the user authentication method	150
4.1.3 Changing the authentication mode	151
4.1.4 Making the user settings	153
4.1.5 Making the account settings	154
4.1.6 DNS Server Setting Function	155
4.1.7 AppleTalk Setting Function	156

Konica Minolta bizhub C227 bizhub C287/C227 Security Operations User Manual - Page 18

Encrypting communications, Print functions, IPP printing

Page 18 highlights