Konica Minolta bizhub C258 bizhub C368/C308/C258 Security Operations User Manu - Page 11

bizhub C368/C308/C258

1-7

1.2

Security Functions

1

1.2

Security Functions

Setting the Enhanced Security Mode to [ON] will validate the security function of this machine. For details of

the settings of different security functions to be changed by turning [ON] the Enhanced Security Mode, see

page 2-12.

The following the major security functions when the Enhanced Security Mode is set to [ON].

Check Count Clear Conditions

The following are the conditions for clearing or resetting the check count of the number of wrong entries at

the time of authentication by the Enhanced Security Mode.

<Administrator Mode>

-

Authentication of Administrator Mode is successful.

<User Authentication Mode>

-

Authentication of User Administrator is successful.

-

User Authentication mode is successful.

-

Release of Prohibited Functions When Authentication Error is executed.

<Account Track Mode>

-

Account Track mode is successful.

-

Release of Prohibited Functions When Authentication Error is executed.

Function

Description

Identification and au-

thentication function

Access control is then provided through password authentication for any ac-

cess to the Administrator Mode, User Authentication mode, User Box, a User

Box data file, and a Secure Print document. Access is thereby granted only

to the authenticated user. A password that can be set must meet the Pass-

word Rules. The machine does not accept setting of an easily decipherable

password. For details of the Password Rules, see page 1-13.

If a wrong password is entered, during password authentication, a predeter-

mined number of times (once to three times.) or more set by the administra-

tor, the machine determines that it is unauthorized access through Prohibited

Functions When Authentication Error, prohibiting any further entry of the

password. By prohibiting the password entry operation, the machine pre-

vents unauthorized use or removal of data. The administrator is responsible

for resetting the prohibition of the password entry operation. For details, see

page 2-23.

User limiting function

Specific functions to be used by each user/account may be limited. For de-

tails, see page 2-35.

HDD encryption function

By setting the Encryption Key, the data stored in the HDD is encrypted, there-

by protecting the data in the HDD. For details, see page 2-62.

Auditing function

Information including operations performed on the machine and a job history

can be stored in the HDD. Setting the Job Log (Audit Log) allows an illegal

act or inadequate operation performed on the machine to be traced. The ob-

tained Job Log can be downloaded and viewed from the

Web Connection

.

For details, see page 2-73.

Residual information de-

leting function

When the machine is to be discarded or use of a leased machine is terminat-

ed at the end of the leasing contract, setting of the Overwrite HDD Data func-

tion while the machine was in use allows residual unnecessary data to be

deleted, because the machine overwrites a specific overwrite value over the

unnecessary data. This prevents data leakage. (Passwords, addresses, and

other data set while the machine was in use should, however, be deleted

manually.) For details, see page 2-68.

To delete data including the passwords, addresses, and other data all at

once, the Overwrite All Data function overwrites and erases all data stored in

all spaces of the HDD. The function also resets all passwords saved in the

flash memory and eMMC to factory settings, preventing data from leaking.

For details, see page 2-70. For details of items to be cleared by Overwrite All

Data function, see page 1-15.

Network communication

protecting function

Communication data transmitted to or from the machine and client PC can

be encrypted using the SSL/TLS, which prevents information leakage

through sniffing over the network. For details, see page 2-89.

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Administrators	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	8
1.2 Security Functions	11
Check Count Clear Conditions	11
1.3 Precautions for Operation Control	13
Roles of the Owner of the Machine	13
Roles and Requirements of the Administrator of the machine	13
Password Usage Requirements	13
External authentication server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	16
Precautions for using the printer driver	16
1.4 Miscellaneous	17
Password Rules	17
Precautions for Use of Various Types of Applications	18
Encrypting communications	18
Print functions	18
IPP printing	19
Items of Data Cleared by Overwrite All Data Function	19
Fax functions	20
USB keyboard	20
Different types of boxes	20
Hardware and software used in the machine	21
Firmware integrity verification function	21
IPsec setting	21
CS Remote Care function	21
Terminating a Session and Logging out	22
Authentication error during external server authentication	22
2 Administrator Operations	24
2.1 Accessing the Administrator Mode	24
2.1.1 Accessing the Administrator Mode	24
2.1.2 Accessing the User Mode	30
2.2 Enhancing the Security Function	34
2.2.1 Items cleared by HDD Format	36
2.2.2 Setting the Password Rules	37
2.2.3 Setting the Enhanced Security Mode	39
2.3 Protecting Machine from Illegal Firmware Update	42
Setting the FW Update (USB) Password	42
2.4 Preventing Unauthorized Access	43
Setting Prohibited Functions When Authentication Error	43
2.5 Canceling the Operation Prohibited State	45
Performing Release Setting	45
2.6 Setting the Authentication Method	47
2.6.1 Setting the Authentication Method	47
2.6.2 Setting the External Server	50
2.7 ID & Print Setting Function	53
Setting ID & Print	53
2.8 System Auto Reset Function	55
Setting the System Auto Reset function	55
2.9 User Setting Function	57
Making user setting	58
2.10 Account Track Setting Function	63
Making account setting	63
2.11 User Box Function	68
2.11.1 Setting the User Box	68
2.11.2 Changing the user/account attributes and box password	73
2.11.3 Setting Memory RX	78
2.12 Changing the Administrator Password	81
Changing the Administrator Password	81
2.13 Protecting Data in the HDD	84
2.13.1 Setting the Encryption Key (encryption word)	84
2.13.2 Changing the Encryption Key	88
2.13.3 Setting the Overwrite HDD Data	90
2.14 Overwrite All Data Function	92
Setting the Overwrite All Data function	92
2.15 Obtaining Job Log	95
2.15.1 Obtaining and deleting a Job Log	95
2.15.2 Downloading the Job Log data	97
Job Log data	99
2.16 Setting time/date in machine	106
2.16.1 Setting time/date	106
2.16.2 Setting daylight saving time	109
2.17 SSL Setting Function	111
2.17.1 Device Certificate Setting	111
2.17.2 SSL Setting	113
2.17.3 Removing a Certificate	114
2.18 TCP/IP Setting Function	115
2.18.1 Setting the IP Address	115
2.18.2 Registering the DNS Server	116
2.19 AppleTalk Setting Function	117
Making the AppleTalk Setting	117
2.20 E-Mail Setting Function	118
Setting the SMTP Server (E-Mail Server)	118
3 User Operations	120
3.1 User Authentication Function	120
3.1.1 Performing user authentication	120
3.1.2 Accessing the ID & Print Document	124
3.2 Change Password Function	126
Performing Change Password	126
3.3 Secure Print Function	129
Accessing the Secure Print Document	129
3.4 User Box Function	132
3.4.1 Setting the User Box	132
3.4.2 Changing the user/account attributes and box password	137
3.4.3 Accessing the User Box and User Box file	143
4 Application Software	148
4.1 Data Administrator	148
4.1.1 Accessing from Data Administrator	148
4.1.2 Setting the user authentication method	151
4.1.3 Changing the authentication mode	152
4.1.4 Making the user settings	154
4.1.5 Making the account settings	155
4.1.6 DNS Server Setting Function	156
4.1.7 AppleTalk Setting Function	157

Konica Minolta bizhub C258 bizhub C368/C308/C258 Security Operations User Manu - Page 11

Security Functions, Check Count Clear Conditions - specifications

Page 11 highlights