Konica Minolta bizhub C258 bizhub C368/C308/C258 Security Operations User Manu - Page 13

bizhub C368/C308/C258

1-9

1.3

Precautions for Operation Control

1

1.3

Precautions for Operation Control

This machine and the data handled by this machine should be used in an office environment that meets the

following conditions. The machine must be controlled for its operation under the following conditions to pro-

tect the data that should be protected.

Roles of the Owner of the Machine

The owner (an individual or an organization) of the machine should take full responsibility for controlling the

machine, thereby ensuring that no improper operations are performed.

-

The owner of the machine should have the administrator of the machine recognize the organizational

security policy and procedure, educate him or her to comply with the guidance and documents pre-

pared by the manufacturer, and allow time for him or her to acquire required ability. The owner of the

machine should also operate and manage the machine so that the administrator of the machine can

configure and operate the machine appropriately according to the policy and procedure.

-

The owner of the machine should have users of the machine recognize the organizational security policy

and procedure, educate them to follow the policy and procedure, and operate and manage the machine

so that the users acquire the required ability.

-

The owner of the machine should vest the user with authority to use the machine according to the or-

ganizational security policy and procedure.

-

The owner of the machine should operate and manage the machine so that the administrator of the ma-

chine checks the Job Log (Audit Log) data at appropriate timing to thereby determine whether a security

compromise or a faulty condition has occurred during an operating period.

-

If the Job Log (Audit Log) data is to be exported to another product, the owner of the machine should

ensure that only the administrator of the machine performs the task. The owner of the machine should

also operate and manage the machine so that the Job Log (Audit Log) data is not illegally accessed,

deleted, or altered.

Roles and Requirements of the Administrator of the machine

The administrator of the machine should take full responsibility for controlling the machine, thereby ensuring

that no improper operations are performed.

-

A person who is capable of taking full responsibility for controlling the machine should be appointed as

the administrator of the machine to make sure that no improper operations are performed.

-

When using an SMTP server (mail server) or an DNS server, each server should be appropriately man-

aged by the administrator and should be periodically checked to confirm that settings have not been

changed without permission.

Password Usage Requirements

The administrator must control the Administrator Password, Encryption Key, FW Update (USB) Password,

and User Box Password appropriately so that they may not be leaked. These passwords should not be ones

that can be easily guessed. The user, on the other hand, should control the Secure Print Password and User

Password appropriately so that they may not be leaked. Again, these passwords should not be ones that can

be easily guessed.

<To Achieve Effective Security>

-

Make absolutely sure that only the administrator knows the Administrator Password, Encryption Key,

FW Update (USB) Password, and User Box Password.

-

The administrator must change the Administrator Password, Encryption Key, FW Update (USB) Pass-

word, and User Box Password at regular intervals.

-

The administrator should make sure that any number that can easily be guessed from birthdays, em-

ployee identification numbers, and the like is not set for the Administrator Password, Account Pass-

word, Encryption Key, FW Update (USB) Password, and User Box Password.

-

If a User Password has been changed, the administrator should have the corresponding user change

the password as soon as possible.

-

If the Administrator Password has been changed by the Service Engineer, the administrator should

change the Administrator Password as soon as possible.

-

The administrator should have users ensure that the passwords set for the User Authentication, Secure

Print, and the box that can be used by the user are known only by the user concerned.

-

The administrator should have users change the passwords set for the User Authentication at regular

intervals.

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Administrators	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	8
1.2 Security Functions	11
Check Count Clear Conditions	11
1.3 Precautions for Operation Control	13
Roles of the Owner of the Machine	13
Roles and Requirements of the Administrator of the machine	13
Password Usage Requirements	13
External authentication server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	16
Precautions for using the printer driver	16
1.4 Miscellaneous	17
Password Rules	17
Precautions for Use of Various Types of Applications	18
Encrypting communications	18
Print functions	18
IPP printing	19
Items of Data Cleared by Overwrite All Data Function	19
Fax functions	20
USB keyboard	20
Different types of boxes	20
Hardware and software used in the machine	21
Firmware integrity verification function	21
IPsec setting	21
CS Remote Care function	21
Terminating a Session and Logging out	22
Authentication error during external server authentication	22
2 Administrator Operations	24
2.1 Accessing the Administrator Mode	24
2.1.1 Accessing the Administrator Mode	24
2.1.2 Accessing the User Mode	30
2.2 Enhancing the Security Function	34
2.2.1 Items cleared by HDD Format	36
2.2.2 Setting the Password Rules	37
2.2.3 Setting the Enhanced Security Mode	39
2.3 Protecting Machine from Illegal Firmware Update	42
Setting the FW Update (USB) Password	42
2.4 Preventing Unauthorized Access	43
Setting Prohibited Functions When Authentication Error	43
2.5 Canceling the Operation Prohibited State	45
Performing Release Setting	45
2.6 Setting the Authentication Method	47
2.6.1 Setting the Authentication Method	47
2.6.2 Setting the External Server	50
2.7 ID & Print Setting Function	53
Setting ID & Print	53
2.8 System Auto Reset Function	55
Setting the System Auto Reset function	55
2.9 User Setting Function	57
Making user setting	58
2.10 Account Track Setting Function	63
Making account setting	63
2.11 User Box Function	68
2.11.1 Setting the User Box	68
2.11.2 Changing the user/account attributes and box password	73
2.11.3 Setting Memory RX	78
2.12 Changing the Administrator Password	81
Changing the Administrator Password	81
2.13 Protecting Data in the HDD	84
2.13.1 Setting the Encryption Key (encryption word)	84
2.13.2 Changing the Encryption Key	88
2.13.3 Setting the Overwrite HDD Data	90
2.14 Overwrite All Data Function	92
Setting the Overwrite All Data function	92
2.15 Obtaining Job Log	95
2.15.1 Obtaining and deleting a Job Log	95
2.15.2 Downloading the Job Log data	97
Job Log data	99
2.16 Setting time/date in machine	106
2.16.1 Setting time/date	106
2.16.2 Setting daylight saving time	109
2.17 SSL Setting Function	111
2.17.1 Device Certificate Setting	111
2.17.2 SSL Setting	113
2.17.3 Removing a Certificate	114
2.18 TCP/IP Setting Function	115
2.18.1 Setting the IP Address	115
2.18.2 Registering the DNS Server	116
2.19 AppleTalk Setting Function	117
Making the AppleTalk Setting	117
2.20 E-Mail Setting Function	118
Setting the SMTP Server (E-Mail Server)	118
3 User Operations	120
3.1 User Authentication Function	120
3.1.1 Performing user authentication	120
3.1.2 Accessing the ID & Print Document	124
3.2 Change Password Function	126
Performing Change Password	126
3.3 Secure Print Function	129
Accessing the Secure Print Document	129
3.4 User Box Function	132
3.4.1 Setting the User Box	132
3.4.2 Changing the user/account attributes and box password	137
3.4.3 Accessing the User Box and User Box file	143
4 Application Software	148
4.1 Data Administrator	148
4.1.1 Accessing from Data Administrator	148
4.1.2 Setting the user authentication method	151
4.1.3 Changing the authentication mode	152
4.1.4 Making the user settings	154
4.1.5 Making the account settings	155
4.1.6 DNS Server Setting Function	156
4.1.7 AppleTalk Setting Function	157

Konica Minolta bizhub C258 bizhub C368/C308/C258 Security Operations User Manu - Page 13

Precautions for Operation Control, Roles of the Owner of the Machine

Page 13 highlights