Konica Minolta bizhub C258 bizhub C368/C308/C258 Security Operations User Manu - Page 14

bizhub C368/C308/C258

1-10

1.3

Precautions for Operation Control

1

-

The administrator of the machine should have the user administrator log on to the User Mode and

change his or her password in [Utility] - [User Settings] - [Change Password] if he or she changes the

password.

-

The administrator should make sure that any user does not set any number that can easily be guessed

from birthdays, employee identification numbers, and the like for the passwords set for the User Au-

thentication and Secure Print.

-

The administrator should disclose the Account Password to the user in accordance with the operating

environment of the machine and the security policies of the organization on his or her own responsibil-

ity.

External authentication server control requirements

The administrator of the machine and the server administrator are required to apply patches to, or perform

account control for, this machine and the external authentication server connected to the office LAN in which

the machine is installed to ensure operation control that achieves appropriate access control.

This machine can be used only after the user who uses this machine has been registered in the external au-

thentication server. The server administrator should also check registered users at regular intervals to thereby

ensure that any unnecessary users are left registered.

Security function operation setting operating requirements

The administrator of the machine should observe the following operating conditions.

-

The administrator of the machine should make sure that the machine is operated with the settings de-

scribed in the installation checklist made properly in advance.

-

The administrator of the machine should make sure of correct operation control so that the machine is

used with the Enhanced Security Mode set to [ON].

-

The administrator of the machine should make sure of correct operation control so that the appropriate

FW Update (USB) Password is used with [FW Update (USB) Permission Setting] set to [Password Pri-

ority].

-

When the Enhanced Security Mode is turned [OFF], the administrator of the machine is to make various

settings according to the installation checklist and then set the Enhanced Security Mode to [ON] again.

For details of settings made by the service engineer, contact your service representative.

-

When the machine is to be discarded or use of a leased machine is terminated at the end of the leasing

contract, the administrator of the machine should use the Overwrite HDD Data function and the Over-

write All Data function to thereby prevent data to be protected from leaking.

Operation and control of the machine

The administrator of the machine should perform the following operation control.

-

The administrator of the machine should log off from the Administrator Mode whenever the operation

in the Administrator Mode is completed. The administrator of the machine should also make sure that

each individual user logs off from the User Authentication mode after the operation in the User Authen-

tication mode is completed, including operation of the Secure Print document, User Box, and User Box

file.

-

During user registration and box registration, the administrator of the machine should make sure that

the correct settings are made for the correct users, including functional restrictions and box attributes.

-

The administrator of the machine should set the Encryption Key and FW Update (USB) Password ac-

cording to the environment, in which this machine is used.

-

The administrator of the machine should appropriately control the device certificate (SSL certificate)

registered in the machine.

-

The administrator of the machine should ensure that no illegal connection or access is attempted when

the machine is to be connected to an external interface.

-

The administrator of the machine should appropriately control the file of Job Log (Audit Log) data down-

loaded to, for example, a PC and ensure that none other than the administrator handles it.

-

The administrator of the machine should check the Job Log (Audit Log) data at appropriate timing,

thereby determining whether a security compromise or a faulty condition has occurred during an oper-

ating period.

-

When generating or deleting Job Log (Audit Log) and Job Log (Audit Log) data, the administrator of the

machine should check conditions of using this machine by the user.

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Administrators	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	8
1.2 Security Functions	11
Check Count Clear Conditions	11
1.3 Precautions for Operation Control	13
Roles of the Owner of the Machine	13
Roles and Requirements of the Administrator of the machine	13
Password Usage Requirements	13
External authentication server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	16
Precautions for using the printer driver	16
1.4 Miscellaneous	17
Password Rules	17
Precautions for Use of Various Types of Applications	18
Encrypting communications	18
Print functions	18
IPP printing	19
Items of Data Cleared by Overwrite All Data Function	19
Fax functions	20
USB keyboard	20
Different types of boxes	20
Hardware and software used in the machine	21
Firmware integrity verification function	21
IPsec setting	21
CS Remote Care function	21
Terminating a Session and Logging out	22
Authentication error during external server authentication	22
2 Administrator Operations	24
2.1 Accessing the Administrator Mode	24
2.1.1 Accessing the Administrator Mode	24
2.1.2 Accessing the User Mode	30
2.2 Enhancing the Security Function	34
2.2.1 Items cleared by HDD Format	36
2.2.2 Setting the Password Rules	37
2.2.3 Setting the Enhanced Security Mode	39
2.3 Protecting Machine from Illegal Firmware Update	42
Setting the FW Update (USB) Password	42
2.4 Preventing Unauthorized Access	43
Setting Prohibited Functions When Authentication Error	43
2.5 Canceling the Operation Prohibited State	45
Performing Release Setting	45
2.6 Setting the Authentication Method	47
2.6.1 Setting the Authentication Method	47
2.6.2 Setting the External Server	50
2.7 ID & Print Setting Function	53
Setting ID & Print	53
2.8 System Auto Reset Function	55
Setting the System Auto Reset function	55
2.9 User Setting Function	57
Making user setting	58
2.10 Account Track Setting Function	63
Making account setting	63
2.11 User Box Function	68
2.11.1 Setting the User Box	68
2.11.2 Changing the user/account attributes and box password	73
2.11.3 Setting Memory RX	78
2.12 Changing the Administrator Password	81
Changing the Administrator Password	81
2.13 Protecting Data in the HDD	84
2.13.1 Setting the Encryption Key (encryption word)	84
2.13.2 Changing the Encryption Key	88
2.13.3 Setting the Overwrite HDD Data	90
2.14 Overwrite All Data Function	92
Setting the Overwrite All Data function	92
2.15 Obtaining Job Log	95
2.15.1 Obtaining and deleting a Job Log	95
2.15.2 Downloading the Job Log data	97
Job Log data	99
2.16 Setting time/date in machine	106
2.16.1 Setting time/date	106
2.16.2 Setting daylight saving time	109
2.17 SSL Setting Function	111
2.17.1 Device Certificate Setting	111
2.17.2 SSL Setting	113
2.17.3 Removing a Certificate	114
2.18 TCP/IP Setting Function	115
2.18.1 Setting the IP Address	115
2.18.2 Registering the DNS Server	116
2.19 AppleTalk Setting Function	117
Making the AppleTalk Setting	117
2.20 E-Mail Setting Function	118
Setting the SMTP Server (E-Mail Server)	118
3 User Operations	120
3.1 User Authentication Function	120
3.1.1 Performing user authentication	120
3.1.2 Accessing the ID & Print Document	124
3.2 Change Password Function	126
Performing Change Password	126
3.3 Secure Print Function	129
Accessing the Secure Print Document	129
3.4 User Box Function	132
3.4.1 Setting the User Box	132
3.4.2 Changing the user/account attributes and box password	137
3.4.3 Accessing the User Box and User Box file	143
4 Application Software	148
4.1 Data Administrator	148
4.1.1 Accessing from Data Administrator	148
4.1.2 Setting the user authentication method	151
4.1.3 Changing the authentication mode	152
4.1.4 Making the user settings	154
4.1.5 Making the account settings	155
4.1.6 DNS Server Setting Function	156
4.1.7 AppleTalk Setting Function	157

Konica Minolta bizhub C258 bizhub C368/C308/C258 Security Operations User Manu - Page 14

External authentication server control requirements

Page 14 highlights