Konica Minolta bizhub C287 bizhub C287/C227 Security Operations User Manual - Page 21

bizhub C287/C227

1-17

1.4

Miscellaneous

1

Firmware integrity verification function

When the

main power switch

is turned ON with the Enhanced Security Mode set to [ON], the machine

checks the encryption key and the hash value to thereby determine that its firmware is fully operational.

If a fault occurs in the firmware, a malfunction screen appears when the machine is started, warning that a

fault has occurred. To reset the fault condition, turn [OFF] the Enhanced Security Mode and restart the ma-

chine, or update the firmware. For more details, consult your Service Representative.

IPsec setting

This machine offers a choice of two authentication methods of [Pre-Shared Key] and [Digital Signature] for

authenticating the remote machine with which to communicate.

When [Pre-Shared Key] is to be used, control the pre-shared key appropriately to ensure that it is not leaked

to any third party other than the remote machine with which to communicate. For the shared key, set a value

that consists of a combination of eight or more alphanumeric characters and that cannot be easily guessed.

Do not set a value that can be easily guessed from your birthday, employee identification number, and the

like.

[Digital Signature] has a higher security strength than [Pre-Shared Key].

The ISO15408 evaluation for the machine is performed on the basis of the [Pre-Shared Key].

[Main Mode] and [Aggressive Mode] are available in [Negotiation Mode] of [IKE Settings]. The default setting

is [Main Mode]. The administrator should operate the machine with the [Main Mode] setting.

CS Remote Care function

CS Remote Care is a system that manages the machine through transmission and reception of various types

of data for managing the machine between the machine and the CS Remote Care center computer via a tele-

phone/fax line, a network, or E-mail. Functions are disabled to access the LAN from the telephone line and

to directly transfer received fax.

When the Enhanced Security Mode is set to [ON], the following functions are no longer usable: instructing to

rewrite the firmware, sending and receiving account counter information, rewriting settings of the machine,

and the Counter Remote Control function.

Terminating a Session and Logging out

The machine allows the operator to automatically log out from or terminate a session, if it is unable to detect

an operation on the control panel or a communication packet on the network. Additionally, if a user changes

the user password on the control panel while the same user accessing the machine via

Web Connection

,

the session of

Web Connection

is terminated.

The following shows the setting range and the default setting of each function. Set the time according to the

environment in which the machine is used.

The administrator should explain to the user that the following settings are made. The administrator should

also explain to the user immediately as soon as the setting has been changed.

Function name/software, etc

Description

System Auto Reset

Setting range

•

[1] to [9] minutes, Default setting: [1] minute

Setting procedure

•

[Utility] - [Administrator Settings] - [System Settings] - [Reset Set-

tings] - [System Auto Reset]

Auto Logout

(

Web Connection

)

Setting range

•

[Admin. Mode Logout Time]: [1] to [60] minutes

Default setting: [10] minutes

•

[User Mode Logout Time]: [1] to [60] minutes

Default setting: [60] minutes

Setting procedure

•

Start the

Web Connection

and, in the Administrator Mode, select

[Security] - [Auto Logout].

Data Administrator

Default setting: [60] minutes (No change can be made in the setting)

The time setting represents consideration for the time-consuming

task, such as downloading the registered information. Be careful

about leaving your seat, because the time setting is rather long.

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Administrators	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	8
1.2 Security Functions	11
Check Count Clear Conditions	11
1.3 Precautions for Operation Control	13
Roles of the Owner of the Machine	13
Roles and Requirements of the Administrator of the machine	13
Password Usage Requirements	13
External authentication server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	16
Precautions for using the printer driver	16
1.4 Miscellaneous	17
Password Rules	17
Precautions for Use of Various Types of Applications	17
Encrypting communications	18
Print functions	18
IPP printing	18
Items of Data Cleared by Overwrite All Data Function	19
Fax functions	20
USB keyboard	20
Different types of boxes	20
Hardware and software used in the machine	20
Firmware integrity verification function	21
IPsec setting	21
CS Remote Care function	21
Terminating a Session and Logging out	21
Authentication error during external server authentication	22
2 Administrator Operations	24
2.1 Accessing the Administrator Mode	24
2.1.1 Accessing the Administrator Mode	24
2.1.2 Accessing the User Mode	30
2.2 Enhancing the Security Function	34
2.2.1 Items cleared by HDD Format	36
2.2.2 Setting the Password Rules	37
2.2.3 Setting the Enhanced Security Mode	39
2.3 Preventing Unauthorized Access	42
Setting Prohibited Functions When Authentication Error	42
2.4 Canceling the Operation Prohibited State	44
Performing Release Setting	44
2.5 Setting the Authentication Method	46
2.5.1 Setting the Authentication Method	46
2.5.2 Setting the External Server	49
2.6 ID & Print Setting Function	52
Setting ID & Print	52
2.7 System Auto Reset Function	54
Setting the System Auto Reset function	54
2.8 User Setting Function	56
Making user setting	57
2.9 Account Track Setting Function	62
Making account setting	62
2.10 User Box Function	67
2.10.1 Setting the User Box	67
2.10.2 Changing the user/account attributes and box password	72
2.10.3 Setting Memory RX	77
2.11 Changing the Administrator Password	80
Changing the Administrator Password	80
2.12 Protecting Data in the HDD	83
2.12.1 Setting the Encryption Key (encryption word)	83
2.12.2 Changing the Encryption Key	87
2.12.3 Setting the Overwrite HDD Data	89
2.13 Overwrite All Data Function	91
Setting the Overwrite All Data function	91
2.14 Obtaining Job Log	94
2.14.1 Obtaining and deleting a Job Log	94
2.14.2 Downloading the Job Log data	96
Job Log data	98
2.15 Setting time/date in machine	105
2.15.1 Setting time/date	105
2.15.2 Setting daylight saving time	108
2.16 SSL Setting Function	110
2.16.1 Device Certificate Setting	110
2.16.2 SSL Setting	112
2.16.3 Removing a Certificate	113
2.17 TCP/IP Setting Function	114
2.17.1 Setting the IP Address	114
2.17.2 Registering the DNS Server	115
2.18 AppleTalk Setting Function	116
Making the AppleTalk Setting	116
2.19 E-Mail Setting Function	117
Setting the SMTP Server (E-Mail Server)	117
3 User Operations	119
3.1 User Authentication Function	119
3.1.1 Performing user authentication	119
3.1.2 Accessing the ID & Print Document	123
3.2 Change Password Function	125
Performing Change Password	125
3.3 Secure Print Function	128
Accessing the Secure Print Document	128
3.4 User Box Function	131
3.4.1 Setting the User Box	131
3.4.2 Changing the user/account attributes and box password	136
3.4.3 Accessing the User Box and User Box file	142
4 Application Software	147
4.1 Data Administrator	147
4.1.1 Accessing from Data Administrator	147
4.1.2 Setting the user authentication method	150
4.1.3 Changing the authentication mode	151
4.1.4 Making the user settings	153
4.1.5 Making the account settings	154
4.1.6 DNS Server Setting Function	155
4.1.7 AppleTalk Setting Function	156

Konica Minolta bizhub C287 bizhub C287/C227 Security Operations User Manual - Page 21

Firmware integrity verification function, IPsec setting, CS Remote Care function - admin password

Page 21 highlights