Konica Minolta bizhub C287 bizhub C287/C227 Security Operations User Manual - Page 42

bizhub C287/C227

2-20

2.3

Preventing Unauthorized Access

2

2.3

Preventing Unauthorized Access

When a log-on to the Administrator Mode becomes successful, the machine enables setting of the operation

of Prohibited Functions When Authentication Error. The machine takes a count of the cumulative number of

unsuccessful accesses from each interface to the Administrator Mode, User Authentication, Account Track,

Secure Print authentication, and User Box authentication to prohibit the authentication operation.

Either [Mode 1] or [Mode 2] can be selected for Prohibited Functions When Authentication Error. The factory

setting is [Mode 1]. If the Enhanced Security Mode is set to [ON], the setting is changed to [Mode 2] (check

count: three times). It is nonetheless possible to change the check count to select from among once, twice,

or three times.

If [Mode 2] is selected, the Release Time Settings function is enabled. When the Administrator Mode is set

into the access lock state, the

main power switch

is turned off and on and, after the lapse of a predetermined

period of time after the machine is turned on again, the access lock state of the Administrator Mode is can-

celed. The Release Time Settings function allows the period of time, after the lapse of which the access lock

state of the Administrator Mode is canceled, to be set in the range between 1 and 60 min. The factory setting

is 5 min. For details of each mode, see the table below.

NOTICE

If the access lock state of the Administrator Mode is canceled by the Service Engineer, the setting of the Re-

lease Time Settings function is not applied.

Making any of the following settings when the Enhanced Security Mode is set to [ON] will cancel the En-

hanced Security Mode.

-

Changing [Prohibited Functions When Authentication Error] to [Mode 1]

-

Changing the check count for [Prohibited Functions When Authentication Error] to four times or more

-

Setting [Release Time Settings] to 1 to 4 min.

Setting Prohibited Functions When Authentication Error

0

For the procedure to call the Security Settings screen on the display, see steps 1 through 3 of

page 2-15.

0

Do not leave the machine with the setting screen of Administrator Mode left shown on the display. If it

is absolutely necessary to leave the machine, be sure first to log off from the Administrator Mode.

1

Call the Security Settings screen on the display from the control panel.

2

Touch [Security Details].

Mode

Description

Mode 1

If authentication fails, the authentication operation (entry of the password) is prohibited

for 5 sec.

Mode 2

If authentication fails, the authentication operation (entry of the password) is prohibited

for 5 sec. The number of times, in which authentication fails, is also counted and, when

the failure count reaches a predetermined value, the authentication operation is prohib-

ited and the machine is set into an access lock state.

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Administrators	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	8
1.2 Security Functions	11
Check Count Clear Conditions	11
1.3 Precautions for Operation Control	13
Roles of the Owner of the Machine	13
Roles and Requirements of the Administrator of the machine	13
Password Usage Requirements	13
External authentication server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	16
Precautions for using the printer driver	16
1.4 Miscellaneous	17
Password Rules	17
Precautions for Use of Various Types of Applications	17
Encrypting communications	18
Print functions	18
IPP printing	18
Items of Data Cleared by Overwrite All Data Function	19
Fax functions	20
USB keyboard	20
Different types of boxes	20
Hardware and software used in the machine	20
Firmware integrity verification function	21
IPsec setting	21
CS Remote Care function	21
Terminating a Session and Logging out	21
Authentication error during external server authentication	22
2 Administrator Operations	24
2.1 Accessing the Administrator Mode	24
2.1.1 Accessing the Administrator Mode	24
2.1.2 Accessing the User Mode	30
2.2 Enhancing the Security Function	34
2.2.1 Items cleared by HDD Format	36
2.2.2 Setting the Password Rules	37
2.2.3 Setting the Enhanced Security Mode	39
2.3 Preventing Unauthorized Access	42
Setting Prohibited Functions When Authentication Error	42
2.4 Canceling the Operation Prohibited State	44
Performing Release Setting	44
2.5 Setting the Authentication Method	46
2.5.1 Setting the Authentication Method	46
2.5.2 Setting the External Server	49
2.6 ID & Print Setting Function	52
Setting ID & Print	52
2.7 System Auto Reset Function	54
Setting the System Auto Reset function	54
2.8 User Setting Function	56
Making user setting	57
2.9 Account Track Setting Function	62
Making account setting	62
2.10 User Box Function	67
2.10.1 Setting the User Box	67
2.10.2 Changing the user/account attributes and box password	72
2.10.3 Setting Memory RX	77
2.11 Changing the Administrator Password	80
Changing the Administrator Password	80
2.12 Protecting Data in the HDD	83
2.12.1 Setting the Encryption Key (encryption word)	83
2.12.2 Changing the Encryption Key	87
2.12.3 Setting the Overwrite HDD Data	89
2.13 Overwrite All Data Function	91
Setting the Overwrite All Data function	91
2.14 Obtaining Job Log	94
2.14.1 Obtaining and deleting a Job Log	94
2.14.2 Downloading the Job Log data	96
Job Log data	98
2.15 Setting time/date in machine	105
2.15.1 Setting time/date	105
2.15.2 Setting daylight saving time	108
2.16 SSL Setting Function	110
2.16.1 Device Certificate Setting	110
2.16.2 SSL Setting	112
2.16.3 Removing a Certificate	113
2.17 TCP/IP Setting Function	114
2.17.1 Setting the IP Address	114
2.17.2 Registering the DNS Server	115
2.18 AppleTalk Setting Function	116
Making the AppleTalk Setting	116
2.19 E-Mail Setting Function	117
Setting the SMTP Server (E-Mail Server)	117
3 User Operations	119
3.1 User Authentication Function	119
3.1.1 Performing user authentication	119
3.1.2 Accessing the ID & Print Document	123
3.2 Change Password Function	125
Performing Change Password	125
3.3 Secure Print Function	128
Accessing the Secure Print Document	128
3.4 User Box Function	131
3.4.1 Setting the User Box	131
3.4.2 Changing the user/account attributes and box password	136
3.4.3 Accessing the User Box and User Box file	142
4 Application Software	147
4.1 Data Administrator	147
4.1.1 Accessing from Data Administrator	147
4.1.2 Setting the user authentication method	150
4.1.3 Changing the authentication mode	151
4.1.4 Making the user settings	153
4.1.5 Making the account settings	154
4.1.6 DNS Server Setting Function	155
4.1.7 AppleTalk Setting Function	156

Konica Minolta bizhub C287 bizhub C287/C227 Security Operations User Manual - Page 42

Preventing Unauthorized Access, Setting Prohibited Functions When Authentication Error

Page 42 highlights