Konica Minolta bizhub C287 bizhub C287/C227 Security Operations User Manual - Page 6

bizhub C287/C227

1-2

1.1

Introduction

1

1

Security

1.1

Introduction

Thank you for purchasing our product.

This User's Guide contains the operating procedures and precautions to be used when using the security

functions offered by the bizhub C287/C227 machine. To ensure the best possible performance and effective

use of the machine, read this manual thoroughly before using the security functions. The administrator of the

machine should keep this manual for ready reference. The manual should be of great help in finding solutions

to operating problems and questions.

This User's Guide (version 1.01) covers the following.

Administrators

<Administrator of the machine>

There are two types of administrators; one who is implemented on the machine in advance, and the other

who is registered by the implemented administrator. The former is called the built-in administrator and the

latter is called a user administrator. Below, the administrator of the machine means the build-in administrator.

<User administrator>

The user administrator is a user who is given the authority to operate the machine as an administrator. The

administrator of the machine or the user administrator can register the user administrator. Be sure that "Pre-

cautions for Operation Control" applies to the user administrator. For details, see page 1-9.

The differences from the administrator of the machine are as follows:

-

The same procedure as a user applies to the user administrator when he or she changes the password

or fails authentication.

-

To change password, log on to the User Mode.

-

The user administrator cannot change the password of the administrator of the machine. (The current

password of the administrator of the machine must be entered to change the password.)

<Note>

Below, the administrator collectively means both the administrator of the machine and the user administrator.

Compliance with the ISO15408 Standard

When the Enhanced Security Mode on this machine is set to [ON], more enhanced security functions are

available.

This machine offers the security functions that comply with the ISO/IEC15408 (level: EAL2) and U.S. Govern-

ment Approved Protection Profile - U.S. Government Protection Profile for Hardcopy Devices Version 1.0

(IEEE Std 2600.2

TM

-2009).

Operating Precautions

The machine gives an alarm message or an alarm sound (peep) when a wrong operation is performed or a

wrong entry is made during operation of the machine. (No "peep" alarm sound is issued if a specific sound

setting in Sound Setting of Accessibility Setting is set to [OFF].) If the alarm message or alarm sound is given,

perform the correct operation or make the correct entry according to the instructions given by the message

or other means.

The administrator of the machine should exit from the current mode to return to the basic screen whenever

the access to that mode is completed or if he or she leaves the machine with the mode screen left displayed.

The administrator of the machine should make sure that each individual general user exits from the current

mode to return to the basic screen whenever the access to that mode is completed or if the user leaves the

machine with the mode screen left displayed.

Model name

bizhub C287/bizhub C227/bizhub C228DN/bizhub C222DN/ineo

+

287/ineo

+

227

Version

G00-11

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Administrators	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	8
1.2 Security Functions	11
Check Count Clear Conditions	11
1.3 Precautions for Operation Control	13
Roles of the Owner of the Machine	13
Roles and Requirements of the Administrator of the machine	13
Password Usage Requirements	13
External authentication server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	16
Precautions for using the printer driver	16
1.4 Miscellaneous	17
Password Rules	17
Precautions for Use of Various Types of Applications	17
Encrypting communications	18
Print functions	18
IPP printing	18
Items of Data Cleared by Overwrite All Data Function	19
Fax functions	20
USB keyboard	20
Different types of boxes	20
Hardware and software used in the machine	20
Firmware integrity verification function	21
IPsec setting	21
CS Remote Care function	21
Terminating a Session and Logging out	21
Authentication error during external server authentication	22
2 Administrator Operations	24
2.1 Accessing the Administrator Mode	24
2.1.1 Accessing the Administrator Mode	24
2.1.2 Accessing the User Mode	30
2.2 Enhancing the Security Function	34
2.2.1 Items cleared by HDD Format	36
2.2.2 Setting the Password Rules	37
2.2.3 Setting the Enhanced Security Mode	39
2.3 Preventing Unauthorized Access	42
Setting Prohibited Functions When Authentication Error	42
2.4 Canceling the Operation Prohibited State	44
Performing Release Setting	44
2.5 Setting the Authentication Method	46
2.5.1 Setting the Authentication Method	46
2.5.2 Setting the External Server	49
2.6 ID & Print Setting Function	52
Setting ID & Print	52
2.7 System Auto Reset Function	54
Setting the System Auto Reset function	54
2.8 User Setting Function	56
Making user setting	57
2.9 Account Track Setting Function	62
Making account setting	62
2.10 User Box Function	67
2.10.1 Setting the User Box	67
2.10.2 Changing the user/account attributes and box password	72
2.10.3 Setting Memory RX	77
2.11 Changing the Administrator Password	80
Changing the Administrator Password	80
2.12 Protecting Data in the HDD	83
2.12.1 Setting the Encryption Key (encryption word)	83
2.12.2 Changing the Encryption Key	87
2.12.3 Setting the Overwrite HDD Data	89
2.13 Overwrite All Data Function	91
Setting the Overwrite All Data function	91
2.14 Obtaining Job Log	94
2.14.1 Obtaining and deleting a Job Log	94
2.14.2 Downloading the Job Log data	96
Job Log data	98
2.15 Setting time/date in machine	105
2.15.1 Setting time/date	105
2.15.2 Setting daylight saving time	108
2.16 SSL Setting Function	110
2.16.1 Device Certificate Setting	110
2.16.2 SSL Setting	112
2.16.3 Removing a Certificate	113
2.17 TCP/IP Setting Function	114
2.17.1 Setting the IP Address	114
2.17.2 Registering the DNS Server	115
2.18 AppleTalk Setting Function	116
Making the AppleTalk Setting	116
2.19 E-Mail Setting Function	117
Setting the SMTP Server (E-Mail Server)	117
3 User Operations	119
3.1 User Authentication Function	119
3.1.1 Performing user authentication	119
3.1.2 Accessing the ID & Print Document	123
3.2 Change Password Function	125
Performing Change Password	125
3.3 Secure Print Function	128
Accessing the Secure Print Document	128
3.4 User Box Function	131
3.4.1 Setting the User Box	131
3.4.2 Changing the user/account attributes and box password	136
3.4.3 Accessing the User Box and User Box file	142
4 Application Software	147
4.1 Data Administrator	147
4.1.1 Accessing from Data Administrator	147
4.1.2 Setting the user authentication method	150
4.1.3 Changing the authentication mode	151
4.1.4 Making the user settings	153
4.1.5 Making the account settings	154
4.1.6 DNS Server Setting Function	155
4.1.7 AppleTalk Setting Function	156

Konica Minolta bizhub C287 bizhub C287/C227 Security Operations User Manual - Page 6

Security, 1.1 Introduction, Administrators, Compliance with the ISO15408 Standard - manual

Page 6 highlights