Konica Minolta bizhub C287 bizhub C287/C227 Security Operations User Manual - Page 83

bizhub C287/C227

2-61

2.12

Protecting Data in the HDD

2

2.12

Protecting Data in the HDD

When a log-on to the Administrator Mode becomes successful, the machine enables the operation for setting

and changing the Encryption Key. The machine also enables the Overwrite HDD Data function.

By setting the Encryption Key, the data stored in the HDD is encrypted, thereby protecting the data in the

HDD. The Encryption Key entered is displayed as "*."

NOTICE

If the HDD develops a fault, call your Service Representative.

The following shows setting conditions for the Encryption Key. Perform settings for the Encryption Key fitting

these conditions.

Tips

When an Encryption Key (encryption word) is set using HDD Encryption Setting, an Encryption Key with a key

length of 256 bits is generated. The generated encryption key is used to encrypt or decrypt data through AES

encryption algorithm.

2.12.1

Setting the Encryption Key (encryption word)

0

For the procedure to call the Security Settings screen on the display, see steps 1 through 3 of

page 2-15.

0

Do not leave the machine with the setting screen of Administrator Mode left shown on the display. If it

is absolutely necessary to leave the machine, be sure first to log off from the Administrator Mode.

0

To prevent data from leaking as a result of reinstallation of the HDD on another machine, a unique value

that varies from one machine to another must be set for the encryption key.

0

Do not set any number that can easily be guessed from birthdays, employee identification numbers,

and the like for the Encryption Key. Try to change the Encryption Key at regular intervals.

0

Make sure that nobody but the administrator comes to know the Encryption Key.

0

If only the Encryption Key is to be set while the machine is being used without setting the Encryption

Key, the Service Engineer must perform some setting procedures in advance. For details, contact your

Service Representative.

0

To edit/release the Encryption Key, see page 2-65. Do not release the Encryption Key when the En-

hanced Security Mode is set to [ON]. Releasing the Encryption Key will cancel the Enhanced Security

Mode.

0

Executing HDD Format erases data in the HDD. It is recommended that important data should be saved

in a backup medium in advance. Execution of HDD Format will also reset the setting values of different

functions to the default values. Set the Enhanced Security Mode to [ON] again. For the functions whose

settings are reset to the default values, see page 2-14.

Types of

passwords

Number of

characters

Types of characters

Conditions for set-

ting/changes

Encryption Key

20

characters

•

Numeric characters: 0 to 9

•

Alpha characters: upper and

lower case letters

•

Symbols: !, #, $, %, &, ', *, +,

-, ., /, =, ?, @, ^, _, `, {, |, }, ~

Selectable from among a total of

83 characters

•

An Encryption Key only

consisting of identical

characters cannot be

registered or changed.

•

The current Encryption

Key must be entered be-

fore a change can be

made in the setting.

•

A new Encryption Key to

be set should not be the

same as the current one.

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Administrators	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	8
1.2 Security Functions	11
Check Count Clear Conditions	11
1.3 Precautions for Operation Control	13
Roles of the Owner of the Machine	13
Roles and Requirements of the Administrator of the machine	13
Password Usage Requirements	13
External authentication server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	16
Precautions for using the printer driver	16
1.4 Miscellaneous	17
Password Rules	17
Precautions for Use of Various Types of Applications	17
Encrypting communications	18
Print functions	18
IPP printing	18
Items of Data Cleared by Overwrite All Data Function	19
Fax functions	20
USB keyboard	20
Different types of boxes	20
Hardware and software used in the machine	20
Firmware integrity verification function	21
IPsec setting	21
CS Remote Care function	21
Terminating a Session and Logging out	21
Authentication error during external server authentication	22
2 Administrator Operations	24
2.1 Accessing the Administrator Mode	24
2.1.1 Accessing the Administrator Mode	24
2.1.2 Accessing the User Mode	30
2.2 Enhancing the Security Function	34
2.2.1 Items cleared by HDD Format	36
2.2.2 Setting the Password Rules	37
2.2.3 Setting the Enhanced Security Mode	39
2.3 Preventing Unauthorized Access	42
Setting Prohibited Functions When Authentication Error	42
2.4 Canceling the Operation Prohibited State	44
Performing Release Setting	44
2.5 Setting the Authentication Method	46
2.5.1 Setting the Authentication Method	46
2.5.2 Setting the External Server	49
2.6 ID & Print Setting Function	52
Setting ID & Print	52
2.7 System Auto Reset Function	54
Setting the System Auto Reset function	54
2.8 User Setting Function	56
Making user setting	57
2.9 Account Track Setting Function	62
Making account setting	62
2.10 User Box Function	67
2.10.1 Setting the User Box	67
2.10.2 Changing the user/account attributes and box password	72
2.10.3 Setting Memory RX	77
2.11 Changing the Administrator Password	80
Changing the Administrator Password	80
2.12 Protecting Data in the HDD	83
2.12.1 Setting the Encryption Key (encryption word)	83
2.12.2 Changing the Encryption Key	87
2.12.3 Setting the Overwrite HDD Data	89
2.13 Overwrite All Data Function	91
Setting the Overwrite All Data function	91
2.14 Obtaining Job Log	94
2.14.1 Obtaining and deleting a Job Log	94
2.14.2 Downloading the Job Log data	96
Job Log data	98
2.15 Setting time/date in machine	105
2.15.1 Setting time/date	105
2.15.2 Setting daylight saving time	108
2.16 SSL Setting Function	110
2.16.1 Device Certificate Setting	110
2.16.2 SSL Setting	112
2.16.3 Removing a Certificate	113
2.17 TCP/IP Setting Function	114
2.17.1 Setting the IP Address	114
2.17.2 Registering the DNS Server	115
2.18 AppleTalk Setting Function	116
Making the AppleTalk Setting	116
2.19 E-Mail Setting Function	117
Setting the SMTP Server (E-Mail Server)	117
3 User Operations	119
3.1 User Authentication Function	119
3.1.1 Performing user authentication	119
3.1.2 Accessing the ID & Print Document	123
3.2 Change Password Function	125
Performing Change Password	125
3.3 Secure Print Function	128
Accessing the Secure Print Document	128
3.4 User Box Function	131
3.4.1 Setting the User Box	131
3.4.2 Changing the user/account attributes and box password	136
3.4.3 Accessing the User Box and User Box file	142
4 Application Software	147
4.1 Data Administrator	147
4.1.1 Accessing from Data Administrator	147
4.1.2 Setting the user authentication method	150
4.1.3 Changing the authentication mode	151
4.1.4 Making the user settings	153
4.1.5 Making the account settings	154
4.1.6 DNS Server Setting Function	155
4.1.7 AppleTalk Setting Function	156

Konica Minolta bizhub C287 bizhub C287/C227 Security Operations User Manual - Page 83

Protecting Data in the HDD, 2.12.1 Setting the Encryption Key (encryption word)

Page 83 highlights