Konica Minolta bizhub C3350 bizhub C3850/C3350 Applied Functions User Guide - Page 35

[PKI Settings] - [External Certificate]

Page 35 highlights

1.5 Available operations in Administrator mode 1 [PKI Settings] - [External Certificate] To display: Administrator mode - [Security] - [PKI Settings] - [External Certificate] Displays the list of external certificates registered on this machine. Click [New Registration] to register a new external certificate to this machine. Item [Certification Type] [File] Description Select a type of new external certificate to be registered. • [Trusted Root Certification Authorities]: Register the certificate of the CA that issued the certificate. • [Trusted Intermediate Certification Authorities]: Register the trusted certifi- cate of the intermediate CA. • [Trusted Certificate]: Register the trusted certificate individually. • [Untrusted Certificate]: Register the untrusted certificate individually. Click [Browse], and specify the location of the external certificate to be registered. [PKI Settings] - [Validate Certificate] To display: Administrator mode - [Security] - [PKI Settings] - [Validate Certificate] You can configure the settings for verifying reliability of the certificate (expiration date, CN, key usage, etc.) for the peers. Item [Certificate Verification Settings] [Certificate Verification] [Timeout] [OCSP Service] [URL] [Proxy Settings] [Proxy Server Address] [Proxy Server Port Number] [User Name] [Password] [No Proxy for following domain] Description Configure the certificate verification settings. Select whether or not to verify the reliability of the certificate for a peer. [Enable] is specified by default. Change the time-out time of certificate expiration confirmation. [30] sec. is specified by default. Select whether or not to use the OCSP service. Using the Online Certificate Status Protocol (OCSP) service, you can check online to find whether or not the certificate has expired. [Disable] is specified by default. To use the OCSP service, enter the URL of the OCSP service (using up to 511 bytes). If [URL] is left blank, the URL of the OCSP service embedded in the certificate will be used. When confirming the expiration date via a proxy server, register the currently used proxy server. Enter the address of the proxy server you are using. Use one of the following formats. • Example of host name entry: "host.example.com" • Example of IP address (IPv4) entry: "192.168.1.1" • Example of IP address (IPv6) entry: "fe80::220:6bff:fe10:2f16" If necessary, change the proxy server port number. [8080] is specified by default. Enter the user name to log in to the proxy server (using ASCII characters of up to 63 bytes). Enter the password (using ASCII characters of up to 63 bytes). To enter (change) the password, select the [Change Password] check box, then enter a new password. If necessary, enter the address that does not use the proxy server. Use one of the following formats. • Example of host name entry: "host.example.com" • Example of IP address (IPv4) entry: "192.168.1.1" • Example of IP address (IPv6) entry: "fe80::220:6bff:fe10:2f16" [Applied Functions] 1-29

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148

1.5
Available operations in Administrator mode
1
[Applied Functions]
1-29
[PKI Settings] - [External Certificate]
To display:
Administrator mode
- [Security] - [PKI Settings] - [External Certificate]
Displays the list of external certificates registered on this machine.
Click [New Registration] to register a new external certificate to this machine.
[PKI Settings] - [Validate Certificate]
To display:
Administrator mode
- [Security] - [PKI Settings] - [Validate Certificate]
You can configure the settings for verifying reliability of the certificate (expiration date, CN, key usage, etc.)
for the peers.
Item
Description
[Certification Type]
Select a type of new external certificate to be registered.
[Trusted Root Certification Authorities]: Register the certificate of the CA
that issued the certificate.
[Trusted Intermediate Certification Authorities]: Register the trusted certifi-
cate of the intermediate CA.
[Trusted Certificate]: Register the trusted certificate individually.
[Untrusted Certificate]: Register the untrusted certificate individually.
[File]
Click [Browse], and specify the location of the external certificate to be regis-
tered.
Item
Description
[Certificate Verification
Settings]
Configure the certificate verification settings.
[Certificate Verifica-
tion]
Select whether or not to verify the reliability of the certificate for a peer.
[Enable] is specified by default.
[Timeout]
Change the time-out time of certificate expiration confirmation.
[30] sec. is specified by default.
[OCSP Service]
Select whether or not to use the OCSP service.
Using the Online Certificate Status Protocol (OCSP) service, you can check on-
line to find whether or not the certificate has expired.
[Disable] is specified by default.
[URL]
To use the OCSP service, enter the URL of the OCSP service (using up to 511
bytes).
If [URL] is left blank, the URL of the OCSP service embedded in the certificate
will be used.
[Proxy Settings]
When confirming the expiration date via a proxy server, register the currently
used proxy server.
[Proxy Server Ad-
dress]
Enter the address of the proxy server you are using.
Use one of the following formats.
Example of host name entry: "host.example.com"
Example of IP address (IPv4) entry: "192.168.1.1"
Example of IP address (IPv6) entry: "fe80::220:6bff:fe10:2f16"
[Proxy Server Port
Number]
If necessary, change the proxy server port number.
[8080] is specified by default.
[User Name]
Enter the user name to log in to the proxy server (using ASCII characters of up
to 63 bytes).
[Password]
Enter the password (using ASCII characters of up to 63 bytes).
To enter (change) the password, select the [Change Password] check box,
then enter a new password.
[No Proxy for fol-
lowing domain]
If necessary, enter the address that does not use the proxy server.
Use one of the following formats.
Example of host name entry: "host.example.com"
Example of IP address (IPv4) entry: "192.168.1.1"
Example of IP address (IPv6) entry: "fe80::220:6bff:fe10:2f16"