Home » Konica Minolta Manuals » Multifunction Devices » Konica Minolta bizhub C654 » Manual Viewer

Konica Minolta bizhub C654 bizhub C654/C754 Web Management Tool User Guide - Page 263

Importing external certificates used for validating the chain

View all Konica Minolta bizhub C654 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 263 highlights

13.3 Configuring certificate verification settings 13 Settings [Address not using Proxy Server] Description If necessary, enter the address that does not use the proxy server. Use one of the following formats. • Example of host name entry: "host.example.com" • Example of IP address (IPv4) entry: "192.168.1.1" • Example of IP address (IPv6) entry: "fe80::220:6bff:fe10:2f16" 13.3.2 Importing external certificates used for validating the chain Types of external certificates that can be imported Import external certificates used for validating the certificate chain (certificate path) in this machine. The following certificates can be imported on this machine. Type [Trusted CA Root Certificate] [Trusted CA Intermediate Certificate] [Trusted EE (End Entity) Certificate] [Non-Trusted Certificate] Description You must import the certificate of the CA that issued the certificate in question on this machine in advance, if you wish to validate the chain of a submitted certificate. You must import the certificate of the intermediate certificate authority on this machine in advance, if the submitted certificate is issued by an intermediate certificate authority. You must also import the root certificate of the CA, which certifies the intermediate certificate authority, on this machine in advance. "Trusted EE" refers to the certificate to be submitted. By importing a certificate on this machine in advance, the certificate will be identified as a trusted certificate when it is submitted. If a certificate is registered as the trusted EE certificate in advance, this machine will skip validation of the certificate chain when it is submitted and will recognize it as a trusted certificate. Register non-trusted certificates on this machine. How to import Import external certificates used for validating the certificate chain (certificate path) in this machine. 1 In the administrator mode, select [Security] - [PKI Settings] - [External Certificate Setting], then click [New Registration]. % To change certificates to be shown in the list, select a certificate you wish to change, and click [Changes the display]. % To delete the registered certificate, click [Delete]. bizhub C754/C654 13-10

Section	Page
Table of contents	2
1 Web Connection	13
Web Connection	13
Operating environment	13
2 Operations Required to Use Web Connection	15
2.1 Configuring network environment settings	15
Overview	15
Assigning an IP address	15
Confirming the IP address	16
2.2 Confirming Web browser settings	17
3 Basic Usage	19
3.1 How to access	19
3.2 Layout of Web Connection screen	20
3.3 Login methods	22
Login screen	22
Login mode	23
Switching login modes	24
Logging in to the administrator mode	25
Logging in to the user mode	26
3.4 User Mode Overview	28
3.4.1 Main Menu	28
3.4.2 Each mode in the user mode	29
[Information]	29
[Job]	30
[Box]	30
[Direct Print]	31
[Store Address]	32
[Customize]	32
3.5 Using the Help function	33
Using the online help	33
Displaying the meaning of the setting in the popup window	33
Using the wizard when configuring function settings	34
3.6 Restricting use of Web Connection	36
4 Configuring Basic Information Settings of this Machine	38
4.1 Registering information of this machine	38
4.2 Registering support information	39
4.3 Setting the date and time for the machine	40
Manually configuring settings	40
Automatically configuring settings using NTP	40
5 Configuring Network Settings of this Machine	43
5.1 Using in the IPv4 environment	43
Overview	43
Assigning an IP address	43
Registering the DNS server used by this machine	44
Registering the host name	46
Registering the domain name	47
5.2 Using in the IPv6 environment	48
5.3 Using in the IPX environment	51
5.4 Displaying this machine on the network map	52
5.5 Displaying the network error code	53
6 Setting up the Operating Environment of Web Connection	55
6.1 Encrypting communication using Web Connection	55
6.2 Changing the administrator password	56
6.3 Customizing the initial screen	57
6.4 Changing the time period until automatic log out	58
6.5 Configuring flash view settings	59
6.5.1 Configuring settings for display in flash view	59
6.5.2 Restricting the flash view	60
7 Configuring the Scan Environment	62
7.1 Configuring the Scan to E-mail environment	62
Overview	62
Configuring basic settings for Scan to E-mail	62
Using SSL/TLS communication	65
Using the SMTP authentication	66
Using the POP Before SMTP Authentication	68
Using S/MIME	71
7.2 Configuring the SMB transmission environment	72
Overview	72
Configuring basic settings for the SMB transmission	72
Using the WINS server	73
Using the direct hosting SMB service	74
Resolving the name using LLMNR	74
Using in the DFS environment	75
7.3 Configuring the FTP transmission environment	76
Overview	76
Configuring basic settings for the FTP transmission	76
Using the proxy server	76
7.4 Configuring the WebDAV transmission environment	78
Overview	78
Configuring basic settings for the WebDAV transmission	78
Using the proxy server	79
Using SSL communication	80
7.5 Configuring the WS scan environment	82
Overview	82
Configuring the basic settings for the WS scan transmission	82
Using the proxy server	83
Using SSL communication	84
7.6 Configuring the TWAIN scan environment	86
Overview	86
Configuring the basic settings for the TWAIN scan	86
Changing the Control Panel lock time	87
7.7 Searching for a destination using the LDAP server	88
Overview	88
Configuring basic settings for the LDAP search	88
Using SSL communication	90
8 Configuring the Printing Environment	93
8.1 Configuring the LPR printing environment	93
Overview	93
Enabling LPD	93
8.2 Configuring the Port9100 printing environment	94
Overview	94
Changing the RAW port number	94
8.3 Configuring the SMB printing environment	95
Overview	95
Configuring basic settings for the SMB printing	95
Using the WINS server	96
Using the direct hosting SMB service	97
Resolving the name using LLMNR	98
8.4 Configuring the IPP printing environment	99
Overview	99
Configuring basic settings for the IPP printing	99
Using the IPP authentication	101
Communicating using SSL (IPPS)	102
8.5 Configuring the WS printing environment	103
Overview	103
Configuring basic settings for the WS printing	103
Using the proxy server	104
Using SSL communication	105
8.6 Configuring the Bonjour printing environment	107
8.7 Configuring the AppleTalk printing environment	108
8.8 Configuring the NetWare printing environment	109
Overview	109
In Remote Printer mode using the NetWare 4.x Bindery Emulation	109
In Print Server mode using the NetWare 4.x Bindery Emulation	110
In the NetWare 4.x Remote Printer mode (NDS)	111
In the NetWare 4.x/5.x/6 Print Server mode (NDS)	112
For NetWare 5.x/6 Novell Distributed Print Service (NDPS)	114
8.9 Configuring the environment for printing through a Bluetooth- compatible device	115
8.10 Specifying the default print settings for this machine	117
8.10.1 Specifying the default print settings	117
8.10.2 Specifying the default PCL print settings	119
8.10.3 Specifying the default PS print settings	120
8.10.4 Specifying the default TIFF print settings	121
8.10.5 Configuring security settings for XPS or OOXML printing	121
8.10.6 Configuring the default OOXML print settings	122
8.10.7 Configuring the default combination settings	123
8.11 Specifying the time-out time by interface	124
8.12 Restricting users from obtaining device information using password	125
9 Configuring the Fax Environment	127
9.1 Configuring basic fax settings	127
9.1.1 Configuring the line usage settings	127
9.1.2 Configuring connection settings for a PBX environment	128
9.1.3 Registering the sender information	128
9.2 Specifying operations when sending and receiving a fax	130
9.2.1 Specifying how to print the sender name/reception information	130
9.2.2 Changing print settings when receiving a fax	131
9.2.3 Canceling stamp setting when sending a fax	132
9.2.4 Adjusting the image quality depending on the resolution of a received fax	133
9.3 Specifying useful transmission and reception functions	134
9.3.1 Enabling/disabling the fax functions	134
9.3.2 Using the Closed Network RX function	135
9.3.3 Using the Fax Retransmit function	135
9.3.4 Using the compulsory memory RX function	136
9.3.5 Using the Forward TX function	137
9.3.6 Using the PC-Fax RX function	139
9.3.7 Using the TSI Routing function	140
9.3.8 Restricting PC-FAX transmission	143
9.4 Using an additional line	144
9.5 Specifying fax report print conditions	145
10 Configuring the Network Fax Environment	148
10.1 Configuring the Internet fax environment	148
Overview	148
Configuring basic settings for sending and receiving an Internet fax	148
Checking a fax reception	153
Specifying the reception ability of this machine	154
Configuring default compression type setting for transmission in black and white	154
Configuring default compression type setting for transmission in color	155
Using SSL/TLS communication	156
Using the SMTP authentication	157
Using the POP Before SMTP Authentication	159
10.2 Configuring the IP address fax environment	162
Overview	162
Configuring basic settings for sending and receiving faxes using IP address fax	162
Configuring default compression type setting for transmission in black and white	166
Configuring default compression type setting for transmission in color	166
11 Configuring User Box Environment	169
11.1 Creating and editing a User Box	169
11.1.1 Creating a User Box	169
11.1.2 Changing User Box settings	170
11.2 Creating and editing a System User Box	172
11.2.1 Creating a Bulletin Board User Box	172
11.2.2 Creating a Relay User Box	173
11.2.3 Creating an Annotation User Box	173
11.2.4 Changing Bulletin Board User Box settings	175
11.2.5 Changing Relay User Box settings	176
11.2.6 Changing Annotation User Box settings	177
11.3 Configuring User Box environment	179
11.3.1 Specifying the maximum number of User Boxes	179
11.3.2 Deleting all empty User Boxes	179
11.3.3 Automatically deleting files from a User Box	180
11.3.4 Specifying how to process a file after printing or transmission	181
11.4 Configuring System User Box environment	182
11.4.1 Deleting all secure documents	182
11.4.2 Automatically deleting files from a System User Box	182
11.4.3 Specifying operations of printed ID & print documents	183
11.5 Configuring the USB Memory Device settings	184
11.6 Disabling user's operation of registration/change of a User Box	185
12 Restricting Users from Using this Device	187
12.1 Overview of User Authentication and Account Track	187
User Authentication	187
Account Track	188
Combining user authentication and account track	188
12.2 Employing the MFP authentication	190
Overview	190
Configuring basic settings for the user authentication	190
12.3 Employing the account track function	194
Overview	194
Configuring basic account track settings	194
12.4 Employing the Active Directory authentication	197
Overview	197
Configuring basic settings for the Active Directory authentication	198
Sending to Your Computer (Scan to Home)	200
Using the single sign-on	201
12.5 Employing the NTLM authentication	203
Overview	203
Configurig basic settings for the NTLM authentication	204
Using the WINS server	207
Using the direct hosting SMB service	208
12.6 Employing the LDAP authentication	209
Overview	209
Configuring basic settings for the LDAP authentication	210
Using SSL communication	213
12.7 Installing the NDS over IPX authentication	214
Overview	214
Configure basic settings for the NDS over IPX authentication	215
12.8 Employing the NDS over TCP/IP authentication	219
Overview	219
Configuring basic settings for the NDS over TCP/IP authentication	220
12.9 Sending to your address (Scan to Me)	223
12.10 Constructing a single sign-on environment for the SMB transmission	224
12.11 Setting privileges to use the functions of this machine by user or account	225
12.11.1 Restricting available functions by user or account	225
12.11.2 Specifying the default function permission setting when the external server authentication is used	226
12.11.3 Restricting functions available to public users	227
12.12 Managing the maximum number of copies by user or account	228
12.13 Limiting the access to destinations for each user	229
12.13.1 Methods to limit access to destinations	229
12.13.2 Managing based on the access allowed level	229
Access Allowed Level	229
Setting the access allowed level	230
12.13.3 Managing based on the reference allowed group	232
Reference Allowed Group	232
Assigning a reference allowed group	232
12.13.4 Combining the access allowed level with the reference allowed group for management	234
Combining the access allowed level with the reference allowed group	234
Simultaneously setting an access allowed level and reference allowed group	235
12.14 Changing the function key display pattern by user or account	238
Overview	238
Allowing changing the function key display pattern by user or account	238
Selecting a function key display pattern by user	239
Selecting a function key display pattern by account	240
12.15 Specifying the operations of the ID & Print function	241
12.16 Configuring common settings when using the authentication function	242
12.17 Restricting print jobs without authentication information	243
12.18 Printing without a password (Quick Authentication for Printing)	244
Overview	244
Permitting the Quick Authentication for Printing function	244
Registering the quick authentication for printing server	244
Using SSL communication	246
12.19 Using the authentication unit	248
12.19.1 Setting operations of the authentication unit	248
Authentication Unit (IC card type)	248
Authentication Unit (biometric type)	248
12.19.2 Authenticating in the LDAP server using the authentication card (LDAP-IC Card Authentication)	249
Overview	249
Configuring basic settings for the LDAP-IC card authentication	249
Using SSL communication	252
12.19.3 Recording the authentication card ID in counter information of this machine	253
13 Reinforcing security	255
13.1 Creating a certificate for this machine to communicate via SSL	255
Overview	255
Using the certificate registered upon shipment	255
Self-creating a certificate	256
Requesting the Certificate Authority for issuing a certificate	257
13.2 Managing the certificates for this machine	259
13.2.1 Using different certificates depending on the application	259
13.2.2 Exporting a certificate	260
13.2.3 Importing a certificate	261
13.2.4 Deleting a certificate	261
13.3 Configuring certificate verification settings	262
13.3.1 Verifying a certificate for peer	262
13.3.2 Importing external certificates used for validating the chain	263
Types of external certificates that can be imported	263
How to import	263
13.4 Registering user's certificates automatically on this machine	265
13.5 Controlling the access to this machine by IP address	267
13.6 Using IPsec communication	268
13.7 Using the IEEE802.1X authentication	274
13.8 Sending data to the authenticated share folder (Scan to Authorized Folder)	276
Scan to Authorized Folder	276
Limiting the direct input of addresses	277
13.9 Disabling user's operation of registration/change	278
13.10 Using the copy security function	279
13.11 Saving the operation log of the control panel	280
14 Managing the Machine Status	282
14.1 Managing the machine power for power saving	282
14.1.1 Setting the Power key/Power save function	282
14.1.2 Switching to Power Save mode at specified time (Weekly Timer)	283
14.2 Configuring the daylight saving time settings	286
14.3 Customizing the Control Panel environment	287
14.3.1 Changing a Function to be Assigned to a Register Key	287
14.3.2 Selecting functions to be arranged in the main menu	288
14.3.3 Changing the theme of the main menu	290
14.3.4 Selecting function keys to be displayed on the main screen (using a display pattern)	291
14.3.5 Selecting function keys to be displayed on the main screen (Individual specification)	292
Overview	292
Allowing the change of functions keys in each mode	292
Changing function keys in copy mode	293
Changing function keys in Fax/Scan mode	295
14.3.6 Allowing the change of display language on the Touch Panel	297
14.4 Notifying of the machine status via E-mail	298
Overview	298
Configuring the machine status notification settings	298
14.5 Notifying of the machine counter via E-mail	300
Overview	300
Configuring the counter notification settings	300
14.6 Managing the machine via SNMP	302
Overview	302
Configuring the settings for using SNMP	303
14.7 Checking the printer information	307
14.7.1 Checking the counter of this machine	307
14.7.2 Checking the ROM version	308
14.8 Managing the setting information	309
14.8.1 Writing the setting information to this machine (Import)	309
Types of information that can be imported	309
How to import	309
14.8.2 Saving the setting information of this machine (Export)	310
Types of information that can be exported	310
How to export the information	310
14.8.3 Resetting the network settings	311
14.8.4 Restarting the network interface	311
14.8.5 Deleting all address information	312
14.9 Outputting job logs	313
Operations required to use this function	313
Downloading job logs	314
14.10 Setting the operating environment for this machine	315
14.10.1 Configuring default settings for Normal Display and Enlarge Display collectively	315
14.10.2 Setting the action for switching the display to Enlarge Display	315
14.10.3 Configuring the default method to display destinations	316
14.10.4 Configuring the original size detection settings	317
14.10.5 Changing the default scan data file name	318
14.10.6 Previewing the original being scanned in realtime	319
14.10.7 Printing a stamp on blank pages	319
14.10.8 Setting the skip job conditions	319
14.10.9 Setting the processing accuracy of outline PDF	320
14.10.10 Allowing transmission of the machine usage frequency or function settings information	321
14.11 Using an advanced function by registering the license	322
14.11.1 Issuing the request code	322
14.11.2 Enabling the advanced function	322
Enabling the function using the function and license codes	322
Enabling the function using the token number	323
14.12 Updating the firmware of this machine	324
Overview	324
Preparing for downloading a firmware	324
Updating the firmware automatically at the specified time	326
Updating the firmware manually	327
15 Registering Various Types of Information	329
15.1 Registering address books	329
15.1.1 Registering E-mail address	329
15.1.2 Registering an FTP destination	330
15.1.3 Registering an SMB destination	331
15.1.4 Registering a WebDAV destination	333
15.1.5 Registering a User Box	334
15.1.6 Registering a fax address	335
15.1.7 Registering an Internet fax address	336
15.1.8 Registering an IP address fax destination	337
15.2 Registering a group	339
15.3 Registering a program	340
15.3.1 Registering an E-mail address program	340
15.3.2 Registering an FTP program	340
15.3.3 Registering an SMB program	342
15.3.4 Registering a WebDAV program	343
15.3.5 Registering a User Box program	344
15.3.6 Registering a fax address program	344
15.3.7 Registering an Internet fax address program	345
15.3.8 Registering an IP address fax program	346
15.3.9 Registering a group program	348
15.3.10 Registering a program without destination	348
15.3.11 Configuring the fax/scan transmission option settings	349
15.4 Registering a temporary one-touch destination	353
15.5 Registering the subject and body of an E-mail	354
Registering the subject	354
Registering the body	354
15.6 Registering a prefix and suffix of each destination	355
15.7 Registering the information to be added to header/footer	356
15.8 Adding a font/macro	358
15.9 Registering a paper name and paper type	359
15.10 Using data management utility	361
15.10.1 Data Management Utility	361
15.10.2 Managing the copy protect data	362
15.10.3 Managing the stamp data	363
15.10.4 Managing the font/macro data	364
16 Associating with External Application	367
16.1 Associating via TCP Socket	367
Overview	367
Configuring the basic TCP Socket settings	367
Using SSL communication	368
16.2 Associating via OpenAPI	369
Overview	369
Configuring the basic OpenAPI settings	369
Using SSL communication	370
16.3 Using the machine FTP server for association	372
Overview	372
Configuring the FTP server settings	372
16.4 Using the machine WebDAV server for association	373
Overview	373
Configuring the WebDAV server settings	373
Using SSL communication	374
16.5 Releasing the association with application	375
16.6 Associating with the distributed scan server	376
Overview	376
Enabling the Distributed Scan Management	376
16.7 Allowing for upload of contents to this machine	377
16.8 Associating with the remote diagnosis system	378
16.8.1 Registering a proxy server used for remote diagnosis	378
16.8.2 Allowing acquisition of the machine counter	379
16.8.3 Sending the machine operating status	379
16.8.4 Allowing read and write of the machine setting information	379
16.9 Associating with the fax server	380
Overview	380
Registering applications	380
Application setting templates	382
Associating with the fax server communicating in E-Mail format	383
16.10 Operating the machine Control Panel remotely	385
Overview	385
Using the dedicated software	385
Accessing the machine directly	387
17 Description of Setup Buttons (Administrator Settings)	389
[Administrator Settings]	389
[Network Settings]	389
[TCP/IP Settings]	390
[IPv4 Settings]	391
[IPv6 Settings]	391
[DNS Host]	391
[DNS Domain]	392
[DNS Server Settings (IPv4)]	392
[DNS Server Settings (IPv6)]	392
[IPsec Settings]	393
[IKE Settings]	393
[IPsec SA Settings]	393
[Peer]	394
[Protocol Setting]	394
[Enable IPsec]	395
[Communication Check]	395
[IP Filtering (Permit Access)]	396
[IP Filtering (Deny Access)]	396
[RAW Port Number]	396
[LLMNR Setting]	396
[NetWare Settings]	397
[IPX Settings]	397
[NetWare Print Settings]	397
[User Authentication Setting (NDS)]	398
[HTTP Server Settings]	398
[FTP Settings]	398
[FTP TX Settings]	399
[FTP Server Settings]	399
[SMB Settings]	400
[Client Settings]	400
[Print Settings]	401
[WINS Settings]	401
[Direct Hosting Setting]	402
[LDAP Settings]	402
[E-Mail Settings]	404
[E-Mail TX (SMTP)]	404
[E-Mail RX (POP)]	405
[S/MIME Communication Settings]	406
[SNMP Settings]	407
[AppleTalk Settings]	408
[Bonjour Setting]	408
[TCP Socket Settings]	409
[Network Fax Settings]	409
[Network Fax Function Settings]	409
[SMTP TX Settings]	410
[SMTP RX Settings]	410
[WebDAV Settings]	410
[WebDAV Client Settings]	410
[WebDAV Server Settings]	411
[Proxy Setting for Remote Access]	412
[DPWS Settings]	412
[DPWS Common Settings]	412
[DPWS Extension Settings]	413
[Printer Settings]	413
[Scanner Settings]	414
[Distributed Scan Settings]	414
[SSDP Settings]	414
[Detail Settings]	414
[Device Setting]	415
[Time Adjustment Setting]	415
[Status Notification Setting]	416
[Total Counter Notification Settings]	416
[PING Confirmation]	417
[SLP Setting]	417
[LPD Setting]	417
[Prefix/Suffix Setting]	417
[Error Code Display Setting]	418
[IEEE802.1x Authentication Settings]	418
[Web Browser Setting]	418
[Bluetooth Setting]	418
[Single Sign-On Setting]	419
[IWS Settings]	419

Match case Limit results 1 per page

bizhub C754/C654

13-10

13.3

Configuring certificate verification settings

13.3.2

Importing external certificates used for validating the chain

Types of external certificates that can be imported

Import external certificates used for validating the certificate chain (certificate path) in this machine.

The following certificates can be imported on this machine.

How to import

Import external certificates used for validating the certificate chain (certificate path) in this machine.

In the administrator mode, select [Security] - [PKI Settings] - [External Certificate Setting], then click

[New Registration].

To change certificates to be shown in the list, select a certificate you wish to change, and click

[Changes the display].

To delete the registered certificate, click [Delete].

[Address not using

Proxy Server]

If necessary, enter the address that does not use the proxy server.

Use one of the following formats.

•

Example of host name entry: "host.example.com"

•

Example of IP address (IPv4) entry: "192.168.1.1"

•

Example of IP address (IPv6) entry: "fe80::220:6bff:fe10:2f16"

Settings

Description

Type

Description

[Trusted CA Root Certifi-

cate]

You must import the certificate of the CA that issued the certificate in ques-

tion on this machine in advance, if you wish to validate the chain of a sub-

mitted certificate.

[Trusted CA Intermediate

Certificate]

You must import the certificate of the intermediate certificate authority on

this machine in advance, if the submitted certificate is issued by an inter-

mediate certificate authority.

You must also import the root certificate of the CA, which certifies the in-

termediate certificate authority, on this machine in advance.

[Trusted EE (End Entity)

Certificate]

"Trusted EE" refers to the certificate to be submitted.

By importing a certificate on this machine in advance, the certificate will be

identified as a trusted certificate when it is submitted.

If a certificate is registered as the trusted EE certificate in advance, this ma-

chine will skip validation of the certificate chain when it is submitted and

will recognize it as a trusted certificate.

[Non-Trusted Certificate]