Konica Minolta bizhub C659 bizhub C759/C659 Security Operations User Manual - Page 20

bizhub C759/C659/AccurioPrint C759

1-16

1.4

Miscellaneous

1

The IPsec Settings can be made through the following operations:

-

Control Panel: [Utility] - [Administrator Settings] - [Network Settings] - [TCP/IP Settings] - [IPsec Set-

tings] - [IPsec Settings]

-

Web Connection

: Administrator mode -> [Network] - [TCP/IP Setting] - [IPsec] -> [IPsec Setting]

-

Data Administrator

: Click [Administrator settings] in the Function selection field of the main screen and

click [Import]. After connection, select [Administrator settings] - [Network] - [IPsec Information].

NOTICE

The administrator of the machine should make sure that SSL encryption communication is not performed with

the SSL set in SSL v3.

The administrator of the machine should make sure that the encryption strength level is set to high in SSL use

settings. Use of 3DES is not recommended.

Do not use an SSL certificate that is electronically signed by MD5, as an increased risk results of data to be

protected being tampered with or leaked.

To eliminate the risk of the data to be protected being tampered with or leaked, refer to the recommended

ciphers list disclosed by, for example, NIST and CRYPTREC and use the appropriate cryptographic tech-

nique.

Use the following browsers to ensure safety. Use of any of the following browsers achieves communication

that ensures confidentiality of the image data transmitted and received.

Microsoft Internet Explorer

-

9/10/11

Mozilla Firefox

-

20 or later

Microsoft Internet Explorer 11 is used for the ISO15408 evaluation for this machine.

Print functions

Only the following procedures are guaranteed for the print functions performed from the client PC.

-

Use IPPS printing for the print functions performed using the printer driver.

-

Use direct printing from the

Web Connection

for the print functions not performed via the printer driver.

IPP printing

IPP (Internet Printing Protocol) is a function that allows printing via the Internet by using the HTTP (HyperText

Transfer Protocol) of the TCP/IP Protocol. IPPS (IPP over SSL/TLS) is the type of IPP that performs the SSL

encryption communication.

<Installing printer driver>

To perform IPPS printing, the printer driver must be installed. Start the printer addition wizard and type [DNS

Host Name] and [Default DNS Domain Name] of this machine in the following format in the "URL" field.

https://[DNS host name].[default DNS domain name]/ipp

For [DNS host name] and [default DNS domain name], specify the names set with the DNS server.

NOTICE

A certificate error message is displayed if the SSL certificate is one that is not issued by a certification body.

In such cases, it becomes necessary to register the certificate of this machine as that issued by a reliable

party for the computer account.

First, register Host Name and IP address of this machine in the DNS server in advance. Then, in TCP/IP Set-

tings of

Web Connection

, set the DNS Host Name and DNS Default Domain Name registered with the DNS

server.

It should also be noted that, for the certificate to be imported, a certificate for SSL encryption communication

should be registered in

Web Connection

and exported in advance as the certificate including the public key.

1

From "Continue to this website," call the

Web Connection

window to the screen.

2

Click "Certificate Error" to display the certificate. Then, click "Install Certificate" to install the certificate.

3

Display the physical stores. Then, deploy the certificate, which has earlier been exported, in "Local

Computer" of "Trusted Root Certification Authorities" to thereby import the certificate.

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Administrators	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	8
1.2 Security Functions	11
Check Count Clear Conditions	11
1.3 Precautions for Operation Control	13
Roles of the Owner of the Machine	13
Roles and Requirements of the Administrator	13
Password Usage Requirements	13
External authentication server control requirements	14
Security function operation setting operating requirements	14
Operation and control of the machine	14
Machine Maintenance Control	16
Precautions for using the printer driver	17
1.4 Miscellaneous	18
Password Rules	18
Precautions for Use of Various Types of Applications	19
Encrypting communications	19
IPsec setting	19
Print functions	20
IPP printing	20
Items of Data Cleared by Overwrite All Data Function	21
USB keyboard	22
Different types of boxes	22
Hardware and software used in the machine	23
Firmware integrity verification function	23
CS Remote Care function	23
Terminating a Session and Logging out	23
Authentication error during external server authentication	24
2 Administrator Operations	26
2.1 Accessing the Administrator Mode	26
2.1.1 Accessing the Administrator Mode	26
2.1.2 Accessing the User Mode	32
2.2 Enhancing the Security Function	36
2.2.1 Items cleared by HDD Format	38
2.2.2 Setting the Password Rules	39
2.2.3 Setting the Enhanced Security Mode	41
2.3 Protecting Machine from Illegal Firmware Update	44
Setting the FW Update (USB) Password	44
2.4 Preventing Unauthorized Access	47
Setting Prohibited Functions When Authentication Error	47
2.5 Canceling the Operation Prohibited State	49
Performing Release Setting	49
2.6 Setting the Authentication Method	51
2.6.1 Setting the Authentication Method	51
2.6.2 Setting the External Server	54
2.7 ID & Print Setting Function	56
Setting ID & Print	56
2.8 ID & Print Operation Setting Function	58
Making ID & Print Operation Setting	58
2.9 Auth. Operation Setting when print Documents are Stored Function	59
Setting Auth. Operation Setting when print Documents are Stored Function	59
2.10 System Auto Reset Function	60
Setting the System Auto Reset function	60
2.11 User Setting Function	62
Making user setting	63
2.12 Account Track Setting Function	68
Making account setting	68
2.13 User Box Function	73
2.13.1 Setting the User Box	73
2.13.2 Changing the user/account attributes and box password	78
2.13.3 Setting Memory RX	83
2.14 Changing the Administrator Password	86
Changing the Administrator Password	86
2.15 Protecting Data in the HDD	89
2.15.1 Setting the Encryption Key (encryption word)	89
2.15.2 Changing the Encryption Key	93
2.15.3 Setting the Overwrite HDD Data	95
2.16 Overwrite All Data Function	97
Setting the Overwrite All Data function	97
2.17 Obtaining Job Log	99
2.17.1 Obtaining and deleting a Job Log	99
2.17.2 Downloading the Job Log data	102
Job Log data	104
2.18 Setting time/date in machine	107
2.18.1 Setting time/date	107
2.18.2 Setting daylight saving time	110
2.19 SSL Setting Function	112
2.19.1 Device Certificate Setting	112
2.19.2 SSL Setting	114
2.19.3 Removing a Certificate	115
2.20 TCP/IP Setting Function	116
2.20.1 Setting the IP Address	116
2.20.2 Registering the DNS Server	117
2.21 E-Mail Setting Function	118
Setting the SMTP Server (E-Mail Server)	118
3 User Operations	120
3.1 User Authentication Function	120
3.1.1 Performing user authentication	120
3.1.2 Accessing the ID & Print Document	124
3.2 Change Password Function	125
Performing Change Password	125
3.3 Secure Print Function	128
Accessing the Secure Print Document	128
3.4 User Box Function	131
3.4.1 Setting the User Box	131
3.4.2 Changing the user/account attributes and box password	136
3.4.3 Accessing the User Box and User Box file	142
4 Application Software	148
4.1 Data Administrator	148
4.1.1 Accessing from Data Administrator	148
4.1.2 Setting the user authentication method	151
4.1.3 Changing the authentication mode	152
4.1.4 Making the user settings	154
4.1.5 Making the account settings	155
4.1.6 DNS Server Setting Function	156

Konica Minolta bizhub C659 bizhub C759/C659 Security Operations User Manual - Page 20

Print functions, IPP printing

Page 20 highlights