Konica Minolta bizhub PRO C754e bizhub C754e/C654e Security Operations User Gu - Page 12

bizhub C754e/C654e

1-8

1.3

Precautions for Operation Control

1

-

The administrator should have users ensure that the passwords set for the User Authentication, Secure

Print, and User Box are known only by the user concerned.

-

The administrator should have users who implement Account Authentication ensure that the Account

Password set for the account is known by the users implementing Account Authentication only.

-

The administrator should make sure that only the users who share a Public User Box and Group User

Box know the password set for it.

-

The administrator should have users change the passwords set for the User Authentication and User

Box at regular intervals.

-

The administrator should make sure that any user does not set any number that can easily be guessed

from birthdays, employee identification numbers, and the like for the passwords set for the User Au-

thentication, Secure Print, and User Box.

User information control server control requirements

For the user information control server connected to the LAN within the office, in which this machine is in-

stalled, the server administrator is required to apply patches and register only users who are authorized to

use the machine.

Security function operation setting operating requirements

The administrator of the machine should observe the following operating conditions.

-

The administrator of the machine should make sure that the machine is operated with the settings de-

scribed in the installation checklist made properly in advance.

-

The administrator of the machine should make sure of correct operation control so that the machine is

used with the Enhanced Security Mode set to [ON].

-

When the Enhanced Security Mode is turned [OFF], the administrator of the machine is to make various

settings according to the installation checklist and then set the Enhanced Security Mode to [ON] again.

For details of settings made by the service engineer, contact your service representative.

-

When the machine is to be discarded or use of a leased machine is terminated at the end of the leasing

contract, the administrator of the machine should use the Overwrite HDD Data function and the Over-

write All Data function to thereby prevent data to be protected from leaking.

Operation and control of the machine

The administrator of the machine should perform the following operation control.

-

The administrator of the machine should log off from the Administrator Settings whenever the operation

in the Administrator Settings is completed. The administrator of the machine should also make sure that

each individual user logs off from the User Authentication mode after the operation in the User Authen-

tication mode is completed, including operation of the Secure Print document, User Box, and User Box

file.

-

During user registration and box registration, the administrator of the machine should make sure that

the correct settings are made for the correct users, including functional restrictions and box attributes.

-

The administrator of the machine should set the Encryption Key according to the environment, in which

this machine is used.

-

The administrator of the machine should appropriately control the device certificate (SSL certificate)

registered in the machine.

-

The administrator of the machine should ensure that no illegal connection or access is attempted when

the machine is to be connected to an external interface.

-

The administrator of the machine should appropriately control the file of Job Log (Audit Log) data down-

loaded to, for example, a PC and ensure that none other than the administrator handles it.

-

The administrator of the machine should check the Job Log (Audit Log) data at appropriate timing,

thereby determining whether a security compromise or a faulty condition has occurred during an oper-

ating period.

-

When generating or deleting Job Log (Audit Log) and Job Log (Audit Log) data, the administrator of the

machine should check conditions of using this machine by the user.

-

The administrator of the machine should make sure that each individual user updates the OS of the us-

er's terminal and applications installed in it to eliminate any vulnerabilities.

-

This machine allows the print function and the file box saving function to be used from the USB mem-

ory. The administrator of the machine should make sure that each individual user does not leave the

machine with the USB memory inserted in it.

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	7
1.2 Security Functions	9
Check Count Clear Conditions	9
1.3 Precautions for Operation Control	11
Roles of the Owner of the Machine	11
Roles and Requirements of the Administrator of the machine	11
Password Usage Requirements	11
User information control server control requirements	12
Security function operation setting operating requirements	12
Operation and control of the machine	12
Machine Maintenance Control	14
1.4 Miscellaneous	15
Password Rules	15
Precautions for Use of Various Types of Applications	16
Encrypting communications	16
Print functions	17
IPP printing	17
Items of Data Cleared by Overwrite All Data Function	18
Fax functions	18
USB keyboard	18
Different types of boxes	19
Hardware and software used in the machine	19
Firmware integrity verification function	19
IPsec setting	20
CS Remote Care function	20
Terminating a Session and Logging out	20
Authentication error during external server authentication	20
2 Administrator Operations	22
2.1 Accessing the Administrator Settings	22
2.1.1 Accessing the Administrator Settings	22
2.1.2 Accessing the User Mode	24
2.2 Enhancing the Security Function	28
2.2.1 Items cleared by HDD Format	30
2.2.2 Setting the Password Rules	31
2.2.3 Setting the Enhanced Security Mode	33
2.3 Preventing Unauthorized Access	36
Setting Prohibited Functions When Authentication Error	36
2.4 Canceling the Operation Prohibited State	38
Performing Release Setting	38
2.5 Setting the Authentication Method	40
2.5.1 Setting the Authentication Method	40
2.5.2 Setting the External Server	43
2.6 ID & Print Setting Function	46
Setting ID & Print	46
2.7 System Auto Reset Function	48
Setting the System Auto Reset function	48
2.8 User Setting Function	50
Making user setting	50
2.9 Account Track Setting Function	56
Making account setting	56
2.10 User Box Function	61
2.10.1 Setting the User Box	61
2.10.2 Changing the user/account attributes and box password	67
2.10.3 Setting Memory RX	72
2.11 Changing the Administrator Password	75
Changing the Administrator Password	75
2.12 Protecting Data in the HDD	78
2.12.1 Setting the Encryption Key (encryption word)	78
2.12.2 Changing the Encryption Key	82
2.12.3 Setting the Overwrite HDD Data	84
2.13 Overwrite All Data Function	86
Setting the Overwrite All Data function	86
2.14 Obtaining Job Log	88
2.14.1 Obtaining and deleting a Job Log	88
2.14.2 Downloading the Job Log data	90
Job Log data	92
2.15 Setting time/date in machine	99
2.15.1 Setting time/date	99
2.15.2 Setting daylight saving time	102
2.16 SSL Setting Function	104
2.16.1 Device Certificate Setting	104
2.16.2 SSL Setting	106
2.16.3 Removing a Certificate	107
2.17 S/MIME Communication Setting Function	108
2.17.1 Setting the S/MIME Communication	108
2.17.2 Registering the certificate	111
2.18 SNMP Setting Function	113
2.18.1 Changing the auth-password and priv-password	113
2.18.2 SNMP access authentication function	119
2.18.3 SNMP v3 setting function	119
2.18.4 SNMP network setting function	119
2.19 WebDAV Function	120
Setting the WebDAV Server Password	120
2.20 TCP/IP Setting Function	123
2.20.1 Setting the IP Address	123
2.20.2 Registering the DNS Server	124
2.21 AppleTalk Setting Function	125
Making the AppleTalk Setting	125
2.22 E-Mail Setting Function	126
Setting the SMTP Server (E-Mail Server)	126
3 User Operations	128
3.1 User Authentication Function	128
3.1.1 Performing user authentication	128
3.1.2 Accessing the ID & Print Document	134
3.2 Change Password Function	136
Performing Change Password	136
3.3 Secure Print Function	139
Accessing the Secure Print Document	139
3.4 User Box Function	143
3.4.1 Setting the User Box	143
3.4.2 Changing the user/account attributes and box password	149
3.4.3 Accessing the User Box and User Box file	156
3.4.4 Sending S/MIME box files	160
4 Application Software	163
4.1 PageScope Data Administrator	163
4.1.1 Accessing from PageScope Data Administrator	163
4.1.2 Setting the user authentication method	166
4.1.3 Changing the authentication mode	168
4.1.4 Making the user settings	171
4.1.5 Making the account settings	172
4.1.6 Registering the certificate	173
4.1.7 DNS Server Setting Function	175
4.1.8 AppleTalk Setting Function	176

Konica Minolta bizhub PRO C754e bizhub C754e/C654e Security Operations User Gu - Page 12

User information control server control requirements

Page 12 highlights