Konica Minolta bizhub PRO C754e bizhub C754e/C654e Security Operations User Gu - Page 9

bizhub C754e/C654e

1-5

1.2

Security Functions

1

1.2

Security Functions

Setting the Enhanced Security Mode to [ON] will validate the security function of this machine. For details of

the settings of different security functions to be changed by turning [ON] the Enhanced Security Mode, see

page 2-8.

The following the major security functions when the Enhanced Security Mode is set to [ON].

Check Count Clear Conditions

The following are the conditions for clearing or resetting the check count of the number of wrong entries at

the time of authentication by the Enhanced Security Mode.

<Administrator Settings>

-

Authentication of Administrator Settings is successful.

<User Authentication Mode>

-

User Authentication mode is successful.

-

Release of Prohibited Functions When Authentication Error is executed.

<Account Track Mode>

-

Account Track mode is successful.

-

Release of Prohibited Functions When Authentication Error is executed.

Function

Description

Identification and au-

thentication function

Access control is then provided through password authentication for any ac-

cess to the Administrator Settings, User Authentication mode, User Box, a

User Box data file, a Secure Print document, SNMP authentication, and

WebDAV server. Access is thereby granted only to the authenticated user. A

password that can be set must meet the Password Rules. The machine does

not accept setting of an easily decipherable password. For details of the

Password Rules, see page 1-11.

If a wrong password is entered, during password authentication, a predeter-

mined number of times (once to three times. twice, four times, or six times

for the WebDAV Server Password) or more set by the administrator of the

machine, the machine determines that it is unauthorized access through Pro-

hibited Functions When Authentication Error, prohibiting any further entry of

the password. By prohibiting the password entry operation, the machine pre-

vents unauthorized use or removal of data. The administrator of the machine

is responsible for resetting the prohibition of the password entry operation.

For details, see page 2-18.

User limiting function

Specific functions to be used by each user/account may be limited. For de-

tails, see page 2-30.

HDD encryption function

By setting the Encryption Key, the data stored in the HDD is encrypted, there-

by protecting the data in the HDD. For details, see page 2-58.

Auditing function

Information including operations performed on the machine and a job history

can be stored in the HDD. Setting the Job Log (Audit Log) allows an illegal

act or inadequate operation performed on the machine to be traced. The ob-

tained Job Log can be downloaded and viewed from the PageScope Web

Connection. For details, see page 2-68.

Residual information de-

leting function

When the machine is to be discarded or use of a leased machine is terminat-

ed at the end of the leasing contract, setting of the Overwrite HDD Data func-

tion while the machine was in use allows residual unnecessary data to be

deleted, because the machine overwrites a specific overwrite value over the

unnecessary data. This prevents data leakage. (Passwords, addresses, and

other data set while the machine was in use should, however, be deleted

manually.) For details, see page 2-64.

To delete data including the passwords, addresses, and other data all at

once, the Overwrite All Data function overwrites and erases all data stored in

all spaces of the HDD. The function also resets all passwords saved in the

memory area on the MFP board and the SSD board to factory settings, pre-

venting data from leaking. For details, see page 2-66. For details of items to

be cleared by Overwrite All Data function, see page 1-14.

Network communication

protecting function

Communication data transmitted to or from the machine and client PC can

be encrypted using the SSL/TLS, which prevents information leakage

through sniffing over the network. For details, see page 2-84.

Section	Page
Contents	2
1 Security	6
1.1 Introduction	6
Compliance with the ISO15408 Standard	6
Operating Precautions	6
INSTALLATION CHECKLIST	7
1.2 Security Functions	9
Check Count Clear Conditions	9
1.3 Precautions for Operation Control	11
Roles of the Owner of the Machine	11
Roles and Requirements of the Administrator of the machine	11
Password Usage Requirements	11
User information control server control requirements	12
Security function operation setting operating requirements	12
Operation and control of the machine	12
Machine Maintenance Control	14
1.4 Miscellaneous	15
Password Rules	15
Precautions for Use of Various Types of Applications	16
Encrypting communications	16
Print functions	17
IPP printing	17
Items of Data Cleared by Overwrite All Data Function	18
Fax functions	18
USB keyboard	18
Different types of boxes	19
Hardware and software used in the machine	19
Firmware integrity verification function	19
IPsec setting	20
CS Remote Care function	20
Terminating a Session and Logging out	20
Authentication error during external server authentication	20
2 Administrator Operations	22
2.1 Accessing the Administrator Settings	22
2.1.1 Accessing the Administrator Settings	22
2.1.2 Accessing the User Mode	24
2.2 Enhancing the Security Function	28
2.2.1 Items cleared by HDD Format	30
2.2.2 Setting the Password Rules	31
2.2.3 Setting the Enhanced Security Mode	33
2.3 Preventing Unauthorized Access	36
Setting Prohibited Functions When Authentication Error	36
2.4 Canceling the Operation Prohibited State	38
Performing Release Setting	38
2.5 Setting the Authentication Method	40
2.5.1 Setting the Authentication Method	40
2.5.2 Setting the External Server	43
2.6 ID & Print Setting Function	46
Setting ID & Print	46
2.7 System Auto Reset Function	48
Setting the System Auto Reset function	48
2.8 User Setting Function	50
Making user setting	50
2.9 Account Track Setting Function	56
Making account setting	56
2.10 User Box Function	61
2.10.1 Setting the User Box	61
2.10.2 Changing the user/account attributes and box password	67
2.10.3 Setting Memory RX	72
2.11 Changing the Administrator Password	75
Changing the Administrator Password	75
2.12 Protecting Data in the HDD	78
2.12.1 Setting the Encryption Key (encryption word)	78
2.12.2 Changing the Encryption Key	82
2.12.3 Setting the Overwrite HDD Data	84
2.13 Overwrite All Data Function	86
Setting the Overwrite All Data function	86
2.14 Obtaining Job Log	88
2.14.1 Obtaining and deleting a Job Log	88
2.14.2 Downloading the Job Log data	90
Job Log data	92
2.15 Setting time/date in machine	99
2.15.1 Setting time/date	99
2.15.2 Setting daylight saving time	102
2.16 SSL Setting Function	104
2.16.1 Device Certificate Setting	104
2.16.2 SSL Setting	106
2.16.3 Removing a Certificate	107
2.17 S/MIME Communication Setting Function	108
2.17.1 Setting the S/MIME Communication	108
2.17.2 Registering the certificate	111
2.18 SNMP Setting Function	113
2.18.1 Changing the auth-password and priv-password	113
2.18.2 SNMP access authentication function	119
2.18.3 SNMP v3 setting function	119
2.18.4 SNMP network setting function	119
2.19 WebDAV Function	120
Setting the WebDAV Server Password	120
2.20 TCP/IP Setting Function	123
2.20.1 Setting the IP Address	123
2.20.2 Registering the DNS Server	124
2.21 AppleTalk Setting Function	125
Making the AppleTalk Setting	125
2.22 E-Mail Setting Function	126
Setting the SMTP Server (E-Mail Server)	126
3 User Operations	128
3.1 User Authentication Function	128
3.1.1 Performing user authentication	128
3.1.2 Accessing the ID & Print Document	134
3.2 Change Password Function	136
Performing Change Password	136
3.3 Secure Print Function	139
Accessing the Secure Print Document	139
3.4 User Box Function	143
3.4.1 Setting the User Box	143
3.4.2 Changing the user/account attributes and box password	149
3.4.3 Accessing the User Box and User Box file	156
3.4.4 Sending S/MIME box files	160
4 Application Software	163
4.1 PageScope Data Administrator	163
4.1.1 Accessing from PageScope Data Administrator	163
4.1.2 Setting the user authentication method	166
4.1.3 Changing the authentication mode	168
4.1.4 Making the user settings	171
4.1.5 Making the account settings	172
4.1.6 Registering the certificate	173
4.1.7 DNS Server Setting Function	175
4.1.8 AppleTalk Setting Function	176

Konica Minolta bizhub PRO C754e bizhub C754e/C654e Security Operations User Gu - Page 9

Security Functions, Check Count Clear Conditions

Page 9 highlights