bizhub C220/C280/C360 PKI Security Operations User Guide
Page 3
... Unlocking function procedure 26 9. Overwrite All Data function 27 i Data to the administrator 11 8. Compliance with the ISO15408 standard 1 3. Enhancing the security function 6 7.1 Details of Service Mode 5 6.2.1 Access lock release procedure 5 7. Precautions for PKI Card System Security Function Security Function Ver. 1.02 Jul. 2010 CONTENTS Security function 1. bizhub C360/C280/C220 for operation control 1 5.
... Unlocking function procedure 26 9. Overwrite All Data function 27 i Data to the administrator 11 8. Compliance with the ISO15408 standard 1 3. Enhancing the security function 6 7.1 Details of Service Mode 5 6.2.1 Access lock release procedure 5 7. Precautions for PKI Card System Security Function Security Function Ver. 1.02 Jul. 2010 CONTENTS Security function 1. bizhub C360/C280/C220 for operation control 1 5.
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 6
...person is not used to the administrator of the machine that the system has not been altered. C. He or she should explain to access Service Mode must be permitted. • If the LAN, in which the contents of IC card reader supported by the machine are the Common Access ...service engineer concerned to the machine from the external network should promptly provide the version of setting data in which the machine is installed, is connected to an outside network, install a firewall or similar network device to block any access to ensure that it is evaluated. D. bizhub C360/C280...
...person is not used to the administrator of the machine that the system has not been altered. C. He or she should explain to access Service Mode must be permitted. • If the LAN, in which the contents of IC card reader supported by the machine are the Common Access ...service engineer concerned to the machine from the external network should promptly provide the version of setting data in which the machine is installed, is connected to an outside network, install a firewall or similar network device to block any access to ensure that it is evaluated. D. bizhub C360/C280...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 7
... "ON" is displayed as accessed through [Service Mode] [Enhanced Security]. Touch [Check Details] on Meter Count display. 4. ble person of how to security. Refer to the Service Mode 1. Accessing the Service Mode 6.1 Access method to P.28 for PKI Card System Security Function Security Function Ver. 1.02 Jul. 2010 5. bizhub C360/C280/C220 for the method of KMBT...
... "ON" is displayed as accessed through [Service Mode] [Enhanced Security]. Touch [Check Details] on Meter Count display. 4. ble person of how to security. Refer to the Service Mode 1. Accessing the Service Mode 6.1 Access method to P.28 for PKI Card System Security Function Security Function Ver. 1.02 Jul. 2010 5. bizhub C360/C280/C220 for the method of KMBT...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 8
...lock state. Then, quit the Service Mode. bizhub C360/C280/C220 for 5 sec. When the access to 0. • When "Mode 2" is restricted by turning OFF and ON the sub power switch; The Service Mode screen will be sure to press [Exit] to the Service Mode through the CE Password is ...site with the correct CE password entered, the CE password illegal access count is cleared and reset to the Service Mode has been successful with the Service Mode setting screen being displayed, unau- thorized changes could occur for [Prohibited Functions When Authentication Error] as accessed ...
...lock state. Then, quit the Service Mode. bizhub C360/C280/C220 for 5 sec. When the access to 0. • When "Mode 2" is restricted by turning OFF and ON the sub power switch; The Service Mode screen will be sure to press [Exit] to the Service Mode through the CE Password is ...site with the correct CE password entered, the CE password illegal access count is cleared and reset to the Service Mode has been successful with the Service Mode setting screen being displayed, unau- thorized changes could occur for [Prohibited Functions When Authentication Error] as accessed ...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 9
... key. 3. Once started, the access lock release timer measures time intervals. bizhub C360/C280/C220 for PKI Card System Security Function Ver. 1.02 Jul. 2010 6. Touch [Coverage Rate]. Press the following procedure to release the access lock state of time set through [Service Mode] [Enhanced Security] [Operation Ban release time] elapses. Touch...
... key. 3. Once started, the access lock release timer measures time intervals. bizhub C360/C280/C220 for PKI Card System Security Function Ver. 1.02 Jul. 2010 6. Touch [Coverage Rate]. Press the following procedure to release the access lock state of time set through [Service Mode] [Enhanced Security] [Operation Ban release time] elapses. Touch...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 10
... to any value other than the default one. • If fax functions are to the screen. Call the Service Mode to be set up properly. See P.33 7.2 Security enhancing procedure 7.2.1 Making and checking the service settings 1. Touch [CE Authentication]. 6 A0EDS1E024DA See P.3 2. Press the following keys in this order to display the ...Remote Care Setting/Check ON Set arbitrarily. Enhancing the security function Security Function Ver. 1.02 Jul. 2010 7. Enhancing the security function 7.1 Details of Installed. bizhub C360/C280/C220 for PKI Card System Security Function 7.
... to any value other than the default one. • If fax functions are to the screen. Call the Service Mode to be set up properly. See P.33 7.2 Security enhancing procedure 7.2.1 Making and checking the service settings 1. Touch [CE Authentication]. 6 A0EDS1E024DA See P.3 2. Press the following keys in this order to display the ...Remote Care Setting/Check ON Set arbitrarily. Enhancing the security function Security Function Ver. 1.02 Jul. 2010 7. Enhancing the security function 7.1 Details of Installed. bizhub C360/C280/C220 for PKI Card System Security Function 7.
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 12
... than the default one for PKI Card System 7. Touch [System 2]. 10. When forgetting the CE password, call responsi- A0EDS1E027DA 11. bizhub C360/C280/C220 for the CE Password. • Exiting from the Service Mode after the new CE password has been set validates the setting of KMBT. Touch [END]. 12. Touch [CS Remote Care...
... than the default one for PKI Card System 7. Touch [System 2]. 10. When forgetting the CE password, call responsi- A0EDS1E027DA 11. bizhub C360/C280/C220 for the CE Password. • Exiting from the Service Mode after the new CE password has been set validates the setting of KMBT. Touch [END]. 12. Touch [CS Remote Care...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 13
Touch [Detail Setting]. Security Function 14. If CS Remote Care has been set, [Detail Setting] appears on the display. Enhancing the security function 13. A0EDS1E105DA 16. Touch [END] to display the Service Mode screen. Touch [RAM Clear]. 15. A0EDS1E106DA 9 Touch [Set] and [END]. bizhub C360/C280/C220 for PKI Card System Security Function Ver. 1.02 Jul. 2010 7.
Touch [Detail Setting]. Security Function 14. If CS Remote Care has been set, [Detail Setting] appears on the display. Enhancing the security function 13. A0EDS1E105DA 16. Touch [END] to display the Service Mode screen. Touch [RAM Clear]. 15. A0EDS1E106DA 9 Touch [Set] and [END]. bizhub C360/C280/C220 for PKI Card System Security Function Ver. 1.02 Jul. 2010 7.
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 14
...-G00-05 readerDriver A0ED0Y0-A404-G00-05 readerDriver A0ED0Y0-A401-G00-04 23. Touch [Internet ISW]. 18. Security Function A0EDS1E104DA 19. bizhub C360/C280/C220 for this machine. Touch [5]. 22. Exit the Service Mode. Touch [Internet ISW Set] and check that the version number of "readerDriver", "pcscLite", "pkcs11Lib" and "pkcs11Cfg" are the applicable version...
...-G00-05 readerDriver A0ED0Y0-A404-G00-05 readerDriver A0ED0Y0-A401-G00-04 23. Touch [Internet ISW]. 18. Security Function A0EDS1E104DA 19. bizhub C360/C280/C220 for this machine. Touch [5]. 22. Exit the Service Mode. Touch [Internet ISW Set] and check that the version number of "readerDriver", "pcscLite", "pkcs11Lib" and "pkcs11Cfg" are the applicable version...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 15
... Setting Check that "OFF" is set . Mode 1 cation Error has been set to [Mode2] by accessing [Service Mode] [State Confirmation] [HDD Format]. 11 Setting of the Password Rules. ON Check that "OFF" is set to "Invalid". Valid Check that Write setting is set . bizhub C360/C280/C220 for PKI Card System Security Function...
... Setting Check that "OFF" is set . Mode 1 cation Error has been set to [Mode2] by accessing [Service Mode] [State Confirmation] [HDD Format]. 11 Setting of the Password Rules. ON Check that "OFF" is set to "Invalid". Valid Check that Write setting is set . bizhub C360/C280/C220 for PKI Card System Security Function...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 16
...-GM0-30 111A A0EDS1E103DA 12 Check the Firmware version number of the machine. Touch [Firmware Version]. 3. Service Mode functions • The Service Mode is used to set various service functions. 8.1 Firmware Version • This function is used to the screen. bizhub C360/C280/C220 for PKI Card System Security Function 8. Service Mode functions Security Function Ver. 1.02 Jul. 2010 8.
...-GM0-30 111A A0EDS1E103DA 12 Check the Firmware version number of the machine. Touch [Firmware Version]. 3. Service Mode functions • The Service Mode is used to set various service functions. 8.1 Firmware Version • This function is used to the screen. bizhub C360/C280/C220 for PKI Card System Security Function 8. Service Mode functions Security Function Ver. 1.02 Jul. 2010 8.
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 17
... uses an 8-digit CE password for PKI Card System Security Function Ver. 1.02 Jul. 2010 8. Call the Service Mode to the screen. bizhub C360/C280/C220 for verifying his or her identity as service engineer, as he or she attempts to display the Enhanced Security screen: Stop0Clear Security...
... uses an 8-digit CE password for PKI Card System Security Function Ver. 1.02 Jul. 2010 8. Call the Service Mode to the screen. bizhub C360/C280/C220 for verifying his or her identity as service engineer, as he or she attempts to display the Enhanced Security screen: Stop0Clear Security...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 18
... is therefore used when the administrator sets the administrator password. Call the Service Mode to have the administrator change the administrator password accordingly. 8.3.1 Setting the administrator password 1. It is used when the administrator forgets the administrator password. A0EDS1E024DA 14 bizhub C360/C280/C220 for PKI Card System Security Function 8. Touch [Administrator Password]. NOTE •...
... is therefore used when the administrator sets the administrator password. Call the Service Mode to have the administrator change the administrator password accordingly. 8.3.1 Setting the administrator password 1. It is used when the administrator forgets the administrator password. A0EDS1E024DA 14 bizhub C360/C280/C220 for PKI Card System Security Function 8. Touch [Administrator Password]. NOTE •...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 19
... from the keyboard on the screen. Enter the new Administrator Password (the default value "1234567812345678") once again and touch [END]. 6. A0EDS1E034DA 5. bizhub C360/C280/C220 for PKI Card System Security Function Security Function Ver. 1.02 Jul. 2010 8. Then, have him or her select the following functions in ...] [Administrator Password]. 15 Then, touch [END]. Get the Administrator of the machine to access the Administrator Settings using the default password. Service Mode functions 4. Enter the default value "1234567812345678" as the password used only temporarily.
... from the keyboard on the screen. Enter the new Administrator Password (the default value "1234567812345678") once again and touch [END]. 6. A0EDS1E034DA 5. bizhub C360/C280/C220 for PKI Card System Security Function Security Function Ver. 1.02 Jul. 2010 8. Then, have him or her select the following functions in ...] [Administrator Password]. 15 Then, touch [END]. Get the Administrator of the machine to access the Administrator Settings using the default password. Service Mode functions 4. Enter the default value "1234567812345678" as the password used only temporarily.
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 20
Press the following keys in this order to the screen. Call the Service Mode to display the Enhanced Security screen: Stop0Clear A0EDS1E024DA 16 See P.3 2. bizhub C360/C280/C220 for PKI Card System Security Function 8. Service Mode functions Security Function Ver. 1.02 Jul. 2010 8.4 CE Password function • The CE Password function is used to change the CE password to call the Service Mode to the screen. 8.4.1 Setting the CE password 1.
Press the following keys in this order to the screen. Call the Service Mode to display the Enhanced Security screen: Stop0Clear A0EDS1E024DA 16 See P.3 2. bizhub C360/C280/C220 for PKI Card System Security Function 8. Service Mode functions Security Function Ver. 1.02 Jul. 2010 8.4 CE Password function • The CE Password function is used to change the CE password to call the Service Mode to the screen. 8.4.1 Setting the CE password 1.
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 21
... CE password is released. Then, access to release the access lock state, see P.5. For the procedure to the Service Mode cannot be made until the access lock state is entered a predetermined number of times. Touch [CE Password]. 4. When the access ...]. Enter the correct one. • Each time a wrong CE password is entered, the CE password illegal access count is wrong. Service Mode functions 3. bizhub C360/C280/C220 for [Prohibited Functions When Authentication Error] as accessed through [Administrator Settings] [Security Settings] [Security Details], the...
... CE password is released. Then, access to release the access lock state, see P.5. For the procedure to the Service Mode cannot be made until the access lock state is entered a predetermined number of times. Touch [CE Password]. 4. When the access ...]. Enter the correct one. • Each time a wrong CE password is entered, the CE password illegal access count is wrong. Service Mode functions 3. bizhub C360/C280/C220 for [Prohibited Functions When Authentication Error] as accessed through [Administrator Settings] [Security Settings] [Security Details], the...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 22
NOTE • For the CE Password, set a value other than the default. • Quitting the Service Mode after the new password has been set the CE Password once again. Security Function A0EDS1E036DA 6. Retype the new CE password and touch [END]. Characters... be used from among a total of 93 characters 18 ble person of the new password. • NEVER forget the CE password. Service Mode functions Security Function Ver. 1.02 Jul. 2010 5. bizhub C360/C280/C220 for the CE password • Numeric characters: 0 to 9 • Alpha characters: upper and lower case letters • Symbols ...
NOTE • For the CE Password, set a value other than the default. • Quitting the Service Mode after the new password has been set the CE Password once again. Security Function A0EDS1E036DA 6. Retype the new CE password and touch [END]. Characters... be used from among a total of 93 characters 18 ble person of the new password. • NEVER forget the CE password. Service Mode functions Security Function Ver. 1.02 Jul. 2010 5. bizhub C360/C280/C220 for the CE password • Numeric characters: 0 to 9 • Alpha characters: upper and lower case letters • Symbols ...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 23
...Name setting) is reset to "1234567812345678." Network Setting The currently set to [OFF]. bizhub C360/C280/C220 for various functions to the default values. • Since all subsequent data will be set to [1 min.]. Service Mode functions 8.5 Initialization function • The Data Clear function resets the current settings for... having the administrator make the settings again, confirm that the MFP is a properly operation status by Clear All Data function Service Mode/Administrator Settings Item Details CE password CE password is cleared and reset to the default setting.
...Name setting) is reset to "1234567812345678." Network Setting The currently set to [OFF]. bizhub C360/C280/C220 for various functions to the default values. • Since all subsequent data will be set to [1 min.]. Service Mode functions 8.5 Initialization function • The Data Clear function resets the current settings for... having the administrator make the settings again, confirm that the MFP is a properly operation status by Clear All Data function Service Mode/Administrator Settings Item Details CE password CE password is cleared and reset to the default setting.
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 24
... to "Enable." Use Box registration data/files All information on Secure Print Document registered with the machine is deleted. bizhub C360/C280/C220 for PKI Card System Security Function 8. One-Touch Registration Data/ All is reset to OFF. SSL certificate Deletes...setting, SMTP Server setting, NetWare Setting, NetBIOS setting and AppleTalk Printer Name setting) is set to the default value (sysadm). Service Mode functions Security Function Ver. 1.02 Jul. 2010 Others Item Details SSL certificate Deletes the currently set SSL certificate. (PageScope Web Connection...
... to "Enable." Use Box registration data/files All information on Secure Print Document registered with the machine is deleted. bizhub C360/C280/C220 for PKI Card System Security Function 8. One-Touch Registration Data/ All is reset to OFF. SSL certificate Deletes...setting, SMTP Server setting, NetWare Setting, NetBIOS setting and AppleTalk Printer Name setting) is set to the default value (sysadm). Service Mode functions Security Function Ver. 1.02 Jul. 2010 Others Item Details SSL certificate Deletes the currently set SSL certificate. (PageScope Web Connection...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 25
...Rules. • If you have the administrator of the machine set once again a password that meets the requirements of Service Mode, or if you leave the site with the Service Mode setting screen being displayed, unauthorized changes could occur for PKI Card System Security Function Ver. 1.02 Jul. 2010 8. ...sure to have to leave the site by necessity when the Service Mode has been set, be sure to the screen. Select [Clear All Data] or the clear item in [Clear Individual Data] and press the Start key. Security Function A0EDS1E037DA 5. bizhub C360/C280/C220 for any set values.
...Rules. • If you have the administrator of the machine set once again a password that meets the requirements of Service Mode, or if you leave the site with the Service Mode setting screen being displayed, unauthorized changes could occur for PKI Card System Security Function Ver. 1.02 Jul. 2010 8. ...sure to have to leave the site by necessity when the Service Mode has been set, be sure to the screen. Select [Clear All Data] or the clear item in [Clear Individual Data] and press the Start key. Security Function A0EDS1E037DA 5. bizhub C360/C280/C220 for any set values.