AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 2
Contents Contents Contents 1 1 Introduction 3 1.1 Safety Information 4 2 Getting Started 7 2.1 Product Overview 7 2.2 Part names and their functions 8 2.3 Pre-Setting 9 2.3.1 Configuring Network Settings 9 2.3.2 Registering Active Directory for Authentication 11 2.3.3 Correcting the MFP Time 12 2.3.4 Registering the DNS Server Associated with Active Directory ........ 13 2.3.5 Specifying the PIV Transitional Mode 14 2.3.6 Configuring Settings for Verifying the Active Directory Certificate 15 2.4 Operation Settings 20 3 How to Use the Authentication Unit 21 3.1 ...
Contents Contents Contents 1 1 Introduction 3 1.1 Safety Information 4 2 Getting Started 7 2.1 Product Overview 7 2.2 Part names and their functions 8 2.3 Pre-Setting 9 2.3.1 Configuring Network Settings 9 2.3.2 Registering Active Directory for Authentication 11 2.3.3 Correcting the MFP Time 12 2.3.4 Registering the DNS Server Associated with Active Directory ........ 13 2.3.5 Specifying the PIV Transitional Mode 14 2.3.6 Configuring Settings for Verifying the Active Directory Certificate 15 2.4 Operation Settings 20 3 How to Use the Authentication Unit 21 3.1 ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 3
Contents 3.5 Scan to E-mail (S/MIME) Using PKI Card 36 3.5.1 Overview 36 3.5.2 Related Settings 37 3.5.3 Encrypting an E-Mail and Adding a Digital Signature 39 3.6 PKI Card Print 40 3.6.1 Overview 40 3.6.2 Installing the Printer Driver 41 3.6.3 Specifying the Print Data Deletion Time 44 3.6.4 Handling PKI Card Print 45 3.7 Scan To Me 50 3.7.1 Overview 50 3.7.2 Before Using Scan To Me 52 3.7.3 Related Settings 52 3.7.4 Handling Scan To Me 53 3.8 Scan To Home 54 3.8.1 Overview 54 3.8.2 Before Using Scan To Home 55 3.8.3 Related Settings 56 3.8.4 Using Scan To Home 57 4 Added ...
Contents 3.5 Scan to E-mail (S/MIME) Using PKI Card 36 3.5.1 Overview 36 3.5.2 Related Settings 37 3.5.3 Encrypting an E-Mail and Adding a Digital Signature 39 3.6 PKI Card Print 40 3.6.1 Overview 40 3.6.2 Installing the Printer Driver 41 3.6.3 Specifying the Print Data Deletion Time 44 3.6.4 Handling PKI Card Print 45 3.7 Scan To Me 50 3.7.1 Overview 50 3.7.2 Before Using Scan To Me 52 3.7.3 Related Settings 52 3.7.4 Handling Scan To Me 53 3.8 Scan To Home 54 3.8.1 Overview 54 3.8.2 Before Using Scan To Home 55 3.8.3 Related Settings 56 3.8.4 Using Scan To Home 57 4 Added ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 4
The actual screens that appear may be slightly different from the screen images used in this User's Guide, whether in its entirety or in this User's Guide is strictly prohibited. - Unauthorized use or reproduction of this User's Guide. All other countries. - The information contained in the United States and/or other company names and product names mentioned in part, is subject to change without notice. Restrictions - Microsoft® and Windows® are either registered trademarks or trademarks of Microsoft Corporation in this User's Guide are either registered ...
The actual screens that appear may be slightly different from the screen images used in this User's Guide, whether in its entirety or in this User's Guide is strictly prohibited. - Unauthorized use or reproduction of this User's Guide. All other countries. - The information contained in the United States and/or other company names and product names mentioned in part, is subject to change without notice. Restrictions - Microsoft® and Windows® are either registered trademarks or trademarks of Microsoft Corporation in this User's Guide are either registered ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 5
The reprinting or reproduction of the content of operations not described in this information are provided entirely on lives and property. (Applications requiring high reliability: Chemical plant management, medical equipment management and emergency communications management) - The marketing and authorization to use . This product is designed, manufactured and intended for general business use our company's product mentioned in this information. A malfunction may occur as a result of this publication, either in part or in the product, the specifications concerning this product are ...
The reprinting or reproduction of the content of operations not described in this information are provided entirely on lives and property. (Applications requiring high reliability: Chemical plant management, medical equipment management and emergency communications management) - The marketing and authorization to use . This product is designed, manufactured and intended for general business use our company's product mentioned in this information. A malfunction may occur as a result of this publication, either in part or in the product, the specifications concerning this product are ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 6
These limits are subject to radio or television reception, which the receiver is connected. - If this device must accept any changes or modifications must be subject to radio communications. Introduction 1 Regulation notices USER INSTRUCTIONS FCC PART 15 - RADIO FREQUENCY DEVICES (For U.S.A. However, there is no guarantee that to which can radiate radio frequency energy and, if not installed and used in accordance with the FCC and are designed to Part 15 of the following two conditions: (1) this device may not cause interference, and (2) this equipment does cause ...
These limits are subject to radio or television reception, which the receiver is connected. - If this device must accept any changes or modifications must be subject to radio communications. Introduction 1 Regulation notices USER INSTRUCTIONS FCC PART 15 - RADIO FREQUENCY DEVICES (For U.S.A. However, there is no guarantee that to which can radiate radio frequency energy and, if not installed and used in accordance with the FCC and are designed to Part 15 of the following two conditions: (1) this device may not cause interference, and (2) this equipment does cause ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 7
AU-211P 6 Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. Introduction 1 INTERFERENCE-CAUSING EQUIPMENT STANDARD (ICES-003 ISSUE 4) (For Canada Users) (This device complies with Canadian ICES-003. This Class B digital apparatus complies with RSS-Gen of IC Rules.) Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of this device.
AU-211P 6 Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. Introduction 1 INTERFERENCE-CAUSING EQUIPMENT STANDARD (ICES-003 ISSUE 4) (For Canada Users) (This device complies with Canadian ICES-003. This Class B digital apparatus complies with RSS-Gen of IC Rules.) Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of this device.
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 8
You can not be used with applications other than the printer driver and PageScope Authentication Manager compatible with a higher level of security. Use conditions The following conditions are required to perform personal authentication. Connecting this unit enables you to carry out operations without making a password public on the network, and to become unstable. Doing so may cause this system will enable you to run a PKI card authentication system (hereinafter referred to as "this system") that scans a PKI card (CAC or PIV card) to use this system. - 2 PKI card ...
You can not be used with applications other than the printer driver and PageScope Authentication Manager compatible with a higher level of security. Use conditions The following conditions are required to perform personal authentication. Connecting this unit enables you to carry out operations without making a password public on the network, and to become unstable. Doing so may cause this system will enable you to run a PKI card authentication system (hereinafter referred to as "this system") that scans a PKI card (CAC or PIV card) to use this system. - 2 PKI card ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 9
Blinks green while authentication. Turns green when you log in using the PKI card. AU-211P 8 Used for connecting this device to insert the PKI card. Getting Started 2 2.2 Part names and their functions 3 2 1 No. Part name 1 Card inlet 2 LED lamp 3 USB cable Description Used to the multifunctional product.
Blinks green while authentication. Turns green when you log in using the PKI card. AU-211P 8 Used for connecting this device to insert the PKI card. Getting Started 2 2.2 Part names and their functions 3 2 1 No. Part name 1 Card inlet 2 LED lamp 3 USB cable Description Used to the multifunctional product.
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 10
Specifying the PIV transitional mode (page 14) - Description Select whether to use this system, pre-configure the following settings on the MFP. - Configuring network settings (page 9) - When directly specifying the IP address, enter the IP address of the MFP. AU-211P 9 Registering Active Directory for verifying the Active Directory certificate (page 15) 2.3.1 Configuring Network Settings Configure the basic settings required to automatically retrieve the IP address or directly specify it. Registering the DNS server associated with Active Directory (page 13) - TCP/IP ...
Specifying the PIV transitional mode (page 14) - Description Select whether to use this system, pre-configure the following settings on the MFP. - Configuring network settings (page 9) - When directly specifying the IP address, enter the IP address of the MFP. AU-211P 9 Registering Active Directory for verifying the Active Directory certificate (page 15) 2.3.1 Configuring Network Settings Configure the basic settings required to automatically retrieve the IP address or directly specify it. Registering the DNS server associated with Active Directory (page 13) - TCP/IP ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 11
Item ON/OFF Auto IPv6 Settings DHCPv6 Setting Global Address Prefix Length Gateway Address Link-Local Address DNS Host Description Select [ON] when using DHCPv6. Specify the IPv6 global address when not automatically retrieving the IPv6 address. Specify the IPv6 global address prefix length when not automatically retrieving the IPv6 address. Select [ON] when retrieving the IPv6 address using the MFP in an IPv6 environment. This item is available when using the MFP in the DNS server that supports the Dynamic DNS function. Select [ON] when automatically retrieving the IPv6 address...
Item ON/OFF Auto IPv6 Settings DHCPv6 Setting Global Address Prefix Length Gateway Address Link-Local Address DNS Host Description Select [ON] when using DHCPv6. Specify the IPv6 global address when not automatically retrieving the IPv6 address. Specify the IPv6 global address prefix length when not automatically retrieving the IPv6 address. Select [ON] when retrieving the IPv6 address using the MFP in an IPv6 environment. This item is available when using the MFP in the DNS server that supports the Dynamic DNS function. Select [ON] when automatically retrieving the IPv6 address...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 12
Getting Started 2 Item Search Domain Name Auto Retrieval Default DNS Domain Name DNS Search Domain Name 1 to 3 Description Select whether to 20 Active Directory services. Select Active Directory, and specify its default domain name (up to 64 characters). ! AU-211P 11 Item Server Name Server Type Description Specify the name of the external server (up to 32 characters). Detail When registering multiple Active Directory services, specify the default Active Directory previously. External Server Settings On the MFP control panel, press the [Utility/Counter] key, and ...
Getting Started 2 Item Search Domain Name Auto Retrieval Default DNS Domain Name DNS Search Domain Name 1 to 3 Description Select whether to 20 Active Directory services. Select Active Directory, and specify its default domain name (up to 64 characters). ! AU-211P 11 Item Server Name Server Type Description Specify the name of the external server (up to 32 characters). Detail When registering multiple Active Directory services, specify the default Active Directory previously. External Server Settings On the MFP control panel, press the [Utility/Counter] key, and ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 13
To automatically obtain the IPv6 address of the NTP server associated with the system time. Page 1/2 Item ON/OFF Auto IPv6 Retrieval Host Address Port Number Set Date Page 2/2 Item Auto Time Adjustment Polling Interval Description Select [ON]. Specify the port number. Time Adjustment Setting On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [Forward] - [Detail Settings] [Time Adjustment Setting]. Correct the time. Correct the MFP time so it matches the Active Directory time with Active Directory. This ...
To automatically obtain the IPv6 address of the NTP server associated with the system time. Page 1/2 Item ON/OFF Auto IPv6 Retrieval Host Address Port Number Set Date Page 2/2 Item Auto Time Adjustment Polling Interval Description Select [ON]. Specify the port number. Time Adjustment Setting On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [Forward] - [Detail Settings] [Time Adjustment Setting]. Correct the time. Correct the MFP time so it matches the Active Directory time with Active Directory. This ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 14
Getting Started 2 2.3.4 Registering the DNS Server Associated with Active Directory Register the DNS server associated with Active Directory. Secondary DNS Server 1 Specify the IPv4 address of the priority DNS server associated with Active Directory. DNS Server Settings (IPv4) On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [TCP/IP Settings] - [DNS Server Settings (IPv4)]. Priority DNS Server Specify the IPv4 address of the secondary DNS server and 2 associated with Active Directory in the IPv6 environment. AU-...
Getting Started 2 2.3.4 Registering the DNS Server Associated with Active Directory Register the DNS server associated with Active Directory. Secondary DNS Server 1 Specify the IPv4 address of the priority DNS server associated with Active Directory. DNS Server Settings (IPv4) On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [TCP/IP Settings] - [DNS Server Settings (IPv4)]. Priority DNS Server Specify the IPv4 address of the secondary DNS server and 2 associated with Active Directory in the IPv6 environment. AU-...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 15
Priority DNS Server Specify the IPv6 address of the secondary DNS server and 2 associated with Active Directory. AU-211P 14 This is available when using the PIV-cum-CAC card. This item is required when using DHCPv6. Secondary DNS Server 1 Specify the IPv6 address of the priority DNS server associated with Active Directory. 2.3.5 Specifying the PIV Transitional Mode Specify the PIV transitional mode. Authentication Device Settings On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [User Authentication/Account Track] [...
Priority DNS Server Specify the IPv6 address of the secondary DNS server and 2 associated with Active Directory. AU-211P 14 This is available when using the PIV-cum-CAC card. This item is required when using DHCPv6. Secondary DNS Server 1 Specify the IPv6 address of the priority DNS server associated with Active Directory. 2.3.5 Specifying the PIV Transitional Mode Specify the PIV transitional mode. Authentication Device Settings On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [User Authentication/Account Track] [...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 16
Certificate Verification Setting On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [User Authentication/Account Track] - [Certificate Verification Setting]. Item Verify Validity Period Check Root Signature Check CRL Expiration Check OCSP Expiration Description Select whether to verify the Active Directory certificate when communicating with Active Directory. To check the root signature, view the external certificates managed on the MFP, refer to register an external certificate on the MFP. For details on how to "External Certificate ...
Certificate Verification Setting On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [User Authentication/Account Track] - [Certificate Verification Setting]. Item Verify Validity Period Check Root Signature Check CRL Expiration Check OCSP Expiration Description Select whether to verify the Active Directory certificate when communicating with Active Directory. To check the root signature, view the external certificates managed on the MFP, refer to register an external certificate on the MFP. For details on how to "External Certificate ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 17
If the DNS server is left blank, the system accesses the URL of the OCSP service embedded in an error. Enter the URL of the OCSP service is set to 511 characters). If this check box to the User's Guide [Network Administrator] supplied together with the MFP. Select this item is specified, you can enter the host name instead. To check the expiration date via a proxy server, enter the proxy server address. If [IPv6] is not embedded in the certificate, it will result in the certificate. If the URL of the OCSP service (up to [ON], you can also specify the IPv6 address....
If the DNS server is left blank, the system accesses the URL of the OCSP service embedded in an error. Enter the URL of the OCSP service is set to 511 characters). If this check box to the User's Guide [Network Administrator] supplied together with the MFP. Select this item is specified, you can enter the host name instead. To check the expiration date via a proxy server, enter the proxy server address. If [IPv6] is not embedded in the certificate, it will result in the certificate. If the URL of the OCSP service (up to [ON], you can also specify the IPv6 address....
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 18
Specify an address with no proxy server used depending on your environment when checking the expiration date. AU-211P 17 Getting Started 2 Item Proxy Server Port Number User Name Password Address not using Proxy Server Description Enter the port number for the proxy server. If [IPv6] is set to 63 characters). If the DNS server is changed.], and enter a new password. Enter the user name to log in to the proxy server (up to [ON], you can also specify the IPv6 addresses. Enter the password to log in to the proxy server (up to 63 characters). When changing the registered ...
Specify an address with no proxy server used depending on your environment when checking the expiration date. AU-211P 17 Getting Started 2 Item Proxy Server Port Number User Name Password Address not using Proxy Server Description Enter the port number for the proxy server. If [IPv6] is set to 63 characters). If the DNS server is changed.], and enter a new password. Enter the user name to log in to the proxy server (up to [ON], you can also specify the IPv6 addresses. Enter the password to log in to the proxy server (up to 63 characters). When changing the registered ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 19
Detail • To check the root signature in the New Registration screen, and specify a new external certificate. View the detailed information about the external certificate. Click [Browse] in Certificate Verification, register the external certificate you want to register a new external certificate. Item Certificate type [New Registration] Issuer Subject Validity Period Detail Delete AU-211P Description Select the type of external certificates. Click this button to display, and click [Changes the display]. Displays the issuer of the external certificate. If necessary, ...
Detail • To check the root signature in the New Registration screen, and specify a new external certificate. View the detailed information about the external certificate. Click [Browse] in Certificate Verification, register the external certificate you want to register a new external certificate. Item Certificate type [New Registration] Issuer Subject Validity Period Detail Delete AU-211P Description Select the type of external certificates. Click this button to display, and click [Changes the display]. Displays the issuer of the external certificate. If necessary, ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 20
Getting Started 2 Item File Description Click [Browse] in the Import Certificates (PEM/DER) screen, and specify a new external certificate to be registered. • If [Trusted CA Root Certificate] is selected, register the root certificate from the CA (Certificate Authority). • If [Trusted CA Intermediate Certificate] is selected, register the intermediate certificate from the CA (Certificate Authority). • If [Trusted EE (End Entity) Certificate] is selected, register the certificates individually. • If [Non-Trusted Certificate] is selected, register the non-trusted ...
Getting Started 2 Item File Description Click [Browse] in the Import Certificates (PEM/DER) screen, and specify a new external certificate to be registered. • If [Trusted CA Root Certificate] is selected, register the root certificate from the CA (Certificate Authority). • If [Trusted CA Intermediate Certificate] is selected, register the intermediate certificate from the CA (Certificate Authority). • If [Trusted EE (End Entity) Certificate] is selected, register the certificates individually. • If [Non-Trusted Certificate] is selected, register the non-trusted ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 21
For details on each setting, refer to the User's Guide [Network Administrator] supplied together with PageScope Authentication Manager, register the MFP in the disable state. Disabling the OpenAPI function To associate the MFP with the MFP. To ensure security, change the MFP administrator password, press the [Utility/Counter] key, and then [Administrator Settings] - [Security Settings] [Administrator Password] on the MFP control panel. Detail • To disable the OpenAPI function, press the [Utility/Counter] key, and then [Administrator Settings] - [System Connection] - [OpenAPI...
For details on each setting, refer to the User's Guide [Network Administrator] supplied together with PageScope Authentication Manager, register the MFP in the disable state. Disabling the OpenAPI function To associate the MFP with the MFP. To ensure security, change the MFP administrator password, press the [Utility/Counter] key, and then [Administrator Settings] - [Security Settings] [Administrator Password] on the MFP control panel. Detail • To disable the OpenAPI function, press the [Utility/Counter] key, and then [Administrator Settings] - [System Connection] - [OpenAPI...