AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 2
... Overview 7 2.2 Part names and their functions 8 2.3 Pre-Setting 9 2.3.1 Configuring Network Settings 9 2.3.2 Registering Active Directory for Authentication 11 2.3.3 Correcting the MFP Time 12 2.3.4 Registering the DNS Server Associated with Active Directory ........ 13 2.3.5 Specifying the PIV Transitional Mode 14 2.3.6 Configuring Settings for Verifying the Active Directory Certificate 15 2.4 Operation Settings 20 3 How to Use the Authentication Unit...
... Overview 7 2.2 Part names and their functions 8 2.3 Pre-Setting 9 2.3.1 Configuring Network Settings 9 2.3.2 Registering Active Directory for Authentication 11 2.3.3 Correcting the MFP Time 12 2.3.4 Registering the DNS Server Associated with Active Directory ........ 13 2.3.5 Specifying the PIV Transitional Mode 14 2.3.6 Configuring Settings for Verifying the Active Directory Certificate 15 2.4 Operation Settings 20 3 How to Use the Authentication Unit...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 3
Contents 3.5 Scan to E-mail (S/MIME) Using PKI Card 36 3.5.1 Overview 36 3.5.2 Related Settings 37 3.5.3 Encrypting an E-Mail and Adding a Digital Signature 39 3.6 PKI Card Print 40 3.6.1 Overview... Using Scan To Home 55 3.8.3 Related Settings 56 3.8.4 Using Scan To Home 57 4 Added or Changed Setting Information 58 4.1 User Settings 58 4.1.1 System Settings 58 4.2 Administrator Settings 59 4.2.1 System Settings 59 4.2.2 User Authentication/ Account Track 59 4.2.3 Network Settings 60 4.2.4 Security Settings 61 4.2.5 License Settings 61 5 Appendix 62 5.1 Product Specifications ...
Contents 3.5 Scan to E-mail (S/MIME) Using PKI Card 36 3.5.1 Overview 36 3.5.2 Related Settings 37 3.5.3 Encrypting an E-Mail and Adding a Digital Signature 39 3.6 PKI Card Print 40 3.6.1 Overview... Using Scan To Home 55 3.8.3 Related Settings 56 3.8.4 Using Scan To Home 57 4 Added or Changed Setting Information 58 4.1 User Settings 58 4.1.1 System Settings 58 4.2 Administrator Settings 59 4.2.1 System Settings 59 4.2.2 User Authentication/ Account Track 59 4.2.3 Network Settings 60 4.2.4 Security Settings 61 4.2.5 License Settings 61 5 Appendix 62 5.1 Product Specifications ...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 10
... retrieving the IP address, select the automatic retrieval method. AU-211P 9 Registering Active Directory for verifying the Active Directory certificate (page 15) 2.3.1 Configuring Network Settings Configure the basic settings required to automatically retrieve the IP address or directly specify it. When directly specifying the IP address, enter the IP address of the MFP...
... retrieving the IP address, select the automatic retrieval method. AU-211P 9 Registering Active Directory for verifying the Active Directory certificate (page 15) 2.3.1 Configuring Network Settings Configure the basic settings required to automatically retrieve the IP address or directly specify it. When directly specifying the IP address, enter the IP address of the MFP...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 13
.... To automatically obtain the IPv6 address of the NTP server associated with the system time. Time Adjustment Setting On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [Forward] - [Detail Settings] [Time Adjustment Setting]. Getting Started 2 2.3.3 Correcting the MFP Time You cannot log into Active Directory if the MFP system...
.... To automatically obtain the IPv6 address of the NTP server associated with the system time. Time Adjustment Setting On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [Forward] - [Detail Settings] [Time Adjustment Setting]. Getting Started 2 2.3.3 Correcting the MFP Time You cannot log into Active Directory if the MFP system...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 14
... Select whether to automatically obtain the DNS server address. DNS Server Settings (IPv6) On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [TCP/IP Settings] - [DNS Server Settings (IPv6)]. 2 Note These settings are required when using DHCP. DNS Server Settings (IPv4) On the MFP control panel, press the [Utility/Counter] key...
... Select whether to automatically obtain the DNS server address. DNS Server Settings (IPv6) On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [TCP/IP Settings] - [DNS Server Settings (IPv6)]. 2 Note These settings are required when using DHCP. DNS Server Settings (IPv4) On the MFP control panel, press the [Utility/Counter] key...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 27
... the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [LDAP Settings] - [Enabling LDAP]. Item Enabling LDAP Description Select [ON]. How to Use the Authentication Unit 3 3.3.2 Related Settings This section explains how to configure the address search (LDAP) settings on the MFP that supports this system. On the MFP control panel...
... the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [LDAP Settings] - [Enabling LDAP]. Item Enabling LDAP Description Select [ON]. How to Use the Authentication Unit 3 3.3.2 Related Settings This section explains how to configure the address search (LDAP) settings on the MFP that supports this system. On the MFP control panel...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 33
... NTLM user authentication is performed. On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [SMB Settings] - [Client Settings]. When performing SMB TX in the environment in which the Active Directory and NT domains are used together, select [Kerberos.../NTLMv2/v1]. AU-211P 32 Item ON/OFF SMB Authentication Setting User Authentication (NTLM) DFS Setting Description Select [ON]. Client Settings Configure the setting to configure the SMB TX settings on the MFP that supports this system.
... NTLM user authentication is performed. On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [SMB Settings] - [Client Settings]. When performing SMB TX in the environment in which the Active Directory and NT domains are used together, select [Kerberos.../NTLMv2/v1]. AU-211P 32 Item ON/OFF SMB Authentication Setting User Authentication (NTLM) DFS Setting Description Select [ON]. Client Settings Configure the setting to configure the SMB TX settings on the MFP that supports this system.
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 38
...signature] or [Select when sending]. If [Always add signature] is selected, a digital signature is [Select when sending]. S/MIME Communication Settings Configure settings to encrypt an e-mail or add a digital signature on the MFP that supports this system. The default is automatically added using the...before sending an e-mail. On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [E-Mail Settings] - [S/MIME Communication Settings]. If [Select when sending] is printed when sending and receiving e-mail message.
...signature] or [Select when sending]. If [Always add signature] is selected, a digital signature is [Select when sending]. S/MIME Communication Settings Configure settings to encrypt an e-mail or add a digital signature on the MFP that supports this system. The default is automatically added using the...before sending an e-mail. On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [E-Mail Settings] - [S/MIME Communication Settings]. If [Select when sending] is printed when sending and receiving e-mail message.
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 61
... that User Authentication is fixed to [Use Set Value]. TCP Socket Settings Item TCP Socket Description The default is [Invalid]. AU-211P 60 SNMP Settings Item SNMP v1/v2c Settings SNMP v3 (IP) Description The default of [Write Setting] is [OFF]. Added or Changed Setting Information 4 4.2.3 Network Settings FTP Settings Item FTP Server Settings Description The default is [OFF]. For...
... that User Authentication is fixed to [Use Set Value]. TCP Socket Settings Item TCP Socket Description The default is [Invalid]. AU-211P 60 SNMP Settings Item SNMP v1/v2c Settings SNMP v3 (IP) Description The default of [Write Setting] is [OFF]. Added or Changed Setting Information 4 4.2.3 Network Settings FTP Settings Item FTP Server Settings Description The default is [OFF]. For...
bizhub 223/283/363/423 PKI Security Operations User Guide
Page 9
...disable the FTP Server, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [FTP Settings] on the MFP control panel, and set "FTP Server Settings" to make sure that settings have not been changed by the Administrator and should disable the TCP Socket and ...conditions. The Administrator should be protected. bizhub 423/363/283/223 1-6 When using an SMTP server (mail server) or an DNS server, each individual user logs off from the Administrator Settings whenever the operation in the Administrator Settings is completed, including operation of 93...
...disable the FTP Server, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [FTP Settings] on the MFP control panel, and set "FTP Server Settings" to make sure that settings have not been changed by the Administrator and should disable the TCP Socket and ...conditions. The Administrator should be protected. bizhub 423/363/283/223 1-6 When using an SMTP server (mail server) or an DNS server, each individual user logs off from the Administrator Settings whenever the operation in the Administrator Settings is completed, including operation of 93...
bizhub 223/283/363/423 PKI Security Operations User Guide
Page 10
... machine. To disable SNMP v3, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [SNMP Settings] on the MFP control panel, and set "Write Setting" to the client PC. Provide adequate control over the machine to ensure that any access...of SNMP v1/v2c, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [SNMP Settings] - [Forward] - [SNMP v1/v2c Settings] - [Forward] on the machine. - bizhub 423/363/283/223 1-7 The Administrator of IC card reader supported by the Service Representative. The ...
... machine. To disable SNMP v3, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [SNMP Settings] on the MFP control panel, and set "Write Setting" to the client PC. Provide adequate control over the machine to ensure that any access...of SNMP v1/v2c, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [SNMP Settings] - [Forward] - [SNMP v1/v2c Settings] - [Forward] on the machine. - bizhub 423/363/283/223 1-7 The Administrator of IC card reader supported by the Service Representative. The ...
bizhub 223/283/363/423 PKI Security Operations User Guide
Page 38
bizhub 423/363/283/223 2-26 Setting the S/MIME Communication 0 For the procedure to set [Always add signature] or [Select when sending] for Digital Signature. 2.8 S/MIME Communication Setting Function 2 2.8 S/MIME Communication Setting Function When access to the machine by the Administrator of the machine through the Administrator Settings is absolutely necessary to leave the machine, be sure first...
bizhub 423/363/283/223 2-26 Setting the S/MIME Communication 0 For the procedure to set [Always add signature] or [Select when sending] for Digital Signature. 2.8 S/MIME Communication Setting Function 2 2.8 S/MIME Communication Setting Function When access to the machine by the Administrator of the machine through the Administrator Settings is absolutely necessary to leave the machine, be sure first...
bizhub 223/283/363/423 PKI Security Operations User Guide
Page 45
... the machine, be sure first to log off from the Administrator Settings. 1 Call the Network Settings screen on the display from the control panel. 2 Touch [TCP/IP Settings]. 3 Touch [IPv4 Setting]. 4 Touch [Manual Input]. 5 Select [IP Address] and set the IP Address. % If [Auto Input] is selected for ... and 2 of page 2-26. 0 Do not leave the machine with the setting screen of Administrator Settings left shown on the display. bizhub 423/363/283/223 2-33 2.11 TCP/IP Setting Function 2 2.11 TCP/IP Setting Function When access to the machine by the Administrator of the machine through 2...
... the machine, be sure first to log off from the Administrator Settings. 1 Call the Network Settings screen on the display from the control panel. 2 Touch [TCP/IP Settings]. 3 Touch [IPv4 Setting]. 4 Touch [Manual Input]. 5 Select [IP Address] and set the IP Address. % If [Auto Input] is selected for ... and 2 of page 2-26. 0 Do not leave the machine with the setting screen of Administrator Settings left shown on the display. bizhub 423/363/283/223 2-33 2.11 TCP/IP Setting Function 2 2.11 TCP/IP Setting Function When access to the machine by the Administrator of the machine through 2...
bizhub 223/283/363/423 PKI Security Operations User Guide
Page 46
... Settings]. 3 Make the necessary settings. 4 Touch [OK]. If it is authenticated, the machine enables registration as the Print Server. 2.12 NetWare Setting Function 2 2.12 NetWare Setting Function When access to the machine by the Administrator of Administrator Settings left shown on the display from the Administrator Settings. 1 Call the Network Settings screen on the display. bizhub 423/363/283/223...
... Settings]. 3 Make the necessary settings. 4 Touch [OK]. If it is authenticated, the machine enables registration as the Print Server. 2.12 NetWare Setting Function 2 2.12 NetWare Setting Function When access to the machine by the Administrator of Administrator Settings left shown on the display from the Administrator Settings. 1 Call the Network Settings screen on the display. bizhub 423/363/283/223...
bizhub 223/283/363/423 PKI Security Operations User Guide
Page 47
... absolutely necessary to leave the machine, be sure first to call the Network Settings screen on the display, see steps 1 and 2 of page 2-26. 0 Do not leave the machine with the setting screen of the NetBIOS Name. bizhub 423/363/283/223 2-35 Setting the NetBIOS Name 0 For the procedure to log off from the control...
... absolutely necessary to leave the machine, be sure first to call the Network Settings screen on the display, see steps 1 and 2 of page 2-26. 0 Do not leave the machine with the setting screen of the NetBIOS Name. bizhub 423/363/283/223 2-35 Setting the NetBIOS Name 0 For the procedure to log off from the control...
bizhub 223/283/363/423 PKI Security Operations User Guide
Page 48
bizhub 423/363/283/223 2-36 Setting the SMTP Server (E-Mail Server) 0 For the procedure to log off from the Administrator Settings. 1 Call the Network Settings screen on the display. If it is authenticated, the machine enables setting of Administrator Settings left shown on the display from the control panel. 2 Touch [E-Mail Settings]. 3 Touch [E-Mail TX (SMTP)]. 4 Make the necessary...
bizhub 423/363/283/223 2-36 Setting the SMTP Server (E-Mail Server) 0 For the procedure to log off from the Administrator Settings. 1 Call the Network Settings screen on the display. If it is authenticated, the machine enables setting of Administrator Settings left shown on the display from the control panel. 2 Touch [E-Mail Settings]. 3 Touch [E-Mail TX (SMTP)]. 4 Make the necessary...
bizhub 223/283/363/423 Security Operations User Guide
Page 3
...setting function ...2-77 SNMP network setting function ...2-78 WebDAV Function ...2-79 Setting the WebDAV Server Password 2-79 PC-Fax RX Setting Function ...2-83 PC-Fax RX Setting ...2-83 TSI User Box Setting Function...2-86 TSI User Box Setting...2-86 TCP/IP Setting Function ...2-90 Setting... 4.1 4.1.1 4.1.2 4.1.3 4.1.4 4.1.5 PageScope Data Administrator ...4-2 Accessing from PageScope Data Administrator 4-2 Setting the user authentication method 4-5 Changing the authentication mode...4-7 Making the user settings...4-10 Making the account settings...4-11 bizhub 423/363/283/223 Contents-2
...setting function ...2-77 SNMP network setting function ...2-78 WebDAV Function ...2-79 Setting the WebDAV Server Password 2-79 PC-Fax RX Setting Function ...2-83 PC-Fax RX Setting ...2-83 TSI User Box Setting Function...2-86 TSI User Box Setting...2-86 TCP/IP Setting Function ...2-90 Setting... 4.1 4.1.1 4.1.2 4.1.3 4.1.4 4.1.5 PageScope Data Administrator ...4-2 Accessing from PageScope Data Administrator 4-2 Setting the user authentication method 4-5 Changing the authentication mode...4-7 Making the user settings...4-10 Making the account settings...4-11 bizhub 423/363/283/223 Contents-2
bizhub 223/283/363/423 Security Operations User Guide
Page 14
...queue state • Data files left in TCP/IP Settings of Data Cleared by a reliable party for the computer account. Items of "Trusted Root Certification Authorities" to the factory setting bizhub 423/363/283/223 1-10 First, register Host Name and IP address of...thereby import the certificate. For [Host Name] and [Domain Name], specify the names set network settings (DNS Server setting, IP Address setting, SMTP Server setting, NetWare Setting, NetBIOS setting and AppleTalk Printer Name setting), resetting it to display the certificate. It should also be noted that, for SSL ...
...queue state • Data files left in TCP/IP Settings of Data Cleared by a reliable party for the computer account. Items of "Trusted Root Certification Authorities" to the factory setting bizhub 423/363/283/223 1-10 First, register Host Name and IP address of...thereby import the certificate. For [Host Name] and [Domain Name], specify the names set network settings (DNS Server setting, IP Address setting, SMTP Server setting, NetWare Setting, NetBIOS setting and AppleTalk Printer Name setting), resetting it to display the certificate. It should also be noted that, for SSL ...
bizhub 223/283/363/423 Security Operations User Guide
Page 24
...Server Password). 2.2 Enhancing the Security Function 2 Setting the Enhanced Security Mode to [ON] changes the setting values of destination data previously registered (Address Book and Program) Secure Print User Box Preview Initialize (Network Settings) Image Log Transfer Settings Factory Setting Invalid Mode 1 Mode 1 Restrict OFF Restrict... RC-2) OFF (not to be changed) The security level can be changed ) Restrict Restrict The setting value should be changed) Only Read is changed ) bizhub 423/363/283/223 2-9 Restrict (not to be changed) OFF (not to be changed) Restrict (not to be...
...Server Password). 2.2 Enhancing the Security Function 2 Setting the Enhanced Security Mode to [ON] changes the setting values of destination data previously registered (Address Book and Program) Secure Print User Box Preview Initialize (Network Settings) Image Log Transfer Settings Factory Setting Invalid Mode 1 Mode 1 Restrict OFF Restrict... RC-2) OFF (not to be changed) The security level can be changed ) Restrict Restrict The setting value should be changed) Only Read is changed ) bizhub 423/363/283/223 2-9 Restrict (not to be changed) OFF (not to be changed) Restrict (not to be...
bizhub 223/283/363/423 Security Operations User Guide
Page 79
... destination. bizhub 423/363/283/223 2-64 Set 1024 bits or more for the key length of the RSA public key for the certificate of each destination. 2.15.1 Setting the S/MIME Communication 0 For the procedure to call the Administrator Settings on the... Touch [Network Settings]. 3 Touch [E-Mail Settings]. 4 Touch [S/MIME Communication Settings]. NOTICE To send S/MIME communications, it is authenticated, the machine enables the setting of encryption of text of Administrator Settings left shown on the display from the Administrator Settings. 1 Call the Administrator Settings on the ...
... destination. bizhub 423/363/283/223 2-64 Set 1024 bits or more for the key length of the RSA public key for the certificate of each destination. 2.15.1 Setting the S/MIME Communication 0 For the procedure to call the Administrator Settings on the... Touch [Network Settings]. 3 Touch [E-Mail Settings]. 4 Touch [S/MIME Communication Settings]. NOTICE To send S/MIME communications, it is authenticated, the machine enables the setting of encryption of text of Administrator Settings left shown on the display from the Administrator Settings. 1 Call the Administrator Settings on the ...