bizhub C220/C280/C360 PKI Security Operations User Guide
Page 6
... promptly provide the version of the User's Guide that the system has not been altered. bizhub C360/C280/C220 for operation control Security Function Ver. 1.02 Jul. 2010 B. E. Precautions for PKI Card System Security Function 4. Make sure that any password that could be easily guessed by a ...the way how to the administrator of the User's Guide [Security Operations] have been evaluated, is to be connected to an outside network, install a firewall or similar network device to block any third person. • Be changed at regular intervals. • Be set again quickly if one . 2...
... promptly provide the version of the User's Guide that the system has not been altered. bizhub C360/C280/C220 for operation control Security Function Ver. 1.02 Jul. 2010 B. E. Precautions for PKI Card System Security Function 4. Make sure that any password that could be easily guessed by a ...the way how to the administrator of the User's Guide [Security Operations] have been evaluated, is to be connected to an outside network, install a firewall or similar network device to block any third person. • Be changed at regular intervals. • Be set again quickly if one . 2...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 23
...Mode functions 8.5 Initialization function • The Data Clear function resets the current settings for PKI Card System Security Function Security Function Ver. 1.02 Jul. 2010 8. SNMP v1/v2c Write Setting ...cleared. (For the functions to be cleared, execute "Data Clear" function with care. bizhub C360/C280/C220 for various functions to the default values. • Since all subsequent data will be ..., be sure to again designate the settings of the SNMP v1/v2c Setting is set network settings (DNS Server setting, IP Address setting, SMTP Server setting, NetWare Setting, NetBIOS ...
...Mode functions 8.5 Initialization function • The Data Clear function resets the current settings for PKI Card System Security Function Security Function Ver. 1.02 Jul. 2010 8. SNMP v1/v2c Write Setting ...cleared. (For the functions to be cleared, execute "Data Clear" function with care. bizhub C360/C280/C220 for various functions to the default values. • Since all subsequent data will be ..., be sure to again designate the settings of the SNMP v1/v2c Setting is set network settings (DNS Server setting, IP Address setting, SMTP Server setting, NetWare Setting, NetBIOS ...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 24
... with the machine is deleted. SSL-compliant protocol settings All are deleted. S/MIME certificate data Change made over the Change via Network network. (PageScope Web Connection) User registration data All information on the box registered with , and files saved in the box are ...deleted. SNMP v3 Security Level Setting of the SNMP v1/v2c Setting is reset to the default value (sysadm). bizhub C360/C280/C220 for PKI Card System Security Function 8. Account track registration data All information on Secure Print Document registered with the machine and files ...
... with the machine is deleted. SSL-compliant protocol settings All are deleted. S/MIME certificate data Change made over the Change via Network network. (PageScope Web Connection) User registration data All information on the box registered with , and files saved in the box are ...deleted. SNMP v3 Security Level Setting of the SNMP v1/v2c Setting is reset to the default value (sysadm). bizhub C360/C280/C220 for PKI Card System Security Function 8. Account track registration data All information on Secure Print Document registered with the machine and files ...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 25
... set values. NOTE When the Clear All Data function has been executed, be sure to the main screen. When the Clear Individual Data (Network Setting Data) function has been executed, be sure to make the following settings again. • Since the SNMP Password v3 is displayed, ...screen being displayed, unauthorized changes could occur for PKI Card System Security Function Ver. 1.02 Jul. 2010 8. Select [Clear All Data] or the clear item in [Clear Individual Data] and press the Start key. Touch [Initialization]. 4. bizhub C360/C280/C220 for any set once again a password that meets the...
... set values. NOTE When the Clear All Data function has been executed, be sure to the main screen. When the Clear Individual Data (Network Setting Data) function has been executed, be sure to make the following settings again. • Since the SNMP Password v3 is displayed, ...screen being displayed, unauthorized changes could occur for PKI Card System Security Function Ver. 1.02 Jul. 2010 8. Select [Clear All Data] or the clear item in [Clear Individual Data] and press the Start key. Touch [Initialization]. 4. bizhub C360/C280/C220 for any set once again a password that meets the...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 32
...; Conditions for USB memory which can be used for PKI Card System Security Function 10. Connect the USB to the PC, and copy the firmware data to the root directly. 2. tar" to the USB memory. bizhub C360/C280/C220 for updating the firmware are as follows: - Firmware rewriting ...display, and touch [START]. 2. Corresponds to the root directory with 4 GB or more than one firmware data, it is by downloading over a network using the Internet ISW. Without security function added (security function can be copied to USB 2.0 - Touch [Fix]. 9. Install the loadable device driver...
...; Conditions for USB memory which can be used for PKI Card System Security Function 10. Connect the USB to the PC, and copy the firmware data to the root directly. 2. tar" to the USB memory. bizhub C360/C280/C220 for updating the firmware are as follows: - Firmware rewriting ...display, and touch [START]. 2. Corresponds to the root directory with 4 GB or more than one firmware data, it is by downloading over a network using the Internet ISW. Without security function added (security function can be copied to USB 2.0 - Touch [Fix]. 9. Install the loadable device driver...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 39
...tone is detected depending on the Service Mode screen. 8. Touch "END." 7. Touch "Line2." 9. bizhub C360/C280/C220 for PKI Card System Security Function Security Function Ver. 1.02 Jul. 2010 13. Touch "NetWork." 4. Turn OFF and ON the Main Power Switch. Display the Service Mode screen. 3. Touch "...dial transfer After setting the country code, dialing operations may be operated normally. 35 Touch "Exit" on the machine. 2. Touch "Network Setting 2." 5. FAX function B. Plug the power cord into the power outlet and turn on the Service Mode screen. 15. Touch "END." 7.
...tone is detected depending on the Service Mode screen. 8. Touch "END." 7. Touch "Line2." 9. bizhub C360/C280/C220 for PKI Card System Security Function Security Function Ver. 1.02 Jul. 2010 13. Touch "NetWork." 4. Turn OFF and ON the Main Power Switch. Display the Service Mode screen. 3. Touch "...dial transfer After setting the country code, dialing operations may be operated normally. 35 Touch "Exit" on the machine. 2. Touch "Network Setting 2." 5. FAX function B. Plug the power cord into the power outlet and turn on the Service Mode screen. 15. Touch "END." 7.
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 40
... connected to avoid the problem with the following setting. (1) Turn the Dial Tone Detection function OFF 1. bizhub C360/C280/C220 for PKI Card System 13. Display the Service Mode screen. 2. Caution when performing dial transfer After setting the country code..., dialing operations may not be selected after the switchboard dial tone is detected depending on the Service Mode screen. 9. Touch "Network Setting 2." 6. Touch "NetWork...
... connected to avoid the problem with the following setting. (1) Turn the Dial Tone Detection function OFF 1. bizhub C360/C280/C220 for PKI Card System 13. Display the Service Mode screen. 2. Caution when performing dial transfer After setting the country code..., dialing operations may not be selected after the switchboard dial tone is detected depending on the Service Mode screen. 9. Touch "Network Setting 2." 6. Touch "NetWork...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 2
... Safety Information 4 2 Getting Started 7 2.1 Product Overview 7 2.2 Part names and their functions 8 2.3 Pre-Setting 9 2.3.1 Configuring Network Settings 9 2.3.2 Registering Active Directory for Authentication 11 2.3.3 Correcting the MFP Time 12 2.3.4 Registering the DNS Server Associated with Active Directory ...21 3.1 Login and Logout 21 3.1.1 Login 21 3.1.2 Logout 23 3.2 Functions Using the PKI Card Authentication System 24 3.3 Address Search (LDAP) Using PKI Card 25 3.3.1 Overview 25 3.3.2 Related Settings 26 3.3.3 Handling Address Search (LDAP 28 3.4 SMB TX Using PKI...
... Safety Information 4 2 Getting Started 7 2.1 Product Overview 7 2.2 Part names and their functions 8 2.3 Pre-Setting 9 2.3.1 Configuring Network Settings 9 2.3.2 Registering Active Directory for Authentication 11 2.3.3 Correcting the MFP Time 12 2.3.4 Registering the DNS Server Associated with Active Directory ...21 3.1 Login and Logout 21 3.1.1 Login 21 3.1.2 Logout 23 3.2 Functions Using the PKI Card Authentication System 24 3.3 Address Search (LDAP) Using PKI Card 25 3.3.1 Overview 25 3.3.2 Related Settings 26 3.3.3 Handling Address Search (LDAP 28 3.4 SMB TX Using PKI...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 3
... 40 3.6.1 Overview 40 3.6.2 Installing the Printer Driver 41 3.6.3 Specifying the Print Data Deletion Time 44 3.6.4 Handling PKI Card Print 45 3.7 Scan To Me 50 3.7.1 Overview 50 3.7.2 Before Using Scan To Me 52 3.7.3 Related Settings 52 3.7.4 ...58 4.1 User Settings 58 4.1.1 System Settings 58 4.2 Administrator Settings 59 4.2.1 System Settings 59 4.2.2 User Authentication/ Account Track 59 4.2.3 Network Settings 60 4.2.4 Security Settings 61 4.2.5 License Settings 61 5 Appendix 62 5.1 Product Specifications 62 5.2 Cleaning the Authentication Unit 62 5.3 Troubleshooting 63 AU-211P ...
... 40 3.6.1 Overview 40 3.6.2 Installing the Printer Driver 41 3.6.3 Specifying the Print Data Deletion Time 44 3.6.4 Handling PKI Card Print 45 3.7 Scan To Me 50 3.7.1 Overview 50 3.7.2 Before Using Scan To Me 52 3.7.3 Related Settings 52 3.7.4 ...58 4.1 User Settings 58 4.1.1 System Settings 58 4.2 Administrator Settings 59 4.2.1 System Settings 59 4.2.2 User Authentication/ Account Track 59 4.2.3 Network Settings 60 4.2.4 Security Settings 61 4.2.5 License Settings 61 5 Appendix 62 5.1 Product Specifications 62 5.2 Cleaning the Authentication Unit 62 5.3 Troubleshooting 63 AU-211P ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 8
Connecting this unit enables you to carry out operations without making a password public on the network, and to use this system. - 2 PKI card authentication unit (This unit) MFP compatible with this system. 2 Reminder Do not disconnect the USB cable while using this...of security. You can not be used with applications other than the printer driver and PageScope Authentication Manager compatible with a PKI card authentication system PKI card available for PIV and CAC User management using Active Directory (Kerberos authentication + PKINIT) Note This system can also implement the ...
Connecting this unit enables you to carry out operations without making a password public on the network, and to use this system. - 2 PKI card authentication unit (This unit) MFP compatible with this system. 2 Reminder Do not disconnect the USB cable while using this...of security. You can not be used with applications other than the printer driver and PageScope Authentication Manager compatible with a PKI card authentication system PKI card available for PIV and CAC User management using Active Directory (Kerberos authentication + PKINIT) Note This system can also implement the ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 26
...a Kerberos authentication ticket is obtained by Active Directory authentication with the PKI card when searching for the destination via the LDAP server. Active Directory PKI Card (1) (2) LDAP Server (3) Address Search (1) Insert the PKI card into the MFP to perform Active Directory authentication. (2) Obtain the Kerberos ...server, the user can use the LDAP server securely without making the password public on the network. How to Use the Authentication Unit 3 3.3 Address Search (LDAP) Using PKI Card 3.3.1 Overview This function logs in to the MFP as a public user or User Box ...
...a Kerberos authentication ticket is obtained by Active Directory authentication with the PKI card when searching for the destination via the LDAP server. Active Directory PKI Card (1) (2) LDAP Server (3) Address Search (1) Insert the PKI card into the MFP to perform Active Directory authentication. (2) Obtain the Kerberos ...server, the user can use the LDAP server securely without making the password public on the network. How to Use the Authentication Unit 3 3.3 Address Search (LDAP) Using PKI Card 3.3.1 Overview This function logs in to the MFP as a public user or User Box ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 32
... the user can also perform the Active Directory authentication only once to obtain access privileges, and configure the single sign-on the network. If the Kerberos authentication ticket is not available while logged into the destination computer using the Kerberos authentication ticket that is obtained by... Active Directory authentication with the PKI card when sending scanned data via SMB. AU-211P 31 How to be convenient. The user can carry out SMB TX securely ...
... the user can also perform the Active Directory authentication only once to obtain access privileges, and configure the single sign-on the network. If the Kerberos authentication ticket is not available while logged into the destination computer using the Kerberos authentication ticket that is obtained by... Active Directory authentication with the PKI card when sending scanned data via SMB. AU-211P 31 How to be convenient. The user can carry out SMB TX securely ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 34
...authentication. For details, refer to Use the Authentication Unit 3 Item Description Password Authentication Restriction For authentication with the PKI card, this item, select the operation required when authentication has failed using the Kerberos authentication ticket, it results in an ...authentication failure. How to the User's Guide [Network Administrator] supplied together with the Kerberos authentication when performing SMB TX. If [Limit] is selected, it is obtained from ...
...authentication. For details, refer to Use the Authentication Unit 3 Item Description Password Authentication Restriction For authentication with the PKI card, this item, select the operation required when authentication has failed using the Kerberos authentication ticket, it results in an ...authentication failure. How to the User's Guide [Network Administrator] supplied together with the Kerberos authentication when performing SMB TX. If [Limit] is selected, it is obtained from ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 36
Detail If either one as a destination. ! If a PKI card is used to log in to the MFP, log in "Client Settings" (page 32), [Reference] will not appear on the Windows network to enable you to register or specify the desired one of the following settings is selected in to the searched computer using...
Detail If either one as a destination. ! If a PKI card is used to log in to the MFP, log in "Client Settings" (page 32), [Reference] will not appear on the Windows network to enable you to register or specify the desired one of the following settings is selected in to the searched computer using...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 38
... to configure settings to encrypt an e-mail and add a digital signature. On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [E-Mail Settings] - [S/MIME Communication Settings]. If [Select when sending] is automatically added using the PKI...
... to configure settings to encrypt an e-mail and add a digital signature. On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [E-Mail Settings] - [S/MIME Communication Settings]. If [Select when sending] is automatically added using the PKI...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 40
...a digital signature, press [Digital Signature]. If [Select when sending] is selected, a digital signature will be automatically added. ! If the PIV card is set after specifying the E-mail addresses (up to 10 E-mail addresses to be broadcasted. • When setting to enable encryption or to ... certificate will be canceled. • For details on how to send an e-mail, refer to the User's Guide [Network Scan/Fax/Network Fax Operations] supplied together with a PIV card, enter the PIN code when sending an e-mail. To encrypt an e-mail, press [E-Mail Encryption]. - AU-211P ...
...a digital signature, press [Digital Signature]. If [Select when sending] is selected, a digital signature will be automatically added. ! If the PIV card is set after specifying the E-mail addresses (up to 10 E-mail addresses to be broadcasted. • When setting to enable encryption or to ... certificate will be canceled. • For details on how to send an e-mail, refer to the User's Guide [Network Scan/Fax/Network Fax Operations] supplied together with a PIV card, enter the PIN code when sending an e-mail. To encrypt an e-mail, press [E-Mail Encryption]. - AU-211P ...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 53
... encrypt an e-mail using the LDAP protocol. The user cannot save documents using the PKI card and configure its settings, refer to "Scan to the User's Guide [Network Administrator] supplied together with the MFP. AU-211P 52 The user cannot use the URL ...notification function. - The user cannot use Annotation User Box. - E-Mail TX (SMTP) setting Configure the setting to the User's Guide [Network Administrator] supplied together with the MFP. 3.7.3 Related Settings The following settings. - 2 Disable Address Search (LDAP) (when no LDAP server is...
... encrypt an e-mail using the LDAP protocol. The user cannot save documents using the PKI card and configure its settings, refer to "Scan to the User's Guide [Network Administrator] supplied together with the MFP. AU-211P 52 The user cannot use the URL ...notification function. - The user cannot use Annotation User Box. - E-Mail TX (SMTP) setting Configure the setting to the User's Guide [Network Administrator] supplied together with the MFP. 3.7.3 Related Settings The following settings. - 2 Disable Address Search (LDAP) (when no LDAP server is...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 54
... 36). 1 Press the [Fax/Scan] key on the control panel. 2 Specify scan conditions in the PKI card when encrypting the e-mail to the user's address using the PKI card, [Me] will not appear. How to Use the Authentication Unit 3 3.7.4 Handling Scan To Me The following explains how to handle Scan To Me.... 2 Note For details on the Fax/Scan screen to send data to the user's e-mail address. • If the system fails to the User's Guide [Network Scan/ Fax/Network Fax Operations] supplied together with the MFP. AU-211P 53
... 36). 1 Press the [Fax/Scan] key on the control panel. 2 Specify scan conditions in the PKI card when encrypting the e-mail to the user's address using the PKI card, [Me] will not appear. How to Use the Authentication Unit 3 3.7.4 Handling Scan To Me The following explains how to handle Scan To Me.... 2 Note For details on the Fax/Scan screen to send data to the user's e-mail address. • If the system fails to the User's Guide [Network Scan/ Fax/Network Fax Operations] supplied together with the MFP. AU-211P 53
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 55
... To Home is a function that sends scanned data to the user's Home folder. Active Directory PKI Card (1) (2) Scanned data User's PC (3) Save in home folder (1) Insert the PKI card into the MFP to perform Active Directory authentication. (2) Obtain the Kerberos authentication ticket and the position of... the user's Home folder from being made public on the network. This function is not available when you log in the...
... To Home is a function that sends scanned data to the user's Home folder. Active Directory PKI Card (1) (2) Scanned data User's PC (3) Save in home folder (1) Insert the PKI card into the MFP to perform Active Directory authentication. (2) Obtain the Kerberos authentication ticket and the position of... the user's Home folder from being made public on the network. This function is not available when you log in the...
AU-211P Authentication Unit User Guide for bizhub C220/C280/C360/C452/C552/C652
Page 57
...MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [User Authentication/Account Track] - [Scan to the User's Guide [Network Administrator] supplied together with the MFP. For details, refer to Home Settings]. Item Scan to fit your environment. AU-211P 56 For details on how... to handle SMB TX using the PKI card and configure its settings, refer to "SMB TX Using the PKI Card" (page 31). 2 Note Specify the WINS server or direct hosting service to Home Settings Description Select ...
...MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [User Authentication/Account Track] - [Scan to the User's Guide [Network Administrator] supplied together with the MFP. For details, refer to Home Settings]. Item Scan to fit your environment. AU-211P 56 For details on how... to handle SMB TX using the PKI card and configure its settings, refer to "SMB TX Using the PKI Card" (page 31). 2 Note Specify the WINS server or direct hosting service to Home Settings Description Select ...