bizhub C220/C280/C360 PKI Security Operations User Guide
Page 3
... Overview ...1 2. Compliance with the ISO15408 standard 1 3. Checking the firmware version number 3 5.1 Security authentication firmware version number 3 6. Service Mode functions 12 8.1 Firmware Version 12 8.1.1 Checking the firmware version number 12 8.2 CE Authentication function 13 8.2.1 Setting the CE Authentication function 13...8.9.1 Administrator Unlocking function procedure 26 9. Enhancing the security function 6 7.1 Details of Service Mode 5 6.2.1 Access lock release procedure 5 7. Overwrite All Data function 27 i bizhub C360/C280/C220 for operation control 1 5.
... Overview ...1 2. Compliance with the ISO15408 standard 1 3. Checking the firmware version number 3 5.1 Security authentication firmware version number 3 6. Service Mode functions 12 8.1 Firmware Version 12 8.1.1 Checking the firmware version number 12 8.2 CE Authentication function 13 8.2.1 Setting the CE Authentication function 13...8.9.1 Administrator Unlocking function procedure 26 9. Enhancing the security function 6 7.1 Details of Service Mode 5 6.2.1 Access lock release procedure 5 7. Overwrite All Data function 27 i bizhub C360/C280/C220 for operation control 1 5.
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 6
... is AU-211P. F. bizhub C360/C280/C220 for the user whenever the user needs one. 2 C. D. The CE password should promptly provide the version of the User's Guide [Security Operations] have been evaluated, is easily guessed by third persons. • Not be easily guessed by the service engineer concerned to access Service Mode must be permitted...
... is AU-211P. F. bizhub C360/C280/C220 for the user whenever the user needs one. 2 C. D. The CE password should promptly provide the version of the User's Guide [Security Operations] have been evaluated, is easily guessed by third persons. • Not be easily guessed by the service engineer concerned to access Service Mode must be permitted...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 7
bizhub C360/C280/C220 for [CE Authentication] as "✱." • NEVER forget the CE password. Refer to P.28 for the method of this machine is different from numbers shown in this machine: If administrator wants to re-write the firmware. 5.1 Security authentication firmware version number MFP Controller Ver. Accessing the Service Mode... NOTE • Authentication using the CE Password is carried out only if "ON" is displayed as accessed through [Service Mode] [Enhanced Security]. ble person of how to enhance, check the firmware version number and the checksum value...
bizhub C360/C280/C220 for [CE Authentication] as "✱." • NEVER forget the CE password. Refer to P.28 for the method of this machine is different from numbers shown in this machine: If administrator wants to re-write the firmware. 5.1 Security authentication firmware version number MFP Controller Ver. Accessing the Service Mode... NOTE • Authentication using the CE Password is carried out only if "ON" is displayed as accessed through [Service Mode] [Enhanced Security]. ble person of how to enhance, check the firmware version number and the checksum value...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 8
... the CE password screen by the number of Service Mode, or if you finish the setting of times (1 to the basic screen. 4 however, be careful that any set , be cleared at least 5 sec. bizhub C360/C280/C220 for [Prohibited Functions When Authentication Error] as ...accessed through [Administrator Settings] [Security Settings] [Security Details], access to leave the site by one. Accessing the Service Mode Security Function Ver. 1.02 Jul. 2010 ...
... the CE password screen by the number of Service Mode, or if you finish the setting of times (1 to the basic screen. 4 however, be careful that any set , be cleared at least 5 sec. bizhub C360/C280/C220 for [Prohibited Functions When Authentication Error] as ...accessed through [Administrator Settings] [Security Settings] [Security Details], access to leave the site by one. Accessing the Service Mode Security Function Ver. 1.02 Jul. 2010 ...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 9
Touch [Check Details]. 5. bizhub C360/C280/C220 for PKI Card System Security Function Ver. 1.02 Jul. 2010 6. Releasing the access lock state will start the access lock release timer.) 7. Turn off... 2. See P.25 5 Security Function A0EDS1E023DA 6. The access lock state is released when the period of the Service Mode. Press the Utility/Counter key. 3. Touch [Meter Count]. 4. Touch [Coverage Rate]. Accessing the Service Mode 6.2 Access lock of Service Mode • Use the following keys in this order: Stop09...
Touch [Check Details]. 5. bizhub C360/C280/C220 for PKI Card System Security Function Ver. 1.02 Jul. 2010 6. Releasing the access lock state will start the access lock release timer.) 7. Turn off... 2. See P.25 5 Security Function A0EDS1E023DA 6. The access lock state is released when the period of the Service Mode. Press the Utility/Counter key. 3. Touch [Meter Count]. 4. Touch [Coverage Rate]. Accessing the Service Mode 6.2 Access lock of Service Mode • Use the following keys in this order: Stop09...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 10
...the security function 7.1 Details of Installed. See P.33 7.2 Security enhancing procedure 7.2.1 Making and checking the service settings 1. Call the Service Mode to display the Enhanced Security screen: Stop0Clear 3. Enhancing the security ... HDD installation setting CS Remote Care Setting/Check ON Set arbitrarily. Press the following keys in this order to the screen. bizhub C360/C280/C220 for PKI Card System Security Function 7. Touch [CE Authentication]. 6 A0EDS1E024DA Execute RAM Clear Default Setting OFF 92729272 OFF Installed ...
...the security function 7.1 Details of Installed. See P.33 7.2 Security enhancing procedure 7.2.1 Making and checking the service settings 1. Call the Service Mode to display the Enhanced Security screen: Stop0Clear 3. Enhancing the security ... HDD installation setting CS Remote Care Setting/Check ON Set arbitrarily. Press the following keys in this order to the screen. bizhub C360/C280/C220 for PKI Card System Security Function 7. Touch [CE Authentication]. 6 A0EDS1E024DA Execute RAM Clear Default Setting OFF 92729272 OFF Installed ...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 12
... 7. Touch [System 2]. 10. Touch [CS Remote Care]. 8 A0EDS1E029DA Enhancing the security function Security Function Ver. 1.02 Jul. 2010 7. Security Function 8. bizhub C360/C280/C220 for the CE Password. • Exiting from the Service Mode after the new CE password has been set validates the setting of KMBT. From the keyboard shown on the display...
... 7. Touch [System 2]. 10. Touch [CS Remote Care]. 8 A0EDS1E029DA Enhancing the security function Security Function Ver. 1.02 Jul. 2010 7. Security Function 8. bizhub C360/C280/C220 for the CE Password. • Exiting from the Service Mode after the new CE password has been set validates the setting of KMBT. From the keyboard shown on the display...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 13
bizhub C360/C280/C220 for PKI Card System Security Function Ver. 1.02 Jul. 2010 7. If CS Remote Care has been set, [Detail Setting] appears on the display. Touch [END] to display the Service Mode screen. Touch [Detail Setting]. Touch [Set] and [END]. Security Function 14. Touch [RAM Clear]. 15. A0EDS1E105DA 16. Enhancing the security function 13. A0EDS1E106DA 9
bizhub C360/C280/C220 for PKI Card System Security Function Ver. 1.02 Jul. 2010 7. If CS Remote Care has been set, [Detail Setting] appears on the display. Touch [END] to display the Service Mode screen. Touch [Detail Setting]. Touch [Set] and [END]. Security Function 14. Touch [RAM Clear]. 15. A0EDS1E105DA 16. Enhancing the security function 13. A0EDS1E106DA 9
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 14
Touch [End]. 24. Touch [Internet ISW]. 18. Security Function A0EDS1E104DA 19. bizhub C360/C280/C220 for this machine. Touch [Internet ISW Set] and check that the version number of "readerDriver", "pcscLite", "pkcs11Lib" and "pkcs11Cfg" are the applicable version for PKI .... A0EDS1E107DA 10 pcscLite A0ED0Y0-A402-G00-04 pkcs11Lib A0ED0Y0-A403-G00-05 readerDriver A0ED0Y0-A404-G00-05 readerDriver A0ED0Y0-A401-G00-04 23. Exit the Service Mode.
Touch [End]. 24. Touch [Internet ISW]. 18. Security Function A0EDS1E104DA 19. bizhub C360/C280/C220 for this machine. Touch [Internet ISW Set] and check that the version number of "readerDriver", "pcscLite", "pkcs11Lib" and "pkcs11Cfg" are the applicable version for PKI .... A0EDS1E107DA 10 pcscLite A0ED0Y0-A402-G00-04 pkcs11Lib A0ED0Y0-A403-G00-05 readerDriver A0ED0Y0-A404-G00-05 readerDriver A0ED0Y0-A401-G00-04 23. Exit the Service Mode.
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 15
...) Setting/Check Default Setting Check that "OFF" is set . Check that "External Server (Active Directory only)" is set . bizhub C360/C280/C220 for PKI Card System Security Function Security Function Ver. 1.02 Jul. 2010 7. Enhancing the security function 7.2.2 Requests to perform [...No setting Check that "OFF" is set . Valid Check that "Restrict" is set to [Mode2] by accessing [Service Mode] [State Confirmation] [HDD Format]. 11 Mode 1 cation Error has been set . ON Check that "OFF" is set to "Invalid". ON Check that Prohibited ...
...) Setting/Check Default Setting Check that "OFF" is set . Check that "External Server (Active Directory only)" is set . bizhub C360/C280/C220 for PKI Card System Security Function Security Function Ver. 1.02 Jul. 2010 7. Enhancing the security function 7.2.2 Requests to perform [...No setting Check that "OFF" is set . Valid Check that "Restrict" is set to [Mode2] by accessing [Service Mode] [State Confirmation] [HDD Format]. 11 Mode 1 cation Error has been set . ON Check that "OFF" is set to "Invalid". ON Check that Prohibited ...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 16
... of MFP Controller and the checksum value using firmware version number. See P.3 2. Service Mode functions Security Function Ver. 1.02 Jul. 2010 8. When the Enhanced Security Mode settings are to be made, this function should be used to display the firmware ... value against the security authentication version. 8.1.1 Checking the firmware version number 1. Service Mode functions • The Service Mode is used to set various service functions. 8.1 Firmware Version • This function is used to the screen. bizhub C360/C280/C220 for PKI Card System Security Function 8.
... of MFP Controller and the checksum value using firmware version number. See P.3 2. Service Mode functions Security Function Ver. 1.02 Jul. 2010 8. When the Enhanced Security Mode settings are to be made, this function should be used to display the firmware ... value against the security authentication version. 8.1.1 Checking the firmware version number 1. Service Mode functions • The Service Mode is used to set various service functions. 8.1 Firmware Version • This function is used to the screen. bizhub C360/C280/C220 for PKI Card System Security Function 8.
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 17
... following keys in this authentication procedure. 8.2.1 Setting the CE Authentication function 1. bizhub C360/C280/C220 for verifying his or her identity as service engineer, as he or she attempts to use the functions available from the Service Mode. Service Mode functions 8.2 CE Authentication function • The service engineer uses an 8-digit CE password for PKI Card System Security...
... following keys in this authentication procedure. 8.2.1 Setting the CE Authentication function 1. bizhub C360/C280/C220 for verifying his or her identity as service engineer, as he or she attempts to use the functions available from the Service Mode. Service Mode functions 8.2 CE Authentication function • The service engineer uses an 8-digit CE password for PKI Card System Security...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 18
...;Clear 3. It also allows a new administrator password to have the administrator change the administrator password accordingly. 8.3.1 Setting the administrator password 1. bizhub C360/C280/C220 for PKI Card System Security Function 8. Service Mode functions Security Function Ver. 1.02 Jul. 2010 8.3 Administrator Password function • This function is used when the administrator forgets the administrator...
...;Clear 3. It also allows a new administrator password to have the administrator change the administrator password accordingly. 8.3.1 Setting the administrator password 1. bizhub C360/C280/C220 for PKI Card System Security Function 8. Service Mode functions Security Function Ver. 1.02 Jul. 2010 8.3 Administrator Password function • This function is used when the administrator forgets the administrator...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 19
...the following functions in this order and change the default password: [Administrator Settings] [Security Settings] [Administrator Password]. 15 Service Mode functions 4. Get the Administrator of the machine to access the Administrator Settings using the default password. NOTE • Use the default value "1234567812345678"..."1234567812345678") once again and touch [END]. 6. A0EDS1E034DA 5. Enter the default value "1234567812345678" as the password used only temporarily. bizhub C360/C280/C220 for PKI Card System Security Function Security Function Ver. 1.02 Jul. 2010 8.
...the following functions in this order and change the default password: [Administrator Settings] [Security Settings] [Administrator Password]. 15 Service Mode functions 4. Get the Administrator of the machine to access the Administrator Settings using the default password. NOTE • Use the default value "1234567812345678"..."1234567812345678") once again and touch [END]. 6. A0EDS1E034DA 5. Enter the default value "1234567812345678" as the password used only temporarily. bizhub C360/C280/C220 for PKI Card System Security Function Security Function Ver. 1.02 Jul. 2010 8.
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 20
bizhub C360/C280/C220 for PKI Card System Security Function 8. See P.3 2. Press the following keys in this order to the screen. Call the Service Mode to display the Enhanced Security screen: Stop0Clear A0EDS1E024DA 16 Service Mode functions Security Function Ver. 1.02 Jul. 2010 8.4 CE Password function • The CE Password function is used to change the CE password to call the Service Mode to the screen. 8.4.1 Setting the CE password 1.
bizhub C360/C280/C220 for PKI Card System Security Function 8. See P.3 2. Press the following keys in this order to the screen. Call the Service Mode to display the Enhanced Security screen: Stop0Clear A0EDS1E024DA 16 Service Mode functions Security Function Ver. 1.02 Jul. 2010 8.4 CE Password function • The CE Password function is used to change the CE password to call the Service Mode to the screen. 8.4.1 Setting the CE password 1.
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 21
... a wrong CE password is entered, the CE password illegal access count is released. When the access to the Service Mode has been successful with the correct CE password entered, the CE password illegal access count is cleared and reset to 0. • When... between that the CE Password entered is entered a predetermined number of times. Service Mode functions 3. For the procedure to the Service Mode cannot be made until the access lock state is incremented by one. bizhub C360/C280/C220 for [Prohibited Functions When Authentication Error] as accessed through [Administrator Settings] ...
... a wrong CE password is entered, the CE password illegal access count is released. When the access to the Service Mode has been successful with the correct CE password entered, the CE password illegal access count is cleared and reset to 0. • When... between that the CE Password entered is entered a predetermined number of times. Service Mode functions 3. For the procedure to the Service Mode cannot be made until the access lock state is incremented by one. bizhub C360/C280/C220 for [Prohibited Functions When Authentication Error] as accessed through [Administrator Settings] ...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 22
Service Mode functions Security Function Ver. 1.02 Jul. 2010 5. ble person of the new password. • NEVER forget the CE password. Retype the new CE password and ... of KMBT. bizhub C360/C280/C220 for the CE password • Numeric characters: 0 to 9 • Alpha characters: upper and lower case letters • Symbols Selectable from the keyboard shown on the display and touch [END]. NOTE • For the CE Password, set a value other than the default. • Quitting the Service Mode after the...
Service Mode functions Security Function Ver. 1.02 Jul. 2010 5. ble person of the new password. • NEVER forget the CE password. Retype the new CE password and ... of KMBT. bizhub C360/C280/C220 for the CE password • Numeric characters: 0 to 9 • Alpha characters: upper and lower case letters • Symbols Selectable from the keyboard shown on the display and touch [END]. NOTE • For the CE Password, set a value other than the default. • Quitting the Service Mode after the...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 23
...having the administrator make the settings again, confirm that the MFP is a properly operation status by Clear All Data function Service Mode/Administrator Settings Item Details CE password CE password is reset to the default values. • Since all subsequent data will be set...]. 19 OpenAPI Settings Access Setting is set to [OFF]. PSWC Setting PSWC Setting is reset to Prohibit Functions When Auth. bizhub C360/C280/C220 for various functions to "1234567812345678." Prohibit Functions When Auth. WebDAV server password WebDAV server password is set to [Mode2]. (...
...having the administrator make the settings again, confirm that the MFP is a properly operation status by Clear All Data function Service Mode/Administrator Settings Item Details CE password CE password is reset to the default values. • Since all subsequent data will be set...]. 19 OpenAPI Settings Access Setting is set to [OFF]. PSWC Setting PSWC Setting is reset to Prohibit Functions When Auth. bizhub C360/C280/C220 for various functions to "1234567812345678." Prohibit Functions When Auth. WebDAV server password WebDAV server password is set to [Mode2]. (...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 24
... set to "Enable." WebDAV server password WebDAV server password is deleted. SSL-compliant protocol settings All are deleted. bizhub C360/C280/C220 for PKI Card System Security Function 8. Account track registration data All information on the user registered with the machine...v2c Write Setting of destination registration. SNMP password v3 SNMP password v3 is cleared and reset to "authpassword/priv-password." Service Mode functions Security Function Ver. 1.02 Jul. 2010 Others Item Details SSL certificate Deletes the currently set SSL certificate. (PageScope ...
... set to "Enable." WebDAV server password WebDAV server password is deleted. SSL-compliant protocol settings All are deleted. bizhub C360/C280/C220 for PKI Card System Security Function 8. Account track registration data All information on the user registered with the machine...v2c Write Setting of destination registration. SNMP password v3 SNMP password v3 is cleared and reset to "authpassword/priv-password." Service Mode functions Security Function Ver. 1.02 Jul. 2010 Others Item Details SSL certificate Deletes the currently set SSL certificate. (PageScope ...
bizhub C220/C280/C360 PKI Security Operations User Guide
Page 25
... Start key. Security Function A0EDS1E037DA 5. When you finish the setting of Service Mode, or if you leave the site with the Service Mode setting screen being displayed, unauthorized changes could occur for PKI Card System Security Function Ver. 1.02 Jul. 2010 8. bizhub C360/C280/C220 for any set once again an Administrator Password that meets the...
... Start key. Security Function A0EDS1E037DA 5. When you finish the setting of Service Mode, or if you leave the site with the Service Mode setting screen being displayed, unauthorized changes could occur for PKI Card System Security Function Ver. 1.02 Jul. 2010 8. bizhub C360/C280/C220 for any set once again an Administrator Password that meets the...