User's Guide [Security Operations] 2007. 4 Ver. 1.02 Contents Contents 1 Security 1.1 Introduction ....................................................................................... 1-2 Compliance with the ISO15408 Standard ..................................... 1-2 Operating Precautions ................................................................... 1-2 INSTALLATION CHECKLIST .......................................................... 1-3 Security Functions ............................................................................ 1-5 Check Count Clear Conditions ...................................................... 1-6 Data to be Protected ........................................................................ 1-7 Precautions for Operation Control .................................................. 1-8 Roles and Requirements of the Administrator ............................... 1-8 Password Usage Requirements ..................................................... 1-8 Network Connection Requirements for the Machine ..................... 1-9 Security function operation setting operating requirements .......... 1-9 Operation and control of the machine ........................................... 1-9 Machine Maintenance Control ..................................................... 1-10 Miscellaneous ................................................................................. 1-11 Password Rules ........................................................................... 1-11 Precautions for Use of Various Types of Applications ................. 1-11 Types of Data Cleared by Overwrite All Data Function ................ 1-12 1.2 1.2.1 1.3 1.4 1.5 2 Administrator Operations 2.1 2.1.1 Accessing the Admin. Setting Mode ............................................... 2-2 Accessing the Admin. Setting mode .............................................. 2-2 .............................................................. 2-3 ........................................... 2-5 Enhancing the Security Function .................................................... 2-8 Items cleared by HDD Format ..................................................... 2-10 Setting the EnhancedSecurity mode ........................................... 2-10 ................... 2-10 Preventing Unauthorized Access .................................................. 2-14 Setting the Prohibit Setting .......................................................... 2-14 ................... 2-14 Canceling the Operation Prohibited State ................................... 2-17 Performing Release Setting ......................................................... 2-17 2.2 2.2.1 2.2.2 2.3 2.3.1 2.4 2.4.1 C250P x-1 Contents ....................2-17 2.5 2.5.1 User Box Function ...........................................................................2-19 Setting the User Box .....................................................................2-19 .........................................................................2-19 Using User Box Attribute Change .................................................2-22 .........................................................................2-22 Changing the Administrator Password .........................................2-25 Changing the Administrator Password .........................................2-25 ....................2-25 Protecting Data in the HDD ............................................................2-29 Setting the HDD Password ...........................................................2-30 ....................2-30 Changing the HDD Password .......................................................2-34 ....................2-34 Setting the Encryption Key (encryption word) ..............................2-37 ....................2-37 Changing the Encryption Key .......................................................2-42 ....................2-42 Making Priority Setting .................................................................2-45 ....................2-45 Overwrite All Function .....................................................................2-49 Setting the Overwrite All function .................................................2-50 ....................2-50 SNMP Setting Function ...................................................................2-52 Changing the auth-password and priv-password ........................2-52 ............................................................2-52 ..........................................2-56 SNMP access authentication function ..........................................2-58 SNMP v3 setting function .............................................................2-58 SNMP network setting function ....................................................2-59 TCP/IP Setting Function .................................................................2-60 Setting the IP Address ..................................................................2-60 ............................................................2-60 ..........................................2-61 NetWare Setting Function ..............................................................2-62 C250P 2.5.2 2.6 2.6.1 2.7 2.7.1 2.7.2 2.7.3 2.7.4 2.7.5 2.8 2.8.1 2.9 2.9.1 2.9.2 2.9.3 2.9.4 2.10 2.10.1 2.11 x-2 Contents 2.11.1 Making the NetWare Setting ........................................................ 2-62 ............................................................ 2-62 ......................................... 2-63 SMB Setting Function .................................................................... 2-64 Setting the NetBIOS Name .......................................................... 2-64 ............................................................ 2-64 ......................................... 2-65 AppleTalk Setting Function ........................................................... 2-66 Making the AppleTalk Setting ...................................................... 2-66 ............................................................ 2-66 ......................................... 2-67 2.12 2.12.1 2.13 2.13.1 3 User Operations 3.1 3.1.1 3.2 3.2.1 Secure Print Function ....................................................................... 3-2 Accessing the Secure Print ............................................................ 3-2 ..................... 3-3 User Box Function ............................................................................ 3-6 Setting the User Box ...................................................................... 3-6 .......................................................................... 3-6 Using User Box Attribute Change .................................................. 3-9 ........................................... 3-9 Accessing the User Box and User Box file .................................. 3-13 ............................................................ 3-13 ......................................... 3-16 3.2.2 3.2.3 4 Application Software 4.1 4.1.1 PageScope Job Spooler .................................................................. 4-2 Accessing the User Box ................................................................. 4-3 < From the PC> .............................................................................. 4-3 C250P x-3 Contents x-4 C250P 1 Security Security Chapter 1 1 Chapter 1 Security 1 1.1 Security Introduction Thank you for purchasing our product. This User's Guide contains the operating procedures and precautions to be used when using the security functions offered by the bizhub C250P machine. To ensure the best possible performance and effective use of the machine, read this manual thoroughly before using the security functions. The Administrator of the machine should keep this manual for ready reference. The manual should be of great help in finding solutions to operating problems and questions. This User's Guide (Ver. 1.02) describes bizhub C250P/ineo+ 250P/magicolor 7460CK Multi Function Peripheral Control Software (MFP Controller: 40380100-GM0-11-000). Compliance with the ISO15408 Standard When the EnhancedSecurity mode on this machine is set to "ON," more enhanced security functions are available. The security functions offered by the bizhub C250P machine comply with ISO/IEC15408 (level: EAL3). Operating Precautions The Administrator of the machine should make sure that each individual general user exits from the current mode to return to the basic screen whenever the access to that mode is completed or if the user leaves the machine with the mode screen left displayed. The Administrator of the machine should exit from the current mode to return to the basic screen whenever the access to that mode is completed or if he or she leaves the machine with the mode screen left displayed. The PageScope Web Connection functions can be used only if the setting is made to accept "Cookie." Security 1-2 C250P Security INSTALLATION CHECKLIST 1 This Installation Checklist contains items that are to be check by the Service Engineer installing this machine. The Service Engineer should check the following items, then explain each checked item to the Administrator of the machine. To Service Engineer Make sure that each of these items is properly carried out by checking the box on the right of each item. 1. Perform the following steps before installing this machine. Check with the Administrator to determine if the security functions of this machine should be enhanced. If the functions should be enhanced, check the following. If the security functions are not to be enhanced, quit the operation without checking the following. I swear that I would never disclose information as it relates to the settings of this machine to anybody, or perform malicious or intentional act during setup and service procedures for the machine. When giving the User's Guide Security Operations to the Administrator of the machine, check that the User's Guide is the security-compatible version and explain to the Administrator that it is security-compatible. 2. After this machine is installed, refer to the Service Manual and perform the following steps. Check that the Firmware version (MFP Controller, CheckSum) checked with the Service Manual matches the Firmware version values indicated on the report output. If there is a mismatch in the Firmware version number, explain to the Administrator of the machine that upgrading of the Firmware is necessary and perform upgrading of the Firmware. Set the Service Password (CE Password) that meets the requirements of the Password Rules. Check that CS Remote Care is set to RAM Clear Set, HDD to Installed, and Image Controller Setting to Controller0. 3. After this machine is installed, refer to this User's Guide and perform the following steps. Check that the Administrator Password has been set by the Administrator of the machine. If the optional Hard Disk HD-501 and Security Kit SC-503 are mounted, Check that the HDD Password or Encryption Key, or both, have been registered by the Administrator of the machine. Check that the self-signed certificate for SSL communications has been registered by the Administrator of the machine. Let the Administrator of the machine set EnhancedSecurity mode to "ON." The languages, in which the contents of the User's Guide Security Operations have been evaluated, are Japanese and English. Explain the way how to get the manual in the language, in which it is evaluated. Explain to the administrator that the settings for the security functions for this machine have been specified. Completed C250P 1-3 Security Chapter 1 1 Chapter 1 Security When the above steps have been properly carried out, the Service Engineer should make a copy of this page and give the original of this page ...