Canon imageRUNNER ADVANCE System V3.13 User manual

SERVICE
MANUAL
imageRUNNER
ADVANCE
V3.13 System
Canon
January 30,2023
Rev. 4
COPYRIGHT © 2023CANON INC. CANON imageRUNNER ADVANCE V3.13 System Rev. 4PRINTED IN U.S.A.

Important Notices
Application
Canon Inc. has issued this manual for qualified persons to learn technical theory, installation, maintenance, and repair of products.
This manual covers all localities where the products are sold. For this reason, this manual may contain information that does not
apply to your locality.
Following "Trademarks" and "Copyright" are not applicable if they are not supported by laws and regulations in the country or
region that this document and products are used in.
Corrections
This manual may contain technical inaccuracies or typographical errors due to improvements or changes in products.
When changes occur in applicable products or in the contents of this manual, Canon will release technical information as the
need arises. In the event of major changes in the contents of this manual over a long or short period, Canon will issue a new
edition of this manual.
Trademarks
• The Bluetooth word mark and logos are registered trademarks owned by Bluetooth SIG, Inc. and any use of such marks by
Canon is under license.
• Mopria®, the Mopria® Logo and the Mopria® Alliance logo are registered trademarks and service marks of Mopria Alliance,
Inc. in the United States and other countries. Unauthorized use is strictly prohibited.
• Apple, AppleTalk, Bonjour, iPad, iPhone, iPod touch, Mac, OS X and Safari are trademarks of Apple Inc.
• Microsoft, Windows, Windows Vista, Windows Server, Internet Explorer, Microsoft Edge, Excel and PowerPoint are either
registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.
• Google Cloud Print, Google Chrome and Android are either registered trademarks or trademarks of Google Inc.
• iHQC™ compression technology by I.R.I.S., copyright 2007-2015, All Rights Reserved.
• PDF-iHQC™, XPS-iHQC™ technology by I.R.I.S., copyright 2007-2015, All rights Reserved.
• Java is a registered trademark of Oracle and/or its affiliates.
• Adobe is a registered trademark of Adobe Systems Incorporated.
• Command WorkStation, EFI, Fiery, FreeForm, Spot-On, and WebTools are trademarks of Electronics For Imaging, Inc. and/
or its wholly owned subsidiaries in the U.S. and/or certain other countries.
• TORX® is a registered trademark of Acument Intellectual Properties, LLC in the United States.
• Matrox is a registered trademark of Matrox Corporation in the Canada.
• Other product names and other names in this document are generally registered trademarks or trademarks of the companies.
Copyright
The copyright of this document belongs to Canon Inc. This document may not be copied, reproduced or translated into another
language, in whole or in part, without the prior consent of Canon Inc.
Copyright CANON INC. 2022
Caution
Use of this manual should be strictly supervised to avoid disclosure of confidential information.
Important Notices

Contents
1. Overview of System Management.................................................................. 1
Overview of System Management...................................................................................................... 2
Third Generation System Software..................................................................................................... 3
Checking the Platform Version............................................................................................................4
2. Authentication.................................................................................................. 5
Login Services.....................................................................................................................................6
Overview..............................................................................................................................................6
User Authentication...............................................................................................................................9
DepartmentID Authentication overview................................................................................................... 9
Integrated Authentication Function......................................................................................................... 9
Management of the Authentication Method.......................................................................................11
Change Login Services Procedure....................................................................................................... 11
Login Service Installation Procedure.....................................................................................................12
Login Service Uninstallation Procedure.................................................................................................12
Authentication Settings........................................................................................................................13
Configuring Picture Login.....................................................................................................................13
Procedure for Enabling Mobile Authentication....................................................................................... 14
Management of Users.......................................................................................................................17
Registering/Editing/Deleting Users....................................................................................................... 17
Importing/Exporting Registered Users.................................................................................................. 17
Administrator Users (Reference Information).........................................................................................17
3. Security Function...........................................................................................20
Security of Storage............................................................................................................................21
Storage Management..........................................................................................................................21
Encryption of Storage..........................................................................................................................21
Encryption Key....................................................................................................................................21
Protection of Encryption Keys, Certificates and Passwords..............................................................22
Security information structure...............................................................................................................22
Security Policy Function....................................................................................................................24
Specifications..................................................................................................................................... 24
Exporting and Importing Setting Information..........................................................................................25
Differences between Security Administrators and System Administrators................................................25
Initializing the Security Administrator Password.....................................................................................25
Restrict Service Representative Access Function.............................................................................27
What Is User Asset Information?.......................................................................................................... 27
Purpose of This Function.....................................................................................................................27
Advantages and Restrictions................................................................................................................27
Function Overview.............................................................................................................................. 27
Setting Procedure............................................................................................................................... 28
Procedure to Confirm the Settings........................................................................................................28
Procedure to Cancel the Setting...........................................................................................................29
Restricted Settings.............................................................................................................................. 29
Contents
i

Function to Mask the Screen during Remote Access....................................................................... 31
Procedure for Enabling This Function................................................................................................... 32
Procedure for Disabling This Function.................................................................................................. 32
Service Mode Login History Display Function...................................................................................34
4. Firmware Management.................................................................................. 35
Overview........................................................................................................................................... 36
Version upgrade using the Updater functionalities................................................................................. 36
Version Upgrade Using Download Mode...............................................................................................37
Common Preparations (Preparing a USB Flash Drive)...........................................................................38
Limitation............................................................................................................................................41
Automatic Updates for Options.............................................................................................................41
Third-Party Software........................................................................................................................... 44
Update Using Updater.......................................................................................................................47
Overview............................................................................................................................................ 47
Limitations and Points to Note..............................................................................................................49
Preparation.........................................................................................................................................50
Maintenance.......................................................................................................................................58
Procedure for Update Using Updater....................................................................................................59
Version Update Using Download Mode............................................................................................ 70
Version Upgrade via SST.................................................................................................................... 70
Version Upgrade using USB Memory Storage Device............................................................................76
5. Management of System Options.................................................................. 83
Overview........................................................................................................................................... 84
Registration of System Options.........................................................................................................85
Disabling and then Transferring the System Options........................................................................86
6. MEAP Application Management................................................................... 87
About SMS........................................................................................................................................ 88
Managing the License File................................................................................................................... 88
Settign Procedure..............................................................................................................................90
Preparation.........................................................................................................................................90
Application Installation Procedure.........................................................................................................91
Procedure Downloading/ Removing an Invalidated License File............................................................. 92
Procedure for Downloading a License for Forwarding............................................................................ 94
Disabling the Integrated Authentication Function................................................................................... 95
Maintenance......................................................................................................................................97
Backup of the MEAP Application Area and Recovery of the Backup Data............................................... 97
Using USB Devices.............................................................................................................................98
Troubleshooting...............................................................................................................................103
When SMS Cannot Be Accessed....................................................................................................... 103
What to Do If a “Certificate Error” Message Appears upon Access........................................................104
If the MEAP application cannot be started...........................................................................................104
Points to Note When Enabling the [Quick Startup Settings for Main Power] Setting................................104
MEAP Safe Mode..............................................................................................................................105
Collection of MEAP Console Logs...................................................................................................... 106
Contents
ii

7. Backup/Restoration..................................................................................... 107
Overview......................................................................................................................................... 108
Backup/Restoration for Service Technicians........................................................................................108
Back Up/Restore for users that needs service technician work............................................................. 108
Target Items of Restoration................................................................................................................109
Procedure Using [Import/Export All] in the [Settings/Registration] Menu........................................ 110
Backup/Restoration Procedure Using Service Mode (BACKUP/RESTORE)..................................111
Backup Procedure Using Service Mode (BACKUP/RESTORE)............................................................ 111
Restoration Procedure Using Service Mode (BACKUP/RESTORE)...................................................... 113
Backup/Restoration Using Service Mode........................................................................................118
Operation Procedure......................................................................................................................... 118
Backup and Restoration Using Download Mode.............................................................................119
Overview.......................................................................................................................................... 119
Backup/Restoration Using a USB Device............................................................................................119
Back Up/Restore by use of Data Backup Service...........................................................................122
Overview.......................................................................................................................................... 122
Operation Procedure......................................................................................................................... 122
When the main controller PCB is replaced.......................................................................................... 128
Troubleshooting................................................................................................................................ 128
8. Monitoring Function.................................................................................... 141
E-RDS............................................................................................................................................. 142
Functional Overview..........................................................................................................................142
Limitations........................................................................................................................................ 143
Installation Procedure........................................................................................................................144
Error Message List............................................................................................................................ 145
APPENDICES....................................................................................................150
Automatic Recovery Function......................................................................................................... 151
Overview.......................................................................................................................................... 151
Operation during Automatic Recovery ................................................................................................151
Special Startup................................................................................................................................153
Overview.......................................................................................................................................... 153
Fixed IP Mode...................................................................................................................................153
Procedure for Entering the Download Mode........................................................................................ 156
Main Controller Self Diagnosis Mode.................................................................................................. 158
MEAP Safe Mode .............................................................................................................................158
Backup List......................................................................................................................................159
Clearing Method................................................................................................................................159
Backup Method................................................................................................................................. 165
Detail of Storage partition................................................................................................................175
Contents
iii

Overview of
System
Management
1
Overview of System Management........ 2
Third Generation System Software.......3
Checking the Platform Version..............4

Overview of System Management
This chapter contains information for service technicians on the system of this machine.
Although some of the information provided in the User’s Guide can be found in this chapter, see the User's Guide found at the
following URL for details on the features intended for users.
https://oip.manual.canon/
1. Overview of System Management
2

Third Generation System Software
The second generation system software which has been applied to ADVANCE series copying machines has been developed on
a model-by-model basis and has the following problems.
• The specifications differed depending on the model.
• Since firmware versions were upgraded on a model-by-model basis, the timings of support for functions and response to
problems varied.
• System-related information also varied depending on the model, and Service Manual for each model was required.
Product requirements
New product
New requirements
Next-generation product
Horizontal expansion Horizontal expansion
New product Next-generation product
Horizontal expansion Horizontal expansion
New product Next-generation product
Old
Old
New
New
Old
Old
In the case of second generation system software
In the system software of third generation and later, the concept called "platform" has been introduced, and the specifications
are improved on a version-by-version basis. This makes it possible to unify development and reflect the same functions and the
latest specifications in all models of the same generation.
New requirements
New product Upgrading Upgrading
Upgrading
New product
New product
Platform (common source code)
New requirements
Implementation
of specifications
Implementation
of specifications
In the case of third generation system software
Since the efficiency of system software development is significantly improved, version upgrade including addition of functions is
performed periodically.
Features of Third Generation System Software
• Less differences in specifications between models
• Technical information to be learned can be unified. (No need to learn model-specific information)
• Provision of new features and correction of errors are applied to all models simultaneously.
1. Overview of System Management
3

Checking the Platform Version
The version of the platform can be checked on the counter check screen of the Control Panel or in service mode.
NOTE:
• Depending on a version, it is shown differently.
V 3.8 or earlier: no decimal point and 2 digits are shown after where a decimal point should be. For example, V 3.2 appears
as “302”.
V 3.9 or later: a decimal point is present, followed with 2 digits. For example, V 3.9 appears as “3.09”.
• If the major version is in one digit number, the first "0" is not displayed.
When checking on the counter check screen
Press the following keys on the Control Panel to check the version.
• Counter key > [Device Information/Other] > [Check Device Configuration]
When checking in service mode
Access the following service mode to check the version.
• COPIER > Display > VERSION > CONT-PF
NOTE:
Refer to the Service Manual appropriate for the platform version (in the case shown above, imageRUNNER ADVANCE V3.2
System Service Manual).
㻾㼑㼢㼕㼟㼕㼛㼚㻌㼤㻚㼤㼕㼙㼍㼓㼑㻾㼁㻺㻺㻱㻾㻌㻭㻰㼂㻭㻺㻯㻱㻌㼂㻟㻚㻞㻿㼥㼟㼠㼑㼙㻌㻿㼑㼞㼢㼕㼏㼑㻌㻹㼍㼚㼡㼍㼘
1. Overview of System Management
4

Authentication
2Login Services.......................................6
Management of the Authentication
Method.............................................11
Management of Users.........................17

Login Services
Overview
The login service and user authentication method are services for authenticating users, and the user database that is referred to
for authentication is called the "authentication database" and the function for logging in is called the "authentication function".
The authentication databases and authentication functions that can be selected vary depending on the login service.
Preinstalled Login Services
Login Services Authentication database Authentication functions that can be used
Picture Login IC Card Au-
thentication
Keyboard
Authentica-
tion
Mobile Authentica-
tion
User Authentication Local device authentication
Server Authentication -
No Authentication Authentication
not required
Authentication
not required
Authentication
not required
Authentication not re-
quired
DepartmentID Authen-
tication
Department ID authentication - - -
: The setting can be configured.
-: Not selectable
CAUTION:
Picture Login
• For CUSA and CEL, Picture Login is an License Management(LMS) option (an option that requires activation). When
using Picture Login, it is necessary to access License Management(LMS) and activate Picture Login, and then change
the setting value of the following service mode to 1 (enabled).
• COPIER > OPTION > FNC-SW > PICLOGIN
If the setting shown above has not been configured, "Picture Login" is not displayed as the authentication method.
• When Picture Login is enabled, keyboard authentication is forcibly enabled.
■ Login Services
The host machine has the following login services by default.
Management of login services is performed using the [Enhanced System Application Management] screen in Service
Management Service (SMS).
User Authentication
This service performs authentication by matching the entered user ID and password against the information in the device or
in the authentication server.
2. Authentication
6

DepartmentID Authentication
This service performs authentication by matching the entered department ID and password against the information in the
device.
■ Login Method (User Authentication Function)
The method for logging in to a login service is called the user authentication function.
Although there are several user authentication functions, it is possible to either use only one function or to use more than one
function.
The setting of authentication method can be configured in [Settings/Registration] > [Management Settings] > [User Management]
> [Authentication Management] > [Basic Settings].
NOTE:
If the [Use the user authentication function] check box in [Use of Authentication Function] is deselected, it is possible to log in
without authentication.
Furthermore, anybody can change any of the settings, which increases the security risk.
Keyboard Authentication
This is a method of authentication by entering authentication information using a keyboard displayed on the Control Panel.
2. Authentication
7

Card Authentication
This is an authentication method that can be used on devices equipped with a Card Reader.
This authentication method reduces the load on users since it removes the effort of entering authentication information.
Picture Login
This is a user authentication method of logging in by selecting a user-specific icon displayed on the Control Panel.
In this model, this authentication method is set as the default authentication method.
Since you can log in simply by pressing an icon, it is necessary to configure a PIN to prevent unauthorized logins.
The user information is stored in the DB in the device (the same DB as User Authentication), and can only be used by users
registered in the local device.
Note that Picture Login does not support server authentication.
Mobile Authentication
This is an authentication method that allows automatic login when a user with a mobile terminal on which the application for
mobile authentication is running approaches this equipment.
A Bluetooth LE option (product name differs depending on the model) must be installed on this equipment and the Bluetooth
function must be enabled in order to use this authentication method.
When mobile authentication is enabled, keyboard authentication is also enabled.
It can be used together with Picture Login and card authentication.
CAUTION:
For information on the setting and operation method of the application for mobile authentication, refer to the manual of the
application.
2. Authentication
8

■ Authentication Database
Login service can be used to specify which user DB to inquire to.
The authentication database varies depending on the login service.
Screen example ([Settings/Registration] > [Management Settings] > [User Management] > [Authentication Management])
Combination of the login method and the authentication database
Authentication
database
Keyboard Au-
thentication
IC Card Authenti-
cation
Picture Login Mobile Authentication Department ID
Management
Local Device
IC Card (Assumed
Authentication)
- - - -
Active Directory - -
LDAP - -
Plug-in - -
User Authentication
It is a login service that consolidates the existing SSO-H, DA (Default Authentication), and AMS (Access Management System),
and has the following features.
• The following three authentication methods can be selected.
• Keyboard Authentication
• IC Card Authentication
• Picture Login
For more information, refer to the User's Guide [top page > Mnaging the Machine > Managing Users] at the following URL.
https://oip.manual.canon/
DepartmentID Authentication overview
This login service is selected when the department ID management is enabled or no authentication function is set. Set the
department ID management to [ON] on [Settings / Registration] of this device and register 7-digit ID and PIN by department. This
setting restricts the use of this device only to users keying the registered ID and PIN. Department IDs/ and PINs can be registered
on the touch panel of this device or Remote UI.
Only one System Administrator ID can be registered.
Integrated Authentication Function
Sharing the Authentication Information
Separately managing the authentication information at login and the authentication information for MEAP applications creates
inconveniences such as that the authentication process is executed many times.
In order to solve this problem, the device has an integrated authentication function. This function allows authentication information
to be shared between MEAP applications in a MEAP environment.
The supported version of MEAP Specifications is Ver.59, which needs to be supported by both the device and the MEAP
application in order to use this function.
The supported version of MEAP Specifications is Ver.59, which needs to be supported by both the device and the MEAP
application in order to use this function.
2. Authentication
9

There are 2 types of authentication information that can be shared: Volatile Credential whose registered information is discarded
at the time of logout or shutdown of the device and Persistent Credential whose registered information is not discarded at the
time of logout.
Volatile Credential
Volatile Credential is used in cases where the authentication information is shared between applications which use the same
security domain for authentication.
The credential is registered mainly by the login application, therefore the applications which access the security domain that
was used for authentication by the login application can use the credential.
Persistent Credential
Persistent Credential is used to help entry of authentication information when accessing a different security domain for
authentication.
The credential is registered mainly by general MEAP applications, and the authentication information can be reused when
the same user logs in for the second time or later.
Comparison of Functions
Volatile Credential Persistent Credential
Registered information Character strings and arbitrary Java objects Character strings only User ID/Password/ Domain/
Arbitrary character strings
Lifetime Registration At login (the login application), and at any timing of
registration by an application
At any timing of registration by an application
Deletion Can be used until logout/shutdown. Can be used until deletion by the application or man-
agement tool.
Encryption of credential
data
Not supported Data retained on the Storage is encrypted.
Store (Save) to Memory in the device Storage in the device
2. Authentication
10

Management of the Authentication Method
NOTE:
CUSA/ CEL only:
Picture Login is an License Management(LMS) option (an option that requires activation).
When using Picture Login, it is necessary to access License Management(LMS) and activate Picture Login, and then change the
setting value of the following service mode to 1 (enabled).
• COPIER > OPTION > FNC-SW > PICLOGIN
If the setting shown above has not been configured, "Picture Login" is not displayed as the authentication method.
Change Login Services Procedure
1. Log on to SMS, click [ Enhanced System Application Management ].
2. Click [SWITCH] for the login service to be used.
3. When login service application you have selected turns to Start after Restart, restart the device.
2. Authentication
11

Login Service Installation Procedure
1. Log on to SMS, and click the [Browse], and specify the enhanced system application file and license file.
2. Select [Install and Start] or [Only Install] in [Operation to Perform], and click [Install].
Login Service Uninstallation Procedure
In order to uninstall a login service, the service needs to be stopped ("Installed" status).
User Authentication and DepartmentID Authentication cannot be uninstalled even when the service is stopped.
1. Access SMS, and select [Enhanced System Application Management].
2. Click the [Uninstall] of the login service you want to uninstall.
2. Authentication
12

Authentication Settings
The settings of the login method or authentication database can be configured on the [Authentication Management] screen.
In this machine, a combination of login service, login method, and authentication database is specified. A combination can be
configured on the Authentication Management screen.
For details, see [Top] > [Managing Users] > [Configuring the Personal Authentication Management Settings] > [Configuring the
Authentication Functions] in the User's Guide found at the following URL.
https://oip.manual.canon/
NOTE:
The default settings are as shown below.
• Login service: User Authentication
• Authentication method: Keyboard Authentication
• Authentication: Local Device
CAUTION:
To ensure a high level of security, it is recommended to change the user name of the Local Device Authentication
administrator and its password from the default as soon as you have started using User Authentication.
Because a department ID and password are not assigned to domain users, distributing setting data where department ID
is enabled to a device where server authentication is enabled could prevent users from logging in to the device.
Configuring Picture Login
Since Picture Login is provided as a system option, it requires management different from that for User Authentication and
Department ID Authentication.
■ Enabling Picture Login (CUSA/ CEL Only)
In order to use Picture Login on the host machine, it is necessary to access License Management(LMS) and activate Picture
Login, and then set the following service mode to "enabled" (setting value: 1).
• COPIER > OPTION > FNC-SW > PICLOGIN
2. Authentication
13

Picture Login is displayed on the remote UI by configuring the above setting.
Note that if the setting value is set to 0 in the above service mode, Picture Login will not be displayed on the remote UI.
■ Disabling Picture Login
Picture Login can be disabled by setting the following setting value to 0 in service mode.
• COPIER > OPTION > FNC-SW > PICLOGIN
Note that Picture Login cannot be enabled while "Prohibit Guest Users to Use Device" is enabled in the security policy.
If "Prohibit Guest Users to Use Device" is enabled while Picture Login is enabled, Picture Login is automatically disabled.
Procedure for Enabling Mobile Authentication
Follow the procedure shown below to configure the setting to use mobile authentication.
Note that the Bluetooth LE option needs to be installed in order to use mobile authentication.
1. Enable the following service mode (setting value: 1).
COPIER > Function > INSTALL > BLE-USE
2. Authentication
14

2. In the following [Settings/Registration] menu, enable the Bluetooth function (set it to ON).
• Remote UI
[Settings/Registration] > Preferences > Network > Bluetooth Settings > Use Bluetooth
• Control Panel
[Settings/Registration] > Preferences > Network > Bluetooth Settings > Use Bluetooth
2. Authentication
15