Canon imageRUNNER 2545i Installation and operating instructions

Please read this guide before operating this product.
After you finish reading this guide, store it in a safe place for future reference.
Notification of New and Enhanced Functions
Notification of New and Enhanced Functions
ENG
Please read this guide before operating this product.
After you finish reading this guide, store it in a safe place for future reference.
Notification of New and Enhanced Functions
Notification of New and Enhanced Functions
ENG

Notification of
New and Enhanced Functions
Notification of
New and Enhanced Functions

Notification of
New and Enhanced Functions
Notification of
New and Enhanced Functions

2
Preface
Additions and enhancements have been made to the functions of the machine. After reading this
notication, store it with the manuals for your machine.
The availability of the functions described in this notication may vary depending on the machine
conguration and on the version or settings of the software such as printer drivers. For more information,
contact your local authorized Canon dealer.
Before you start using the machine, be sure to read the legal notices and important safety instructions found
in the User’s Guide .

3
UpdatesRegardingAdditionalFunctions.................................................4
AdditionalFunctionsMenu....................................................................... 4
ChangingtheLanguageontheDisplay........................................................... 6
AutoClearTime.................................................................................. 7
ManagingKeyPairsandDigitalCertificates....................................................... 8
GeneratingaKeyPairforSSLCommunications............................................... 9
EnablingSSLCommunicationfortheRemoteUI .................................................13
SettingtheDefaultKeyforSSLCommunications ............................................13
RestrictingtheUseofRemoteUI............................................................15
SettingPortNumbers...........................................................................17
SettingtheSecurePrintingFunction.............................................................18
Displaying an Alert Message When the Available Memory Gets Low . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
UpdatesRegardingthePrinterDrivers ..................................................23
TheDefaultSettingofthePrinterDriver .........................................................23
PrintingfromaMacComputer...................................................................23
PrintingSecurelyfromaComputer......................................................27
SecurePrinting .................................................................................27
SendingaSecurePrintJob..................................................................27
EnteringthePasswordattheMachineforPrinting...........................................30
UpdatesRegardingtheErrorCodes.....................................................32
OtherUpdates.........................................................................33
MemoryMediaSettingsontheRemoteUI.......................................................33
Troubleshooting.......................................................................34
NetworkandSecurityProblems ................................................................. 34
SecurePrintingProblems........................................................................34
Contents

Updates Regarding Additional Functions
4
Updates Regarding Additional Functions
Additional Functions Menu
Common Settings
Items in bold have been added to [Language Switch].
Item Settings Default Setting Reference Page
Language Switch
On
Arabic, Bulgarian, Catalan,
Chinese (Simplified),
Chinese (Traditional),
Croatian, Czech, Danish,
Dutch, English, Estonian,
Finnish, French, German,
Greek, Hungarian, Italian,
Japanese, Korean, Latvian,
Lithuanian, Norwegian,
Polish, Portuguese,
Romanian, Russian, Slovak,
Slovene, Spanish, Swedish,
Thai, Turkish, Vietnamese
Off
Off p. 6
Timer Settings
Items in bold have been added to [Auto Clear Time].
Item Settings Default Setting Reference Page
Auto Clear Time
0, 10 to 50 seconds in ten
second increments, 1 to
9 minutes in one minute
increments (0: Off)
2 min p. 7
■
■

Updates Regarding Additional Functions 5
System Settings
The following items have been added:
Item Settings Default Setting Reference Page
Certificate Settings
Generate Key
Generate a key pair by
specifying the following:
Key Name: 24 characters
maximum
Signature Algorithm: SHA1,
SHA256, SHA384, SHA512
Key Length (bit): 512, 1024,
2048, 4096
Validity Start Date: Enter <DD/
MM/ YYYY>.
Validity End Date: Enter <DD/
MM/ YYYY>.
Country/Region: Australia
(AU), China (CN), Czech
Republic (CZ), Germany (DE),
Denmark (DK), Estonia (EE),
Spain (ES), Finland (FI), France
(FR), United Kingdom (GB),
Greece (GR), Hungary (HU),
Italy (IT), Japan (JP), Korea
(KR), Netherlands (NL), Norway
(NO), Poland (PL), Portugal
(PT), Russia (RU), Sweden
(SE), Singapore (SG), Slovenia
(SI), Taiwan (TW), United
States (US), Other (two-letter
Internet country code)
State: 24 characters maximum
City: 24 characters maximum
Organization: 24 characters
maximum
Organization unit: 24
characters maximum
Common Name: 48 characters
maximum
SHA1, 512 (bit),
(The default Country/
Region setting may
vary depending on
the country/region of
purchase.)
p. 8
SSL Settings
Functions using SSL are
listed. Press [Key and Cert.] for
setting the default key.
Key and Certificate List: Show
certificate details, erase a key
and certificate, or display what
the certificate is used for.
– p. 13
■

Updates Regarding Additional Functions
6
Item Settings Default Setting Reference Page
Secure Print Settings
p. 18
Delete Timeout 10 to 240 minutes in one
minute increments 60 min
Only allow secure print
jobs On, Off Off
Mem. Used When
Warning Displayed
On
60 to 95% in five percent
increments
Off
On, 80% p. 21
Items in bold have been added to [Port Number Settings] and [Remote UI On/Off].
Item Settings Default Setting Reference Page
Port Number Settings
LPD (515), RAW (9100), HTTP
(80), SMTP Receive (25), POP3
Receive (110), FTP Sending
(21), SMTP Sending (25), SNMP
(161), WSD (3702), HTTPS
(443)
– p. 17
Remote UI On/Off On, Off
Use SSL: On, Off
On
Off p. 15
Changing the Language on the Display
You can change the language displayed on the touch panel display.
The number of available languages has increased to 33.
For more information on the Language Switch setting, see Chapter 3,“Configuring the Machine’s Basic
Settings,” in the Reference Guide .

Updates Regarding Additional Functions 7
Auto Clear Time
If the machine remains idle for a certain period of time, the display returns to the default top screen
or the top screen of the selected function. This period of time is called the“Auto Clear Time.”
The Auto Clear Time can be set to between 10 and 50 seconds (in ten second increments), in
addition to the already available setting range of zero (Off ) and one to nine minutes (in one minute
increments). - (numeric keys) cannot be used to enter values. Press [-] or [+] to select the setting.
To disable the Auto Clear Time setting, select <0> press [OK].
For more information on the Auto Clear Time setting, see Chapter 3,“Configuring the Machine’s Basic
Settings,” in the Reference Guide .
•
•

Updates Regarding Additional Functions
8
Managing Key Pairs and Digital Certificates
The key pairs and digital certificates that can be registered in the machine have been updated
as described below. The machine can take advantage of key pairs and digital certificates for SSL
communication, in addition to the already available IEEE802.1X port-based authentication.
Key and Certificate
In IEEE802.1X port-based authentication, a key pair (or a private key and certificate) in PKCS#12
format is required for enabling the EAP-TLS method on the client device. If you want to access
the machine securely from a web browser (Remote UI), generate a key pair and set it for SSL
communications. Up to three key pairs can be registered.
CA Certificate
CA certificates are used for verifying the digital certificates sent from other devices, such as servers,
client computers, etc. Up to 10 CA certificates (including two pre-installed CA certificates) can be
registered.
Certificates must meet the following requirements:
Format: X.509 version 1 or version 3 (DER encoded binary)
Signature algorithm: SHA1-RSA, SHA256-RSA, SHA384-RSA*, SHA512-RSA*, MD5-RSA, or MD2-RSA (For CA
certificates, SHA1-DSA is also allowed.)
Key length: 512, 1024, 2048, or 4096 bits (RSA)/2048 or 3072 bits (DSA)
File extension:‘.p12’ or ‘.pfx’ (for key pair files)/’.cer’ or ‘.der’ (for CA certificate files)
* SHA384-RSA and SHA512-RSA are supported only when the key length is 1024 bits or more.
The machine does not use certificate revocation list (CRL) for verifying digital certificates.
Key pairs and digital certificates can be installed from a web browser (Remote UI). (See Chapter 2, “Managing
Jobs and Machine Data,” in the Remote UI Guide .)
Key pairs and digital certificates can be registered both with the control panel and from a web browser
(Remote UI).
■
■
•
-
-
-
-
•
•
•

Updates Regarding Additional Functions 9
Generating a Key Pair for SSL Communications
If you want to use encrypted SSL communication for accessing the machine from a web browser
(Remote UI), generate a key pair file as described below.
To make changes to the System Settings, enter the System Management mode. For details, see Chapter 1,
“Before You Start,” in the System Settings Guide .
1 Press (Additional Functions) [System Settings] [Network Settings].
2 Press [TCP/IP Settings].
3 Press [ ] or [ ] until [Certificate Settings] appears press [Certificate
Settings].
4 Press [Generate Key].

Updates Regarding Additional Functions
10
5 Name the key pair.
Press [Key Name] enter a name for the key pair (up to 24 characters) using the on-screen
keyboard press [OK].
Press [Next].
6 Specify the signature algorithm and the key length.
Press the Signature Algorithm drop-down list press [SHA1], [SHA256], [SHA384], or [SHA512] to
select the desired hash algorithm.
Press the Key Length drop-down list press [512], [1024], [2048], or [4096] to select the desired
key length (expressed in bits).
Press [Next].
SHA384 and SHA512 are supported only when the key length is 1024 bits or more.






Updates Regarding Additional Functions 11
7 Specify the dates from and to which the certificate is valid.
Press [Validity Start Date] enter the date (day, month, and year) from which the certificate is
valid using – (numeric keys).
Press [Validity End Date] enter the date (day, month, and year) to which the certificate is valid
using – (numeric keys).
Press [Next].
The date set for [Validity End Date] must not be earlier than [Validity Start Date].
8 Specify the details for the self-signed server certificate press [Key Gen.] to
generate the key pair.




Updates Regarding Additional Functions
12
At least one of the items listed below must be entered.
A DNS server is required in order to use the machine’s FQDN as the common name.
The generated key pair cannot be used for SSL communications until it is set as the default key.
Specify the following items:
[Country/Region]: Press to select a country/region from the list. If [Other] is selected, you can specify
the country/region by entering an Internet country code using the on-screen
keyboard. An Internet country code consists of two uppercase letters, such as US,
UK, etc.
[State]: Press to enter the state name (up to 24 characters) using the on-screen keyboard.
[City]: Press to enter the city name (up to 24 characters) using the on-screen keyboard.
[Organization]: Press to enter the organization name (up to 24 characters) using the on-screen
keyboard.
[Organization Unit]: Press to enter the name of the organization unit, such as a department, section,
etc., (up to 24 characters) using the on-screen keyboard.
[Common Name]: Press to enter the machine’s IP address or FQDN (up to 48 characters) using the
on-screen keyboard press [OK].
For instructions on how to manage the key pair files, see Chapter 3,“Setting up the Machine for Your
Network Environment,” in the System Settings Guide .
9 Proceed to set the default key pair for SSL communications.
For help, see “Setting the Default Key for SSL Communications,” on p. 13.
•
•
•

Updates Regarding Additional Functions 13
Enabling SSL Communication for the Remote UI
SSL (Secure Sockets Layer) is now available for accessing the machine securely from a web browser
(Remote UI).
To make changes to the System Settings, enter the System Management mode. For details, see Chapter 1,
“Before You Start,” in the System Settings Guide .
Setting the Default Key for SSL Communications
Follow the procedure below to set the default key for SSL communications.
Before you start setting the default key for SSL communications, make sure to perform the following:
Generate an SSL key pair. (See “Generating a Key Pair for SSL Communications,” on p. 9.)
Access the Remote UI On/Off settings and make sure that the Use SSL setting is set to ‘Off’. (See “Restricting
the Use of Remote UI,” on p. 15.)
Changes made to SSL Settings become effective when the machine is restarted. To restart the machine, turn it
OFF, wait at least 10 seconds, and then turn it ON.
1 Press (Additional Functions) [System Settings] [Network Settings].
2 Press [TCP/IP Settings].
3 Press [ ] or [ ] until [SSL Settings] appears press [SSL Settings].
•
-
-
•

Updates Regarding Additional Functions
14
4 Press [Key and Cert.].
5 Select the key pair you want to use press [Set as Def. Key].
If the default key cannot be changed, access the Remote UI On/Off settings and make sure that the
Use SSL setting is set to‘Off’. (See “Restricting the Use of Remote UI,”on p. 15.)
If you want to check the details of each certificate, select the desired key pair and press [Cert. Details].
On the Certificate Details page, pressing [Cert. Verif.] enables you to check whether the selected
certificate is expired or not.
If you want to check what a key pair on the list is being used for, select the desired key pair and press
[Display Use Loc.].
•
•

Updates Regarding Additional Functions 15
6 Press [Yes].
To quit, press [No].
7 Restart the machine.
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
To enable SSL communication, access the Remote UI On/Off settings and set the Use SSL setting to ‘On’. (See
“Restricting the Use of Remote UI,”on p. 15.)
Restricting the Use of Remote UI
You can set whether to enable the Remote UI to operate the machine and change settings. If you
want to access the machine more securely from a web browser, enable SSL (Secure Sockets Layer) for
encrypted communications.
To make changes to the System Settings, enter the System Management mode. For details, see Chapter 1,
“Before You Start,” in the System Settings Guide .
Changes made to Remote UI On/Off become effective when the machine is restarted. To restart the machine,
turn it OFF, wait at least 10 seconds, and then turn it ON.
For more information on the Remote UI, see the Remote UI Guide .
To use the Remote UI, it is necessary to set up the communication environment. For help, see Chapter 2,
“Connecting the Machine to a TCP/IP Network,”in the System Settings Guide .
The default settings are as follows:
Remote UI On/Off: On
Use SSL: Off
1 Press (Additional Functions) [System Settings].
2 Press [ ] or [ ] until [Remote UI On/Off] appears press [Remote UI On/
Off].
•
•
•
•
•
-
-

Updates Regarding Additional Functions
16
3 Select whether or not to enable the Remote UI and SSL communication.
If you want to enable the Remote UI and access the machine using SSL:
Press [On].
Press [On] for <Use SSL>.
Press [OK].
To enable SSL communication for the Remote UI, an SSL key pair must be generated and set as the
default key.
(See “Generating a Key Pair for SSL Communications,” on p. 9, and“Setting the Default Key for SSL
Communications,” on p. 13.)
If you want to enable the Remote UI and access the machine without using SSL:
Press [On].
Press [Off] for <Use SSL>.
Press [OK].
If you want to disable the Remote UI:
Press [Off] [OK].
Enabling the Remote UI opens the machine’s http/https port. If the port is left open, an unauthorized
user may try to access the machine from the open port. Disabling the Remote UI is recommended if
you do not plan to use it.
4 Restart the machine.
Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
●



●



●


Updates Regarding Additional Functions 17
Setting Port Numbers
Depending on your network environment, you can change the port number for each protocol. In
addition to the already available port settings, the HTTPS port setting is now available, enabling you
to change the default port number (443). Press [ ] or [ ] to display the page containing the key for
the desired protocol.
Changes made to Port Number Settings become effective when the machine is restarted. To restart the
machine, turn it OFF, wait at least 10 seconds, and then turn it ON.
For instructions on how to set the port numbers, see Chapter 3,“Setting up the Machine for Your Network
Environment,” in the System Settings Guide .
The default settings are as follows:
LPD: 515
RAW: 9100
HTTP: 80
SMTP Receive: 25
POP3 Receive: 110
FTP Sending: 21
SMTP Sending: 25
SNMP: 161
WSD: 3702
HTTPS: 443
•
•
-
-
-
-
-
-
-
-
-
-

Updates Regarding Additional Functions
18
Setting the Secure Printing Function
Secure Printing enables you to hold your print jobs until the appropriate password is entered at the
machine. This way, confidential documents are not left lying on the machine’s output tray.
Set the timeout period (or hold time) for the secure print jobs so that they can be automatically
discarded from the machine’s memory after the timeout period elapses. You can also set the machine
to accept only the secure print jobs when documents are printed from a computer.
To make changes to the System Settings, enter the System Management mode. For details, see Chapter 1,
“Before You Start,” in the System Settings Guide .
The default settings are as follows:
Delete Timeout: 60 minutes
Only allow secure print jobs: Off
1 Press (Additional Functions) [System Settings].
2 Press [ ] or [ ] until [Secure Print Settings] appears press [Secure Print
Settings].
-
-