Canon imageRunner iR2270 User manual

SERVICE
MANUAL
imageRUNNER
iR2270/2870/
3570/4570
iR Security Kit-A2
COPYRIGHT 2004 CANON INC. CANON imageRUNNER iR Security Kit-A2 REV. 0 PRINTED IN U.S.A.
DU7-1135-000
SEPT. 2004
REV. 0
SM cover iR Security Kit.qxd 9/20/2004 2:41 PM Page 1

Application
This manual has been issued by Canon Inc. for qualified persons to learn technical theory, installation,
maintenance, and repair of products. This manual covers all localities where the products are sold. For
this reason, there may be information in this manual that does not apply to your locality.
Corrections
This manual may contain technical inaccuracies or typographical errors due to improvements or changes
in products. When changes occur in applicable products or in the contents of this manual, Canon will
release technical information as the need arises. In the event of major changes in the contents of this
manual over a long or short period, Canon will issue a new edition of this manual.
The following paragraph does not apply to any countries where such provisions are inconsistent with
local law.
Trademarks
The product names and company names used in this manual are the registered trademarks of the
individual companies.
Copyright
This manual is copyrighted with all rights reserved. Under the copyright laws, this manual may not be
copied, reproduced or translated into another language, in whole or in part, without the written consent
of Canon Inc.
COPYRIGHT © 2001 CANON INC.
Printed in Japan
Caution
Use of this manual should be strictly supervised to avoid disclosure of confidential information.

Introduction
Symbols Used
This documentation uses the following symbols to indicate special information:
Symbol Description
Indicates an item of a non-specific nature, possibly classified as Note,
Caution, or Warning.
Indicates an item requiring care to avoid electric shocks.
Indicates an item requiring care to avoid combustion (fire).
Indicates an item prohibiting disassembly to avoid electric shocks or
problems.
Indicates an item requiring disconnection of the power plug from the electric
outlet.
Indicates an item intended to provide notes assisting the understanding of the
topic in question.
Indicates an item of reference assisting the understanding of the topic in
question.
Provides a description of a service mode.
Provides a description of the nature of an error indication.
Memo
REF.

Introduction
The following rules apply throughout this Service Manual:
1. Each chapter contains sections explaining the purpose of specific functions and the
relationship between electrical and mechanical systems with reference to the timing of
operation.
In the diagrams, represents the path of mechanical drive; where a signal name
accompanies the symbol, the arrow indicates the direction of the electric
signal.
The expression "turn on the power" means flipping on the power switch, closing the front
door, and closing the delivery unit door, which results in supplying the machine with
power.
2. In the digital circuits, '1'is used to indicate that the voltage level of a given signal is
"High", while '0' is used to indicate "Low".(The voltage value, however, differs from
circuit to circuit.) In addition, the asterisk (*) as in "DRMD*" indicates that the DRMD
signal goes on when '0'.
In practically all cases, the internal mechanisms of a microprocessor cannot be checked
in the field. Therefore, the operations of the microprocessors used in the machines are
not discussed: they are explained in terms of from sensors to the input of the DC
controller PCB and from the output of the DC controller PCB to the loads.
The descriptions in this Service Manual are subject to change without notice for product
improvement or other purposes, and major changes will be communicated in the form of
Service Information bulletins.
All service persons are expected to have a good understanding of the contents of this
Service Manual and all relevant Service Information bulletins and be able to identify and
isolate faults in the machine."

Contents
Contents
Chapter 1 Specifications
1.1 Product composition .................................................................................................. 1-1
1.1.1 Product Components........................................................................................... 1-1
1.2 Specifications............................................................................................................. 1-3
1.2.1 Overview ............................................................................................................. 1-3
Chapter 2 Functions
2.1 New Function............................................................................................................. 2-1
2.1.1 Security Function ................................................................................................ 2-1
2.1.2 HDD Encryption ................................................................................................. 2-1
2.1.3 Full Initialization of the HDD............................................................................. 2-2
2.1.4 Enabling/Disabling Display of Job Log.............................................................. 2-3
Chapter 3 Installation
3.1 Points to Note About Installation............................................................................... 3-1
3.1.1 Points to Note on Installation.............................................................................. 3-1
3.2 Checking components................................................................................................ 3-3
3.2.1 Checking Items in the Package ........................................................................... 3-3
3.3 Installation procedure ................................................................................................ 3-4
3.3.1 Backing Up Data................................................................................................. 3-4
3.3.2 Obtaining and Registering the license key.......................................................... 3-8
3.3.3 Setting the Service mode................................................................................... 3-10
Chapter 4 Maintenance
4.1 Related Service Mode................................................................................................ 4-1
4.1.1 Invalidating the License for Transfer to a Different Device (Category 2).......... 4-1

Chapter 1
Specifications

Contents
Contents
1.1 Product composition...................................................................................1-1
1.1.1 Product Components ...........................................................................1-1
1.2 Specifications .............................................................................................1-3
1.2.1 Overview .............................................................................................1-3

Chapter 1
1-1
1.1 Product composition
1.1.1 Product Components 0008-5633
This kit consists of:
[1] License Access Number Certificate Sheet 1pc.
[2] Reference Guide 1pc.
[3] Caution sheet for Users 1pc.
[4] License Registration Booklet 1pc.
Memo:
Using this kit, you can get a license key from the License Management System (LMS)
and register it in an iR/imageRUNNER to activate the specific feature included in the
System Software.
Note:What's LMS?
A license server system to activate software options of iRs/imageRUNNERs, provided by
Canon Inc. Collectively manages options in the form of licenses and protects copy rights
of optional products. The options are activated with license keys being different from
conventional activation measures that use dongles and PCs. Whereas the details of its
management differ among countries and regions, it is designed assuming the users access it
and activate licenses by themselves respectively. Per optional product, the license access
number certificate sheet is supplied. Per license access number, a user can get a license key
and activate the feature on an iR/imageRUNNER. To get a license key, a user accesses the
Web server of the LMS.
URL for LMS:
http://www.canon.com/lms/ir/
When a user enters the license access number and the serial number for an iR/
imageRUNNER in the LMS, 24-digit figure of a license key is generated. The license key
includes the information of serial number for the iR/imageRUNNER so that the key cannot
be used for iRs/imageRUNNERs. Once the option is activated, the option information is

Chapter 1
1-2
saved as the backup in the iR/imageRUNNER. Parts replacement will not deactivate the
feature.
The staff in each regional headquarters can access the administrator's pages of the LMS.
They can view the license number issued for each iR/imageRUNNER and can reissue the
license. The procedures are the same as the license management system for MEAP except
for the point the license key is used instead of the license file.
Transfer of a License
An optional function that has been enabled by the LMS may be used on a different device
by transferring its license, as when the original iR device needs to be replaced, say at the
end of its lease arrangement. Specifically, individual licenses registered for optional
functions must first be invalidated in user mode before transfer may take place. Doing so
will invalidate the optional functions on the source iR device and, at the same time, proof
of invalidation will be generated within the device in the form of an invalidation license key.
The user may then communicate the indicated invalidation license key, the serial number of
the original iR device, and the serial number of the new iR device to the Sales Company,
which in turn may issue a new license key for the new iR device. The user now may register
the new license key to the new iR device in user mode, thereby enabling the optional
function on the new iR device. For details of transferring a license in service mode, see the
descriptions of service mode that come later.
Notes:
Security kit requires that a license key is obtained/registered, and optional PCI bus
extension kit, security extension board (USB) and 256MB extension RAM are installed.
If these options are not installed, "There are not enough required features for install." is
displayed at the license registration, and this function cannot be enabled.

Chapter 1
1-3
1.2 Specifications
1.2.1 Overview 0008-5635
This kit is an option to add the security function which is enabled by the license.
Characteristics:
- Since the security extension board and increasing memory are required, this kit is
installed by the service man.
- HDD data can be protected, and Job Log can be not displayed.
- Encryption processing is conducted by the encryption accelerator, so there is not much
influence on the machine performance.
- The security is secured since there is no method to take the key for encryption to the
outside of HDD.
- When the data needs to be deleted at the damage on the device, the user can regenerate
the encryption key, so that the data can be deleted easily.
For details of installation procedures, please refer to Installation procedure.
Protection of HDD data
Device's HDD records temporally image data like scanned images and PDL data, etc. at any
time. Also, the image data is always saved in the user box, FAX box, etc. If the user
information like the image data is stolen by extracting HDD, the original data can be
recovered easily by directly accessing and analyzing with Disk Editor, etc. For the security,
HDD encryption and full initialization of the HDD are used.
HDD encryption
Regarding the HDD dealing with images and PDL data, the information is written by
encrypting, and it is read by decoding. Therefore, information within the HDD is always
encrypted. Even when the HDD is stolen, recovering the data is too hard. For details,
refer to New Functions in the later chapter.
Full initialization of the HDD
When the data which is recorded temporality (e.g. images and PDL data) is not necessary,
0 data or random data is overwritten in the areas where the data exists. By doing so,
recovering the original data is too hard. For details, refer to New Functions in the later
chapter.
Enabling/Disabling Display of Job Log

By not displaying Job Log to the third party, contents of the PDL printing and contents
of transmission/reception using Send function can be prevented from leaking. By setting
Service mode, User mode of whether to display Job Log is displayed. For details, refer
to New Functions in the later chapter.

Chapter 2
Functions

Contents
Contents
2.1 New Function.............................................................................................2-1
2.1.1 Security Function ................................................................................2-1
2.1.2 HDD Encryption .................................................................................2-1
2.1.3 Full Initialization of the HDD.............................................................2-2
2.1.4 Enabling/Disabling Display of Job Log..............................................2-3

Chapter 2
2-1
2.1 New Function
2.1.1 Security Function 0008-5636
When the Security function is enabled using this kit, the following functions can be
validated.
- HDD encryption
- Full initialization of the HDD
- Enabling/Disabling display of Job Log
2.1.2 HDD Encryption 0008-5637
Device's HDD records temporally image data like scanned images and PDL data, etc. at any
time. After the printing operation is completed, the normal operation is that only
management information is deleted, so the image data information remains on HDD.
Therefore, it is concerned that HDD is taken by the third party, the data is analyzed by
accessing directly using Disk Editor, and the original data is recovered. As the
countermeasure, information is always encrypted in the areas where the data like images
and PDL data are saved temporarily. By doing so, recovering the original image data in the
HDD will be too difficult. This function is automatically enabled when the license key
registration of the security kit is completed. You cannot disable this function.
Mechanism of data encryption
Data encryption uses 3DES encryption algorism with a data encryption key. When the
security kit is started its operations, the data encryption key is generated, based on random
numbers in the device. Then, when information is read and written in the encrypted area of
HDD, the data encryption key is used for encrypting and decoding. There is no way to take
this data encryption key to the outside of the HDD. This key is saved in the separate
locations other than HDD, so it is too hard to obtain this data encryption key.
Data encryption key to be regenerated
User can execute the regeneration of the data encryption key used for the HDD encryption
from the following User mode. When the device itself is damaged or HDD is stolen by the
third party, the user can regenerate the data encryption key, so that the current HDD data
cannot be accessed.
Actual operations are as follows.

Chapter 2
2-2
Select in orders of User mode > System Settings > Hard Disk Data Complete Erase
After regenerating, all data is deleted since the full data initialization processing is executed
like when the security is started.
2.1.3 Full Initialization of the HDD 0008-5638
Function
With the specific timing as files are deleted (e.g. management information data is deleted)
from HDD, this function is to overwrite 0 (null) data and random data in file data areas and
delete the data in HDD completely.
In addition to the above real time processing, processing at start-up is added as a new
function. When the machine is started, data which was not deleted when the power was
turned OFF last time is deleted. In details, this is conducted when the power is turned OFF
during copying and the Secured Print job remains. During the start-up processing,
"Remaining data that is not needed is being erased. Do not turn off the main power" is
displayed on the screen. When starting or stopping the security kit operation, note that data
in the areas to be deleted are all deleted. If all data is deleted or there are much data remained
when the power is turned OFF, it takes much time to start up.
Note: Data deletion at the installation
When the security kit is installed, processing to fully initialize HDD automatically is
executed. Therefore, you need to backup beforehand.
The data deleted fully this way will be stored files (e.g. files in Boxes) and temporary files
(copy files, not visible from outside but nevertheless stored inside). Files stored
temporarily as PDL data (e.g. Network PDL Spool) will also be deleted.
If MEAP application is installed, you need to backup the license of MEAP application.
Depending on the Service mode settings, the deletion method is determined. As previous
devices, there is no setting of ON/OFF in User mode, and if the security kit is installed, this
will be enabled.
Service Mode Item
COPIER>OPTION>USER>HDCR-DSP
1:enable display in user mode/write "0" data once (default)
2:enable display in user mode/write random data once

Chapter 2
2-3
3:enable display in user mode/write random data 3 times
Change the setting value according to the user's request.
Memo:
The higher the setting, the higher the level of security for the data on the hard disk. It is
important to keep in mind, however, that since processing will take place in real time as part
of ongoing job execution, the machine performance will drop. Especially when the security
operation is started and the data encryption key is regenerated, all areas are deleted
completely. Therefore, it takes for 20 minutes with the default setting and one hour with the
setting of writing random data 3 times in order to initialize HDD fully.
2.1.4 Enabling/Disabling Display of Job Log 0008-5639
Function
You can disable the display of logs (Job Log) stored by the machine. It affects not only the
local UI but also the remote UI. It is important to keep in mind that log collection (job
account log/fax communication log) otherwise possible with a specific Canon application
(NetSpot Accountant, etc.) will no longer be available, as there will be no response to a
command for data collection. (Data in the form of a jam log, error log, and alarm log,
however, will be available for collection.)
If the setting of the user mode item explained later is disabled, the display of the following
will be disabled:
- System Monitor>copy>Log
- System Monitor>Send>Log
- System Monitor>Fax>Log
- System Monitor>Print>Log
- System Monitor>Receive>Activity Report (RX)
- Ad Func>Report Settings>Settings>Send>Activity Report
- Ad Func>Report Settings>Settings>Fax>Fax Activity Report
As needed, change the following settings:

Chapter 2
2-4
- Ad Func>Report Settings>Settings: Send>Activity Report:Auto Print=off,Daily Activity
ReportTime=off
- Ad Func>Report Settings>Settings: Fax>Fax Activity Report:Auto Print=off,Daily
Activity Report
Time=off
Whether or not the Job Log will be displayed depends on whether the function is enabled
or disabled in user mode.
User Mode Items
Ad Func>System Settings>Job Log Display=on/off
on:enable display of Job Log (default)
off:disable display of Job Log
Service Mode Item
COPIER>Option>USER>LGSW-DSP
0:disable display in user mode (default)
1:enable display in user mode
Changing the setting from 0 to 1 enables to display in user mode.Change the setting value
according to the user's request.

Chapter 3
Parts Replacement
Procedure

Contents
Contents
3.1 Points to Note About Installation...............................................................3-1
3.1.1 Points to Note on Installation..............................................................3-1
3.2 Checking components ................................................................................3-3
3.2.1 Checking Items in the Package ...........................................................3-3
3.3 Installation procedure.................................................................................3-4
3.3.1 Backing Up Data .................................................................................3-4
3.3.2 Obtaining and Registering the license key..........................................3-8
3.3.3 Setting the Service mode...................................................................3-10

Chapter 3
3-1
3.1 Points to Note About Installation
3.1.1 Points to Note on Installation 0007-7622
Caution
1. The following options are required to install the security kit: PCI Bus Expansion Kit-B1,
USB Application Interface Board-D1, and iR256MB Expansion RAM-B1 (except 120V
model)
Be sure to attach these options beforehand. If these are not attached, a license key fails to
be registered appearing the message, "There are not enough required features for install".
2. User data in the hard disk is deleted in the cases below.
- When registering a license key of the security kit to enable the security functions.
- When re-generating a data encryption key.
- When invalidating a license of the security kit to stop security operation.
Inform a person in charge of user's device administration that the data shown below is all
deleted if any of the actions above is taken, and induce user to backup necessary data. In the
light of security, a service person should not backup user's data.
For reference, a backup procedure is shown in this manual.
Data to be deleted
- Data stored in the Mail boxes
- Address information registered to address book
- Scan settings registered using the transmission function
- Mode memory registered using the copy function/box function
- MEAP applications and license files
- Data stored using any of MEAP applications
- Service Management Service (SMS) Password of MEAP
(If user changed the password, it is returned to a factory default.)
- User authentication information registered in SDL (Simple Device Login)
- Yet-to-be-transmitted documents (i.e., documents of timer transmission/being reserved
for transmission)
- Job history information
- Settings made in user mode