Konica Minolta Bizhub 362 User manual

User’s Guide [Security Operations]
Copyright
2008
A11U-9630-00A PANTONE 300C BK
A11U-9630-00A
2009. 6
Ver. 1.01
http://konicaminolta.com

Contents
362/282/222 x-1
Contents
1 Security
1.1 Introduction ....................................................................................... 1-2
Compliance with the ISO15408 Standard ..................................... 1-2
Operating Precautions ................................................................... 1-2
INSTALLATION CHECKLIST .......................................................... 1-4
1.2 Security Functions ............................................................................ 1-6
1.2.1 Check Count Clear Conditions ...................................................... 1-7
1.3 Data to be Protected ........................................................................ 1-8
1.4 Precautions for Operation Control .................................................. 1-9
Roles and Requirements of the Administrator ............................... 1-9
Password Usage Requirements ..................................................... 1-9
Network Connection Requirements for the Machine ................... 1-10
Security function operation setting operating requirements ........ 1-10
Operation and control of the machine ......................................... 1-10
Machine Maintenance Control ..................................................... 1-10
1.5 Miscellaneous ................................................................................. 1-11
Password Rules ........................................................................... 1-11
Precautions for Use of Various Types of Applications ................. 1-11
2 Administrator Operations
2.1 Accessing the Admin. Management Mode .................................... 2-2
2.1.1 Accessing the Admin. Management mode .................................... 2-2
<From the Control Panel> .............................................................. 2-3
<From PageScope Web Connection> ........................................... 2-5
2.2 Enhancing the Security Function .................................................... 2-8
2.2.1 Setting the Enhance Security function ......................................... 2-10
<Setting can be made only from the control panel> ................... 2-10
2.3 Canceling the Access Lock State ................................................. 2-13
2.3.1 Performing Unlock Setting ........................................................... 2-14
<Setting can be made only from the control panel> ................... 2-14
2.4 Changing the Administrator Code (Administrator Password) .... 2-15
2.4.1 Changing the Administrator Code (Administrator Password) ...... 2-15
<Setting can be made only from the control panel> ................... 2-15
2.5 User Box Function .......................................................................... 2-19

Contents
x-2 362/282/222
2.5.1 Changing the User Box Number and User Box Password ...........2-19
<Setting can be made only from the PageScope Web
Connection> .................................................................................2-19
2.6 Protecting Data in the HDD ............................................................2-24
2.6.1 Setting the HDD Lock Password ..................................................2-25
<Setting can be made only from the control panel> ....................2-25
2.6.2 Changing the HDD Lock Password ..............................................2-30
<Setting can be made only from the control panel> ....................2-30
2.6.3 Setting the Encryption Key (encryption word) ..............................2-34
<Setting can be made only from the control panel> ....................2-34
2.6.4 Changing the Encryption key ........................................................2-39
<Setting can be made only from the control panel> ....................2-39
2.7 Overwrite All Data Function ............................................................2-45
2.7.1 Executing Overwrite All Data ........................................................2-46
<Setting can be made only from the control panel> ....................2-46
2.8 Network Setting Function ...............................................................2-47
2.8.1 Setting the IP Address ..................................................................2-47
<From the Control Panel> ............................................................2-47
<From PageScope Web Connection> ..........................................2-48
2.8.2 Making the NetWare setting .........................................................2-48
<From PageScope Web Connection> ..........................................2-48
2.8.3 Making the Windows print (NetBIOS) setting ...............................2-49
<From PageScope Web Connection> ..........................................2-49
2.8.4 Making the AppleTalk setting .......................................................2-49
<From PageScope Web Connection> ..........................................2-49
3 User Operations
3.1 Secure Print Function .......................................................................3-2
3.1.1 Accessing the Secure Print .............................................................3-2
<Setting can be made only from the control panel> ......................3-3
3.2 User Box Function .............................................................................3-6
3.2.1 Setting the User Box .......................................................................3-6
<Setting can be made only from PageScope Web
Connection> ...................................................................................3-6
3.2.2 Accessing a User Box document .................................................3-10
<From the Control Panel> ............................................................3-10
<From PageScope Web Connection> ..........................................3-13

Contents
362/282/222 x-3
3.2.3 Changing the User Box Number and User Box Password .......... 3-18
<Setting can be made only from PageScope Web
Connection> ................................................................................. 3-18

Contents
x-4 362/282/222

1
Security Chapter 1
Security

1Security
1-2 362/282/222
Security Chapter 1
1 Security
1.1 Introduction
Thank you for purchasing our product.
This User’s Guide contains the operating procedures and precautions to be
used when using the security functions offered by the bizhub 362, 282, or
222 machine. To ensure the best possible performance and effective use of
the machine, read this manual thoroughly before using the security func-
tions. The Administrator of the machine should keep this manual for ready
reference. The manual should be of great help in finding solutions to operat-
ing problems and questions.
This User’s Guide (Ver. 1.01) describes bizhub 350/bizhub 250/bizhub 200/
bizhub 362/bizhub 282/bizhub 222/ineo 362/ineo 282/ineo 222/VarioLink
3621/VarioLink 2821/VarioLink 2221 Multi Function Peripheral Control Soft-
ware (MSC: A11U-0100-G10-06).
Compliance with the ISO15408 Standard
When the Enhance Security function on this machine is set to [ON], more en-
hanced security functions are available.
The security functions offered by the bizhub 362, 282, or 222 machine com-
ply with ISO/IEC15408 (level: EAL3).
Operating Precautions
This machine issues an alarm message or sounds an alarm beep when it is
erroneously operated or wrong data is entered. (The alarm beep is not, how-
ever, sounded if Confirmation Beep of User Management is set to [0].) If the
alarm message appears or the alarm beep sounds, follow the instructions
given by the message and operate the machine correctly or input correct
data as necessary.
The Administrator of the machine should make sure that each individual gen-
eral user exits from the current mode to return to the basic screen whenever
the access to that mode is completed or if the user leaves the machine with
the mode screen left displayed.
The Administrator of the machine should exit from the current mode to return
to the basic screen whenever the access to that mode is completed or if he
or she leaves the machine with the mode screen left displayed.

Security 1
362/282/222 1-3
Security Chapter 1
The Administrator of the machine should make sure that none of the One-
Touch Names to be used for a one-touch key is not duplicated when making
settings for the one-touch key used for Scan to HDD on the machine. If a
One-Touch Name is duplicated, data could be saved in a wrong User Box. If
there are two or more User Boxes having the same User Box Name, the Ad-
ministrator should make doubly certain that the correct User Box is regis-
tered for a one-touch key.

1Security
1-4 362/282/222
Security Chapter 1
INSTALLATION CHECKLIST
This Installation Checklist contains items that are to be check by the Service
Engineer installing this machine.
The Service Engineer should check the following items, then explain each
checked item to the Administrator of the machine.
To Service Engineer
Make sure that each of these items is properly carried out by checking the
box on the right of each item.
1. Perform the following steps before installing this machine. Completed
Check with the Administrator to determine if the security functions of this ma-
chine should be enhanced. If the functions should be enhanced, check the
following.
If the security functions are not to be enhanced, quit the operation without
checking the following.
I swear that I would never disclose information as it relates to the settings of
this machine to anybody, or perform malicious or intentional act during setup
and service procedures for the machine.
When giving the User’s Guide Security Operations to the Administrator of the
machine, check that the User’s Guide is the security-compatible version and
explain to the Administrator that it is security-compatible.
2. After this machine is installed, refer to the Service Manual and perform the fol-
lowing steps.
Check that the Firmware version (MSC) indicated in the Service Manual
matches the values shown in the Firmware Version screen.
If there is a mismatch in the Firmware version number, explain to the Admin-
istrator of the machine that upgrading of the Firmware is necessary and per-
form upgrading of the Firmware.
Set the Service Code.
Check that CS Remote Care is set to disabled (RAM Clear).
3. After this machine is installed, refer to this User’s Guide and perform the fol-
lowing steps.
Check that the Administrator Code (Administrator Password) has been set by
the Administrator of the machine.
Check that the self-signed certificate for SSL communications has been reg-
istered by the Administrator of the machine. (PageScope Web Connection
cannot be used if the self-signed certificate is yet to be registered.)
If the optional Hard Disk HD-504 and Security Kit SC-504 are mounted, check
that the HDD Lock Password or Encryption Key, or both, have been registered
by the Administrator of the machine.
Let the Administrator of the machine set Enhance Security function to [ON].
The language, in which the contents of the User’s Guide Security Operations
have been evaluated, is English.
Explain the way how to get the manual in the language, in which it is evaluat-
ed.
Explain to the administrator that the settings for the security functions for this
machine have been specified.

Security 1
362/282/222 1-5
Security Chapter 1
When the above steps have been properly carried out, the Service Engineer
should make a copy of this page and give the original of this page to the Ad-
ministrator of the machine. The copy should be kept at the corresponding
Service Representative for filing.
Product Name Company Name User Division Name Person in charge
Customer
Service Representative -

1Security
1-6 362/282/222
Security Chapter 1
1.2 Security Functions
Setting the Enhance Security function to [ON] will validate the security func-
tion of this machine. For details of the settings of different security functions
to be changed by turning [ON] the Enhance Security function, see “Enhanc-
ing the Security Function” on page 2-8.
Setting the Enhance Security function to [ON] will enhance the authentication
function. Access control is then provided through password authentication
for any access to the Admin. Management mode, User Box, a User Box data
file, and a Secure Print file. Access is thereby granted only to the authenti-
cated user.
A password that can be set must meet the requirements of the Password
Rules. The machine does not accept setting of an easily decipherable pass-
word. For details of the Password Rules, see “Password Rules” on
page 1-11.
If a wrong password is entered three times during the password authentica-
tion procedure, the machine determines that it is unauthorized access
through the failed access penalty function, prohibiting any further entry of the
password. By prohibiting the password entry operation, the machine pre-
vents unauthorized use or removal of data, thereby ensuring secured used
of the machine.
To cancel the password entry operation prohibited condition, the Adminis-
trator must perform the Unlock. When the Administrator performs the Unlock
for the operation prohibited condition, a sound operation control in utmost
security is achieved under the control of the Administrator.
If the optional Hard Disk HD-504 is mounted, the HDD Lock Password set-
ting provides the following security function. That is, even if the HDD is ille-
gally and secretly replaced with another, the HDD authentication function
prohibits access to the HDD, when the HDD Lock Password is yet to be set
or there is a mismatch in the passwords. In addition, should the HDD be re-
moved unawares, the HDD Lock Password locks the HDD protecting data
contained in the HDD. Furthermore, by mounting the optional Security Kit
SC-504 and setting the Encryption Key, the data stored in the HDD is en-
crypted, thereby protecting the data in the HDD. Note, however, that the
HDD Lock Password and Encryption Key do not prevent the HDD from being
physically removed. Make sure of a good operation control.
When the machine is to be discarded, or use of a leased machine is termi-
nated at the end of the leasing contract, the Overwrite All Data function over-
writes and erases all data stored in all spaces of the HDD. The function also
resets all passwords saved in the NVRAM to factory settings, preventing leak
of data. For details of items to be cleared by Overwrite All Data function, see
“Overwrite All Data Function” on page 2-45.

Security 1
362/282/222 1-7
Security Chapter 1
1.2.1 Check Count Clear Conditions
The following are the conditions for clearing or resetting the check count of
the number of wrong entries at the time of authentication by the Enhance Se-
curity function.
<Admin. Management mode>
-Authentication of Admin. Management mode is successful.
-Authentication for executing the Administrator Code (Administrator Pass-
word) Input function is successful.
-The machine is restarted.
<Secure Print>
-Authentication of Secure Print is successful.
-Unlock function is executed.
<User Box>
-Unlock function is executed.
-Authentication for execution of change of User Box Number, User Box
Name, and User Box Password is successful.
-Authentication of User Box is successful.
-Authentication for acquiring scan data files is successful.
-The machine is restarted.

1Security
1-8 362/282/222
Security Chapter 1
1.3 Data to be Protected
The underlying concept of this machine toward security is “to protect data
that can be disclosed against the intention of users.”
The following types of image files that have been stored in the machine and
made available for use by its users are protected while the machine is being
used.
-Image files stored by Secure Print
-Image files stored in User Box (except for Public User Box)
The following types of data stored in the HDD are protected when use of a
leased machine is terminated at the end of the leasing contract, the machine
is to be discarded, or when the HDD is stolen.
-User Box files
(including those saved in the Public User Box)
-Swap data files
– Generated in a copy, PC print, or Secure Print Document that is too large
in size to fit in the RAM space
-Overlay image files
– Background image files
– A copy can be made with this image file to be registered set in the back-
ground
-HDD stored image files
– Files stored in the HDD from copy and PC print and printed through op-
erations from the control panel
-Remaining image files
– Files that are not erased through ordinary file deleting operations and are
left in the data space
-Destination recipient data files
– Files including e-mail addresses and telephone numbers

Security 1
362/282/222 1-9
Security Chapter 1
1.4 Precautions for Operation Control
This machine and the data handled by this machine should be used in an of-
fice environment that meets the following conditions.
Roles and Requirements of the Administrator
The Administrator should take full responsibility for controlling the machine,
thereby ensuring that no improper operations are performed.
<To Achieve Effective Security>
-A person who is capable of taking full responsibility for controlling the
machine should be appointed as the Administrator to make sure that no
improper operations are performed.
Password Usage Requirements
The Administrator must control the Administrator Code (Administrator Pass-
word), HDD Lock Password, and Encryption Key appropriately so that they
may not be leaked. These passwords should not be ones that can be easily
guessed. The user, on the other hand, should control the User Box Password
and Secure Print Password appropriately so that they may not be leaked.
Again, these passwords should not be ones that can be easily guessed. For
the User Box shared among a number of users, the User Box Password
should be appropriately controlled so that it may not be leaked to anyone
who is not the user of the User Box.
<To Achieve Effective Security>
-Make absolutely sure that only the Administrator knows the Administrator
Code (Administrator Password), HDD Lock Password, and Encryption
Key.
-The Administrator must change the Administrator Code (Administrator
Password), HDD Lock Password, and Encryption Key at regular intervals.
-The Administrator should make sure that any number that can easily be
guessed from birthdays, employee identification numbers, and the like is
not set for the Administrator Code (Administrator Password), HDD Lock
Password, and Encryption Key.
-If a User Box Password has been changed, the Administrator should
have the corresponding user change the User Box Password as soon as
possible.
-If the Administrator Code (Administrator Password) has been changed by
the Service Engineer, the Administrator should change the Administrator
Code (Administrator Password) as soon as possible.
-The Administrator should have users ensure that the Secure Print Pass-
word is known only by the user concerned.
-The Administrator should make sure that only the users who share a User
Box know the User Box Password set for it.
-The Administrator should have users change the User Box Passwords
set for User Boxes at regular intervals.

1Security
1-10 362/282/222
Security Chapter 1
-The Administrator should make sure that any user does not set any num-
ber that can easily be guessed from birthdays, employee identification
numbers, and the like for passwords set for Secure Print and User Box.
Network Connection Requirements for the Machine
Packets being transmitted over the LAN installed in the office, in which the
machine is installed, should be protected from unauthorized manipulation. If
the LAN is to be connected to an outside network, no unauthorized attempt
to establish connection from the external network should be permitted.
<To Achieve Effective Security>
-If the LAN, in which the machine is installed, is connected to an outside
network, install a firewall or similar network device to block any access to
the machine from the outside network and make the necessary settings.
-Configure the LAN installed in the office, in which the machine is installed,
by using a switching hub and other devices to ensure that the packets are
protected from unauthorized manipulation.
Security function operation setting operating requirements
The Administrator should make sure of correct operation control so that the
machine is used with the Enhance Security function set to [ON].
Operation and control of the machine
The Administrator of the machine should perform the following operation
control.
-The Administrator of the machine should log off from the Admin. Man-
agement mode whenever the operation in the Admin. Management mode
is completed.
-The Administrator should have users make it a rule to return to the Basic
screen whenever the operation for the Secure Print file and User Box file
have been completed.
Machine Maintenance Control
The Administrator of the machine should perform the following maintenance
control activities.
-Provide adequate control over the machine to ensure that only the Ser-
vice Engineer is able to perform physical service operations on the ma-
chine.
-Provide adequate control over the machine to ensure that any physical
service operations performed on the machine by the Service Engineer are
overseen by the Administrator of the machine.

Security 1
362/282/222 1-11
Security Chapter 1
1.5 Miscellaneous
Password Rules
According to certain Password Rules, registration of a password consisting
of a string of a single character or change of a password to one consisting of
a string of a single character is rejected for the Administrator Code (Admin-
istrator Password), User Box Password, Secure Print Password, HDD Lock
Password, and Encryption Key.
Study the following table for more details of the number of digits and char-
acters that can be used for each password.
Precautions for Use of Various Types of Applications
When PageScope Web Connection or an application of various other types
is used, the password control function of the application stores the password
that has been entered in your PC. If you want the password not stored, dis-
able the password control function of the application.
The Administrator of the machine should explain to users the following pre-
cautions and make sure that they follow these precautions. That is, when us-
ing the PageScope Web Connection or an application of various other types,
the user should use one that shows “*” or “●” for the password entered.
Types of passwords No. of digits Characters
Administrator Code (Ad-
ministrator Password)
8 digits • Numeric characters: 0 to 9
Selectable from among a total of 10 characters
User Box Password • Numeric characters: 0 to 9
• Alpha characters: upper and lower case let-
ters
• Symbols: !, #, $, %, &, ', (, ), *, ,, -, ., /, :, ;, <,
=, >, ?, @, [, \, ], _, `, {, |, }, ~, SPACE
Selectable from among a total of 92 characters
Secure Print Password
HDD Lock Password 20 digits • Numeric characters: 0 to 9
• Alpha characters: upper and lower case let-
ters
• Symbols: !, #, $, %, &, ', *, +, -, ., /, =, ?, @, _,
`, {, |, }, ~
Selectable from among a total of 82 characters
Encryption Key

1Security
1-12 362/282/222
Security Chapter 1

2
Administrator Operations Chapter 2
Administrator Operations

2Administrator Operations
2-2 362/282/222
Administrator Operations Chapter 2
2 Administrator Operations
2.1 Accessing the Admin. Management Mode
This machine implements authentication of the user of the Admin. Manage-
ment mode function through the 8-digit Administrator Code (Administrator
Password) that verifies the identity as the Administrator of the person who
accesses the function. During the authentication procedure, the Administra-
tor Code (Administrator Password) entered for the authentication purpose
appears as “*” or “●” on the display.
When the Enhance Security function is set to [ON], the number of times in
which authentication fails is counted.
2.1.1 Accessing the Admin. Management mode
2
Note
Never forget the Administrator Code (Administrator Password). If the Ad-
ministrator Code (Administrator Password) is forgotten with the Enhance
Security function set to [ON], it becomes impossible to set the Adminis-
trator Code (Administrator Password) again. Contact your Service Rep-
resentative.
Make sure that none of the general users of the machine will know the
Administrator Code (Administrator Password).
If the Administrator Code (Administrator Password) is forgotten, it must
be set again by the Service Engineer. Contact your Service Representa-
tive.
Do not leave the machine with the Admin. Management mode setting
screen left shown on the display. If it is absolutely necessary to leave the
machine, be sure first to log off from the Admin. Management mode.

Administrator Operations 2
362/282/222 2-3
Administrator Operations Chapter 2
2
Reminder
If another Administrator has already logged on to the Admin. Manage-
ment mode using PageScope Web Connection and you attempt to ac-
cess the Admin. Management mode from the control panel, a message
appears that tells something to the effect that all operations are currently
disabled due to registration being made over the network. Wait until the
message disappears before attempting once again to access the Admin.
Management mode.
<From the Control Panel>
1Press the [Utility/Counter] key.
2Touch [Admin. Manage-
ment].
?Is it possible to gain
access to the Admin.
Management mode
while a job is being
executed?
%The machine does
not accept access to
the Admin. Manage-
ment mode while a
job is being executed. Wait until the execution of the job is complet-
ed before attempting to access the Admin. Management mode
again.
3Enter the 8-digit Admin-
istrator Code (Adminis-
trator Password) from
the keypad.
– Press the [C] key to
clear all characters.
– Touch [Cancel] to go
back to the screen
shown in step 2.