Konica Minolta bizhub C236DN User manual

This Service Manual (Ver. 1.01) describes
bizhub C368/bizhub C308/bizhub C258/bizhub C236DN/
bizhub C230DN/bizhub C225DN/ineo+ 368/ineo+ 308/ineo+ 258
(Version: G00-83)
SERVICE MANUAL SECURITY FUNCTION
C368/C308/C258
2016. 5
Ver. 1.01

Security Function Ver. 1.01 May 2016
i
CONTENTS
Security function
1. Overview ................................................................................................................. 1
2. Compliance with the ISO15408 standard ................................................................ 1
3. Installation of the machine and steps to be performed before operation.................1
3.1 Unpacking and setting up the machine................................................................. 1
3.1.1 Removing the machine ................................................................................. 1
3.1.2 Removing protective tape, packing and other shipping materials .................1
3.1.3 Installing the toner cartridge..........................................................................2
3.1.4 Installing other options ..................................................................................2
3.1.5 Mounting the accessory parts ....................................................................... 2
3.1.6 Connecting the power cord ........................................................................... 2
3.1.7 Starting the machine ..................................................................................... 2
3.1.8 Make the necessary settings.........................................................................2
3.1.9 Performing Non-Image Area Erase Check....................................................3
3.1.10 Configuring other options .............................................................................. 3
3.1.11 Connecting the network cable....................................................................... 3
3.1.12 Network setting ............................................................................................. 3
3.1.13 Restarting the machine ................................................................................. 3
3.1.14 Adjusting each option .................................................................................... 4
3.1.15 Affixing the paper size label .......................................................................... 4
3.1.16 Installing the user’s guide holder................................................................... 4
3.1.17 Affixing the panel sheet................................................................................. 4
3.1.18 Checking for parts mounted on the machine ................................................ 5
3.1.19 Switch setting for secured start .....................................................................5
3.1.20 Setting for Custom Function Pattern Selection .............................................5
4. Precautions for operation control.............................................................................6
5. Checking the firmware version number ................................................................... 8
5.1 Security authentication firmware version number................................................. 8
6. Accessing the Service Mode ................................................................................... 8
6.1 Access method to the Service Mode ....................................................................8
6.2 Access lock of Service Mode.............................................................................. 10
6.2.1 Access lock release procedure ................................................................... 10
7. Enhancing the security function ............................................................................ 11
7.1 Details of settings ...............................................................................................11
7.2 Security enhancing procedure ............................................................................ 12
7.2.1 Making and checking the service settings................................................... 12

Security Function Ver. 1.01 May 2016
ii
7.2.2 Requests to the administrator ..................................................................... 16
7.2.3 Functions disabled by the setting of Enhanced Security Mode...................16
7.2.4 Functions whose settings are changed by Enhanced Security Mode .........17
8. Service Mode functions ......................................................................................... 20
8.1 Firmware Version ................................................................................................ 20
8.1.1 Checking the firmware version number....................................................... 20
8.2 CE Authentication function.................................................................................. 21
8.2.1 Setting the CE Authentication function........................................................ 21
8.3 Administrator Password function......................................................................... 22
8.3.1 Setting the administrator password ............................................................. 22
8.4 CE Password function......................................................................................... 24
8.4.1 Setting the CE password............................................................................. 24
8.5 Initialization function ........................................................................................... 27
8.5.1 Initialize method .......................................................................................... 29
8.6 HDD Format........................................................................................................ 30
8.6.1 HDD format execution procedure................................................................ 31
8.7 HDD installation setting ...................................................................................... 32
8.7.1 HDD installation setting procedure..............................................................32
8.8 Operation ban release time setting ..................................................................... 33
8.8.1 Operation ban release time setting procedure ............................................ 33
8.9 Administrator Unlocking function ........................................................................ 34
8.9.1 Administrator Unlocking function procedure................................................ 34
9. Overwrite All Data function.................................................................................... 35
9.1 Overwrite All Data procedure.............................................................................. 35
9.2 Items to be cleared by Overwrite All Data........................................................... 35
9.2.1 Items cleared by Overwrite All Data ............................................................ 35
10. Firmware rewriting................................................................................................. 37
10.1 Outline ................................................................................................................ 37
10.2 USB memory ...................................................................................................... 37
10.2.1 Preparation.................................................................................................. 37
10.2.2 Procedure.................................................................................................... 37
10.2.3 Action when data transfer fails .................................................................... 40
10.2.4 Entering the machine type information........................................................ 41
11. FAX function .......................................................................................................... 43
11.1 Installing/setting procedure of the FAX kit........................................................... 43
11.1.1 Install procedure.......................................................................................... 43
11.1.2 Routing of the modular cable ...................................................................... 43
11.1.3 Affixing the labels ........................................................................................ 44
11.1.4 Setting procedure <Setting the FAX (circuit 1)> ..........................................45

Security Function Ver. 1.01 May 2016
iii
11.1.5 Setting procedure <Setting the FAX (circuit 2)> ..........................................46

Security Function Ver. 1.01 May 2016 1. Overview
1
1. Overview
This Service Manual contains the essential operating procedures and precautions for using
the security functions.
2. Compliance with the ISO15408 standard
This machine has an enhanced security function: Set the Enhanced Security Mode, in
Administrator Settings, to [ON].
This machine offers the security functions that comply with the ISO/IEC15408 (level: EAL2)
and U.S. Government Approved Protection Profile - U.S. Government Protection Profile for
Hardcopy Devices Version 1.0 (IEEE Std 2600.2TM-2009).
3. Installation of the machine and steps to be performed
before operation
The service engineer should first perform the following steps before setting the machine for
the Enhanced Security Mode.
The ISO15408 evaluation for this machine assumes that the hard disk is installed in the
machine. Thus, make sure that the hard disk has been installed.
3.1 Unpacking and setting up the machine
• Be sure to correctly follow the procedures in order as explained in this Manual. If
you do not follow the procedure in order, the image trouble may occur.
• If any part requires replacement due to a machine trouble, perform the relevant
replacement procedure appropriately.
3.1.1 Removing the machine
1. Make sure that the machine package has not been previously unpacked.
2. Take the main body and the Paper Feed Cabinet (or the Desk) out from its packaging.
3. Remove the machine, holding it by the handles on the right and left sides and keeping it
level.
Machine mass: approx. 85 kg/187-3/8 lb
• Make available collective manpower of an appropriate size for transporting the machine.
• When holding the transportation handles, be careful not to catch your fingers in the
machine.
3.1.2 Removing protective tape, packing and other shipping materials
1. Remove the protective tape and the protective materials.

2
3. Installation of the machine and steps to be
performed before operationSecurity Function Ver. 1.01 May 2016
3.1.3 Installing the toner cartridge
Since a toner cartridge is not supplied with the machine, purchase one separately.
1. Shake the toner cartridge up and down and left to right 5 to 10 times respectively.
Shake the cartridge adequately. Otherwise, it may cause trouble.
2. Insert the toner cartridge into the machine. Make sure that the color is same between
inserting port and the toner cartridge. Make sure that the blue label position of the toner
cartridge is matched with the one of the machine side.
3. Push the toner cartridge all the way in and rotate it clockwise to lock it. Make sure that
the toner cartridge is pushed all the way in.
4. Close the front door.
3.1.4 Installing other options
See the “Installation procedures” of the installation manual for each option.
3.1.5 Mounting the accessory parts
1. Set the stylus pen.
2. Attach the supplied cord clamp to the scanner rear cover of the machine. (One supplied
screw)
This may not be performed depending on the applicable marketing area.
3. Attach the supplied connector cover to the machine. (One supplied screw)
4. Attach the supplied duct cover.
3.1.6 Connecting the power cord
1. Connect the power cord. This may not be performed depending on the applicable mar-
keting area.
2. Fit the supplied cord clamp over the power cord. (One supplied screw)
This may not be performed depending on the applicable marketing area.
3. Plug the power cord into the power outlet.
3.1.7 Starting the machine
1. Open the front door and turn ON the power switch, then close the front door.
3.1.8 Make the necessary settings
• Date & Time Setting/Time Zone Setting ([Service Mode] [Date & Time Setting/Time
Zone Setting screen (To display the Date & Time Setting/Time Zone Setting screen,
press Stop 3on the control panel)])
• Serial number input ([Service Mode] [System 1] [Serial Number])
• Unit change ([Service Mode] [System 2] [Unit Change])

3
3. Installation of the machine and steps to be
performed before operationSecurity Function Ver. 1.01 May 2016
3.1.9 Performing Non-Image Area Erase Check
Perform the below at the site where customer uses the machine.
1. Touch these keys in this order: [Service Mode] [Machine] [Non-Image Area Erase
Check].
Open fully original options if loaded.
• Do NOT place a document on the document glass.
• Clean the document glass if dirty.
2. Press the Start key.
3. Make sure that “Result” is “OK”. If “Result” is “NG1” or “NG2”, review the place and
direction of installation, or take measures to block the light source (by covering it, etc.),
then perform installation checking again. If a fluorescent light or other bright light
sources exist right above the machine, the light source can hinder installation checking
and cause operation errors in the Non-Image Area Erase Check.
4. Touch “OK.”
3.1.10 Configuring other options
1. See the “Configuration procedures” of the installation manual for each option.
3.1.11 Connecting the network cable
1. Connect the main body and networking equipment (HUB) using the network cable. The
following shows the recommended network cables that correspond to each communi-
cation speed.
• 10BaseT/100BaseTX: Category5
• 1000BaseT: Category5E, Category6
2. Check LEDs for lighting conditions.
• LED1: Should light up steadily if the link network connection has been made.
• LED2: Should blink according to the communications status of the ACT network.
3. Route the network cable.
3.1.12 Network setting
Make the TCP/IP address setting for the network. Consult the network administrator for the
setting value to be entered and make settings as required.
1. Touch these keys in this order: [Utility] [Administrator Settings] [Network Settings]
[TCP/IP Settings] [IPv4 Settings].
2. Touch “Manual Input” of IP Application Method and make the following settings.
IP Address: IP address of the controller
Subnet Mask: Subnet mask of the network, to which the machine is connected
Default Gateway: IP address of the default gateway
3. Touch “OK.”
4. Touch “OK” after the “TCP/IP Settings” screen is displayed.
5. Select the function to be used as follows: [Forward] [Forward] [Detail Settings] 
[PING Confirmation], and make the operation check of TCP/IP.
3.1.13 Restarting the machine
1. Open the front door and turn OFF the power switch.
2. Turn ON the power switch again after 10 or more seconds have passed, then close the
front door.

4
3. Installation of the machine and steps to be
performed before operationSecurity Function Ver. 1.01 May 2016
3.1.14 Adjusting each option
1. See the “Adjustment procedures” of the installation manual for each option.
After completing all the steps, take a sample copy in color mode, and confirm the
image. If image troubles occur, first turn OFF and ON the Main Power Switch, and
then redo the steps from “Date & Time Setting/Time Zone Setting” to “Unit change.”
3.1.15 Affixing the paper size label
1. Affix the paper size labels that correspond to the sizes of paper used in each tray.
3.1.16 Installing the user’s guide holder
1. Install the user’s guide holder.
3.1.17 Affixing the panel sheet
1. Affix the supplied panel sheet to the surface of the operation panel. The panel sheet is
affixed on customer request. The panel sheet must be kept by the customer.

5
3. Installation of the machine and steps to be
performed before operationSecurity Function Ver. 1.01 May 2016
3.1.18 Checking for parts mounted on the machine
1. Check that the part numbers of the MFP board and the eMMC board are as specified
below.
<MFP board>
• A7PUH020-05
<eMMC board>
• A7AHH02D-00
A part number is a 10-digit number consisting of A (8 digits) and B (2 digits) as in the por-
tions encircled in red below.
3.1.19 Switch setting for secured start
1. Open the rear cover of the machine and place switch 1 of "SW1" on the MFP board in
the ON position.
3.1.20 Setting for Custom Function Pattern Selection
1. Copy the Custom Function Pattern Selection setting file (XXX_v1.0_ISO15408.cpd) to
the route directory of a USB memory.
2. Connect the USB memory to the USB port of the MFP.
3. Call the service mode to the screen.
4. Touch [System 2][Custom Pattern].
5. Select [Custom Pattern 1], [Custom Pattern 2], or [Custom Pattern 3].
6. Select [Import] and press the start key to import the data.
7. Select functions as follows: [Administrator Settings][System Settings][Custom
Display Settings][Custom Function Pattern Selection][Send/Save]. Then, select
the registered custom pattern ([ISO15408]).
* XXX in the cpd file and the Custom Pattern denotes the product name that represents the
series.
A7PUS1E024DA
A
B
XXXXXXXX-XX
A (8digits) B (2 digits)

Security Function Ver. 1.01 May 2016 4. Precautions for operation control
6
4. Precautions for operation control
A. Requirements of the service engineer
The service engineer should take full responsibility for controlling the machine during his or
her procedures for setting up and servicing the machine so that no improper operations are
performed.
<To achieve effective security>
• The service engineer who sets up and services the machine should have completed the
course in security and be certified accordingly.
• The service engineer should swear that he or she would never disclose information as it
relates to the settings of this machine to anybody in accordance with the Installation
Checklist contained in User’s Guide [Security Operations].
• The service engineer should perform his or her physical service jobs in the presence of
the administrator of the machine.
B. Protection of setting data in Service Mode
The CE password used to access Service Mode must be adequately controlled by the ser-
vice engineer concerned to ensure that it is not leaked. Make sure that any password that
could be easily guessed by a third person is not used as the CE password.
<To achieve effective security>
The CE password should:
• Not be one that is easily guessed by third persons.
• Not be known by any third person.
• Be changed at regular intervals.
• Be set again quickly if one has been initialized.
C. Machine maintenance control
When the service engineer performs maintenance service jobs for the machine, he or she
should check the firmware version (MFP Card Version), and make sure that the system has
not been altered.
The service engineer should take the following precautions when the user is to purchase an
additional option.
• For an option that requires that Enhanced Security Mode be turned “OFF” before the
option can be used on the machine, notify the user that the mounting of the option makes
the machine not guaranteed by the ISO15408 certification.
• Applications subject to the ISO15408 security evaluation and certification are described
in User’s Guide Security Operations. If any application (including options) not described
in the User’s Guide is to be used, notify the user that the use of the application is not
guaranteed by the ISO15408 certification.
• Do not configure CS Remote Care settings using modem.
When the Enhanced Security Mode is set to [OFF], make various settings according to the
installation checklist and then have the administrator set the Enhanced Security Mode to
[ON] again.
D. Miscellaneous
The service engineer should explain to the administrator of the machine that the lan-
guages, in which the contents of the User’s Guide [Security Operations] have been evalu-
ated, are Japanese and English. He or she should also explain the way how to get the
manual in the language, in which it is evaluated.

Security Function Ver. 1.01 May 2016 4. Precautions for operation control
7
In addition, the service engineer should promptly provide the version of the User’s Guide
that has been evaluated for the user whenever the user needs one.
The following lists the manuals compatible with bizhub C368/bizhub C308/bizhub C258/
bizhub C236DN/bizhub C230DN/bizhub C225DN/ineo+ 368/ineo+ 308/ineo+ 258 (Version:
G00-83).
• bizhub C368/C308/C258 User’s Guide Ver. 1.00 A7PU-9580BA-00
• bizhub C368/C308/C258 User’s Guide Security Operations 2016. 5 Ver. 1.01
• bizhub C368/C308/C258 SERVICE MANUAL SECURITY FUNCTION 2016. 5 Ver. 1.01
• bizhub C368/C308/C258 SERVICE MANUAL Ver. 1.00: 2016/01/19

Security Function Ver. 1.01 May 2016 5. Checking the firmware version number
8
5. Checking the firmware version number
• Confirm the need to enhance or not to enhance the security function with the administra-
tor of this machine: If administrator wants to enhance, check the firmware version (MFP
Card Version).
• If the firmware version number of this machine is different from numbers shown in the list
below, it will be necessary to re-write to the firmware version corresponding to security.
Refer to P.37 for the method of how to re-write the firmware.
5.1 Security authentication firmware version number
Refer to P.20 for the method of checking the firmware version.
6. Accessing the Service Mode
6.1 Access method to the Service Mode
1. Press Menu.
2. Touch [Counter].
3. Touch [Display Keypad].
4. Press the following keys in this order:
Stop00 Stop 0 1
5. Enter the CE password.
NOTE
• Authentication using the CE password is carried out only if “ON” is set for
[CE Authentication] as accessed through [Service Mode] [Enhanced Security].
NOTE
• The CE password entered is displayed as “✱.”
• NEVER forget the CE password. When forgetting the CE password, call responsi-
ble person of KONICA MINOLTA (hereafter called KM).
MFP Card Version
bizhub C368/C308/C258 A7PU0Y0-F000-G00-83
A7PUS1E001DA

Security Function Ver. 1.01 May 2016 6. Accessing the Service Mode
9
• If a wrong CE password has been entered, no further entry can be made for 5 sec.
Wait, therefore, for at least 5 sec. before attempting to enter the correct CE pass-
word.
• Each time a wrong CE password is entered, the CE password illegal access count
is incremented by one.
When the access to the Service Mode has been successful with the correct CE
password entered, the CE password illegal access count is cleared and reset to 0.
• When “ON” is set for Enhanced Security Mode, access to the Service Mode
through the CE password is restricted by the number of times (1 to 3) set for Pro-
hibited Functions When Authentication Error.
If the CE password illegal access count exceeds the set number of times, the
machine is then set into an access lock state. Then, access to the Service Mode
cannot be made until the access lock state is released.
For the procedure to release the access lock state, see P.10.
• To go from the CE password screen to another, enter the CE password and call the
Service Mode menu to the screen. Then, quit the Service Mode. You can also exit
from the CE password screen by turning OFF and ON the power key; however, be
careful that any jobs entered will be cleared at this time.
6. The Service Mode screen will appear.
NOTE
• If you leave the site with the Service Mode setting screen being displayed, unau-
thorized changes could occur for any set values. When you finish the setting of
Service Mode, or if you have to leave the site by necessity when the Service Mode
has been set, be sure to touch [Exit] to the basic screen.
A7PUS1E002DA

Security Function Ver. 1.01 May 2016 6. Accessing the Service Mode
10
6.2 Access lock of Service Mode
• Use the following procedure to release the access lock state of the Service Mode.
Releasing the access lock state will also clear the illegal access count reached in CE
authentication.
6.2.1 Access lock release procedure
1. Turn off the main power switch and turn it on again more than 10 seconds after.
2. Press Menu.
3. Touch [Counter].
4. Touch [Print List].
5. Touch [Display Keypad].
6. Press the following keys in this order:
Stop09 3 1 7
(Performing this step will start the access lock release timer.)
7. Once started, the access lock release timer measures time intervals.
The access lock state is released when the period of time set through [Service Mode]
[Enhanced Security] [Operation Ban release time] elapses.
See P.33
A7PUS1E003DA

Security Function Ver. 1.01 May 2016 7. Enhancing the security function
11
7. Enhancing the security function
• Perform the Enhanced Security Mode procedures while making checks of installation
checklist in User’s Guide [Security Operations].
• To make the Enhanced Security Mode, service settings must first be made. Make the
necessary service settings and check that they have been correctly made.
7.1 Details of settings
NOTE
• If any one of the above functions is not set properly, the machine does not allow
the Enhanced Security setting to be made.
• The CE password must be set to any value other than the default one.
• If fax functions are to be used, check that the fax kit has been mounted and set up
properly.
See P.43
• In addition to setting the Enhanced Security Mode, the service engineer disables
the following functions and operates and manages the machine under a condition
in which those functions are disabled.
Item Setting/Check Default Setting
CE Authentication Check the setting of [ON] [ON]
CE Password Set arbitrarily. 9272927292729272
Image Controller Setting Check the setting of [Controller 0]. [Controller 0]
HDD installation setting Check the setting of [Installed]. [Installed]
Management Function Choice Check the setting of [Unset]. [Unset]
Item Setting
IP Address Fax Using [Service Mode] [System 2] [Network Fax Settings],
set [IP Address Fax] to [OFF].
Internet Fax Using [Service Mode] [System 2] [Network Fax Settings],
set [Internet Fax] to [OFF].
Print Function via USB Port
Select [Bit Assignment: 3] or [HEX Assignment: 08] for [Service
Mode] [System2] [Software Switch Setting] [Switch No.:
70]. (To restrict use of the print function via a USB port.

Security Function Ver. 1.01 May 2016 7. Enhancing the security function
12
7.2 Security enhancing procedure
7.2.1 Making and checking the service settings
1. Call the Service Mode to the screen.
See P.8
2. Press the following keys in this order to display the Enhanced Security screen:
Stop0Clear
3. Touch [CE Authentication].
4. Check that [ON] is selected.
5. Touch [END] and [CE Password].
A7PUS1E004DA
A7PUS1E005DA

Security Function Ver. 1.01 May 2016 7. Enhancing the security function
13
6. The default setting is “9272927292729272.” Using the keyboard shown on the display,
enter “9272927292729272” in Current Password and touch [END].
7. From the keyboard shown on the display, enter a new password and touch [END].
NOTE
• Be sure to change the CE password.
• If the [Password Rules] is set to “ON,” a password consisting of only the same
character or the same password as that set before the change cannot be set. In
this case, therefore, do not set a password having only the same character or a
same password as that set before the change.
Also, when the number of password characters is lower than the minimum number
of characters (initial value: 12 characters) as set out under [Set Minimum Pass-
word Length] in the [Password Rules], a new password will not be able to be set.
• The CE password should be set at a value which is not the initial value and which
is difficult to guess.
• The CE password can be set with up to 64 characters.
• Exiting from the Service Mode after the new CE password has been set validates
the setting of the new password.
• NEVER forget the CE password. When forgetting the CE password, call responsi-
ble person of KM.
A7PUS1E006DA

Security Function Ver. 1.01 May 2016 7. Enhancing the security function
14
8. Type the new CE password again and touch [END].
9. Touch [System 2].
10. Touch [Image Controller Setting].
11. Check that [Controller 0] is selected.
12. Touch [END] to display the Service Mode screen.
13. Touch [System 2].
A7PUS1E007DA
A7PUS1E008DA

Security Function Ver. 1.01 May 2016 7. Enhancing the security function
15
14. Touch [HDD] and check that [Installed] is selected.
15. Touch [END].
16. Press the Reset key.
17. Press the following keys in this order to display the Billing Setting screen:
Stop9
18. Touch [Management Function Choice].
A7PUS1E009DA
A7PUS1E010DA

Security Function Ver. 1.01 May 2016 7. Enhancing the security function
16
19. Check that [UnSet] is selected and then touch [END].
7.2.2 Requests to the administrator
• When making the Enhance Security setting, the Administrator settings must first be
made. The administrator must perform or check the following settings.
NOTE
• Make sure that the Administrator Password has been changed to one that meets
the requirements of the Password Rules.
• If the administrator of the machine registers a new Encryption Key when the
Enhanced Security is to be made, be sure first to perform [Physical Format] by
accessing [Service Mode] [State Confirmation] [Memory/Storage Adjust-
ment] [Format].
7.2.3 Functions disabled by the setting of Enhanced Security Mode
• Note that setting Enhanced Security Mode to “ON” disables the following functions.
(1) Terminal Debug (forcibly prohibited when Enhanced Security Mode is set to
“ON”)
(2) Print Data Capture (forcibly prohibited when Enhanced Security Mode is set to
“ON”)
(3) In CS Remote Care, the following operation is prohibited.
Rewriting instructions of firmware, communication of the account track counter
information, the setting renewal of the machine, the function of remote counter
management
A7PUS1E011DA
Item Setting/Check Default Setting
Administrator Password Check that the password meets the requirements
of the Password Rules.
1234567812345678
Encryption Key Setting of encryption key. No setting
User Authentication Check that [Authenticate] (External sever type is
“Active Directory” only) is set.
[OFF]
SSL Check that the registration of the self-certificate is
performed to perform SSL communication
No setting
Enhanced Security Mode Set to [ON]. [OFF]