Konica Minolta bizhub C650 Series User manual

Hard Disk Drive Security
Enabling bizhub HDD Security Features
bizhub C650/C550/C451
bizhub C353/C253/C203
bizhub 501/421/361
bizhub 751/601

1 Enabling bizhub HDD Security - Overview
This guide is intended to assist the bizhub Multi-Function Printer (MFP) Administrator with the steps and
procedures necessary to ensure that the appropriate HDD Security Features are enabled and functioning.
The process and procedure involved in setting up or enabling the HDD Security Functions of a typical
bizhub MFP are outlined as follows;
The first step in MFP security is changing the default Administrator Password to a secure password,
an AlphaNumeric password is highly recommended (no spaces).
Next, it is very critical that the user not forget any of the passwords created using this guide. Some of
the passwords created in this guide will require a service technician, replacement parts and significant
cost and down time to be corrected.
 If the Administrator Password is forgotten, it must be set again by the Service Engineer. Contact
your Technical Representative.
If the MFP in question is being installed for the first time or has been previously sanitized;
•Enable the Encryption Key Setting. See Section 2
•Enable Overwrite Temporary Data. See Section 3
•Enable HDD Lock Password. See Section 4
•Enable User Box/Secure Box Auto Deletion Settings. See Section 5
•Enable Overwrite All HDD Data – End of Life HDD Sanitization. See Appendix A
If the MFP is currently running and has stored information, addresses, on-touch locations, etc already in
use the following is recommended;
•It is highly recommended to back up the HDD using the Konica Minolta HDD Backup Utility
application. See Appendix B
•Enable the Encryption Key Setting. See Section 2
•Enable Overwrite Temporary Data. See Section 3
•Enable HDD Lock Password. See Section 4
•Enable User Box/Secure Box Auto Deletion Settings. See Section 5
•Enable Overwrite All HDD Data – End of Life HDD Sanitization. See Appendix A
•Re-install the HDD Back copy of the MFP
Important Items to Remember…

Do not leave or walk away from the machine when Administrator Settings screen is open and on the
display. If it is absolutely necessary to leave the machine, be sure first to log off from the Administrator
Settings.
 Do not set any number that can easily be guessed from birthdays, employee identification numbers,
and the like for the Encryption Key/Passwords. Try to change the Encryption Key/Passwords at regular
intervals.
 Make sure that nobody but the Administrator of the machine comes to know the Encryption
Key/Passwords.

2 Enabling the Encryption Key Setting
The supported MFP models in this guide can have the HDD Encryption Kit as an optional accessory.
This accessory must be installed and enabled by a service technician prior to following the steps
outlined in this section. This section will demonstrate the steps necessary to enable or change the
Encryption Key. These settings can be completed by the MFP Administrator a service technician is
not required.
Setting the Encryption Key (Encrypting the HDD)
1 Enter the Administrator Mode on the MFP display, Utility/Counter button > Administrator
Settings > Input Admin Password > Security Settings.
2 Touch [HDD Settings].
3 Touch [HDD Encryption Setting].

4
A confirmation message appears. Select [Yes] and touch [OK].
5 Encryption Key, enter the Encryption Key again in [Encryption
Enter the new 20-digit Encryption Key from the keyboard and keypad.
To prevent entry of a wrong
Passphrase Confirmation].
Key
 To go back to the HDD Settings screen Touch [Cancel].
6 
 at tells that there is a
mismatch in the Encryption Keys. Enter the correct Encryption Key.
7

board Operation Notes:

To clear all characters Press the [C] key.
 To delete the last character entered Touch [Delete].
 To show the upper case/symbol screen Touch [Shift].
Touch [OK], Re-Enter the Encryption Key and Touch [OK].
If the Encryption Key entered does not meet the requirements of the Password Rules, a
ssage appears that tells that the Encryption Key entered cannot be used. E
me nter the
correct Encryption Key. For details of the Password Rules, see Appendix C.
If there is a mismatch in the Encryption Keys, a message appears th
Make d then ON the main power
switch. Now, turn OFF and then turn ON the main power switch.
When the main power switch is turned off, then on again, wait at least 10 seconds to turn it
on after turning it off. if there is no wait period between turning the main power switch off,
sure that a message appears prompting you to turn OFF an
then on again, the machine may not function properly. Here is the sequence, through which
the main power switch and sub power switch are turned on and off:

Turn off the sub power switch > Turn off the main power switch > Tu
switch
> Turn on the sub power switch rn on the main power
8 T
he following screen appears after the machine has been restarted.
de on the MFP display, Utility/Counter button > Administrator Settings
10
9 Enter the Administrator Mo
> Input Admin Password > HDD Encryption Settings.
Touch [HDD Format].

11
A confirmation message appears. Select [Yes] and touch [OK].
12

witch are turned on and off: rn on the main power
Make sure that a message appears prompting you to turn OFF and then ON the main power
switch. Now, turn OFF and then turn ON the main power switch.
When the main power switch is turned off, then on again, wait at least 10 seconds to turn it
on after turning it off. if there is no wait period between turning the main power switch off,
then on again, the machine may not function properly. Here is the sequence, through which
the main power switch and sub power s
Turn off the sub power switch > Turn off the main power switch > Tu
switch
> Turn on the sub power switch

Ch
dit
The Encryption Key can be cancelled or released at any time by the Administrator using the
ase Button.
r
Settings > Input Admin Password > HDD Settings > HDD Encryption Settings.
2 nd keypad.
anging the Encryption Key
 The Encryption Key can be changed or modified at any time by the Administrator using the E
Button.
Rele
1 Enter the Administrator Mode on the MFP display, Utility/Counter button > Administrato
Enter the currently registered 20-digit Encryption Key from the keyboard a
Key
To show the upper case/symbol screen Touch [Shift].
DD Settings screen Touch [Cancel].
3 Sel hat tells that there is a
mismatch in the Encryption Keys. Enter the correct Encryption Key.
o prevent entry of a wrong Encryption Key, enter the Encryption Key again in [Encryption
firmation].
5 Tou
ndix C.
 If there is a mismatch in the Encryption Keys, a message appears that tells that there is a
mismatch in the Encryption Keys. Enter the correct Encryption Key.
board Operation Notes:
 To clear all characters Press the [C] key.
 To delete the last character entered Touch [Delete].

 To go back to the H
ect [Edit] and touch [OK].
 If there is a mismatch in the Encryption Keys, a message appears t
4 Enter the new 20-digit Encryption Key from the keyboard and keypad.
T
Passphrase Con
ch [OK].
the Encryption Key entered does not meet the requirements of the Password Ru
 If les, a
message appears that tells that the Encryption Key entered cannot be used. Enter the
correct Encryption Key. For details of the Password Rules, see Appe

Keyboard Operation Notes:
 To clear all characters Press the [C] key.
 To delete the last character entered Touch [Delete].
 To show the upper case/symbol screen Touch [Shift].
 To go back to the HDD Settings screen Touch [Cancel].
6 Touch [OK], Re-Enter the Encryption Key and Touch [OK].
 If the Encryption Key entered does not meet the requirements of the Password Rules, a
message appears that tells that the Encryption Key entered cannot be used. Enter the
correct Encryption Key. For details of the Password Rules, see Appendix C.
 If there is a mismatch in the Encryption Keys, a message appears that tells that there is a
mismatch in the Encryption Keys. Enter the correct Encryption Key.
7 Make sure that a message appears prompting you to turn OFF and then ON the main power
switch. Now, turn OFF and then turn ON the main power switch.
 When the main power switch is turned off, then on again, wait at least 10 seconds to turn it
on after turning it off. if there is no wait period between turning the main power switch off,
then on again, the machine may not function properly. Here is the sequence, through which
the main power switch and sub power switch are turned on and off:
Turn off the sub power switch > Turn off the main power switch > Turn on the main power
switch
> Turn on the sub power switch
8 The following screen appears after the machine has been restarted.

9 Enter the Administrator Mode on the MFP display, Utility/Counter button > Administrator Settings
> Input Admin Password > HDD Encryption Settings.
10 Touch [HDD Format].
11 A confirmation message appears. Select [Yes] and touch [OK].
12 Make sure that a message appears prompting you to turn OFF and then ON the main power
t
on after turning it off. if there is no wait period between turning the main power switch off,
switch. Now, turn OFF and then turn ON the main power switch.
 When the main power switch is turned off, then on again, wait at least 10 seconds to turn i

then on again, the machine may not function properly. Here is the sequence, through which
the main power switch and sub power switch are turned on and off:
Turn off the sub power switch >
Turn off the main power switch > Turn on the main power
switch
> Turn on the sub power switch

3 Enabling Overwrite Temporary Data
Overwrite Temporary Data should be enabled if the deletion of any latent image data that might be on the
HDD after a print, scan or fax is required.
This feature requires two different settings;
Mode 1 (1x pass) or Mode 2 (3x pass)
Setting Overwrite Method Standards
Mode 1 Overwrite with 0 x 00 NAVSO P-5239-26 (US Navy) DoD 5220.22-M
(Department of Defense)
Mode 2 Overwrite with 0 x 00 AFSSI5020 (US Air Force
OverwritewithOxff
Overwritewiththeletter“A”
(Dx61)Verify
[Encryption Priority] refers to overwriting the data in HDD and the buffered data at the full
strength of the Encryption Key. It is recommended that [Encryption Priority] be selected to
achieve a greater effect of encryption.
 [Overwrite Priority] refers to overwriting the data in HDD and the buffered data at the
strength of the selected overwrite mode (1 or 2)
[Encryption Priority] is the default setting.
NOTE: Encryption and Overwrite Priority will only be available when the Security
Encryption Kit has been installed and enabled.
1 Enter the Administrator Mode on the MFP display, Utility/Counter button > Administrator
ecurity Settings > HDD Settings.
Settings > Input Admin Password > S
2 Touch [Overwrite Temporary Data].

3 Touch [Yes], Touch [Mode 1] or [Mode 2], then touch [Encryption Priority] or [Overwrite Priority].
4 Touch [OK].
5 A confirmation message appears. Select [Yes] and touch [OK].
6 Make sure that a message appears prompting you to turn OFF and then ON the main power
switch. Now, turn OFF and then turn ON the main power switch.
 When the main power switch is turned off, then on again, wait at least 10 seconds to turn it
on after turning it off. if there is no wait period between turning the main power switch off,
then on again, the machine may not function properly. Here is the sequence, through which
the main power switch and sub power switch are turned on and off:
Turn off the sub power switch > Turn off the main power switch > Turn on the main power
switch
> Turn on the sub power switch

4 Enabling HDD Lock Password
The HDD Lock Password function is standard in all bizhub MFP’s. When this function is enabled a
password is applied to the HDD BIOS and prevents intruder access to the hard disk data.
1 Enter the Administrator Mode on the MFP display, Utility button > Administrator Settings > Input
Admin Password > Security Settings > HDD Settings > HDD Settings
2 Enter a 20 character password.
3 Re-enter the 20 character password.
 If the password entered does not meet the requirements of the Password Rules, a message
appears that tells that the password entered cannot be used. Enter the correct password.
For details of the Password Rules, see Appendix C.
 If there is a mismatch in the password, a message appears that tells that there is a
mismatch in the password. Enter the correct password.
4 Turn MFP Off, then On as prompted.
Changing the HDD Lock Password

The HDD Lock Password can be changed or modified at any time by the Administrator using the
Edit Button.
 The HDD Lock Password can be cancelled or released at any time by the Administrator using the
Release Button.
1 Enter the Administrator Mode on the MFP display, Utility/Counter button > Administrator
Settings > Input Admin Password > Security Settings > HDD Settings > HDD Lock Password
2 Enter the currently registered 20-digit password from the keyboard and keypad.
3 Select Edit to change or modify the 20-digit password.
4 Select Release to cancel or release the 20-digit password.
5 Turn MFP Off, then On as prompted.

5 bizhub MFP Box Data Deletion
bizhub Box functions like User Box, Secure Print, Encrypted PDF and ID & Print allow document data to
be saved to the machine's internal hard disk. This data may be stored temporarily for printing or it can be
stored for a period of time for use at a later date. All of the bizhub Box functions have the ability to delete
or auto delete these stored documents.
User Box Document Deletion Settings
During the creation of a User Box the end user has the ability to set the deletion settings for that User
Box. It is highly recommended that he deletion time be set before completing the User Box creation.
 Document deletion settings can be made, as seen above, for as little as 5 minutes through
30 days.
 User Box creation can be completed at the MFP or via PageScope WebConnection
remotely.

Auto Delete Secure Print Documents
1 Enter the Administrator Mode on the MFP display, Utility/Counter button > Administrator
Settings > Input Admin Password > System Settings > User Box Settings > Auto Delete Secure
Documnents.
2 Specify the period from the date/time when a secure document was saved or last retrieved to
the date/time when it is to be deleted automatically.
Reference
- Using the Time button specify 5 minutes to 12 hours (on a 1-minute basis), or select 1 day,
2 days, 3 days, 7 days, or 30 days.
Encrypted PDF Delete Time
1 Enter the Administrator Mode on the MFP display, Utility/Counter button > Administrator
Settings > Input Admin Password > System Settings > User Box Settings > Encrypted PDF
Delete Time.
2 Specify the period from the date/time when a document was saved or last retrieved to the
date/time when it is to be deleted automatically.
Reference
- Using the Time button specify 5 minutes to 12 hours (on a 1-minute basis), or select 1 day,
2 days, 3 days, 7 days, or 30 days.

ID & Print Delete Time
Before an Administrator can set the deletion times for ID & Print the ID & Print function must be
enabled on the MFP. If it is not enabled the user will not see the ID & Print Delete Time button in
Admin Mode.
1 Enter the Administrator Mode on the MFP display, Utility/Counter button > Administrator
Settings > Input Admin Password > System Settings > User Box Settings > ID & Print Delete
Time.
2 Specify the period from the date/time when a document was saved or last retrieved to the
date/time when it is to be deleted automatically.
Reference
- Using the Time button specify 5 minutes to 12 hours (on a 1-minute basis), or select 1 day,
2 days, 3 days, 7 days, or 30 days.
Document Delete Time Setting
This function enables the administrator to specify the period from the date/time when a document was
saved in or retrieved from a User Box to the date/time when it is to be deleted automatically when the
user cannot specify the document deletion time. When automatically specifying the document deletion
time, select [Yes] and select the deletion time.
1 Enter the Administrator Mode on the MFP display, Utility/Counter button > Administrator
Settings > Input Admin Password > System Settings > User Box Settings > Auto Delete Secure
Documnents.
2 Specify the period from the date/time when a document was saved or last retrieved to the
date/time when it is to be deleted automatically.
Reference
- Using the Time button specify 5 minutes to 12 hours (on a 1-minute basis), or select 1 day,
2 days, 3 days, 7 days, or 30 days.

Appendix A Overwrite All Data Function
(HDD Sanitization)
At the ‘End of Life’ or ‘End of Lease’ where the MFP is to be discarded the Overwrite All Data function
overwrites and erases all data stored in all spaces of the HDD. This function also resets all passwords
back to factory default settings, preventing any leakage of data.
The HDD Overwrite Methods include the choice of eight different modes, [Mode 1] through [Mode 8] each
Mode corresponding with a specific Government Standard.
Overwrite All Data takes less than one hour in [Mode 1] at the minimum and approximately 9 hours in
[Mode 8] at the maximum.
Mode Description
Mode 1 Overwrites once with 0x00. Japan Electronic & Information Technology Association Russian Standard (GOST)
Mode 2 Overwrites with random numbers Current National Security Agency (NSA)
random numbers 0x00.
Mode 3 Overwrites with 0x00 0xff National Computer Security Center (NCSC-TG-025)
random numbers US Navy (NAVSO P-5239-26)
verifies. Department of Defense (DoD 5220.22M)
Mode 4 Overwrites with random numbers Army Regulations (AR380-19)
0x00
0xff.
Mode 5 Overwrites with 0x00 Former NSA Standard
0xff
0x00
0xff.
Mode 6 Overwrites with 0x00 NATO Standard
0xff
0x00
0xff
0x00
0xff
random numbers.
Mode 7 Overwrites with 0x00 German Standard (VISTR)
0xff
0x00
0xff
0x00
0xff
0xaa.
Mode 8 Overwrites with 0x00 US Air Force (AFSSI5020)
0xff
0x00
0xff
0x00
0xff
0xaa
verifies.

Setting the Overwrite All Data function
1 Enter the Administrator Mode on the MFP display, Utility button > Administrator Settings > Input
Admin Password > Security Settings > HDD Settings > HDD Settings.
2 Touch [Overwrite All Data].
3 Select the desired mode and touch [Delete].
4 A confirmation message appears. Select [Yes] and touch [OK].

5 Make sure that a message appears prompting you to turn OFF and then ON the main power
switch. Now, turn OFF and then turn ON the main power switch.
 Check that all data has been overwritten and erased properly. Data is not erased properly if an
error occurs during the procedure. For more details, consult the Service Representative.
 When the main power switch is turned off, then on again, wait at least 10 seconds to turn it on
after turning it off. if there is no wait period between turning the main power switch off, then on
again, the machine may not function properly. Here is the sequence, through which the main
power switch and sub power switch are turned on and off:
Turn off the sub power switch >
Turn off the main power switch > Turn on the main power
switch > Turn on the sub power switch
After the main power switch has been turned on, quickly turn it off and give the machine to the
Service Engineer.
If the Overwrite All Data function is executed by mistake, contact the Service Engineer. For
more details, consult the Service Representative.

Appendix B Utilizing the Konica Minolta HDD Back Up Utility
The HDD Backup Utility, which is to be installed in the PC of the Administrator of the machine, is
application software used exclusively for accessing the HDD of an MFP. The HDD Backup Utility functions
performed by the Administrator of the machine allow the image data saved in the HDD of the machine to
be backed up and restored. It is not possible to open and review the backup data file directly.
To gain access to the machine from the HDD Backup Utility, the user must be an Administrator with
knowledge of the Administrator Password. The Administrator Password entered during the authentication
procedure is displayed as "*." When the Enhanced Security mode is set to [ON], the number of times in
which authentication fails is counted.
2.1 Backup
In Backup, neither the Administrator Password nor CE Password is backed up.
1 Start the HDD Backup Utility.
2 Select this machine and click [Backup].
3 Enter the Administrator Password registered in the machine in the "Administrator password" box.
If the "Save the administrator password" check box is selected, the Administrator Password
entered is stored in the PC being used. If you do not want the Administrator Password stored,
clear the "Save the administrator password" check box.