Konica Minolta bizhub PRO 950 Series User manual

Security
User’s Guide
User’s Guide
*9961095000*
*9961095000*
Konica Minolta
Business Solutions Europe GmbH
Europaallee 17
30855 Langenhagen • Germany
Tel.: [phone]
Fax: [phone]
www.konicaminolta.eu
© 2009 Konica Minolta
Business Solutions Europe GmbH
All rights reserved. Printed in Germany.

.

bizhub PRO 950 (Version 2) Contents-1
Contents
1Introduction
1.1 User’s Guide – Security................................................................................................................... 1-3
1.2 Composition of user’s guide .......................................................................................................... 1-4
2 Security functions
2.1 Data protected by Security Strengthen mode.............................................................................. 2-5
3 Protect and delete data after use
4 User authentication in security functions
4.1 Description of user authentication ................................................................................................ 4-3
4.2 To register a new user .................................................................................................................... 4-4
4.3 To change a user data .................................................................................................................... 4-8
4.4 To delete a user ............................................................................................................................. 4-12
4.5 To change password by user....................................................................................................... 4-15
5 HDD store function in Security Strengthen mode
5.1 Store the data in a Box while copying........................................................................................... 5-3
5.2 Store scanned data in a Box .......................................................................................................... 5-6
5.3 Recall/Delete data in a Box .......................................................................................................... 5-10
5.4 Output data in the Secure Box..................................................................................................... 5-14
6 Administrator security functions
6.1 Turn Security Strengthen mode ON/OFF ...................................................................................... 6-3
6.2 HDD lock password ........................................................................................................................ 6-7
6.3 Delete temporary data .................................................................................................................. 6-10
6.4 Delete all data ................................................................................................................................ 6-13
6.5 Print audit log ................................................................................................................................ 6-16
6.6 Analyze audit log ........................................................................................................................... 6-18
6.7 Table of items saved in audit log ................................................................................................. 6-19
7Index

Contents-2 bizhub PRO 950 (Version 2)

1Introduction

bizhub PRO 950 (Version 2) 1-3
Introduction 1
1 Introduction
1.1 User’s Guide – Security
The Control Software version is as follows.
(This software consists of Image control program and Controller control program.)
Image control program (Image Control l1) version:
A0Y50Y0-00I1-G00-10
A0Y50Y0-00I1-G00-20
Controller control program (IC Control P) version:
A0Y5011-00P1-G00-10
A0Y5011-00P1-G00-11
A0Y5011-00P1-G00-20
About the Rom version display function:
The bizhub PRO 950 Control Software (Image control program / Controller control program) version
mentioned above can be confirmed by using the service representative (CE) service mode ROM version
display function.
When you display the ROM version, the Image control program and Controller control program versions will
be displayed as follows.
A0Y50Y0-00I1-G00-**
Image control program (Image Control I1): G00-2 digits (Ex: G00-**)
0Y5011-00P1-G00-**
Controller control program (IC Control P): G00-2 digits (Ex: G00-**)
Please keep this in mind when checking the software version.
ACKNOWLEDGEMENTS
-KONICA MINOLTA, KONICA MINOLTA Logo and the essentials of imaging are registered trademarks
or trademarks of KONICA MINOLTA HOLDINGS, INC.
-bizhub PRO is a registered trademark or trademark of KONICA MINOLTA BUSINESS TECHNOLOGIES,
INC.
-Copyright © 2009 KONICA MINOLTA BUSINESS TECHNOLOGIES, Inc.
EXEMPTION
-No part of this manual may be used or duplicated without permission.
-Manufacturer and Sales Company will have no liability for any influences caused by using the printing
system and this User’s Guide.
-The information written in this UserÕs Guide is subject to change without prior notice.

1Introduction
1-4 bizhub PRO 950 (Version 2)
1.2 Composition of user’s guide
This machine is provided with the following user's guides.
User's Guide - Copier
This guide describes an outline of the machine and copy operations.
Please refer to this guide for safety information, turning on/off the machine, paper supply, dealing with
machine trouble such as paper jam, and copy operation available on the machine.
User's Guide - POD Administrator's Reference
This guide provides you with detailed information about the machine management and how to customize the
machine according to your daily use.
Please refer to this guide for a setup and management of the machine including registration of copy paper,
tray setting, and a network setup.
User's Guide - Network Scanner
This guide describes the operation of the network scanner function equipped for the machine as standard.
Please refer to this guide for full information on reading data or storing data (Scan to HDD, Scan to E-Mail,
Scan to FTP, Scan to SMB).
User's Guide - Security <This book>
This guide describes the security functions.
Please refer to this guide for how to use the Enhanced Security mode, and for detailed machine operation in
Enhanced Security mode.
User's Guide - Printer
This guide describes the operation of the printer function equipped for the machine.
Please refer to this guide for how to use PCL driver, Adobe PS driver and PageScope Web Connection in
user mode.
User's Guide - Printer (PostScript3 Plug-in Driver)
This guide describes the operation of the printer function equipped for the machine.
Please refer to this guide for how to use Plug-in driver in user mode.
To operate safely, be sure to read "Section 2: Precautions for Installation and Use" in User’s Guide - Copier
before using the machine.

2Security functions

bizhub PRO 950 (Version 2) 2-3
Security functions 2
2 Security functions
The bizhub PRO 950 device has two security modes.
Normal mode
Use this mode if the machine is used by a single person and there is a low possibility of illicit access and
operations. This is the default mode when shipped from the factory. To use regular mode, please see the
user’s guide for each individual machine.
Security Strengthen mode
Use this mode if the machine is connected to a local area network, or to external networks through a
telephone line or other means. An Administrator manages the device according to this user’s guide, so that
users can have a safe operating environment.
Your administrator is the only one who can turn the Security Strengthen mode ON and OFF, and make other
changes, and your service representative will designate an administrator.
To turn the Security Strengthen mode ON, the service representative should set a CE authentication
password and Administrator password for the device.
The Security Strengthen mode cannot be turned ON when the Machine NIC is activated. Please contact your
service representative when using the Security Strengthen mode.
Security Strengthen mode is recommended to prevent data from being accessed or tampered with.
Ask your administrator if the Security Strengthen mode is turned ON.
Environments in which Security Strengthen mode is recommended
-The device is connected to an local network, the Internet through a firewall, or the external telephone
line for maintenance.
-The device is monitored by a telephone line or a network.

2Security functions
2-4 bizhub PRO 950 (Version 2)
Creating a secure environment
For security, we recommend that supervisors and an administrator use Security Strengthen mode and
establish an environment as follows.
-Where to set up the device
Set up the device in a place where only designated personnel can operate it. Also, select a place
security locked at night, and available to be monitored by an administrator in the daytime.
-User training
The administrator must provide training and information to users to maintain the security of the device.
Users should keep passwords set up by the administrator, and a password that they set up on their
own in a secure place.
The administrator is supposed to give the instructions for releasing the authentication function to a user
when creating a Box for that user, therefore the user should perform to release the authentication
function when machine operation is completed.
-Qualifications to be an administrator
A supervisor must select a reliable person who has adequate knowledge, technical ability, and
experience as an administrator, to whom to delegate administration of the device.
-Guarantee of service representative (CE)
A supervisor or an administrator can use Security Strengthen mode after confirming that a service
contract was signed with the service representative (CE).
Clearly state in the service contract that the service representative will not engage in any fraudulent
actions.
-Secure LAN
We recommend that you use an apparatus such as WEP code (802.11x) to prevent tapping during
communication when setting up a local area network.
-Protect and delete used data in memory and on the HDD
There are three kinds of image data that will be saved in memory and on the HDD: AHA compressed
data and uncompressed data (TIFF, PDF and PS formats). Memory and HDD areas containing the AHA
compressed data is freed up when data is deleted. However in normal mode data is not completely
deleted so it could be read through illicit means. In the Security functions, data will be completely
cleared before freeing up image areas.
Regardless of the data type (compressed or uncompressed), the image area in memory and on the HDD
where the data has been saved will be freed up after it is completely overwritten by the data unrelated
to the image data.
-Enhanced password
The password is made up of 8 to 64 alphanumerical characters (case sensitive).
If a wrong password is entered, attempts to re-try cannot be made for five seconds.
-Machine NIC setting
When the Security Strengthen mode is ON, the Machine NIC cannot be used.
-Access to the Box with a password
Set up a system that requires users to input an enhanced password as described above, to save data
or to print data saved in the Box on the HDD.
If an enhanced password is set up as above, security will be improved when saving scanned data in
the Box. No one other than the administrator can delete the Box or Personal Folder in which scanned
data is saved, and changing the Box’s attributes requires authentication with the enhanced password.
In addition, authentication will be required to use scanned data saved in the Box.
-External access prohibited
No access is allowed over telephone lines other than CS Remote Care.
-Create, save and analyze an audit log
A history of security function operations will be created and saved. Date and time, information
identifying the person who made the operation, details of the operation, and results of the operation will
be saved, enabling analysis of unauthorized access. This log will be overwritten if the audit area is
depleted.
-Administrator authentication
A service representative will set up an authentication data for an administrator.
The administrator must input a password to gain authorized access. Only one authentication string can
be registered per machine.
-Administrator Setting mode
If the Administrator Setting mode has been entered by successful administrator authentication, the
setting change of various machine functions will be available on the machine.
Be sure to exit the Administrator Setting mode if you leave in front of the machine while using the
Administrator Setting mode.

bizhub PRO 950 (Version 2) 2-5
Security functions 2
2.1 Data protected by Security Strengthen mode
Data protected by Security Strengthen mode (for users) is as follows.
-Data saved in the Personal Folder (with a password)
The following data administered by the administrator will also receive enhanced protection.
-User data
-Data controlling the machine
Data that is not protected in Security Strengthen mode
When the machine is connected to PCs on a local network, passwords input in PCs are not subject to
Security Strengthen mode.
To turn Security Strengthen mode ON/OFF
The administrator can turn Security Strengthen mode ON/OFF.
If Security Strengthen mode is OFF, data can potentially be accessed, so be careful.
If data is accessed in Security Strengthen mode, the administrator may not notice until he/she analyzes the
audit log. Be careful when the administrator is absent for a long time.

2Security functions
2-6 bizhub PRO 950 (Version 2)

3Protect and delete data after
use

bizhub PRO 950 (Version 2) 3-3
Protect and delete data after use 3
3 Protect and delete data after use
Data from each mode (copy / scan / printer) will be temporarily saved in memory or on the HDD, and it will
be deleted unless it is moved to a Box.
Data is compressed using a special method, so it cannot be decompressed externally.
When deleting compressed data, a part of it will be destroyed or overwritten to prevent decompression.
-Data saved temporarily in memory will be overwritten by unavailable data (NA) when the job is
interrupted or ended.
-Data saved in several areas of memory will be overwritten simultaneously.
-Data in the Box will be overwritten when a delete order is issued.
-If data is sent externally, it will be overwritten when the transmission is complete.
-If the administrator issues a delete order for each Box, it will be overwritten.

3Protect and delete data after use
3-4 bizhub PRO 950 (Version 2)

4User authentication in
security functions