Konica Minolta bizhub PRO 950 Series User manual

bizhub PRO 950
Security
User’s Guide
The Control Software version is as follows.
(This software consists of Image control program and Controller control pro-
gram.)
Image control program (Image Control l1) version:
A0Y50Y0-00I1-G00-10
A0Y50Y0-00I1-G00-20
A0Y50Y0-00I1-G00-21
Controller control program (IC Control P) version:
A0Y5011-00P1-G00-10
A0Y5011-00P1-G00-11
A0Y5011-00P1-G00-20
About the Rom version display function:
The bizhub PRO 950 Control Software (Image control program/ Controller
control program) version mentioned above can be confirmed by using the
service representative (CE) service mode ROM version display function.
When you display the ROM version, the Image control program and Control-
ler control program versions will be displayed as follows.
A0Y50Y0-00I1-G00-**
Image control program (Image Control I1): G00-2 digits (Ex: G00-**)
A0Y5011-00P1-G00-**
Controller control program (IC Control P): G00-2 digits (Ex: G00-**)
Please keep this in mind when checking the software version.

FEDERAL OR STATE STATUTES MAY PROHIBIT THE COPYING OF CER-
TAIN DOCUMENTS OR INFORMATION, RESULTING IN FINES OR IMPRIS-
ONMENT FOR VIOLATORS.
ACKNOWLEDGEMENTS:
-KONICA MINOLTA, KONICA MINOLTA Logo and the essentials of imag-
ing are registered trademarks or trademarks of KONICA MINOLTA
HOLDINGS, INC.
-bizhub PRO is a registered trademark or trademark of KONICA MINOLTA
BUSINESS TECHNOLOGIES, INC.
Copyright © 2009 KONICA MINOLTA BUSINESS TECHNOLOGIES, Inc.
EXEMPTION
-No part of this manual may be used or duplicated without permission.
-Manufacturer and Sales Company will have no liability for any influences
caused by using the printing system and this User’s Guide.
-The information written in this User’s Guide is subject to change without
prior notice.

Composition of User’s Guide
This machine is provided with the following user's guides.
User's Guide - Copier (Printed matters), (User’s Guide CD)
This guide describes an outline of the machine and copy operations.
Please refer to this guide for safety information, turning on/off the machine,
paper supply, dealing with machine trouble such as paper jam, and copy op-
eration available on the machine.
User's Guide - POD Administrator's Reference
(Printed matters), (User’s Guide CD)
This guide provides you with detailed information about the machine man-
agement and how to customize the machine according to your daily use.
Please refer to this guide for a setup and management of the machine includ-
ing registration of copy paper, tray setting, and a network setup.
User's Guide - Network Scanner (Printed matters), (User’s Guide CD)
This guide describes the operation of the network scanner function equipped
for the machine as standard.
Please refer to this guide for full information on reading data or storing data
(Scan to HDD, Scan to E-mail, Scan to FTP, Scan to SMB).
User's Guide - Security <This book> (Printed matters), (User’s Guide
CD)
This guide describes the security functions.
Please refer to this guide for how to use the Enhanced Security mode, and
for detailed machine operation in Enhanced Security mode.
Trademarks/Copyrights (User’s Guide CD)
This guide describes trademarks, licenses, and copyrights concerning this
machine.
Be sure to read this guide before using the machine.
User's Guide - Printer (User’s Guide CD)
This guide describes the operation of the printer function equipped for the
machine.
Please refer to this guide for how to use PCL driver, Adobe PS driver and Pa-
geScope Web Connection in user mode.

User's Guide - Printer (PostScript3 Plug-in Driver) (User’s Guide CD)
This guide describes the operation of the printer function equipped for the
machine.
Please refer to this guide for how to use Plug-in driver in user mode.
Quick Guide - Printer (Printed matters)
The descriptions given in this manual are excerpts from the installation sec-
tion of the User's Guide (Printer).
To operate safely, be sure to read “Section 1: Precautions for Installation and
Use” in User’s Guide - Copier before using the machine.

Contents
1 Security Functions ............................................................1
1.1 Data protected by Security Strengthen mode ...................................4
2 Protect and Delete Data After Use ..................................5
3 User Authentication in Security Functions .....................6
3.1 Description of user authentication .....................................................6
3.2 To register a new user .........................................................................7
3.3 To change a user data ........................................................................13
3.4 To delete a user ..................................................................................18
3.5 To change password by user ............................................................22
4 HDD Store Function in Security Strengthen Mode ......26
4.1 Store the data in a Box while Copying ..............................................26
4.2 Store scanned data in a Box ..............................................................31
4.3 Recall/Delete data in a Box ...............................................................36
4.4 Output data in the Secure Box ..........................................................41
5 Administrator Security Functions..................................46
5.1 Turn Security Strengthen mode ON/OFF .........................................46
5.2 HDD lock password ............................................................................52
5.3 Delete Temporary Data ......................................................................56
5.4 Delete All Data ....................................................................................60
5.5 Print audit log ......................................................................................64
5.6 Analyze audit log ................................................................................67
5.7 Table of items saved in audit log ......................................................68
6 Index.................................................................................70

Security Functions 1
bizhub PRO 950 1
1 Security Functions
The bizhub PRO 950 device has two security modes.
Normal mode
Use this mode if the machine is used by a single person and there is a low
possibility of illicit access and operations. This is the default mode when
shipped from the factory. To use regular mode, please see the user’s guide
for each individual machine.
Security Strengthen mode
Use this mode if the machine is connected to a local area network, or to ex-
ternal networks through a telephone line or other means. An Administrator
manages the device according to this user’s guide, so that users can have a
safe operating environment.
Your administrator is the only one who can turn the Security Strengthen
mode ON and OFF, and make other changes, and your service representa-
tive will designate an administrator.
To turn the Security Strengthen mode ON, the service representative should
set a CE authentication password and Administrator password for the de-
vice.
The Security Strengthen mode cannot be turned ON when the Machine NIC
is activated. Please contact your service representative when using the Se-
curity Strengthen mode.
Security Strengthen mode is recommended to prevent data from being ac-
cessed or tampered with.
Ask your administrator if the Security Strengthen mode is turned ON.
Environments in which Security Strengthen mode is recommended
-The device is connected to an local network, the Internet through a fire-
wall, or the external telephone line for maintenance.
-The device is monitored by a telephone line or a network.
Creating a secure environment
For security, we recommend that supervisors and an administrator use Se-
curity Strengthen mode and establish an environment as follows.
-Where to set up the device
Set up the device in a place where only designated personnel can oper-

1Security Functions
2 bizhub PRO 950
ate it. Also, select a place security locked at night, and available to be
monitored by an administrator in the daytime.
-User training
The administrator must provide training and information to users to main-
tain the security of the device. Users should keep passwords set up by
the administrator, and a password that they set up on their own in a se-
cure place.
The administrator is supposed to give the instructions for releasing the
authentication function to a user when creating a Box for that user, there-
fore the user should perform to release the authentication function when
machine operation is completed.
-Qualifications to be an administrator
A supervisor must select a reliable person who has adequate knowledge,
technical ability, and experience as an administrator, to whom to dele-
gate administration of the device.
-Guarantee of service representative (CE)
A supervisor or an administrator can use Security Strengthen mode after
confirming that a service contract was signed with the service represent-
ative (CE).
Clearly state in the service contract that the service representative will not
engage in any fraudulent actions.
-Secure LAN
We recommend that you use an apparatus such as WEP code (802.11×)
to prevent tapping during communication when setting up a local area
network.
-Protect and delete used data in memory and on the HDD
There are three kinds of image data that will be saved in memory and on
the HDD: AHA compressed data and uncompressed data (TIFF, PDF and
PS formats). Memory and HDD areas containing the AHA compressed
data is freed up when data is deleted. However in normal mode data is
not completely deleted so it could be read through illicit means. In the Se-
curity functions, data will be completely cleared before freeing up image
areas.
Regardless of the data type (compressed or uncompressed), the image
area in memory and on the HDD where the data has been saved will be
freed up after it is completely overwritten by the data unrelated to the im-
age data.
-Enhanced password
The password is made up of 8 to 64 alphanumerical characters (case
sensitive).
If a wrong password is entered, attempts to re-try cannot be made for five
seconds.
-Machine NIC setting
When the Security Strengthen mode is ON, the Machine NIC cannot be
used.

Security Functions 1
bizhub PRO 950 3
-Access to the Box with a password
Set up a system that requires users to input an enhanced password as
described above, to save data or to print data saved in the Box on the
HDD.
If an enhanced password is set up as above, security will be improved
when saving scanned data in the Box. No one other than the administra-
tor can delete the Box or Personal Folder in which scanned data is saved,
and changing the Box’s attributes requires authentication with the en-
hanced password. In addition, authentication will be required to use
scanned data saved in the Box.
-External access prohibited
No access is allowed over telephone lines other than CS Remote Care.
-Create, save and analyze an audit log
A history of security function operations will be created and saved. Date
and time, information identifying the person who made the operation, de-
tails of the operation, and results of the operation will be saved, enabling
analysis of unauthorized access. This log will be overwritten if the audit
area is depleted.
-Administrator authentication
A service representative will set up an authentication data for an admin-
istrator.
The administrator must input a password to gain authorized access. Only
one authentication string can be registered per machine.
-Administrator Setting mode
If the Administrator Setting mode has been entered by successful admin-
istrator authentication, the setting change of various machine functions
will be available on the machine.
Be sure to exit the Administrator Setting mode if you leave in front of the
machine while using the Administrator Setting mode.

1Security Functions
4 bizhub PRO 950
1.1 Data protected by Security Strengthen mode
Data protected by Security Strengthen mode (for users) is as follows.
-Data saved in the Personal Folder (with a password)
The following data administered by the administrator will also receive en-
hanced protection.
-User data
-Data controlling the machine
Data that is not protected in Security Strengthen mode
When the machine is connected to PCs on a local network, passwords input
in PCs are not subject to Security Strengthen mode.
To turn Security Strengthen mode ON/OFF
The administrator can turn Security Strengthen mode ON/OFF.
If Security Strengthen mode is OFF, data can potentially be accessed, so be
careful.
If data is accessed in Security Strengthen mode, the administrator may not
notice until he/she analyzes the audit log. Be careful when the administrator
is absent for a long time.

Protect and Delete Data After Use 2
bizhub PRO 950 5
2 Protect and Delete Data After Use
Data from each mode (copy / scan / printer) will be temporarily saved in
memory or on the HDD, and it will be deleted unless it is moved to a Box.
Data is compressed using a special method, so it cannot be decompressed
externally.
When deleting compressed data, a part of it will be destroyed or overwritten
to prevent decompression.
-Data saved temporarily in memory will be overwritten by unavailable data
(NA) when the job is interrupted or ended.
-Data saved in several areas of memory will be overwritten simultaneous-
ly.
-Data in the Box will be overwritten when a delete order is issued.
-If data is sent externally, it will be overwritten when the transmission is
complete.
-If the administrator issues a delete order for each Box, it will be overwrit-
ten.

3User Authentication in Security Functions
6 bizhub PRO 950
3 User Authentication in Security Func-
tions
3.1 Description of user authentication
In Security Functions, setting up password conditions will be tougher to im-
prove security. The administrator should set up a user name and password
required for user authentication, as this is an administrator operation.
User Name: 1 to 64 alphanumerical characters
Password: 8 to 64 alphanumerical characters (case sensitive)
If a wrong password is entered, attempts to re-try cannot be made for five
seconds.
2
Reminder
Do not use your name, birthday, employee number, etc. for a password
that others can easily figure out.
If a password set in normal mode is fewer than 8 characters or more than 64
characters, you cannot use it in Security Strengthen mode.
If this happens, contact the administrator to turn OFF Security Functions,
and set a new password following the above conditions.
Even after a successful access has been made, authentication with user
name and password will be required under the following conditions.
-The main power switch is turned off.
-The sub power switch is turned off.
-The [Access] key on the control panel is pressed.
-The [Copy]/[Scan]/[Box] key on the control panel is pressed, when the
User/Account Authentication Connect is turned on.
-The [Job List] key on the touch panel is touched, when the User/Account
Authentication Connect is turned on.
-The auto reset function operates.

User Authentication in Security Functions 3
bizhub PRO 950 7
!
Detail
When a user accesses a Box for which a password has been set in the
HDD, all authentication operations with password will be saved in an au-
dit log.
!
Detail
Initially, the user authentication is not available on the machine. To acti-
vate this function, the Account Distribute Number should be changed.
For details, see the User's Guide of POD Administrator's Reference.
3.2 To register a new user
Follow the procedure below to setup a new user name and password to be
required for user authentication in Security Functions.
!
Detail
Passwords are case sensitive.
If a wrong password or fewer than 8 alphanumerical characters are en-
tered and the [OK] is touched, the warning message “Password does not
match” will appear, and no key will work for five seconds. Enter the right
password after five seconds.
If authentication fails, the information will be saved in the audit log.
Procedure
1Press [Utility/Counter] on the control panel.
The Utility Screen will be displayed.

3User Authentication in Security Functions
8 bizhub PRO 950
2Touch [06 Administrator Setting].
The Input Administrator Password Screen will be displayed.
3Enter the password.
Use the touch screen keypad to enter the 8-digit Administrator pass-
word, then touch [OK].
The Administrator Setting Screen will be displayed.

User Authentication in Security Functions 3
bizhub PRO 950 9
4Touch [03 User Auth./Account Track].
The User Authentication/Account Track Screen will be displayed.
5Touch [03 User Authentication Set].
The User Authentication Setting Screen will be displayed.

3User Authentication in Security Functions
10 bizhub PRO 950
6Touch [Add].
The New User Registration Screen will be displayed.
7Touch [User No.], [User Name], [Password], or [Account Name] to dis-
play each subsequent screen, then make the desired setting.

User Authentication in Security Functions 3
bizhub PRO 950 11
– To enter the User Number, touch [User No.] on the New User Reg-
istration Screen. Use the screen keypad on the popup menu to en-
ter the desired user number. Touch [OK] to return to the New User
Registration Screen.
– To enter the User Name, touch [User Name] on the New User Reg-
istration Screen. Enter the desired user name from the screen key-
pad. Touch [OK] to return to the New User Registration Screen.

3User Authentication in Security Functions
12 bizhub PRO 950
– To enter the Password, touch [Password] on the New User Regis-
tration Screen. Enter the desired password from the screen keypad.
Touch [OK] to return to the New User Registration Screen.
– To enter the account name, touch [Account Name] on the New User
Registration Screen. Touch the desired account name key to high-
light it. Touch [OK] to return to the New User Registration Screen.
8Touch [OK].
When settings are completed, touch [OK] on the New User Registration
Screen.
The User Authentication Setting Screen will be restored.