Konica Minolta AU-211P User manual

User’s Guide
Authentication Unit AU-211P

AU-211P 1-1
Table of contents
1Introduction
2 Getting Started
2.1 Product Overview............................................................................................................................ 2-2
Use conditions ................................................................................................................................... 2-2
2.2 Part Names and their Functions.................................................................................................... 2-3
2.3 Pre-Setting....................................................................................................................................... 2-4
2.3.1 Configuring Network Settings.............................................................................................................2-4
[TCP/IP].............................................................................................................................................. 2-4
[IPv4] .................................................................................................................................................. 2-4
[IPv6] .................................................................................................................................................. 2-4
[DNS Host] ......................................................................................................................................... 2-5
[DNS Domain Name Setting].............................................................................................................. 2-5
2.3.2 Registering Active Directory for Authentication..................................................................................2-6
2.3.3 Adjusting the MFP Time......................................................................................................................2-6
2.3.4 Registering the DNS Server Associated with Active Directory ...........................................................2-7
[DNS Server Setting(IPv4)] ................................................................................................................. 2-7
[DNS Server Setting(IPv6)] ................................................................................................................. 2-7
2.3.5 Setting PIV Transitional Mode.............................................................................................................2-7
2.3.6 Configuring Settings for Verifying the Active Directory Certificate .....................................................2-8
[Certificate Verification Setting].......................................................................................................... 2-8
[Certificate Verification Settings]........................................................................................................ 2-8
[External Certificate Setting] .............................................................................................................. 2-9
2.3.7 Enabling TPM (Trusted Platform Module)...........................................................................................2-9
[TPM Function Settings]..................................................................................................................... 2-9
[SSL Setting] ...................................................................................................................................... 2-9
2.3.8 Setting the Power Saving Mode .........................................................................................................2-9
2.4 Operation Settings ........................................................................................................................ 2-10
2.4.1 Settings to Change before Starting Operation .................................................................................2-10
[TCP Socket Setting]........................................................................................................................ 2-10
[WebDAV Server Settings] ............................................................................................................... 2-10
[FTP Server Settings] ....................................................................................................................... 2-10
[SNMP Setting]................................................................................................................................. 2-10
2.4.2 Settings to Change after Initialization was Completed.....................................................................2-10
[HTTP Server Settings]..................................................................................................................... 2-10
[OpenAPI Setting]............................................................................................................................. 2-10
3 How to Use the Authentication Unit
3.1 Login and Logout ............................................................................................................................ 3-2
3.1.1 Login ...................................................................................................................................................3-2
3.1.2 Logout.................................................................................................................................................3-3
3.2 Functions Using the PKI Card Authentication System................................................................ 3-4
3.3 Address Search (LDAP) Using PKI card ....................................................................................... 3-5
3.3.1 Overview .............................................................................................................................................3-5
3.3.2 Related Settings..................................................................................................................................3-5
[Enabling LDAP] ................................................................................................................................. 3-5
[Setting Up LDAP] .............................................................................................................................. 3-6
3.3.3 LDAP Search Method .........................................................................................................................3-7
3.4 SMB TX using PKI card .................................................................................................................. 3-8
3.4.1 Overview .............................................................................................................................................3-8
3.4.2 Related Settings..................................................................................................................................3-9
[Client Setting].................................................................................................................................... 3-9

AU-211P 1-2
3.4.3 SMB TX Method................................................................................................................................3-10
SMB TX ............................................................................................................................................ 3-10
SMB destination search................................................................................................................... 3-11
3.5 Scan to E-mail (S/MIME) using PKI card .................................................................................... 3-12
3.5.1 Overview ...........................................................................................................................................3-12
3.5.2 Related Settings................................................................................................................................3-13
[S/MIME] .......................................................................................................................................... 3-13
3.5.3 Encrypting an E-Mail and Adding a Digital Signature.......................................................................3-14
3.6 PDF Encryption and Signature Addition using PKI Card........................................................... 3-15
3.6.1 Overview ...........................................................................................................................................3-15
3.6.2 Encrypting a PDF Document ............................................................................................................3-16
3.6.3 Adding a Signature to a PDF Document...........................................................................................3-17
3.7 PKI Card Print................................................................................................................................ 3-18
3.7.1 Overview ...........................................................................................................................................3-18
3.7.2 Installing the Printer Driver................................................................................................................3-19
System environment requirements .................................................................................................. 3-19
Installation method........................................................................................................................... 3-20
3.7.3 Specifying the Print Data Deletion Time ...........................................................................................3-20
[PKI Encryption Document Delete Time Setting] ............................................................................. 3-20
3.7.4 PKI Card Print Method......................................................................................................................3-21
Sending print data (Printer driver setting) ........................................................................................ 3-21
MFP printing..................................................................................................................................... 3-23
3.8 Scan To Me.................................................................................................................................... 3-26
3.8.1 Overview ...........................................................................................................................................3-26
3.8.2 Related Settings................................................................................................................................3-27
Obtaining the e-mail address........................................................................................................... 3-27
[E-mail TX (SMTP)] ........................................................................................................................... 3-27
[S/MIME] .......................................................................................................................................... 3-27
3.8.3 Handling Scan To Me .......................................................................................................................3-27
3.9 Scan To Home ............................................................................................................................... 3-28
3.9.1 Overview ...........................................................................................................................................3-28
3.9.2 Related Settings................................................................................................................................3-28
Obtaining the Home folder position................................................................................................. 3-28
[Client Setting].................................................................................................................................. 3-28
[Scan to Home Settings] .................................................................................................................. 3-29
3.9.3 Handling Scan To Home...................................................................................................................3-29
4 Added or Changed Setting Information
4.1 [Administrator] ................................................................................................................................ 4-2
4.1.1 [System Settings] ................................................................................................................................4-2
[User Box Setting] .............................................................................................................................. 4-2
4.1.2 [User Auth/Account Track]..................................................................................................................4-2
[General Settings]............................................................................................................................... 4-2
[External Server Settings]................................................................................................................... 4-2
[PKI Card Authentication]................................................................................................................... 4-2
[Certificate Verification Setting].......................................................................................................... 4-2
4.1.3 [Network].............................................................................................................................................4-3
[FTP Setting] ...................................................................................................................................... 4-3
[SMB Setting] ..................................................................................................................................... 4-3
[LDAP Setting].................................................................................................................................... 4-3
[E-mail Setting]................................................................................................................................... 4-3
[SNMP Setting]................................................................................................................................... 4-3
[TCP Socket Setting].......................................................................................................................... 4-4
[WebDAV Settings]............................................................................................................................. 4-4
4.1.4 [Security] .............................................................................................................................................4-4
[Security Details] ................................................................................................................................ 4-4
[Job Log Settings].............................................................................................................................. 4-4

AU-211P 1-3
5 Appendix
5.1 Product Specifications ................................................................................................................... 5-2
5.2 Cleaning the Authentication Unit................................................................................................... 5-2
5.3 Troubleshooting .............................................................................................................................. 5-2

1Introduction

AU-211P 1-2
1
1Introduction
Thank you for choosing this device.
This User's Guide provides descriptions of the operating procedures and precautions for using Authentica-
tion Unit (IC Card Type) AU-211P. Carefully read this User's Guide before using this device.
The actual screens that appear may be slightly different from the screen images used in this User's Guide.
Trademark/copyright acknowledgements
-Microsoft®and Windows®are either registered trademarks or trademarks of Microsoft Corporation in
the United States and/or other countries.
-All other company names and product names mentioned in this User's Guide are either registered
trademarks or trademarks of their respective companies.
Restrictions
-Unauthorized use or reproduction of this User's Guide, whether in its entirety or in part, is strictly pro-
hibited.
-The information contained in this User's Guide is subject to change without notice.

2Getting Started

AU-211P 2-2
2.1 Product Overview 2
2 Getting Started
2.1 Product Overview
This product is a PKI card authentication unit that scans the PKI card (CAC or PIV card) to perform personal
authentication.
Connecting this unit enables you to run a PKI card authentication system (hereinafter referred to as "this sys-
tem") that uses the PKI card authentication unit on the MFP.
Using this system will enable you to carry out operations without making a password public on the network,
and to configure the system environment with a higher level of security. You can also implement the unique
functions using this system on the MFP.
Use conditions
The following conditions are required to use this system.
-PKI card authentication unit (This unit)
-MFP compatible with PKI card authentication system
-PKI card available for PIV and CAC
-User management using Active Directory (Kerberos authentication + PKINIT)
NOTICE
Do not disconnect the USB cable while using this unit. Doing so may cause this system to become unstable.

2.2 Part Names and their Functions 2
AU-211P 2-3
2.2 Part Names and their Functions
No. Part name Description
1 Card inlet Used to insert the PKI card.
2 LED lamp Turns green when you insert a PKI card into this unit.
Blinks green during authentication.
3 USB cable Used to connect this device to the MFP.
1
2
3

AU-211P 2-4
2.3 Pre-Setting 2
2.3 Pre-Setting
To use this system, pre-configure the following settings on the MFP.
-Configuring Network Settings (p. 2-4)
-Registering Active Directory for Authentication (p. 2-6)
-Adjusting the MFP Time (p. 2-6)
-Registering the DNS Server Associated with Active Directory (p. 2-7)
-Setting PIV Transitional Mode (p. 2-7)
-Configuring Settings for Verifying the Active Directory Certificate (p. 2-8)
-Setting the Power Saving Mode (p. 2-9)
2.3.1 Configuring Network Settings
Configure the basic settings required to use the MFP in network environment.
[TCP/IP]
Select [Utility] - [Administrator] - [Network] - [TCP/IP Setting] - [TCP/IP Setting1], and set [TCP/IP] to ON
(default: ON).
[IPv4]
Select [Utility] - [Administrator] - [Network] - [TCP/IP Setting] - [TCP/IP Setting1] - [IPv4], and configure the
following settings.
[IPv6]
Select [Utility] - [Administrator] - [Network] - [TCP/IP Setting] - [TCP/IP Setting1] - [IPv6], and configure the
following settings.
Item Description
[IP Address Setting Method] Select the method to specify the IP address of the MFP depending on
your environment (default: [Auto Setting]). To manually specify the IP ad-
dress, select [Manual Setting]. To automatically specify the IP address
using DHCP, select [Auto Setting], and specify the automatic setting
method.
[IP Address] Enter the fixed IP address assigned to the MFP when manually configur-
ing the setting.
[Subnet Mask] Enter the subnet mask when manually configuring the setting.
[Default Gateway] When directly entering the IP address, specify the default gateway of the
network to be connected.
Item Description
[IPv6] When using IPv6, set this option to ON (default: ON).
[Auto IPv6 Setting] When automatically specifying the IPv6 global address, set this option to
ON (default: ON). The IPv6 global address is automatically set based on
the prefix length notified from the router and the MAC address of the
MFP.
[DHCPv6 Setting] When automatically specifying the IPv6 global address using DHCPv6,
set this option to ON (default: ON).
[Link-Local Address] Displays the link-local address. The link-local address is automatically
specified from the MAC address of the MFP.
[Global Address] Enter the IPv6 global address when manually configuring the setting.
[Prefix Length] Enter the prefix length of the IPv6 global address between 1 and 128
when manually configuring the setting.
[Gateway Address] Enter the gateway address when manually configuring the setting.