Konica Minolta bizhub 361 User manual

AU-211P CAC/PIV Solution
Users Guide

Introduction 1
AU-211P 4
1 Introduction
Thank you for choosing this device.
This guide provides descriptions of the installation, operating procedures
and precautions for using Authentication Unit (IC Card Type) AU-211P.
Carefully read this User’s Guide before using this device.
The actual screens that appear may be slightly different from the screen
images used in this User’s Guide.
Trademark/copyright acknowledgements
-Microsoft®and Windows®are either registered trademarks or
trademarks of Microsoft Corporation in the United States and/or other
countries.
-All other company names and product names mentioned in this
User’s Guide are either registered trademarks or trademarks of their
respective companies.
Restrictions
-Unauthorized use or reproduction of this User’s Guide, whether in its
entirety or in part, is strictly prohibited.
-The information contained in this User’s Guide is subject to change
without notice.

Introduction 1
AU-211P 5
1.1 Safety Information
Carefully read this information.
-Before using this device, carefully read this information and follow it
to operate the device correctly.
Important information
-The reprinting or reproduction of the content of this publication, either
in part or in full, is prohibited without prior permission.
-The content of this publication is subject to change without notice.
-This publication was created with careful attention to content;
however, if inaccuracies or errors are noticed, please contact your
sales representative.
-The marketing and authorization to use our company’s product
mentioned in this information are provided entirely on an “as is” basis.
-Our company assumes no responsibility for any damage (including
lost profits or other related damages) caused by this product or its
use as a result of operations not described in this information. For
disclaimers and warranty and liability details, refer to the User’s Guide
Authentication Unit (IC Card Type AU-211P).
-This product is designed, manufactured and intended for general
business use. Do not use it for applications requiring high reliability
and which may have an extreme impact on lives and property.
(Applications requiring high reliability: Chemical plant management,
medical equipment management and emergency communications
management)
-Use with other authentication devices is not guaranteed.
-In order to incorporate improvements in the product, the
specifications concerning this product are subject to change without
notice.
For safe use
• Do not use this product near water, otherwise it
may be damaged.
• Do not cut, damage, modify or forcefully bend the
USB cable. A malfunction may occur as a result
of a damaged or cut USB cable.
• Do not disassembly this device, otherwise it may
be damaged.

Introduction 1
AU-211P 6
Regulation notices
USER INSTRUCTIONS FCC PART 15 - RADIO FREQUENCY DEVICES
(For U.S.A. Users)
NOTE:
This equipment has been tested and found to comply with the limits for a
Class B digital device, pursuant to Part 15 of the FCC Rules.
These limits are designed to provide reasonable protection against harmful
interference in a residential installation. This equipment generates, uses and
can radiate radio frequency energy and, if not installed and used in
accordance with the instructions, may cause harmful interference to radio
communications. However, there is no guarantee that interference will not
occur in a particular installation. If this equipment does cause harmful
interference to radio or television reception, which can be determined by
turning the equipment off and on, the user is encouraged to try to correct the
interface by one or more of the following measures:
-Reorient or relocate the receiving antenna.
-Increase the separation between the equipment and receiver.
-Connect the equipment into an outlet on a circuit different from that
to which the receiver is connected.
-Consult the dealer or an experienced radio/TV technician for help.
WARNING:
The design and production of this unit conform to FCC regulations, and any
changes or modifications must be registered with the FCC and are subject
to FCC control. Any changes made by the purchaser or user without first
contacting the manufacturer will be subject to penalty under FCC
regulations.
FCC: Declaration of Conformity
Product Type Authentication Unit (IC Card Type)
Product Name AU-211P
(This device complies with Part 15 of the FCC Rules.) Operation is subject to the
following two conditions: (1) this device may not cause interference, and (2) this
device must accept any interference, including interference that may cause
undesired operation of this device.

Introduction 1
AU-211P 7
INTERFERENCE-CAUSING EQUIPMENT STANDARD (ICES-003 ISSUE
4) (For Canada Users)
(This device complies with RSS-Gen of IC Rules.) Operation is subject to the
following two conditions: (1) this device may not cause interference, and (2)
this device must accept any interference, including interference that may
cause undesired operation of this device.
This Class B digital apparatus complies with Canadian ICES-003.
Cet appareil numérique de la classe B est conforme à la norme NMB-003 du
Canada.

How to Use the Authentication Unit 5
AU-211P 68
5 How to Use the Authentication Unit
This chapter explains how to log in and autheniticate a CAC/PIV card user
onto the network via the MFP. This chapter also explains how to log a user
off the network/MFP.
5.1 Login and Logout
5.1.1 Login
Use the following steps to log into the MFP.
1Insert a CAC/PIV card in the reader.
2Enter the PIN code.
- You can use the keypad on the MFP to enter the PIN code.
- Or you can press the [PIN] button, a keyboard screen appears use
this keyboard screen to enter a PIN code.

How to Use the Authentication Unit 5
AU-211P 69
!
Detail
If an incorrect PIN code is entered, "No. of Allowable Auth Failure"
appears on the screen. After 3 consecutive authentication failures the
CAC/PIV card will be locked for security reasons. For details on how to
unlock the CAC/PIV card, contact your PKI card administrator.
3Press [OK].
This starts authentication. Successful authentication grants a user
access the MFP.
!
Detail
When Account Track is enabled, use the CAC/PIV card to perform user
authentication before account authentication. When Account Track is
enabled on the MFP that supports this system, user authentication is
forcibly associated with account authentication.
!
Detail
You can log in as a public user if Public User Access is enabled.
If logging into the MFP as an administrator or User Box administrator,
press [ID & PW], and enter the password
!
Detail
If you log into the MFP as an administrator, you can check or delete the
desired job. If you log into the MFP as a User Box administrator, you can
view the contents of all the created User Boxes regardless of whether a
password has been specified.
5.1.2 Logout
To log out the MFP, pull the CAC or PIV card out of this unit.
!
Detail
If a PKI card is used to log in to the MFP, you cannot log out by pressing
the [ID] key on the control panel.
If the MFP sub power is turned off while logging in using the PKI card, you
will be logged out of the MFP.

How to Use the Authentication Unit 5
AU-211P 70
5.2 Specific MFP Functions Using CAC/PIV Card
Authentication
This section explains the specific MFP functions using the CAC/PIV card
authentication.
Basic functions
Function Description See
Address Search
(LDAP)
Logs into the LDAP server using the Kerberos
authentication ticket that is obtained by Active
Directory authentication with the CAC/PIV card
when searching for the destination via the LDAP
server. The user can perform authentication only
once to obtain access privileges, and configure
the single sign-on environment to be convenient.
p. 72
Scan to SMB
(Network Share)
Logs into the destination computer using the
Kerberos authentication ticket that is obtained by
Active Directory authentication with the CAC/PIV
card when sending scanned data via SMB.
The user can perform authentication only once to
obtain access privileges, and configure the single
sign-on environment to be convenient.
p. 76
Scan to E-mail
(S/MIME)
Encrypts an e-mail or adds a digital signature
using the CAC/PIV card when sending an e-mail.
This function prevents tapping, fabrication or
spoofing of an e-mail.
p. 79
PKI Card Print
(confidential printing)
The user can encrypt print data using the CAC/PIV
card before sending the data to the MFP. The print
data is saved temporarily in the MFP. Once the
same user performs authentication at the MFP
with the CAC/PIV card, the data is decrypted and
printed.
The print data is encrypted when it is sent from the
printer driver and can only be printed when
authentication at the MFP using the CAC/PIV card
is successful; therefore, you can ensure the
confidentiality of documents.
p. 82

How to Use the Authentication Unit 5
AU-211P 71
Ensuring a higher level of security
To ensure a higher level of security, use the Scan To Me and Scan To Home
functions.
2
Note
To use these functions, ask your service engineer to configure settings.
For details, contact your service representative.
Function Description See
Scan To Me Sends scanned data to the user's e-mail address.
The user can obtain the user's e-mail address
using the LDAP protocol, and easily send data to
the obtained address.
This function is effective when frequently sending
scanned data to a user's address.
When this function is enabled, the user cannot use
some functions to ensure higher level security. For
details, refer to the relevant page.
p. 90
Scan To Home Sends scanned data to the user's computer.
The user can obtain the position of the user's
Home folder from Active Directory, and easily
send data to the Home folder of the user's
computer.
This function is effective when frequently sending
scanned directly to their Home folder.
When this function is enabled, the user cannot use
some functions to ensure higher level security. For
details, refer to the relevant page.
p. 95

How to Use the Authentication Unit 5
AU-211P 72
5.3 Address Search (LDAP)
5.3.1 Overview
This function will allow a CAC/PIV card user to log in to an LDAP server and
perform an address name search. The process utilizes a Kerberos
authentication ticket that is obtained by Active Directory and authenticates
with the CAC/PIV card when searching for a destination via the LDAP server.
2
Note
This function is not available when you log in to the MFP as a public user
or User Box administrator.
(2)
(1)
(3)
CAC/PIV Card
Active Directory
LDAP Server
Address SearchAddress Search
(1) Insert the CAC/PIV card into the MFP to perform Active Directory
authentication.
(2) Obtain the Kerberos authentication ticket.
(3) Use the Kerberos authentication ticket to log in to the LDAP server and
search for the destination.