Konica Minolta magicolor 8650DN User manual

User’s Guide [Security Operations]
A02E-9665-00 C M YBK
http://konicaminolta.com
Copyright
2007
A02E-9665-00
2008. 1
Ver. 1.00

8650 x-1
Contents
Contents
1 Security
1.1 Introduction........................................................................................................................................... 1-2
Compliance with the ISO15408 Standard ................................................................................................1-2
Operating Precautions..............................................................................................................................1-2
INSTALLATION CHECKLIST ....................................................................................................................1-3
1.2 Security Functions................................................................................................................................ 1-4
1.2.1 Check Count Clear Conditions.................................................................................................................1-4
1.3 Data to be Protected ............................................................................................................................ 1-5
1.4 Precautions for Operation Control...................................................................................................... 1-6
Roles and Requirements of the Administrator..........................................................................................1-6
Password Usage Requirements ...............................................................................................................1-6
Network Connection Requirements for the Machine ...............................................................................1-6
Security function operation setting operating requirements ....................................................................1-6
Operation and control of the machine......................................................................................................1-7
Machine Maintenance Control..................................................................................................................1-7
1.5 Miscellaneous ....................................................................................................................................... 1-8
Password Rules........................................................................................................................................1-8
Precautions for Use of Various Types of Applications .............................................................................1-8
Encrypting communications .....................................................................................................................1-8
IPP printing ...............................................................................................................................................1-9
Types of Data Cleared by Overwrite All Area Function ..........................................................................1-10
2 Administrator Operations
2.1 Accessing the Admin. Settings ........................................................................................................... 2-2
2.1.1 Accessing the Admin. Settings.................................................................................................................2-2
<From the Control Panel> ........................................................................................................................2-3
<From PageScope Web Connection>......................................................................................................2-4
2.2 Enhancing the Security Function ........................................................................................................ 2-6
2.2.1 Items cleared by HDD Format ..................................................................................................................2-7
2.2.2 Setting the EnhancedSecurity ..................................................................................................................2-8
<Setting can be made only from the control panel> ................................................................................2-8
2.3 HDD Installation .................................................................................................................................. 2-10
2.3.1 Setting HDD Installation .........................................................................................................................2-10
<Setting can be made only from the control panel> ..............................................................................2-10
2.4 Preventing Unauthorized Access...................................................................................................... 2-12
2.4.1 Setting ProhibitFunctions .......................................................................................................................2-12
<Setting can be made only from the control panel> ..............................................................................2-13
2.5 Canceling the Operation Prohibited State ....................................................................................... 2-15
2.5.1 Performing Release Setting....................................................................................................................2-15
<Setting can be made only from the control panel> ..............................................................................2-15
2.6 User Box Function .............................................................................................................................. 2-16
2.6.1 Setting the User Box ..............................................................................................................................2-16
<Setting can be made only from PageScope Web Connection>...........................................................2-16
2.6.2 Using User Box Attribute Change ..........................................................................................................2-18
<Setting can be made only from the PageScope Web Connection> ....................................................2-18
2.7 Changing the Administrator Password ............................................................................................ 2-20
2.7.1 Changing the Administrator Password...................................................................................................2-20
<Setting can be made only from the control panel> ..............................................................................2-20
2.8 Protecting Data in the HDD ............................................................................................................... 2-22
2.8.1 Setting the HDD Lock Password............................................................................................................2-23
<Setting can be made only from the control panel> ..............................................................................2-23
2.8.2 Changing the HDD Lock Password........................................................................................................2-25
<Setting can be made only from the control panel> ..............................................................................2-25

8650 x-2
Contents
2.8.3 Setting the Encryption Key (encryption word) ........................................................................................2-27
<Setting can be made only from the control panel> ..............................................................................2-27
2.8.4 Changing the Encryption Key.................................................................................................................2-30
<Setting can be made only from the control panel> ..............................................................................2-30
2.8.5 Making Overwrite Priority Setting...........................................................................................................2-32
<Setting can be made only from the control panel> ..............................................................................2-32
2.9 Overwrite All Area Function............................................................................................................... 2-35
2.9.1 Setting the Overwrite All Area function...................................................................................................2-35
<Setting can be made only from the control panel> ..............................................................................2-35
2.10 SSL Setting Function.......................................................................................................................... 2-37
2.10.1 Setting the SSL.......................................................................................................................................2-37
<Setting can be made only from PageScope Web Connection>...........................................................2-37
2.10.2 Changing the Encryption Strength Setting.............................................................................................2-40
<Setting can be made only from PageScope Web Connection>...........................................................2-40
2.10.3 Changing the Mode Using SSL ..............................................................................................................2-41
<Setting can be made only from PageScope Web Connection>...........................................................2-41
2.10.4 Removing a Certificate ...........................................................................................................................2-42
<Setting can be made only from PageScope Web Connection>...........................................................2-42
2.11 SNMP Setting Function ...................................................................................................................... 2-43
2.11.1 Changing the auth-password and priv-password..................................................................................2-43
<From the Control Panel> ......................................................................................................................2-43
<From PageScope Web Connection>....................................................................................................2-47
2.11.2 SNMP access authentication function ...................................................................................................2-48
2.11.3 SNMP v3 setting function.......................................................................................................................2-48
2.11.4 SNMP network setting function..............................................................................................................2-48
2.12 TCP/IP Setting Function..................................................................................................................... 2-49
2.12.1 Setting the IP Address............................................................................................................................2-49
<From the Control Panel> ......................................................................................................................2-49
<From PageScope Web Connection>....................................................................................................2-50
2.13 NetWare Setting Function.................................................................................................................. 2-51
2.13.1 Making the NetWare Setting...................................................................................................................2-51
<From the Control Panel> ......................................................................................................................2-51
<From PageScope Web Connection>....................................................................................................2-51
2.14 SMB Setting Function......................................................................................................................... 2-52
2.14.1 Setting the NetBIOS Name.....................................................................................................................2-52
<From the Control Panel> ......................................................................................................................2-52
<From PageScope Web Connection>....................................................................................................2-52
2.15 AppleTalk Setting Function................................................................................................................ 2-53
2.15.1 Making the AppleTalk Setting.................................................................................................................2-53
<From the Control Panel> ......................................................................................................................2-53
<From PageScope Web Connection>....................................................................................................2-53
3 User Operations
3.1 Secure Print Document Function........................................................................................................ 3-2
3.1.1 Accessing the Secure Print Document.....................................................................................................3-2
<Setting can be made only from the control panel> ................................................................................3-2
3.2 User Box Function ................................................................................................................................ 3-5
3.2.1 Setting the User Box ................................................................................................................................3-5
<Setting can be made only from PageScope Web Connection>.............................................................3-5
3.2.2 Changing the User Box attributes ............................................................................................................3-7
<Setting can be made only from PageScope Web Connection>.............................................................3-7
3.2.3 Accessing the User Box and User Box file.............................................................................................3-10
<From the Control Panel> ......................................................................................................................3-10
<From PageScope Web Connection>....................................................................................................3-12
4 Application Software

8650 x-3
Contents
4.1 PageScope Data Administrator........................................................................................................... 4-2
4.1.1 Gaining access from PageScope Data Administrator ..............................................................................4-2
<From the PC> .........................................................................................................................................4-2
4.1.2 SNMP Setting Function ............................................................................................................................4-4
<Changing the auth-password and priv-password>................................................................................4-4
4.1.3 NetWare Setting Function ........................................................................................................................4-6
<Making the NetWare Setting> ................................................................................................................4-6
4.1.4 SMB Setting Function...............................................................................................................................4-7
<Making the NetBIOS Name Setting>......................................................................................................4-7
4.1.5 AppleTalk Setting Function ......................................................................................................................4-8
<Making the AppleTalk Setting> ..............................................................................................................4-8
4.2 HDD Backup Utility ............................................................................................................................... 4-9
4.2.1 Backup......................................................................................................................................................4-9
<From the PC> .........................................................................................................................................4-9
4.2.2 Restore ...................................................................................................................................................4-13
<From the PC> .......................................................................................................................................4-13

8650 x-4
Contents

1Security

8650 1-2
Security 1
1 Security
1.1 Introduction
Thank you for purchasing our product.
This User’s Guide contains the operating procedures and precautions to be used when using the security
functions offered by the magicolor 8650 machine. To ensure the best possible performance and effective use
of the machine, read this manual thoroughly before using the security functions. The Administrator of the ma-
chine should keep this manual for ready reference. The manual should be of great help in finding solutions to
operating problems and questions.
This User’s Guide (Ver. 1.00) describes magicolor 8650 Multi Function Peripheral Control Software (MFP
Controller: A02E0Y0-0100-GP0-12).
Compliance with the ISO15408 Standard
When the EnhancedSecurity on this machine is set to [ON], more enhanced security functions are available.
The security functions offered by the magicolor 8650 machine comply with ISO/IEC15408 (level: EAL3).
Operating Precautions
The Administrator of the machine should make sure that each individual general user exits from the current
mode to return to the basic screen whenever the access to that mode is completed or if the user leaves the
machine with the mode screen left displayed.
The Administrator of the machine should exit from the current mode to return to the basic screen whenever
the access to that mode is completed or if he or she leaves the machine with the mode screen left displayed.
The PageScope Web Connection functions can be used only if the setting is made to accept "Cookie."

8650 1-3
Security 1
INSTALLATION CHECKLIST
This Installation Checklist contains items that are to be check by the Service Engineer installing this machine.
The Service Engineer should check the following items, then explain each checked item to the Administrator
of the machine.
To Service Engineer
Make sure that each of these items is properly carried out by checking the box on the right of each item.
If the Security Kit SC-503 is to be mounted, data must first be backed up using the HDD Backup Utility before
the SC-503 is mounted.
When the above steps have been properly carried out, the Service Engineer should make a copy of this page
and give the original of this page to the Administrator of the machine. The copy should be kept at the
corresponding Service Representative for filing.
1. Perform the following steps before installing this machine. Completed
Check with the Administrator to determine if the security functions of this machine should be en-
hanced. If the functions should be enhanced, check the following.
If the security functions are not to be enhanced, quit the operation without checking the following.
I swear that I would never disclose information as it relates to the settings of this machine to any-
body, or perform malicious or intentional act during setup and service procedures for the ma-
chine.
When giving the User’s Guide Security Operations to the Administrator of the machine, check that
the User’s Guide is the security-compatible version and explain to the Administrator that it is se-
curity-compatible.
2. After this machine is installed, refer to the Service Manual and perform the following steps.
Check that the Firmware version (MFP Controller, CheckSum) checked with the Service Manual
matches the Firmware version values indicated on the report output.
If there is a mismatch in the Firmware version number, explain to the Administrator of the machine
that upgrading of the Firmware is necessary and perform upgrading of the Firmware.
Set the Service Password (CE Password) that meets the requirements of the Password Rules.
Check that CS Remote Care is set to RAM Clear Set, HDD Installation to Installed, and AuthDe-
viceSetting to Not Installed.
3. After this machine is installed, refer to this User’s Guide and perform the following steps.
Check that the Administrator Password has been set by the Administrator of the machine.
Check that data has been backed up by the Administrator of the machine using the HDD Backup
Utility.
Check that the HDD Lock Password or Encryption Key, or both, have been set by the Adminis-
trator of the machine.
Check that the self-signed certificate for SSL communications has been registered by the Admin-
istrator of the machine.
Check that data has been restored by the Administrator of the machine using the HDD Backup
Utility.
Let the Administrator of the machine set EnhancedSecurity to [ON].
The languages, in which the contents of the User’s Guide Security Operations have been evalu-
ated, are Japanese and English.
Explain the way how to get the manual in the language, in which it is evaluated.
Explain to the administrator that the settings for the security functions for this machine have been
specified.
Product Name Company Name User Division Name Person in charge
Customer
Service Representative -

8650 1-4
Security 1
1.2 Security Functions
Setting the EnhancedSecurity to [ON] will validate the security function of this machine. For details of the
settings of different security functions to be changed by turning [ON] the EnhancedSecurity, see "Enhancing
the Security Function" on page 2-6.
Setting the EnhancedSecurity to [ON] will enhance the authentication function. Access control is then pro-
vided through password authentication for any access to the Admin. Settings, Public User Box, a Public User
Box data file, and a Secure Print Document file. Access is thereby granted only to the authenticated user.
A password that can be set must meet the requirements of the Password Rules. The machine does not ac-
cept setting of an easily decipherable password. For details of the Password Rules, see "Password Rules"
on page 1-8.
If a wrong password is entered, during password authentication, a predetermined number of times (once to
three times) set by the Administrator of the machine or more, the machine determines that it is unauthorized
access through Prohibited Functions When Authentication Error, prohibiting any further entry of the pass-
word. By prohibiting the password entry operation, the machine prevents unauthorized use or removal of da-
ta, thereby ensuring secured used of the machine.
To cancel the password entry operation prohibited condition, the Administrator must perform the Release
Setting. When the Administrator performs the Release Setting for the operation prohibited condition, a sound
operation control in utmost security is achieved under the control of the Administrator.
Setting the HDD Lock Password provides the following security function. That is, even if the HDD is illegally
replaced with another, the HDD authentication function prohibits access to the HDD, when the HDD Lock
Password is yet to be set or there is a mismatch in the passwords. In addition, should the HDD be removed
unawares, the HDD Lock Password locks the HDD protecting data contained in the HDD. Furthermore, by
mounting the optional Security Kit SC-503 and setting the Encryption Key, the data stored in the HDD is
encrypted, thereby protecting the data in the HDD. Note, however, that the HDD Lock Password and
Encryption Key do not prevent the HDD from being physically removed. Make sure of a good operation
control.
When the machine is to be discarded, or use of a leased machine is terminated at the end of the leasing con-
tract, the Overwrite All Area function overwrites and erases all data stored in all spaces of the HDD. The func-
tion also resets all passwords saved in the NVRAM to factory settings, preventing leak of data. For details of
items to be cleared by Overwrite All Area function, see "Types of Data Cleared by Overwrite All Area
Function" on page 1-10.
1.2.1 Check Count Clear Conditions
The following are the conditions for clearing or resetting the check count of the number of wrong entries at
the time of authentication by the EnhancedSecurity.
<Admin. Settings>
-Authentication of Admin. Settings is successful.
<Secure Print Document>
-Authentication of Secure Print Document is successful.
-Release of Prohibited Functions When Authentication Error is executed.
<Public User Box>
-Authentication of Public User Box is successful.
-Authentication for execution of change of Public User Box Name and User Box Password is successful.
-Release of Prohibited Functions When Authentication Error is executed.
<SNMP Password (auth-password, priv-password)>
-Authentication of SNMP is successful.
-Release of Prohibited Functions When Authentication Error is executed.

8650 1-5
Security 1
1.3 Data to be Protected
The underlying concept of this machine toward security is "to protect data that can be disclosed against the
intention of users."
The following types of image files that have been stored in the machine and made available for use by its
users are protected while the machine is being used.
-Image files stored by Secure Print
-Image files stored in Public User Box
The following types of data stored in the HDD are protected when use of a leased machine is terminated at
the end of the leasing contract, the machine is to be discarded, or when the HDD is stolen.
-Image files stored by Secure Print
-Image files stored in Public User Box
-Image files of a job in the queue
-Image files other than Secure Print file and Public User Box file
-Data files left in the data space used as image files
-Temporary data files generated during print image file processing
This machine offers specific functions as data protection method: the SSL function that ensures confidenti-
ality of images transmitted and received over the network.
When transmitting and receiving highly confidential image data among different pieces of IT equipment within
an office LAN, the machine carries out communications with the correct destination via encrypted and reliable
paths, assuming an office environment that responds to most stringent security requirements.