Ricoh MP C3003 Service manual

For safe and correct use, be sure to read the Safety Information in "Read This First" before using the machine.
Using this Machine in a Network Environment
Compliant with IEEE Std.2600.1
TM
-2009
Notes for Administrator:

TABLE OF CONTENTS
1. Notes for Administrators
Introduction.........................................................................................................................................................3
Before Applying the Security Functions........................................................................................................3
CC-Certified Operating Environment................................................................................................................4
Checking Versions for CC Conformance.....................................................................................................5
Manuals..........................................................................................................................................................7
Options.........................................................................................................................................................10
Preparation for Use..........................................................................................................................................12
Specifying the MFP Settings........................................................................................................................12
Procedure 1: Settings to Specify Using the Control Panel........................................................................12
Procedure 2: Settings to Specify Using Web Image Monitor..................................................................21
Procedure 3: Settings to Specify Using the Control Panel........................................................................30
Checking the MFP Settings..........................................................................................................................31
Changing MFP Settings During Operation....................................................................................................33
Notes for Setting Up and Operation..............................................................................................................40
Trademarks.......................................................................................................................................................42
1

2

1. Notes for Administrators
Introduction
This product is a multifunction printer (MFP) certified in an operating environment complying with the
requirements of the Common Criteria for Information Technology Security Evaluation (CC certification).
Be sure to read the booklet carefully and understand its contents thoroughly.
The official name of IEEE Std. 2600.1TM-2009 is 2600.1, Protection Profile for Hardcopy Devices,
Operational Environment A (Version: 1.0, dated June 2009).
Before Applying the Security Functions
The person responsible for acquiring this machine must appoint competent personnel as the
administrators (including the machine supervisor) and instruct them to read the administrator manuals
listed below.
• Security Guide
• Getting Started
• Notes for Administrators: Using this Machine in a Network Environment Compliant with IEEE Std.
2600.1TM-2009
To securely operate the machine, administrators must keep these manuals handy.
All other manuals are for general users.
Before applying any security functions, administrators must read and fully understand "Before Using the
Security Functions" in Security Guide.
3

CC-Certified Operating Environment
CC evaluation was performed under the following environment.
Office
FTP Server SMB Server SMTP Server Firewall
Internet
LAN
RC Gate
External Authentication
Server
Telephone Network
Printer Driver
LAN-Fax Driver
Web Browser
Client computer
Machine
(TOE)
CJL010
IT Products Names/Versions of Evaluated IT Products
External Authentication Server Windows Server 2008 / 2008 R2
Printer Driver PCL6 Driver Ver.1.0.0.0
LAN-Fax Driver LAN-Fax Driver Ver.1.0.0.0
Web Browser Internet Explorer 6.0, 7.0, 8.0, and 9.0 for
Windows
RC Gate
RC Gate is a device for @Remote Service.
Remote Communication Gate A
Remote Communication Gate Type BN1
Remote Communication Gate Type BM1
• You can connect necessary IT products to the MFP over the network or telephone line in your
operating environment.
• If this machine's LAN (local area network) is connected to an external network, be sure to use a
firewall or some other means to block any unused ports. Check which ports are required and block
any that are not.
• Use only CC-conformant or later (post-CC-conformant) versions of the PCL6 and LAN-Fax drivers.
If you use a post-CC-conformant driver version, check the revision history to make sure there has
been no security-related revision to the CC-conformant version. You can download the drivers from
the manufacturer's web site.
1. Notes for Administrators
4

• To install the LAN-Fax driver, enter the machine's IP address or host name in the [Printer URL] box
as follows (also described in "Using the SmartDeviceMonitor for Client port" in "Specifying the Port
When Installing the LAN-FAX Driver" in "Installing the LAN-Fax Driver", Driver Installation Guide):
• https://(machine's IP address or host name)/printer
• To install the printer driver, enter the machine's IP address or host name in the [URL:] box as follows
(also described in "Using the IPP Port" in "Installing the Printer Driver for the Selected Port", Driver
Installation Guide):
• https://(machine's IP address or host name)/printer
Checking Versions for CC Conformance
The version of CC-certified target of evaluation (TOE) is E-1.00. The versions of the firmware and
hardware corresponding to version E-1.00 TOE are shown below. When using an MFP, you can
display the firmware and hardware versions.
CC-Certified Operating Environment
5

Primary Classification Secondary Classification Version
Firmware System/Copy 1.02
Network Support 12.68
Fax 01.01.00
RemoteFax 01.01.00
NetworkDocBox 1.00
Web Support 1.10.1
Web Uapl 1.00.1
animation 6.00
Scanner 01.01
Printer 1.01
PCL 1.10
PCL Font 1.13
Data Erase Onb 1.03m
GWFCU3.8-2(WW) 02.00.00
Engine 1.11:08
OpePanel 1.01
Hardware Ic Key 01020714
Ic Hdd 3330
You can check the firmware and hardware versions from the control panel as follows:
1. Press the [User Tools/Counter] key.
2. Log on as the administrator ("admin").
3. Press [System Settings].
4. Press [Administrator Tools].
5. Press [Firmware Version].
1. Notes for Administrators
6

Manuals
The reference numbers of the CC-certified manuals and the model numbers of the machines covered by
the manuals are as follows:
Identifying the model
• Mainly Europe
"-27"
• Mainly North America
"-17" or "-18"
• Mainly Asia
"-29"
In the following example, the machine's model number ends with "-27".
1. Check the label on the rear of the machine to identify the model.
CJL019
2. Check whether the model number on the label ends with "-27".
1. Manual reference numbers for "-27" models
(Paper Manuals)
Manual Name Reference Number
MP C3003/C3503/C4503/C5503/C6003 series
Read This First
D146-7511
Notes for Security Guide D143-7347
Notes for Users D146-7582
SOFTWARE LICENSE AGREEMENT D645-7901
CC-Certified Operating Environment
7

(Manual CD-ROMs)
Manual Name Reference Number
Manuals
MP C3003/C3503/C4503/C5503/C6003 series
A
D146-7883
Printer/Scanner Drivers and Utilities
RICOH MP C3003/C3503 series
MP C3003/C3503 series
infotec MP C3003/C3503 series
D146-7854
(Online Manuals)
Manual Name Reference Number
Notes on Security Functions D146-7587
Notes for Administrators: Using this Machine in a Network
Environment Compliant with IEEE Std. 2600.1TM-2009
D146-7577
2. Manual reference numbers for "-17" or "-18" models
(Paper Manuals)
Manual Name Reference Number
MP C3003/C3503/C4503/C5503/C6003 series
User Guide
D146-7502
MP C3003/C3503/C4503/C5503/C6003 series
Read This First
D146-7512
Notes for Security Guide D143-7348
Notes for Users D146-7581
SOFTWARE LICENSE AGREEMENT D645-7901
(Manual CD-ROMs)
Manual Name Reference Number
Manuals
MP C3003/C3503/C4503/C5503/C6003 series
D146-7880
1. Notes for Administrators
8

Manual Name Reference Number
Printer/Scanner Drivers and Utilities
RICOH MP C3003/C3503 series
LANIER MP C3003/C3503 series
SAVIN MP C3003/C3503 series
D146-7852
(Online Manuals)
Manual Name Reference Number
Notes on Security Functions D146-7587
Notes for Administrators: Using this Machine in a Network
Environment Compliant with IEEE Std. 2600.1TM-2009
D146-7577
3. Manual reference numbers for "-29" models
(Paper Manuals)
Manual Name Reference Number
MP C3003/C3503/C4503/C5503/C6003 series
User Guide
D146-7502
MP C3003/C3503/C4503/C5503/C6003 series
Read This First
D146-7515
Notes for Security Guide D143-7348
Notes for Users D146-7581
SOFTWARE LICENSE AGREEMENT D645-7901
(Manual CD-ROMs)
Manual Name Reference Number
Manuals
MP C3003/C3503/C4503/C5503/C6003 series
D146-7880
Printer/Scanner Drivers and Utilities
RICOH MP C3003/C3503 series
Gestetner MP C3003/C3503 series
LANIER MP C3003/C3503 series
D146-7856
CC-Certified Operating Environment
9

(Online Manuals)
Manual Name Reference Number
Notes on Security Functions D146-7587
Notes for Administrators: Using this Machine in a Network
Environment Compliant with IEEE Std. 2600.1TM-2009
D146-7577
Options
CC certification has been obtained for the machine with the following option attached.
• Fax Option Type M3
The following options are not CC-certified, but can still be used with the machine.
• Finisher SR3140
• Booklet Finisher SR3150
• Punch Unit PU3050 NA
• Punch Unit PU3050 EU
• Punch Unit PU3050 SC
• Booklet Finisher SR3170
• Finisher SR3160
• Punch Unit PU3060 NA
• Punch Unit PU3060 EU
• Punch Unit PU3060 SC
• Internal Finisher SR3130
• Punch Unit PU3040 NA
• Punch Unit PU3040 EU
• Punch Unit PU3040 SC
• Paper Feed Unit PB3160
• Paper Feed Unit PB3150
• Caster Table Type M3
• LCIT PB3170
• LCIT RT3030
• Internal Shift Tray SH3070
• Bridge Unit BU3070
• 1 Bin Tray BN3110
1. Notes for Administrators
10

• Side Tray Type M3
• Handset HS3020
• ADF Handle TypeC
• Copy Data Security Unit Type G
• Waste Toner Bottle MP C6003
• Unicode Font Package for SAP® 1 License
• Unicode Font Package for SAP® 10 License
• Unicode Font Package for SAP® 100 License
CC-Certified Operating Environment
11

Preparation for Use
To use the MFP in a CC-certified operating environment, the administrator must perform the procedures
described on page 12 "Specifying the MFP Settings" and page 31 "Checking the MFP Settings" in
advance.
The administrator should read the MFP manual thoroughly before performing the procedures described
on page 12 "Specifying the MFP Settings" and page 31 "Checking the MFP Settings".
Specifying the MFP Settings
This section explains how to specify the MFP settings to establish a CC-certified operating environment.
The administrator must specify the MFP settings using the control panel and Web Image Monitor
according to the following procedures.
Before specifying the machine settings, log in as the administrator. For details about logging in, see
"Administrator Login Method" in "Getting Started", Security Guide.
Procedure 1: Settings to Specify Using the Control Panel
Using the control panel, specify [System Settings], [Copier / Document Server Features], [Printer
Features], [Scanner Features], [Facsimile Features], and [User Authentication Management] in the User
Tools menu so that they are in the CC-certified ranges.
For details about configuring settings in the User Tools menu, see "Accessing User Tools" in "Read This
First", Connecting the Machine/ System Settings.
1. Specifying [System Settings] (1)
The administrator must specify the settings in [System Settings] within the ranges shown in the table on
the following page.
For details about how to specify the settings, see "System Settings", Connecting the Machine/ System
Settings.
• If you set "User Authentication Management" to [Windows Auth.], as described on page 15 "2.
Specifying [User Authentication Management]", do not use the server name registered in the
Windows server for any of "Administrator 1-4" or "Supervisor" in "Program / Change
Administrator".
• To change the supervisor's "Login User Name" and "Login Password", log in as the supervisor.
1. Notes for Administrators
12

Tab Item Settings
Timer Settings Auto Logout Timer Select [On], and then set the range for
the timer between 60-999 seconds.
Interface Settings Network
Machine IPv4 Address
• Specifying a static IPv4 address
Enter the IPv4 address and subnet
mask.
• Obtaining the DHCP server address
automatically
Select [Auto-Obtain (DHCP)].
Interface Settings Network
IPv4 Gateway Address
Enter the IPv4 gateway address.
Interface Settings Network
DNS Configuration
Specify this only if you are using a static
DNS server.
• Specifying a static DNS server
Enter the IPv4 address in "DNS
Server 1", "DNS Server 2", and
"DNS Server 3". (Specify DNS
Server 2 and 3 if required.)
• Obtaining the DHCP server address
automatically
Select [Auto-Obtain (DHCP)].
Interface Settings Network
Effective Protocol
IPv4
[Active]
Interface Settings Network
Effective Protocol
IPv6
[Inactive]
Interface Settings Network
IEEE 802.1X
Authentication for Ethernet
[Inactive]
File Transfer Delivery Option [Off]
Preparation for Use
13

Tab Item Settings
Administrator Tools Media Slot Use
Store to Memory Device
[Prohibit]
Administrator Tools Media Slot Use
Print from Memory
Storage Device
[Prohibit]
Administrator Tools Administrator
Authentication
Management
User Management
Set [Admin. Authentication] to [On], and
then select [Administrator Tools] in
[Available Settings].
Administrator Tools Administrator
Authentication
Management
Machine Management
Set [Admin. Authentication] to [On], and
then select [General Features], [Tray
Paper Settings], [Timer Settings],
[Interface Settings], [File Transfer], and
[Administrator Tools] in [Available
Settings].
Administrator Tools Administrator
Authentication
Management
Network Management
Set [Admin. Authentication] to [On], and
then select [Interface Settings], [File
Transfer], and [Administrator Tools] in
[Available Settings].
Administrator Tools Administrator
Authentication
Management
File Management
Set [Admin. Authentication] to [On], and
then select [Administrator Tools] in
[Available Settings].
Administrator Tools Program / Change
Administrator
Administrator 1-4
Specify settings for one or more
administrators.
Specify the administrator's "Login User
Name" and "Login Password".
Assign all administrator roles (user
administrator, machine administrator,
network administrator, and file
administrator) to a single administrator.
Administrator Tools Program / Change
Administrator
Supervisor
Change the supervisor's "Login User
Name" and "Login Password".
1. Notes for Administrators
14

2. Specifying [User Authentication Management]
The administrator must specify the settings in [User Authentication Management] in [System Settings]
within the ranges shown in the following table.
For details about how to specify the settings, see "System Settings", Connecting the Machine/ System
Settings.
• Set [User Authentication Management] to [Basic Auth.] or [Windows Auth.].
1. Specifying [Basic Auth.]
Tab Item Settings
Administrator Tools User Authentication
Management
[Basic Auth.]
Administrator Tools User Authentication
Management
Basic Auth.
Available Functions
Specify this in accordance with your
operating environment.
Do not set this to [Browser].
Administrator Tools User Authentication
Management
Basic Auth.
Printer Job Authentication
[Entire]
2. Specifying [Windows Auth.]
Tab Item Settings
Administrator Tools Program / Change /
Delete Realm
Program / Change
Specify "Realm Name", "KDC Server
Name", and "Domain Name".
Administrator Tools User Authentication
Management
[Windows Auth.]
Administrator Tools User Authentication
Management
Windows Auth.
Kerberos Authentication
[On]
Select the realm applied to Kerberos
authentication.
Preparation for Use
15

Tab Item Settings
Administrator Tools User Authentication
Management
Windows Auth.
Printer Job Authentication
[Entire]
Administrator Tools User Authentication
Management
Windows Auth.
Use Secure Connection
(SSL)
[On]
Administrator Tools User Authentication
Management
Windows Auth.
Group
Program / Change
* Default Group
Available Functions
Uncheck all items.
Do not use the global group.
You can specify the functions available to
users during or after user registration.
However, do not include [Browser] in the
functions available to users.
3. Specifying [System Settings] (2)
The administrator must specify the settings in [System Settings] within the ranges shown in the table on
the following page.
For details about how to specify the settings, see "System Settings", Connecting the Machine/ System
Settings.
Tab Item Settings
Administrator Tools Extended Security
Restrict Display of User
Information
[On]
Administrator Tools Extended Security
Restrict Adding of User
Destinations (Fax)
[On]
1. Notes for Administrators
16

Tab Item Settings
Administrator Tools Extended Security
Restrict Adding of User
Destinations (Scanner)
[On]
Administrator Tools Extended Security
Restrict Use of
Destinations (Fax)
[On]
Administrator Tools Extended Security
Restrict Use of
Destinations (Scanner)
[On]
Administrator Tools Extended Security
Transfer to Fax Receiver
[Prohibit]
Administrator Tools Extended Security
Authenticate Current Job
[Access Privilege]
Administrator Tools Extended Security
@Remote Service
Select [Proh. Some Services] if you use
@Remote Service.
Otherwise, select [Prohibit].
Do not set this to [Do not Prohibit].
Administrator Tools Extended Security
Update Firmware
[Prohibit]
Administrator Tools Extended Security
Change Firmware
Structure
[Prohibit]
Preparation for Use
17

Tab Item Settings
Administrator Tools Extended Security
Password Policy
Set "Complexity Setting" to [Level 1] or
[Level 2], press [Change] on the right of
"Minimum Character No.", and then set
the number of characters to 8 or more.
For example, to set the number of
characters to 8, press the number key
"8", and then "#".
Even if you change the password policy,
passwords that have already been
registered can still be used. The changed
password policy will be applied only to
passwords specified or changed
subsequently.
Administrator Tools Extended Security
Security Setting for
Access Violation
[Off]
Administrator Tools Auto Delete File in
Document Server
Select [On] or [Off].
Administrator Tools LDAP Search [Off]
Administrator Tools Service Mode Lock [On]
Administrator Tools Auto Erase Memory Setting Select [On], and then select [NSA],
[DoD], or [Random Numbers].
If you set this to [Random Numbers], set
[Number of Erase] to three or more.
Administrator Tools Transfer Log Setting [Off]
Administrator Tools Machine Data Encryption
Settings
Ensure that the current data has been
encrypted.
If the data has been encrypted, the
following message will appear: "The
current data in the machine has been
encrypted."
Administrator Tools Stop Key to Suspend Print
Job
[Only Job Being Operated]
1. Notes for Administrators
18