Xerox COLORQUBETM 9201 User manual

Version 1.1
Apr 29, 2011
Secure Installation and
Operation of Your
ColorQube™
9201/9202/9203

Secure Installation and Operation of Your ColorQube™
9201/9202/9203
Purpose and Audience
This document provides information on the secure installation and operation of a ColorQube™ 9201/9202/9203 Multifunction
S stem. All customers, but particularl those concerned with secure installation and operation of these machines, should follow
these guidelines.
Overview
This document lists some important customer information and guidelines that will ensure that our ColorQube™
9201/9202/9203 Multifunction S stem is operated and maintained in a secure manner.
Background
The ColorQube™ 9201/9202/9203 Multifunction S stem is currentl undergoing Common Criteria evaluation. The information
provided here is consistent with the securit functional claims made in the Securit Target. Upon completion of the evaluation,
the Securit Target will be available from the Common Criteria Certified Product website
(http://www.commoncriteriaportal.org/products.html) list of evaluated products, from the Xerox securit website
(http://www.xerox.com/information-securit /common-criteria-certified/enus.html ), or from our Xerox representative.
1. Please follow the guidelines below for secure installation, setup and operation of the evaluated configuration
1
for a
ColorQube™ 9201/9202/9203 Multifunction S stem:
a). The securit functions in the evaluated configuration of the ColorQube™ 9201/9202/9203 that should be set up b the
S stem Administrator are:
•Immediate Image Overwrite
•On Demand Image Overwrite
•Disk Encr ption
•IP Filtering
•Audit Log
•SSL (for protection of management data)
•IPSec
•SNMP v3
•Trusted Certificate Authorities
•Local, Remote or CAC/PIV Authentication
•Local Authorization and Personalization
•802.1x Device Authentication
•Session Inactivit Timeout
S stem Administrator login is required when accessing the securit features of a ColorQube™ 9201/9202/9203 machine via
the Web User Interface (Web UI) or when implementing the guidelines and recommendations specified in this document.
To log in to the Web UI as an authenticated S stem Administrator, follow the instructions under “CentreWare Internet
Services” located on page 2-6 in the S stem Administration Guide (SAG)
2
.
To log in to the Local User Interface (Local UI) as an authenticated S stem Administrator, follow the “Administrator Access”
instructions located on page 2-4 in the SAG.
Follow the instructions located in the SAG in Chapter 8, Securit to set up these securit functions except as noted in the
items below. Note that whenever the SAG requires that the S stem Administrator provide an IPv4 address, IPv6 address or
port number the values should be those that pertain to the particular device being configured.
b). The following services of the ColorQube™ 9201/9202/9203 are also considered part of the evaluated configuration and
should be enabled when needed b the S stem Administrator - Cop , Embedded Fax, Scan to E-mail, Workflow Scanning,
Scan to Mailbox and Internet Fax.
The following services of the ColorQube™ 9201/9202/9203 are to be disabled as part of the evaluated configuration -
Network Accounting, Cop /Print Store and Reprint (ma also called “Save for Reprint”/“Reprint Saved Jobs”) and the
Extensible Interface Platform (ma also called “Extensible Services” or “Custom Services”).
1
The term “evaluated configuration” will be used throughout this document to refer to the configuration of the ColorQube™ 9201/9202/9203
Multifunction S stem that is currentl undergoing Common Criteria evaluation.
2
ColorQube™ 9201/9202/9203 S stem Administration Guide, Document Version : 1.0 (05/09)

2
c). Secure acceptance of the ColorQube™ 9201/9202/9203, once device deliver and installation is completed, should be done
b :
•Printing out a Configuration Report b following the “How to Print a Configuration Report” instructions located on page
3-2 of the SAG.
•Comparing the software/firmware versions listed on the Configuration Report with the Evaluated Software/Firmware
versions listed in Table 2 of the Xerox ColorQube™ 9201/9202/9203 Multifunction S stems Securit Target, Version 1.0
and make sure that the are the same in all cases.
d). The S stem Administrator should establish or ensure that unique user accounts are established for all users of the
ColorQube™ 9201/9202/9203 and that no ‘Guest’ users are allowed to access an services on the device. Follow the “User
Information Database” instructions starting on page 8-2 in the SAG to set up local user accounts on the device.
The S stem Administrator should also ensure that the ‘Minimum Length’ passwords for an unique user accounts
established for all users of the ColorQube™ 9201/9202/9203 should be set to at least 8 (alphanumeric) characters unless
applicable internal procedures the S stem Administrator must compl with require a minimum password of a greater length.
The ‘Maximum Length’ can be set to an value between 8 and 63 (alphanumeric) characters consistent with the same
internal procedures. Follow the “User Information Database Password Settings” instructions on page 8-3 in the SAG to set
the minimum and maximum password lengths.
e). For establishing remote authentication access to network accounts follow the “Authentication Configuration” instructions
located on page 7-3 of the SAG to set up an Authentication Server. Follow the “Configuring Common Access Card”
instructions starting on page 14 of the Common Access Card (CAC) Guide
3
to set up user authentication via a Common
Access Card.
f). For customers concerned about document files on the hard disk drive(s)
4
or Embedded Fax card memor the Immediate
Image Overwrite and On Demand Image Overwrite securit features, which comes installed on the ColorQube™
9201/9202/9203 Multifunction S stem, must be properl configured and enabled. Please follow the “Immediate Image
Overwrite” instructions starting on page 8-17 in the SAG and the “On Demand Overwrite” instructions starting on page 8-19
in the SAG for proper enablement, setup and initiation of Immediate Image Overwrite and On Demand Image Overwrite,
respectivel .
Notes:
•Immediate Image Overwrite of a dela ed or secure print job will not occur until after the machine has printed the job.
•If an Immediate Image Overwrite fails, an error message will appear at the top of the screen indicating that there is an
Immediate Image Overwrite error and that an On Demand Image Overwrite should be run. This error message will
persist until an On Demand Image overwrite is initiated b the S stem Administrator. In the case that the cop
controller is reset at the same time a cop job is being processed b the device, this same error message ma also
appear when the cop controller has completed its reset.
•If there is a power failure or s stem crash while a network scan job is being processed, an Immediate Overwrite of the
residual data will occur upon job recover . However, the network scan job ma not appear in the Completed Job Log.
•If there is a power failure or s stem crash of the network controller while processing a print job, residual data might still
reside on the hard disk drive(s). The S stem Administrator should immediatel invoke an On Demand Image Overwrite
once the machine has been restored.
•Two forms of On Demand Image Overwrite are manuall invoked – a Standard On Demand Image Overwrite that will
overwrite all image data except data stored b the Reprint Save Job feature and data stored in Embedded Fax dial
directories and mailboxes and a Full On Demand Image Overwrite that will overwrite all image data including data
stored b the Reprint Save Job feature and data stored in Embedded Fax dial directories and mailboxes. Follow the
instructions starting on page 8-19 the SAG for invoking a Standard or Full On Demand Image Overwrite from either the
Local UI or the Web UI.
•Once an On Demand Image Overwrite has been initiated b the S stem Administrator from either the Local UI or Web
UI it can not be aborted b the S stem Administrator.
The S stem Administrator also has the option of scheduling either a Standard or Full On Demand Image Overwrite
from the Web UI. Follow the instructions starting on page 8-21 in the SAG to schedule an On Demand Image Overwrite.
3
Xerox Common Access Card Xerox ColorQube™ 9201/9202/9203, Version 1.0, 09/09, 604E53830
4
The ColorQube™ 9201/9202/9203 Multifunction S stem comes in two configurations – a multi-board configuration with separate Network
Controller and Cop Controller boards and separate hard disk drives and a single board configuration with one board containing both the Network
and Cop Controllers and with two hard disk drives.

3
•Before invoking an On Demand Image Overwrite verif that:
•There are no active or pending print or scan jobs.
•There are no new or unaccounted for D namic Loadable Modules (DLMs) or other software running on the
machine.
•There are no active processes that access the hard disk drive(s).
•No user is logged into a session via network accounting, Xerox Standard Accounting, or the internal auditron, or
into a session accessing a director on the hard disk drive(s)
3
.
•After a power on of the machine all subs stems must be properl s nced and, if printing of Configuration Reports is
enabled on the device, the Configuration Report must have printed.
•For an previousl initiated On Demand Image Overwrite request the confirmation sheet must have printed.
•The Embedded Fax card must have the correct software version and must be properl configured.
•When invoked from the Web UI the status of the completed On Demand Image Overwrite will not appear on the Local
UI but can be ascertained from the On Demand Overwrite Confirmation Report that is printed after the Network
Controller reboots.
•If an On Demand Image Overwrite fails to complete because of an error or s stem crash, Xerox recommends that first a
s stem reboot or software reset be initiated b the S stem Administrator from either the Local UI or the Web UI and be
allowed to complete; otherwise, the Local UI ma become unavailable. If the Local UI does become unavailable the
machine will have to be powered off and then powered on again to allow the s stem to properl res nchronize. Once
the s stem reboots or software reset has completed the S stem Administrator should immediatel perform another On
Demand Image Overwrite.
•If there is a failure in the hard disk drive(s) a message recommending that an On Demand Image Overwrite be run will
appear on the Local UI screen. An Immediate Image Overwrite Error Sheet will also be printed or ma contain
incomplete status information. The S stem Administrator should immediatel perform the requested On Demand
Image Overwrite.
•The time shown on the On Demand Overwrite progress screen displa ed on the Local UI ma not reflect Da light
Savings Time.
•If an On Demand Image Overwrite is successfull completed, the completion (finish) time shown on the printed On
Demand Overwrite Confirmation Report will be the time that the s stem shuts down.
•The S stem Administrator should perform an On Demand Image Overwrite immediatel before a ColorQube™
9201/9202/9203 Multifunction S stem is decommissioned, returned, sold or disposed of.
g). The ColorQube™ 9201/9202/9203 Multifunction S stem supports the use of SSLv2.0, SSLv3.0, RC4 and MD5. However,
customers are advised to set the c rpto polic of their clients to request either SSLv3.1 or TLSv1.0 and to disallow the use of
RC4 and MD5.
h). For SSL to work properl the machine must be assigned a valid, full qualified machine name and domain. To set the
machine name and domain:
•Follow the “Access Internet Services” instructions on page 2-6 of the SAG to access the Web UI.
•At the Web UI, select the Properties tab.
•Select the following entries from the Properties 'Content menu’: Connectivity  Protocols  P.( nternet Protocol)
•Enter the domain name in the ‘Domain Name’ text box and the machine name in the ‘Host Name’ text box inside the
General group box.
•Select the [Apply] button to save the domain and host names entered.
i). Xerox recommends the following when utilizing Secure Sockets La er (SSL) on a ColorQube™ 9201/9202/9203:
•An self-signed digital certificate or digital certificate signed b a Trusted Certificate Authorit should have a maximum
validit of 180 da s.
•If a self-signed certificate is to be used the generic Xerox root CA certificate should be downloaded from the device and
installed in the certificate store of the user's browser.

4
j). Xerox recommends that HTTPS be enabled in the evaluated configuration. To enable HTTPS (SSL):
•At the Web UI
5
, select the Properties tab.
•Follow the “Machine Digital Certificate Management” instructions starting on page 8-9 of the SAG to install on the
device either a self-signed digital certificate or a digital certificate signed b a Certificate Authorit (CA).
•Select the following entries from the Properties 'Content menu’: Connectivity  Protocols  HTTP.
•Select the Secure HTTP (SSL) Enabled checkbox in the Configuration group box and enter the desired HTTPS port
number in the Port Number text box.
•Select the [Apply] button. This will save the indicated settings. After saving the changes the Web UI will become
disabled; the S stem Administrator will have to access the Web UI again.
k). Xerox recommends the following when utilizing Secure Sockets La er (SSL) for secure scanning on a ColorQube™
9201/9202/9203:
•SSL should be enabled and used for secure transmission of scan jobs from a ColorQube™ 9201/9202/9203.
•When storing scanned images to a remote repositor using an https: connection, a Trusted Certificate Authorit
certificate should be uploaded to the device so the device can verif the certificate provided b the remote repositor .
•When an SSL certificate for a remote SSL repositor fails its validation checks the associated scan job will be deleted
and not transferred to the remote SSL repositor . The S stem Administrator should be aware that in this case the job
status reported in the Completed Job Log for this job will read: “Job could not be sent as a connection to the server
could not be established”.
l). In the evaluated configuration for a ColorQube™ 9201/9202/9203, when ‘Device User Interface Authentication” is set to
[Remotel on the Network] the onl authentication protocols options recommended to be used are [Kerberos (Solaris)],
[Kerberos (Windows 2000/2003)] or [LDAP]. However, use of other authentication protocol options is allowable.
In the case of LDAP/LDAPS the S stem Administrator should ensure that SSL is enabled as discussed in Step 19 on page 7-9
in the SAG.
m). In the evaluated configuration for a ColorQube™ 9201/9202/9203, when setting up authorization onl the [Locall on the
Device (Internal Database)] option is recommended to be used. However, use of the [Remotel on the Network]
authorization option is allowable.
n). In viewing the Audit Log the S stem Administrator should note the following:
•Deletion of a file from Reprint Saved Job folders or deletion of a Reprint Saved Job folder itself is recorded in theAudit
Log.
•Deletion of a print or scan job or deletion of a scan-to-mailbox job from its scan-to-mailbox folder ma not be recorded
in the Audit Log.
•Extraneous process termination events (Event 50) ma be recorded in the Audit Log when the device is rebooted or
upon a Power Down / Power Up.
o). In downloading the Audit Log the S stem Administrator should ensure that Audit Log records are protected after the have
been exported to an external trusted IT product and that the exported records are onl accessible b authorized individuals.
p). Be careful not to create an IP Filtering rule that rejects incoming TCP traffic from all addresses with source port set to 80;
this will disable the Web UI.
IP Filtering is not available for either the AppleTalk protocol or the Novell protocol with the ‘IPX’ filing transport. Also, IP
Filtering will not work if IPv6 is used instead of IPv4.
q). To enable disk encr ption:
•At the Web UI, select the Properties tab.
•Select the following entries from the Properties 'Content menu’: Security  User Data Encryption.
•Select the Enabled checkbox in the User Data Encryption Enablement group box.
•Select the [Apply] button. This will save the indicated setting. After saving the changes the Network Controller will
reboot; once this reboot is completed the S stem Administrator will have to access the Web UI again.
Xerox recommends that before enabling disk encr ption the S stem Administrator should make sure that the ColorQube™
9201/9202/9203 is not in diagnostics mode and that there are no active or pending scan jobs.
5
From here on the directions assume that the Web UI has been accessed alread b following the “Access Internet Services” instructions on page
2-6 of the SAG.

5
r). The S stem Administrator should ensure that the Embedded Fax Card and fax software is installed in accordance with the
“Complete the Fax Setup Screens” instructions on page 15-2 in the SAG. The S stem Administrator can then set Embedded
Fax parameters and options via the Local User Interface on the machine b following the instructions on pages 15-2
through 15-4 in the SAG.
s). To enable and configure IPSec, follow the instructions starting on page 8-12 in the SAG. Xerox strongl recommends that
IPSec should be used to secure printing jobs; HTTPS (SSL) should be used to secure scanning jobs. Note: IPSec is not
available for either the AppleTalk protocol or the Novell protocol with the ‘IPX’ filing transport.
Xerox also recommends that the default values for IPSec parameters listed in the IPSec section in the SAG be used
whenever possible for secure IPSec setup. The following default values not listed in the SAG should also be used for secure
IPSec setup:
•For defining policies the options listed for ‘Hosts’, ‘Protocols’ and ‘Action’ are all defaults; the S stem Administrator
should choose the particular option that pertains to whether the hosts and protocols in each case are to be allowed or
discarded and the corresponding desired action.
•The Host Group address t pe defaults to ‘Specific’.
•Protocol Group Custom Protocol defaults to being disabled. If Custom Protocol is enabled then the protocol defaults to
‘TCP’ and the Device Is t pe defaults to ‘Server’.
•The IPSec New Actions ke ing method defaults to ‘Internet Ke Exchange (IKE)’.
•If ‘Manual Ke ing’ is selected the IPSec securit option defaults to ‘ESP’, the Securit Parameter Index: IN defaults
to ‘256’, the Securit Parameter Index: OUT defaults to ‘257’, the hash method defaults to ‘SHA-1’, the encr ption
method defaults to ‘3DES’ and the ke s option defaults to ‘ASC format (System will automatically convert to
hex value for you)’. Also, “AH” alone should not be selected as the IPSec Securit option.
•If ‘Internet Ke Exchange (IKE)’ is selected the IKE Phase 1 ke lifetime defaults to ’86,400 seconds’, the DH Group
defaults to ‘DH Group 2 (1024-bit MODP)’, the Encrypt/Hash pair defaults to ‘SHA-1 and AES’, the PSec mode
defaults to ‘Transport Mode’, the IPSec securit option defaults to ‘ESP’, the IKE Phase 2 ke lifetime defaults to
’28,800 seconds’, the IKE Phase 2 hash method defaults to ‘SHA1’ and the IKE Phase 2encr ption method defaults
to ‘3DES’.
t). Xerox recommends that if SNMP is enabled SNMPv3 should be used. SNMPv3 can be set up b following these instructions:
SNMPv3 cannot be enabled until SSL (Secure Sockets La er) and HTTPS (SSL) are enabled on the machine.
•At the Web UI, select the Properties tab.
•Select the following entries from the Properties 'Content menu’: Connectivity  Protocols  SNMP. This will displa
the SNMP Configuration page.
•Select the “Enable SNMP v3 Protocol” checkbox inside the SNMP Properties group box.
•Select the [Edit SNMP v3 Properties] button inside the SNMP Properties group box. This will cause the Edit SNMP v3
Properties page to be displa ed.
•On the Edit SNMP v3 Properties page:
•Select the Account Enabled button inside the Administrator Account
6
group box to create an administrator account.
•Enter the desired Username and Authentication Password. The Authentication Password must be at least 8
alphanumeric characters (the default value is ‘3tamAvUMEfeR84erar6z’).
•Enter the desired Privacy Password of at least 8 alphanumeric characters (the default value is
‘TRUDU27qumAspuswe4he’).
•Select the Account Enabled button inside the Print Drivers Account group box to create an account for bi-directional
print drivers / Xerox remote clients.
•Select the [Apply] button. This will create an administrator account and save the indicated settings/passwords. After
saving the changes the SNMP Configuration page will be redispla ed.
The S stem Administrator should be aware that in configuring SNMPv3 there is the option of resetting both the Privac and
Authentication passwords back to their default values. This option should onl be used if necessar since if the default
passwords are not known no one will be able to access the SNMP administrator account.
6
The SNMP administrator account is strictl for the purposes of accessing and modif ing the MIB objects via SNMP; it is separate from the S stem
Administrator “admin” user account or user accounts given SA privileges b the S stem Administrator “admin” user. The administrator account can
not perform an S stem Administrator functions.

6
u). To enable the session inactivit timers (termination of an inactive session) from the Web UI:
•At the Web UI, select the Properties tab.
•Select the following entries from the Properties 'Content menu’: Security  System Timeout
•Enter in the appropriate text box the desired inactive session timeout interval in minutes for the Web S stem Timer (i.e.,
the session timeout for the Web UI) and for the Touch User Interface S stem Timer (i.e., the session timeout for the
Local User Interface).
•Select the [Apply] button. This will save the indicated inactivit timer settings. After saving the changes the System
Timeout page will be redispla ed.
v). To enable the session inactivit timer (termination of an inactive session) for the Local UI from the Local UI:
•.Select the [Machine Status] hard button on the device and then the [Tools] button to access the S stem Administrator
Tool pathwa .
•Select the following buttons from the Tools menu: [Device Settings]  [Timers]  [System Timeout…]
•Select the [Enabled] button and then enter the desired inactive session timeout interval in seconds in the text box.
•Select the [Save] button. This will save the indicated Local UI inactivit timer setting. After saving the changes the
Timers screen will be redispla ed.
w). The Saved Jobs for Reprint feature should be disabled to be consistent with the evaluated configuration. To disable this
feature from the Web UI:
•Select the Properties tab.
•Select the following entries from the Properties 'Content menu’: Services  Reprint Saved Jobs  Enablement
•Select the [Disabled] button and then select the [Delete All Jobs] button.
•Select the [Apply] button. This will save the indicated settings and disable the Saved Jobs for Reprint feature.
x). The SMart eSolutions feature should be disabled to be consistent with the evaluated configuration. To disable this feature
from the Web UI:
•Select the Properties tab.
•Select the following entries from the Properties 'Content menu’: General Setup  SMart eSolutions.
•Select the [Not Enrolled] button under ‘SMart eSolutions Enrollment’.
•Select the [Apply] button. This will disable the SMart eSolutions feature.
). To enable the Scan to Mailbox feature from the Web UI:
•Select the Properties tab.
•Select the following entries from the Properties 'Content menu’: Services  Scan to Mailbox  Enablement
•Select the [Enable Scan to Mailbox] button and then select the [On Scan tab, view Mailboxes b default] button.
•Select the [Apply] button. This will save the indicated settings.
Xerox strongl recommends that users place documents scanned on a ColorQube™ 9201/9202/9203 using the Scan to
Mailbox feature in private folders and not in public folders.
To set the scan policies for the Scan to Mailbox feature, select the following entries from the Properties 'Content menu’:
Services  Scan to Mailbox  Scan Policies. Public folders are not allowed in the evaluated configuration. The scan
policies should therefore be set as follows:
• Deselect [Allow Scanning to Default Public Folder].
• Deselect [Require per Job password to public folders].
• Select [Allow additional folders to be created]
• Select [Require password when creating additional folders].
• Select [Prompt for password when scanning to private folder].
•Deselect [Allow access to job log data].
z). The Admin Password Reset securit feature should be disabled to be consistent with the evaluated configuration. To disable
this feature from the Web UI:
•Select the Properties tab.
•Select the following entries from the Properties 'Content menu’: Security  Admin Password  Reset Policy tab.
•Select the [Disable Password Reset] button.

7
•Select the [Apply] button. This will disable the Admin Password Reset feature.
aa). The Custom Services (Extensible Interface Platform or EIP) feature should be disabled to be consistent with the evaluated
configuration. To disable this feature from the Web UI:
•Select the Properties tab.
•Select the following entries from the Properties 'Content menu’: Connectivity  Protocols  HTTP  Web Services
tab.
•Make sure that the [Enable] checkbox associated with the Extensible Service Registration entr under Remote S stem
Management is not selected.
•Select the [Apply] button. This will ensure that Custom Services are disabled on the device.
bb). Network Accounting and Auxiliar Access should both be disabled to be consistent with the evaluated configuration. To
disable Network Accounting and Auxiliar Access from the Local UI:
•Select the [Machine Status] tab and then the [Tools] button. This will access the Tools Pathwa .
•Select the following buttons from the Tools Pathway: Accounting Settings  Accounting Mode.
•Make sure that neither the [Network Accounting] button nor the [Auxiliary Access] button is selected. From a securit
perspective it does not matter whether the [None] or the [Xerox Standard Accounting] option is selected.
•Select the [Save] button. This will ensure that Network Accounting and Auxiliar Access are both disabled on the device.
cc). For evaluated configuration of Embedded Fax Xerox strongl recommends that the Secure Receive option be enabled
7
and
that the Local Polling option be disabled and that embedded fax mailboxes be used whenever practical to store fax jobs.
•To enable Secure Receive from the Local UI follow the instructions on page AdminstrationandAccounting-26 of the
Admin and Accounting Guide
8
. Make sure that the [Enable] button is selected.
•Local Polling should be disabled in the evaluated configuration. To disable Local Polling from the Local UI follow the
instructions on page FAX-24 of the Fax Guide
9
. Make sure that the Local Polling option is set to the [Off] (which is the
default setting) on the Local Polling screen.
•To set up Embedded Fax mailboxes from the Local UI follow the instructions on page AdminstrationandAccounting-28
of the Admin and Accounting Guide. Make sure that passcode selected for a newl created mailbox is not the default
value of ‘0000’.
•The Mailbox and Polling Polic should be set to delete received faxes when the are printed. To set the Mailbox and
Polling Polic follow the instructions on page AdminstrationandAccounting-28 of the Admin and Accounting Guide and
select the ‘Delete on Print’ option.
dd). Xerox strongl recommends that an print job submitted to the device from a client or from the WebUI be submitted as a
secure print job.
ee). To maintain the certified configuration, Xerox recommends that acceptance of customer software upgrades via the network
be disabled. To disable software upgrades via the network from the WebUI:
•Select the Properties tab.
•Select the following entries from the Properties 'Content menu’: General Setup  Machine Software  Upgrades.
•Make sure that the [Enable] checkbox associated with the Upgrades entr is not selected.
•Select the [Apply] button. This will ensure that software upgrades via the network are disabled on the device.
ff). Change the Administrator password as soon as possible. Reset the Tools password periodicall .
Xerox recommends that ou (1) set the Administrator password to a minimum length of eight alphanumeric characters, (2)
change the Administrator password once a month and (3) ensure that all passwords are strong passwords (e.g., passwords
use a combination of alphanumeric and non-alphanumeric characters; passwords don’t use common names or phrases,
etc.).
For directions on how to change the Tools password, follow the “How to change the Administrator Password” instructions on
page 3-1 in the SAG.
2. If SNMP v3 is not enabled, Xerox recommends that the S stem Administrator change the SNMP v1/v2c public/private
communit strings from their default string names to random string names.
7
This will appl to an received fax, including faxes that are remotel polled to the device from another remote fax machine or remote device.
8
ColorQube™ 9201/9202/9303 Advanced Guide Administration and Accounting, Version 1.0 (05/09)
9
ColorQube™ 9201/9202/9303 Advanced Guide Fax, Version 1.0 (05/09).

8
3. Xerox recommends that the S stem Administrator set the USB Settings to ‘Direct Printing via Driver’ mode to allow onl direct
printing and prohibit submittal of software upgrade files to the device from a USB Flash Drive. To set the USB Settings to ‘Direct
Printing via Driver’ mode via the Web UI:
•Select the Properties tab.
•Select the following entries from the Properties 'Content menu’: Connectivity  Physical Connections USB Port.
•Make sure the [Direct Printing via Driver] option under ‘USB Connection Mode’ is selected.
•Select the [Apply] button. This will ensure that submittal of software upgrades to the device from a USB Flash Drive is
prohibited.
4. Before upgrading software on a ColorQube™ 9201/9202/9203 Multifunction S stem via the Manual/Automatic Customer
Software Upgrade, please check for the latest certified software versions. Otherwise, the machine ma not remain in its certified
configuration.
5. Xerox recommends that customers sign up for the RSS
10
subscription service available via the Xerox Securit Web Site
(Securit @Xerox) at www.xerox.com/securit that permits customers to view the latest Xerox Product Securit Information and
receive timel reporting of securit information about Xerox products, including the latest securit patches that appl to the
ColorQube™ 9201/9202/9203 Multifunction S stem.
6. The ColorQube™ 9201/9202/9203 Multifunction S stem should be installed in a standard office environment. Office personnel
should be made aware of authorized service calls (for example through appropriate signage) in order to discourage
unauthorized ph sical attacks such as attempts to remove the internal hard disk drive(s).
7. Customers who encounter or suspect software problems against a ColorQube™ 9201/9202/9203 Multifunction S stem should
immediatel contact the Xerox Customer Support Center to report the suspected problem and initiate the SPAR (Software
Problem Action Request)
11
process for addressing problems found b Xerox customers.
8. Caution: A ColorQube™ 9201/9202/9203 allows an authenticated S stem Administrator to disable functions like Image
Overwrite Securit that are necessar for secure operation. S stem Administrators are advised to periodicall review the
configuration of all installed machines in their environment to verif that the proper evaluated configuration is maintained.
9. Depending upon the configuration of the ColorQube™ 9201/9202/9203, two IPv4 addresses, a primar IPv4 address and a
secondar IPv4 address, ma be utilized. The S stem Administrator selects whether the primar IPv4 address will be obtained
staticall or d namicall via DHCP from the IP (Internet Protocol) page on the Web UI
12
.The second IPv4 address is assigned
via APIPA when the S stem Administrator enables the ‘Self Assigned Address’ option from the IP (Internet Protocol)page on
the Web UI. If the ‘Self Assigned Address’ option is enabled (which is the default case), this secondar IPv4 address will not be
visible to the SA
13
. Xerox recommends that the ‘Self Assigned Address’ option from the Web UI IP (Internet Protocol) page be
disabled unless either APIPA is used or Apple Rendezvous/Bonjour support is required.
10. If a s stem interruption such as power loss occurs a job in process ma not be full written to the hard disk drive(s). In that case
an temporar data created will be overwritten during job recover but a corresponding record for the job ma not be recorded
in the completed job log or audit log.
11. If IPv6 is disabled and then a software upgrade is performed b a Xerox Service Technician using an AltBoot, IPv6 will be
disabled even though both the Local UI and Web UI show that IPv6 is enabled. IPv6 can be enabled again b first disabling it
on the Web UI and then re-enabling it on the Web UI.
12. Xerox recommends that a unique Embedded Fax or Scan-to-Mailbox mailbox is established for each authenticated user of the
ColorQube™ 9201/9202/9203.
13. Xerox recommends that Remote Polling should onl be used b the S stem Administrator.
14. Xerox recommends that passcodes for Embedded Fax and Scan-to-Mailbox mailboxes should be selected to be as random as
possible and should be changed on a regular basis, consistent with applicable internal policies and procedures.
15. Xerox recommends that the S stem Administrator should disable (set to ‘Off’) both printing of Embedded Fax confirmation
reports (see page AdminstrationandAccounting-29 of the Admin and Accounting Guide
8
) and Embedded Fax cover pages (see
page FAX-11 of the Fax Guide
9
).
16. Xerox recommends that users of the ColorQube™ 9201/9202/9203 undergo appropriate training on how to use the ColorQube™
9201/9202/9203 in a secure manner before being assigned user accounts to access the ColorQube™ 9201/9202/9203.
10
Reall Simple S ndication – A lightweight XML format for distributing news headlines and other content on the Web. Details for signing up for
this RSS Service are provided in the Security@Xerox RSS Subscription Service guide posted on the Security@Xerox site at
http://www.xerox.com/go/xrx/template/009.jsp?view=Feature&ed_name=RSS_Security_at_Xerox&Xcntry=USA&Xlang=en_US.
11
A SPAR is the software problem report form used internall within Xerox to document customer-reported software problems found in products in
the field.
12
The primar IPv4 address can also be assigned d namicall via DHCP from the D namic Addressing screen on the Local UI.
13
The primar IPv4 address will alwa s be displa ed on the Configuration Report that can be printed for a ColorQube™ 9201/9202/9203.

9
17. Direct USB printing is not part of the evaluated configuration for a ColorQube™ 9201/9202/9203.
18. The following windows are available from the Local User Interface to a ColorQube™ 9201/9202/9203 with S stem
Administrator login and authentication. These windows provide standard s stem configuration or job management capabilit :
•PagePack Passcode - Allows the S stem Administrator to enter a 4 digit “PagePack PIN” to enable a PagePack device to
work with metered supplies. Is accessible b selecting the following screens/buttons in order: [Machine Status] hard button
 [Tools] button  [Device Settings] button  [Enter PagePack Passcode] button. Once the S stem Administrator
accesses the PagePack Passcode screen and enters a valid PagePack PIN, the S stem Administrator can print out PagePack
courtes prints b selecting the [Skip] button; however, if the number of PagePack courtes prints requested exceeds the
allowable limit an appropriate error message will be displa ed on the screen and the S stem Administrator will have to re-
enter a valid PagePack PIN.
•Enter Cleaning Unit Passcode - Allows the S stem Administrator to enter a 4 digit passcode to temporaril extend a
Customer Replaceable Unit (CRU) when that CRU has reached its end of life. Is accessible b selecting the following
screens/buttons in order: [Machine Status] hard button  [Tools] button  [Device Settings] button  [Enter Cleaning
Unit Passcode] button.
•Low Supply Warning - Allows the S stem Administrator to set when to receive low suppl warnings for the ColorQube Ink
Sticks, Cleaning Unit, and Document Feed Roll. Is accessible b selecting the following screens/buttons in order: [Machine
Status] hard button  [Tools] button  [User nterface Settings] button  [General] button  [Low Supply Warning]
button.
•Service Plan - Allows the S stem Administrator to set or change the Service Plan for the device. Is accessible b selecting the
following screens/buttons in order: [Machine Status] hard button  [Tools] button  [Service Settings] button  [Service
Plan] button.
•Network Logs – Allows the S stem Administrator to download network logs to a USB drive for troubleshooting purposes. Is
accessible b selecting the following screens/buttons in order: [Machine Status] hard button  [Tools] button  [Network
Settings] button  [Advanced Settings] button  [Network Logs] button. The S stem Administrator can download either
a basic or an enhanced level of network log information, and a separate screen will provide information on the completion
status of the download.
Downloaded network logs are alwa s encr pted and require Xerox personnel to decr pt the logs before the can be read b
the S stem Administrator or other authorized persons.
•USB Settings – Allows the S stem Administrator to enable/disable and set the configuration of the USB Printer Port
connectivit . Is accessible b selecting the following screens/buttons in order: [Machine Status] hard button  [Tools]
button  [Network Settings] button  [Advanced Settings] button  [USB Settings] button.
•Supply Counter Reset – Allows the S stem Administrator to manuall reset the suppl counter for a CRU on a ColorQube™
9201/9202/9203 back to 100% when that CRU is replaced. Is accessible b selecting the following screens/buttons in order:
[Machine Status] hard button  [Tools] button  [Troubleshooting] button  [Resets] button  [Supply Counter
Reset] button.
19. The following windows are available to an authenticated and authorized user from the Local User Interface to a ColorQube™
9201/9202/9203. These windows provide standard machine services or job management capabilit :
•Embedded Fax Batch Send Confirmation – Allows a user to either send an Embedded Fax job to a remote destination
immediatel or include the job as part of a “batch” of Embedded Fax jobs sent to the same destination. Is accessible b
selecting the following screens/buttons in order: [Services Home] hard button  [Fax] feature button  [Start] hard
button when a user is submitting an Embedded Fax Send job to the same destination as a previousl submitted “dela ed
send“ Embedded Fax job.
•Workflow Scanning Authentication Required – Allows a user to enter the proper user credentials for a workflow scanning
job being sent to a network destination that requires user login. Is accessible b selecting the following screens/buttons in
order: [Services Home] hard button  [Workflow Scanning] button  [Start] hard button when a user is submitting a
workflow scanning job to a network destination that requires user login  [OK] button.
•Pausing an active job being processed by the device – Allows the user to pause an active cop , print, workflow scanning,
scan to email, Internet Fax or Embedded Fax job while it is being processed b the ColorQube™ 9201/9202/9203. Is
accessible b selecting the [Stop] machine hard button while a job is being processed b the device. Depending on the t pe
of jobs being processed b the device when the [Stop] button is selected, one of the following Pause windows will be
displa ed as appropriate to allow the user to determine whether to delete or continue processing of the job: Scanning
Pause window, Printing Pause window, Copy Only (Scanning and Printing) Pause window, Scanning/Printing
(Simultaneous Jobs) Pause window, Scanning Build Job Segment (No Printing) Pause window, Printing Build Job
Segment (No Scanning) Pause window or Scanning Build Job Segment/Printing Another Job Pause window.

10
•Overwrite Security Failure – Automaticall provides an error message to the user is case an Immediate Image Overwrite of
a cop , print, workflow scanning, scan to email, Internet Fax or Embedded Fax job fails. The error message informs the user
to notif the S stem Administrator that an On Demand Overwrite should be run and persists on the Local UI screen until
either a manual or a scheduled On Demand Overwrite is initiated.
•Custom Services – Provides access to an custom services (Third Part applications developed with a common API to run on
a Xerox device) that are installed in the device. Is accessible b selecting the following screens/buttons in order: [Services
Home] hard button  [Custom Services] button. The user then selects an of the installed services listed on the Custom
Services screen which will cause that service to be run. The user should be aware of the following:
•A screen will be displa ed with the appropriate error message when the device encounters an error while attempting to
access a custom service installed on the device.
•If the [Access] hard button is selected after selecting an installed custom service , a screen will be displa ed that will
allow the user to exit the Custom Services service.
•User nterface Diagnostics - Allows the user to run diagnostics on the User Interface software. Is accessible b pressing the
machine hard buttons ‘Dial Pause’ + ‘*’ + ‘#’ in that order.
•Automatic Maintenance – Provides a notice to a user when automatic maintenance of the Internal Marking Engine on the
device to perform print qualit diagnostics and calibration is being performed. Applicable screens will be displa ed to
indicate when this automatic maintenance is about to start and is in progress; the user has the option to cancel the
automatic maintenance b selecting the [Cancel] button on the screen that appears when automatic maintenance is about
to start.
20. The Web UI provides a set of on-line help pages that provide guidance on most of the Web UI pages. These on-line help pages
can be accessed from the Web UI b selecting the [Help] button on the upper right hand corner of ever Web UI page; the on-
line help page corresponding to the Web UI page being viewed will be displa ed. There is also a ‘TOC’ contents list of all Web UI
help pages to the left of each help page; scrolling through the content list and selecting the desired page will also cause the
applicable on-line help page to be displa ed.
The following pages are available from the Web UI on the ColorQube™ 9201/9202/9203 with S stem Administrator login and
authentication but are not documented in either the SAG or the on-line help:
•Scan Compression Capability Page – Allows a user to set compression capabilit for Workflow Scanning. Is accessible b
selecting the following items in order: Scan tab  selecting a template from the Template List in the Scan content menu 
[Edit] button in the Compression Capability group box.
•Entry Screen Defaults - Allows the S stem Administrator to set the default entr screens (also called the “default walkup
screens”) for the Local UI. Is accessible b selecting the Properties tab and then selecting General Setup  Entry Screen
Defaults from the Properties tab content menu.
•Sleep Mode Settings - Allows the S stem Administrator to set the Network Controller sleep mode settings. Is accessible b
selecting the Properties tab and then selecting General Setup Sleep Mode Settings from the Properties tab content
menu. The S stem Administrator can also set up advanced Network Controller sleep mode settings b selecting the
[Advanced Settings] button located on the Sleep Mode Settings page.
•nternet Fax Defaults File Extension Page – Allows the S stem Administrator to set Internet Fax default file extensions to
be created in either upper or lower case. Is accessible b selecting the Properties tab and then selecting from the Properties
tab content menu Services  nternet Fax  Defaults 

 Edit from the File Extension group box on the nternet Fax
Defaults page.
•Validation Servers – Allows the S stem Administrator to select and configure up to six Workflow Scanning validation
•Application Domain/Content Query - Allows the configuration of the s stem to perform an LDAP quer for the logged-in
user’s authentication domain prior to authenticating the server. Is accessible b t ping http://{ P
Address}
14
/diagnostics/index.dhtml and then selecting ‘Authentication Domain/Context Query’ from the Diagnostics
Content Menu.
•Scanning Lock Files - Allows b passing the filename locking feature. Is accessible b t ping http://{ P
Address}/diagnostics/index.dhtml and then selecting ‘Scanning Lock Files’ from the Diagnostics Content Menu or b
t ping http://{ P Address}/diagnostics/lockFiles.dhtml.
•Grey Other Queue Button - Allows the S stem Administrator to gre out the ‘Other Queue’ button on the Local UI. Is
accessible b t ping http://{ P Address}/diagnostics/index.dhtml and then selecting ‘Grey Other Queues Button’ from the
Diagnostics Content Menu or b t ping http://{ P Address}/diagnostics/hideotherqueuesbutton.php.
14
{IP Address} is the IPv4 address of the machine

11
•Secure Print Alphanumeric P N - Allows the S stem Administrator to set the secure print PIN to be alphanumeric
characters instead of just digits. Is accessible b t ping either http://{ P Address}/diagnostics/index.dhtml and then
selecting ‘Secure Alphanumeric P N’ from the Diagnostics Content Menu or b t ping http://{ P
Address}/diagnostics/secureprintalphanumericpin.php.
•Secure Attribute Editor - Allows the user to change some s stem attributes related to PDLs (e.g., memor usage, copies per
page, etc.). Is accessible b t ping http://{ P Address}/diagnostics/secureattr.dhtml.
•Suppress Job Name - Allows the S stem Administrator to suppress displa ing the job name on the Banner Page when
submitting a print job. Is accessible b t ping http://{ P Address}/diagnostics/jobNameSuppress.dhtml.
•Job Log File Format - Allows the S stem Administrator to set the XML job log file format. Is accessible b t ping http://{ P
Address}/diagnostics/jobLog.dhtml.
•File Extension Case - Allows the S stem Administrator to select all file extensions to be created in either lower or upper
case. Is accessible b t ping http://{ P Address}/diagnostics/fileExtensionCase.dhtml.
•Email Security - Allows the S stem Administrator to secure the device’s email service. Is accessible b t ping http://{ P
Address}/diagnostics/emailSecurity.php.
•Binary Printing Support - Allows the device to accept printing jobs that are identified as binar files. Is accessible b t ping
http://{ P Address}/diagnostics/binaryAllow.php.
•XSA Reports with User Ds - Allows the device to generate Xerox Standard Accounting reports with User IDs. Is accessible
b t ping http://{ P Address}/diagnostics/enableUser D.php.
•Postscript Filter PDL Guessing Policy - Allows the S stem Administrator to select whether the Postscript Filter guess
algorithm will use a strict or loose interpretation. Is accessible b t ping http://{ P
Address}/diagnostics/postScriptTokens.php.
•Web Services P Lockout Reset - Allows the S stem Administrator to clear the Web Services IP Address Lockout cache. Is
accessible b t ping http://{ P Address}/diagnostics/ipLockout.php.
•Service Registry Reset - Allows the S stem Administrator to reset the device’s Service Registr to its default values. Is
accessible b t ping http://{ P Address}/diagnostics/registryReset.php.
•Job Queue Limit - Allows the S stem Administrator to set the maximum number of jobs that can be listed in the device’s
job queues. Is accessible b t ping http://{ P Address}/diagnostics/jobLimit.php.
•Barcode Space Character nterpretation - Allows the S stem Administrator to choose how the device renders space
characters within barcode fonts. Is accessible b t ping http://{ P Address}/diagnostics/barcodeSpaceToggle.php.
•DHCP v6 - Allows the S stem Administrator to choose which compliance option will be followed when DHCP v6 is used. Is
accessible b t ping http://{ P Address}/diagnostics/ dhcpv6Options.php.
•View Service Registry Contents - Allows the S stem Administrator to view the contents of the device’s Service Registr . Is
accessible b t ping http://{ P Address}/diagnostics/viewRegistry.php.
•Diagnostics Tree - Allows the S stem Administrator to view the selectable list of diagnostics Special Purpose Pages. Is
accessible b t ping http://{ P Address}/diagnostics/tree.php.
•Color Copy Control Test Result - Allows the S stem Administrator to view the Color Cop Control test results. Is accessible
b t ping http://{ P Address}/diagnostics/testResult.php.
•PCL Advanced Configuration - Allows the S stem Administrator to enter the desired PCL advanced configuration paper size
code. Is accessible b t ping http://{ P Address}/diagnostics/pclSetup.php.
•Download DLM PCL Forms - Allows the S stem Administrator to download the DLM PCL forms into the device. Is accessible
b t ping http://{ P Address}/diagnostics/ dl_pcl.php.
•Multiple Pages per JB G2 Dictionary - Allows the S stem Administrator to enable the multiple pages per JBIG2 dictionar
feature (for PDF and PDF/A onl ). Is accessible b t ping http://{ P Address}/diagnostics/disableMultiplePages.php.
•Print Behavior Settings - Allows the S stem Administrator to configure/enable alternate media dimension settings for print
jobs. Is accessible b t ping http://{ P Address}/diagnostics/alternateMedia.php.
•Show WebU Configuration Page - Allows the S stem Administrator to enable users who are not authenticated
administrators to view the WebUI Configuration Page. Is accessible b t ping http://{ P
Address}/diagnostics/ShowConfigPage.php.

12
•NTLM v2 Response - Allows the S stem Administrator to enable the device to send onl the NT Lan Manager (NTLM)
Version 2 protocol (and refuse the LM & NTLM versions). Is accessible b t ping http://{ P
Address}/diagnostics/NTLMSecurity.php.
•Custom Size Allowed - Allows the S stem Administrator to allow custom size paper to be used for print jobs. Is accessible b
t ping http://{ P Address}/diagnostics/customSizeAllowed.php.
•Copies Per Page Print Setting - Allows the S stem Administrator to permit the use of the copies per page setting for print
jobs. Is accessible b t ping http://{ P Address}/diagnostics/copiesPerPage.php.
•Print Behavior Settings (Suppress Last Blank Page) - Allows the S stem Administrator to suppress a last blank page for
print jobs. Is accessible b t ping http://{ P Address}/diagnostics/suppresslastblankpage.php.
•Display CAC/P V Feature - Allows the S stem Administrator to enable the displa of the CAC/PIV feature. Is accessible b
t ping http://{ P Address}/diagnostics/enableCAC.php.
•nstall Software (View Scan Templates Created by W A Driver) - Allows the S stem Administrator to install the
#00022121 Network Controller version to view templates created b the Microsoft Windows Image Acquisition (WIA)
driver. Is accessible b t ping http://{ P Address}/diagnostics/00022121.dhtml. The S stem Administrator should be
aware that installing this Network Controller version will result in the ColorQube™ 9201/9202/9203 no longer being in the
certified configuration.
21. The following pages are available from the Web User Interface to a ColorQube™ 9201/9202/9203 with no user login and
authentication required:
•Site Map - Provides the user with h perlink pointers to each Web User Interface screen organized b Web UI tab. Is
accessible b selecting the [Site Map] button in the upper right hand corner of ever Web User Interface page.
•Exit from Sleep Mode – Automaticall informs the user, when the Network Controller on a ColorQube™ 9201/9202/9203 is
in ‘Sleep Mode’ at the time the user attempts to make a change to current settings on a Web User Interface web page, that
the Network Controller needs to be taken out of ‘Sleep Mode’ before the requested changes can be made.
22. Customers who required specialized changes to support unique workflows in their environment ma request specific changes to
normal behavior. Xerox will suppl these SPAR releases to the specific customers requesting the change. Please note that in
general enabling a specialized customer-specific feature will take the s stem out of certified configuration.

13
Contact
For additional information or clarification on an of the product information given here, contact Xerox support.
Disclaimer
The information provided in this Xerox Product Response is provided "as is" without warrant of an kind. Xerox Corporation
disclaims all warranties, either express or implied, including the warranties of merchantabilit and fitness for a particular
purpose. In no event shall Xerox Corporation be liable for an damages whatsoever resulting from user's use or disregard of
the information provided in this Xerox Product Response including direct, indirect, incidental, consequential, loss of business
profits or special damages, even if Xerox Corporation has been advised of the possibilit of such damages. Some states do no
allow the exclusion or limitation of liabilit for consequential damages so the foregoing limitation ma not appl .