Fuji Xerox ApeosPort-V 5070 Security Function Supplementary Manual

Hide thumbs Also See for ApeosPort-V 5070:

User manual (459 pages)

Administrator's manual (719 pages)

Table Of Contents

Table of Contents

Quick Links

See also: Administrator's Manual , User Manual

ApeosPort-V 5070

ApeosPort-V 4070

Security Function Supplementary Guide

Before Using the Security Function ...................................................................................................... 2

Settings for the Secure Operation 1

(Initial Settings Procedures Using Control Panel) ........................................................................ 8

Settings for the Secure Operation 2

(Initial Settings Procedures Using CentreWare Internet Services) ........................................12

Settings for the Secure Operation 3 (Regular Review by Audit Log) ....................................20

User Authentication..................................................................................................................................22

Self Testing ...................................................................................................................................................23

Appendix........................................................................................................................................................24

Microsoft, Windows, and Internet Explorer are trademarks or registered trademarks of Microsoft

Important

copied or modified in whole or part, without the written consent of the publisher.

2. Parts of this manual are subject to change without prior notice.

3. We welcome any comments on ambiguities, errors, omissions, or missing pages.

4. Never attempt any procedure on the machine that is not specifically described in this manual.

Unauthorized operation can cause faults or accidents. Fuji Xerox is not liable for any problems resulting

from unauthorized operation of the equipment.

An export of this product is strictly controlled in accordance with Laws concerning Foreign Exchange and

Foreign Trade of Japan and/or the export control regulations of the United States.

XEROX, the sphere of connectivity design, CentreWare, ApeosWare, and EasyAdmin are trademarks or

DocuCentre-V 5070

DocuCentre-V 4070

All product/brand names are trademarks or registered trademarks of the respective holders.

registered trademarks of Xerox Corporation in the U.S. or Fuji Xerox Co., Ltd.

Corporation in the U.S. and other countries.

Table of Contents

Summary of Contents for Fuji Xerox ApeosPort-V 5070

Page 1 3. We welcome any comments on ambiguities, errors, omissions, or missing pages. 4. Never attempt any procedure on the machine that is not specifically described in this manual. Unauthorized operation can cause faults or accidents. Fuji Xerox is not liable for any problems resulting from unauthorized operation of the equipment.
Page 2: Before Using The Security Function
ME7148E2-1 ApeosPort-V 5070/4070 DocuCentre-V 5070/4070 Administrator Guide ME7149E2-1 Security Features ApeosPort-V 5070/4070, DocuCentre-V 5070/4070 have the following security features: Hard Disk Data Overwrite Hard Disk Data Encryption User Authentication System Administrator's Security Management Customer Engineer Operation Restriction Security Audit Log...
Page 3 Before Using the Security Function Settings for the Secure Operation For the effective use of the security features, the System Administrator (Machine Administrator) must follow the instructions below: For details on the setting procedures, refer to the following sections. "Settings for the Secure Operation 1 (Initial Settings Procedures Using Control Panel)" (P.8) "Settings for the Secure Operation 2 (Initial Settings Procedures Using CentreWare Internet Services)"...
Page 4: For Optimal Performance Of The Security Features
Before Using the Security Function IPSec Set to enabled. SNMP v1/v2c Set to disabled. SNMP v3 Set to enabled. S/MIME Set to enabled. WSD(Scan) Set to disabled. SOAP Set to disabled. Set to disabled. CSRF Set to enabled. LDAP Server Set the LDAP Server information.
Page 5 Before Using the Security Function Users and administrators need to set passcode and an encryption key according to the following rules for the client PC login and the machine’s setup. - Do not use an easily guessed character strings passcode. - A passcode needs to contain both numeric and alphabetic characters.
Page 6: Confirm The Machine Rom Version And The System Clock
Before Using the Security Function SNMP v3 The encryption method of SNMPv3 is DES/56bit or AES 128bit. Set [Message Digest Algorithm] to [SHA1]. Important • For secure operation, while you are using CentreWare Internet Services, please do not access other web site, and do not use other applications. •...
Page 7 Before Using the Security Function Select [Machine Clock/Timers]. You can check the time and the date of the system clock. If you need to change the time and the date, refer to the following procedures. Select the required option. Select [Change Settings]. Change the required setting.
Page 8: Authentication For Entering The System Administration Mode
Settings for the Secure Operation 1 (Initial Settings Procedures Using Control Panel) Settings for the Secure Operation 1 (Initial Settings Procedures Using Control Panel) This section describes the initial settings related to security features, and how to set them on the machine's control panel. Authentication for entering the System Administration mode Press the <Log In/Out>...
Page 9: Set Authentication
Settings for the Secure Operation 1 (Initial Settings Procedures Using Control Panel) Select [Other Settings]. On the [Other Settings] screen, select [Data Encryption]. Select [Change Settings]. Select [On]. Select [New Encryption Key]. Enter a new encryption key of 12 characters using the keyboard displayed, and then select [Save].
Page 10: Set Software Download
Settings for the Secure Operation 1 (Initial Settings Procedures Using Control Panel) Select [According to Print Auditron]. Select [Save as Private Charge Print Job] for [Job Login Success]. Select [Delete Job] for [Job Login Failure]. Select [Delete Job] for [Job without User ID]. Select [Save].
Page 11: Set Report Print
Settings for the Secure Operation 1 (Initial Settings Procedures Using Control Panel) Select [Change Settings]. Select [On]. Select [Save]. To exit the [Machine Clock/Timers] screen, select [Close]. Set Report Print Select [System Settings] on the [Tools] screen. Select [Common Service Settings]. Select [Reports].
Page 12: Preparations For Settings On The Centreware Internet Services
Settings for the Secure Operation 2 (Initial Settings Procedures Using CentreWare Internet Services) Settings for the Secure Operation 2 (Initial Settings Procedures Using CentreWare Internet Services) This section describes the initial settings related to security features, and how to set them on CentreWare Internet Services.
Page 13: Set User Passcode Minimum Length
Settings for the Secure Operation 2 (Initial Settings Procedures Using CentreWare Internet Services) Click [Next]. Click [Configure] for [Device Access]. Select [Locked] for [Device Access]. Click [Apply]. Click [Authentication Configuration]. Click [Next]. Click [Configure] for [Service Access]. Click [Lock All]. Click [Apply].
Page 14: Set Send E-Mail
Settings for the Secure Operation 2 (Initial Settings Procedures Using CentreWare Internet Services) Set WebDAV Click [Connectivity] on the [Properties] screen. Click [Port Setting]. Uncheck the [Enabled] box for [WebDAV]. Click [Apply]. Set Send E-mail In the case of DocuCentre-V, use the following procedure to set [Send Email] to disabled. Click [Connectivity] on the [Properties] screen.
Page 15: Set Ipsec
Settings for the Secure Operation 2 (Initial Settings Procedures Using CentreWare Internet Services) Set IPSec Before setting [Digital Signature] for [IKE Authentication Method], you need to import an IPSec certificate according to the same procedure as "Configuring Machine Certificates" (P.14). Click [Security] on the [Properties] screen.
Page 16 Settings for the Secure Operation 2 (Initial Settings Procedures Using CentreWare Internet Services) Click [Apply]. Click [SNMP Configuration]. Click [Edit SNMP v3 Properties] and check [Account Enabled] for [Administrator Account]. Enter a new Authentication Password (minimum 8 characters). Enter the Confirm Authentication Password. Enter a new Privacy Password (minimum 8 characters).
Page 17 Settings for the Secure Operation 2 (Initial Settings Procedures Using CentreWare Internet Services) Click [S/MIME Settings]. Select [Always add signature] for [Digital Signature - Outgoing E-mail]. Select [Always add signature] for [Digital Signature - Outgoing Internet Fax]. Click [Apply]. Set WSD (Scan) Click [Connectivity] on the [Properties] screen.
Page 18: Set Kerberos Server
Settings for the Secure Operation 2 (Initial Settings Procedures Using CentreWare Internet Services) Set LDAP Server Click [Connectivity] on the [Properties] screen. Click [Protocols]. Click [LDAP]. Select [LDAP Server]. On each menu, set the LDAP Server information. Click [Apply]. Set Kerberos Server Click [Security] on the [Properties] screen.
Page 19: Set Browser Refresh
Settings for the Secure Operation 2 (Initial Settings Procedures Using CentreWare Internet Services) Set Browser Refresh Click [General Setup] on the [Properties] screen. Click [Internet Services Settings]. Enter the “0” in the [Auto Refresh Interval] box. Click [Apply]. Set Job Deletion Click [General Setup] on the [Properties] screen.
Page 20: Settings For The Secure Operation 3 (Regular Review By Audit Log)
Settings for the Secure Operation 3 (Regular Review by Audit Log) Settings for the Secure Operation 3 (Regular Review by Audit Log) This section describes the importing method of the Audit Log feature using the System Administrator client via CentreWare Internet Services. The Audit Log is regularly reviewed by the Security Administrator, often with the aid of third party analyzing tools.
Page 21 Settings for the Secure Operation 3 (Regular Review by Audit Log) e.g.: The following audit log is recorded, when someone tried to login by ID(User1), and the login failed due to an invalid password. Item Description Log ID Date 01/01/2014 Time 10:00:00 Logged Events...
Page 22: User Authentication
User Authentication User Authentication This section describes the operation of user authentication. Before using, all services and configuring settings, a user must be authenticated with an ID and a passcode. Press the <Log In/Out> button on the control panel. Enter the "User ID" from keypad. Select [Next] on the touch screen.
Page 23: Self Testing
Self Testing Self Testing This section describes the Power on Self Test function. The machine can execute a Self Test function to verify the integrity of executable code and setting data. The machine verifies the area of NVRAM and SEEPROM including setting data at initiation, and displays an error on the control panel at error occurrence.
Page 24: Appendix
Appendix List of Operation Procedures Using Using CentreWare Item Default Control Panel Internet Services How to check the Clock [System Settings] > [Common Service Settings] > [Machine Clock/Timers]. Set Passcode Entry for [Authentication/Security Settings] > Control Panel Login [Authentication] > [Passcode Policy] > [Passcode Entry for Control Panel Login] Set Overwrite Hard Disk [Authentication/Security Settings] >...
Page 25 Appendix Using Using CentreWare Item Default Control Panel Internet Services Set SSL/TLS [System Settings] >[Connectivity & [Security] > [Machine Digital Network Setup] > [Security Settings] > Certificate Management] > [SSL/TLS Settings] [Create New SelfSigned Certificate] > [SSL/TLS Settings] Set WebDAV [System Settings] >[Connectivity &...

This manual is also suitable for:

Docucentre-v 5070 Apeosport-v 4070 Docucentre-v 4070

Fuji Xerox ApeosPort-V 5070 Security Function Supplementary Manual

Quick Links

Related Manuals for Fuji Xerox ApeosPort-V 5070

Summary of Contents for Fuji Xerox ApeosPort-V 5070

This manual is also suitable for:

Table of Contents