Configuration Of Https (Ssl/Tls) Communication Encryption - Xerox WORKCENTRE 7428 System Administrator Manual

Security
E-mail Encryption/Digital Signature
S/MIME certificates, imported from a Certificate Authority (in PKCS7 format), can be used on the
printer's for E-mail Encryption.
Note: To import S/MIME certificates, use the Machine Digital Certificate Management in the Security
folder on the Properties tab of CentreWare Internet Services.
Encryption/Digital Signature of Scanned Files (PDF/XPS Documents)
While no digital signatures are required to encrypt PDF and XPS documents, these documents can be
signed with imported PKCS12 Digital signatures.
When adding digital signatures to PDF or XPS documents, scan file certificates imported to the printer
from a Certificate Authority, are typically used.
To import PKCS12 scan file certificates, use the Machine Digital Certificate Management in the
Security folder on the Properties Page of CentreWare Internet Services.
IP Sec (typically used to encrypt FTP) can be enabled from the Security file folder on the Properties tab
of CentreWare Internet Services.
802.1x can be enabled for devices connected through both wired and wireless Ethernet networks. It is
used to authenticate the printer on the 802.1x network, rather than individual users. 802.1x can be
enabled from the Security file folder on the Properties tab of CentreWare Internet Services.

Configuration of HTTPS (SSL/TLS) Communication Encryption

Two methods are available depending on the type of certificate.
• Create a self-signed certificate on the printer with CentreWare Internet Services, and enable
HTTPS. This method is used primarily for Server certificates.
• Enable HTTPS, and import a signed certificate from a Certificate Authority, using the Machine
Digital Certificate Management in the Security folder on the Properties Page of CentreWare
Internet Services.
• To see this, at least one certificate must have been created and stored on the printer.This is one of
the purposes for creating a self-signed certificate.
Before enabling any encryption or digital signing feature, or importing any digital certificates, check
the status of the certificate and create a new certificate if there is not one already created:
1. In CentreWare Internet Services, click the Properties tab, then click the Security folder.
2. Click Machine Digital Certificate Management.
3. Click Create New Certificate.
4. Select Self-Signed Certificate and click Continue.
5. Select Public Key Size (512 Bits or 1024 Bits).
6. Set Issuer (default device host name)
7. Apply.
76 WorkCentre 7425/7428/7435
System Administrator Guide