Configuration Of Encryption Using Ipsec; Installation Overview; Step1 Import And Configuration Of A Certificate - Fuji Xerox ApeosPort-IV 5070 Administrator's Manual

13 Encryption and Digital Signature Settings

Configuration of Encryption using IPSec

This section describes how to encrypt communications using IPSec.
When the IKE authentication method is set to [Authenticate by Preshared Key], skip
step 1 "Import and Configuration of a Certificate" and go to step 2 "Configuration on the
Machine (Configuration of IPSec)".
For IKE authentication methods, refer to "IKE Authentication Method" (P.186).

Installation Overview

To encrypt communications using IPSec, configure the machine and your computer as
follows:
Configuration on the Machine
When [IKE Authentication Method] is set to [Authenticate by Digital Signature],
configure a certificate on the machine. No certificate is registered on the machine by
factory default. After importing a certificate, configure IPSec.
Configure the following setting to set up a certificate on the machine.
Note
Configuration on the Computer
Configure the following settings to encrypt communications between a computer and
the machine.

Step1 Import and Configuration of a Certificate

13
The following describes configuration procedures to set up a certificate with
CentreWare Internet Services.
To configure a certificate using CentreWare Internet Services, configure the encryption
settings for HTTP communications, and then import a certificate issued by another CA
to use it for the IPSec certificate.
Note
For details on how to configure the encryption settings for HTTP communication, refer to
"Configuration of HTTP Communications Encryption" (P.354).
1
Start CentreWare Internet Services.
For more information on how to start CentreWare Internet Service, refer to "Starting CentreWare
Internet Services" (P.272).
356
Step1 Import and Configuration of a Certificate ......................................................................356
Step2 Configuration on the Machine (Configuration of IPSec) ...............................................357
Step3 Configuration on the Computer ......................................................................................358
Configuring certificates by CentreWare Internet Services
- Enable HTTPS, and then import a certificate issued by another CA to the machine.
• If a certificate to be imported as an IPSec certificate contains V3 extension "KeyUsage",
"digitalSignature" bit must be asserted.
Create an IP security policy
Assign the IP security policy
• You cannot use a self-signed certificate created with CentreWare Internet Services for
IPSec.