Configuration Of Encryption Using Ipsec; Installation Overview; Step1 Import And Configuration Of A Certificate - Fuji Xerox ApeosPort-VI C7771 Administrator's Manual

Hide thumbs Also See for ApeosPort-VI C7771:

Table of Contents

Encryption and Digital Signature Settings

Configuration of Encryption using IPsec

This section describes how to encrypt communications using IPsec.

When the IKE authentication method is set to [Authenticate by Preshared Key], skip step 1

"Import and Configuration of a Certificate" and go to step 2 "Configuration on the Machine

(Configuration of IPsec)".

To encrypt communications using IPsec, configure the machine and your computer as

Configuration on the Machine

When [IKE Authentication Method] is set to [Authenticate by Digital Signature], configure

a certificate on the machine. No certificate is registered on the machine by factory default.

After importing a certificate, configure IPsec.

Configure the following setting to set up a certificate on the machine.

Configuration on the Computer

Configure the following settings to encrypt communications between a computer and the

The following describes configuration procedures to set up a certificate with CentreWare

Internet Services.

To configure a certificate using CentreWare Internet Services, configure the encryption

settings for HTTP communications, and then import a certificate issued by another CA to

use it for the IPsec certificate.

Start CentreWare Internet Services.

For IKE authentication methods, refer to "IPsec Settings" (P.261).

Configuring certificates by CentreWare Internet Services

- Enable HTTPS, and then import a certificate issued by another CA to the machine.

If a certificate to be imported as an IPsec certificate contains V3 extension "KeyUsage", "digitalSignature" bit

must be asserted.

Create an IP security policy

Assign the IP security policy

You cannot use a self-signed certificate created with CentreWare Internet Services for IPsec.

The machine supports to import RSA

For details on how to configure the encryption settings for HTTP communication, refer to "Configuration of HTTP Communications

Encryption" (P.451).

For more information on how to start CentreWare Internet Service, refer to "Starting CentreWare Internet Services" (P.368).

public key (up to 4096 bits).