Configuration Of Http Communications Encryption - Dell S3845cdn User Manual

The SSL/TLS protocol is used to encrypt the HTTP communications between a client and
the machine.
To encrypt communications, either one of the device certificate is required: a self-signed
certificate or a certificate issued by another CA.
NOTE:
• By encrypting HTTP communications, communications data can be encrypted at the time of
printing using IPP (SSL encrypted communications).
Encrypting HTTP Communications from the Machine to a Remote Server
(SSL/TLS Client)
The SSL/TLS protocol is used to encrypt the HTTP communications between a remote
server and the machine.
No certificate is required in general. However; if a remote server is set to require an SSL
client certificate, you can use a certificate issued by another CA.
When verification of server certificates is enabled to verify the SSL/TLS certificate of a
remote server, import a certificate issued by another CA using Dell Printer Configuration
Web Tool to the machine.
Encryption using IPSec
IPSec enables IP-level (not application-level) encrypted communications with remote
devices.
If you select Digital Signature for IKE Authentication Method, a certificate issued by
another CA is required.
If you select Preshared Key, no device certificate is required.
NOTE:
• If the certificate for IPSec contains the V3 extension (keyUsage), "digitalSignature" bit must be
asserted.
To verify the certificate of the remote device, you must register a root certificate created
by a CA of the remote device on the machine.
NOTE:
• To use certificates that have already been created, import them with Dell Printer Configuration
Web Tool.
E-mail Encryption/Digital Signature
S/MIME is used for E-mail Encryption/Digital Signature. To use S/MIME on the machine,
S/MIME certificates are used.
For an S/MIME certificate, you can use a certificate issued by another CA.
The personal certificates or the device certificates of destinations are required for
encrypted communications.
NOTE:
• If the certificate for S/MIME contains an "email Address" or a V3 extension (keyUsage),
"digitalSignature" and "keyEncipherment" must be asserted. If the certificate contains v3 extension
(extendedKeyUsage), "emailProtection" must be set.

Configuration of HTTP Communications Encryption

This section describes the settings to encrypt HTTP communications.
Encryption and Digital Signature Settings
277
|