Installing A Digital Certificate; Adding Or Creating A Certificate - Xerox ColorQube 8580 System Administrator Manual

Installing a Digital Certificate

There are three ways to install a certificate on the printer:
• Create and install a Xerox
®
Create a Xerox Device Certificate to allow the printer to generate a certificate, sign it, and create a
public key used in SSL encryption. Install the Xerox
®
Generic Xerox Trusted CA Certificate in the devices that the printer communicates with. Examples
of other devices are client Web browsers for HTTPS, or RADIUS authentication server for 802.1X.
Installing this certificate ensures that users can access the printer using CentreWare Internet
Services, and certificate warning messages do not appear.
Note: Creating a Xerox
trusted CA. If you do not have a server functioning as a Certificate Authority, install a Xerox
Certificate on the printer. Then install the Generic Xerox
devices.
• Create a Certificate Signing Request (CSR) and install the CA-signed device certificate.
Create a CSR. Send the CSR to a CA or a local server functioning as a CA to sign the CSR and return
the certificate. Install the certificate on the printer. An example of a server functioning as a CA is
Windows Server 2008 running Certificate Services.
• Install trusted CA and self-signed certificates.
Install the certificates of the root CA, and any intermediate CAs for your company. Install the
self-signed certificates from any other devices in your network.

Adding or Creating a Certificate

1. In CentreWare Internet Services, click Properties > Security.
2. Click Certificates.
3. Click Add/Create.
4. Select an option.
Install a new Root or other Trust Point Certificate: This option adds a certificate that is
−
required to validate the authentication server certificate when using 802.1X EAP
authentication.
− Install a CA signed Device Certificate: This option adds a device certificate signed by a
certificate authority (CA) that validates the identity of the printer to the network.
− Create Certificate Signing Request (CSR): This option creates a CSR that you can send for
signing to a trusted CA. When the certificate is returned, you can install the CA signed device
certificate on the printer.
Create Self-Signed Device Certificate: This option modifies the default self-signed certificate
−
that is created automatically on the printer. If you use HTTPS, each printer requires a unique
certificate created for each browser that is used to access the printer.
5. Click Next.
6. Follow the onscreen instructions.
7. To add or create the certificate, click Finish.
®
Device Certificate.
®
Device Certificate is less secure than creating a certificate signed by a
®
Device Certificate on the printer, and install the
®
Trusted CA Certificate on the other
®
Xerox ColorQube 8580/8880 Color Printer
System Administrator Guide
Security
®
Device
55