Table of Contents
Advertisement
Linking with Mobile Devices (imageRUNNER 2204F / 2204N / 2004N)
Configuring Settings for Key Pairs and Digital
Certificates
In order to encrypt communication with a remote device, an encryption key must be sent and received over an
unsecured network beforehand. This problem is solved by public-key cryptography. Public-key cryptography ensures
secure communication by protecting important and valuable information from attacks, such as sniffing, spoofing, and
tampering of data as it flows over a network.
Key Pair
A key pair consists of a public key and a secret key, both of which are required for encrypting or
decrypting data. Because data that has been encrypted with one of the key pair cannot be
returned to its original data form without the other, public-key cryptography ensures secure
communication of data over the network. Up to five key pairs can be registered (
issued Key Pairs and Digital Certificates(P. 287) ). On this machine, you can also perform
"Generate Network Communication Key" and "Generate Key and Certificate Signing Request
(CSR)" (
CA Certificate
Digital certificates including CA certificates are similar to other forms of identification, such as
driver's licenses. A digital certificate contains a digital signature, which enables the machine to
detect any spoofing or tampering of data. It is extremely difficult for third parties to abuse
digital certificates. A digital certificate that contains a public key of a certification authority (CA)
is referred to as a CA certificate. CA certificates are used for verifying the device the machine is
communicating with for features such as printing with AirPrint. Up to five CA certificates can be
registered (
◼
Key and Certificate Requirements
The certificate contained in a key pair generated with the machine conforms to X.509v3. If you install a key pair or a CA
certificate from a computer, make sure that they meet the following requirements:
Format
File extension
Public key algorithm
(and key length)
Certificate signature algorithm
Certificate thumbprint algorithm SHA1
*1
Requirements for the certificate contained in a key pair are pursuant to CA certificates.
*2
SHA384-RSA and SHA512-RSA are available only when the RSA key length is 1024 bits or more.
The machine does not support use of a certificate revocation list (CRL).
Generating Key Pairs(P. 280) ).
Using CA-issued Key Pairs and Digital Certificates(P. 287) ).
*1
●
Key pair: PKCS#12
●
CA certificate: X.509v1 or X.509v3, DER (encoded binary), PEM
●
Key pair: ".p12" , ".pfx" or ".cer"
●
CA certificate: ".p12" , ".pfx" or ".cer"
RSA (512 bits, 1024 bits, 2048 bits, or 4096 bits)
SHA1-RSA, SHA256-RSA, SHA384-RSA
279
*2
*2
or SHA512-RSA
1053-0AR
Using CA-
Advertisement
Table of Contents
