Canon imageRUNNER ADVANCE C3330 Series Service Manual page 57

When the TPM settings are disabled, the security information consists of a shared key and the information of multiple passwords
stored in the Flash memory. Unlike when the TPM settings are enabled, stored password information is initialized upon failure/
replacement of the Flash memory.
● TPM Settings of Security Information
Whether to use TPM can be selected for security information by changing the TPM settings in the Settings/Registration mode.
• When TPM Settings is On
In this case, four-stage security information (TPM key, public key, shared key and password) is enabled.
• When TPM Settings is Off
In this case, two-stage security information (shared key and password) is enabled.
■ Works to be Done Before and After Introduction
The setting is required in Settings/Registration mode. ("TPM Settings" at the time of shipment: Off)
• Enabling of the Function
• Backup of TPM key
• Restoration of TPM key
• Disabling of the Function
As a general rule, these works should be performed by the user.
CAUTION:
When configuring the TPM Settings to "On", advise the user of the following points.
• After setting it to "On", immediately back up the TPM key.
• Be sure to remember the password set when the TPM key was backed up.
• Do not lose the USB flash drive containing the backup file of the TPM key.
• When replacing the TPM PCB due to a failure, etc, the TPM key needs to be restored after replacement. (Restore TPM
Key is enabled only when replacing the TPM PCB.)
• If the TPM key is not restored, the security information (passwords, encryption keys and certificates) cannot be used.
• It is necessary to execute "Initialize All Data/Settings" first to enable TPM settings again when the TPM key could not
be restored due to reasons such as having lost a USB flash drive. It is because of the security issue that arises if
Settings/Registration data is kept as-is.
● Enabling of the Function
CAUTION:
Be sure to recommend to the user (administrator) to set the System PIN beforehand.
After configuring the TPM Settings to "On", back up the TPM key, but it can only be done once. It is effective to set the
System PIN as a means to prevent a situation in which those other than the administrator obtains the backup file due to
the TPM key not having been backed up.
1. Set Management Settings > Data Management > TPM Settings to "On".
45
2. Technology