Section 2 — Device Security
USB Block allows the System Administrator to help protect the imageRUNNER ADVANCE systems
against unauthorized access through the built-in USB interface. Access to the device's USB interface for
desktop access and the device's host mode for other USB devices can each be permitted or disabled.
Go to Settings / Registration > Preferences > External Interface > USB Settings.
imageRUNNER ADVANCE models and select imageRUNNER models have the ability to restrict USB usage for
memory, but allow USB usage for peripherals such as keyboards and card readers.
2.4 – Third Party MEAP Application and Development
Canon actively collaborates with leading third-party software companies to develop custom solutions for
imageRUNNER ADVANCE systems, known as MEAP applications. Each MEAP enabled device includes
a number of safeguards to help ensure the security and integrity of information stored on the device.
Access to the Software Development Kit for MEAP is tightly restricted and controlled through licensing.
Once an application has been developed, it is thoroughly reviewed by Canon to ensure that it meets strict
guidelines for operability and security. Following the review, the application is digitally signed with a
special encrypted signature to protect the integrity of the application. If the application is modified in any
way, the signature code will not match and the application will not be permitted to run on the device. These
safety measures make it virtually impossible for an altered or rogue MEAP application to be executed on an
imageRUNNER ADVANCE system.
Section 3 — Information Security
Protecting your organization's confidential information is a mission that Canon takes seriously. From your
documents, faxes and e-mails to the underlying data on the internal hard disk drive and in memory, Canon
has built in many controls to help ensure that your information does not become compromised.
3.1 – Document Security
Secured Print / Encrypted Secured Print*
Encrypted Secured Print and Secured Print are print functions that hold a job in queue until the user enters
the appropriate password at the device. This ensures that the user is in close proximity before the document
is printed and minimizes unattended documents left at the device. The imageRUNNER ADVANCE system
requires the user to set a password in the print driver window when sending a print job from a connected
PC. The same password is also required for releasing the job at the device. When using the optional
Encrypted Secured Print software, security is further enhanced by using AES 256-Bit Encryption to protect
the print job data while in transit across the network. On systems equipped with the optional Encrypted
Secured Print, administrators can use the print job restriction feature to permit only encrypted print jobs at
the designated device.
* Requires the Encrypted Secured Print option.
White Paper: Canon imageRUNNER ADVANCE Security