Xerox DocuColor 250 Online Help Manual page 271

P r od u c t Na me Bo o k N am e
b. The server sends it s public key with its certificate.
c. The client checks that the certificate was issued by a
trusted party (the CA), that the certificate is still valid, and
that the certificate is related to the site contacted (that the
domain name of the server is the same as that on the
certificate).
d. The client then uses a public key to encrypt a random
symmetric encryption key and sends it to the server with
the encrypted URL required as well as other encrypted http
data.
e. The server decrypts the symmetric encryption key using its
private key and uses the symmetric key to decrypt the URL
and http data.
f. The server sends back the requested html document and
http data encrypted with the symmetric key.
g. The client decrypts the http data and html document using
the symmetric key and displays the information.
To set up SSL/TLS:
1. Logon to the DocuSP Controller as a System Administrator.
2. Select [SSL/TLS...] from the Setup menu.
3. Select Enable SSL/TLS.
NOTE: If you do not have a valid SSL/TLS certificate,
obtained from a Certificate Authority, or a self-signed
certificate, all selections on the upper part of the page are
unavailable (grayed out), and only the [Add Certificate...] and
[Install Received Certificate...] selections are available. You
must obtain a valid certificate to install (or set up a self-signed
certificate). See Managing your SSL/TLS certificate, below.
4. Select from the following Modes:
• Normal (Encrypted and Unencrypted Access)
• Secure (Encrypted Access Only)
5. Use the Encryption Strength pull-down menu to select the
resolution of the encryption:
• Normal (DES-MD5 - 56-bit)
• Normal (RC4-MD5 - 40-bit)
• Normal (DES-MD5 - 128-bit)
• Normal (3DES-MD5 - 128-bit)
• High (RC4-MD5 - 128-bit)
• High (3DES-MD5 - 128-bit)
Generally, the higher the bit count, the greater the security.
However, if you are frequently receiving submissions from
client workstations outside the US, the encryption
standards may be lower than US domestic standards; in
this case you may need to set your encryption strength to
-47