Certificate Conditions; Encryption Features For Communication - Fuji Xerox ApeosPort-VII P5021 User Manual

Certificate conditions that can be set according to the types of encryption
Encryption on HTTP
communication from
the client to the device
(SSL/TLS server)
Encryption on HTTP
communication from
the device to a remote
server (SSL/TLS client)
Encryption using IPsec

Certificate Conditions

Valid certificates can only be used. To check the certificate conditions, check [Validity]
under [System] > [Security] > [Certificate Settings] of CentreWare Internet Services.

Encryption Features for Communication

Encrypting HTTP Communications from a Client to the Device (SSL/TLS Server)
The SSL/TLS protocol is used to encrypt the HTTP communications between a client and the
device.
Note
 If the certificate for the SSL server contains the V3 extension "keyUsage", "digitalSignature" must be asserted.
To encrypt communications, either one of the device certificate is required: a self-signed
certificate or a certificate issued by another CA.
Reference

For information on the setting procedure, refer to "Configuration of HTTP Communications Encryption"
(P.175).
Note
 By encrypting HTTP communications, communications data can be encrypted at the time of printing using
IPP (SSL encrypted communications).
Encrypting HTTP Communications from the Device to a Remote Server (SSL/TLS Client)
The SSL/TLS protocol is used to encrypt the HTTP communications between a remote server
and the device. No certificate is required in general. However, if a remote server is set to
require an SSL client certificate, you can use a certificate issued by another CA.
When verifying an SSL/TLS server certificate of a remote server with the verification of the
server certificate enabled, import the certificate of the CA included in the higher level of the
certificate path to the device using CentreWare Internet Services.
Note
 If the certificate for the SSL client contains the V3 extension "keyUsage", "digitalSignature" must be asserted.
Key usage (Only when
this item is included in
the V3 extended area)
Key Digital
encryption signature
O O
O O
- O
Encryption and Digital Signature Overview
Extended key usage (Only when this
item is included in the V3 extended
area)
Server Client
authen- authen-
tication tication
O -
- O
- -
Email
address
Email
protection
- -
- -
- -
173