Using Certificates For Device Security - Brother MFC-9130CW Network User's Manual

Security features

Using Certificates for device security

Your Brother machine supports the use of multiple security certificates allowing secure management,
authentication and communication with the machine. The following security certificate features can be used
with the machine.

SSL/TLS communication

IEEE 802.1x authentication

SSL communication for SMTP/POP3
The Brother machine supports the following certificates.

Pre-installed certificate
Your machine has a pre-installed self-signed certificate.
Using this certificate, you can easily use the SSL/TLS communication without creating or installing a
certificate.
NOTE
The pre-installed self-signed certificate cannot protect your communication from spoofing. We recommend
using a certificate that is issued by a trusted organization for better security.

Self-signed certificate
This print server issues its own certificate. Using this certificate, you can easily use the SSL/TLS
communication without having a certificate from a CA. (See Creating and installing a certificate
on page 86.)

Certificate from a CA
There are two methods for installing a certificate from a CA. If you already have a certificate from a CA or
if you want to use a certificate from an external trusted CA:
• When using a CSR (Certificate Signing Request) from this print server. (See How to create a CSR
on page 87.)
• When importing a certificate and a private key. (See Import and export the certificate and private key
on page 93.)

CA certificate
If you use a CA certificate that identifies the CA (Certificate Authority) itself and owns its private key, you
must import a CA certificate from the CA prior to the configuration. (See Import and export a CA certificate
on page 94.)
NOTE
• If you are going to use SSL/TLS communication, we recommend that you contact your system
administrator first.
• When you reset the print server back to its default factory settings, the certificate and the private key that
are installed will be deleted. If you want to keep the same certificate and the private key after resetting the
print server, export them before resetting and re-install them. (See How to export the self-signed
certificate, the certificate issued by a CA, and the private key on page 93.)
7
7
84