Xerox ColorQube 9201 System Administrator Manual page 160

Security
With SSL enabled (from the Connectivity / Protocols / HTTP selections of the Properties tab of Internet
Services), and a digital certificate installed, remote users accessing the system over an HTTP-based
interface are assured of having their network communications protected against eavesdropping and
tampering, using strong encryption. The only action required by the workstation user is to type https://,
followed by the IP address (or fully qualified domain name) of the system, into the Address or URL box
of the web browser. The subsequent acceptance of a Digital Certificate completes the exchange of the
Public Key enabling the encryption process to proceed.
Information Checklist
Before starting the procedure, please ensure the following items are available or have been performed:
• An IP Address or Host Name must be configured on the device.
• DNS must be enabled and configured on the device.
• HTTP must be enabled so that Internet Services can be accessed.
• Ensure the system time configured on the device is accurate. This is used to set the start time for
self signed certificates.
To Create a Digital Certificate
1. At your Workstation, open the web browser and enter the IP address of the device in the Address
bar, and press [Enter].
2. Click the [Properties] tab.
3. If prompted, enter the Administrator User ID and Password. The default is [admin] and [1111].
4. Click on the [Login] button.
5. Click on the [Security] link.
6. Select [Machine Digital Certificate Management] in the directory tree.
Note: SSL cannot be implemented until a digital certificate is installed on the system.
7. In the Machine Digital Certificate area, the Current Status displays the current status of the
device's digital certificate. By default, no certificate will be installed.
Other status messages you may see:
• A Self Signed Certificate is established on this machine:
This indicates that a new certificate has been installed on this printer. A self-signed certificate
does not contain a path to a Trusted Certificate Authority, and may result in certificate error
messages at the Web browser when Internet Services is accessed via SSL.
• A Certificate Signing Request was downloaded for processing by a Trusted Certificate
Authority:
This occurs during the Create New Certificate process, but indicates the process is incomplete.
• Upload the Signed Certificate when it is received:
When a signed certificate is received from a Trusted Certificate Authority, use the Upload
Signed Certificate function to copy it to the printer.
a. Click on the [Create New Certificate] button.
b. In the Create New Certificate area, select one of the following:
• Self Signed Certificate - select this type of certificate if you have your own PKI
infrastructure or other means of internal certificate authority.
152 Xerox ColorQube™ 9201/9202/9203
System Administrator Guide