Xerox WorkCentre 5845 User Information page 75

Xerox Multi-Function Device Security Target
7.1.10.5. Scan
Documents can only be scanned at the Local User Interface. During job
setup, document image (D.DOC +SCN Read, Delete) may be read or
deleted. Once the job is committed, the owner may send the image via email,
transfer the image to a remote (TLS scan) repository, keep the image in their
private mailbox, print the image or transfer the image to his/her personal USB
storage device.
(Scan to) Mailboxes are created and owned by individual users. Only the
owner is allowed to locate and access the mailbox, and this access to
mailboxes is further restricted with a passcode which the owner creates and
owns. System Administrators have access to all the (scan) mailboxes. (Scan)
Images saved in a mailbox (D.DOC +DSR and +SCN Read, Delete) may only
be downloaded via the Web UI or deleted. A user with proper access may
choose to delete the mailbox together with all images stored inside the
mailbox.
7.1.10.6. Fax
Faxes can be submitted at the Local User Interface or remotely as LanFax
(through the same interfaces as for printing). During job setup, created
document images may be read or deleted (D.DOC +faxOUT Read, Delete).
Once a job is submitted, only a system administrator can delete the job
before it is fully completed, in the case of delayed send for example (D.FUNC
+faxOUT Delete).
Access to receive faxes is restricted to the system administrators (D.DOC
+faxIN Read, Delete). All received faxes will be stored locally and assigned a
system administrator predefined passcode. The system administrator can
print or delete secure received faxes by entering the appropriate passcode.
Once printed, the faxes are automatically deleted. Alternatively, the system
administrator may also choose designate email addresses for receiving fax
images. Once the fax job is forwarded as an attachment to an email, the job
is automatically deleted.
7.1.10.7. Self Test
Following recommendations from the user guidance document, an
authenticated system administrator can perform various tests to verify the
integrity of the TSF.
During start up of the TOE after a reboot or power reset, an IIO is performed
on U.DOC remaining inside the TOE's hard drive. Upon IIO completion, for a
randomly picked contiguous block of disk space which is 10% the size of the
overall overwritten image, the resulting binary data pattern on the hard drive
is compared against the expected results, and any mismatch would be
reported. Also during initial start up, the version number of the software
75

Copyright 2013 Xerox Corporation. All rights reserved.