Canon iR3245, Network Manual

Page: 119 / 288

3
Using
a
TCP/IP
Network
Registering a Security Policy 3-67
Press [Digital sig. Method]
→
[Key and Certificate] for <Authentication
Method>, select the key pair you want to use
→
press [Set as the Default Key]
to register the key pair to use for IPSec.
You cannot set to use "Device Signature Key" or "AMS" (key pair for access restrictions).
The key pair used for SSL can also be used as the key for IPSec.
The key pair used for this product and the root CA certificate used in the device to communicate with must
be issued from the same root certificate authority.
It is necessary to use the Remote UI to delete a key pair registered for IPSec.(See the Remote UI Guide)
You can check the content of a certificate by selecting a key pair on the Key and Certificate screen, and
pressing [Certificate Details]. On the Certificate Details screen, you can press [Certificate Verification] to
verify the certificate.
You can check what a key pair is being used for by selecting a key pair with 'Using' displayed for <Used>
on the Key and Certificate screen, and pressing [Display Use Location].
9. On the IKE Settings screen, select the algorithm for the authentication
and encryption to use for IKE phase 1.
●
Specifying the Authentication and Encryption Algorithm:
●
Automatically Setting the Authentication and Encryption Algorithm:
Specifying the Authentication and Encryption Algorithm:
Acesst 1.0 6251194