manualshive.com logo in svg

Epson SureColor SC-P8500D, Administrator'S Manual

Share
Download
Epson SureColor SC-P8500D Administrator'S Manual Download Page 85

Common name : EPSONA1B2C3,EPSONA1B2C3.local,192.0.2.123

4.

Specify a validity period for the certificate.

5.

Click 

Next

.

A confirmation message is displayed.

6.

Click 

OK

.

The printer is updated.

Note:

You can check the certificate information from 

Network Security

 tab > 

SSL/TLS

 > 

Certificate

 > 

Self-signed Certificate

and click 

Confirm

.

Related Information

&

“Accessing Web Config” on page 24

&

“Logging on to the Printer Using Web Config” on page 48

Controlling Using Protocols

You can print using a variety of pathways and protocols.

You can lower unintended security risks by restricting printing from specific pathways or by controlling the
available functions.

Controlling protocols

Configure the protocol settings.

1.

Access Web Config and then select the 

Network Security

 tab > 

Protocol

.

2.

Configure each item.

3.

Click 

Next

.

4.

Click 

OK

.

The settings are applied to the printer.

Protocols you can Enable or Disable

Protocol

Description

Bonjour Settings

You can specify whether to use Bonjour. Bonjour is used to search for devices, print, and so
on.

iBeacon Settings

You can enable or disable the iBeacon transmission function. When enabled, you can search
for the printer from iBeacon-enabled devices.

Administrator's Guide

Advanced Security Settings for Enterprise

85

Summary of Contents for SureColor SC-P8500D

Page 1: ...Administrator s Guide CMP0327 00 EN ...

Page 2: ... 35 Power Saving Settings During Inactivity 35 Synchronizing the Date and Time with Time Server 36 Setting the Default Value for Upload and Print Print from Folder User Default Settings 36 AirPrint Setup 37 Product Security Settings Introduction of Product Security Features 38 Configuring the Administrator Password 39 Changing the Administrator Password from the Control Panel 39 Changing the Admin...

Page 3: ...n 73 Changing from Wi Fi Connection to Ethernet Connection 74 Using Port for the Printer 74 Advanced Security Settings for Enterprise Security Settings and Prevention of Danger 77 Security Feature Settings 78 Making Settings for Password Encryption 78 Encrypting the Password 78 Restoring the Password Encryption Key 79 SSL TLS Communication with the Printer 79 About Digital Certification 79 Obtaini...

Page 4: ...s incurred by the purchaser or third parties as a result of accident misuse or abuse of this product or unauthorized modifications repairs or alterations to this product or excluding the U S failure to strictly comply with Seiko Epson Corporation s operating and maintenance instructions Seiko Epson Corporation and its affiliates shall not be liable for any damages or problems arising from the use ...

Page 5: ...dows Vista are registered trademarks of Microsoft Corporation Apple Mac macOS OS X Bonjour ColorSync Safari AirPrint iPad iPhone iPod touch iTunes TrueType and iBeacon are trademarks of Apple Inc registered in the U S and other countries General Notice Other product names used herein are for identification purposes only and may be trademarks of their respective owners Epson disclaims any and all r...

Page 6: ...y vary by model Operating System References Windows In this manual terms such as Windows 10 Windows 8 1 Windows 8 Windows 7 Windows Vista Windows XP Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows Server 2008 R2 Windows Server 2008 Windows Server 2003 R2 and Windows Server 2003 refer to the following operating systems Additionally Windows is used to refer...

Page 7: ...oft Windows Server 2008 operating system Microsoft Windows Server 2003 R2 operating system Microsoft Windows Server 2003 operating system Mac OS In this manual Mac OS is used to refer to macOS Big Sur macOS Catalina macOS Mojave macOS High Sierra macOS Sierra OS X El Capitan OS X Yosemite OS X Mavericks OS X Mountain Lion Mac OS X v10 7 x and Mac OS X v10 6 8 Administrator s Guide About this Manua...

Page 8: ...unction Settings Explains the settings to use each function of the printer Product Security Settings Explains the basic security settings such as administrator password setting and access control Operation and Management Settings Explains the operations and management after beginning use of the printer such as checking the printer s information and the notification settings when an event is occurr...

Page 9: ...ted to the Windows server through the network or by USB cable and the print queue set on the server can be shared Communication between the printer and the computer goes through the server and the printer is controlled on the server Peer to peer connection direct printing The connection that indicates the printer and the computer are connected to the network through the hub or access point and the...

Page 10: ...ndicates the 0x20 0x7E hex number listed below and does not involve control characters Space character Unicode UTF 8 An international standard code covering the major global languages When UTF 8 is described in this guide it indicates coding characters in UTF 8 format Example of Network Environment This is an example of the network environment connection products Functions and services that are no...

Page 11: ...ces are available if the printer is able to connect to the Internet Epson Connect Email Print Remote Print etc Cloud Services Google Cloud Print Evernote etc Site of Epson Downloading the driver and software and updating the printer s firmware etc Administrator s Guide Introduction 11 ...

Page 12: ...that is protected by the firewall or UTM Unified Threat Management C 1 Server inside of the intranet This server applies each service to the organization s computers DNS server DHCP server Email server Active Directory server LDAP server File server C 2 Application server This server applies the function of the server application as follows Epson Print Admin Document Capture Pro Server C 3 Wired L...

Page 13: ... methods are available for the printer s network connection Server client connection printer sharing using the Windows server Peer to peer connection direct printing Server Client Connection Settings This is the connection that the server computer shares with the printer To prohibit the connection without going through the server computer you can enhance the security Administrator s Guide Introduc...

Page 14: ...rint job because all print jobs go through the print server You cannot print when the Windows server is turned off Related Information Terms on page 8 Peer to Peer Connection Settings This is the connection to connect the printer on the network and the computer directly Only a network capable model can be connected Connection method Connect the printer to the network directly via hub or access poi...

Page 15: ...ction for the Printer B Print function Setting C Server and Shared folder Setting D Security Settings E Operation and Management Settings Network Connection for the Printer Set the IP address to the printer and connect it to the network Administrator s Guide Printer Settings and Management 15 ...

Page 16: ... for email notifications and the shared folder settings for printing files from a shared folder Mail server setting File server setting shared folder setting Related Information Configuring a Mail Server on page 29 Shared Folder Settings on page 33 Security Settings Administrator password setting Access control setting Controlling using Protocols Advanced Security setting Related Information Produ...

Page 17: ... Responding to the event occurrence Backing up the device settings Related Information Operation and Management Settings on page 48 Administrator s Guide Printer Settings and Management 17 ...

Page 18: ... name and the password of the access point that the printer connects to If MAC address filtering has been set register the MAC address of the printer in advance to register the printer For the supported standards see the User s Guide DNS server information IP address for primary DNS IP address for secondary DNS These are required when assigning a static IP address to the printer The secondary DNS ...

Page 19: ... that can follow the IP address Note When you use the IP address reservation function of the DHCP you can assign the same IP address to the devices at any time DNS Server and Proxy Server The DNS server has a host name domain name of the email address etc in association with the IP address information Communication is impossible if the other party is described by host name domain name etc when the...

Page 20: ...ward segment or the back segment separated by a period if you select l and r Confirm the value reflected on the previous screen 7 Set up the Subnet Mask and Default Gateway Confirm the value reflected on the previous screen cImportant If the combination of the IP Address Subnet Mask and Default Gateway is incorrect Start Setup is inactive and cannot proceed with the settings Confirm that there is ...

Page 21: ...port number for the proxy server Confirm the value reflected on the previous screen 7 Tap Start Setup Connecting to LAN Connect the printer to the network by Ethernet or Wi Fi Related Information Connecting to Ethernet on page 21 Connecting to the Wireless LAN Wi Fi on page 22 Connecting to Ethernet Connect the printer to the network by using the Ethernet cable and check the connection 1 Connect t...

Page 22: ...after confirming the message 4 Select Wi Fi Setup Wizard 5 Select the SSID for the access point If the SSID you want to connect to is not displayed on the printer s control panel tap Search Again to update the list If it is still not displayed tap Enter Manually and then enter the SSID directly 6 Tap Enter Password and then enter the password Note The password is case sensitive If you enter the SS...

Page 23: ...is explained Web Config Web Page for Device About Web Config Web Config is a built in web page of the printer for configuring the printer s settings You can operate the printer connected to the network from the computer To access Web Config you need to have first assigned an IP address to the printer Note You can lock the settings by configuring the administrator password to the printer Administra...

Page 24: ...thing is entered and the initial value of the administrator password is the product serial number Check the product serial number on the label on the printer We recommend that you change the initial password as soon as possible to prevent unauthorized access Related Information SSL TLS Communication with the Printer on page 79 About Digital Certification on page 79 Using the Print Functions Enable...

Page 25: ...t This example is when using Windows 2012 R2 1 Open the devices and printers screen Desktop Settings Control Panel Hardware and Sound or Hardware Devices and Printers 2 Add a printer Click Add printer and then select The printer that I want isn t listed 3 Add a local printer Select Add a local printer or network printer with manual settings and then click Next 4 Select Create a new port select Sta...

Page 26: ...th the printer Click Browse and then select the folder on the disc containing the printer driver Make sure you select the correct folder The location of the folder may change depending on your operating system 32 bit version of Windows WINX86 64 bit version of Windows WINX64 7 Follow the on screen instructions When using the printer under the server client connection printer sharing using the Wind...

Page 27: ...es Sharing tab 3 Select Share this printer and then enter to Share name For Windows Server 2012 click Change Sharing Options and then configure the settings Note Issues when Sharing Printers The Shared Server is Slow on page 66 Printer Settings on the Print Server are not Reflected on the Client Computer on page 67 Installing Additional Drivers Windows only If the Windows versions for a server and...

Page 28: ...er connection direct printing a printer and a client computer have a one to one relationship The printer driver must be installed on each client computer Related Information Setting the Printer Driver on page 28 Setting the Printer Driver For small organizations we recommend installing the printer driver on each client computer Use the installer on Epson website or on the software disc Note When t...

Page 29: ...Manager on page 69 Setting the Server or the Shared Folder Make the necessary settings for an email server or shared folder when using the email notification and shared folder printing functions Configuring a Mail Server Set the mail server from Web Config Check below before setting up The printer is connected to the network that can access the mail server Email setting information of the computer...

Page 30: ...enticated Account If you select SMTP AUTH or POP before SMTP as the Authentication Method enter the authenticated account name between 0 and 255 characters in ASCII 0x20 0x7E When you select SMTP AUTH enter the SMTP server account When you select POP before SMTP enter the POP3 server account Authenticated Password If you select SMTP AUTH or POP before SMTP as the Authentication Method enter the au...

Page 31: ...SMTP as the Authentication Method enter the POP3 server address between 0 and 255 characters using A Z a z 0 9 You can use IPv4 or FQDN format POP3 Server Port Number If you select POP before SMTP as the Authentication Method enter a number between 1 and 65535 Related Information Configuring a Mail Server on page 29 Checking a Mail Server Connection You can check the connection to the mail server ...

Page 32: ...ars when POP3 server authentication failed Unsupported communication method Check the followings SMTP Server Address SMTP Server Port Number This message appears when you try to communicate with unsupported protocols Connection to SMTP server failed Change Secure Connection to None This message appears when an SMTP mismatch occurs between a server and a client or when the server does not support S...

Page 33: ...g is complete This message appears when the printer is busy Related Information Checking a Mail Server Connection on page 31 Shared Folder Settings Make the shared folder settings for printing files from a shared folder Preparing the Shared Folder Setting the Shared Folder from the Control Panel 1 Select Menu on the printer s control panel 2 Select General Settings Network Settings Advanced Shared...

Page 34: ...der Print from Folder 1 Access Web Config and select the Network tab MS Network 2 Enable Use Microsoft network sharing 3 Set each item if necessary 4 Click Next 5 Confirm the settings and then click OK Related Information Accessing Web Config on page 24 Logging on to the Printer Using Web Config on page 48 MS Network Setting items Items Explanation Use Microsoft network sharing Select when enablin...

Page 35: ...the initial screen if there is no activity for a certain period of time You can set between 10 seconds and 240 minutes by the second Note You can also set up from the printer s control panel Language Menu General Settings Basic Settings Language Panel Lock Menu General Settings System Administration Security Settings Admin Settings Lock Setting Operation Time Out Menu General Settings Basic Settin...

Page 36: ...ion or published on the Internet When using the CA certificate time related trouble can be prevented by synchronizing with the time server 1 Access Web Config and select the Device Management tab Date and Time Time Server 2 Select Use for Use Time Server 3 Enter the time server address for Time Server Address You can use IPv4 IPv6 or FQDN format Enter 252 characters or less If you do not specify t...

Page 37: ...ss in Unicode UTF 8 Geolocation Latitude and Longitude WGS84 Enter the printer s location information This entry is optional Enter values by using WGS 84 datum which separates latitude and longitude with a comma You can enter 90 to 90 for the latitude value and 180 to 180 for the longitude value You can enter less than a decimal to the sixth place and you can omit Top Priority Protocol Select top ...

Page 38: ... printer Protects from illegal access by any system other than the authentication system when using it Register any user account You can register up to 10 user accounts The risk of leakage and unauthorized viewing of data can be reduced by minimizing the numbers of functions in accordance with the business content and the role of the user Setup for external interface Controls the interface such as...

Page 39: ...nfig on page 39 Epson Device Admin on page 68 Changing the Administrator Password from the Control Panel You can change the administrator password from the printer s control panel 1 Select Menu on the printer s control panel 2 Select General Settings System Administration Security Settings 3 Select Admin Settings 4 Select Admin Password Change 5 Enter the current password 6 Enter the new password ...

Page 40: ... them Enabling the Lock Setting Enable the Lock Setting for the printer where the password is set Enabling the Lock Setting from the Control Panel 1 Select Menu on the printer s control panel 2 Select General Settings System Administration Security Settings 3 Select Admin Settings 4 Select On on Lock Setting 5 Select Yes on the confirmation screen Check that is displayed on the home screen Enablin...

Page 41: ...d or disabled individually General Settings menu Panel Lock Basic Settings LCD Brightness Sounds Inside Light Alert Lamp Notice Sleep Timer Power Off Timer Circuit Breaker Interlock Startup Date Time Settings Language 1 Print Screen Operation Time Out Keyboard Length Unit Default Screen Job Status Printer Settings Administrator s Guide Product Security Settings 41 ...

Page 42: ... Network Settings Wi Fi Setup Wired LAN Setup Network Status Wired LAN Wi Fi Status 2 Wi Fi Direct Status 2 Print Status Sheet 2 Connection Check 3 Advanced Storage Settings System Administration To be locked Not to be locked 1 You can enable or disable the lock from General Settings System Administration Security Settings Restrictions 2 Even though items on the upper level can be locked by admini...

Page 43: ... user s availability as necessary such as registering or changing the contacts displaying job history etc 1 Select Menu on the printer s control panel 2 Select General Settings System Administration Security Settings Restrictions 3 Select the item for the function that you want to change the setting of and then set to On or Off Items That Can Be Set Individually The administrator can permit the it...

Page 44: ...d for the number you want to register cImportant When using the printer with the authentication system of Epson or other companies register the user name of the restriction setting in number 2 to number 10 Application software such as the authentication system uses number one so that the user name is not displayed on the printer s control panel 3 Set each item User Name Enter the name displayed on...

Page 45: ...ete the account registered to access control 1 Access Web Config and select the Product Security tab Access Control Settings User Settings 2 Click Edit for the number you want to delete 3 Click Delete cImportant When clicking Delete the user account will be deleted without a confirmation message Take care when deleting the account Return to the user setting list after a specific length of time Rel...

Page 46: ...restrict printing other than via network Note You can also make the restriction settings on the printer s control panel Memory Device Menu General Settings Printer Settings Memory Device Interface Memory Device PC Connection via USB Menu General Settings Printer Settings PC Connection via USB 1 Access Web Config and select the Product Security tab External Interface 2 Select Disable on the functio...

Page 47: ...eep it connect the printer to the computer using a USB cable and then confirm that the device manager s display contents stays unchanged Mac OS Connect the printer to the computer using a USB cable and then confirm that the printer is not listed if you want to add the printer from Printers Scanners Related Information Accessing Web Config on page 24 Logging on to the Printer Using Web Config on pa...

Page 48: ...n for Menu General Settings Basic Settings Operation Time Out you log off automatically after a specific length of time if there is no activity on the control panel Logging on to the Printer Using Web Config When you log in to Web Config as an administrator you can operate items that are set in the Lock Setting 1 Enter the printer s IP address into a browser to run Web Config 2 Click Log in 3 Ente...

Page 49: ...l server settings etc and print the network status sheet Network connection report Menu General Settings Network Settings Connection Check Home Description When you cannot connect to the network You can diagnose the network connection status of the printer and print the report Network connection status Home Router You can check the connection status for Wired Wireless LAN Checking the Information ...

Page 50: ...set on left and right When the number of characters in Location exceeds 32 bytes characters exceeding 32 bytes are omitted 3 Enter the email address for sending the notification email Use A Z a z 0 9 _ and enter between 1 and 255 characters 4 Select the language for the email notifications 5 Select the check box on the event for which you want to receive a notification The number of Notification S...

Page 51: ...ror of the wireless LAN interface has occurred TPM failure Notice when an error in the TPM chip has occurred Print Job Completion 2 The printer sends an e mail each time the number of print jobs set in the pulldown menu is completed Updating Firmware When new firmware is available updating the firmware of the printer improves the function or resolves the problem Updating the Printer s Firmware usi...

Page 52: ...and select the Device Management tab Firmware Update 2 Click Start The firmware confirmation starts and the firmware information is displayed if the updated firmware exists 3 Click Start and follow the on screen instructions Note You can also update the firmware using Epson Device Admin You can visually confirm the firmware information on the device list It is useful when you want to update multip...

Page 53: ... Leave this blank if you do not want to encrypt the file 4 Click Export cImportant If you want to export the printer s network settings such as the device name and IPv6 address select Enable to select the individual settings of device and select more items Only use the selected values for the replacement printer Related Information Accessing Web Config on page 24 Logging on to the Printer Using We...

Page 54: ...mport and then click Next 5 Click OK The settings are applied to the printer Related Information Accessing Web Config on page 24 Logging on to the Printer Using Web Config on page 48 Administrator s Guide Operation and Management Settings 54 ...

Page 55: ...tion from the client computer to the server to check the communication status Initializing the settings If the settings and communication status show no problem the problems may be solved by disabling or initializing the network settings of the printer and then setting up again Checking the Status of the Printer To identify the cause of trouble check the status of the printer and network Checking ...

Page 56: ...te Network Security Root Certificate Update Recovery Mode Causes Failed to update firmware and cannot return to the normal mode Solutions The printer has started in recovery mode because the firmware update failed Follow the steps below to try to update the firmware again 1 Connect the computer and the printer with a USB cable During recovery mode you cannot update the firmware over a network conn...

Page 57: ...t and then follow the solutions a Error code b Messages on the Network Environment E 1 Solutions Make sure the Ethernet cable is securely connected to your printer and to your hub or other network device Make sure your hub or other network device is turned on If you want to connect the printer by Wi Fi make Wi Fi settings for the printer again because it is disabled Administrator s Guide Solving P...

Page 58: ...g a wireless router with its default settings the SSID and password are located on a label on the wireless router If you do not know your SSID and password contact the person who set up the wireless router or see the documentation provided with the wireless router If you are connecting to an SSID generated from a tethering smart device check for the SSID and password in the documentation provided ...

Page 59: ...setting is set to Manual the IP address you manually set is invalid due to out of range for example 0 0 0 0 Set a valid IP address from the printer s control panel E 9 Solutions Check the following Devices are turned on You can access the Internet and other computers or network devices on the same network from the devices you want to connect to the printer If still does not connect your printer an...

Page 60: ...rrect if you are entering them manually The network addresses for other devices subnet mask and default gateway are the same The IP address does not conflict with other devices If still does not connect your printer and network devices after confirming the above try the following Turn off the wireless router Wait for about 10 seconds and then turn it on Make network settings again using the instal...

Page 61: ...t Simple AP connection To add another computer or smart device disconnect one of the connected devices or connect it to the other network first You can confirm the number of wireless devices which can be connected simultaneously and the number of connected devices by checking the network status sheet or the printer s control panel The same SSID as Wi Fi Direct exists in the environment Change the ...

Page 62: ...on path to the printer This will lead you to solve the problems ipconfig command Display the connection status of the network interface that is currently used by the computer By comparing the setting information with actual communication you can check whether the connection is correct In case there are multiple DHCP servers on the same network you can find out the actual address assigned to the co...

Page 63: ...nection on page 31 DNS Server Check the DNS server that is referred by the computer Confirm the status of the network adapter of the computer on the same network segment as the printer and confirm whether it is the same as the DNS setting of the printer You can check the DNS setting of the computer as follows Windows Control Panel Network and Internet Network and Sharing Center Change adapter sett...

Page 64: ...r The network status is displayed 3 Tap Change Settings 4 Select Others Disable Wi Fi 5 Check the message and then start setup 6 When a completion message is displayed close the screen The screen automatically closes after a specific length of time 7 Close the Network Connection Settings screen 8 Press the button Disconnecting Wi Fi Direct Simple AP Connection from the Control Panel Note When Wi F...

Page 65: ...essage is displayed close the screen The screen automatically closes after a specific length of time Trouble Case Cannot Access Web Config The IP address is not assigned to the printer A valid IP address may not be assigned to the printer Configure the IP address using the printer s control panel You can confirm the current setting information with a network status sheet or from the printer s cont...

Page 66: ... The proxy server setting of local address is not set to web browser When the printer is set to use a proxy server configure the web browser not to connect to the local address via the proxy server Windows Select Control Panel Network and Internet Internet Options Connections LAN settings Proxy server and then configure not to use the proxy server for LAN local addresses Mac OS Select System Prefe...

Page 67: ...e printer driver for the shared printer from the client computer 5 Reinstall the printer driver on the client computer Note If you change the printer settings on the client computer the printer settings on the print server such as the default settings are not reflected on the client computer Some settings such as Select Setting User Defined Custom Settings Menu Arrangement and so on are not reflec...

Page 68: ...download Epson Device Admin from Epson support website For more information see the documentation or help of Epson Device Admin Running Epson Device Admin Windows only Select All Programs EPSON Epson Device Admin Epson Device Admin Note If the firewall alert appears allow access for Epson Device Admin EpsonNet Config EpsonNet Config is an application software that can make settings to the device o...

Page 69: ...psonNet Print port There are features and restrictions listed below The printer s status is displayed on the spooler screen If the printer s IP address is changed by DHCP the printer is still detected You can use a printer located on a different network segment You can print using one of the various protocols IPv6 address is not supported EpsonNet SetupManager EpsonNet SetupManager is a software t...

Page 70: ...rrent Wi Fi connection was established by pressing a button on the access point Note If you cannot find the button or you are setting up using the software see the documentation provided with the access point 1 Tap on the home screen 2 Select Router 3 Tap Start Setup If the network connection is already set up the connection details are displayed Tap Change to Wi Fi connection or Change Settings t...

Page 71: ...er to enter the PIN code an eight digit number displayed on the printer s control panel into the access point within two minutes Note See the documentation provided with your access point for details on entering a PIN code 6 Tap Start Setup 7 Close the screen The screen automatically closes after a specific length of time if you do not select Close Note If connection fails restart the access point...

Page 72: ...ency range Change the frequency range of Wi Fi Direct used for connecting to the printer You can select 2 4 GHz or 5 GHz When changing the frequency range all connected devices are disconnected Re connect the device Note that you cannot re connect from devices that do not support 5 GHz frequency range when changing to 5 GHz Depending on the region this setting may not be displayed Disable Wi Fi Di...

Page 73: ... on Wi Fi connection settings from the printer s control panel Related Information Connecting to the Wireless LAN Wi Fi on page 22 Changing to Wi Fi Connection by Using Web Config Change the Ethernet connection to Wi Fi connection by using Web Config 1 Access Web Config and select the Network tab Wi Fi 2 Click Setup 3 Select the SSID for the access point and enter the password If the SSID you want...

Page 74: ... 21 Changing to Ethernet Connection Using Web Config Change the Wi Fi connection to Ethernet connection by using Web Config 1 Access Web Config and select the Network tab Wi Fi 2 Click Disable Wi Fi 3 Check the message and then select OK 4 Connect the printer and hub LAN switch by Ethernet cable Note You can also change the connection method by using Epson Device Admin For details see the guide or...

Page 75: ...P printing is used from the printer Printer FTP TCP 20 21 Discover the printer from an application such as EpsonNet Config and printer driver Printer ENPC UDP 3289 Collect and set up the MIB information from an application such as EpsonNet Config and printer driver Printer SNMP UDP 161 Forwarding LPR data Printer LPR TCP 515 Forwarding RAW data Printer RAW Port9100 TCP 9100 Forwarding AirPrint IPP...

Page 76: ...Advanced Security Settings for Enterprise In this chapter we describe advanced security features ...

Page 77: ...e computer via web browser or updating firmware Obtain a CA signed certificate and then import it to the printer Clearing an identification of the printer by the CA signed certification prevents impersonation and unauthorized access In addition communication contents of SSL TLS are protected and it prevents the leakage of contents for printing data and setup information Control of protocol Control...

Page 78: ...ion is stored in the TPM Trusted Platform Module chip Since the TPM chip is not accessible from outside the printer you can protect encrypted confidential information without sharing the encryption key cImportant If the TPM chip fails and the encryption key cannot be used you cannot restore the confidential information in the printer and use the printer Therefore make sure to back up your encrypti...

Page 79: ...ains the encryption key to the printer s external interface USB port 4 Tap Restore from Backup The encryption key is restored to the TPM chip 5 Check the message and then tap OK The printer restarts SSL TLS Communication with the Printer When the server certificate is set using SSL TLS Secure Sockets Layer Transport Layer Security communication to the printer you can encrypt the communication path...

Page 80: ...an SSL TLS communication a security alert may be displayed on a web browser because the certificate is not registered on a web browser You can use the Self signed Certificate only for an SSL TLS communication Related Information Obtaining and Importing a CA signed Certificate on page 80 Deleting a CA signed Certificate on page 83 Updating a Self signed Certificate on page 84 Obtaining and Importin...

Page 81: ...etween 1 and 128 characters If this is an IP address it should be a static IP address You can enter 1 to 5 IPv4 addresses IPv6 addresses host names FQDNs by separating them with commas The first element is stored to the common name and other elements are stored to the alias field of the certificate subject Example Printer s IP address 192 0 2 123 Printer name EPSONA1B2C3 Common Name EPSONA1B2C3 EP...

Page 82: ... to required items according to the following A certificate of the PEM DER format obtained from Web Config Private Key Do not configure because the printer contains a private key Password Do not configure CA Certificate 1 CA Certificate 2 Optional A certificate of the PEM DER format obtained from a computer Private Key You need to set Password Do not configure CA Certificate 1 CA Certificate 2 Opt...

Page 83: ...1 Specify a file if you need Related Information Importing a CA signed Certificate on page 81 Deleting a CA signed Certificate You can delete an imported certificate when the certificate has expired or when an encrypted connection is no longer necessary cImportant If you obtain a certificate using a CSR created from Web Config you cannot import a deleted certificate again In this case create a CSR...

Page 84: ...played 4 Click Reboot Network and then check that the deleted CA Certificate is not listed on the updated screen Related Information Accessing Web Config on page 24 Logging on to the Printer Using Web Config on page 48 Updating a Self signed Certificate Because the Self signed Certificate is issued by the printer you can update it when it has expired or when the content described changes 1 Access ...

Page 85: ...an lower unintended security risks by restricting printing from specific pathways or by controlling the available functions Controlling protocols Configure the protocol settings 1 Access Web Config and then select the Network Security tab Protocol 2 Configure each item 3 Click Next 4 Click OK The settings are applied to the printer Protocols you can Enable or Disable Protocol Description Bonjour S...

Page 86: ...abled you can print from the RAW port custom port IPP Settings You can specify whether or not to allow printing from IPP When this is enabled you can print over the Internet FTP Settings You can specify whether or not to allow FTP printing When this is enabled you can print over an FTP server SNMPv1 v2c Settings You can specify whether or not to enable SNMPv1 v2c This is used to set up devices mon...

Page 87: ...ndows network map Device Name Displays the LLTD device name LLMNR Settings Items Setting value and Description Enable LLMNR Select this to enable LLMNR You can use name resolution without NetBIOS even if you cannot use DNS LPR Settings Items Setting value and Description Allow LPR Port Printing Select to allow printing from the LPR port Printing Timeout sec Enter the timeout value for LPR printing...

Page 88: ...con nected to the network The URL is a combined value of the printer s IP address Port number and IPP printer name URL Wi Fi Direct Displays IPP URLs http and https when the printer is con nected by Wi Fi Direct The URL is a combined value of the printer s IP address Port number and IPP printer name Printer Name Displays the IPP printer name Location Displays the IPP location FTP Settings Items Se...

Page 89: ...sword you configured for confirmation Context Name Enter within 32 characters or less in Unicode UTF 8 If you do not specify this leave it blank The number of characters that can be entered varies depending on the language Encrypted Communication Using IPsec IP Filtering About IPsec IP Filtering You can filter traffic based on IP addresses services and port by using IPsec IP Filtering function By ...

Page 90: ... Policy Items Settings and Explanation IPsec IP Filtering You can enable or disable an IPsec IP Filtering feature Access Control Configure a control method for traffic of IP packets Items Settings and Explanation Permit Access Select this to permit configured IP packets to pass through Refuse Access Select this to refuse configured IP packets to pass through IPsec Select this to permit configured ...

Page 91: ...tificate you need to obtain and import a CA signed certificate in advance ID Type If you select Pre Shared Key for Authentication Method select the type of ID for the printer ID Enter the printer s ID that matches the type of ID You cannot use and for the first character Distinguished Name Enter 1 to 255 1 byte ASCII 0x20 to 0x7E characters You need to include IP Address Enter IPv4 or IPv6 format ...

Page 92: ...e shared key between 1 and 127 characters Confirm Pre Shared Key Enter the key you configured for confirmation Encapsulation If you select IPsec for Access Control you need to configure an encapsulation mode Items Settings and Explanation Transport Mode If you only use the printer on the same LAN select this IP packets of layer 4 or later are encrypted Tunnel Mode If you use the printer on the Int...

Page 93: ...tion algorithm for ESP This is available when ESP is selected for Security Protocol AH Authentication Select the encryption algorithm for AH This is available when AH is selected for Security Protocol Related Information Configuring Default Policy on page 89 Configuring Group Policy A group policy is one or more rules applied to a user or user group The printer controls IP packets that match with ...

Page 94: ...ailable Configure a static IPv6 address Remote Address Host Enter a device s IP address to control access The IP address must be 43 characters or less If you do not enter an IP address all addresses are controlled Note If an IP address is assigned automatically e g assigned by DHCP the connection may be unavailable Configure a static IP address Method of Choosing Port Select a method to specify po...

Page 95: ... port numbers at the maximum Example 25 80 143 5220 If you do not enter a port number all ports are controlled IKE Version Select IKEv1 or IKEv2 for IKE Version Select one of them according to the device that the printer is connected to IKEv1 The following items are displayed when you select IKEv1 for IKE Version Items Settings and Explanation Authentication Method If you select IPsec for Access C...

Page 96: ... Shared Key Enter the key you configured for confirmation Remote Authentication Method If you select IPsec for Access Control select an option Used certificate is common with a default policy ID Type If you select Pre Shared Key for Authentication Method select the type of ID for the device that you want to authenticate ID Enter the printer s ID that matches to the type of ID You cannot use and fo...

Page 97: ... for some of the settings and select an item other than Any for the other settings the device may not communicate depending on the other device that you want to authenticate Items Settings and Explanation IKE Encryption Select the encryption algorithm for IKE The items vary depending on the version of IKE Authentication Select the authentication algorithm for IKE Key Exchange Select the key exchan...

Page 98: ...services ENPC UDP 3289 Any port Searching for a printer from applications such as Epson Device Admin and the printer driver SNMP UDP 161 Any port Acquiring and configuring of MIB from applications such as Epson Device Admin and the printer driver LPR TCP 515 Any port Forwarding LPR data RAW Port9100 TCP 9100 Any port Forwarding RAW data IPP IPPS TCP 631 Any port Forwarding data of IPP IPPS printin...

Page 99: ...tions of printing data and printer configuration from specified services Default Policy IPsec IP Filtering Enable Access Control Refuse Access Group Policy Enable this Group Policy Check the box Access Control Permit Access Remote Address Host IP address of a client Method of Choosing Port Service Name Service Name Check the box of ENPC SNMP HTTP Local HTTPS Local and RAW Port9100 Receiving access...

Page 100: ...formation Accessing Web Config on page 24 Logging on to the Printer Using Web Config on page 48 Obtaining a CA signed Certificate on page 80 Connecting the Printer to an IEEE802 1X Network Configuring an IEEE802 1X Network When you set IEEE802 1X to the printer you can use it on the network connected to a RADIUS server a LAN switch with authentication function or an access point 1 Access Web Confi...

Page 101: ...s If you are using a Windows server as a RADIUS server you can enter up to 127 characters Confirm Password Enter the password you configured for confirmation Server ID You can configure a server ID to authenticate with a specified RADIUS server Authenticator verifies whether a server ID is contained in the subject subjectAltName field of a server certificate that is sent from a RADIUS server or no...

Page 102: ...Status Disable IEEE802 1X feature is disable EAP Success IEEE802 1X authentication has succeeded and network connection is available Authenticating IEEE802 1X authentication has not been completed Config Error Authentication has failed since the user ID has not been set Client Certificate Error Authentication has failed since the client certificate is out of date Timeout Error Authentication has f...

Page 103: ...porary use Disabling the Security Function Using the Control Panel You can disable IPsec IP Filtering or IEEE802 1X using the printer s control panel 1 Select Menu General Settings Network Settings 2 Select Advanced 3 Select from the following items that you want to disable Disable IPsec IP Filtering Disable IEEE802 1X 4 Select Proceed on the confirmation screen 5 When a completion message is disp...

Page 104: ...A 256 SHA 384 SHA 512 MD5 AH authentication algorithm SHA 1 SHA 256 SHA 384 SHA 512 MD5 available for IKEv2 only Related Information Encrypted Communication Using IPsec IP Filtering on page 89 Cannot Communicate Suddenly The IP address of the printer has been changed or cannot be used When the IP address registered to the local address on Group Policy has been changed or cannot be used IPsec commu...

Page 105: ...d to the computer accessing the printer If a CA certificate is not imported to the computer creating a port may fail Make sure a CA certificate is imported Related Information Encrypted Communication Using IPsec IP Filtering on page 89 Cannot Connect After Configuring IPsec IP Filtering The settings of IPsec IP Filtering are incorrect Disable IPsec IP filtering from the printer s control panel Con...

Page 106: ... 5KB The password for importing the certificate is incorrect Enter the correct password If you forget the password you cannot import the certificate Re obtain the CA signed Certificate Related Information Importing a CA signed Certificate on page 81 Cannot Update a Self Signed Certificate The Common Name has not been entered Common Name must be entered Unsupported characters have been entered to C...

Page 107: ... not selected a file to import What to do Select a file and click Import CA Certificate 1 is not entered Cause CA certificate 1 is not entered and only CA certificate 2 is entered What to do Import CA certificate 1 first Invalid value below Cause Unsupported characters are contained in the file path and or password What to do Make sure that the characters are entered correctly for the item Invalid...

Page 108: ...le in PKCS 12 format that contains up to 2 CA certificates The certificate has expired Check if the certificate is valid or check the date and time on your printer Cause The certificate is out of date What to do If the certificate is out of date obtain and import the new certificate If the certificate is not out of date make sure the printer s date and time are set correctly Private key is require...

Page 109: ...Certification on page 79 Delete a CA signed Certificate by Mistake There is no backup file for the CA signed certificate If you have the backup file import the certificate again If you obtain a certificate using a CSR created from Web Config you cannot import a deleted certificate again Create a CSR and obtain a new certificate Related Information Deleting a CA signed Certificate on page 83 Import...

Reviews:

No comments

Brands by name

Popular brands

Load more brands