Fuji Xerox ApeosPort-V C5580, Administrator'S Manual

Page: 398 / 797

13 Encryption and Digital Signature Settings
398
En
cr
yp
ti
o
n
a
n
d
D
ig
it
a
l
S
ign
at
ur
e
S
e
tt
in
gs
13
Configuration of Encryption using IPsec
This section describes how to encrypt communications using IPsec.
When the IKE authentication method is set to [Authenticate by Preshared Key], skip step 1
"Import and Configuration of a Certificate" and go to step 2 "Configuration on the Machine
(Configuration of IPsec)".
For IKE authentication methods, refer to "IPsec Settings" (P.226).
Installation Overview.................................................................................................................................................................. 398
Step1 Import and Configuration of a Certificate ................................................................................................................ 398
Step2 Configuration on the Machine (Configuration of IPsec) ....................................................................................... 399
Step3 Configuration on the Computer................................................................................................................................... 400
Installation Overview
To encrypt communications using IPsec, configure the machine and your computer as
follows:

Configuration on the Machine
When [IKE Authentication Method] is set to [Authenticate by Digital Signature], configure
a certificate on the machine. No certificate is registered on the machine by factory default.
After importing a certificate, configure IPsec.
Configure the following setting to set up a certificate on the machine.
 Configuring certificates by CentreWare Internet Services
- Enable HTTPS, and then import a certificate issued by another CA to the machine.
Note • If a certificate to be imported as an IPsec certificate contains V3 extension "KeyUsage",
"digitalSignature" bit must be asserted.

Configuration on the Computer
Configure the following settings to encrypt communications between a computer and the
machine.
 Create an IP security policy
 Assign the IP security policy
Step1 Import and Configuration of a Certificate
The following describes configuration procedures to set up a certificate with CentreWare
Internet Services.
To configure a certificate using CentreWare Internet Services, configure the encryption
settings for HTTP communications, and then import a certificate issued by another CA to
use it for the IPsec certificate.
Note • You cannot use a self-signed certificate created with CentreWare Internet Services for IPsec.
• The machine supports to import RSA
®
public key (up to 4096 bit).
For details on how to configure the encryption settings for HTTP communication, refer to "Configuration of HTTP
Communications Encryption" (P.395).
1
Start CentreWare Internet Services.
For more information on how to start CentreWare Internet Service, refer to "Starting CentreWare Internet Services" (P.324).
2
Import a certificate.