Lexmark 10G0149 - PrintCryption Card Encryption Module, Manual, Page: 6 / 17

Page 6 of 17
© Copyright 2006 Lexmark International Inc.
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.
The PrintCryption module is evaluated for running on number of Lexmark
printers including mono-color printers (T630, T632, T634, W820, T640, T642,
T644, W840), Color printers (C534, C760, C762, C912, C920, C772, C782,
C935) and MFP printers (X644e, X646e, X646dte, X850e, X852e, X854e,
X945e). The module’s physical cryptographic boundary is the metal and plastic
enclosure of the printer.
Figure 3 - Physical Cryptographic Boundary
Module Interfaces
The cryptographic module’s physical ports are composed of the physical ports
provided by the hardware platforms listed above. These printer ports include the
network port, parallel port, USB port, paper exit port, multipurpose feeder, LED,
and LCD display.
Since all of the module’s services are server processes, the logical interfaces of
the module are network port and API calls, which provide the only means of
accessing the module’s services. Data inputs are service requests on the TCP
ports. Control inputs are also data at TCP/IP port, however they are logically
distinct from Data input and controls how the function is executed. The data
output from the module includes X.509 certificate and deciphered data, which exit
through the network port and an internal API, respectively. The status outputs of
the module are sent via network and stored in log file.
All of these physical ports are separated into logical interfaces defined by FIPS
140-2, as described in the following table.
CPU
FLASH Volatile
Memory
Custom
ASIC
I/O Port
Option Slot
Print
Engine
PCI BUS
System BUS
Cryptographic Boundary