Xerox ColorQube 8580, System Administrator Manual

Page: 55 / 93

Security
Xerox
®
ColorQube 8580/8880 Color Printer 55
System Administrator Guide
Installing a Digital Certificate
There are three ways to install a certificate on the printer:
• Create and install a Xerox
®
Device Certificate.
Create a Xerox
®
Device Certificate to allow the printer to generate a certificate, sign it, and create a
public key used in SSL encryption. Install the Xerox
®
Device Certificate on the printer, and install the
Generic Xerox
®
Trusted CA Certificate in the devices that the printer communicates with. Examples
of other devices are client Web browsers for HTTPS, or RADIUS authentication server for 802.1X.
Installing this certificate ensures that users can access the printer using CentreWare Internet
Services, and certificate warning messages do not appear.
Note: Creating a Xerox
®
Device Certificate is less secure than creating a certificate signed by a
trusted CA. If you do not have a server functioning as a Certificate Authority, install a Xerox
®
Device
Certificate on the printer. Then install the Generic Xerox
®
Trusted CA Certificate on the other
devices.
• Create a Certificate Signing Request (CSR) and install the CA-signed device certificate.
Create a CSR. Send the CSR to a CA or a local server functioning as a CA to sign the CSR and return
the certificate. Install the certificate on the printer. An example of a server functioning as a CA is
Windows Server 2008 running Certificate Services.
• Install trusted CA and self-signed certificates.
Install the certificates of the root CA, and any intermediate CAs for your company. Install the
self-signed certificates from any other devices in your network.
Adding or Creating a Certificate
1. In CentreWare Internet Services, click
Properties
>
Security
.
2. Click
Certificates
.
3. Click
Add/Create
.
4. Select an option.
−
Install a new Root or other Trust Point Certificate
: This option adds a certificate that is
required to validate the authentication server certificate when using 802.1X EAP
authentication.
−
Install a CA signed Device Certificate
: This option adds a device certificate signed by a
certificate authority (CA) that validates the identity of the printer to the network.
− Create Certificate Signing Request (CSR) : This option creates a CSR that you can send for
signing to a trusted CA. When the certificate is returned, you can install the CA signed device
certificate on the printer.
− Create Self-Signed Device Certificate : This option modifies the default self-signed certificate
that is created automatically on the printer. If you use HTTPS, each printer requires a unique
certificate created for each browser that is used to access the printer.
5. Click Next .
6. Follow the onscreen instructions.
7. To add or create the certificate, click
Finish .