Xerox WorkCentre 7300 Series, Administrator'S Manual

Page: 148 / 203

136
9. Configure the certificate.
a. Click on Trusted Digital Certificate Management .
b. Select [Local Device] for Category , [Scan File] for Certificate Purpose , and then click the
Display the List button.
c. Place a check mark in the box in front of the Certificate you wish to view details for.
d. Click the Certificate Details button.
e. Click the Use this certificate button.
f. Click Reboot . The machine will reboot and the setting values will be reflected.
10. Configure the settings for PDF/XPS Signatures.
a. Refresh the web browser.
b. Click [+] on the left of Security to display the items in the folder.
c. Click PDF/DocuWorks Security Settings and then set the following items.
PDF Signature
Select the setting for PDF Signature from [Do not add signature], [Always add visible signature],
[Always add invisible signature], or [Select during send].
XPS Signature
Select the setting for XPS Signature from [Do not add signature], [Always add signature], or [Select
during send].
d. Click the Apply button.
Configuration on a Computer
Confirm that the digital certificate being used by the machine to encrypt PDF and XPS files has been
imported and is registered on the recipient’s computer. This will assure the ability to conduct two way
digital signing of files, should this capability be desired or needed.
IP Sec
IP Sec (IP Security) is comprised of the IP Authentication Header and IP Encapsulating Security Payload
protocols, that secure IP communications at the network layer of the protocol stack, using both
authentication and data encryption techniques. The ability to send IP Sec encrypted data to the printer is
provided by the use of a public cryptographic key, following a network negotiating session between the
initiator (client workstation) and the responder (printer or server). To send encrypted data to the printer, the
workstation and the printer have to establish a Security Association with each other by verifying a matching
password (shared secret) to each other. If this authentication is successful, a session public key will be
built and used to send IP Sec encrypted data over the TCP/IP network to the printer.
Providing additional security during the Public Key negotiating process, Digital Certificates can
alternatively be used in place of the Shared Secret, to encrypt the Public Key information being exchanged
between communicating parties. The Digital Certificate resides on the multifunction device (managed as
stated in this Encryption section in the Configuring Scan File certificates topic) and MUST also have been
imported and stored on the computer that is encrypting data being sent to the device.
Certificates add digital signatures (individualized checksums verifying data integrity) to datagrams during
the public key negotiating process, greatly assisting in securing that data from network sniffers.