Canon DU7-1178-000, Руководство по обслуживанию, Страница: 69 / 122

Chapter 2
2-17
SDL and SSO are part of the MEAP functions. They are preinstalled on the unit when shipped from the
factory. When the hard drive is replaced, however, they must be re-installed from the MEAP Administra-
tion Software CD-ROM included with the iR unit.
SDL or SSO services are enabled by accessing the iR device from a Web browser via a network and run-
ning the Service Management Service (SMS).
See the MEAP Application Management Function Guide for operation details. This guide is supplied as a
brochure with Japanese iR models; with overseas models, it is supplied as a PDF file on the MEAP Ad-
ministration Software CD-ROM.
Options using SSO are shown below.
Encrypted Printing Software A3
Removal of New Card Reader (NCR) Functions
SSO following the iR6570 version update no longer supports New Card Reader, CCV, CCX, or CCM.
Therefore, the database managing IDs in the previous SDL has been removed. Card information found in
imported data is permitted, however, so user information created with SDL can be imported.
Excerpt from the Users' Guide:
Card Reader D1
When the optional card reader D1 is installed, please insert the control card before using the device. De-
partment IDs are managed automatically.
- The Limit Functions setting cannot be used when using a log-in service other than department IDs.
- The card reader D1 cannot be used when SSO is set as the log-in service.
- Please enter your card number in the card ID field when SDL is set as the log-in service.
Encrypted Printing Software (IC card version)
The preinstalled version of SSO provides a function to handle IC card secure printing. Encrypted
secure printing is accomplished by decrypting data with the private key maintained in the IC card.
2.2.3 SSO multi Domain support
0011-4134
MEAP SMS Administrator Guide abstract:
This is a login service which can be used in an Active Directory environment network or in the machine.
It contains the following user authentication systems:
- 'Domain Authentication'
- 'Local Device Authentication'
- 'Domain Authenti Local Device Authentication'
- The three user authentication systems can be switched using a Web browser.
- The default setting is 'Domain Authenti Local Device Authentication'. To ensure
the security of your system, change the SSO user authentication system to 'Domain Authentication', or
change the user name and password for the Local Device Authentication administrator to something other
than the default setting, as soon as you start using SSO.
-'Domain Authentication'
A user authentication system which is linked to the domain controller in an Active Directory
environment on a network, and performs authentication for connecting to the network domain while
logging in to the machine. Users belonging to up to four trusted domains (in addition to users belonging
to the domain which includes the machine) can be authenticated. The name of the domain to log in to is
selected by the user when logging in.
You can also use the optional NetSpot Accountant to analyze/manage the current state of the machine.
In the example below, users belonging to Domain A (which includes the machine), and users belonging
to Domain B (which is trusted by Domain A), can be authenticated.
- 'Local Device Authentication'
A user authentication system which only uses the machine. This users to be authenticated are registered/
managed using a database inside the machine. [This device] is the login destination.
- 'Domain Authenti Local Device Authentication'
A user authentication system which includes the functions of both Domain Authentication and Local
Device Authentication. This is useful for using Domain Authentication to authenticate users registered/