Canon imageRUNNER ADVANCE System V3.13, Руководство по обслуживанию, Страница: 27 / 181

Protection of Encryption Keys, Certificates and Passwords
The Main Controller PCB of this machine has TPM installed. "TPM" stands for "Trusted Platform Module" and has a functionality
to generate and store encryption keys as well as the public-key encryption arithmetic function.
TPM protects security data (passwords, certificates and encryption keys) stored in the Flash. It does not protect non-security data
such as setting, registered, or saved data.
Security data are encrypted/decrypted using the TPM key inside TPM.
Memory area
TPM
Root Key
TPM Key
Public Key Pair for
SSL Communication
Data Storing Key
Password
Encryption Key
User Certificate
Since the TPM key is safely
stored using the root key in
the TPM chip, high security
is maintained.
All information is encrypted and stored by the
TPM key which was encrypted by root key.
User Certificate
Data Storing Key
Public Key Pair for
SSL Communication
Password
Encryption Key
TPM
Memory area
It is very difficult to eject a TPM key, and the Main machine security information is safe in the following situations.
• When taking out Main machine internal storage or Main Controller PCB and inserting it into MFPs with other serial numbers
(The TPM retains the model information when the TPM settings are enabled.))
• When the machine's system is hacked via network
To enable this feature, set the following setting to [ON]. (Default: OFF)
• [Execute Management Settings] > [Data Management] > [TPM Settings] > [ON]
Security information structure
The operation of the security function differs depending on the TPM setting on the UI.
There are 2 types of TPM settings, and the flow of security information with each of these TPM settings is explained below.
TPM
TPM Key
Backup Key
for TPM failure
Public Key
Common
Key
Password
Flash PCB
USB flash drive
Password
Image diagram when the TPM settings are enabled
When TPM settings are enabled, the TPM key becomes valid, so three-stage keys can be used. Therefore, the security information
of each machine is securely protected.
The security information in this setting is composed of 3 keys and a plurality of password information stored in the FLASH PCB.
Each piece of information is stored in the specified storage location. (Enclosed with a blue line in the above diagram)
3. Security Function
22