
13 Encryption and Digital Signature Settings
374
E
n
cr
y
pt
io
n
an
d
Di
gi
ta
l S
ign
at
ure
S
e
tt
in
gs
13
Configuration of Encryption using IPsec
This section describes how to encrypt communications using IPsec.
When the IKE authentication method is set to [Authenticate by Preshared Key], skip step 1
"Import and Configuration of a Certificate" and go to step 2 "Configuration on the Machine
(Configuration of IPsec)".
For IKE authentication methods, refer to "IPsec Settings" (P.201).
Installation Overview
To encrypt communications using IPsec, configure the machine and your computer as
follows:
Configuration on the Machine
When [IKE Authentication Method] is set to [Authenticate by Digital Signature], configure
a certificate on the machine. No certificate is registered on the machine by factory default.
After importing a certificate, configure IPsec.
Configure the following setting to set up a certificate on the machine.
z
Configuring certificates by CentreWare Internet Services
- Enable HTTPS, and then import a certificate issued by another CA to the machine.
Note
•
If a certificate to be imported as an IPsec certificate contains V3 extension "KeyUsage",
"digitalSignature" bit must be asserted.
Configuration on the Computer
Configure the following settings to encrypt communications between a computer and the
machine.
z
Create an IP security policy
z
Assign the IP security policy
Step1 Import and Configuration of a Certificate
The following describes configuration procedures to set up a certificate with CentreWare
Internet Services.
To configure a certificate using CentreWare Internet Services, configure the encryption
settings for HTTP communications, and then import a certificate issued by another CA to
use it for the IPsec certificate.
Note
•
You cannot use a self-signed certificate created with CentreWare Internet Services for IPsec.
•
The machine supports to import RSA
®
public key (up to 4096 bits).
For details on how to configure the encryption settings for HTTP communication, refer to "Configuration of HTTP
Communications Encryption" (P.372).
1
Start CentreWare Internet Services.
For more information on how to start CentreWare Internet Service, refer to "Starting CentreWare Internet Services" (P.298).
2
Import a certificate.
Содержание ApeosPort-V 4070
Страница 1: ...ApeosPort V 5070 ApeosPort V 4070 DocuCentre V 5070 DocuCentre V 4070 Administrator Guide ...
Страница 13: ...13 EP System 704 Glossary 705 Index 707 ...
Страница 14: ...14 ...
Страница 40: ...1 Before Using the Machine 40 Before Using the Machine 1 ...
Страница 82: ...3 Maintenance 82 Maintenance 3 4 Close the Side 2 scanner and then close the document feeder gently ...
Страница 108: ...4 Machine Status 108 Machine Status 4 ...
Страница 316: ...7 Printer Environment Settings 316 Printer Environment Settings 7 ...
Страница 348: ...9 Scanner Environment Settings 348 Scanner Environment Settings 9 ...
Страница 356: ...10 Using IP Fax SIP 356 Using IP Fax SIP 10 ...
Страница 368: ...12 Using the Server Fax Service 368 Using the Server Fax Service 12 ...
Страница 384: ...13 Encryption and Digital Signature Settings 384 Encryption and Digital Signature Settings 13 ...
Страница 582: ...15 Problem Solving 582 Problem Solving 15 ...
Страница 718: ...716 Index ...