Secure Installation and Operation of Your WorkCentre™ 4150
Purpose and Audience
This document provides information on the secure installation and operation of a WorkCentre™ 4150 Multifunction System. All
customers, but particularly those concerned with secure installation and operation of these machines, should follow these guidelines.
Overview
This document lists some important customer information and guidelines that should ensure that your WorkCentre™ 4150
Multifunction System is operated and maintained in a secure manner.
Background
The WorkCentre™ 4150 Multifunction System is currently undergoing Common Criteria evaluation. The information provided here is
consistent with the security functional claims made in the Security Target. Upon completion of the evaluation, the Security Target
should be available from the Common Criteria Portal (www.commoncriteriaportal.org/) List of evaluated products or from your Xerox
representative.
Details
For secure installation, setup and operation of a WorkCentre™ 4150 Multifunction System please follow these guidelines:
1.
Change the Tools password as soon as possible. Reset the Tools password periodically. Xerox recommends that you (1) set
the Tools password to a minimum length of eight digits and (2) change the Tools password once a month. For directions on
how to change the Tools password select:
•
Reference
--
Machine Tools
--
Password
tabs in the System Administration (SA) CD1
2.
For customers concerned about document files on the network controller hard disk drive, the Image Overwrite Security (IOS)
option containing the Immediate Image Overwrite and On Demand Image Overwrite security features must be purchased
and properly configured, installed and enabled. Please follow the applicable instructions in the
Installation
--
Configure
Features
–
Immediate Image Overwrite or On Demand Image Overwrite
tab in the System Administration (SA) CD1 for
proper installation and enablement of Immediate Image Overwrite and On Demand Image Overwrite.
Notes:
•
Immediate Image Overwrite for all jobs (including internally submitted jobs) that are stored in any non-volatile
memory on the system, the system should overwrite the physical portions of those memories that contained the
job while the job was proceeding through the job sequence. This is applicable to Print, Copy (landscape/stapled
type only) and Scan to X, jobs, and should occur for all jobs that the system defines the job status as “Completed.”
•
Immediate Image Overwrite of a delayed print job should not occur until after the machine has printed the job.
•
If an Immediate Image Overwrite fails, an informational Immediate Image Overwrite Error message will appear at
the top of the Local UI screen on the WorkCentre™ 4150 Multifunction System machine. This Immediate Image
Overwrite Error message will remain displayed on the top of the Local UI screen until the system administrator
initiates an On Demand Image Overwrite.
•
If there is a power failure or system crash of the network controller while processing a large print job, residual data
might still reside on the Network Controller hard drive. In that case an error sheet should be printed indicating that
there is an Immediate Overwrite Failure. It is recommended that an On Demand Image Overwrite be run.
•
In the event of an Immediate Overwrite error the Completed Reason job attribute in the Completed Job Log should
indicate that the job experienced an Immediate Overwrite error under the condition that the overwrite error was
the first error experienced by the job.
•
The Completed Job Log may not show any Immediate Image Overwrite completion status for some copy and LAN
Fax jobs. In those cases the Immediate Image Overwrite completion status can be determined from the
corresponding Audit Log entry for these jobs.
•
Deletion of some network scan and scan-to-E-mail jobs may report an incorrect Immediate Image Overwrite
completion status in the corresponding Completed Job Log and Audit Log entries, even though Immediate Image
Overwrite was successfully completed.
•
On Demand Image Overwrite, once enabled, is manually invoked. Follow the instructions in the
Installation
--
Configuration Features
--
On Demand Image Overwrite
tab in the SA CD1 for invoking an On Demand Image
Overwrite from the Local UI.
Before invoking On Demand Image
Overwrite verify that (1) there are no active or
pending print or scan jobs, (2) after a power on of the machine all
subsystems must be properly synced and the
Configuration Report must have printed, (3) for any previously
initiated On Demand Image Overwrite request the
