Secure Installation and Operation of Your WorkCentre™ 4250/4260
Purpose and Audience
This
document provides information on the secure installation and operation of a WorkCentre™ 4250/4260 Multifunction
System. All customers, but particularly those concerned with secure installation and operation of these machines, should follow
these guidelines.
Overview
This document lists some important customer information and guidelines that will ensure that your WorkCentre™ 4250/4260
Multifunction System is operated and maintained in a secure manner.
Background
The WorkCentre™ 4250/4260 Multifunction System is currently undergoing Common Criteria evaluation. The information
provided here is consistent with the security functional claims made in the Security Target. Upon completion of the evaluation,
the Security Target will be available from the Common Criteria Certified Product website
(
http://www.commoncriteriaportal.org/products.html
) list of evaluated products or from your Xerox representative.
Details
For secure installation, setup and operation of a WorkCentre™ 4250/4260 Multifunction System please follow these guidelines:
1.
Change the Tools password as soon as possible. Reset the Tools password periodically.
Xerox recommends that you (1) set the Tools password to a minimum length of eight alphanumeric characters and (2) change
the Tools password once a month.
To change the Admin password from the Local User Interface, first log in to the device by selecting the [Login] button and
entering the Admin password. Then select the
{Machine Status}
hard button
Æ
Tools
Æ
Security Settings
Æ
Change Admin
Passcode.
For directions on how to change the Admin password from the Web User Interface, select
Machine Connection
Æ
CentreWare
Internet Services
Æ
Change the Administrator Password
section of the System Administrator Guide document.
2.
For customers concerned about document files on the network controller hard disk drive or Embedded Fax card memory, the
Image Overwrite Security (IOS) option containing the Immediate Image Overwrite and On Demand Image Overwrite security
features, which comes installed on the WorkCentre™ 4250/4260 Multifunction System, must be properly configured and
enabled. Please follow the applicable instructions in the
Security
Æ
Image Overwrite Security
section of the System
Administrator Guide document for proper enablement of Immediate Image Overwrite and On Demand Image Overwrite.
Notes:
•
Immediate Image Overwrite of a delayed print job will not occur until after the machine has printed the job.
•
If an Immediate Image Overwrite fails, an informational Immediate Image Overwrite Error message will likely appear on
the graphical user interface on the WorkCentre™ 4250/4260 Multifunction System that tells the user that (1) an Immediate
Image Overwrite has failed for a completed job, (2) the system administrator should be notified that this error has occurred,
and (3) a Full On Demand Image Overwrite should be run. An error sheet, when enabled, will always be printed indicating
that there is an Immediate Overwrite Failure and requesting that a Full On Demand Image Overwrite be run.
•
If there is a power failure or system crash while processing a large job, residual data might still reside on the hard drive. In
that case an error sheet should be printed indicating that there is an Immediate Overwrite Failure. It is recommended that
a Full On Demand Image Overwrite be run.
•
Two forms of On Demand Image Overwrite are manually invoked – a Standard On Demand Image Overwrite that will
overwrite all image data except data stored by the Save Job for Reprint feature and data stored in Embedded Fax dial
directories and mailboxes and a Full On Demand Image Overwrite that will overwrite all image data including data stored
by the Save Job for Reprint feature and data stored in Embedded Fax dial directories and mailboxes. Follow the instructions
in the
Security
Æ
Image Overwrite Security
Æ
On Demand Image Overwrite
section of the System Administrator Guide
document for invoking a Standard or Full On Demand Image Overwrite from either the Local User Interface (Local UI) or
the Web User Interface (WebUI).
The System Administrator also has the option of scheduling either a Standard or Full On Demand Image Overwrite from the
WebUI. Follow the instructions in the
Security
Æ
Image Overwrite Security
Æ
On Demand Image Overwrite
Æ
Scheduled On Demand Image Overwrite
section of the System Administrator Guide document.
Before invoking an On Demand Image Overwrite verify that there are no active or pending print or scan jobs.
•
Full On Demand Image Overwrite will overwrite Saved Jobs for Reprint, Fax Dial Directories and Fax Mailboxes.
•
Once an On Demand Image Overwrite has begun, it cannot be cancelled and will run until completion.
