Xerox WORKCENTRE 5735, Руководство системного администратора, Страница: 183 / 362

User Data Encryption
WorkCentre™ 5735/5740/5745/5755/5765/5775/5790
System Administrator Guide
183
c. Click [View/Save]. The certificate details are displayed.
IP Sec
IP Sec (IP Security) consists of the IP Authentication Header and IP Encapsulating Security Payload
protocols, that secure IP communications at the network layer of the group of protocols, using both
authentication and data encryption techniques. The ability to send IP Sec encrypted data to the
printer is provided by the use of a public cryptographic key, following a network negotiating session
between the initiator (client workstation) and the responder (printer or server). To send encrypted data
to the printer, the workstation and the printer have to establish a Security Association with each other
by verifying a matching password (shared secret) to each other. If this authentication is successful, a
session public key will be used to send IP Sec encrypted data over the TCP/IP network to the printer.
Providing additional security in the negotiating process, SSL (Secure Sockets Layer protocols) are used
to assure the identities of the communicating parties with digital signatures (individualized checksums
verifying data integrity), precluding password guessing by network sniffers.
IP Sec security settings are the means by which an administrator can configure multiple groups of
hosts and groups of protocols. Also this feature is used to setup IPsec and IKE (Internet Key Exchange)
protocols on the printer.
The IP Sec implementation is a ‘full’ implementation that the device can initiate a connection for print,
scan and administration, and fully work with other industry IPsec nodes. IPsec is necessary for securing
many protocols including:
• LPR and Port9100 printing
• FTP Filing
• Scan to E-mail
• LDAP
• Internet Fax
Security Policies: To Enable IP Sec
Note: IP Sec cannot be enabled until SSL (Secure Sockets Layer) is enabled on the device. To
enable SSL on a device, the device needs to have a Server Certificate. For instructions to set up a
Server Certificate, refer to
Security Certificate Management on page 179.
Note: To configure this feature or these settings access the Properties tab as a System
Administrator. For details, refer to Access Internet Services as System Administrator on page 24.
1. From the Properties tab, click on the [Security] link.
2. Select [IP Sec] in the directory tree.
3. Ensure [Security Policies] tab is highlighted under the IPsec heading.
4. In the Settings area, check the [Enabled] checkbox for Enablement enable the IP Sec.
5. Click on the [Apply] button.
Note: It is recommended that IP Sec is enabled after the Host Groups, Protocol Groups and Action
have been configured and defined.
Define Policy