9
For Optimal Performance of the Security
features
The manager (of the organization that the machine is used for) needs to follow the instructions below:
•
Assign appropriate persons as system and machine administrators, and manage and train them properly.
•
If the network where the machine is installed is to be connected to external networks, configure the network
properly to block any unauthorized external access.
•
The users have to set a user ID and a passcode certainly on accounting configuration of printer driver.
•
Users and administrators have to set passcodes and encryption key according to the following rule for the
client PC login and the machine’s setup.
・
Do not use an easily guessed character strings passcodes.
・
Passcodes have to contain both numeric and alphabetic.
•
For secure operation, all of the remote trusted IT products that communicate with the machine implement the
communication protocol in accordance with industry standard practice with respect to RFC/other standard
compliance (SSL/TLS, IPSec, SNMPv3, S/MIME) and work as advertised.
•
The settings described below are required same as the machine’s configuration.
1.
SSL/TLS
Set the SSL client
(
WEB browser
)
and SSL server that communicate with the machine as
following data encryption suite
・
SSL_RSA_WITH_RC4_128_SHA
・
SSL_RSA_WITH_3DES_EDE_CBC_SHA
・
TLS_RSA_WITH_AES_128_CBC_SHA
・
TLS_RSA_WITH_AES_256_CBC_SHA
(
Specifically, recommended browser is Microsoft internet Explorer 6/7, Netscape 7.x, Mozilla
Firefox 2.x/3.x
)
2.
S/MIME
Set the machine and mail clients as following Encryption Method/Message Digest Algorithm.
・
RC2(128bit)/SHA1
・
3Key Triple-DES(168bit)/SHA1
3.
IPSec
Set the IPSec host that communicates with the machine as following Encryption
Method/Message Digest Algorithm.
・
AES(128bit)/SHA1
・
3Key Triple-DES(168bit)/SHA1
4.
SNMPv3
Encryption Method of SNMPv3 is DES fixed. Set the Message Digest Algorithm to SHA1.
Important:
For secure operation, while you are using the CentreWare Internet Services, please do not access other
web site.