Home

2 - Konica Minolta

1. 2 21 2 10 1 Device Certificate Setting NGARAN GA NGREAD SA RAANG 2 21 2 10 2 SSI SOTA ast ces tee a ANAN a AANO aka a 2 23 2 10 3 REMOVING a Gertificat sssissssssistaressinsesseseasatarseneessnns annettenitessenensiase anne tiuaneipannausa lun AGA 2 24 bizhub C3110 Contents 1 2 11 SNMP Setting Function 5 RA BNG 2 25 2 11 1 Changing the auth password and priv password issu 2 25 2 11 2 SNMP access authentication function sise 2 26 2 11 3 SNMP VS Setting TUNGONG Ent Pe e te NID NA Pe rk ann ne tt en tres deian aiiai 2 26 2 11 4 SNMP network setting function nennen nnnm enne 2 26 2 12 Accessing the Scam to HDD LA 2 27 Accessing the IMAGES TIS ais aa ma RAANG AD teen nel bia a Fe rk EIER eR 2 27 2 13 TCP IP Setting Function AKALA etd 2 29 2 13 1 Setting the IP Address 4 aa iine eroe den ha TE LR ERE ra AG EAR EEE E be des 2 29 2 13 2 Registering the DNS Server 2 29 2 14 SMB Setting FNCU OM sasaaa E 2 30 Making the SMB Setting nedsat enee BAGAN ELA 2 30 2 15 Rendezvous Bonjour Setting Function 2 31 Making the Rendezvous Bonjour Settings 2 31 3 1 User Authentication Function aaa 3 2 3 1 1 Performing user authentication rp cpi pei Pepe nie nee ni Locus 3 3 3 2 ID amp Print FUNCTION m 3 6 3 2 1 Registering ID amp P
2. 8 1 2x11 85x11 in Favorite Setting f Defaut Setting v Aid M 8 Jil icit in Original Orientation Job Retention A pain Ep Landscape Original Size E Print 81 21 Ba Store Job 4 Paper Size Same as Orignal Size lt Bl Pit and hoa Zoom 25 400 E Secured Job 9 Auto 100 EJ x Manual Es Paper Tray E Mio 5 ls Papar Type No Setting Printer View Printer Information 4 Click Authentication Account Track Layout Cover Mode Stamp Composition Queity Other 81 2x11 85x11 in Favorte Setting Untitled v Add Edt Y 8 1 2x11 8 5x11 in Original Orientation deb Retemion 00 Portrait d i m5 DEP rte ES oie Ten Sze Setings 81 211 _Authentication Account Track 4 Paper Size Same as Original Size Copies 1 tz 1 9999 Zoom 25 400 ka paki 100 EJ x Gl V Colate Manual Es Baper Tray O OoOo El Auto ba P Per T9980 No Setting Printer View Printer Information re bizhub C3110 3 6 3 2 ID amp Print Function 3 5 Enter the user name and password and then click OK User Authentication Account Track mm User Authentication Account Track Public User Department Name Recipient User Pi rd User Name ES Password CD Coma Ce gt Ifthe user password does not correspond to the user name entered the ID amp Print file is discarded witho
3. 3 The Secured Job file is automatically deleted as soon as the printing is normally terminated bizhub C3110 3 5 Scan to HDD Function 3 3 5 Scan to HDD Function For all users who have been authenticated through User Authentication the machine enables the operation of Scan to HDD function It also enables operations for acquiring and printing image files stored in the HDD Scan to HDD stores the image file scanned by the machine in the HDD together with user information The image file can be stored as Public or Personal The stored image file can be accessed from the PC through authentication of the user name and password Encryption communication using the SSL TLS protocol is performed when the image file is downloaded from the machine to the PC so that the data is protected 3 5 1 Registering image files v For the logon procedure see page 3 2 v Donotleave the machine while you are in the user operation mode If it is absolutely necessary to leave the machine be sure first to log off from the user operation mode 1 Log on to the user operation mode through User Authentication from the control panel 2 Press the Scan key 3 Press the A or Y key to select SCAN TO then press the Select key PDF Memor y 1009 MIX 300X300 dpi SCAN TO gt Select 4 Press the A or Y key to select Scan to HDD then press the Select key Set Destination Scan to HDD Scan to DPWS D Press the A or Y key to
4. Operate the IC card reader under the following conditions Be sure to use the IC card reader provided by the Service Representative For details contact your Ser vice Representative To use the IC card reader it is necessary to install the loadable driver in the machine For details con tact your Service Representative Only one IC card reader can be connected to the machine No guarantee is given for correct operation if the IC card reader is not connected to the machine when the machine is turned ON or if it is removed and reinserted with the machine turned ON Even if the IC card reader supports two or more types of IC cards only one type of IC card can be used for authentication No guarantee is given for correct operation if authentication is performed by using two or more types of IC cards No guarantee is given for correct operation in authentication with two or more types of IC cards simul taneously read by the IC card reader SCL 010 is not covered by certification of 15015408 bizhub C3110 1 7 1 4 Precautions for Operation Control 1 IC card owner requirements The Administrator of the machine should make sure that operating rules that specify the following operations exist within the organization and that the operations are implemented according to the rules e The person responsible within the organization that uses the machine should distribute the IC card is sued for use by the organization to a specific
5. 3 1 User Authentication Function 3 4 Press the Select key gt gt If a wrong User Password is entered a message that tells that the authentication has failed appears Enter the correct User Password A failure in authentication as a result of the entry of a wrong password is counted as unauthorized access If the cumulative number of unauthorized accesses reaches three during operation of the machine the machine is set into an access lock state and prohibits any subsequent password entry operations To cancel the access lock state turn off then on the power switch of the machine When the power switch is turned off then on again wait at least 10 seconds to turn it on after turn ing it off This interval is necessary to ensure that the machine functions properly If there are two or more ID amp Print files involved all of them will be printed To select and print only a desired file select Login select the desired file from ID amp Print and have it printed For the de tailed procedure to access the ID amp Print files see page 3 8 If the ID amp Print file is not saved even with the ID amp Print function set you log on to the machine through the ordinary procedure regardless of whether Login or Print Login is selected Hold down the Access key to log off Log out OK Logout Select Cancel Stop bizhub C3110 3 1 User Authentication Function 3 lt From PageScope Web Connection gt
6. gives a message that tells that it is now impossible to log on to the Administrator Mode Click OK and try logging on to the Administrator Mode after the execution of the job is completed Do not leave the machine with the Administrator Mode setting screen left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Mode Start the Web browser Enter the IP address of the machine in the address bar Press the Enter key to start PageScope Web Connection Click the Administrator radio button and Log in Language English English pi Log in Registered User User Name User Password Administrator Log in Clear Enter the 8 digit Administrator Password in the password box Administrator Password 00000000 OK Cancel 3 When accessing the Administrator Mode using the PageScope Web Connection enter the same Administrator Password as that for the machine Click OK 3 Ifa wrong Administrator Password is entered a message that tells that the authentication has failed appears Enter the correct Administrator Password 3 A failure in authentication as a result of the entry of a wrong password is counted as unauthorized access If the cumulative number of unauthorized accesses reaches three during operation of the machine the machine is set into an access lock state and prohibits any subsequent password entry op
7. v Donot leave the machine while you are in the user operation mode If it is absolutely necessary to leave the machine be sure first to log off from the user operation mode Start the Web browser Enter the IP address of the machine in the address bar Press the Enter key to start PageScope Web Connection A N a Click the Registered User radio button and enter the User Name and User Password Language English English pi Log in Registered User User Name userl User Password 00000000 D Administrator Log in Clear D Click Log in 3 lfawrong User Password is entered a message that tells that the authentication has failed appears Enter the correct User Password 3 A failure in authentication as a result of the entry of a wrong password is counted as unauthorized access If the cumulative number of unauthorized accesses reaches three during operation of the machine the machine is set into an access lock state and prohibits any subsequent password entry operations To cancel the access lock state turn off then on the power switch of the machine When the power switch is turned off then on again wait at least 10 seconds to turn it on after turn ing it off This interval is necessary to ensure that the machine functions properly 6 Click Log out to log off from the user operation mode bizhub C3110 3 5 32 ID amp Print Function ES 3 2 ID amp Print Function For a
8. Image files stored as Personal in the HDD by Scan to HDD e Image files stored in the HDD by ID amp Print The following data are also counted among the assets to be protected e Password User passwords and Secured Job passwords stored in the HDD and Administrator passwords and SNMP passwords stored in the memory area on the MFP board e Encryption Key Encryption Key to be registered in the memory area on the MFP board User identification information User identification information stored in the HDD e IC card information User IC card information stored in the HDD e Trusted channel setting data Trusted channel setting data stored in the memory area on the MFP board The following types of data stored in the HDD and memory area on the MFP board are protected when use of a leased machine is terminated at the end of the leasing contract the machine is to be discarded e Image files stored in the HDD by Secured Job Image files stored as Personal in the HDD by Scan to HDD Image files stored in the HDD by ID amp Print Image files of a job in the queue Any image files stored in the HDD data space other than the Secured Job files files stored as Personal by Scan to HDD and ID amp Print files e Data files left in the HDD data space used as image files and not deleted through the general deletion operation e Temporary data files generated during print image file processing e Administrator passwords SNMP passw
9. Name Reference e If auth password has been selected for Security Level hashing is used for the authentication informa tion auth password to be transmitted The machine allows you to select either HMAC MD5 or HMAC SHA for hashing e If auth password priv password has been selected for Security Level the authentication information auth password priv password and data object ID that specifies the object to be changed value to be Set etc to be transmitted are used for hashing and encryption The machine allows you to select either CBC DES or CBC AES for encryption e For accessing the MIB use the MIB browser corresponding to the above encryption algorithm SNMP v3 setting function The Administrator who has been authenticated through SNMP access authentication from the PC is allowed to operate the SNMP password change function For the auth password and priv password enter the password that meets the requirements of the Password Rules For details of the Password Rules see page 1 9 To change the setting specify the corresponding object ID See the table below for the setting items Setting Item Object ID Write User Name 1 3 6 1 4 1 18334 1 1 2 1 5 6 4 2 1 2 2 auth password 1 3 6 1 4 1 18334 1 1 2 1 5 6 4 2 1 3 2 priv password 1 3 6 1 4 1 18334 1 1 2 1 5 6 4 2 1 4 2 Security Level 1 3 6 1 4 1 18334 1 1 2 1 5 6 4 2 1 5 2 SNMP network setting function The Administrator who has been authenticated thr
10. SHA TLS DHE RSA WITH AES 256 CBC SHA NOTICE The Administrator of the machine should make sure that SSL encryption communication is not performed with the SSL set in SSL v3 Do not use an SSL certificate that is electronically signed by MD5 as an increased risk results of data to be protected being tampered with or leaked To eliminate the risk of the data to be protected being tampered with or leaked refer to the recommended ciphers list disclosed by for example NIST and CRYPTREC and use the appropriate cryptographic tech nique Use the following browsers to ensure SSL encryption communication with appropriate strength Use of any of the following browsers achieves SSL encryption communication that ensures confidentiality of the image data transmitted and received For Windows e Microsoft Internet Explorer 8 or later e Mozilla Firefox 18 or later For Mac OS e Mozilla Firefox 18 or later On Linux e Mozilla Firefox 18 or later IPP printing IPP Internet Printing Protocol is a function that allows Secured Job and image data stored in HDD to be printed via the Internet by using the HTTP HyperText Transfer Protocol of the TCP IP Protocol IPPS IPP over SSL TLS is the type of IPP that performs the SSL encryption communication Installing printer driver To perform IPP printing the printer driver must be installed From Add Printer Wizard type the IP address of this machine in the following format i
11. Settings 3 Click the Change Password check box and enter the auth password and priv password in the boxes marked by the rectangle that is the Write side SNMP v3 Setting Write User Name restrict Security Level Auth password Priv password 2 auth password M Change Password 00000000 priv password M Change Password CIII gt The default setting of auth password and priv password is the MAC address set in the machine 4 Click Apply gt If the entered auth password or priv password does not meet the requirements of the Password Rules a message that tells that the entered auth password or priv password cannot be used ap pears Enter the correct auth password or priv password For details of the Password Rules see page 1 9 bizhub C3110 2 25 2 11 SNMP Setting Function 2 2 11 2 2 11 3 2 11 4 SNMP access authentication function If the settings of the Administrator mode are to be changed using SNMP from the PC the user attempting to gain access is authenticated to be the Administrator of the machine by using the Write User Name and SNMP Password auth password priv password of the SNMP v3 Write settings made in this machine Operation of the network setting function and the SNMP password change function of the security control functions that can be used over the network using SNMP is granted to the Administrator who is identified by a matching SNMP password for the Write User
12. before using the security functions The Administrator of the ma chine should keep this manual for ready reference The manual should be of great help in finding solutions to operating problems and questions This User s Guide Ver 1 02 covers the following TOE Name bizhub C3110 ineo 3110 Control Software Controller Firmware A6DT30G01 16 999 Compliance with the ISO15408 Standard When the Enhanced Security Mode on this machine is set to ON more enhanced security functions are available The security functions offered by the bizhub C3110 machine comply with ISO IEC15408 level EAL3 Operating Precautions The machine gives an alarm message or an alarm sound peep when a wrong operation is performed or a wrong entry is made during operation of the machine No peep alarm sound is issued if a specific sound setting in Sound Setting of Accessibility Setting is set to OFF If the alarm message or alarm sound is given perform the correct operation or make the correct entry according to the instructions given by the message or other means The Administrator of the machine should not leave the machine with the setting screen left displayed after the access to that mode is completed or in the middle of the mode If it is absolutely necessary to leave the machine the Administrator of the machine should log off from the mode The Administrator of the machine should make sure that each individual general user logs off fro
13. control function of the application When using the PageScope Web Connection or an application of various other types use one that shows or for the password entered Do not use a function if any that directly shows on the screen the password entered When using the PageScope Web Connection or an application of various other types make settings so that cache files are not saved on the web browser Do not access any other site once you have logged onto the machine with the PageScope Web Con nection Accessing any other site or a link included in e mail in particular can lead to execution of an unintended type of operation Whenever access to any other site is necessary be sure first to log off from the machine through the PageScope Web Connection Using the same password a number of times increases the risk of spoofing If a web browser such as Internet Explorer is used on the client PC side TLS v1 should be used for the SSL setting PageScope Direct Print cannot be used if the Enhanced Security Mode is set to ON Optional applications not described in this User s Guide are not covered by certification of ISO15408 bizhub C3110 1 5 Miscellaneous 1 Encrypting communications The following are the cryptographic algorithms of key exchange and communications encryption systems supported in generation of encryption keys e TLS RSA WITH 3DES EDE CBC SHA e TLS RSA WITH AES 128 CBC SHA e TLS DHE RSA WITH 3DES EDE CBC
14. person who is authorized to own the IC card e The person responsible within the organization that uses the machine should prohibit the user from transferring or lending the IC card to any third person and make sure that the user reports any lost IC card e If only the IC card is used for user authentication the person responsible within the organization that uses the machine should make sure that only the authorized IC cards are used bizhub C3110 1 8 1 5 Miscellaneous 1 1 5 Miscellaneous Password Rules According to certain Password Rules registration of a password consisting of a string of a single character or change of a password to one consisting of a string of a single character is rejected for the Administrator Password User Password Secured Job Password and SNMP Password For the Administrator Password User Password and SNMP Password the same password as that currently set is not accepted Study the following table for more details of the number of digits and characters that can be used for each password NOTICE Before setting the Enhanced Security Mode be sure to enable the Password Rules The Password Rules can be turned on by selecting JON for Password Rules that can be accessed from the message window as fol lows UTILITY Admin Settings ss Security Settings ss Security Details Types of passwords No of digits Characters User Password 8 to 64 digits e Numeric characters 0 to 9 e A
15. select Save Document then press the Select key Scan to HDD Save Document Delete Document bizhub C3110 3 14 3 5 Scan to HDD Function 3 6 Press the A or Y key to select Save Folder then press the Select key Save Document Document Name Save Folder Press the A or Y key to select the destination to which the file is to be saved then press the Select key Save Folder Public Personal The image file stored in Personal is protected Select Personal whenever saving a highly confi dential file 8 Pressthe A or Y key to select Document Name then press the Select key Save Document Document Name Save Folder O Check the file name to be saved and press the Start key Document Name TI XXXXXXXXXXXXXXXX p SCAN Start bizhub C3110 3 15 3 5 Scan to HDD Function 3 5 2 Accessing the image file v Forthe logon procedure see page 3 2 v Do not leave the machine while you are in the user operation mode If it is absolutely necessary to leave the machine be sure first to log off from the user operation mode 1 Log on to the user operation mode through User Authentication from the PageScope Web Connection 2 Click the Storage tab and click View of the User Name by which the desired file is stored Qusert Log out SSiscanning e Ready system Job Print Storage vSca
16. 10 SSL Setting Function 2 10 3 Removing a Certificate v O N S 4 5 For the procedure to access the Administrator Mode see page 2 2 Do not leave the machine with the Administrator Mode setting screen left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Mode In the Enhanced Security Mode no certificates can be removed Start PageScope Web Connection and access the Administrator Mode Click the Security tab and PKI Settings Click Edit administrator Log out Ready e ready System security Job Print Storage address Network PID amp Print Settings Aa More Default Issued By Issued To Pirat Detail Edit ES mex 09052014 pesi E PSUS Settings mem SSS Select Delete a Certificate and click Next administrator Log out Ready Click OK Ready System ob Print Storage Adaress Network Authentication Device Certificate ID amp Print Settings Certificate Information Delete a Certificate vy PKI Settings Cie Ca mas pa a em a administrator Log out Ready Ready job Print Storage Address Network PID amp Print Settings Issued By as im eave Expiration Date 09 05 2014 vPKI Settings vDeviceCertificate Are you sure you want to delete i n bizh
17. Administrator must change the Administrator Password auth password and priv password at regular intervals e The Administrator should make sure that any number that can easily be guessed from birthdays em ployee identification numbers and the like is not set for the Administrator Password auth password and priv password e If a User Password has been changed the Administrator should have the corresponding user change the password as soon as possible e If the Administrator Password has been changed by the Service Engineer the Administrator should change the Administrator Password as soon as possible e The Administrator should have users ensure that the passwords set for the User Authentication and Se cured Job are known only by the user concerned e The Administrator should have users change the passwords set for the User Authentication at regular intervals e The Administrator should make sure that any user does not set any number that can easily be guessed from birthdays employee identification numbers and the like for the passwords set for the User Au thentication and Secured Job e Upon change of the Administrators the old Administrator of the machine should promptly have the new one change the Administrator password Network Connection Requirements for the Machine If the LAN is to be connected to an outside network no unauthorized attempt to establish connection from the external network should be permitted To Achiev
18. D 2 2 8 2 8 1 Protecting Data in the HDD When access to the machine by the administrator of the machine through the Administrator Settings from the control panel is authenticated the machine enables the operation for setting and deleting the Encryption Key By setting the Encryption Key the data stored in the HDD is encrypted thereby protecting the data in the HDD The Encryption Key entered is displayed as NOTICE f the HDD develops a fault call your Service Representative The following shows setting conditions for the Encryption Key Perform settings for the Encryption Key fitting these conditions No of digits Characters 20 digits e Numeric characters 0 to 9 e Alpha characters T and lower case letters e Symbols amp 5 5 5 55S gt 4 SS Gb hb SPACE Selectable from among a total of 95 characters An Encryption Key consisting of identical characters only cannot be registered Reference e When an Encryption Key encryption word is set using HDD Encryption Setting an Encryption Key with a key length of 256 bits is generated The generated encryption key is used to encrypt or decrypt data through AES encryption algorithm Setting the Encryption Key encryption word v Forthe procedure to call the Security Settings screen on the display see steps 1 through 2 of page 2 7 v Do not leave the machine with the setting screen of Administrator Settings left shown on t
19. ESTORE ALL Execute RESTORE ALL after the firmware has been upgraded For details of the execution of RESTORE ALL see page 2 20 e For details of items of data to be cleared by RESTORE ALL see page 1 11 e The execution of RESTORE ALL will turn OFF the Enhanced Security Mode So it must be turned ON again For details of settings see page 2 5 Software used in the machine The following lists the types of software and their versions used for the 15015408 evaluation for this machine The user should appropriately manage the software used with the machine on his or her own responsibility Software Version etc OS Operating System Windows 7 Professional SP1 Internet Explorer Ver 10 Mozilla Firefox Ver 27 0 1 Printer Driver KONICA MINOLTA C3110 e PCL6 Ver 1 0 0 0 e XPS Ver 1 0 1 0 PageScope Data Administrator with Device Set Up and Utilities Ver 1 0 06000 03221 PageScope Data Administrator plug in Ver 4 1 25000 12271 TWAIN Driver Ver 1 0 1 0 IC card reader driver AU 201 V2 1 02000 for AU 201 AU 201H_V2 1 00000 for AU 201H bizhub C3110 2 Administrator Operations 2 1 Accessing the Administrator Settings 2 2 1 Administrator Operations Accessing the Administrator Settings This machine implements authentication of the user of the Administrator Settings function through the 8 digit Administrator Passwo
20. Giving Shape to Ideas bizhub c3110 4 User s Guide Security Operations 2014 11 Ver 1 02 Contents 1 1 1 Ingo ei p 1 2 Compliance with the ISO15408 Standard iii 1 2 Operating Pr cautions aaa ARIAN UTANG AKA GANAN NAAN NUNG 1 2 INSTALLATION CHECKLIST ilaga na AA an DAG DARAANAN xu rn dear 1 3 1 2 Security FUNCTIONS PRE ere RES 1 4 Check Count Clear Conditions sise 1 4 1 3 Data to be Protected 1 5 1 4 Precautions for Operation Control aa 1 6 Roles and Requirements of the Administrator 1 6 Password Usage Requirements irn ANGARA atm a a aa a NANGANAK REN RAANG 1 6 Network Connection Requirements for the Machine 1 6 Security function operation setting operating requirements 1 6 Operation and control of the machine ss 1 7 Machine Maintenance Control sise 1 7 Operating conditions for the IC card and IC card reader 1 7 IC card owner requirements Uu aaa AA 1 8 1 5 Miscellaneous EEE M 1 9 Password Rules totes 1 9 Precautions for Use of Various Types of Applications 1 9 Encrypting communications issues 1 10 IPP painting eee 1 10 Items of Data Cleared by Data Erase Function ss 1 11 HDD FON ati 1 12 Upgrading of the firmwatre rare torti ti three tentata eph be pa cab BRNANG nanus Reden ha RE caua
21. Settings 3 Enter the 8 digit Administrator Password from the keypad Admin Password T EEEEEI OK gt Select gt Press the X key to switch the input mode between alphabet and numeric 3 Press the Back key to delete the entered characters one by one 3 Hold down the Back key to clear all the entered characters 4 Press the Select key 3 If a wrong Administrator Password is entered a message that tells that the authentication has failed appears Enter the correct Administrator Password bizhub C3110 2 2 2 1 Accessing the Administrator Settings 2 3 A failure in authentication as a result of the entry of a wrong password is counted as unauthorized access If the cumulative number of unauthorized accesses reaches three during operation of the machine the machine is set into an access lock state and prohibits any subsequent password entry operations To cancel the access lock state turn off then on the power switch of the machine When the power switch is turned off then on again wait at least 10 seconds to turn it on after turn ing it off This interval is necessary to ensure that the machine functions properly 5 Press the Stop Reset key to log off from the Administrator Settings bizhub C3110 2 3 2 1 Accessing the Administrator Settings 2 lt From PageScope Web Connection gt v N A Q 5 If an attempt is made to log on to the Administrator Mode while a job is being executed the machine
22. X 16 digit ex 11223244556677EE Help F1 ni gt To delete a previously registered IC card information click Delete 3 Acard ID may be registered through direct input Select the Input the card ID directly radio button and then input the card ID The types of IC card that permit direct input are Type A and Felica IDm 7 Click OK 8 Click Export to the device ditm ares PR oir rua mno PEUR US LEUR EVE C OA DON IIT File Edit Tool Window Help STOP Reeistration of Device 8 Network Initial Setting User list Function selection 2 1000 item s B E Device information We s Status User name E Maila Permit function To Add Ur Authentication settinex Updato Padi user PE A 0 2 User authentication settines Update Ed Edit Sg Authentication Device Settines E Address settings x Delete af m GA Refresh from the device e Export to the device 9 Click Write 10 Click OK 2 Write the edited data to the device Group name Default Group Registered name 5 Device address is Help F1 3 bizhub C3110 4 2 TWAIN driver 4 4 2 TWAIN driver The TWAIN driver which is to be installed in the PC of a general user is a TWAIN driver used exclusively for allowing the machine to be recognized as a TWAIN device It allows the image data read by the machine to be captured in the
23. access the Administrator Mode see page 2 2 Do not leave the machine with the Administrator Mode setting screen left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Mode Start PageScope Web Connection and access the Administrator Mode Click the Network tab and IPv4 Settings from TCP IP Settings menu Clear the Auto IP check box Enter the IP Address in the IP Address box gt f Auto IP is selected from the IP Address Setting Method in step 3 select the means with which to acquire the IP Address automatically including DHCP BootP ARP PING and Auto IP setting and click the check box Click Apply 2 13 2 Registering the DNS Server v v For the procedure to access the Administrator Mode see page 2 2 Do not leave the machine with the Administrator Mode setting screen left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Mode Start PageScope Web Connection and access the Administrator Mode Click the Network tab and DNS Settings from TCP IP Settings menu Enter the address in the DNS Server box Make the necessary settings Click Apply bizhub C3110 2 29 2 14 SMB Setting Function 2 2 14 SMB Setting Function When access to the machine by the Administrator of the machine through the Administrator Settings is au thenticated the machine enables
24. ady exists cannot be redundantly registered Click OK Click Export to the device gt If there is a job being executed or a reserved job timer TX fax redial waiting etc in the machine the machine displays a message that tells that the write operation has not been successful because of a device lock error Click OK and wait for some while before attempting to execute Export to the device again 3 f a previously registered user is deleted in step 4 the image files owned by that specific user are deleted bizhub C3110 4 4 4 1 PageScope Data Administrator 4 4 1 3 Setting the IC card information v 4 5 The IC card driver USB driver of the IC card reader and the IC card plug in must be installed in the PC of the Administrator of the machine in advance For details refer to the User s Guide furnished with the machine For the procedure to access the machine see steps 1 through 5 of page 4 2 Do not leave the site while you are gaining access to the machine through PageScope Data Adminis trator If it is absolutely necessary to leave the site be sure first to log off from the PageScope Data Administrator Access the machine through Authentication Settings Address Settings mode of PageScope Data Ad ministrator Click the Authentication settings expand button Select User authentication settings and click Add Gi Eile Edit Too Window Help ITOP iReeistration of Device 8 Networ
25. aka Rag 1 12 Software used in the machines aa i xr enn tario a sed ae eR nnper aaa TERRE Fake atat been da o RR Rae 1 12 2 rations 2 1 Accessing the Administrator Settings AA 2 2 Accessing the Administrator Settings es 2 2 2 2 Enhancing the Security Function ccce centeno rcu nnno aa 2 5 Setting the Enhanced Security Mode iii 2 7 2 3 Setting the Authentication Method ss nnnnnnnnnnennnnnnenenennens 2 8 Setting the Authentication Method sise 2 8 2 4 ID amp Print Setting Function ANAL AA 2 9 Setting the ID Se Print RR 2 9 2 5 System Auto Reset FUNCHON NANINIRA 2 10 Setting the System Auto Reset function iii 2 10 2 6 User Setting Punto dada AGING 2 12 Making USC SQUIAG RETE 2 12 2 7 Changing the Administrator Password amn AA ANNA 2 14 Changing the Administrator Password nennen 2 14 2 8 Protecting Data in the HDD GANA 2 15 2 8 1 Setting the Encryption Key encryption word sisi 2 15 2 8 2 Deleting the encryption Key sise 2 17 2 9 Erasing data when the machine is to be discarded or use of a leased machine is Jti nee ecaueedeeeeueseceteeseascetdi ds EANA asaan Qines oeeednee hence 2 18 2 9 1 Setting the Overwrite All Data swcscccticccssceccitedeasaucensesectecscecesssieaenceesccnvcendteeccucscansseceacdttcenatenevieeseateeeace 2 18 2 9 2 Setting the RESTORE ALIE ssia aa sanaaa aaar aaa RARA ERTA Aa donnes se D banana NADIN KG 2 20 2 10 SSL Setting F NGtiON me
26. ame test1 pdf test2 pdf gt To delete the job select the job name and press the Stop Reset key The secured job password input screen will be displayed so enter the secured job password to delete the job bizhub C3110 3 12 3 4 Secured Job Function 3 6 Enter the 8 digit Secured Job Password from the keypad Password qoo OK Sel ect gt For the Secured Job Password enter the 8 digit one set on the printer driver side 3 Press the X key to switch the input mode between alphabet and numeric 3 Press the Back key to delete the entered characters one by one 3 Hold down the Back key to clear all the entered characters Press the Select key 3 f a wrong Secured Job Password is entered a message that tells that the authentication has failed appears Enter the correct Secured Job Password 3 A failure in authentication as a result of the entry of a wrong password is counted as unauthorized access If the cumulative number of unauthorized accesses reaches three during operation of the machine the machine is set into an access lock state and prohibits any subsequent password entry operations To cancel the access lock state turn off then on the power switch of the machine When the power switch is turned off then on again wait at least 10 seconds to turn it on after turn ing it off This interval is necessary to ensure that the machine functions properly Check the details of the file and press the Select key
27. and erases all data stored in all spaces of the HDD The function also resets all passwords saved in the memory area on the MFP board to factory settings preventing leak of data For details of items to be cleared by data erase function see page 1 11 Check Count Clear Conditions The following are the conditions for clearing or resetting the check count of the number of wrong entries at the time of authentication NOTICE The check count is cleared or reset by restarting the machine If there is any user who frequently turns ON and OFF the machine warn him or her of the fact or take necessary steps lt Administrator Settings gt e Authentication of Administrator Settings is successful e The machine is restarted User Authentication Mode e User Authentication mode is successful e The machine is restarted Secured Job e Authentication of Secured Job is successful e The machine is restarted SNMP Password auth password priv password gt e Authentication of SNMP is successful e The machine is restarted bizhub C3110 1 4 1 3 Data to be Protected 1 1 3 Data to be Protected The underlying concept of this machine toward security is to protect data that can be disclosed against the intention of users The following types of image files that have been stored in the machine and made available for use by its users are protected while the machine is being used e Image files stored in the HDD by Secured Job e
28. ation Settings Address Settings e ee a aa ee ee TR eJ 4 Bie Function Tool Window Help MOX TOP 63 Registration of Device Kg Network Initial Setting Basic Settings Settings for multiple device Application intial setting Device list Number of Displayed Devices 1 Function Selection Registered Device dil Authentication Settings Adc nar address F me ao oe RS D nione lama jui me Status Status Display Group name Model name Device Selection Filter Display All bizhub C3110 4 2 4 1 PageScope Data Administrator 4 3 Check the settings on the Import device information screen and click Import Import the device information Import the device information Registered group Defau Group Registered name Device address Scan settings Import functions Target of importing Gg V Authentication Settings Obtain from the device MA 7 Address settings Obtain from the device ai aa 4 Type the 8 digit Administrator Password registered in the machine and click OK Administrator password Registered name Registered group name Defauit Group Model name Device address Device name Administrator password Administrator password Confirmation ta as 2 If the Save check box has been selected the Administrator Password entered is stored in the PC being used If you do not want the Administrator Password stored clear the Save chec
29. be sure first to log off from the Administrator Settings Call the Security Settings screen on the display from the control panel Press the A or V key to select Admin Password then press the Select key Security Settings Admin Password Security Details EnhancedSecur i tyMd Enter the new 8 digit Administrator Password from the keypad and press the Select key vu gt Password qecoocceq If the entered Administrator Password does not meet the Password Rules a message that tells that the entered Administrator Password cannot be used appears Enter the correct Administrator Pass word For details of the Password Rules see page page 1 9 Press the X key to switch the input mode between alphabet and numeric Press the Back key to delete the entered characters one by one Hold down the Back key to clear all the entered characters To prevent entry of a wrong Administrator Password enter the new 8 digit Administrator Password once again and press the Select key y PW Confirmation qecococcg If the entered Administrator Password does not match a message that tells that the Administrator Password does not match appears Enter the correct Administrator Password Press the X key to switch the input mode between alphabet and numeric Press the Back key to delete the entered characters one by one Hold down the Back key to clear all the entered characters bizhub C3110 2 8 Protecting Data in the HD
30. d When erase operations are performed make sure that the operation is normally terminated for data in each of the three different data spaces If an error occurs during execution of the erase operations contact your Service Representative for appropriate action The Enhanced Security Mode is set to OFF if Overwrite All Data or RESTORE ALL is executed The encryption key is registered in the memory area on the MFP board but is not deleted even if RESTORE ALL or Overwrite All Data is performed After RESTORE ALL or Overwrite All Data is performed the encryp tion key must be deleted manually For details see page 2 17 Setting the Overwrite All Data The HDD Overwrite Method offers the choice of eight different modes Mode 1 through Mode 8 Overwrite All Data takes about less than one hour in Mode 1 at the minimum and about 9 hours in Mode 8 at the maximum Mode Description Mode 1 Overwrites once with 0x00 Mode 2 Overwrites with random numbers random numbers ss 0x00 Mode 3 Overwrites with 0x00 pp Oxff np random numbers ms verifies Mode 4 Overwrites with random numbers 0x00 sp Oxff Mode 5 Overwrites with 0x00 pp Oxff na 0x00 pa Oxff Mode 6 Overwrites with 0x00 pp Oxff na OxOO pa Oxff np 0x00 pp Oxff random num bers Mode 7 Overwrites with 0x00 gt Oxff pa 0x00 gt Oxff 0x00 gt Oxff pa Oxaa Mode 8 Overwrit
31. de see page 2 2 v Donot leave the machine with the Admin Mode setting screen left shown on the display If it is abso lutely necessary to leave the machine be sure first to log off from the Admin Mode Start PageScope Web Connection and access the Admin Mode 2 Click the Network tab and Bonjour Settings Make the necessary settings 4 Click Apply bizhub C3110 2 31 3 User Operations 3 1 User Authentication Function 3 i 3 3 1 User Operations User Authentication Function When Device is set for Authentication Method of the Administrator Settings the User Authentication func tion implements authentication of the user of this machine before he or she actually uses it through the User Password that consists of 8 to 64 digits During the authentication procedure the User Password entered for the authentication purpose appears as on the display A failure in authentication as a result of the entry of a wrong password is counted as unauthorized access The entry of a wrong password is counted as unauthorized access even if it is not likely that the assets to be protected will be affected during user authentication operations via application software For detailed oper ating procedures see the corresponding user s guide NOTICE Before operating the machine the user him herself should change the User Password from that registered by the Administrator of the machine For details of changing the Us
32. dministrator Mode see page 2 2 Do not leave the machine with the setting screen of Administrator Mode left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Mode Start PageScope Web Connection and access the Administrator Mode Click the Storage tab and click View of the User Name by which the desired document is stored administrator Log out Ready e Ready Security NE Print storage EN Network vScan to HDD Scan to HDD Scan to HDD Search for Number 1 50 lt PC Fax gt EE No User Name View Delete 1 Public View Delete 2 userl View Delete A list appears showing image files saved in the HDD To back up download a file click Copy of the file in question administrator Log out Copy Delete Ready Ready System Security job Print storage address Network vScan to HDD Scan to HDD Scan to HDD Search for Number 1 10 2 PC Fax LL Thumbnail File Name Bn NG test pdf Copy Delete 2 If Delete is selected a confirmation message appears Click OK to delete the specified file bizhub C3110 2 27 2 12 Accessing the Scan to HDD file 2 4 Select Save to back up download the image file in the PC File Download Do you want to open or save this file m Nam
33. e test pdf ni Type Adobe Acrobat Document From Open Save Cancel While files from the Internet can be useful some files can potentially harm your computer If you do not trust the source do not open or save this file What s the risk The backed up downloaded file is not deleted from the machine bizhub C3110 2 28 2 13 TCP IP Setting Function 2 2 13 TCP IP Setting Function When access to the machine by the Administrator of the machine through the Administrator Settings is au thenticated the machine enables setting of the IP Address and registration of the DNS Server 2 13 1 Setting the IP Address lt From the Control Panel gt v v For the procedure to call the Administrator Settings on the display see page 2 2 Do not leave the machine with the setting screen of Administrator Settings left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Settings Call the Administrator Settings on the display from the control panel Press the A or V key to select ETHERNET then press the Select key Press the A or V key to select TCP IP then press the Select key Press the A or V key to select IPv4 Settings then press the Select key Press the A or V key to select IP ADDRESS then press the Select key Use the keypad to set the IP Address Press the Select key From PageScope Web Connection v v For the procedure to
34. e Effective Security e If the LAN in which the machine is installed is connected to an outside network install a firewall or similar network device to block any access to the machine from the outside network and make the nec essary settings e Provide an appropriate network control at all times to make sure that no other copying machine is con nected without prior notice to the office LAN to which this machine is connected Security function operation setting operating requirements The Administrator should make sure of correct operation control so that the machine is used with the En hanced Security Mode set to ON bizhub C3110 1 6 1 4 Precautions for Operation Control 1 Operation and control of the machine The Administrator of the machine should perform the following operation control The Administrator of the machine should log off from the Administrator Settings whenever the operation in the Administrator Settings is completed The Administrator of the machine should also make sure that each individual user logs off from the User Authentication mode after the operation in the User Au thentication mode is completed including operation of the Secured Job file The Administrator of the machine should appropriately control the device certificate SSL certificate registered in the machine The administrator of the machine disables the following functions and operates and manages the machine under a condition in which tho
35. ed Security Mode is set to ON configure this setting 5 Click Apply bizhub C3110 2 8 2 4 ID amp Print Setting Function 2 2 4 ID amp Print Setting Function When access to the machine by the Administrator of the machine through the Administrator Settings is au thenticated the machine enables setting of the operation of the ID amp Print function The ID amp Print function temporarily stores print data transmitted from the PC in the HDD of the machine and after user authentication is successful in this machine automatically prints the print data of the user in ques tion NOTICE The Administrator must first make User Authentication settings before setting the ID amp Print function For de tails of the User Authentication see page 2 8 Setting the ID amp Print v For the procedure to access the Administrator Mode see page 2 2 v Do not leave the machine with the Administrator Mode setting screen left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Mode 1 Start PageScope Web Connection and access the Administrator Mode 2 Click the Security tab and ID amp Print Settings 3 Select Enable from the pull down menu of ID amp Print eadministrator Los out Pready e Ready System security soo Print Authentication ID amp Print Settings VID amp Print Settings ID amp Print Ereble gt ID amp P
36. er Password see page 3 9 For more de tails of User Name and User Password ask the Administrator of the machine f the User Password is changed by the Administrator of the machine during operation of this machine the user him herself should immediately change the User Password Make absolutely sure that your User Password is not known by any other users If the IC card function has been set by the Administrator of the machine authentication using the IC card can be performed Authentication Method Description Card Authentication Uses an IC card for authentication Card Authentication Password Uses an IC card placed on the IC card reader and entry of a user password for authentication If Enhanced Security Mode is set to ON configure this setting Reference e If authentication is to be performed by using the IC card the Administrator of the machine should set the IC card function and information recorded on the IC card be registered in the machine in advance For more details contact the Administrator of the machine Authentication using the IC card is enabled only when Device is selected Authentication using the IC card is disabled if it is performed from a device other than this machine such as printing from PageScope Web Connection or printer driver bizhub C3110 3 2 3 1 User Authentication Function 3 3 1 1 Performing user authentication lt From the Control Panel gt v Donot leave the machine w
37. erations To cancel the access lock state turn off then on the power switch of the machine When the power switch is turned off then on again wait at least 10 seconds to turn it on after turn ing it off This interval is necessary to ensure that the machine functions properly Click Log out This allows you to log off from the Administrator Mode bizhub C3110 2 4 2 2 Enhancing the Security Function 2 2 2 Enhancing the Security Function When access to the machine by the Administrator of the machine through the Administrator Settings from the control panel is authenticated the machine enables setting of the Enhanced Security Mode that allows settings for enhancing each of different security functions to be converted all at once In the Enhanced Security Mode the machine allows selection of whether to use the Enhanced Security Mode or not When the Enhanced Security Mode is set to ON the security function is enhanced by automatically setting such functions as that which determines whether each password meets predetermined requirements The following settings must first be made before the Enhanced Security Mode is set to ON Settings to be Made in Advance Description Administrator Password An 8 digit password that meets the Password Rules The factory setting is 12345678 Encryption Key Set the Encryption Key User Authentication Set to Device Authentication Device Settings Se
38. es with 0x00 gt Oxff 0x00 pa Oxff pa 0x00 pa Oxff na Oxaa verifies v J Forthe procedure to call the Security Settings screen on the display see steps 1 through 2 of page 2 7 v Do not leave the machine with the setting screen of Administrator Settings left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Settings v For details of items that are cleared see page 1 11 1 Call the Security Settings screen on the display from the control panel 4 Press the A or V key to select HDD Settings then press the Select key Security Settings HDD Settings SSD Settings bizhub C3110 2 18 2 9 Erasing data when the machine is to be discarded or use of a leased machine is terminated 2 3 Press the A or Y key to select Overwrite All Data then press the Select key HDD Settings Check HDD Capacity Overwrite All Data HDD Format 4 Press the A or Y key to select HDD Overwrite Meth then press the Select key Overwrite All Data HDD Overwrite Meth Start 5 Press the A or Y key to select the desired mode then press the Select key HDD Overwrite Meth Mode 1 Mode 2 Mode 3 6 Press the A or Y key to select Start then press the Select key Overwrite All Data HDD Overwrite Meth Start Aconfirmation message appears Press the Select key Start ARE YOU SURE CANCEL 3 Do not turn of
39. eset function That is even if a predetermined period of time elapses during which no operations are performed once the pro cessing of the specific job has been started the system auto reset function does not cause the user to log off from the mode The user logs off from the mode after the lapse of a predetermined period of time after the processing of the specific job is completed Setting the System Auto Reset function v Forthe procedure to call the Administrator Settings on the display see page 2 2 v Do not leave the machine with the setting screen of Administrator Settings left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Settings 1 Call the Administrator Settings on the display from the control panel 2 Pressthe A or Y key to select System Settings then press the Select key Admin Settings System Settings Admin Mach Setgs Address Reg List 3 Press the A or Y key to select Reset Settings then press the Select key System Settings List Counter Priority Tray Reset Settings 4 Press the A or Y key to select System auto reset then press the Select key Reset Settings System auto reset Auto Reset bizhub C3110 2 10 2 5 System Auto Reset Function 2 D Press the A or Y key to select ON OFF then press the Select key System auto reset Priority Mode Reset Time 6 Press the A or Y key to select ON t
40. ess the A or Y key to select ON then press the Select key The machine restarts automatically RESTORE ALL NO 3 Do not turn off the power switch of the machine during execution of RESTORE ALL If the power Switch is inadvertently turned off during the execution of RESTORE ALL and the machine as a re sult develops a fault contact your Service Representative bizhub C3110 2 20 2 10 SSL Setting Function 2 10 SSL Setting Function When access to the machine by the Administrator of the machine through the Administrator Settings is au thenticated the machine enables the setting of encryption of image data transmitted and received between the PC and the machine NOTICE Do not use any invalid certificate as an increased risk results of data to be protected being tampered with or leaked 2 10 1 Device Certificate Setting v v v 4 For the procedure to access the Administrator Mode see page 2 2 Do not leave the machine with the Administrator Mode setting screen left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Mode The key length set for the public key of the server generated in SSL certificate setting is 1024 bits The Enhanced Security Mode is not turned OFF even if the validity of the certificate expires during the Enhanced Security Mode The Administrator of the machine should register a new certificate before the validit
41. etermine if the security functions of this machine should be enhanced If the functions should be enhanced check the following If the security functions are not to be enhanced quit the operation without checking the fol lowing swear that would never disclose information as it relates to the settings of this machine to anybody or perform malicious or intentional act during setup and service procedures for the machine When giving a copy of the User s Guide explain the following to the administrator A digital signature is assigned to the data certified by ISO15408 To ensure integrity of the file have the administrator of the machine confirm the digital signature using the property of the provided data file in the user s PC environment When giving the User s Guide Security Operations to the Administrator of the machine check that the User s Guide is the security compatible version and explain to the Adminis trator that it is security compatible After this machine is installed refer to the Service Manual and perform the following steps Check that the Firmware version of Controller F W and Boot F W checked with the Ser vice Manual match the values shown in the Firmware Version screen If the version of the Controller F W does not match explain to the Administrator of the ma chine that the firmware requires rewriting and rewrite the firmware If the version of the Boot F W d
42. f the power switch of the machine during execution of Overwrite All Data If the power switch is inadvertently turned off during the execution of Overwrite All Data and the machine as a result fails to recognize the HDD or develops other fault contact your Service Representative bizhub C3110 2 19 2 9 Erasing data when the machine is to be discarded or use of a leased machine is terminated 2 2 9 2 Setting the RESTORE ALL The memory area on the MFP board is initialized and reset to the default state NOTICE Perform RESTORE ALL from the control panel of the machine and not via the network v Forthe procedure to call the Security Settings on the display see steps 1 through 20f page 2 7 v Do not leave the machine with the setting screen of Administrator Settings left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Settings v For details of items that are cleared see page 1 11 1 Call the Security Settings on the display from the control panel 2 Press the A or Y key to select Security Details then press the Select key Security Settings Admin Password Security Details EnhancedSecur i tyMd 3 Pressthe A or Y key to select Initialize then press the Select key Security Details Initialize 4 Press the A or Y key to select RESOTRE ALL then press the Select key Initialize RESTORE NETWORK RESTORE PRINTER RESTORE ALL D Pr
43. he display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Settings v To prevent data from leaking as a result of reinstallation of the HDD on another machine a unique value that varies from one machine to another must be set for the encryption key v Do not set any number that can easily be guessed from birthdays employee identification numbers and the like for the Encryption Key v Make sure that nobody but the administrator of the machine comes to know the Encryption Key v If only the Encryption Key is to be set while the machine is being used without setting the Encryption Key not covered by certification of ISO15408 the Service Engineer must perform some setting proce dures in advance For details contact your Service Representative v Executing HDD Format erases data in the HDD It is recommended that important data should be saved in a backup medium in advance Execution of HDD Format will also reset the setting values of different functions to the default values Set the Enhanced Security Mode to ON again 1 Call the Security Settings screen on the display from the control panel 2 Pressthe A or Y key to select HDD Settings then press the Select key Security Settings HDD Settings SSD Settings bizhub C3110 2 15 2 8 Protecting Data in the HDD 2 3 Press the A or Y key to select HDD EncryptSetting then press the Select key HDD Settings HDD E
44. he machine A destination list of file formats including XML CSV TAB LDIF and Lotus Notes Structured Text can be downloaded A destination list can also be downloaded by searching through or browsing destinations using the LDAP protocol for a directory server such as Active Directory NOTICE Make sure that none of the general users of the machine will know the Administrator Password If the Administrator Password is forgotten it must be set again by the Service Engineer Contact your Service Representative Precautions during backup or restore This machine allows authentication information address list and other types of data to be backed up ex ported in your PC or restored imported in the machine using the PageScope Data Administrator Use the following precautions when backing up or restoring data e When backing up or restoring data using the PageScope Data Administrator with the Enhanced Secu rity mode turned ON do not restore data that is backed up when the Enhanced Security mode is turned OFF e Edit backup data only with the PageScope Data Administrator Accessing from PageScope Data Administrator v Do not leave the site while you are gaining access to the machine through PageScope Data Adminis trator If it is absolutely necessary to leave the site be sure first to log off from the PageScope Data Administrator 1 Start the PageScope Data Administrator 2 Select this machine from Device List and click Authentic
45. hen press the Select key gt If no operations are performed for 1 min even with system auto reset set to OFF the function is activated to cause the user to log off from the mode automatically Press the A or Y key to select Reset Time then press the Select key System auto reset Priority Mode ON OFF 8 Pressthe A or Y key or use the keypad to enter the period of time 1 min to 9 min after which system auto reset is activated Reset Time Imin 1 9 MG or 10key input gt The time for system auto reset can be set to a value between 1 min and 9 min variable in 1 min increments 9 Press the Select key bizhub C3110 2 11 2 6 User Setting Function 2 2 6 User Setting Function When access to the machine by the Administrator of the machine through the Administrator Settings is au thenticated the machine enables registration of the users who can use the machine It also enables opera tions for deleting a user and changing a User Password User Registration allows the User Name User Password and other user information to be registered for en abling access to or operation of the machine Up to 1 000 different users can be registered User Registra tion allows identification and authentication of each individual user thereby preventing unauthorized use of the machine A User Password may consist of 8 to 64 digits The password entered is displayed as or 9 Reference e If a user name i
46. hile you are in the user operation mode If it is absolutely necessary to leave the machine be sure first to log off from the user operation mode 1 Check that the login screen is displayed UTILITY Place ID card 3 The screen as shown below appears if the ID amp Print function has been set If the ID amp Print function is yet to be set Print Login is not available on the screen even with an ID amp Print file is saved in the machine In this case log onto the machine through the ordinary procedure select the desired file from ID amp Print and have it printed For details of how to access the ID amp Print file see page 3 8 Print Login UTILITY Place ID card 2 Place the IC card on the IC card reader gt If an ID amp Print file has been saved select Login or Print Login and then place the IC card on the IC card reader Login Method Description Login Only the ordinary login procedure is applicable and no ID amp Print files are printed Print Login Prints only the ID amp Print file of the corresponding user The user op eration mode screen is not called to the screen 3 Enter the 8 to 64 digit User Password from the keypad Password qoom OK Select 3 Press the X key to switch the input mode between alphabet and numeric 3 Press the Back key to delete the entered characters one by one 3 Hold down the Back key to clear all the entered characters bizhub C3110 3 3
47. ice Representative bizhub C3110 1 2 Security Functions 1 1 2 Security Functions Setting the Enhanced Security Mode to ON will validate the security function of this machine For details of the settings of different security functions to be changed by turning ON the Enhanced Security Mode see page 2 5 Setting the Enhanced Security Mode to ON will enhance the authentication function Access control is then provided through password authentication for any access to the Administrator Settings User Authentication mode and Secured Job file Access is thereby granted only to the authenticated user A password that can be set must meet the requirements of the Password Rules The machine does not ac cept setting of an easily decipherable password For details of the Password Rules see page 1 9 If a wrong password has been entered three cumulative times during password authentication the machine determines that it is unauthorized access through Prohibited Functions When Authentication Error prohibit ing any further entry of the password By prohibiting the password entry operation the machine prevents un authorized use or removal of data thereby ensuring secured used of the machine This function is not however governed by authentication by the 15015408 When the machine is to be discarded or use of a leased machine is terminated at the end of the leasing con tract the data erase function overwrites
48. image processing application of the PC When an attempt is made to gain access to the machine through the TWAIN driver the user is authenticated to be an authorized user by using an 8 to 64 digit User Password and an 8 digit User Box Password During the authentication procedure the User Password entered for the authentication purpose appears as on the display A failure in authentication as a result of the entry of a wrong password is counted as unauthorized access Accessing from the TWAIN driver v Do not leave the site while you are gaining access to the machine through the TWAIN driver If it is ab solutely necessary to leave the site be sure first to log off from the TWAIN driver 1 Start the image processing application N From the File menu click Read and then select KONICA MINOLTA C3110 TWAIN 3 Select the Login as the Registered user radio button and enter the User Name and the 8 to 64 digit User Password User Authentication mm Enter User Name and Password Login as Public User Login as the Registered User User Name userl Password Save these settings Cereal Hep 4 Click OK 3 lfawrong User Password is entered a message that tells that the authentication has failed appears Enter the correct User Password 3 A failure in authentication as a result of the entry of a wrong password is counted as unauthorized access If the cumulative number of unauthorized accesses reache
49. k Initial Setting Function selection 1 1000 item s B E Device information mm User name E Mail a Permit function Total Cou og Authentication settings 2 User authentication settings ga Edit Sg Authentication Device Settings 8 MA Address settings ng Delete fg Column option m Kg Refresh from the device gt To set a registered user after selecting the user click Edit and go to step 6 Click OK Please select an user template Do not Use a Template 7 Use a Template No Template name Pemitted function Max allowance management EE Permit aaa aaa Hawn aa Enter the user name and password and select the IC card authentication tab ff n Ves c C User Name user Password HAE E Mail Address f p Permit function Output permission Maximum counter settings IC card authentication Permit function 7 Permit copy function 4 Permit scan function v Permit fax function V Permit print function bizhub C3110 4 5 4 1 PageScope Data Administrator 6 Place the IC card on the IC card reader and click Start reading User Name userl Password ane E Mail Address Pemit function Output permission Card Type FeliCa Scan Result Unregistered Card ID Read the data from the Card Reader Start reading Input the card ID directly Delete HE
50. k box 3 If a wrong Administrator Password is entered a message appears that tells that there is a mismatch in the passwords Enter the correct Administrator Password 3 If the Save check box is selected enter the 8 digit Administrator Password once again to make sure that the Administrator Password has been entered correctly 3 If a wrong Administrator Password is entered for confirmation a message appears that tells that there is a mismatch in the Administrator Password Enter the correct Administrator Password 3 A failure in authentication as a result of the entry of a wrong password is counted as unauthorized access If the cumulative number of unauthorized accesses reaches three during operation of the machine the machine is set into an access lock state and prohibits any subsequent password entry operations To cancel the access lock state turn off then on the power switch of the machine When the power switch is turned off then on again wait at least 10 seconds to turn it on after turn ing it off This interval is necessary to ensure that the machine functions properly 5 Check the data displayed on the SSL certificate check screen and click Yes bizhub C3110 4 3 4 1 PageScope Data Administrator 4 4 1 2 Making the user settings v v For the procedure to access the machine see steps 1 through 5 of page 4 2 Do not leave the site while you are gaining access to the machine through PageScope Data Adminis tra
51. ll the HDD Encryption Setting screen on the display from the control panel 2 Press the Aor Y key to select OFF then press the Select key HDD EncryptSett ing ON OFF 3 A confirmation message appears Press the Select key The machine restarts automatically HDD EncryptSetConf ARE YOU SURE CANCEL gt Changing the setting of HDD Encryption Setting switching between ON and OFF will format the HDD For details of items that are cleared by HDD Format see page 1 11 bizhub C3110 2 17 2 9 Erasing data when the machine is to be discarded or use of a leased machine is terminated 2 2 9 2 9 1 Erasing data when the machine is to be discarded or use of a leased machine is terminated When access to the machine by the Administrator of the machine through the Administrator Settings from the control panel is authenticated the machine enables setting of the operations of the Overwrite All Data and RESTORE ALL functions When the machine is to be discarded or use of a leased machine is terminated at the end of the leasing con tract be sure to erase all data to prevent data left in the machine from leaking Different methods of erase apply depending on the data space See the table below for more details Data space Erase method HDD Memory area on the MFP board Overwrite All Data Memory area on the MFP board RESTORE ALL NOTICE Perform erase operations for all of HDD and memory area on the MFP boar
52. ll users who have been authenticated through User Authentication the machine enables all users who have been authenticated through user authentication to register and access ID amp Print files After authentication by a user from the control panel is successful with the ID amp Print function set in the ma chine by the Administrator of the machine the user can automatically print his or her print data saved in the HDD of the machine Because printing occurs after user authentication is performed via the control panel of this machine it is suitable for printing highly confidential documents Reference e If the Administrator of the machine sets the ID amp Print function a file is saved as an ID amp Print file even if Print is selected on the printer driver side e Even if the Administrator of the machine does not set the ID amp Print function a file is saved as an ID amp Print file if ID amp Print is selected on the printer driver side e If the Administrator of the machine sets the ID amp Print function a direct print file from PageScope Web Connection is also saved as an ID amp Print file 3 2 1 Registering ID amp Print files 1 Click Properties in the Print dialog box to show the Printing Preference window 2 Click the Basic tab 3 Select ID amp Print in Job Retention Advanced My Tab Basic Layout Cover Mode Stamp Compostion Quality Other
53. lpha characters upper and lower case letters e Symbols 96 amp Taj s 55S m 13 Q A P l h t Selectable from among a total of 93 characters e A SPACE and cannot be used Administrator Password 8 digits e Numeric characters 0 to 9 e Alpha characters upper and lower case letters Symbols 96 amp Tas s 55S gt 2 9 LVL 561 SPACE Selectable from among a total of 94 characters e cannot be used Secured Job Password 8 digits e Numeric characters 0 to 9 e Alpha characters upper and lower case letters e Symbols Yo amp Tas s 55S m 2 9 LVL 36 hh SPACE Selectable from among a total of 93 characters e and cannot be used SNMP Password 8 to 32 digits e Numeric characters 0 to 9 auth password e Alpha characters upper and lower case letters priv password e Symbols Yo amp lt gt p IF A E h my Selectable from among a total of 90 characters e A SPACE and V cannot be used Precautions for Use of Various Types of Applications Comply with the following requirements when using various types of applications When PageScope Web Connection or an application of various other types is used the password con trol function of the application stores the password that has been entered in your PC If you want the password not stored disable the password
54. m the current mode whenever the access to that mode is completed or if the user leaves the machine in the middle of the mode with the mode screen left displayed NOTICE This machine permits duplicate login operations performed by the service engineer the Administrator of the machine and the user e The Administrator of the machine should make sure that when the service engineer changes the set tings neither the Administrator of the machine nor the user performs the login operation e The Administrator of the machine should make sure that no user is allowed to perform the login oper ation when the Administrator of the machine changes or deletes user information or user data e To prevent settings of the machine from being duplicated the Administrator of the machine should not attempt to change the settings in a condition of having logged onto a mode simultaneously from the control panel and the client PC bizhub C3110 1 2 1 1 Introduction INSTALLATION CHECKLIST This Installation Checklist contains items that are to be check by the Service Engineer installing this machine The Service Engineer should check the following items then explain each checked item to the Administrator of the machine To Service Engineer Make sure that each of these items is properly carried out by checking the box on the right of each item 1 Perform the following steps before installing this machine Check with the Administrator to d
55. machine the machine is set into an access lock state and prohibits any subsequent password entry operations To cancel the access lock state turn off then on the power switch of the machine When the power switch is turned off then on again wait at least 10 seconds to turn it on after turn ing it off This interval is necessary to ensure that the machine functions properly 8 Print the document bizhub C3110 3 11 3 4 Secured Job Function 3 3 4 2 Accessing the Secured Job file v Forthe logon procedure see page 3 2 v Donot leave the machine while you are in the user operation mode If it is absolutely necessary to leave the machine be sure first to log off from the user operation mode v X Enter the Secured Job password through the printer driver on the PC side The password entered is uk displayed as 1 Log on to the user operation mode through User Authentication from the control panel 2 Onthe main Screen press the A or V key to select USB HDD then press the Select key UTILITY REPORT STATUS gt Select 3 Press the A or Y key to select PROOF PRINT MENU then press the Select key USB HDD PROOF PRINT MENU ID amp Print 4 Press the A or Y key to select the user name then press the Select key USER NAME user gt The name of the user of the PC from which the Secured Job file has been sent appears D Press the A or Y key to select the job name then press the Select key Job N
56. making of the SMB Settings Making the SMB Setting v For the procedure to access the Administrator Mode see page 2 2 Do not leave the machine with the Administrator Mode setting screen left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Mode Start PageScope Web Connection and access the Administrator Mode 2 Click the Network tab and SMB Settings Make the necessary settings Click Apply bizhub C3110 2 30 2 15 Rendezvous Bonjour Setting Function 2 2 15 Rendezvous Bonjour Setting Function When access to the machine by the Administrator of the machine through the Admin Settings is authenticat ed the machine enables making of the Rendezvous Bonjour Settings Making the Rendezvous Bonjour Setting lt From the Control Panel gt v For the procedure to call the ETHERNET screen on the display see steps 1 through 2 of page 2 29 v Do not leave the machine with the setting screen of Administrator Settings left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Settings Call the ETHERNET screen on the display from the control panel Press the A or V key to select BONJOUR then press the Select key Press the A or V key to select ENABLE then press the Select key lt From PageScope Web Connection gt v For the procedure to access the Administrator Mo
57. n the URL field To set IPP printing e Type http lt IP address of the machine gt ipp To set IPPS printing In Windows XP Server 2003 e Type https lt IP address of the machine gt ipp In Windows Vista 7 Server 2008 Server 2008 R2 Server 2012 e Type https host name domain name ipp For Host Name and Domain Name specify the names set with the DNS server Registering the certificate in Windows Vista or later Windows Vista or later which offers enhanced security functions gives a certificate error message if the SSL certificate is one that is not issued by a certification body In such cases it becomes necessary to register the certificate of this machine as that issued by a reliable party for the computer account First register Host Name and IP address of this machine in the DNS server in advance Then in TCP IP Set tings of PageScope Web Connection set the DNS Host Name and DNS Default Domain Name registered with the DNS server It should also be noted that for the certificate to be imported a certificate for SSL encryption communication should be registered in PageScope Web Connection and exported in advance as the certificate including the public key bizhub C3110 1 10 1 5 Miscellaneous From Continue to this website call the PageScope Web Connection window to the screen Click Certificate Error to display the certificate Then click Install Certificate to install the ce
58. n to HDD Scan to HDD gt Scan to HDD PC Fax No User Name View 1 Public View 2 userl View 3 Click Copy of the desired file Suserl Log out SS scanning Ready System _Job__ Print Storage x Scan to HDD Scan to HDD Scan to HDD Search for Number 1 10 PC Fax EUR Thumbnail File Name Copy Delete Bi I dns test pdf Copy Delete 2 If Delete is selected a confirmation message appears Click OK to delete the specified file 4 Select Open or Save to execute the desired function File Download Do you want to open or save this file oye Name test pdf RE Type Adobe Acrobat Document From While files from the Internet can be useful some files can potentially harm your computer If you do not trust the source do not open or save this file What s the risk gt The downloaded file is not deleted from the machine bizhub C3110 3 16 Application Software PageScope Data Administrator 4 NES 4 4 1 4 1 1 Application Software PageScope Data Administrator PageScope Data Administrator is an application for management purpose that allows the authentication and destination functions of the machine to be edited or registered from a PC connected over the network It allows the authentication and destination list to be downloaded in your PC the data in the list to be edited on the PC and then the data to be written in t
59. ncryptSetting 4 Press the A or Y key to select ON then press the Select key HDD EncryptSetting D Aconfirmation message appears Press the Select key HDD EncryptSetConf ARE YOU SURE CANCEL gt Changing the setting of HDD Encryption Setting switching between ON and OFF will format the HDD For details of items that are cleared by HDD Format see page 1 11 6 Enterthe 20 digits Encryption Key from the keypad and press the Select key The machine restarts automatically Encrypt Passphrase qUCEEEECOCCCOCEERECEE in 11 gt Ifthe entered Encryption Key does not meet the setting requirements a message that tells that the entered Encryption Key cannot be used appears Enter the correct Encryption Key Press the X key to switch the input mode between alphabet and numeric Press the Back key to delete the entered characters one by one Hold down the Back key to clear all the entered characters Yay bizhub C3110 2 16 2 8 Protecting Data in the HDD 2 2 8 2 Deleting the encryption key v Forthe procedure to call the HDD Encryption Setting screen on the display see steps 1 through 3 of page 2 15 v Do not leave the machine with the setting screen of Administrator Settings left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Settings v The encryption key cannot be deleted with the Enhanced Security Mode set to ON 1 Ca
60. oes not match suspend the installation procedure and contact Konica Minolta Set the CE Password After this machine is installed refer to this User s Guide and perform the following steps Check that the Administrator Password has been set by the Administrator of the machine Check that the Encryption Key has been set by the administrator of the machine Check that User Authentication has been set to Device by the Administrator of the ma chine Check that Authentication Device Settings has been set to Card Authentication Pass word by the administrator of the machine Check that the self signed certificate for SSL communications has been registered by the Administrator of the machine Check that Password Rules has been set to ON by the Administrator of the machine Let the Administrator of the machine set Enhanced Security Mode to ON Explain to the administrator that the settings for the security functions for this machine have been specified When the above steps have been properly carried out the Service Engineer should make a copy of this page and give the original of this page to the Administrator of the machine The copy should be kept at the corre sponding Service Representative for filing Product Name Company Name User Division Name Person in charge Customer Administrator of Machine Serv
61. ords Encryption Key trusted channel setting data and ma chine setting data stored in the memory area on the MFP board e User identification information user IC card information User passwords and Secured Job passwords stored in the HDD This machine offers the SSL function as a data protection method to ensure confidentiality of images Scan to HDD files transmitted and received over the network When transmitting and receiving highly confidential image data Secured Job files Scan to HDD files ID amp Print files among different pieces of IT equipment within an office LAN the machine carries out communica tions with the correct destination via reliable paths or through anti sniffing measures assuming an office en vironment that responds to most stringent security requirements NOTICE Secured Job files and ID amp Print files transmitted from the client PC to the machine are not encrypted To protect the Secured Job files and ID amp Print files take necessary anti sniffing measures including installation of cryptographic communications equipment or a sniffing detector Setting the Enhanced Security Mode to JON causes the data to be protected to be registered on the HDD and the data space on the SSD to be formatted Because no dafa to be protected exists on the SSD performing Overwrite All Data or SSD Format available from SSD Settings does not delete data to be protected bizhub C3110 1 5 1 4 Precautions for O
62. ot enable the ID amp Print function Enable the function man ually to protect image files For details of the ID amp Print function see page 2 9 bizhub C3110 2 2 Enhancing the Security Function 2 The Enhanced Security Mode is set to OFF if the Administrator of the machine executes any of the following functions Set the Enhanced Security Mode to ON again e HDD Format is executed Overwrite All Data is executed RESTORE ALL of Initialize is executed RESTORE NETWORK of Initialize is executed RESTORE PRINTER of Initialize is executed bizhub C3110 2 6 2 2 Enhancing the Security Function 2 Setting the Enhanced Security Mode v Forthe procedure to call the Administrator Settings on the display see page 2 2 v Donot leave the machine with the setting screen of Administrator Settings left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Settings v X The Enhanced Security Mode is factory set to OFF Be sure to turn ON the Enhanced Security Mode So as to enable the security function of the machine 1 Call the Administrator Settings on the display from the control panel 2 PresstheA or Y key to select Security Settings then press the Select key Admin Settings System Cooperation Security Settings Paper Empty Set 3 Press the A or Y key to select EnhancedSecurityMd then press the Select key Secu
63. ot leave the machine with the Administrator Mode setting screen left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Mode 1 Start PageScope Web Connection and access the Administrator Mode 2 Click the Security tab 3 Select Device from the User Authentication pull down menu and click Apply En sut se rant v Authentication User Authentication Account Track General Settings User Authentication Device gt UserList 00000 Public Access Restrict v Administrator Log out PReady e Ready Account Track Off v Synchronize User Authentication amp Account Track Synchronize Number of Counters Assigned for Users 50 1 999 Print without Authentication Restrict v Counter Reset Apply Clear 4 Click General Settings from the Authentication Device Settings menu and select Card Authentication Password System Securty vob Print Storage adaress Network Authentication Device Settings b General Settings Gli dministrator Log out Pready e Ready General Settings Authentication Type Card Authentication Password Authentication Method Card Authentication Description Uses an IC card for authentication Card Authentication Password Uses an IC card placed on the IC card reader and entry of a user password for authentication If Enhanc
64. ough SNMP access authentication from the PC is allowed to operate the network setting function To change the setting specify the corresponding object ID See the table below for the setting items Setting Item Object ID IP address setting IP Address 1 3 6 1 4 1 18334 1 1 2 1 5 7 1 1 1 3 1 BOOT Protocol use setting 1 3 6 1 4 1 18334 1 1 2 1 5 7 1 1 1 6 1 BOOT Protocol Type 1 3 6 1 4 1 18334 1 1 2 1 5 7 1 1 1 7 1 DNSG server address setting 1 3 6 1 4 1 18334 1 1 2 1 5 7 1 2 1 3 1 1 Rendezvous Bonjour setting 1 3 6 1 4 1 18334 1 1 2 1 5 9 2 1 3 1 1 NetBIOS setting 1 3 6 1 4 1 18334 1 1 2 1 5 10 1 1 4 1 bizhub C3110 2 26 2 12 Accessing the Scan to HDD file 2 12 Accessing the Scan to HDD file When access to the machine by the Administrator of the machine through the Administrator Settings is au thenticated the machine enables controls of the Scan to HDD files Scan to HDD stores the image file scanned by the machine in the HDD together with user information The image file can be stored as Public or Personal The Administrator of the machine can access the machine from the PC to view a list of image files stored in the HDD or back them up or download them NOTICE The image files stored as Personal are protected The Administrator of the machine should instruct the user to use Personal when saving highly confidential files Accessing the image file v v For the procedure to access the A
65. peration Control 1 1 4 Precautions for Operation Control This machine and the data handled by this machine should be used in an office environment that meets the following conditions Roles and Requirements of the Administrator The Administrator should take full responsibility for controlling the machine thereby ensuring that no improp er operations are performed lt To Achieve Effective Security gt e A single individual person who is capable of taking full responsibility for controlling the machine should be appointed as the Administrator to make sure that no improper operations are performed e When a DNS server or a WebDAV server is to be used the Administrator of the machine should peri odically check that the corresponding administrator of the server appropriately manages the server to allow no settings to be changed without permission Password Usage Requirements The Administrator must control the Administrator Password auth password and priv password appropriate ly so that they may not be leaked These passwords should not be ones that can be easily guessed The user on the other hand should control the Secured Job Password and User Password appropriately so that they may not be leaked Again these passwords should not be ones that can be easily guessed To Achieve Effective Security e Make absolutely sure that only the Administrator knows the Administrator Password auth password and priv password e The
66. quire ments 6 Click Apply The certificate can now be registered bizhub C3110 2 22 2 10 SSL Setting Function 2 10 2 SSL Setting v For the procedure to access the Administrator Mode see page 2 2 v Donot leave the machine with the Administrator Mode setting screen left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Mode NOTICE When making the SSL Setting be sure to make sure in advance that the device certificate has been registered in the machine For the procedure to register the device certificate see page 2 21 1 Start PageScope Web Connection and access the Administrator Mode 2 Click the Security tab and SSL TLS Settings from PKI Settings menu 3 Click the pull down menu of SSL TLS and select Enable Set Encryption Strength and click Apply tadministrator Log out Ready e Ready system security job Print Storage Adaress network SSL TLS Settings SSL TLS Enable lt Encryption Strength AES 256 3DES c SSL TLS Version M SSL 3 0 M TLS 1 0 M TLS1 1 M TLS 1 2 SSL TLS Settings Apply Clear For encryption strength select the strong AES 256 3DES 2 Inthe Enhanced Security Mode the setting cannot be changed to one containing strength lower than AES 3DES gt Cancel the selection of SSL 3 0 of SSL TLS Version bizhub C3110 2 23 2
67. rd that verifies the identity as the Administrator of the person who accesses the func tion During the authentication procedure the Administrator Password entered for the authentication purpose appears as or on the display A failure in authentication as a result of the entry of a wrong password is counted as unauthorized access NOTICE Make sure that none of the general users of the machine will know the Administrator Password If the Administrator Password is forgotten it must be set again by the Service Engineer Contact your Service Representative Accessing the Administrator Settings The machine does not accept access to the Administrator Settings under any of the following conditions Wait for some while before attempting to gain access to the Administrator Settings again e There is a job being executed by the machine e There is a reserved job timer TX fax redial waiting etc in the machine e Immediately after the power switch has been turned ON e A malfunction code is displayed on the machine From the Control Panel v Do not leave the machine with the setting screen of Administrator Settings left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Settings On the main screen press the A or V key to select UTILITY then press the Select key 1 2 Press the Aor Y key to select Admin Settings then press the Select key UTILITY User
68. reen 5 Click Apply 3 Ifthe entered User Password does not meet the requirements of the Password Rules a message thattells that the entered User Password cannot be used appears Enter the correct User Password For details of the Password Rules see page 1 9 bizhub C3110 2 12 2 6 User Setting Function 2 6 Check the message that tells that the setting has been completed Then click OK gt To delete a previously registered user click Delete in step 3 Check the contents of registration on the confirmation screen and click OK if the user is to be deleted If a user is deleted the image files owned by that specific user are deleted bizhub C3110 2 13 2 7 Changing the Administrator Password 2 2 7 Changing the Administrator Password When access to the machine by the Administrator of the machine through the Administrator Settings from the control panel is authenticated the machine enables the operation of changing the Administrator Pass word required for accessing the Administrator Settings The Administrator Password entered for the authentication purpose appears as xu on the display Changing the Administrator Password v v N 3 For the procedure to call the Security Settings screen on the display see steps 1 through 2 of page 2 7 Do not leave the machine with the setting screen of Administrator Settings left shown on the display If it is absolutely necessary to leave the machine
69. rint Settings Public User Save uae Devica Default Operation Selection Begin Printing gt PKI Se i g i Apply Clear f Enable is set the document is stored as ID amp Print file even if Print is selected on the printer driver side gt Even if Disable is set the document is stored as ID amp Print file if ID amp Print is selected on the printer driver side 4 Click Apply bizhub C3110 2 9 2 5 System Auto Reset Function 2 2 5 System Auto Reset Function When access to the machine by the Administrator of the machine through the Administrator Settings from the control panel is authenticated the machine enables setting of the operation of the system auto reset func tion If no operations are performed for a predetermined period of time during access to the Administrator Settings or user mode during setting of User Authentication from the control panel the system auto reset function automatically causes the user to log off from the mode The predetermined period of time after which the system auto reset function is activated can be selected from among nine values between 1 min and 9 min System auto reset can also be set to OFF If no opera tions are performed for 1 min even with system auto reset set to OFF the function causes the user to log off from the mode automatically Reference e Processing of a specific job however takes precedence over the system auto r
70. rint files n c iet e ee e dec IER a eee da 3 6 3 2 2 Accessing the ID amp Print file 5 ce tei AR ANA 3 8 3 3 Change Password F nction AANI inre niet indus en en inste ete 3 9 Performing Change Password aaa 3 9 3 4 Secured Job Function aaa 3 10 3 4 1 Registering Secured Job files iii 3 10 3 4 2 Accessing the Secured Job file issues 3 12 3 5 Scan to HDD Function kai NIKA NANANA 3 14 3 5 1 Registering image files 1 eni ee ctae ANAN 3 14 3 5 2 Accessing the IMAGE TIlE stresse drames a ap e pe pce er ER in aa aa ia cae an 3 16 plic Software 4 1 PageScope Data Administrator a 4 2 Precautions during backup or restore sienne 4 2 4 1 1 Accessing from PageScope Data Administrator 00 eeeseeeeeeeeeneeeessneeseneeeeeseeeeesaeeseneeeeeneeeeeeneeeeneees 4 2 4 1 2 Making the user Settings sis unie ALAN AARAL ADA BAGA tente inde 4 4 4 1 3 Setting the IC card information siennes 4 5 4 2 IuLDnurtm 4 7 Accessing from the TWAIN driver iii 4 7 bizhub C3110 Contents 2 1 Security 1 1 Introduction 1 1 Security 1 1 Introduction Thank you for purchasing our product This User s Guide contains the operating procedures and precautions to be used when using the security functions offered by the bizhub C3110 machine To ensure the best possible performance and effective use of the machine read this manual thoroughly
71. rity Settings Admin Password Security Details EnhancedSecur i tyMd 4 Press the A or Y key to select ON then press the Select key The machine restarts automatically EnhancedSecur i tyMd gt ON can be selected only if the Administrator of the machine has made the necessary settings be forehand For details of the necessary settings see page 2 5 gt Ifthe Enhanced Security Mode is properly set to ON a key icon appears at the portion enclosed by a red frame of the screen indicating that the machine is in the Enhanced Security Mode UTILITY Place ID card bizhub C3110 2 7 2 3 Setting the Authentication Method 2 3 Setting the Authentication Method When access to the machine by the Administrator of the machine through the Administrator Settings is au thenticated the machine enables setting of the user authentication If Device is selected the authentication function of this machine can be used If Device is selected the IC card function can be set The IC card function uses an IC card reader connected to the machine and reads the IC card with the IC card reader to perform user authentication NOTICE If Enhanced Security Mode is set to ON Authentication Method should be set to Device and Authentication Device Settings should be set to Card Authentication Password Setting the Authentication Method v For the procedure to access the Administrator Mode see page 2 2 v Do n
72. rtificate Display the physical stores Then deploy the certificate which has earlier been exported in Local Computer of Trusted Root Certification Authorities to thereby import the certificate Items of Data Cleared by Data Erase Function The data erase function clears the following items of data NOTICE Perform RESTORE ALL from the control panel of the machine and not via the network The encryption key is not deleted even if RESTORE ALL or Overwrite All Data is performed For the detailed deleting procedure see page 2 17 Items of Data Cleared Description Method Enhanced Security Mode Set to OFF Overwrite All Data HDD Format RESTORE ALL User registration data Deletes all user related data that has been Overwrite All Data registered HDD Format IC card registration data Deletes all IC card related data that has Overwrite All Data been registered HDD Format Secured Job Password file Deletes all Secured Job related informa Overwrite All Data tion and files saved HDD Format Scan to HDD file Deletes all files stored as Personal by Scan to HDD Overwrite All Data HDD Format ID amp Print file Deletes all ID amp Print files Overwrite All Data HDD Format Image files e Image files saved other than the Se Overwrite All Data cured Job files files stored as Person HDD Format al by Scan to HDD and ID amp Print files Image files of jobs in job queue state Remainder data files
73. s changed when Device is set for the authentication method the image file owned by the user in question before the change are deleted Making user setting v Forthe procedure to access the Administrator Mode see page 2 2 v Do not leave the machine with the Administrator Mode setting screen left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Mode v Ifa user has been registered promptly notify the user in question of the registration and have him or her change the password 1 Start PageScope Web Connection and access the Administrator Mode 2 Click the Security tab and User List 3 Click New Registration Qeadministrator Log out Ready i Ready Siem Pin singe naaress memon ID amp Print Settings 7 No User Name Edit Delete Mum i 2 user edit Delete gt To change a User Password click Edit and select the Change Password check box Then enter the new User Password 4 Make the necessary settings Administrator tes out Ready ie Ready system security vob Print Storage adress Network v Authentication User Registration _ General Settings No 1 gt s 3i E mail Address Password Change Password 00000000 gt A User Name that already exists cannot be redundantly registered Click Cancel to go back to the previous sc
74. s the A or Y key to select Login User then press the Select key ID amp Print Public User D Pressthe A or Y key to select the job name then press the Start key to start printing Job Name test1 pdf test2 pdf Print Select 3 The ID 8 Print file is automatically deleted as soon as the printing is normally terminated Select the job name and press the Stop Reset key to delete the selected job bizhub C3110 3 8 3 3 Change Password Function 3 3 3 Change Password Function When Device is set for Authentication Method of User Authentication the machine permits each of all users who have been authenticated through User Authentication to change his or her User Password The User Password entered is displayed as e Performing Change Password v For the logon procedure see page 3 2 v Donotleave the machine while you are in the user operation mode If it is absolutely necessary to leave the machine be sure first to log off from the user operation mode v Change the user password at regular intervals v Make absolutely sure that nobody but you may know your user password v Do not set any number that can easily be guessed from birthday employee identification number and the like for the user password 1 Log on to the user operation mode through User Authentication from the PageScope Web Connection 2 Click the System tab and Authentication Suser1 Los out Ready S Read
75. s three during operation of the machine the machine is set into an access lock state and prohibits any subsequent password entry operations To cancel the access lock state turn off then on the power switch of the machine When the power switch is turned off then on again wait at least 10 seconds to turn it on after turn ing it off This interval is necessary to ensure that the machine functions properly Gi Make the necessary settings and capture the image bizhub C3110 4 7 KONICA MINOLTA http konicaminolta com A6DT 9571B 00 2014 KONICA MINOLTA INC
76. sage that tells that the User Password does not match appears Enter the correct User Password bizhub C3110 3 9 3 4 Secured Job Function 3 4 Secured Job Function The Secured Job function allows a Secured Job file specified by a corresponding password from the PC to be used in the condition registered in the machine To access a Secured Job file authentication is performed through an 8 digit password that verifies an au thenticated user of the Secured Job file The password entered is displayed as A failure in authentication as a result of the entry of a wrong password is counted as unauthorized access NOTICE Turning OFF ON the power switch of this machine deletes the secured job file registered on this machine 3 4 1 Registering Secured Job files v The Secured Job password must consist of 8 digits and meet the requirements of the Password Rules For details of the Password Rules see page 1 9 v Make absolutely sure that nobody but you may know your Secured Job password v Donot set any number that can easily be guessed from birthday employee identification number and the like for the Secured Job password 1 Click Properties in the Print dialog box to show the Printing Preference window 2 Click the Basic tab 3 Select Secured Job in Job Retention Advanced My Tab Basic Layout Cover Mode Stemp Compostion Qualit
77. se functions are disabled Function Name Setting Procedure USB Memory Print Function Using Administrator Settings System Settings Folder Settings External Memory Function Settings set Print Document to OFF SSL TLS Version Start the PageScope Web Connection and using Security PKI Set tings SSL TLS Settings of the administrator mode cancel the selec tion of SSL 3 0 of SSL TLS Version Machine Maintenance Control The Administrator of the machine should perform the following maintenance control activities Provide adequate control over the machine to ensure that only the Service Engineer is able to perform physical service operations on the machine Provide adequate control over the machine to ensure that any physical service operations performed on the machine by the Service Engineer are overseen by the Administrator of the machine Some options require that Enhanced Security Mode be turned OFF before they can be used on the machine If you are not sure whether a particular option to be additionally purchased is fully operational with the Enhanced Security Mode turned ON contact your Service Representative Operating conditions for the IC card and IC card reader The machine supports the following types of IC card and IC card reader IC card type IC card reader Type A AU 201 SCL 010 Felica IDm AU 201 SCL 010 HID Prox AU 201H North America only
78. t to Card Authentication Password Certificate for SSL Register the self signed certificate for SSL communications Password Rules Set to ON Setting the Enhanced Security Mode to ON changes the setting values of the following functions Function Name Factory Setting When Enhanced Security Mode is set to ON Public Access Restrict Restrict not to be changed Print without Authentica Restrict Restrict not to be changed tion User Name List OFF OFF not to be changed SSL OFF ON not to be changed SSL Encryption Strength AES 256 3DES AES 256 3DES not to be changed to one containing RC4 128 strength lower than AES 3DES DES RC4 40 FTP Server Enable Disable Selection can be made between Enable and Disable SNMPv1 v2c Read Write en Only Read is enabled not to be changed abled SNMP v3 Security Level and auth password priv password SNMP v3 Write User auth password priv password auth password priv password Selection can be made between auth password and auth password priv password Administrator Password Change Via Network Pagescope Web Con nection Enabled Restrict Telnet Enable Disable not to be changed NOTICE When Password Rules is set to ON the characters and the number of digits used for each password are restricted For details of the Password Rules see page 1 9 Turning ON the Enhanced Security Mode does n
79. tor If it is absolutely necessary to leave the site be sure first to log off from the PageScope Data Administrator Access the machine through Authentication Settings Address Settings mode of PageScope Data Ad ministrator Click the Authentication settings expand button Click User authentication settings LE E r m i File Edit Tool Window Help aro 3 Registration of Device Eg Network Initial Setting Function selection User list 1 1000 item s g D utes information i 88 Status User name E Mail a Permit function Total Cou 5 Eig Authentication settings Registered 2 User authentication settings ET lg l Lg Authentication Device Settings H Address settings m kg Refresh from the device Select the desired function To register the user click Add gt To change data registered for the user click Edit To delete the user click Delete and a screen appears that prompts you to confirm the execution of deletion Click Yes to delete the user gt Ifthe User Password does not meet the requirements of the Password Rules a message appears that tells that this particular User Password cannot be used Click OK and enter the correct User Password For details of the Password Rules see page 1 9 3 Ifthe User Name has not been entered a message appears that tells that the User Name is yet to be entered Click OK and enter the User Name 3 A User Name that alre
80. ub C3110 2 24 2 11 SNMP Setting Function 2 2 11 SNMP Setting Function When access to the machine by the Administrator of the machine through the Administrator Settings is au thenticated the machine enables changing of the SNMP v3 Write User Password auth password priv pass word required for accessing the MIB object over the network using the SNMP from the PC Each of the auth password and priv password can consist of 8 to 32 digits The password entered for the authentication purpose appears as on the display 2 11 1 Changing the auth password and priv password v Forthe procedure to access the Administrator Mode see page 2 2 v Do not leave the machine with the Administrator Mode setting screen left shown on the display If it is absolutely necessary to leave the machine be sure first to log off from the Administrator Mode 1 Start PageScope Web Connection and access the Administrator Mode 2 Click the Network tab and SNMP Settings administrator _Log out Ready L7 Ready System Security Print Storage Address General Settings SNMP Settings TCP IP Settings SNMP Enable DE mail Settings SNMP vi v2c IP Enable LDAP Settings snp v3 IP Enable 5 HTTP Settings UDP Port 61 1 65535 IPP Settings SNMP vi v2c Settings FTP Settings Read Community Name public Write Enable 5 Write Community Name private gt SMB Settings SNMP v3
81. used as image files and not deleted through only the general deletion operation e Temporary data files generated during print image file processing Administrator Password Clears the currently set password reset RESTORE ALL ting it to the factory setting SNMP Password Clears the currently set password reset RESTORE ALL ting it to the factory setting MAC address SSL certificate Deletes the currently set SSL certificate Overwrite All Data HDD Format RESTORE ALL Network Setting Clears the currently set network settings RESTORE ALL DNS Server setting IP Address setting NetBIOS setting and Rendezvous Bon jour setting resetting it to the factory set ting Machine setting data Deletes the machine setting data RESTORE ALL Trusted channel setting data Deletes the trusted channel setting data RESTORE ALL bizhub C3110 1 5 Miscellaneous 1 HDD Format Execute HDD format when for example to initialize the HDD to be reset to the default state or when the HDD is replaced with a referent one Executing HDD format deletes data saved in the machine s HDD e For details of items that are cleared by HDD Format see page 1 11 e HDD formatting turns DFF the Enhanced Security Mode So it must be turned ON again For details of settings see page 2 5 Upgrading of the firmware If upgrading of the firmware has been performed by the service engineer the Administrator of the machine must execute R
82. ut being registered gt If an attempt is made to print or save a file by specifying a user name that contains a double quotation mark a login error results and the machine cancels the print job 3 A failure in authentication as a result of the entry of a wrong password is counted as unauthorized access If the cumulative number of unauthorized accesses reaches three during operation of the machine the machine is set into an access lock state and prohibits any subsequent password entry operations To cancel the access lock state turn off then on the power switch of the machine When the power switch is turned off then on again wait at least 10 seconds to turn it on after turn ing it off This interval is necessary to ensure that the machine functions properly 6 Print the document bizhub C3110 3 7 3 2 ID amp Print Function 3 3 2 2 Accessing the ID amp Print file v Forthe logon procedure see page 3 2 v Donotleave the machine while you are in the user operation mode If it is absolutely necessary to leave the machine be sure first to log off from the user operation mode 1 Log on to the user operation mode through User Authentication from the control panel 2 Onthemain screen press the A or V key to select USB HDD then press the Select key UTILITY REPORT STATUS gt Select 3 Press the A or Y key to select ID amp Print then press the Select key USB HDD PROOF PRINT MENU 4 Pres
83. y Other 8 1 2x11 85x11 in Lebe trailed z oen T ER cd 81 211 85x11 in Original Orientation Job Retention l orat ES Pet H Original Size By Print 81 211 Paper Size Ba cw Same as Original Size Ba Print and Hold Manual a Proof then Print Paper Tray ID amp Print Auto Paper Type No Setting m Hep 4 Enterthe 8 digit Secured Job Password in the Password box User Name user Job Name 9 Auto Custom Password s 4 8 chars V Hide Password To print using a password use the following setting Basic Tab gt Job Retention gt Secured _ Co eme J puma Be 5 Click OK 6 Click Authentication Account Track bizhub C3110 3 10 3 4 Secured Job Function 3 Enter the user name and password and then click OK User Authentication Account Track CES User Authentication Account Track Public User Department Name Recipient User Pi rd User Name onde Password 3 If the user password does not correspond to the user name entered the Secured Job file is discard ed without being registered gt If an attempt is made to print or save a file by specifying a user name that contains a double quotation mark a login error results and the machine cancels the print job 3 A failure in authentication as a result of the entry of a wrong password is counted as unauthorized access If the cumulative number of unauthorized accesses reaches three during operation of the
84. y v Device Information Device Status Paper Source 2 E Device Name Output Tray Device Location Storage Device Information Interface Information I Engine Serial Number Consumables Memory 1024 MB Counter HDD Installed Online Assistance Fax Board Installed Authentication Duplex Installed Paper Source Manual Tray1 Tray2 3 Enter the currently registered User Password and a new User Password Then to make sure that you have entered the correct new password enter the new User Password once again amp useri Log out SSscanning Ready System job Print Storage address Device Information User Password Counter Current Password e0000000 Online Assistance New Password v Authentication Retype New Password User Password Change Apply Clear 3 Registration Information 4 Click Apply gt f a wrong User Password is entered in the Current Password box a message that tells that the User Password does not match appears Enter the correct User Password 2 If the entered User Password in the New Password box does not meet the requirements of the Password Rules a message that tells that the entered User Password cannot be used appears En ter the correct User Password For details of the Password Rules see page 1 9 3 If the entered User Password in the New Password box and Retype New Password box does not match a mes
85. y of the old certificate expires Start PageScope Web Connection and access the Administrator Mode Click the Security tab and PKI Settings Click New Registration Ahi dministrator Log out Ready Ready system security Job Storage Adaress network Device Certificate New Registration Default Issued By Issued To F PITAtION Detail Edit aan Select Create a Self signed Certificate and click Next Administrator Log out Ready L7 Ready system security ob Print Storage maarese Network k then on Device Certificate Create a Self signed Certificate O Request a Certificate O Import a Certificate Device Certificate Next Cancel ann mam a bizhub C3110 2 21 2 10 SSL Setting Function 2 5 Make the necessary settings Administrator Log out Brea dy Ready ob Print Storage Adaress Network Create a Self signed Certificate Common Name a Kus Le ee Organization v PKI Settings Locality Device Certificate Organization Unit State Province Country T E mail Address s as Validity Start Date 11 27 2013 Validity Period ro days 1 3650 Apply Clear Cancel gt Settings are all cleared if Apply is clicked with data entered for each item not meeting the re

2 - Konica Minolta

Contents

Download Pdf Manuals

Related Search

Related Contents