Specifications

5
White Paper: Canon imageRUNNER/imagePRESS Security
Canon recognizes the vital need to help prevent data loss, protect against unwanted device use, and
mitigate the risk of information being compromised. As a result, all imageRUNNER/imagePRESS
devices include many standard security features to help safeguard information.
Canon imageRUNNER security capabilities fall into three key areas:
• Device Security
• Network Security
• Security Monotoring/Management Tools
2.1 – Device Security
imageRUNNER/imagePRESS Controller Security
At the heart of every imageRUNNER/imagePRESS device is the Canon imagePlatform controller. The
controller runs a proprietary operating system that is not widely available or distributed, and has
been expressly designed to run embedded applications developed by Canon. Because of its
uniqueness and hardened implementation, the operating system is not a common target for viruses
or hackers.
User Authentication Modes
Canon imageRUNNER/imagePRESS devices include a number of authentication options which
administrators can use to ensure that only approved walk-up users can access the device and its
functions, such as copy, scan and Universal Send features. Beyond limiting access to only authorized
users, authentication also provides the ability to control usage of color and black and white output,
and total print counts by department or user.
The user authentication methods that imageRUNNER/imagePRESS devices support include:
• Department ID
• Simple Device Login (SDL)
• Single Sign On (SSO)
Department ID Mode
An embedded feature within the imageRUNNER/imagePRESS devices, the Department ID
Management mode permits administrators to control device access. If Department ID
authentication is enabled, end users are required to enter a password before they are able to
access the device.
Each Department ID can be configured with device function limitations, such as the maximum
number of copies, copy and Mail Box allocation parameters, size of Mail Box and facsimile
access. The total number of Department IDs that can be defined on each device depends on
the specific imageRUNNER/imagePRESS model. Customers can also add an optional card
reader unit to enhance security by providing authorized users with control cards to access the
machine.
Mail Box, Send (if applicable), and Scan functions can each be turned “On” or “Off” from the
Limit Functions screen located under Department ID Management. Copy mode, is automatically
disabled when the Department ID Management function is turned “On”. Once a mode has
been turned “On” (deeming it password-protected), the tab for that mode will be grayed-out
on the LCD panel.
TThhee sseettttiinnggss ccaann bbee mmaaddee uunnddeerr AAddddiittiioonnaall FFuunnccttiioonnss  SSyysstteemm SSeettttiinnggss  DDeeppaarrt
tmmeenntt IIDD
MMaannaaggeemmeenntt  SSttoorree DDeepptt.. IIDD//PPaasssswwoorrdd  LLiimmiitt FFuunnccttiioonnss..
Section 2 — Canon’s Imaging & Printing Security Framework