Operation Manual

Security Feature Settings
When setting IPsec/IP ltering or IEEE802.1X, it is recommended that you access Web Cong using SSL/TLS to
communicate settings information in order to reduce security risks such as tampering or interception.
Also, you can use Web Cong by connecting the printer directly to the computer using an Ethernet cable, and then
entering the IP address into a web browser.
e
printer can be connected in a secure environment
aer
the security
settings have been completed.
SSL/TLS Communication with the Printer
When the server
certicate
is set using SSL/TLS (Secure Sockets Layer/Transport Layer Security) communication
to the printer, you can encrypt the communication path between computers. Do this if you want to prevent remote
and unauthorized access.
About Digital Certication
❏ CA-signed Certicate
is is a certicate signed by the CA (Certicate Authority.) You can obtain it to apply to the Certicate
Authority. is certicate certies the existence of the printer is and used for SSL/TLS communication so that
you can ensure the safety of data communication.
When it is used for SSL/TLS communication, it is used as a server certicate.
When it is set to IPsec/IP Filtering or IEEE802.1x communication, it is used as a client certicate.
❏ CA Certicate
is is a certicate that is in chain of the CA-signed Certicate, also called the intermediate CA certicate. It is
used by the web browser to validate the path of the printer's certicate when accessing the server of the other
party or Web
Cong.
For the CA Certicate, set when to validate the path of server certicate accessing from the printer. For the
printer, set to certify the path of the CA-signed Certicate for SSL/TLS connection.
You can obtain the CA certicate of the printer from the Certication Authority where the CA certicate is
issued.
Also, you can obtain the CA certicate used to validate the server of the other party from the Certication
Authority that issued the CA-signed Certicate of the other server.
❏ Self-signed Certicate
is is a certicate that the printer signs and issues itself. It is also called the root certicate. Because the issuer
certies itself, it is not reliable and cannot prevent impersonation.
Use it when making the security setting and performing simple SSL/TLS communication without the CA-
signed
Certicate
.
If you use this
certicate
for an SSL/TLS communication, a security alert may be displayed on a web browser
because the certicate is not registered on a web browser. You can use the Self-signed Certicate only for an
SSL/TLS communication.
Related Information
& “Obtaining and Importing a CA-signed Certicate” on page 99
& “Deleting a CA-signed Certicate” on page 103
& “Updating a Self-signed Certicate” on page 105
Administrator's Guide
Advanced Security Settings for Enterprise
98