Xerox Phaser 6700 Administrator's Guide

Security

Phaser 6700 Color Printer

System Administrator Guide

Security Certificates

A digital certificate is a file that contains data used to verify the identity of the client or server in a

network transaction. A certificate also contains a public key used to create and verify digital signatures.

One device proves its identity to another by presenting a certificate trusted by the other device. Or, the

device can present a certificate signed by a trusted third party and a digital signature proving its

ownership of the certificate.

A digital certificate includes the following data:



Information about the owner of the certificate



The certificate serial number and expiration date



The name and digital signature of the Certificate Authority (CA) that issued the certificate



A public key



A purpose defining how the certificate and public key can be used

There are three types of certificates:



Device Certificate: A certificate for which the printer has a private key, and the purpose specified in
the certificate allows it to be used to prove identity.



CA Certificate: A certificate with authority to sign other certificates.



Trusted Certificate: A self-signed certificate from another device that you want to trust.

To ensure that the printer can communicate with other devices over a secure trusted connection, both

devices must have certain certificates installed.

For protocols such as HTTPS, the printer is the server, and must prove its identity to the client Web

browser. For protocols such as 802.1X, the printer is the client, and must prove its identity to the

authentication server, typically a RADIUS server. For features that use these protocols, perform the

following two tasks:



Install a device certificate on the printer.

Note:

When you enable HTTPS, a Xerox

Device Certificate is automatically created and installed on

the printer.



Install a copy of the CA certificate that was used to sign the device certificate of the printer on the
other device.

Protocols such as IPsec require both devices to prove their identity to each other.

For features that use these protocols, perform the tasks listed under one of the following options:

Option 1



Install a device certificate on the printer.



Install a copy of the CA certificate that was used to sign the device certificate of the printer on the
other device.



Install a copy of the CA certificate that was used to sign the certificate of the other device on the
printer.