Xerox ColorQube 8580 管理者ガイド

Security

Xerox

ColorQube 8580/8880 Color Printer

System Administrator Guide

Installing a Digital Certificate

There are three ways to install a certificate on the printer:
•

Create and install a Xerox

Device Certificate.

Create a Xerox

Device Certificate to allow the printer to generate a certificate, sign it, and create a

public key used in SSL encryption. Install the Xerox

Device Certificate on the printer, and install the

Generic Xerox

Trusted CA Certificate in the devices that the printer communicates with. Examples

of other devices are client Web browsers for HTTPS, or RADIUS authentication server for 802.1X.

Installing this certificate ensures that users can access the printer using CentreWare Internet

Services, and certificate warning messages do not appear.

Note:

Creating a Xerox

Device Certificate is less secure than creating a certificate signed by a

trusted CA. If you do not have a server functioning as a Certificate Authority, install a Xerox

Device

Certificate on the printer. Then install the Generic Xerox

Trusted CA Certificate on the other

devices.

•

Create a Certificate Signing Request (CSR) and install the CA-signed device certificate.

Create a CSR. Send the CSR to a CA or a local server functioning as a CA to sign the CSR and return

the certificate. Install the certificate on the printer. An example of a server functioning as a CA is

Windows Server 2008 running Certificate Services.

•

Install trusted CA and self-signed certificates.

Install the certificates of the root CA, and any intermediate CAs for your company. Install the

self-signed certificates from any other devices in your network.

Adding or Creating a Certificate

In CentreWare Internet Services, click Properties > Security.

Click Certificates.

Click Add/Create.

Select an option.

−

Install a new Root or other Trust Point Certificate: This option adds a certificate that is

required to validate the authentication server certificate when using 802.1X EAP

authentication.

−

Install a CA signed Device Certificate: This option adds a device certificate signed by a

certificate authority (CA) that validates the identity of the printer to the network.

−

Create Certificate Signing Request (CSR): This option creates a CSR that you can send for

signing to a trusted CA. When the certificate is returned, you can install the CA signed device

certificate on the printer.

−

Create Self-Signed Device Certificate: This option modifies the default self-signed certificate

that is created automatically on the printer. If you use HTTPS, each printer requires a unique

certificate created for each browser that is used to access the printer.

Click Next.

Follow the onscreen instructions.

To add or create the certificate, click Finish.