Konica Minolta Bizhub c3110 Bedienungsanleitung

This Service Manual (Ver. 1.01) describes:

TOE Name: bizhub C3110/ineo+ 3110 Control Software

(Controller Firmware: A6DT30G0116-999)

SERVICE MANUAL SECURITY FUNCTION

C3110

2014. 10

Ver. 1.01

Revision history

After publication of this service manual, the parts and mechanism may be subject to change for

improvement of their performance.

Therefore, the descriptions given in this service manual may not coincide with the actual machine.

When any change has been made to the descriptions in the service manual, a revised version will be

issued with a revision mark added as required.

Revision mark:

• To indicate clearly a section revised, show to the left of the revised section.

A number within represents the number of times the revision has been made.

• To indicate clearly a section revised, show in the lower outside section of the correspond-

ing page.

A number within represents the number of times the revision has been made.

NOTE

Revision marks shown in a page are restricted only to the latest ones with the old ones deleted.

• When a page revised in Ver. 2.0 has been changed in Ver. 3.0:

The revision marks for Ver. 3.0 only are shown with those for Ver. 2.0 deleted.

• When a page revised in Ver. 2.0 has not been changed in Ver. 3.0:

The revision marks for Ver. 2.0 are left as they are.

2014/10 1.01 - Revised

2014/06 1.00 - Issue of the draft edition

Date Service manual Ver. Revision mark Descriptions of revision

bizhub C3110

Security Function

Security Function Ver. 1.01 Oct. 2014

CONTENTS

Security function

1. Overview ................................................................................................................. 1

2. Compliance with the ISO15408 standard ................................................................ 1

3. Data to be protected................................................................................................ 1

4. Precautions for operation control.............................................................................2

5. Checking the firmware version number ...................................................................4

5.1 Security authentication firmware version number.................................................4

6. Accessing the Service Mode ................................................................................... 4

6.1 Access method to the Service Mode .................................................................... 4

7. Enhancing the security function .............................................................................. 6

7.1 Security enhancing procedure .............................................................................. 6

7.1.1 Making and checking the service settings.....................................................6

7.1.2 Requests to the administrator .......................................................................6

7.1.3 Functions whose settings are changed by Enhanced Security Mode...........7

8. Service Mode functions ........................................................................................... 8

8.1 Firmware Version .................................................................................................. 8

8.1.1 Checking the firmware version number.........................................................8

8.2 Administrator Password function......................................................................... 10

8.2.1 Setting the administrator password ............................................................. 10

8.3 CE Password function......................................................................................... 12

8.3.1 Setting the CE password.............................................................................12

9. Data erase function ...............................................................................................14

9.1 Data erase procedure ......................................................................................... 14

9.2 Items to be cleared by data erase function ......................................................... 14

10. Firmware rewriting.................................................................................................16

10.1 Checking the current firmware version ...............................................................16

10.2 Firmware upgrading procedure by USB memory device ....................................16

10.2.1 Preparations for firmware upgrading ........................................................... 16

11. Loadable driver downloading................................................................................. 19

11.1 Outline ................................................................................................................19

11.2 Downloading procedure ...................................................................................... 19

11.2.1 Preparations for loadable driver downloading .............................................19

11.2.2 How to download loadable driver data ........................................................ 19

11.2.3 Checking the loadable driver version ..........................................................21

bizhub C3110

Security Function

Security Function Ver. 1.01 Oct. 2014

11.3 Deleting procedure .............................................................................................22

Security Function Ver. 1.01 Oct. 2014 1. Overview

bizhub C3110

Security Function

1. Overview

This Service Manual contains the essential operating procedures and precautions for using

the security functions.

2. Compliance with the ISO15408 standard

This machine has an enhanced security function: Set the Enhanced Security Mode, in

Administrator Settings, to [ON].

The security functions offered by this machine comply with ISO15408/IEC15408 (level:

EAL3).

3. Data to be protected

The underlying concept of this machine toward security is “to protect data that can be dis-

closed against the intention of users.”

The following types of image files that have been stored in the machine and made available

for use by its users are protected while the machine is being used.

• Image files stored in the HDD by secured job

• Image files stored as “Personal” in the HDD by scan to HDD

• Image files stored in the HDD by ID & Print

The following data are also counted among the assets to be protected:

• Password

- User passwords and secured job passwords stored in the HDD and CE passwords,

administrator passwords and SNMP passwords stored in the memory area on the MFP

board

• Encryption Key

- Encryption Key to be registered in the memory area on the MFP board

• User identification information

- User identification information stored in the HDD

• IC card information

- User IC card information stored in the HDD

• Trusted channel setting data

- Trusted channel setting data stored in the memory area on the MFP board

The following types of data stored in the HDD and memory area on the MFP board are pro-

tected when use of a leased machine is terminated at the end of the leasing contract or the

machine is to be discarded.

• Image files stored in the HDD by secured job

• Image files stored as “Personal” in the HDD by scan to HDD

• Image files stored in the HDD by ID & Print

• Image files of a job in the queue

• Any image files stored in the HDD data space other than the Secured Job files, files

stored as “Personal” by Scan to HDD, and ID & Print files

• Data files left in the HDD data space, used as image files and not deleted through the

general deletion operation

• Temporary data files generated during print image file processing

• CE passwords, Administrator passwords, SNMP passwords, Encryption Key, trusted

channel setting data, and machine setting data stored in the memory area on the MFP

board

• User identification information, user IC card information, user passwords and secured job

passwords stored in the HDD

This machine offers the SSL function as a data protection method to ensure confidentiality

of images (Scan to HDD files) transmitted and received over the network.

4. Precautions for operation control Security Function Ver. 1.01 Oct. 2014

bizhub C3110

Security Function

When transmitting and receiving highly confidential image data (Secured job files, Scan to

HDD files, ID & Print files) among different pieces of IT equipment within an office LAN, the

machine carries out communications with the correct destination via reliable paths or

through anti-sniffing measures, assuming an office environment that responds to most

stringent security requirements.

4. Precautions for operation control

A. Requirements of the service engineer

The service engineer should take full responsibility for controlling the machine during his or

her procedures for setting up and servicing the machine so that no improper operations are

performed.

• The service engineer who sets up and services the machine should have completed the

course in security and be certified accordingly.

• The service engineer who sets up and services the machine should produce his or her

identification card to the administrator of the machine and let the administrator confirm

identity of the service engineer.

• The service engineer should swear that he or she would never disclose information as it

relates to the settings of this machine to anybody in accordance with the Installation

Checklist contained in User’s Guide [Security Operations].

• The service engineer should perform his or her physical service jobs in the presence of

the administrator of the machine.

B. Protection of setting data in Service Mode

The CE password used to access Service Mode must be adequately controlled by the ser-

vice engineer concerned to ensure that it is not leaked. Make sure that any password that

could be easily guessed by a third person is not used as the CE password.

The CE password should:

• Not be one that is easily guessed by third persons.

• Not be known by any third person.

• Be changed at regular intervals.

• Be set again quickly if one has been initialized.

• Do not leave the machine for a long time with the service mode display. When finishing

the setting procedure in service mode, terminate the service mode as soon as possible.

C. Operating conditions for the IC card and IC card reader

The machine supports the following types of IC card and IC card reader.

• SCL-010 is not covered by certification of ISO15408.

D. Machine maintenance control

When the service engineer performs maintenance service jobs for the machine, he or she

should check the firmware version number, and make sure that the system has not been

altered.

IC card type IC card reader

TypeA AU-201/SCL-010

Felica IDm AU-201/SCL-010

HID Prox AU-201H * North America only

Security Function Ver. 1.01 Oct. 2014 4. Precautions for operation control

bizhub C3110

Security Function

E. Miscellaneous

The service engineer should explain to the administrator of the machine that the lan-

guages, in which the contents of the User’s Guide [Security Operations] have been evalu-

ated, are Japanese and English. He or she should also explain the way how to get the

manual in the language, in which it is evaluated.

5. Checking the firmware version number Security Function Ver. 1.01 Oct. 2014

bizhub C3110

Security Function

5. Checking the firmware version number

• Confirm the need to enhance or not to enhance the security function with the administra-

tor of this machine: If administrator wants to enhance, check the firmware version num-

ber.

• If the firmware version/revision number of this machine is different from numbers shown

in the list below, it will be necessary to re-write to the following certified firmware version.

Refer to P.16 for the method of how to re-write the firmware.

5.1 Security authentication firmware version number

Refer to P.8 for the method of checking the firmware version.

6. Accessing the Service Mode

6.1 Access method to the Service Mode

1. Select [UTILITY] and press the Select key.

2. Press the following keys in this order:

Stop/Reset → 0→ 0→ Stop/Reset → 0 → 1

3. Enter the CE password (the default CE password is set to “92729272”).

4. Press the Select key.

NOTE

• The CE password entered is displayed as “✱.”

• NEVER forget the CE password. When forgetting the CE password, contact Konica

Minolta.

If the CE password is forgotten, replacement of the MFP board will initialize the

setting values and turn “OFF” the Enhanced Security mode. Be sure to have the

administrator set the Enhanced Security mode back to “ON” again.

• Access to the Service Mode through the CE Password is restricted by up to 3

times.

If the CE password illegal access count exceeds 3 times, the machine is then set

into an access lock state, so that further access to the Service Mode is disabled

until unlocking the access lock.

To unlock the access lock state, it is nessesary to restart the machine while by

turning the main power switch OFF and ON.

Firmware type Version

Controller firmware A6DT30G0116-999

A6DTS1E001DA

%'RCUUYQTF



]

Security Function Ver. 1.01 Oct. 2014 6. Accessing the Service Mode

bizhub C3110

Security Function

• To go from the CE password screen to another, enter the CE password and call the

Service Mode menu to the screen. Then, quit the Service Mode.

5. The Service Mode screen will appear.

NOTE

• If you leave the site with the Service Mode setting screen being displayed, unau-

thorized changes could occur for any set values. When you finish the setting of

Service Mode, or if you have to leave the site by necessity when the Service Mode

has been set, be sure to press the Stop/Reset key and log-out from the Service

Mode.

A6DTS1E002DA

5GTXKEG/QFG

/CEJKPG

(+4/9#4'8'45+10

+OCIKPI2TQEGUU#FL

7. Enhancing the security function Security Function Ver. 1.01 Oct. 2014

bizhub C3110

Security Function

7. Enhancing the security function

• Perform the Enhanced Security Mode procedures while making checks of installation

checklist in User’s Guide [Security Operations].

• To make the Enhanced Security Mode, service settings must first be made. Make the

necessary service settings and check that they have been correctly made.

7.1 Security enhancing procedure

7.1.1 Making and checking the service settings

• Resetting the CE password to meet the requirements of the password rules before exe-

cuting the security enhancing procedure.

See P.12

7.1.2 Requests to the administrator

• When making the Enhance Security setting, the Administrator settings must be made.

The administrator must perform or check the following settings.

Item Setting/Check Default Setting

Password Rules Set to ON. OFF

Administrator Password Check that the password meets the requirements of

the Password Rules.

12345678

Encryption Key Set the Encryption Key. OFF

User Authentication Set to [Device] (Card Authentication + Password]). OFF

Certificate for SSL Register the self-signed certificate for SSL commu-

nications.

No setting

Enhanced Security Mode Set to ON. OFF

Andere Handbücher für bizhub c3110

Inhaltsverzeichnis

Andere Konica Minolta Multifunktionsdrucker Handbücher

Konica Minolta

Konica Minolta Bizhub 3320 Bedienungsanleitung

Konica Minolta

Konica Minolta bizhub 367 Bedienungsanleitung

Konica Minolta

Konica Minolta bizhub 423 Bedienungsanleitung

Konica Minolta

Konica Minolta bizhub C3300i Bedienungsanleitung

Konica Minolta

Konica Minolta Bizhub 362 Bedienungsanleitung

Konica Minolta

Konica Minolta magicolor 1690MF Bedienungsanleitung

Konica Minolta

Konica Minolta bizhub C652 Series Bedienungsanleitung

Konica Minolta

Konica Minolta bizhub C554 Bedienungsanleitung

Konica Minolta

Konica Minolta Magicolor 2490 MF Bedienungsanleitung

Konica Minolta

Konica Minolta bizhub 350 Bedienungsanleitung

Konica Minolta

Konica Minolta bizhub C220 Series Bedienungsanleitung

Konica Minolta

Konica Minolta bizhub C452 Series Bedienungsanleitung

Konica Minolta

Konica Minolta bizhub 223 Bedienungsanleitung

Konica Minolta

Konica Minolta BIZHUB 500 Bedienungsanleitung

Konica Minolta

Konica Minolta bizhub FK-503 Bedienungsanleitung

Konica Minolta

Konica Minolta Bizhub C659 Bedienungsanleitung

Konica Minolta

Konica Minolta 7013 Bedienungsanleitung

Konica Minolta

Konica Minolta bizhub 3602P Bedienungsanleitung

Konica Minolta

Konica Minolta bizhub C220 Series Bedienungsanleitung

Konica Minolta

Konica Minolta 240f Bedienungsanleitung

Konica Minolta

Konica Minolta bizhub 215 Bedienungsanleitung

Konica Minolta

Konica Minolta BIZHUB C250 Bedienungsanleitung

Konica Minolta

Konica Minolta AD-504 Bedienungsanleitung

Konica Minolta

Konica Minolta bizhub C550 Series Bedienungsanleitung

Beliebte Multifunktionsdrucker Handbücher anderer Marken

Triumph Adler

Triumph Adler DC 2016 Handbuch

Epson

Epson WorkForce WF-2510 Benutzerhandbuch

Epson

Epson Stylus Scan 2000 Installations- und Betriebshandbuch

Epson

Epson PictureMate Snap PM 240 Bedienungsanleitung

Brother

Brother MFC-J430w Bedienungsanleitung

Lexmark

Lexmark MX710 Series Handbuch

Brother

Brother MFC-9760 Bedienungsanleitung

Lexmark

Lexmark XC8155 Bedienungsanleitung

Lexmark

Lexmark X642E Bedienungsanleitung

Sharp

Sharp MX-2310U Leitfaden

Aficio

Aficio 200 Bedienungsanleitung

Canon

Canon ImageCLASS 2300 Handbuch

Ricoh

Ricoh Pro C900 Bedienungsanleitung

Lexmark

Lexmark X925 Bedienungsanleitung

Brother

Brother Business Smart MFC-J4510dw Bedienungsanleitung

Epson

Epson Stylus CX8400 Series Bedienungsanleitung

Oce

Oce VarioLink 5022 Bedienungsanleitung

Copystar

Copystar CS 4551ci Bedienungsanleitung

Konica Minolta bizhub c3110 Bedienungsanleitung

Beliebte Multifunktionsdrucker Handbücher anderer Marken