Bizhub36_42securityfunctionsvcmanual 2l2s3r
This document was ed by and they confirmed that they have the permission to share it. If you are author or own the copyright of this book, please report to us by using this report form. Report 3b7i
Overview 3e4r5l
& View Bizhub36_42securityfunctionsvcmanual as PDF for free.
More details w3441
- Words: 5,197
- Pages: 35
SERVICE MANUAL
SECURITY FUNCTION
This Service Manual (Ver. 1.02) describes bizhub 42 / bizhub 36 / ineo42 / ineo36 Control Software (Controller: A3EW30G0224, Boot: A3EW99G0010000).
2012.02 Ver. 1.02
Revision history After publication of this service manual, the parts and mechanism may be subject to change for improvement of their performance. Therefore, the descriptions given in this service manual may not coincide with the actual machine. When any change has been made to the descriptions in the service manual, a revised version will be issued with a revision mark added as required.
Revision mark: • To indicate clearly a section revised, show 1 to the left of the revised section. A number within 1 represents the number of times the revision has been made. • To indicate clearly a section revised, show 1 in the lower outside section of the corresponding page. A number within 1 represents the number of times the revision has been made. NOTE Revision marks shown in a page are restricted only to the latest ones with the old ones deleted. • When a page revised in Ver. 2.0 has been changed in Ver. 3.0: The revision marks for Ver. 3.0 only are shown with those for Ver. 2.0 deleted. • When a page revised in Ver. 2.0 has not been changed in Ver. 3.0: The revision marks for Ver. 2.0 are left as they are.
2012/2
1.02
-
2011/12
1.01
-
Revised Revised
2011/10
1.00
-
Issue of the draft edition
Date
Service manual Ver.
Revision mark
Descriptions of revision
Security Function Ver. 1.02 Feb. 2012
bizhub 42/36
CONTENTS Security function OVERVIEW ............................................................................................................. 1
2.
COMPLIANCE WITH THE ISO15408 STANDARD................................................. 1
3.
DATA TO BE PROTECTED ..................................................................................... 1
4.
PRECAUTIONS FOR OPERATION CONTROL...................................................... 2
5.
CHECKING THE FIRMWARE VERSION/REVISION NUMBER............................. 4
5.1 6.
Security authentication firmware version number................................................. 4 Accessing the Service Mode................................................................................... 4
6.1 7.
Access method to the Service Mode .................................................................... 4 ENHANCING THE SECURITY FUNCTION............................................................ 6
7.1
Security enhancing procedure.............................................................................. 6
7.1.1
Making and checking the service settings .................................................... 6
7.1.2
Requests to the ....................................................................... 6
7.1.3
Functions whose settings are changed by Enhanced Security Mode........... 7
SERVICE MODE FUNCTIONS............................................................................... 8
8. 8.1
Firmware Version.................................................................................................. 8
8.1.1 8.2
8.2.1 8.3
Initializing the .......................................................... 9
CE function......................................................................................... 10
8.3.1 9.
Checking the firmware version number......................................................... 8
Clear function............................................................................ 9
Setting the CE ............................................................................. 10
DATA ERASE FUNCTION ..................................................................................... 12
9.1
Data erase procedure ......................................................................................... 12
9.2
Items to be cleared by data erase function......................................................... 12
10.
FIRMWARE REWRITING ..................................................................................... 14
10.1 Checking the current firmware version ............................................................... 14 10.2 Firmware upgrading procedure by USB memory device .................................... 14 10.2.1
Preparations for firmware upgrading........................................................... 14
10.3 Firmware upgrading procedure by updater......................................................... 16
11.
10.3.1
Updating method......................................................................................... 16
10.3.2
Checking the version after the firmware update.......................................... 26
10.3.3
Restore All .................................................................................................. 26
LOADABLE DRIVER ING ................................................................ 27
11.1 Outline ................................................................................................................ 27 11.2 ing procedure...................................................................................... 27 11.2.1
Preparations for loadable driver ing ............................................. 27
i
Security Function
1.
Security Function Ver. 1.02 Feb. 2012 11.2.2
How to loadable driver data........................................................ 27
Security Function
bizhub 42/36
11.3 Deleting procedure ............................................................................................. 29
ii
Security Function Ver. 1.02 Feb. 2012
OVERVIEW
This Service Manual contains the essential operating procedures and precautions for using the security functions.
2.
COMPLIANCE WITH THE ISO15408 STANDARD
bizhub 42/36
1.
1. OVERVIEW
3.
DATA TO BE PROTECTED
The underlying concept of this machine toward security is “to protect data that can be disclosed against the intention of s.” The following types of image files that have been stored in the machine and made available for use by its s are protected while the machine is being used. • Image files stored in the HDD by secured job • Image files stored as “Personal” in the HDD by scan to HDD • Image files stored in the HDD by ID & Print The following data are also counted among the assets to be protected: • - s and secured job s stored in the HDD and CE s, s and SNMP s stored in the NVRAM • identification information - identification information stored in the HDD • IC card information - IC card information stored in the HDD • Trusted channel setting data - Trusted channel setting data stored in the NVRAM • External server identification setting data - External server identification setting data stored in the HDD The following types of data stored in the HDD, SSD, and NVRAM are protected when use of a leased machine is terminated at the end of the leasing contract or the machine is to be discarded, or when the HDD is stolen. • Image files stored in the HDD by secured job • Image files stored as “Personal” in the HDD by scan to HDD • Image files stored in the HDD by ID & Print • Image files of a job in the queue • Any image files stored in the HDD data space and SSD data space other than the Secured Job files, files stored as “Personal” by Scan to HDD, and ID & Print files • Data files left in the HDD data space and SSD data space, used as image files and not deleted through the general deletion operation • Temporary data files generated during print image file processing • Destination recipient data (e-mail address, telephone number) • s, SNMP s, trusted channel setting data, and machine setting data stored in the NVRAM • identification information, IC card information, s, secured job s, and external server identification setting data stored in the HDD * If the HDD is stolen, data is protected by the HDD encryption function, however, the HDD encryption function is not governed by authentication by the ISO15408.
1
Security Function
This machine has an enhanced security function: Set the Enhanced Security Mode, in Settings, to [ON]. The security functions offered by this machine comply with ISO15408/IEC15408 (level: EAL3).
4. PRECAUTIONS FOR OPERATION CONTROL
Security Function Ver. 1.02 Feb. 2012
bizhub 42/36
This machine offers the SSL function as a data protection method to ensure confidentiality of images (scan to HDD files) transmitted and received over the network. When transmitting and receiving highly confidential image data (secured job files, scan to HDD files, ID & Print files) among different pieces of IT equipment within an office LAN, the machine carries out communications with the correct destination via reliable paths or through anti-sniffing measures, assuming an office environment that responds to most stringent security requirements.
Security Function
4.
PRECAUTIONS FOR OPERATION CONTROL
A. Requirements of the service engineer The service engineer should take full responsibility for controlling the machine during his or her procedures for setting up and servicing the machine so that no improper operations are performed.
• The service engineer who sets up and services the machine should have completed the course in security and be certified accordingly. • The service engineer who sets up and services the machine should produce his or her identification card to the of the machine and let the confirm identity of the service engineer. • The service engineer should swear that he or she would never disclose information as it relates to the settings of this machine to anybody in accordance with the Installation Checklist contained in ’s Guide [Security Operations]. • The service engineer should perform his or her physical service jobs in the presence of the of the machine. B. Protection of setting data in Service Mode The CE used to access Service Mode must be adequately controlled by the service engineer concerned to ensure that it is not leaked. Make sure that any that could be easily guessed by a third person is not used as the CE .
The CE should: • Not be one that is easily guessed by third persons. • Not be known by any third person. • Be changed at regular intervals. • Be set again quickly if one has been initialized. • Do not leave the machine for a long time with the service mode display. When finishing the setting procedure in service mode, terminate the service mode as soon as possible. C. Operating conditions for the IC card and IC card reader The machine s the following types of IC card and IC card reader. IC card type TypeA
2
IC card reader AU-201/SCL-010
Felica IDm
AU-201/SCL-010
HID Prox
AU-201H * North America only
D. Machine maintenance control When the service engineer performs maintenance service jobs for the machine, he or she should check the firmware version number, and make sure that the system has not been altered. E. Miscellaneous The service engineer should explain to the of the machine that the languages, in which the contents of the ’s Guide [Security Operations] have been evaluated, are Japanese and English. He or she should also explain the way how to get the manual in the language, in which it is evaluated. In addition, the service engineer should promptly provide the version of the ’s Guide that has been evaluated for the whenever the needs one.
3
bizhub 42/36
4. PRECAUTIONS FOR OPERATION CONTROL
Security Function
Security Function Ver. 1.02 Feb. 2012
5. CHECKING THE FIRMWARE VERSION/REVISION NUMBER Security Function Ver. 1.02
bizhub 42/36
5.
CHECKING THE FIRMWARE VERSION/REVISION NUMBER
Security Function
• Confirm the need to enhance or not to enhance the security function with the of this machine: If wants to enhance, check the firmware version/revision number. • If the firmware version/revision number of this machine is different from numbers shown in the list below, it will be necessary to re-write to the following certified firmware version/ revision. Refer to P.14 for the method of how to re-write the firmware.
5.1
Security authentication firmware version number Firmware type
Version
Controller
A3EW30G
Revision 0224
Boot
A3EW99G
0010000
Refer to P.8 for the method of checking the firmware version.
6. 6.1
Accessing the Service Mode Access method to the Service Mode
1. Press the Utility/Counter key. 2. Touch [Meter Count]. 3. Press the following keys in this order: Stop00 Stop 0 1 4. Touch [], and enter the CE using the screen keyboard or the 10-key pad.
A3EWS1E034DA
NOTE • The CE entered is displayed as “✱.” • NEVER forget the CE . When forgetting the CE , call responsible person of KMBT. If the CE is forgotten, replacement of the MFP board will initialize the setting values and turn “OFF” the Enhanced Security mode. Be sure to have the set the Enhanced Security mode back to “ON” again.
4
• Each time a wrong CE is entered, the CE illegal access count is incremented by one. When the access to the Service Mode has been successful with the correct CE entered, the CE illegal access count is cleared and reset to 0. • When “ON” is set for Enhanced Security Mode, access to the Service Mode through the CE is restricted by up to 3 times. If the CE illegal access count exceeds 3 times, the machine is then set into an access lock state. It is necessary for unlocking the access lock state to restart the machine with main power switch OFF and ON. (The illegal access count value is cleared by machine’s restart) • To go from the CE screen to another, enter the CE and call the Service Mode menu to the screen. Then, quit the Service Mode. 5. Touch [OK] twice. 6. The Service Mode screen will appear.
A3EWS1E035DA
NOTE • If you leave the site with the Service Mode setting screen being displayed, unauthorized changes could occur for any set values. When you finish the setting of Service Mode, or if you have to leave the site by necessity when the Service Mode has been set, be sure to press [Close] and log-out from the Service Mode.
5
bizhub 42/36
6. Accessing the Service Mode
Security Function
Security Function Ver. 1.02 Feb. 2012
7. ENHANCING THE SECURITY FUNCTION
bizhub 42/36
7.
Security Function Ver. 1.02 Feb. 2012
ENHANCING THE SECURITY FUNCTION
• Perform the Enhanced Security Mode procedures while making checks of installation checklist in ’s Guide [Security Operations].
7.1 7.1.1
Security enhancing procedure Making and checking the service settings
Security Function
• Resetting the CE to meet the requirements of the rules before executing the security enhancing procedure. See P.10 7.1.2
Requests to the
• When making the Enhance Security setting, the settings must be made. The must perform or check the following settings. Item
6
Setting/Check
Default Setting
Rules
Set to ON.
Check that the meets the requirements of the Rules.
12345678
Authentication
Set to either [Device] or [External Server] (Active Directory).
OFF
Certificate for SSL
the self-signed certificate for SSL communications.
No setting
Enhanced Security Mode
Set to ON.
OFF
OFF
Security Function Ver. 1.02 Feb. 2012
Functions whose settings are changed by Enhanced Security Mode
• Setting the Enhanced Security Mode to [ON] changes the setting values of the following functions. Default Setting
Public Access • To permit use by a public having no registration.
Restrict
Restrict (not to be changed)
Print without Authentication • To allow or restrict printing which and are not specified.
Restrict
Restrict (not to be changed)
List Display Setting • To display the list key for names on authentication screen.
OFF
OFF (not to be changed)
SSL • To set whether to encrypt access by SSL.
OFF
ON (not to be changed)
AES/3DES (not to be changed to one containing strength lower than AES/3DES)
SSL Encryption Strength • To set the SSL encryption strength for the SSL encryption communication.
AES-256,3DES, RC4-128,DES, RC4-40
FTP Server • To set whether to use FTP server function or not.
Enable
Selection can be made between [Enable] and [Disable]
Read/Write enable
Only Read is enabled (not to be changed)
SNMPv1/v2c • To use when changing Write setting. SNMP v3 Security Level and auth-/priv- • To set the security level for the Reading/ Writing Authority which is used for SNMP v3. Change Via Network (Pagescope Web Connection)
Auth-/ Priv-
Enabled
Network firmware update protect
Invalid
CS Remote Care
Usable
Telnet
OFF
Security Function
When Enhanced Security mode is set to [ON]
Function Name
bizhub 42/36
7.1.3
7. ENHANCING THE SECURITY FUNCTION
The security level can be selected from among [auth] or [auth-/priv-]. An 8-digit or more auth- or priv- can both be set. Restrict (not to be changed) Valid Remote device setting disabled OFF (not to be changed)
NOTE • Turning ON the Enhanced Security Mode does not enable the ID & Print function. To protect image files, be sure to have the enable ID & Print function manually.
7
8. SERVICE MODE FUNCTIONS
bizhub 42/36
8.
Security Function Ver. 1.02 Feb. 2012
SERVICE MODE FUNCTIONS
• The Service Mode is used to set various service functions.
8.1
Firmware Version
Security Function
• This function is used to display the firmware version information of the machine. When the Enhanced Security Mode settings are to be made, this function should be used to check the firmware version/revision number of the “Controller” and “Boot” against the security authentication version/revision. 8.1.1
Checking the firmware version number
1. Call the Service Mode to the screen. See P.4 2. Touch [Firmware Version]. 3. Touch [Controller F/W]. 4. Check the Firmware version/revision number of “Controller” using firmware version/ revision number.
A3EW30G0022405
Version Revision
A3EWS1E036DA
5. Touch [OK]. 6. Touch [Boot F/W]. 7. Check the Firmware version/revision number of “Boot” using firmware version/revision number.
A3EW99G0010000
Version Revision
A3EWS1E037DA
8
Security Function Ver. 1.02 Feb. 2012
Clear function bizhub 42/36
8.2
8. SERVICE MODE FUNCTIONS
• This function is used when initializing the . It is therefore used when the forgets the or etc. NOTE • If the is initialized by the service engineer, never fail to have the change the accordingly. Initializing the
Security Function
8.2.1
1. Call the Service Mode to the screen. See P.4 2. Display [002/005] screen of the Service Mode. 3. Touch [Clear ].
A3EWS1E038DA
4. Touch [OK] on the confirmation screen.
A3EWS1E039DA
5. Get the of the machine to access the Settings using the default . Then, have him or her select the following functions in this order and change the default : [ Settings] [Security Settings] [ ].
9
8. SERVICE MODE FUNCTIONS
Security Function
bizhub 42/36
8.3
Security Function Ver. 1.02 Feb. 2012
CE function
• The CE function is used to change the CE to call the Service Mode to the screen. 8.3.1
Setting the CE
1. Call the Service Mode to the screen. See P.4 2. Display [003/005] screen of the Service Mode. 3. Touch [CE ].
A3EWS1E068DA
4. Touch [] of the upper section, and enter the 8-digit new CE using the screen key board or the 10-key pad.
A3EWS1E040DA
5. Touch [] of the lower section, and reenter the 8-digit new CE using the screen key board or the 10-key pad.
10
NOTE • If Rules of Security Settings available from [ Settings] [Security Details] is set to “ON,” the machine does not accept any new that contains only the same character, consists of less than 8 digits, or that is the same as the previous . • In the CE change display, enter the same CE to the entry areas (upper and lower). • For the CE , set a value other than the default. • Quitting the Service Mode after the new has been set will validate the setting of the new . • NEVER forget the CE . When forgetting the CE , call responsible person of KMBT. If the CE is forgotten, replacement of the MFP board will initialize the setting values and turn “OFF” the Enhanced Security mode. Be sure to have the set the Enhanced Security mode back to “ON” again. NOTE • If there is a mismatch in the CE between that typed first and that just typed, the machine displays a message telling that the CE entered is wrong. In this case, set the CE once again. Characters and symbols to be used for the CE • Numeric characters: 0 to 9 • Alpha characters: upper and lower case letters • Symbols: !, #, $, %, &, ', (, ), *, ,, -, ., /, :, ;, <, =, >, ?, @, [,\ , ], ^, _, `, {, |, }, ., +, SPACE Selectable from among a total of 94 characters
11
bizhub 42/36
8. SERVICE MODE FUNCTIONS
Security Function
Security Function Ver. 1.02 Feb. 2012
9. DATA ERASE FUNCTION
bizhub 42/36
9.
DATA ERASE FUNCTION
• The data erase function (Overwrite All Data/SSD Low-level Format/Restore All) overwrites and deletes all data saved in all areas of the HDD and data areas of the SSD, and resets all s stored in NVRAM to the default settings. It can be used when the machine is to be discarded or use of a leased machine is terminated at the end of the leasing contract, thereby properly blocking leaks of data.
9.1 Security Function
Security Function Ver. 1.02 Feb. 2012
Data erase procedure
• For the details of data erase procedure, see the ’s Guide Security Operations.
9.2
Items to be cleared by data erase function
• If the of the machine executes data erase function by mistake, all items that have been cleared must be set or ed again. (For the items to be set in Settings, be sure to have the perform the setting and registration procedures again.) Items of data cleared
Description
Method
Enhanced Security Mode Set to [OFF]
Overwrite All Data SSD Low-level Format Restore All
registration data
Deletes all -related data that has been ed
Overwrite All Data
Secured Job / file
Deletes all Secured Job-related information and files saved
Overwrite All Data
Scan to HDD file
Delete all files stored as Personal by Scan to HDD
Overwrite All Data
ID & Print file
Deletes all ID & Print files
Overwrite All Data
Image files
• Image files saved other than the Secured Job files, files stored as Personal by Scan to HDD, and ID & Print files • Image files of jobs in job queue state • Remainder data files, used as image files and not deleted through only the general deletion operation • Temporary data files generated during print image file processing
Overwrite All Data SSD Low-level Format
Destination recipient data Deletes all destination recipient data including files e-mail addresses and telephone numbers
SSD Low-level Format
Clears the currently set , resetting it to the factory setting
Restore All
SNMP
Clears the currently set , resetting it to the factory setting (MAC address)
Restore All
SSL certificate
Deletes the currently set SSL certificate
Overwrite All Data SSD Low-level Format Restore All
Network Setting
Clears the currently set network settings (DNS Restore All Server setting, IP Address setting, SMTP Server setting, NetWare Setting, NetBIOS setting and AppleTalk Printer Name setting), resetting it to the factory setting
12
Description
Method
Machine setting data
Deletes the machine setting data
Restore All
Trusted channel setting data
Deletes the trusted channel setting data
Restore All
External server identifica- Deletes the external server identification tion setting data setting data
bizhub 42/36
Items of data cleared
9. DATA ERASE FUNCTION
Overwrite All Data
Security Function
Security Function Ver. 1.02 Feb. 2012
13
10. FIRMWARE REWRITING
Security Function Ver. 1.02 Feb. 2012
10.1 Checking the current firmware version 1. Call the Service Mode to the screen. See P.4 2. Touch [Firmware Version]. 3. Select the firmware to be updated and check the current version. See P.8
Security Function
bizhub 42/36
10. FIRMWARE REWRITING
A3EWS1E041DA
10.2 Firmware upgrading procedure by USB memory device 10.2.1
Preparations for firmware upgrading
A. System requirements • PC equipped with a USB port • USB memory device B. 1. 2. 3. 4.
Saving the firmware data into the USB memory device Save the firmware data in appropriate space in the PC. Connect the USB memory device to the PC. Create a “firmware” folder immediately under the drive of the USB memory device. Copy the firmware data (***.exe) in the firmware folder created in step 3.
NOTE • Be sure to save the firmware data in “drive:/firmware/***.exe.” • The MFP can display up to 20 files of firmware data during upgrading.
14
Security Function Ver. 1.02 Feb. 2012
10. FIRMWARE REWRITING
How to write firmware data Turn the main power switch ON. Connect the USB memory device to the MFP. Call the Service Mode to the screen. See P.4 4. Display [002/006] screen of the Service Mode. 5. Touch [Firmware Update].
Security Function
bizhub 42/36
C. 1. 2. 3.
A3EWS1E042DA
6. A list of firmware data in the USB memory device will be displayed.
A3EWS1E043DA
NOTE • Before upgrading firmware, use [Details] to check that the firmware data is correct.
A3EWS1E044DA
7. Touch [Close].
15
Security Function Ver. 1.02 Feb. 2012
8. Select the specific firmware data to be upgraded and press [Execute]. 9. Touch [OK].
Security Function
bizhub 42/36
10. FIRMWARE REWRITING
A3EWS1E045DA
10. The firmware upgrading procedure starts. NOTE • NEVER disconnect the USB memory device from the MFP during the firmware upgrading procedure. 11. The MFP is automatically restarted as soon as the firmware is upgraded correctly.
10.3 Firmware upgrading procedure by updater 10.3.1
Updating method
• To update the firmware, perform “Firmware Updater.” A. System requirements U OS
Available hard disk space
16
• More than the recommended environment by operating system (PC / AT compatible machine) • Microsoft Windows XP Home Edition/Professional, Windows 2000, Windows Vista Home Basic/Home /Business/ Enterprise/Ultimate • Sufficient disk free space is required
Memory
• More than the recommended memory capacity by operating system • Sufficient memory resources for operating system and application are required
Interface
• 10Base-T/100Base-TX/1000Base-T Ethernet • USB 2.0 (High Speed) compliant
10. FIRMWARE REWRITING
B. Connection for Windows (1) Starting the firmware updater NOTE • Before starting the firmware updater, turn ON the main power switch of the MFP, and make sure that it is correctly connected.
bizhub 42/36
Security Function Ver. 1.02 Feb. 2012
Security Function
1. the firmware updater. 2. Double-click “xxxxxxxxxxxx.exe.” 3. The MFP name and firmware version are displayed. Click the [Next].
XXXXXXX
XXXXXXX
A3EWS1E071DA
4. The license agreement is displayed. Select “I agree”, and then click the [Next].
A3EWS1E072DA
17
bizhub 42/36
10. FIRMWARE REWRITING
Security Function Ver. 1.02 Feb. 2012
5. The list of printer drivers is displayed. Select the appropriate connection for the environment where the MFP is being used.
Security Function
XXXXXXX XXXXXXX
A3EWS1E073DA
• For a network connection: Select “Network port.” See P.19 • For a local connection: Select “Local port.” See P.22 • When specifying the IP address of the printer: Select “Printer IP address.” See P.23 NOTE • If you select “Network port” or “Local port”, make sure that the printer driver has been installed. • If you select “Printer IP address”, the firmware can be updated even if a printer driver is not already installed.
18
10. FIRMWARE REWRITING
Security Function
(2) For a network connection 1. When “Network port” is selected, a list of printer drivers for the network port appears. 2. Select the printer driver, and then click the [Next].
bizhub 42/36
Security Function Ver. 1.02 Feb. 2012
A3EWS1E074DA
3. A message appears, requesting confirmation to update the firmware. Click the [Start] to begin transferring the firmware. NOTE • Do not turn off the MFP while its firmware is being updated.
A3EWS1E075DA
19
10. FIRMWARE REWRITING
Security Function Ver. 1.02 Feb. 2012
Security Function
bizhub 42/36
4. The result of the firmware transfer is displayed. Click the [Exit].
A3EWS1E076DA
5. If the firmware was successfully updated, the MFP will automatically restart.
20
Security Function Ver. 1.02 Feb. 2012
10. FIRMWARE REWRITING
NOTE • If spooling fails, data may remain in the printer spooler. Delete this data, and then try again.
bizhub 42/36
Security Function
1. If spooling of the data fails, the following message appears. 2. Click [OK].
A3EWS1E077DA
3. Check that the printer is ready and that it is correctly connected, and then click the [Update again].
A3EWS1E078DA
21
Security Function Ver. 1.02 Feb. 2012
(3) For a local connection 1. When “Local port” is selected, a list of printer drivers for the local port appears. 2. Select the printer driver, and then click the [Next].
Security Function
bizhub 42/36
10. FIRMWARE REWRITING
A3EWS1E079DA
3. A message appears, requesting confirmation to update the firmware. Click the [Start] to begin transferring the firmware. NOTE • Do not turn off the MFP while its firmware is being updated.
A3EWS1E080DA
22
Security Function Ver. 1.02 Feb. 2012
10. FIRMWARE REWRITING
Security Function
bizhub 42/36
4. The result of the firmware transfer is displayed. Click the [Exit].
A3EWS1E081DA
5. If the firmware was successfully updated, the MFP will automatically restart.
For details, see “For a network connection.” See P.21 (4) When specifying the IP address of the printer 1. When “Printer IP address” is selected, the “Printer IP address” box becomes available. 2. Type in the IP address, and then click the [Next].
A3EWS1E082DA
23
Security Function Ver. 1.02 Feb. 2012
3. A message appears, requesting confirmation to update the firmware. Click the [Start] to begin transferring the firmware. NOTE • Do not turn off the MFP while its firmware is being updated.
Security Function
bizhub 42/36
10. FIRMWARE REWRITING
A3EWS1E083DA
4. The result of the firmware transfer is displayed. Click the [Exit].
A3EWS1E084DA
5. If the firmware was successfully updated, the MFP will automatically restart.
24
10. FIRMWARE REWRITING
bizhub 42/36
1. If transferring of the data fails, the following message appears. 2. Click [OK].
A3EWS1E085DA
3. Check that the MFP is ready and that it is correctly connected, and then click the [Update again].
A3EWS1E086DA
25
Security Function
Security Function Ver. 1.02 Feb. 2012
10. FIRMWARE REWRITING
Checking the version after the firmware update
1. Call the Service Mode to the screen. See P.4 2. Touch [Firmware Version]. 3. Select the firmware to be updated and check the current version.
Security Function
bizhub 42/36
10.3.2
Security Function Ver. 1.02 Feb. 2012
A3EWS1E041DA
10.3.3
Restore All
• After rewriting the firmware, be sure to have the execute the Restore All function.
26
Security Function Ver. 1.02 Feb. 2012
11. LOADABLE DRIVER ING
bizhub 42/36
11. LOADABLE DRIVER ING 11.1 Outline • When using the machine with authentication by the IC card, the loadable driver must be ed to the machine to use the IC card reader.
11.2 ing procedure Preparations for loadable driver ing Security Function
11.2.1
A. System requirements • PC equipped with a USB port • USB memory device B. 1. 2. 3. 4.
Saving the loadable driver data into the USB memory device Save the loadable driver data in appropriate space in the PC. Connect the USB memory device to the PC. Create a “firmware” folder immediately under the drive of the USB memory device. Copy the loadable driver (***.bin) in the firmware folder created in step 3.
NOTE • Be sure to save the firmware data in “drive:/firmware/***.bin.” 11.2.2
How to loadable driver data
1. Turn the main power switch ON. 2. Connect the USB memory device to the printer. 3. Call the Service Mode to the screen. See P.4 4. Display [005/006] screen of the Service Mode.
A3EWS1E062DA
5. Touch [Loadable Driver ].
27
11. LOADABLE DRIVER ING
Security Function Ver. 1.02 Feb. 2012
Security Function
bizhub 42/36
6. The loadable driver data list in the USB memory device will be displayed.
A3EWS1E063DA
7. Select the loadable driver data to be ed, and touch [Execute]. 8. Touch [OK].
A3EWS1E064DA
9. The loadable driver ing procedure starts. NOTE • NEVER disconnect the USB memory device from the MFP during the loadable driver ing procedure. 10. Follow the message on the control to reboot the MFP.
A3EWS1E065DA
28
Security Function Ver. 1.02 Feb. 2012
11. LOADABLE DRIVER ING
bizhub 42/36
11.3 Deleting procedure
Security Function
1. Turn the main power switch ON. 2. Call the Service Mode to the screen. See P.4 3. Display [004/006] screen of the Service Mode.
A3EWS1E070DA
4. Touch [Loadable Driver Information]. 5. Touch [Delete].
A3EWS1E066DA
6. Select [Yes] on the confirmation screen and touch [OK]. 7. Follow the message on the control to reboot the MFP.
29
Security Function
bizhub 42/36
11. LOADABLE DRIVER ING
Blank Page
30
Security Function Ver. 1.02 Feb. 2012
© 2011 KONICA MINOLTA BUSINESS TECHNOLOGIES, INC. Use of this manual should be strictly supervised to avoid disclosure of confidential information.
Printed in Japan DDA3EW-A-SE1
SECURITY FUNCTION
This Service Manual (Ver. 1.02) describes bizhub 42 / bizhub 36 / ineo42 / ineo36 Control Software (Controller: A3EW30G0224, Boot: A3EW99G0010000).
2012.02 Ver. 1.02
Revision history After publication of this service manual, the parts and mechanism may be subject to change for improvement of their performance. Therefore, the descriptions given in this service manual may not coincide with the actual machine. When any change has been made to the descriptions in the service manual, a revised version will be issued with a revision mark added as required.
Revision mark: • To indicate clearly a section revised, show 1 to the left of the revised section. A number within 1 represents the number of times the revision has been made. • To indicate clearly a section revised, show 1 in the lower outside section of the corresponding page. A number within 1 represents the number of times the revision has been made. NOTE Revision marks shown in a page are restricted only to the latest ones with the old ones deleted. • When a page revised in Ver. 2.0 has been changed in Ver. 3.0: The revision marks for Ver. 3.0 only are shown with those for Ver. 2.0 deleted. • When a page revised in Ver. 2.0 has not been changed in Ver. 3.0: The revision marks for Ver. 2.0 are left as they are.
2012/2
1.02
-
2011/12
1.01
-
Revised Revised
2011/10
1.00
-
Issue of the draft edition
Date
Service manual Ver.
Revision mark
Descriptions of revision
Security Function Ver. 1.02 Feb. 2012
bizhub 42/36
CONTENTS Security function OVERVIEW ............................................................................................................. 1
2.
COMPLIANCE WITH THE ISO15408 STANDARD................................................. 1
3.
DATA TO BE PROTECTED ..................................................................................... 1
4.
PRECAUTIONS FOR OPERATION CONTROL...................................................... 2
5.
CHECKING THE FIRMWARE VERSION/REVISION NUMBER............................. 4
5.1 6.
Security authentication firmware version number................................................. 4 Accessing the Service Mode................................................................................... 4
6.1 7.
Access method to the Service Mode .................................................................... 4 ENHANCING THE SECURITY FUNCTION............................................................ 6
7.1
Security enhancing procedure.............................................................................. 6
7.1.1
Making and checking the service settings .................................................... 6
7.1.2
Requests to the ....................................................................... 6
7.1.3
Functions whose settings are changed by Enhanced Security Mode........... 7
SERVICE MODE FUNCTIONS............................................................................... 8
8. 8.1
Firmware Version.................................................................................................. 8
8.1.1 8.2
8.2.1 8.3
Initializing the .......................................................... 9
CE function......................................................................................... 10
8.3.1 9.
Checking the firmware version number......................................................... 8
Clear function............................................................................ 9
Setting the CE ............................................................................. 10
DATA ERASE FUNCTION ..................................................................................... 12
9.1
Data erase procedure ......................................................................................... 12
9.2
Items to be cleared by data erase function......................................................... 12
10.
FIRMWARE REWRITING ..................................................................................... 14
10.1 Checking the current firmware version ............................................................... 14 10.2 Firmware upgrading procedure by USB memory device .................................... 14 10.2.1
Preparations for firmware upgrading........................................................... 14
10.3 Firmware upgrading procedure by updater......................................................... 16
11.
10.3.1
Updating method......................................................................................... 16
10.3.2
Checking the version after the firmware update.......................................... 26
10.3.3
Restore All .................................................................................................. 26
LOADABLE DRIVER ING ................................................................ 27
11.1 Outline ................................................................................................................ 27 11.2 ing procedure...................................................................................... 27 11.2.1
Preparations for loadable driver ing ............................................. 27
i
Security Function
1.
Security Function Ver. 1.02 Feb. 2012 11.2.2
How to loadable driver data........................................................ 27
Security Function
bizhub 42/36
11.3 Deleting procedure ............................................................................................. 29
ii
Security Function Ver. 1.02 Feb. 2012
OVERVIEW
This Service Manual contains the essential operating procedures and precautions for using the security functions.
2.
COMPLIANCE WITH THE ISO15408 STANDARD
bizhub 42/36
1.
1. OVERVIEW
3.
DATA TO BE PROTECTED
The underlying concept of this machine toward security is “to protect data that can be disclosed against the intention of s.” The following types of image files that have been stored in the machine and made available for use by its s are protected while the machine is being used. • Image files stored in the HDD by secured job • Image files stored as “Personal” in the HDD by scan to HDD • Image files stored in the HDD by ID & Print The following data are also counted among the assets to be protected: • - s and secured job s stored in the HDD and CE s, s and SNMP s stored in the NVRAM • identification information - identification information stored in the HDD • IC card information - IC card information stored in the HDD • Trusted channel setting data - Trusted channel setting data stored in the NVRAM • External server identification setting data - External server identification setting data stored in the HDD The following types of data stored in the HDD, SSD, and NVRAM are protected when use of a leased machine is terminated at the end of the leasing contract or the machine is to be discarded, or when the HDD is stolen. • Image files stored in the HDD by secured job • Image files stored as “Personal” in the HDD by scan to HDD • Image files stored in the HDD by ID & Print • Image files of a job in the queue • Any image files stored in the HDD data space and SSD data space other than the Secured Job files, files stored as “Personal” by Scan to HDD, and ID & Print files • Data files left in the HDD data space and SSD data space, used as image files and not deleted through the general deletion operation • Temporary data files generated during print image file processing • Destination recipient data (e-mail address, telephone number) • s, SNMP s, trusted channel setting data, and machine setting data stored in the NVRAM • identification information, IC card information, s, secured job s, and external server identification setting data stored in the HDD * If the HDD is stolen, data is protected by the HDD encryption function, however, the HDD encryption function is not governed by authentication by the ISO15408.
1
Security Function
This machine has an enhanced security function: Set the Enhanced Security Mode, in Settings, to [ON]. The security functions offered by this machine comply with ISO15408/IEC15408 (level: EAL3).
4. PRECAUTIONS FOR OPERATION CONTROL
Security Function Ver. 1.02 Feb. 2012
bizhub 42/36
This machine offers the SSL function as a data protection method to ensure confidentiality of images (scan to HDD files) transmitted and received over the network. When transmitting and receiving highly confidential image data (secured job files, scan to HDD files, ID & Print files) among different pieces of IT equipment within an office LAN, the machine carries out communications with the correct destination via reliable paths or through anti-sniffing measures, assuming an office environment that responds to most stringent security requirements.
Security Function
4.
PRECAUTIONS FOR OPERATION CONTROL
A. Requirements of the service engineer The service engineer should take full responsibility for controlling the machine during his or her procedures for setting up and servicing the machine so that no improper operations are performed.
2
IC card reader AU-201/SCL-010
Felica IDm
AU-201/SCL-010
HID Prox
AU-201H * North America only
D. Machine maintenance control When the service engineer performs maintenance service jobs for the machine, he or she should check the firmware version number, and make sure that the system has not been altered. E. Miscellaneous The service engineer should explain to the of the machine that the languages, in which the contents of the ’s Guide [Security Operations] have been evaluated, are Japanese and English. He or she should also explain the way how to get the manual in the language, in which it is evaluated. In addition, the service engineer should promptly provide the version of the ’s Guide that has been evaluated for the whenever the needs one.
3
bizhub 42/36
4. PRECAUTIONS FOR OPERATION CONTROL
Security Function
Security Function Ver. 1.02 Feb. 2012
5. CHECKING THE FIRMWARE VERSION/REVISION NUMBER Security Function Ver. 1.02
bizhub 42/36
5.
CHECKING THE FIRMWARE VERSION/REVISION NUMBER
Security Function
• Confirm the need to enhance or not to enhance the security function with the of this machine: If wants to enhance, check the firmware version/revision number. • If the firmware version/revision number of this machine is different from numbers shown in the list below, it will be necessary to re-write to the following certified firmware version/ revision. Refer to P.14 for the method of how to re-write the firmware.
5.1
Security authentication firmware version number Firmware type
Version
Controller
A3EW30G
Revision 0224
Boot
A3EW99G
0010000
Refer to P.8 for the method of checking the firmware version.
6. 6.1
Accessing the Service Mode Access method to the Service Mode
1. Press the Utility/Counter key. 2. Touch [Meter Count]. 3. Press the following keys in this order: Stop00 Stop 0 1 4. Touch [], and enter the CE using the screen keyboard or the 10-key pad.
A3EWS1E034DA
NOTE • The CE entered is displayed as “✱.” • NEVER forget the CE . When forgetting the CE , call responsible person of KMBT. If the CE is forgotten, replacement of the MFP board will initialize the setting values and turn “OFF” the Enhanced Security mode. Be sure to have the set the Enhanced Security mode back to “ON” again.
4
• Each time a wrong CE is entered, the CE illegal access count is incremented by one. When the access to the Service Mode has been successful with the correct CE entered, the CE illegal access count is cleared and reset to 0. • When “ON” is set for Enhanced Security Mode, access to the Service Mode through the CE is restricted by up to 3 times. If the CE illegal access count exceeds 3 times, the machine is then set into an access lock state. It is necessary for unlocking the access lock state to restart the machine with main power switch OFF and ON. (The illegal access count value is cleared by machine’s restart) • To go from the CE screen to another, enter the CE and call the Service Mode menu to the screen. Then, quit the Service Mode. 5. Touch [OK] twice. 6. The Service Mode screen will appear.
A3EWS1E035DA
NOTE • If you leave the site with the Service Mode setting screen being displayed, unauthorized changes could occur for any set values. When you finish the setting of Service Mode, or if you have to leave the site by necessity when the Service Mode has been set, be sure to press [Close] and log-out from the Service Mode.
5
bizhub 42/36
6. Accessing the Service Mode
Security Function
Security Function Ver. 1.02 Feb. 2012
7. ENHANCING THE SECURITY FUNCTION
bizhub 42/36
7.
Security Function Ver. 1.02 Feb. 2012
ENHANCING THE SECURITY FUNCTION
• Perform the Enhanced Security Mode procedures while making checks of installation checklist in ’s Guide [Security Operations].
7.1 7.1.1
Security enhancing procedure Making and checking the service settings
Security Function
• Resetting the CE to meet the requirements of the rules before executing the security enhancing procedure. See P.10 7.1.2
Requests to the
• When making the Enhance Security setting, the settings must be made. The must perform or check the following settings. Item
6
Setting/Check
Default Setting
Rules
Set to ON.
Check that the meets the requirements of the Rules.
12345678
Authentication
Set to either [Device] or [External Server] (Active Directory).
OFF
Certificate for SSL
the self-signed certificate for SSL communications.
No setting
Enhanced Security Mode
Set to ON.
OFF
OFF
Security Function Ver. 1.02 Feb. 2012
Functions whose settings are changed by Enhanced Security Mode
• Setting the Enhanced Security Mode to [ON] changes the setting values of the following functions. Default Setting
Public Access • To permit use by a public having no registration.
Restrict
Restrict (not to be changed)
Print without Authentication • To allow or restrict printing which and are not specified.
Restrict
Restrict (not to be changed)
List Display Setting • To display the list key for names on authentication screen.
OFF
OFF (not to be changed)
SSL • To set whether to encrypt access by SSL.
OFF
ON (not to be changed)
AES/3DES (not to be changed to one containing strength lower than AES/3DES)
SSL Encryption Strength • To set the SSL encryption strength for the SSL encryption communication.
AES-256,3DES, RC4-128,DES, RC4-40
FTP Server • To set whether to use FTP server function or not.
Enable
Selection can be made between [Enable] and [Disable]
Read/Write enable
Only Read is enabled (not to be changed)
SNMPv1/v2c • To use when changing Write setting. SNMP v3 Security Level and auth-/priv- • To set the security level for the Reading/ Writing Authority which is used for SNMP v3. Change Via Network (Pagescope Web Connection)
Auth-/ Priv-
Enabled
Network firmware update protect
Invalid
CS Remote Care
Usable
Telnet
OFF
Security Function
When Enhanced Security mode is set to [ON]
Function Name
bizhub 42/36
7.1.3
7. ENHANCING THE SECURITY FUNCTION
The security level can be selected from among [auth] or [auth-/priv-]. An 8-digit or more auth- or priv- can both be set. Restrict (not to be changed) Valid Remote device setting disabled OFF (not to be changed)
NOTE • Turning ON the Enhanced Security Mode does not enable the ID & Print function. To protect image files, be sure to have the enable ID & Print function manually.
7
8. SERVICE MODE FUNCTIONS
bizhub 42/36
8.
Security Function Ver. 1.02 Feb. 2012
SERVICE MODE FUNCTIONS
• The Service Mode is used to set various service functions.
8.1
Firmware Version
Security Function
• This function is used to display the firmware version information of the machine. When the Enhanced Security Mode settings are to be made, this function should be used to check the firmware version/revision number of the “Controller” and “Boot” against the security authentication version/revision. 8.1.1
Checking the firmware version number
1. Call the Service Mode to the screen. See P.4 2. Touch [Firmware Version]. 3. Touch [Controller F/W]. 4. Check the Firmware version/revision number of “Controller” using firmware version/ revision number.
A3EW30G0022405
Version Revision
A3EWS1E036DA
5. Touch [OK]. 6. Touch [Boot F/W]. 7. Check the Firmware version/revision number of “Boot” using firmware version/revision number.
A3EW99G0010000
Version Revision
A3EWS1E037DA
8
Security Function Ver. 1.02 Feb. 2012
Clear function bizhub 42/36
8.2
8. SERVICE MODE FUNCTIONS
• This function is used when initializing the . It is therefore used when the forgets the or etc. NOTE • If the is initialized by the service engineer, never fail to have the change the accordingly. Initializing the
Security Function
8.2.1
1. Call the Service Mode to the screen. See P.4 2. Display [002/005] screen of the Service Mode. 3. Touch [Clear ].
A3EWS1E038DA
4. Touch [OK] on the confirmation screen.
A3EWS1E039DA
5. Get the of the machine to access the Settings using the default . Then, have him or her select the following functions in this order and change the default : [ Settings] [Security Settings] [ ].
9
8. SERVICE MODE FUNCTIONS
Security Function
bizhub 42/36
8.3
Security Function Ver. 1.02 Feb. 2012
CE function
• The CE function is used to change the CE to call the Service Mode to the screen. 8.3.1
Setting the CE
1. Call the Service Mode to the screen. See P.4 2. Display [003/005] screen of the Service Mode. 3. Touch [CE ].
A3EWS1E068DA
4. Touch [] of the upper section, and enter the 8-digit new CE using the screen key board or the 10-key pad.
A3EWS1E040DA
5. Touch [] of the lower section, and reenter the 8-digit new CE using the screen key board or the 10-key pad.
10
NOTE • If Rules of Security Settings available from [ Settings] [Security Details] is set to “ON,” the machine does not accept any new that contains only the same character, consists of less than 8 digits, or that is the same as the previous . • In the CE change display, enter the same CE to the entry areas (upper and lower). • For the CE , set a value other than the default. • Quitting the Service Mode after the new has been set will validate the setting of the new . • NEVER forget the CE . When forgetting the CE , call responsible person of KMBT. If the CE is forgotten, replacement of the MFP board will initialize the setting values and turn “OFF” the Enhanced Security mode. Be sure to have the set the Enhanced Security mode back to “ON” again. NOTE • If there is a mismatch in the CE between that typed first and that just typed, the machine displays a message telling that the CE entered is wrong. In this case, set the CE once again. Characters and symbols to be used for the CE • Numeric characters: 0 to 9 • Alpha characters: upper and lower case letters • Symbols: !, #, $, %, &, ', (, ), *, ,, -, ., /, :, ;, <, =, >, ?, @, [,\ , ], ^, _, `, {, |, }, ., +, SPACE Selectable from among a total of 94 characters
11
bizhub 42/36
8. SERVICE MODE FUNCTIONS
Security Function
Security Function Ver. 1.02 Feb. 2012
9. DATA ERASE FUNCTION
bizhub 42/36
9.
DATA ERASE FUNCTION
• The data erase function (Overwrite All Data/SSD Low-level Format/Restore All) overwrites and deletes all data saved in all areas of the HDD and data areas of the SSD, and resets all s stored in NVRAM to the default settings. It can be used when the machine is to be discarded or use of a leased machine is terminated at the end of the leasing contract, thereby properly blocking leaks of data.
9.1 Security Function
Security Function Ver. 1.02 Feb. 2012
Data erase procedure
• For the details of data erase procedure, see the ’s Guide Security Operations.
9.2
Items to be cleared by data erase function
• If the of the machine executes data erase function by mistake, all items that have been cleared must be set or ed again. (For the items to be set in Settings, be sure to have the perform the setting and registration procedures again.) Items of data cleared
Description
Method
Enhanced Security Mode Set to [OFF]
Overwrite All Data SSD Low-level Format Restore All
registration data
Deletes all -related data that has been ed
Overwrite All Data
Secured Job / file
Deletes all Secured Job-related information and files saved
Overwrite All Data
Scan to HDD file
Delete all files stored as Personal by Scan to HDD
Overwrite All Data
ID & Print file
Deletes all ID & Print files
Overwrite All Data
Image files
• Image files saved other than the Secured Job files, files stored as Personal by Scan to HDD, and ID & Print files • Image files of jobs in job queue state • Remainder data files, used as image files and not deleted through only the general deletion operation • Temporary data files generated during print image file processing
Overwrite All Data SSD Low-level Format
Destination recipient data Deletes all destination recipient data including files e-mail addresses and telephone numbers
SSD Low-level Format
Clears the currently set , resetting it to the factory setting
Restore All
SNMP
Clears the currently set , resetting it to the factory setting (MAC address)
Restore All
SSL certificate
Deletes the currently set SSL certificate
Overwrite All Data SSD Low-level Format Restore All
Network Setting
Clears the currently set network settings (DNS Restore All Server setting, IP Address setting, SMTP Server setting, NetWare Setting, NetBIOS setting and AppleTalk Printer Name setting), resetting it to the factory setting
12
Description
Method
Machine setting data
Deletes the machine setting data
Restore All
Trusted channel setting data
Deletes the trusted channel setting data
Restore All
External server identifica- Deletes the external server identification tion setting data setting data
bizhub 42/36
Items of data cleared
9. DATA ERASE FUNCTION
Overwrite All Data
Security Function
Security Function Ver. 1.02 Feb. 2012
13
10. FIRMWARE REWRITING
Security Function Ver. 1.02 Feb. 2012
10.1 Checking the current firmware version 1. Call the Service Mode to the screen. See P.4 2. Touch [Firmware Version]. 3. Select the firmware to be updated and check the current version. See P.8
Security Function
bizhub 42/36
10. FIRMWARE REWRITING
A3EWS1E041DA
10.2 Firmware upgrading procedure by USB memory device 10.2.1
Preparations for firmware upgrading
A. System requirements • PC equipped with a USB port • USB memory device B. 1. 2. 3. 4.
Saving the firmware data into the USB memory device Save the firmware data in appropriate space in the PC. Connect the USB memory device to the PC. Create a “firmware” folder immediately under the drive of the USB memory device. Copy the firmware data (***.exe) in the firmware folder created in step 3.
NOTE • Be sure to save the firmware data in “drive:/firmware/***.exe.” • The MFP can display up to 20 files of firmware data during upgrading.
14
Security Function Ver. 1.02 Feb. 2012
10. FIRMWARE REWRITING
How to write firmware data Turn the main power switch ON. Connect the USB memory device to the MFP. Call the Service Mode to the screen. See P.4 4. Display [002/006] screen of the Service Mode. 5. Touch [Firmware Update].
Security Function
bizhub 42/36
C. 1. 2. 3.
A3EWS1E042DA
6. A list of firmware data in the USB memory device will be displayed.
A3EWS1E043DA
NOTE • Before upgrading firmware, use [Details] to check that the firmware data is correct.
A3EWS1E044DA
7. Touch [Close].
15
Security Function Ver. 1.02 Feb. 2012
8. Select the specific firmware data to be upgraded and press [Execute]. 9. Touch [OK].
Security Function
bizhub 42/36
10. FIRMWARE REWRITING
A3EWS1E045DA
10. The firmware upgrading procedure starts. NOTE • NEVER disconnect the USB memory device from the MFP during the firmware upgrading procedure. 11. The MFP is automatically restarted as soon as the firmware is upgraded correctly.
10.3 Firmware upgrading procedure by updater 10.3.1
Updating method
• To update the firmware, perform “Firmware Updater.” A. System requirements U OS
Available hard disk space
16
• More than the recommended environment by operating system (PC / AT compatible machine) • Microsoft Windows XP Home Edition/Professional, Windows 2000, Windows Vista Home Basic/Home /Business/ Enterprise/Ultimate • Sufficient disk free space is required
Memory
• More than the recommended memory capacity by operating system • Sufficient memory resources for operating system and application are required
Interface
• 10Base-T/100Base-TX/1000Base-T Ethernet • USB 2.0 (High Speed) compliant
10. FIRMWARE REWRITING
B. Connection for Windows (1) Starting the firmware updater NOTE • Before starting the firmware updater, turn ON the main power switch of the MFP, and make sure that it is correctly connected.
bizhub 42/36
Security Function Ver. 1.02 Feb. 2012
Security Function
1. the firmware updater. 2. Double-click “xxxxxxxxxxxx.exe.” 3. The MFP name and firmware version are displayed. Click the [Next].
XXXXXXX
XXXXXXX
A3EWS1E071DA
4. The license agreement is displayed. Select “I agree”, and then click the [Next].
A3EWS1E072DA
17
bizhub 42/36
10. FIRMWARE REWRITING
Security Function Ver. 1.02 Feb. 2012
5. The list of printer drivers is displayed. Select the appropriate connection for the environment where the MFP is being used.
Security Function
XXXXXXX XXXXXXX
A3EWS1E073DA
• For a network connection: Select “Network port.” See P.19 • For a local connection: Select “Local port.” See P.22 • When specifying the IP address of the printer: Select “Printer IP address.” See P.23 NOTE • If you select “Network port” or “Local port”, make sure that the printer driver has been installed. • If you select “Printer IP address”, the firmware can be updated even if a printer driver is not already installed.
18
10. FIRMWARE REWRITING
Security Function
(2) For a network connection 1. When “Network port” is selected, a list of printer drivers for the network port appears. 2. Select the printer driver, and then click the [Next].
bizhub 42/36
Security Function Ver. 1.02 Feb. 2012
A3EWS1E074DA
3. A message appears, requesting confirmation to update the firmware. Click the [Start] to begin transferring the firmware. NOTE • Do not turn off the MFP while its firmware is being updated.
A3EWS1E075DA
19
10. FIRMWARE REWRITING
Security Function Ver. 1.02 Feb. 2012
Security Function
bizhub 42/36
4. The result of the firmware transfer is displayed. Click the [Exit].
A3EWS1E076DA
5. If the firmware was successfully updated, the MFP will automatically restart.
20
Security Function Ver. 1.02 Feb. 2012
10. FIRMWARE REWRITING
NOTE • If spooling fails, data may remain in the printer spooler. Delete this data, and then try again.
bizhub 42/36
Security Function
1. If spooling of the data fails, the following message appears. 2. Click [OK].
A3EWS1E077DA
3. Check that the printer is ready and that it is correctly connected, and then click the [Update again].
A3EWS1E078DA
21
Security Function Ver. 1.02 Feb. 2012
(3) For a local connection 1. When “Local port” is selected, a list of printer drivers for the local port appears. 2. Select the printer driver, and then click the [Next].
Security Function
bizhub 42/36
10. FIRMWARE REWRITING
A3EWS1E079DA
3. A message appears, requesting confirmation to update the firmware. Click the [Start] to begin transferring the firmware. NOTE • Do not turn off the MFP while its firmware is being updated.
A3EWS1E080DA
22
Security Function Ver. 1.02 Feb. 2012
10. FIRMWARE REWRITING
Security Function
bizhub 42/36
4. The result of the firmware transfer is displayed. Click the [Exit].
A3EWS1E081DA
5. If the firmware was successfully updated, the MFP will automatically restart.
A3EWS1E082DA
23
Security Function Ver. 1.02 Feb. 2012
3. A message appears, requesting confirmation to update the firmware. Click the [Start] to begin transferring the firmware. NOTE • Do not turn off the MFP while its firmware is being updated.
Security Function
bizhub 42/36
10. FIRMWARE REWRITING
A3EWS1E083DA
4. The result of the firmware transfer is displayed. Click the [Exit].
A3EWS1E084DA
5. If the firmware was successfully updated, the MFP will automatically restart.
24
10. FIRMWARE REWRITING
bizhub 42/36
A3EWS1E085DA
3. Check that the MFP is ready and that it is correctly connected, and then click the [Update again].
A3EWS1E086DA
25
Security Function
Security Function Ver. 1.02 Feb. 2012
10. FIRMWARE REWRITING
Checking the version after the firmware update
1. Call the Service Mode to the screen. See P.4 2. Touch [Firmware Version]. 3. Select the firmware to be updated and check the current version.
Security Function
bizhub 42/36
10.3.2
Security Function Ver. 1.02 Feb. 2012
A3EWS1E041DA
10.3.3
Restore All
• After rewriting the firmware, be sure to have the execute the Restore All function.
26
Security Function Ver. 1.02 Feb. 2012
11. LOADABLE DRIVER ING
bizhub 42/36
11. LOADABLE DRIVER ING 11.1 Outline • When using the machine with authentication by the IC card, the loadable driver must be ed to the machine to use the IC card reader.
11.2 ing procedure Preparations for loadable driver ing Security Function
11.2.1
A. System requirements • PC equipped with a USB port • USB memory device B. 1. 2. 3. 4.
Saving the loadable driver data into the USB memory device Save the loadable driver data in appropriate space in the PC. Connect the USB memory device to the PC. Create a “firmware” folder immediately under the drive of the USB memory device. Copy the loadable driver (***.bin) in the firmware folder created in step 3.
NOTE • Be sure to save the firmware data in “drive:/firmware/***.bin.” 11.2.2
How to loadable driver data
1. Turn the main power switch ON. 2. Connect the USB memory device to the printer. 3. Call the Service Mode to the screen. See P.4 4. Display [005/006] screen of the Service Mode.
A3EWS1E062DA
5. Touch [Loadable Driver ].
27
11. LOADABLE DRIVER ING
Security Function Ver. 1.02 Feb. 2012
Security Function
bizhub 42/36
6. The loadable driver data list in the USB memory device will be displayed.
A3EWS1E063DA
7. Select the loadable driver data to be ed, and touch [Execute]. 8. Touch [OK].
A3EWS1E064DA
9. The loadable driver ing procedure starts. NOTE • NEVER disconnect the USB memory device from the MFP during the loadable driver ing procedure. 10. Follow the message on the control to reboot the MFP.
A3EWS1E065DA
28
Security Function Ver. 1.02 Feb. 2012
11. LOADABLE DRIVER ING
bizhub 42/36
11.3 Deleting procedure
Security Function
1. Turn the main power switch ON. 2. Call the Service Mode to the screen. See P.4 3. Display [004/006] screen of the Service Mode.
A3EWS1E070DA
4. Touch [Loadable Driver Information]. 5. Touch [Delete].
A3EWS1E066DA
6. Select [Yes] on the confirmation screen and touch [OK]. 7. Follow the message on the control to reboot the MFP.
29
Security Function
bizhub 42/36
11. LOADABLE DRIVER ING
Blank Page
30
Security Function Ver. 1.02 Feb. 2012
© 2011 KONICA MINOLTA BUSINESS TECHNOLOGIES, INC. Use of this manual should be strictly supervised to avoid disclosure of confidential information.
Printed in Japan DDA3EW-A-SE1
More Documents from "Hasan Saputra" 5u2g10
Bizhub36_42securityfunctionsvcmanual 2l2s3r
November 2022 0
Service Manual Bizhub 501 611c16
April 2020 30
Service Manual 626h5u
October 2022 0
Kebijakan Igd 46849
July 2020 0
Antena Gsm 57x4g
February 2021 0