User manual KONICA MINOLTA BIZHUB PRO C6501

[. . . ] Please refer to this guide for safety information, turning on/off the machine, paper supply, dealing with machine trouble such as paper jam, and copy operation available on the machine. * bizhub PRO C6501 User's Guide - POD Administrator's Reference This guide provides you with detailed information about the machine management and how to customize the machine according to your daily use. Please refer to this guide for a setup and management of the machine including registration of copy paper and tray setting. * bizhub PRO C6501 User's Guide - Security (This book) This guide describes the security functions. [. . . ] Clearly state in the service contract that the service representative will not engage in any fraudulent actions. - Secure LAN Be sure to connect the machine to the LAN protected by firewall in order to prevent access from an external network. 2 bizhub PRO C6501 Security Strengthen Mode 2 2 2. 1 Security Strengthen Mode Description of Security Strengthen mode The following items will have enhanced security. - Machine NIC setting While the Security Strengthen mode is activated, available function is limited to CS Remote Care. - External access prohibited No access is allowed over telephone lines other than CS Remote Care. - Create, save and analyze an audit log A history of security function operations will be created and saved. Date and time, information identifying the person who made the operation, details of the operation, and results of the operation will be saved, enabling analysis of unauthorized access. - Machine Administrator authentication A service representative will set up an authentication data for a machine administrator. The machine administrator must input a password to gain authorized access. - Machine Administrator Setting mode If the Machine Administrator Setting mode has been entered by successful administrator authentication, the setting change of various machine functions will be available on the machine. Be sure to exit the Machine Administrator Setting mode if you leave in front of the machine while using the Machine Administrator Setting mode. bizhub PRO C6501 3 2 2. 2 Security Strengthen Mode Data protected by Security Strengthen mode The data protected by Security Strengthen mode is the document data stored in the machine. To turn Security Strengthen mode ON/OFF The machine administrator can turn Security Strengthen mode ON/OFF. If Security Strengthen mode is OFF, data can potentially be accessed, so be careful. 4 bizhub PRO C6501 Machine Administrator Security Functions 3 3 Machine Administrator Security Functions The machine administrator turns Security Strengthen mode ON/OFF. To do so, an 8-digit CE authentication password and Machine Administrator password must be set for the machine. Ask your authorized service representative to set up a Machine Administrator password. To change this password, the machine administrator himself should operate the procedure described in the User's Guide of POD Administrator's reference. To protect data in the machine from access and tampering, please be sure to designate a machine administrator and use Security Strengthen mode. 2 Reminder Do not use your name, birthday, employee number, etc. Be careful not to inform anybody else of the password, or not to let it known to others. bizhub PRO C6501 5 3 3. 1 Machine Administrator Security Functions Turn Security Strengthen mode ON/OFF The following is an explanation of how to turn Security Strengthen mode ON/OFF. 2 Note Passwords are case sensitive. If a wrong password or fewer than 8 alphanumerical characters are entered and the [OK] key is touched, the warning message "Password does not match" will appear, and no key will work for five seconds. If authentication fails, the information will be saved in the audit log. Procedure 1 2 Press [Utility/Counter] on the control panel to display the Utility Screen. Setting]. The Input Password Screen will be displayed. 6 bizhub PRO C6501 Machine Administrator Security Functions 3 3 Enter the password. Use the touch screen keypad to enter the 8-digit Machine Administrator password, then touch [OK]. The Machine Administrator Setting Menu Screen will be displayed. 4 Touch [10 Security Setting]. bizhub PRO C6501 7 3 5 Machine Administrator Security Functions Touch [04 Security Strengthen Set] 6 Turn Security Strengthen mode ON or OFF If you want to turn Security Strengthen mode ON, touch [On] to highlight it. [. . . ] For password authentication, success or failure will be indicated as OK and NG. For operations without password authentication, all log entries will be indicated as OK. 18 bizhub PRO C6501 Machine Administrator Security Functions 3 3. 5 Table of items saved in audit log No. 1 2 3 4 5 6 13 Operation CE authentication Manager authentication Set/change Security Strengthen mode Print audit log Change/register CE password Change/register Machine Administrator password Change HDD lock password ID CE ID Machine Administrator ID Machine Administrator ID Machine Administrator ID CE ID CE ID/ Machine Administrator ID Machine Administrator ID Stored action 01 02 03 04 05 06 19 Result OK/NG OK/NG OK OK OK OK OK The purpose of analyzing the audit log is to understand the following and implement countermeasures: Whether or not data was accessed or tampered with Subject of attack Details of attack Results of attack For specific analysis methods, see the next page. bizhub PRO C6501 19 3 Machine Administrator Security Functions Specify unauthorized actions: password authentication If logs have NG as the result of password authentication (action: 01, 02), items protected by passwords may have been attacked. - Failed password authentication (NG) log entries specify who made the operation, and show if unauthorized actions were made when password authentication failed. [. . . ]