Konica Minolta 920 manual

Security User’ s Guide • Security Functions • Enhanced Security Mode • Protect and Delete Data After Use • User Authentication in Enhanced Security Mode • HDD Store Function in Enhanced Security Mode • Administrator Security Functions[...]

[...]

bizhub PRO 920 Security User’s Guide The Control Software version is as follows. (This software consists of Image control program and Controller control pro- gram.) Image control program (Image Control l1) version : 10-0000 or later Controller control program (IP Cont rol P) version: 10-0000 or later About the Firmware version display function: T[...]

ACKNOWLEDGEMENTS: - KONICA MINOLTA, KONICA MINOLTA Logo and the essentials of imag- ing are registered trademarks or tradema rks of KONICA MINOLTA HOLDINGS, IN C. - bizhub PRO is a registered trademark or trademark of KONICA MINOLTA BUSINESS TECHNOLOGIES, INC. Copyright © 2005 KONICA MINOLTA BUSINESS TECHNOLOGIES, Inc. EXEMPTION - No part of this [...]

Composition of User’s Guide This machine is provided with the follo wing user’s guides as printed matters. *bizhub PRO 920 User’s Guide - Copier This guide describes an outline of the machine and copy operat ions. Please refer to this guid e for safety information, tu rning on/off the machine, paper supply, dealing with machine trouble such a[...]

[...]

Contents 1 Security Functions ..... .......................................... ............. 1 2 Enhanced Security Mode ............. .............. ............ .......... 3 2.1 Des cription of Enhanced Security mode .................. ............ .............. 3 2.2 Data protected by Enhanced Securit y mode ................. .............. ....[...]

[...]

Security Functions 1 bizhub PRO 920 1 1 Security Functions The bizhub PRO 920 device has two security modes. Normal mode Use this mode if the machine is used by a single person and there is a low possibility of illicit access and operations. This is the default mode when shipped from the factory. To use regu lar mode, please se e the use’s guide [...]

1 Security Functions 2 bizhub PRO 920 Creating a secure environment For security, we recommend that supe rvisors and an administrator use En- hanced Security mode and establish a n environment as follows. - Where to set up the device Set up the device in a place wh ere only designated personnel can oper- ate it. - User training The administrator mu[...]

Enhanced Se curity Mode 2 bizhub PRO 920 3 2 Enhanced Security Mode 2.1 Description of Enhanced Security mode The following items will have enha nced security. - Protect and delete used data in memory and on the HDD There are two kinds of image data th at will be saved in memory and on the HDD: AHA compressed da ta an d uncompressed data (TIFF and [...]

2 Enhanced Security Mode 4 bizhub PRO 920 - Administrator authentication A service representative will set up an authentication data for an admin- istrator. The administrator must input a passwo rd to gain authorized access. Onl y one authentication string can be registe red per machine. - Administrator Setting mode If the Administrator Setting mod[...]

Enhanced Se curity Mode 2 bizhub PRO 920 5 2.3 Display when Enhanced Security mode is ON The Administrator can turn En hanced Security mode ON/OFF. ! Detail To turn Enhanced Security mode ON /OFF, see Security Administrator Operation on page 44. When Enhanced Securi ty mode is ON, the enhanced security icon [ ] will appear on the Copy /Box/Scanner [...]

2 Enhanced Security Mode 6 bizhub PRO 920 Scanner Basic Screen Check the Enhanced Se curity icon on each Basic Screen to see if Enhanced Security mode is ON or OFF.[...]

Protect and Delete Data After Use 3 bizhub PRO 920 7 3 Protect and Delete Data After Use Data from each mode (copy / scan / printer) will be temporarily saved in memory or on the HDD, and it will be deleted unless it is moved to a B ox. Data is compressed using a special me thod, so it cannot be decompressed externally. When deleting compressed dat[...]

4 User Authentication in Enhan ced Security Mode 8 bizhub PRO 920 4 User Authentication in Enhan ced Secu- rity Mode 4.1 Description of user authentication In Enhanced Security mode, s etting up passwo rd conditions will be tougher to improve security. The administrato r should set up a user name and pass- word required for u ser authentication, as[...]

User Authentication in Enhanc ed Security Mode 4 bizhub PRO 920 9 ! Detail When a user acce sses a Box for which a password has bee n set in the HDD, all authentication opera tions with password will be saved in an au- dit log. ! Detail Initially, the user auth entication is not available on the machine. To acti- vate this function, the distributio[...]

4 User Authentication in Enhan ced Security Mode 10 bizhub PRO 920 2 Touch [6 Administrator Setting]. The Input Administrator Passwo rd Screen will be displayed. 3 Enter the password. Use the touch screen keypad to en ter the 8-digit Administrator pass- word, then touch [OK]. The Administrator Setting Screen will be displayed. 4 Touch [3 User Authe[...]

User Authentication in Enhanc ed Security Mode 4 bizhub PRO 920 11 5 Touch [3 User Authentication Settin g]. The User Authentica tion Setting Screen will be displayed. 6 Touch [New Register]. The New User Registration Screen will be displayed.[...]

4 User Authentication in Enhan ced Security Mode 12 bizhub PRO 920 7 Touch [User Number], [U ser Name], [Password], or [Account Name] to display each subsequent screen, then make the desired setting. – To enter the User Number, touch [User Num ber] on the New User Registration Screen. Use the scre en keypad on the popup menu to enter the desired [...]

User Authentication in Enhanc ed Security Mode 4 bizhub PRO 920 13 – To enter the User Name, touch [U ser Name] on the New User Reg- istration Screen. Enter the desired user name from t he screen key- pad. Touch [OK] to return to th e New User Registration Screen. – To enter the Password, touch [Pa ssword] on the New User Regis- tration Screen.[...]

4 User Authentication in Enhan ced Security Mode 14 bizhub PRO 920 8 Specify the usable function. To prohibit a specific fu nction, touc h the key on the New User Re gis- tration Screen to release the h ighlight. 9 Touch [OK]. When settings are completed, touch [O K] on the New User Registration Screen. The User Authentica tion Setting Scree n will[...]

User Authentication in Enhanc ed Security Mode 4 bizhub PRO 920 15 2 Touch [6 Administrator Setting]. The Input Administrator Passwo rd Screen will be displayed. 3 Enter the password. Use the touch screen keypad to en ter the 8-digit Administrator pass- word, then touch [OK]. The Administrator Setting Screen will be displayed. 4 Touch [3 User Authe[...]

4 User Authentication in Enhan ced Security Mode 16 bizhub PRO 920 5 Touch [3 User Authentication Settin g]. The User Authentica tion Setting Scree n will be displayed. 6 Touch the user name key to be changed. The User Count Screen will be displayed. 7 Touch [Change]. The Change Registered User Data Scre en will be displayed.[...]

User Authentication in Enhanc ed Security Mode 4 bizhub PRO 920 17 8 Touch [User Name], [Password] or [Accoun t Name] to display each subsequent screen, then make the desired setting change. – To change the user name, touch [U ser Name] on the User Registra- tion Screen. Ent er the desir ed user name from the screen keypad. Touch [OK] to return t[...]

4 User Authentication in Enhan ced Security Mode 18 bizhub PRO 920 – To change the account name, tou ch [Account Name] on the User Registration Screen. Touch the desi red section key to highlight it. Touch [OK] to return to the Change Registered User Data Scre en. 9 Specify the usable function. To prohibit a specific fu nction, touc h the key on [...]

User Authentication in Enhanc ed Security Mode 4 bizhub PRO 920 19 2 Touch [6 Administrator Setting]. The Input Administrator Passwo rd Screen will be displayed. 3 Enter the password. Use the touch screen keypad to en ter the 8-digit Administrator pass- word, then touch [OK]. The Administrator Setting Screen will be displayed. 4 Touch [3 User Authe[...]

4 User Authentication in Enhan ced Security Mode 20 bizhub PRO 920 5 Touch [3 User Authentication Settin g]. The User Authentica tion Setting Scree n will be displayed. 6 Touch the user name key to be delete d. The User Count Screen will be displayed. 7 Touch [Delete]. The popup menu will be displayed to co nfirm that the select ed user will be del[...]

User Authentication in Enhanc ed Security Mode 4 bizhub PRO 920 21 8 Touch [Yes]. The selected user name and password will be deleted. Also the person- al folder that belongs to the user will be deleted toget her. 4.5 To change password by user General users can change the pa ssword that has already been set for user authentication. We recommend th[...]

4 User Authentication in Enhan ced Security Mode 22 bizhub PRO 920 Procedure 1 Press [Utility/Counter] on the control panel. The Utility Screen will be dis- played. 2 Touch [1 System Setting]. The System Setting Screen will be displayed. 3 Touch [7 Change User Password]. The User Authentica tion Screen will be displayed.[...]

User Authentication in Enhanc ed Security Mode 4 bizhub PRO 920 23 4 Enter your us er name. – Touch [User Name] to display the Input User Name Screen. – Enter your user name, then touc h [O K] to return to the User Authen- tication Screen. The entered name will be displayed on the screen. 5 Enter your current password. – Touch [Password] to d[...]

4 User Authentication in Enhan ced Security Mode 24 bizhub PRO 920 – Enter your current password. The entered password will appear as asterisks (********) on the screen. Then touch [OK]. The Change User Password Sc reen will be displayed. 6 Enter your new password. – Touch [New Password] to displa y the Input New Password Screen. – Enter your[...]

User Authentication in Enhanc ed Security Mode 4 bizhub PRO 920 25 – Touch [Check Input] to di splay the Re-input Ne w Password Screen . – Enter your new password once more for confirmation, then touch [OK]. The Change User Password Screen will be restored. 7 Touch [OK]. The System Setting Scre en will be restored.[...]

5 HDD Store Function in Enhanced Security Mode 26 bizhub PRO 920 5 HDD Store Function in Enhanced Secu- rity Mode A Box built on the HDD is used to store the scanned data. To prevent the data from being accessed or tampere d with, we recommend using the Box with a password specified. Never fail to use the Enhanced Sec urity mode when storing any se[...]

HDD Store Function in Enhanced Security Mode 5 bizhub PRO 920 27 Procedure 1 Enter your user name and user pa ssword on the User Authentica tion Screen. – Touch [User Name] to display the Input User Name Screen. – Enter your user name, then touc h [O K] to return to the User Authen- tication Screen. – Touch [Password] to display the Input Use[...]

5 HDD Store Function in Enhanced Security Mode 28 bizhub PRO 920 – Enter your user passwor, then touc h [OK] to retu rn to the User Au- thentication Screen 2 Touch [OK] on the User Authentication Scre en. The Copy Basic Screen will be displayed. 3 Touch [Box] on the Copy Basic Screen. The Store Box Selection Sc reen will be displayed.[...]

HDD Store Function in Enhanced Security Mode 5 bizhub PRO 920 29 4 Select the desired personal Box, then touch [OK]. – Enter the password if s elected Box requires one. The Personel File Scre en will be displa yed. 5 Touch [Store]. The Input File Name Sc reen will be displayed. 6 Enter the file name, then touch [OK]. The Basic Screen will be rest[...]

5 HDD Store Function in Enhanced Security Mode 30 bizhub PRO 920 7 Press [Start] on the control pan- el to scan. After scanning all th e originals, the machine automatica lly starts to print and store the data in a Box. 8 When operation is completed, press [Access] on the control panel. The User Authentica tion Screen will be displayed to prohibi t[...]

HDD Store Function in Enhanced Security Mode 5 bizhub PRO 920 31 2 Touch [Store]. The User Authentica tion Screen will be displayed. 3 Enter your user name and user pa ssword on the User Authentica tion Screen. – Touch [User Name] to display the Input User Name Screen. – Enter your user name, then touc h [O K] to return to the User Authen- tica[...]

5 HDD Store Function in Enhanced Security Mode 32 bizhub PRO 920 – Touch [Password] to display the Input User Password Screen. – Enter your user password, then touch [OK] to return to the User Au- thentication Screen. 4 Touch [OK] on the User Authentication Scre en. The Image Data Store Site Select ion Screen will be displayed.[...]

HDD Store Function in Enhanced Security Mode 5 bizhub PRO 920 33 5 Touch [Scan to HDD]. The HDD Box List Screen will be displayed. 6 Select the desired personal Box, then touch [OK]. – Enter the password if s elected Box requires one. The Personal File Scre en will be displa yed. 7 Touch [Store]. The Input File Name Sc reen will be displayed.[...]

5 HDD Store Function in Enhanced Security Mode 34 bizhub PRO 920 8 Enter the file name, then touch [OK]. The Box Basic Screen will be displayed. 9 Press [Start] on the control pan- el to scan and store the image data. The popup menu to confirm whether to contin ue or close it will be displayed. 10 Touch [Yes] or [No]. – To continue to store the n[...]

HDD Store Function in Enhanced Security Mode 5 bizhub PRO 920 35 11 When operation is completed, press [Access] on the cont rol panel. The User Authentica tion Screen will be displayed to prohibi t the ma- chine operation without entering a user name and pa ssword. 5.3 Recall/Delete data in a Box The following is a detailed ex planation of ho w to [...]

5 HDD Store Function in Enhanced Security Mode 36 bizhub PRO 920 The User Authentica tion Screen will be displayed. 3 Enter your us er name and user pa ssword on the User Authentica tion Screen. – Touch [User Name] to display the Input User Name Screen. – Enter your user name, then touc h [O K] to return to the User Authen- tication Screen.[...]

HDD Store Function in Enhanced Security Mode 5 bizhub PRO 920 37 – Touch [Password] to display the Input User Password Screen. – Enter your user password, then touc h [OK] to return to the User Au- thentication Screen. 4 Touch [OK] on the User Authentication Screen. The Recall Box Selection Sc reen will be displayed.[...]

5 HDD Store Function in Enhanced Security Mode 38 bizhub PRO 920 5 Select the desired personal Box. Enter the password if selected Box requires one. 6 Touch [OK]. The Personal Box File Selectio n Screen will be displayed. Proceed to step 7 if reca lls the image data file. Proceed to step 8 if dele tes the image data file. 7 Recall the image da ta. [...]

HDD Store Function in Enhanced Security Mode 5 bizhub PRO 920 39 – After outputting, the popup menu to confirm whethe r to continue or close it will be displayed. To continue to recall the next image data, touch [Yes]. The Personal Box F ile Selection Screen will be re- stored. To close, touch [No]. The Image Data Store/Recall Screen will be disp[...]

5 HDD Store Function in Enhanced Security Mode 40 bizhub PRO 920 5.4 Output data in the Secure Box Secure printing using a PC: To set up data output using the secure printing function on PC , a secure fold- er with a specific password must be pre pared. Enter the se cure folder name made up of m ax. 8 alphanu merical chara cters. ! Detail Passwords[...]

HDD Store Function in Enhanced Security Mode 5 bizhub PRO 920 41 3 Enter your user name and user pa ssword on the User Authentica tion Screen. – Touch [User Name] to display the Input User Name Screen. – Enter your user name, then touc h [O K] to return to the User Authen- tication Screen. – Touch [Password] to display the Input User Password[...]

5 HDD Store Function in Enhanced Security Mode 42 bizhub PRO 920 – Enter your user password, then touch [OK] to return to the User Au- thentication Screen. 4 Touch [OK] on the User Authentication Scre en. The Recall Box Selection Sc reen will be displayed. 5 Touch [Secure] to display the Secure Box List Screen. 6 Select the desired secure box. 7 [...]

HDD Store Function in Enhanced Security Mode 5 bizhub PRO 920 43 8 Touch [OK]. The Secure File List Screen will be displayed. 9 Select the desired secure file. Touch the desired secure fi le key, then touch [>>>]. 10 Secure printing will start. Touch [Wait Output], [Proof Output ], or [Auto Output], as desired.[...]

6 Administrator Security Functions 44 bizhub PRO 920 6 Administrator Security Functions To do so, an 8-digit CE authentica tion password and Administrator pass- word must be set for the machine. As k your authorized service representa- tive to set up an Administrator pa ssword. To change this password, the administrator himself shou ld operate th e[...]

Administrator Security Functions 6 bizhub PRO 920 45 2 Touch [6 Administrator Setting]. The Input Administrator Passwo rd Screen will be displayed. 3 Enter the password. Use the touch panel keypad to enter the 8-digit Administrator pass- word, then touch [OK]. The Administrator Setting Screen will be displayed. 4 Touch [7 Security Setting]. The Sec[...]

6 Administrator Security Functions 46 bizhub PRO 920 5 Touch [3 Enhance Security Mode]. 6 Turn Enhanced Security mode ON or OFF. If you want to turn Enhanced Securi ty mode ON, touch [On] to h ighlight it. If you want to turn it OFF, touch [Off] to highlight it. Touch [OK]. The Restart Confirmation popup screen will appear. 7 Touch [Yes]. The machi[...]

Administrator Security Functions 6 bizhub PRO 920 47 6.2 HDD lock password While the Enhanced Sec urity mode is turned ON, a lock password (8 to 32 alphanumerical cha racters, case sensitive ) can be set up on the HDD to pro- tect the data stored on it. If the HD D itself is e xternally accessed, th e data readou t will not be available until the c[...]

6 Administrator Security Functions 48 bizhub PRO 920 If authentication fails, the informati on will be saved in the audit log. The current password cannot be used again as a new pa ssword. Procedure 1 Press [Utility/Counter] on the control panel. The Utility Screen will be dis- played. 2 Touch [6 Administrator Setting]. The Input Administrator Pass[...]

Administrator Security Functions 6 bizhub PRO 920 49 3 Enter the password. Use the touch panel keypad to en ter the 8-digit administrator pass- word, then touch [OK]. The Administrator Setting Screen will be displayed. 4 Touch [7 Security Setting]. The Security Setting Scre en will be displayed. 5 Touch [2 HDD Manage Setting]. The HDD Manage Settin[...]

6 Administrator Security Functions 50 bizhub PRO 920 6 Touch [3 HDD Lock Password Changing]. The HDD Lock Password Changing Screen will be displayed. 7 Enter current password. Touch [Current Password] to di splay the Input Current Password Screen. – Enter current password (The firs t password: 9-digit alphanumeric serial number of the main body).[...]

Administrator Security Functions 6 bizhub PRO 920 51 8 Enter new password. Touch [New Password] to displa y the Input New Password Screen. – Enter new password. The entered new password will appear as as- terisks on the screen. Then, touch[OK]. – Touch [Check Input] to di splay the Re-input Ne w Password Screen .[...]

6 Administrator Security Functions 52 bizhub PRO 920 – Enter new password once more fo r conf irmation, th en touch [OK] . The Change HDD Lock Password Screen will be restored.[...]

Administrator Security Functions 6 bizhub PRO 920 53 6.3 Print audit log An audit log will be automatically crea ted when the data saved in the ma- chine have been acc essed. All the audit log data can be output as follows. ! Detail Passwords are case sensitive. If a wrong password or fewer than 8 alphanumerical cha racters are en- tered and the [O[...]

6 Administrator Security Functions 54 bizhub PRO 920 2 Touch [6 Administrator Setting]. The Input Administrator Passwo rd Screen will be displayed. 3 Enter the password. Use the touch panel keypad to en ter the 8-digit administrator pass- word, then touch [OK]. The Administrator Setting Screen will be displayed. 4 Touch [1 System Setting]. The Syst[...]

Administrator Security Functions 6 bizhub PRO 920 55 5 Touch [4 Print Management List]. The Print Management List Screen will be displayed. 6 Touch [5 Audit Log Report], then touch [COPY]. The Print Management List Screen will be displayed. 7 Press [Start] on the control pan- el.[...]

6 Administrator Security Functions 56 bizhub PRO 920 8 Touch [Management List] to re store the Print Manageme nt List Screen.[...]

Administrator Security Functions 6 bizhub PRO 920 57 6.4 Analyze audit log Audit logs need to be analyzed by the administrato r re gularly (once per month) or when unau thorized access and tamp ering of data saved in the ma- chine in Enhanced Secu rity mode is noticed. The machine is supposed to store up to 750 logs per month. If more than 750 logs[...]

6 Administrator Security Functions 58 bizhub PRO 920 6.5 Table of items saved in audit log No. Operation ID Stored action Result 1 CE authentication CE ID 01 OK/NG 2 Administra tor authentication Admi nistrator ID 02 OK/NG 3 Set/change Enhanced Security mode Administrator ID 03 OK 4 Print audit log Administrator ID 04 OK 5 Change/ regist er CE pass[...]

Administrator Security Functions 6 bizhub PRO 920 59 The purpose of analyzing the audit log is to understand the following and im- plement count ermeasures: Whether or not data was accessed or tampered with Subject of attack Details of attack Results of attack Specify unauthorized actions : password authentication If logs have NG as th e result of [...]

6 Administrator Security Functions 60 bizhub PRO 920 Actions to take if unautho rized operations are found - If it’s found that a password has been leaked after analyzing the audit log, change the password immediately. - It’s possible that a password may have been tampered with a nd legiti- mate users cannot access a box. The administrator must[...]

Index 7 bizhub PRO 920 61 7I n d e x A Administrator Security Functions ..... 44 Audit log Analyze .......... .............. ........... ..... 57 Box .......... ........... ..... 26 , 30 , 35 , 40 Change a us er data ................... .. 14 Change password .......... ............. 21 Delete a user . .............. ........... ..... 18 Print .....[...]

[...]

1 Security Functions ..... .......................................... ............. 1 2 Enhanced Security Mode ........... ............................ .......... 3 2.1 Descrip tion of Enhanced Security mod e ........................ .............. ...... 3 2.2 Data p rotected by Enhanced Security mode ....................... .............. 4 2.3 D[...]

7 Index ........................................... ............................ .......... 61[...]

A Administrator Security Functions 44 Audit log Analyze 57 Box 26 , 30 , 35 , 40 Change a us er data 14 Change password 21 Delete a user 18 Print 53 E Enhanced security mode Administrator authentication 4 Administrator setting mode 4 Audit log 3 Data protected 4 Enhanced password 3 Enhanced security i con 5 Environments 1 HDD 26 HDD lock password 4[...]

[...]

[...]

57GN97070 2005 2005.7[...]