Brother 9840CDW Creating and insta lling a certifica te

Security features

141

14

Creating and installing a certificate 14

The Brother print server allows you to use SSL/TLS communication by configuring a certificate and

corresponding private key. This print server supports two certification methods. A self-signed certificate and

a certificate that is issued by a CA (Certificate Authority).

Using self-signed certificate

This print server issues its own certificate. Using this certificate, you can easily use the SSL/TLS

communication without having a certificate from a CA. See Creating and installing a self-signed certificate

on page 143.

Using a certificate from a CA

There are two methods for installing a certificate from a CA. If you already have a CA or if you want to use

a certificate from an outside trusted CA:

• When using a CSR (Certificate Signing Request) from this print server. See Creating CSR and installing

a certificate on page 155.

• When importing a certificate and a private key. See Import and export the certificate and private key on

page 157.

Note

• If you are going to use SSL/TLS communication, we recommend that you contact your system

administrator before using.

• This print server stores only one pair of a certificate and a private key that you installed or previously

imported. This printer overwrites the certificate and the private key if you install a new one.

• When you reset the print server back to its default factory settings, the certificate and the private key that

are installed will be deleted. If you want to keep the same certificate and the private key after resetting the

print server, export them before resetting and re-install them. See How to export the certificate and private

key on page 158.

This feature can be configured using Web Based Management (web browser) only. Follow these steps to

access the configure certificate page using Web Based Management.

aStart your web browser.

bType “http://printer’s IP address/” into your browser. (where “printer’s IP address” is the printer’s IP

address or the node name.)

For example:

http://192.168.1.2/ (if the printer’s IP address is 192.168.1.2.)

http://BRN123456/ (if the printer’s node name is BRN123456.)

Contents

Main NETWORK USERS GUIDE MFC-9840CDW Definitions of warnings, cautions, and notes Trademarks Compilation and publication notice IMPORTANT NOTE Brother numbers For Customer Service Page Table of Contents 1 Introduction 1 2 Configuring your machine for a network with an Ethernet cable connection 12 3 Configuring your machine for a wireless network 20 4 Wireless configuration for Windows33 5 Wireless Configuration for Macintosh58 6 Control panel setup 77 7 Driv e r Dep l oy me nt Wiz a rd (Wind ow s 8 Netw ork pr int i ng fr om Wi ndow s 9 Internet printing for Windows113 10 Network printing from Macintosh118 11 Web Based Management 121 13 Internet fax 125 14 Security features 133 15 Troubleshooting 159 A Appendix A 169 B Appendix B 175 DIndex 193 C Appendix C 188 Ov ervie w I ntrod ucti on Page Network features Ne twor k prin ting Ne twor k scann ing Ne twor k PC Fa x Fax t o serv er Page Types of netw ork conne ctions Ne tw ork co nnec tio n exam pl e TCP/IPTCP/IP Pe er- to- P eer pr int i ng using TC P/ IP Network Shar ed printing Wir ele ss ne tw or k co nn ecti o n ex am pl e Page Protocol s TCP /IP p rotoc ols a nd f unct iona lities DHCP/BOOTP / RARP APIPA DNS c lient IPP mDNS Teln et SNM P LLTD Page Ov ervie w IP addr esse s, s ubnet ma sks and gateway s I P addr es s How the I P addr ess is assign ed to you r pri nt serv er: Configuring your machine for a network with an Ethern et cable con nection Sub net ma sk Gate way (and r oute r) Setting the I P add ress a nd s ubnet mas k Using the BRAdmin Light utility to configure your machine for the network prin te r b BRAdm i n Lig ht How to configu re your mach ine using the BRAdmin Light u tility c d e f Page Changing the print s erver settin gs Usin g th e BRAdmin Ligh t utilit y to chan ge th e prin t ser ver set ting s a b c d e Usin g th e con tro l pan el to chan ge the prin t ser ver setti ngs a b c e Page Ov ervie w Confirm your ne twork environm ent Wir el ess ne tw or k co nn ec tio n exam pl e Configuring your machine for a wireless ne twork An ac cess poi nt is on the n etwork , but th e co mputer is not wire less capab le Conf irm y our netw ork en vi ronme nt Co nfi gur ati on us in g Sec ure Eas ySet up Configura tion tempor arily u sing a netwo rk cab le Configuratio n using a wi rele ss comput er. Wirele ss netw ork te rms a nd conce pts SS ID (S ervi ce S et Ide ntif i er) a n d c ha nnel s SSI D Channels Au the nt ica tion an d en cryp tio n Auth enticat ion meth ods Encrypt ion methods Netwo rk key Configuri ng your mac hine for a wire less netw ork Us ing th e Se tup W i zard from t he c ontr o l pan el a b c d e Page Page h i Changing the print s erver settings Using the BRAdmin Professional utility to change the wireless settings (for Windows)3 a b c d e f Page Us ing th e Re mot e Se tu p to chan ge the pr int s erve r settin gs Re mot e Se tu p for Wi ndow s Remo te Se tup fo r Macin tos h a b c d a b c d e Wir eless conf i gura tion for W in dows Configurat ion in Infra structure mode For Window s f Page i j k l m Page n o p q r s Page Configuration with an access point that supports Secure EasySetup For Windows 2000/XP or Windows Vista 4 Page Page Configura tion in Ad-hoc mod e For Windows 2000 Professional/XP or Windows Vista 4 Page Page k l Page m n o p q r s Page Wir eless Conf i guratio n f or M acint osh Configurat ion in Infra structure mode Page h i j k l m n o p q r s Configuration with an access point that supports Secure EasySetup Page Page Configura tion in Ad-hoc mod e Page i j k l m n o p q Page Contro l p ane l setu p LAN menu TCP /IP BOOT Meth od c d e f g h Page Page Page Page Page Page Et hern et (w ired netw ork on ly) c d e f Se tup W izard (w irele ss netwo rk on ly) Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Fax t o Ser ver Settin g Fax t o Server to On c d e f g h Page Restoring the network settings to factory default 6 Printing the Network Configu ration List 7 Ov ervie w Connection metho ds Pe er-t o- pe er Driver Deployment Wizard (Windows only) 7 Page How to ins tall the Drive r Deploymen t Wizard s oftware Using the Drive r Deplo yment Wizard s oftware f g h 8 Ov ervie w For Windows users (Windows 2000/XP, Windows Vista and Windows Server Network printing from Windows: basic T CP/IP Peer -to-Peer p rinting Other sourc es of info rmation Internet pr inting fo r W ind ow s Ov ervie w IPP printing for Windows 2000/XP, Windows Vista and Windows Server 2003 9 Fo r W indo ws Vist a a b c d e f 1 2 g h a b c d e f g 1 2 h i j Other sourc es of info rmation Networ k p rinting from M ac intos h Ov ervie w How to choose the BR-Sc r i pt 3 printer dr iver (TCP/IP) a b c d e f g h i Other sources of info rmation We b Based Man agem ent Ov ervie w How to con nect to yo ur ma chine usi ng a Bro wser Password information Changing the Scan to FTP con figuration us ing a Brows er Changing the LDAP co nfigurati on using a Browser LD AP o peration 12 Ov ervie w Cha ngi ng the LD AP c onfi gur at i on using a B ro ws er LDAP operat ion usi ng the contr ol pa nel Internet fax Co ntr ol pane l k ey fu nc tion s Se ndin g an In tern et fa x Manua ll y ente rin g text Rece ivi ng E-ma il or Inter net fax Re ceivi ng an Inte rne t fax to yo ur co mpu ter Fo rwar ding rec eiv ed E-m ail and fax m essa ges Rel ay br oa dca sti ng Relay bro adcast from a mach ine Se ndi ng to mul tip le phon e num ber s: a b c d UKFAX@brother.co.uk(fax#123456789) E-mail address Fax Phone Number The word "fax#" must be included with the phone number inside the parenthesis. Relay b road cast fr om a co mput er Outlook 97/9 8/2000/200 2/2003: TX Verif ica tion Ma il Se tup Ma il TX Se tup Ma il RX Error ma i l I mport ant i nf ormat ion on Intern et fax Security featur es Ov ervie w Se curi ty term s Secur it y p rot ocol s SSL (S ecure S ocket Layer) / TLS (Trans port La yer Se curity) We b se rve r ( HTT PS ) IPPS Se cu rity me tho ds for E-m ail n ot ifica tion b c d e f Managin g you r network p rinter s ecure ly Secur e Ma nage ment usin g Web Bas ed Man ageme nt (we b brows er) b c Secure Management using BRAdmin Professional (for Windows)14 Printing documents securely usi ng IPPS Sp ec ify ing a d iff er ent U RL Using E-mail notifi catio n with us er au thenti cation b c d e f g h Creating and insta lling a certifica te b Page Cre ating and inst alli ng a self- signe d ce rtific ate How to cr eate an d insta ll a s elf-sign ed cer tificate a b c d e Page Page Page Page Page Page Page Page Page Page Page Cre ating CSR a nd inst all ing a ce rtif icate How to cr eate th e CSR a b c d How to in stall th e certif icat e to yo ur print er a b c d e Page Page Trou blesh ooting Ov ervie w General proble ms a b c a Networ k print software insta llation pr oblems b c d 1 2 3 4 e Printing problems b c 1 2 Page Sc a nni ng and PC Fa x prob l ems a b c d e f g h Page Wireless n etwork trou bles hooting Wir ele ss se tu p pr oble ms b c Wi reles s c on nect io n pr oble m Protocol -specific trouble shoo ting Windows 2000/XP, Windows Vista and Windows Server 2003 IPP tr ouble shoo ti n g We b bro wser tr oub lesho oti ng (T CP/IP ) a b Page A Using servi ces Other ways to set the IP address (for advanced users and administr ators) Usin g DHCP to c onfigu re the IP add ress Appe ndix A Usin g BOOT P to c onfi gure t he IP addre ss Usin g RARP to c onfigu re the IP ad dress Usin g AP IPA to con figure the IP ad d ress Usin g ARP to co nfig ure the IP ad d ress Us ing the Teln et c onso le to con figure the I P ad dress Page Using the Brother Web BRAdmin server software for IIS to configure the IP ad dress Installation when using a Network Print Queue or Share (printer d river only) a b h c d e f g B Print se rver sp ecif icati ons Et he rnet wi red netw or k Appe ndix B Et hernet wi reles s net wo rk Page Compu ter re qui rem ents Au the nt ica tion an d encr yp tion fo r wir el ess use rs only Auth enticat ion m ethod Encrypt ion me thods Netwo rk key Function ta ble and defaul t factory se ttings The factory settings are shown in Bold with an asterisk. Page (for USA) or (for UK) Page Page Entering Tex t Page C Appe ndix C Op en Sou rce Li cens ing Re mar k s O penS SL st at emen ts Open S SL Lic ens e Page Op enLD AP S tat eme nt s This prod uct in cludes sof tware d eveloped by the Op enLDAP Pr oject. The Ope nLDAP Public L icense V ersion 2.8 , 17 Augu st 2003 The Ope nLDAP Public L icense RFC 225 1 Full Co pyright S tatement Index D E F G H R S T W