17
White Paper: Canon imageRUNNER ADVANCE Security
information from environments, where sensitive information isprocessed, by analyzing
the hard disksfrom these devices. In order to help protect your sensitive and confidential
information Canon imageRUNNER ADVANCEsystems include a standard hard disk format
utility, aswell as more advanced optional accessories, such asthe HDD Data Erase Kit, the
HDD Data Encryption Kitor the Removable HDD Kit.
Standard HDD Format*
Bestpractices, and often company policies, usually recommend that systems be completely
wiped bythe system administrator prior to the device being reallocated to a new location or
prior to the end oflease or at the end of its lease. The Hard Disk Drive Format feature, which is
standard on allimageRUNNER ADVANCE systems, is more than just a regular hard diskformat
function. Itnot only deletes the File Allocation table (FAT) associated with alluser areas on the
disk, butit also overwrites all user data areas on the hard disk with null characters.
Overwritten information includes:
• Data stored in Mail Boxes and Advanced Box
• Data stored in Fax/I-Fax Inbox (Confidential Fax Inbox/Memory RX Inbox)
• Address data stored in the Address Book
• Scan settings registered for the Sending function
• Mode Memor ysettings registered for the Copy or Mail Box function
• MEAP applications and license files
• Data saved from MEAP applications
• The password for the SMS (Service Management Service) login service of MEAP
• User authentication information registered in the Local Device Authentication system
ofSSO-H (Single Sign-On H)
• Unsent documents (reserved documents and documents set with the
Delayed Send mode)
Job history
• Settings/Registration settings
• Forms registered for the Superimpose Image mode
• Registered forwarding settings
• Key Pair and Server Certificate registered in [Certificate Settings] in [Device
Management] in ManagementSettings (from the Settings/Registration screen)
The standard HDD formatfeature that is included with every imageRUNNER ADVANCE system
willperform a one pass overwrite using null characters. If the optional HDD Erase Kit is
installed, the HDD Formatfeature provides additional overwrite options, including the choice
to perform a DoD 5022.22M compliant3-pass overwrite.
HDD Data Encryption Kit
The HDD Data Encryption Kitoption, which has achieved Common Criteria Certification of
Evaluation Assurance Level3 (EAL3), ensures that all data stored on the internal diskdrive is
protected using industry-standard algorithms. The HDD Data Encryption Kitfor imageRUNNER
ADVANCEsystems uses a dedicated plug-in board that encrypts every byte of data before it is
committed to the diskusing the 256-bit AES (Advanced Encryption Standard) algorithm.
Please referto Section 9.2 for information on the Canon imageRUNNER ADVANCE Hard Disk
Drive SecurityKit Options.
Section 3 – Information Security
* Please see the imageRUNNER Bulletin #5.10 issued on 4/26/10 entitled Hard Disk Drive Format Technology Procedures for imageRUNNER,
imageRUNNER ADVANCE and imagePRESS devices to learn more about this feature.