Canon Paper Shredder

HDD Data Erase Kit

The optionalHDD Data Erase Kit enables system administrators to configure their

imageRUNNER ADVANCEto overwrite the internal image server hard disk and erase previous

data aspart of routine job processing. The technology can be set to overwrite:

1. Once with nulldata,

2. Once with random data,

3. Three timeswith random data,

4. Or DoD 5022.22M 3-passoverwrite mode.

Please referto Section 9.2 for information on the Canon imageRUNNER ADVANCE Hard Disk

Drive SecurityKit Options.

Timing ofOverwrite

The timing ofthe delete is sensitive to what mode and finishing options are set at the time of

printout. Generally, if a jam or other unexpected abnormal end to operation occurs on the

device, page data willbe stored until the job can be completed and then overwritten on the

hard diskdrive.

White Paper: Canon imageRUNNER ADVANCE Security

Section 3 – Information Security

Contents

Main White Paper: Canon imageRUNNER ADVANCE Security INTENT OF THIS DOCUMENT: Version 1.0 June 14, 2010 Table of Contents Page Section 1 Introduction 1.1 Security MarketOverview 1.2 Imaging & Printing Security Overview 1.3 KeySecurity Concentration Areas 2.1 imageRUNNER ADVANCEController Security 2.2 Authentication Device-Based Authentication Card-Based Authentication 2.3 AccessControl Password-Protected System Settings AccessManagement System The following describesthe various Base access levels (roles) that are available: The following functionsand features can be restricted: * Requires SSO-H to be enabled. Privilegesby Access Level Device Function Values Description Scan and Send Security Page Print Driver Security Features USB Block 2.4 Third PartyMEAP Application and Development 3.1 Document Security Secure Printing DocumentStorage Space Protection Other DocumentSecurity Capabilities Page LLooggggiinngg && AAuuddiittiinngg sseeccttiioonn 3.2 Data Security* Data at Rest Page Page Page Page Data in Transit DDooccuummeenntt SSeeccuurriittyy IInnffoorrmmaattiioonn SSeeccuurriittyy 3.3 FaxSecurity Super G3 FaxBoard and Multi Line Fax Board Other FaxFeatures FaxStorage Space 4.1 Network and PrintSecurity (Canon Network Printer Kit Only) Enabling/Disabling Protocols/Applications IP AddressFiltering Media AccessControl (MAC) Filtering SSLEncryption IPv6 Support IPSecSupport KeyExchange Protocol WirelessLAN IEEE 802.1X SNMP CommunityString DDeevviiccee SSeeccuurriittyy USB Block Scan and Send - VirusConcerns for E-mail Reception 4.2 Mail Server Security SMTP Authentication POP Authentication Before SMTP Section 5 Security Monitoring & Management Tools 5.1 imageWARE Enterprise ManagementConsole 5.2 Restricting Device Setup Screens DDeevviiccee SSeeccuurriittyy DDeevviiccee SSeeccuurriittyy Section 6 Logging & Auditing 6.1 Document Scan Lock& Trace LOCK TRACE DDooccuummeenntt SSeeccuurriittyy Section 6 Logging & Auditing 6.2 Canon imageWAREAccounting Manager 6.3 Canon imageRUNNER ADVANCETracker 6.4 imageWARESecure Audit Manager Section 7 Canon Solutions & Regulatory Requirements 7.1 Common Criteria 7.2 Common Criteria Certification Section 7 Canon Solutions & Regulatory Requirements 7.3 Authorized Send for CAC/PIV Section 8 Conclusion Section 9 Addendum 9.1 Canon SecurityRecommendations Quick Reference 9.2 Canon imageRUNNER ADVANCEHDD Security Section 9 Addendum Data Encryption & Mirroring Kit-C1 Data Erase Kit-C1 Functions