Xerox 9201, 9202, 9203 manual Information Checklist, Creating a Digital Certificate

Security ColorQube™ 9201/9202/9203

A certificate from a Certificate Authority or a server functioning as a Certificate Authority for example Windows 2000 running Certificate Services can be uploaded to the device.

Note

A separate request is required for each Xerox device.

With SSL enabled (from the Connectivity / Protocols / HTTP selections of the Properties tab of Internet Services), and a digital certificate installed, remote users accessing the system over an HTTP based interface are assured of having their network communications protected against eavesdropping and tampering, using strong encryption. The only action required by the workstation user is to type https://, followed by the IP address (or fully qualified domain name) of the system, into the Address or URL box of the web browser. The subsequent acceptance of a Digital Certificate completes the exchange of the Public Key enabling the encryption process to proceed.

Information Checklist

Before starting the installation procedure, please ensure the following items are available or have been performed:

•An IP Address or Host Name must be configured on the device.

•DNS must be enabled and configured on the device.

•HTTP must be enabled so that Internet Services can be accessed.

•Ensure the system time configured on the device is accurate. This is used to set the start time for self signed certificates.

Creating a Digital Certificate

1.At your Workstation, open the web browser and enter the IP address of the device in the Address bar, and press [Enter].

2.Click the [Properties] tab.

3.If prompted, enter the Administrator User ID and Password. The default is [admin] and [1111].

4.Click on the [Login] button.

5.Click on the [Security] link.

6.Select [Machine Digital Certificate Management] in the directory tree.

Note

SSL cannot be implemented until a digital certificate is installed on the system.

7.Click on the [Create New Certificate] button.

8.Select either Self Signed Certificate or Certificate Signing Request radio button.

Note

A self-signed certificate is inherently less secure than installing a certificate signed by a trusted, third party Certificate Authority (CA). However, specifying a self-signed certificate is the easiest way to start using SSL. A self-signed certificate is also the only option if your company does not have a Server functioning as a Certificate Authority (Windows 2000 running Certificate Services, for example), or does not wish to use a third party CA.

9.Click on the [Continue] button.

10.If you selected Self Signed Certificate, fill out the form with your 2 Letter Country Code, State/Province Name, Locality Name, Organization Name, Organization Unit, Common Name, E-mail Address, and Days of Validity.

11.Click on the [Apply] button to continue. Values from the form will be used to establish a self-signed certificate, and you will be returned to the main page.

8-10 System Administrator Guide