User manual KONICA MINOLTA BIZHUB PRO C6500

[. . . ] Please refer to this guide for safety information, turning on/off the machine, paper supply, dealing with machine trouble such as paper jam, and copy operation available on the machine. * bizhub PRO C6500 User's Guide - POD Administrator's Reference This guide provides you with detailed information about the machine management and how to customize the machine according to your daily use. Please refer to this guide for a setup and management of the machine including registration of copy paper and tray setting. * bizhub PRO C6500 User's Guide - Security (This book) This guide describes the security functions. [. . . ] Date and time, information identifying the person who made the operation, details of the operation, and results of the operation will be saved, enabling analysis of unauthorized access. This log will be overwritten if the audit area is depleted. - Machine Administrator authentication A service representative will set up an authentication data for a machine administrator. The machine administrator must input a password to gain authorized access. Only one authentication string can be registered per machine. - Machine Administrator Setting mode If the machine administrator Setting mode has been entered by successful Administrator authentication, the setting change of various machine functions will be available on the machine. Be sure to exit the machine administrator Setting mode if you leave in front of the machine while using the machine administrator Setting mode. bizhub PRO C6500 3 2 2. 2 Security Strengthen Mode Data protected by Security Strengthen mode The data protected by Security Strengthen mode is the document data stored in the machine. To turn Security Strengthen mode ON/OFF The machine administrator can turn Security Strengthen mode ON/OFF. If Security Strengthen mode is OFF, data can potentially be accessed, so be careful. 4 bizhub PRO C6500 Machine Administrator Security Functions 3 3 Machine Administrator Security Functions The machine administrator turns Security Strengthen mode ON/OFF. To do so, an 8-digit CE authentication password and Machine Administrator password must be set for the machine. Ask your authorized service representative to set up a Machine Administrator password. To change this password, the machine administrator himself should operate the procedure described in the User's Guide of POD Administrator's reference. To protect data in the machine from access and tampering, please be sure to designate a machine administrator and use Security Strengthen mode. 2 Reminder Do not use your name, birthday, employee number, etc. for a password that others can easily figure out. Be careful not to inform anybody else of the password, or not to let it known to others. bizhub PRO C6500 5 3 3. 1 Machine Administrator Security Functions Turn Security Strengthen mode ON/OFF The following is an explanation of how to turn Security Strengthen mode ON/OFF. 2 Note Passwords are case sensitive. If a wrong password or fewer than 8 alphanumerical characters are entered and the [OK] key is touched, the warning message "Password does not match" will appear, and no key will work for five seconds. Enter the right password after five seconds. If authentication fails, the information will be saved in the audit log. Procedure 1 2 Press [Utility/Counter] on the control panel to display the Utility Screen. Setting]. The Input Password Screen will be displayed. 6 bizhub PRO C6500 Machine Administrator Security Functions 3 3 Enter the password. Use the touch screen keypad to enter the 8-digit Machine Administrator password, then touch [OK]. The Machine Administrator Setting Menu Screen will be displayed. 4 Touch [10 Security Setting]. bizhub PRO C6500 7 3 5 Machine Administrator Security Functions Touch [04 Security Strengthen Set] 6 Turn Security Strengthen mode ON or OFF If you want to turn Security Strengthen mode ON, touch [On] to highlight it. If you want to turn it OFF, touch [Off] to highlight it. 8 bizhub PRO C6500 Machine Administrator Security Functions 3 7 Touch [OK]. The Restart Confirmation popup screen will appear 8 Touch [Yes]. [. . . ] For password authentication, success or failure will be indicated as OK and NG. For operations without password authentication, all log entries will be indicated as OK. 18 bizhub PRO C6500 Machine Administrator Security Functions 3 3. 5 Table of items saved in audit log No. 1 2 3 4 5 6 13 Operation CE authentication Manager authentication Set/change Security Strengthen mode Print audit log Change/register CE password Change/register Machine Administrator password Change HDD lock password ID CE ID Machine Administrator ID Machine Administrator ID Machine Administrator ID CE ID CE ID/ Machine Administrator ID Machine Administrator ID Stored action 01 02 03 04 05 06 19 Result OK/NG OK/NG OK OK OK OK OK The purpose of analyzing the audit log is to understand the following and implement countermeasures: Whether or not data was accessed or tampered with Subject of attack Details of attack Results of attack For specific analysis methods, see the next page. bizhub PRO C6500 19 3 Machine Administrator Security Functions Specify unauthorized actions: password authentication If logs have NG as the result of password authentication (action: 01, 02), items protected by passwords may have been attacked. - Failed password authentication (NG) log entries specify who made the operation, and show if unauthorized actions were made when password authentication failed. [. . . ]