6
Xerox
®
D95/D110/D125 Copier/Printer Security Function Supplementary Guide
• The settings described below are required for both the machine’s configuration and the
client’s configuration.
1) SSL/TLS
For the SSL client (Web browser) and the SSL server that communicate with the
machine, select a data encryption suite from the following:
- SSL_RSA_WITH_RC4_128_SHA
- SSL_RSA_WITH_3DES_EDE_CBC_SHA
- TLS_RSA_WITH_AES_128_CBC_SHA
- TLS_RSA_WITH_AES_256_CBC_SHA
(The recommended browser is Microsoft
®
Internet Explorer 6/7/8)
2) S/MIME
For the machine and E-mail clients, select an Encryption Method/Message Digest
Algorithm from the following:
- RC2 (128bit)/SHA1
- 3Key Triple-DES (168bit)/SHA1
3) IPSec
For the IPSec host that communicates with the machine, select an Encryption
Method/Message Digest Algorithm from the following:
- AES (128bit)/SHA1
- 3Key Triple-DES (168bit)/SHA1
4) SNMPv3
The encryption method of SNMPv3 is fixed to DES. Set [Message Digest Algorithm] to
[SHA1].
Important:
• For secure operation, while you are using the Xerox
®
CentreWare
®
Internet Services, do
not access other web sites.
• For secure operation, when you change [Authentication Type], initialize the hard disk by
resetting [Data Encryption] and changing [encryption key].
• For preventing SSL vulnerability, you should set the machine address in the proxy
exclusion list of browser.
• With this setting, secure communication will be ensured because the machine and the
remote browser communicate directly without proxy server, and thus you can prevent
man-in-the-middle attacks.
• Do not use Backup Restore function, because they have not been evaluated.