Epson DS-570WII

❏ CA Certicate
is is a certicate that is in chain of the CA-signed Certicate, also called the intermediate CA certicate. It is
used by the web browser to validate the path of the scanner's certicate when accessing the server of the other
party or Web Cong.
For the CA Certicate, set when to validate the path of server certicate accessing from the scanner. For the
scanner, set to certify the path of the CA-signed Certicate for SSL/TLS connection.
You can obtain the CA certicate of the scanner from the Certication Authority where the CA certicate is
issued.
Also, you can obtain the CA certicate used to validate the server of the other party from the Certication
Authority that issued the CA-signed Certicate of the other server.
❏ Self-signed Certicate
is is a certicate that the scanner signs and issues itself. It is also called the root certicate. Because the issuer
certies
itself, it is not reliable and cannot prevent impersonation.
Use it when making the security setting and performing simple SSL/TLS communication without the CA-
signed Certicate.
If you use this certicate for an SSL/TLS communication, a security alert may be displayed on a web browser
because the certicate is not registered on a web browser. You can use the Self-signed Certicate only for an
SSL/TLS communication.
Conguring
a CA-signed
Certicate
Obtaining a CA-signed Certicate
To obtain a CA-signed
certicate,
create a CSR
(Certicate
Signing Request) and apply it to
certicate
authority.
You can create a CSR using Web
Cong
and a computer.
Follow the steps to create a CSR and obtain a CA-signed certicate using Web Cong. When creating a CSR using
Web Cong, a certicate is the PEM/DER format.
1.
Access Web
Cong
, and then select the Network Security tab. Next, select SSL/TLS >
Certicate
or IPsec/IP
Filtering > Client Certicate or IEEE802.1X > Client Certicate.
Whatever you choose, you can obtain the same certicate and use it in common.
2.
Click Generate of CSR.
A CSR creating page is opened.
3.
Enter a value for each item.
Note:
Available key length and abbreviations vary by a certicate authority. Create a request according to rules of each
certicate
authority.
4.
Click OK.
A completion message is displayed.
5.
Select the Network Security tab. Next, select SSL/TLS > Certicate, or IPsec/IP Filtering > Client
Certicate
or IEEE802.1X > Client
Certicate
.
Administrator Information > Advanced Security Settings > Using a Digital Certicate
200