Epson DS-790WN

Using a Digital Certicate
About Digital
Certication
❏ CA-signed Certicate
is is a certicate signed by the CA (Certicate Authority.) You can obtain it to apply to the Certicate
Authority. is certicate certies the existence of the scanner is and used for SSL/TLS communication so that
you can ensure the safety of data communication.
When it is used for SSL/TLS communication, it is used as a server certicate.
When it is set to IPsec/IP Filtering or IEEE802.1x communication, it is used as a client certicate.
❏ CA Certicate
is is a certicate that is in chain of the CA-signed Certicate, also called the intermediate CA certicate. It is
used by the web browser to validate the path of the scanner's certicate when accessing the server of the other
party or Web
Cong.
For the CA Certicate, set when to validate the path of server certicate accessing from the scanner. For the
scanner, set to certify the path of the CA-signed Certicate for SSL/TLS connection.
You can obtain the CA certicate of the scanner from the Certication Authority where the CA certicate is
issued.
Also, you can obtain the CA certicate used to validate the server of the other party from the Certication
Authority that issued the CA-signed Certicate of the other server.
❏ Self-signed Certicate
is is a certicate that the scanner signs and issues itself. It is also called the root certicate. Because the issuer
certies itself, it is not reliable and cannot prevent impersonation.
Use it when making the security setting and performing simple SSL/TLS communication without the CA-
signed
Certicate
.
If you use this
certicate
for an SSL/TLS communication, a security alert may be displayed on a web browser
because the certicate is not registered on a web browser. You can use the Self-signed Certicate only for an
SSL/TLS communication.
Related Information
& “Conguring a CA-signed Certicate” on page 94
& “Updating a Self-signed Certicate” on page 98
& “Conguring a CA Certicate” on page 98
Conguring a CA-signed Certicate
Obtaining a CA-signed Certicate
To obtain a CA-signed certicate, create a CSR (Certicate Signing Request) and apply it to certicate authority.
You can create a CSR using Web Cong and a computer.
Follow the steps to create a CSR and obtain a CA-signed certicate using Web Cong. When creating a CSR using
Web Cong, a certicate is the PEM/DER format.
Advanced Security Settings > Using a Digital Certicate > Conguring a CA-signed Certicate
94