Epson SureColor SC-P5300 - Digital Certificates: Overview and CA Certificate Acquisition

About Digital Certication
❏ CA-signed Certicate
is is a certicate signed by the CA (Certicate Authority.) You can obtain it to apply to the Certicate
Authority.
is certicate certies
the existence of the printer is and used for SSL/TLS communication so that
you can ensure the safety of data communication.
When it is used for SSL/TLS communication, it is used as a server certicate.
When it is set to IPsec/IP Filtering or IEEE802.1x communication, it is used as a client certicate.
❏ CA Certicate
is
is a
certicate
that is in chain of the CA-signed
Certicate
, also called the intermediate CA
certicate.
It is
used by the web browser to validate the path of the printer's
certicate
when accessing the server of the other
party or Web Cong.
For the CA Certicate, set when to validate the path of server certicate accessing from the printer. For the
printer, set to certify the path of the CA-signed
Certicate
for SSL/TLS connection.
You c a n o b t a i n t h e C A
certicate
of the printer from the
Certication
Authority where the CA
certicate
is
issued.
Also, you can obtain the CA
certicate
used to validate the server of the other party from the
Certication
Authority that issued the CA-signed Certicate of the other server.
❏ Self-signed Certicate
is is a certicate that the printer signs and issues itself. It is also called the root certicate. Because the issuer
certies itself, it is not reliable and cannot prevent impersonation.
Use it when making the security setting and performing simple SSL/TLS communication without the CA-
signed Certicate.
If you use this certicate for an SSL/TLS communication, a security alert may be displayed on a web browser
because the certicate is not registered on a web browser. You can use the Self-signed Certicate only for an
SSL/TLS communication.
Related Information
&
“Obtaining and Importing a CA-signed Certicate” on page 64
& “Deleting a CA-signed
Certicate
” on page 67
& “Updating a Self-signed Certicate” on page 68
Obtaining and Importing a CA-signed Certicate
Obtaining a CA-signed Certicate
To obtain a CA-signed certicate, create a CSR (Certicate Signing Request) and apply it to certicate authority.
You can create a CSR using Web Cong and a computer.
Follow the steps to create a CSR and obtain a CA-signed certicate using Web Cong. When creating a CSR using
Web Cong, a certicate is the PEM/DER format.
1. Access Web Cong, and then select the Network Security tab. Next, select SSL/TLS > Certicate or IPsec/IP
Filtering > Client
Certicate
or IEEE802.1X > Client
Certicate
.
Whatever you choose, you can obtain the same certicate and use it in common.
Administrator's Guide
Advanced Security Settings for Enterprise
64