Epson WorkForce Enterprise WF-C21000 Series - Page 563

❏ CA Certicate
is is a certicate that is in chain of the CA-signed Certicate, also called the intermediate CA certicate. It is
used by the web browser to validate the path of the printer's certicate when accessing the server of the other
party or Web Cong.
For the CA Certicate, set when to validate the path of server certicate accessing from the printer. For the
printer, set to certify the path of the CA-signed Certicate for SSL/TLS connection.
You can obtain the CA certicate of the printer from the Certication Authority where the CA certicate is
issued.
Also, you can obtain the CA certicate used to validate the server of the other party from the Certication
Authority that issued the CA-signed Certicate of the other server.
❏ Self-signed Certicate
is is a certicate that the printer signs and issues itself. It is also called the root certicate. Because the issuer
certies
itself, it is not reliable and cannot prevent impersonation.
❏ When using for SSL/TLS communication
Use it when making the security setting and performing simple SSL/TLS communication without the CA-
signed Certicate.
If you use this certicate for an SSL/TLS communication, a security alert may be displayed on a web browser
because the certicate is not registered on a web browser.
❏ When setting to S/MIME
You can also use a self-signed certicate instead of a CA-signed certicate. You can use S/MIME functions
without the cost of obtaining a CA-signed certicate, for example in a network environment that does not
have an external connection (Internet connection), such as an enterprise network. However, it is
recommended to use a CA-signed certicate when using external connections because a self-signed
certicate is low-security.
Related Information
& “
Conguring
a CA-signed
Certicate
” on page 563
& “Updating a Self-signed
Certicate
” on page 567
& “Conguring a CA Certicate” on page 569
Conguring a CA-signed Certicate
Obtaining a CA-signed Certicate
To obtain a CA-signed
certicate,
create a CSR
(Certicate
Signing Request) and apply it to
certicate
authority.
You can create a CSR using Web Cong and a computer.
Follow the steps to create a CSR and obtain a CA-signed certicate using Web Cong. When creating a CSR using
Web Cong, a certicate is the PEM/DER format.
1.
Access Web
Cong
, and then select the Network Security tab.
2.
Select one of the following.
❏ SSL/TLS > Certicate
❏ IPsec/IP Filtering > Client
Certicate
❏ IEEE802.1X > Client Certicate
Administrator Information > Advanced Security Settings > Using a Digital Certicate
563