Using a Digital Certicate
About Digital Certication
❏ CA-signed
Certicate
is
is a
certicate
signed by the CA
(Certicate
Authority.) You can obtain it to apply to the
Certicate
Authority. is certicate certies the existence of the printer is and used for SSL/TLS communication so that
you can ensure the safety of data communication.
When it is used for SSL/TLS communication, it is used as a server certicate.
When it is set to IPsec/IP Filtering, IEEE802.1x communication, or S/MIME, it is used as a client certicate.
❏ CA
Certicate
is
is a
certicate
that is in chain of the CA-signed
Certicate
, also called the intermediate CA
certicate.
It is
used by the web browser to validate the path of the printer's certicate when accessing the server of the other
party or Web Cong.
For the CA Certicate, set when to validate the path of server certicate accessing from the printer. For the
printer, set to certify the path of the CA-signed
Certicate
for SSL/TLS connection.
You c a n o bt a in the C A
certicate
of the printer from the
Certication
Authority where the CA
certicate
is
issued.
Also, you can obtain the CA certicate used to validate the server of the other party from the Certication
Authority that issued the CA-signed Certicate of the other server.
❏ Self-signed
Certicate
is
is a
certicate
that the printer signs and issues itself. It is also called the root
certicate.
Because the issuer
certies itself, it is not reliable and cannot prevent impersonation.
❏ When using for SSL/TLS communication
Use it when making the security setting and performing simple SSL/TLS communication without the CA-
signed Certicate.
If you use this certicate for an SSL/TLS communication, a security alert may be displayed on a web browser
because the certicate is not registered on a web browser.
❏ When setting to S/MIME
You can also use a self-signed certicate instead of a CA-signed certicate. You can use S/MIME functions
without the cost of obtaining a CA-signed certicate, for example in a network environment that does not
have an external connection (Internet connection), such as an enterprise network. However, it is
recommended to use a CA-signed certicate when using external connections because a self-signed
certicate is low-security.
Related Information
& “Conguring a CA-signed Certicate” on page 534
& “Updating a Self-signed Certicate” on page 538
& “Conguring a CA Certicate” on page 539
Administrator Information
>
Advanced Security Settings
>
Using a Digital Certicate
533