134
6 Changing the Machine Settings
[Login User Name]
Enter an authentication user name within 128 characters.
[Login Password]
Enter an authentication password from 1 through 128 characters.
[Server Certificate Verification]
Configure whether to verify server certificates when [Authentication Method] is [PEAP / MS-CHAPv2].
[Certificate Revocation Settings]
[Level of Certificate Verification]
Configure the verification level for certificates.
When the setting is [Low], the expiry of certificates is not checked.
When the setting is[Medium], the expiry of certificates is checked. A certificate is handled as an effective certificate
when expiry cannot be checked due to a network error or other problem.
When the setting is [High], only certificates confirmed to be effective are handled as effective certificates.
[Retrieval of Certificate Status]
Configure the method to check for certificate expiry.
For the machine to acquire and reference a certificate revocation list (CRL) from a validation authority, configure
[By Retrieving CRL]. For the machine to inquire and check with a certificate authority or validation authority using
the Online Certificate Status Protocol (OCSP) , which can verify the validity of certificates, configure [By OCSP].
[Auto Retrieval of CRL]
Configure whether to acquire a certificate revocation list (CRL) automatically.
[CRL Retrieval Timeout]
Configure the upper limit for time to acquire a CRL.
[Query to OCSP Responder]
Specify the specification method for the OCSP responder.
The setting can be configured from [Use URL in Certificate] and [Use URL by Administrator].
[URL of OCSP Responder]
Configure the URL of the inquiry destination when [Query to OCSP Responder] is [Use URL by Administrator].
[OCSP Communication Timeout]
Configure the upper limit for communication time with an OCSP responder.
[Other Settings]
[FIPS 140 Validation Mode]
Strengthen security by complying with US federal standard FIPS140-2.
Note
We recommend not using the following functions when they are run using an encryption algorithm not certified by
FIPS140.
- SMB authentication
- SMTP authentication
- HTTP authentication
- DocuWorks Direct Print
- LDAP authentication
- Kerberos authentication
- 802.1x authentication
- PDF Direct Print