Encryption and Digital Signature Overview
393
Encryption and Digital Signature Settings
13
require an SSL client certificate, you can use a certificate issued by another CA. When
verification of server certificates is enabled to verify the SSL/TLS certificate of a remote
server, import a certificate issued by another CA using CentreWare Internet Services to the
machine.
When verifying a SSL/TLS server certificate of a remote server with the verification of the
server certificate enabled, import the certificate of the CA included in the higher level of the
certificate path to the machine using CentreWare Internet Services.
z
If the certificate for the SSL client contains the V3 extension "keyUsage", "digitalSignature" must be asserted.
For information on how to check it on Windows, refer to "How to check the certificate settings on Windows"
(P.391).
Encryption using IPsec
IPSec enables IP-level (not application-level) encrypted communications with remote
devices.
If you select [Authenticate by Preshared Key], no device certificate is required.
z
For information on IKE authentication methods, refer to "IPsec Settings" (P.200).
To verify the certificate of the remote device, you must register a root certificate created by
a CA of the remote device on the machine.
z
To use certificates that have already been created, import them with CentreWare Internet Services.
E-mail Encryption/Digital Signature
S/MIME is used for E-mail Encryption/Digital Signature. To use S/MIME on the machine, S/
MIME certificates are used.
For an S/MIME certificate, you can use a certificate issued by another CA.
The personal certificates or the device certificates of destinations are required for
encrypted communications.
z
If the certificate for S/MIME contains an "email Address" or a V3 extension (keyUsage), "digitalSignature"
and "keyEncipherment" must be asserted. If the certificate contains v3 extension (extendedKeyUsage),
"emailProtection" must be set. For information on how to check it on Windows, refer to "How to check the
certificate settings on Windows" (P.391).
Encryption and Digital-Signature Features for Scan Files
Encrypting PDF/DocuWorks Documents
PDF and DocuWorks documents can be encrypted and protected by a password.
z
For information on how to encrypt PDF and DocuWorks documents, refer to "Scan" > "E-mail" > "File Format (Selecting a File
Format for Output Data)" in the User Guide.