10
6. Workflow Scanning:
When configuring workflow scanning file repositories (see “Configuring File Repository Settings” under
“Workflow Scanning’ in Section 7 of the SAG) or template pool repositories (see “Configuring Template
Pool Repository Settings” under “Workflow Scanning’ in Section 7 of the SAG) set the transfer protocol to
be either HTTPS or SFTP.
7. NTP:
If it is desired to use an NTP server to synchronize and set the internal system time used by the device,
follow the instructions under “NTP” in Section 3 of the SAG.
8. SMB Filing:
If SMB Filing is desired to specify Kerberos authentication options when filing images to SMB-shared
network locations, follow the instructions for “SMB Filing” in Section 3 of the SAG.
d. The following features and protocols are not included in the evaluated configuration:
Reprint from Saved Job
SMart eSolutions
Custom Services (Extensible Interface Platform or EIP)
Network Accounting and Auxiliary Access
Internet Fax
Use of Embedded Fax mailboxes
USB Direct Printing
AppleTalk and Novell IPX protocols
Web Services
InBox Apps
SNMPv3
Remote Control Panel (a ConnectKey feature)
e. Customer software upgrades via the network are not allowed as part of the evaluated configuration. System
software upgrades are disabled by default to prevent unauthorized replacement of the system software.
Administrators should only enable software upgrades when performing an upgrade, and software upgrades disable
when complete. Software upgrades can be enabled/disabled by following the instructions for ‘Enabling Upgrades’
under ‘Updating the Printer Software’ in Section 10 of the SAG.
II. Secure Acceptance:
Secure acceptance, once device delivery and installation is completed, should be done by:
Printing out a Configuration Report from the Web UI by following the “Printing the Configuration Report” instructions
under “Initial Setup in CentreWare Internet Services” in Section 2 of the applicable SAG, or from the Control Panel
by following the “Configuration Report” instructions under “Configuration Page” in Section 3 of the applicable SAG.
Comparing the software/firmware versions listed on the Configuration Report with the Evaluated Software/Firmware
versions listed in Table 1 of the applicable Security Target, latest version issued and ensure that they are the same
in all cases.
Following internal customer policies and procedures required to evaluate and install devices in your environment.
III. Secure Operation of Device Services/Functions Part of the Evaluated Configuration
a. Change the following passcodes on a regular basis, chosen passcodes to be as random as possible and set them
to the indicated minimum lengths:
Smart Card or CAC passcode – 8 characters (alphanumeric)
Secure Print passcode – 6 digits
(Embedded Fax) Secure Receive passcode – 6 digits
Scan to Mailbox password – 8 characters (alphanumeric).
Passcodes for Scan-to-Mailbox mailboxes should be selected to be as random as possible, should be changed
on a regular basis consistent with applicable internal policies and procedures and should not contain any blank
spaces.
b. Authentication passwords for unique user accounts established for users should be set to a minimum length of 8
(alphanumeric) characters unless applicable internal procedures the System Administrator must comply with require
a minimum password of a greater length. The ‘Maximum Length’ can be set to any value between 8 and 63
To Next Page
Loading...
Need help?
General
