[Device Certificate Setting]
Overview
Display a list of registered device certificates.
This function allows you to check the details, register new certificates, and configure various settings.
NOTICE
- The following setting is required to display this screen.
- Access in [Admin Mode].
Tips
To change [S/MIME Comm.Setting] to [OFF], click [OK] on the confirmation screen displayed in the following cases.
- [S/MIME Comm.Setting] is set to [ON].
- No certificate is assigned to S/MIME.
Reference
Specifications
Category | Network / Security | ||
Location | Machine | - | |
Printer driver | - | ||
Application | Web Connection | ||
Required options | - | ||
Required items | - | ||
Setting items | [New Registration] | Creates a new certificate. | |
[Default] | Select the default certificate. When [Issuer] is set to [Requesting Certificate], the certificate cannot be selected as default. | ||
[Issuer] | Displays the certificate issuer. | ||
[Subject] | Displays the subject to issue the certificate. | ||
[Validity Period] | Displays the expiration date of the certificate. | ||
[Detail] | Displays the detailed information of the certificate. | ||
[Setting] | Removes, exports, or installs the certificate. | ||
[OK] | Applies the setting. | ||
[Cancel] | Cancels the setting. | ||
Remarks | - | ||
Reference | - | ||
Screen access | Web Connection - [Security] - [PKI Settings] - [Device Certificate Setting] | ||
Procedure (Creating and Installing a Self-Signed Certificate)
1
Click [New Registration].
2
Select [Create and install a self-signed Certificate.] and click [OK].
The setting screen is displayed.
3
Specify each item as desired.
[Organization] and [Organizational Unit] can be specified using up to 63 single-byte characters. [Locality] and [State/Province] can be specified using up to 127 characters. For [Country], specify the country code defined in ISO3166 using 2 single-byte characters.
In [Admin. E-mail Address], enter the administrator's email address. The address specified in [Machine Setting] is displayed as the default.
[Validity Start Date] cannot be entered.
[Validity Period] can be specified in the range of 1 to 3650.
Select [Encryption Key Type] from the menu list. Using the ECDSA Cryptography (Elliptic Curve Cryptography) realizes the stronger communication security. Also, encryption is performed using a shorter key length, thereby, enabling a reduction of the network load.
4
Click [OK].
5
Click [OK] on the setting completion screen. Click [OK].
6
Click [OK] on the setting completion screen.
Procedure (Issuing a Certificate Signing Request)
Create data to request the certificate signing to the certificate authority.
1
Click [New Registration].
2
Select [Request a Certificate] and click [OK].
The setting screen is displayed.
3
Specify each item as desired.
[Organization] and [Organizational Unit] can be specified using up to 63 single-byte characters. [Locality] and [State/Province] can be specified using up to 127 characters. For [Country], specify the country code defined in ISO3166 using 2 single-byte characters.
In [Admin. E-mail Address], enter the administrator's email address. The address specified in [Machine Setting] is displayed as the default.
Select [Encryption Key Type] from the menu list. Using the ECDSA Cryptography (Elliptic Curve Cryptography) realizes the stronger communication security. Also, encryption is performed using a shorter key length, thereby, enabling a reduction of the network load.
4
Click [OK].
5
Click [OK] on the setting completion screen.
6
Check the displayed data, and click [Save].
The data is saved in the computer.
7
Click [OK].
After the certificate was issued from the external certificate authority, it must be installed on this system.
Procedure (Importing a Certificate)
1
Click [New Registration].
2
Select [Import Certificate], and click [OK].
The setting screen is displayed.
3
Select the file to transfer to this system.
Select the certificate data file in the file browsing dialog.
4
Enter [Password].
This password can be specified using up to 32 single-byte characters.
5
Click [OK].
6
Click [OK] on the setting completion screen.
Procedure (Removing a Certificate)
1
Click [Setting] of the certificate you want to remove.
The setting screen is displayed.
2
Select [Remove a Certificate], and click [OK].
The confirmation screen is displayed.
3
Confirm the contents of the certificate to remove, and click [OK].
4
Click [OK] on the setting completion screen.
5
Turn the Main power switch of this system off and back on again.
Procedure (Exporting a Certificate)
1
Click [Setting] of the certificate you want to export.
2
Select [Export Certificate], and click [OK].
The setting screen is displayed.
3
Enter [Password].
This password can be specified using up to 32 single-byte characters. Also, enter the same password in Retype Password.
4
Click [OK].
5
Click [Download] on the preparation completion screen.
6
After downloading, click [Back].
Procedure (Installing a Certificate)
1
Click [Setting] of the certificate you want to install.
2
Select [Install a Certificate], and click [OK].
The installation screen is displayed.
This function is only selectable when [Requesting Certificate] is set to [Issuer].
3
Paste the CSR (Certificate Signing Request) of PEM text format delivered from the external CA into the text box on the screen.
4
Click [Install].
5
Click [OK] on the setting completion screen.
in the upper-right of a page, it turns into 
and is registered as a bookmark.