Professional Documents
Culture Documents
Table of Content
1.0 Introduction ................................................................................................................................................................................4
2.0 KYOsecure Overview ................................................................................................................................................................5
3.0. Kyocera Command Center ........................................................................................................................................................6
3.1. Printing Status Pages from the KM-6030..................................................................................................................................7
3.1. What is KYOCERA COMMAND CENTER? ..........................................................................................................................8
3.2. Requirements.............................................................................................................................................................................8
4.0. COMMAND CENTER Pages...................................................................................................................................................9
5.0. Status Pages.............................................................................................................................................................................11
6.0. Basic Page ...............................................................................................................................................................................12
6.1. Device Defaults .......................................................................................................................................................................12
6.2. Security....................................................................................................................................................................................13
6.3. Network...................................................................................................................................................................................14
6.4. Reset........................................................................................................................................................................................14
7.0. Advanced Page ........................................................................................................................................................................15
7.2. Protocols > TCP/IP > IP Filters...............................................................................................................................................16
7.3. Security > Encryption > General / Certification......................................................................................................................17
7.4. Protocols > NetWare > General ..............................................................................................................................................19
7.5. Protocols > NetWare > Bindery Services................................................................................................................................20
7.6. Protocols > NetBEUI...............................................................................................................................................................20
8.0. Secure Network Print Setting in Windows..............................................................................................................................21
9. 0. Troubleshooting.....................................................................................................................................................................23
10.0. Kyocera Network Authentication..........................................................................................................................................24
10.1. Kyocera Network Authentication requirements ....................................................................................................................24
10.2. Configuration of the Kyocera Network Authentication Server .............................................................................................26
10.3. Configuring the KM-6030 in Enterprise Mode .....................................................................................................................28
11.0. Account Management............................................................................................................................................................31
11.1. Overview of Account Management.......................................................................................................................................31
11.2. Accessing the Job Accounting Screen...................................................................................................................................33
12.0. Managing Accounts...............................................................................................................................................................34
12.1. New Account.........................................................................................................................................................................34
13.0. Restricting Using the Copier .................................................................................................................................................37
13.1. Restricting Copying [All] ......................................................................................................................................................38
13.2. Restricting Printing [All].......................................................................................................................................................39
13.3. Restricting Number of Copies to Copy and Print ..................................................................................................................40
13.4. Restricting Transferring Scanned Images..............................................................................................................................41
13.5. Restricting Copying [Each] ...................................................................................................................................................42
13.6. Restricting Printing [Each] ....................................................................................................................................................43
13.7. Deleting Accounts .................................................................................................................................................................44
13.8. Editing Department Information ...........................................................................................................................................45
13.9. Change Restrictions on Usage...............................................................................................................................................47
14.0. Copy Count per Department..................................................................................................................................................48
14.1. Total Copy Count ..................................................................................................................................................................48
14.2. Copy Count by Department...................................................................................................................................................51
15.0. Activating and Deactivating Job Accounting ........................................................................................................................53
16.0. Job Accounting Default Settings ...........................................................................................................................................54
16.1. Copy Job Accounting ............................................................................................................................................................55
16.2. Printer Job Accounting ..........................................................................................................................................................56
16.3. Reports on Printing Errors.....................................................................................................................................................58
16.4. Printing from unregistered Sources (Printer).........................................................................................................................59
16.5. Copy / Printer Output Management.......................................................................................................................................61
16.6. Scanner Job Accounting ........................................................................................................................................................62
16.7. Response to Unauthorized Requests......................................................................................................................................63
17.0. Copying with Job Accounting ON ........................................................................................................................................64
18.0. Data Security Kit (B).............................................................................................................................................................65
18.1. About the Data Security Kit (B) ............................................................................................................................................65
18.2. Conditions required for Data Security...................................................................................................................................65
18.3. Unsecured Data .....................................................................................................................................................................66
1.0 Introduction
This document was created for the KM-6030 MFP for the purpose of showing how to secure the KM6030 MFP at the device as well as through the network utilities. This checklist is written for
acceptance by the National Institute of Standards and Technology. Kyocera would like to take this
opportunity to thank the National Institute of Standard and Technology for its support in the creation
of this checklist.
Kyocera will be working closely with NIST to explain how our KMA product line, in particular the KM6030 can be configured to make the product more secure in an end users environment.
This checklist is intended for IT administrators who have a clear understanding of network
connectivity and network protocols and know the security measure that are already in place on their
network.
The instructions found on the checklist cover areas of security and how to implement the security
settings. Also available in the checklist are other important NIC settings that can be performed using
Kyocera Command Center. You can also visit our web-site at http://www.kyoceramita.com for more
information.
The checklist is create for the KM-6030 MFP, but can be used for our other MFPs as well. If you have
multiple KM-6030 that you plan to set security on, we suggest that you first make the setting found on
the NIST checklist on one unit. You can then use this unit as a bench mark, to determine if the
settings made are to your specification or if some tweaking is needed before implementing the setting
to the other KM-6030 Multifunctionals.
3.2. Requirements
If the printing system is used on a TCP/IP network and has a valid IP address, it may be managed
from any web browser. The web browser allows full configuration of all printing system settings.
Notes
When accessing COMMAND CENTER, make sure that:
The TCP/IP protocol is installed on the PC to access COMMAND CENTER.
The IP address is configured for the printing system.
Required operating systems (OS) for using COMMAND CENTER:
Microsoft Windows 98SE/Me/2000/XP, Microsoft Windows NT 4.0
Apple Macintosh OS X 10.x
COMMAND CENTER has been tested with the following web browsers.
OS
Microsoft Windows
Web Browser
Microsoft Internet Explorer 5.5 and 6.0
Netscape Navigator 6.2 and 7.1
Opera 7
Apple Macintosh
Mozilla 1.5
Microsoft Internet Explorer 5.2
Netscape Navigator 7.1
Safari 1 (OS X 10.2 and later)
Select a category from the navigation bar on the left to view and set values for that category.
Note
If COMMAND CENTER Admin password has been set, you will be prompted to enter a user name
and password when accessing any of the screens other than the Start page. If no Admin password
has been set, access to all other pages is unrestricted. The administrator password may be defined
on the Basic page. If prompted to enter User name and Password, any value may be entered for User
Name (including leaving it blank). For Password, enter COMMAND CENTER Admin password.
COMMAND CENTER home page has 4 main pages corresponding to their functions.
Advanced
Printer
Basic
Start
Page
Start
Basic
Printer
Advanced
Description
Shows this printing systems operating status and current settings.
Includes settings that apply to the printing system, such as Device Defaults,
Security, and Basic Networking.
Includes settings that apply to the printing function of the printing system,
such as emulation, default print resolution, print count, tray selection and
FRPO
Includes advanced settings that apply to the printing system and is
comprised primarily of advanced network settings.
10
Description
Show the settings of SNMP, TCP/IP, AppleTalk, and
NetBEUI. For more information on other items, refer
to Protocols > TCP/IP > General
Shows the IP address ranges that have access
permissions for each protocol. If no IP addresses
have been entered, access permission will be granted
to all addresses. For more information, refer to
Protocols > TCP/IP > IP Filters
Shows the settings and status of Netware. For more
information, refer to Protocols > Netware > General
For more information on Kyoceras products and downloadable drivers, please visit Kyoceras web-site at http://www.kyoceramita.com.
11
Sleep Timer
Auto Sleep
Buzzer
RAM Disk Mode
Description
The Following languages are available for selection in the drop
down list. English, Franais, Deutsch, Italiano, Espaol,
Nederland, and Portugues.
COMMAND CENTER provides the ability to restrict access to the
operation panel. Select one of the available settings.
Lock: Restricts use of all operation panel keys.
Partial Lock: Restricts use of Menu key.
Unlock: The operation panel is fully operable.
Adjust the sleep time between 5 to 240 minutes. The default setting
depends on each print system.
Switches Auto Sleep On or Off. The default setting is On. To
change Auto Sleep to Off:
1. Click Advanced on the right side of Sleep Timer.
2. Set Auto Sleep to Off
3. Click Submit button
Switch the buzzer sound On or Off. The default setting is Off.
Switch RAM disk mode On or Off. When RAM disk mode is On.
The RAM disk size should be adjusted as follows:
When a Hard Disk is installed in the print system, RAM disk
mode is not available.
This is used to specify RAM disk size. Click on the drop down list
to select the size. The maximum RAM disk size varies depending
on the total memory size installed in the printing system.
12
6.2. Security
The password entered in administrator account restricts access to COMMAND CENTER pages
(except Start Page).
Notes
By the factory default, COMMAND CENTER has no password. Setting the Admin password is highly
recommended to prevent unauthorized changes to the printing system and networking configuration.
The password can be up to 16 characters long.
We recommend that you record the password.
To Enter/Change the Password
13
6.3. Network
This page allows you to configure the printing system for network printing and sending e-mail. For
more information, refer to Protocols > TCP/IP > General.
Note
You must restart the network interface after making configuration changes, in order to properly
register the content of those settings in the printing system. Refer to Reset on this page.
Item
Host Name
IP Address
Subnet Mask
Default Gateway
DHCP
BOOTP
Description
Specifies a name for the printing system network interface. This
name is also used as the NetBEUI Printer Name and the SNMP
sysName object.
Assigns the Internet Protocol address on the printing system
network interface, i.e. 192.168.1.1
Specifies the subnet mask configured on the printing system
network interface. If the printing system does not automatically
assign a usable default value and the first number in the IP address
above is from 192 to 254, then use 255.255.255.0 as the subnet
mask.
The IP address of the default gateway router for the local network.
The printing system can obtain an IP address via a DHCP server
automatically. By default DHCP is turned On, this option can be
disabled by selecting (Off) DHCP.
The printing system can obtain IP configuration via a BOOTP
server automatically. By default BOOTP is turned On, this option
can be disabled by selecting (Off) DHCP
6.4. Reset
This page allows you to restart the network interface or reset it to the factory default.
Item
Description
When clicking the Reset button, all network settings will return to
factory default.
14
Subnet Mask
Default Gateway
DHCP, BOOTP,
RARP
DNS Server
(Primary,
Secondary)
Domain Name
WINS Server
(Primary,
Secondary)
Scope ID
Description
Specifies a name for the printing system network interface. This name is
also used as the NetBEUI Printer Name and the SNMP sysName object
Assigns the Internet Protocol address on the printing system network
interface, e.g. 192.168.1.1
Specifies the subnet mask configured on the printing system network
interface. If the printing system does not automatically assign a usable
default value and the first number in the IP address above is from 192 to
254, then use 255.255.255.0 as the subnet mask
The IP address of the gateway router for the local network.
Identifies how the printing system obtains its IP configuration.
DHCP: automatic configuration via a DHCP server
BOOTP: automatic configuration via a BOOTP server
RARP: automatic configuration via the Reverse Address
Resolution
ARP/PING: automatic configuration via the Address Resolution
Protocol or PING.
The IP address of the primary and secondary Domain Name System
(DNS) servers
The Domain Name System (DNS) name of the domain which the printing
system belongs, such as kyocera.com. It should not include host name.
The IP address of the primary and secondary Windows Internet Name
Service (WINS) servers.
Determines the scope of IP addresses that a Windows server can
grant or lease to any requesting network interface. A DHCP server
processes the printing systems discovery broadcasts and returns an IP
address to it. The DHCP server may be set up to grant an IP address for
a limited time (a temporary lease) or for an unlimited time (an unlimited
lease), or it may be configured with a permanent address reservation for
the printing system
Check Selects whether to check the status of the FTP connection (On) or
not (Off).
15
16
17
7. Specify the expiration date of the SSL certificate using the Expiration Date field. Once the
specified expiration date has passed, the printing system cannot be used until a new expiration
date is specified.
8. Click Submit to save the new settings. The security warning that appears when connecting to
the printer is no longer displayed once the certificate has configured.
18
NDS Tree
NDS Context
Print Server Mode
Print Server Name
Description
Protocol Select whether to enable (On) or disable (Off) the NetWare
protocol.
Select whether to enable (On) or disable (Off) Bindery Mode.
The available settings are the 802.2, SNAP, ETHERNET-II, and 802.3
frame types, and Auto for automatic identification.
Specify the name of the NDS tree to connect to
Specify the NDS context to connect to Print Server Mode.
Enables (On) or disables (Off) the Print Server Mode.
Displays the Print Server Name.
Bindery Mode
Frame Type
19
Description
Enables registration for up to eight file servers. If there are nine or
more file servers, register the file server names that have priority in
connection.
If no registration is made, a connection is automatically made to up
to eight servers at startup. The print server names in the file
servers must match the print servers names in this system.
Description
Enables (On) or disables (Off) NetBEUI protocol.
With this option set to On, the printing system becomes the browse
master and creates a workgroup in Windows Network Neighborhood.
With this option set to Off, the printing system can only join an
existing workgroup.
Printer Name
Printer Name correlates with Host Name in the TCP/IP General tab
(Protocols > TCP/IP > General). If you want to change the NetBEUI
printer name, change the TCP/IP Host Name.
Workgroup
Comment
You can enter comments here. This can also be left blank.
20
21
4. Select Connect to a printer on the Internet or on a home or office network and then
enter the URL of the printer in the format https://(Printer IP Address)/ipp/lp
5. Click Next.
6. The screen to search for and install the printer driver is displayed. Follow the on-screen
directions to install the printer driver.
22
9. 0. Troubleshooting
If trouble occurs with using COMMAND CENTER, carry out the applicable checkpoints and
procedures indicated below. If the trouble persists, contact your service representative or authorized
service center.
Issues
I cant access
COMMAND CENTER
Possible Causes
Check to see if the MFP is plug into an
electrical outlet and that the MFP is turned
On
Is the network cable Connect the network
cable properly connected?
Procedure
Turn the power on for the MFP, wait until it is at
the ready state and try to access COMMAND
CENTER.
Make sure that the network cable is not pinch or
broken, check to see if the cable is connected to
the MFP and the patch panel that is used to access
your network. Also make sure that it is a standard
network such as an RJ 45 10/100BASE TX cable.
Verify that the IP address assigned to the print
system is a valid one. Also check to see if the IP
address assigned to the print system is not already
being used by another device.
Check the proxy setting for your particular web
browser and verify that these setting are correct.
Also make sure that pop up blockers and firewalls
are not blocking the COMMAND CENTER web
pages.
Access COMMAND CENTER from a computer
that is listed in the approved IP address list
Access COMMAND CENTER from an approved
Read Community.
Use a web browser that supports COMMAND
CENTER
Use a web browser that supports COMMAND
CENTER
Characters do not
display properly in
COMMAND CENTER
I cant access the Basic,
Printer and Advanced
pages
The setting I made are
not registered
23
Machine Firmware:
Main - 4E
MMI - MY
Language - 7J
24
25
1. The Service Tab is where you Start the Authentication Service. Select Start up Type
(Manual is Selected by default.) as well as select the type of network environment.
2. The Authentication Methods available are Active Directory, NTLM (Windows Domain
Controller) and Netware. For this example we selected Active Directory. By default all are
selected and one choice will need to be made.
3. The default Port for Authentication Server is 4242. This port number should not be
changed.
26
4. The Kyocera Authentication Server is now configured and should be started from the
Service Tab of the Kyocera Authentication Server.
Note:
The LDAP Server is not always the Mail Server. Larger network environments may have a Mail
Server and an LDAP Server. And again you would want to enter the IP or Host Name of the
LDAP Server.
27
28
4. Scroll down the page to the Authentication Setting drop down arrow and select Network
Authentication.
5. Scroll down the page to the Network Authentication section, enter the IP address or Host
name of the computer where the Kyocera Network Authentication Server software was
installed. Verify the Authentication Port Number is 4242.
6. In the Network Authentication Type field click the drop down arrow, select the network
type and enter a Domain Name. If you are using NetWare, the options for NDS Tree and
Context would also be enter on this page.
29
Now the KM-6030 Multifunctional Device is configured and ready for use with Network Authentication.
30
Integrated management of optional printing and scanning statistics through the use of an
identical department ID code.
Availability for department ID codes with as many as eight digits (between 0 and 99999999) for
security.
Tracking the copy volume for each department and for all departments combined.
Restricting the copy count per department in one-page increments up to 999,999 copies.
Resetting the copy counter for each department or for all departments combined.
Accessing the departmental copy counter for reference without entering the management
code.
IMPORTANT: To restrict the number of copies, printouts or scanned images using job accounting,
you must switch the Copy Job Accounting from [Off] to [On]. If the copier is equipped with the optional
printer kit or scanner kit, also activate Printer Job Accounting and Scanner Job Accounting as the
default. Refer to Job Accounting Default Settings for details.
31
Job accounting includes the following functions for managing print counts.
Menu
Description
Reference Page
Manage Accounts
Job Accounting
Job Accounting Default
Settings
Pages 34 36
Pages 38 44
Page 45
Pages 49 51
Pages 52 53
Pages 54 - 59
Pages 60 - 64
32
3. Use the numeric keys to enter the administrator number four-digit management code. By
default, the management code is 6000 for 60
cpm model and 8000 for 80 cpm model. The Job Accounting screen will be displayed.
NOTE: For security, it is recommended to change the management code. Refer to Changing
Management Code on page 3-32 of KM-8030 / 6030 Advance Users Guide.
When installing the optional security kit, enter the eight-digit management code. By default, the
management code is 60006000 for 60 cpm model and 80008000 for 80 cpm model.
Proceed to the following section to customize job accounting menus.
33
3. Press [Register]
34
5. Use the numeric keys to enter the department ID code from 0 to 99999999
6. Press [Close].
7. Select Name to display and press [Change #].
35
Important:
An error will occur if you do not complete Account ID and
Name to display. You will not be able to proceed to the next
screen. Be sure that you have completed the entries.
An error will also occur if you attempt to enter an existing
department ID code. You will not be able to proceed to the
next screen. Use a different ID code or name.
10. Specify restrictions on copying as desired. For instruction on restricting
copier usage, refer to Restricting Using the Copier on page 37.
36
Available settings: [No limit], [Counter limit] and [Is not permitted]
(Refer to page 42)
Restricting printing:
[All]
Available settings: [Permitted] and [Is not permitted]
(Refer to page 39)
[Each]
Available settings: [No limit], [Counter limit] and [Is not permitted]
(Refer to page 43)
37
5. Press [Close]. The touch panel will return to the usage restriction screen.
38
5. Press [Close]. The touch panel will return to the usage restriction screen.
39
4. Press [Counter limit] to apply restriction to the number of copies. Use the
numeric keys to enter the number of pages from 1 to 999999.
5. Press [Close]. The touch panel will return to the usage restriction screen.
40
4. Press [Close]. The touch panel will return to the usage restriction screen.
41
5. Press [Close]. The touch panel will return to the usage restriction screen.
42
5. Press [Close]. The touch panel will return to the usage restriction screen.
43
44
3. Select the department ID code to edit and press [Mgt. Inf. Correction]
45
5. Press [Clear] to clear the current entry. Use the numeric keys to enter the
new ID code (up to eight digits) then press [Close]
7. Press [AllDel.] to clear the current entry and enter the new name.
8. Press [Close]
9. Press [Close]. The touch panel will return to the Job Accounting screen.
46
5. Press [Close]
6. Press [Close]. The touch panel will return to the Job Accounting screen.
47
48
49
7. Press [Yes].
8. Press [Close]. The touch panel will return to the Job Accounting screen.
50
51
4. The copy count of the selected department is displayed for your reference.
Note: The copy limitation per department is given in parentheses after the
current volume, as in 1,234 (999,999).
6. Press [Yes].
7. Press [Close]
8. Press [Close]. The touch panel will return to the Job Accounting screen.
52
Description
Job accounting is activated
Job accounting is deactivated
3. Press [Close]
4. Press [End]
When you select [On], the screen for the department ID code entry
is displayed.
53
54
Setting
On
Off
Description
Copy Job accounting is activated
Copy Job accounting is deactivated
5. Press [Close]
6. Press [Close]. The touch panel will return to the Job Accounting screen.
55
Setting
On
Off
Description
Copy Job accounting is activated
Copy Job accounting is deactivated
5. Press [Close]
6. Press [Close]. The touch panel will return to the Job Accounting screen.
56
57
5. Press [Close]
6. Press [Close]. The touch panel will return to the Job Accounting screen.
58
5. Press [Close]
6. Press [Close]. The touch panel will return to the Job Accounting screen.
59
\
4. Select [All] or [Each].
5. Press [Close]
6. Press [Close]. The touch panel will return to the Job Accounting screen.
60
5. Press [Close].
6. Press [Close]. The touch panel will return to the Job Accounting screen.
61
4. Press [Stop job immediately], [Stop after job done] or [Only warning].
5. Press [Close].
6. Press [Close]. The touch panel will return to the Job Accounting screen.
62
1. Use the numeric keys to enter the department ID-code and press [Enter].
The touch panel will return to the [Basic] screen.
Note: If you enter the code incorrectly, press [Clear] to reenter the correct
code. Entering an invalid department ID-code will trigger an error alarm. Use
the numeric keys to enter the correct code. You can review the departments
copy count by pressing [Each Mgt. Total] after entering your department IDcode.
2. Complete the copy job as usual.
3. After copying, be sure to press the Job Accounting key to display the
initial screen so that the next user can enter his or her department IDcode.
63
64
Note: You can determine the operational status of the overwrite function by
monitoring changes to the image of the hard disk icon. See page 69
(18.7.Display during overwrite) for further details.
65
66
67
Important! To avoid damaging the hard disk, do not turn the copier power off
during overwrite (while the hard disk icon is alternating between the two icons).
Note:
If the copier power is turned off while overwriting is still in progress, any
data that has not yet been overwritten will remain on the hard disk. In this
case, overwriting should be re-started from the beginning when the copier
is turned on again.
In rare cases after the copier power is turned off during overwrite; the hard
disk icon may not change to . This means that overwrite may not be
possible because data was corrupted during data overwriting. Though the
copier will be able to overwrite and overwrite data that is not required after
it is printed, the hard disk will need to be re-formatted in order to restore
overwriting to normal. (See page 74 for information about formatting the
hard disk.)
68
69
Formatting time
Approx. 2 hours
Approx. 7 hours
70
71
72
5. When prompted to confirm formatting, press the Yes key to begin formatting
6. After formatting is completed, turn off the Main Switch and unplug the Power Cord
Details
Security key is not connected
properly or is damaged
73