You are on page 1of 73

KM-6030 MFP Security Checklist

Review Draft 2.0


03/14/2007

Table of Content
1.0 Introduction ................................................................................................................................................................................4
2.0 KYOsecure Overview ................................................................................................................................................................5
3.0. Kyocera Command Center ........................................................................................................................................................6
3.1. Printing Status Pages from the KM-6030..................................................................................................................................7
3.1. What is KYOCERA COMMAND CENTER? ..........................................................................................................................8
3.2. Requirements.............................................................................................................................................................................8
4.0. COMMAND CENTER Pages...................................................................................................................................................9
5.0. Status Pages.............................................................................................................................................................................11
6.0. Basic Page ...............................................................................................................................................................................12
6.1. Device Defaults .......................................................................................................................................................................12
6.2. Security....................................................................................................................................................................................13
6.3. Network...................................................................................................................................................................................14
6.4. Reset........................................................................................................................................................................................14
7.0. Advanced Page ........................................................................................................................................................................15
7.2. Protocols > TCP/IP > IP Filters...............................................................................................................................................16
7.3. Security > Encryption > General / Certification......................................................................................................................17
7.4. Protocols > NetWare > General ..............................................................................................................................................19
7.5. Protocols > NetWare > Bindery Services................................................................................................................................20
7.6. Protocols > NetBEUI...............................................................................................................................................................20
8.0. Secure Network Print Setting in Windows..............................................................................................................................21
9. 0. Troubleshooting.....................................................................................................................................................................23
10.0. Kyocera Network Authentication..........................................................................................................................................24
10.1. Kyocera Network Authentication requirements ....................................................................................................................24
10.2. Configuration of the Kyocera Network Authentication Server .............................................................................................26
10.3. Configuring the KM-6030 in Enterprise Mode .....................................................................................................................28
11.0. Account Management............................................................................................................................................................31
11.1. Overview of Account Management.......................................................................................................................................31
11.2. Accessing the Job Accounting Screen...................................................................................................................................33
12.0. Managing Accounts...............................................................................................................................................................34
12.1. New Account.........................................................................................................................................................................34
13.0. Restricting Using the Copier .................................................................................................................................................37
13.1. Restricting Copying [All] ......................................................................................................................................................38
13.2. Restricting Printing [All].......................................................................................................................................................39
13.3. Restricting Number of Copies to Copy and Print ..................................................................................................................40
13.4. Restricting Transferring Scanned Images..............................................................................................................................41
13.5. Restricting Copying [Each] ...................................................................................................................................................42
13.6. Restricting Printing [Each] ....................................................................................................................................................43
13.7. Deleting Accounts .................................................................................................................................................................44
13.8. Editing Department Information ...........................................................................................................................................45
13.9. Change Restrictions on Usage...............................................................................................................................................47
14.0. Copy Count per Department..................................................................................................................................................48
14.1. Total Copy Count ..................................................................................................................................................................48
14.2. Copy Count by Department...................................................................................................................................................51
15.0. Activating and Deactivating Job Accounting ........................................................................................................................53
16.0. Job Accounting Default Settings ...........................................................................................................................................54
16.1. Copy Job Accounting ............................................................................................................................................................55
16.2. Printer Job Accounting ..........................................................................................................................................................56
16.3. Reports on Printing Errors.....................................................................................................................................................58
16.4. Printing from unregistered Sources (Printer).........................................................................................................................59
16.5. Copy / Printer Output Management.......................................................................................................................................61
16.6. Scanner Job Accounting ........................................................................................................................................................62
16.7. Response to Unauthorized Requests......................................................................................................................................63
17.0. Copying with Job Accounting ON ........................................................................................................................................64
18.0. Data Security Kit (B).............................................................................................................................................................65
18.1. About the Data Security Kit (B) ............................................................................................................................................65
18.2. Conditions required for Data Security...................................................................................................................................65
18.3. Unsecured Data .....................................................................................................................................................................66

KM-6030 MFP Security Checklist

18.4. About Security Mode ............................................................................................................................................................66


18.5. Data Security Kit Functions ..................................................................................................................................................67
18.6. Overwrite Function................................................................................................................................................................67
18.7. Format Function ....................................................................................................................................................................68
18.8. Hard Disk Format..................................................................................................................................................................68
18.9. Display during overwrite.......................................................................................................................................................69
19.0. Data to be overwritten ...........................................................................................................................................................70
19.2. Data overwritten through the format function .......................................................................................................................71
19.3. Security Kit Installation Procedures ......................................................................................................................................72
19.4. Hard Disk Format..................................................................................................................................................................74
19.5. Error Messages ......................................................................................................................................................................75

KM-6030 MFP Security Checklist

1.0 Introduction
This document was created for the KM-6030 MFP for the purpose of showing how to secure the KM6030 MFP at the device as well as through the network utilities. This checklist is written for
acceptance by the National Institute of Standards and Technology. Kyocera would like to take this
opportunity to thank the National Institute of Standard and Technology for its support in the creation
of this checklist.
Kyocera will be working closely with NIST to explain how our KMA product line, in particular the KM6030 can be configured to make the product more secure in an end users environment.
This checklist is intended for IT administrators who have a clear understanding of network
connectivity and network protocols and know the security measure that are already in place on their
network.
The instructions found on the checklist cover areas of security and how to implement the security
settings. Also available in the checklist are other important NIC settings that can be performed using
Kyocera Command Center. You can also visit our web-site at http://www.kyoceramita.com for more
information.
The checklist is create for the KM-6030 MFP, but can be used for our other MFPs as well. If you have
multiple KM-6030 that you plan to set security on, we suggest that you first make the setting found on
the NIST checklist on one unit. You can then use this unit as a bench mark, to determine if the
settings made are to your specification or if some tweaking is needed before implementing the setting
to the other KM-6030 Multifunctionals.

KM-6030 MFP Security Checklist

2.0 KYOsecure Overview


Kyocera Command Center (KCC)
Kyocera Command Center is MIB based (Management Information Base) that is embedded
into the NIC (Network Interface Card) of the KM-6030 MFPs print controller. KCC can be
accessed using a web-browser e.g. Microsoft Internet Explorer or Netscape. KCC
allows network administrators to configuration setting, filter IP address, filter ports, and filter
protocols. The KCC can be assigned an administrative password which then prevents any
unauthorized user from making changes to the NIC
Kyocera Network Authentication
Kyocera Network Authentication is a server based utility that supports Windows Active
Directory. Authorized users will be required to enter a login name and password at the
display screen of the KM-6030 MFP. The login name and password must be the same login
and password used to allow end users access to the companys network. The
authentication levels that are supported are Kerberos for Windows 2000 Server, Windows
2003 Server, and NTLM for Windows NT Server
Account Management
The KM-6030 Account Management feature allows you to manage the amount of copies
that can be made, as well as who has access to the KM-6030 MFP. The KM-6030 can be
configured with Job Accounting to assign individual or departments unique IDs. The Job
Accounting ID will prevent unauthorized access to the copier and will also track the amount
of copies, prints and scans that were made by each department or individual.
Data Security Kit (B)
Many companies adhere to specific compliancy statues, like Sarbanes Oxley and HIPPA or
print, send and copy highly confidential material that cannot be compromised. For these
types of environments, Kyocera offers an ISO 15408 certified optional Data Security Kit (B)
that use 3 different types of deletion methods to ease the HDD. This is critical when
information stored on the KM-6030 MFP needs to be erased and the normal format method
to erase the HDD is not a viable method, due to compliancy statues.

KM-6030 MFP Security Checklist

3.0. Kyocera Command Center


Before performing these setting please make sure the following prerequisite have been met:
1. The KM-6030 MFP should have the latest ENGINE F/W, PRINTER F/W, and NIC F/W. for a
listing of the latest firm version please contact your local authorized Kyocera copier dealer or
visit our web-site at http://www.kmaconnect.com. If you dont have the latest F/W please
contact your local authorized Kyocera dealer to update the F/W.
2. The latest software for the KM-6030 MFP should be used. For a list and available download of
the latest software please visit our web-site at http://www.kmaconnect.com
3. Kyocera Command Center supports the following web browsers:
Microsoft Internet Explorer 5.5 and 6.0
Netscape Navigator 6.2 and 7.1
Opera 7
Mozilla 1.5
Safari (OS X 10.2 and later)
Note: if any popup blockers are being used you will have to set the permission to Allow popup for this
site

KM-6030 MFP Security Checklist

3.1. Printing Status Pages from the KM-6030


1. To access the MIB (Management Information Base) NIC web page enter the IP address or
printer host name that was assigned to of the KM-6030 MFP NIC in your browsers URL field.
To obtain this information please print out a status page of the KM-6030 MFP.
2. To print out a STATUS PAGE do the following: At the display screen select the Printer hard
button, at the Touch Screen Interface (TSI) select the Printer Menu option, in the Printer
Menu screen select Printer Status Page and then in the same screen select the Printing
option. This will print out the print controllers STATUS PAGE and a NETWORK STATUS
PAGE (if enable) that contains the IP address and Host name of the KM-6030.

Enter the IP Address that was assigned


to the KM-6030 to access the KM6030 KCC web page.

You can also use the Host Name


to access the KCC web page

KM-6030 MFP Security Checklist

3.1. What is KYOCERA COMMAND CENTER?


KYOCERA COMMAND CENTER (hereinafter referred to as COMMAND CENTER) refers to the
home page embedded in the printing system. By using COMMAND CENTER, you can verify the
status and perform advanced network settings from a PC.

3.2. Requirements
If the printing system is used on a TCP/IP network and has a valid IP address, it may be managed
from any web browser. The web browser allows full configuration of all printing system settings.
Notes
When accessing COMMAND CENTER, make sure that:
The TCP/IP protocol is installed on the PC to access COMMAND CENTER.
The IP address is configured for the printing system.
Required operating systems (OS) for using COMMAND CENTER:
Microsoft Windows 98SE/Me/2000/XP, Microsoft Windows NT 4.0
Apple Macintosh OS X 10.x
COMMAND CENTER has been tested with the following web browsers.
OS
Microsoft Windows

Web Browser
Microsoft Internet Explorer 5.5 and 6.0
Netscape Navigator 6.2 and 7.1
Opera 7

Apple Macintosh

Mozilla 1.5
Microsoft Internet Explorer 5.2
Netscape Navigator 7.1
Safari 1 (OS X 10.2 and later)

KM-6030 MFP Security Checklist

4.0. COMMAND CENTER Pages


To connect to COMMAND CENTER with a web browser:
Run the web browser.
In Address, enter the printing system IP address as the URL. The home page
displays basic information about the printing system.

Select a category from the navigation bar on the left to view and set values for that category.
Note
If COMMAND CENTER Admin password has been set, you will be prompted to enter a user name
and password when accessing any of the screens other than the Start page. If no Admin password
has been set, access to all other pages is unrestricted. The administrator password may be defined
on the Basic page. If prompted to enter User name and Password, any value may be entered for User
Name (including leaving it blank). For Password, enter COMMAND CENTER Admin password.

KM-6030 MFP Security Checklist

COMMAND CENTER home page has 4 main pages corresponding to their functions.
Advanced
Printer

Basic

Start

Page
Start
Basic

Printer

Advanced

Description
Shows this printing systems operating status and current settings.
Includes settings that apply to the printing system, such as Device Defaults,
Security, and Basic Networking.
Includes settings that apply to the printing function of the printing system,
such as emulation, default print resolution, print count, tray selection and
FRPO
Includes advanced settings that apply to the printing system and is
comprised primarily of advanced network settings.

KM-6030 MFP Security Checklist

10

5.0. Status Pages


These pages show the various settings for the Kyocera Command Center.
Page
Start > Status
Pages >
Network >
General
Start > Status
Pages >
Network > IP
Filters

Start > Status


Pages >
Network >
Netware
Start > Status
Pages > Printer
> General

Description
Show the settings of SNMP, TCP/IP, AppleTalk, and
NetBEUI. For more information on other items, refer
to Protocols > TCP/IP > General
Shows the IP address ranges that have access
permissions for each protocol. If no IP addresses
have been entered, access permission will be granted
to all addresses. For more information, refer to
Protocols > TCP/IP > IP Filters
Shows the settings and status of Netware. For more
information, refer to Protocols > Netware > General

Shows the printer general setting as well as the


Security and Network settings. For more information
refer to Basic Page

For more information on Kyoceras products and downloadable drivers, please visit Kyoceras web-site at http://www.kyoceramita.com.

KM-6030 MFP Security Checklist

11

6.0. Basic Page


This section includes settings, such as Device Defaults, Security, and Network. Pages in this section
are available only to the Administrator if the Admin password has been set. Setting the Administrator
password is highly recommended. See the Security section for other security options.

6.1. Device Defaults


This page allows you to make settings that change the display language of the operation panel,
access privileges for the operation panel, time until the printing system switches to Auto Sleep, and
the RAM Disk Size.
Item
Operation Panel Language

Lock Operation Panel

Sleep Timer
Auto Sleep

Buzzer
RAM Disk Mode

RAM Disk Size

Description
The Following languages are available for selection in the drop
down list. English, Franais, Deutsch, Italiano, Espaol,
Nederland, and Portugues.
COMMAND CENTER provides the ability to restrict access to the
operation panel. Select one of the available settings.
Lock: Restricts use of all operation panel keys.
Partial Lock: Restricts use of Menu key.
Unlock: The operation panel is fully operable.
Adjust the sleep time between 5 to 240 minutes. The default setting
depends on each print system.
Switches Auto Sleep On or Off. The default setting is On. To
change Auto Sleep to Off:
1. Click Advanced on the right side of Sleep Timer.
2. Set Auto Sleep to Off
3. Click Submit button
Switch the buzzer sound On or Off. The default setting is Off.
Switch RAM disk mode On or Off. When RAM disk mode is On.
The RAM disk size should be adjusted as follows:
When a Hard Disk is installed in the print system, RAM disk
mode is not available.
This is used to specify RAM disk size. Click on the drop down list
to select the size. The maximum RAM disk size varies depending
on the total memory size installed in the printing system.

KM-6030 MFP Security Checklist

12

6.2. Security
The password entered in administrator account restricts access to COMMAND CENTER pages
(except Start Page).
Notes
By the factory default, COMMAND CENTER has no password. Setting the Admin password is highly
recommended to prevent unauthorized changes to the printing system and networking configuration.
The password can be up to 16 characters long.
We recommend that you record the password.
To Enter/Change the Password

1. Enter the current password in Old Password.


2. Enter the new password in New Password.
3. Enter the same password in Confirm New Password.
4. Click the Submit button.

KM-6030 MFP Security Checklist

13

6.3. Network
This page allows you to configure the printing system for network printing and sending e-mail. For
more information, refer to Protocols > TCP/IP > General.
Note
You must restart the network interface after making configuration changes, in order to properly
register the content of those settings in the printing system. Refer to Reset on this page.
Item
Host Name

IP Address
Subnet Mask

Default Gateway
DHCP

BOOTP

Description
Specifies a name for the printing system network interface. This
name is also used as the NetBEUI Printer Name and the SNMP
sysName object.
Assigns the Internet Protocol address on the printing system
network interface, i.e. 192.168.1.1
Specifies the subnet mask configured on the printing system
network interface. If the printing system does not automatically
assign a usable default value and the first number in the IP address
above is from 192 to 254, then use 255.255.255.0 as the subnet
mask.
The IP address of the default gateway router for the local network.
The printing system can obtain an IP address via a DHCP server
automatically. By default DHCP is turned On, this option can be
disabled by selecting (Off) DHCP.
The printing system can obtain IP configuration via a BOOTP
server automatically. By default BOOTP is turned On, this option
can be disabled by selecting (Off) DHCP

6.4. Reset
This page allows you to restart the network interface or reset it to the factory default.
Item

Description

Restart Network Interface

Restart the network interface after changing network setting. When


clicking the Restart button, the network interface restarts. The
setting becomes effective when you restart the network interface or
power cycle the MFP.

Set All Network Settings to


Factory Default

When clicking the Reset button, all network settings will return to
factory default.

KM-6030 MFP Security Checklist

14

7.0. Advanced Page


This section includes advanced settings that apply to the printing system and is comprised advanced
network settings.
Pages in this section are available only to the Administrator (if the Admin password has been set).
Note
Restart the network interface after changing these settings in order to properly register the content of
those settings in the printing system. Refer to Reset .
7.1. Protocols > TCP/IP > General
Item
Host Name
IP Address

Subnet Mask

Default Gateway
DHCP, BOOTP,
RARP

DNS Server
(Primary,
Secondary)
Domain Name
WINS Server
(Primary,
Secondary)
Scope ID

FTP Status Check

Description
Specifies a name for the printing system network interface. This name is
also used as the NetBEUI Printer Name and the SNMP sysName object
Assigns the Internet Protocol address on the printing system network
interface, e.g. 192.168.1.1
Specifies the subnet mask configured on the printing system network
interface. If the printing system does not automatically assign a usable
default value and the first number in the IP address above is from 192 to
254, then use 255.255.255.0 as the subnet mask
The IP address of the gateway router for the local network.
Identifies how the printing system obtains its IP configuration.
DHCP: automatic configuration via a DHCP server
BOOTP: automatic configuration via a BOOTP server
RARP: automatic configuration via the Reverse Address
Resolution
ARP/PING: automatic configuration via the Address Resolution
Protocol or PING.
The IP address of the primary and secondary Domain Name System
(DNS) servers
The Domain Name System (DNS) name of the domain which the printing
system belongs, such as kyocera.com. It should not include host name.
The IP address of the primary and secondary Windows Internet Name
Service (WINS) servers.
Determines the scope of IP addresses that a Windows server can
grant or lease to any requesting network interface. A DHCP server
processes the printing systems discovery broadcasts and returns an IP
address to it. The DHCP server may be set up to grant an IP address for
a limited time (a temporary lease) or for an unlimited time (an unlimited
lease), or it may be configured with a permanent address reservation for
the printing system
Check Selects whether to check the status of the FTP connection (On) or
not (Off).

KM-6030 MFP Security Checklist

15

7.2. Protocols > TCP/IP > IP Filters


IP filters specify a host or network of hosts that are allowed to access the printing system. An entry
should be a network number or host IP address. Up to 16 access list entries are allowed.

The following protocols can be designated for individual IP address ranges:


FTP (port 21)
HTTP (port 80)
HTTPS (port 443)
SNMP (port 161)
LPR / LPD (port 515)
IPP (port 631)
RAW Port (ports 9100 9103)
When there are no entries, access is allowed to all hosts. To allow all hosts on network 192, enter
192.0.0.0 in Start Address and 192.255.255.255 in End Address. To allow only a host 192.168.1.2,
enter 192.168.1.2 in both Start Address and End Address.

KM-6030 MFP Security Checklist

16

7.3. Security > Encryption > General / Certification


The printing system provides encryption using SSL (Secure Socket Layer). When encryption is
enabled the printing system will encrypt the transmission and reception of print data between a host
computer and the printing system. By default Encryption is turn off, to enable the Encryption functions
perform the following steps:
1. Click on the Advanced Tab.
2. Select the Encryption option and then select the General option.
3. Select the On radio button next to the Authentication option and in the Privacy Mode option
select the encryption scheme you want to use.
4. After you have made your selection click on the Submit button.

5. Select the Certificate option.


6. Enter the location and the name of the printer into the certificate data fields that are displayed.
The E-mail Address field may be left blank.

KM-6030 MFP Security Checklist

17

7. Specify the expiration date of the SSL certificate using the Expiration Date field. Once the
specified expiration date has passed, the printing system cannot be used until a new expiration
date is specified.
8. Click Submit to save the new settings. The security warning that appears when connecting to
the printer is no longer displayed once the certificate has configured.

KM-6030 MFP Security Checklist

18

7.4. Protocols > NetWare > General


This printing system supports both NDS and bindery printing in either print server mode or remote
printer mode.
NetWare setup requires installation of the following client software and logon with Administrator
Privileges. If you are unsure, please contact your network administrator.
Novell Client: Creation of the NetWare print objects with the AdminManager NetWare Setup Wizard
requires the NetWare Client from Novell. For NetWare printing, clients may use the NetWare Client
from either Novell or Microsoft.
Admin Privileges: Network operations concerning creating queues etc. require admin or supervisor
privileges (or equivalent). Certain portions of AdminManager may be inoperable if you attempt those
operations without sufficient privileges.
Item
NetWare Protocol

NDS Tree
NDS Context
Print Server Mode
Print Server Name

Description
Protocol Select whether to enable (On) or disable (Off) the NetWare
protocol.
Select whether to enable (On) or disable (Off) Bindery Mode.
The available settings are the 802.2, SNAP, ETHERNET-II, and 802.3
frame types, and Auto for automatic identification.
Specify the name of the NDS tree to connect to
Specify the NDS context to connect to Print Server Mode.
Enables (On) or disables (Off) the Print Server Mode.
Displays the Print Server Name.

Queue Polling Interval

Sets the polling interval.

Banner Page Requests


Password (Optional)

Specifies if print banner page when printing in Print Server Mode.


Sets the password. Login to NetWare will be successful only if the
password set here matches the Print Server password set in the
NetWare utilities.
Enables (On) or disables (Off) the Remote Print Mode.

Bindery Mode
Frame Type

Remote Printer Mode


Remote Printer Name
Job Timeout

Displays the Remote Printer name.


Sets the timeout value for the end of the job when operating in Remote
Printer mode in the range from 4 to 255 seconds.

KM-6030 MFP Security Checklist

19

7.5. Protocols > NetWare > Bindery Services


This allows registration of the file servers for Print Server Mode for making the connection and the
print servers for Remote Printer Mode. If no registration is made, a network search is made at startup,
and connection is automatically made to the first eight servers that are found.
Even if a registered file server is started after this system is running, polling is performed from the
system at regular intervals for automatically connecting to the server.
Item
Print Server Mode

Description
Enables registration for up to eight file servers. If there are nine or
more file servers, register the file server names that have priority in
connection.
If no registration is made, a connection is automatically made to up
to eight servers at startup. The print server names in the file
servers must match the print servers names in this system.

Remote Printer Mode

Enables registration for up to eight print servers. If there are nine


or more print servers, register the print server names that have
priority in connection.
If no registration is made, a connection is automatically made to up
to eight servers at startup. The printer names (printer port names)
in the print servers must match with the remote printer names
(printer port names) in this system.

7.6. Protocols > NetBEUI


Peer-to-peer printing is available using NetBEUI protocol. With this method, the printing system is
conveniently located in Windows Network Neighborhood.
Item
NetBEUI Protocol
Browse Master

Description
Enables (On) or disables (Off) NetBEUI protocol.
With this option set to On, the printing system becomes the browse
master and creates a workgroup in Windows Network Neighborhood.
With this option set to Off, the printing system can only join an
existing workgroup.

Printer Name

Printer Name correlates with Host Name in the TCP/IP General tab
(Protocols > TCP/IP > General). If you want to change the NetBEUI
printer name, change the TCP/IP Host Name.

Workgroup

Workgroup represents the workgroup which will appear in Entire


Network in Windows Network Neighborhood. The default workgroup
name is KM-NetPrinters.

Comment

You can enter comments here. This can also be left blank.

KM-6030 MFP Security Checklist

20

8.0. Secure Network Print Setting in Windows


On Microsoft Windows 2000/XP/Server 2003, the path to the printing systems network interface
card can be configured using IPP client that is included with Windows. This allows the print data to be
encrypted before being sent to the printer.
1. From the Windows Start menu, select Control Panel > Printers and Other Hardware >
Printers and Faxes > Add a Printer
2. The Add Printer Wizard is displayed. Click Next.
3. Select a network printer, or a printer attached to another computer, and click Next.

KM-6030 MFP Security Checklist

21

4. Select Connect to a printer on the Internet or on a home or office network and then
enter the URL of the printer in the format https://(Printer IP Address)/ipp/lp

5. Click Next.
6. The screen to search for and install the printer driver is displayed. Follow the on-screen
directions to install the printer driver.

KM-6030 MFP Security Checklist

22

9. 0. Troubleshooting
If trouble occurs with using COMMAND CENTER, carry out the applicable checkpoints and
procedures indicated below. If the trouble persists, contact your service representative or authorized
service center.
Issues
I cant access
COMMAND CENTER

Possible Causes
Check to see if the MFP is plug into an
electrical outlet and that the MFP is turned
On
Is the network cable Connect the network
cable properly connected?

Has the administrator set up an IP Filter


function?
Is a Read Community of SNMP setting
correct?
Does the version of your web browser
support COMMAND CENTER?
Does the version of your web browser
support COMMAND CENTER?

Procedure
Turn the power on for the MFP, wait until it is at
the ready state and try to access COMMAND
CENTER.
Make sure that the network cable is not pinch or
broken, check to see if the cable is connected to
the MFP and the patch panel that is used to access
your network. Also make sure that it is a standard
network such as an RJ 45 10/100BASE TX cable.
Verify that the IP address assigned to the print
system is a valid one. Also check to see if the IP
address assigned to the print system is not already
being used by another device.
Check the proxy setting for your particular web
browser and verify that these setting are correct.
Also make sure that pop up blockers and firewalls
are not blocking the COMMAND CENTER web
pages.
Access COMMAND CENTER from a computer
that is listed in the approved IP address list
Access COMMAND CENTER from an approved
Read Community.
Use a web browser that supports COMMAND
CENTER
Use a web browser that supports COMMAND
CENTER

Has the administrator set a password

Enter the appropriate password

Is the printer currently being used?

Settings are not possible while the printing system


is processing print data. Wait until the print job is
completed and registers your setting again.
After you make the desired settings, click the
Submit button.
Contact your dealer or service center.

Is the Network setting that were made to


the printing system correct?

Are the LAN settings in your web browser


correct?

Characters do not
display properly in
COMMAND CENTER
I cant access the Basic,
Printer and Advanced
pages
The setting I made are
not registered

Did you click on the Submit button after


making the settings?
The Administrator has
forgotten the Admin
password.
Error is displayed under
the STATUS indictor

Is there an error message shown in the


message display?

KM-6030 MFP Security Checklist

Follow the appropriate procedure on the


troubleshooting page of the Printing System
Operation Guide that corresponds to the error
message.

23

10.0. Kyocera Network Authentication


Kyocera Network Authentication is a server based utility that supports Windows Active Directory.
Authorized users will be required to enter a login name and password at the display screen of the
KM-6030 MFP. The login name and password must be the same login and password used to allow
end users access to the companys network. The authentication levels that are supported are
Kerberos for Windows 2000 Server, Windows 2003 Server, and NTLM for Windows NT Server

10.1. Kyocera Network Authentication requirements

NS-30 Scanner Interface Card

Machine Firmware:
Main - 4E
MMI - MY
Language - 7J

The released version of firmware is available for download from www.KMAconnect.com.


Firmware Note:
When the Firmware upgrade has been completed, you must follow the steps below to use Kyocera
Network Authentication Server. Upon power up, after the Firmware Upgrade, you may encounter a
C640 Error Code on the MFP. If the afore mentioned error code is displayed, the following steps will
be needed to clear the code. If no error code is displayed, you can start at Step 2. These steps are
required to enable Kyocera Network Authentication Server.
Open and Close Front Panel Door
1. Enter Simulation Mode
2. U906 Reset - MFP will reboot
3. Enter Simulation Mode
4. U510 Enterprise Mode - MFP will not reboot
5. U024 Format System Hard Drive - MFP will reboot
Note:
To enable Network Authentication, the MFP must be in Enterprise Mode. To configure the device to
enter Enterprise Mode, simulation U510 must be enabled.
If you can not enable Enterprise Mode simulation 510, you must first disable Scan to FTP at
Simulation 511 first.

KM-6030 MFP Security Checklist

24

Remove existing Kyocera Authentication Server installation:


Prior to the installation of Kyocera Authentication Server 2.00, you must completely remove any
existing Kyocera Authentication Server installation from your server. Please follow the instructions
listed below to remove existing Kyocera Authentication Server.
1. You must stop Kyocera Authentication services first before you perform the following uninstall
procedures.
2. Go to Start\Settings\Control Panel\Add/Remove Programs, select Kyocera Authentication Server
from currently installed programs list and click on Remove. Follow the instructions on screen to
remove this program.
3. Restart the server.

Installation of Kyocera Network Authentication Server 2.00:


The installation of Kyocera Network Authentication Server 2.00 is wizard based and with limited
interaction can be installed and configured in a matter of minutes. For detailed installation instruction
please see www.KYOcapture.com or the installation CD.
Test Configuration:
Below is an actual configuration used for testing purposes. The test environment area contains two
servers, one Active Directory Server with the Kyocera Network Authentication Server and the second
server is the KYOcapture Server.

KM-6030 MFP Security Checklist

25

10.2. Configuration of the Kyocera Network Authentication Server:


To configure authentication, double click Kyocera Authentication Server Icon in the Control Panel,
and follow the instructions as the individual tabs explained in detail to the left of each tab.

1. The Service Tab is where you Start the Authentication Service. Select Start up Type
(Manual is Selected by default.) as well as select the type of network environment.
2. The Authentication Methods available are Active Directory, NTLM (Windows Domain
Controller) and Netware. For this example we selected Active Directory. By default all are
selected and one choice will need to be made.
3. The default Port for Authentication Server is 4242. This port number should not be
changed.

KM-6030 MFP Security Checklist

26

1. The E-Mail Tab needs to have the LDAP


Server Host Name or IP Address entered
manually.
2. As long as the proper credentials are used,
the Find Root button will automatically
populate the default root of the LDAP
Server.
3. If the Anonymous Check Box is not selected
then credentials are necessary to connect
to the LDAP Server.
4. Upon initial setup of the Authentication
Server you will need to Click the Test
Button and enter a Valid User Name. When
a valid Username is used, a dialogue box
claiming E-Mail look up was successful
will be displayed. This will prove connection
to a valid LDAP Server.
5. Once a valid e-mail address is returned,
close the Success Dialog Box and Click
Apply to save settings.

As with KYOcapture License Manager, the


Authentication Server offers the ability to
License the Utility as well as check for
Software Updates.

From this tab you can update and transfer


and extend your license too.

Initial install will allow for a 30 Day free trial.

4. The Kyocera Authentication Server is now configured and should be started from the
Service Tab of the Kyocera Authentication Server.
Note:
The LDAP Server is not always the Mail Server. Larger network environments may have a Mail
Server and an LDAP Server. And again you would want to enter the IP or Host Name of the
LDAP Server.

KM-6030 MFP Security Checklist

27

10.3. Configuring the KM-6030 in Enterprise Mode:


Configuring the Kyocera Multifunctional Device can be accomplished in two different ways. One is
through the Scanner Default settings on the Operation Panel or through the Web Interface of the NS30. For the purpose of this document, we will cover the Web Interface of the NS-30 Card.
1. Enter the IP Address of the NS-30 Scanner interface card into the URL field of your web
browser and click go or press the enter key on the computers key board.

2. Click on the System Basic Settings option


3. Click on the Enterprise Mode option

KM-6030 MFP Security Checklist

28

4. Scroll down the page to the Authentication Setting drop down arrow and select Network
Authentication.
5. Scroll down the page to the Network Authentication section, enter the IP address or Host
name of the computer where the Kyocera Network Authentication Server software was
installed. Verify the Authentication Port Number is 4242.
6. In the Network Authentication Type field click the drop down arrow, select the network
type and enter a Domain Name. If you are using NetWare, the options for NDS Tree and
Context would also be enter on this page.

KM-6030 MFP Security Checklist

29

7. Scroll to the Bottom of this Page and Click Registration.

Now the KM-6030 Multifunctional Device is configured and ready for use with Network Authentication.

KM-6030 MFP Security Checklist

30

11.0. Account Management


11.1. Overview of Account Management
The KM-6030 Account Management feature allows you to manage the amount of copies that can be
made, as well as who has access to the KM-6030 MFP. The KM-6030 can be configured with Job
Accounting to assign individual or departments unique ID. Job Accounting will prevent unauthorized
access to the copier and will also track the amount of copies, prints and scans that were made.
The Account Management Job accounting helps the following activities in business organizations:

Integrated management of optional printing and scanning statistics through the use of an
identical department ID code.

Manageability of up to 1,000 individual departments.

Availability for department ID codes with as many as eight digits (between 0 and 99999999) for
security.

Tracking the copy volume for each department and for all departments combined.

Restricting the copy count per department in one-page increments up to 999,999 copies.

Resetting the copy counter for each department or for all departments combined.

Accessing the departmental copy counter for reference without entering the management
code.

IMPORTANT: To restrict the number of copies, printouts or scanned images using job accounting,
you must switch the Copy Job Accounting from [Off] to [On]. If the copier is equipped with the optional
printer kit or scanner kit, also activate Printer Job Accounting and Scanner Job Accounting as the
default. Refer to Job Accounting Default Settings for details.

KM-6030 MFP Security Checklist

31

Job accounting includes the following functions for managing print counts.
Menu
Description
Reference Page
Manage Accounts

Departmental Copy Volume

Job Accounting
Job Accounting Default
Settings

New Account: Specifies new ID codes


and restrictions for usage. Up to 1,000
department ID codes can be registered.

Pages 34 36

Change Restrictions on Usage:


Specifies restrictions on usage for
individual departments.

Pages 38 44

Delete Account: Deletes the registered


departments

Page 45

Total Copy Volume: For reading the


total copy counts of all departments,
print job accounting reports and
resetting the copy counter.

Pages 49 51

Copy Volume by Department: For


reading copy counts of various
departments and resetting the copy
counters.

Pages 52 53

Activating and Deactivating Job


Accounting
Changes the defaults for job accounting

Pages 54 - 59

KM-6030 MFP Security Checklist

Pages 60 - 64

32

11.2. Accessing the Job Accounting Screen


Set up job accounting from the Job Accounting screen. Follow these steps to access the Job
Accounting screen.
1. Press the System Menu/Counter key.
2. Press [Job Accounting].

3. Use the numeric keys to enter the administrator number four-digit management code. By
default, the management code is 6000 for 60
cpm model and 8000 for 80 cpm model. The Job Accounting screen will be displayed.

NOTE: For security, it is recommended to change the management code. Refer to Changing
Management Code on page 3-32 of KM-8030 / 6030 Advance Users Guide.
When installing the optional security kit, enter the eight-digit management code. By default, the
management code is 60006000 for 60 cpm model and 80008000 for 80 cpm model.
Proceed to the following section to customize job accounting menus.

KM-6030 MFP Security Checklist

33

12.0. Managing Accounts


You can add and delete departments and define restrictions to copy count as
needed.

12.1. New Account


Follow these steps to create new accounts by entering an account ID code (of up
to eight digits), account name, and restrictions on usage as desired.
Access the Job Accounting screen. (For instructions, refer to Accessing the Job
Accounting Screen on page 33.)
1. Access the Job Accounting screen. (For instructions, refer to Accessing
the Job Accounting Screen on page 33.)

2. Press [Management Edit].

3. Press [Register]

KM-6030 MFP Security Checklist

34

4. Select Account ID and press [Change #].

5. Use the numeric keys to enter the department ID code from 0 to 99999999

6. Press [Close].
7. Select Name to display and press [Change #].

8. Enter the department name and press [End].

KM-6030 MFP Security Checklist

35

9. When all entries are complete, press [Next]

Important:
An error will occur if you do not complete Account ID and
Name to display. You will not be able to proceed to the next
screen. Be sure that you have completed the entries.
An error will also occur if you attempt to enter an existing
department ID code. You will not be able to proceed to the
next screen. Use a different ID code or name.
10. Specify restrictions on copying as desired. For instruction on restricting
copier usage, refer to Restricting Using the Copier on page 37.

11. Press [Registr.] to finalize settings.


(To register additional departments press [Register] and repeat the
previous steps).
12. Press [Close]. The touch panel will return to the Job Accounting screen.

KM-6030 MFP Security Checklist

36

13.0. Restricting Using the Copier


You can restrict the use of the copier functions for each department.
Different functions can be restricted depending on the job accounting default
settings (specifically depending on weather you select [All] or [Each] for
Copy/Print Output Management). Refer to Copy/Print Output Management on
page 4-23 of the KM-8030/6030 Advance Users Guide.
Restricting copying:
[All]
Available settings: [Permitted] and [Is not permitted]
(Refer to page 38)
[Each]

Available settings: [No limit], [Counter limit] and [Is not permitted]
(Refer to page 42)

Restricting printing:
[All]
Available settings: [Permitted] and [Is not permitted]
(Refer to page 39)
[Each]

Available settings: [No limit], [Counter limit] and [Is not permitted]
(Refer to page 43)

Restricting number of copies to copy and print:


[All]
Available settings: [No limit] and [Counter limit] (Refer to page 40)
Restricting transferring scanned image:
[All / Each] Available settings: [No limit], [Counter limit] and [Is not permitted]
(Refer to page 41)

KM-6030 MFP Security Checklist

37

13.1. Restricting Copying [All]


Specify whether copying is authorized.
Note: Turn Copy Job Accounting [On] in the job accounting default
settings to use this function.
1. Refer to steps 1 to 12 of the New Account on page 35 and display the
usage restriction screen.
2. Set [Copy / Printer Output Management:] to [All] on page of the KM8030/6030 Advance Users Guide.
3. Select Copy and press [Change #].

4. Press [Permitted] to allow copying or [Is not permitted] to prohibit copy.

5. Press [Close]. The touch panel will return to the usage restriction screen.

KM-6030 MFP Security Checklist

38

13.2. Restricting Printing [All]


Specify whether printing is authorized when the copier is equipped with the
optional printer kit.
Note: Turn Printer Job Accounting [On] in the job accounting default
settings to use this function.
1. Refer to steps 1 to 12 of New Account on page 34 and display the usage
restriction screen.
2. Set [Copy / Printer Output Management:] to [All] on page 4-23 of the KM8030/6030 Advance Users Guide.
3. Select Printer and press [Change #].

4. Press [Permitted] to allow printing or [is not permitted] to prohibit printing.

5. Press [Close]. The touch panel will return to the usage restriction screen.

KM-6030 MFP Security Checklist

39

13.3. Restricting Number of Copies to Copy and Print


Restricts the number of copies to copy and print. When the copier is installed
with the option printer kit, the restricted number of copies applies to the sum of
copies copied and printed.
1. Refer to steps 1 to 12 of New Account on page 34 and display the usage
restriction screen.
2. Set [Copy / Printer Output Management:] to [All] on page 4-23 of the KM8030/6030 Advance Users Guide.
3. Select Output limitation and press [Change #].

4. Press [Counter limit] to apply restriction to the number of copies. Use the
numeric keys to enter the number of pages from 1 to 999999.

5. Press [Close]. The touch panel will return to the usage restriction screen.

KM-6030 MFP Security Checklist

40

13.4. Restricting Transferring Scanned Images


You can prohibit or restrict the number of scanned pages to transfer or e-mail to
the PC. This function is available when the copier is equipped with the optional
scanner kit.
Note: Turn Scanner Job Accounting [On] in the job accounting default
settings to use this function.
1. Refer to steps 1 to 12 of New Account on page 34 and display the usage
restriction screen.
2. Select Scanner transmission and press [Change #].

3. To prohibit scanning images, press [Is not permitted].

4. Press [Close]. The touch panel will return to the usage restriction screen.

KM-6030 MFP Security Checklist

41

13.5. Restricting Copying [Each]


You can limit the copying volume.
Note: Turn Copy Job Accounting [On] in the job accounting default
settings to use this function.
1. Refer to step 1 to 12 of New Account on page 34 and display the usage
restriction screen.
2. Set [Copy / Printer Output Management:] to [Each] on page 4-23 of the
KM-8030/6030 Advance Users Guide.
3. Select Copy and press [Change #].

4. To restrict copying, press [Is not permitted]. To restrict the number of


copying, press [Counter limit] and use the numeric keys to enter the
number of copies from 1-999999.

5. Press [Close]. The touch panel will return to the usage restriction screen.

KM-6030 MFP Security Checklist

42

13.6. Restricting Printing [Each]


Prohibiting printing is applicable to the copier when it is equipped with the
optional printer kit.
Note: Turn Printer Job Accounting [On] in the job accounting default
settings to use this function.
1. Refer to steps 1 to 12 of New Account on page 34 and display the usage
restriction screen.
2. Set [Copy / Printer Output Management:] to [Each] on page 4-23 of the
KM-8030/6030 Advance Users Guide.
3. Select Printer and press [Change #].

4. To restrict printing press [is not permitted]. To restrict the number of


copying, press [Counter limit] and use the numeric keys to enter the
number of copies from 1-999999.

5. Press [Close]. The touch panel will return to the usage restriction screen.

KM-6030 MFP Security Checklist

43

13.7. Deleting Accounts


This section explains how to delete department accounts that have been
registered.
1. Access the Job Accounting screen. (For instructions, refer to Accessing
the Job Accounting Screen on page 33)
2. Press [Management Edit].

3. Select the department ID code to delete and press [Delete]


Note: To change the order of the departments displayed by sorting, press
[Order of indication]. Choose [Sort by Code] [1 9] to sort in ascending
order and 9 1 to sort in descending order or [Sort by Name] [A Z] to
sort in ascending order and [Z A] to sort in descending order.

KM-6030 MFP Security Checklist

44

4. To delete the ID code press [Yes]. Repeat step 3 and 4 to delete


additional ID codes.

13.8. Editing Department Information


This section explains how to edit department ID codes that have been registered.
1. Access the Job Accounting screen. (For instructions, refer to Accessing
the Job Accounting on page 33)
2. Press [Management Edit].

3. Select the department ID code to edit and press [Mgt. Inf. Correction]

KM-6030 MFP Security Checklist

45

4. To change the ID-code, select Account ID and press [Change #].

5. Press [Clear] to clear the current entry. Use the numeric keys to enter the
new ID code (up to eight digits) then press [Close]

6. To edit the department name, select Name to display and press


[Change #]

7. Press [AllDel.] to clear the current entry and enter the new name.

8. Press [Close]
9. Press [Close]. The touch panel will return to the Job Accounting screen.

KM-6030 MFP Security Checklist

46

13.9. Change Restrictions on Usage


You can change the restriction on copying and printing per individual department.
IMPORTANT: To restrict the number of copies, printouts, or scanned images
during job accounting, turn Copy Job Accounting from [Off] to [On] in the job
accounting default settings. Refer to Job Accounting Default Settings on page 54
for details. If the copier is equipped with the optional printer kit and/or the
scanner kit, activate Printer Job Accounting and Scanner Job Accounting in the
job accounting default settings.
1. Access the Job Accounting screen. (For instructions, refer to Accessing
the Job Account Screen on page 33)
2. Press [Management Edit]

3. Select the department ID code to change and press [Limit in use]

4. Select the restriction on copying as desired. (For details on restricting


copier usage, refer to Restricting Using the Copier on page 37)

5. Press [Close]
6. Press [Close]. The touch panel will return to the Job Accounting screen.

KM-6030 MFP Security Checklist

47

14.0. Copy Count per Department


You can read the overall copy count or the count per individual department. The
copy count can be reset to 0 as desired.

14.1. Total Copy Count


The Total Copy Count tracks the total copy counts of all departments. You can
print the total in form of job accounting reports and the total copy count can be
reset as necessary.
1. Access the Job Accounting screen. (For instructions, refer to Accessing
the Job Accounting Screen on page 33)
2. Press [Management Total]

3. The total copy count is displayed for your reference.


4. Press [Print Report] and choose the report type to print this information as
a copy management report.
5. Press [Report by Size] in the total count by size setting of the job
accounting default settings for a list of the reports by copy paper size.

KM-6030 MFP Security Checklist

48

KM-6030 MFP Security Checklist

49

6. To reset the copy volume, press [Counter clear]

7. Press [Yes].

8. Press [Close]. The touch panel will return to the Job Accounting screen.

KM-6030 MFP Security Checklist

50

14.2. Copy Count by Department


The Copy Count by Department tracks the copy per individual departments. The
copy count per department can be reset as necessary.
1. Access the Job Accounting screen. (For instructions, refer to Accessing
the Job Accounting Screen on page 33)
2. Press [Each Mgt. Total].

3. Select the ID code of the department and press [Total]

KM-6030 MFP Security Checklist

51

4. The copy count of the selected department is displayed for your reference.
Note: The copy limitation per department is given in parentheses after the
current volume, as in 1,234 (999,999).

5. To reset the copy count, press [Counter clear].

6. Press [Yes].

7. Press [Close]
8. Press [Close]. The touch panel will return to the Job Accounting screen.

KM-6030 MFP Security Checklist

52

15.0. Activating and Deactivating Job Accounting


This section explains how to activate and deactivate the Job Accounting feature.
Setting
On
Off

Description
Job accounting is activated
Job accounting is deactivated

1. Access the Job Accounting screen. (For instructions, refer to Accessing


the Job Accounting Screen on page 33)
2. Select [On] or [Off]

3. Press [Close]
4. Press [End]

When you select [On], the screen for the department ID code entry
is displayed.

When you select [Off], the [Basic] screen is displayed

KM-6030 MFP Security Checklist

53

16.0. Job Accounting Default Settings


The Job Accounting Default Settings allow you to specify the default job
accounting settings listed below:

Copy Job Accounting


Printer Job Accounting
Reports on Printing Errors
Printing from Unregistered Sources (Printer)
Copy/Printer Output Management
Scanner Job Accounting
Response to Unauthorized Requests
Default of Copy Limitation
Total Count by Size 1-5

KM-6030 MFP Security Checklist

54

16.1. Copy Job Accounting

Setting
On
Off

Description
Copy Job accounting is activated
Copy Job accounting is deactivated

1. Access the Job Accounting screen. (For instructions, refer to Accessing


the Job Accounting Screen on page 33)
2. Press [Job Accntg Def. Set.]

3. Select Copy Job Accounting and press [Change #]

4. Select [On] or [Off]

5. Press [Close]
6. Press [Close]. The touch panel will return to the Job Accounting screen.

KM-6030 MFP Security Checklist

55

16.2. Printer Job Accounting

Setting
On
Off

Description
Copy Job accounting is activated
Copy Job accounting is deactivated

1. Access the Job Accounting screen. (For instructions, refer to Accessing


the Job Accounting Screen on page 33)
2. Press [Job Accntg Def. Set.]

3. Select Print Job Accounting and press [Change #]

4. Select [On] or [Off]

5. Press [Close]
6. Press [Close]. The touch panel will return to the Job Accounting screen.

KM-6030 MFP Security Checklist

56

16.3. Reports on Printing Errors


When you use job accounting to manage printing, you can specify whether an
error report is printed in case that users attempt to print using the incorrect
department code.

1. Access the Job Accounting screen. (For instructions, refer to Accessing


the Job Accounting Screen on page 33)
2. Press [Job Accntg Def. Set.]

3. Select Reports for Printer error report and press [Change #]

4. Select [On] or [Off]

KM-6030 MFP Security Checklist

57

5. Press [Close]
6. Press [Close]. The touch panel will return to the Job Accounting screen.

16.4. Printing from unregistered Sources (Printer)


If you use job accounting to manage printing, you can authorize or prohibit
printing from computers with printer drivers that do not support job accounting.

1. Access the Job Accounting screen. (For instructions, refer to Accessing


the Job Accounting Screen on page 33)
2. Press [Job Accntg Def. Set.]

KM-6030 MFP Security Checklist

58

3. Select Other Mgt. Reg. (print) and press [Change #].

4. Select [On] or [Off]

5. Press [Close]
6. Press [Close]. The touch panel will return to the Job Accounting screen.

KM-6030 MFP Security Checklist

59

16.5. Copy / Printer Output Management

1. Access the Job Accounting screen. (For instructions, refer to Accessing


the Job Accounting Screen on page 33)
2. Press [Job Accntg Def. Set.]

3. Select Copy/Printer output mgt and press [Change #)

\
4. Select [All] or [Each].

5. Press [Close]
6. Press [Close]. The touch panel will return to the Job Accounting screen.

KM-6030 MFP Security Checklist

60

16.6. Scanner Job Accounting

1. Access the Job Accounting screen. (For instructions, refer to Accessing


the Job Accounting Screen on page 34)
2. Press [Job Accntg Def. Set.]

3. Select Scanner Job Accounting and press [Change #]

4. Select [On] or [Off]

5. Press [Close].
6. Press [Close]. The touch panel will return to the Job Accounting screen.

KM-6030 MFP Security Checklist

61

16.7. Response to Unauthorized Requests

1. Access the Job Accounting screen. (For instructions, refer to Accessing


the Job Accounting Screen on page 34)
2. Press [Job Accntg Def. Set.]

3. Select Excess of limit Setting and press [Change #].

4. Press [Stop job immediately], [Stop after job done] or [Only warning].

5. Press [Close].
6. Press [Close]. The touch panel will return to the Job Accounting screen.

KM-6030 MFP Security Checklist

62

17.0. Copying with Job Accounting ON


When job accounting is activated, users must enter their department ID-code on
the numeric keys to use the copier.

1. Use the numeric keys to enter the department ID-code and press [Enter].
The touch panel will return to the [Basic] screen.

Note: If you enter the code incorrectly, press [Clear] to reenter the correct
code. Entering an invalid department ID-code will trigger an error alarm. Use
the numeric keys to enter the correct code. You can review the departments
copy count by pressing [Each Mgt. Total] after entering your department IDcode.
2. Complete the copy job as usual.
3. After copying, be sure to press the Job Accounting key to display the
initial screen so that the next user can enter his or her department IDcode.

KM-6030 MFP Security Checklist

63

18.0. Data Security Kit (B)


This portion of the guide contains information on the proper use of the Data
Security Kit (B), as well as cautionary notes relating to its use. Be sure to
carefully read this operation guide before using the Security Kit. The individual
who will be responsible for operating the MFP and the MFP security should read
this guide. The administrator should store this guide in a secure place.

18.1. About the Data Security Kit (B)


The MFP temporarily stores the original documents, which is read as electronic
data, onto the MFPs hard disk. Printing is performed using this data. Even after
the printing is completed, the data remains stored on the hard disk until it is over
written by other data. Therefore there is a possibly that confidential information
will be leaked if special tools are used to cover this remaining data.
The Data Security Kit (B) overwrites old data data that is not required and
data storage area where the data has been deleted to ensure that the data
cannot be recovered. Overwriting is performed automatically, without user
intervention.

18.2. Conditions required for Data Security


The following are required for fulfilling the validity of the data security using the
Data Security Kit (B):
Dependable Administrator Companies should delegate some one in
their organization to responsible for security of the MFP that is equipped
with the Data Security Kit.

Safe Physical Location of installation The MFP should be installed in


a location which the accessibilities are limited in order to prevent
unauthorized personnel from using the MFP.

Dependable Service Representative All maintenance activities by a


service representative should by performed with the administrator present.

KM-6030 MFP Security Checklist

64

18.3. Unsecured Data


The Data Security Kit secures data that is not required after it is printed, and data
that has been deleted. This means that the responsibility for maintaining data
before it is printed or data that is stored before it is deleted lies with the user.
The data derived from the following functions must be administered by the user:
Document Management (Copy Function)
Quick Copy (Printer Function)
Proof and Hold (Printer Function)
Private Print (Printer Function)
Stored Job (Printer Function)
Virtual Mail box (VMB) (Printer Function)
Temporary code Job (Printer Function)
Permanent code Job (Printer Function)

18.4. About Security Mode


Security mode refers to the machine status of the MFP in which the Data
Security Kit has been installed on and is functioning properly. When the MFP is
in the security mode, a hard disk icon will be displayed on the right upper corner
of the touch panel.

Note: You can determine the operational status of the overwrite function by
monitoring changes to the image of the hard disk icon. See page 69
(18.7.Display during overwrite) for further details.

KM-6030 MFP Security Checklist

65

18.5. Data Security Kit Functions

18.6. Overwrite Function

Function details Overwrites old document data when copying or


printing is completed.

Overwriting method 3 X Overwrite or 1 X Overwrite (see page 72 Step


3: Hard Disk Overwrite Setting for further details)

Execution timing Overwrites existing old document data after a job is


completed.

Data to be overwritten See page 69 Data to be overwritten for further


details.

Overwrite-in-Progress Screen The hard disk icon alternates between


the two icons (See page 68 Display during overwrite for further details.)

Overwriting Time Differs depending on the amount of data to overwrite.

KM-6030 MFP Security Checklist

66

18.7. Format Function

Function details - Overwrites all data on the hard disk.

Overwriting method - 3-time Overwrite or Once Overwrite (See page 72


Step 3: Hard Disk Overwrite Setting for further details.)

Execution timing - Execution through the operation panel (See page 73


Hard Disk Format for further details.)

Data to be overwritten - See page 70 Data overwritten through the


format function for further details.

Overwrite-in-Progress Screen - Formatting Hard Disk is displayed.

Overwriting Time See page 70 Time required to format for further


details.

18.8. Hard Disk Format


You can select either of the following two methods to overwrite data:
Once Overwrite
Overwrites the entire area used to store old document data with zeroes to reject
recovery of the data. The entire hard disk is overwritten with zeroes during a
format operation.
3-time Overwrite (Default)
Overwrites the entire area used to store old document data twice with a random
pattern and then a third and final time with zeroes. It takes longer to execute than
the Once Overwrite, but because even highly-sophisticated recovery methods
are unable to recover the data, this method provides higher security. The area to
be overwritten is the same as for the Once Overwrite.

KM-6030 MFP Security Checklist

67

18.9. Display during overwrite

Important! To avoid damaging the hard disk, do not turn the copier power off
during overwrite (while the hard disk icon is alternating between the two icons).
Note:
If the copier power is turned off while overwriting is still in progress, any
data that has not yet been overwritten will remain on the hard disk. In this
case, overwriting should be re-started from the beginning when the copier
is turned on again.

In rare cases after the copier power is turned off during overwrite; the hard
disk icon may not change to . This means that overwrite may not be
possible because data was corrupted during data overwriting. Though the
copier will be able to overwrite and overwrite data that is not required after
it is printed, the hard disk will need to be re-formatted in order to restore
overwriting to normal. (See page 74 for information about formatting the
hard disk.)

KM-6030 MFP Security Checklist

68

19.0. Data to be overwritten

Data to be overwritten are as follows:


Copy Function
The original document data of a copy which output is completed
The original document data stored through a document management
function and deleted by the user
The original document data stored in Synergy Print Box that is deleted
because the expiration date was reached
Printer Function (when optional hard disk is installed)
Post-output print data
Print data in the private print mode and virtual mailbox function when
output is completed
Quick Copy, proof and hold, and Private Print data (Deleted when power
is turned off and then back on again.)
Data deleted by the user using the Quick Copy, proof and hold, Private
Print, Stored Job, virtual mailbox, Temporary code Job, or Permanent
code Job function
Data deleted when maximum number of documents is exceeded by Quick
Copy, or proof and hold print data
Data deleted when storage capacity is exceeded by Temporary code Job
print data
Scanner Function
Scanned original document data
Note: The Security Kit immediately overwrites the original document data stored
onto the hard disk when copying, scanning or printing is cancelled while
processing.

KM-6030 MFP Security Checklist

69

19.2. Data overwritten through the format function

Data overwritten through the format function are as follows:


Copy Function
Job Accounting data
Original document data stored with the document management function
Printer Function (when optional hard disk is installed)
Data stored in Stored Job mode
Program data
Optional font
Macro data
Scanner Function
Common book
Time required to format
Times required to format are as follows:
Overwriting method
Once Overwrite
3-time Overwrite

Formatting time
Approx. 2 hours
Approx. 7 hours

KM-6030 MFP Security Checklist

70

19.3. Security Kit Installation Procedures


Step 1: Preparation
Security Kit installation
The Security Kit is installed by service representative.
Precautions for Security Kit installation
The repeat copy function becomes prohibited.
The Delete Invalid Data menu is replaced by the Format Hard Disk menu.

Precautions for installing the Security Kit on a pre-used copier


After installing the Security Kit, you must format all hard disks.
Step 2: Changing the Management code
The management code must be entered to use the Security Kit. Changing the management code
prevents everyone except the administrator from using the Security Kit. The management code is
eight digits long when using security mode.
Important! Avoid using a management code that is easily guessed, such as 11111111 or 12345678.
Note: You can change the management code within the range of 00000000 to 99999999. Be sure to
use eight digits.
1. Press the Default Setting/Counter key.
2. Press the Machine Default key.
3. Use the numeric keys to enter the current management code. The factory default numbers are
80008000 for 80 cpm model and 60006000 for 60 cpm model.
4. Select Management code change from the left side setup field, and press the Change # key.

KM-6030 MFP Security Checklist

71

5. Enter the new management code using the numeric keys.

6. Press the Close Key.


Step 3: Hard Disk Overwrite Setting
Selects the hard disk overwrite. See page 69 Hard Disk Overwrite for further details.
Note: Note that it does not apply to overwrite and formatting individually.
1. Press the Default Setting/Counter key.
2. Press the Machine Default key.
3. Use the numeric keys to enter the current Management code. The factory default numbers are
80008000 for 80 cpm model and 60006000 for 60 cpm model.
4. Select Hard Disk Overwrite from the left side setting field, and press the Change # key.
5. Press 3-time Overwrite or Once Overwrite.

6. Press the Close key

KM-6030 MFP Security Checklist

72

19.4. Hard Disk Format


Format the hard disk when disposing of the MFP or the hard disk to overwrite the hard disk data.
See page 68 Format Function for further details.
Important! To avoid damaging the hard disk, do not turn the power off while formatting the hard disk.
If the formatting is not completed, there is a possibility of data being recovered from the hard disk and
information being leaked.
Note: The Security Kit re-starts formatting the Hard Disk when power is turned of and then on.
If the optional hard disk is installed, the hard disk is also formatted.
1. Press the Default Setting/Counter key.
2. Press the BOX Management key.
3. Use the numeric keys to enter the current Management code. The factory default numbers are
80008000 for 80 cpm model and 60006000 for 60 cpm model.
4. Press the On key under Format Hard Disk (on the right side of the touch panel).

5. When prompted to confirm formatting, press the Yes key to begin formatting
6. After formatting is completed, turn off the Main Switch and unplug the Power Cord

19.5. Error Messages


Contact your service representative or authorized service center if any of the following messages are
displayed.
Message
Security key is not recognized.
Not available

KM-6030 MFP Security Checklist

Details
Security key is not connected
properly or is damaged

73

You might also like