Top Page > Security Guide > Preventing Leakage of Information from Machines > Encrypting Data on the Hard Disk

Encrypting Data on the Hard Disk

Keep SD cards or USB flash memory devices out of reach of children. If a child accidentally swallows an SD card or USB flash memory device, consult a doctor immediately.

This function is only available for the standard hard disk. If your machine is equipped with the Enhanced Security HDD Option, data on the hard disk is always encrypted. Therefore, this function can only encrypt the machine's NVRAM data.

Prevent information leakage by encrypting the Address Book, authentication information, and stored documents while the data is written. The data is encrypted using the AES-256 encryption algorithm.

When data encryption settings are enabled, an encryption key is generated and used to restore the data. This key can be changed at any time.

Data that is encrypted

This function encrypts data that is stored in the machine's NVRAM (memory that remains even after the machine is turned off) and on the hard disk.

If your machine does not have the hard disk as standard and the optional HDD is not installed, the data in the machine's NVRAM is encrypted.

The following data is encrypted:

Address Book data
User authentication information
Data stored in Document Server
Temporary stored documents
Logs
Network I/F setting information
System settings information

If the machine needs to be replaced, the existing data can be transferred to a new machine, even if the data is encrypted. To transfer data, contact your service representative.
You can back up the machine's data encryption key to an SD card. For details about how to use SD cards, see "Inserting/Removing a Memory Storage Device", Getting Started.

Time required for encryption

When setting up encryption, specify whether to start encryption after deleting data (initialize) or encrypt existing data and retain it. If data is retained, it may take some time to encrypt it.

Setting	Data to be kept	Data to be initialized	Required time
File System Data Only	Embedded Software Architecture applications' program/log Address Book Registered fonts Job logs/access logs Thumbnails of stored documents Sent/received e-mail Documents forwarded to the capture server Files received via Mail to Print Spooled jobs	Stored documents (stored documents in Document Server, Locked Print files / Sample Print files / Stored Print files / Hold Print files, and received and stored fax documents) Registered stamps	Approx. 1 hour and 30 minutes
All Data	All Data: Both the data to be kept and not to be kept when [File System Data Only] is specified	None	Approx. 5 hours
Format All Data	None	All Data: Both the data to be kept and not to be kept when [File System Data Only] is specified	Several minutes

Setting

Data to be kept

Data to be initialized

Required time

File System Data Only

Embedded Software Architecture applications' program/log
Address Book
Registered fonts
Job logs/access logs
Thumbnails of stored documents
Sent/received e-mail
Documents forwarded to the capture server
Files received via Mail to Print
Spooled jobs

Stored documents (stored documents in Document Server, Locked Print files / Sample Print files / Stored Print files / Hold Print files, and received and stored fax documents)
Registered stamps

Approx. 1 hour and 30 minutes

All Data

All Data:

Both the data to be kept and not to be kept when [File System Data Only] is specified

None

Approx. 5 hours

Format All Data

None

All Data:

Both the data to be kept and not to be kept when [File System Data Only] is specified

Several minutes

Notes for enabling encryption settings

If you use Embedded Software Architecture application or App2Me, be sure to specify [File System Data Only] or [All Data].
Note that the machine's settings will not be initialized to their system defaults even if [Format All Data], [File System Data Only], or [All Data] is specified.