Top Page > Security Guide > Preventing Leakage of Information from Machines > Encrypting Data on the Machine

Encrypting Data on the Machine

Keep SD cards or USB flash memory devices out of reach of children. If a child accidentally swallows an SD card or USB flash memory device, consult a doctor immediately.

This function is only available for the standard hard disk. If your machine is equipped with the Enhanced Security HDD Option, data on the hard disk is always encrypted. Therefore, this function can only encrypt the machine's NVRAM data.

Even if the memory device or hard disk is stolen, data leakage can be prevented by encrypting the data on the machine, such as Address Book, authentication data, and files.

Once encryption is enabled, all data subsequently stored on the machine will be encrypted.

You can also choose to encrypt or delete the data currently stored on the machine.

The encryption algorithm is AES-256.

Data that is encrypted

This function encrypts data that is stored in the machine's NVRAM (memory that remains even after the machine is turned off) and on the hard disk.

The following data is encrypted:

NVRAM

System settings information
Network I/F setting information
User code information
Counter information

Hard disk

Address Book
Embedded Software Architecture applications' program/log
Logs (Job log/access log/Eco-friendly log)
Sent/received e-mail
Registered fonts
Spooled jobs
Thumbnails of stored documents
Stored documents
Registered stamps

Type of Encryption

Specify whether to encrypt existing data and keep it on the hard disk or delete (format) it. Encryption takes time if a large amount of data is to be kept. The NVRAM data will not be deleted (initialized).

Setting	Data to be kept	Data to be initialized	Required time
File System Data Only	Address Book Embedded Software Architecture applications' program/log Logs (Job log/access log/Eco-friendly log) Sent/received e-mail Registered fonts Spooled jobs Thumbnails of stored documents Documents forwarded to the capture server Files received via Mail to Print	Stored documents (stored documents in Document Server and Locked Print files / Sample Print files / Stored Print files / Hold Print files, and received and stored fax documents) Registered stamps	Approx. 1 hour 45 minutes
All Data	All Data: Both the data to be kept and not to be kept when [File System Data Only] is specified	None	Approx. 4 hours 30 minutes
Format All Data	None	All Data: Both the data to be kept and not to be kept when [File System Data Only] is specified	Several minutes

Setting

Data to be kept

Data to be initialized

Required time

File System Data Only

Address Book
Embedded Software Architecture applications' program/log
Logs (Job log/access log/Eco-friendly log)
Sent/received e-mail
Registered fonts
Spooled jobs
Thumbnails of stored documents
Documents forwarded to the capture server
Files received via Mail to Print

Stored documents (stored documents in Document Server and Locked Print files / Sample Print files / Stored Print files / Hold Print files, and received and stored fax documents)
Registered stamps

Approx. 1 hour 45 minutes

All Data

All Data:

Both the data to be kept and not to be kept when [File System Data Only] is specified

None

Approx. 4 hours 30 minutes

Format All Data

None

All Data:

Both the data to be kept and not to be kept when [File System Data Only] is specified

Several minutes

Notes for enabling encryption settings

If you use Embedded Software Architecture application or App2Me, be sure to specify [File System Data Only] or [All Data].
Note that the machine's settings will not be initialized to their system defaults even if [Format All Data], [File System Data Only], or [All Data] is specified.

Restoring Data

To transfer data to a new machine, restore the encrypted data. For details, ask the service representative.
The encryption key used for data encryption is required to restore the data.
You can specify whether to print the encryption key or store it on an SD card.
You can change the encryption key later.