Skip header
 

Protecting Communication Paths via a Device Certificate

This machine protects communication paths and establish encrypted communications using SSL/TLS, IPsec, or IEEE 802.1X.

This machine is also installed with a device certificate (self-signed certificate) for SSL/TLS communication as a factory default.

Even if a device certificate is not installed, it is automatically created if you enable the AirPrint function.

The signature algorithm of the automatically created device certificate is RSA2048-SHA256 which expires in 5 years.

Creating a device certificate using this function is not possible if the AirPrint function is disabled, the SSL/TLS function is disabled, or if a device certificate is overwritten and deleted manually.

If a user creates, requests, or installs a device certificate when there is an automatically created device certificate, the automatically created certificate is overwritten and deleted, and the device certificate the user specifies is used for SSL/TLS communication.

You can use the following:

Important

  • The administrator is required to prevent certificates from expiring and renew them before they expire. If the AirPrint function is enabled, the device certificate installed by default or automatically created is automatically updated before it expires and a device certificate with a new expiry date is installed.

  • The administrator is required to check that the issuer of the certificate is valid.