Registering user's certificates automatically on this machine

Register a user's certificate used for encrypting E-mail message with S/MIME.

The following two methods are available for registering a user's certificate:

  • Registering a user's certificate as destination registration information when the E-mail address is registered on this machine.

  • Sending an E-mail attached with a digital signature (user's certificate) to this machine to register the certificate automatically in this machine using S/MIME function.

The following describes the method to send an E-mail attached with digital signature (user's certificate) to this machine for automatic registration.

preconditionThe Hard Disk is optional in some areas. To use this function, the optional Hard Disk is required.

preconditionBefore registering the certificate, you must register on this machine the E-mail address of the user whose certificate you wish to register.

preconditionThis machine must be able to receive E-mail messages.

  1. In the administrator mode, select [Network] - [E-mail Setting] - [S/MIME], then configure the following settings.

    Settings

    Description

    [S/MIME Comm.Setting]

    Select [ON] to use the S/MIME.

    To select [ON], the E-mail address of the certificate of this machine must match the E-mail address of the administrator.

    [OFF] is specified by default.

    [Automatically Obtain Certificates]

    To register digital signature (user's certificate), select [ON].

    [OFF] is specified by default.

    [Print S/MIME information]

    Select whether to print the S/MIME information, if necessary.

    [OFF] is specified by default.

    [Certificate Verification Level Settings]

    To verify the certificate, select items to be verified.

    If you select [Confirm] at each item, the certificate is verified for each item.

    [Validity Period]

    Confirm whether the certificate is still valid.

    [Confirm] is specified by default.

    [Key Usage]

    Confirm whether the certificate is used according to the intended purpose approved by the certificate issuer.

    [Do Not Confirm] is specified by default.

    [Chain]

    Confirm whether there is a problem in the certificate chain (certificate path).

    The chain is validated by referencing the external certificates managed on this machine.

    [Do Not Confirm] is specified by default.

    [Expiration Date Confirmation]

    Confirm whether the certificate has expired.

    Confirm for expiration of the certificate in the following order.

    • OCSP (Online Certificate Status Protocol) service

    • CRL (Certificate Revocation List)

    [Do Not Confirm] is specified by default.

  2. Send the E-mail attached with digital signature from the computer to this machine.

    The certificate received by this machine is automatically registered when the E-mail address registered in that certificate matches the user's E-mail address registered on this machine.