[VLAN Settings]

When enabling VLAN for the wired network interface, set this option to ON (default: OFF).

• [Network 1]: Enter the VLAN ID to be assigned to network 1 in the range from 1 to 4094.

• [Network 2]: Enter the VLAN ID to be assigned to network 2 in the range from 1 to 4094.

[TCP/IP]

When enabling TCP/IP, set this option to ON (default: ON).

[Network Speed]

Select the network speed according to your environment (default: [Auto (10M/100M/1Gbps)]).

[IPv4]

When connecting this machine to the IPv4 environment, specify the IPv4 address.

• [IP Address Setting Method]: Select the method to specify the IP address to this machine according to your environment (default: [Auto Setting]). To manually specify the IP address, select [Manual Setting]. To automatically specify the IP address using DHCP, select [Auto Setting], and specify the automatic setting method.

• [IP Address]: When manually specifying the IP address, enter the fixed IP address assigned to the machine.

• [Subnet Mask]: When manually specifying the IP address, enter the subnet mask.

• [Default Gateway]: When manually specifying the IP address, enter the default gateway.

[IPv6]

When connecting this machine to the IPv6 environment, specify the IPv6 address.

• [IPv6]: When using IPv6, set this option to ON (default: ON).

• [Auto IPv6 Setting]: When automatically specifying the IPv6 global address, set this option to ON (default: ON). The IPv6 global address is automatically set based on the prefix length notified from the router and the MAC address of this machine.

• [DHCPv6 Setting]: When automatically specifying the IPv6 global address using DHCPv6, set this option to ON (default: ON).

• [Link-Local Address]: Displays the link-local address. The link-local address is automatically specified from the MAC address of this machine.

• [Global Address]: When manually specifying the address, enter the IPv6 global address.

• [Prefix Length]: When manually specifying the address, enter the prefix length of the IPv6 global address between 1 and 128.

• [Gateway Address]: When manually specifying the address, enter the gateway address.

[DNS Host]

When using the host name to connect to this machine, register the host name of this machine.

• [DNS Host Name]: Enter the host name of this machine (using up to 63 single-byte characters, including only - for symbol marks). If your DNS server does not support the Dynamic DNS function, register the host name of this machine on the DNS server.

• [Dynamic DNS Setting]: When using the Dynamic DNS, set this option to ON (default: OFF). If your DNS server supports the Dynamic DNS function, the set host name can be automatically registered to the DNS server or changes can be automatically updated.

• [LLMNR Setting]: When using LLMNR, set this option to ON (default: ON). Using LLMNR enables you to resolve the name even in an environment that does not have a DNS server. This option is only compatible with Windows computers. It is useful to resolve the name in the IPv6 environment.

[DNS Domain Name Setting]

Register the name of a domain this machine joins.

• [DNS Domain Auto Obtain]: When automatically specifying the domain name using DHCP, set this option to ON (default: ON).

• [DNS Search Domain Name Auto Retrieval]: When automatically specifying the search domain name using DHCP, set this option to ON (default: ON).

• [DNS Default Domain Name]: When manually specifying the domain name, enter the default domain name of this machine (using up to 253 bytes, including the host name, - and . for symbol marks).

• [DNS Search Domain Name1] to [DNS Search Domain Name3]: When manually specifying the domain name, enter the search domain name (using up to 63 single-byte characters, including only - and . for symbol marks).

[DNS Server Settings (IPv4)]

When DNS is installed in your environment, register the DNS server.

• [DNS Server Auto Obtain]: When automatically specifying the DNS server address using DHCP, set this option to ON (default: ON).

• [Primary DNS Server]: When manually specifying the address, enter the primary DNS server address.

• [Secondary DNS Server1] / [Secondary DNS Server2]: When manually specifying the address, enter the secondary DNS server address.

[DNS Server Settings (IPv6)]

When DNS is installed in your environment, register the DNS server.

• [DNS Server Auto Obtain]: When automatically specifying the DNS server address using DHCP, set this option to ON (default: ON).

• [Primary DNS Server]: When manually specifying the address, enter the primary DNS server address.

• [Secondary DNS Server1] / [Secondary DNS Server2]: When manually specifying the address, enter the secondary DNS server address.

[IPv4]

Set the IPv4 address to this machine.

• [IP Address Setting Method]: Select the method to specify the IP address to this machine according to your environment (default: [Auto Setting]). To manually specify the IP address, select [Manual Setting]. To automatically specify the IP address using DHCP, select [Auto Setting].
  [Auto Setting] is not displayed when [Wired + Wireless (Primary Mode)] or [Wired + Wireless (Wi-Fi Direct)] is selected in [Network I/F Configuration].

• [IP Address]: When manually specifying the IP address, enter the fixed IP address assigned to the machine.

• [Subnet Mask]: When manually specifying the IP address, enter the subnet mask.

[IPv6]

Displays the IPv6 settings of this machine.

• [Link-Local Address]: Displays the link-local address. The link-local address is automatically specified from the MAC address of this machine.

[RAW Port Number]

Change the RAW port number to suit your environment.

The following shows the default settings.

• [Port1]: 9100

• [Port2]: 9112

• [Port3]: 9113

• [Port4]: 9114

• [Port5]: 9115

• [Port6]: 9116

[SLP Setting]

When enabling SLP, set this option to ON (default: OFF).

[LPD Setting]

When enabling LPD, set this option to ON (default: ON).

[IPv4 Filtering (Permit Access)]

Specify an IPv4 address to allow access to this machine.

• [IPv4 Filtering (Permit Access)]: When specifying the IPv4 address that allow access, set this option to ON (default: OFF).

• Range 1 to Range 5: Enter the range of IPv4 addresses that allow access using the following format.
  Entry example: "192.168.1.1 - 192.168.1.10"
  If a single IPv4 address is allowed to access, you can only enter the address in one side of the range.

[IPv4 Filtering (Deny Access)]

Specify an IPv4 address to deny access to this machine.

• [IPv4 Filtering (Deny Access)]: When specifying the IPv4 address that deny access, set this option to ON (default: OFF).

• Range 1 to Range 5: Enter the range of IPv4 addresses that deny access using the following format.
  Entry example: "192.168.1.1 - 192.168.1.10"
  To deny access from a single IPv4 address, you can only enter the address in one side of the range.

[IPv6 Filtering (Permit Access)]

Specify an IPv6 address to allow access to this machine.

• [IPv6 Filtering (Permit Access)]: When specifying the IPv6 address that allow access, set this option to ON (default: OFF).

• Range 1 to Range 5: Enter the IPv6 address and prefix length to specify the range of IPv6 addresses that allow access.

[IPv6 Filtering (Deny Access)]

Specify an IPv6 address to deny access to this machine.

• [IPv6 Filtering (Deny Access)]: When specifying the IPv6 address that deny access, set this option to ON (default: OFF).

• Range 1 to Range 5: Enter the IPv6 address and prefix length to specify the range of IPv6 addresses that deny access.

[Log settings]

Records a history of packets with receiving or sending denied by the packet filtering function.

• [Log settings]: Select whether to record packet filtering logs (default: [Enable]).

• [Number of Lines]: Specify the number of logs to be written (default: [1000]). Tapping [Start] starts writing.

[Import]

Collectively imports multiple filters from a USB flash drive. This option is available to edit filters exported from the machine on the computer before importing them.

[Export]

Exports all the registered filters to a USB flash drive.

[TX/RX address out of range]

Select whether to allow sending or receiving a packet to which the registered filter is not applied (default: [Allow]).

[Address Type]

Select the address type for the target packet.

[Start Address]

Specify the range of addresses to be filtered.

• If you select [IPv4] in [Address Type], specify the starting address of the IPv4 address range. You can specify the broadcast address or multicast address as needed.
  Format: "*.*.*.*"
  For "*", specify the value between 0 and 255.
  If necessary, you can specify the address range depending on the IPv4 address and prefix length. In this case, the address range that matches bits in the prefix part is targeted for filtering.
  Format: "*.*.*.*/@"
  For "*", specify the value between 0 and 255. For "@", specify the value between 1 and 31.

• If you select [IPv6] in [Address Type], specify the address range depending on the IPv6 and prefix length. You can specify the multicast address as needed.
  Format: "****:****:****:****:****:****:****:****/@"
  For "*", specify a hexadecimal number. For "@", specify the value between 1 and 127.

• If you select [MAC Address] in [Address Type], specify the MAC address. In this case, only a single address is targeted for filtering. You cannot specify the address range.
  Format: "**:**:**:**:**:**"
  For "*", specify a hexadecimal number.

[End Address]

When [IPv4] is selected in [Address Type], specify the ending address of the IPv4 address range to be filtered. If you skip [End Address], only the address specified in [Start Address] is targeted for filtering.

Format: "*.*.*.*"

For "*", specify the value between 0 and 255.

When you specify the prefix length of the IPv4 address in [Start Address], you cannot specify the ending address.

[Receive/Send]

Select the communication direction of the target packet.

• [RX]: Restricts packets received by the machine depending on the source address.

• [TX]: Restricts packets sent by the machine depending on the destination address.

If you select [MAC Address] in [Address Type], you cannot set to [TX].

[Allow/Denied]

Select whether to allow or reject a communication of the target packet.

[IPsec Setting]

Specify parameters required for IPsec communication.

• [IKE]: Configure settings for IKE (Internet Key Exchange).

• [SA]: Configure settings for SA (Security Association).

• [Peer]: Specify the IPsec peer.

• [Protocol Setting]: Specify the IPsec protocol.

[Enable IPsec]

Configure settings to enable use of IPsec.

[Communication Check]

Enter the peer's IP address into [IP Address], then select Check Connection. If the connection fails, confirm communication error logs.

[Encryption Algorithm]

Select the encryption algorithm to create a common key used for communication.

[Authentication Algorithm]

Select the authentication algorithm to create a common key used for communication.

[Encryption Key Validity Period]

Specify the validity period of a common key to securely create a common key used to encrypt communications (default: [28800] sec.).

When this period has expired, a new key is created. This can secure the communication.

[Diffie-Hellman Group]

Select the Diffie-Hellman group (default: [Group 2]).

[Negotiation Mode]

Select the negotiation mode (default: [Main Mode]). This option is not available in [IKEv2].

[Name]

Enter the SA name (using 1 to 10 single-byte characters, excluding double quotation marks ").

[Encapsulation Mode]

Select the IPsec operation mode (default: [Transport]).

[Security Protocol]

Select a security protocol.

[Key Exchange Method]

Select the key replacement method to securely create a common key used to encrypt communications (default: [IKEv1]).

[Tunnel End Point]

If [Tunnel] is selected in [Encapsulation Mode], enter the IP address of the IPsec gateway that is used as a peer.

[Lifetime After Establishing SA]

Enter the lifetime of a common key used to encrypt communications (default: [3600] sec.).

[IKE Setting]

Configure IKE settings used for this SA.

• [Authentication Method]: Select the authentication method.

• [Local Authentication Method]: Select the authentication method of this machine when [IKEv2] is selected in [Key Exchange Method].

• [Peer Authentication Method]: Select the peer authentication method when [IKEv2] is selected in [Key Exchange Method].

• [ESN]: When applying the 64-bit extended sequence number, set this option to ON.

• [Replay Detection]: When enabling replay defense, set this option to ON.

• [ESP Encryption Algorithm]: If you select [ESP] for [Security Protocol], configure the ESP encryption algorithm.

• [ESP Authentication Algorithm]: If you select [ESP] for [Security Protocol], configure the ESP authentication algorithm.

• [AH Authentication Algorithm]: If you select [AH] for [Security Protocol], configure the AH authentication algorithm.

• [Perfect Forward Secrecy]: When increasing the IKE intensity, set this option to ON. Setting to ON increases the time spent for communication.

[Peer]

When registering a peer, set this option to ON (default: OFF).

[Name]

Enter the peer name (using 1 to 10 single-byte characters, excluding double quotation marks ").

[Set IP Address]

Select the method to specify the peer address. Specify the IP address of the peer depending on the selected method.

[Pre-Shared Key Text]

Enter the Pre-Shared Key text to be shared with a peer using up to 128 ASCII characters or up to 256 hexadecimal characters.

Specify the same text as that for the peer.

[Key-ID String]

Enter the Key-ID to be specified for the Pre-Shared Key (using up to 128 bytes).

[Protocol Setting]

When registering the protocol setting, set this option to ON (default: OFF).

[Name]

Enter the group name with the protocol specified (using 1 to 10 single-byte characters, excluding double quotation marks ").

[Protocol Identification Setting]

Select a protocol used for IPsec communication (default: [No Selection]).

[Port No.]

If [TCP] or [UDP] has been selected in [Protocol Identification Setting], specify the port number used for IPsec communication.

[ICMP Message Type]

Specify the ICMP message type when [ICMP] is selected in [Protocol Identification Setting].

[ICMPv6 Message Type]

Specify the ICMP message type when [ICMPv6] is selected in [Protocol Identification Setting].

[IPsec]

When using IPsec, set this option to ON (default: OFF).

[Dead Peer Detection]

If no response can be confirmed from the peer in a certain period, the SA with the peer is deleted. Select a time that elapses before sending survival confirmation information to the peer how has not responded (default: [15] sec.).

[Cookies]

Select whether to enable the defense using Cookies against denial-of-service attacks (default: [Disable]).

[ICMP Pass]

Select whether to apply IPsec to the Internet Control Message Protocol (ICMP) (default: [Disable]). Select [Enable] to allow the ICMP packets to pass without applying IPsec to the ICMP.

[ICMPv6 Pass]

Select whether to apply IPsec to the Internet Control Message Protocol for IPv6 (ICMPv6) (default: [Disable]). Select [Enable] to allow the ICMPv6 packets to pass without applying IPsec to the ICMPv6.

[Default Action]

Select an action to be taken if no settings meet the [IPsec Policy] while IPsec communication is enabled (default: [Allow]). Select [Deny] to discard IP packets that do not meet the [IPsec Policy] settings.

[Certificate Verification Level Settings]

To verify the certificate, select items to be verified.

• [Expiration Date]: Confirm whether the certificate is within the validity period (default: [Confirm]).

• [Key Usage]: Confirm whether the certificate is used according to the intended purpose approved by the certificate issuer (default: [Do Not Confirm]).

• [Chain]: Confirm whether there is a problem in the certificate chain (certificate path) (default: [Do Not Confirm]). The chain is validated by referencing the external certificates managed on this machine.

• [Expiration Date Confirmation]: Confirm whether the certificate has expired (default: [Do Not Confirm]). The expiration date confirmation is performed in the order of OCSP (Online Certificate Status Protocol) service, and CRL (Certificate Revocation List).

[IPsec Policy]

Configure the policy to apply for IPsec communication.

IP packet conditions can be specified to pass or allow the IP packets that meet each of the conditions.

• [IPsec Policy]: Select whether to use the IPsec policy (default: OFF).

• [Name]: Enter the IPsec policy name (using 1 to 10 single-byte characters, excluding double quotation marks ").

• [Peer]: Select a peer setting. Select the setting from those registered in [Peer] in [IPsec Setting].

• [Protocol Setting]: Select a protocol. Select the setting from those registered in [Protocol Setting] in [IPsec Setting].

• [IPsec Setting]: Select an SA setting. Select the setting from those registered in [SA] in [IPsec Setting].

• [Action]: Select the operation for the IP packet that matches the specified condition.
  [Protected]: Protect the IP packets that met the conditions.
  [Allow]: Do not protect the IP packets that met the conditions.
  [Deny]: Discard the IP packets that met the conditions.

[E-mail RX Setting]

When receiving E-mails on this machine, set this option to ON (default: ON).

[POP Server Address]

Enter the address of your E-mail server (POP). Use one of the following formats.

• Example to enter the host name: "host.example.com"

• Example to enter the IP address (IPv4): "192.168.1.1"

• Example to enter the IP address (IPv6): "fe80::220:6bff:fe10:2f16"

[Login Name]

Enter the login name used for POP authentication (using up to 63 single-byte characters).

[Password]

Enter the password for POP authentication (using up to 64 single-byte characters).

[APOP Authentication]

When using APOP Authentication, set this option to ON (default: OFF).

[Connection Timeout]

If necessary, change the time-out time to limit a communication with the E-mail server (POP) (default: [30] sec.).

[Port No.]

If necessary, change the port number of the E-mail server (POP) (default: [110]).

[Enable SSL]

When using SSL communications, set this option to ON (default: OFF).

• [Port No.(SSL)]: If necessary, change the port number for SSL communication (default: [995]).

[Certificate Verification Level Settings]

To validate the certificate during SSL communication, select items to be verified.

• [Expiration Date]: Confirm whether the certificate is within the validity period (default: ON).

• [CN]: Confirm whether CN (Common Name) of the certificate matches the server address (default: OFF).

• [Key Usage]: Confirm whether the certificate is used according to the intended purpose approved by the certificate issuer (default: OFF).

• [Chain]: Confirm whether there is a problem in the certificate chain (certificate path). The chain is validated by referencing the external certificates managed on this machine (default: OFF).

• [Expiration Date Confirmation]: Confirm whether the certificate has expired (default: OFF). The expiration date confirmation is performed in the order of OCSP (Online Certificate Status Protocol) service, and CRL (Certificate Revocation List).

[Check for New Messages]

When periodically connecting to the E-mail server (POP) to check whether E-mails arrive or not, set this option to ON (default: ON).

• [Polling Interval]: Specify an interval to check whether E-mails arrive or not (default: [15] min.).

[E-mail TX Setting]

When sending E-mails from this machine, set this option to ON (default: ON).

[E-Mail Send]

When using the E-mail TX function, set this option to ON (default: ON).

Using this function allows you to send the scanned original data as an E-mail attachment.

[E-mail Notification]

When using the E-mail notification function, set this option to ON (default: ON).

If a warning occurs on this machine that instructs the user to add paper, replace toner, or resolve a paper jam, it can be sent to a registered E-mail address.

[Total Counter Notification]

When using the total counter notification function, set this option to ON (default: ON).

Using this function allows you to send counter information managed by this machine to the registered E-mail address.

[SMTP Server Address]

Enter the address of the E-mail server (SMTP). Use one of the following formats.

• Example to enter the host name: "host.example.com"

• Example to enter the IP address (IPv4): "192.168.1.1"

• Example to enter the IP address (IPv6): "fe80::220:6bff:fe10:2f16"

[SSL/TLS Settings]

Select the method to encrypt communications with the E-mail server (SMTP) (default: [OFF]). This option supports SMTP over SSL and Start TLS.

[Port No.]

If necessary, change the port number of the E-mail server (SMTP) (default: [25]).

[Port No.(SSL)]

If necessary, change the port number for SSL communication (default: [465]).

This option is available when [SMTP over SSL] is selected for [SSL/TLS Settings].

[Certificate Verification Level Settings]

To validate the certificate during SSL communication, select items to be verified.

• [Expiration Date]: Confirm whether the certificate is within the validity period (default: ON).

• [Key Usage]: Confirm whether the certificate is used according to the intended purpose approved by the certificate issuer (default: OFF).

• [Chain]: Confirm whether there is a problem in the certificate chain (certificate path) (default: OFF). The chain is validated by referencing the external certificates managed on this machine.

• [Expiration Date Confirmation]: Confirm whether the certificate has expired (default: OFF). The expiration date confirmation is performed in the order of OCSP (Online Certificate Status Protocol) service, and CRL (Certificate Revocation List).

• [CN]: Confirm whether CN (Common Name) of the certificate matches the server address (default: OFF).

[Connection Timeout]

If necessary, change the time-out time to limit a communication with the E-mail server (SMTP) (default: [60] sec.).

[Admin. E-mail Address]

Displays the E-mail address of the administrator of this machine.

[Device Mail Address]

Enter the E-mail address of this machine (using up to 320 single-byte characters, excluding spaces).

[Detail Settings]

Configure SMTP authentication or POP before SMTP authentication according to your environment.

[POP Before SMTP]

When using POP before SMTP, set this option to ON (default: OFF).

• [POP Before SMTP Time]: If necessary, change the waiting time until starting E-mail transmission after the POP authentication is successful (default: [5] sec.).

[SMTP Authentication]

When using SMTP authentication, set this option to ON (default: OFF).

• [SMTP Authentication Method]: Select the authentication method to be used for SMTP authentication.

• [User ID]: Enter the user ID for SMTP authentication (using up to 64 double-byte or single-byte characters).

• [Password]: Enter the password for SMTP authentication (using up to 64 single-byte characters, excluding double quotation marks ").

• [Domain Name]: When Digest-MD5 is specified as the authentication method for SMTP authentication, enter the domain name (realm) (using up to 253 single-byte characters).
  When there are two or more domains (realm), enter the domain name. When there is only one domain (realm), no entry is required. The domain name is notified from the E-mail server (SMTP) at the initial communication, and communication is automatically performed using that domain name.

• [Authentication Setting]: Select whether to synchronize the SMTP authentication with the user authentication of this machine (default: [Set Value]). This item is necessary when the user authentication is installed on this machine.
  [User Authentication]: Uses the registered user's user authentication of this machine as authentication information for SMTP authentication.
  [Set Value]: Uses values entered at [User ID] and [Password]. If SMTP authentication fails because the user who sends an E-mail does not match the user specified in [User ID], select [Bulk setting] in [Change From Address Setting] so that the same E-mail address is applied in From/Sender/Envelop-From. Enter the E-mail address to be applied in [From Address]. If an option other than [Bulk setting] is selected in [Change From Address Setting], the same E-mail address cannot be applied to From/Sender/Envelop-From, so the E-mail address of this machine's administrator is applied to Envelop-From.

[Change From Address Setting]

Select whether to allow the user to change the sender's E-mail address ("From" address) (default: [Allow User Changes] (without user authentication), [Login User Address] (with user authentication)).

• [Fix Administrator Address]: Prohibit the change of "From" address and use the administrator's E-mail address.

• [Login User Address]: Prohibit changing of the "From" address and use user's E-mail address. Administrator's E-mail address is used if the user’s E-mail address has not been registered.

• [Allow User Changes]: Allows the user to change the "From" address.

• [Bulk setting]: Prohibits a change of the "From" address and uses the E-mail address you entered [From Address]. This E-mail address is also applied to Sender/Envelop-From.

[From Address]

Enter the sender's E-mail address when sending E-mail (up to 128 single-byte characters).

[Server load reduction transmission method]

Select the sending method to reduce the load of the E-mail server (SMTP) (default: [OFF]).

• [Binary Division]: Divides an E-mail with the specified size. [Binary division Size]: Enter the size to divide an E-mail.

• [Stop Scan TX when maximum limit is exceeded]: Stops sending an E-mail when its size exceeds the specified maximum value. When specifying the maximum value, select [Limit] in [Max Mail Size], then enter the maximum E-mail size allowable for the E-mail server (SMTP) in [Server Capacity limit].

• [Scan TX by Download URL method only when maximum limit is exceeded]: Notifies the E-mail address specified as the destination of the download URL without attaching files when the E-mail size exceeds the specified maximum value. When specifying the maximum value, select [Limit] in [Max Mail Size], then enter the maximum E-mail size allowable for the E-mail server (SMTP) in [Server Capacity limit].

• [Always Scan TX by Download URL method]: Notifies the E-mail address specified as the destination of the download URL without attaching files.

[S/MIME Comm.Setting]

When using S/MIME, set this option to ON (default: OFF).

To set to ON, the E-mail address of the certificate of this machine must match the E-mail address of the administrator.

[Digital Signature]

To add digital signature when sending E-mails, select a method to add it (default: [Do not add signature]).

• [Do not add signature]: Does not add the signature.

• [Always add signature]: Always adds the signature. The digital signature is automatically added without performing special setting before sending an E-mail.

• [Select when sending]: The user must select whether to add digital signature before sending an E-mail.

[Digital Signature Type]

To add a digital signature when sending E-mails, select its authentication method (default: [SHA-256]).

[E-Mail Text Encrypt. Method]

Select the method to encrypt the E-mail text (default: [3DES]).

[Automatically Obtain Certificates]

Select whether to automatically obtain the digital signature (user certificate) from the E-mail received on this machine (default: [OFF]).

The obtained certificate is additionally registered in the E-mail address that matches the E-mail address described in the certificate.

[Print S/MIME information]

Select whether to print S/MIME information when this machine receives an S/MIME E-mail (default: [OFF]).

[Certificate Verification Level Settings]

When verifying the obtained certificate while [Automatically Obtain Certificates] is set to [ON], select an item to be verified.

• [Expiration Date]: Confirm whether the certificate is within the validity period (default: ON).

• [Key Usage]: Confirm whether the certificate is used according to the intended purpose approved by the certificate issuer (default: OFF).

• [Chain]: Confirm whether there is a problem in the certificate chain (certificate path) (default: OFF). The chain is validated by referencing the external certificates managed on this machine.

• [Expiration Date Confirmation]: Confirm whether the certificate has expired (default: OFF). The expiration date confirmation is performed in the order of OCSP (Online Certificate Status Protocol) service, and CRL (Certificate Revocation List).

[E-mail RX Print]

When using the E-mail RX Print function, set this option to ON (default: OFF).

[E-mail RX Permission]

When restricting E-mail addresses that are available for the E-mail RX Print function, set this option to ON (default: OFF).

• [Permit Address1] to [Permit Address10]: Enter the E-mail addresses for which you want to permit the E-mail RX Print function, or enter the E-mail domain.

[Save in User Box]

When saving all the E-mail attachment files received on this machine to a User Box, set this option to ON (default: OFF).

• In [User Box No.], enter the number of the User Box to save an E-mail attachment in. If the number of the User Box to save the E-mail attachment in is not specified by E-mail, the file is saved in the User Box for which you have entered a number. When you receive an encrypted PDF file as an E-mail attachment, the file is saved in the Password Encrypted PDF User Box.

[Enabling LDAP]

To perform LDAP search, select [ON] (default: [OFF]).

[Default Search Result Display Setting]

Select whether an E-mail address, fax number, or Internet fax number is given priority to be displayed as the destination search result when searching for destinations from the LDAP server (default: [E-mail]).

[LDAP Server Name]

Enter the name of the LDAP server (using up to 32 single-byte characters).

[Server Address]

Enter the LDAP server address. Use one of the following formats.

• Example to enter the host name: "host.example.com"

• Example to enter the IP address (IPv4): "192.168.1.1"

• Example to enter the IP address (IPv6): "fe80::220:6bff:fe10:2f16"

[Port No.]

If necessary, change the LDAP server port number (default: [389]).

[Enable SSL]

When using SSL communications, set this option to ON (default: OFF).

• [Port No.(SSL)]: If necessary, change the port number for SSL communication (default: [636]).

[Certificate Verification Level Settings]

To validate the certificate during SSL communication, select items to be verified.

• [Expiration Date]: Confirm whether the certificate is within the validity period (default: ON).

• [CN]: Confirm whether CN (Common Name) of the certificate matches the server address (default: OFF).

• [Key Usage]: Confirm whether the certificate is used according to the intended purpose approved by the certificate issuer (default: OFF).

• [Chain]: Confirm whether there is a problem in the certificate chain (certificate path) (default: OFF). The chain is validated by referencing the external certificates managed on this machine.

• [Expiration Date Confirmation]: Confirm whether the certificate has expired (default: OFF). The expiration date confirmation is performed in the order of OCSP (Online Certificate Status Protocol) service, and CRL (Certificate Revocation List).

[Search Base]

Specify the starting point to search for a destination (using up to 255 single-byte characters).

The range from the entered origin point, including the following tree structure, is searched.

Example of entry: "cn=users,dc=example,dc=com"

[Timeout]

If necessary, change the time-out time to limit a communication with the LDAP server (default: [60] sec.).

[Max.Search Results]

Change the maximum number of destinations to be displayed as search results, if necessary (default: [100] destinations).

[Authentication Method]

Select the authentication method to log in to the LDAP server depending on your environment (default: [anonymous]).

• [Login Name]: Enter the login name used for LDAP authentication (using up to 64 double-byte or single-byte characters).

• [Password]: Enter the password for LDAP authentication (using up to 64 single-byte characters).

• [Domain Name]: If [GSS-SPNEGO] is selected for [Authentication Method], enter the domain name of Active Directory (using up to 64 single-byte characters).

[Select Server Authentication Method]

Select whether to synchronize the LDAP authentication with the user authentication of this machine (default: [Set Value]).

• [Set Value]: Uses values entered in [Login Name] and [Password].

• [User Authentication]: Uses the registered user's user authentication of this machine as authentication information for LDAP authentication.

• [Dynamic Authentication]: The system prompts you to enter the user name and password at LDAP searching.

[Use Referral]

Select whether to use the referral function (default: [ON]).

[Search Condition Attributes]

Select attributes to be specified when performing the LDAP search (default: [Name]). The setting can be switched between [Name] (cn) and [Nickname] (displayName).

[Search]

Select whether to display candidate destinations when entering a part of the name to perform LDAP search (default: [OFF]).

[Initial Setting for Search Details]

Specify the default LDAP search conditions for each item (default: [OR]).

• [Search Attributes Authentication]: When enabling Search Attributes Authentication, set this option to ON (default: OFF). Configure this setting when [Authentication Method] is set to [Simple] and [Select Server Authentication Method] to [Dynamic Authentication]. If enabled, the user does not need to enter all of the DN (Distinguished Name) when performing authentication via the LDAP server.
  [Search Attribute]: Enter the search attribute to be automatically added before the user name (using up to 64 single-byte characters). The attribute value must start with a single-byte alphabetical character (default: [uid]). In normal circumstances, specify "uid" before the user name, however, depending on your environment, you need to specify other attribute such as "cn".

[FTP TX]

When using the FTP Send function, set this option to ON (default: ON).

[Proxy Server Address]

Enter the proxy server address. Use one of the following formats.

• Example to enter the host name: "host.example.com"

• Example to enter the IP address (IPv4): "192.168.1.1"

• Example to enter the IP address (IPv6): "fe80::220:6bff:fe10:2f16"

[Proxy Server Port Number]

If necessary, change the proxy server port number (default: [21]).

[Connection Timeout]

If necessary, change the time-out time to limit a communication with the FTP server (default: [60] sec.).

[Port No.]

If necessary, change the FTP server port number (default: [21]).

[FTP Server]

When using the FTP server function of this machine, set this option to ON (default: OFF).

[Deny Reception Command]

Select a command to deny a receiving job from an FTP client (default: [Allow]).

Set this option to return an error when a PORT/EPRT command or PASV/EPSV command is sent from an FTP client to this machine.

[PORT Command Enhanced Security]

When enabling the security of this machine against FTP bounce attacks, set this option to ON (default: ON). This option is not available if [Deny Reception Command] is set to [PORT/EPRT].

When a PORT/EPRT command is sent from an FTP client, the data connection is established only if both of the following conditions are satisfied:

• A port number less than 1024 is not specified.

• The IP address specified by the command is same as that specified when a control connection is established.

[SNMP Setting]

When enabling SNMP, set this option to ON (default: ON).

• [SNMP v1/v2c(IP)]: When using SNMP v1 or SNMP v2, set this option to ON (default: ON).

• [SNMP v3(IP)]: When using SNMP v3, set this option to ON (default: ON).

[UDP Port Setting]

If necessary, change the UDP port number (default: [161]).

[SNMP v1/v2c Setting]

Configure SNMP v1/v2c settings.

• [Read Community Name]: Enter a read-only community name (using 1 to 15 single-byte characters, excluding spaces, \, ', ", and #) (default: [public]).

• [Write Community Name]: When allowing reading and writing, set this option to ON (default: ON). Also enter a community name used for reading and writing (using 1 to 15 single-byte characters, excluding spaces, \, ', ", and #) (default: [private]).

[SNMP v3 Setting]

Configure SNMP v3 settings.

• [Context Name]: Enter the context name (using up to 63 single-byte characters, excluding spaces, \, ', ", and #).

• [Discovery User Name]: When allowing the detection user, set this option to ON (default: ON). Also, enter a user name for detection (using 1 to 32 single-byte characters, excluding spaces, \, ', ", and #) (default: [public]).

• [Read User Name]: Enter a read-only user name (using up to 32 single-byte characters, excluding spaces, \, ', ", and #) (default: [initial]).
  [Security Level]: Select a security level of the user in the read-write enable state (default: [auth-password/priv-password]).
  [auth-password]: If [auth-password] or [auth-password/priv-password] is selected from [Security Level], enter an authentication password for the read-only user (using 8 to 32 single-byte characters, excluding spaces, \, ', ", and #).
  [priv-password]: If [auth-password/priv-password] is selected from [Security Level], enter a password used for privacy (encryption) of the read-only user (using 8 to 32 single-byte characters, excluding spaces, \, ', ", and #).

• [Write User Name]: Enter the user name of the user in the read-write enable state (using up to 32 single-byte characters) (default: [restrict]).
  [Security Level]: Select a security level of the user in the read-write enable state (default: [auth-password/priv-password]).
  [auth-password]: If [auth-password] or [auth-password/priv-password] is selected from [Security Level], enter an authentication password for the read-write enabled user (using 8 to 32 single-byte characters, excluding spaces, \, ', ", and #) (default: MAC address of this machine (Alphabetic characters are all in capitals, excluding colons ":")).
  [priv-password]: If [auth-password/priv-password] is selected from [Security Level], enter a password used for privacy (encryption) of the read-write enabled user (using 8 to 32 single-byte characters, excluding spaces, \, ', ", and #) (default: MAC address of this machine (Alphabetic characters are all in capitals, excluding colons ":")).

• [Encryption Algorithm]: Select an encryption algorithm (default: [DES]).

• [Authentication Method]: Select an authentication algorithm (default: [SHA-256]).

[TRAP function]

Configure settings for the SNMP TRAP function.

• [Permit Access]: When allowing a notification of the status of this machine using the SNMP TRAP function, set this option to ON (default: ON).

• [Send TRAP TX if authentication fails]: When performing TRAP TX due to an authentication failure, set this option to ON (default: OFF).

[WINS/NetBIOS]

When using the WINS server, set this option to ON (default: ON).

[Auto Obtain Setting]

When automatically specifying the WINS server address using DHCP, set this option to ON (default: ON).

[WINS Server Address1]/[WINS Server Address2]

Enter the WINS server address when manually specifying it. Use the following entry formats.

• Example of entry: "192.168.1.1"

[Node Type Setting]

Select the name resolution method (default: [H Node]).

• [B Node]: Makes inquires by broadcast.

• [P Node]: Makes inquires to the WINS server.

• [M Node]: Makes inquiries to the broadcast and WINS server in sequence.

• [H Node]: Makes inquiries to the WINS server and broadcast in sequence.

[SMB TX Setting]

When using the SMB TX function, set this option to ON (default: ON).

[SMB Authentication Setting]

Select an authentication method for SMB transmission according to your environment (default: [NTLM v1/v2]).

• [NTLM v1]: Performs the NTLM v1 authentication. This option is available in the NT domain environment.

• [NTLM v2]: Performs NTLM v2 authentication. This option is available in the NT domain environment.

• [NTLM v1/v2]: Performs NTLM v1 authentication when NTLM v2 authentication fails. This option is available in the NT domain environment or macOS environment.

• [Kerberos]: Performs Kerberos authentication. This option is available in the Active Directory domain environment.

[Authentication Setting if Kerberos Fails]

If [Kerberos] is selected in [SMB Authentication Setting], select whether to perform NTLM authentication when Kerberos authentication has failed (default: [Disable NTLM]).

• [Enable NTLM v1/v2]: NTLM v2 authentication is performed when Kerberos authentication fails, and NTLM v1 authentication is performed when NTLM v2 authentication fails. This option is available when both the Active Directory and NT domains are specified.

• [Disable NTLM]: Assumes that authentication fails when Kerberos authentication has failed.

[Single Sign-On Setting]

Configure the single sign-on function for SMB transmission.

By using the user authentication information (login name and password) of this machine as SMB destination authentication information (user ID and password), you can reduce the number of steps required to specify SMB destination authentication information, enabling you to configure a single sign-on environment for SMB transmission.

• [Default Domain Name]: When a server other than Active Directory is used for external server authentication or external server authentication is not used, specify the name of the domain to which the destination host belongs at SMB transmission (using up to 64 single-byte characters).
  When Active Directory is used for external server authentication, the value specified in this step is ignored, and the domain name of the login destination for external server authentication is used instead.
  If [Kerberos] is selected in [SMB Authentication Setting], entry is required.

• [SMB User Credential Setting]: Select whether to extract the user authentication information (login name and password) of this machine as SMB destination authentication information (user ID and password) (default: [OFF]).

• [Edit SMB User Credentials]: This option is available when [SMB User Credential Setting] is set to [ON] (default: [Restrict]).
  If [Restrict] is selected, the SMB destination is registered, excluding the user ID and password specified at login. However, using Web Connection, an SMB destination is registered, including the user ID and password.
  If [Allow] is selected, you can select whether to register SMB destinations, including or excluding the user ID and password. Selecting [Reg. excl. ID and Password] automatically adds the user ID and password at SMB transmission.

[User Authentication(NTLM)]

When performing user authentication via the NTLM server, set this option to ON (default: ON).

[DFS Setting]

When using DFS, set this option to ON (default: ON).

[SMB Server Settings]

When using this machine as the SMB server, set this option to ON (default: OFF).

[SMB Server Common Settings]

Configure common settings to use the machine as an SMB server.

• [SMB Host Name]: Enter the host name of this machine (using up to 15 single-byte characters).

• [Workgroup]: Enter the name of the workgroup that contains this machine (using up to 15 single-byte characters, excluding ", \, ;, :, ,, *, <, >, |, +, =, and ?).

• [SMB Authentication Protocol]: Select the SMB authentication protocol to be used in the machine (default: [SMB1.0/SMB2.0/SMB3.0/SMB3.1]).

• [SMB security Signature Setting]: Select whether to enable the SMB signature of this machine to suit your environment (default: [Only When Requested]).
  [Disable]: Disables the SMB signature of this machine.
  [Only When Requested]: Enables the SMB signature of this machine (server) only when the SMB signature is requested from the client side. If the SMB signature is not requested from the client side, operations are performed while the SMB signature of this machine (server) remains disabled, and a connection is possible even when the SMB signature in the client side is disabled.
  [Required]: Enables the SMB signature of this machine. To establish a connection, the SMB signature is also required in the client side. If the SMB signature in the client side is disabled, it will not be possible to make a connection.

[SMB Print Setting]

Configure the settings to use the SMB Print function.

• [SMB Print]: When using the SMB Print function, set this option to ON (default: OFF).

• [Print Service Name]: Enter a print service name in uppercase letters (using up to 12 single-byte characters, excluding / and \).

[Share SMB File Setting]

When using the SMB file sharing function, set this option to ON (default: OFF).

[Friendly Name]

Enter the name of this machine to be displayed when being searched using the Web service from the computer (using up to 62 single-byte characters).

[SSL Settings]

When using SSL communications, set this option to ON (default: OFF).

[Publication Service]

When using this machine in either one of the following environments, set this option to ON (default: ON).

• Environment where NetBIOS is disabled on Windows computer

• Environment constructed so that only communications using IPv6 are allowed

Up to 512 destinations can be detected in Publication Service (including detection counts by NetBIOS).

[Certificate Verification Level Settings]

To validate the certificate during SSL communication, select items to be verified.

• [Expiration Date]: Confirm whether the certificate is within the validity period (default: ON).

• [Key Usage]: Confirm whether the certificate is used according to the intended purpose approved by the certificate issuer (default: OFF).

• [Chain]: Confirm whether there is a problem in the certificate chain (certificate path) (default: OFF). The chain is validated by referencing the external certificates managed on this machine.

• [Expiration Date Confirmation]: Confirm whether the certificate has expired (default: OFF). The expiration date confirmation is performed in the order of OCSP (Online Certificate Status Protocol) service, and CRL (Certificate Revocation List).

[Enable Proxy]

When using discovery proxy, set this option to ON (default: OFF).

[Proxy1] to [Proxy3]

Register the discovery proxy server.

• [Proxy Server Address]: Enter the discovery proxy server address. Use one of the following formats.
  Example to enter the host name: "host.example.com"
  Example to enter the IP address (IPv4): "192.168.1.1"
  Example to enter the IP address (IPv6): "fe80::220:6bff:fe10:2f16"

• [File Path]: Enter the service name at the path of the URL where the WS-Discovery service is published in the discovery proxy server (using up to 255 single-byte characters).

• [Enable SSL]: When using SSL communications, set this option to ON (default: OFF).

• [Proxy Server Port Number]: If necessary, change the port number of the discovery proxy server (default: [80]/[443] (in use of SSL)).

[Print Function]

When using the WSD print function, set this option to ON (default: OFF).

[WSD Print V2.0 Setting]

When using the functions of WSD print version 2.0, set this option to ON (default: ON).

When you connect this machine from the computer compatible with version 2.0, you can issue a printing prenotification to this machine, send account information, specify parameters for the advanced device functions, or obtain the device capability and localization information.

[Printer Name]

Enter the name of this machine when using it as the WSD printer (using up to 63 single-byte characters).

[Printer Location]

Enter a printer location if necessary (using up to 63 single-byte characters).

[Printer Information]

Enter printer information if necessary (using up to 63 single-byte characters).

[Scan Function]

When using the WSD scan function, set this option to ON (default: OFF).

[Scanner Name]

Enter the name of this machine when using it as the WSD scanner (using up to 63 single-byte characters).

[Scanner Location]

Enter a scanner location if necessary (using up to 63 single-byte characters).

[Scanner Information]

Enter scanner information if necessary (using up to 63 single-byte characters).

[Connection Timeout]

If necessary, change the time-out time to limit a communication with the computer (default: [120] sec.).

[Bonjour]

When using Bonjour, set this option to ON (default: OFF).

[Bonjour Name]

Enter a Bonjour name that is to be displayed as the name of connected device (using up to 63 single-byte characters).

[Wide-Area Bonjour]

When using Wide-Area Bonjour, set this option to ON (default: ON).

You can detect this machine across segments from the computer while the machine and computer are connected to different networks.

To use Wide-Area Bonjour, you need to specify the DNS server address you are using.

[Port No.]

If necessary, change the port number of the E-mail server (SMTP) (default: [25]).

[Connection Timeout]

If necessary, change the time-out time to limit a communication with the E-mail server (SMTP) (default: [60] sec.).

[SMTP RX]

When using the SMTP reception function, set this option to ON (default: OFF).

[Port No.]

If necessary, change the port number of the E-mail server (SMTP) (default: [25]).

[Connection Timeout]

If necessary, change the time-out time to limit a communication with the E-mail server (SMTP) (default: [300] sec.).

[IP Address Fax Function Settings]

When using the IP address fax function, set this option to ON (default: OFF).

[I-Fax Function Setting]

When using Internet fax, set this option to ON (default: OFF).

[IP-FAX(T38) Function Settings]

When using the IP fax (SIP) function, set this option to ON (default: OFF).

[Port Number1]/[Port Number2]

If necessary, change the port number (default: [10000]).

Specify the port numbers by the number of available lines.

[Timeout]

Change the communication timeout period as needed (default: [60] sec.).

[WebDAV TX Setting]

When using the WebDAV TX function, set this option to ON (default: ON).

[Proxy Settings]

When a proxy server is installed in your environment, register the proxy server.

• [Proxy Server Address]: Enter the proxy server address. Use one of the following formats.
  Example to enter the host name: "host.example.com"
  Example to enter the IP address (IPv4): "192.168.1.1"
  Example to enter the IP address (IPv6): "fe80::220:6bff:fe10:2f16"

• [Proxy Server Port Number]: If necessary, change the proxy server port number (default: [8080]).

• [User Name]: Enter the user name used for proxy authentication (using up to 63 single-byte characters).

• [Password]: Enter the password for proxy authentication (using up to 63 single-byte characters).

[Chunk Transmission]

When sending data by dividing it into some chunks, set this option to ON (default: OFF).

Configure the setting if your WebDAV server supports chunk transmission.

[Connection Timeout]

If necessary, change the time-out time to limit a communication with the WebDAV server (default: [60] sec.).

[Server Authentication Character Code]

Select a character code to perform the authentication under the WebDAV server (default: [UTF-8]).

[Certificate Verification Level Settings]

To validate the certificate during SSL communication, select items to be verified.

• [Expiration Date]: Confirm whether the certificate is within the validity period (default: ON).

• [CN]: Confirm whether CN (Common Name) of the certificate matches the server address (default: OFF).

• [Key Usage]: Confirm whether the certificate is used according to the intended purpose approved by the certificate issuer (default: OFF).

• [Chain]: Confirm whether there is a problem in the certificate chain (certificate path) (default: OFF). The chain is validated by referencing the external certificates managed on this machine.

• [Expiration Date Confirmation]: Confirm whether the certificate has expired (default: OFF). The expiration date confirmation is performed in the order of OCSP (Online Certificate Status Protocol) service, and CRL (Certificate Revocation List).

[HTTP Version Setting]

Select the version of the protocol for HTTP communication (default: [HTTP/1.1]).

• [HTTP/1.1]: Uses HTTP/1.1 only.

• [HTTP/2,HTTP/1.1]: Uses HTTP/2 when connected to HTTP/2. In other cases, HTTP/1.1 is used.

[WebDAV Settings]

When using the WebDAV server function of this machine, set this option to ON (default: ON).

[SSL Settings]

Select whether to use the SSL for communication or not (default: [Non-SSL Only]).

• [Non-SSL Only]: Only non-SSL communication is allowed.

• [SSL Only]: Only SSL communication is allowed.

• [SSL/Non-SSL]: Both SSL communication and non-SSL communication are allowed.

[Access Rights Settings]

Specify the password to restrict access to the WebDAV server of this machine (using up to 64 single-byte characters) (default: [sysadm]).

• [Initial Password]: Returns the password to the default.

[Proxy Setting for Remote Access]

When using a proxy server to communicate with the remote diagnosis system, set this option to ON (default: OFF).

[Proxy Settings]

Register the proxy server to suit your operating environment.

• [Synchronize WebDAV Client Setting]: When using the proxy server registered in [WebDAV Client Settings] as the proxy server for remote diagnosis, set this option to ON (default: ON).

• [Proxy Server Address]: Enter the proxy server address. Use one of the following formats.
  Example to enter the host name: "host.example.com"
  Example to enter the IP address (IPv4): "192.168.1.1"
  Example to enter the IP address (IPv6): "fe80::220:6bff:fe10:2f16"

• [Proxy Server Port Number]: If necessary, change the proxy server port number (default: [8080]).

• [User Name]: Enter the user name used for proxy authentication (using up to 63 single-byte characters).

• [Password]: Enter the password for proxy authentication (using up to 63 single-byte characters).

[SSL/Port Settings]

Select whether to use the SSL for communication or not (default: [Non-SSL Only]).

• [Non-SSL Only]: Only non-SSL communication is allowed.

• [SSL Only]: Only SSL communication is allowed.

• [SSL/Non-SSL]: Both SSL communication and non-SSL communication are allowed.

[Port No.]

If necessary, change the port number for OpenAPI communication (default: [50001]).

[Port No.(SSL)]

If necessary, change the port number for SSL communication (default: [50003]).

[HTTP Version Setting]

Select the version of the protocol for HTTP communication (default: [HTTP/1.1]).

• [HTTP/1.1]: Uses HTTP/1.1 only.

• [HTTP/2,HTTP/1.1]: Uses HTTP/2 when connected to HTTP/2. In other cases, HTTP/1.1 is used.

[Proxy Settings]

Register the proxy server to suit your operating environment.

• [Proxy Server Address]: Enter the proxy server address. Use one of the following formats.
  Example to enter the host name: "host.example.com"
  Example to enter the IP address (IPv4): "192.168.1.1"
  Example to enter the IP address (IPv6): "fe80::220:6bff:fe10:2f16"

• [Proxy Server Port Number]: If necessary, change the proxy server port number to be used for HTTP (default: [8080]).

• [Proxy Server Port Number (HTTPS)]: If necessary, change the proxy server port number to be used for HTTPS (default: [8080]).

• [Proxy Server Port Number (FTP)]: If necessary, change the proxy server port number to be used for FTP (default: [21]).

• [User Name]: Enter the user name used for proxy authentication (using up to 63 single-byte characters).

• [Password]: Enter the password for proxy authentication (using up to 63 single-byte characters).

[Certificate Verification Level Settings]

To validate the certificate during SSL communication, select items to be verified.

• [Client Certificates]: Select whether to request a certificate from clients that connect to this machine (default: OFF).

• [Expiration Date]: Confirm whether the certificate is within the validity period (default: ON).

• [CN]: Confirm whether CN (Common Name) of the certificate matches the server address (default: OFF).

• [Key Usage]: Confirm whether the certificate is used according to the intended purpose approved by the certificate issuer (default: OFF).

• [Chain]: Confirm whether there is a problem in the certificate chain (certificate path) (default: OFF). The chain is validated by referencing the external certificates managed on this machine.

• [Expiration Date Confirmation]: Confirm whether the certificate has expired (default: OFF). The expiration date confirmation is performed in the order of OCSP (Online Certificate Status Protocol) service, and CRL (Certificate Revocation List).

[Access Setting]

When enabling an access from an application via OpenAPI, set this option to ON (default: ON).

[Authentication]

When authenticating users accessing via OpenAPI, set this option to ON (default: OFF).

• [Login Name]: Enter the login name used for OpenAPI authentication (using up to 8 single-byte characters).

• [Password]: Enter the password for OpenAPI authentication (using up to 8 single-byte characters).

[External Application Connection]

Specify whether to connect to external application via OpenAPI (default: [ON]).

[Specified Application Start Setting]

When launching only the pre-specified OpenAPI application at start-up of this machine, set this option to ON (default: OFF).

• [Default Startup Application Selection]: Specify the OpenAPI application to start (default: [Do not start.]).

• [Basic Functions Setting]: When using the basic functions of this machine, set this option to ON (default: OFF).

[TCP Socket]

When using TCP Socket, set this option to ON (default: ON).

• [Port No.]: If necessary, change the TCP Socket port number (default: [59158]).

[Use SSL/TLS]

When using SSL communications, set this option to ON (default: OFF).

• [Port No.(SSL/TLS)]: If necessary, change the port number for SSL communication (default: [59159]).

[IEEE802.1X Authentication Setting]

When using IEEE802.1X authentication, set this option to ON (default: OFF).

[Authentication Status]

Displays the status of IEEE802.1X authentication on this machine.

[Reset Job Settings]

Reset the current setting.

[Supplicant Setting]

Configure settings to operate this machine as a supplicant (client to be authenticated).

For details on settings, refer to the [Supplicant Setting] settings (shown below).

[User ID]

Enter a user ID (using up to 128 single-byte characters).

This user ID is used for all EAP-Type options.

[Password]

Enter a password (using up to 128 single-byte characters).

The password is used for all EAP-Type options other than [EAP-TLS].

[EAP-Type]

Select the EAP authentication method (default: [OFF]).

• [Depend on Server]: The EAP-Type provided by the authentication server will be used for authentication. Configure the supplicant settings as required for this machine according to the EAP-Type provided by the authentication server.

• Do not select [OFF].

[EAP-TTLS Internal Authentication Settings]

Configure the EAP-TTLS settings if [EAP-Type] is set to [EAP-TTLS] or [Depend on Server].

• [User ID]: Enter the user ID used for EAP-TTLS authentication (using up to 128 single-byte characters).

• [Protocol]: Select an internal authentication protocol for EAP-TTLS.

[Server ID]

To verify CN of the certificate, enter the server ID (using up to 64 single-byte characters).

[Client Certificates]

Select whether to encrypt the authentication information using a certificate for this machine.

This setting can be configured if the following conditions are satisfied:

• The certificate is registered on this machine

• [EAP-TLS], [EAP-TTLS], [PEAP], or [Depend on Server] is selected from [EAP-Type].

[Certificate Verification Level Settings]

To verify the certificate, select items to be verified.

• [Expiration Date]: Confirm whether the certificate is within the validity period (default: ON).

• [CN]: Confirm whether CN (Common Name) of the certificate matches the server address (default: OFF).

• [Chain]: Confirm whether there is a problem in the certificate chain (certificate path) (default: OFF). The chain is validated by referencing the external certificates managed on this machine.

[SSDP]

When enabling SSDP, set this option to ON (default: ON).

[Multicast TTL Setting]

Change TTL (Time To Live) for SSDP multi-cast packet if necessary (default: [1]).

[Upload]

Select whether to upload the data scanned on this machine (default: [ON]).

To allow uploading of data to only the specified site, select [Permitted URL Only], then enter the URL of the site to allow uploading of files to (using up to 256 single-byte characters).

[File Download]

Select whether to download files to this machine (default: [ON]).

When you allow downloading of data from only the specified site, select [Permitted URL Only], then enter the URL of the site to allow downloading of files from (using up to 256 single-byte characters).

[Web Browser]

Select the operation to be performed when an SSL certificate verification error occurs in the Web browser (default: [Popup display (Display only once in the same certificate)]).

• [Connect to the contents]: Connect to the website without displaying a confirmation message.

• [Popup display (Display only once in the same certificate)]: Displays a confirmation message only when the first error occurs for each certificate.

• [Popup display (Always display)]: Displays a confirmation message each time an error occurs.

• [Do not connect to the Contents]: Does not connect to the website in which an error occurs.

[OpenAPI - IWS Application]

Select the operation to be performed when an SSL certificate verification error occurs in the OpenAPI, IWS application.

[Permission Setting]

When using Single Sign-On, set this option to ON (default: OFF).

[Host Name]

Enter the host name of this machine (using up to 253 single-byte characters).

Enter the host name you specified in [Utility] - [Administrator] - [Network] - [TCP/IP Setting] - [TCP/IP Setting1] - [DNS Host].

[Domain Name]

Enter the domain name of Active Directory (using up to 64 single-byte characters).

[Account Name]

Enter the administrator's account name of the Active Directory domain (using up to 64 single-byte characters).

[Password]

Enter the administrator's password of the Active Directory domain (using up to 64 single-byte characters).

[Timeout]

Change the time-out time of domain joining processing if necessary (default: [30] sec.).

[IWS Settings]

When using the IWS function, set this option to ON (default: ON).

[Port Number (Web Server)]

If necessary, change the port number used to access the Web page contents uploaded to this machine (default: [8090]).

[Port Number (Application Installation)]

If necessary, change the port number to be used for dynamic contents of this machine (default: [8091]).

[Connect IWS Apps to Network]

When allowing the user to externally access the dynamic contents, set this option to ON (default: ON).

This option is available when Web page contents uploaded to this machine have dynamic contents such as scripts.

[Communication Between Applications]

Configure settings to operate the IWS application installed on this machine through the IWS application installed on a different device or an external application such as an application on a mobile terminal.

• [Permit Access for Communication between Applications]: When allowing a communication between an external application and the IWS application of this machine, set this option to ON (default: OFF).

• [Authentication]: Configure authentication information for logging in to this machine that is required when an external application operates the IWS application on this machine.
  [User Name]: Enter the user name used for authentication (using up to 8 single-byte characters).
  [Password]: Enter the password for authentication (using up to 8 single-byte characters).

• [Login Information Notification Setting]: When notifying you of the user name and password of the user who is using this machine, when the IWS application on this machine operates that of a different device, set this option to ON (default: OFF).

[Authentication Screen Settings]

If you want to display the login screen for IdP authentication, set this option to ON (default: OFF).

[Change user agent]

If you want to use the user agent for IdP authentication, set this option to ON (default: OFF).

[Registered Application List]

From the list of registered applications, select the application that displays the login screen for IdP authentication.

[Edit]

Set whether to allow the administrator password to be changed from the application selected in the application list.

[Incorrect input limit function]

If you want to prohibit the administrator password from being changed when the number of mistakes involving entry of the administrator password reaches 5, set this option to ON (default value: ON).

[Number of Installed Application(s)]

Displays the number of registered applications.

[Available free space for application]

Displays the amount of free space available to install the application.

[Detail]

Displays detailed information about the application selected in the application list.

You can change the application settings on the Details screen depending on the application.

[Enable Settings]

When enabling the MarketPlace application, set this option to ON (default: ON).

[Client Setting]

When operating the screen of this machine using the dedicated software on a different computer, set this option to ON (default: OFF).

[Server Address]

Enter the address of the server where the dedicated software was installed. Use one of the following formats.

• Example to enter the host name: "host.example.com"

• Example to enter the IP address (IPv4): "192.168.1.1"

• Example to enter the IP address (IPv6): "fe80::220:6bff:fe10:2f16"

[Port No.]

If necessary, change the port number of the server where the dedicated software was installed (default: [443]).

[HTTP Version Setting]

Select the version of the protocol for HTTP communication (default: [HTTP/1.1]).

• [HTTP/1.1]: Uses HTTP/1.1 only.

• [HTTP/2,HTTP/1.1]: Uses HTTP/2 when connected to HTTP/2. In other cases, HTTP/1.1 is used.

[Connection Timeout]

If necessary, change the timeout time of communication with the server where the dedicated software was installed (default: [60] sec.).

[Certificate Verification Level Settings]

To validate the certificate during SSL communication, select items to be verified.

• [Expiration Date]: Confirm whether the certificate is within the validity period (default: ON).

• [CN]: Confirm whether CN (Common Name) of the certificate matches the server address (default: OFF).

• [Key Usage]: Confirm whether the certificate is used according to the intended purpose approved by the certificate issuer (default: OFF).

• [Chain]: Confirm whether there is a problem in the certificate chain (certificate path) (default: OFF). The chain is validated by referencing the external certificates managed on this machine.

• [Expiration Date Confirmation]: Confirm whether the certificate has expired (default: OFF). The expiration date confirmation is performed in the order of OCSP (Online Certificate Status Protocol) service, and CRL (Certificate Revocation List).

[Synchronize WebDAV Client Setting]

When a proxy server is installed in your environment, register the proxy server.

• [Synchronize]: Use a proxy server registered in [Utility] - [Administrator] - [Network] - [WebDAV Settings] - [WebDAV Client Settings].

• [Individual Settings]: Register a required proxy server separately from the proxy server registered in [Utility] - [Administrator] - [Network] - [WebDAV Settings] - [WebDAV Client Settings].
  In [Proxy Settings], enter the proxy server address, port number, and the user name and password required to log in to the proxy server.

[Launch Remote Panel from vCare]

When allowing the user to launch the remote panel from the remote diagnosis system, set this option to ON (default: OFF).

[Server Settings]

When operating the screen of this machine using the Web browser on a different computer, set this option to ON (default: OFF).

[Port No.(SSL)]

If necessary, change the port number (default: [50443]).

[HTTP Version Setting]

Select the version of the protocol for HTTP communication (default: [HTTP/1.1]).

• [HTTP/1.1]: Uses HTTP/1.1 only.

• [HTTP/2,HTTP/1.1]: Uses HTTP/2 when connected to HTTP/2. In other cases, HTTP/1.1 is used.

[Password Authentication]

When prompting the user to enter the password for connecting to this machine, set this option to ON (default: OFF).

• [Password is changed.]: Enter the required password (using up to 64 single-byte characters).

[IP Filtering (Permit Access)]

When restricting computers to which you want to allow access to this machine using IP addresses, set this option to ON (default: OFF). Also, enter the range of IP addresses allowed to access.

[.print client Settings]

When using this machine as ThinPrint Client (.print Client), set this option to ON (default: ON).

[Port No.]

If necessary, change the port number for ThinPrint Engine (.print Engine) (default: [4000]).

[Data Size Before Compression]

Specify the maximum packet size to compress data in the ThinPrint Engine (.print Engine) side (default: [8192]).

ThinPrint Engine (.print Engine) compresses data in these sizes before sending a print job to this machine.

[Connection Timeout]

If necessary, change the time-out time to limit a communication from ThinPrint Engine (.print Engine) (default: [90] sec.).

[Printer Class Name]

Enter the printer class name of this machine to be used in ThinPrint Engine (.print Engine).

[Printer Name]

Enter the printer name of this machine to be used in ThinPrint Engine (.print Engine).

[Certificate Verification Level Settings]

To verify the certificate, select items to be verified.

• [Expiration Date]: Confirm whether the certificate is within the validity period (default: ON).

• [CN]: Confirm whether CN (Common Name) of the certificate matches the server address (default: OFF).

• [Key Usage]: Confirm whether the certificate is used according to the intended purpose approved by the certificate issuer (default: OFF).

• [Chain]: Confirm whether there is a problem in the certificate chain (certificate path) (default: OFF). The chain is validated by referencing the external certificates managed on this machine.

• [Expiration Date Confirmation]: Confirm whether the certificate has expired (default: OFF). The expiration date confirmation is performed in the order of OCSP (Online Certificate Status Protocol) service, and CRL (Certificate Revocation List).

[Connection Service Setting]

When using Connection Service, set this option to ON (default: OFF).

• [Server Address]: Enter the address of the server that supplies Connection Service.

• [Port No.]: Enter the number of the port that is used for Connection Service.

• [AYT Interval]: Enter the reconnection interval to check Connection Service operations in seconds (default: [60]).

• [Client ID]: Enter the client ID of this machine to be used for Connection Service (default: [1]).

• [Authentication Key]: Enter the authentication key used to connect to Connection Service (default: [0]).

[Server Connection Status]

Displays the status of the connection with Connection Service.

[bizhub Remote Access Setting]

When permitting a connection from a mobile terminal using bizhub Remote Access, set this option to ON (default: OFF).

[Connection Method]

Select whether to give priority to the operation speed in a mobile terminal or give priority to the image quality of the mobile terminal screen (default: [Standard]).

[Connection Timeout]

If necessary, change the time-out time to limit a communication with the mobile terminal (default: [20] min.).

[Display operation change screen]

Specify the operation to be performed when the screen of this machine is operated during remote control using a mobile terminal. When displaying the confirmation screen to check whether to continue remote control on the screen of a mobile terminal, set this option to ON (default: ON).

[Display connection permission screen]

Specify the operation to be performed when a remote control connection request is issued from a mobile terminal while the user is operating the screen of this machine. When displaying the confirmation screen to check whether to allow a connection to this machine, set this option to ON (default: ON).

[Keyboard Link]

When using the Keyboard Link function, set this option to ON (default: OFF).

If the Keyboard Link function is selected, you can use the text entry application on the mobile terminal when entering a text during remote control. You can enter characters using the keyboard, handwriting, or voice input function.

• [Connection restriction]: To restrict the method for connecting to this machine using Keyboard Link, select [Allow only NFC.], then select the connection method to be allowed. If NFC connection is permitted, it can be established by placing the Android terminal on the Mobile Touch Area of this machine. If Bluetooth LE connection is permitted, it can be established by searching for a Bluetooth LE device using bizhub Remote Access and selecting this machine.

[Address Link]

When using the Address Link function, set this option to ON (default: OFF).

If Address Link is selected, you can select an address from the address book on the mobile terminal and set it as the direct-input destination in fax or scan mode.

• [Connection restriction]: To restrict the method for connecting to this machine using Address Link, select [Allow only NFC.], then select the connection method to be allowed. If NFC connection is permitted, it can be established by placing the Android terminal on the Mobile Touch Area of this machine. If Bluetooth LE connection is permitted, it can be established by searching for a Bluetooth LE device using bizhub Remote Access and selecting this machine.

[Panel Link Scan]

When using the Panel Link scan function, set this option to ON (default: OFF).

Using the Panel Link scan function, you can send the image scanned on this machine to the storage of the Android terminal or Google Drive.

For an iOS terminal, its storage cannot be specified as a destination. Specify the Google Drive as a destination.

[Priority start mode]

Select which mode is used to start bizhub Remote Access by placing the Android terminal on the Mobile Touch Area (default: [Panel Link]).

[SSID]

Enter the SSID to use this machine as a wireless LAN access point (using up to 32 bytes).

[Authentication/Encryption Algorithm]

Select the algorithm used for authentication or encryption (default: [No Authentication/Encryption]).

[WEP Key]

Set [WEP Key] when [WEP] is selected in [Authentication/Encryption Algorithm].

• [Key Input Method]: Select the method to enter the WEP key.

• [WEP Key]: Enter the WEP key.

• [Key Selection]: Select the required WEP keys.

[Security key]

Specify the [Security key] when an algorithm other than [WEP] or [No Authentication/Encryption] is selected in [Authentication/Encryption Algorithm].

• [Key input method]: Select the security key input method when [WPA-PSK(AES)] or [WPA2-PSK(AES)] is selected in [Authentication/Encryption Algorithm].

• [Security key]: Enter the security key (password).

• [Automatic update of security key]: Specify whether to automatically update the communication encryption key.
  [Update Interval]: Enter the interval to update the communication encryption key.

[Wireless Channel Settings]

Specify the frequency band and channel required for wireless LAN connection.

• [Available frequency band]: Select the frequency band required for wireless LAN connection.

• [Wireless Channel(2.4GHz)]: Select the channel to be used for wireless LAN connection of the 2.4GHz band (default: [Auto]). Selecting [Auto] searches for a channel that is not being used for other access points, and automatically assigns it to the access point.

• [Wireless Channel(5GHz)]: Select the channel to be used for wireless LAN connection of the 5GHz band (default: [Auto]). Selecting [Auto] searches for a channel that is not being used for other access points, and automatically assigns it to the access point.

[ANY Connection]

Select whether to allow ANY connection (default: [Allow]).

If [Restrict] is selected, the SSID cannot be detected automatically as an access point in the wireless LAN adapter side.

[MAC address Filtering]

Restricts wireless LAN adapters that can be connected to the access point using the MAC address.

Enter the MAC addresses of wireless LAN adapters that can be connected to the access point. MAC addresses of up to 16 devices can be registered.

[DHCP Server Settings]

Configure settings to use the DHCP server. In general use, DHCP server settings are required.

• [Enable Settings]: Select whether to enable the DHCP server function (default: [Enable]).

• [IPv4 lease address]: Specify the range of IPv4 addresses to be leased from the DHCP server.

• [Subnet Mask]: Specify the subnet mask of the IPv4 address to be leased from the DHCP server.

• [Lease period]: Specify the lease period of the IPv4 address to be leased from the DHCP server.

[No.of Concurrent Devices Allowed]

Enter the number of devices that can be connected simultaneously to the access point (default: [16] units).

[Signal Strength Setting]

Select the radio field intensity of the access point from three levels (default: [High]).

[Display Connected Devices:]

Displays a list of names and MAC addresses of wireless LAN adapters that are connected to the access point.

[SSID]

Enter the SSID to use this machine as a Wi-Fi Direct group owner (using up to 32 bytes). This option is available when a terminal compatible with Wi-Fi Direct is connected to this machine.

If you cannot connect to this machine by specifying the SSID specified here, specify [Virtual SSID] to make a connection.

[Virtual SSID]

Displays the automatically generated virtual SSID.

This option is available when a terminal incompatible with Wi-Fi Direct is connected to this machine. The virtual SSID is displayed with "DIRECT-XXXXXX" ("XXXXXX" indicates a combination of the random alphanumeric characters and the specified value of SSID).

[Authentication/Encryption Algorithm]

The algorithm for authentication or encryption is fixed to [WPA2-PSK(AES)].

[Security key]

Displays the automatically created security key.

[Wireless Channel Settings]

Specify the frequency band and channel required for wireless LAN connection.

• [Available frequency band]: Select the frequency band required for wireless LAN connection.

• [Wireless Channel(2.4GHz)]: Select the channel to be used for wireless LAN connection of the 2.4GHz band (default: [Auto]). Selecting [Auto] searches for a channel that is not being used for other access points, and automatically assigns it to the access point.

• [Wireless Channel(5GHz)]: Select the channel to be used for wireless LAN connection of the 5GHz band (default: [Auto]). Selecting [Auto] searches for a channel that is not being used for other access points, and automatically assigns it to the access point.

[DHCP Server Settings]

Configure settings to use the DHCP server. In general use, DHCP server settings are required.

• [Enable Settings]: Select whether to enable the DHCP server function (default: [Enable]).

• [IPv4 lease address]: Specify the range of IPv4 addresses to be leased from the DHCP server.

• [Subnet Mask]: Specify the subnet mask of the IPv4 address to be leased from the DHCP server.

• [Lease period]: Specify the lease period of the IPv4 address to be leased from the DHCP server.

[No.of Concurrent Devices Allowed]

Enter the number of devices that can be connected simultaneously to the access point (default: [16] units).

[Signal Strength Setting]

Select the radio field intensity of the access point from three levels (default: [High]).

[Display Connected Devices:]

Displays a list of names and MAC addresses of wireless LAN adapters that are connected to the access point.

[Direct Input]

Select this option to directly enter all the setting items such as SSID and the encryption scheme that are required for a connection.

For details on settings, refer to the [Direct Input] settings (shown below).

[WPS]

Select this option to automatically obtain information required for a connection from the access point. The access point must support the WPS function.

When Web Connection is used by specifying the IP address of this machine connected to the wireless network, Web Connection is disconnected if WPS is executed.

For details on settings, refer to the [WPS] settings (shown below).

[Connection status]

Select this option to check the access point connected to this machine, the radio field intensity of the access point, and the current communication speed.

[AP Search]

Automatically searches for an access point around this machine. Select an access point to be connected to this machine from the displayed list.

[SSID]

Enter the SSID of the access point to be connected to this machine (using up to 32 bytes).

[Authentication/Encryption Algorithm]

Select the algorithm used for authentication or encryption (default: [No Authentication/Encryption]).

[WEP Key]

Set [WEP Key] when [WEP] is selected in [Authentication/Encryption Algorithm].

• [Key Input Method]: Select the method to enter the WEP key.

• [WEP Key]: Enter the WEP key.

• [Key Selection]: Select the required WEP keys.

[Security key]

Specify the [Security key] when an algorithm other than [WEP] or [No Authentication/Encryption] is selected in [Authentication/Encryption Algorithm].

• [Key input method]: Select the security key input method when [WPA-PSK(AES)] or [WPA2-PSK(AES)] is selected in [Authentication/Encryption Algorithm].

• [Security key]: Set the security key (password).

[Push Button Method]

Try to connect to the access point.

If you press the WPS setting button at the access point, settings such as SSID and security required for a connection are configured automatically.

For some access points that use the WPS push-button method, the connection may fail. If this occurs, wait approximately 30 seconds after pressing the button on the access point before connecting the machine.

[PIN Method]

The PIN code appears.

If you enter the displayed PIN code at the access point, settings such as SSID and security required for a connection are configured automatically.

[Print Setting]

When using the Mopria print function, set this option to ON (default: OFF).

[SSL Settings]

Select a combination of SSL communication and non-SSL communication (default: [SSL Only]).

• [SSL Only]: Only SSL communication is allowed.

• [SSL/Non-SSL]: Both SSL communication and non-SSL communication are allowed.

[Bonjour Name]

Enter a Bonjour name that is to be displayed as name of the connected device (using up to 63 single-byte characters).

[Scan Setting]

When using the Mopria Scan function, set this option to ON (default: OFF).

[SSL Settings]

Select a combination of SSL communication and non-SSL communication (default: [SSL Only]).

• [SSL Only]: Only SSL communication is allowed.

• [SSL/Non-SSL]: Both SSL communication and non-SSL communication are allowed.

[Domain Send Operation Restriction Setting]

Select whether to limit the recipient domain (default: [Do Not Limit]).

[Limit Type]

Select a method to restrict the recipient domain.

• To specify a domain to be permitted, select [Permitted TX].

• To specify a domain to be rejected, select [Send Deny].

[Permitted TX List]

Specify the domain to be permitted as the recipient when [Permitted TX] is selected in [Limit Type].

Select a recipient domain key, then enter the IP address or domain name of the domain (using up to 255 bytes).

• Symbol "?" is recognized as any one character.

• Symbol "*" is recognized as any characters of 0 or more.

[Send Deny List]

Specify the domain to be rejected as the recipient when [Send Deny] is selected in [Limit Type].

Select a recipient domain key, then enter the IP address or domain name of the domain (using up to 255 bytes).

• Symbol "?" is recognized as any one character.

• Symbol "*" is recognized as any characters of 0 or more.

[Limitation check of Shared address]

Check whether destinations with transmission disabled are included in the destinations registered on this machine.

[SIP setting]

When using the SIP function, set this option to ON (default: ON).

[User ID]

Enter the SIP user ID of this machine.

[Domain Name]

Enter the name of the SIP domain which this machine joins.

[Transport Mode]

Select the transport protocol (default: [UDP]).

[Port Number]

If necessary, change the port number (default: [5060]).

[Keep-alive interval value]

Enter the session update interval (default: [1800]).

[Request retransmission interval value]

Enter the packet resending interval (default: [500]).

[Priority proxy setting]

Configure the setting to connect to the priority SIP proxy server.

• [Destination type]: Enter the server address.

• [Port Number]: If necessary, change the port number (default: [5060]).

• [User Name]: Enter the user name used to log in to the server (using up to 63 single-byte characters).

• [Password]: Enter the password used to log in to the server (using up to 63 single-byte characters, excluding double quotation marks ").

[Alternate proxy setting]

Configure the setting to connect to the alternate SIP proxy server.

• [Destination type]: Enter the server address.

• [Port Number]: If necessary, change the port number (default: [5060]).

• [User Name]: Enter the user name used to log in to the server (using up to 63 single-byte characters).

• [Password]: Enter the password used to log in to the server (using up to 63 single-byte characters, excluding double quotation marks ").

[Register Setting]

Configure the setting to connect to the SIP registrar server.

• [Destination type]: Enter the server address.

• [Port Number]: If necessary, change the port number (default: [5060]).

• [User Name]: Enter the user name used to log in to the server (using up to 63 single-byte characters).

• [Password]: Enter the password used to log in to the server (using up to 63 single-byte characters, excluding double quotation marks ").

[SIP Server connection check]

Check whether the server connection is possible with the current setting.

[Auto acquisition of proxy address]

When automatically acquiring the address of the SIP proxy server, set this option to ON (default: ON).

[Domain Name Auto Retrieval]

When automatically acquiring the SIP domain name, set this option to ON (default: ON).

[Auto acquisition of proxy address]

When automatically acquiring the address of the SIP proxy server, set this option to ON (default: ON).

[Domain Name Auto Retrieval]

When automatically acquiring the SIP domain name, set this option to ON (default: ON).

[HTTP Server Usage settings]

When using the HTTP server function of this machine, set this option to ON (default: ON).

[Web Connection Setting]

When using Web Connection, set this option to ON (default: ON).

[Web Conn. HTTP Version Set.]

Select the version of the HTTP protocol for Web Connection (default: [HTTP/1.1]).

• [HTTP/1.1]: Uses HTTP/1.1 only.

• [HTTP/2,HTTP/1.1]: Uses HTTP/2 when connected to HTTP/2. In other cases, HTTP/1.1 is used.

[IPP Setting]

When enabling IPP, set this option to ON (default: ON).

[Accept IPP Jobs]

When using the IPP print function, set this option to ON (default: ON).

[IPP HTTP Version Set.]

Select the version of the HTTP protocol for IPP communication (default: [HTTP/1.1]).

• [HTTP/1.1]: Uses HTTP/1.1 only.

• [HTTP/2,HTTP/1.1]: Uses HTTP/2 when connected to HTTP/2. In other cases, HTTP/1.1 is used.

[Support Operation]

Select whether to allow the following IPP operations.

• [Print Job]: Allows a print job (default: ON).

• [Valid Job]: Allows you to check a valid job (default: ON).

• [Cancel Job]: Allows you to cancel a job (default: ON).

• [Open Job Attributes]: Allows you to obtain job attributes (default: ON).

• [Open Job]: Allows you to obtain a list of job attributes (default: ON).

• [Open Printer Attributes]: Allows you to obtain printer attributes (default: ON).

[Printer Information]

If necessary, enter the printer information of this machine.

• [Printer Name]: Enter the printer name of this machine (using up to 127 single-byte characters).

• [Printer Location]: Enter the location where to install this machine (using up to 127 single-byte characters).

• [Printer Information]: Enter printer information of this machine (using up to 127 single-byte characters).

• [Printer URI]: Displays the URI of the printers that can print data using the IPP.

[IPP Authentication Settings]

Configure a setting to use IPP authentication.

• [IPP Authentication Settings]: When using IPP authentication, set this option to ON (default: ON).

• [Authentication Method]: Select an IPP authentication method (default: [requesting-user-name]).

• [User Authentication Synchronization]: When synchronizing IPP authentication and user authentication, set this option to ON (default: OFF). This item is necessary when the user authentication is installed on this machine. If ON is selected, the registered user's authentication information of this machine is used as authentication information for IPP authentication. When [requesting-user-name] is selected in [Authentication Method], you cannot set this option to ON.

• [User Authentication Information for IPP Print]: Select which login information is used for user authentication to manage IPP print jobs on this machine when [User Authentication Synchronization] is set to ON (default: [Prioritize IPP Auth. Info.]).
  [Prioritize IPP Auth. Info.]: Uses the user name and password for IPP authentication.
  [Prioritize PJL Information]: Prioritizes the user name and password for PJL, and uses the user name and password for IPP authentication only when there is no PJL description.

• [User Name]: Enter the user name used for IPP authentication (using up to 20 single-byte characters, excluding colon ":"). This entry is required if you have selected [basic], [Digest-MD5], or [digest-SHA2] for [Authentication Method].

• [Password]: Enter the password for IPP authentication (using up to 20 single-byte characters). This entry is required if you have selected [basic], [Digest-MD5], or [digest-SHA2] for [Authentication Method].

• [realm]: If [Digest-MD5] or [digest-SHA2] is selected for [Authentication Method], enter the domain name (realm) (using up to 127 single-byte characters).

[IPP-SSL Settings]

Select whether to use SSL communication or not (default: [Non-SSL Only]).

• [Non-SSL Only]: Only non-SSL communication is allowed.

• [SSL Only]: Only SSL communication is allowed.

• [SSL/Non-SSL]: Both SSL communication and non-SSL communication are allowed.