Using an SSL/TLS Communication
About the certificate of this machine
Communication between this machine and the computer can be encrypted with SSL to enhance security.
A certificate for this machine is used for the SSL communication between the machine and the computer. As a certificate was registered on this machine upon shipment, you can only enable SSL/TLS on the machine to start the SSL encrypted communication immediately after setup.
This machine can manage multiple certificates and use different certificates depending on the application (protocol). You can self-create a new certificate or install a certificate issued by the Certificate Authority (CA).
The following shows how to use the certificate on this machine.
Usage | Description |
|---|---|
Using the certificate registered upon shipment | The certificate that was registered on this machine upon shipment can be used as it is. |
Using a self-created certificate | Create a certificate with this machine. The Certificate Authority (CA) is not required for a self-created certificate, and it can be used simply after entering necessary information for creating the certificate. |
Using a certificate issued by the Certificate Authority (CA) | Create certificate signing request data in this machine, and request a trusted Certificate Authority (CA) for issuing a certificate for the machine. When the data is returned from the Certificate Authority after its review, register the data with this machine. |
Using the certificate registered upon shipment
Select a login mode to enable SSL communication. Also, specify the range of the SSL version to be used.
Select [Security] - [PKI Settings] - [Enable SSL Version] in administrator mode of Web Connection (or in [Utility] - [Administrator] of this machine), and configure the settings. For details, refer to [Enable SSL Version].
Self-creating a certificate
Create a certificate with this machine. The Certificate Authority (CA) is not required for a self-created certificate, and it can be used simply after entering necessary information for creating the certificate.
1
Select [Security] - [PKI Settings] - [Device Certificate Setting] - [New Registration] - [Create and install a self-signed Certificate.] in administrator mode of Web Connection, and enter information required for creating a certificate, then click [OK].
For details on settings, refer to the [Create and install a self-signed Certificate.] settings (described after this procedure).
The certificate is created and installed on this machine. It may take several minutes to create a certificate.
2
When the certificate has been installed, enable SSL communication.
For details, refer to [Enable SSL Version].
Settings of [Create and install a self-signed Certificate.]
Setting | Description |
|---|---|
[Common Name] | Displays the IP address of this machine. |
[Department] | Enter an organization or association name (using up to 63 ASCII characters). |
[Account Name] | Enter the organization unit name (using up to 63 ASCII characters). You can also specify a null. |
[Locality] | Enter the locality name (using up to 127 ASCII characters). |
[State/Province] | Enter the state or province name (using up to 127 ASCII characters). |
[Country] | Enter the country name. As the country name, specify a country code defined in ISO03166 (using up to two ASCII characters). United States: US, Great Britain: GB, Italy: IT, Australia: AU, The Netherlands: NL, Canada: CA, Spain: ES, Czech Republic: CZ, China: CN, Denmark: DK, Germany: DE, Japan: JP, France: FR, Belgium: BE, Russia: RU |
[Admin. E-mail Address] | Enter the E-mail address of the administrator of this machine (using up to 128 single-byte characters, excluding spaces). If the E-mail address of the administrator was already registered from [System Settings] - [Machine Setting], this field displays the registered E-mail address. |
[Validity Start Date] | Displays the starting date of the certificate validity period. Displays the date and time of this machine when this screen is displayed. |
[Validity Period] | Enter the validity period of a certificate with the number of days that have elapsed since the starting date. |
[Encryption Key Type] | Select a type of encryption key. |
[Specify server authentication (id-kp-serverAuth OID)] | When specifying that the encryption key of the certificate of this machine is used for server authentication, set this item to ON (default: OFF). |
Requesting the Certificate Authority for issuing a certificate
Create certificate signing request data in this machine, and request a trusted Certificate Authority (CA) for issuing a certificate for the machine. When the data is returned from the Certificate Authority after its review, register the data with this machine.
1
Select [Security] - [PKI Settings] - [Device Certificate Setting] - [New Registration] - [Request a Certificate] in administrator mode of Web Connection, and enter information required for issuing a certificate, then click [OK].
For details on settings, refer to the [Request a Certificate] settings (described after this procedure).
2
Click [Save].
Click this button to save certificate signing request data on your computer as a file.
3
Send the certificate signing request data to the Certificate Authority.
When the data is returned from the Certificate Authority after its review, register the data with this machine.
4
Select [Security] - [PKI Settings] - [Device Certificate Setting] - [Setting] - [Install a Certificate] in administrator mode of Web Connection, and paste the text data sent from the Certificate Authority (CA), and then click [Install].
5
When the certificate has been installed, enable SSL communication.
For details, refer to [Enable SSL Version].
Settings of [Request a Certificate]
Setting | Description |
|---|---|
[Common Name] | Displays the IP address of this machine. |
[Department] | Enter an organization or association name (using up to 63 ASCII characters). |
[Account Name] | Enter the organization unit name (using up to 63 ASCII characters). You can also specify a null. |
[Locality] | Enter the locality name (using up to 127 ASCII characters). |
[State/Province] | Enter the state or province name (using up to 127 ASCII characters). |
[Country] | Enter the country name. As the country name, specify a country code defined in ISO03166 (using up to two ASCII characters). United States: US, Great Britain: GB, Italy: IT, Australia: AU, The Netherlands: NL, Canada: CA, Spain: ES, Czech Republic: CZ, China: CN, Denmark: DK, Germany: DE, Japan: JP, France: FR, Belgium: BE, Russia: RU |
[Admin. E-mail Address] | Enter the E-mail address of the administrator of this machine (using up to 128 single-byte characters, excluding spaces). If the E-mail address of the administrator was already registered from [System Settings] - [Machine Setting], this field displays the registered E-mail address. |
[Encryption Key Type] | Select a type of encryption key. |
[Specify server authentication (id-kp-serverAuth OID)] | When specifying that the encryption key of the certificate of this machine is used for server authentication, set this item to ON (default: OFF). |
in the upper-right of a page, it turns into 
and is registered as a bookmark.