8 [Administration] Tab Page272 [Security] How to Set and How to Operate[Security] How to Set and How to OperateIn the Security Service page, you can install a wireless LAN certificate for authentication with the RADIUS server, installand export a device certificate to enable SSL and set up its SCEP (automatic installation), install CA certificate, and installcertificates for IEEE 802.1X authentication and set up its SCEP.P.272 “Installing a device certificate”P.279 “Creating/Exporting a client certificate”P.281 “Installing CA certificate” Installing a device certificateTo enable SSL for HTTP setting, FTP server setting, IPP Print Service, Web Services Print, or Off Device CustomizationArchitecture settings, you must install a device certificate for each.To install these device certificates, you need to create a self-signed certificate, install them from an authentication agencyor the CA server. You can also install them automatically from the CA server using SCEP.P.273 “Creating/exporting a self-signed certificate”P.275 “Installing an imported device certificate”P.276 “Deleting an imported device certificate”P.277 “Installing a device certificate automatically”P.278 “Deleting a device certificate installed automatically”When you want to enable SSL for HTTP setting, FTP Server, IPP Print, Web Services Print, or Off DeviceCustomization Architecture settings, the certificates required to install to the equipment and the client PC are asfollows:*1 In the HTTP Network Service, FTP Server, IPP Print, and Off Device Customization Architecture settings, if you create a self-signedcertificate for the equipment, you need to install the self-signed certificate to the client PC. If you select to install an imported devicecertificate to the equipment, also install the CA certificate to the client PC.*2 For Windows Vista/XP, you can enable SSL by installing certificates only in the equipment. In this case, the following message appearswhen you operate the system. Select the specified item."There is a problem with this website's security certificate" appears. If you are using Windows Vista, select [Continue to this website (notrecommended)]."The security certificate presented by this website was issued by a company you have not chosen to trust. Do you want to proceed?"appears if you are using Windows XP. Select [Yes].If you want to further enhance the security, install certificates also in the client PC.P.281 “Installing CA certificate”When you install the User Certificate in this equipment, it is recommended to connect this equipment and a clientcomputer using a crossing cable for ensuring security.Use SSL for... Required Certificate for this equipment Required Certificate for Client PCDevice Certificate CA Certificate Self-signedCertificateClientCertificateCACertificateSelf-signedCertificateDevice certificatesinstalled fromauthentication agency/ CA serverHTTP, FTP, IPPPrint, Off DeviceCustomizationArchitecture*1Required - - (Required)*2 - -- Required - - - (Required) *2Web ServicePrint- Required Required - Required RequiredRequired - - Required - -
