Installing a Certificate File

You can use the Remote UI to install the key pair and user certificate required for user signatures in the machine.
You can also install the key pair file and certificate file used for the following to the machine from the Remote UI. To use the files installed as a key pair and certifcate, it is necessary to register them from the control panel of the machine or the Remote UI.
Encrypted SSL Communication
A key pair and server certificate are required to use encrypted SSL communication for IPP printing, e-mail and I-faxes, the Remote UI, and delivering device information.
Install the key pair file and server certificate file using the Remote UI. (See "Installing a Key Pair File and Certificate File.") The installed key pair file and server certificate file can be used as a key pair and server certificate by registering them from the control panel of the machine. (See "Registering a Key Pair File and Server Certificate File Installed from a Computer.")
IEEE802.1X Authentication
A CA certificate, key pair, and client certificate are required.
CA certificate
Install the CA certificate file using the Remote UI. (See "Installing a CA Certificate File.") The installed CA certificate file can be used as a CA certificate by registering it from the control panel of the machine. (See "Registering/Editing a CA Certificate File.")
Key pair and client certificate
Install the key pair file and client certificate file. (See "Installing a Key Pair File and Certificate File.") The installed key pair file and client certificate file can be used as a key pair and client certificate by registering them from the control panel of the machine. (See "IEEE802.1X Authentication Settings.")
IPSec
A CA certificate, key pair, and client certificate are required.
CA certificate
Install the CA certificate file using the Remote UI. (See "Installing a CA Certificate File.") The installed CA certificate file can be used as a CA certificate by registering it from the control panel of the machine. (See "Registering/Editing a CA Certificate File.")
Key pair and certificate
Install the key pair file and certificate file. (See "Installing a Key Pair File and Certificate File.") The installed key pair file and certificate file can be used as a key pair and certificate by registering them from the control panel of the machine. (See "IPSec Settings.")
Installing a Key Pair File and Certificate File
Installing a CA Certificate File
Installing/Checking/Erasing a User Signature Certificate File and Key Pair File

Installing a Key Pair File and Certificate File

1.
Click [Settings/Registration] → [Device Management] for <Management Settings>.
2.
Click [Key and Certificate Settings] → [Register Key/Certificate] → [Install].
3.
Click [Browse].
4.
In the dialog box that appears, select the key pair file and certificate file to install → click [Save].
The maximum number of characters that you can enter for the file name is eight, excluding the file path and file extension ".p12". Specify the name of the file to install so that it will not exceed eight characters.
5.
Click [Start Installation].
IMPORTANT
For information on registering the key pair file and server certificate file used for encrypted SSL communication, see "Key Pair and Server Certificate Settings for Encrypted SSL Communication."
For information on registering the key pair file and client certificate file used for IEEE802.1X, see "IEEE802.1X Authentication."
For information on registering the key pair file and certificate file used for IPSec, see "IPSec Communication."
NOTE
A preinstalled key pair and server certificate are registered in the machine. You can also perform encrypted SSL communication using the preinstalled key pair and server certificate. You can also use a key pair and server certificate generated and registered on the control panel of the machine for encrypted SSL communication.

Installing a CA Certificate File

1.
Click [Settings/Registration] → [Device Management] for <Management Settings>.
2.
Click [CA Certificate Settings] → [Register CA Certificate] → [Install].
3.
Click [Browse].
4.
In the dialog box that appears, select the CA certificate file to install → click [Save].
The maximum number of characters that you can enter for the file name is eight, excluding the file path and file extension ".cer". Specify the name of the file to install so that it will not exceed eight characters.
5.
Click [Start Installation].
IMPORTANT
For more information on registering a CA certificate file, see [Register CA Certificate] in "Registering/Editing a CA Certificate File."

Installing/Checking/Erasing a User Signature Certificate File and Key Pair File

This function installs/checks/erases a user certificate file and key pair file contained in a digital signature file.
This function is available only if the Universal Send Digital User Signature Kit is activated and you log in to the machine using the SSO-H login service.
1.
Click [Settings/Registration] → [Device Management] for <Management Settings>.
2.
Click [User Key and Certificate Settings].
If a user with administrator privileges has logged in, all of the registered user key pair files and certificate files are displayed.
If a general user has logged in, only their user key files and certificate files are displayed.
To install a user key and certificate:
To check/erase a user key pair file:
To install a user key and certificate:
Click [Install] → enter the path for the key pair and certificate file to install and the password of the private key → click [Start Installation].
The maximum number of characters that you can enter for the file name is twenty, excluding the file path and file extension ".p12" or ".pfx". Specify the name of the file to install so that it will not exceed twenty characters.
IMPORTANT
Up to 100 user certificate files can be installed, with a maximum of one user certificate per user. An error is displayed if you attempt to install more than 100 certificate files, or more than one user certificate file for a user.
To check/erase a user key pair file:
To check a user key pair file
Click the key pair file.
To erase a user key pair file
Select the user key file you want to erase → click [Delete].
NOTE
You can use a digital signature file with the following properties:
File format: PKCS#12
File extension: ".pfx" or ".p12"
You can use a user certificate file with the following properties:
Format: X.509 version 3
Key length: 1024 bits/2048 bits
Encryption algorithm: RSA