Configuring Settings for Key Pairs and Digital Certificates
In order to encrypt communication with a remote device, an encryption key must be sent and received over an unsecured network beforehand. This problem is solved by public-key cryptography. Public-key cryptography ensures secure communication by protecting important and valuable information from attacks, such as sniffing, spoofing, and tampering of data as it flows over a network.
Key Pair
 | A key pair consists of a public key and a secret key, both of which are required for encrypting or decrypting data. Because data that has been encrypted with one of the key pair cannot be returned to its original data form without the other, public-key cryptography ensures secure communication of data over the network. Up to eight key pairs, including the preinstalled pairs, can be registered (Using CA-issued Key Pairs and Digital Certificates). For TLS encrypted communication, a key pair can be generated for the machine (Generating Key Pairs). |
CA Certificate
 | Digital certificates including CA certificates are similar to other forms of identification, such as driver's licenses. A digital certificate contains a digital signature, which enables the machine to detect any spoofing or tampering of data. It is extremely difficult for third parties to abuse digital certificates. A digital certificate that contains a public key of a certification authority (CA) is referred to as a CA certificate. CA certificates are used for verifying the device the machine is communicating with for features such as printing with Google Cloud Print or IEEE 802.1X authentication. Up to 150 CA certificates can be registered, including the 72 certificates that are preinstalled in the machine (Using CA-issued Key Pairs and Digital Certificates). |
Registering a Certificate Obtained from an SCEP Server to a Self-generated Key
| When generating a key on the machine, request a Simple Certificate Enrollment Protocol (SCEP) server to issue a certificate, and then register the obtained certificate. You can also request that a certificate be issued at a specified date and time. Generating a Key and Obtaining and Registering a Certificate from an SCEP Server |