Configuring the Key and Certificate for TLS

You can encrypt communication between the machine and a Web browser on the computer by using Transport Layer Security (TLS). TLS is a mechanism for encrypting data sent or received over the network. TLS must be enabled when the Remote UI is used for specifying settings for IPSec (Pre-Shared Key Method), IEEE 802.1X authentication (TTLS/PEAP), or SNMPv3. To use TLS encrypted communication for the Remote UI, you need to specify a "key and certificate" (server certificate) you want to use before enabling TLS. Generate or install the key and certificate for TLS before enabling TLS (Management Functions).


For more information about the basic operations to be performed when setting the machine from the Remote UI, see Setting Up Menu Options from Remote UI.

Start the Remote UI and log in to System Manager Mode. Starting Remote UI

Click [Settings/Registration] on the Portal page. Remote UI Screen

Select [Network Settings]

[TLS Settings].

Click [Key and Certificate].

Click [Register Default Key] on the right of the key and certificate you want to use.

Viewing details of a certificate

You can check the details of the certificate or verify the certificate by clicking the corresponding text link under [Key Name], or the certificate icon.

Click [Edit].

Configure detailed TLS settings.

[Allowed Versions]

Specify [Maximum Version] and [Minimum Version] of TLS.

[Algorithm Settings]

Select the check box for the encryption algorithm to use for TLS.

: Available -: Unavailable

Algorithm	TLS Version
Algorithm	[TLS 1.3]	[TLS 1.2]	[TLS 1.1]	[TLS 1.0]
[Encryption Algorithm]
[AES-CBC(256bit)]	-
[AES-CBC(128bit)]	-
[AES-GCM(256bit)]			-	-
[AES-GCM(128bit)]			-	-
[3DES-CBC]	-
[CHACHA20-POLY1305]		-	-	-
[Key Exchange Algorithm]
[RSA]	-
[ECDHE]
[X25519]		-	-	-
[Signature Algorithm]
[RSA]
[ECDSA]
[HMAC Algorithm]
[SHA1]	-
[SHA256]			-	-
[SHA384]			-	-

Click [OK].

Select [License/Other]

[Remote UI Settings].

Click [Edit].

Select the [Use TLS] check box and click [OK].

Restart the machine. Restarting the Machine


Using the operation panel You can also enable or disable TLS encrypted communication from <Menu> in the Home screen. <Remote UI> Starting the Remote UI with TLS If you try to start the Remote UI when TLS is enabled, a security alert may be displayed regarding the security certificate. In this case, check that the correct URL is entered in the address field, and then proceed to display the Remote UI screen. Starting Remote UI Using TLS to encrypt e-mail/I-Fax communication If the SMTP server and the POP3 server support TLS, you can enable TLS for communication with these servers (Configuring E-Mail/I-Fax Communication Settings). For more information about the SMTP server and the POP3 server, contact your Internet service provider or Network Administrator.

Using the operation panel

You can also enable or disable TLS encrypted communication from <Menu> in the Home screen. <Remote UI>

Starting the Remote UI with TLS

If you try to start the Remote UI when TLS is enabled, a security alert may be displayed regarding the security certificate. In this case, check that the correct URL is entered in the address field, and then proceed to display the Remote UI screen. Starting Remote UI

Using TLS to encrypt e-mail/I-Fax communication

If the SMTP server and the POP3 server support TLS, you can enable TLS for communication with these servers (Configuring E-Mail/I-Fax Communication Settings). For more information about the SMTP server and the POP3 server, contact your Internet service provider or Network Administrator.

Generating the Key and Certificate for Network Communication

Generating a Key and Certificate Signing Request (CSR)

Registering the Key and Certificate for Network Communication

Configuring IPSec Settings

Configuring IEEE 802.1X Authentication Settings

Monitoring and Controlling the Machine with SNMP

Registering LDAP Servers