Installation Overview
Configuration on the Machine
Import an S/MIME certificate from a Certificate Authority (in PKCS7 format), then configure the certificate on the machine using CentreWare Internet Services.
Configuration on a Computer
No special configuration is needed for remote computer receipt of encrypted e-mail. For sending
encrypted e-mail to the machine, however, you will need a copy of the device’s S/MIME certificate on your workstation to allow you to encrypt email being sent to the device. The S/MIME certificate represents the Public Key of the device, allowing encryption to take place.
Configuring S/MIME certificates with CentreWare Internet Services
To configure S/MIME certificates with CentreWare Internet Services, first enable HTTP communications (as stated under Configuration of HTTP Communication Encryption in this section). Next, import an S/ MIME certificate from a Certificate Authority (in PKCS7 format). Finally, enable S/MIME.
1. Start a web browser.
2. Enter the machine's IP address, beginning with “https,” into the Address box of your web browser, and press the Enter key.
Example:
https://192.168.1.1/ 3. Click the Properties tab.
4. Confirm that the Machine’s E-mail Address, under the Description hot link, is filled in. Also note that to use E-mail with this machine, E-Mail has to be enabled and configured as stated in the Scan to E- mail section of this guide.
a. Enter the Password.
b. Enter the Re-enter Password.
c. Enter a file name for the file you want to import, or select the file to be imported by clicking the
Browse button.
d. Click the Import button. When a screen to enter the user name and password appears, enter the System Administrator user ID and password into User Name and Password, and then click OK.
Note: The default user ID is "11111" and the default password is "x-admin".
8. Refresh the web browser.
9. Click [+] on the left of Security to display the items in the folder. 10. Configure the certificate.
a. Click Trusted Certificates Management.
b. Select [Local Device] for Category, [S/MIME] for Certificate Purpose, and then click the Display the List button. If necessary, enter the System Administrator User Name and Password and click OK.
c. Place a check mark in the box in front of the Certificate you wish to view details for. d. Click the Certificate Details button.
e. Click the Use this certificate button.
f. Click Reboot. The machine will reboot and the setting values will be reflected. 11. Refresh the web browser.
12. Click [+] on the left of Security to display the items in the folder. 13. Click SSL/TLS Settings.
14. Select the Enable check box for S/MIME Communication. 15. Apply the settings.
a. Click Apply.
b. The right frame on the web browser will change to the machine reboot display. c. Click Reboot Machine. The machine will be unavailable for a short period of time. 16. Configure the settings for S/MIME.
a. Refresh the web browser.
b. Click [+] on the left of Security to display the items in the folder. c. Click S/MIME Settings and set the following items.
Receive Untrusted iFAX
Decide whether or not you wish to receive untrusted iFAXes.
Digital Signature - Outgoing E-mail
Decide whether or not to add a digital signature to outgoing E-mail, and the method to use if a signature is desired.
Digital Signature - Outgoing iFAX
Decide whether or not to add a digital signature to outgoing iFAXes, and the method to use if a signature is desired.
d. Click the Apply button.
Configuration on a Computer
The following describes the configuration for a remote, networked computer.
Sending scanned data by S/MIME encrypted E-mail from the machine to a computer
An S/MIME certificate MUST be imported, configured, and stored on the machine as stated in this section under Configuring S/MIME certificates with CentreWare Internet Services.
When importing the S/MIME certificate, make sure that a root certificate is included for use with the Supported E-mail applications shown below.
Receiving E-mail with S/MIME digital signature from the machine
No settings are required on a recipient computer.
Sending S/MIME encrypted e-mail by E-mail printing from a computer to the machine
It is necessary to register the S/MIME certificate of the machine on the computer. There are two methods to set an S/MIME certificate of the machine on the computer:
Sending e-mail with S/MIME digital signature from the machine to the computer
To send e-mail with an S/MIME digital signature from the machine, configure to attach the digital signature when sending E-mail in the [Digital Signature - Outgoing E-mail] settings.
Exporting an S/MIME certificate to the computer using CentreWare Internet Services and registering the exported S/MIME certificate in the certificate storage location of the E-mail application.
Note that the exporting of certificates is accomplished using the Trusted Certificates Management hot link under Security folder on the Properties page of Internet Services. For information on how to export a certificate, refer to the CentreWare Internet Services online help. For information on how to register a certificate in an E-mail application, refer to the manuals provided with the E-mail application.
Sending E-mail with S/MIME digital signature from a computer to the machine
It is necessary to register a personal certificate of a sender's E-mail address, an intermediate certificate authority certificate of the personal certificate, and a root certificate on the machine.
Supported E-mail applications
E-mail applications that can send and receive E-mail to and from the machine are as follows: Outlook 2000/2002/2003
Outlook Express 6 Netscape 7.x