TOSHIBA E-STUDIO2528A (02) PDF MANUAL

When this equipment is operated under the high security mode, a lock icon is displayed on the touch panel of the equipment.

After your service technician has performed the change of the settings of this equipment, confirm that the lock icon is displayed on the touch panel. Moreover, by referring to the initial value list, confirm that the settings have been made correctly.

The internal storage device of the equipment which is operated under the high security mode is encrypted. To confirm that each function is operating, check the display at the top right of the [Counter] screen on the touch panel of the equipment. A “FIPS” icon is displayed if the internal storage device has been encrypted.

When a FIPS Hard Disk is installed, an icon to indicate this status is displayed on the touch panel.

Be sure to set [MFP Local Authentication] for [Authentication Method] in the [User Management] screen. If [Windows Domain Authentication] or [LDAP Authentication] is set for user authentication, the equipment will not be covered by CC Certification.

When a self-signed certificate is created, use “RSA2048” for Public Key and “SHA256”, “SHA384” or “SHA512” for Signature Algorithm.

Manually select [FULL] and perform the integrity check at the time of installation and during use periodically.

The Integrity Check function is automatically performed at the startup of this equipment. When “Call For Service” appears, contact your service technician.

Do not change the communication settings of the equipment from the initial values. Communication via a network can be protected by TLS if no such changes are made.

Contact your service technician in any of the following cases:

• If the icon showing that the internal storage device is encrypted (FIPS icon) is not displayed.

• The displayed system version differs from the actual one.

In the High Security Mode, the following functions cannot be used:

• Interrupt copy

• Network Fax

• Address Book Viewer

• File Downloader

• TWAIN Driver

• e-Filing BackUp/Restore Utility

• Scheduled printing

• Disabling log authentication

• Mailbox

• E-mail reception print

• Disabling POP3 setting

• Data Backup/Restore

The automatic log-in function in the client software which comes with this equipment is not available. Be sure to enter the user name and password when using client software.

Any data sent to this equipment, such as a Fax and Internet Fax printed or received from a printer driver, can be outputted only when a user with the printing privilege is logged in. Use IPP SSL/TLS to communicate with this equipment.

When IPP printing is performed, use the port created by entering “https://[IP address]:[SSL/TLS port number]/Print” into the URL field. For example: https://192.168.1.2:631/Print.

When importing the data such as address book, be sure to use the data exported from this equipment.

Do not use any applications which need a setting change of the [ODCA] sub menu in the [Setup] menu on the [Administration] under TopAccess.

Do not enable [Use Password Authentication for Print Job] when printing is performed from this equipment with any of these printer drivers; Universal Printer 2, Universal PS3.

In order to operate this equipment under the high security mode, a Syslog server which supports TLS1.2 is necessary. An administrator should always confirm that communication with the Syslog server is being connected.

Printing, copying, scanning and fax transmission/reception are subject to an access restriction by means of a user authentication function. All users can confirm the lists of jobs in processing and in waiting. However, as for the list of fax reception jobs, only users whose role is Administrator or FaxOperator can confirm it. Corresponding to the role privilege of users, they can operate outputting, deletion, pause or change orders of jobs.

• When the role of the users is Administrator or User, they can create jobs.

• When the role of the users is FaxOperator, they can create, output and delete fax transmission/reception jobs. However, as for fax transmission jobs, the users can output and delete only their account jobs.

• When the role of the users is User, jobs, they can output and delete only their account jobs.

• When the role of the users is Administrator, they can delete, pause and change the order of all jobs in waiting.

• However, if the role of the users is AccountManager or AddressBookRemoteOperator, outputting, deleting, pausing or changing orders of printing, copying or fax jobs is not available.

Perform the setting correctly by referring to the “Initial value list” provided in other sections of this guide. Additionally:

• Use the encrypted PDF format when saving or sending a file and the encryption level shall be 128 bit AES.

• Specify a reliable remote PC for the saving destination of the scan data.

• Do not use MFP LOCAL since no password can be set.

• Administrators must regularly export and store the logs.

• Do not enable [Auto] of Email Direct Printing.

• Be sure to reboot the equipment when CA certification is uploaded or removed.

An administrator should explain to users that the high security mode is operating in this equipment as well as the following items so that they will keep to them appropriately:

• Printing should be performed by using the printer driver settings of IPP print.

• Specify a reliable remote PC for the saving destination of the scan data.

• Do not use any local folder of this equipment.

When disposing of an MFP, be sure to contact your service technicians to erase the data in the internal storage device completely.

In the high security mode, a password, tentatively assigned by an administrator to allow a user access, is treated as a temporary one. To use the equipment, you need to register your password after accessing it with the temporary one. The security level is insufficient if you continue to use the temporary password. Register your password as soon as possible.

A user temporary password is used in the following cases:

• For the first time to log in to the equipment after being registered by an administrator.

• When an administrator resets the user’s password.

• When the user information password imported by an administrator is plain text.

When an administrator resets users’ passwords, they must be so notified and prompted to change them to ones of their own choosing.

To prevent user information exported from an equipment from being altered, it is hashed. If you change the password for the exported user information, plain text is used for the password.

Enter the user name and a temporary password in the User Authentication menu. When you press [OK] in the confirmation screen for the temporary password, the password entry screen appears. Enter the temporary password in [Old Password]. Enter your new password in [New Password] and [Retype New Password], and then press [OK]. The new password is registered and you can log in to the equipment.

When you access the equipment from TopAccess, the log-in screen appears. Enter the user name and a temporary password in the log-in screen, and then press [Login]. When the registration screen appears, enter your new password in [New Password] and [Retype New Password], and then press [Save]. The new password is registered and you can log in to TopAccess.

In the following utilities, an error occurs when you try to log in to the equipment with a temporary password, and a new password cannot be registered either:

• Remote Scan driver

• e-Filing Web Utility

Before using these utilities, register a new password on the control panel or in TopAccess.

In the high security mode, when an email to which a Fax, Internet Fax or image is received, it is not automatically output. These jobs are stored in the [Hold (Fax)] queue and only a user having the [Fax Received Print] privilege can print the job.

If a job is in the [Hold (Fax)] queue, the Memory Rx lamp blinks.

1. Log in to the equipment as a user having the [Fax Received Print] privilege.

2. Press [Print Mode] on the home menu screen.

3. Select [Hold (Fax)]. All jobs in the [Hold (Fax)] queue are displayed.

4. Select the desired job or [Select All], and then press [Print].

The job that has been output is deleted from the [Hold (Fax)] queue.

To securely operate the equipment, the initial and selectable values in the equipment under the high security mode may differ from those under the normal security mode. To operate equipment complying with CC Certification, be sure to change the initial values for the high security mode listed in this manual following the instructions described in the remarks column at the start of use and keep them unchanged.

To reset all settings by performing “Initialization” of this equipment, back up the setting of this equipment and customers’ data before initializing.

The [User Management] and [Administration] in TopAccess are displayed by logging in as a user with the administrator privilege. Open TopAccess, click “Login” on the top right, and then enter the user name and password to log in.

Be sure to log in the [Admin] tab in the [User Function] mode of the equipment as a user with the Administrator privilege.

The initial value for [COMM. Report] Memory Tx is OFF. Do not change the setting to “ON”. It is not possible to operate this menu from TopAccess.

* The value can be changed in the [ADMIN] tab in the [User Functions -User-] menu in the touch panel of the equipment.

* The value can be changed in the [ADMIN] tab in the [User Functions -User-] menu in the touch panel of the equipment.

The following information will be sent to a Syslog server. Success or failure of the event can be confirmed by means of the Result field.

• Registration date

• Internal log memory date

• Code

• Message

• User name

• Domain name

Note: As for “End of jobs”, if any codes other than the listed one appear, “NG” will be indicated in the Result field.

To confirm the SYS version, check the display at the top right of the [Counter] screen on the touch panel of the equipment; for CC Certification, the SYS version should be V1.0.

Be sure to confirm that the version of the FAX unit is “H625TA13”. To confirm this, check TopAccess – [Administration] – [Setup] Item List – Version. The required FAX units are GD-1370NA-N for the U.S.A. and GD-1370EU for Europe.

Ask your service technician to display the model name of the internal storage device on the touch panel. Then confirm that “9401 TOSHIBA MQ01ABU032BW”, which is an identifier to indicate that GE-1260 is installed, is displayed.

These manuals are for SYS version V1.0.