Manual

Encryption and Digital Signature Overview
465
• Organization Name
• Organization Unit
Note • Confirm that the e-mail address displayed here is the same with the machine’s e-mail address
configured in "Machine's E-mail Address/Host Name" (P.331).
8 Click [Download] to save the CSR.
9 E-mail the file to a trusted certificate authority and receive the signed certificate back from
them.
Encryption Features for Communication
The data sent between the machine and computers on a network can be encrypted.
Encrypting HTTP Communications from a Client to the Machine
(SSL/TLS Server)
The SOAP, Internet Services (HTTP), IPP, and WebDAV ports use the HTTP server of the
machine.
The SSL/TLS protocol is used to encrypt the HTTP communications between a client and
the machine.
To encrypt communications, either one of the device certificate is required: a self-signed
certificate or a certificate issued by another CA.
Note • By encrypting HTTP communications, communications data can be encrypted at the time of printing
using IPP (SSL encrypted communications).
Encrypting HTTP Communications from the Machine to a Remote Server
(SSL/TLS Client)
The SSL/TLS protocol is used to encrypt the HTTP communications between a remote
server and the machine.
No certificate is required in general. However, if a remote server is set to require an SSL client
certificate, you can use a certificate issued by another CA.
When verification of server certificates is enabled to verify the SSL/TLS certificate of a
remote server, import a certificate issued by another CA using Dell Printer Configuration
Web Tool to the machine.
Encryption using IPSec
IPSec enables IP-level (not application-level) encrypted communications with remote
devices.
If you select [Authenticate by Digital Signature] for [IKE Authentication Method], a
certificate issued by another CA is required.
If you select [Authenticate by Preshared Key], no device certificate is required.
Note • If the certificate for IPSec contains the V3 extension (keyUsage), "digitalSignature" bit must be
asserted.
For information on IKE authentication methods, refer to "IKE Authentication Method" (P.342).
To verify the certificate of the remote device, you must register a root certificate created by
a CA of the remote device on the machine.
Note • To use certificates that have already been created, import them with Dell Printer Configuration Web
Tool.
E-mail Encryption/Digital Signature
S/MIME is used for E-mail Encryption/Digital Signature. To use S/MIME on the machine,
S/MIME certificates are used.
For an S/MIME certificate, you can use a certificate issued by another CA.