Operating instructions

CRP-C0266-01

Table 7-1 explains non-TOE configuration items in the developer testing.

Table 7-1 Developer Testing Configuration Items

Configuration Item Detail

Client Computer

(3 machines)

Web browser

- Internet Explorer 6.0 (IE6)

- Internet Explorer 7.0 (IE7)

- Internet Explorer 8.0 (IE8)

Driver

- PCL 6 driver V1.0.0.0 or V1.2.0.0

- LAN Fax driver V1.61

Mail Server SMTP Server Function of Windows Server 2003 SP2

FTP Server FTP Server Function of Windows Server Function 2003

SP2

SMB Server SMB Server Function of Windows Server Function 2003

SP2

Fax Device Ricoh Aficio MP C3300G, Ricoh Aficio MP C2800

Telephone Switchboard

Simulator

TLE-101 III (manufactured by LSI JAPAN Co., Ltd.)

Certification Authority

Server

Linux (Fedora 8)

The developer testing is executed in the same TOE testing environment as TOE configuration

identified in ST.

2) Summary of Developer Testing

Summary of the developer testing is as follows.

a. Developer Testing Outline

Outline of the developer testing is as follows.

The testing procedure consisted of stimulation of the external TOE interface by the assumed

TOE operations (operations of the operation panel, the client computer connected via the

internal network or USB, and fax machines) and visual observation of the results. And the

vulnerability in the Web interface of TOE was investigated with a vulnerability detection tool

of the Web application. However, if not visually observing the testing results, the following

approaches were used instead:

- The communication over the internal network captures data and it verifies the

communication protocol (SSL and IPSec) using packet capture software.

- Use internal tools that produce debug information and check the activity inside the TOE

from output debug information.

- Replace the MFP Control Software with software that had "compromised validity", use

internal tools that produced debug information, and verify the integrity of the MFP Control

Software Validity Checking Function from the outputted debug information.

Table 7-2 shows the tools used in the developer testing. "Debugging console to monitor the

TOE internal operation" and "SD card for changing or overwriting the internal configuration