Home ApplicationDevice Certificate Setting

Device Certificate Setting

Click [PKI Settings] - [Device Certificate Setting] on the menu of [Security] tab to display this screen.

A list of registered device certificates is displayed.

Click [Detail] for a certificate to view its details.

To specify a certificate as default, click the radio button of the certificate in the [Default] field, then click [OK]. If the issuer of the selected certificate is shown [Requesting Certificate] on the list, the certificate cannot be set as default.

  • In the following case, a confirmation dialog box is displayed to check whether to disable [S/MIME Comm.Setting]:
    - When [S/MIME Comm.Setting] is set to [ON] in Network Setting; or
    - When no certificate is assigned to S/MIME
    Click [OK] to complete the setting.
    [Network] - [E-mail Setting] - [S/MIME] - [S/MIME Comm.Setting] is changed to [OFF].

To register a new certificate, click [New Registration] and select a registration method.

For details about each registration option, refer to the following sections.

Creating and installing a self-signed certificate

  1. Click the radio button for [Create and install a self-signed Certificate.], and click [OK].

  2. Specify or select each item.

    • The maximum alphanumeric characters and symbols that can be entered is 63 for organization and the organizational unit, and 127 for the locality and the state/province. For the country code, specify a two-letter country code define by ISO3166.

    • For [Admin. E-mail Address], enter the e-mail address of the administrator. The address specified in [Main Body Store] is displayed as default.

    • The validity start date cannot be entered.

    • Enter the validity period. The available range is 1 to 3650.

    • Select a type of encryption from the drop-down list.

  3. Click [OK]. Clicking [Cancel] cancels the setting.

  4. Click [OK] on the setting complete screen.

Making a request for certificate

Create the data to make a request to Certificate Authority for a certificate.

  1. Click the radio button for [Request a Certificate], then click [OK].

  2. Specify or select each item.

    • The maximum alphanumeric characters and symbols that can be entered is 63 for organization and the organizational unit, and 127 for the locality and the state/province. For the country code, specify a two-letter country code define by ISO3166.

    • For [Admin. E-mail Address], enter the e-mail address of the administrator. The address specified in [Main Body Store] is displayed as default.

    • Select a type of encryption from the drop-down list.

  3. Click [OK]. Clicking [Cancel] cancels the setting.

  4. Click [OK] on the setting complete screen.

    The [Certificate Signing Request Data] screen is displayed.

  5. Check the displayed data, and click [Save].

    Save the data on a computer.

  6. Click [OK] to return to the [Device Certificate List] screen.

  • After the certificate has been issued from an external CA, you need to install it on this machine. For details, refer to Installing a certificate.

Importing a certificate

  1. Click the radio button for [Import Certificate], then click [OK].

  2. Click [Choose File] to specify a file to be transferred to the device.

    • In the file browsing dialog, specify the data file for the certificate.

  3. Enter the encryption password.

    • Up to 32 one-byte characters can be used.

  4. Click [OK]. Clicking [Cancel] aborts the operation.

  5. Click [OK] on the setting complete screen.

Removing a certificate

Remove an installed certificate.

  1. On the [Device Certificate List] screen, click [Setting] for a certificate to be removed.

  2. Click the radio button for [Remove a Certificate], then click [OK].

  3. Check the issuer, subject and expiration date of the certificate, then click [OK].

    • Clicking [Cancel] aborts the operation, and the certificate is not removed.

  4. Click [OK] on the setting complete screen.

    • If you have removed the default certificate, the [Device Certificate List] screen is displayed. Specify another certificate as default.

  5. Turn off and back on the main power of the main body.

Exporting a certificate

  1. On the [Device Certificate List] screen, click [Setting] for a certificate to be exported.

  2. Click the radio button for [Export Certificate], then click [OK].

  3. Enter the encryption password.

    • Up to 32 one-byte characters can be used. Enter the same password for [Retype Password].

  4. Click [OK]. Clicking [Cancel] aborts the operation. A screen prompts you when the machine is ready for exporting.

  5. Click [Download] to begin storing.

  6. When the storing is complete, click [Back].

Installing a certificate

Install a certificate issued by an external CA (Certificate Authority).

  1. On the [Device Certificate List] screen, click [Setting] for a certificate to be installed.

    • Take this step for a certificate whose issuer is shown as [Requesting Certificate] on the list. You cannot apply the step to any other type of certificate.

  2. Click the radio button for [Install a Certificate], then click [OK].

  3. Paste the CSR (Certificate Signing Request) in PEM text format delivered from an external CA into the text box on the screen.

  4. Click [Install]. Clicking [Cancel] aborts the operation.

  5. Click [OK] on the setting complete screen.