Security

This section covers the following topics related to printer/MFP and networking security.

Administrator Account

The Administrator (Admin) account is the master access account. It controls access to the printer/MFP and networking configuration from all setup and management utilities including the HTML web pages.

  • Administrator password must be set before using this product. Refer to "INSTALLATION" - "Setting administrator password" on the User's Guide and set the password.
  • If you forget the administrator password, following the instructions given in Resetting to Factory Defaults to restore the factory default settings and clear the password.

You can set the administrator password using a web browser. The configuration method is described below.

  1. Launch a web browser.

  2. In the address bar, enter the IP address assigned to the IB-54.

  3. The web browser displays the IB-54's Web page.

  4. Login to the IB-54's Web page with administrator privileges.

  5. From the left menu on the Web page, click General Settings > Password.

  6. Enter a password in the administrator account section and click Submit.

Figure 1. Account Settings Page

IP Filters (IPv4/IPv6)

The IB-54 offers the capability to filter IP traffic by source address, allowing only authorized addresses access to specific protocols. For example, an IP filter could be set for HTTP so only specific addresses could access the printer/MFP's Web page.

IPv4 Filters

You can enter valid IP address ranges up to 10 access lists. The following protocols can be designated for individual IP address ranges.

LPD (port 515)
FTP (port 21)
IPP (port 631)
HTTP (port 80)
RAW Port (ports 9100 - 9107)
SNMP (port 161)
HTTPS(IPPS) (port 443)
ThinPrint (ports 4000 (*variable))

The IPv4 filter can be configured from the internal web page in the IB-54. Follow these steps to configure it with a web browser.

  1. Launch a web browser.

  2. In the address bar, enter the IP address assigned to the IB-54.

  3. The web browser displays the IB-54's Web page.

  4. Login to the IB-54's Web page with administrator privileges.

  5. From the left menu on the Web page, click Protocols > TCP/IP.

  6. Click IP Filters(IPv4).

  7. Enter the IP address ranges and choose the protocols that are allowed for access.

  8. Click Submit to register the new settings.

    Figure 2. IPv4 Filter Setting Page



IPv6 Filters

You can enter valid IP address ranges up to 10 access lists. The following protocols can be designated for individual IP address ranges.

LPD (port 515)
FTP (port 21)
IPP (port 631)
HTTP (port 80)
RAW Port (ports 9100 - 9107)
SNMP (port 161)
HTTPS(IPPS) (port 443)

The IPv6 filter can be configured from the internal web page in the IB-54. Follow these steps to configure it with a web browser.

  1. Launch a web browser.

  2. In the address bar, enter the IP address assigned to the IB-54.

  3. The web browser displays the IB-54's Web page.

  4. Login to the IB-54's Web page with administrator privileges.

  5. From the left menu on the Web page, click Protocols > TCP/IP.

  6. Click IP Filters(IPv6).

  7. Enter the IP address ranges and choose the protocols that are allowed for access.

  8. Click Submit to register the new settings.

    Figure 3. IPv6 Filter Setting Page

Encryption

The IB-54 provides encryption functionality using SSL (Secure Sockets Layer). This makes it possible to encrypt the transmission and reception of print data between the computer and IB-54, and to encrypt access to the IB-54 using a web browser.

Encryption function in the factory default setting is ON. Encryption can be turned OFF from the built-in IB-54 Web page.

You can confirm/regenerate the certificate for the encryption of IB-54 from the built-in IB-54 Web page. This can be used in applications where there is a limit on the printer/MFP usage, because the certificate can be given an expiration date. The certificate is a print server certificate, and does not place any restrictions on clients.

Use the following procedure to turn encrypted authentication on or off and to create a certificate.

  1. Launch a web browser.

  2. In the address bar, enter the IP address assigned to the IB-54.

  3. The web browser displays the IB-54's Web page.

  4. Login to the IB-54's Web page with administrator privileges.

  5. From the left menu on the Web page, click Security > Encryption.

  6. Click ON in the Encryption field, and select the encryption scheme to use in the Privacy Mode field.

    • If the Encryption is set to OFF, SNMP and each SSL encryption setting are disabled and the configuration will no longer be available.

  7. Click Submit.

    Figure 4. The encryption settings page

  8. Click Certificate.

  9. When the certificate information entry field appears, enter the printer location and name. The e-mail address field may be left blank.

  10. Specify the expiration date of the SSL certificate using the Expiration Date field. Once the specified expiration date has passed, the IB-54 cannot be used until a new expiration date is specified.

  11. Click Submit to save the new settings. The security warnings that appear when connecting to the printer/MFP are no longer displayed once the certificate has been configured.

    12. Figure 5. The certificate settings page

  12. Click Exporting Certificate.

  13. Click Export.



Secure Network Printing Settings in Windows

On Windows 10 / Server 2012 / Server 2012R2 / Server 2016 / Server 2019, the path to the printer/MFP that the IB-54 is installed in can be configured using the IPP client that is included with Windows. This allows the print data to be encrypted before being sent to the printer/MFP.

  1. Configure the secure network printing settings.

    Windows 10

    1. Click Windows Start > Windows System > Control Panel > Devices and Printers > Add Printer.

    Windows Server 2012 / Server 2012R2 / Server 2016 / Server 2019

    1. Click Windows Start > Control Panel > Devices and Printers > Add Printer.

  2. Select The printer that I want isn't listed or The printer I am looking for is not on this list.

    3. Figure 6. The printer that I want isn't listed

  3. Specify the printer you wish to connect to.

    4. Figure 7. Printer specification screen

  4. Enter the URL of the printer in the format https://(printer's Host Name)/ipp/lp (for lp, enter lp1 to lp8) and click Next.

  5. The screen to search for and install the printer/MFP driver is displayed. Follow the on-screen directions to install the printer/MFP driver.



Secure Connections from a Web Browser

To access the web page built into the IB-54 using a secure connection, enter https://(Host Name) into the address bar of the web browser.

IPSec

The IB-54 supports IPSec/IKEv1 and IPSec/IKEv2 and can be used with IPv6 and IPv4.
Using IPSec, all communications can be encrypted automatically and secured at the IP protocol level.

IPSec can be used in the following OS.

The IP filter can be configured from the internal web page in the IB-54. Follow these steps to configure it with a web browser.

  1. Launch a web browser.

  2. In the address bar, enter the IP address assigned to the IB-54.

  3. The web browser displays the IB-54's Web page.

  4. Login to the IB-54's Web page with administrator privileges.

  5. From the left menu on the Web page, click Security > IPSec.

    Figure 8. IPSec Page

  6. Configure each setting on General tab. The following is the explanation of each configuration item.

    Item Description
    IPSec Enable (ON) or disable (OFF) the IPSec.
    Restriction Specify the default policy for packets other than IPSec protocol.
    IKE Version Select IKEv1 or IKEv2.
    Authentication Type Select the encryption scheme that will be used for IKE phase1 from the following choices.
    • Pre-Shard
    • Certificate
    Pre-shared Key Enter the string of the pre-shared key.
    Expiration Verification Enable (ON) or disable (OFF) the verification of certificate expiration.
    Root Certificate Upload the root certificate by clicking Choose File button.
    CA-issued Device Certificate Upload the CA-issued device certificate by clicking Choose File button.
    Password Enter the password for the CA-issued device certificate.
    Mode Select the key exchange mode from the following choices. (Only when IKEv1 is selected for IKE Version.)
    • Main
    • Aggressive
    Hash Select the hash algorithm from the following choices.
    • MD5
    • SHA1
    • SHA256
    • SHA384
    • SHA512
    Encryption Select the encryption algorithm from the following choices.
    • 3DES
    • AES128
    • AES192
    • AES256
    Diffie-Hellman Group Select the Diffie-Hellman group to use from the following choices.
    • modp768(1)
    • modp1024(2)
    • modp1536(5)
    • modp2048(14)
    • modp4096(16)
    • modp6144(17)
    Lifetime (Time) Specifies the lifetime of an ISAKMP SA in seconds.

  7. Click Submit to register the settings.

  8. Click from Rule1 to Rule3 and enter the settings for each field. The following is the explanation of each configuration item.

    Item Description
    Rule Enable (ON) or disable (OFF) the selected IPSec policy.
    Protocols Select the protocol from the following choices.
    • ESP
    • AH
    Encryption Select the encryption algorithm from the following choices. (Only when ESP is selected for Protocols.)
    • 3DES
    • AES128
    • AES192
    • AES256
    Hash Select the hash algorithm from the following choices.
    • MD5
    • SHA1
    • SHA256
    • SHA384
    • SHA512
    PFS Select the PFS to use from the following choices.
    • NONE
    • modp768(1)
    • modp1024(2)
    • modp1536(5)
    • modp2048(14)
    • modp4096(16)
    • modp6144(17)
    Lifetime (Time) Specifies the lifetime of an ISAKMP SA in seconds.
    IP Version Select the IP version of the device to be connected from the following choices.
    • IPv4
    • IPv6
    IP Address (IPv4) Specify the IPv4 address of the host or network to be connected in IPSec.
    Subnet Mask Specify the subnet mask of the host or network to be connected in IPSec.
    Local ID (IPv4) Set the local IPv4 address to participate in the authentication.
    IP Address (IPv6) Specify the IPv6 address of the host or network to be connected in IPSec.
    Prefix Length Specify the prefix length for IPv6.
    Local ID (IPv6) Set the local IPv6 address to participate in the authentication.

  9. Click Submit to register the new settings.

MAC Address Filtering

The IB-54 supports the MAC Address Filtering.
The MAC Address Filtering ensures network security by allowing or denying an access from a particular MAC address.

  • If you are using the DHCP or WINS server, please do not deny the server connection with the MAC Address Filtering.
      e.g.  If the DHCP server connection is denied by the MAC Address Filtering, the IP addresses will no longer be assigned from the DHCP server.

The MAC Address Filtering can be configured from the internal web page in the IB-54.

  1. Launch a web browser.

  2. In the address bar, enter the IP address assigned to the IB-54.

  3. The web browser displays the IB-54's Web page.

  4. Login to the IB-54's Web page with administrator privileges.

  5. From the left menu on the Web page, click Security > MAC Address Filter.

    Figure 9. MAC Address Filter Page

  6. Complete each field. The fields are described below.

    Item Description
    Filter Setting Enables (ON) or disables (OFF) filtering setting by MAC address.
    Policy Select to allow or deny communication from registered MAC addresses.
    File Select a list file of MAC addresses to register, if one exists.
    Click the Choose File button and select the list file of MAC addresses.
    Text Select when directly entering a MAC address.
    Enter the MAC address you want to register directly in the entry field.

    • If the MAC address is already registered, it will be displayed in the text entry field. To delete a registered MAC address, delete the MAC address from the text entry field.


    • Enter the MAC address two characters at a time, separated by a colon.
      To set multiple MAC addresses, set one address per line.

  7. Click Submit to register the new settings.

Firmware Updates

Newer versions of IB-54 firmware may be available. Because newer versions of the firmware may contain improved security measures, we recommend that you use the latest firmware to ensure safe use of the product. IB-54 includes security measures to prevent improper firmware updates, such as tampering or corruption.
Administrator login is required for firmware upgrades.

Software Upgrade Tool

The Software Upgrade Tool is a PC software that updates the firmware of the printer/MFP and IB-54. This software allows you to update to a newer version of the firmware.

IBVERUP

IBVERUP is a standalone utility specifically for updating firmware. It is usually distributed with the updated firmware. To prevent accidental or malicious updates with IBVERUP, you can configure the printer/MFP's Web page to reject IBVERUP updates.

To disable the firmware update using the IBVERUP, access the IB-54's Web page, click General Settings > General and select OFF radio button for Allow firmware updates via the update utility (IBVERUP).

Top of page