Lexmark C780 Manuel du propriétaire

Lexmark International, Inc. 1

Lexmark Printers and Multifunction Products:

Hard Disk and Non-Volatile Memory Guide

This guide applies to the following Lexmark devices:

Printers Multifunction Products

C780

X646

C782

X772

C935

X782

T640

X850

T642

X852

T644

X854

X940

X945

March 2011

Version 1.3

Lexmark International, Inc. 2

Overview

Lexmark provides a wide range of printing and imaging devices to help businesses of all

sizes drive greater productivity―from the small business with a handful of employees to

the world's largest enterprises. To meet today’s complex printing requirements. Lexmark

equips its devices with non-volatile memory to store essential system information when

the devices are powered off. In addition, some Lexmark devices may also be equipped

with a hard disk. The hard disk is used to buffer jobs, collate large jobs, or store forms,

fonts or macros. To run some print apps or printer software solutions, a hard disk is

required.

The use of non-volatile memory and hard disks are industry-standard methods for

enhancing the performance of print and imaging devices. This document outlines how

these memory types are implemented in Lexmark devices and the mechanisms that can

be utilized to protect data stored on them.

About Non-Volatile Memory Technology on

Lexmark Printers and MFPs

Lexmark devices use two forms of non-volatile memory: EEPROM and NAND. These

components store the device operating system, device settings information, network

information, embedded solution applications, various scanner settings and bookmark

settings. No user related print, copy and/or scan data is stored in non-volatile memory.

To mitigate the risk of your data being compromised, the following actions can be

performed:

•Information such as device settings can be cleared by restoring the device to its

factory defaults.

•Embedded solutions can be removed by uninstalling the application using the

device’s embedded web server (EWS) under the Embedded Solutions link.

•Certain network information can be removed from the device by unplugging the

device’s network cable and performing an NVRAM reset on the device’s network

card; information can also simply be deleted through the EWS.

•Fax data settings can be cleared from the device by formatting the fax data

partition under the device’s Configuration Menu.

•Other information, such as operating system information, cannot be removed

from the device.

Crushing or shredding the device controller provides the greatest assurance that

sensitive or confidential data does not fall into the wrong hands.

Lexmark International, Inc. 3

About Hard Disk Technology on Lexmark Printers and MFPs

Hard disks on Lexmark devices are designed for device-specific functionality and are not

designed, nor can be used, as long-term storage for items unrelated to print and scan.

The basic architecture of these devices disallows the capability for users to extract

information, create folders, share the hard disk, create a network file share, or FTP

information to the device’s hard disk directly from a client device.

The device hard disk is primarily designed to store print/image data, font data, forms

data, macros, and in some cases, job data. In addition, Lexmark uses hard disks for

temporarily buffering scan, fax, and copy data. In general, print-related data is processed

in Random Access Memory (RAM) unless the job exceeds the amount of RAM on the

device, or if the end user selects the confidential print and/or print and hold feature

enabled through the print driver.

Hard Disk Encryption

Why is Hard Disk Encryption needed?

A common concern for print devices is that residual job data from the print, copy, fax,

and scan processes will not be properly cleared prior to the device being removed from

a secure area and/or decommissioned at the end of life. This concern has led many

customers for look to additional hard disk protection mechanisms outside of disk wiping

to secure information. Hard disk encryption adds an additional layer of security to a

device's hard disk by encrypting all data that may be actively used by the device, sitting

idle on a device, and/or used by the device in a previous job. Disk encryption provides

the comfort that the hard disk can never be used in a device other than the one from

which it was originally encrypted.

How does Hard Disk Encryption work?

Lexmark devices have the ability to encrypt all data on their hard disks to protect it from

malicious access at all times. When this feature is enabled, all data written to the hard

disk is encrypted. This protects not only residual data left over after jobs, but also

protects data actively being used. This prohibits someone from maliciously powering off

the device in the middle of a job and making use of data abruptly left on the hard disk. If

an encrypted hard disk is removed and placed in another Lexmark device with hard disk

encryption enabled, the hard disk will verify its encryption key with the device's

encryption key. If the verified encryption key on the hard disk is different from the

device's encryption key, the device will reformat the hard disk with a new encryption key,

destroying the existing encrypted data on the hard disk.

When hard disk encryption is activated, the encryption key used (128-bit AES symmetric

encryption) is pseudo-randomly generated and stored in a proprietary fashion on the

device. Note that the key is not stored on the hard disk itself, so if the hard disk were

stolen from the device, the contents of the hard disk would remain indecipherable.

When the encryption function is activated, the hard disk is formatted and all data

contained on the hard disk is lost. Encryption is then applied to all data placed on the

hard disk, at all times.

Lexmark International, Inc. 4

Benefits of Hard Disk Encryption

•Increased security of active and residual data.

•The encryption is applied in real time, so there is no delay for cleanup or post-

processing after jobs have completed.

•A dynamically generated encryption key stored on the device (not the hard disk)

makes the data on an encrypted disk useless on any other device. Stealing the

hard disk out of the device will not yield access to the data it contains.

How to Enable Hard Disk Encryption

The Disk Encryption menu can only be accessed by entering the Config Menu at the

Lexmark device control panel.

1. Power off the device.

2. If your device has a touch screen, hold down the 2 and the 6 buttons, while

powering on the device; hold the buttons down until a clock or bar indicator

appears. If your device has a four line LCD display, hold down the check mark

(√) and the right arrow (>), while powering on the device; hold the buttons down

until a clock or bar indicator appears. Once the clock or bar indicator appears,

then you may release the buttons.

3. You should see the Config Menu appear on the device control panel.

4. To locate the Disk Encryption feature, press the down arrow until you see the

feature that displays Disk Wipe. Select this feature.

5. The screen should change to a page that displays the header Disk Encryption.

The screen should only display two functions named Enable and Disable. If you

would like to enable disk encryption, select the Enable function. If you already

have disk encryption enabled and would like to disable the feature, select the

Disable function. Please note either function will erase the contents of the disk.

6. After the appropriate feature has been selected, the screen should change to a

confirmation page that displays the following prompt: Contents will be lost.

Continue? The screen should also display two buttons with YES and NO. If you

want to continue with the disk encryption, select the YES button and the disk

encryption process will start. If you decide not to continue, press the NO button

and you will be placed back to the previous screen.

Lexmark International, Inc. 5

7. When the process finishes, select the Back button.

8. Select the Exit Config Menu button and the device will return to a ready state.

The following graphic will appear when the encryption process is enabled:

The progress bar indicates the overall completion of the entire process by filling

in throughout each separate stage.

The entire process is complete when the progress bar appears completely

shaded and the percentage indicator shows 100%. After completion, the panel

returns to the Disk Encryption menu.

Confirmation of Disk Encryption Activities

The only method to confirm that Hard Disk Encryption has been enabled is via

MarkVision Professional. A plug-in has been developed for MarkVision, which will allow

you to view the status of Hard Disk Encryption on a fleet of devices.

Note: If you remove an encrypted disk from a device and then try to install another disk,

the following message will appear on the device control panel: Disk Corrupted.

Reformat? You can then format the newly installed disk or remove it from the device. If

you choose to reformat the disk, the device will generate a new encryption key, and

encrypt and format the new hard disk. At this point, the data from the previous hard disk

will no longer be accessible by any machine.

Lexmark International, Inc. 6

Hard Disk Wiping

Why is Hard Disk Wiping Important?

Lexmark uses hard disks on our devices to temporarily buffer scan, fax, print, and copy

data that exceeds the amount of Random Access Memory (RAM) installed on the

device. Buffered data is deleted from the hard disk immediately after the original scan,

fax, print, or copy job is complete. Additionally, devices will temporarily hold print jobs on

a hard disk if the confidential print/print and hold features are enabled by the user and

when fax jobs are received and sent. This data is held by the hard disk until the job is

deleted by the end user, the document expires through the job expiration feature, or the

document is printed by the end user.

When a data file is “deleted” from a hard disk, the data that is associated with that file is

not actually deleted. This data remains on the hard disk and with substantial efforts,

theoretically could be recovered. Lexmark devices support a mechanism for protecting

residual data: hard disk wiping. Hard disk wiping actively overwrites the deleted job data

with multiple passes of random data, removing all residue of prior information.

Intended Goals of a Hard Disk Wiping Solution

•Provide an advanced secure deletion solution.

•Ensure the disk wiping feature is efficient.

Benefits of Hard Disk Wiping

The benefits of a hard disk wiping solution include:

•Increased security of residual data.

•Elimination of the need to remove or process the hard disk when the device is to

be retired, recycled, or otherwise removed from a customer’s secure

environment.

There are several circumstances under which Lexmark recommends you erase the

contents of the hard disk components installed in your Lexmark printer or MFP. These

include:

•The printer is being decommissioned

•The printer hard disk is being replaced

•The printer is being moved to a different department or location

•The printer is being serviced by someone from outside your organization

•The printer is being removed from your premises for service

The following section explains the recommended steps to ensure confidential data is

erased.

Lexmark International, Inc. 7

How to Perform a Complete Disk Wipe (Wipe Disk)

The Wipe Disk setting provides you with a tool for erasing all contents of a disk. This

feature can be accessed by entering the device Config Menu at the Lexmark device

control panel. The Wipe Disk function should be used when the Lexmark device is to be

retired, recycled, or otherwise removed from a customer’s secure environment.

Warning: Wipe Disk removes a disk's data in such a way that it cannot be recovered.

The Wipe Disk (Secure) operation is a three-pass overwrite and may take up to nine

hours to complete.

1. Power off the device.

2. If your device has a touch screen, hold down the 2 and the 6 buttons, while

powering on the device; hold the buttons down until a clock or bar indicator

appears. If your device has a four line LCD display, hold down the check

mark (√) and the right arrow (>), while powering on the device; hold the

buttons down until a clock or bar indicator appears. Once the clock or bar

indicator appears, then you may release the buttons.

3. You should see the Config Menu appear on the device control panel.

4. To locate the Wipe Disk feature, press the down arrow until Wipe Disk

appears on the screen. Select Wipe Disk.

5. The screen should change to a page that displays the header Wipe Disk. The

screen should only display two functions, Wipe Disk (Fast) and Wipe Disk

(Secure). Select the feature that you would like to enable.

6. After the appropriate feature has been selected, the screen should change to

a confirmation page that displays the following prompt: Contents will be lost.

Continue? or A secure disk wipe takes many hours and content will be lost.

The confirmation screen will allow you to continue or cancel the wipe disk

operation.

7. When the process finishes, select the Back button.

8. Select the Exit Config Menu button and the device will return to a ready state.

Lexmark International, Inc. 8

Common Criteria Validated Devices with Hard Disks

Lexmark workgroup devices are designed with security options and solutions to help

customers ensure secure management, secure network communications and secure

information storage. As of September 21, 2007, Lexmark has successfully completed

Common Criteria certification for its workgroup monochrome and color laser

multifunction products (devices). Common Criteria is an internationally recognized

standard for security assessment and is used as a third-party validation of the security

functionality of information technology products.

The certification involves rigorous testing and evaluation by the Common Criteria Testing

Laboratory, which is overseen by the National Information Assurance Partnership

(NIAP), a U.S. government initiative. NIAP certification was obtained for the following

Lexmark devices with hard hard disks:

Lexmark X646dte (firmware revision LC2.MC.P239b) Multifunction Printer

Lexmark X646e (firmware revision LC2.MC.P239b) Multifunction Printer

Lexmark X646ef (firmware revision LC2.TI.P239b) Multifunction Printer

Lexmark X772e (firmware revision LC2.TR.P275) Multifunction Printer

Lexmark X850e (firmware revision LC2.BE.P238b) Multifunction Printer

LexmarkX852e (firmware revision LC2.BE.P238b) Multifunction Printer

Lexmark X854e (firmware revision LC2.BE.P238b) Multifunction Printer

Lexmark X940e (firmware revision LC.BR.P060) Multifunction Printer

Lexmark X945e (firmware revision LC.BR.P060) Multifunction Printer

The NIAP also certified six specific security functions on each Lexmark device:

•Fax Communications Control (Separation of Fax and Network Communications)

•User Authentication

•Device Configuration Protection

•Hard Disk Encryption

•Hard Disk Sanitization

•TSF Self Protection (Device Operating System Protections from

Virus/Malware/Hacking/Unauthorized Software/Bypassing Security Functions

through Backdoors)

Validation Report

http://www.niap-ccevs.org/cc-scheme/st/st_vid10196-vr.pdf

Security Target

http://www.niap-ccevs.org/cc-scheme/st/st_vid10196-st.pdf

Validation Certificate

http://www.niap-ccevs.org/cc-scheme/st/st_vid10196-ci.pdf

Lexmark International, Inc. 9

DOD/DOE/NIST Guidelines for Magnetic Media Sanitization

The U.S. Department of Defense clearing and sanitizing matrix (DoD 5220.22-M,

Section 8-306, Maintenance) recommends that the sanitization of a magnetic removable

rigid disk should be done by one of the following:

•Overwrite all addressable locations with a character, its complement, then a

random character and verify.

•Degauss with a Type I degausser.

•Degauss with a Type II degausser.

•Destroy – disintegrate, incinerate, pulverize, shred or melt.

Lexmark’s secure disk wipe uses three overwrite passes with different bit patterns

followed by a verify pass; this is otherwise known as a NIST or U.S. Department of

Defense compliant wipe.

Summary

Lexmark printers and multifunction devices are equipped with non-volatile memory. In

addition, some devices are equipped with internal hard disks. These devices have a

number of standard and advanced security mechanisms to enhance the security of data

that is stored on or passes through them, including:

•Hard disk encryption using the Advanced Encryption Standard (AES), which

provides the following protections:

─128-bit AES.

─When encryption is activated, the encryption key is pseudo-randomly

generated and stored on the printer or device.

─Encryption applies not only to residual data left over after jobs, but also to

data that is actively being used.

─Out of service disk wiping, which is designed to completely wipe the

entire contents (active and residual data) of the hard disk and is highly

recommended to be used when the device is taken out of service or

removed from a secure location.

•Destroying the device controller is the best method to ensure that your data can

not be compromised. Destruction can be accomplished using industry approved

methods such as crushing and shredding of the controller.

Lexmark reserves the right to change specifications or other product information without notice. References in this publication to Lexmark

products or services do not imply that Lexmark intends to make them available in all countries in which Lexmark operates. LEXMARK

PROVIDES THIS PUBLICATION “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING THE

IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. This publication may contain third

party information or links to third party sites that are not under the control of or maintained by Lexmark. Access to any such third party

information or site is at the user’s own risk and Lexmark is not responsible for the accuracy or reliability of any information, data, opinions,

advice or statements made by these third parties. Lexmark provides this information and links merely as a convenience and the inclusion of

such information and/or links does not imply an endorsement. All performance information was determined in a controlled environment.

Actual results may vary. Performance information is provided “AS IS” and no warranties or guarantees are expressed or implied by

Lexmark. Buyers should consult other sources of information, including benchmark data, to evaluate the performance of a solution they are

considering buying.

Autres manuels pour C780

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Lexmark Imprimante tout-en-un

Lexmark

Lexmark 3100 Series Manuel utilisateur

Lexmark

Lexmark Interpret S405 Manuel utilisateur

Lexmark

Lexmark INTERACT Interact S605 Manuel utilisateur

Lexmark

Lexmark X792 Manuel technique

Lexmark

Lexmark C950 Series Manuel utilisateur

Lexmark

Lexmark 560n - X Color Laser Manuel utilisateur

Lexmark

Lexmark CS748de Manuel utilisateur

Lexmark

Lexmark X95 series Manuel utilisateur

Lexmark

Lexmark X651DE Manuel utilisateur

Lexmark

Lexmark 18M0410 Manuel utilisateur

Lexmark

Lexmark MS911 Manuel d'utilisation et d'entretien

Lexmark

Lexmark X850e Manuel utilisateur

Lexmark

Lexmark 2300 Series Manuel utilisateur

Lexmark

Lexmark X9575 Manuel utilisateur

Lexmark

Lexmark X463de Manuel utilisateur

Lexmark

Lexmark X340 Manuel utilisateur

Lexmark

Lexmark INTERACT Interact S605 Manuel utilisateur

Lexmark

Lexmark X95x Manuel utilisateur

Lexmark

Lexmark 3300 Series Manuel utilisateur

Lexmark

Lexmark X73 - X 73 Color Inkjet Manuel utilisateur

Lexmark

Lexmark MX81x Manuel utilisateur

Lexmark

Lexmark Prospect Pro205 Manuel utilisateur

Lexmark

Lexmark MX310 Series Manuel utilisateur

Lexmark

Lexmark XS955dhe Guide d'installation

Manuels Imprimante tout-en-un populaires d'autres marques

Triumph Adler

Triumph Adler DC 2016 Manuel

Epson

Epson WorkForce WF-2510 Guide de l'utilisateur

Epson

Epson Stylus Scan 2000 Manuel d'installation et d'exploitation

Epson

Epson PictureMate Snap PM 240 Mode d’emploi

Konica Minolta

Konica Minolta bizhub C35 Manuel utilisateur

Brother

Brother MFC-J430w Manuel utilisateur

Konica Minolta

Konica Minolta BIZHUB 558 Manuel utilisateur

Brother

Brother MFC-9760 Manuel utilisateur

Sharp

Sharp MX-2310U Mode d’emploi

Aficio

Aficio 200 Manuel utilisateur

Canon

Canon ImageCLASS 2300 Manuel

Ricoh

Ricoh Pro C900 Manuel utilisateur

Brother

Brother Business Smart MFC-J4510dw Manuel utilisateur

Epson

Epson Stylus CX8400 Series Manuel utilisateur

Oce

Oce VarioLink 5022 Manuel utilisateur

Copystar

Copystar CS 4551ci Manuel utilisateur

Konica Minolta

Konica Minolta Magicolor 4650EN Manuel utilisateur

Brother

Brother MFC-9840CDW Manuel utilisateur