Oce VarioPrint 1055 Guide de l'utilisateur
Océ VarioPrint® 1055, 1065, 1075, 2062, 2075
Common Criteria certified configuration of the DAC
R10.1.5
Océ System Administrator
Manual
Océ-Technologies B.V.
© 2007, Océ-Technologies B.V. Venlo, The Netherlands.
All rights reserved. No part of this work may be reproduced, copied, adapted, or transmitted
in any form or by any means without written permission from Océ.
Océ-Technologies B.V. makes no representation or warranties with respect to the contents
hereof and specifically disclaims any implied warranties of merchantability or fitness for
any particular purpose.
Further, Océ-Technologies B.V. reserves the right to revise this publication and to make
changes from time to time in the content hereof without obligation to notify any person
of such revision or changes.
Edition: 2007-10
Contents
Chapter 1
General information...........................................................................................5
About the DAC release 10.1.5....................................................................6
Assumptions...............................................................................................7
Chapter 2
DAC Configuration..............................................................................................9
Océ System Configuration......................................................................10
3
Contents
4
Contents
Chapter 1
General information
About the DAC release 10.1.5
Introduction
The DAC (Digital Access Controller) release 10.1.5 is the controller for print and scan
jobs used with the following Océ products:
■Océ VarioPrint® 1055, 1065, 1075.
■Océ VarioPrint® 2062, 2075.
Refer to the Job manual of the product to see which systems and configurations are
available.
The DAC (Digital Access Controller) release 10.1.5 will be referred to as DAC in this
manual.
This manual is intended for the System administrators that deploy and administer the
DAC in the certified configuration. When information in this (Common Criteria certified
configuration of the DAC R10.1.5) document differs from any other documentation
about administering the DAC in the certified configuration, only the information in this
document is valid.
The DAC is intended to provide scan and print functionality to users requiring a low to
moderate level of security assurance (Common Criteria Evaluation Assurance Level 2+).
Security functions
The following security functions are evaluated to meet the Common Criteria Evaluation
Assurance Level 2+:
■E-Shredding (automatic data overwriting).
■Secured printing (protect print jobs with a PIN).
■IP filtering (built-in firewall).
■Security management functions.
■Self test (integrity check with auto-repair).
Chapter 1 - General information6
About the DAC release 10.1.5
Assumptions
Introduction
The following assumpions focus on the organisation where the Océ product and the DAC
is located and describe the environment, the security policy, the users and their behaviour.
Océ products
It is assumed that the DAC is attached to an:
■Océ VarioPrint® 1055, 1065, 1075 machine, or
■Océ VarioPrint® 2062, 2075 machine.
Security policy
It is assumed that the organisation will have a security policy governing the use of IT
products by employees in the organisation.
The security policy describes and requires a low to medium level of assurance (Common
Criteria Evaluation Assurance Level 2) for the DAC.
It is assumed that the network to which the DAC is attached is protected by security
measures that are intended to prevent malicious programs, viruses and network traffic,
not related to the working of the operational environment, entering the network to which
it is attached. Although the virus database files and various patches are kept up to date,
the policy recognises that new threats emerge over time and that occasionally they may
enter the environment from outside and provides measures to help limit the damage. The
policy will define how IT products are protected against threats originating from outside
the organisation.
The employees of the organisation are aware of, are trained in and operate according to
the terms and conditions of the policy. The policy also covers physical security and the
need for employees to work in a security aware manner including the usage of the DAC.
Environment
It is assumed that the operational environment of the DAC is a regular office environment.
Physical access to the operational environment is restricted. The environment contains
non-threatening office personnel (local users, remote users, remote system administrator,
Océ service engineer). A “thief” is only rarely present in this environment and not on a
recurring base.
Chapter 1 - General information 7
Assumptions
Remote System administrator
It is assumed that the DAC is used in the security mode 'High (factory default)'. The
security mode will not be changed.
The remote System administrator will read the available System administrator documen-
tation and must be aware of the security policy of the organisation. The remote System
administrator has to work in a security aware manner with the DAC.
Local and remote users
When secure print jobs are sent to the DAC, the user will specify a PIN of at least 4
digits and a maximum of 6 digits and, whether the job is printed or not, will delete the
job on the same working day. Employees are aware of this requirement.
The user will read the available user documentation and must be aware of the security
policy of the organisation. The user has to work in a security aware manner with the
DAC.
E-shredding
It is assumed that the E-shredding operation for print jobs and scan job data objects will
not be disabled.
Chapter 1 - General information8
Assumptions
Chapter 2
DAC Configuration
Océ System Configuration
Introduction
The Océ System Configuration application enables the remote System administrator to
configure and administer the DAC via a HTTPs connection.
Note:
The DAC needs an operational TCP/IP network connection before Océ System Con-
figuration can be used. To check the configuration, use the Key Operator System (KOS)
of the machine to print a configuration report. To configure the IP address settings of
the DAC, use the Key Operator System (KOS) of the machine. To learn how to use the
Key Operator System (KOS), see the Configuration and maintenance manual. You can
download the manual at www.oce.com.
Attention:
The remote System administrator must not change the security mode. Otherwise the
DAC is no longer in the certified configuration and is no longer able to assure the security
of its objects and itself. It is not possible to get the DAC back into the certified configu-
ration by changing the security mode back to 'High'.
Attention:
The remote System administrator must not change the 'Jobs to overwrite' settings. If E-
shredding is disabled for 'scan jobs' or 'print jobs without security code', the DAC is no
longer in the certified configuration and is no longer able to assure the security of 'scan
jobs' and 'print jobs without security code'.
Secure connection
The network HTTPs connection to the Océ System Configuration application is protected
with SSL (Secure Socket Layer).
For the purpose of configuring the DAC prior to deployment, the DAC is delivered with
a factory-default SSL certificate. A new SSL certificate should be created before the DAC
is deployed. This must be done after the hostname of the DAC is configured.
Chapter 2 - DAC Configuration10
Océ System Configuration
Autres manuels pour VarioPrint 1055
4
Ce manuel convient aux modèles suivants
4
Table des matières
Autres manuels Oce Imprimante tout-en-un
Oce
Oce cm5520 Manuel utilisateur
Oce
Oce im7520 Manuel utilisateur
Oce
Oce VarioLink 2221 Manuel utilisateur
Oce
Oce CM4520 Manuel utilisateur
Oce
Oce fx2080 Manuel utilisateur
Oce
Oce VarioPrint 4110 Manuel utilisateur
Oce
Oce cm3522 Manuel utilisateur
Oce
Oce CS191 Phase 3 Manuel utilisateur
Oce
Oce VarioPrint 6000 MICR series Manuel utilisateur
Oce
Oce cm6520 Manuel utilisateur
Oce
Oce VarioLink 5022 Manuel utilisateur
Oce
Oce cm6520 Manuel utilisateur
Oce
Oce cm3522 Manuel utilisateur
Oce
Oce em2520 Manuel utilisateur
Oce
Oce cm4010 Instructions d'utilisation
Oce
Oce im5530 Manuel de programmation
Oce
Oce cm5520 Manuel utilisateur
Oce
Oce TDS450 Manuel utilisateur
Oce
Oce CM4520 Manuel utilisateur
Oce
Oce VarioLink 5022 Manuel utilisateur
Manuels Imprimante tout-en-un populaires d'autres marques
Triumph Adler
Triumph Adler DC 2016 Manuel
Epson
Epson WorkForce WF-2510 Guide de l'utilisateur
Epson
Epson Stylus Scan 2000 Manuel d'installation et d'exploitation
Epson
Epson PictureMate Snap PM 240 Mode d’emploi
Konica Minolta
Konica Minolta bizhub C35 Manuel utilisateur
Brother
Brother MFC-J430w Manuel utilisateur
