Xerox WORKCENTRE 7755 Manuel technique

XEROX WorkCentre 7755/7765/7775 Information Assurance Disclosure Paper

Xerox WorkCentre™7755/7765/7775

Multifunction Systems

Information Assurance Disclosure Paper

Version 1.0

Prepared by:

Larry Kovnat

Xerox Corporation

1350 Jefferson Road

Rochester, New York 14623

XEROX WorkCentre 7755/7765/7775 Information Assurance Disclosure Paper

Ver. 1.01, April 2010 Page 2 of 40

Xerox Corporation in the United States and/or other counties.

Other company trademarks are also acknowledged.

Document Version: 1.01 (April 2010).

XEROX WorkCentre 7755/7765/7775 Information Assurance Disclosure Paper

Ver. 1.01, April 2010 Page 3 of 40

1. Introduction

The WorkCentre 7755/7765/7775 Multifunction Systems are among the latest versions of Xerox copier and multifunction

devices for the general office.

1.1. Purpose

The purpose of this document is to disclose information for the WorkCentre products with respect to device security. Device

Security, for this paper, is defined as how image data is stored and transmitted, how the product behaves in a networked

environment, and how the product may be accessed, both locally and remotely. Please note that the customer is responsible

for the security of their network and the WorkCentre products do not establish security for any network environment.

This document applies to both the multifunction and digital copier configurations of the product.

The purpose of this document is to inform Xerox customers of the design, functions, and features of the WorkCentre

products relative to Information Assurance (IA).

This document does NOT provide tutorial level information about security, connectivity, PDLs, or WorkCentre products

features and functions. This information is readily available elsewhere. We assume that the reader has a working

knowledge of these types of topics. However, a number of references are included in the Appendix.

1.2. Target Audience

The target audience for this document is Xerox field personnel and customers concerned with IT security.

1.3. Disclaimer

The information in this document is accurate to the best knowledge of the authors, and is provided without warranty of any

kind. In no event shall Xerox Corporation be liable for any damages whatsoever resulting from user's use or disregard of the

information provided in this document including direct, indirect, incidental, consequential, loss of business profits or special

damages, even if Xerox Corporation has been advised of the possibility of such damages.

XEROX WorkCentre 7755/7765/7775 Information Assurance Disclosure Paper

Ver. 1.01, April 2010 Page 4 of 40

2. Device Description

WorkCentre products consist of two basic modules: a digital copier module that provides conventional copy functions and

features, and a Network Controller that provides the capability to connect the copier to a LAN. CopyCentre models of these

products are available which provide copy-only features and do not include a Network Controller.

Figure 2-1 WorkCentre Multifunction System

2.1. Security-relevant Subsystems

2.1.1. Physical Partitioning

The security-relevant subsystems of the product are physically partitioned as shown in Figure 2-2.

Document Feeder & Scanner

(

IIT

)

Optional Office

Finisher

Marking Engine (IOT)

Paper Trays

Graphical User

Interface

(GUI)

Optional high-capacity

er feeder

XEROX WorkCentre 7755/7765/7775 Information Assurance Disclosure Paper

Ver. 1.01, April 2010 Page 5 of 40

Fax Card

Image Output

Terminal (also

known as Marking

Engine)

Controller/GUI

Power Supply

Scanner /

Document Handler

PowerInterface

TOEinternalwiring(proprietary)

TOEinternal

wiring

(proprietary)

PCIBus

TOE Physical Boundary

Original

Documents

Optical

interface

Human Interface

Hardcopy

(Finisher)

Paper output interface

ButtonsandDisplay

PSTN (RJ-11 Port)

Physicalexternal

interface

Ethernet Port,

USB Host Port

PhysicalexternalInterfaces

Power Cord PSW USB Target

Port, Foreign Device

Interface, Scanner

Interface, UI

PhysicalexternalInterfaces

Power Button

Button and TOE internal wiring

(proprietary)

Physical external

Interface

Figure 2-2 TOE System Partitioning, single-board Controller configuration

2.1.2. Security Functions allocated to Subsystems

Security Function Subsystem

Image Overwrite Controller

Graphical User Interface

System Authentication Controller

Graphical User Interface

Network Authentication Controller

Graphical User Interface

Security Audit Controller

Cryptographic Operations Controller

User Data Protection – SSL Controller

User Data Protection – IP Filtering Controller

User Data Protection – IPSec Controller

Network Management Security Controller

Information Flow Security Fax Card

Controller

Graphical User Interface

XEROX WorkCentre 7755/7765/7775 Information Assurance Disclosure Paper

Ver. 1.01, April 2010 Page 6 of 40

Security Function Subsystem

Security Management Controller

Graphical User Interface

Table 1 Security Functions allocated to Subsystems

2.2. Controller

The Copy Controller and the Network Controller are the two main software components of the controller subsystem.

Both components reside on the single controller board. The copy controller software and network controller software

execute on a common processor within separate and unshared memory spaces and communicate with RPC calls.

A single disk is used with partitions assigned to the network controller and copy controller.

The UI software runs on the single-board controller in the Single-Board Controller (SBC) configuration.

2.2.1. Copy Controller Software (CC)

2.2.1.1. Purpose

The Copy Controller provides all of the functions necessary to implement a digital copier, and works together with the

Fax card to implement embedded fax functionality. The Copy Controller contains the image path, which uses

proprietary hardware and algorithms to process the scanned images into high-quality reproductions. Among other

common copier functions, the CC works with the EPC DRAM to enable electronic pre-collation, sometimes referred to

as scan-once/print-many. When producing multiple copies of a document, the scanned image is processed and

buffered in the EPC DRAM in a proprietary format. Extended buffer space for very large documents is in the CC

partition of the single system disk in the SBC configuration. The buffered bitmaps are then read from EPC DRAM

and sent to the Image Output Terminal (IOT) for marking on hardcopy output. For long documents, the production

of hardcopy may begin before the entire original is scanned, achieving a level of concurrency between the scan and

mark operations.

The Copy Controller works with the Graphical User Interface (GUI) assembly to provide System Configuration

functions. A System Administrator PIN must be entered at the GUI in order to access these functions.

2.2.1.2. Memory Components

Volatile Memory Description

Type (SRAM, DRAM, etc) Size User Modifiable

(Y/N)

Function or Use Process to

Clear:

DDR2 SDRAM 2GB N Processor Memory space, No user

image data stored

Power Off System

DDR SDRAM 1GB N EPC Memory user data store Power Off System

DDR2 SDRAM 64MB N Dedicated DUI frame buffer Power Off System

Additional Information:

Scan to Remote File is supported on this device

Non-Volatile Memory Description

Type (Flash, EEPROM, etc) Size User Modifiable

(Y/N)

Function or Use Process to

Clear:

XEROX WorkCentre 7755/7765/7775 Information Assurance Disclosure Paper

Ver. 1.01, April 2010 Page 7 of 40

Flash 32MB N This is where the system Boot Code

and Kernel reside

Not cleared. Can be

modified as part of

a SW upgrade

process.

SRAM 512KB N NVM storage for control set points,,

configuration settings, counter data

Via Diagnostic only

Additional Information:

All memory listed above contains code for execution and configuration information. No user or job data is stored in these locations.

Hard Disk Descriptions

Drive / Partition

(System, Image):

Removable

Y / N

Size: User Modifiable:

Y / N

Function: Process to

Clear:

System/Image Disk No 160 GB

(min)

N with normal

operation

Executable code (OS),

images in process, FAX

data, device settings,

spooling)

Diagnostic for all

areas and Normal

Operation for spool

areas, with

Immediate or

Image Overwrite.*

Additional Information:

The disk contains OS, stored executables, fonts, device settings and images, etc. Scan to Local File is supported on this device The “Stored Job” files

remain on the disk until deleted during normal operation. Other job files are deleted during normal operation.

The spooling space is dynamically allocated to each job; at the job completion this space is de-allocated to be available for new images.

* All residual customer data in de-allocated space can be overwritten using a three pass algorithm which conforms to U.S. Department of Defense

Directive 5200.28.M. Xerox provides Immediate Image overwrite that overwrites user image data as soon as the job is complete plus the ability for the

SA to overwrite the entire spool partition, if desired.

Data stored on disk can be encrypted using Encryption option

Table 2 Copy/Network Controller Memory Components

2.2.1.3. External Connections

The controller printed wiring boards are physically mounted in a tray with external connections available at the

rear of the machine. In the single-board configuration the tray contains a power distribution board and a single

controller board. A optional fax board may also be installed. Disk(s) are mounted on the underside of the tray.

Below the controller tray are other connectors that distribute power and communications to external options such

as a finisher or high-capacity paper tray. There is also a port that provides debug access to the solid-ink marking

engine. This port is used to monitor functional status of the printhead. There is no internal path from this port to

the controller.

XEROX WorkCentre 7755/7765/7775 Information Assurance Disclosure Paper

Ver. 1.01, April 2010 Page 8 of 40

Scanner Video Host USB enet SIM Ttarget

USB UI Power and Video

FDI

Fax

Line 1

Fax

Line 2

Host USB

Habanero (SBC)

Figure 2-5 Physical Map of Controller tray external connections

Table 2-4 Copy Controller external connections

Interface Description / Usage

PSW USB Target Port Diagnostics and service; Xerox Copier Assistant

USB Host Ports card readers; SW upgrade; USB Printing

Ethernet Network Connectivity

FAX line 1, RJ-11 Supports FAX Modem T.30 protocol only

FAX line 2, RJ-11 Supports FAX Modem T.30 protocol only

Foreign Device Interface (FDI) Allows connection of optional access control hardware

(accessory not present in evaluated TOE)

Scanner Proprietary connection between the Scan Module and

the Copy Controller

UI Video and power

SIM Options enablement

Table 3 Copy Controller External Connections

2.2.1.4. Internal Interfaces

The interfaces between the Copy Controller and other TOE subsystems (see ) are physically and logically internal to

the TOE. Proprietary protocols are implemented on all internal interfaces.

2.2.2. Network Controller Software (NC)

2.2.2.1. Purpose

The Network Controller provides both network and direct-connect external interfaces, and enables print, email,

network scan, internet FAX, and LanFAX functionality. Network scanning, Internet fax, and LanFax, are optional

XEROX WorkCentre 7755/7765/7775 Information Assurance Disclosure Paper

Ver. 1.01, April 2010 Page 9 of 40

features. An Image Overwrite Security kit is available which enables both Immediate and On-Demand overwrite of

any temporary image data created on the NC disk. The Network Controller also incorporates an open-source web

server (Apache) that exports a Web User Interface (WebUI) through which users can submit jobs and check job

and machine status, and through which System Administrators can remotely administer the machine. The

Network Controller is sometimes referred to as the Electronic Subsystem (ESS).

The Network Controller (NC) runs Wind River Linux, kernel v. 2.6.20+. (Note: Consistent with Flaw Remediation, this

baseline may be updated as indicated by the ‘+’ sign. Unnecessary services such as rsh, telnet and finger are

disabled in the OS. FTP is used in client-only mode by the optional Network Scanning feature for the filing of

scanned images and the retrieval of Scan Templates; however the NC does not contain an FTP server.

2.3. Fax Card

2.3.1. Purpose

The embedded FAX service uses the installed embedded fax card to send and receive images over the telephone

interface. The FAX card plugs into a PCI slot on the copy controller.

2.3.2. Hardware

The Fax Card is a printed wiring board assembly containing processor, memory, and fax modem. It connects to the

CC via PCI bus. The Fax Card is responsible for implementing the T.30 fax protocol and for managing all of the fax-

specific features of the product. The fax telephone lines are connected directly to the Fax Card via RJ-11 connectors.

Name Size Purpose / Explanation

Processor NA Motorola Coldfire MCF5307-90MHz Processor

SDRAM 128

MB Scratch pad RAM for executing code. No user image data is stored

in this memory. This memory is initialized to a known state on every

power up.

Flash ROM 32 MB Contains the executable code.

Flash

NVRAM 64 MB

to 256

User document Image data are stored in this non-volatile memory.

Destination phone numbers are also stored here. Received jobs can

be stored in user mailboxes. Send jobs may be held for delayed

send.

MODEM #1 NA Conexant FM336 Fax modem

MODEM #2 NA Requires installation of extended card with additional FM336

Table 2-7 Fax Card Hardware Components

2.4. Scanner

2.4.1. Purpose

The purpose of the scanner is to provide mechanical transport of hardcopy originals and to convert hardcopy

originals to electronic data.

2.4.2. Hardware

The scanner converts the image from hardcopy to electronic data. An optional document handler moves originals

into a position to be scanned. The scanner provides enough image processing for signal conditioning and

formatting. The scanner does not store scanned images. All other image processing functions are in the copy

controller.

The scanner has 1MB of non-volatile executable code and 128KB of scratchpad RAM.

XEROX WorkCentre 7755/7765/7775 Information Assurance Disclosure Paper

Ver. 1.01, April 2010 Page 10 of 40

2.4.3. Control and Data Interfaces

Scanned images are transmitted from the scanner to the copy controller across a proprietary interface.

2.5. Graphical User Interface (GUI)

2.5.1. Purpose

The GUI detects soft and hard button actuations, and provides text and graphical prompts to the user. The GUI is

sometimes referred to as the Local UI (LUI) to distinguish it from the WebUI, which is exported by the web service

that runs in the Network Controller. Images are not transmitted to or stored in the GUI. The Start hard button is

located on the GUI panel.

2.5.2. Control and Data Interfaces

The GUI communicates with the copy controller across a proprietary interface.

2.6. Marking Engine (also known as the Image

Output Terminal or IOT)

2.6.1. Purpose

The Marking Engine performs copy/print paper feeding and transport, image marking and fusing, and document

finishing. Images are not stored at any point in these subsystems.

2.6.2. Hardware

The marking engine is comprised of paper supply trays and feeders, paper transport, laser scanner, xerographics, and

paper output and finishing.

2.6.3. Control and Data Interfaces

Images and control signals are transmitted from the copy controller to the marking engine across a proprietary

interface.

2.7. System Software Structure

2.7.1. Open-source components

Open-source components in the connectivity layer implement high-level protocol services. The security-relevant

connectivity layer components are:

•Apache 2.2.4, with mod_ssl integrated (http and https)

•OpenSSL 0.9.7h (SSL)

•SAMBA 3.3.30 (SMB)

•Netsnmp 5.0.9 (SNMPv3)

2.7.2. OS Layer in the Network Controller

The OS layer includes the operating system, network and physical I/O drivers. The baseline for the product launch

version of the Network Controller1operating system is Wind River 1.4 Linux 1.4, kernel version 2.620+. Kernel sourced

from kernel.org and modified by Xerox. At product launch this was 2.6.20. Xerox may issue security patches

consistent with Flaw Remediation, in which case the Xerox portion of the version number will be incremented.

The crypto library for IPSec is provided by the kernel.

1A proprietary executive with no networking capability provides the operating environment for the copy controller.

Autres manuels pour WORKCENTRE 7755

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Xerox Imprimante tout-en-un

Xerox

Xerox WorkCentre Pro 412 Manuel utilisateur

Xerox

Xerox DocuColor 252 Manuel d'instructions et de sécurité

Xerox

Xerox PHASER 8560MFP Manuel

Xerox

Xerox 4150S - WorkCentre B/W Laser Manuel utilisateur

Xerox

Xerox PHASER 6121MFP Manuel d'utilisation

Xerox

Xerox Legacy 4112 Manuel du propriétaire

Xerox

Xerox Phaser 5335 Guide de configuration

Xerox

Xerox WorkCentre 5865 Manuel utilisateur

Xerox

Xerox WorkCentre PE120 Manuel utilisateur

Xerox

Xerox WorkCentre 6400 Manuel utilisateur

Xerox

Xerox WorkCentre 7220 Manuel utilisateur

Xerox

Xerox Copycentre C118 Manuel utilisateur

Xerox

Xerox WorkCentre Xi70c Manuel utilisateur

Xerox

Xerox WorkCentre M15 Manuel utilisateur

Xerox

Xerox DocuCentre-III C4100 Manuel utilisateur

Xerox

Xerox WorkCentre 7220 Manuel utilisateur

Xerox

Xerox AltaLink C8030 Manuel utilisateur

Xerox

Xerox 220 Guide d'installation

Xerox

Xerox WorkCentre M24 Color Manuel utilisateur

Xerox

Xerox 4118X - WorkCentre B/W Laser Manuel technique

Xerox

Xerox DocuMate 700 Manuel

Xerox

Xerox 3124 - Phaser B/W Laser Printer Manuel utilisateur

Xerox

Xerox WorkCentre Pro 421 Manuel utilisateur

Xerox

Xerox WorkCentre M24 Color Manuel utilisateur

Manuels Imprimante tout-en-un populaires d'autres marques

Triumph Adler

Triumph Adler DC 2016 Manuel

Epson

Epson WorkForce WF-2510 Guide de l'utilisateur

Epson

Epson Stylus Scan 2000 Manuel d'installation et d'exploitation

Epson

Epson PictureMate Snap PM 240 Mode d’emploi

Konica Minolta

Konica Minolta bizhub C35 Manuel utilisateur

Brother

Brother MFC-J430w Manuel utilisateur

Konica Minolta

Konica Minolta BIZHUB 558 Manuel utilisateur

Lexmark

Lexmark MX710 Series Manuel

Brother

Brother MFC-9760 Manuel utilisateur

Lexmark

Lexmark XC8155 Manuel utilisateur

Lexmark

Lexmark X642E Manuel utilisateur

Sharp

Sharp MX-2310U Mode d’emploi

Aficio

Aficio 200 Manuel utilisateur

Canon

Canon ImageCLASS 2300 Manuel

Ricoh

Ricoh Pro C900 Manuel utilisateur

Lexmark

Lexmark X925 Manuel utilisateur

Brother

Brother Business Smart MFC-J4510dw Manuel utilisateur

Epson

Epson Stylus CX8400 Series Manuel utilisateur