Canon printer imageCLASS MF236n User Manual

Usingtheoperationpanel	 You can also enable or disable IEEE 802.1X authentication from  in the  screen. 
IEEE
802.1XSettings(P.482)
LINKS
Con4gurLng SettingsforKeyPairsandDigital CertL4cates(P.434)
Security
433       

Con4gurLngSettingsforKeyPairsandDigital
CertL4cates
1469-089
In order to encrypt communication with a remote device, an encryption key must be sent and received over an unsecured network beforehand. This problem is solved by public-key cryptography. Public-key cryptography ensuressecure communication by protecting important and valuable information from attacks, such as  sniwng, spoo4ng,  and
tampering of data as it  5ows over a network.
KeyPair
 A key pair consists of a public key and a...

	The machine does not support use of a  certi4cate revocation list (CRL).
Security
435 

GeneratingKeyPairs
1469-08A
A key pair can be generated with the machine when it is required for encrypted communication via Transport Layer
Security (TLS). You can use TLS when accessing the machine via the Remote UI. Up to  4ve key pairs (including the
preinstalled pairs) can be generated to the machine. Self-signed  certi4cates are used with key pairs generated in
"Network Communication". With a "Key and  Certi4cate Signing Request (CSR)", you can apply for a CA-issued digital...

4Click[GenerateKey@.
Deletingaregisteredkeypair	 Click [Delete] on the right of the key pair you want to delete 
 click [OK].
	 A  key  pair  cannot  be  deleted  if  it  is  currently  used  for  some  purpose,  such  as  when  "[TLS]"  or  "[IEEE
802.1X]"  is  displayed  under  [Key  Usage].  In  this  case,  disable  the  function  or  replace  the  key  pair  before deleting it.
5Select[NetworkCommunication@andclick[[email protected]settingsforthekeyand certL4cate....

Enter up to 24 alphanumeric characters for naming the key pair. Set a name that will be easy for you to4nd  later in a list.
[SignatureAlgorithm@
Select the signature algorithm from the drop-down list.
[KeyAlgorithm@
RSA is used for generating a key pair. Select the key length from the drop-down list. The larger the
number for the key length, the slower the communication. However, the security is tighter.   
	 [512-bit] cannot be selected for the key length, if [SHA384] or [SHA512] is selected for...

3Click[SecuritySettings@[KeyandCertL4cate [email protected][GenerateKey@.
Deletingaregisteredkeypair
	 Click [Delete] on the right of the key pair you want to delete 
 click [OK].
	 A  key  pair  cannot  be  deleted  if  it  is  currently  used  for  some  purpose,  such  as  when  "[TLS]"  or  "[IEEE
802.1X]"  is  displayed  under  [Key  Usage].  In  this  case,  disable  the  function  or  replace  the  key  pair  before deleting it.
5Select[Keyand...

6SpecifysettingsforthekeyandcertL4cate.
 [KeySettings@
[KeyName@
Enter up to 24 alphanumeric characters for naming the key pair. Set a name that will be easy for you to
4nd  later in a list.
[SignatureAlgorithm@
Select the signature algorithm from the drop-down list.
[KeyAlgorithm@
RSA is used for generating a key pair. Select the key length from the drop-down list. The larger the
number for the key length, the slower the communication. However, the security is tighter.
   
	 [512-bit]...

Enter up to 48 alphanumeric characters for the common name of the certi4cate as necessary. "Common
Name" is often abbreviated as "CN."7Click[OK@.
	 Key and  Certi4cate  Signing Request (CSR) may take approximately 10 to 15 minutes to generate.
8Click[StoreinFile@.
	A dialog box for storing the  4le appears. Choose where to store the  4le and click [Save].
The Key and 
Certi4cate Signing Request (CSR)  4le is stored on the computer.
9Attachthestored...

5Click[RegisterCertL[email protected][Browse@,specifythe 4leforthe certL4cate signingrequest,andclick[Register@.
LINKS
UsingCA-issuedKeyPairsandDigital CertL4cates(P.443)
VerifyingKeyPairsandDigital CertL4cates(P.446)
EnablingTLSEncryptedCommunicationfortheRemoteUI(P.426)
Security
442