Security White Paper
for Kyocera MFPs andPrinters

Version 102023/ October 31, 2023

©2023 KYOCERA Document Solutions Inc.

Table of Contents
Introduction......................................................................................................................5
Identification, Authentication and Authorization .....................................................................6
Identification and Authentication .......................................................................................6
User Authentication ......................................................................................................6
Authentication Mode .....................................................................................................6
MFP/Printer Login .........................................................................................................7
Authorization .................................................................................................................8
Authorization Mode ......................................................................................................8
User Authorization Management .....................................................................................9
Session Management.......................................................................................................9
Network Security ............................................................................................................. 11
Settings for Secure Communication ................................................................................. 11
IP Filter Settings ........................................................................................................ 11Port Settings ............................................................................................................. 11
Secure Hash Algorithm Settings ................................................................................... 15
Authentication Protocol .................................................................................................. 15
IEEE802.1x ............................................................................................................... 15
SMTP Authentication ................................................................................................... 16
POP before SMTP ....................................................................................................... 16
Communication Channel Protection ................................................................................. 16
SNMP v3 ................................................................................................................... 16
IPv6 ......................................................................................................................... 16
IPsec ........................................................................................................................ 16
TLS .......................................................................................................................... 17
S/MIME .................................................................................................................... 18
Wi-Fi ........................................................................................................................... 18
E-mail Send/Receive Restriction Function ......................................................................... 18
E-mail Send Destination Restriction Function (Permission/Rejection) ................................. 18
E-mail Sender Restriction Function (Permission/Rejection) ............................................... 18
Automated Certificate Management ................................................................................. 19
Retrieve a CA-Issued Device Certificate from a Simple Certificate Enrollment Protocol Server 19
Check the Revocation Status of a Certificate .................................................................. 19
Server Certificate Verification Level Settings per Protocol ................................................. 19
Device Certificate Verification Level Settings .................................................................. 20
Stored Data Protection ..................................................................................................... 21
Data Protection ............................................................................................................ 21
HDD/SSD Encryption .................................................................................................. 21
Trusted Platform Module (TPM) .................................................................................... 21
HDD Overwrite-Erase.................................................................................................. 21
HDD/SSD Security Data Sanitization ............................................................................. 222©2023 KYOCERA Document Solutions Inc.

Access Restriction ......................................................................................................... 23
User Box ................................................................................................................... 24
Job Box .................................................................................................................... 24
FAX Box .................................................................................................................... 25
Print Security .................................................................................................................. 27
Secure Print ................................................................................................................. 27
Private Print .............................................................................................................. 27
Unauthorized Copy Prevention ........................................................................................ 27
Text Stamp/Bates Stamp............................................................................................. 27
Security Watermark.................................................................................................... 27
FAX Security ................................................................................................................... 28
FASEC (For Japan Only) ................................................................................................. 28
FAX Encrypted Communication ....................................................................................... 28
Send/Receive Restriction................................................................................................ 28
Wrong Transmission Prevention....................................................................................... 28
Confirmation Entry ..................................................................................................... 29
Prohibition of FAX Number Direct Entry with Numeric Keys ............................................... 29
Destination Confirmation Prior to Transmission ............................................................... 29
Use Prohibition Time ..................................................................................................... 29
Sub Address Communication .......................................................................................... 29
Sub Address Confidential Transmission (Send/Receive) .................................................... 30
Sub-Address Bulletin Board Transmission (Send/Receive) ................................................ 30
Memory Forward ........................................................................................................... 30
Security Measures Against Unauthorized Access ................................................................ 30
Send Security ................................................................................................................. 31
Destination Confirmation Prior to Send............................................................................. 31
Prohibition of Broadcast Transmission .............................................................................. 31
New (Address) Destination Entry..................................................................................... 31
Encrypted PDF .............................................................................................................. 31
Digital Signature to File ................................................................................................. 31
FTP Encrypted Send ...................................................................................................... 31
Device Management......................................................................................................... 32
Job Management .......................................................................................................... 32
Authorization to Refer Job Information .......................................................................... 32
Audit Log ..................................................................................................................... 32
Login Log .................................................................................................................. 32
Device Log ................................................................................................................ 32
Security Communication Error Log ................................................................................ 33
Log Management .......................................................................................................... 33
Send Job Log (e-mail address) ..................................................................................... 33
Syslog ......................................................................................................................... 33
Integrity Verification of the Security Functions .................................................................. 33
3©2023 KYOCERA Document Solutions Inc.

Digitally-Signed Firmware............................................................................................ 33
Secure Boot .............................................................................................................. 33
Run Time Integrity Check (RTIC) .................................................................................. 33
Allowlisting................................................................................................................ 34
Usage Restriction .......................................................................................................... 34
Interface Block .......................................................................................................... 34
USB Storage Class Logical Block ................................................................................... 34
Operational Panel Lock ................................................................................................ 344©2023 KYOCERA Document Solutions Inc.

Introduction
Kyocera MFPs/Printers are embedded with an OS as standard. Like a PC, installing a HDD or SSD
are also available into the MFP/Printer. The MFPs/Printers for the office use handle various types ofsensitive information.

Whereas, the MFPs/Printers are exposed to recent advanced and diversified

threats, such as unauthorized access to the devices via a network, tapping or alteration of
information in transit over a network, and leakage of information from HDD.

Kyocera Document

Solutions Inc. (referred to as Kyocera, hereafter) provides customers with a variety of security
functions installed on its MFPs/Printers.

We are always proactively taking security countermeasuresagainst these threats so that our customers may rest assured to securely use Kyocera MFPs/Printers.
In addition, Kyocera has obtained Common Criteria certification (known as ISO15408) that
objectively verifies if security functions are correctly performed at customers’ hand by the third party.
This verification also applies to rigorous process that includes appropriate product design,
manufacturing and delivery.

Kyocera products have been designed to have the necessary security

functions and capabilities and so have been certified as they conform to an IEEE 2600.1/ IEEE 2600.2,
which is an international security standard for hard copy devices enacted in 2009. Kyocera products
will also be certified as being compliant with Protection Profile for Hardcopy Devices, HCD-PP as
security requirements that must be met for the Japanese and U.S. governments when procuring
their MFPs.

Additionally, Federal Information Processing Standard, FIPS 140-2/ FIPS 140-3*1

certified cryptographic module, which complies with the security standard created by the U.S.
National Institute of Standards and Technology, NIST, is installed on Kyocera devices. Kyocera willcontinuously drive further security enhancement as standards develop or new technologies evolve
to protect the Kyocera devices.
*1: FIPS 140-3 certification for Kyocera cryptographic module is in the review phase.
This document explains how security functions installed on Kyocera MFPs/Printers perform against
the threats and enable customers to maintain security management. We are sincerely hoping that
this document will be fully utilized for Kyocera customer use.

5©2023 KYOCERA Document Solutions Inc.

Identification, Authentication and Authorization
Identification and Authentication
Identification and Authentication is an important process of verifying that a user has permission toaccess or use a device.

A user is required to enter access credentials, such as a login username

and password, the user ID in order to identify the user, and password that only the user can know.
(Figure 1)
To use the identification and authentication function, users are required to register a login username
and a login password on the MFPs/Printers in advance. That is, only users who have been registeredare allowed to access the MFP/Printer.

Kyocera MFPs/Printers can help an administrator manage

authorization that he/she can appropriately give a different level of authorization to each personsuch as “general user” or “administrator”. Specific MFP/Printer functions can also be restricted on a
per user basis.

Before gaining access the MFPs/Printers, a user must successfully authenticate byentering a valid login username and a valid login password, thereby protecting the MFPs/Printersagainst unauthorized use. Who, when and how often accessed to the MFPs/Printers, can be tracked
later based on user access logs.
User Authentication
This function protects information by controlling access to the information after identifying
authorized user of MFP/Printer.
This enables to realize access control of asset and protection of asset.
When a login username and a login password a user enters agreed with the ones that have beenregistered in advance, the user would be authenticated and then granted access to the MFP/Printer.
Password Policy
Password policy that encourages users to employ strong passwords including minimum length,complexity, which rejects the 200 most common passwords, and a period of validity can be set. The
function rejects passwords, which is not applicable to the password policy.

This helps prevent weakpasswords set by general users and unauthorized access.
Account Lockout Policy
Account lockout is a function that temporarily lockouts the account when exceeding a predetermined
number of login attempts within a predetermined period of time. Retry count (1-10 times) before
lockout and a lockout period (1-60 minutes) can be set. When failed login with wrong passwords
repeatedly occur more than the preset number of time, the user account will be disabled.

Theaccount lockout policy setting highly minimizes successful password cracking attacks on MFP/Printer.
Authentication Mode
Kyocera MFPs/Printers have the following authentication modes.

6©2023 KYOCERA Document Solutions Inc.

Local Authentication
The local authentication mode authenticates users based on the user data registered on the local
user list on the MFPs/Printers. Only the registered users can access to the MFPs/Printers.
Network Authentication
Network authentication mode authenticates users via an authentication server.
with the user data registered on the authentication server.
are provided.

Users can login

The servers such as NTLM and Kerberos

The third-party server linkage is also available. For example, secure user

authentication can be set up through LDAP Security (i.e., LDAP over TLS) configured, Kerberos, SASL
(with/without sign), and NTLM. In a secure TLS connection, data for transmissions are encrypted
and users can be checked if they are reliable for mutual communications. By associating TLS
connection with Kerberos/NTLM users, unauthorized access with using unauthorized usage ofticket/token can be prevented.
Kerberos Authentication
Kerberos authenticates users between a client and an authentication server on a network.

This

unifies a plurality of servers and user authentication information, and allows users Single Sign On.
Communication channels can be encrypted here.
NTLM Authentication
NTLM is used for network login when connecting between MFPs/Printers and the network. The NTLM
authentication performs between MFP/Printer and a server using challenge-response mode to refrainfrom transmitting a non-encrypted password on the network.

The challenge data from the server

has been encrypted and NTLM hash is used as an encryption key for encryption.

Figure 1
MFP/Printer LoginThe following login modes can also be used other than entering a login username and a login
password from an operation panel.
ID Card Authentication (Option)
There are two ways for ID card authentication. One is to login with an ID card only and the other is
to hold the ID card near or over a card reader and then enter a password.

ID card authentication
7©2023 KYOCERA Document Solutions Inc.

can be used in Local authentication.

(Figure 2)

When the ID card information has been registered on the user list of the MFPs/ Printers, an external
authentication server, or the third-party authentication server in advance, the authenticated users
can be granted access to the devices with their ID card.
Authentication with an ID card, such as an employee card currently used, enables Department
Management and User Management features.

Specific functions can be restricted based on theuser information associated with the ID cards.

(Figure 3)

Figure 2

Figure 3

Authorization
The use of specific functions such as color print, full color copy, send, fax transmission, box storage,
external memory storage etc. can be restricted on an authorized user basis. It helps significantly
lower the possibility of information leakage from MFPs. According to the various user levelauthorization, “user”, ”administrator” or “device administrator”, access to settings on the MFP/Printercan also be limited. Some MFPs/Printers have a combined, a two-sided and an EcoPrint restriction
features. This may be useful, for example, a user without having an authorization to set “notcombine”, has to set “2in1” or more to make copies, otherwise user cannot make copies.
Authorization Mode
MFPs/Printers have the following authorization modes.
Local Authorization
Local Authorization is an authorization function that can be used with a local user list registered on
the MFP when performing a local authentication.

The usage can be limited by user.

Network Authorization (Group Authorization/Server Authorization)
Network authorization includes group authorization and server authorization.
Group authorization is accomplished by using the group information obtained upon network
authentication and the group authorization information stored on the MFPs in advance.

Restrictions

can be applied based on the respective groups registered in the authentication server.

8©2023 KYOCERA Document Solutions Inc.

Server authorization is accomplished by using the user information obtained upon
network authentication and the user authorization information stored on the server*2 in advance.
Restrictions can be applied based on the users registered in the authentication server.
The usage of the MFPs can be restricted by group authorization/server authorization, making the
MFPs more secure to be used by the particular group/user.
*2: The Kyocera server must be configured in the user’s environment.

OAuth2
Upon OAuth authorization, the authorization server issues an access token, which the MFP receives.
The token enables Microsoft Exchange to send and receive e-mails. There used to be security risks
because Traditional Basic authentication involves linking authentication information such as ID andpassword to the outside. With OAuth2.0, users can use the Kyocera devices more securely without
passing authentication information by using access tokens.
Login by Function
Login is restricted by functions; Print restriction, Copy restriction, EcoPrint restriction, Fax restriction,
Scan to Box restriction, and Scan to Send restriction for example, when guest authorization is set.
Users who wish to use the functions with login restrictions are required for login authentication.
Therefore only limited users registered on the list earlier can use the particular functions.

The

security can strongly prevent the leakage of information from the Kyocera devices to outsidewhereas maintaining the user-friendliness.
User Authorization Management
As for the user authorization management, usages of functions are permitted by an only authorizeduser based on the various authorization levels given to the respective users. User authorization
includes Machine Administrator, Administrator, and General User.

In addition, some “Administrator”

authorizations can also be given to General Users. Therefore the users who have no authorization
cannot illegally use the particular function, which the unauthorized users are not allowed.
Session Management
Session management is a function that manages a period of time as a session between the time
when user login to the MFPs and the time when user logout from the MFPs, after users areauthenticated.
The following management functions are available.
Auto Panel Reset
Auto panel reset is a function that automatically logs out, when no operation has done after a certain
period of time.

Users can specify when to perform reset after the last operation. The auto panel
9©2023 KYOCERA Document Solutions Inc.

reset helps prevent unauthorized access to the MFPs from malicious attacks when the last user failed
to logoff the system.

10©2023 KYOCERA Document Solutions Inc.

Network Security
Settings for Secure Communication
Kyocera MFPs/Printers can limit communications on a network only from a set range of IP addresses
and Port numbers.

The powerful Secure Hash Algorithm is also available for TLS server certificates.

This algorithm prevents alteration of data, tapping data, and masquerading over a network.
We hope the Kyocera MFPs/Printers will be used according to the security policy set by customers.
By using Security Quick Setup feature, an administrator can select an appropriate level from Level
1, 2 and 3 according to their security policy.

It is possible to execute multiple security features

such as network setting, interface block setting and log setting collectively at once according to aselected level. It is then also possible to adjust settings to the certain limited security features,
respectively by using security setting feature. Users can use the Kyocera MFPs/Printers securely
under the most appropriate environment according to their security policy.
IP Filter Settings
The IP filter is a function that restricts network access to the MFPs/Printers by setting ranges of IP
addresses or types of protocols. The IP filter specifies the ranges of IP addresses (and subnet mask
combinations) to be permitted/rejected access. The IP filter only allows access from the clients withIP addresses set in the specified range. Some permitted communication protocols can be chosen
and then set to be active.

Regarding IPv4 and IPv6 support, communications from a single PC orcommunications from multiple PCs and certain protocols can be set.

Thus, the specified settings

help restrict unauthorized access to the MFPs/Printers, suitable for the user’s environment.
Port Settings
Only the required port numbers are set to be enabled to communicate using protocols such as IPPor SMTP, thereby disabling port numbers which are not set to be enabled.
ProtocolFTP ServerPort No.
TCP 21

Setting
Enable/Disable

Note
FTP server is a protocol for receiving a
document.

HTTP

TCP 80

Enable/Disable

HTTP is a protocol that is used when
receiving/sending data from a web page between
www server and browser.

NetBEUITCP 139

Enable/Disable

NetBEUI is a protocol for a small network that isused for file sharing and print services, as well
as for receiving a document.

HTTPS

TCP 443

Enable/Disable

HTTPS is a protocol that performs encryption
using TLS.

11
©2023 KYOCERA Document Solutions Inc.

Protocol

Port No.

Setting

IPP over TLS

TCP 443

Enable/Disable

Note
IPP over TLS is a protocol that combines TLS
which encrypts a channel, and IPP which is used
for internet printing. In addition, the IPP over
TLS can have a valid certificate.

LPD

TCP 515

Enable/Disable

LPD is a printing protocol that is used for printing
text files or Postscripts.

IPP

TCP 631

Enable/Disable

IPP is a protocol that controls to send/receive
print data via TCP/IP including internet, or print
devices.

ThinPrint

TCP 4000

Enable/Disable

ThinPrint is a print technology available in Thinclient environment, and also supports TLS.

WSD ScanTCP 5358

Enable/Disable

Windows Vista WSD is a protocol that enables a
MFPs/Printers for a network connection.

Thisalso enables users to detect (install)
MFPs/Printers device or send/receive data easier.
Original documentation image scanned through
MFP/Printer can be stored in WSD PC as a file.
WSD Print

TCP 5358

Enable/Disable

Windows Vista WSD is a protocol that enables
MFPs/Printers for a network connection.

Thisalso enables users to detect (install)
MFPs/Printers device or send/receive data easier.
Enhanced WSD

TCP 9090

Enable/Disable

Enhanced WSD takes a procedure for easily
connecting the various devices connected to a
network, and using. The status of MFP/Printercan be monitored by the status monitor throughthis port 9090.

Enhanced

WSD

TCP 9091

Enable/Disable

over TLS

Enhanced WSD (TLS) is a security protocol aswell as an enhanced WSD with using TLS.

This

provides encryption, authentication and safety(Protect against alteration).
RAW

TCP

Enable/Disable

RAW protocol takes different steps, compared to

9100-

LPR for printing.

In general, MFP/Printer uses

9103

port number 9100, and also uses SNMP or MIB
to configure and monitor printer status.

SNMPv1/v2

UDP161

Enable/Disable

SNMP protocol is used in network management
system.

Normal communication will be

performed using read and write community
names.

12©2023 KYOCERA Document Solutions Inc.

Protocol
SNMPv3

Port No.

Setting

Note

UDP161

Enable/Disable

SNMP protocol is used in network management
system.

Normal communication will be

performed using username and password.
Authentication option or encryption option canbe used.
DSM ScanEnable/Disable

DSM (Distributed Scan Management) uses
Windows Server 2008 R2 which is used forhandling a large amount of user data in a largeorganization.

FTP Client

Enable/Disable

FTP client is a communication protocol forforwarding a file via a network.

LDAP

Enable/Disable

Address Book on LDAP server is referred as anexternal address book.

FAX number and mailaddress can be designated as destination.
LDAP over TLS

Enable/Disable

LDAP over TLS is a protocol that uses TLS forencrypting a channel to secure LDAP
communication.

POP3

Enable/Disable

POP3 is a standard protocol for receiving emails.

POP3 over TLS

Enable/Disable

POP3 over TLS is a protocol that combines POP3
which is used for receiving an email, and TLS
which is used for encrypting a channel.

SMTP

Enable/Disable

SMTP is a protocol for sending emails.

SMTP over TLS

Enable/Disable

SMTP over TLS is a protocol that combines SMTP
which is used for sending an email, and TLS
which is used for encrypting a channel.

SMB Client

Enable/Disable

SMB is a protocol that performs file or printersharing through a network. SMB Client supports
V3.0.

eSCL

Enable/Disable

eSCL is a protocol that is used for remote scanfrom Mac OS X.

eSCL over TLS

Enable/Disable

eSCL over TLS is eSCL communication protocol
using TLS certificate.

All eSCL over TLS

communications are encrypted.
LLTD

Enable/Disable

LLTD is a protocol for network topology discovery
and quality of service diagnostics.

13©2023 KYOCERA Document Solutions Inc.

Protocol

Port No.

PrivetSetting

Note

Enable/Disable

Privet is a protocol that allows discovery of cloudconnected devices on the local network, andprovides interfaces to get information about thedevice and perform some actions, such as
sending a print job locally.

DNS over TLS

TCP 853

Enable/Disable

DNS over TLS is a protocol that encrypts DNS
requests and responses with using TLS, whichencrypts a channel.

SCEP

Enable/Disable

Simple Certificate Enrollment Protocol (SCEP) isa protocol that automatically issues a certificate
to devices.

OCSP/CRL

Enable/Disable

Certificate Revocation List (CRL) is a list thatprovides a serial number of the certificate thathas been revoked by CA.
Online Certificate Status Protocol (OCSP) is a
protocol that allows web browsers and otherclients to query the status of an individual
certificate in a real time.

REST

Enable/Disable

REST is the software architecture of the web
application that supports multiple software in a
distributed hypermedia system.

REST over TLS

Enable/Disable

REST over TLS is REST communication using TLS
certificate.

All REST over TLS communications

are encrypted.
Bonjour

Enable/Disable

Bonjour is a networking technology that allows
users to automatically discover devices.

VNC

Enable/Disable

Virtual Network Computing (VNC) is a remotecontrol software that uses RFB protocol tocontrol a GUI of a device remotely over a
network connection.

VNC over TLS

Enable/Disable

VNC over TLS is a remote-control software thatuses RFB protocol to control a GUI of a device
remotely over a network connection between aclient PC and the device through TLS.

14
©2023 KYOCERA Document Solutions Inc.

Protocol
Enhanced

Port No.

VNC

Setting

Note

Enable/Disable

over TLS

Enhanced VNC over TLS is Kyocera’s own
remote-control software that uses RFB protocol
to access a device by One Time Password (OTP)
and control a GUI of the device remotely, which
only an authorized administrator is allowed. The
OTP-based secure access to the device increase
the security strength of access control.

Secure Hash Algorithm Settings
The powerful Secure Hash Algorithm used in the TLS encryption technology is supported for selfissued certificates and the CSR certificate.

This function can also be used for user environmentsthat will adopt secure measures.
Authentication Protocol
Authentication protocol is a communication protocol that aims to achieve authentication for securecommunication.

Kyocera MFPs/Printers support IEEE802.1x network authentication, SMTP

authentication and POP before SMTP authentication protocol with email sending capability.

This

prevents masquerading.
IEEE802.1x
IEEE802.1x is a standard regarding port-based authentications defined by IEEE (Institute ofElectrical and Electronics Engineers). This protocol allows communications only to authorized users(authenticated devices) when connecting to the network, and thus prevents unauthorized devices
from connecting to network. As you can see from the above, Kyocera devices support the IEEE802.1x
which would not allow unauthorized access by unauthenticated clients to the network, thereby
preventing unauthorized disclosure of information. The Kyocera MFPs/Printers employ four types ofauthentication modes as described below.
PEAP-TLS/PEAP (Protected Extensible Authentication Protocol-Transport Layer Security)
The client is authenticated based on the ID and certificate and the certificate of authentication serveris checked at the same time.
EAP-PEAP (Extensible Authentication Protocol-Protocol Extensible Authentication Protocol)
The client is authenticated based on the ID/password and only the common name of theauthentication server certificate is checked.
EAP-FAST (Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling)
EAP-FAST is an IEEE802.1.x/EAP authentication method developed by Cisco System, Inc.

Mutualauthentication is performed for the client and authentication server based on the user ID andpassword and PAC (Protected Access Credential) establishes a tunnel for the user based on theunique shared secret key.
15©2023 KYOCERA Document Solutions Inc.

EAP-TTLS (Extensible Authentication Protocol-Tunneled Transport Layer Security)
The client is authenticated based on the user ID and password, and also authentication server isauthenticated based on the electric certificate.
As for EAP-TLS, Client and server electric certificates are required for authentication, whereas for
EAP-TTLS, the user ID and password are used instead of a client certificate. This makes EAP-TTLS
easier to introduce compared to EAP-TLS. Electric certificates are used to prove the validity ofauthentication server. Therefore, it helps improve more secure and trusted communications.
SMTP Authentication
SMTP authentication is a function that permits to send an e-mail only when the ID and password
are successfully authenticated on SMTP server. The function prevents unauthorized users to send emails through the SMTP server by limiting access to the SMTP server.
POP before SMTP
POP before SMTP performs POP authentication before sending e-mails from the SMTP server. The emails can be sent within the specified period after completion of POP authentication. POP
authentication before sending an e-mail prevents masquerading.
Communication Channel Protection
Communication channel protection is to ensure secure protection of Network communication channel.
Depending on purposes or encryption schemes, the variety of protocols is available.

KyoceraMFPs/Printers support the following protocols as described, thereby effectively protecting data
against alterations or leakage via the Network.
SNMP v3
SNMP is a standard protocol that monitors and controls devices connecting to the network. Moreover,
SNMPv3 provides ability to protect data confidentiality through authentication and encryption.
IPv6
IPv6 is a new IP protocol compared to IPv4. IPv6 support, which is available in the Kyocera
MFPs/Printers, can connect to the router, and use basic control protocol like ping. In addition to theabove-mentioned basic connections, a more secure connection is ensured by implementing rigorous
security measures.
IPsec
IPsec is a protocol with a functionality that protects data in transit from tapping or alteration by
encrypting respective IP packets. To send/receive data using IPsec, IPsec-enabled PC, is connectedto the network, and also IPsec-enabled MFPs/Printers are connected to the network, and then bothof them are set to be IPsec capabilities-enabled. Encryption using IPsec is applied to print data sentfrom a PC to a MFP/Printer, and scanned data to be sent from a MFP to a PC*3. Thus IPsec supports
more secure exchange of data. In addition, the strong Secure Hash Algorithm can be used forcommunication between a pair of hosts (host-to-host).
16©2023 KYOCERA Document Solutions Inc.

*3: The communication using IPsec is an encrypted communication that uses FIPS certified
cryptographic module, which is option for the Japan and U.S. markets only.
TLS
TLS is a system to encrypt data for transmissions such as Web access or others, and also has afunctionality to mutually check if communication destination parties are reliable for mutualcommunications. Kyocera MFPs/Printers support TLS encryption protocols including TLS1.0, TLS1.1,
TLS1.2 and TLS1.3, and thereby preventing alteration of data or tapping data on network.

In

addition, the strong Secure Hash Algorithm can be used for communication between a server and aclient. The following are TLS encryption protocols.
IPP over TLS
IPP over TLS is an internet printing protocol that acts as a combination of IPP, which is for exchanging
print data on the internet or TCP/IP network, and TLS, which is for encryption of a communication
channel. This allows users to safely send print command to the MFPs/Printers through the network.
HTTP over TLS
HTTP over TLS is a protocol that acts as a combination of HTTP, which is for sending/receiving data
to and from web browser or others on the TCP/IP network, and TLS, which is for encryption of acommunication channel. In transmitting data between a PC and a MFP/Printer, this mitigates risksof alteration and leakage of data by unauthorized users.
FTP over TLS
FTP over TLS is a protocol that acts as a combination of FTP, which is used for forwarding a file on
the TCP/IP network, and TLS, which is for encryption of a communication channel.

When sending

scanned data from a MFP/Printer using the FTP protocol, TLS encryption is applied to the channel.
FTP over TLS enables more secure transmissions.
ThinPrint over TLS (Option)
ThinPrint over TLS is a protocol that acts as a combination of ThinPrint, which is for bandwidth
control and print job compression, and TLS, which is for encryption of a communication channel.
Thus this provides secure and fast printing environment.
SMTP over TLS
SMTP over TLS is a protocol that acts as a combination of e-mail transmission, and TLS, which is forencryption of a communication channel between a server and a MFP/Printer. This preventsmasquerading, tapping or modifying data in transit.
POP3 over TLS
POP3 over TLS is a protocol that acts as a combination of POP3, which is an email reception protocol,
and TLS, which is for encryption of a communication channel between a server and a MFP/Printer.
This prevents masquerading, tapping or modifying data in transmit.

17©2023 KYOCERA Document Solutions Inc.

S/MIME
Secure/Multipurpose Internet Mail Extensions (S/MIME) is a technology that allows users to encryptand digitally sign their emails. If a user certificate and an intermediate certificate have been imported
into a Kyocera device, a message sent from the device can be encrypted with the user’s public key.
This prevents the message in transit from being captured by a third party.

Also, if a device

certificate is installed on a Kyocera device, a digital signature created with the device’s private key(the sender’s [the MFP/Printer] identification) can be attached.

This prevents the message frombeing spoofed and altered by a third party (the sender’s assurance).
Wi-Fi
The new security standards WPA3-Personal and WPA3-Enterprise*4 that offer more robust protection
are supported and thus prevent attacks like KRACKs and Brute-force. This prevents unauthenticateddevice connections to the independent network provided by the MFP/Printer thus protecting the
MFP/Printer against unauthorized use.
Wi-Fi Direct devices can connect to each other without having to go through an access point.

Thatis, you don’t need to use your router.

This is because Wi-Fi Direct devices establish their own ad-

hoc networks as and when required.

The networks operate in a security domain that is independent

from any infrastructure network.

Wi-Fi Direct uses Wi-Fi Protected Setup that enables users toeasily set the connection and WPA2-PSK (Personal).
*4: Kyocera has obtained Wi-Fi CERTIFIED WPA3 certification.

E-mail Send/Receive Restriction Function
When sending/receiving emails, Kyocera system provides the email send/receive restriction as
described below, thereby preventing sending wrong emails or malicious attacks by unauthorizedusers.
E-mail Send Destination Restriction Function (Permission/Rejection)
Email send destinations can be restricted using the email send restriction function for permission or
rejection. Permitted send destination domains are registered in advance so that emails can only besent to the permitted destination domains registered earlier.

Rejected send destination domains

are also registered in advance so that emails to the rejected destination domains registered earlier
would be rejected.

This prevents sending wrong emails.

E-mail Sender Restriction Function (Permission/Rejection)
Kyocera MFPs/Printers have a function to print files attached to e-mails. E-mail reception can be
restricted through the email sender restriction function based on presetting. Permitted sender
domains are registered in advance so that emails can only be received from the permitted sender
domains registered earlier.

Rejected sender domains are also registered in advance so that

incoming emails from the rejected sender domains registered earlier would be rejected.

Thus,

security measures are implemented against malicious attacks such as spam emails.
18©2023 KYOCERA Document Solutions Inc.

Automated Certificate Management
Users can strengthen security by using the Kyocera ACM (Automated Certificate Management)
software to help manage highly complex operations.

ACM includes authentication and TLS

encryption features and can oversee enrollment and re-enrollment validations and monitor
certificate expiration dates by using SCEP (Simple Certificate Enrollment Protocol), OCSP (Online
Certificate Status Protocol) and CRL (Certificate Revocation List).

ACM removes the security issue

of using an invalid certificate by verifying a certificate’s expiration date and re-enrolling or renewing
the certificates if it has expired.

In addition, 4096 bit encryption available for certificates ensuresprotection against advanced certificate and PKI attacks.

ACM can also assure compliance with users’

security policy
Retrieve a CA-Issued Device Certificate from a Simple Certificate Enrollment Protocol Server
A request to issue a certificate is sent to a SCEP (Simple Certificate Enrollment Protocol) server thatmanages device certificates, together with a CSR (Certificate Signing Request) that is created basedon information input by administrators.

A CA-issued certificate that is retrieved from the SCEP

server is automatically registered as a device certificate.
CA-issued certificate management is simplified by this automated process that maintains security.
Only users with administrator privileges can select SCEP settings.
Check the Revocation Status of a Certificate
There are two methods for checking the revocation status of a server certificate. (1), send a request
for an OCSP (Online Certificate Status Protocol) responder and (2), compare the certificate with the
CRL (Certificate Revocation List) registered in an MFP/Printer.
These two methods are available so security-conscious users can choose a method that matches
their environment.
Only users with administrator privileges can select OCSP/CRL (certificate verification).
Server Certificate Verification Level Settings per Protocol
A server’s certificate verification level can differ depending on the destination server in a user’s
security environment.

This feature allows for server certificate verification level settings level 0 to

3 per protocol (e.g., SMTP/POP3/FTP/LDAP/DNS).

The server certificate verification level can be

set to level (0) no verification, level (1) expiration date verification, level (2) expiration date andchain verification, and level (3) expiration date, chain verification and revocation confirmation.
Note that the connection to a destination server must be secured through TLS encryption.
Legitimate connection destination and authorized certificate can be confirmed.
Only users with administrator privileges can select the settings.
19©2023 KYOCERA Document Solutions Inc.

Device Certificate Verification Level Settings
This feature sets the device certificate verification levels (0 to 3).

The device certificate verificationlevel can be set to level (0) no verification, level (1) expiration date verification, level (2) expiration
date and chain verification, and level (3) expiration date, chain verification, and revocation
confirmation.
Note that the connection to a client must be secured through TLS encryption.
Trusted certificates can be maintained in MFPs/Printers.
Only users with administrator privileges can select the settings.

20©2023 KYOCERA Document Solutions Inc.

Stored Data Protection
Data Protection
The sensitive or confidential information stored in HDD or SSD must not be leaked from
MFPs/Printers. Kyocera implements security protection measures against the stored information
through functions as described below, and so ensures that our customers can securely use Kyocera
MFPs/Printers.
HDD/SSD Encryption
HDD/SSD encryption function is a security function that encrypts documents, user settings anddevice information to be stored on HDD or SSD inside MFP. Encryption is applied to the data withusing the 256-bit AES (Advanced Encryption Standard: FIPS PUB 197) algorithm. Kyocera MFPs havea cryptographic module*5, which meets FIPS 140-3 level 2 security requirements. Even though the
HDD or SSD is removed from the MFP by a malicious person, the sensitive or confidential information
stored in the HDD or SSD would not be disclosure.
*5: The cryptographic module has been designed and implemented by Kyocera.
FIPS 140-3 certification for its cryptographic module is in the review phase.

Trusted Platform Module (TPM)
Trusted Platform Module (TPM) is included in Kyocera MFPs that can protect sensitive informationsuch as image data and certificates. An encryption key used for encrypting the HDD is encrypted bya root encryption key contained in the TPM. The certificates are encrypted by the same root
encryption key. The root encryption key is rigorously protected within the TPM so that it cannot be
disclosed outside of the security chip. The HDD encryption key and the root encryption key are saved
separately.

Even if the HDD is removed from the MFP, data stored on the HDD cannot be leaked

and is securely protected.

HDD Overwrite-Erase
HDD overwrite-erase function is another security function that disables the third parties to readvarious data such as user settings, device information and image data and others stored on the HDD.
Scanned data is temporarily stored in the HDD and then outputted at the MFP. Users also can registervarious settings.

Actual data still remain in the HDD until the data is overwritten with other data,

even after output or deletion of the data by users. So there is a possibility that the remaining actual
data can be restored using special tools and others, and this could cause leakage of information.
The HDD overwrite-erase function is configured to overwrite the actual data of the outputted ordeleted data with meaningless data so that the actual data cannot be restored.
HDD overwrite-erase process is performed automatically. So no manual operation is necessary.
HDD data is immediately overwritten even when respective jobs are canceled during operation or21©2023 KYOCERA Document Solutions Inc.

right after entire job has finished.
The following two overwrite methods are available for the HDD overwrite-erase function and areavailable depending on the MFP/Printer model.
Once Overwrite

The once overwrite method overwrites unnecessary data once with a fixed value which makes it
difficult to restore or recover the data.


3-time Overwrite (A)The 3-time overwrite (A) conforms to the U.S. Department of Defense DoD 5220.22-M method andoverwrites the unwanted data of the HDD. The unwanted data is 1) overwritten with a fixed value,
2) overwritten with the value’s complement, 3) overwritten with random data.
is verified.

It would be difficult to restore the completely erased data.

Finally, the last pass

(Figure 4)

When overwriting-erasing bulk data, the 3-time overwrite (A) method may take longer compared tothe once overwrite method.

Figure 4

HDD/SSD Security Data Sanitization
At the MFPs/Printers’ lease end or device end of life, in case that private, sensitive or confidential
data still remain inside the MFPs/Printers, it could cause the residual data leakage to outside.

To

refrain from leaking the data, the “security data sanitization” is a security function that completely
sanitizes the data retained inside the devices or the residual data, using the 3-time overwrite (A)_DoD 5220.22-M, the 7-time overwrite (A)_DoD 5220.22-M ECE, the 7-time overwrite (B)_BSI/VSITR
method, and/or the SSD Secure Erase as described below.
(depending on the MFP/Printer model).

3-time Overwrite (A)The 3-time overwrite (A) conforms to the U.S. Department of Defense DoD 5220.22-M method andoverwrites all data areas of the HDD.

All data areas are overwritten with a fixed value, thenoverwritten with the complement of the fixed value, then overwritten with random data, and lastly,
the data is verified.

So even with a sophisticated restoration process, it would be difficult to restore
22©2023 KYOCERA Document Solutions Inc.

the completely erased data.
The data is overwritten three times, and then the data is verified once.

7-time Overwrite (A)The 7-time overwrite (A) conforms to the U.S. Department of Defense DoD 5220.22-M ECE method
and overwrites all data areas of the HDD.

DoD 5220.22-M ECE is an extended variant of DoD

5220.22-M. All data areas are overwritten twice by the DoD 5220.22-M method and once withrandom data.

So even with a sophisticated restoration process, it would be extremely difficult torestore the completely erased data.
The data is overwritten seven times.

7-time Overwrite (B)The 7-time overwrite (B) conforms to the VSITR method defined by the German Federal Office forInformation Security (BSI) and overwrites all data areas of the HDD.
with zero (0x00) and then with the fixed value (0xff).

All data areas are overwrittenThis will be performed three times repeatedly.

Then the data areas will be overwritten with the fixed value (0xAA).

So even with a sophisticatedrestoration process, it would be extremely difficult to restore the completely erased data.

The data

is overwritten seven times.
When overwriting-erasing bulk data, the 7-time overwrite (A) and (B) methods may take longer
compared to the 3-time overwrite (A) method.



SSD Secure Erase

Two methods, Secure Erase and Cryptography Erase, are used to sanitize data. (The availability ofthe method depends on the MFP/Printer model).


Secure Erase meets the requirements of the Clear category of NIST Guideline for Media
Sanitization and erases all data areas of the SSD. All data areas are erased using the ATA
command SECURITY ERASE UNIT. The functionality provides a robust erasure of the SSD.
The data is erased once.



Cryptography Erase completely erases a cryptography key used to encrypt the data. This
makes restoring the data stored on the SSD inside the MFP is impossible.

The security data sanitization function has the following features: a sanitization schedule timer thatcan be set to be sure to conduct sanitization at the scheduled time; notification prior to sanitizationthat notifies an administrator and a service person prior to the sanitization; a sanitization completion
report (including the sanitized contents and the date of sanitization) that automatically prints uponcompletion of the data sanitization; a system lock after sanitization that disables users to use the
MFPs/Printers after performing the sanitization.

An administrator can set and execute the features.

So device settings can revert back to factory default settings.
Access Restriction“User Box”, “Job Box” and “FAX Box” that can store data can be created inside MFPs.

Access to

the data saved in the boxes can be restricted.
23©2023 KYOCERA Document Solutions Inc.

User Box
Users can create the “User Box” to store data in MFPs.
and password can be set for the respective boxes.

Box usage restriction, data retention period(Figure 5)

Figure 5
Box Password
User who can gain access to a box can be restricted with a password.

User is required to enter anappropriate password which is allowed to be set up to 16 characters (using the variety of characters
including upper case letters, lower case letters, digits and special characters) in advance.
Box Usage Restriction
Box capacity usage can be restricted to manage HDD capacity.
Owner Setting
User box can only be accessed by a user who has registered as an owner for his/her own user box,
and so cannot be accessed by unauthorized user.
or not can be set.

“Shared box” that is whether the box is shared

If shared, even user who is not set as an owner can access to the box.

Considering ease of use, the box can be efficiently protected against unauthorized access.

Thus

security is appropriately maintained.
Document Retention Period
After a certain period of time, document data stored can be automatically erased so that it does nothave to be kept for long period of time.

Therefore there would be only fewer chances for dataleakage.
Timing of Deletion
Once print job is finished, document data stored in a box will be automatically deleted. So, the datadeletion will not be forgotten.

This prevents the data from being viewed by unauthorized third party.

Job Box
Data for “Private Print”, “PIN Print”, “Quick Copy”, “Proof and Hold” and “Stored Job” can be stored
in a Job Box, however the box can be neither deleted nor created by users.
code-protected.

Thus access to the box is restricted.

The box can be PIN(Figure 6)

24©2023 KYOCERA Document Solutions Inc.

Figure 6
Automatic Deletion of Temporary Document Data Storage
Data temporarily saved in a box for “Private Print”, “PIN Print”, ”Quick Copy” and “Proof and Hold”
can be automatically deleted after the data has been stored for a specified time period.
is kept only for a required period of time.

The data

So, the risk of data disclosure is highly reduced.

FAX Box
A box that stores fax received data, located inside MFP, is called “FAX Box”.
can be stored in the fax box using a memory forward function.

The fax received dataAlso, the fax received data will beassigned to the respective boxes based on sender sub addresses or fax numbers so that prompt
confirmation on important document can be easily made.
on a panel of MFP.

The fax received data can be confirmed

Wanted fax can be printed out right away, whereas unwanted fax can be deleted.

(Figure 7)

Figure 7
BOX Password
User who can gain access to a box can be restricted with a password.

The user is required to enter

an appropriate password which is allowed to be set up to 16 characters (using a variety of characters
including upper case letters, lower case letters, digits and special characters) in advance.
Owner Setting
A box can only be accessed by a user who has registered as an owner for his/her own box, and socannot be accessed by unauthorized user.
can be set.

“Shared box” that is whether the box is shared or not

If shared, even user who is not set as an owner can access to the box.

Considering

maintaining conveniences, the box can be efficiently protected against unauthorized access.

Thus

security is appropriately maintained.

25©2023 KYOCERA Document Solutions Inc.

Timing of Deletion
Once the print job is finished, received data saved in a box can be automatically deleted. Otherwise,
keeping data longer than necessary could create risks. Timely deletion would help maintain efficient
security condition.

26©2023 KYOCERA Document Solutions Inc.

Print Security
Secure Print
Secure print is a print function for MFPs/Printers.

The secure print function can be used for printing

company confidential documents or personal documents to refrain from leaving unattended printed
documents with others or viewing them by other third people at the device.
Private Print
Private print is a function that once holds a print job in MFPs/Printers sent from a PC until user enters
his/her appropriate password through an operation panel of the MFPs/Printers.

Application software

requires the user to set an access code in the printer driver when sending a print job from the PC,
and then the user is required to enter the appropriate access code from the panel of the device whenprinting a document.

After printing is finished, the data will be erased.

is turned off before printing, the data will still be erased.

Even if main power switch

This helps maintain relatively high security

on the device.
Unauthorized Copy Prevention
When coping, the following functions can prevent unauthorized copy by enhancing document
security capabilities.
Text Stamp/Bates Stamp
Since text stamp function that shows importance of documentations at first sight is available, users
can choose a few stamps such as “Confidential”, “Do not duplicate” “Privacy”, depending on a variety
of stamps availability. Users even can edit the text stamp as they like.

The bates stamp function“Serial Number” will print the serial number of the machine used for the print-out and the function“Numbering which will print page numbers in sequence onto the printed documents.

In addition,

the function “Date” and “Username” is also available.
Security Watermark
Document material can be embedded with a security watermark pattern or text.

When printed

material embedded with the pattern is copied, the security watermark pattern will be visible.
clearly indicates that the unauthorized copy was made.

This(Figure 8)

Figure 827©2023 KYOCERA Document Solutions Inc.

FAX Security
FASEC (For Japan Only)FASEC is a security guideline for facsimile communication enacted by Communication andInformation network Association of JAPAN (CIAJ). The FASEC logo is applied to facsimile on MFPs,
which has fax functions to meet the functional requirements that are to prevent; wrong transmission,
wrong connection by dial tone detection, leaving unattended received fax sheets as well as to confirm
if data is properly transmitted.

Kyocera fax security functions are complied with the functional

requirements, and thus Kyocera has obtained the logo for its MFPs.

FAX Encrypted Communication
This is a communication method that original (data) is encrypted prior to sending at a sending side.
So, image data in transit cannot be tapped by third parties. Thus, there is no way for the third
parties to view and learn about the contents.

The incoming data is first decrypted and then printed

at a receiving side. This is relatively effective communication method when transmitting sensitiveand confidential documents that must not be disclosed to them.
This is only available between Kyocera devices which support the same encrypted communication
function.
The same encryption key is used for encrypting/decrypting the original communication data at thesending and receiving side (device).

When the keys are not identical at the sending and receivingside (device), encrypted communication cannot be performed. Therefore, the two parties (i.e.,
sending and receiving side) have to mutually determine and register the same encryption key,
respectively in advance prior to encrypted communication.
Send/Receive Restriction
This is a function that enables the device to send/receive fax only if the predeterminedcommunication condition (i.e., permitted fax number and permitted ID number) are met. The
function enables to restrict fax destination for communication.

When reception restriction is applied

to a rejection list, inbound fax sent from a sender registered on a rejection fax number list as wellas who do not register their local fax number will be rejected.

As for fax transmissions, faxes canonly be transmitted to destinations registered on a permitted telephone list and an address book.
Wrong Transmission Prevention
To prevent important documents from being transmitted to the wrong destinations, users will beprompted to enter recipient’s fax numbers twice prior to fax transmissions.

The wrong transmission
28©2023 KYOCERA Document Solutions Inc.

prevention function can be set for an address book, ten-keys and speed dial. In addition, the function
prohibits recalling address destinations.

The previous destination is not maintained and thus

prevents transmitting another document to the previous send destination.

This is also effective inpreventing information leakage because the destinations cannot be viewed by other people.
Furthermore, the destination information will be deleted right after logout when user authenticationis on.
Confirmation Entry
Users will be prompted to enter the same fax number twice for confirmation when they wish to senda fax by specifying the fax number to directly enter with numeric keys. The send destination will beenabled only when the same fax number entries twice are confirmed.

This prevents wrong

transmissions by pressing wrong keys. The function can be set by users.
Prohibition of FAX Number Direct Entry with Numeric Keys
Direct entry with numeric keys through the operational panel for fax transmission can be restricted.
This function allows users to transmit faxes only to the send destinations registered on a destination
list.

So users will not be able to send faxes except the recipients listed on the address book andone-touch keys.

This helps prevent wrong transmissions caused by entering wrong fax numbers

and unauthorized usage.
Destination Confirmation Prior to Transmission
Upon pressing [Start] key, the send destinations will be displayed on the screen for users to checkwhen the destination confirmation prior to transmission function is set.

The completion

confirmation key would not be enabled unless all the destinations had been displayed on the screen.
Since users can re-confirm the destinations before sending faxes, the function will be able to help
prevent wrong transmissions.
Use Prohibition Time
This is a security function with the capability to set a time period which prohibits printing received
faxes.

When the use prohibition time is set, all operations including printing, copy, print, received

mail or USB, transmission and network fax transmission as well as printing fax in the specified period
will be prohibited.

This is PIN code-protected and can also be temporarily canceled.

This prevents

unauthorized use of MFPs like printing data during night time with less people.
Sub Address Communication
Sub Address Communication is a communication function that sends/receives data with a sub
address and a password, which are complied with the recommendation from ITU-T (International
Telecommunication

Union

Telecommunication

Standardization

Sector).

Sub

address

communication function enables communications with other company’s machines as well, such asconfidential communication (i.e., communication to send to the certain box of the receiving machine)or polling communication (i.e., communication to receive the original on the sending machine
through operation from the receiving machine) which used to be available only for Kyocera machines.
When the sub address communication function is used, for example the incoming data will be saved
29©2023 KYOCERA Document Solutions Inc.

in the sub address box. So, the function will be able to help perform relatively securecommunications.
Sub Address Confidential Transmission (Send/Receive)
After sub address confidential box is created in the recipient machine, an important document, whichmust not be disclosed to other people, can be sent to the box with keeping confidentiality byidentifying a sub-address and a password. The received document is saved in the box registered inadvance without printing immediately upon reception.

Thus the received data can be printed

without being viewed by anyone.
Sub-Address Bulletin Board Transmission (Send/Receive)
When recipient machines support the sub address bulletin board transmission function, user’s
documentation will be securely transmitted without information leakage.
Memory Forward
With this function, the received images can be forwarded to other fax machines or computers, or
printed as well, upon fax reception.

When the forward setting is on, all incoming images will beable to be forwarded to the predetermined addresses (destinations).

This can be applied to another

fax, sending mail, SMB (sendfile) and FTP sending. Also, received images can be forwarded to thebox being set in MFP, and then stored.
tray of the device.

This prevents unattended (received) fax sheets left on the(Figure 9)

Figure 9
Security Measures Against Unauthorized Access
The fax function and network function are structurally separated.
line are processed by the fax function.

Incoming data via a telephone

The structure prevents unauthorized access from thetelephone line into the network via a fax function, which operates on a MFP.

30
©2023 KYOCERA Document Solutions Inc.

Send Security
Destination Confirmation Prior to Send
Users can confirm on the send destination (i.e., address numbers) and subject on the screen before
sending.

Thus, this helps prevent sending to the wrong address. The information can always be

shown on the operational panel prior to sending as user set.
Prohibition of Broadcast Transmission
Broadcast Transmission is a function that transmits the same document to the plural destinations by
one-time operation.

This function enables administrators to set prohibition or permission.

Whensetting prohibition, the group including 2 or more send destinations cannot be selected.

This

prevents transmission to the unintended destinations caused by unintentionally adding send
destinations to the group.
New (Address) Destination Entry
Direct entry through the operational panel is restricted so that the destinations registered earlier on
the destination list such as an address book or one-touch keys, can only be the designateddestinations.

This effectively prevents unauthorized use or wrong sending caused by wrong fax

number entry.
Encrypted PDF
The Encrypted PDF function enables users to choose PDF file or high-compressed PDF for the fileformat, and securely protects the scanned data by encrypting and setting password.

Restriction

can be applied when opening, printing, or modifying the received PDF file by entering the correct
password.
Digital Signature to File
This feature enables users to enhance security by adding a digital signature to files.
A device certificate and a private/public key pair are registered in the Kyocera MFP in advance.
After scanning, the device certificate and the key pair are used to generate a digital signature andthen a file with the digital signature is generated by the MFP.
This process gives the recipient the ability to verify which MFP generated the file with the digital
signature, and whether the file has been altered after generating the file with the digital signature.
FTP Encrypted Send
The FTP Encrypted Send is performed using TLS to encrypt the communication channel.
in transit maintains secure.

Thus data

This can highly minimize risks of modifying data in transit or

wiretapping.

31©2023 KYOCERA Document Solutions Inc.

Device Management
Job Management
Information concerning jobs in queue or logs can be checked at the device.

Four types of status

including “Print Job”, “Send Job”, “Stored Job” and “Reserved Job”, and three types of job log
including “Print job”, “Send Job” and “Stored Job” can be available.

Detailed information for

specified job like username, time and destination, can be referred and used to help trace as needed.
Also, when printing job using printer driver, whether or not the file is used for job name, can be set.
(Figure 10)

Figure 10
Authorization to Refer Job Information
The Job Log Reference Screen can be switched corresponding to the user’s authorization.
Authorization to refer to job information and fax transmission log are set for the detailed job status
information and job log, respectively.
his/her own job log information.

When user authentication is on, only user can view and check

All job jog information is displayed on the screen after login as anadministrator.
Audit Log
Audit log for MFPs/Printers can be obtained.
& time and its result can be checked.
communication error log.

A record of operating the device with username, date

Audit log includes login log, device log and security

By referring to the log, the administrator of the MFPs/Printers can checkif the device is securely used or not exposed to risks.
Login Log
User authentication login log can be stored. In the event of unauthorized operation, alteration orleakage of documentations in the MFPs/Printers, login log is used to investigate and help trace theunauthorized access.
Device Log
FW update and setting changes on MFPs/Printers can be logged.

The contents being changed fromsystem menu by the administrator will be recorded as well.

32©2023 KYOCERA Document Solutions Inc.

Security Communication Error Log
Administrator can confirm if the network communication is properly performed by checking thesecurity network communication error log.

In the event that a record of frequent communication

failures is found, the potential unauthorized access will be able to be investigated.
Log Management
The Log Management helps manage audit log and job log, and will be used to help trace the potential
source of the security incidents.
Send Job Log (e-mail address)
The respective logs can be sent by e-mail to the e-mail address specified by the administrator when
the number of the logs reaches a predetermined number.
SyslogUsing the syslog protocol, an audit log for MFPs/Printers can be sent to a SIEM (Security Informationand Event Management) server*6 in real-time.

The audit log can be collected and centrally managed.

*6: The SIEM server must be configured in the user’s environment.
Integrity Verification of the Security Functions
The following functions are used to verify the integrity of the security functions on our products.
This is used to verify if the execution modules of the security functions have not been altered andhave been properly working.

Similarly, data integrity that the security functions use can be verified.

Digitally-Signed Firmware
Digital signature is attached to the firmware to ensure its validity.
operation of MFPs/Printers.

The firmware controls the

The digitally-signed firmware prevents alteration by malicious persons.

MFPs/Printers can be protected against damage and unauthorized use as stepping stones for
intrusion into networks.
Secure Boot
Secure Boot is a feature that makes sure that an MFP starts up with using the authorized firmware
before execution.

Firmware validity can be verified by applying a digital signature to the firmware.

When the MFP starts up, the firmware is deployed on the RAM. At this time, it is confirmed that thehash value of the firmware uploaded to the MFP and the hash value created from the signature are
the same. Even if a malicious person creates unauthorized firmware, it cannot pass through thevalidity verification using the digital signature. Therefore, even if a firmware is altered by a malicious
person, it can never be executed. The Secure Boot prevents the destruction of the devices by using
the MFP as a stepping stone.
Run Time Integrity Check (RTIC)
Run Time Integrity Check is a feature that regularly verifies if the validity of the firmware ismaintained during the operation of the MFP without altering the firmware deployed on RAM after the
MFP starts up. Even if the firmware is maliciously re-written, it can be detected and a warning is
33©2023 KYOCERA Document Solutions Inc.

issued as a system error. RTIC can be expected to be more effective as a security measure against
firmware alteration when used with the Secure Boot feature.
Allowlisting
Allowlisting is provided as a malware prevention measure.

In the unlikely event that an

unauthorized program file containing malware is installed, allowlisting blocks the program file
execution on Kyocera MFPs/ Printers.

The allowlist installed in the MFP/Printer includes only trusted

program files such as Kyocera-approved, authorized, or known program files. If an untrusted
program file, which is not included in the allowlist, is found, allowlisting automatically prevents the
program file from running.
Usage Restriction
The following usage restrictions can be applied to the Kyocera MFPs/Printers.

Since operations on

the MFPs/Printers can be restricted, access to data stored on the MFPs/Printers will be able to be
restricted as well.
Interface Block
Access through the device’s interface such as USB device, USB host, Optional Interface (Slot 1) andOptional Interface (Slot 2) can each be blocked. Network interface can be restricted on a protocol
basis.
USB Storage Class Logical BlockWhen a USB memory is connected to a USB port of MFPs/Printers, risks for data leakage orunauthorized access to data on the MFPs/Printers can exist.

Administrator can enable the USB

storage class feature to be turned off (disabled), but still allows using ID card reader connected toa USB host interface of the MFPs/Printers. On the other hand, Kyocera MFPs/Printers have the featurethat can restrict usage for the USB memory, even if the USB memory is inserted into the USB hostinterface of the MFPs/Printers.

This prevents data leakage from the USB interface via USB memory

as well as viruses from spreading.
Operational Panel Lock
Operation through the operational panel of MFPs/Printers can be restricted.

Partial Lock function

has three stages that are: setting concerning input/output through the panel, setting concerning job
execution and setting concerning papers.
administrator wishes, are enabled.

Settings, which are associated with prohibition level that

The operational panel lock has ability to prohibit a system menu

operation and a job cancelation operation.

This prevents unauthorized operations on MFPs/Printers.

34©2023 KYOCERA Document Solutions Inc.

1-2-28 Tamatsukuri, Chui-ku, Osaka 540-8585, Japan
Phone: +81-6-6764-3555

KYOCERA Document Solutions does not warrant that any specifications mentioned will be error-free. Specifications are subject to change without notice. Information is correct at time ofgoing to press. All other brand and product names may be registered trademarks or trademarks of their respective holders and are hereby acknowledged.

©2023 KYOCERA Document Solutions Inc.