SSL/TLS
Device Management > Configuration > Security >
SSL/TLS
Configure settings for encrypting and sending data using SSL (Secure Socket Layer) or TLS (Transport Layer Security).
Note
- Settings configured here relate to the following interfaces:
Ethernet and wireless LAN. - Settings on this page can be changed by the following administrator:
- Network Administrator
SSL/TLS
For IPv4 and IPv6 networks, select whether secure SSL or TLS data encryption is active or inactive.
If Active is selected, an encryption mode can be selected in the Permit SSL/TLS Communication list.
Note
- SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2 are supported. To specify the version of SSL/TLS that you want to use, configure the SSL/TLS Version settings accordingly.
- For both IPv4 and IPv6 networks, if Port 80 under HTTP is set to Close on the Configuration - Security - Network Security page, Active is displayed but cannot be changed. Also, an error might occur if you attempt to set SSL/TLS to Inactive with Port 80 closed.
Permit SSL/TLS Communication
Select an encryption mode if Active is selected for SSL/TLS.
Note
- The Ciphertext Only option is not available when the status indicated for Certificate Status is None or Requesting.
Ciphertext Only
Permits encrypted communications only.
Prohibits communication via Web browser if encryption is unavailable.
Ciphertext Priority
Encrypts and transmits data when encryption is available.
If encryption is unavailable, permits transmission of unencrypted data.
Ciphertext/Cleartext
Determines whether to perform encrypted communication depending on the protocol specified when the Web browser is connected to the device.
When the Web browser is connected to the device via "https://device IP address or host name", encrypts and transmits data if encryption is available;
otherwise (i.e. if encryption is unavailable) prohibits communication via the Web browser.
When the Web browser is connected via "http://device IP address or host name", transmits data without encryption.
Certificate Status
Displays whether the device certificate required for SSL/TLS encrypted communication is installed.
Note
- When None or Requesting is displayed, SSL/TLS encrypted communication is disabled even if Active is selected in the SSL/TLS list. To install the device certificate, use the Device Management - Configuration - Security - Device Certificate page.
None
A device certificate is not installed.
Requesting
A request for a device certificate has been submitted to a Certification Authority (CA).
Installed
A device certificate is installed.
Installed/Requesting
A device certificate is already installed, and a new request for a device certificate has been submitted to a Certification Authority (CA).
SSL/TLS Version
Specify the version of SSL/TLS that you want to use.
Note
- If the SSL/TLS Version settings are all set to Inactive when SSL/TLS (IPv4 and/or IPv6) is enabled, SSL/TLS communication will fail.
Encryption Strength Setting
Select the key lengths of the encryption algorithms to use for SSL/TLS communication.
Note
- Depending on the settings for SSL/TLS Version, available settings may vary.
- If your Web browser does not support all of the selected encryption key lengths, you will not be able to access the machine using that browser. Check the specification of your Web browser.
- SSL/TLS communication will fail if you do not select at least one encryption key length when SSL/TLS (IPv4 and/or IPv6) is enabled.
Buttons
Refresh
Click to update the currently displayed information.
Note
- Before making the settings, click Refresh to obtain the machine's current status.
OK
Click to apply the settings.
Cancel
Click to cancel the settings.