Brother DCP-8155DN User Manual

SSL Guide

(Secure Socket Layer)

To find basic information about network and advanced network features of your Brother machine: uu Network User's Guide.

To download the latest manual, please visit the Brother Solutions Center at (http://solutions.brother.com/) latest drivers and utilities for your machine, read FAQs and troubleshooting tips or learn about special printing solutions from the Brother Solutions Center.

Not all models are available in all countries.

. You can also download the

Version A

ENG

Applicable models

Note

This User’s Guide applies to the following models.

HL-5450DN(T)/5470DW(T)/6180DW(T)

DCP-8110DN/8150DN/8155DN/8250DN/MFC-8510DN/8710DW/8810DW/8910DW/8950DW(T)

Definitions of notes

We use the following icon throughout this User’s Guide:

Notes tell you how you should respond to a situation that may arise or give tips about how the operation works with other features.

Trademarks

The Brother logo is a registered trademark of Brother Industries, Ltd.

Microsoft, Windows, Windows Server and Internet Explorer are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.

Windows Vista is either a registered trademark or trademark of Microsoft Corporation in the United States and/or other countries.

Each company whose software title is mentioned in this manual has a Software License Agreement specific to its proprietary programs.

Any trade names and product names of companies appearing on Brother products, related documents and any other materials are all trademarks or registered trademarks of those respective companies.

IMPORTANT NOTE

 This product is approved for use in the country of purchase only. Do not use this product outside the

country of purchase as it may violate the wireless telecommunication and power regulations of that country.

 In this manual, the screens of the MFC-8950DW(T) are used unless specified.

 Windows® XP in this document represents Windows® XP Professional, Windows® XP Professional x64

Edition and Windows

 Windows Server

x64 Edition.

 Windows Server

R2.

 Windows Vista

 Windows

7 in this document represents all editions of Windows® 7.

in this document represents all editions of Windows Vista®.

XP Home Edition.

2003 in this document represents Windows Server® 2003 and Windows Server® 2003

2008 in this document represents Windows Server® 2008 and Windows Server® 2008

 Please go to the Brother Solutions Center at http://solutions.brother.com/

page to download the other manuals.

and click Manuals on your model

1 Introduction 1

Overview....................................................................................................................................................1

Brief History of SSL ...................................................................................................................................1

Benefits of using SSL ................................................................................................................................1

Using Certificates for device security.........................................................................................................2

2 Digital Certificate for SSL communication 4

Digital Certificate Installation .....................................................................................................................4

Creating a self-signed certificate .........................................................................................................6

Creating a Certificate Signing Request (CSR) ....................................................................................7

How to install the certificate to your machine ......................................................................................9

Choosing the certificate.....................................................................................................................10

Installing the self-signed certificate or pre-installed certificate

onto Windows Vista

with administrator rights.................................................................................................................12

Installing the self-signed certificate or pre-installed certificate

for Windows

Import and export the certificate and private key.....................................................................................17

How to import the self-signed certificate, the certificate issued by a CA, and the private key...........17

How to export the self-signed certificate, the certificate issued by a CA, and the private key...........17

Import and export a CA certificate .....................................................................................................18

Managing multiple certificates .................................................................................................................19

, Windows® 7 and Windows Server® 2008 for users

XP and Windows Server® 2003 users....................................................................14

3 Managing your network machine securely using SSL/TLS 20

Secure Management using Web Based Management (web browser) ....................................................20

4 Printing documents securely using SSL 21

Printing documents securely using IPPS for Windows®..........................................................................21

Windows Windows Vista

XP and Windows Server® 2003.......................................................................................21

, Windows® 7 and Windows Server® 2008..............................................................23

5 Sending or Receiving (for DCP and MFC models) an E-mail securely 25

Configuration using Web Based Management (web browser) ................................................................25

Sending or Receiving (for DCP and MFC models) an E-mail securely using SSL/TLS ....................26

6 Troubleshooting 27

Overview..................................................................................................................................................27

Identifying your problem ....................................................................................................................27

Printing the Printer Settings Page (For HL-5450DN(T)) ..........................................................................29

Printing the Network Configuration Report (For other models)................................................................29

Network terms and concepts ...................................................................................................................31

SSL technical overview .....................................................................................................................31

Network terms ...................................................................................................................................32

iii

Introduction 1

Overview 1

Secure Socket Layer (SSL) is an effective method of protecting data which is sent over a local or wide area network. It works by encrypting data sent over a network, i.e. a print job, so anyone trying to capture it will not be able to read it as all the data will be encrypted.

It can be configured on both wired and wireless networks and will work with other forms of security such as WPA keys and firewalls.

Brief History of SSL 1

SSL was originally created to secure web traffic information, in particular data sent between web browsers

and servers. For example, when you use Internet Explorer little padlock in the web browser, you are using SSL. It then grew to work with other applications such as Telnet, printers and FTP software in order to become a universal solution for online security. Its original design intentions are still being used today by many online retailers and banks to secure sensitive data, such as credit card numbers, customer records etc.

for Internet Banking and you see https:// and the

SSL uses extremely high levels of encryption and is trusted by banks all over the world since it is unlikely that it will be broken.

Benefits of using SSL 1

The sole benefit to using SSL on Brother machines is to provide secure printing over an IP network by restricting unauthorized users from being able to read data sent to the machine. Its key selling point is that it can be used to print confidential data securely. For example, a HR department for a large company may be printing wage slips on a regular basis. Without encryption, the data contained on these wage slips can be read by other network users. However, with SSL, anyone trying to capture the data will only see a confusing page of code and not the actual wage slip.

Introduction

Note

Using Certificates for device security 1

Your Brother machine supports the use of multiple security certificates allowing secure management, authentication and communication with the machine. The following security certificate features can be used with the machine. When you print a document or use Web Based Management (web browser) securely using SSL, you must install the certificate onto your computer. See Digital Certificate Installation uu page 4.

 SSL/TLS communication

 SSL communication for SMTP/POP3

The Brother machine supports the following certificates.

 Pre-installed certificate

Your machine has a pre-installed self-signed certificate.

Using this certificate, you can easily use the SSL/TLS communication without creating or installing a certificate. If you want to use your machine's Google Cloud Print feature, you can use this pre-installed certificate to configure the Google Cloud Print settings securely. For more information on Google Cloud Print, go to the Brother Solutions Center at http://solutions.brother.com/ page to download the Google Cloud Print Guide.

and click Manuals on your model

The pre-installed self-signed certificate cannot protect your communication from spoofing. We recommend using a certificate that is issued by a trusted organization for better security.

 Self-signed certificate

This print server issues its own certificate. Using this certificate, you can easily use the SSL/TLS communication without having a certificate from a CA. (See Creating a self-signed certificate uu page 6.)

 Certificate from a CA

There are two methods for installing a certificate from a CA. If you already have a certificate from a CA or if you want to use a certificate from an external trusted CA:

• When using a CSR (Certificate Signing Request) from this print server. (See Creating a Certificate Signing Request (CSR) uu page 7.)

• When importing a certificate and a private key. (See Import and export the certificate and private key uu page 17.)

Introduction

Note

 CA certificate

If you use a CA certificate that identifies the CA (Certificate Authority) itself, you must import a CA certificate from the CA, prior to the configuration. (See Import and export a CA certificate uu page 18.)

• If you are going to use SSL/TLS communication, we recommend that you contact your system administrator first.

• When you reset the print server back to its default factory settings, the certificate and the private key that are installed will be deleted. If you want to keep the same certificate and the private key after resetting the print server, export them before resetting and re-install them. (See How to import the self-signed certificate, the certificate issued by a CA, and the private key uu page 17.)

Note

Digital Certificate for SSL communication2

Digital Certificate Installation 2

Printing over a secured network or secure management using Web Based Management (web browser) requires a digital certificate to be installed on both the machine and device which is sending data to the machine, e.g. a computer. Your machine has a pre-installed certificate. In order to configure the certificate, the user needs to log onto the machine remotely through a web browser using its IP address.

We recommend Windows® Internet Explorer® 7.0/8.0 or Firefox® 3.6 for Windows® and Safari 4.0/5.0 for Macintosh. Please also make sure that JavaScript and Cookies are always enabled in whichever browser you use. If a different web browser is used, make sure it is compatible with HTTP 1.0 and HTTP 1.1.

a Start your web browser. b Type “http://machine’s IP address/” into your browser's address bar (where “machine’s IP address” is the

IP address of the machine or the print server name).

 For example: http://192.168.1.2/

c No password is required by default. If you have previously set a password, enter it and press . d Click Network. e Click Security. f Click Certificate.

Digital Certificate for SSL communication

Note

g You can configure the certificate settings.

To create a self-signed certificate using Web Based Management, go to Creating a self-signed certificate uu page 6. To create a Certificate Signing Request (CSR), go to Creating a Certificate Signing Request (CSR) uu page 7.

1 To create and install a self-signed certificate

2 To use a certificate from a Certificate Authority (CA)

• The functions that are grayed and unlinked indicate they are not available.

• For more information on configuration, see the Help text in the Web Based Management.

Digital Certificate for SSL communication

Note

Creating a self-signed certificate 2

a Click Create Self-Signed Certificate. b Enter a Common Name and a Valid Date.

• The length of the Common Name must be less than 64 characters. Enter an identifier such as an IP address, node name or domain name to use when accessing this machine through SSL/TLS communication. The node name is displayed by default.

• A warning will pop-up if you use the IPPS or HTTPS protocol and enter a different name in the URL than the Common Name that was used for the self-signed certificate.

c You can choose the Public Key Algorithm and Digest Algorithm settings from the pull-down list. The

default settings are RSA(2048bit) for Public Key Algorithm and SHA256 for Digest Algorithm.

d Click Submit. e The self-signed certificate is created and saved in your machine's memory successfully.

Digital Certificate for SSL communication

Note

Creating a Certificate Signing Request (CSR) 2

A Certificate Signing Request (CSR) is a request sent to a CA in order to authenticate the credentials contained within the certificate.

We recommend that the Root Certificate from the CA be installed on your computer before creating the CSR.

a Click Create CSR. b Enter a Common Name and your information, such as Organization.

Your company details are required so that a CA can confirm your identity and attest to the outside world.

• A warning will pop-up if you enter a different name in the URL than the Common Name that was used for the certificate.

• The length of the Organization, the Organization Unit, the City/Locality and the State/Province must be less than 64 characters.

•The Country/Region should be an ISO 3166 country code composed of two characters.

• If you are configuring the X.509v3 certificate extension, choose the Configure extended partition check box and then choose Auto (Register IPv4) or Manual.

c You can choose the Public Key Algorithm and Digest Algorithm settings from the pull-down list. The

default settings are RSA(2048bit) for Public Key Algorithm and SHA256 for Digest Algorithm.

+ 25 hidden pages

Brother DCP-8155DN User Manual

Applicable models

Definitions of notes

Trademarks

IMPORTANT NOTE

Table of Contents

Introduction 1

Overview 1

Brief History of SSL 1

Benefits of using SSL 1

Using Certificates for device security 1

Digital Certificate for SSL communication2

Digital Certificate Installation 2

Creating a self-signed certificate 2

Creating a Certificate Signing Request (CSR) 2