Administrator Information > Advanced Security Settings > Using a Digital Certificate ❏ Self-signed Certificate This is a certificate that the scanner signs and issues itself. It is also called the root certificate. Because the issuer certifies itself, it is not reliable and cannot prevent impersonation. Use it when making the security setting and performing simple SSL/TLS communication without the CA- signed Certificate. If you use this certificate for an SSL/TLS communication, a security alert may be displayed on a web browser because the certificate is not registered on a web browser. You can use the Self-signed Certificate only for an SSL/TLS communication.
Related Information & “Configuring a CA-signed Certificate” on page 213 & “Updating a Self-signed Certificate” on page 216 & “Configuring a CA Certificate” on page 217 Configuring a CA-signed Certificate Obtaining a CA-signed Certificate To obtain a CA-signed certificate, create a CSR (Certificate Signing Request) and apply it to certificate authority. You can create a CSR using Web Config and a computer. Follow the steps to create a CSR and obtain a CA-signed certificate using Web Config. When creating a CSR using Web Config, a certificate is the PEM/DER format. 1. Access Web Config, and then select the Network Security tab.
Next, select SSL/TLS > Certificate or IPsec/IP Filtering > Client Certificate or IEEE802.1X > Client Certificate . Whatever you choose, you can obtain the same certificate and use it in common. 2. Click Generate of CSR . A CSR creating page is opened. 3. Enter a value for each item. Note: Available key length and abbreviations vary by a certificate authority. Create a request according to rules of each certificate authority. 4. Click OK . A completion message is displayed. 5. Select the Network Security tab. Next, select SSL/TLS > Certificate , or IPsec/IP Filtering > Client Certificate or IEEE802.1X > Client Certificate . 6.
Click one of the download buttons of CSR according to a specified format by each certificate authority to download a CSR to a computer. c Important: Do not generate a CSR again. If you do so, you may not be able to import an issued CA-signed Certificate. 213