❏
Self-signed Certificate
This is a certificate that the scanner signs and issues itself. It is also called the root certificate. Because the issuer
certifies itself, it is not reliable and cannot prevent impersonation.
Use it when making the security setting and performing simple SSL/TLS communication without the CA-
signed Certificate.
If you use this certificate for an SSL/TLS communication, a security alert may be displayed on a web browser
because the certificate is not registered on a web browser. You can use the Self-signed Certificate only for an
SSL/TLS communication.
Related Information
&
“Configuring a CA-signed Certificate” on page 225
&
“Updating a Self-signed Certificate” on page 228
&
“Configuring a CA Certificate” on page 229
Configuring a CA-signed Certificate
Obtaining a CA-signed Certificate
To obtain a CA-signed certificate, create a CSR (Certificate Signing Request) and apply it to certificate authority.
You can create a CSR using Web Config and a computer.
Follow the steps to create a CSR and obtain a CA-signed certificate using Web Config. When creating a CSR using
Web Config, a certificate is the PEM/DER format.
1.
Access Web Config, and then select the
Network Security
tab. Next, select
SSL/TLS
>
Certificate
or
IPsec/IP
Filtering
>
Client Certificate
or
IEEE802.1X
>
Client Certificate
.
Whatever you choose, you can obtain the same certificate and use it in common.
2.
Click
Generate
of
CSR
.
A CSR creating page is opened.
3.
Enter a value for each item.
Note:
Available key length and abbreviations vary by a certificate authority. Create a request according to rules of each
certificate authority.
4.
Click
OK
.
A completion message is displayed.
5.
Select the
Network Security
tab. Next, select
SSL/TLS
>
Certificate
, or
IPsec/IP Filtering
>
Client
Certificate
or
IEEE802.1X
>
Client Certificate
.
6.
Click one of the download buttons of
CSR
according to a specified format by each certificate authority to
download a CSR to a computer.
c
Important:
Do not generate a CSR again. If you do so, you may not be able to import an issued CA-signed Certificate.
>
>
225