XEROX WorkCentre
5735/5740/5745/5755/5765/5775/5790
Information Assurance Disclosure Paper
Ver. 2.00, March 2011
Page
13 of 50
Table 8 User Interface memory components
2.6.
Marking Engine (also known as the Image
Output Terminal or IOT)
2.6.1.
Purpose
The Marking Engine performs copy/print paper feeding and transport, image marking and fusing, and document
finishing. Images are not stored at any point in these subsystems.
2.6.2.
Hardware
The marking engine is comprised of paper supply trays and feeders, paper transport, laser scanner, xerographics, and
paper output and finishing. The marking engine contains a CPU, BIOS, RAM and Non-Volatile Memory.
2.6.3.
Control and Data Interfaces
Images and control signals are transmitted from the copy controller to the marking engine across a proprietary
interface.
2.7.
System Software Structure
2.7.1.
Open-source components
Open-source components in the connectivity layer implement high-level protocol services. The security-relevant
connectivity layer components are:
•
Apache 2.2.11, with mod_ssl integrated (http and https)
•
PHP 5.3.1
•
OpenSSL 0.9.8l (SSL)
•
SAMBA 3.0.30 (SMB)
•
Netsnmp 5.0.9 (SNMPv3)
2.7.2.
OS Layer in the Controller
The OS layer includes the operating system, network and physical I/O drivers. The controller operating system is
Wind River Linux, kernel v. 2.6.20+. Xerox may issue security patchesfor the OS, in which case the Xerox portion of
the version number (i.e.. after the ‘+’ sign) will be incremented.
The crypto library for IPSec is provided by the kernel.
IP Filtering is also provided by the kernel.