values should be those that pertain to the particular device being configured. Also note that in the evaluated configuration
IPv6 is disabled.
1. Administrator Password:
Change the Administrator password as soon as possible. Reset the Tools password periodically.
Set the Administrator password to a minimum length of eight alphanumeric characters
Change the Administrator password once a month and
Ensure that all passwords are strong passwords (e.g., passwords use a combination of alphanumeric and non-
alphanumeric characters; passwords don't use common names or phrases, etc.).
To change the Administrator password from the Web UI, follow the instructions under "Changing the System
Administrator Password" in Section 2 of the SAG.
2. Authentication:
i.
Establish local authentication at the device by following the instructions for "Configuring Local Authentication
Settings" in Section 4 of the SAG.
Set up unique user accounts with appropriate privileges on the device for all users who require access to the device
by following the "Adding User Information to the User Database" instructions in Section 4 of the SAG.
ii.
Establish network (remote) authentication access to network accounts by following the "Configuring Network
Authentication Settings" instructions in Section 4 of the SAG to set up an Authentication Server.
In the evaluated configuration the only allowable Authentication Types are Kerberos (Unix, Linux), Kerberos
(Windows ADS) or LDAP.
When configuring network authentication using LDAP/LDAPS enable SSL by following the instructions in Step 6 for
"Editing LDAP Server Information" under "LDAP" in Section 3 of the SAG, making sure that 'Secure LDAP with SSL' is
enabled.
iii.
Establish user authentication via a Smart Card by following either the "Configuring Smart Card Authentication
Settings" instructions in Section 4 of the SAG.
3. Authorization:
Either local authorization or network authorization using LDAP is allowed in the evaluated configuration.
Local Authorization
i.
Establish local authorization at the device by following the instructions for "Adding User Information to the User
Database" in Section 4 of the SAG.
ii.
Set the permission for all Non-Logged In Users Roles (see "Configuring User Roles" in Section 4 of the SAG) to be
either Not Allowed or Not Allowed & Hidden, as appropriate, for all listed services and pathways.
Network Authorization
i.
Establish remote authorization using LDAP by following the "Configuring Authentication Server Settings for LDAP"
instructions in Section 4 of the SAG.
Network Authorization using an SMB server is not part of the evaluated configuration and should not be used.
4. Personalization: To enable personalization perform the following:
In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
Click Login Methods.
Select either Local Authentication or Network Authentication.
Select the Retrieve Profile Information for Authenticated User from LDAP checkbox.
Click Save.
Configure personalization by following the instructions for "Editing LDAP Server Information" under "LDAP" in Section 3
of the SAG.
5. Immediate Image Overwrite: Follow the instructions for 'Enabling Immediate Image Overwrite' in Section 4 of the
SAG to enable Immediate Image Overwrite from the Web UI.
Immediate Image Overwrite is enabled by default at the factory when the device is first delivered.
6. On Demand Image Overwrite: Follow the instructions 'Manually Deleting Image Data' under Overwriting Image Data in
Section 4 of the SAG to enable a manual On Demand Image Overwrite (i.e., an On Demand Image Overwrite initiated
2
Halaman Cetak