skip to main text

Generating Server Certificate (Self-signed Certificate)

When you use SSL connection via IPv6 network, you need to generate an IPv6 server certificate using the printer.

Generate the server certificate from Remote UI.

Follow the procedure below.

  1. Step1 Checking Printer's IP Address

  2. Step2 Generating Server Certificate

  3. Step3 Checking Generated Server Certificate


  • If you generate an IPv6 server certificate, you cannot use SSL communication via IPv4. In addition, a warning message may appear if you are using Remote UI.

    To reset the IPv6 server certificate, operate in the following order from the Remote UI.

    Security > SSL/TLS settings > Delete key and certificate > OK

Checking Printer's IP Address

  1. Check that printer is turned on.

  2. Display the HOME screen.

    If the HOME screen is not displayed, select the HOME button.

  3. Use the updown buttons to select LAN settings and press the OK button.

  4. Use the updown buttons to select the enabled LAN and press the OK button.

    Diagonal lines are displayed for disabled LAN icons.

  5. Use the updown buttons to check the value on IPv6 link-local address.

    Write down the value on IPv6 link-local address for your reference when you open Remote UI and generate a server certificate.

Generating Server Certificate

  1. Open web browser on your smartphone, tablet, or computer and enter the printer IP address.

    Enter as following in the URL field of the web browser.


    On "XXXX::XXXX:XXXX:XXXX:XXXX", enter the abbreviation value on "3-2-16 Link Local Address".

    The top screen of Remote UI appears.

  2. Select Log in on Remote UI.


    • If you specify the administrator password, enter the password.
  3. Select Security.

  4. Select SSL/TLS settings.

  5. Select Generate key and certificate.

  6. Select Generate self-signed cert.

    The Generate self-signed cert screen appears.

    Specify each setting item.

    • Signature algorithm

      Select SHA256.

    • Public key length (bits)

      Select 2048 bits.

    • Specify the expiration date.

      Enter the date you generated the server certificate on Valid from.

      Enter the date the server certificate expires on Valid to.

    • Enter the common name.

      Enter the value in Common name you checked and wrote down on "3-2-16 Link Local Address".


      • When you enter the common name, add [ ] to each end of the printer's IP address.
      • Do not use a comma or make a space for the common name.
  7. Select Next.

    You need not enter anything on Country, State or province, Locality, Organization, Organizational unit or Subject Alternative Names.

  8. Select Generate.

    The server certificate starts to be generated.

    When the server certificate has been generated, Generated a self-signed certificate. appears.

  9. Select Restart LAN.

    LAN will be restarted.

    When LAN has been restarted, Printer status on Remote UI appears.


    • If you cannot access to Remote UI after you restart LAN, reload your web browser.

Checking Generated Server Certificate

  1. Select Security on Remote UI.

  2. Select SSL/TLS settings.

    The SSL/TLS settings screen appears.

  3. Select Check key and certificate.

    The Check key and certificate screen appears.

    Make sure the issuer of the root certificate is displayed on Issued by, and the value you entered on Common name on Subject.