skip to main text

Generating Server Certificate (Self-signed Certificate)

When you use SSL connection via IPv6 network, you need to generate an IPv6 server certificate using the printer.

Generate the server certificate from Remote UI.

Follow the procedure below.

  1. Checking Printer's IP Address

  2. Generating Server Certificate

  3. Checking Generated Server Certificate

Important

  • If you generate an IPv6 server certificate, you cannot use SSL communication via IPv4. In addition, a warning message may appear if you are using Remote UI.

    To reset the IPv6 server certificate, tap in the following order from the operation panel.

    (Setup) > Device settings > LAN settings > Wi-Fi / Wireless Direct / Wired LAN > Settings > Advanced > Reset SSL certificates > Yes

Checking Printer's IP Address

  1. Make sure printer is turned on.

  2. On the HOME screen, tap the Network icon.

    Network button

    Depending on the type of LAN enabled, the icon displayed on the button may differ.

  3. Tap the enabled LAN.

    Diagonal lines are displayed for disabled LAN icons.

  4. Flick the screen, check the value on IPv6 link-local address.

    Write down the value on IPv6 link-local address for your reference when you open Remote UI and generate a server certificate.

Generating Server Certificate

  1. Open web browser on your smartphone, tablet, or computer and enter the printer IP address.

    Enter as following in the URL field of the web browser.

    http://[XXXX::XXXX:XXXX:XXXX:XXXX]

    On "XXXX::XXXX:XXXX:XXXX:XXXX", enter the IPv6 link-local address in abbreviated form.

    The top screen of Remote UI appears.

  2. Select Log in on Remote UI.

    Note

    • If you specify the administrator password, enter the password.

  3. Select Security.

  4. Select SSL/TLS settings.

  5. Select Generate key and certificate.

  6. Select Generate self-signed cert.

  7. Specify each setting item.

    • Signature algorithm

      Select SHA256.

    • Public key length (bits)

      Select 2048 bits.

    • Specify the expiration date.

      Enter the date you generated the server certificate on Valid from.

      Enter the date the server certificate expires on Valid to.

    • Enter the common name.

      On Common name, enter the IPv6 link-local address you checked in abbreviated form.

      Note

      • When you enter the common name, add [ ] to each end of the abbreviation value of the printer's IPv6 address.
      • Do not use a comma or make a space for the common name.

  8. Select Next.

    You need not enter anything on Country, State or province, Locality, Organization, or Organizational unit.

  9. Select Generate.

    The server certificate starts to be generated.

    When the server certificate has been generated, Generated a self-signed certificate. appears.

  10. Select Restart LAN.

    LAN will be restarted.

    When LAN has been restarted, Printer status on Remote UI appears.

    Note

    • If you cannot access to Remote UI after you restart LAN, reload your web browser.

Checking Generated Server Certificate

  1. Select Security on Remote UI.

  2. Select SSL/TLS settings.

  3. Select Check key and certificate.

    Make sure the issuer of the root certificate is displayed on Issued by, and the value you entered is displayed on Common name on Subject.