skip to main text

Generating Server Certificate (Self-signed Certificate)

When you use SSL connection via IPv6 network, you need to generate an IPv6 server certificate using the printer.

Generate the server certificate from Remote UI.

Follow the procedure below.

  1. Step 1 Checking Printer's IP Address

  2. Step 2 Generating Server Certificate

  3. Step 3 Checking Generated Server Certificate

Important

  • If you generate an IPv6 server certificate, you cannot use SSL communication via IPv4. In addition, a warning message may appear if you are using Remote UI.

    To reset the IPv6 server certificate, select Security -> SSL/TLS settings -> Delete key and certificate in this order, and select OK on the displayed screen.

Checking Printer's IP Address

  1. Check that printer is turned on.

  2. Check printer's IP address.

    Check the printer's IP address by printing network settings information.

  3. Check the value on "3-2-16 Link Local Address".

    Write down the value on "3-2-16 Link Local Address" for your reference when you open Remote UI or generate a server certificate.

Generating Server Certificate

  1. Open web browser on your smartphone, tablet, or computer and enter the printer IP address.

    Enter as following in the URL field of the web browser.

    http://[XXXX::XXXX:XXXX:XXXX:XXXX]

    On "XXXX::XXXX:XXXX:XXXX:XXXX", enter the abbreviation value on "3-2-16 Link Local Address".

    The top screen of Remote UI appears.

  2. Select Log in on Remote UI.

    Note

    • If you specify the administrator password, enter the password.

  3. Select Security.

  4. Select SSL/TLS settings.

  5. Select Generate key and certificate.

  6. Select Generate self-signed cert.

    The Generate self-signed cert screen appears.

    Specify each setting item.

    • Signature algorithm

      Select SHA256.

    • Public key length (bits)

      Select 2048 bits.

    • Specify the expiration date.

      Enter the date you generated the server certificate on Valid from.

      Enter the date the server certificate expires on Valid to.

    • Enter the common name.

      Enter the value in Common name you checked and wrote down on "3-2-16 Link Local Address".

      Note

      • When you enter the common name, add [ ] to each end of the printer's IP address.
      • Do not use a comma or make a space for the common name.

  7. Select Next.

    You need not enter anything on Country, State or province, Locality, Organization, or Organizational unit.

  8. Select Generate.

    The server certificate starts to be generated.

    When the server certificate has been generated, Generated a self-signed certificate. appears.

  9. Select Restart LAN.

    LAN will be restarted.

    When LAN has been restarted, Printer status on Remote UI appears.

    Note

    • If you cannot access to Remote UI after you restart LAN, reload your web browser.

Checking Generated Server Certificate

  1. Select Security on Remote UI.

  2. Select SSL/TLS settings.

    The SSL/TLS settings screen appears.

  3. Select Check key and certificate.

    The Check key and certificate screen appears.

    Make sure the issuer of the root certificate is displayed on Issued by, and the value you entered on Common name on Subject.