skip to main text

Generating Server Certificate (Self-signed Certificate)

When you use SSL connection via IPv6 network, you need to generate an IPv6 server certificate using the printer.

Generate the server certificate from Remote UI.

Follow the procedure below.

  1. Checking Printer's IP Address

  2. Generating Server Certificate

  3. Checking Generated Server Certificate

Important

  • If you generate an IPv6 server certificate, you cannot use SSL communication via IPv4. In addition, a warning message may appear if you are using Remote UI.

    To reset the IPv6 server certificate, select Device settings -> LAN settings -> Other settings in this order, and select Yes for Reset SSL certificates from the operation panel.

Checking Printer's IP Address

  1. Make sure printer is turned on.

  2. Flick HOME screen and tap Device settings.

    The Device settings screen appears.

  3. Tap LAN settings.

  4. Tap Confirm LAN settings.

  5. Tap LAN setting list or WLAN setting list according to the printer connection method.

  6. Check displayed message and tap Yes.

  7. Check the value on IPv6 link-local address.

    Write down the value on IPv6 link-local address for your reference when you open Remote UI or generate a server certificate.

Generating Server Certificate

  1. Open web browser on your smartphone, tablet, or computer and enter the printer IP address.

    Enter as following in the URL field of the web browser.

    http://[XXXX::XXXX:XXXX:XXXX:XXXX]

    On "XXXX::XXXX:XXXX:XXXX:XXXX", enter the abbreviation value on IPv6 link-local address.

    The top screen of Remote UI appears.

  2. Select Log in on Remote UI.

    Note

    • If you specify the administrator password, enter the password.

  3. Select Security.

  4. Select SSL/TLS settings.

  5. Select Generate key and certificate.

  6. Select Generate self-signed cert.

    The Generate self-signed cert screen appears.

    Specify each setting item.

    • Signature algorithm

      Select SHA256.

    • Public key length (bits)

      Select 2048 bits.

    • Specify the expiration date.

      Enter the date you generated the server certificate on Valid from.

      Enter the date the server certificate expires on Valid to.

    • Enter the common name.

      Enter the value in Common name you checked and wrote down on IPv6 link-local address shown on the touch screen.

      Note

      • When you enter the common name, add [ ] to each end of the abbreviation value of the printer's IPv6 address .
      • Do not use a comma or make a space for the common name.

  7. Select Next.

    You need not enter anything on Country, State or province, Locality, Organization, or Organizational unit.

  8. Select Generate.

    The server certificate starts to be generated.

    When the server certificate has been generated, Generated a self-signed certificate. appears.

  9. Select Restart LAN.

    LAN will be restarted.

    When LAN has been restarted, Printer status on Remote UI appears.

    Note

    • If you cannot access to Remote UI after you restart LAN, reload your web browser.

Checking Generated Server Certificate

  1. Select Security on Remote UI.

  2. Select SSL/TLS settings.

    The SSL/TLS settings screen appears.

  3. Select Check key and certificate.

    The Check key and certificate screen appears.

    Make sure the issuer of the root certificate is displayed on Issuer, and the value you entered is displayed on Common name on Subject.