Hard Disk Drive Data Security Options Data Encryption And .

Canon imageRUNNER, imageRUNNER ADVANCE, and imagePRESSHard Disk Drive Data Security OptionsData Encryption and Overwrite

Canon imageRUNNER, imageRUNNER ADVANCE, and imagePRESSHard Disk Drive Data Security KitsPowerful protection for your most important information.Ever since hard disk drives became the norm on multifunctionperipherals, Canon has been committed to protecting your data againstcompromise. To facilitate the security of information on the hard diskdrives of imageRUNNER, imageRUNNER ADVANCE, and imagePRESSsystems, Canon offers the standard hard disk drive format feature. Bestpractices, and often company policies, usually recommend that systems becompletely wiped prior to being redeployed or at the end of their usablelives. The Hard Disk Drive Format feature allows an end-user to completelyoverwrite all data stored on the hard disk—such as image files, job logs,Address Books, and customized user mode settings—with null data.For organizations that require a higher level of protection, Canon offersadditional Hard Disk Drive (HDD) Security options for imageRUNNER,imageRUNNER ADVANCE, and imagePRESS systems. Whether you need tomeet the strict security demands of the private sector or comply withthe stringent privacy and auditing regulations of the public sector, Canonprovides two optional features that deliver higher levels of protection—HDD Data Encryption and HDD Data Erase.imageRUNNER ADVANCE C5051imageRUNNER ADVANCE 6075

HDD Data Encryption KitProven algorithms protect your data.The Canon HDD Data Encryption Kit option has been designed toprotect all temporary data and stored documents on the internal diskdrive through proven industry-standard encryption algorithms.Recognized for its strong level of security by the National Institute ofStandards and Technology (NIST) and the National Security Agency(NSA), the HDD Data Encryption Kit is a dedicated plug-in board thatencrypts every byte of data before it’s committed to the disk using256-bit AES (Advanced Encryption Standard) or 168-bit TDEA (TripleData Encryption Algorithm) algorithms (depending on model). The HDDData Encryption Kit utilizes an inaccessible secret key that’s stored onthe plug-in board to encrypt and decrypt all data that’s stored inrandom, non-continuous portions of the disk drive. Once written, thedata is virtually irretrievable by anyone seeking to recover it fromwithin the device or through external file recovery utilities.Common CriteriaaCanon MFP security chips are Common Criteria Certified.Each of the optional HDD Data Encryption Kits are equipped with theCanon MFP Security Chip, which has achieved a Common CriteriaCertification of Evaluation Assurance Level 3 (EAL3) for its effectivenessat preventing unauthorized access to data proven through methodicaltesting and verification. This level of assurance may assist organizations with meeting their internal privacy goals, addressing regulationssuch as the Gramm-Leach-Bliley Act (GLB), Sarbanes-Oxley Act (SOX),Health Insurance Portability and Accountability Act (HIPAA), andFamily Education Rights Privacy Act (FERPA).

HDD Data Erase KitEven after deletion, data can be potentially retrieved.Once data has been committed to any disk drive, the potential existsfor it to be retrieved even after deletion unless it’s been effectivelyoverwritten. To counteract this reality, Canon offers the optional HDDData Erase function within imageRUNNER, imageRUNNER ADVANCE,and imagePRESS systems. Once activated, the HDD Data Erasefunction overwrites traces of data on the disk drive.Only management data is deletedafter output while the actual dataremains vulnerable on the hard disk.Deletion of data is complete,leaving nothing vulnerableon the hard disk.nga Usi ntaDtiof Jobion o a Erase OpteleDtDD Dathe HEach output is overwrittenwith zero or random data.Canon’s overwrite options securely erase your data.Depending on the level of security required, the HDD Data Erasefeature can continuously perform one of three different actions onthe sectors of the disk drive targeted for overwrite. To remove the possibility of erased data being retrieved, the HDD Data Erase feature can beconfigured to overwrite once with null data, overwrite once with random data, overwrite three times with random data, or DoD 5022.22M3-pass overwrite mode for maximum security. The overwrite processis continued and performed while the device is being utilized.* Oncean imageRUNNER, imageRUNNER ADVANCE, or imagePRESS systemis equipped with the optional HDD Data Erase Kit, the standard HDDformat technology may be expanded to a 3-pass overwrite.* Only available on certain models. See included comparison chart to view devices that support Common Criteria Certified HDD Data Erase Kits.

Compatibility ChartsimageRUNNER/imageRUNNER ADVANCE HDD Encryption KitsHDD DataEncryption Kit-B1Common Criteria CertificationSupported DevicesHDD DataEncryption Kit-B2HDD DataEncryption Kit-B3HDD DataEncryption Kit-B5HDD DataMirroring andEncryption Kit-C1EAL3EAL3EAL3EAL3EAL3C3480/C3380/C2880/C2550 Series/C5185/C4580v2/C4080v2 Series/C5068/C5058;imagePRESS C1 /3045/3035;imagePRESS C1 /3035/3030/3025;imagePRESS C1 /3245i/3235/3235i/3230/3225;imagePRESS C1 eRUNNERADVANCE C5051/C5045/ C5035/C5030/C7065/ C7055/C9075 PRO/C9065PROActivationHDD DataHDD DataMirroring andMirroring andEncryption Kit-C2 Encryption Kit-D1N/AN/AimageRUNNER imagePRESSADVANCE1135P/1125P/6075/6065/6055 1110P/1110SInstall Encryption BoardDeactivationUninstall Encryption BoardFunctionsHDD EncryptionAES (256 Bit)AES (256 Bit)AES (256 Bit)AES (256 Bit)AES (256 Bit)AES (256 Bit)HDD Digit Password Required–––––––Authentication Failure 1Second UI git Password Required–––––––1 Second UI LockAuthentication Failure–––––––Password Initialization inService Mode–––––––Overwrite PatternAES (256 Bit)Mail Box Password2x Password Entry at RegistrationSystem Manager Password2x Password Entry at Registration–––––––ScanGear SupportimageWARE DM SupportXXXXXXXXXXXXXXMEAPXXXXXXXWeb Access Software SupportXXXXXXXEncryption of Attached Fileon I–FAXXXXXXXXimageRUNNER/imageRUNNER ADVANCE/imagePRESS HDD Erase KitsHDD Data Erase Kit-A1Common Criteria CertificationSupported DevicesN/AHDD Data Erase Kit-B2EAL3C3480/C3380/C3080/C2880/C2550 Series/C5185/ 3045/3035/3030/C4580/C4080 V2 V3 Series/3045/3035/3030/3025/ v2/7095v2/7086v2/C5068/C5058;imagePRESS C1 vationEAL33245/3245i/3235/3235i/3230/3225HDD Data Erase Kit-C1N/AC3480/C3380/C3080/C2880/C2550 Series/ C5185/C4580/C4080 V2 V3 Series/ 055v2/5050N/7105v2/7095v2/7086v2/C5068/C5058; imagePRESS C1 geRUNNER ADVANCE C5051/C5045/C5035/C5030/C7065/C7055/C9075 PRO/C9065 PROLMS License Access KeyDeactivationNoNoNoYesFunctionsHDD Encryption––––HDD OverwriteXXXXOverwrite PatternNull: Once; Random Data: Once;Random Data: Three Times;DoD 5022.22M: 3-Pass Overwrite Mode*Null: Once; Random Data: Once; Random Data: Three TimesMail Box Password7-Digit Password Required––––Authentication Failure 1 Second UI Lock–––––––––––2x Password Entry at RegistrationSystem Manager Password7-Digit Password Required–1 Second UI Lock Authentication FailureX (Local UI and Remote UI)Password Initialization in Service ModeX––2x Password Entry at Registration––––ScanGear SupportimageWARE DM SupportXXXXXXXXMEAPXXXXWeb Access Software SupportXXXXEncryption of Attached File on I–FaxXXXXDisplaying the Security Kit VersionXXXX* DOD 5022.22M is only supported for the imageRUNNER ADVANCE models.X

Compatibility ChartsimageRUNNER HDD Security KitsCommon Criteria CertificationSupported DevicesSecurity Kit-A2Security Kit-B2Security Kit-B2 v2N/AEAL3EAL34570/3570/2870/22706570/5570/5070105 /9070/8070/85 C3170U/C3170iC6870U/C5870U7105/7095/7095 Printer/7086/CiR C5185/C5180/C4580/C4080 Series4570/3570/2870/2270ActivationSecurity Kit-B3EAL34570/3570/2870/22706570/5570(imageRUNNER 5070 is notsupported)LMS License Access KeyDeactivationYes(in the Service Mode)NoNoNoHDD Encryption3DES (168 Bit)3DES (168 Bit)3DES (168 Bit)3DES (168 Bit)HDD OverwriteXXXXFunctionsOverwrite PatternMail Box PasswordNull: Once; Random Data: Once; Random Data: Three Times7–Digit Password Required–Authentication Failure 1 Second UI Lock–2x Password Entry at Registration–X (Local UI and Remote UI)X (Local UI and Remote UI)–XXSystem Manager Password7–Digit Password Required–Authentication Failure 1 Second UI Lock–X (Local UI and Remote UI)Password Initialization in Service ModeX–––2x Password Entry at Registration––XXX (Local UI and Remote UI)ScanGear SupportXimageWARE DM SupportXMEAPX–XXWeb Access Software SupportX–XXEncryption of Attached File on I–Fax–XXXDisplaying the Security Kit Version–XXXX Feature availableLEGEND:– Does not applyN/AN/AN/A Not availableFor more information, call your Canon Authorized Dealeror visit www.usa.canon.com online.1–800-OK-CANONwww.usa.canon.comCanon U.S.A., Inc.One Canon PlazaLake Success, NY 11042Statements made in this document are the opinions of Canon U.S.A. None of these statements shouldbe construed as legal advice, as Canon U.S.A. does not provide legal counsel or compliance consultancy,including without limitation, Sarbanes-Oxley, HIPAA, GLBA, CASB 1386, FISMA, Check 21, or the US Patriot Act.Each customer must have its own qualified counsel determine the advisability of a particular solution as itrelates to regulatory and statutory compliance.CANON, IMAGEPRESS, IMAGERUNNER, and MEAP are registered trademarks of Canon Inc. in the United Statesand may also be registered trademarks or trademarks in other countries. IMAGEWARE is a registered trademark ofCanon U.S.A., Inc. in the United States and is a trademark of Canon Inc. in certain other countries IMAGEANYWAREis a trademark of Canon. All other referenced product names and marks are trademarks of their respective ownersand are hereby acknowledged. Some items may not be available at this time; please check foravailability. Specifications and availability subject to change without notice. 2010 Canon U.S.A., Inc. All rights reserved.0910-iRDS-PDF-CR

Canon imageRUNNER, imageRUNNER ADVANCE, and imagePRESS imageRUNNER ADVANCE C5051 imageRUNNER ADVANCE 6075. . 3235i/3230/3225; imagePRESS C1 / C7000VP/C6000VP/ C6000/1135P/1125P/ 1110P/1110S imageRUNNER ADVANCE C5051/ C5045/ C5035/C5030/ C7065