Page 1
SSL Guide (Secure Socket Layer) To find basic information about network and advanced network features of your Brother machine: uu Network User's Guide. To download the latest manual, please visit the Brother Solutions Center at (http://solutions.brother.com/). You can also download the latest drivers and utilities for your machine, read FAQs and troubleshooting tips or learn about special printing solutions from the Brother Solutions Center.
Page 2
Applicable models This User’s Guide applies to the following models. HL-5450DN(T)/5470DW(T)/6180DW(T) DCP-8110DN/8150DN/8155DN/8250DN/MFC-8510DN/8710DW/8910DW/8950DW(T) Definitions of notes We use the following icons throughout this User’s Guide: Notes tell you how you should respond to a situation that may arise or give tips Note about how the operation works with other features.
IMPORTANT NOTE This product is approved for use in the country of purchase only. Do not use this product outside the country of purchase as it may violate the wireless telecommunication and power regulations of that country. In this manual, the screens of the MFC-8950DW(T) are used unless specified. ®...
Table of Contents Introduction Overview..............................1 Brief History of SSL ...........................1 Benefits of using SSL ..........................1 Using Certificates for device security......................2 Digital Certificate for SSL communication Digital Certificate Installation ........................4 Creating a self-signed certificate ......................6 Creating a Certificate Signing Request (CSR) ..................7 How to install the certificate to your machine ..................9 Choosing the certificate ........................10 Installing the self-signed certificate or pre-installed certificate...
Introduction Overview Secure Socket Layer (SSL) is an effective method of protecting data which is sent over a local or wide area network. It works by encrypting data sent over a network, i.e. a print job, so anyone trying to capture it will not be able to read it as all the data will be encrypted.
Introduction Using Certificates for device security Your Brother machine supports the use of multiple security certificates allowing secure management, authentication and communication with the machine. The following security certificate features can be used with the machine. When you print a document or use Web Based Management (web browser) securely using SSL, you must install the certificate onto your computer.
Page 7
Introduction CA certificate If you use a CA certificate that identifies the CA (Certificate Authority) itself, you must import a CA certificate from the CA, prior to the configuration. (See Import and export a CA certificate uu page 18.) Note •...
Digital Certificate for SSL communication Digital Certificate Installation Printing over a secured network or secure management using Web Based Management (web browser) requires a digital certificate to be installed on both the machine and device which is sending data to the machine, e.g.
Page 9
Digital Certificate for SSL communication You can configure the certificate settings. To create a self-signed certificate using Web Based Management, go to Creating a self-signed certificate uu page 6. To create a Certificate Signing Request (CSR), go to Creating a Certificate Signing Request (CSR) uu page 7.
Digital Certificate for SSL communication Creating a self-signed certificate Click Create Self-Signed Certificate. Enter a Common Name and a Valid Date. Note • The length of the Common Name must be less than 64 characters. Enter an identifier such as an IP address, node name or domain name to use when accessing this machine through SSL/TLS communication.
Digital Certificate for SSL communication Creating a Certificate Signing Request (CSR) A Certificate Signing Request (CSR) is a request sent to a CA in order to authenticate the credentials contained within the certificate. Note We recommend that the Root Certificate from the CA be installed on your computer before creating the CSR.
Page 12
Digital Certificate for SSL communication Click Submit. The following screen will appear. After a few moments, you will be presented with the certificate, which can be saved into a small file or copied and pasted directly into an online CSR form offered by a Certificate Authority. Click Save to save the CSR file to your computer.
Digital Certificate for SSL communication How to install the certificate to your machine When you receive the certificate from a CA, follow the steps below to install it into the print server. Note Only a certificate issued with this machine’s CSR can be installed. When you want to create another CSR, make sure that the certificate is installed before creating another CSR.
Digital Certificate for SSL communication Choosing the certificate After you install the certificate, follow the steps below to choose the certificate you want to use. Click Network. Click Protocol. Click HTTP Server Settings and then choose the certificate from the Select the Certificate pull-down list.
Page 15
Digital Certificate for SSL communication Note • If the following dialog box appears, Brother recommends disabling the Telnet, FTP, TFTP protocols and the network management with older versions of BRAdmin Professional (2.8 or less) for secure communication. If you enable them, user authentication is not secure. •...
Digital Certificate for SSL communication Installing the self-signed certificate or pre-installed certificate ® ® ® onto Windows Vista , Windows 7 and Windows Server 2008 for users with administrator rights Note ® ® • The following steps are for Windows Internet Explorer .
Page 17
Digital Certificate for SSL communication Type “https://machine’s IP address/” into your browser to access your machine (where “machine’s IP address” is the machine’s IP address or the node name that you assigned for the certificate). Then, click Continue to this website (not recommended).. Click Certificate Error, and then click View certificates.
Digital Certificate for SSL communication Installing the self-signed certificate or pre-installed certificate ® ® for Windows XP and Windows Server 2003 users Start your web browser. Type “https://machine’s IP address/” into your browser to access your machine (where “machine’s IP address”...
Page 19
Digital Certificate for SSL communication When the Certificate Import Wizard appears, click Next. You need to specify a location to install the certificate. We recommend you choose Place all certificates in the following store and then, click Browse..Choose Trusted Root Certification Authorities and then click OK.
Page 20
Digital Certificate for SSL communication Click Next. On the next screen, click Finish. You will then be asked to install the certificate. Do one of the following: If you are installing the self-signed certificate, confirm the fingerprint (thumbprint) and then click Yes. ...
Digital Certificate for SSL communication Import and export the certificate and private key You can store the certificate and private key on the machine and manage them by importing and exporting. How to import the self-signed certificate, the certificate issued by a CA, and the private key Click Import Certificate and Private Key on the Certificate page.
Digital Certificate for SSL communication Import and export a CA certificate You can store a CA certificate on the machine by importing and exporting. How to import a CA certificate Click CA Certificate on the Security page. Click Import CA Certificate and choose the certificate. Click Submit. How to export a CA certificate Click CA Certificate on the Security page.
Digital Certificate for SSL communication Managing multiple certificates The multiple certificate feature allows you to manage each certificate that you have installed using Web Based Management. After installing certificates, you can view what certificates are installed from the Certificate page and then view each certificate's content, delete or export the certificate. For information on how to access the Certificate page, see Digital Certificate Installation uu page 4.
Managing your network machine securely using SSL/TLS To manage your network machine securely, you need to use the management utilities with security protocols. Secure Management using Web Based Management (web browser) We recommend to use HTTPS protocol for secure management. To use these protocols, the following machine settings are required.
Printing documents securely using SSL ® Printing documents securely using IPPS for Windows We recommend to use IPPS protocol for secure management. To use the IPPS protocol, the following machine settings are required. Note • Communication using IPPS cannot prevent unauthorized access to the print server. •...
Page 26
Printing documents securely using SSL ® ® When you click Next, Windows XP and Windows Server 2003 will make a connection with the URL that you specified. If the printer driver has already been installed: You will see the printer selection screen in the Add Printer Wizard. Go to step k.
Printing documents securely using SSL ® ® ® Windows Vista , Windows 7 and Windows Server 2008 ® (Windows Vista Click the button, Control Panel, Hardware and Sound, and then Printers. ® (Windows Click the button, and then click Devices and Printers. ®...
Page 28
Printing documents securely using SSL If the printer driver has NOT been installed: One of the benefits of the IPP printing protocol is that it establishes the model name of the printer when you communicate with it. After successful communication you will see the model name of the ®...
Sending or Receiving (for DCP and MFC models) an E-mail securely Configuration using Web Based Management (web browser) You can configure secured E-mail sending with user authentication or E-mail sending and receiving (for DCP and MFC models) using SSL/TLS on the Web Based Management screen. Start your web browser.
Sending or Receiving (for DCP and MFC models) an E-mail securely Sending or Receiving (for DCP and MFC models) an E-mail securely using SSL/TLS This machine supports SSL/TLS methods to send or receive (for DCP and MFC models) an E-mail via an E-mail server that requires secure SSL/TLS communication.
Troubleshooting Overview This chapter explains how to resolve typical network problems you may encounter when using the Brother machine. If, after reading this chapter, you are unable to resolve your problem, please visit the Brother Solutions Center at: (http://solutions.brother.com/). Please go to the Brother Solutions Center at (http://solutions.brother.com/) and click Manuals on your model page to download the other manuals.
Page 32
Troubleshooting I cannot print the document over the internet using IPPS. Question Solution I cannot communicate with my Obtain valid certificate and install on both your machine and computer again. Brother machine using SSL. Make sure the port setting of your machine is correct. You can confirm your machine’s port setting on the Web Based Management screen, by clicking Network, Protocol and then HTTP Server Settings.
Troubleshooting Printing the Printer Settings Page (For HL-5450DN(T)) Note Node name: The Node name appears on the Network Configuration Report. The default node name is “BRNxxxxxxxxxxxx”. (“xxxxxxxxxxxx” is your machine’s MAC Address / Ethernet Address.) The Printer Settings Page prints a report listing all the current printer settings including the network print server settings.
Page 34
Troubleshooting For DCP-8110DN, DCP-8150DN, DCP-8155DN, MFC-8510DN, MFC-8710DW and MFC-8910DW Press Menu. (For MFC models) Press a or b to choose Print Reports. (For DCP models) Press a or b to choose Machine Info.. Press OK. Press a or b to choose Network Config.
Troubleshooting Network terms and concepts SSL technical overview Secure Socket Layer (SSL) is a method for protecting transport layer data sent over a local or wide area network by using the Internet Printing Protocol (IPP), to prevent unauthorised users being able to read them. It achieves this by using authentication protocols in the form of digital keys, of which there are 2: A public key –...
Troubleshooting Network terms Secure Socket Layer (SSL) The security communication protocol encrypt data to prevent security threats. Internet Printing Protocol (IPP) IPP is a standard printing protocol used for managing and administering print jobs. It can be used both locally and globally so anyone in the world can print to the same machine.