Security Guide for Kyocera MFPs, Printers, and Production Printers

Recommendations for keeping your Kyocera MFPs, Printers, and Production Printers more secure

In recent years, we have faced increasingly sophisticated and diverse security threats that introduce security risks from cyber-attacks and data breaches to IoT devices. Thus, IoT devices (i.e., MFPs, Printers, and Production Printers) should not be directly connected to the Internet to protect these products from unauthorized external access. In addition to creating such a secure environment, Kyocera Document Solutions (referred to as "Kyocera," hereafter) MFPs, Printers, and Production Printers (referred to as "product," hereafter) require customers to set up a unique and hard-to-guess password during the installation phase. Along with passwords and usage restrictions settings, all the security settings, including, but not limited to, access control, stored data protection, and audit log settings on the product, are set to enhance security. This way, the product and data/information handled through the product are protected against unauthorized access, destruction, use, and modification (e.g., unintentional product setting changes made by a malicious person) and disclosure.

Kyocera recommends the following security measures to protect our customers’ critical information assets. These measures should be implemented during the product installation and operation through decommissioning. They aim to safeguard business and personal data/information stored in the Kyocera product and on the network when using the Kyocera product.

In the installation phase

• Assign a local IP address to the product, which is connected to an internal network (LAN) with firewall/routers protection, separated from an external network. A product should not be connected directly to the Internet.
• Change the product default password to a new password.
• Register access credentials such as an administrator and general user login name and password in advance.
• Employ unguessable strong passwords.
• Do not share the administrator’s password with anyone who does not need to know.
• Use the identification and authentication feature to verify the user who has permission to access or use the product.
• Use the IP filter/Port settings to turn on, off, or limit communication with the product. Turn off all unused features and ports.
• Use any encryptions available for the product.
• Validate any certificates used for the product.
• Use the security features supported to ensure the product is as secure/strong as possible.
  Use the security quick setup feature for such as items as network setting, interface block setting, and log setting collectively according to the users’ security policy.

In the operation phase

• Confirm the use of a legitimate connection destination before connecting with the product.
• Check the product software to ensure it is up to date.
• Visit the Kyocera global website regularly to check the latest security-related information.
• Confirm if the network communication is properly performed and check for unauthorized access.
• Hold a print/scan job in the product from a PC until a user enters their appropriate password through the product operation panel.
• Turn off the power if the product will not be used for an extended period of time.
• Update the product settings to control who can access and use the product regularly.
• Enable HDD Overwrite-Erase.

In the decommission phase

• At the product’s lease end or end of life, set and execute sanitization features to completely sanitize the data retained inside the product or any residual data. Product settings can revert to factory default settings (i.e., initialization).

To help customers improve the security of Kyocera product based on their specific environment, the supplemental document Security Best Practices for Kyocera MFPs, Printers, and Production Printers explains security-related settings procedures and security measures against potential risks. These recommendations serve as a reference to assist customers in determining the appropriate security settings before configuring the product in their environments.