Express Server User's Guide

Transcription

1 Express Server User's Guide

2 Manuals for the Product The manuals for this product are divided as follows. Please refer to them for detailed information. CD-ROM Guides with this symbol are manuals in PDF format included on the accompanying CD-ROM.* iw Secure Audit Manager Express Server Installation and Instructions. ir Agent Instructions. iw Secure Audit Manager Express Server Message and Countermeasure. Explains how to perform License Authentication for Express Server. Explains how to execute the virtual environment support tool necessary when you are using Express Server in the virtual environment. Express Server User's Guide (This Document) Express Server ir Agent User's Guide Express Server Message List Software License Registration Guide Procedure for Running Virtual Environment Support Tool CD-ROM CD-ROM CD-ROM CD-ROM CD-ROM * To view the manual in PDF format, Adobe Reader/Acrobat Reader/Acrobat is required. If Adobe Reader/Acrobat Reader/Acrobat is not installed on your system, please download it from the Adobe Systems Incorporated website (

3 How This Manual Is Organized Chapter 1 Overview of Express Server Chapter 2 Designing and Building Your System Environment Chapter 3 Installing Express Server Chapter 4 Installing ir Agent Chapter 5 Configuring File Server Chapter 6 Configuring the Use of System Manager Chapter 7 Upgrading Chapter 8 Appendix Considerable effort has been made to insure that this manual is free of inaccuracies and omissions. However, as we are constantly improving our products, if you need an exact specification, please contact Canon.

4 Contents Preface vi How to Use This Manual vi Symbols Used in This Manual vi Buttons Used in This Manual vi Displays Used in This Manual vii Abbreviations Used in This Manual viii Legal Notices ix Trademarks ix Copyright ix Disclaimers ix Chapter 1 Overview of Express Server Express Server Features of Express Server Export Function Notification Function System Log Function Mutual Monitoring Function between Service Provider and Agent Configuring Express Server System Requirements Express Server Hardware Software ir Agent Hardware Software File Server Software Environment Network Environment Installing and Configuring of Express Server Step 1 Installing Express Server Step 2 Configuring and Checking Express Server Express Server Components Service Provider System Manager ir Agent ii

5 Chapter 2 Designing and Building Your System Environment Checking Secure Audit Manager Operating Environment Checking Security Environment Implementation Secure Audit Manager Design Check Secure Audit Manager Operation Check Chapter 3 Installing Express Server Installing Express Server Overview of Installing and Configuring Express Server Step 1 Installing Express Server Step 2 Configuring the Required Settings for Operating Express Server Installing Internet Information Services (IIS) Installing Internet Information Services (IIS) Installing Internet Information Services (IIS) Installing Express Server License Authentication About Express Server License Notes on Reinstallation Specifying the Older System Folder (Recommended) Specifying a New System Folder Configure DCOM Access Restrictions Configuring HTTP (HTTPS) Port Allowing ASP.NET in Internet Information Services (IIS) Configuring ASP.NET in Internet Information Services (IIS) Configuring ASP.NET in Internet Information Services (IIS) Configuring Service Provider Uninstalling Express Server Chapter 4 Installing ir Agent Installing/Uninstalling ir Agent Installing ir Agent About ir Agent License Uninstalling ir Agent Chapter 5 Configuring File Server Creating the Export Folder Overview of Creating and Configuring the Export Folder Step 1 Preparing the Creation Environment for the Export Folder Step 2 Creating the Export Folder and Configuring It for Operations Adding User Accounts Adding User Accounts in Windows Server Adding User Accounts in Windows Server iii

6 Creating the Shared Folder Creating a Shared Folder in Windows Server Creating a Shared Folder in Windows Server Configuring the Firewall Configuring Firewall in Windows Server Configuring Firewall in Windows Server Chapter 6 Configuring the Use of System Manager Configuring Express Server Log In Structure of System Manager Configuration Screen Service Provider Service Provider Settings List Registering Service Provider Properties ir Agent ir Agent List Registering ir Agent Properties [ir Agent Properties] Screen Displayed in V [ir Agent Properties] Screen Displayed in V1.2 or later Configuring System Environment System Environment Settings Checking System Environment Settings Configuring and Changing System Environment Configuring Notification Checking Notification Settings Configuring and Changing Notification Settings Registering and Changing Destinations Detailed Settings Checking Detailed Settings Configuring and Changing Detailed Settings Chapter 7 Upgrading Upgrading Express Server When Express Server V1.2x Is Installed When Express Server V1.2x Is Uninstalled Upgrading ir Agent iv

7 Chapter 8 Appendix Creating the System Administrator User Recommended Configuration for Different Use Cases When Saving Text Data Only Use Condition System Manager Settings When Saving Image Data Use Condition System Manager Settings When Saving Image Data of High Image Quality Use Condition System Manager Settings Notification Details Notification from Service Provider Notification of Errors and Disk Space Insufficiency in Service Provider Notification from Agent Notification of Unknown Agent Error Notification of Job Information Transmission Retry Error in the Agent Notification of Maximum Page Number Exceeded Notification of Disk Space Insufficiency in the Agent Error Notifications from License Authentication Notification of the Number of Remaining Days for the Valid License Order of Powering Off and On When Operating Express Server Uninstallation Steps for Express Server Restrictions Glossary Index v

8 Preface Thank you for purchasing iw Secure Audit Manager. Please read this manual thoroughly before operating the product to familiarize yourself with its capabilities, and to make the most of its many functions. After reading this manual, store it in a safe place for future reference. How to Use This Manual This manual is targeted for readers who have basic operational knowledge of Windows and Web browsers. Symbols Used in This Manual The following symbols are used in this manual to explain procedures, restrictions, handing precautions, and instructions that should be observed for safety. IMPORTANT Indicates operational requirements and restrictions. Be sure to read these items carefully to operate the product correctly. NOTE Indicates a clarification of an operation, or contains additional explanations for a procedure. Reading these notes is highly recommended. Buttons Used in This Manual The following symbols and button names are a few examples of how buttons to be pressed are represented in this manual: Buttons on Computer Operation Screens: [OK] Icons on Computer Operation Screens: (Properties) icon vi

9 Displays Used in This Manual Screen shots of the computer displays used in this manual may differ slightly, depending on the operating system you are using. The buttons you should click are marked with a, as shown below. When multiple buttons can be clicked, all buttons are marked and mentioned in the order in which they should be clicked. 1 Click [Next]. Click this button for operation. vii

10 Abbreviations Used in This Manual In this manual, product names and model names are abbreviated as follows: Microsoft Windows XP operating system: Windows XP Microsoft Windows Vista operating system: Windows Vista Microsoft Windows 7 operating system: Windows 7 Microsoft Windows Server 2003 operating system: Windows Server 2003 Microsoft Windows Server 2008 operating system: Windows Server 2008 Microsoft Internet Explorer: Internet Explorer Microsoft.NET Framework:.NET Framework Microsoft Internet Information Services: Internet Information Services (IIS) iw Secure Audit Manager: Secure Audit Manager iw Secure Audit Manager Express Server: Express Server iw Secure Audit Manager Service Provider: Service Provider iw Secure Audit Manager System Manager: System Manager iw Secure Audit Manager ir Agent: ir Agent Canon SAM Data Process Service: Data Process Service Canon SAM Export Service: Export Service Canon SAM Management Service: Management Service Canon SAM Report Service: Report Service Canon multifunctional devices such as imagerunner ADVANCE Series: ir device viii

11 Legal Notices Trademarks MEAP is a trademark of Canon Inc. Adobe and Adobe Acrobat are trademarks of Adobe Systems Incorporated. Microsoft, Windows, Windows Server, Windows Vista, Windows 7, Internet Explorer, and Microsoft Internet Explorer logo are registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Other products and company names herein may be the trademarks of their respective owners. Copyright Copyright 2010 by Canon Inc. All rights reserved. No part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording, or by any information storage or retrieval system without the prior written permission of Canon Inc. Portions of this product copyright Nuance Communications, Inc. All rights reserved. Disclaimers The information in this document is subject to change without notice. CANON INC. MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS MATERIAL, EITHER EXPRESS OR IMPLIED, EXCEPT AS PROVIDED HEREIN, INCLUDING WITHOUT LIMITATION, THEREOF, WARRANTIES AS TO MARKETABILITY, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OF USE OR NON-INFRINGEMENT. CANON INC. SHALL NOT BE LIABLE FOR ANY DIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY NATURE, OR LOSSES OR EXPENSES RESULTING FROM THE USE OF THIS MATERIAL. ix

12 x

13 Overview of Express Server 1 This chapter introduces Express Server and describes the components required to set up your system. CHAPTER Express Server Features of Express Server Export Function Notification Function System Log Function Mutual Monitoring Function between Service Provider and Agent Configuring Express Server System Requirements Express Server ir Agent File Server Installing and Configuring of Express Server Step 1 Installing Express Server Step 2 Configuring and Checking Express Server Express Server Components

14 Express Server 1 Overview of Express Server Express Server is a system for extracting log information and content data (text data/image data) of jobs including printing, copying and faxing performed by users as job information, storing and managing it in the server according to preconfigured information. Managing job information makes it possible to track the content of user jobs, thus enabling document distribution oversight that prevents leaks or abuse of confidential or closely held information. Express Server consists of the following components: Express Server ir Agent File server (Export Folder) NOTE When installing Express Server, express edition Service Provider (hereafter referred to as "Service Provider") and express edition System Manager (hereafter referred to as "System Manager") are also installed. 1-2 Express Server

15 Computer for viewing documents/searching File Server Export Folder ir Device + ir Agent ir Agent Processing and Sending Job Information Express Server Sending Job Information System Administrator Computer Service Provider System Manager Sending to System Administrator 1 Overview of Express Server ir Agent Administrator Computer Sending to ir Agent Administrator Express Server 1-3

16 1 Overview of Express Server ir Device (Compatible with ir Agent) ir Agent Express Server Export Folder (File server) An ir device capable of operating with Secure Audit Manager. This device can save the job information at the time of an execution of a copy or print operation in the hard disk area reserved for Secure Audit Manager. A MEAP application that operates in an ir device that is compatible with Secure Audit Manager. ir Agent sends the job information stored in the hard disk space for the ir device to Service Provider regularly or at a fixed time. It stores job information received from the ir Agent into the Export Folder. It performs image processing such as resolution conversion and text extraction via OCR. It configures system settings, agent information management, and notification settings. This kind of folder stores the job information (log information and content data) received by Service Provider. Shared folder on the file server or a local folder of Express Server can also be used as the Export Folder. Express Server manages the following information: Job Information It is a general term to indicate information related to jobs such as printing, copying and faxing performed by users. It is sent and received between individual components. Content Data It indicates image data and text data contained in job information. It is converted to image data (PDF/JPEG/TIFF) or text data (TXT) by Service Provider and then stored in Export Folder (File Server). Log Information It is information such as the user name, job start time, device name and sender/ receiver name, which is included in job information. Attribute Information It indicates information included in job information from the ir Agent. 1-4 Express Server

17 Features of Express Server Express Server closely manages job information and print content of print jobs and fax transmissions in printers and multifunctional devices, providing a tool for preventing unauthorized acquisition and/or leakage of confidential information. Express Server possesses various functions for effective operation of the system. Export Function From the following components, Express Server extracts each job information such as log data and content data (text data and image data) from ir devices and then sends them to the Export Folder. The target job information varies as follows, depending on the ir Agent version, the system structure and system settings. For ir Agent V1.1 - Send and Receive Fax to and from ir devices only - All jobs of ir devices For ir Agent V1.2/V1.3 -Copy -Print - Send Fax -Receive Fax -Box -Scan/Send 1 Overview of Express Server Contents of Job Information The job information to be sent to the Export Folder is composed of the content data and the log information. The logs include the user name, job start time, device name, and sender/receiver name. Either texts or images can be selected as a format of the content data of the jobs. When the job is saved as images, the image resolution can be specified. When color or grayscale images are selected, the compression rate can also be specified. Features of Express Server 1-5

18 1 Overview of Express Server Schedule to send Job Information ir Agent The schedule to send the job information from ir Agent to the Export Folder can be set as follows. Sending according to the specified send interval Sending according on the starting time to send Manual Transmission by Clicking [Send Now] A time period when the job information transmission is disenabled can be specified in order to avoid occupying the network during working hours. Notification Function A feature to notify errors or abnormal statuses to the system administrator by if they occur in Express Server. The following types of notification are sent. The error details notified by are output to the event log. The event log is always output regardless of whether the notification is set or not. IMPORTANT This function can only be used by mail servers compatible with the authentication methods supported by Express Server. Use software that supports the character code UTF-8 because UTF-8 is used for the character code of . For details on how to set notification, see "Configuring Notification," on p Errors in Service Provider If an error occurs in a component of Service Provider (Archive Provider, Management Service, Data Process Service or Export Service), an notification is sent to the system administrator. Notification of unknown agent If the status of agent becomes unknown, notification is sent to the system administrator and the administrator of the ir Agent for which the status unknown. Notification of job information submission retry error in the agent If a job information submission retry error occurs in the ir Agent notification is sent to the system administrator and the administrator of the ir Agent in which the error occurred. Notification of maximum page number exceeded If the maximum number of pages to send per job is exceeded, notification is sent to the system administrator and the administrator of the ir Agent. 1-6 Features of Express Server

19 Notification of disk space insufficiency in the agent If disk space in the agent runs low in the ir Agent, notification is sent to the system administrator and the administrator of the ir Agent, in which the error occurred. Error notifications from license authentication When the license for Express Server cannot be confirmed or the trial license has been expired, the system administrator is notified of the situation via . Notification of the number of remaining days for the valid license When you are using the trial license, the system administrator is notified of the number of remaining days of the trial license. System Log Function In Express Server, job information received from ir Agent and the history of the job log information and content data that are stored in the Export Folder are stored as a system log. Errors are also recorded in this system log. For details on errors, see Secure Audit Manager Express Server Message List. One file of the system log is created by date and one line in CSV format is created for each job. In addition, the system log is set with a period for retaining it. After the specified period, the system log is automatically removed. The following rules apply to the system log file name. sys[dd][mm][yyyy].log (DD: day, MM: month, YYYY: year) Lines of CSV format to describe job content are recorded in the following format. [Date and Time], [Message ID], [Message] + (Job Information) The system log is saved in the system log folder in the system folder (created when Express Server was installed) and automatically deleted after the retention period specified in the system environment of System Manager. The maximum size of the ir Agent system log is 4 MB. When the log reaches the maximum size, 1 MB of the oldest records is deleted. 1 Overview of Express Server Features of Express Server 1-7

20 Items found in the system log and their descriptions are shown below. 1 Overview of Express Server Item Date and Time Message ID Message Description The local date and time in Express Server or the ir device are recorded in the following format. For Express Server: DD/MM/YYYY HH:mm:ss:SSS DD day, MM month, YYYY year, HH hour (24-hour notation), mm minute, ss second, SSS millisecond. For ir Agent: DD-MMM-YYYY HH:mm:ss.SSS zz DD day, MMM displays the month (three-letter abbreviation), YYYY year, HH hour (24-hour notation), mm minute, ss second, SSS millisecond, and zz time zone. The message ID is recorded in the following hexadecimal/8-digit format: Program ID (2 digits) + Function ID (2 digits) + Error ID (4 digits) The message content including the exception handling message is recorded. The following items are added in the system log only if job information is processed. Agent ID User Name Job Name Job Start Date & Time The agent ID of the job sender is recorded. The department ID that executed the printing is recorded. The job name is recorded. The start date and time of the job are recorded. Number of Logical Pages The number of pages in the printed document is recorded. Spool Folder Name The name of the hard disk area exclusively prepared for Secure Audit Manager in an ir device is recorded. For details on how to specify the retention period of the system logs, see "Configuring and Changing System Environment," on p NOTE The system logs of Express Server are saved in the following default location if they are installed using the default settings. Service Provider C:\Program Files\Canon\iW SAM\Express Server\System\SysLog The system log of the ir Agent can be downloaded using a Web browser. For more information on the setting, see Secure Audit Manager Express Server ir Agent User's Guide. 1-8 Features of Express Server

21 Mutual Monitoring Function between Service Provider and Agent The ir Agent regularly notifies the current status to the Service Provider (status notification). For example, the ir Agent determines that an error has occurred in the Service Provider if the Service Provider does not respond to the status notification sent from the ir Agent. In this case, the display in [Reception Service of Send Jobs] in [Information] screen in the ir Agent changes from [Operating] to [No Response]. You can receive from the agent via status notification the operation condition, the amount used for the hard disk of the agent, and error information. If necessary, you can also send notification to the system administrator and agent administrator. If there is no status notification from the agent to Service Provider for 30 minutes, it is determined that the status of the agent is unknown and the status is notified to the administrators of the system and agent. The items monitored by the agent that are included in status notification are shown below. Status of disk space insufficiency in ir Agent Data transmission condition including job submission retry errors Exceeding the maximum number of pages per job (5,000 pages) Internal errors of ir Agent 1 Overview of Express Server If any of the following conditions occur in an ir device, it is also detected as an internal error. When this occurs, the internal error can be released when ir device is restarted. If a Secure Audit Manager function does not operate normally If the internal information cannot be obtained Note that in some cases the following internal errors are not resolved only by restarting the ir device. If the MEAP authentication information is not configured You can resolve the internal errors by restarting the ir device after configuring the MEAP authentication information. If the hard disk drive of the ir device is damaged If the internal error cannot be resolved even by restarting the ir device, contact your Canon dealer. For more information on notification, see " Notification Function," on p Features of Express Server 1-9

22 Configuring Express Server 1 System for specified jobs Overview of Express Server Secure Audit Manager supported by ir Device ir Agent Express Server File Server (Export Folder) Auditor/Administrator Computer The target device of job recording in this system structure is ir devices on which ir Agent is operating. In this system structure, the information of jobs executed in an ir device by the ir Agent is sent to Service Provider and stored in Export Folder. IMPORTANT If targeting only fax jobs to record, you must set to record fax jobs only in System Manager. For more information on the setting, see "Configuring the Use of System Manager," on p. 6-1 and Secure Audit Manager Express Server ir Agent User's Guide Configuring Express Server

23 System Requirements This section describes the operation environment to use Express Server. IMPORTANT In the Express Server software environment, the combination of different languages is not supported. Any settings configured with multilanguage in Express Server is not supported. The name of the computer on which Express Server is installed must consist of less than or equal to 15 alphanumeric characters. The name more than 15 alphanumeric characters is not supported. If you use Express Server in a domain environment, you cannot use multibyte characters for the domain name. Once the configuration of Express Server is completed, do not change the name or the IP address of the computer on which Secure Audit Manager is installed. If you power off without following the regular procedure, this environment is not supported. In the computer on which Express Server is installed, the HTTP or HTTPS port should be opened. Use on a Guest OS such as Hyper-V is not supported. When a firewall is enabled, remove the port number used in this system from the firewall monitoring list. Operation in an environment where the domain controller and Express Server are used on the same computer is not supported. Operation in the OS compatibility mode is not supported. Operation in an environment in which a proxy server is used is not supported. This software is an application developed using.net Framework 1.1. This software works on.net Framework 1.1 even when.net Framework 2.0/3.0 is installed. Do not uninstall.net Framework 1.1. Do not manually restart the Data Process Service, Export Service, Management Service, or Report Service (including restarting after being stopped). If a service requires a restart, you must restart the computer. Do not install an application created by.net Frameworks other than.net Framework 1.1 that uses the Internet Information Services (IIS) 6.0 default application pool (DefaultAppPool) onto the computer on which Express Server is to be installed. In Secure Audit Manager, IPv6 is not supported. The following agent components are allowed to be connected to the Secure Audit Manager V1.3 system: - ir Agent: V1.1/V1.2/V1.3 If there is any agent of V1.3 among the agents configuring Secure Audit Manager, be sure to upgrade the versions of the Express Server to V Overview of Express Server System Requirements 1-11

24 Express Server Hardware 1 Overview of Express Server CPU Intel Pentium 4/Xeon 3 GHz equivalent or higher (recommended) Hard disk File system: NTFS (mandatory) 7 GB or more disk space in the drive in which the system folder exists. NOTE If you use the FAT file system, operations are not supported. Memory 1 GB or more (recommended) Screen resolution 1024 x 768 pixels or more Software IMPORTANT Operating systems not listed below are not supported. Express Server is available only on 32-bit Edition operating systems. Operating systems Windows Server 2003 Family (Standard, Enterprise) SP1 Windows Server 2003 Family (Standard, Enterprise) SP2 Windows Server 2003 Family (Standard, Enterprise) R2 Windows Server 2003 Family (Standard, Enterprise) R2 SP2 Windows Server 2008 Family (Standard, Enterprise) Windows Server 2008 Family (Standard, Enterprise) SP2 NOTE The Server Core/Hyper-V option available in Windows Server 2008 is not supported System Requirements

25 Components.NET Framework 1.1 Redistributable Package.NET Framework 1.1 SP1 ASP.NET 1.1 Web server Internet Information Services 6.0 Internet Information Services NOTE When you reinstall Internet Information Services (IIS) on Windows Server 2003 SP1/ SP2/R2/R2 SP2 after installing Express Server, you need to reinstall the OS before the reinstallation of Internet Information Services (IIS). When you reinstall Internet Information Services (IIS) on Windows Server 2008 after installing Express Server, you need to reinstall.net Framework 1.1 and Express Server before the reinstallation of Internet Information Services (IIS). Web browser Internet Explorer 6.0 SP1/SP2/SP3 Internet Explorer 7.0 Internet Explorer 8.0 Overview of Express Server Operating systems supporting the Web browser Windows XP Professional SP2 Windows XP Professional SP3 Windows XP Professional x64 Edition Windows XP Professional x64 Edition SP2 Windows Vista Family (Business, Enterprise) Windows Vista Family (Business, Enterprise) SP1 Windows Vista Family (Business, Enterprise) SP2 Windows Vista Family (Business, Enterprise) x64 Edition Windows Vista Family (Business, Enterprise) x64 Edition SP1 Windows Vista Family (Business, Enterprise) x64 Edition SP2 Windows 7 Family (Professional, Enterprise) Windows 7 Family (Professional, Enterprise) x64 Edition Windows Server 2003 Family (Standard, Enterprise) SP1 Windows Server 2003 Family (Standard, Enterprise) SP2 Windows Server 2003 Family (Standard, Enterprise) R2 Windows Server 2003 Family (Standard, Enterprise) R2 SP2 Windows Server 2008 Family (Standard, Enterprise) Windows Server 2008 Family (Standard, Enterprise) SP2 System Requirements 1-13

26 NOTE The XP mode in Windows 7 is not supported. ir Agent Secure Audit Manager ir Agent V1.1/V1.2/V1.3 1 ir Agent Overview of Express Server Hardware ir Device Canon ir devices supporting ir Agent Software Environmental resources for the MEAP application Hard Disk : 22,500 KB Memory : 6,000KB Threads : 7 Sockets : 10 File Descriptor : 8 Web Browsers Internet Explorer 6.0 SP1/SP2/SP3 Internet Explorer 7.0 Internet Explorer 8.0 NOTE Java Runtime Environment or later must be installed. Display Resolution: 1024 x 768 or more Colors: 256 or more Operating systems supporting the Web browser Windows XP Professional SP2 Windows XP Professional SP3 Windows XP Professional x64 Edition Windows XP Professional x64 Edition SP2 Windows Vista Family (Business, Enterprise) Windows Vista Family (Business, Enterprise) SP System Requirements

27 File Server Windows Vista Family (Business, Enterprise) SP2 Windows Vista Family (Business, Enterprise) x64 Edition Windows Vista Family (Business, Enterprise) x64 Edition SP1 Windows Vista Family (Business, Enterprise) x64 Edition SP2 Windows 7 Family (Professional, Enterprise) Windows 7 Family (Professional, Enterprise) x64 Edition Windows Server 2003 Family (Standard, Enterprise) SP1 Windows Server 2003 Family (Standard, Enterprise) SP2 Windows Server 2003 Family (Standard, Enterprise) R2 Windows Server 2003 Family (Standard, Enterprise) R2 SP2 Windows Server 2008 Family (Standard, Enterprise) Windows Server 2008 Family (Standard, Enterprise) SP2 NOTE The XP mode in Windows 7 is not supported. 1 Overview of Express Server The environment for the Export Folder is as follows. IMPORTANT Operating systems not listed below are not supported. File Server is available only on 32-bit Edition operating systems. Software Environment Operating systems Windows Server 2003 Family (Standard, Enterprise) SP1 Windows Server 2003 Family (Standard, Enterprise) SP2 Windows Server 2003 Family (Standard, Enterprise) R2 Windows Server 2003 Family (Standard, Enterprise) R2 SP2 Windows Server 2008 Family (Standard, Enterprise) Windows Server 2008 Family (Standard, Enterprise) SP2 NOTE The Server Core/Hyper-V option available in Windows Server 2008 is not supported. Network Environment Both the work group environment and the domain environment are supported. System Requirements 1-15

28 Installing and Configuring of Express Server 1 Overview of Express Server This section describes how to install and configure Express Server. You must install and configure in the following order: Step 1 Installing Express Server Step 2 Configuring and checking Express Server Step 1 Installing Express Server The following steps describe how to install Express Server. Select the check box corresponding to the procedure that you have finished to confirm your task progress. Express Server Status Operation Refer to 1. Install Internet Information Services (IIS) (See p. 3-4) 2. Install Express Server (See p. 3-11) 3. License Authentication (See p. 3-17) IMPORTANT If you are using Express Server in a virtual environment, be sure to run Virtual Environment Support Tool before launching the License Authentication Wizard. For the details on how to run it, refer to [Procedure for Running Virtual Environment Support Tool]. ir Agent Status Operation Refer to 1. Install ir Agent (See p. 4-2) NOTE The license for ir Agent is automatically installed when you install ir Agent Installing and Configuring of Express Server

29 Step 2 Configuring and Checking Express Server The following steps describe how to configure Express Server. Select the check box corresponding to the procedure that you have finished to confirm your task progress. Express Server Status Operation Refer to ir Agent 1. Configure DCOM access restrictions (See p. 3-20) 2. Configure HTTP (HTTPS) port (See p. 3-26) 3. Allowing ASP.NET in Internet Information Services (IIS) (See p. 3-29) Status Operation Refer to 1. Configure the authentication information For more information, see e-manual. 1 Overview of Express Server 2. Configure ir Agent and register to Service Provider - URL - Access ID - Agent name - Station ID - Station name 3. Confirm the start of job recording "Registering to Service Provider" in Secure Audit Manager Express Server ir Agent User's Guide "Starting/Stopping Job Recording" in Secure Audit Manager Express Server ir Agent User's Guide IMPORTANT Log on through any authentication method, such as Default Authentication, SDL (Simple Device Login), SSO (Single Sign-On), SSO-H (Single Sign-On H) or SSO-IC Card based on the optional IC Card Authentication Enhanced Kit, or any other method that uses one of the approved authentication applications. For details on the approved authentication applications, contact your local authorized Canon dealer. For [Access ID] in the ir Agent settings, enter the Agent Access ID specified in the [System Environment] screen of System Manager. Installing and Configuring of Express Server 1-17

30 When installing an ir Agent in an ir device for the first time, configure [Schedule to Send Jobs] in the [ir Agent Properties] screen in System Manager or [Settings] modification screen in the ir Agent after registering the ir Agent in Service Provider. After the schedule is applied to the ir Agent and the device is restarted, the job recording status becomes [Operating]. For more information on the [Settings] modification screen of ir Agents, see Secure Audit Manager Express Server ir Agent User's Guide. 1 Overview of Express Server System Manager Status Operation Refer to 1. Log in to System Manager (See p. 6-2) 2. Configure system environment (See p. 6-25) 3. Configure ir Agent properties - Agent name - Station ID - Station name - Format to store jobs - Schedule to send jobs - Status check interval (See p. 6-17) 4. Confirm data transmission after copying from ir devices (See p. 6-8) IMPORTANT Log on as a user with Administrator privileges. [ir Agent Properties] settings are not available if no ir Agent is registered. NOTE Agent Name, Station ID and Station Name shown in "3. Configure ir Agent properties" are configured at the time when the agent information is registered. In System Manager, you can reconfigure the settings. Confirm ir Agent Operations Status Operation Refer to Perform copy job with the ir device, send it immediately with ir Agent, and then confirm that the job information is stored in Export Folder (See p. 6-13) Confirm Export Folder Status Operation Refer to Confirm that the job record from Service Provider is stored in Export Folder (See p. 6-8) 1-18 Installing and Configuring of Express Server

31 Configuring the system environment according to the operation condition Customize the configurations related to the system environment, notification, agent connections, communication and port number settings according to your operation environment. Status Operation Refer to Configure the environment settings (See p. 6-25) Configure the notification settings (See p. 6-33) 1 Configure the agent connection, communications with agents, and port number to display (See p. 6-40) Overview of Express Server Installing and Configuring of Express Server 1-19

32 Express Server Components This section describes the components of Express Server. Service Provider 1 Overview of Express Server Service Provider stores job information from ir Agent documents the content data (image/text data) of the job by converting the image format or by formatting the text data, and stores the data in the Export Folder. The content data is converted to the following document file formats and stored in the Export Folder. Text data TXT file Image data (JPEG/TIFF) PDF file or JPEG/TIFF file Service Provider works in cooperation with multiple modules. The modules and their roles are shown below. Canon SAM Data Process Service Converts the format of the job information, text data and image data that are stored in the spool folder based on the settings, and creates document information. Canon SAM Export Service Stores the jobs in the Export Folder. Canon SAM Management Service Manages Service Provider status. It manages the following: Checking whether the agent is active Outputting system log files Monitoring communication disconnection Recovering at startup Updating system environment settings Deleting incorrect jobs Monitoring Data Process Service Shutting down Canon SAM Report Service Sends notification of the errors that have occurred in Agents or Service Provider to the system administrator and the administrator of each agent by . NOTE When you browse or operate the spool folder or the files in it during job processing, the folder may be left undeleted. To delete it, restart your computer. Service Provider is configured by System Manager. For details on the configuring procedures, see Chapter 6, "Configuring the Use of System Manager" Installing and Configuring of Express Server

33 System Manager You can use System Manager to configure the settings of Service Provider and ir Agent, which are components of Secure Audit Manager. In addition, you can also configure operation settings including system environment settings, notification settings and agent-communication settings and centrally manage the status of the entire system. System Manager is provided as a Web application that can be operated via a Web browser. ir Agent ir Agent is used in Express Server. ir Agent temporarily saves various job information including print/copy/fax data and the number of pages in the hard disk area exclusively prepared for Secure Audit Manager in an ir device and sent it to Service Provider according to the schedule settings. ir Agent is installed on ir devices as a MEAP application. The services provided with ir Agent are shown below. Collecting the information on jobs performed by ir device Obtaining the operation mode Sending job information to Service Provider It also displays screens for setting ir Agent operation or confirming status. These screens are used/configured by users. Registering to Service Provider Checking the Status of ir Agent The attribute information items are shown below. 1 Overview of Express Server Job Information Job Log ID / Job Type / Job Name / Job Start Date & Time / Content ID Send and Receive Information Communication Start Date & Time / Transmitted Page Number / Destination Number / Subaddress / Destination Address / Document Size for Transmission ir Device Information Device Name / Location / Serial Number / Department ID / User Name / Domain Name / Station ID Print Client Information Computer Name / IP Address / User Name / Domain Name Installing and Configuring of Express Server 1-21

34 1 Overview of Express Server 1-22 Installing and Configuring of Express Server

35 Designing and Building Your System Environment 2 This chapter describes how to design and build the system environment necessary for introducing Secure Audit Manager. CHAPTER Checking Secure Audit Manager Operating Environment Checking Security Environment Implementation Secure Audit Manager Design Check Secure Audit Manager Operation Check

36 Checking Secure Audit Manager Operating Environment 2 Designing and Building Your System Environment To introduce and operate Secure Audit Manager, review the following three items: Implementation of your security environment Design of Secure Audit Manager Operation of Secure Audit Manager To achieve the goal of effective security management using Secure Audit Manager, you should consider the following items when building your network environment. Checking Security Environment Implementation For security management with Secure Audit Manager to function effectively, a checking system must be built and operated for the target organization. This section reviews the implementation of your network security environment where Secure Audit Manager is installed. In this section, you will first review principles of implementation at the organization level and then review the eligibility of administrators. Clarifying the Responsibility and Authority for Security at the Organization Level Set up a specific group to continuously manage and monitor security. Appoint a security administrator in each department in the company. Create security policies for the entire company and for each department. Create rules that reflect the security policies for the entire company and for each department. Document the rules and make them known to employees through education and support. Revise the security rules to reflect changes in the environment. Appoint an internal or external person to deal with immediate problems as they arise. 2-2 Checking Secure Audit Manager Operating Environment

37 Checking Eligibility for Secure Audit Manager Administrators and Auditors (Administrators and Auditors) Check that the responsibility and authority of all administrators match their target business activities. Check that all administrators, auditors, and service engineers who deploy Secure Audit Manager are reliable. Check that all administrators and auditors have enough expertise and practical experience in operations with Secure Audit Manager. Check that no auditor has an interest in his or her target business. Check that all auditors have signed confidentiality agreements under which they may not disclose or use any confidential information obtained through their audit activities without authentication. Secure Audit Manager Design Check In the previous section, you reviewed principles of a security environment that has an effective checking system. In this section, you will check the system design when introducing Secure Audit Manager. In this section, you will review security policies for your network that eliminate security holes, and a data communication method that does not interfere with business activities. Reviewing Security Policies and Smooth Implementation of Business Processes Select either HTTP or HTTPS for your network communication protocol based on your security policies. HTTPS provides a higher level of security than HTTP although it slows down data transfer between Agent and Service Provider. Define the audit scope for Secure Audit Manager and configure the security domains. Consider how your network should be divided into security domains as follows: Partitioning physically or logically. Partitioning by access restriction to computers, printers, and multifunctional devices. Partitioning by operation of the network. Note that Secure Audit Manager is not designed to protect against external attacks or threats (including from the Internet). Configure a firewall to prevent such attacks. Ensure that Service Provider is connected through ir Agent to ir devices or printers/ multifunctional devices that support Secure Audit Manager. Secure Audit Manager does not log operations involving user data and destination tables accessed through User Mode of the touch-panel display of the ir device, such as the printing of lists and address books. To prevent unauthorized printing out of and modification of such lists, consider a security policy to protect them. Configure the ir device so that administrative users must provide a valid password when switching to Settings/Registration. Consult with the contracted distributor on the details of this setting. Restrict access to Express Server to administrators only. 2 Designing and Building Your System Environment Checking Secure Audit Manager Operating Environment 2-3