TMAegis
Више правила за printer

TMA-PRINTER-SECURE-ERASE

Ensure stored data is encrypted and securely erased (job overwrite and decommissioning)

ВисокаНиво 1Ручни прегледprinter

Опис

Printer hard disks and flash keep copies of printed, scanned, copied and faxed documents. Storage encryption plus immediate image overwrite protects data at rest; a secure (cryptographic or DoD-style) erase is required before resale, return or disposal.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

In the Embedded Web Server (EWS: browse to https://<printer-ip>/ and sign in as administrator; HP: Security / Networking tabs, Xerox: Properties > Security / Connectivity, Ricoh: Device Management > Configuration, Canon: Settings/Registration > Network Settings / Security Settings) > Security > Stored Data Protection / Secure Storage (HP: Security > Protect Stored Data; Xerox: Security > Image Overwrite Security; Ricoh: Data Overwrite / Machine Data Encryption): storage encryption ON, 'Immediate Image Overwrite' / 'Secure Fast Erase' ON, and the decommissioning procedure (Secure Storage Erase / Sanitize, 'Erase All Data') is documented and evidenced for retired devices (certificate of sanitisation).

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Enable the device's data encryption (Encrypted Hard Disk / Machine Data Encryption) and immediate image overwrite; before decommissioning run the vendor secure erase (e.g. HP 'Secure Sanitize Erase', Xerox 'On-Demand Image Overwrite - Full', Ricoh 'Erase All Memory') or destroy the drive, and record it.

Својства

Оперативни системи
Било који
Ознаке
printerdata-at-restsanitisation
Референца
CIS Multi-Function Device Benchmark v1.0.0 - Storage encryption and secure erase (verify section number for your release)