Ensure stored data is encrypted and securely erased (job overwrite and decommissioning)

高等級 1人工審核printer

說明

Printer hard disks and flash keep copies of printed, scanned, copied and faxed documents. Storage encryption plus immediate image overwrite protects data at rest; a secure (cryptographic or DoD-style) erase is required before resale, return or disposal.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

In the Embedded Web Server (EWS: browse to https://<printer-ip>/ and sign in as administrator; HP: Security / Networking tabs, Xerox: Properties > Security / Connectivity, Ricoh: Device Management > Configuration, Canon: Settings/Registration > Network Settings / Security Settings) > Security > Stored Data Protection / Secure Storage (HP: Security > Protect Stored Data; Xerox: Security > Image Overwrite Security; Ricoh: Data Overwrite / Machine Data Encryption): storage encryption ON, 'Immediate Image Overwrite' / 'Secure Fast Erase' ON, and the decommissioning procedure (Secure Storage Erase / Sanitize, 'Erase All Data') is documented and evidenced for retired devices (certificate of sanitisation).

修補方式

修補方法: 操作指南或基礎設施修補檔

Enable the device's data encryption (Encrypted Hard Disk / Machine Data Encryption) and immediate image overwrite; before decommissioning run the vendor secure erase (e.g. HP 'Secure Sanitize Erase', Xerox 'On-Demand Image Overwrite - Full', Ricoh 'Erase All Memory') or destroy the drive, and record it.

屬性

作業系統: 不限
標籤: printerdata-at-restsanitisation
參考資料: CIS Multi-Function Device Benchmark v1.0.0 - Storage encryption and secure erase (verify section number for your release)