Canon imageRUNNER®/imageRUNNER ADVANCE/imagePRESS® Hard Disk Drive Data Security Options Data Encryption and Overwrite Canon imageRUNNER/imageRUNNER ADVANCE/imagePRESS Hard Disk Drive Data Security Kits Powerful protection for your most important information. Ever since hard disk drives became the norm on multifunction peripherals, Canon has been committed to protecting your data against compromise. Standard Hard Disk Drive Format To facilitate the security of information on the hard disk drives of imageRUNNER, imageRUNNER ADVANCE, and imagePRESS systems, Canon offers the standard hard disk drive format feature. Best practices, and often company policies, usually recommend that systems be completely wiped prior to being redeployed or at the end of their usable lives. The Hard Disk Drive Format feature allows an end-user to completely overwrite all data stored on the hard disk—such as image files, job logs, address books, and customized user mode settings—with a single overwrite of null data. For organizations that require a higher level of protection, Canon offers additional Hard Disk Drive (HDD) Security options for imageRUNNER, imageRUNNER ADVANCE, and imagePRESS systems. Whether you need to meet the strict security demands of the private sector or comply with the stringent privacy and auditing regulations of the public sector, Canon provides two optional features that deliver higher levels of protection— HDD Data Encryption and HDD Data Erase. imageRUNNER ADVANCE C5051 imagePRESS 1135P HDD Data Encryption Kit Proven algorithms protect your data. The Canon HDD Data Encryption Kit option has been designed to protect all temporary data and stored documents on the internal disk drive through proven industry-standard encryption algorithms. Recognized for its strong level of security by the National Institute of Standards and Technology (NIST) and the National Security Agency (NSA), the HDD Data Encryption Kit is a dedicated plug-in board that encrypts every byte of data before it’s committed to the disk using 256-bit AES (Advanced Encryption Standard) or 168-bit TDEA (Triple Data Encryption Algorithm) algorithms (depending on model). The HDD Data Encryption Kit utilizes an inaccessible secret key that’s stored on the plug-in board to encrypt and decrypt all data that’s stored in random, non-continuous portions of the disk drive. Once written, the data is virtually irretrievable by anyone seeking to recover it from within the device or through external file recovery utilities. Common Criteria a Canon MFP security chips are Common Criteria Certified. Each of the optional HDD Data Encryption Kits are equipped with the Canon MFP Security Chip, which has achieved a Common Criteria Certification of Evaluation Assurance Level 3 (EAL3) for its effectiveness at preventing unauthorized access to data proven through methodical testing and verification. This level of assurance may assist organizations with meeting their internal privacy goals, addressing regulations such as the Gramm-Leach-Bliley Act (GLB), Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA), and Family Education Rights Privacy Act (FERPA). HDD Data Erase Kit Even after deletion, data can be potentially retrieved. Once data has been committed to any disk drive, the potential exists for it to be retrieved–even after deletion–unless it’s been effectively overwritten. To counteract this reality, Canon offers the optional HDD Data Erase function within imageRUNNER, imageRUNNER ADVANCE, and imagePRESS systems. Once activated, the HDD Data Erase function overwrites traces of data on the disk drive. Only management data is deleted after output while the actual data remains vulnerable on the hard disk. Deletion of data is complete, leaving nothing vulnerable on the hard disk. ng a Usi n t a D f Job se Optio ion o Delet Data Era DD the H Each output is overwritten with zero or random data. Canon’s overwrite options securely erase your data. Depending on the level of security required, the HDD Data Erase feature can continuously perform one of three different actions on the sectors of the disk drive targeted for overwrite. To remove the possibility of erased data being retrieved, the HDD Data Erase feature can be configured to overwrite once with null data, overwrite once with random data, overwrite three times with random data, or DoD 5022.22M* 3-pass overwrite mode for maximum security. The overwrite process is continued and performed while the device is being utilized.** Once an imageRUNNER, imageRUNNER ADVANCE, or imagePRESS system is equipped with the optional HDD Data Erase Kit, the standard HDD format technology may be expanded to a 3-pass overwrite. If the optional HDD Erase Kit is installed and used in conjunction with the Standard Hard Disk Drive Format feature, the additional overwrite features found in the HDD Erase Kit will be available. *DOD 5022.22M 3-Pass Overwrite Mode available for imageRUNNER ADVANCE models. **Only available on certain models. See included comparison chart to view devices that support Common Criteria Certified HDD Data Erase Kits. Compatibility Charts imageRUNNER/imageRUNNER ADVANCE HDD Encryption Kits HDD Data Mirror & Encryption Kit C1 HDD Data Mirror & Encryption Kit C2 HDD Data Encryption Kit C3 HDD Data Encryption Kit B5 HDD Data Encryption Kit B9 Common Criteria Certification Supported Devices HDD Data Mirror & Encryption Kit D1 HDD Data Encryption Kit B7 HDD Data Encryption Kit B1 HDD Data Encryption Kit B4 HDD Data Encryption Kit B2 EAL3 imageRUNNER ADVANCE C9075PRO/ C9065PRO/ C7065/7055/ C5051/C5045/ C5035/C5030 imageRUNNER imageRUNNER imageRUNNER ADVANCE ADVANCE 3245/3235/ 8105/8095/8085/ C2030/C2020 3230/3225 6075/6065/6055 imagePRESS C7010VP/ C6010VP/ C6010 imagePRESS 1135P/1125P/ 1110P/1110S imagePRESS imageRUNNER imageRUNNER 1135P/1125P/ C3480/C3380/ 3045/3035/ 1110P/1110S C2880/C2550/ 3030/3025 C5185/C4580/ C4080 imageRUNNER 7105/7095/7086/ 5075/5065/5055/ 5050 imagePRESS C1+ Install Encryption Kit Activation Uninstall Encryption Kit Deactivation AES (256-Bit) HDD Encryption imageRUNNER/imageRUNNER ADVANCE/imagePRESS HDD Erase Kits Common Criteria Certification Supported Devices HDD Data Erase Kit-C1 HDD Data Erase Kit-B2 – EAL3 imagePRESS C1+/C7010VP/C6010VP/C6010/1135P/1125P/1110P/1110S imageRUNNER 3245/3245i/3235/3235i/3230/3225/3045/ imageRUNNER ADVANCE C9075 PRO/C9065 PRO/C7065/C7055/C5051/ 3035/3030/3025 C5045/C5035/C5030/C2030/C2020/8105/8095/8085/C6075/6065/6055 imageRUNNER C5185/C4580/C4080/C3480/C3480i/C3080i/7105/7095/ 7086/5075/5065/5055/5050 LMS License Access Key Activation Yes Deactivation HDD Overwrite No Null: Once; Random Data: Once; Random Data: Three Times DoD 5022.22M: 3-Pass Overwrite Mode (imageRUNNER ADVANCE Devices ONLY) Null: Once; Random Data: Once; Random Data: Three Times imageRUNNER HDD Security Kits Security Kit-A2 Common Criteria Certification Supported Devices N/A imageRUNNER C6870U/ C5870U/C5185/C5180/C4580/ C4080/C3170U/C3170i/105+/9070/ 8070/85+/7105/7095/7095 Printer/ 7086/6570/5570/5070/4570/3570/ 2870/2270 Security Kit-B2 Security Kit-B2 v2 EAL3 EAL3 imageRUNNER 4570/3570/ 2870/2270 imageRUNNER 4570/3570/ 2870/2270 LMS License Access Key Activation Deactivation Yes (in the Service Mode) No Functions HDD Encryption 3DES (168-Bit) HDD Overwrite Null: Once; Random Data: Once; Random Data: Three Times LEGEND: – = Does not applyN/A = Not available Security Kit-B3 EAL3 imageRUNNER 6570/5570 (imageRUNNER 5070 is not supported) For more information, call your Canon Authorized Dealer or visit www.usa.canon.com online. Statements made in this document are the opinions of Canon U.S.A. None of these statements should be construed as legal advice, as Canon U.S.A. does not provide legal counsel or compliance consultancy, including without limitation Sarbanes-Oxley, HIPAA, GLBA, CASB 1386, FISMA, Check 21, or the US Patriot Act. Each customer must have its own qualified counsel determine the advisability of a particular solution as it relates to regulatory and statutory compliance. CANON, IMAGEPRESS, and IMAGERUNNER are registered trademarks of Canon Inc. in the United States and may also be registered trademarks or trademarks in other countries. IMAGEWARE is a registered trademark of Canon U.S.A., Inc. in the United States and is a trademark of Canon Inc. in certain other countries. IMAGEANYWARE is a trademark of Canon. All other referenced product names and marks are trademarks of their respective owners and are hereby acknowledged. Some items may not be available at this time; please check for availability. Specifications and availability subject to change without notice. ©2013 Canon U.S.A., Inc. All rights reserved. 1212RA-DEO-PDF-NR 1–800-OK-CANON www.usa.canon.com Canon U.S.A., Inc. One Canon Park Melville, NY 11747