Konica Minolta IC-308 - Manual (Page 4)

4
2 Hardware and Physical Security
2.1 Volatile Memory
The Fiery server uses volatile RAM for the CPU’s local memory
and for the operating system, Fiery system software and image
data’s working memory. Data that is written to RAM is held while
the power is on. When the power is turned off, all data is deleted.
2.2 Non-Volatile Memory and Data Storage
The Fiery server contains several types of non-volatile data
storage technologies to retain data on the Fiery server
when the power is turned off. This data includes system
programming information and user data.
2.2.1 Flash Memory
Flash memory stores the self diagnosis and boot program
(BIOS) and some system configuration data. This device is
programmed at the factory and can be reprogrammed only
by installing special patches created by EFI. If the data is
corrupted or deleted, the system does not start.
A portion of the flash memory also is used to record the
use of dongle to activate Fiery software options.
No user data is stored on this device, and the user does
not have data access on it.
2.2.2 CMOS
The battery-backed CMOS memory is used to store the
server’s machine settings. None of this information is
considered confidential or private. Users may access these
settings on a Windows
®
7 Professional Server via the FACI
(local monitor, keyboard and mouse) kit if installed.
2.2.3 NVRAM
There are a number of small NVRAM devices in the
Fiery server that contain operational firmware. These devices
contain “non-customer specific” operational information. The
user does not have access to the data contained on them.
2.2.4 Hard Disk Drive
During normal print and scan operations as well as during
job management information is created, image data is
written to a random area on the Hard Disk Drive (HDD).
Image data and job management information can be deleted
by an Operator or at the end of a pre-set time period, so
image data becomes inaccessible.
To protect the image data from unauthorized access,
EFI provides a Secure Erase feature (see section 6.2.4).
Once enabled by the system administrator, the selected
operation is carried out at the appropriate time to securely
erase deleted data on HDD.
2.2.5 Physical Ports
The Fiery server can be connected through the following
external ports:
Fiery Ports Function Access Access Control
Ethernet RJ-45
connector
Ethernet
connectivity Network connections
(see printing and
network connections
below) Use Fiery IP filtering
to control access
Copier interface
connector Print/Scan Dedicated for sending/
receiving to/from the
print engine N/A
USB Port USB device
connection Plug and play
connector designed
for use with optional
removable media
devices USB printing can be
turned off. Access to
USB storage devices
can be turned off
through Windows’
Group Policy.
2.3 Local Interface
The user can access the Fiery functions via the FACI kit (if
enabled on a Windows 7 Professional server) or via the Fiery
LCD on Fiery servers. Security access on the Fiery Server
with FACI kit is controlled through Windows administrator
password if the FACI kit is enabled. The Fiery LCD provides
very limited functions that do not impose any security risk.
2.4 Removable HDD Kit Option
The Fiery server supports a Removable Hard Disk Drive
option kit for increased security. This kit provides the user
with the ability to lock the server drive(s) into the system for
normal operation and the ability to remove the drives to a
secure location after powering down the server.
2.4.1 For External Servers
Fiery servers support a Removable Hard Disk Drive option kit.
Whether this option kit is available for a specific Fiery product
depends on the terms of EFI’s development and distribution
agreements with its individual engine manufacturers.
2.4.2 For Embedded Servers
Integrated Fiery servers can only offer a removable HDD
as an option through an authorized Fiery dealer because
the mounting location and brackets for the multifunction
printer (MFP) must be developed jointly with the engine
manufacturer. The option kit is to take the internal HDD
out from embedded chassis and mount to an external and
separately powered enclosure.