Generating a Server Certificate (Self-signed Certificate)
When you use SSL connection via IPv6 network, you need to generate an IPv6 server certificate using the printer.
Generate the server certificate from the Remote UI.
Follow the procedure below.
-
Checking Printer's IP Address
-
Generating Server Certificate
-
Checking Generated Server Certificate
If you generate an IPv6 server certificate, a warning message may appear if you are using the Remote UI.
To reset the IPv6 server certificate, select Security -> SSL/TLS settings -> Delete key and certificate in this order, and select OK on the displayed screen.
Checking Printer's IP Address
-
Make sure that the printer is powered on.
-
Select 
(Setup) on the HOME screen.
The setup menu screen will appear.
If User management settings is enabled, the user selection screen is displayed before the HOME screen is displayed.
-
Select 
Device settings.
-
Select LAN settings.
-
Select Wi-Fi.
-
Select See settings.
-
Write down the value on IPv6 link-local address for your reference when you open the Remote UI or generate a server certificate.
Generating Server Certificate
-
Open web browser on your smartphone, tablet, or computer and enter the printer IP address.
Enter as following in the URL field of the web browser.
http://[XXXX::XXXX:XXXX:XXXX:XXXX]
On "XXXX::XXXX:XXXX:XXXX:XXXX", enter the abbreviation value on "3-2-16 Link Local Address".
The top screen of the Remote UI appears.
-
Select Log in in the Remote UI.
If you specify the administrator password, enter the password.
-
Select Security.
-
Select SSL/TLS settings.
-
Select Generate key and certificate.
-
Select Generate self-signed cert.
The Generate self-signed cert screen appears.
Specify each setting item.
-
Signature algorithm
Select SHA256.
-
Public key length (bits)
Select 2048 bits.
-
Specify the expiration date.
Enter the date you generated the server certificate on Valid from.
Enter the date the server certificate expires on Valid to.
-
Enter the common name.
Enter the value in Common name you checked and wrote down on "3-2-16 Link Local Address".
When you enter the common name, add [ ] to each end of the printer's IP address.
Do not use a comma or make a space for the common name.
-
Select Next.
You need not enter anything on Country, State or province, Locality, Organization, Organizational unit or Subject Alternative Names.
-
Select Generate.
The server certificate starts to be generated.
When the server certificate has been generated, Generated a self-signed certificate. appears.
-
Select Restart LAN (Local Area Network).
LAN will be restarted.
When LAN has been restarted, Printer status in the Remote UI appears.
If you cannot access the Remote UI after you restart LAN, reload your web browser.
Checking Generated Server Certificate
-
Select Security in the Remote UI.
-
Select SSL/TLS settings.
The SSL/TLS settings screen appears.
-
Select Check key and certificate.
The Check key and certificate screen appears.
Make sure the issuer of the root certificate is displayed on Issued by, and the value you entered on Common name on Subject.
If your product issue was not resolved after following the steps above, or if you require additional help, please create or log in to your Canon Account to see your technical support options.
Or if you still need help, visit our Canon Community by clicking the button below to get answers:
____________________________________________________________________________________________
