Install and configure the TLS certificates

Before performing any Device Registration Service (DRS) actions, it is recommended that you verify the following TLS certificate configuration on the Ricoh MFP.

Note: If you are not using a self-signed certificate (generated by the device), but instead using a certificate signed by a Certificate Authority (CA), you must import the CA certificate into DRS.

After installing DRS , complete the following steps.

Verify that the device certificate is installed and the TLS certificate is specified.
1. On the Web Image Monitor application (which allows users to remotely monitor and change the network configuration via web browsers as long as the target MFP is networked and has an IP address), open Device Management > Configuration > Security > SSL/TLS.
2. If the SSL/TLS certificate is not selected, select it.
3. Click OK.
Verify that the Ciphertext Priority option is selected.
1. On the Web Image Monitor application, open Device Management > Configuration > Security > Device Certificate.
2. In the Permit SSL/TLS Communication field, select Ciphertext Priority.
  
  Note: If you are not using a self-signed certificate (generated by the device), but instead using a certificate signed by a Certificate Authority (CA), you must import the CA certificate into the appropriate Trusted Root CA store of the system where DRS is installed.
  
  Note: To use Ricoh configuration tools, you must select at least one of the following options: TLS1.0, TLS1.1, or TLS1.2 (support for SSL 3.0 has been discontinued). Support for the newer cryptographic protocols such as TLS 1.1 and 1.2 are provided to Windows through the Security Support Provider Interface (SSPI) API. To enable TLS versions, use Registry Editor. Once the registry changes are made, you may need to restart your server.
  
  Note: You can also configure these settings using the operation panel under Extended Feature Settings by selecting available functions. This operation panel is only displayed on the MFP device after logging in with administrator credentials.
3. Click OK.