Setting up security

You can control access to the RICOH ProcessDirector system with user names and security groups. You can also increase the security of the data in your print system by enabling Secure Sockets Layer (SSL) or Transport Layer Security (TLS) in the Web server component. If you exchange data with a web service, you can install a security certificate for the web service.

All users who access the RICOH ProcessDirector system must have a RICOH ProcessDirector user name and must be assigned to a security group based on job role requirements.

Users can be members of more than one security group. If you belong to more than one group, the system automatically gives you the authority of the highest level group that you belong to. For example, you might be a member of both the Operator and Supervisor groups. When you log in, the system gives you Supervisor authority so you can do actions that a member of the Operator group cannot.

In this section:

  1. Defining user names
    Users must have a RICOH ProcessDirector user name to access the system and to do RICOH ProcessDirector actions.
  2. Defining security groups
    Security groups define specific authority levels for the actions that can be done in the user interface for each type of object. When a member of a group logs in to RICOH ProcessDirector, the only actions that are available in the user interface are the ones that the group is authorized to do. You can also select what properties of each object can be viewed or set by members of a security group. You can select a default Main page view for all the users in a security group.
  3. Creating credentials
    A credential object specifies the user authentication information required to access an SFTP server. If multiple input devices or steps access the same SFTP site with the same credentials, you can specify the user authentication information once in the Credential object and then select that credential in the step or input device that needs it.
  4. Enabling Secure Sockets Layer or Transport Layer Security
    You can activate Secure Sockets Layer (SSL) or Transport Layer Security (TLS) protocols for secure encrypted connection using RICOH ProcessDirector settings.
  5. Setting a password expiration counter
    You can set a limit on how long all passwords in the system can be used before they must be changed. The limit applies to all users.
  6. Enforcing password complexity
    You can enable complex password rules.
  7. Setting up to use LDAP authentication
    If you have an existing LDAP or Active Directory server, you can use LDAP or Active Directory user names and passwords to authenticate into RICOH ProcessDirector.
  8. Communicating between RICOH ProcessDirector and the LDAP server
    When you set up communications between RICOH ProcessDirector and your LDAP server, you might have to modify your LDAP server settings for these binds and search requests.
  9. Installing a security certificate for a web site
    Before you exchange data with a secure web site, install the security certificate for that web site. The process involves downloading the certificate from the web site and adding it as a trusted certificate to your Java Virtual Machine (JVM) Trust Store.

Related information:

Security
Migrating to LDAP security
Setting up to use LDAP authentication
Changing group membership for a user
Advanced security functions
Advanced security functions
Parent topic: Configuring the system