Canon Paper Shredder User Manual page 17

Section 3 — Information Security
•
Unsent documents (reserved documents and documents set with the Delayed Send mode)
•
Job history
•
Settings/Registration settings
•
Forms registered for the Superimpose Image mode
•
Registered forwarding settings
•
Key Pair and Server Certificate registered in [Certificate Settings] in [Device Management] in
Management Settings (from the Settings/Registration screen)
The standard HDD format feature that is included with every imageRUNNER ADVANCE system
will perform a one pass overwrite using null characters. If the optional HDD Erase Kit is installed,
the HDD Format feature provides additional overwrite options, including the choice to perform a
DoD 5022.22M compliant 3-pass overwrite.
HDD Data Encryption Kit
The HDD Data Encryption Kit option, which has achieved Common Criteria Certification of
Evaluation Assurance Level 3 (EAL3), ensures that all data stored on the internal disk drive is
protected using industry-standard algorithms. The HDD Data Encryption Kit for imageRUNNER
ADVANCE systems uses a dedicated plug-in board that encrypts every byte of data before it is
committed to the disk using the 256-bit AES (Advanced Encryption Standard) algorithm.
Please refer to Section 9.2 for information on the Canon imageRUNNER ADVANCE Hard Disk Drive
Security Kit Options.
* Please see the imageRUNNER Bulletin #5.10 issued on 4/26/10 entitled Hard Disk Drive Format Technology Procedures for
imageRUNNER, imageRUNNER ADVANCE and imagePRESS devices to learn more about this feature.
HDD Data Erase Kit
The optional HDD Data Erase Kit enables system administrators to configure their
imageRUNNER ADVANCE to overwrite the internal image server hard disk and erase previous
data as part of routine job processing. The technology can be set to overwrite:
1. Once with null data,
2. Once with random data,
3. Three times with random data,
4. Or DoD 5022.22M 3-pass overwrite mode.
Please refer to Section 9.2 for information on the Canon imageRUNNER ADVANCE Hard Disk Drive
Security Kit Options.
Timing of Overwrite
The timing of the delete is sensitive to what mode and finishing options are set at the time of print
out. Generally, if a jam or other unexpected abnormal end to operation occurs on the device, page
data will be stored until the job can be completed and then overwritten on the hard disk drive.
Please see below for overwrite examples of what occurs on the device in certain job modes using a
job consisting of three sets of three originals.
White Paper: Canon imageRUNNER ADVANCE Security
17