Product Security. Data Protection: Image Overwrite, Encryption and Disk Removal

(1)

Product Security

Data Protection: Image

Overwrite, Encryption and Disk

Removal

Version 10.2

July 14, 2016

(2)

Disclaimer

The information provided in this Xerox®_{Product Response is provided "as is" without}

warranty of any kind. Xerox Corporation disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Xerox Corporation be held responsible for any damages whatsoever resulting from user's use or disregard of the information provided in this Xerox®_Product

Response including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Xerox Corporation has been advised of the possibility of

damages. Some states do not allow the exclusion or limitation of liability for consequential damages so the foregoing limitation may not apply.

©2016 Xerox Corporation. All rights reserved. DocUSP®, BookMark® Centreware®, ColorQube® , ConnectKey® , CopyCentre®, Digital Bookmark®, Document Centre®, DocuColor®, Docuprint® , Docutech® , FaxCentre®, FreeFlow®, iGen®, Nuvera®, Phaser®, WorkCentre® and FreeFlow® are trademarks of Xerox Corporation in the United States and/or other countries.

(3)

Introduction

General Purpose and Audience

This document is intended to provide users of Xerox products accurate and actionable information to help them evaluate and manage risks associated with image data stored to disk drives or other non-volatile memory.

Summary Information

Xerox copiers, printers and multifunction products are devices that contain a computer and the necessary software that allows them to accomplish the many productivity-enhancing tasks that have become so valuable to today’s workplaces. These internal computers may have a disk drive or other non-volatile storage where job image data may be temporarily written during processing. Additionally, jobs may be stored for later reprint on some models. From the introduction of the first digital products, Xerox has recognized the risk of retained data being inappropriately recovered from non-volatile storage and built features and countermeasures into our devices to help customers safeguard their data.

Up to date product security information is maintained at www.xerox.com/security Information including security bulletins, patch information, US-CERT advisory updates, white papers, and videos on what customers can do to mitigate security risks can be found. Xerox provides detailed information about internal product workflows and features such as image overwrite in Information Assurance Documents which are available for many products at the website or as requested for older products.

Security Features

Jobs may be written to nonvolatile memory (e.g. to a hard drive) during processing. Generally, when a job finishes, this data is deleted, but may still be recoverable using forensic tools. Image overwrite is effective at eliminating this job data from the hard drive once the data is no longer needed. Xerox also scrambles the data with the user data encryption feature. This further protects data at rest from unauthorized access. Xerox recommends that the following features be enabled.

Fortunately, countermeasures are built into products to reduce this risk.

• Immediate Job Overwrite or Immediate Image Overwrite is a feature that deletes and overwrites (with a specific data pattern) disk sectors that temporarily contained electronic image data. Products that use hard disk drives to store job data initiate this process at the completion of each job. This conforms to NIST Special Publication 800-88 Rev1. This should be enabled (and is by default on many products).

• On Demand Image Overwrite is a manually initiated (can also be scheduled) feature that deletes and overwrites (with a specific data pattern) every sector of any partitions of the hard drive that may contain customer data. The device will be offline for a period of 20 minutes to one hour while this completes. This conforms to NIST Special Publication 800-88 Rev1. ODIO is effective as an extra protection step when the utmost in security is needed.

• Disk or User Data Encryption is a feature which encrypts all partitions of the hard drive that may contain customer data with AES encryption. This should be enabled (and is by default on many products). Encryption can be used in combination with either overwrite feature.

• Hard Drive Retention Offering is a service where, prior to a device being returned a Xerox technician can remove the hard drive and leave it with the customer. This program charges a flat fee per machine for the service. Contact Xerox Customer Support for information on fees and availability in your geography. There is a whitepaper describing this program on the Xerox Security website

(4)

Product Security Data Protection

Things to Remember

• Not all products have hard disk drives. Those that do not are not at risk.

• Some products have hard disk drives, but do not use the hard disk drive to save document images. These are also not a risk.

• If a Xerox product is powered off before an Overwrite operation completes, there may be remnants of data left on the drive. A persistent message will appear on the device indicating the incomplete overwrite operation. In this event, it is recommended that an On Demand Image Overwrite be performed.

• NOTE: Xerox strongly recommends the default Administrator password be changed on all devices to prevent unauthorized access to configuration settings.

Xerox does not offer sanitization or cleansing services for returned disk drives.

(5)

Product Details

The tables below will help you to identify Xerox products containing disks or other nonvolatile storage and whether those products include image overwrite and disk encryption features. Some products offer these features as an optional accessory to the product. Instructions on how to install or enable image overwrite or disk encryption can be found in the product documentation which is available online at www.xerox.com in the ‘Support and Drivers’ link. Xerox offers technical and professional services to assist you.

Hard Drive Standard

These products include hard drives.

Product Designation Immediate Job

Overwrite On Demand Image Overwrite Disk Encryption

ColorQube 9301/9302/9303 Yes Yes Yes

DocuColor 1632, 2240 No No No

DocuColor 240, 250 Yes Yes Yes

DocuColor 242, 252, 260 Yes Yes Yes

DocuColor 2045/2060/5252/6060 No Optional No

Document Centre 220, 230, 240, 255, 265, 332,

340 No No No

Document Centre 420, 425, 426, 430, 432, 440,

460 No No No

Document Centre 460ST, 470ST, 480ST, 490ST Optional Optional No

Phaser 3635MFP Optional Optional Yes

Phaser 7750, 7760, 7800, 8560, 8860 Yes Yes Yes

WorkCentre 3655 Yes Yes Yes

WorkCentre 4150, 4250, 4260 Optional Optional Yes

WorkCentre 5016, 5020 Yes Yes Yes

WorkCentre 5845/5855/5865/5875/5890,

5945/5955 Yes Yes Yes

WorkCentre 6400, 6655 Yes Yes Yes

WorkCentre 7120/7125, 7132, 7232, 7242, 7228 Optional Optional Optional

WorkCentre 7220/7225 Yes Yes Yes

WorkCentre 7228, 7235, 7245 Optional Optional Optional

WorkCentre 7328/7335/7345/7346 Yes Yes Yes

WorkCentre 7830/7835/7845/7855, 7970 Yes Yes Yes

WorkCentre C226 Optional Optional Optional

WorkCentre C2424 Yes Yes Yes

(6)

Hard Drive Optional

Hard drives for these products must be purchased.

Document Centre 535, 545, 555 Yes Yes No

Phaser 4500, 4510 Yes Yes Yes

Phaser 4600/4620/4622 Yes Yes Yes

Phaser 5500, 5550 Yes Yes Yes

Phaser 6120, 6350, 6360, 6700 Yes Yes Yes

Phaser 6280 No No No

Phaser 6360 No Yes No

Phaser 6600 No Yes Yes

Phaser 7300, 7400, 7500 Yes Yes Yes

Phaser , 8500, 8550, 8560, 8860 Yes Yes Yes

Phaser 8400 Yes Yes No

WorkCentre M123, M128, 133 Optional Optional Optional

WorkCentre Pro 123, 128, 133 Optional Optional Optional

Hard Drive Standard,

Fax nonvolatile memory

not overwritten

Overwrite features do not overwrite fax data.

WorkCentre 7655/7665/7675 Yes Yes Yes

WorkCentre BookMark 40/55 Yes Yes No

WorkCentre 232/238/245/255/265/275 Yes Yes Yes

WorkCentre 5030/5050, 5135/5150 Yes Yes Yes

WorkCentre 5325/5330/5335 Yes Yes Yes

WorkCentre

5632/5638/5645/5655/5665/5675/5687 Yes Yes Yes

WorkCentre

5735/5740/5745/5755/5765/5775/5790 Yes Yes Yes

WorkCentre M35, M45, M55, M165, M175 Yes Yes No

WorkCentre Pro 165, 175 Yes Yes No

WorkCentre Pro 232/238/245/255/265/275 Yes Yes Yes

WorkCentre Pro 32, 35, 40, 45, 55, 65/75/90 Yes Yes No

(7)

No hard drive

These products have no hard drives. 214/212 3100MFP, 3200MFP 3160B, 3160N, 3150, 3425, 3300MFP, 3140, 3155B, 3428, 3250, 3500, 3600, 3610, 6000 /6010, 6110MFP 412, 416, 421, 3119, 3550 5090/5090S, 5390, 5690 Copier 6115, 6121, 6128, 6180 MFP DocuColor 12 FaxCentre F12,110,116,118,2121, 2218 M118, M118i, PE120, PE120i,

WorkCentre 6015, 6505

WorkCentre M20, M20i, M15, M15i, WorkCentre 3210, 3220, 3615 WorkCentre 4118, 4150/C WorkCentre Pro 215,

Additional Information

For additional information or clarification on any of the product information given here, contact your local Xerox Customer Support Centre (see table below); or visit the Xerox Website.

United States 800-835-6100 Luxembourg 480123

Austria +43 1 2079000 Netherlands +31 020-6563620 Belgium +32 (2) 713 14 52 (Français), +32 (2) 713 14 53 (Nederlands) Norway +47 81 500 308 Canada 1-800-835-6100 Portugal, 707 200 578 Denmark +45 70107288 Spain +34 902 160 236 Finland +358 09 693 79 666 Sweden + 46 0771 178 808 France 0825 012 013 Switzerland French: 043 299 9001 German: 043 299 9000 Italian: 043 299 9002 Germany +49 180 5004392 UK +44 0870 9005501 Greece +30 801 11 93769 Italy +39 199 11 20 88

Xerox welcomes feedback on all documentation - send feedback via e-mail to: Product.Security@xerox.com.