Epson Security Statement

The increasing diversification of workspaces and growing complexity of network environments makes stringent security protocols for printers more important than ever. To ensure security for all its customers, Epson uses unified security frameworks and consistent methodologies throughout the design and delivery of all its products.

To protect our customers’ information assets against increasingly sophisticated threats, Epson implements optimal security measures on both the software and hardware levels across the entire cycle from product design to its development, production, distribution, and maintenance.

Concept of security at
each stage of the product life cycle

To provide more security for our customers, at Epson, we closely examine different usage conditions for each product category and implement endpoint security throughout the entire cycle from product design to its development, assessment, manufacturing, distribution, and maintenance.

①Planning

At the product planning stage, we continuously monitor the newest security trends and potential vulnerabilities. We also listen to our customers’ requests, identifying and analyzing security-related requirements. This way, we eliminate potential problems in our products before any risks can materialize.
②Development

Using our original common platforms and technologies cultivated throughout the development of a wide range of products, from office/home printers to commercial/industrial small and large format printers, we strive to enhance the protection against security risks.
③Assessment

In addition to thorough in-house testing, we also involve third-party organizations for objective security assessment. With our strict security verification system, we conduct the assessment from different angles to ensure high security for our products.
④Manufacturing

To ensure the highest quality of our manufacturing operation, we have implemented a thorough information asset management system at our factories, where we install software that enables the functionality of our products.
⑤Sales

We are committed to supporting our customers by proposing and implementing solutions to minimize security risks depending on the use environment and operational conditions. We also make sure to quickly address any vulnerabilities that may arise after the installation of our products.
When products need to be replaced and disposed of, we make sure to reset the devices to the factory default settings to prevent confidential information leaks.
⑥Maintenance

We quickly respond to security-related issues and concerns reported by clients who purchase our products.

Epson's proprietary SoC and firmware platform technology protects customer information and products from security threats

At Epson, we developed our own multi-core SoC and combined it with our original firmware that optimally handles various processes, such as mechanical control and image processing, to create a platform with excellent performance and safety. By separating the communication unit, which has a particularly high security risk, from other information processing units, we prevent external unauthorized access and protect our customers' important information.

Security threats and
the corresponding countermeasures

Business Printer

Receipt Printer

Label Printer

Large Format Inkjet Printer

SC-P8550DM/SC-T7750DM

AM-C6000/C5000/C4000

Threat

Manipulation of the control panel by a malicious third party

Countermeasure

・Restricted access to print, scan, copy, and fax functions You can limit the scope of functions (such as print, scan, copy, fax) accessible by each user.
Allowing access only to the functions minimally necessary to the user’s duties helps minimize the risks of unauthorized browsing and leaks of document data.

・User authentication in conjunction with access restriction to certain functions User authentication can be carried out by password input or by using authentication devices such as ID card readers. You can limit which user can access each of these functions.

・Logging and auditing You can keep a record of print, copy, scan, fax transition/reception, and configuration changes, which can all be stored in an audit log on the device.
Regular review of the audit log allows for early detection of any unauthorized use and follow-up investigation after occurrence of any security-related incidents.

Threat

The product is unusable or does not function properly

Countermeasure

・Firmware signature verification The use of digital signature technology prevents unauthorized firmware updates. When the device is prompted for a firmware update, this feature checks the attached digital signature and only executes the update if the firmware is authorized.

・Secure boot This feature checks the program code upon the device startup and only allows its operation after successful confirmation of the code.

Threat

Data theft from the memory modules installed inside the device

Countermeasure

・Password encryption and password policies Passwords saved in the device are encrypted to protect them from leaks.
Complex rules can be added for selected passwords to prevent the creation of easy-to-guess passwords.

・TPM(Trusted Platform Module: security chip) Critically important information (such as private keys) used for encryption is stored on a dedicated security chip (TPM) installed on the device.

・Encryption and mirroring of HDD/SSD data When data is recorded to the HDD/SSD within the device, the same content is encrypted and saved in a separate location. This way, all the important customer data is protected from data leaks, tampering, and accidental loss due to issues such as hard drive failure.

・Initialization of user data and erasing stored data from the HDD/SSD When disposing of or transferring the device to another party, all the configurations and data stored in the device (including the data saved on the internal HDD/SDD) are reset to factory defaults (initialized) in order to prevent leaks of any confidential information.

Threat

Important printed documents seen by a third party

Countermeasure

・Password-protected printing When this feature is enabled, it only allows printing after entering a password directly on the device. This prevents data leaks that result from the unauthorized browsing of the documents in the printer output bin.

・Authenticated printing and authenticated scanning With the Epson Print Admin or Epson Print Admin Serverless option, you can require printing authentication using an IC card or another authentication device to ensure that the authorized person is present to pick up the printed materials. This helps prevent the misplacement of important documents and leaks of confidential information.

Threat

Unauthorized device operation and configuration changes by intrusive programs

Countermeasure

・Run-time intrusion detection This function monitors control programs running on the device and terminates unauthorized invasive programs.

Threat

Theft or alteration of confidential information during data transmission

Countermeasure

・IPsec/IP filtering (Security Architecture for Internet Protocol/Internet Protocol filtering) IPsec protocol encrypts communications between the printer and a computer or user, protecting the data from leaking.
IP filtering approves the transmitted data by their IP address and prevents unauthorized access by filtering out the transmitted data from unauthorized terminal devices.

・HTTPS/TLS connection (Hypertext Transfer Protocol Secure/Transport Layer Security connection) These protocols encrypt the transmitted data when they access the internal Web server (WebConfig), helping prevent data leaks.
Epson uses TLS1.3, the latest encryption technology.

・IEEE 802.1X, WPA3 (Wi-Fi Protected Access 3) IEEE 802.1X is an authentication standard that prevents unauthorized devices from being able to connect to a LAN network. It allows using the device in a network environment requiring high security.
WPA3 is the latest standard for wireless local network security. All devices with the Wi-Fi function use WPA3, protecting important customer information assets from data leaks and tampering.

・SNMPv3 (Simple Network Management Protocol version 3) SNMPv3 is a protocol for monitoring and controlling information on devices that supports encryption and authentication. SNMPv3 protects the device from unauthorized configuration changes and data leaks.

・S/MIME(Secure/Multipurpose Internet Mail Extensions) When using functions such as Scan to Mail or fax forwarding, this protocol encrypts and adds digital signatures to electronic messages protecting them from tampering and leaks.

ET-5850/ET-5800

Threat

Theft of confidential information from communication data, data tampering.

Countermeasures

・IPsec/IP filtering (Security Architecture for Internet Protocol/Internet Protocol filtering) IPsec protocol encrypts communications between the printer and a computer or user, protecting the data from leaking. IP filtering determines if the incoming communication is correct based on the IP address and prevents unauthorized access by filtering out the incoming communication from unauthorized terminal devices.

・IEEE 802.1X authentication Our devices support IEEE 802.1X, an authentication standard that prevents unauthorized devices from being able to connect to a LAN network. It allows using the device in a network environment requiring high security.

Threat

Theft of information via USB access, computer virus infections.

Countermeasures

・Enabling/disabling the computer's USB connection USB access from a computer to the device can be disabled.

・Enabling/disabling external memory interfaces Memory card or USB memory interfaces can be disabled.

・Addressing virus intrusions through USB memory Since there is no functionality to run a program from a USB memory, there is no risk of viruses being transmitted from a USB memory to the device.

Threat

Important information in printed material is seen by a third party.

Countermeasures

・Password-protected printing This feature enables printing only when password is entered directly on the device. Using this feature prevents data leaks that result from unauthorized browsing of the documents in the printer output bin.

・Watermark printing This feature enables the creation of original documents with embedded watermark patterns. If someone attempts to copy or scan these documents, words such as “copy” or “duplicate” will appear, helping to reduce unauthorized use.

・Stamp mark feature It allows superimposing stamp marks, such as “Classified” or “Important,” on documents when printing. Reminding the recipient of the importance of being cautious when handling the document can minimize unauthorized use.

・ Encrypted PDF Scanned data can be converted into an encrypted PDF file. It prevents unauthorized third parties from browsing scanned documents.

Threat

Data theft from storage media installed inside the device

Countermeasures

・Address book protection Requiring an administrator password for bulk editing of the address book on the device helps prevent data leaks and unauthorized data tampering. Moreover, batch export is saved as an encrypted file, preventing any leakage of fax numbers, email addresses, and other personal information during operations such as replacing the device or performing a backup.

・Handling document data for processing on the device Print, copy, and scan data is temporarily stored on the device but is deleted after the target job completion or if the device loses power.

・Password encryption All the important customer passwords stored in the device are encrypted to protect them from leakage.

Threat

Manipulation of the control panel by a malicious third party

Countermeasures

・Panel lock When using the panel lock feature, the administrator password will be required to change any settings through the device control panel. Making it impossible to access the settings screen directly prevents configuration changes by users in environments such as open offices or public facilities.

・Limited user access It is possible to limit which functions (print, copy, scan, fax, box) are available to each user. Additionally, after logging in to the control panel, the user will be automatically logged out after a certain period of inactivity.

・Authenticated printing and authenticated scanning With the Epson Print Admin or Epson Print Admin Serverless option, it is possible to use an IC card or another authentication device to ensure that printing or scanning is performed in front of an authorized person. This helps prevent the misplacement of printed documents and information leaks from printed and scanned materials.

Threat

Data leaks when disposing of or transferring a device to another party

Countermeasures

・Device initialization When disposing of or transferring a device to another party, all the configurations and data stored in the device can be reset to factory defaults in order to prevent leakage of confidential information.

ET-2850

Threat

Theft of information via USB access, computer virus infections.

Countermeasures

・Enabling/disabling USB connection to a computer USB access from a computer to the device can be disabled.

Threat

Important information in printed material is seen by a third party.

Countermeasures

Threat

Data theft from storage media installed inside the device

Countermeasures

・Handling document data for processing on the device Print, copy, and scan data is temporarily stored on the device but is deleted after the target job completion or if the device loses power.

・Password encryption All the important passwords stored in the device are encrypted to protect them from leakage.

Threat

Manipulation of the control panel by a malicious third party

Countermeasures

Threat

Data leaks when disposing of or transferring a device to another party

Countermeasures

TM-T88VII

Threat

Data theft from storage media installed inside the device

Countermeasures

・Password encryption and password policies The customer password saved in the device is encrypted to protect it from leaks. This password is required to set the device network and TM-i functions.

・Disposal of receipt data The receipt data (print data), used for business operations, is deleted after printing to protect your clients’ purchase data from leaks and tampering. However, the customized settings and information, such as your company’s logo and coupon data, are recorded in non-volatile memory and retained even after printing or while rebooting.

・User data initialization and resetting to factory defaults When disposing of or moving a device to another location, all the configurations and data recorded in the unit (stored in non-volatile memory) are reset to factory defaults (initialized) to prevent leaks of information, such as the logo and print settings.

Threat

Unauthorized device operation and configuration changes by intrusive programs

Countermeasures

・Enabling/disabling settings for various interfaces (fixed use via USB, or Network, or Serial I/F) Unauthorized external access can be prevented by setting a fixed interface for the customer's use, for example, by blocking network communication. Additionally, unauthorized intrusions in the local environment through USB PnP connections can be prevented by disabling USB communication. However, peripheral devices (such as Barcode Scanners and Display Modules) can remain connected via USB-TypeA.

Threat

Theft of confidential information from communication data, data tampering.

Countermeasures

・HTTPS/TLS connection (Hypertext Transfer Protocol Secure/Transport Layer Security connection) When accessing the internal Web server (WebConfig), incoming communications are encrypted to help safeguard against data leaks. Additionally, encryption protects any information sent through the server's direct print function, such as receipt data. We utilize the latest encryption technology, TLS1.3.

CW-C4000 Series

Threat

Manipulation of the control panel by a malicious third party

Countermeasures

・Restricted access to the control panel The range of functions available through the control panel can be limited for each device.
Allowing access only to the functions minimally necessary to the operator’s duties helps reduce the risks of unauthorized manipulation of the device settings or data transmission settings.

Threat

The product is unusable or does not function properly

Countermeasures

Threat

Date theft from the memory modules installed inside the device

Countermeasures

・Password encryption and password policies The customer password saved in the device is encrypted to protect it from leaks. This password is required to view and change settings using the Settings tool (WebConfig).

・Disposal of print data The label data (print data), used for business operations, is deleted after printing to protect the data from leaks and tampering. However, your logo, additional information, and customized settings are recorded in non-volatile memory and retained even after printing or while rebooting.

Threat

Unauthorized device operation and configuration changes by intrusive programs

Countermeasures

・Run-time intrusion detection This function monitors control programs running on the device and terminates unauthorized invasive programs.

・Enabling/disabling network function settings (fixed use via USB) Blocking the network function helps ensure the prevention of unauthorized external intrusions.

Threat

Theft or alternation of confidential information during data transmission

Countermeasures

SC-P8550DM/SC-T7750DM

Threat

Manipulation of the control panel by a malicious third party

Countermeasure

・Restricted access to print, scan, copy functions You can limit the scope of functions (such as print, scan, copy) accessible by each user.
Allowing access only to the functions minimally necessary to the user's duties helps minimize the risks of unauthorized browsing and leaks of document data.

Threat

The product is unusable or does not function properly

Countermeasure

・Secure boot This feature checks the program code upon the device startup and only allows its operation after successful confirmation of the code.

Threat

Data theft from the memory modules installed inside the device

Countermeasure

・Password encryption Passswords saved in the device are encrypted to protect them from leaks

・TPM(Trusted Platform Module: security chip) Critically important information (such as private keys) used for encryption is stored on a dedicated security chip (TPM) installed on the device.

・Encryption of data recorded on SSD When data is recorded to the SSD within the device, the same content is encrypted.
This way, all the important customer data is protected from data leaks and tampering.

・Initialization of user data and erasing stored data from the SSD When disposing of or transferring the device to another party,
all the configurations and data stored in the device (including the data saved on the internal SSD) are initialized and deleted in order to prevent leaks of any confidential information.

Threat

Important printed documents seen by a third party

Countermeasure

Threat

Unauthosized device operation and configuration changes by intrusive programs.

Countermeasure

・Run-time intrusion detection This function monitors control programs running on the device and terminates unauthorized invasive programs.

Threat

Theft or alteration of confidential information during data transmission

Countermeasure

・HTTPS/TLS connection These protocols encrypt the transmitted data when they access the internal Web server (WebConfig), helping prevent data leaks.

Some models do not support these features.
For detailed information, please consult your sales representative.

Initiatives inthird-party evaluation of product security

At Epson, we involve independent third-party organizations in the product security assessment to objectively verify the security functions of our products. At the same time, we also strive to predict potential future risks and introduce improvements to prevent them.

ISO15408/IEEE2600.2™

ISO/IEC 15408-certified products comply with IEEE Std.2600.2™-2900, the international standard for information security. The CCRA certification mark indicates that the product assessment was conducted in accordance with the “Japan Information Technology Security Evaluation and Certification Scheme” and that the assessment results were verified. This certification mark does not guarantee that the product has no vulnerabilities and is equipped with all security features necessary to operate within a particular operational environment.

C0728	Seiko Epson Corp.	EPSON LX-10020M/WF-M21000	2021-08	PP(U.S. Government Protection Profile for Hardcopy Devices Version 1.0 (IEEE Std. 2600.2™-2009)
C0700	Seiko Epson Corp.	EPSON LX-10050MF/LX-10050KF/LX-7550MF/LX-6050MF/WF-C21000/WF-C20750/WF-C20600	2021-01	PP(U.S. Government Protection Profile for Hardcopy Devices Version 1.0 (IEEE Std. 2600.2™-2009)
C0602	Seiko Epson Corp.	LX-10000F/LX-7000F/WF-C20590/WF-C17590 2.00	2018-06	PP(U.S. Government Protection Profile for Hardcopy Devices Version 1.0 (IEEE Std. 2600.2™-2009)
C0803	Seiko Epson Corp.	EPSON LM-C6000/LM-C5000/LM-C4000/AM-C6000/AM-C5000/AM-C4000	2023-12	PP(U.S. Government Protection Profile for Hardcopy Devices Version 1.0 (IEEE Std. 2600.2™-2009)

IoT Security Validation Testing Program

This means that the product has passed the “Device Penetration” testing under the “IoT Security Validation Testing Program” conducted by Keypoint Intelligence - BLI (Buyers Lab), an independent assessment agency in the United States.
Not all models have this certification.
https://keypointintelligence.com/security-validation

BMSec (only within Japan)

This means that the product security complies with the “Business Machine Security Program” (BMSec) scheme developed by the JBMIA (Japan Business Machine and Information System Industries Association).

Not all models have this certification.

To ensure security when using our products

Before using the device, you must change the default factory configuration settings to suit your environment. Especially, make sure to implement the appropriate security measures related to the administrator passwords, internet connection, and wireless LAN network connection settings.
Please refer to the Security Guidebook for more details.

Administrator passwords

We highly recommend configuring individual passwords for each administrator user during the initial device set-up. If you keep the default factory settings or do not set the administrator passwords, there will be a risk of unauthorized access and modification of the configurations and data stored in the device. There will also be a risk of leaking IDs, passwords, personal information from the address book, and confidential information.

Connecting to the internet

Do not connect printers and multifunctional printers directly to the internet. Instead, install them within a firewall-protected network. We also recommend setting up a private IP address. If you connect to the internet directly, your networks may become subject to unexpected security risks, such as unauthorized data manipulation and leaks.

Wireless LAN networks

When using wireless LAN networks, make sure to implement the appropriate security measures.
Wireless LAN allows you to receive transmitted data from computers and smartphones using radio waves, so you can freely access the network within reach of the radio waves. However, if you do not properly configure the security settings, the transmitted data may be intercepted and accessed without authorization by a malicious third party. 　

Security software

Reduces the security risks associated with leaving printed documents unattended.

Issue

Printed documents were accidentally left unattended next to the printer. As a result, important information was exposed to a third party.

Proposed solution

Epson Print Admin /
Epson Print Admin Serverless

Require authentication using an IC card to ensure the printing is done in the presence of an authorized person

Implementation
results

Because the print command is performed after the authentication has been carried out in front of the multi-functional printer (MFP), this helps prevent leaving the printed documents unattended.

Since an authorized person is present during printing, this prevents the documents from being mistakenly taken away by a third party.

Authenticated printing flow

Reduce security risks
by limiting access to a selected number of users.

Issue

There is a risk of information leaks when people use functions unrelated to their duties.

Having employees on different types of contracts risks internal documentation leaks.

Proposed solution

Epson Print Admin /
Epson Print Admin Serverless

Limit the operation of multi-functional printers (MFPs) to registered users

Implementation
results

Limiting access to selected MFP functions for registered users can prevent leaks by reducing inappropriate MFP operations.

Bulk firmware update

Use the latest firmware versions for the safety and security of your devices.

Issue

Concerns related to device security risks and vulnerabilities. How to make sure that the device firmware is up to date to prevent security threats.

Proposed solution

Epson Device Admin

Whenever there is a need for a firmware update for any Epson printers and MFPs, it can be done automatically.

Solution

You can remotely check and update the firmware on all devices. We offer an environment that allows you to identify the devices that require an update, keeping all your device firmware up to date so that you can safely use your devices and be protected from security threats.

Please consult your sales representative for information regarding supported models.