AU-201H User Guide
Page 6
... "IC Card Type" and "Operation Settings". - If "Do Not Synchronize" is not supported. Under "IC Card Type", select the type of IC card to "ON (MFP)", and then touch [OK].
... "IC Card Type" and "Operation Settings". - If "Do Not Synchronize" is not supported. Under "IC Card Type", select the type of IC card to "ON (MFP)", and then touch [OK].
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 2
... 1 1 Introduction 3 1.1 Safety Information 4 2 Getting Started 7 2.1 Product Overview 7 2.2 Part names and their functions 8 2.3 Pre-Setting 9 2.3.1 Configuring Network Settings 9 2.3.2 Registering Active Directory for Authentication 11 2.3.3 Correcting the MFP Time 12 2.3.4 Registering the DNS Server Associated with Active Directory ........ 13 2.3.5 Specifying the PIV Transitional Mode 14 2.3.6 Configuring Settings for Verifying the Active Directory Certificate...
... 1 1 Introduction 3 1.1 Safety Information 4 2 Getting Started 7 2.1 Product Overview 7 2.2 Part names and their functions 8 2.3 Pre-Setting 9 2.3.1 Configuring Network Settings 9 2.3.2 Registering Active Directory for Authentication 11 2.3.3 Correcting the MFP Time 12 2.3.4 Registering the DNS Server Associated with Active Directory ........ 13 2.3.5 Specifying the PIV Transitional Mode 14 2.3.6 Configuring Settings for Verifying the Active Directory Certificate...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 8
Using this system will enable you to run a PKI card authentication system (hereinafter referred to as "this system to the MFP via the USB port. (The MFP contains the optional local connection kit.) Note This system can also implement the unique functions using this unit. Connecting this unit enables... you to carry out operations without making a password public on the MFP. AU-211P 7 Use conditions The following conditions are required to use this system. - - 2 PKI card authentication unit (This unit...
Using this system will enable you to run a PKI card authentication system (hereinafter referred to as "this system to the MFP via the USB port. (The MFP contains the optional local connection kit.) Note This system can also implement the unique functions using this unit. Connecting this unit enables... you to carry out operations without making a password public on the MFP. AU-211P 7 Use conditions The following conditions are required to use this system. - - 2 PKI card authentication unit (This unit...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 10
...the PIV transitional mode (page 14) - AU-211P 9 When directly specifying the IP address, enter the IP address of the MFP. Configuring network settings (page 9) - Registering Active Directory for verifying the Active Directory certificate (page 15) 2.3.1 Configuring Network Settings...required to automatically retrieve the IP address or directly specify it. Configuring settings for authentication (page 11) - Correcting the MFP time (page 12) - TCP/IP Settings On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [TCP/IP...
...the PIV transitional mode (page 14) - AU-211P 9 When directly specifying the IP address, enter the IP address of the MFP. Configuring network settings (page 9) - Registering Active Directory for verifying the Active Directory certificate (page 15) 2.3.1 Configuring Network Settings...required to automatically retrieve the IP address or directly specify it. Configuring settings for authentication (page 11) - Correcting the MFP time (page 12) - TCP/IP Settings On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [TCP/IP...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 11
... an IPv6 environment. Item DNS Host Name Dynamic DNS Settings DNS Domain Description Specify the host name of the MFP (up to automatically retrieve the domain name. Item ON/OFF Auto IPv6 Settings DHCPv6 Setting Global Address Prefix Length Gateway Address Link-Local ...Address DNS Host Description Select [ON] when using the MFP in the DNS server that supports the Dynamic DNS function. Specify the IPv6 global address prefix length when not automatically retrieving the IPv6 address. Specify...
... an IPv6 environment. Item DNS Host Name Dynamic DNS Settings DNS Domain Description Specify the host name of the MFP (up to automatically retrieve the domain name. Item ON/OFF Auto IPv6 Settings DHCPv6 Setting Global Address Prefix Length Gateway Address Link-Local ...Address DNS Host Description Select [ON] when using the MFP in the DNS server that supports the Dynamic DNS function. Specify the IPv6 global address prefix length when not automatically retrieving the IPv6 address. Specify...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 12
...search domain name (up to 253 bytes). 2.3.2 Registering Active Directory for Authentication Register Active Directory for authentication in the MFP. Item Server Name Server Type Description Specify the name of the external server (up to 32 characters). Detail When registering... Directory services, specify the default Active Directory previously. You can register up to 20 Active Directory services. External Server Settings On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [User Authentication/Account Track] - [External Server Settings...
...search domain name (up to 253 bytes). 2.3.2 Registering Active Directory for Authentication Register Active Directory for authentication in the MFP. Item Server Name Server Type Description Specify the name of the external server (up to 32 characters). Detail When registering... Directory services, specify the default Active Directory previously. You can register up to 20 Active Directory services. External Server Settings On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [User Authentication/Account Track] - [External Server Settings...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 13
... is necessary when IPv6 is used while DHCPv6 is made, select [ON]. Description When an automatic time correction is enabled. Correct the MFP time so it matches the Active Directory time with Active Directory. Page 1/2 Item ON/OFF Auto IPv6 Retrieval Host Address Port Number Set...NTP server associated with the system time. When [ON] is extremely different between the MFP and Active Directory. Getting Started 2 2.3.3 Correcting the MFP Time You cannot log into Active Directory if the MFP system time is selected for Auto Time Adjustment, set the polling interval. AU-211P 12...
... is necessary when IPv6 is used while DHCPv6 is made, select [ON]. Description When an automatic time correction is enabled. Correct the MFP time so it matches the Active Directory time with Active Directory. Page 1/2 Item ON/OFF Auto IPv6 Retrieval Host Address Port Number Set...NTP server associated with the system time. When [ON] is extremely different between the MFP and Active Directory. Getting Started 2 2.3.3 Correcting the MFP Time You cannot log into Active Directory if the MFP system time is selected for Auto Time Adjustment, set the polling interval. AU-211P 12...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 14
This item is available when using the MFP in the MFP. DNS Server Settings (IPv6) On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [TCP/IP Settings] - [DNS Server Settings (IPv6)]. 2... server address. Priority DNS Server Specify the IPv4 address of the secondary DNS server and 2 associated with Active Directory. DNS Server Settings (IPv4) On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [TCP/IP Settings] - [DNS Server Settings (IPv4)]. ...
This item is available when using the MFP in the MFP. DNS Server Settings (IPv6) On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [TCP/IP Settings] - [DNS Server Settings (IPv6)]. 2... server address. Priority DNS Server Specify the IPv4 address of the secondary DNS server and 2 associated with Active Directory. DNS Server Settings (IPv4) On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [TCP/IP Settings] - [DNS Server Settings (IPv4)]. ...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 15
.... Priority DNS Server Specify the IPv6 address of the secondary DNS server and 2 associated with Active Directory. AU-211P 14 Authentication Device Settings On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [User Authentication/Account Track] [Authentication Device Settings] - [General Settings] - [PKI Card Authentication]. Getting Started...
.... Priority DNS Server Specify the IPv6 address of the secondary DNS server and 2 associated with Active Directory. AU-211P 14 Authentication Device Settings On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [User Authentication/Account Track] [Authentication Device Settings] - [General Settings] - [PKI Card Authentication]. Getting Started...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 16
... Settings for Verifying the Active Directory Certificate Configure the certificate verification settings to check the root signature. Certificate Verification Setting On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [User Authentication/Account Track] - [Certificate Verification...the Active Directory certificate when communicating with Active Directory. For details on how to register an external certificate on the MFP, refer to "Certificate Verification Settings" (page 16). Select whether to verify that the certificate is within the validity...
... Settings for Verifying the Active Directory Certificate Configure the certificate verification settings to check the root signature. Certificate Verification Setting On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [User Authentication/Account Track] - [Certificate Verification...the Active Directory certificate when communicating with Active Directory. For details on how to register an external certificate on the MFP, refer to "Certificate Verification Settings" (page 16). Select whether to verify that the certificate is within the validity...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 17
If this check box to the User's Guide [Network Administrator] supplied together with the MFP. Getting Started 2 Certificate Verification Settings In the PageScope Web Connection administrator mode, select [Security], and then [Certificate Verification Settings]. 2 Note For details on how to ...
If this check box to the User's Guide [Network Administrator] supplied together with the MFP. Getting Started 2 Certificate Verification Settings In the PageScope Web Connection administrator mode, select [Security], and then [Certificate Verification Settings]. 2 Note For details on how to ...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 19
... [Changes the display]. Click this button to issue the external certificate. If necessary, you want to the User's Guide [Network Administrator] supplied together with the MFP. Detail • To check the root signature in the New Registration screen, and specify a new external certificate. Click [Browse] in Certificate Verification, register the external...
... [Changes the display]. Click this button to issue the external certificate. If necessary, you want to the User's Guide [Network Administrator] supplied together with the MFP. Detail • To check the root signature in the New Registration screen, and specify a new external certificate. Click [Browse] in Certificate Verification, register the external...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 21
... Settings] on each setting, refer to the User's Guide [Network Administrator] supplied together with PageScope Authentication Manager, register the MFP in the initial setting of PageScope Authentication Manager, and disable the OpenAPI function of security. Disabling TCP Socket, FTP server, ... settings to [Restrict]. • To change the administrator password as required after the initial setting. ! To ensure security, change the MFP administrator password, press the [Utility/Counter] key, and then [Administrator Settings] - [Security Settings] [Administrator Password] on the network....
... Settings] on each setting, refer to the User's Guide [Network Administrator] supplied together with PageScope Authentication Manager, register the MFP in the initial setting of PageScope Authentication Manager, and disable the OpenAPI function of security. Disabling TCP Socket, FTP server, ... settings to [Restrict]. • To change the administrator password as required after the initial setting. ! To ensure security, change the MFP administrator password, press the [Utility/Counter] key, and then [Administrator Settings] - [Security Settings] [Administrator Password] on the network....
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 22
...steps to insert a PKI card into this system. 2 Note The following explains the procedures applicable in the normal display mode. If logging into the MFP as a public user if Public User Access is also available in the Enlarge Display mode. You can log in as an administrator or User Box... password. For details on the Enlarge Display mode, refer to the User's Guide [Enlarge Display Operations] supplied together with this unit and log into the MFP. 1 Insert a PKI card in the unit. - AU-211P 21 This unit is enabled. - How to Use the Authentication Unit 3 3 How to Use the ...
...steps to insert a PKI card into this system. 2 Note The following explains the procedures applicable in the normal display mode. If logging into the MFP as a public user if Public User Access is also available in the Enlarge Display mode. You can log in as an administrator or User Box... password. For details on the Enlarge Display mode, refer to the User's Guide [Enlarge Display Operations] supplied together with this unit and log into the MFP. 1 Insert a PKI card in the unit. - AU-211P 21 This unit is enabled. - How to Use the Authentication Unit 3 3 How to Use the ...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 23
... Unit 3 ! Failure Allowed" appears on the control panel is displayed. • If you log into the MFP as an administrator, you can check or delete the desired job. • If you log into the MFP as a public user, you will not be logged out by inserting a PKI card during operations, when warnings..., the keyboard screen appears. This starts authentication and logs into the unit while logged in as a User Box administrator, you insert a PKI card into the MFP. AU-211P 22
... Unit 3 ! Failure Allowed" appears on the control panel is displayed. • If you log into the MFP as an administrator, you can check or delete the desired job. • If you log into the MFP as a public user, you will not be logged out by inserting a PKI card during operations, when warnings..., the keyboard screen appears. This starts authentication and logs into the unit while logged in as a User Box administrator, you insert a PKI card into the MFP. AU-211P 22
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 24
... [Simple Caution Sound (Level 1)] to prevent the card from being left in advance. Detail • If a PKI card is used to log in to the MFP, you are logged out automatically.To issue the caution sound, select [Sound Setting] - [Sound Setting] and set [Warning Sound] to [On] in [Accessibility Setting], and... to [OFF]. • In order to [Yes] in [Sound Setting] - [Caution Sound] in the unit, the caution sound can be logged out automatically if the MFP is not operated for over 1 minute while you are logged in, you will be issued when you cannot log out by pressing the [ID] key...
... [Simple Caution Sound (Level 1)] to prevent the card from being left in advance. Detail • If a PKI card is used to log in to the MFP, you are logged out automatically.To issue the caution sound, select [Sound Setting] - [Sound Setting] and set [Warning Sound] to [On] in [Accessibility Setting], and... to [OFF]. • In order to [Yes] in [Sound Setting] - [Caution Sound] in the unit, the caution sound can be logged out automatically if the MFP is not operated for over 1 minute while you are logged in, you will be issued when you cannot log out by pressing the [ID] key...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 25
... using PKI card Scan to a user's address. The print data is encrypted when it is sent from Active Directory, and easily send data to the MFP. This function is obtained by Active Directory authentication with the PKI card, the data is saved temporarily in the... MFP. p. 36 The user can only be printed when authentication at the MFP with the PKI card when sending scanned data via the LDAP server. The print data is decrypted and printed. The user...
... using PKI card Scan to a user's address. The print data is encrypted when it is sent from Active Directory, and easily send data to the MFP. This function is obtained by Active Directory authentication with the PKI card, the data is saved temporarily in the... MFP. p. 36 The user can only be printed when authentication at the MFP with the PKI card when sending scanned data via the LDAP server. The print data is decrypted and printed. The user...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 26
Active Directory PKI Card (1) (2) LDAP Server (3) Address Search (1) Insert the PKI card into the MFP to perform Active Directory authentication. (2) Obtain the Kerberos authentication ticket. (3) Use the Kerberos authentication ticket to log in to the LDAP server and ... the LDAP server securely without making the password public on environment to the LDAP server using the Kerberos authentication ticket that is used to the MFP as a public user or User Box administrator. AU-211P 25 How to Use the Authentication Unit 3 3.3 Address Search (LDAP) Using PKI Card 3.3.1 Overview ...
Active Directory PKI Card (1) (2) LDAP Server (3) Address Search (1) Insert the PKI card into the MFP to perform Active Directory authentication. (2) Obtain the Kerberos authentication ticket. (3) Use the Kerberos authentication ticket to log in to the LDAP server and ... the LDAP server securely without making the password public on environment to the LDAP server using the Kerberos authentication ticket that is used to the MFP as a public user or User Box administrator. AU-211P 25 How to Use the Authentication Unit 3 3.3 Address Search (LDAP) Using PKI Card 3.3.1 Overview ...
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 27
...to search for the destination. Setting Up LDAP Register the desired LDAP server to configure the address search (LDAP) settings on the MFP that supports this system. On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [LDAP Settings] - [...Setting Up LDAP]. Enabling LDAP Configure settings to use the LDAP server. Item Enabling LDAP Description Select [ON]. On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [LDAP Settings] - [Enabling LDAP].
...to search for the destination. Setting Up LDAP Register the desired LDAP server to configure the address search (LDAP) settings on the MFP that supports this system. On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [LDAP Settings] - [...Setting Up LDAP]. Enabling LDAP Configure settings to use the LDAP server. Item Enabling LDAP Description Select [ON]. On the MFP control panel, press the [Utility/Counter] key, and then [Administrator Settings] - [Network Settings] - [LDAP Settings] - [Enabling LDAP].
AU-211P Authentication Unit User Guide for bizhub 223/283/363/423
Page 28
... order when the expiration date of the name used according to the purpose approved by referencing the external certificates managed on this attribute between the MFP and LDAP server with SSL. Certificate Verification Level Settings To verify the server certificate, configure settings to verify the certificate. [Expiration Date]: Select whether to...
... order when the expiration date of the name used according to the purpose approved by referencing the external certificates managed on this attribute between the MFP and LDAP server with SSL. Certificate Verification Level Settings To verify the server certificate, configure settings to verify the certificate. [Expiration Date]: Select whether to...