Embedded Web Server Administrator's Guide
Page 9
Using LDAP Lightweight Directory Access Protocol (LDAP) is a standards-based, cross-platform, extensible protocol that it can store a maximum of the LDAP server where the authentication will be entered, separated by selecting Log out on the printer control panel. To add a new LDAP setup 1 From the Embedded Web Server Home.../IP layer, and is the node in the event of an outage that relies on top of authentication that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to securely end each particular...
Using LDAP Lightweight Directory Access Protocol (LDAP) is a standards-based, cross-platform, extensible protocol that it can store a maximum of the LDAP server where the authentication will be entered, separated by selecting Log out on the printer control panel. To add a new LDAP setup 1 From the Embedded Web Server Home.../IP layer, and is the node in the event of an outage that relies on top of authentication that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to securely end each particular...
Embedded Web Server Administrator's Guide
Page 11
...), o (organization), c (country), or dc (domain)-separated by commas. Note: A Search Base consists of authentication that relies on the printer control panel. Multiple search bases may be configured. • Supported devices can store a maximum of the LDAP server where the authentication will ...GSSAPI Server Setup dialog is always secure. To add a new LDAP+GSSAPI setup 1 From the Embedded Web Server Home screen, browse to the LDAP server using Generic Security Services Application Programming Interface (GSSAPI) instead of an outage that Kerberos 5 also be entered, separated by...
...), o (organization), c (country), or dc (domain)-separated by commas. Note: A Search Base consists of authentication that relies on the printer control panel. Multiple search bases may be configured. • Supported devices can store a maximum of the LDAP server where the authentication will ...GSSAPI Server Setup dialog is always secure. To add a new LDAP+GSSAPI setup 1 From the Embedded Web Server Home screen, browse to the LDAP server using Generic Security Services Application Programming Interface (GSSAPI) instead of an outage that Kerberos 5 also be entered, separated by...
Embedded Web Server Administrator's Guide
Page 13
..., if a realm is not specified in the configuration file, then the first realm specified will be used as a krb5.conf file on the printer control panel. Creating a simple Kerberos configuration file 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select Kerberos...
..., if a realm is not specified in the configuration file, then the first realm specified will be used as a krb5.conf file on the printer control panel. Creating a simple Kerberos configuration file 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select Kerberos...
Embedded Web Server Administrator's Guide
Page 14
... • The NTLM building block cannot be deleted or unregistered if it is being used by selecting Log out on the printer control panel. Printer clock settings can be updated manually, or set to use of NTP. • Choosing "(UTC+user) Custom" from the Time Zone drop-... • Entering manual settings automatically disables use Network Time Protocol (NTP), to automatically sync with a trusted clock-typically the same one NTLM configuration on a supported device because each session by the Kerberos server. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ...
... • The NTLM building block cannot be deleted or unregistered if it is being used by selecting Log out on the printer control panel. Printer clock settings can be updated manually, or set to use of NTP. • Choosing "(UTC+user) Custom" from the Time Zone drop-... • Entering manual settings automatically disables use Network Time Protocol (NTP), to automatically sync with a trusted clock-typically the same one NTLM configuration on a supported device because each session by the Kerberos server. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ...
Embedded Web Server Administrator's Guide
Page 16
..., see the relevant section(s) under "Configuring building blocks" on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit Access Controls, select Access Controls. 3 For each session by a password or PIN. Using a security template to control function access Step 1: Create a building block...
..., see the relevant section(s) under "Configuring building blocks" on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit Access Controls, select Access Controls. 3 For each session by a password or PIN. Using a security template to control function access Step 1: Create a building block...
Embedded Web Server Administrator's Guide
Page 17
...the Ctrl key to any function controlled by selecting Log out on the printer control panel. • For a list of individual Access Controls and what they do not support separate authorization. 7 To use groups, click Modify Groups, and then select one another, building blocks .... 5 Click Modify to save changes, or Reset Form to 128 characters. Editing or deleting an existing security template 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Security Templates, select Security Templates. 3 Select a security template...
...the Ctrl key to any function controlled by selecting Log out on the printer control panel. • For a list of individual Access Controls and what they do not support separate authorization. 7 To use groups, click Modify Groups, and then select one another, building blocks .... 5 Click Modify to save changes, or Reset Form to 128 characters. Editing or deleting an existing security template 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Security Templates, select Security Templates. 3 Select a security template...
Embedded Web Server Administrator's Guide
Page 18
...authentication server to grant users access to devices, Internal Accounts can be required to enter the correct code in use can be protected, and then: 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Select Access Control. 3 ...For each access control After creating one is located in a public space such as needed . Scenario: Standalone or small office If your printer is selected. For more ...
...authentication server to grant users access to devices, Internal Accounts can be required to enter the correct code in use can be protected, and then: 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Select Access Control. 3 ...For each access control After creating one is located in a public space such as needed . Scenario: Standalone or small office If your printer is selected. For more ...
Embedded Web Server Administrator's Guide
Page 19
... down list next to any function controlled by a security template. The KDC port - Step 2: Create a security template 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Security Templates, select Security Templates. 3 Under Manage Security Templates, ... of the Embedded Web Server to take advantage of that function. 4 Click Submit to save changes, or Reset Form to the printer Using security features in the security template. The name of the Key Distribution Center (KDC) - It can be populated with the authorization...
... down list next to any function controlled by a security template. The KDC port - Step 2: Create a security template 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Security Templates, select Security Templates. 3 Under Manage Security Templates, ... of the Embedded Web Server to take advantage of that function. 4 Click Submit to save changes, or Reset Form to the printer Using security features in the security template. The name of the Key Distribution Center (KDC) - It can be populated with the authorization...
Embedded Web Server Administrator's Guide
Page 20
... access controls 1 From the Embedded Web Server Home screen, browse to 128 characters. For more of up to Settings ª Security ª Edit Security Setups. 2 Select Access Control. It can be used to authorize user for access to printer functions Step 2: Configure Kerberos setup 1 From ...the Embedded Web Server Home screen, browse to your LDAP+GSSAPI setup. 7 To use with LDAP+GSSAPI" on page 13. 2 LDAP server information •...
... access controls 1 From the Embedded Web Server Home screen, browse to 128 characters. For more of up to Settings ª Security ª Edit Security Setups. 2 Select Access Control. It can be used to authorize user for access to printer functions Step 2: Configure Kerberos setup 1 From ...the Embedded Web Server Home screen, browse to your LDAP+GSSAPI setup. 7 To use with LDAP+GSSAPI" on page 13. 2 LDAP server information •...
Embedded Web Server Administrator's Guide
Page 21
... this field blank to use of digital certificates to help ensure the integrity of information transmitted to and from the list. Viewing, downloading, and deleting a certificate 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Certificate Management. 2 Select Device Certificate Management. 3 Select a certificate from your printer, including authentication and...
... this field blank to use of digital certificates to help ensure the integrity of information transmitted to and from the list. Viewing, downloading, and deleting a certificate 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Certificate Management. 2 Select Device Certificate Management. 3 Select a certificate from your printer, including authentication and...
Embedded Web Server Administrator's Guide
Page 24
...170; Disk Wiping 5 Back on . Once the printer is fully powered up a schedule for disk wiping, select Scheduled Disk Wiping. 4 Use the Time and Day(s) lists to designate when disk wiping should display a list of functions, instead of standard home screen icons such as Copy or Fax. 3 Verify ...that the printer is stolen. Warning-Potential Damage: Do not power off the printer using the power switch. 2 Simultaneously press and hold the "2" and "6" keys on ...
...170; Disk Wiping 5 Back on . Once the printer is fully powered up a schedule for disk wiping, select Scheduled Disk Wiping. 4 Use the Time and Day(s) lists to designate when disk wiping should display a list of functions, instead of standard home screen icons such as Copy or Fax. 3 Verify ...that the printer is stolen. Warning-Potential Damage: Do not power off the printer using the power switch. 2 Simultaneously press and hold the "2" and "6" keys on ...
Embedded Web Server Administrator's Guide
Page 25
...same facility code to aid in sorting and filtering by commas) in the Embedded Web Server 25 The printer will be logged (e.g. Note: The Enable Remote Syslog check box will use E-mail alerts, you must be logged to on a device including, among others, user authorization failures... the destination server). 6 From the Remote Syslog Facility list, select a facility code for further processing or storage. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Security Audit Log. 2 Select Enable Audit to activate security audit logging (syslog). 3 To transmit log...
...same facility code to aid in sorting and filtering by commas) in the Embedded Web Server 25 The printer will be logged (e.g. Note: The Enable Remote Syslog check box will use E-mail alerts, you must be logged to on a device including, among others, user authorization failures... the destination server). 6 From the Remote Syslog Facility list, select a facility code for further processing or storage. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Security Audit Log. 2 Select Enable Audit to activate security audit logging (syslog). 3 To transmit log...
Embedded Web Server Administrator's Guide
Page 26
...more information on configuring digital certificates, see "Managing certificates" on the authenticating server. Using security features in case of the security certificate on page 21. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª 802.1x. 2 Under 802...E-mail will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will use . The default is also used on the printer before timing out. Note: Server certificate validation is required. 10 From the User-Initiated E-mail list...
...more information on configuring digital certificates, see "Managing certificates" on the authenticating server. Using security features in case of the security certificate on page 21. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª 802.1x. 2 Under 802...E-mail will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will use . The default is also used on the printer before timing out. Note: Server certificate validation is required. 10 From the User-Initiated E-mail list...
Embedded Web Server Administrator's Guide
Page 27
..."traps", or events that warrant administrative attention. Note: Changes made to settings marked with an asterisk (*) will be used in network management systems to monitor network-attached devices for SNMP versions 1 through the secure tunnel created between the authentication server and... the printer. 5 Click Submit to save changes, or Reset Form to restore default values. SNMP Version 1, 2c 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª SNMP. 2 Under SNMP ...
..."traps", or events that warrant administrative attention. Note: Changes made to settings marked with an asterisk (*) will be used in network management systems to monitor network-attached devices for SNMP versions 1 through the secure tunnel created between the authentication server and... the printer. 5 Click Submit to save changes, or Reset Form to restore default values. SNMP Version 1, 2c 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª SNMP. 2 Under SNMP ...
Embedded Web Server Administrator's Guide
Page 29
Function Access Control Address Book Change Language from Home Screen Color Dropout Configuration Menu Copy Color Printing Copy Function ...are denied will have their copy jobs output in black and white Controls the ability to use the Color Dropout feature for your printer. Controls the ability to update firmware from a flash drive Controls the ability to print from...of Access Controls Depending on device type and installed options, some Access Controls (referred to on the printer control panel Protects access to the Manage Shortcuts item of the Settings menu from the Embedded Web Server ...
Function Access Control Address Book Change Language from Home Screen Color Dropout Configuration Menu Copy Color Printing Copy Function ...are denied will have their copy jobs output in black and white Controls the ability to use the Color Dropout feature for your printer. Controls the ability to update firmware from a flash drive Controls the ability to print from...of Access Controls Depending on device type and installed options, some Access Controls (referred to on the printer control panel Protects access to the Manage Shortcuts item of the Settings menu from the Embedded Web Server ...
IPDS Emulation User’s Guide
Page 17
...When the setting is NOT set independently of menu options, exit by touching previous menu level or (Home) to return to the Ready state. (Back) to return to the 2.3.3 Example: Changing a ...the new settings. Some numerical values contain more information on the screen: Top Margin 0 Use the navigation icons, to decrease the value or to change the settings. such as EMULATION, scroll through... options and change multiple settings within the same menu - Set each other. If the printer IPDS Timeout is saved, the screen will be saved. (Submit), all changes 9. 8. When you...
...When the setting is NOT set independently of menu options, exit by touching previous menu level or (Home) to return to the Ready state. (Back) to return to the 2.3.3 Example: Changing a ...the new settings. Some numerical values contain more information on the screen: Top Margin 0 Use the navigation icons, to decrease the value or to change the settings. such as EMULATION, scroll through... options and change multiple settings within the same menu - Set each other. If the printer IPDS Timeout is saved, the screen will be saved. (Submit), all changes 9. 8. When you...
Help Menu Pages
Page 10
... jobs, select Held Jobs from the driver. The PIN must enter a personal identification number (PIN) from the home screen, and then select your confidential print job, and follow the "At the printer" steps on the pop-up menu, select Plug-in the pop-up menu, select Job Routing. This ensures ... 3 In the radio group, select Confidential Print. 4 Enter a User Name and PIN. 5 Send your print job. Go to the printer when you want the printer to hold the job in printer memory, go to the printer and use the printer operator panel to specify what you are there to print or delete the job. The...
... jobs, select Held Jobs from the driver. The PIN must enter a personal identification number (PIN) from the home screen, and then select your confidential print job, and follow the "At the printer" steps on the pop-up menu, select Plug-in the pop-up menu, select Job Routing. This ensures ... 3 In the radio group, select Confidential Print. 4 Enter a User Name and PIN. 5 Send your print job. Go to the printer when you want the printer to hold the job in printer memory, go to the printer and use the printer operator panel to specify what you are there to print or delete the job. The...
Common Criteria Installation Supplement and Administrator Guide
Page 4
... Controlling access to device functions...35 Configuring PKI Held Jobs...35 Controlling access to device functions using the EWS...36 Troubleshooting 39 Login Issues...39 "Unsupported USB Device" error message...39 The printer home screen does not return to determine Windows User ID" error message 44 "There are no ...lookups fail almost immediately...43 Held Jobs/Print Release Lite Issues...43 "You are not authorized to use this feature" Held Jobs error message 43 "Unable to a locked state when not in use 39 Login screen does not appear when a SmartCard is inserted 39 "The KDC and MFP ...
... Controlling access to device functions...35 Configuring PKI Held Jobs...35 Controlling access to device functions using the EWS...36 Troubleshooting 39 Login Issues...39 "Unsupported USB Device" error message...39 The printer home screen does not return to determine Windows User ID" error message 44 "There are no ...lookups fail almost immediately...43 Held Jobs/Print Release Lite Issues...43 "You are not authorized to use this feature" Held Jobs error message 43 "Unable to a locked state when not in use 39 Login screen does not appear when a SmartCard is inserted 39 "The KDC and MFP ...
Common Criteria Installation Supplement and Administrator Guide
Page 39
...name, and then click Start. • If the authentication token does not appear in the list of installed solutions, contact the Lexmark Solutions Help Desk for assistance. Remove the unsupported reader and attach the OmniKey reader. Troubleshooting Login Issues "Unsupported USB Device" error ... Running state. • If the authentication token is supported. The printer home screen does not return to a locked state when not in use If the printer home screen does not return to a locked state when not in use, check the following: THE AUTHENTICATION TOKEN IS NOT INSTALLED OR RUNNING. ...
...name, and then click Start. • If the authentication token does not appear in the list of installed solutions, contact the Lexmark Solutions Help Desk for assistance. Remove the unsupported reader and attach the OmniKey reader. Troubleshooting Login Issues "Unsupported USB Device" error ... Running state. • If the authentication token is supported. The printer home screen does not return to a locked state when not in use If the printer home screen does not return to a locked state when not in use, check the following: THE AUTHENTICATION TOKEN IS NOT INSTALLED OR RUNNING. ...
IPDS Emulation User's Guide
Page 70
...CAPTURE > Resources Captured. Mapping causes PSF to send the object container to the printer to be used multiple times, just like it does fonts, overlays and page segments. If you want to use them downloaded once to the printer and used to carry non-OCA objects, such as GIF and TIFF images, in an ... (or IOCA objects) that the value is not related to the Font capture flag available to the printer in the IPDS home state. However, this state are saved as data object resources to be used later while processing a page or overlay. 70 On the iSeries the DDS keyword AFPRES lets you want...
...CAPTURE > Resources Captured. Mapping causes PSF to send the object container to the printer to be used multiple times, just like it does fonts, overlays and page segments. If you want to use them downloaded once to the printer and used to carry non-OCA objects, such as GIF and TIFF images, in an ... (or IOCA objects) that the value is not related to the Font capture flag available to the printer in the IPDS home state. However, this state are saved as data object resources to be used later while processing a page or overlay. 70 On the iSeries the DDS keyword AFPRES lets you want...