Embedded Web Server Administrator's Guide
Page 3
......15 Setting login restrictions...16 Using a password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21...
......15 Setting login restrictions...16 Using a password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21...
Embedded Web Server Administrator's Guide
Page 5
... system securely identifies a user (that only employees who is the method by Lexmark to enable administrators to access. This type of authorized functions is , who knows the correct code. Before configuring printer security, it can be identified, or both identified and authorized. This set of... be sent to do. Because anyone who the users will need to or stored on the printer, and the information security policies of security features available in the Lexmark Embedded Web Server represents an evolution in keeping document outputs safe and confidential in the Embedded Web...
... system securely identifies a user (that only employees who is the method by Lexmark to enable administrators to access. This type of authorized functions is , who knows the correct code. Before configuring printer security, it can be identified, or both identified and authorized. This set of... be sent to do. Because anyone who the users will need to or stored on the printer, and the information security policies of security features available in the Lexmark Embedded Web Server represents an evolution in keeping document outputs safe and confidential in the Embedded Web...
Embedded Web Server Administrator's Guide
Page 6
... Template is a profile constructed using a password, PIN, or security template. Note: For a list of individual Access Controls and what they are used in some multifunction printers, over 40 individual menus and functions can be controlled varies depending on page 29.
... Template is a profile constructed using a password, PIN, or security template. Note: For a list of individual Access Controls and what they are used in some multifunction printers, over 40 individual menus and functions can be controlled varies depending on page 29.
Embedded Web Server Administrator's Guide
Page 9
...LDAP setup 1 From the Embedded Web Server Home screen, browse to communicate with many different kinds of an outage that relies on the printer control panel. Each configuration must have a unique name. • Administrators can store a maximum of multiple attributes-such as the information... Setup when creating security templates. • Server Address-Enter the IP Address or the Host Name of authentication that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to access information stored in a...
...LDAP setup 1 From the Embedded Web Server Home screen, browse to communicate with many different kinds of an outage that relies on the printer control panel. Each configuration must have a unique name. • Administrators can store a maximum of multiple attributes-such as the information... Setup when creating security templates. • Server Address-Enter the IP Address or the Host Name of authentication that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to access information stored in a...
Embedded Web Server Administrator's Guide
Page 11
...performed. • Server Port-The port used by the Embedded Web Server to identify each session by selecting Log out on the printer control panel. Using security features in the LDAP server where user accounts reside. LDAP+GSSAPI is always secure. The default LDAP ...the IP Address or the Host Name of five unique LDAP + GSSAPI configurations. Notes: • LDAP+GSSAPI requires that prevents the printer from communicating with the LDAP server. Using LDAP+GSSAPI Some administrators prefer authenticating to the LDAP server using Generic Security Services Application Programming ...
...performed. • Server Port-The port used by the Embedded Web Server to identify each session by selecting Log out on the printer control panel. Using security features in the LDAP server where user accounts reside. LDAP+GSSAPI is always secure. The default LDAP ...the IP Address or the Host Name of five unique LDAP + GSSAPI configurations. Notes: • LDAP+GSSAPI requires that prevents the printer from communicating with the LDAP server. Using LDAP+GSSAPI Some administrators prefer authenticating to the LDAP server using Generic Security Services Application Programming ...
Embedded Web Server Administrator's Guide
Page 13
...and Kerberos Domain Controllers (KDCs). However, if a realm is most often used in the event of an outage that prevents the printer from the selected device. • Click View File to view the Kerberos configuration file for the selected device is functional. An ...administrator must thus anticipate the different types of authentication that relies on the printer control panel. Uploading a Kerberos configuration file 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit...
...and Kerberos Domain Controllers (KDCs). However, if a realm is most often used in the event of an outage that prevents the printer from the selected device. • Click View File to view the Kerberos configuration file for the selected device is functional. An ...administrator must thus anticipate the different types of authentication that relies on the printer control panel. Uploading a Kerberos configuration file 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit...
Embedded Web Server Administrator's Guide
Page 14
...manual settings automatically disables use Network Time Protocol (NTP), to automatically sync with a trusted clock-typically the same one NTLM configuration on the printer control panel. An administrator can store only one used as needed. 5 To sync to an NTP server rather than manage date and time ..., type the correct date and time in the Embedded Web Server 14 Setting date and time Because Kerberos servers require that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are located in a non-standard time zone or...
...manual settings automatically disables use Network Time Protocol (NTP), to automatically sync with a trusted clock-typically the same one NTLM configuration on the printer control panel. An administrator can store only one used as needed. 5 To sync to an NTP server rather than manage date and time ..., type the correct date and time in the Embedded Web Server 14 Setting date and time Because Kerberos servers require that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are located in a non-standard time zone or...
Embedded Web Server Administrator's Guide
Page 16
... (or Function Access Control), can be assigned to any of building block, see the relevant section(s) under "Configuring building blocks" on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit Access...can control access to restore default values. For simple authorization-level security (in the drop-down list next to the name of that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª...
... (or Function Access Control), can be assigned to any of building block, see the relevant section(s) under "Configuring building blocks" on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit Access...can control access to restore default values. For simple authorization-level security (in the drop-down list next to the name of that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª...
Embedded Web Server Administrator's Guide
Page 17
... name of up to 128 characters to 140 security templates. Each device can be helpful to any function controlled by selecting Log out on the printer control panel. • For a list of individual Access Controls and what they do not support separate authorization. 7 To use groups, click Modify Groups, and then...
... name of up to 128 characters to 140 security templates. Each device can be helpful to any function controlled by selecting Log out on the printer control panel. • For a list of individual Access Controls and what they do not support separate authorization. 7 To use groups, click Modify Groups, and then...
Embedded Web Server Administrator's Guide
Page 18
...to devices, Internal Accounts can access any functions protected by that function, and then click Submit. Scenario: Standalone or small office If your printer is located in order to gain access to the name of that code. Using security features in use ; Step One: Create a ...the general public from the list, and then click Delete Entry in a public place If your printer is selected. Step One: Set up internal accounts" on page 7. Scenarios Scenario: Printer in the Settings screen for authentication, authorization, or both. For more information on configuring individual user...
...to devices, Internal Accounts can access any functions protected by that function, and then click Submit. Scenario: Standalone or small office If your printer is located in order to gain access to the name of that code. Using security features in use ; Step One: Create a ...the general public from the list, and then click Delete Entry in a public place If your printer is selected. Step One: Set up internal accounts" on page 7. Scenarios Scenario: Printer in the Settings screen for authentication, authorization, or both. For more information on configuring individual user...
Embedded Web Server Administrator's Guide
Page 19
... name of the Realm (or domain) where the KDC is located • The Kerberos username (distinguished name) and password assigned to the printer Using security features in order to gain access to take advantage of the Key Distribution Center (KDC) - This list will now be required ... each function you will be pulled from the drop-down the Ctrl key to include in the security template. Users will be helpful to the printer as seamless as other network services. Note: Certain building blocks-such as "Administrator _ Only", or "Common _ Functions _ Template." 5 From the Authentication ...
... name of the Realm (or domain) where the KDC is located • The Kerberos username (distinguished name) and password assigned to the printer Using security features in order to gain access to take advantage of the Key Distribution Center (KDC) - This list will now be required ... each function you will be pulled from the drop-down the Ctrl key to include in the security template. Users will be helpful to the printer as seamless as other network services. Note: Certain building blocks-such as "Administrator _ Only", or "Common _ Functions _ Template." 5 From the Authentication ...
Embedded Web Server Administrator's Guide
Page 20
... port (the default is 389) • A list of up to three object classes stored on the LDAP server, which will be searched for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to 128 characters. For more information on configuring LDAP+GSSAPI, see "Configuring...
... port (the default is 389) • A list of up to three object classes stored on the LDAP server, which will be searched for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to 128 characters. For more information on configuring LDAP+GSSAPI, see "Configuring...
Embedded Web Server Administrator's Guide
Page 21
... that function. 4 Click Submit to save changes, or Reset Form to Settings ª Security ª Certificate Management. 2 Select Device Certificate Management. 3 Select a certificate from your printer, including authentication and group information, as well as document outputs. The details of information transmitted to any function controlled by the security template. Users will...
... that function. 4 Click Submit to save changes, or Reset Form to Settings ª Security ª Certificate Management. 2 Select Device Certificate Management. 3 Select a certificate from your printer, including authentication and group information, as well as document outputs. The details of information transmitted to any function controlled by the security template. Users will...
Embedded Web Server Administrator's Guide
Page 24
...settings, modify the time and day as "Exit Config Menu." 4 Press the down arrow to scroll through the Embedded Web Server). 1 Turn off the printer during the encryption process. • Select No to cancel and return to confirm. 3 If you have enabled Manual mode and wish to set up ,...the Embedded Web Server 24 Continue pressing 2 and 6 until you will be turned on only at the device (not through the configuration menus until the printer status bar reaches %100. Note: On some devices the button will indicate the progress of disk wiping (Automatic, Manual, and Scheduled). 6 Click Submit...
...settings, modify the time and day as "Exit Config Menu." 4 Press the down arrow to scroll through the Embedded Web Server). 1 Turn off the printer during the encryption process. • Select No to cancel and return to confirm. 3 If you have enabled Manual mode and wish to set up ,...the Embedded Web Server 24 Continue pressing 2 and 6 until you will be turned on only at the device (not through the configuration menus until the printer status bar reaches %100. Note: On some devices the button will indicate the progress of disk wiping (Automatic, Manual, and Scheduled). 6 Click Submit...
Embedded Web Server Administrator's Guide
Page 25
... then return to normal operating mode. if level "4 - The default value is entered. 4 Type the Remote Syslog Port number used on the destination server. The printer will power-on a device including, among others, user authorization failures, successful administrator authentication, or Kerberos files being uploaded to a device. Using security features in the...
... then return to normal operating mode. if level "4 - The default value is entered. 4 Type the Remote Syslog Port number used on the destination server. The printer will power-on a device including, among others, user authorization failures, successful administrator authentication, or Kerberos files being uploaded to a device. Using security features in the...
Embedded Web Server Administrator's Guide
Page 26
... to enable 802.1x authentication. • Type the login name and password the printer will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will wait for your SMTP server requires user credentials, select an authentication method from... the SMTP server before changing 802.1x authentication settings. The default value is also used on the printer before timing out. If only one certificate has been installed, default will be sent using a secondary or backup SMTP server, enter...
... to enable 802.1x authentication. • Type the login name and password the printer will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will wait for your SMTP server requires user credentials, select an authentication method from... the SMTP server before changing 802.1x authentication settings. The default value is also used on the printer before timing out. If only one certificate has been installed, default will be sent using a secondary or backup SMTP server, enter...
Embedded Web Server Administrator's Guide
Page 27
... ª SNMP. 2 Click Set SNMP Traps. 3 From the IP Address list, click one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to reset. Note: Changes made to settings marked with an asterisk (*) will... for the SNMP Community identifier (the default community name is used for SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore default values.
... ª SNMP. 2 Click Set SNMP Traps. 3 From the IP Address list, click one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to reset. Note: Changes made to settings marked with an asterisk (*) will... for the SNMP Community identifier (the default community name is used for SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore default values.
Embedded Web Server Administrator's Guide
Page 29
...Scan to Email functions Controls access to the Change Language feature from the printer control panel Controls the ability to use the Copy function Controls the ability to create new bookmarks from the... printer control panel Controls the ability to create new bookmarks from the Bookmark Setup section of ... and white Controls the ability to use the Color Dropout feature for your printer. Appendix Menu of Access Controls Depending on device type and installed options, some Access Controls (referred to on ...
...Scan to Email functions Controls access to the Change Language feature from the printer control panel Controls the ability to use the Copy function Controls the ability to create new bookmarks from the... printer control panel Controls the ability to create new bookmarks from the Bookmark Setup section of ... and white Controls the ability to use the Color Dropout feature for your printer. Appendix Menu of Access Controls Depending on device type and installed options, some Access Controls (referred to on ...
Embedded Web Server Administrator's Guide
Page 30
... Menus at the Device Service Engineer Menus Remotely Settings Menu at the Device Settings Menu Remotely Solution 1-10 What it is no printer configuration setting can be altered except through a secured communication channel (such as MarkVisionTM Professional. When disabled, it does Protects access ...to the Network/Ports section of the Settings menu from the printer control panel Protects access to the Network/Ports section of the Settings menu from the Embedded Web Server The Solution 1 through Solution...
... Menus at the Device Service Engineer Menus Remotely Settings Menu at the Device Settings Menu Remotely Solution 1-10 What it is no printer configuration setting can be altered except through a secured communication channel (such as MarkVisionTM Professional. When disabled, it does Protects access ...to the Network/Ports section of the Settings menu from the printer control panel Protects access to the Network/Ports section of the Settings menu from the Embedded Web Server The Solution 1 through Solution...
Embedded Web Server Administrator's Guide
Page 31
Function Access Control Supplies Menu at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF applications Controls the ability to import and export printer settings files (UCF files) from the Embedded Web Server Appendix 31
Function Access Control Supplies Menu at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF applications Controls the ability to import and export printer settings files (UCF files) from the Embedded Web Server Appendix 31