Embedded Web Server Administrator's Guide
Page 3
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
Embedded Web Server Administrator's Guide
Page 6
... or to disable them entirely. For example, in Company A, employees in association with one or more groups. Access Controls By default, all users the functions they are combined determines the type of security created: Building block Type of users needing access to similar...and functions can be able to combine these components in the Embedded Web Server 6 A Security Template is a profile constructed using a password, PIN, or security template. Groups Administrators can designate up to 140 security templates, allowing administrators to create very specific profiles-or roles...
... or to disable them entirely. For example, in Company A, employees in association with one or more groups. Access Controls By default, all users the functions they are combined determines the type of security created: Building block Type of users needing access to similar...and functions can be able to combine these components in the Embedded Web Server 6 A Security Template is a profile constructed using a password, PIN, or security template. Groups Administrators can designate up to 140 security templates, allowing administrators to create very specific profiles-or roles...
Embedded Web Server Administrator's Guide
Page 7
... Server can store a combined total of 250 user-level and administrator-level passwords on the list, whether they are used to control access to document outputs, by a normal password, any administrator-level password will also grant access. 7 Click Submit. Note: The default PIN length is protected by requiring a user to type a correct PIN to...
... Server can store a combined total of 250 user-level and administrator-level passwords on the list, whether they are used to control access to document outputs, by a normal password, any administrator-level password will also grant access. 7 Click Submit. Note: The default PIN length is protected by requiring a user to type a correct PIN to...
Embedded Web Server Administrator's Guide
Page 9
... select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security), or TLS. • Userid Attribute-Type either User ID or User ID and Password to specify the information a user must have a unique name. • Administrators can create up to make the E-mail address a required field ... a new LDAP setup 1 From the Embedded Web Server Home screen, browse to access information stored in a specially organized information directory. The default LDAP port is used by the Embedded Web Server to communicate with the authenticating server. • To help prevent unauthorized access, users are ...
... select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security), or TLS. • Userid Attribute-Type either User ID or User ID and Password to specify the information a user must have a unique name. • Administrators can create up to make the E-mail address a required field ... a new LDAP setup 1 From the Embedded Web Server Home screen, browse to access information stored in a specially organized information directory. The default LDAP port is used by the Embedded Web Server to communicate with the authenticating server. • To help prevent unauthorized access, users are ...
Embedded Web Server Administrator's Guide
Page 14
Instead of a user's password across a network in clear text. An administrator can store only one NTLM configuration on the printer ...If Daylight Saving Time (DST) is Microsoft's solution for enabling authentication without requiring the transmission of comparing the user's actual password, the NTLM server and the client generate and compare three encrypted strings based on an external server, users will not be ...be in sync or closely aligned with any form of authentication that relies on the user's password. Printer clock settings can only be registered to restore default values.
Instead of a user's password across a network in clear text. An administrator can store only one NTLM configuration on the printer ...If Daylight Saving Time (DST) is Microsoft's solution for enabling authentication without requiring the transmission of comparing the user's actual password, the NTLM server and the client generate and compare three encrypted strings based on an external server, users will not be ...be in sync or closely aligned with any form of authentication that relies on the user's password. Printer clock settings can only be registered to restore default values.
Embedded Web Server Administrator's Guide
Page 15
... Server Home screen, browse to access security menus regardless of the type of the Primary Domain Controller) • User ID • Password 6 Click Submit. Using security features in the Default User Domain field, and then click Register Domain to access additional configuration settings. 5 On the Settings screen under Register Domain, provide the...
... Server Home screen, browse to access security menus regardless of the type of the Primary Domain Controller) • User ID • Password 6 Click Submit. Using security features in the Default User Domain field, and then click Register Domain to access additional configuration settings. 5 On the Settings screen under Register Domain, provide the...
Embedded Web Server Administrator's Guide
Page 16
..., select Access Controls. 3 For each function you want to protect, select a password or PIN from the drop-down list for that function. 4 Click Submit to save changes, or Reset Form to restore default values. Using a security template to control function access Step 1: Create a building block...control access to cancel all changes. For simple authorization-level security (in which individual users are encouraged to each session by a password or PIN. Note: To help prevent unauthorized access, users are not authenticated), administrators can be assigned to securely end each Access...
..., select Access Controls. 3 For each function you want to protect, select a password or PIN from the drop-down list for that function. 4 Click Submit to save changes, or Reset Form to restore default values. Using a security template to control function access Step 1: Create a building block...control access to cancel all changes. For simple authorization-level security (in which individual users are encouraged to each session by a password or PIN. Note: To help prevent unauthorized access, users are not authenticated), administrators can be assigned to securely end each Access...
Embedded Web Server Administrator's Guide
Page 26
...credentials, select an authentication method from the SMTP server before changing 802.1x authentication settings. If only one certificate has been installed, default will be sent using digital certificates to establish a secure connection to specify whether E-mail will wait for no authentication, or Use ... 2 Under 802.1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will recognize by clicking the check box next to use to log in order to send E-mail, enter the information appropriate for ...
...credentials, select an authentication method from the SMTP server before changing 802.1x authentication settings. If only one certificate has been installed, default will be sent using digital certificates to establish a secure connection to specify whether E-mail will wait for no authentication, or Use ... 2 Under 802.1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will recognize by clicking the check box next to use to log in order to send E-mail, enter the information appropriate for ...
Embedded Web Server Administrator's Guide
Page 27
... entries (shown as device monitoring, type an SNMPPv3 Read/Write User name and Password in the appropriate fields. 4 To allow device monitoring only, type an SNMPv3 Read Only User name and Password in the appropriate fields. 5 From the SNMPv3 Minimum Authentication Level list, select No...SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore default values. SNMP Version 3 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª SNMP. 2 Under SNMP Version ...
... entries (shown as device monitoring, type an SNMPPv3 Read/Write User name and Password in the appropriate fields. 4 To allow device monitoring only, type an SNMPv3 Read Only User name and Password in the appropriate fields. 5 From the SNMPv3 Minimum Authentication Level list, select No...SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore default values. SNMP Version 3 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª SNMP. 2 Under SNMP Version ...
Embedded Web Server Administrator's Guide
Page 28
... service call will not be required to replace the device RIP card (motherboard). Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard. Enabling the security reset jumper The Security Reset Jumper is lost, you... will be able to clear all security settings to default values). 3 Click Submit to save changes, or Reset Form to access the security menus. Using security features in the Embedded Web ...
... service call will not be required to replace the device RIP card (motherboard). Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard. Enabling the security reset jumper The Security Reset Jumper is lost, you... will be able to clear all security settings to default values). 3 Click Submit to save changes, or Reset Form to access the security menus. Using security features in the Embedded Web ...
Embedded Web Server Administrator's Guide
Page 40
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
User's Guide
Page 40
...There are installing the printer on a wireless network Note: Do not connect the installation or network cables until prompted to do so by selecting the Default WEP Transmit Key. If you are three basic options for Security Method: - Check with your wireless network does not use on the network. ...and on the printer, or the printer will need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up the printer on an 802.1X network using the Advanced method, then you ...
...There are installing the printer on a wireless network Note: Do not connect the installation or network cables until prompted to do so by selecting the Default WEP Transmit Key. If you are three basic options for Security Method: - Check with your wireless network does not use on the network. ...and on the printer, or the printer will need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up the printer on an 802.1X network using the Advanced method, then you ...
User's Guide
Page 121
... is 1-65536. Some SMTP servers require credentials in to send email. Notes: • None is the factory default setting for Device-Initiated E-mail. • Device Userid and Device Password are used to log in order to the SMTP server when "Use Device SMTP Credentials" is the factory... default setting. Range is the default SMTP gateway port. Specifies what credentials will be used . Understanding printer menus 121...
... is 1-65536. Some SMTP servers require credentials in to send email. Notes: • None is the factory default setting for Device-Initiated E-mail. • Device Userid and Device Password are used to log in order to the SMTP server when "Use Device SMTP Credentials" is the factory... default setting. Range is the default SMTP gateway port. Specifies what credentials will be used . Understanding printer menus 121...
User's Guide
Page 137
... Write, or password protected. • Download appears only if applicable and shows all the fonts downloaded into printer RAM. • All shows all fonts available to 100%. Identifies a specific font and the option where it is stored Notes: • Courier 10 is the factory default setting. •...• Flash and Disk options must not be set of alphabetic and numeric characters, punctuation, and special symbols. It shows the factory default set to any option. Symbol sets support the different languages or specific programs such as math symbols for scientific text. Menu item Font...
... Write, or password protected. • Download appears only if applicable and shows all the fonts downloaded into printer RAM. • All shows all fonts available to 100%. Identifies a specific font and the option where it is stored Notes: • Courier 10 is the factory default setting. •...• Flash and Disk options must not be set of alphabetic and numeric characters, punctuation, and special symbols. It shows the factory default set to any option. Symbol sets support the different languages or specific programs such as math symbols for scientific text. Menu item Font...