Embedded Web Server Administrator's Guide
Page 3
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
Embedded Web Server Administrator's Guide
Page 6
...with either the Internal accounts or LDAP/LDAP+GSSAPI building blocks. Using security features in association with Groups Authentication and authorization Password Authorization only PIN Authorization only Each device can support up to 32 groups to similar functions. Note: For a list of... Access Controls"), are used in the Embedded Web Server 6 A Security Template is a profile constructed using a password, PIN, or security template. Access Controls By default, all users the functions they are used to identify sets of functions that give all device menus, settings, ...
...with either the Internal accounts or LDAP/LDAP+GSSAPI building blocks. Using security features in association with Groups Authentication and authorization Password Authorization only PIN Authorization only Each device can support up to 32 groups to similar functions. Note: For a list of... Access Controls"), are used in the Embedded Web Server 6 A Security Template is a profile constructed using a password, PIN, or security template. Access Controls By default, all users the functions they are used to identify sets of functions that give all device menus, settings, ...
Embedded Web Server Administrator's Guide
Page 7
... can store a combined total of 250 user-level and administrator-level PINs. Note: The default PIN length is protected by requiring a user to type a correct PIN to confirm it . Administrator-level passwords override normal passwords. Configuring building blocks Creating a password The Embedded Web Server can store a combined total of 250 user-level and administrator...
... can store a combined total of 250 user-level and administrator-level PINs. Note: The default PIN length is protected by requiring a user to type a correct PIN to confirm it . Administrator-level passwords override normal passwords. Configuring building blocks Creating a password The Embedded Web Server can store a combined total of 250 user-level and administrator...
Embedded Web Server Administrator's Guide
Page 9
...be able to access protected device functions in a specially organized information directory. Notes: • Supported devices can interact with the LDAP server. The default LDAP port is 389. • Use SSL/TLS-From the drop-down menu select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security), ...or TLS. • Userid Attribute-Type either User ID or User ID and Password to communicate with many different kinds of LDAP is divided into four parts: General Information • Setup Name-This name will be used to...
...be able to access protected device functions in a specially organized information directory. Notes: • Supported devices can interact with the LDAP server. The default LDAP port is 389. • Use SSL/TLS-From the drop-down menu select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security), ...or TLS. • Userid Attribute-Type either User ID or User ID and Password to communicate with many different kinds of LDAP is divided into four parts: General Information • Setup Name-This name will be used to...
Embedded Web Server Administrator's Guide
Page 14
...Time Zone Setup settings as part of a security template. • As with any form of authentication that relies on the user's password. Instead of a user's password across a network in a security template only after a supported device has registered with the NTLM domain. • The NTLM building block..." link to browse to the file containing the NTP authentication credentials. 7 Click Submit to save changes, or Reset Form to restore default values. Using NTLM authentication NTLM (Windows NT LAN Manager) is observed in sync or closely aligned with a trusted clock-typically the same...
...Time Zone Setup settings as part of a security template. • As with any form of authentication that relies on the user's password. Instead of a user's password across a network in a security template only after a supported device has registered with the NTLM domain. • The NTLM building block..." link to browse to the file containing the NTP authentication credentials. 7 Click Submit to save changes, or Reset Form to restore default values. Using NTLM authentication NTLM (Windows NT LAN Manager) is observed in sync or closely aligned with a trusted clock-typically the same...
Embedded Web Server Administrator's Guide
Page 15
... Settings ª Security ª Edit Security Setups. 2 Under Edit Backup Password, select Backup Password. 3 Select the Use Backup Password box, and then type and re-enter the password. 4 Click Submit. Note: In some organizations, security policies prohibit the use of security assigned. Specifying the default user domain for example, if there is not successful, the...
... Settings ª Security ª Edit Security Setups. 2 Under Edit Backup Password, select Backup Password. 3 Select the Use Backup Password box, and then type and re-enter the password. 4 Click Submit. Note: In some organizations, security policies prohibit the use of security assigned. Specifying the default user domain for example, if there is not successful, the...
Embedded Web Server Administrator's Guide
Page 16
...Remote Login Timeout-Specify how long a user may be logged in order to gain access to specific device functions using a password or PIN. Setting login restrictions Many organizations establish login restrictions for information assets such as needed. Users will now be assigned to ...restore default values. Embedded Web Server administrators should verify that printer login restrictions also comply with organizational security policies. 1 From the ...
...Remote Login Timeout-Specify how long a user may be logged in order to gain access to specific device functions using a password or PIN. Setting login restrictions Many organizations establish login restrictions for information assets such as needed. Users will now be assigned to ...restore default values. Embedded Web Server administrators should verify that printer login restrictions also comply with organizational security policies. 1 From the ...
Embedded Web Server Administrator's Guide
Page 26
....1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will use . The default is 30 seconds. 6 To receive responses to messages sent from the printer (in order to the authentication server, you want...the IP address/hostname and SMTP port for no authentication, or Use Device SMTP Credentials, Use Session User ID and Password, Use Session E-mail address and Password, or Prompt user if authentication is integral to TLS (Transport Layer Security), PEAP (Protected Extensible Authentication Protocol), and ...
....1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will use . The default is 30 seconds. 6 To receive responses to messages sent from the printer (in order to the authentication server, you want...the IP address/hostname and SMTP port for no authentication, or Use Device SMTP Credentials, Use Session User ID and Password, Use Session E-mail address and Password, or Prompt user if authentication is integral to TLS (Transport Layer Security), PEAP (Protected Extensible Authentication Protocol), and ...
Embedded Web Server Administrator's Guide
Page 27
...4 Type a name to be accepted through 3. The Embedded Web server allows administrators to configure settings for the SNMP Community identifier (the default community name is public). 5 To facilitate the automatic installation of device drivers and other printing applications, select the Enable PPM Mib (Printer ...SNMP. 2 Under SNMP Version 1, 2c, select the Enabled check box. 3 To allow device monitoring only, type an SNMPv3 Read Only User name and Password in the Embedded Web Server 27 SNMP Version 3 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª SNMP. ...
...4 Type a name to be accepted through 3. The Embedded Web server allows administrators to configure settings for the SNMP Community identifier (the default community name is public). 5 To facilitate the automatic installation of device drivers and other printing applications, select the Enable PPM Mib (Printer ...SNMP. 2 Under SNMP Version 1, 2c, select the Enabled check box. 3 To allow device monitoring only, type an SNMPv3 Read Only User name and Password in the Embedded Web Server 27 SNMP Version 3 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª SNMP. ...
Embedded Web Server Administrator's Guide
Page 28
... generate an alert. 5 Click Submit to save changes, or Reset Form to clear all security settings to default values). 3 Click Submit to save the changes. Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard. Administrators can use with caution...
... generate an alert. 5 Click Submit to save changes, or Reset Form to clear all security settings to default values). 3 Click Submit to save the changes. Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard. Administrators can use with caution...
Embedded Web Server Administrator's Guide
Page 40
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
Wireless Setup Guide
Page 6
... more than one WEP key, enter up to four in the following : • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more information on printing a network setup page, see the Networking Guide on the Software and Documentation CD. • Security Method...the printer, or the printer will not be sure to add the printer MAC address to the list of addresses allowed by selecting the Default WEP Transmit Key. WEP key If your wireless network does not use on the network by the wireless router. WPA or WPA2 passphrase WPA...
... more than one WEP key, enter up to four in the following : • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more information on printing a network setup page, see the Networking Guide on the Software and Documentation CD. • Security Method...the printer, or the printer will not be sure to add the printer MAC address to the list of addresses allowed by selecting the Default WEP Transmit Key. WEP key If your wireless network does not use on the network by the wireless router. WPA or WPA2 passphrase WPA...
Wireless Setup Guide
Page 13
... 2 Double-click the Utilities folder. 3 Double-click Print Center or Printer Setup Utility. 4 From the Printer List, choose Add. 5 Choose the Default Browser tab. 6 Click More Printers. 7 From the first pop-up menu, choose AppleTalk. 8 From the second pop-up menu, select Local AppleTalk ... Apple menu, choose System Preferences. 2 Click Print & Fax. 3 Click +. 4 Select the printer from the list. 6 Click Add. h Type the user password, and then click OK. f Select a Destination, and then click Continue. g From the Easy Install screen, click Install. i Click Close when installation is installed...
... 2 Double-click the Utilities folder. 3 Double-click Print Center or Printer Setup Utility. 4 From the Printer List, choose Add. 5 Choose the Default Browser tab. 6 Click More Printers. 7 From the first pop-up menu, choose AppleTalk. 8 From the second pop-up menu, select Local AppleTalk ... Apple menu, choose System Preferences. 2 Click Print & Fax. 3 Click +. 4 Select the printer from the list. 6 Click Add. h Type the user password, and then click OK. f Select a Destination, and then click Continue. g From the Easy Install screen, click Install. i Click Close when installation is installed...
Wireless Setup Guide
Page 16
... • The IP address appears as 192.168.2.134. The SSID of the printer. Troubleshooting wireless setup 16 b Type the user name and password of your Web browser and continue to set up menu. 4 Write down the SSID. For Macintosh users with an AirPort base station In Mac..., such as four sets of numbers separated by the computer. The SSID will be displayed. Check the Wireless Network Connection section: • The "Default Gateway" entry is displayed in the address field of the router when prompted. The Command Prompt window opens. 4 Type ipconfig, and then press Enter...
... • The IP address appears as 192.168.2.134. The SSID of the printer. Troubleshooting wireless setup 16 b Type the user name and password of your Web browser and continue to set up menu. 4 Write down the SSID. For Macintosh users with an AirPort base station In Mac..., such as four sets of numbers separated by the computer. The SSID will be displayed. Check the Wireless Network Connection section: • The "Default Gateway" entry is displayed in the address field of the router when prompted. The Command Prompt window opens. 4 Type ipconfig, and then press Enter...
Wireless Setup Guide
Page 23
... Œ Accessories. 3 Click Command Prompt. Find the network SSID 1 Type the IP address of your browser. c Press Enter. • The "Default Gateway" entry is not installed on the computer, then insert the Software and Documentation CD, and follow the wireless installation path. Troubleshooting wireless setup 23...If the Wireless Setup Utility is typically the access point. • The IP address appears as 192.168.1.1. 2 Type the user name and password for the access point when prompted. 3 Click OK. 4 Locate the page where the SSID appears. 5 Write down exactly, including any capital...
... Œ Accessories. 3 Click Command Prompt. Find the network SSID 1 Type the IP address of your browser. c Press Enter. • The "Default Gateway" entry is not installed on the computer, then insert the Software and Documentation CD, and follow the wireless installation path. Troubleshooting wireless setup 23...If the Wireless Setup Utility is typically the access point. • The IP address appears as 192.168.1.1. 2 Type the user name and password for the access point when prompted. 3 Click OK. 4 Locate the page where the SSID appears. 5 Write down exactly, including any capital...
User's Guide
Page 56
The choices are three basic options for the same type on the router and on the network by selecting the Default WEP Transmit Key. No security If your wireless network does not use on the printer, or the printer will not have any type of security... as an additional layer of security, then you may need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more information on configuring 802.1X security, see the Networking Guide on . Note: Using an unsecured wireless network is installed in...
The choices are three basic options for the same type on the router and on the network by selecting the Default WEP Transmit Key. No security If your wireless network does not use on the printer, or the printer will not have any type of security... as an additional layer of security, then you may need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more information on configuring 802.1X security, see the Networking Guide on . Note: Using an unsecured wireless network is installed in...
User's Guide
Page 62
.... 2 Double-click the Utilities folder. 3 Double-click Print Center or Printer Setup Utility. 4 From the Printer List, choose Add. 5 Choose the Default Browser tab. 6 Click More Printers. 7 From the first pop-up menu, choose AppleTalk. 8 From the second pop-up menu, select Local AppleTalk zone.... 9 Select the printer from the list. 6 Click Add. Additional printer setup 62 h Type the user password, and then click OK. b For AppleTalk printing: In Mac OS X version 10.5 1 From the Apple menu, choose System Preferences. 2 Click Print & Fax...
.... 2 Double-click the Utilities folder. 3 Double-click Print Center or Printer Setup Utility. 4 From the Printer List, choose Add. 5 Choose the Default Browser tab. 6 Click More Printers. 7 From the first pop-up menu, choose AppleTalk. 8 From the second pop-up menu, select Local AppleTalk zone.... 9 Select the printer from the list. 6 Click Add. Additional printer setup 62 h Type the user password, and then click OK. b For AppleTalk printing: In Mac OS X version 10.5 1 From the Apple menu, choose System Preferences. 2 Click Print & Fax...
User's Guide
Page 64
...choose Go > Applications. 2 Double-click Utilities. 3 Double-click Print Center or Printer Setup Utility. 4 From the Printer List, click Add. 5 Choose the Default Browser tab. 6 Click More Printers. 7 From the first pop-up menu, choose AppleTalk. 8 From the second pop-up menu, select Local AppleTalk zone. Additional... IP address of the agreement. 6 Select a Destination, and then click Continue. 7 From the Easy Install screen, click Install. 8 Type the user password, and then click OK. All the necessary software is installed on the computer. 9 Click Restart when installation is complete.
...choose Go > Applications. 2 Double-click Utilities. 3 Double-click Print Center or Printer Setup Utility. 4 From the Printer List, click Add. 5 Choose the Default Browser tab. 6 Click More Printers. 7 From the first pop-up menu, choose AppleTalk. 8 From the second pop-up menu, select Local AppleTalk zone. Additional... IP address of the agreement. 6 Select a Destination, and then click Continue. 7 From the Easy Install screen, click Install. 8 Type the user password, and then click OK. All the necessary software is installed on the computer. 9 Click Restart when installation is complete.
User's Guide
Page 169
... Device SMTP Credentials User-Initiated E-mail None Use Device SMTP Credentials Use Session User ID and Password Use Session E-mail address and Password Prompt User Device Userid Device password Kerberos 5 Realm NTLM Domain Description Specifies server information Notes: • The message boxes have ...a limitation of a currently active network card Lets you view the speed of 512 characters. • None is the factory default ...
... Device SMTP Credentials User-Initiated E-mail None Use Device SMTP Credentials Use Session User ID and Password Use Session E-mail address and Password Prompt User Device Userid Device password Kerberos 5 Realm NTLM Domain Description Specifies server information Notes: • The message boxes have ...a limitation of a currently active network card Lets you view the speed of 512 characters. • None is the factory default ...
User's Guide
Page 206
... Setup Max e-mail size 0-65535 KB E-mail Server Setup Size Error Message E-mail Server Setup Limit destinations E-mail Server Setup Web Link Setup Server Login Password Path Base file name Web Link Format PDF (.pdf) Secure PDF TIFF (.tif) JPEG (.jpg) XPS (.xps) PDF Version 1.2-1.6 Content Text/Photo Photograph...Gray Color Resolution 75 150 200 300 400 600 Description Specifies the maximum e-mail size in grayscale or color Note: Color is the factory default setting. Text/Photo is used when the documents are invalid entries for a path name Specifies the format of the PDF file that will be...
... Setup Max e-mail size 0-65535 KB E-mail Server Setup Size Error Message E-mail Server Setup Limit destinations E-mail Server Setup Web Link Setup Server Login Password Path Base file name Web Link Format PDF (.pdf) Secure PDF TIFF (.tif) JPEG (.jpg) XPS (.xps) PDF Version 1.2-1.6 Content Text/Photo Photograph...Gray Color Resolution 75 150 200 300 400 600 Description Specifies the maximum e-mail size in grayscale or color Note: Color is the factory default setting. Text/Photo is used when the documents are invalid entries for a path name Specifies the format of the PDF file that will be...
