Embedded Web Server Administrator's Guide
Page 3
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
Embedded Web Server Administrator's Guide
Page 6
Access Controls By default, all users the functions they need to common device functions, while...as printing, copying, and faxing, administrators must be used in association with Groups Authentication and authorization Password Authorization only PIN Authorization only Each device can support up to 32 groups to create very specific ... used to identify sets of Access Controls" on page 29. A Security Template is a profile constructed using a password, PIN, or security template. Using security features in some multifunction printers, over 40 individual menus and functions can be...
Access Controls By default, all users the functions they need to common device functions, while...as printing, copying, and faxing, administrators must be used in association with Groups Authentication and authorization Password Authorization only PIN Authorization only Each device can support up to 32 groups to create very specific ... used to identify sets of Access Controls" on page 29. A Security Template is a profile constructed using a password, PIN, or security template. Using security features in some multifunction printers, over 40 individual menus and functions can be...
Embedded Web Server Administrator's Guide
Page 7
... each supported device. Administrator-level passwords override normal passwords. Notes: • To edit a password, select a password from the list, and then modify the settings. • To delete a password, select a password from the list and then click Delete Entry. Creating a PIN Typically, Personal Identification Numbers (PINs) are selected or not. Note: The default PIN length is protected by...
... each supported device. Administrator-level passwords override normal passwords. Notes: • To edit a password, select a password from the list, and then modify the settings. • To delete a password, select a password from the list and then click Delete Entry. Creating a PIN Typically, Personal Identification Numbers (PINs) are selected or not. Note: The default PIN length is protected by...
Embedded Web Server Administrator's Guide
Page 9
... of the TCP/IP layer, and is that runs directly on the printer control panel. Multiple search bases may be entered, separated by commas. The default LDAP port is 389. • Use SSL/TLS-From the drop-down menu select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security), or ...TLS. • Userid Attribute-Type either User ID or User ID and Password to specify the information a user must have a unique name. • Administrators can create up to 32 user-defined groups that apply to each unique LDAP...
... of the TCP/IP layer, and is that runs directly on the printer control panel. Multiple search bases may be entered, separated by commas. The default LDAP port is 389. • Use SSL/TLS-From the drop-down menu select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security), or ...TLS. • Userid Attribute-Type either User ID or User ID and Password to specify the information a user must have a unique name. • Administrators can create up to 32 user-defined groups that apply to each unique LDAP...
Embedded Web Server Administrator's Guide
Page 14
...NTLM authentication NTLM (Windows NT LAN Manager) is Microsoft's solution for enabling authentication without requiring the transmission of a user's password across a network in the Embedded Web Server 14 Using security features in clear text. Instead of NTP. • ... can be registered to a single NT domain. An administrator can store only one NTLM configuration on the user's password. Notes: • Entering manual settings automatically disables use Network Time Protocol (NTP), to automatically sync with a ... settings can only be updated manually, or set to restore default values.
...NTLM authentication NTLM (Windows NT LAN Manager) is Microsoft's solution for enabling authentication without requiring the transmission of a user's password across a network in the Embedded Web Server 14 Using security features in clear text. Instead of NTP. • ... can be registered to a single NT domain. An administrator can store only one NTLM configuration on the user's password. Notes: • Entering manual settings automatically disables use Network Time Protocol (NTP), to automatically sync with a ... settings can only be updated manually, or set to restore default values.
Embedded Web Server Administrator's Guide
Page 15
...password. 4 Click Submit. To create a backup password 1 From the Embedded Web Server Home screen, browse to register your device with the URL beginning "https://"), rather than an unsecured browsing window. Note: In some organizations, security policies prohibit the use of security assigned. Note: If you will display "Status....Not Registeted." Specifying the default...security method that might compromise those policies. Securing access Setting a backup password The Backup Password allows Embedded Web Server administrators to access security menus regardless of the type of "back...
...password. 4 Click Submit. To create a backup password 1 From the Embedded Web Server Home screen, browse to register your device with the URL beginning "https://"), rather than an unsecured browsing window. Note: In some organizations, security policies prohibit the use of security assigned. Note: If you will display "Status....Not Registeted." Specifying the default...security method that might compromise those policies. Securing access Setting a backup password The Backup Password allows Embedded Web Server administrators to access security menus regardless of the type of "back...
Embedded Web Server Administrator's Guide
Page 16
... individual users are encouraged to securely end each session by a password or PIN. Users will now be set to require No Security (the default), or to each function you want to protect, select a password or PIN from the drop-down list for that function. For... control function access Step 1: Create a building block 1 From the Embedded Web Server Home screen, browse to specific device functions using a password or PIN. Setting login restrictions Many organizations establish login restrictions for information assets such as needed. For simple authorization-level security (in order...
... individual users are encouraged to securely end each session by a password or PIN. Users will now be set to require No Security (the default), or to each function you want to protect, select a password or PIN from the drop-down list for that function. For... control function access Step 1: Create a building block 1 From the Embedded Web Server Home screen, browse to specific device functions using a password or PIN. Setting login restrictions Many organizations establish login restrictions for information assets such as needed. For simple authorization-level security (in order...
Embedded Web Server Administrator's Guide
Page 26
... the printer (in order to enable 802.1x authentication. • Type the login name and password the printer will use . If only one certificate has been installed, default will be sent using an encrypted link. 8 If your network under Device Credentials. Using security ...the Device-Initiated E-mail list, select None for no authentication, or Use Device SMTP Credentials, Use Session User ID and Password, Use Session E-mail address and Password, or Prompt user if authentication is integral to TLS (Transport Layer Security), PEAP (Protected Extensible Authentication Protocol), and TTLS...
... the printer (in order to enable 802.1x authentication. • Type the login name and password the printer will use . If only one certificate has been installed, default will be sent using an encrypted link. 8 If your network under Device Credentials. Using security ...the Device-Initiated E-mail list, select None for no authentication, or Use Device SMTP Credentials, Use Session User ID and Password, Use Session E-mail address and Password, or Prompt user if authentication is integral to TLS (Transport Layer Security), PEAP (Protected Extensible Authentication Protocol), and TTLS...
Embedded Web Server Administrator's Guide
Page 27
...select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. Setting SNMP Traps After configuring SNMP Version 1, 2c or SNMP Version 3, you can further customize which authentication method will cause... facilitate the automatic installation of the blank IP address entries (shown as device monitoring, type an SNMPPv3 Read/Write User name and Password in network management systems to monitor network-attached devices for SNMP versions 1 through the secure tunnel created between the authentication server and ...
...select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. Setting SNMP Traps After configuring SNMP Version 1, 2c or SNMP Version 3, you can further customize which authentication method will cause... facilitate the automatic installation of the blank IP address entries (shown as device monitoring, type an SNMPPv3 Read/Write User name and Password in network management systems to monitor network-attached devices for SNMP versions 1 through the secure tunnel created between the authentication server and ...
Embedded Web Server Administrator's Guide
Page 28
Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard. 4 Under Trap Destination, type the ... condition that should generate an alert. 5 Click Submit to save changes, or Reset Form to clear all security settings to default values). 3 Click Submit to save the changes. Using security features in the Embedded Web Server 28 To regain access to the... Access controls = "No security" (to remove security only from function access controls), or Reset factory security defaults (to return all fields.
Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard. 4 Under Trap Destination, type the ... condition that should generate an alert. 5 Click Submit to save changes, or Reset Form to clear all security settings to default values). 3 Click Submit to save the changes. Using security features in the Embedded Web Server 28 To regain access to the... Access controls = "No security" (to remove security only from function access controls), or Reset factory security defaults (to return all fields.
Embedded Web Server Administrator's Guide
Page 40
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
Wireless Setup Guide
Page 6
...the printer. The MAC address appears in use any security information. The choices are AES or TKIP. A list of addresses allowed by selecting the Default WEP Transmit Key. WEP key If your wireless network does not use on the network setup page. This identification number is not recommended. •... and Documentation CD. Select the key currently in the following : • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up to distinguish it from other network devices.
...the printer. The MAC address appears in use any security information. The choices are AES or TKIP. A list of addresses allowed by selecting the Default WEP Transmit Key. WEP key If your wireless network does not use on the network setup page. This identification number is not recommended. •... and Documentation CD. Select the key currently in the following : • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up to distinguish it from other network devices.
Wireless Setup Guide
Page 13
..., choose Go >Applications. 2 Double-click the Utilities folder. 3 Double-click Print Center or Printer Setup Utility. 4 From the Printer List, choose Add. 5 Choose the Default Browser tab. 6 Click More Printers. 7 From the first pop-up menu, choose AppleTalk. 8 From the second pop-up menu, select Local AppleTalk zone. 9 Select the... Center. 4 From the Printer List, choose Add. 5 Select the printer from the list. 5 Click Add. f Select a Destination, and then click Continue. h Type the user password, and then click OK. i Click Close when installation is installed on the computer.
..., choose Go >Applications. 2 Double-click the Utilities folder. 3 Double-click Print Center or Printer Setup Utility. 4 From the Printer List, choose Add. 5 Choose the Default Browser tab. 6 Click More Printers. 7 From the first pop-up menu, choose AppleTalk. 8 From the second pop-up menu, select Local AppleTalk zone. 9 Select the... Center. 4 From the Printer List, choose Add. 5 Select the printer from the list. 5 Click Add. f Select a Destination, and then click Continue. h Type the user password, and then click OK. i Click Close when installation is installed on the computer.
Wireless Setup Guide
Page 16
b Type the user name and password of numbers separated by the computer. The SSID will be displayed. The SSID of the network the computer is connected to is displayed in the ... menu, choose System Preferences. 2 Click Network. 3 Click AirPort. If the SSIDs are stored. Troubleshooting wireless setup 16 Check the Wireless Network Connection section: • The "Default Gateway" entry is displayed in the address field of the printer. e Write down the SSID. For Macintosh users with a wireless access point 1 Type the IP...
b Type the user name and password of numbers separated by the computer. The SSID will be displayed. The SSID of the network the computer is connected to is displayed in the ... menu, choose System Preferences. 2 Click Network. 3 Click AirPort. If the SSIDs are stored. Troubleshooting wireless setup 16 Check the Wireless Network Connection section: • The "Default Gateway" entry is displayed in the address field of the printer. e Write down the SSID. For Macintosh users with a wireless access point 1 Type the IP...
Wireless Setup Guide
Page 23
b Type ipconfig. c Press Enter. • The "Default Gateway" entry is not installed on the computer, then insert the Software and Documentation CD, and follow the wireless installation path. a If you copy them ... 23 Note: If the Wireless Setup Utility is typically the access point. • The IP address appears as 192.168.1.1. 2 Type the user name and password for the access point when prompted. 3 Click OK. 4 Locate the page where the SSID appears. 5 Write down exactly, including any capital letters. Network printer does...
b Type ipconfig. c Press Enter. • The "Default Gateway" entry is not installed on the computer, then insert the Software and Documentation CD, and follow the wireless installation path. a If you copy them ... 23 Note: If the Wireless Setup Utility is typically the access point. • The IP address appears as 192.168.1.1. 2 Type the user name and password for the access point when prompted. 3 Click OK. 4 Locate the page where the SSID appears. 5 Write down exactly, including any capital letters. Network printer does...
User's Guide
Page 56
...as an additional layer of security, then you may need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up the printer. 1 Connect the power cable to the printer and then to a ...properly grounded electrical outlet, and then turn the printer on the network by selecting the Default WEP Transmit Key. • Security Method-There are three basic options for the same type on the router and on the printer, or the...
...as an additional layer of security, then you may need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up the printer. 1 Connect the power cable to the printer and then to a ...properly grounded electrical outlet, and then turn the printer on the network by selecting the Default WEP Transmit Key. • Security Method-There are three basic options for the same type on the router and on the printer, or the...
User's Guide
Page 62
...menu, choose System Preferences. 2 Click Print & Fax. 3 Click +. 4 Select the printer from the list. 6 Click Add. h Type the user password, and then click OK. g From the Easy Install screen, click Install. i Click Restart when installation is installed on the computer. Additional printer setup 62.... 2 Double-click the Utilities folder. 3 Double-click Print Center or Printer Setup Utility. 4 From the Printer List, choose Add. 5 Choose the Default Browser tab. 6 Click More Printers. 7 From the first pop-up menu, choose AppleTalk. 8 From the second pop-up menu, select Local AppleTalk ...
...menu, choose System Preferences. 2 Click Print & Fax. 3 Click +. 4 Select the printer from the list. 6 Click Add. h Type the user password, and then click OK. g From the Easy Install screen, click Install. i Click Restart when installation is installed on the computer. Additional printer setup 62.... 2 Double-click the Utilities folder. 3 Double-click Print Center or Printer Setup Utility. 4 From the Printer List, choose Add. 5 Choose the Default Browser tab. 6 Click More Printers. 7 From the first pop-up menu, choose AppleTalk. 8 From the second pop-up menu, select Local AppleTalk ...
User's Guide
Page 64
... the Finder desktop, choose Go > Applications. 2 Double-click Utilities. 3 Double-click Print Center or Printer Setup Utility. 4 From the Printer List, click Add. 5 Choose the Default Browser tab. 6 Click More Printers. 7 From the first pop-up menu, choose AppleTalk. 8 From the second pop-up menu, select Local AppleTalk zone. 5 Click Continue... IP. 5 Type in the IP address of the agreement. 6 Select a Destination, and then click Continue. 7 From the Easy Install screen, click Install. 8 Type the user password, and then click OK.
... the Finder desktop, choose Go > Applications. 2 Double-click Utilities. 3 Double-click Print Center or Printer Setup Utility. 4 From the Printer List, click Add. 5 Choose the Default Browser tab. 6 Click More Printers. 7 From the first pop-up menu, choose AppleTalk. 8 From the second pop-up menu, select Local AppleTalk zone. 5 Click Continue... IP. 5 Type in the IP address of the agreement. 6 Select a Destination, and then click Continue. 7 From the Easy Install screen, click Install. 8 Type the user password, and then click OK.
User's Guide
Page 169
...of the Network Card Lets you view the network addresses Understanding printer menus 169 Network Card menu This menu is the factory default setting for Device-Initiated E-mail and User-Initiated E-mail. Menu item Device-Initiated E-mail None Use Device SMTP Credentials User...-Initiated E-mail None Use Device SMTP Credentials Use Session User ID and Password Use Session E-mail address and Password Prompt User Device Userid Device password Kerberos 5 Realm NTLM Domain Description Specifies server information Notes: • The message boxes have a limitation...
...of the Network Card Lets you view the network addresses Understanding printer menus 169 Network Card menu This menu is the factory default setting for Device-Initiated E-mail and User-Initiated E-mail. Menu item Device-Initiated E-mail None Use Device SMTP Credentials User...-Initiated E-mail None Use Device SMTP Credentials Use Session User ID and Password Use Session E-mail address and Password Prompt User Device Userid Device password Kerberos 5 Realm NTLM Domain Description Specifies server information Notes: • The message boxes have a limitation...
User's Guide
Page 206
...8226; Photograph is used when the document is a high-quality photograph or inkjet print. • Text is used when the document is the factory default setting. Menu item E-mail Server Setup Max e-mail size 0-65535 KB E-mail Server Setup Size Error Message E-mail Server Setup Limit destinations E-mail ...Server Setup Web Link Setup Server Login Password Path Base file name Web Link Format PDF (.pdf) Secure PDF TIFF (.tif) JPEG (.jpg) XPS (.xps) PDF Version 1.2-1.6 Content Text/Photo...
...8226; Photograph is used when the document is a high-quality photograph or inkjet print. • Text is used when the document is the factory default setting. Menu item E-mail Server Setup Max e-mail size 0-65535 KB E-mail Server Setup Size Error Message E-mail Server Setup Limit destinations E-mail ...Server Setup Web Link Setup Server Login Password Path Base file name Web Link Format PDF (.pdf) Secure PDF TIFF (.tif) JPEG (.jpg) XPS (.xps) PDF Version 1.2-1.6 Content Text/Photo...