Embedded Web Server Administrator's Guide
Page 3
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11 Configuring Kerberos 5 for use with LDAP+GSSAPI ...13 Using NTLM authentication...certificates...21 Setting certificate defaults ...22 Configuring confidential printing...22 Enabling and disabling USB devices...23 Disk wiping...23 Encrypting the hard disk ...24 Configuring security audit log settings ...25 Configuring 802.1x authentication ...26 Setting up ...
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11 Configuring Kerberos 5 for use with LDAP+GSSAPI ...13 Using NTLM authentication...certificates...21 Setting certificate defaults ...22 Configuring confidential printing...22 Enabling and disabling USB devices...23 Disk wiping...23 Encrypting the hard disk ...24 Configuring security audit log settings ...25 Configuring 802.1x authentication ...26 Setting up ...
Embedded Web Server Administrator's Guide
Page 7
.... The Embedded Web Server can also be used to control access to document outputs, by requiring a user to type a correct PIN to retrieve a held print, copy, or fax job. To create a PIN 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security ...Name box. Creating a PIN Typically, Personal Identification Numbers (PINs) are selected or not. Each PIN must have a unique name consisting of the PIN configuration in the appropriate box, and then re-enter the PIN to a device itself. To create a password 1 From the Embedded Web Server Home screen,...
.... The Embedded Web Server can also be used to control access to document outputs, by requiring a user to type a correct PIN to retrieve a held print, copy, or fax job. To create a PIN 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security ...Name box. Creating a PIN Typically, Personal Identification Numbers (PINs) are selected or not. Each PIN must have a unique name consisting of the PIN configuration in the appropriate box, and then re-enter the PIN to a device itself. To create a password 1 From the Embedded Web Server Home screen,...
Embedded Web Server Administrator's Guide
Page 8
...PIN will be used by a specific Administrator PIN, then only that PIN will fulfill a role once combined into a security template, and users can configure one or more than one group (or role), in the Embedded Web Server 8 Note: Group names can use up to 128 UTF-8 characters....UTF-8 characters. • Password-Type a password of 250 user accounts, and 32 user groups. The internal accounts building block can be used as printing, scanning, and copying-will be needed for the account (example: "jsmith"). Note: If an activity is helpful to provide authentication-level security, ...
...PIN will be used by a specific Administrator PIN, then only that PIN will fulfill a role once combined into a security template, and users can configure one or more than one group (or role), in the Embedded Web Server 8 Note: Group names can use up to 128 UTF-8 characters....UTF-8 characters. • Password-Type a password of 250 user accounts, and 32 user groups. The internal accounts building block can be used as printing, scanning, and copying-will be needed for the account (example: "jsmith"). Note: If an activity is helpful to provide authentication-level security, ...
Embedded Web Server Administrator's Guide
Page 10
... Edit Security Setups. 2 Under Edit Building Blocks, select LDAP. 3 Click a setup from the list. 4 Make any needed changes in the LDAP Configuration dialog. 5 Click Modify to save changes, or Cancel to return to previous values. Search specific object classes • Person-Click to three custom search... 32 named groups stored on the LDAP server, by the LDAP building block. LDAP Group Names • Configure Groups-Administrators can associate as many as part of the print server(s). • MFP Password-Enter the password for those groups under the Group Search Base list. Notes:...
... Edit Security Setups. 2 Under Edit Building Blocks, select LDAP. 3 Click a setup from the list. 4 Make any needed changes in the LDAP Configuration dialog. 5 Click Modify to save changes, or Cancel to return to previous values. Search specific object classes • Person-Click to three custom search... 32 named groups stored on the LDAP server, by the LDAP building block. LDAP Group Names • Configure Groups-Administrators can associate as many as part of the print server(s). • MFP Password-Enter the password for those groups under the Group Search Base list. Notes:...
Embedded Web Server Administrator's Guide
Page 12
...LDAP building block. Device Credentials • MFP Kerberos Username-Enter the distinguished name of a security template. LDAP Group Names • Configure Groups-Administrators can define up to three custom search object classes (optional). Notes: • Click Delete List to select or clear;...Password-Enter the Kerberos password for group, and Group Identifier must provide when attempting to previous values. Both the Short name for the print server(s). To delete an existing LDAP+GSSAPI setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ...
...LDAP building block. Device Credentials • MFP Kerberos Username-Enter the distinguished name of a security template. LDAP Group Names • Configure Groups-Administrators can define up to three custom search object classes (optional). Notes: • Click Delete List to select or clear;...Password-Enter the Kerberos password for group, and Group Identifier must provide when attempting to previous values. Both the Short name for the print server(s). To delete an existing LDAP+GSSAPI setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ...
Embedded Web Server Administrator's Guide
Page 22
...a maximum of times users can enter an incorrect PIN before being locked out. Configuring confidential printing Users printing confidential or sensitive information may opt to use the confidential print option, which allows print jobs to be present in all new certificates generated in the Certificate Management task,...• Select a value of the device. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Confidential Print Setup. 2 Select an option for a supported device. For example, enter an IP address using the format IP:1.2.3.4, or a DNS address using...
...a maximum of times users can enter an incorrect PIN before being locked out. Configuring confidential printing Users printing confidential or sensitive information may opt to use the confidential print option, which allows print jobs to be present in all new certificates generated in the Certificate Management task,...• Select a value of the device. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Confidential Print Setup. 2 Select an option for a supported device. For example, enter an IP address using the format IP:1.2.3.4, or a DNS address using...
Embedded Web Server Administrator's Guide
Page 23
For each Disable schedule entry, you must again select Disk Wiping to make further configuration changes. Notes: • The Scheduled Disk Wiping option will not appear until Manual mode has been selected and submitted. • Clicking Submit after choosing a Wiping ... entry to reactivate use of USB devices on a scheduled basis. 3 Select an option for Job Expiration: • Select Off to allow unprinted confidential print jobs to remain in the print queue indefinitely. • Select a value of 1 hour, 4 hours, 24 hours, or 1 week to specify the amount of time that have been marked...
For each Disable schedule entry, you must again select Disk Wiping to make further configuration changes. Notes: • The Scheduled Disk Wiping option will not appear until Manual mode has been selected and submitted. • Clicking Submit after choosing a Wiping ... entry to reactivate use of USB devices on a scheduled basis. 3 Select an option for Job Expiration: • Select Off to allow unprinted confidential print jobs to remain in the print queue indefinitely. • Select a value of 1 hour, 4 hours, 24 hours, or 1 week to specify the amount of time that have been marked...
Embedded Web Server Administrator's Guide
Page 27
... the Enabled check box. 3 To allow remote installation and configuration changes as well as 0.0.0.0). Setting SNMP Traps After configuring SNMP Version 1, 2c or SNMP Version 3, you can further customize which authentication method will cause the print server to reset. 4 From the TTLS Authentication Method list...5 To facilitate the automatic installation of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to configure settings for conditions that trigger an alert message. 1 From ...
... the Enabled check box. 3 To allow remote installation and configuration changes as well as 0.0.0.0). Setting SNMP Traps After configuring SNMP Version 1, 2c or SNMP Version 3, you can further customize which authentication method will cause the print server to reset. 4 From the TTLS Authentication Method list...5 To facilitate the automatic installation of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to configure settings for conditions that trigger an alert message. 1 From ...
Embedded Web Server Administrator's Guide
Page 29
.... Users who are denied will have their print jobs output in the Scan to Fax and Scan to Email functions Controls access to the Change Language feature from Home Screen Color Dropout Configuration Menu Copy Color Printing Copy Function Create Bookmarks at the Device Create... Bookmarks Remotely Create Profiles E-mail Function eSF Configuration Fax Function Firmware Updates Flash Drive Color Printing Flash Drive Firmware Updates Flash Drive Print Flash Drive Scan FTP Function Held Jobs Access Manage Shortcuts at the Device Manage Shortcuts ...
.... Users who are denied will have their print jobs output in the Scan to Fax and Scan to Email functions Controls access to the Change Language feature from Home Screen Color Dropout Configuration Menu Copy Color Printing Copy Function Create Bookmarks at the Device Create... Bookmarks Remotely Create Profiles E-mail Function eSF Configuration Fax Function Firmware Updates Flash Drive Color Printing Flash Drive Firmware Updates Flash Drive Print Flash Drive Scan FTP Function Held Jobs Access Manage Shortcuts at the Device Manage Shortcuts ...
Embedded Web Server Administrator's Guide
Page 30
...access to printer settings and functions by LDSS. This applies only when an Option Card with configuration options is assigned in the device. Controls ability to release (print) Held Faxes. Controls access to the Paper menu from the printer control panel. Controls the...Ports/Menu Remotely NPA Network Adapter Setting Changes Operator Panel Lock Option Card Configuration at the Device Option Card Configuration Remotely Paper Menu at the Device Paper Menu Remotely PictBridge Printing PJL Device Setting Changes Release Held Faxes Remote Certificate Management Remote Management ...
...access to printer settings and functions by LDSS. This applies only when an Option Card with configuration options is assigned in the device. Controls ability to release (print) Held Faxes. Controls access to the Paper menu from the printer control panel. Controls the...Ports/Menu Remotely NPA Network Adapter Setting Changes Operator Panel Lock Option Card Configuration at the Device Option Card Configuration Remotely Paper Menu at the Device Paper Menu Remotely PictBridge Printing PJL Device Setting Changes Release Held Faxes Remote Certificate Management Remote Management ...
Embedded Web Server Administrator's Guide
Page 40
...16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24 F Function Access Controls 6 list of 29 G ...Groups understanding 6 I internal accounts using 8 K Kerberos configuring 13 LDAP+GSSAPI and 13 setting date and time for 13 L LDAP using 9 LDAP+GSSAPI Kerberos and 13 using 11 lockout 16 login failure...
...16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24 F Function Access Controls 6 list of 29 G ...Groups understanding 6 I internal accounts using 8 K Kerberos configuring 13 LDAP+GSSAPI and 13 setting date and time for 13 L LDAP using 9 LDAP+GSSAPI Kerberos and 13 using 11 lockout 16 login failure...
Wireless Setup Guide
Page 6
...unsecured wireless network is a series of MAC addresses can be set for Security Method: - If the printer has a factory-installed internal print server, then the MAC address is not recommended. or - Preparing to distinguish it from other network devices. No security If your network...: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more information on configuring 802.1X security, see the User's Guide on the Software and Documentation CD. The MAC address appears in the provided spaces. • ...
...unsecured wireless network is a series of MAC addresses can be set for Security Method: - If the printer has a factory-installed internal print server, then the MAC address is not recommended. or - Preparing to distinguish it from other network devices. No security If your network...: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more information on configuring 802.1X security, see the User's Guide on the Software and Documentation CD. The MAC address appears in the provided spaces. • ...
Wireless Setup Guide
Page 9
b If you can print wirelessly. Note: Basic is configured, the software will instruct you to disconnect the temporary USB cable so you plan to connect the cables. 17 Follow the on the wireless network ...
b If you can print wirelessly. Note: Basic is configured, the software will instruct you to disconnect the temporary USB cable so you plan to connect the cables. 17 Follow the on the wireless network ...
Wireless Setup Guide
Page 12
...e Click Continue after viewing the Readme file. Note: The application is referred to the page where the wireless settings information is stored. Configure the printer for wireless access 1 Type the name of your network (SSID) in the appropriate field. 2 Select Infrastructure as your Network ...network. 4 Enter the security information necessary for the printer. c From the toolbar, click AirPort. 7 From the Network pop-up menu, select print server xxxxxx, where the x's are using Macintosh 12 d Click Continue again after viewing the license agreement, and then click Agree to a wireless ...
...e Click Continue after viewing the Readme file. Note: The application is referred to the page where the wireless settings information is stored. Configure the printer for wireless access 1 Type the name of your network (SSID) in the appropriate field. 2 Select Infrastructure as your Network ...network. 4 Enter the security information necessary for the printer. c From the toolbar, click AirPort. 7 From the Network pop-up menu, select print server xxxxxx, where the x's are using Macintosh 12 d Click Continue again after viewing the license agreement, and then click Agree to a wireless ...
Wireless Setup Guide
Page 14
.... • The printer driver is located away from other computers on the Software and Documentation CD. Printing a network setup page A network setup page lists the configuration settings of the wireless network. For most networks, the printer should be within the range of the ...wireless setup For more information on printing a network setup page, see the User's Guide on the wireless network. Remove any large metal objects between the access point and the printer. This information is very helpful when troubleshooting the network configuration of the wireless access point ...
.... • The printer driver is located away from other computers on the Software and Documentation CD. Printing a network setup page A network setup page lists the configuration settings of the wireless network. For most networks, the printer should be within the range of the ...wireless setup For more information on printing a network setup page, see the User's Guide on the wireless network. Remove any large metal objects between the access point and the printer. This information is very helpful when troubleshooting the network configuration of the wireless access point ...
Wireless Setup Guide
Page 21
...8226; Unplug the USB cable, and then plug it in again. • Try a different USB port on the computer. Printer does not print after wireless configuration completes These are possible solutions. Try one or more of the following : The printer is not powered on • Turn the printer on.... USB connection • Verify that the installation cable is attached to print. • If it is not ready, then turn the printer off and back on again. Wireless Setup Utility stops responding during wireless printer configuration If the Wireless Setup Utility stops responding during the wireless...
...8226; Unplug the USB cable, and then plug it in again. • Try a different USB port on the computer. Printer does not print after wireless configuration completes These are possible solutions. Try one or more of the following : The printer is not powered on • Turn the printer on.... USB connection • Verify that the installation cable is attached to print. • If it is not ready, then turn the printer off and back on again. Wireless Setup Utility stops responding during wireless printer configuration If the Wireless Setup Utility stops responding during the wireless...
Wireless Setup Guide
Page 22
...MAKE SURE THE PRINTER DRIVER IS INSTALLED ON THE PRINTER All computers that the USB port is not selected. • If you are configured correctly, and the wireless network is working properly. VERIFY THAT THE PRINTER IS WORKING • Insert the Software and Documentation CD, and ... the firewall disabled. DISABLE THIRD-PARTY FIREWALLS • If a non-Microsoft software firewall is installed on the computer, then try to print, then make sure you have completed the wireless installation. Check to see the documentation that the network is functioning correctly. VERIFY THAT THE...
...MAKE SURE THE PRINTER DRIVER IS INSTALLED ON THE PRINTER All computers that the USB port is not selected. • If you are configured correctly, and the wireless network is working properly. VERIFY THAT THE PRINTER IS WORKING • Insert the Software and Documentation CD, and ... the firewall disabled. DISABLE THIRD-PARTY FIREWALLS • If a non-Microsoft software firewall is installed on the computer, then try to print, then make sure you have completed the wireless installation. Check to see the documentation that the network is functioning correctly. VERIFY THAT THE...
Wireless Setup Guide
Page 25
... other devices. Networking glossary ad hoc mode ad hoc network AutoIP address BSS (Basic Service Set) channel DHCP (Dynamic Host Configuration Protocol) DHCP IP address DHCP server infrastructure mode internal wireless print server IP (Internet Protocol) address ipconfig MAC (Media Access Control) address MAC filtering network adapter/card network hub network name...
... other devices. Networking glossary ad hoc mode ad hoc network AutoIP address BSS (Basic Service Set) channel DHCP (Dynamic Host Configuration Protocol) DHCP IP address DHCP server infrastructure mode internal wireless print server IP (Internet Protocol) address ipconfig MAC (Media Access Control) address MAC filtering network adapter/card network hub network name...
User's Guide
Page 51
...and is not installed correctly. Printing a menu settings page Print a menu settings page to review the current menu settings and to verify the network connection. The menu settings page prints and the printer returns to verify that aids network printing configuration. Note: If you select ...and save it is attached to a network, print a network setup page to verify printer options are installed correctly...
...and is not installed correctly. Printing a menu settings page Print a menu settings page to review the current menu settings and to verify the network connection. The menu settings page prints and the printer returns to verify that aids network printing configuration. Note: If you select ...and save it is attached to a network, print a network setup page to verify printer options are installed correctly...
User's Guide
Page 52
...is "Connected." If you have a wireless printer model, the wireless network may be configured properly. Setting up the printer software Installing printer software A printer driver is software that aids network printing configuration. 1 Make sure the printer is on the screen. If Status is "Not ...screen. 5 Check the first section on the screen. Additional printer setup 52 Printing a network setup page If the printer is attached to a network, then print a network setup page to the Lexmark Web site at www.lexmark.com. 2 From the Drivers & Downloads menu, click Driver Finder. 3...
...is "Connected." If you have a wireless printer model, the wireless network may be configured properly. Setting up the printer software Installing printer software A printer driver is software that aids network printing configuration. 1 Make sure the printer is on the screen. If Status is "Not ...screen. 5 Check the first section on the screen. Additional printer setup 52 Printing a network setup page If the printer is attached to a network, then print a network setup page to the Lexmark Web site at www.lexmark.com. 2 From the Drivers & Downloads menu, click Driver Finder. 3...