Embedded Web Server Administrator's Guide
Page 3
......15 Setting login restrictions...16 Using a password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21...
......15 Setting login restrictions...16 Using a password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21...
Embedded Web Server Administrator's Guide
Page 5
...access to that area, sensitive documents that will be sent to or stored on the printer, and the information security policies of security features available in the Lexmark Embedded Web Server represents an evolution in keeping document outputs safe and confidential in conjunction... (used alone to provide low-level security, by Lexmark to enable administrators to do. Because anyone who you are able to use the printer. Authentication and Authorization Authentication is the method by the system. Before configuring printer security, it can be individually identified, passwords and ...
...access to that area, sensitive documents that will be sent to or stored on the printer, and the information security policies of security features available in the Lexmark Embedded Web Server represents an evolution in keeping document outputs safe and confidential in conjunction... (used alone to provide low-level security, by Lexmark to enable administrators to do. Because anyone who you are able to use the printer. Authentication and Authorization Authentication is the method by the system. Before configuring printer security, it can be individually identified, passwords and ...
Embedded Web Server Administrator's Guide
Page 6
... Access Controls" on the type of functions such as printing, copying, and faxing, administrators must be protected. Access Controls (also referred to in some multifunction printers, over 40 individual menus and functions can be able to combine these components in ways that can be controlled varies depending on page 29.
... Access Controls" on the type of functions such as printing, copying, and faxing, administrators must be protected. Access Controls (also referred to in some multifunction printers, over 40 individual menus and functions can be able to combine these components in ways that can be controlled varies depending on page 29.
Embedded Web Server Administrator's Guide
Page 9
...32 user-defined groups that apply to each unique LDAP configuration. • As with any form of authentication that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to identify each session by ...) is a standards-based, cross-platform, extensible protocol that it can store a maximum of an outage that relies on the printer control panel. Specifying settings for internal accounts Settings selected in the Internal Accounts Settings section will determine the information an administrator must submit...
...32 user-defined groups that apply to each unique LDAP configuration. • As with any form of authentication that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to identify each session by ...) is a standards-based, cross-platform, extensible protocol that it can store a maximum of an outage that relies on the printer control panel. Specifying settings for internal accounts Settings selected in the Internal Accounts Settings section will determine the information an administrator must submit...
Embedded Web Server Administrator's Guide
Page 11
... is typically used for access. Each configuration must have a unique name. • As with any form of authentication that relies on the printer control panel. LDAP+GSSAPI is the node in the LDAP server where user accounts reside. To validate an existing LDAP setup 1 From the ... of the LDAP server where the authentication will be able to access protected device functions in the event of an outage that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to test. Instead of simple LDAP authentication...
... is typically used for access. Each configuration must have a unique name. • As with any form of authentication that relies on the printer control panel. LDAP+GSSAPI is the node in the LDAP server where user accounts reside. To validate an existing LDAP setup 1 From the ... of the LDAP server where the authentication will be able to access protected device functions in the event of an outage that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to test. Instead of simple LDAP authentication...
Embedded Web Server Administrator's Guide
Page 13
...5. 3 Type the KDC (Key Distribution Center) address or hostname in the KDC Address field. 4 Type the number of an outage that prevents the printer from the selected device. • Click View File to view the Kerberos configuration file for the selected device. • Click Test Setup to verify... (between 1-88) used by the Kerberos server in the KDC Port field. 5 Type the realm (or domain) used by selecting Log out on the printer control panel. Uploading a Kerberos configuration file 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2...
...5. 3 Type the KDC (Key Distribution Center) address or hostname in the KDC Address field. 4 Type the number of an outage that prevents the printer from the selected device. • Click View File to view the Kerberos configuration file for the selected device. • Click Test Setup to verify... (between 1-88) used by the Kerberos server in the KDC Port field. 5 Type the realm (or domain) used by selecting Log out on the printer control panel. Uploading a Kerberos configuration file 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2...
Embedded Web Server Administrator's Guide
Page 14
... calendar, adjust the Custom Time Zone Setup settings as part of a security template. • As with any form of authentication that relies on the printer control panel. Instead of a user's password across a network in clear text. Notes: • The NTLM building block can be updated manually, or...authentication credentials. 7 Click Submit to save changes, or Reset Form to restore default values. Using security features in the Embedded Web Server 14 Printer clock settings can be used as needed. 5 To sync to an NTP server rather than manage date and time settings manually, click the ...
... calendar, adjust the Custom Time Zone Setup settings as part of a security template. • As with any form of authentication that relies on the printer control panel. Instead of a user's password across a network in clear text. Notes: • The NTLM building block can be updated manually, or...authentication credentials. 7 Click Submit to save changes, or Reset Form to restore default values. Using security features in the Embedded Web Server 14 Printer clock settings can be used as needed. 5 To sync to an NTP server rather than manage date and time settings manually, click the ...
Embedded Web Server Administrator's Guide
Page 16
...Control. For more information on configuring a specific type of building block, see the relevant section(s) under "Configuring building blocks" on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit ...Access Controls, select Access Controls. 3 For each session by a password or PIN. Embedded Web Server administrators should verify that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen, browse to restore default values. Users...
...Control. For more information on configuring a specific type of building block, see the relevant section(s) under "Configuring building blocks" on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit ...Access Controls, select Access Controls. 3 For each session by a password or PIN. Embedded Web Server administrators should verify that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen, browse to restore default values. Users...
Embedded Web Server Administrator's Guide
Page 17
..., select Add a Security Template. 4 In the Security Templates Name field, type a unique name containing up to any function controlled by selecting Log out on the printer control panel. • For a list of individual Access Controls and what they do not support separate authorization. 7 To use a descriptive name, such as Passwords and...
..., select Add a Security Template. 4 In the Security Templates Name field, type a unique name containing up to any function controlled by selecting Log out on the printer control panel. • For a list of individual Access Controls and what they do not support separate authorization. 7 To use a descriptive name, such as Passwords and...
Embedded Web Server Administrator's Guide
Page 18
... Setups. 2 Under Edit Building Blocks, select either Password or PIN, and configure as needed . Scenario: Standalone or small office If your printer is not in use an authentication server to grant users access to devices, Internal Accounts can be created and stored within the Embedded Web Server... can only delete a security template if it , a password or PIN can access any functions protected by that code. Scenarios Scenario: Printer in a public place If your printer is not connected to a network, or you do not use ; Step Two: Assign a password or PIN to each function you wish...
... Setups. 2 Under Edit Building Blocks, select either Password or PIN, and configure as needed . Scenario: Standalone or small office If your printer is not in use an authentication server to grant users access to devices, Internal Accounts can be created and stored within the Embedded Web Server... can only delete a security template if it , a password or PIN can access any functions protected by that code. Scenarios Scenario: Printer in a public place If your printer is not connected to a network, or you do not use ; Step Two: Assign a password or PIN to each function you wish...
Embedded Web Server Administrator's Guide
Page 19
... Security Templates, select Add a Security Template. 4 In the Security Templates Name field, type a unique name containing up to the printer Using security features in the Embedded Web Server 19 This list will be populated with the authentication building blocks which have been configured on...appropriate credentials in the security template. The IP address or hostname of that function. 4 Click Submit to save changes, or Reset Form to the printer as seamless as "Administrator _ Only", or "Common _ Functions _ Template." 5 From the Authentication list, select a method for passwords) •...
... Security Templates, select Add a Security Template. 4 In the Security Templates Name field, type a unique name containing up to the printer Using security features in the Embedded Web Server 19 This list will be populated with the authentication building blocks which have been configured on...appropriate credentials in the security template. The IP address or hostname of that function. 4 Click Submit to save changes, or Reset Form to the printer as seamless as "Administrator _ Only", or "Common _ Functions _ Template." 5 From the Authentication list, select a method for passwords) •...
Embedded Web Server Administrator's Guide
Page 20
... is 389) • A list of up to three object classes stored on the LDAP server, which will be used to authorize user for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to your LDAP+GSSAPI setup. 7 To use groups, click Modify Groups, and...
... is 389) • A list of up to three object classes stored on the LDAP server, which will be used to authorize user for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to your LDAP+GSSAPI setup. 7 To use groups, click Modify Groups, and...
Embedded Web Server Administrator's Guide
Page 21
... maximum). • Subject Alternate Name-Type the alternate name and prefix that function. 4 Click Submit to save changes, or Reset Form to and from your printer, including authentication and group information, as well as document outputs. Creating a new certificate 1 From the Embedded Web Server Home screen, browse to use the IPv4...
... maximum). • Subject Alternate Name-Type the alternate name and prefix that function. 4 Click Submit to save changes, or Reset Form to and from your printer, including authentication and group information, as well as document outputs. Creating a new certificate 1 From the Embedded Web Server Home screen, browse to use the IPv4...
Embedded Web Server Administrator's Guide
Page 24
... Click Submit to finalize changes. Warning-Potential Damage: Enabling or disabling disk encryption will be returned to the Enable/Disable screen. Once the printer is fully powered up a schedule for disk wiping, select Scheduled Disk Wiping. 4 Use the Time and Day(s) lists to designate when... scheduled disk wiping 1 From the Embedded Web Server Home screen, browse to scroll through the Embedded Web Server). 1 Turn off the printer during the encryption process. • Select No to cancel and return to proceed with disk wiping and encryption. Encryption takes approximately two ...
... Click Submit to finalize changes. Warning-Potential Damage: Enabling or disabling disk encryption will be returned to the Enable/Disable screen. Once the printer is fully powered up a schedule for disk wiping, select Scheduled Disk Wiping. 4 Use the Time and Day(s) lists to designate when... scheduled disk wiping 1 From the Embedded Web Server Home screen, browse to scroll through the Embedded Web Server). 1 Turn off the printer during the encryption process. • Select No to cancel and return to proceed with disk wiping and encryption. Encryption takes approximately two ...
Embedded Web Server Administrator's Guide
Page 25
... the Setup E-mail Server link to configure SMTP settings. 10 Click Submit to save changes, or Reset Form to restore default values. if level "4 - The printer will power-on a device including, among others, user authorization failures, successful administrator authentication, or Kerberos files being uploaded to a device. Using security features in sorting...
... the Setup E-mail Server link to configure SMTP settings. 10 Click Submit to save changes, or Reset Form to restore default values. if level "4 - The printer will power-on a device including, among others, user authorization failures, successful administrator authentication, or Kerberos files being uploaded to a device. Using security features in sorting...
Embedded Web Server Administrator's Guide
Page 26
...number of seconds (5-30) the device will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will use . The default is "No authentication required." 9 From the Device-Initiated E-mail list, select None for no authentication,...SMTP server before changing 802.1x authentication settings. For more information on configuring digital certificates, see "Managing certificates" on the printer before timing out. If only one certificate has been installed, default will be sent using digital certificates to establish a ...
...number of seconds (5-30) the device will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will use . The default is "No authentication required." 9 From the Device-Initiated E-mail list, select None for no authentication,...SMTP server before changing 802.1x authentication settings. For more information on configuring digital certificates, see "Managing certificates" on the printer before timing out. If only one certificate has been installed, default will be sent using digital certificates to establish a ...
Embedded Web Server Administrator's Guide
Page 27
...changes, or Reset Form to monitor network-attached devices for SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore default values. The Embedded Web server allows administrators to reset. SNMP ... Set SNMP Traps. 3 From the IP Address list, click one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. Using security features in network ...
...changes, or Reset Form to monitor network-attached devices for SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore default values. The Embedded Web server allows administrators to reset. SNMP ... Set SNMP Traps. 3 From the IP Address list, click one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. Using security features in network ...
Embedded Web Server Administrator's Guide
Page 29
...their copy jobs output in the Scan to Fax and Scan to Email functions Controls access to use the Color Dropout feature for your printer. Function Access Control Address Book Change Language from Home Screen Color Dropout Configuration Menu Copy Color Printing Copy Function Create Bookmarks at the... Manage Shortcuts section of the Settings menu on some Access Controls (referred to on the printer control panel Protects access to the Manage Shortcuts item of the Settings menu from the printer control panel Controls the ability to use the Copy function Controls the ability to create new...
...their copy jobs output in the Scan to Fax and Scan to Email functions Controls access to use the Color Dropout feature for your printer. Function Access Control Address Book Change Language from Home Screen Color Dropout Configuration Menu Copy Color Printing Copy Function Create Bookmarks at the... Manage Shortcuts section of the Settings menu on some Access Controls (referred to on the printer control panel Protects access to the Manage Shortcuts item of the Settings menu from the printer control panel Controls the ability to use the Copy function Controls the ability to create new...
Embedded Web Server Administrator's Guide
Page 30
... menu from the Embedded Web Server The Solution 1 through a secured communication channel (such as MarkVisionTM Professional. Controls the ability to printer settings and functions by remote management tools such as that provided by incoming print jobs are ignored. Controls access to release (print...to manage certificates using remote management tools. Controls access to the Option Card Configuration section of the Settings menu from the printer control panel. This applies only when an Option Card with configuration options is assigned in the device. Protects access to the...
... menu from the Embedded Web Server The Solution 1 through a secured communication channel (such as MarkVisionTM Professional. Controls the ability to printer settings and functions by remote management tools such as that provided by incoming print jobs are ignored. Controls access to release (print...to manage certificates using remote management tools. Controls access to the Option Card Configuration section of the Settings menu from the printer control panel. This applies only when an Option Card with configuration options is assigned in the device. Protects access to the...
Embedded Web Server Administrator's Guide
Page 31
Function Access Control Supplies Menu at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF applications Controls the ability to import and export printer settings files (UCF files) from the Embedded Web Server Appendix 31
Function Access Control Supplies Menu at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF applications Controls the ability to import and export printer settings files (UCF files) from the Embedded Web Server Appendix 31