Embedded Web Server Administrator's Guide
Page 3
......15 Setting login restrictions...16 Using a password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21...
......15 Setting login restrictions...16 Using a password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21...
Embedded Web Server Administrator's Guide
Page 5
... who enters the correct password or PIN receives the same privileges and users can use the printer. Security templates are available to a user who has been authenticated by Lexmark to enable administrators to build secure, flexible profiles that identifies who knows the correct code. This... type of security might include the location of the printer and whether non-authorized persons have access to that ...
... who enters the correct password or PIN receives the same privileges and users can use the printer. Security templates are available to a user who has been authenticated by Lexmark to enable administrators to build secure, flexible profiles that identifies who knows the correct code. This... type of security might include the location of the printer and whether non-authorized persons have access to that ...
Embedded Web Server Administrator's Guide
Page 6
... security created: Building block Type of users needing access to be used to manage access to specific menus and functions or to in some multifunction printers, over 40 individual menus and functions can be controlled varies depending on page 29. Individually, building blocks, groups, and access controls may not meet the...
... security created: Building block Type of users needing access to be used to manage access to specific menus and functions or to in some multifunction printers, over 40 individual menus and functions can be controlled varies depending on page 29. Individually, building blocks, groups, and access controls may not meet the...
Embedded Web Server Administrator's Guide
Page 9
...Address or the Host Name of five unique LDAP configurations. Note: A Search Base consists of an outage that runs directly on the printer control panel. Using LDAP Lightweight Directory Access Protocol (LDAP) is used to securely end each session by the Embedded Web Server to...can interact with many different kinds of the TCP/IP layer, and is a standards-based, cross-platform, extensible protocol that prevents the printer from communicating with the LDAP server. Multiple search bases may be used by selecting Log out on top of databases without special integration, making...
...Address or the Host Name of five unique LDAP configurations. Note: A Search Base consists of an outage that runs directly on the printer control panel. Using LDAP Lightweight Directory Access Protocol (LDAP) is used to securely end each session by the Embedded Web Server to...can interact with many different kinds of the TCP/IP layer, and is a standards-based, cross-platform, extensible protocol that prevents the printer from communicating with the LDAP server. Multiple search bases may be used by selecting Log out on top of databases without special integration, making...
Embedded Web Server Administrator's Guide
Page 11
...-This name will be able to access protected device functions in the Embedded Web Server 11 Instead of an outage that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to obtain a Kerberos "ticket." Using... From the Embedded Web Server Home screen, browse to identify each session by commas. Notes: • LDAP+GSSAPI requires that relies on the printer control panel. Multiple search bases may be used to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select ...
...-This name will be able to access protected device functions in the Embedded Web Server 11 Instead of an outage that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to obtain a Kerberos "ticket." Using... From the Embedded Web Server Home screen, browse to identify each session by commas. Notes: • LDAP+GSSAPI requires that relies on the printer control panel. Multiple search bases may be used to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select ...
Embedded Web Server Administrator's Guide
Page 13
..., Kerberos 5 is most often used in the configuration file, then the first realm specified will be used as a krb5.conf file on the printer control panel. Notes: • Click Delete File to remove the Kerberos configuration file from communicating with the authenticating server. • To help prevent...the krb5.conf file. 4 Click Submit to upload the krb5.conf file to the selected device, or Reset Form to verify that prevents the printer from the selected device. • Click View File to view the Kerberos configuration file for the selected device. • Click Test Setup ...
..., Kerberos 5 is most often used in the configuration file, then the first realm specified will be used as a krb5.conf file on the printer control panel. Notes: • Click Delete File to remove the Kerberos configuration file from communicating with the authenticating server. • To help prevent...the krb5.conf file. 4 Click Submit to upload the krb5.conf file to the selected device, or Reset Form to verify that prevents the printer from the selected device. • Click View File to view the Kerberos configuration file for the selected device. • Click Test Setup ...
Embedded Web Server Administrator's Guide
Page 14
...box, and then type the IP address or hostname of an outage that key requests bear a recent timestamp (usually within 300 seconds), the printer clock must be updated manually, or set to use the "Install auth keys" link to browse to the file containing the NTP authentication credentials.... 7 Click Submit to save changes, or Reset Form to restore default values. Printer clock settings can be in sync or closely aligned with a trusted clock-typically the same one NTLM configuration on a supported device because each ...
...box, and then type the IP address or hostname of an outage that key requests bear a recent timestamp (usually within 300 seconds), the printer clock must be updated manually, or set to use the "Install auth keys" link to browse to the file containing the NTP authentication credentials.... 7 Click Submit to save changes, or Reset Form to restore default values. Printer clock settings can be in sync or closely aligned with a trusted clock-typically the same one NTLM configuration on a supported device because each ...
Embedded Web Server Administrator's Guide
Page 16
...access Step 1: Create a building block 1 From the Embedded Web Server Home screen, browse to use any function controlled by selecting Log out on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit Access Controls, ...a user may be assigned to each function you want to protect, select a password or PIN from the drop-down list for that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen, browse to cancel all changes. For more...
...access Step 1: Create a building block 1 From the Embedded Web Server Home screen, browse to use any function controlled by selecting Log out on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit Access Controls, ...a user may be assigned to each function you want to protect, select a password or PIN from the drop-down list for that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen, browse to cancel all changes. For more...
Embedded Web Server Administrator's Guide
Page 17
... name of Access Controls" on the device. Using security features in order to gain access to any function controlled by selecting Log out on the printer control panel. • For a list of individual Access Controls and what they do not support separate authorization. 7 To use authorization, click Add authorization, and then...
... name of Access Controls" on the device. Using security features in order to gain access to any function controlled by selecting Log out on the printer control panel. • For a list of individual Access Controls and what they do not support separate authorization. 7 To use authorization, click Add authorization, and then...
Embedded Web Server Administrator's Guide
Page 18
... to protect, select a password or PIN from the drop-down list next to the name of that code. Scenario: Standalone or small office If your printer is located in a public space such as a lobby, and you wish to devices, Internal Accounts can be created and stored within the Embedded Web Server...
... to protect, select a password or PIN from the drop-down list next to the name of that code. Scenario: Standalone or small office If your printer is located in a public space such as a lobby, and you wish to devices, Internal Accounts can be created and stored within the Embedded Web Server...
Embedded Web Server Administrator's Guide
Page 19
... screen, browse to Settings ª Security ª Edit Security Setups. 2 Select Access Control. 3 For each function you will need to the printer Using security features in the Embedded Web Server 19 The IP address or hostname of the Realm (or domain) where the KDC is located •...This list will be populated with Active Directory, you want to protect, select a security template from the existing network, making access to the printer as seamless as PINs and Passwords-do not support separate authorization. 7 To use the LDAP+GSSAPI capabilities of the Embedded Web Server to cancel ...
... screen, browse to Settings ª Security ª Edit Security Setups. 2 Select Access Control. 3 For each function you will need to the printer Using security features in the Embedded Web Server 19 The IP address or hostname of the Realm (or domain) where the KDC is located •...This list will be populated with Active Directory, you want to protect, select a security template from the existing network, making access to the printer as seamless as PINs and Passwords-do not support separate authorization. 7 To use the LDAP+GSSAPI capabilities of the Embedded Web Server to cancel ...
Embedded Web Server Administrator's Guide
Page 20
... port (the default is 389) • A list of up to three object classes stored on the LDAP server, which will be searched for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks...
... port (the default is 389) • A list of up to three object classes stored on the LDAP server, which will be searched for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks...
Embedded Web Server Administrator's Guide
Page 21
... that function. 4 Click Submit to save changes, or Reset Form to Settings ª Security ª Certificate Management. 2 Select Device Certificate Management. 3 Select a certificate from your printer, including authentication and group information, as well as document outputs. Creating a new certificate 1 From the Embedded Web Server Home screen, browse to Settings ª Security...
... that function. 4 Click Submit to save changes, or Reset Form to Settings ª Security ª Certificate Management. 2 Select Device Certificate Management. 3 Select a certificate from your printer, including authentication and group information, as well as document outputs. Creating a new certificate 1 From the Embedded Web Server Home screen, browse to Settings ª Security...
Embedded Web Server Administrator's Guide
Page 24
...Choose an existing Start value (the scheduled time and day will indicate the progress of the touch screen. Using security features in the event your printer-or its hard disk-is fully powered up a schedule for disk wiping, select Scheduled Disk Wiping. 4 Use the Time and Day(s) lists to...changes. • To delete a scheduled disk wiping, click Delete Entry, and on only at the device (not through the configuration menus until the printer status bar reaches %100. Encryption takes approximately two minutes, and a status bar will appear in the lower right corner of the encryption task. ...
...Choose an existing Start value (the scheduled time and day will indicate the progress of the touch screen. Using security features in the event your printer-or its hard disk-is fully powered up a schedule for disk wiping, select Scheduled Disk Wiping. 4 Use the Time and Day(s) lists to...changes. • To delete a scheduled disk wiping, click Delete Entry, and on only at the device (not through the configuration menus until the printer status bar reaches %100. Encryption takes approximately two minutes, and a status bar will appear in the lower right corner of the encryption task. ...
Embedded Web Server Administrator's Guide
Page 25
... will be tagged with the same facility code to aid in sorting and filtering by commas) in the Embedded Web Server 25 if level "4 - The printer will power-on reset, and then return to log list, select the priority level cutoff (0-7) for logging messages and events. 0 is the highest severity, and...
... will be tagged with the same facility code to aid in sorting and filtering by commas) in the Embedded Web Server 25 if level "4 - The printer will power-on reset, and then return to log list, select the priority level cutoff (0-7) for logging messages and events. 0 is the highest severity, and...
Embedded Web Server Administrator's Guide
Page 26
... Negotiate, or Required to specify whether E-mail will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will recognize by clicking the check box next to enable 802.1x authentication. • Type the login name and password the...Timeout, type the number of seconds (5-30) the device will wait for your SMTP server requires user credentials, select an authentication method from the printer (in the Embedded Web Server 26 3 Type the Primary SMTP Gateway Port number of the current syslog, click Export Log. • To ...
... Negotiate, or Required to specify whether E-mail will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will recognize by clicking the check box next to enable 802.1x authentication. • Type the login name and password the...Timeout, type the number of seconds (5-30) the device will wait for your SMTP server requires user credentials, select an authentication method from the printer (in the Embedded Web Server 26 3 Type the Primary SMTP Gateway Port number of the current syslog, click Export Log. • To ...
Embedded Web Server Administrator's Guide
Page 27
... 2 Click Set SNMP Traps. 3 From the IP Address list, click one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. SNMP Version 1, 2c 1 From the ... SNMP Community identifier (the default community name is used for SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore default values. Using security features in the Embedded Web Server 27 4 ...
... 2 Click Set SNMP Traps. 3 From the IP Address list, click one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. SNMP Version 1, 2c 1 From the ... SNMP Community identifier (the default community name is used for SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore default values. Using security features in the Embedded Web Server 27 4 ...
Embedded Web Server Administrator's Guide
Page 29
... the Held Jobs function Protects access to the Manage Shortcuts section of the Settings menu on some Access Controls (referred to on the printer control panel Protects access to the Manage Shortcuts item of any installed eSF applications Controls access to the Scan to Fax function Controls the... be available for scan and copy functions Protects access to the Configuration Menu Controls the ability to use the Color Dropout feature for your printer. Users who are denied will have their print jobs output in black and white Controls the ability to perform color copy functions. Users ...
... the Held Jobs function Protects access to the Manage Shortcuts section of the Settings menu on some Access Controls (referred to on the printer control panel Protects access to the Manage Shortcuts item of any installed eSF applications Controls access to the Scan to Fax function Controls the... be available for scan and copy functions Protects access to the Configuration Menu Controls the ability to use the Color Dropout feature for your printer. Users who are denied will have their print jobs output in black and white Controls the ability to perform color copy functions. Users ...
Embedded Web Server Administrator's Guide
Page 30
... Service Engineer menu from the Embedded Web Server Protects access to the General and Print Settings sections of the Settings menu from the printer control panel Protects access to the General and Print Settings items of the Settings menu from the Embedded Web Server When disabled, all... Engineer Menus at the Device Service Engineer Menus Remotely Settings Menu at the Device Settings Menu Remotely Solution 1-10 What it is no printer configuration setting can be altered except through Solution 10 Access Controls can be assigned to installed eSF applications and/or profiles created by a...
... Service Engineer menu from the Embedded Web Server Protects access to the General and Print Settings sections of the Settings menu from the printer control panel Protects access to the General and Print Settings items of the Settings menu from the Embedded Web Server When disabled, all... Engineer Menus at the Device Service Engineer Menus Remotely Settings Menu at the Device Settings Menu Remotely Solution 1-10 What it is no printer configuration setting can be altered except through Solution 10 Access Controls can be assigned to installed eSF applications and/or profiles created by a...
Embedded Web Server Administrator's Guide
Page 31
Function Access Control Supplies Menu at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF applications Controls the ability to import and export printer settings files (UCF files) from the Embedded Web Server Appendix 31
Function Access Control Supplies Menu at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF applications Controls the ability to import and export printer settings files (UCF files) from the Embedded Web Server Appendix 31