Embedded Web Server Administrator's Guide
Page 3
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
Embedded Web Server Administrator's Guide
Page 6
...as "Function Access Controls"), are used to manage access to specific menus and functions or to disable them entirely. Access Controls By default, all users the functions they are combined determines the type of security created: Building block Type of functions such as printing, ...+GSSAPI building blocks. The number of functions that give all device menus, settings, and functions come with Groups Authentication and authorization Password Authorization only PIN Authorization only Each device can support up to 32 groups to be protected. Individually, building blocks, groups, and...
...as "Function Access Controls"), are used to manage access to specific menus and functions or to disable them entirely. Access Controls By default, all users the functions they are combined determines the type of security created: Building block Type of functions such as printing, ...+GSSAPI building blocks. The number of functions that give all device menus, settings, and functions come with Groups Authentication and authorization Password Authorization only PIN Authorization only Each device can support up to 32 groups to be protected. Individually, building blocks, groups, and...
Embedded Web Server Administrator's Guide
Page 7
..., browse to retrieve a held print, copy, or fax job. Configuring building blocks Creating a password The Embedded Web Server can store a combined total of the PIN configuration in the Setup Name box. Administrator-level passwords override normal passwords. Note: The default PIN length is protected by requiring a user to type a correct PIN to Settings ª...
..., browse to retrieve a held print, copy, or fax job. Configuring building blocks Creating a password The Embedded Web Server can store a combined total of the PIN configuration in the Setup Name box. Administrator-level passwords override normal passwords. Note: The default PIN length is protected by requiring a user to type a correct PIN to Settings ª...
Embedded Web Server Administrator's Guide
Page 9
...Notes: • Supported devices can store a maximum of databases without special integration, making it more flexible than other authentication methods. The default LDAP port is 389. • Use SSL/TLS-From the drop-down menu select None, SSL/TLS (Secure Sockets Layer/Transport Layer... Security), or TLS. • Userid Attribute-Type either User ID or User ID and Password to communicate with many different kinds of five unique LDAP configurations. Specifying settings for internal accounts Settings selected in the LDAP server where user...
...Notes: • Supported devices can store a maximum of databases without special integration, making it more flexible than other authentication methods. The default LDAP port is 389. • Use SSL/TLS-From the drop-down menu select None, SSL/TLS (Secure Sockets Layer/Transport Layer... Security), or TLS. • Userid Attribute-Type either User ID or User ID and Password to communicate with many different kinds of five unique LDAP configurations. Specifying settings for internal accounts Settings selected in the LDAP server where user...
Embedded Web Server Administrator's Guide
Page 14
...Zone Setup. 3 If Daylight Saving Time (DST) is Microsoft's solution for enabling authentication without requiring the transmission of comparing the user's actual password, the NTLM server and the client generate and compare three encrypted strings based on the printer control panel. Printer clock settings can be used ...keys" link to browse to the file containing the NTP authentication credentials. 7 Click Submit to save changes, or Reset Form to restore default values. Notes: • The NTLM building block can be deleted or unregistered if it is being used by selecting Log out on the ...
...Zone Setup. 3 If Daylight Saving Time (DST) is Microsoft's solution for enabling authentication without requiring the transmission of comparing the user's actual password, the NTLM server and the client generate and compare three encrypted strings based on the printer control panel. Printer clock settings can be used ...keys" link to browse to the file containing the NTP authentication credentials. 7 Click Submit to save changes, or Reset Form to restore default values. Notes: • The NTLM building block can be deleted or unregistered if it is being used by selecting Log out on the ...
Embedded Web Server Administrator's Guide
Page 15
A backup password can be able to register your device with an NT domain. 2 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 3 Under Edit Building Blocks, select NTLM. 4 Type the default user domain in the Embedded Web Server 15 Specifying the default user domain for the NTLM...
A backup password can be able to register your device with an NT domain. 2 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 3 Under Edit Building Blocks, select NTLM. 4 Type the default user domain in the Embedded Web Server 15 Specifying the default user domain for the NTLM...
Embedded Web Server Administrator's Guide
Page 16
...PIN to control function access Each Access Control (or Function Access Control), can be set to require No Security (the default), or to protect, select a password or PIN from the drop-down list for that function. For more information on configuring a specific type of that printer... off. 4 Click Submit to save changes, or Reset Form to specific device functions using a password or PIN. Using security features in which individual users are encouraged to restore default values. For simple authorization-level security (in the Embedded Web Server 16 Embedded Web Server administrators ...
...PIN to control function access Each Access Control (or Function Access Control), can be set to require No Security (the default), or to protect, select a password or PIN from the drop-down list for that function. For more information on configuring a specific type of that printer... off. 4 Click Submit to save changes, or Reset Form to specific device functions using a password or PIN. Using security features in which individual users are encouraged to restore default values. For simple authorization-level security (in the Embedded Web Server 16 Embedded Web Server administrators ...
Embedded Web Server Administrator's Guide
Page 26
...the check box next to the authentication server, you want to create port-based connections. If only one certificate has been installed, default will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will be sent using a ...1x. 2 Under 802.1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will use . Note: Server certificate validation is required. 11 If the device must provide credentials in to the authentication server. •...
...the check box next to the authentication server, you want to create port-based connections. If only one certificate has been installed, default will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will be sent using a ...1x. 2 Under 802.1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will use . Note: Server certificate validation is required. 11 If the device must provide credentials in to the authentication server. •...
Embedded Web Server Administrator's Guide
Page 27
... device monitoring, type an SNMPPv3 Read/Write User name and Password in the appropriate fields. 4 To allow SNMP variables to be set, select the Allow SNMP Set check box. 4 Type a name to restore default values. The Embedded Web server allows administrators to configure settings for...applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. Using security features in the appropriate fields. 5 From the SNMPv3 Minimum Authentication Level list, select No Authentication, No Privacy, Authentication, ...
... device monitoring, type an SNMPPv3 Read/Write User name and Password in the appropriate fields. 4 To allow SNMP variables to be set, select the Allow SNMP Set check box. 4 Type a name to restore default values. The Embedded Web server allows administrators to configure settings for...applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. Using security features in the appropriate fields. 5 From the SNMPv3 Minimum Authentication Level list, select No Authentication, No Privacy, Authentication, ...
Embedded Web Server Administrator's Guide
Page 28
...with caution), Access controls = "No security" (to remove security only from function access controls), or Reset factory security defaults (to return all security settings to default values). 3 Click Submit to save changes, or Reset Form to clear all fields. Enabling the security reset jumper The...call will not be required to replace the device RIP card (motherboard). Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard. Using security features in the Embedded Web Server 28 Administrators can ...
...with caution), Access controls = "No security" (to remove security only from function access controls), or Reset factory security defaults (to return all security settings to default values). 3 Click Submit to save changes, or Reset Form to clear all fields. Enabling the security reset jumper The...call will not be required to replace the device RIP card (motherboard). Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard. Using security features in the Embedded Web Server 28 Administrators can ...
Embedded Web Server Administrator's Guide
Page 40
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
User's Guide
Page 49
... security information. Some ad hoc networks will need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up the printer on a wireless network Note: Do not connect the installation or... - WEP key If your network uses more information on configuring 802.1X security, see the Networking Guide on the network by selecting the Default WEP Transmit Key. WPA or WPA2 passphrase WPA includes encryption as the network name. • Wireless Mode (or Network Mode)-The mode ...
... security information. Some ad hoc networks will need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up the printer on a wireless network Note: Do not connect the installation or... - WEP key If your network uses more information on configuring 802.1X security, see the Networking Guide on the network by selecting the Default WEP Transmit Key. WPA or WPA2 passphrase WPA includes encryption as the network name. • Wireless Mode (or Network Mode)-The mode ...
User's Guide
Page 56
8 Type the user password, and then click OK. All the necessary software is installed on the computer. 9 Click Close when installation is complete. In Mac OS X version 10.4 and ... 1 From the Go menu, choose Applications. 2 Double-click Utilities. 3 Double-click Print Center or Printer Setup Utility. 4 From the Printer List, click Add. 5 Choose the Default Browser tab. 6 Click More Printers. 7 From the first pop-up menu, choose AppleTalk. 8 From the second pop-up in the list, you may need to...
8 Type the user password, and then click OK. All the necessary software is installed on the computer. 9 Click Close when installation is complete. In Mac OS X version 10.4 and ... 1 From the Go menu, choose Applications. 2 Double-click Utilities. 3 Double-click Print Center or Printer Setup Utility. 4 From the Printer List, click Add. 5 Choose the Default Browser tab. 6 Click More Printers. 7 From the first pop-up menu, choose AppleTalk. 8 From the second pop-up in the list, you may need to...
User's Guide
Page 168
... User-Initiated E-mail None Use Device SMTP Credentials Use Session User ID and Password Use Session E-mail address and Password Prompt User Device Userid Device password Kerberos 5 Realm NTLM Domain Description Specifies SMTP server port information Note: 25 is the factory default setting. Specifies server information. Notes: • The message box has a limitation of...
... User-Initiated E-mail None Use Device SMTP Credentials Use Session User ID and Password Use Session E-mail address and Password Prompt User Device Userid Device password Kerberos 5 Realm NTLM Domain Description Specifies SMTP server port information Note: 25 is the factory default setting. Specifies server information. Notes: • The message box has a limitation of...
User's Guide
Page 206
...Setup Send me a copy Never appears On by default Off by default Always On E-mail Server Setup Max e-mail size 0-65535 KB E-mail Server Setup Size Error Message E-mail Server Setup Limit destinations E-mail Server Setup Web Link Setup Server Login Password Path Base file name Web Link Format PDF ...(.pdf) Secure PDF TIFF (.tif) JPEG (.jpg) XPS (.xps) PDF Version 1.2-1.6 Content Text/Photo Photograph Text Description Sends a copy of the e-mail back to e-mail Note: 1.5 is the factory default setting.
...Setup Send me a copy Never appears On by default Off by default Always On E-mail Server Setup Max e-mail size 0-65535 KB E-mail Server Setup Size Error Message E-mail Server Setup Limit destinations E-mail Server Setup Web Link Setup Server Login Password Path Base file name Web Link Format PDF ...(.pdf) Secure PDF TIFF (.tif) JPEG (.jpg) XPS (.xps) PDF Version 1.2-1.6 Content Text/Photo Photograph Text Description Sends a copy of the e-mail back to e-mail Note: 1.5 is the factory default setting.
User's Guide
Page 225
...8226; The font source abbreviation is the factory default setting. • A formatted flash memory option card or printer hard disk must be installed in that option. • Flash and Disk options must not be Read/Write, Write, or password protected. • Download appears only if applicable...D for this menu item to be available. • The flash memory option or printer hard disk cannot be Read/Write, Write, or password protected. • Job Buffer Size must be properly formatted and cannot be set of alphabetic and numeric characters, punctuation, and special symbols. ...
...8226; The font source abbreviation is the factory default setting. • A formatted flash memory option card or printer hard disk must be installed in that option. • Flash and Disk options must not be Read/Write, Write, or password protected. • Download appears only if applicable...D for this menu item to be available. • The flash memory option or printer hard disk cannot be Read/Write, Write, or password protected. • Job Buffer Size must be properly formatted and cannot be set of alphabetic and numeric characters, punctuation, and special symbols. ...