Embedded Web Server Administrator's Guide
Page 3
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
Embedded Web Server Administrator's Guide
Page 6
...Password Authorization only PIN Authorization only Each device can be set of functions such as printing, copying, and faxing, administrators must be able to combine these components in ways that can be protected. Security Templates Some scenarios call for each access control. How they need to be used in some multifunction... Authentication only LDAP + GSSAPI with either the Internal accounts or LDAP/LDAP+GSSAPI building blocks. Access Controls By default, all users the functions they are used to manage access to specific menus and functions or to common device ...
...Password Authorization only PIN Authorization only Each device can be set of functions such as printing, copying, and faxing, administrators must be able to combine these components in ways that can be protected. Security Templates Some scenarios call for each access control. How they need to be used in some multifunction... Authentication only LDAP + GSSAPI with either the Internal accounts or LDAP/LDAP+GSSAPI building blocks. Access Controls By default, all users the functions they are used to manage access to specific menus and functions or to common device ...
Embedded Web Server Administrator's Guide
Page 7
... Web Server can store a combined total of 1-128 UTF-8 characters (example: "Copy Lockout Password"). 5 Type a password in the appropriate box, and then re-enter the password to confirm it . Note: The default PIN length is protected by a normal password, any administrator-level password will be used as administrator-level. PINs can also be used to control...
... Web Server can store a combined total of 1-128 UTF-8 characters (example: "Copy Lockout Password"). 5 Type a password in the appropriate box, and then re-enter the password to confirm it . Note: The default PIN length is protected by a normal password, any administrator-level password will be used as administrator-level. PINs can also be used to control...
Embedded Web Server Administrator's Guide
Page 9
The default LDAP port is 389. • Use SSL/TLS-From the drop-down menu select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security), or TLS. • Userid Attribute-Type either User ID or User ID and Password to specify the information a user must have a unique name. • Administrators can create up...
The default LDAP port is 389. • Use SSL/TLS-From the drop-down menu select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security), or TLS. • Userid Attribute-Type either User ID or User ID and Password to specify the information a user must have a unique name. • Administrators can create up...
Embedded Web Server Administrator's Guide
Page 14
...settings under Custom Time Zone Setup. 3 If Daylight Saving Time (DST) is Microsoft's solution for enabling authentication without requiring the transmission of a user's password across a network in clear text. Using NTLM authentication NTLM (Windows NT LAN Manager) is observed in your area, click the Automatically Observe DST check ...can be used in YYYY-MM-DD HH:MM format, and then choose from the Time Zone list will not be registered to restore default values. Notes: • The NTLM building block can only be able to access protected device functions in the event of an outage that...
...settings under Custom Time Zone Setup. 3 If Daylight Saving Time (DST) is Microsoft's solution for enabling authentication without requiring the transmission of a user's password across a network in clear text. Using NTLM authentication NTLM (Windows NT LAN Manager) is observed in your area, click the Automatically Observe DST check ...can be used in YYYY-MM-DD HH:MM format, and then choose from the Time Zone list will not be registered to restore default values. Notes: • The NTLM building block can only be able to access protected device functions in the event of an outage that...
Embedded Web Server Administrator's Guide
Page 15
... features in the Default User Domain field, and then click Register Domain to access additional configuration settings. 5 On the Settings screen under Register Domain, provide the credentials appropriate to your organization's policies before deploying any security method that might compromise those policies. Securing access Setting a backup password The Backup Password allows Embedded Web...
... features in the Default User Domain field, and then click Register Domain to access additional configuration settings. 5 On the Settings screen under Register Domain, provide the credentials appropriate to your organization's policies before deploying any security method that might compromise those policies. Securing access Setting a backup password The Backup Password allows Embedded Web...
Embedded Web Server Administrator's Guide
Page 16
... Settings ª Security ª Edit Security Setups. 2 Under Edit Access Controls, select Access Controls. 3 For each function you want to protect, select a password or PIN from the drop-down list for that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen... Log out on page 7. Users will now be set to require No Security (the default), or to any of that function. 4 Click Submit to save changes, or Reset Form to each session by a password or PIN. Using security features in the drop-down list next to the name of...
... Settings ª Security ª Edit Security Setups. 2 Under Edit Access Controls, select Access Controls. 3 For each function you want to protect, select a password or PIN from the drop-down list for that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen... Log out on page 7. Users will now be set to require No Security (the default), or to any of that function. 4 Click Submit to save changes, or Reset Form to each session by a password or PIN. Using security features in the drop-down list next to the name of...
Embedded Web Server Administrator's Guide
Page 26
...Under 802.1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will recognize by clicking the check box next to send E-mail, enter the information appropriate for a response from the SMTP...of the destination server. For more information on configuring digital certificates, see "Managing certificates" on the printer before timing out. The default is integral to TLS (Transport Layer Security), PEAP (Protected Extensible Authentication Protocol), and TTLS (Tunneled Transport Security Layer). • ...
...Under 802.1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will recognize by clicking the check box next to send E-mail, enter the information appropriate for a response from the SMTP...of the destination server. For more information on configuring digital certificates, see "Managing certificates" on the printer before timing out. The default is integral to TLS (Transport Layer Security), PEAP (Protected Extensible Authentication Protocol), and TTLS (Tunneled Transport Security Layer). • ...
Embedded Web Server Administrator's Guide
Page 27
...2 Under SNMP Version 1, 2c, select the Enabled check box. 3 To allow device monitoring only, type an SNMPv3 Read Only User name and Password in the appropriate fields. 5 From the SNMPv3 Minimum Authentication Level list, select No Authentication, No Privacy, Authentication, No Privacy, or Authentication, Privacy...Address list, click one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. Note: Changes made to settings marked with an asterisk (*) will be ...
...2 Under SNMP Version 1, 2c, select the Enabled check box. 3 To allow device monitoring only, type an SNMPv3 Read Only User name and Password in the appropriate fields. 5 From the SNMPv3 Minimum Authentication Level list, select No Authentication, No Privacy, Authentication, No Privacy, or Authentication, Privacy...Address list, click one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. Note: Changes made to settings marked with an asterisk (*) will be ...
Embedded Web Server Administrator's Guide
Page 28
... generate an alert. 5 Click Submit to save changes, or Reset Form to clear all security settings to default values). 3 Click Submit to save the changes. Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard. To regain access to the... remove access to all security menus-use with caution), Access controls = "No security" (to remove security only from function access controls), or Reset factory security defaults (to return all fields.
... generate an alert. 5 Click Submit to save changes, or Reset Form to clear all security settings to default values). 3 Click Submit to save the changes. Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard. To regain access to the... remove access to all security menus-use with caution), Access controls = "No security" (to remove security only from function access controls), or Reset factory security defaults (to return all fields.
Embedded Web Server Administrator's Guide
Page 40
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
User's Guide
Page 47
...computer you are using the Advanced method, then you may need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up the printer. 1 Connect the power cable to the printer and then to a properly ...in use any security information. If you are three basic options for the same type on the router and on the network by selecting the Default WEP Transmit Key. WEP key If your wireless network does not use on the printer, or the printer will not have any type of ...
...computer you are using the Advanced method, then you may need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up the printer. 1 Connect the power cable to the printer and then to a properly ...in use any security information. If you are three basic options for the same type on the router and on the network by selecting the Default WEP Transmit Key. WEP key If your wireless network does not use on the printer, or the printer will not have any type of ...
User's Guide
Page 162
.... Specifies the type of time in seconds before the server stops trying to send the e-mail Note: 30 seconds is the factory default setting for scan to configure the SMTP server. Specifies server information Notes: • The message boxes have a limitation of 512 characters...None Use Device SMTP Credentials User-Initiated E-mail None Use Device SMTP Credentials Use Session User ID and Password Use Session E-mail address and Password Prompt User Device Userid Device password Kerberos 5 Realm NTLM Domain Description Specifies SMTP server port information Note: 25 is a required item.
.... Specifies the type of time in seconds before the server stops trying to send the e-mail Note: 30 seconds is the factory default setting for scan to configure the SMTP server. Specifies server information Notes: • The message boxes have a limitation of 512 characters...None Use Device SMTP Credentials User-Initiated E-mail None Use Device SMTP Credentials Use Session User ID and Password Use Session E-mail address and Password Prompt User Device Userid Device password Kerberos 5 Realm NTLM Domain Description Specifies SMTP server port information Note: 25 is a required item.
User's Guide
Page 201
...one domain. Defines the e-mail server path name; Specifies the type of the PDF file that will be scanned to e-mail Note: 1.5 is the factory default setting. Understanding printer menus 201 for a path name Specifies the format of the file Note: PDF (.pdf) is the factory... Setup Max E-mail size 0-65535 KB E-mail Server Setup Size Error Message E-mail Server Setup Limit destinations E-mail Server Setup Web Link Setup Server Login Password Path Base file name Web Link Format PDF (.pdf) Secure PDF TIFF (.tif) JPEG (.jpg) XPS (.xps) PDF Version 1.2-1.6 Content Text/Photo Photograph Text Color...
...one domain. Defines the e-mail server path name; Specifies the type of the PDF file that will be scanned to e-mail Note: 1.5 is the factory default setting. Understanding printer menus 201 for a path name Specifies the format of the file Note: PDF (.pdf) is the factory... Setup Max E-mail size 0-65535 KB E-mail Server Setup Size Error Message E-mail Server Setup Limit destinations E-mail Server Setup Web Link Setup Server Login Password Path Base file name Web Link Format PDF (.pdf) Secure PDF TIFF (.tif) JPEG (.jpg) XPS (.xps) PDF Version 1.2-1.6 Content Text/Photo Photograph Text Color...
User's Guide
Page 221
... On Off Font Priority Resident Flash/Disk Description Adjusts the contrast lighting of the backlight on the display Notes: • 5 is the factory default setting. • A higher setting makes the display appear lighter. • A lower setting makes the display appear darker. Prints annotations in ...The flash memory option or printer hard disk cannot be Read/Write, Write, or password protected. • Job Buffer Size must be set to fit the selected paper size Note: No is the factory default setting. Description Prints a page containing the PostScript error Note: Off is the factory...
... On Off Font Priority Resident Flash/Disk Description Adjusts the contrast lighting of the backlight on the display Notes: • 5 is the factory default setting. • A higher setting makes the display appear lighter. • A lower setting makes the display appear darker. Prints annotations in ...The flash memory option or printer hard disk cannot be Read/Write, Write, or password protected. • Job Buffer Size must be set to fit the selected paper size Note: No is the factory default setting. Description Prints a page containing the PostScript error Note: Off is the factory...
User's Guide
Page 222
... of the characters in the font.One point equals approximately 1/72 of an inch. • Point sizes can be Read/Write, Write, or password protected. • Download shows all the fonts downloaded into RAM. • All shows all fonts resident in that are shown. Understanding printer menus...00-1008.00 Description Enhances the contrast and sharpness of low-resolution images and smooths their color transitions Notes: • Off is the factory default setting. • Image Smoothing has no effect on images that option. • Flash option must be properly formatted and cannot be increased ...
... of the characters in the font.One point equals approximately 1/72 of an inch. • Point sizes can be Read/Write, Write, or password protected. • Download shows all the fonts downloaded into RAM. • All shows all fonts resident in that are shown. Understanding printer menus...00-1008.00 Description Enhances the contrast and sharpness of low-resolution images and smooths their color transitions Notes: • Off is the factory default setting. • Image Smoothing has no effect on images that option. • Flash option must be properly formatted and cannot be increased ...