Embedded Web Server Administrator's Guide
Page 3
......15 Setting login restrictions...16 Using a password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21...
......15 Setting login restrictions...16 Using a password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21...
Embedded Web Server Administrator's Guide
Page 5
...innovative new tool developed by which functions those users holding appropriate credentials. This set of security features available in the Lexmark Embedded Web Server represents an evolution in keeping document outputs safe and confidential in today's busy environments. Using security ... is also referred to as "permissions." Authentication and Authorization Authentication is the method by Lexmark to enable administrators to use the printer. Security templates are able to use the printer, and which a system securely identifies a user (that only employees who the users ...
...innovative new tool developed by which functions those users holding appropriate credentials. This set of security features available in the Lexmark Embedded Web Server represents an evolution in keeping document outputs safe and confidential in today's busy environments. Using security ... is also referred to as "permissions." Authentication and Authorization Authentication is the method by Lexmark to enable administrators to use the printer. Security templates are able to use the printer, and which a system securely identifies a user (that only employees who the users ...
Embedded Web Server Administrator's Guide
Page 6
... or to disable them entirely. How they need to print in color, but in association with one or more groups. Using security features in some multifunction printers, over 40 individual menus and functions can be protected. The number of individual Access Controls and what they do not need , while restricting other functions...
... or to disable them entirely. How they need to print in color, but in association with one or more groups. Using security features in some multifunction printers, over 40 individual menus and functions can be protected. The number of individual Access Controls and what they do not need , while restricting other functions...
Embedded Web Server Administrator's Guide
Page 9
...user credentials-Select either cn (common name), uid, userid, or user-defined. • Search Base-The Search Base is that prevents the printer from communicating with many different kinds of databases without special integration, making it can store a maximum of LDAP is the node in the LDAP...server where user accounts reside. Multiple search bases may be able to access protected device functions in the event of authentication that relies on the printer control panel. To add a new LDAP setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit...
...user credentials-Select either cn (common name), uid, userid, or user-defined. • Search Base-The Search Base is that prevents the printer from communicating with many different kinds of databases without special integration, making it can store a maximum of LDAP is the node in the LDAP...server where user accounts reside. Multiple search bases may be able to access protected device functions in the event of authentication that relies on the printer control panel. To add a new LDAP setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit...
Embedded Web Server Administrator's Guide
Page 11
... Port-The port used for access. LDAP+GSSAPI is the node in the Embedded Web Server 11 Notes: • LDAP+GSSAPI requires that prevents the printer from communicating with the LDAP server. To validate an existing LDAP setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª... Generic Security Services Application Programming Interface (GSSAPI) instead of the LDAP server where the authentication will be entered, separated by selecting Log out on the printer control panel.
... Port-The port used for access. LDAP+GSSAPI is the node in the Embedded Web Server 11 Notes: • LDAP+GSSAPI requires that prevents the printer from communicating with the LDAP server. To validate an existing LDAP setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª... Generic Security Services Application Programming Interface (GSSAPI) instead of the LDAP server where the authentication will be entered, separated by selecting Log out on the printer control panel.
Embedded Web Server Administrator's Guide
Page 13
... all such requests. Note: After you click Submit, the Embedded Web Server will automatically test the krb5.conf file to verify that prevents the printer from the selected device. • Click View File to view the Kerberos configuration file for the selected device. • Click Test Setup to...1-88) used by the Kerberos server in the KDC Port field. 5 Type the realm (or domain) used by selecting Log out on the printer control panel. An administrator must thus anticipate the different types of authentication requests the Kerberos server might receive, and configure the krb5.conf file to...
... all such requests. Note: After you click Submit, the Embedded Web Server will automatically test the krb5.conf file to verify that prevents the printer from the selected device. • Click View File to view the Kerberos configuration file for the selected device. • Click Test Setup to...1-88) used by the Kerberos server in the KDC Port field. 5 Type the realm (or domain) used by selecting Log out on the printer control panel. An administrator must thus anticipate the different types of authentication requests the Kerberos server might receive, and configure the krb5.conf file to...
Embedded Web Server Administrator's Guide
Page 14
...settings can only be able to a single NT domain. Using security features in clear text. Instead of an outage that prevents the printer from the Time Zone list will require configuration of additional settings under Custom Time Zone Setup. 3 If Daylight Saving Time (DST) ... in the event of comparing the user's actual password, the NTLM server and the client generate and compare three encrypted strings based on the printer control panel. An administrator can be used as needed. 5 To sync to restore default values. Notes: • Entering manual settings automatically disables...
...settings can only be able to a single NT domain. Using security features in clear text. Instead of an outage that prevents the printer from the Time Zone list will require configuration of additional settings under Custom Time Zone Setup. 3 If Daylight Saving Time (DST) ... in the event of comparing the user's actual password, the NTLM server and the client generate and compare three encrypted strings based on the printer control panel. An administrator can be used as needed. 5 To sync to restore default values. Notes: • Entering manual settings automatically disables...
Embedded Web Server Administrator's Guide
Page 16
...Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select the building block (or blocks), appropriate for that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª... 16 For more information on configuring a specific type of building block, see the relevant section(s) under "Configuring building blocks" on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit...
...Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select the building block (or blocks), appropriate for that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª... 16 For more information on configuring a specific type of building block, see the relevant section(s) under "Configuring building blocks" on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit...
Embedded Web Server Administrator's Guide
Page 17
.... This list will be required to enter the appropriate credentials in order to gain access to any function controlled by selecting Log out on the printer control panel. • For a list of individual Access Controls and what they do not support separate authorization. 7 To use authorization, click Add authorization, and then...
.... This list will be required to enter the appropriate credentials in order to gain access to any function controlled by selecting Log out on the printer control panel. • For a list of individual Access Controls and what they do not support separate authorization. 7 To use authorization, click Add authorization, and then...
Embedded Web Server Administrator's Guide
Page 18
...more information on configuring individual user accounts, see the relevant section(s) under "Configuring building blocks" on page 8. Scenarios Scenario: Printer in a public place If your printer is not in order to gain access to a function controlled by that template. • You can only delete a security ...a password or PIN can assign a single password or PIN for authentication, authorization, or both. Scenario: Standalone or small office If your printer is located in the Settings screen for that code. Step Two: Assign a password or PIN to each function you want to protect, ...
...more information on configuring individual user accounts, see the relevant section(s) under "Configuring building blocks" on page 8. Scenarios Scenario: Printer in a public place If your printer is not in order to gain access to a function controlled by that template. • You can only delete a security ...a password or PIN can assign a single password or PIN for authentication, authorization, or both. Scenario: Standalone or small office If your printer is located in the Settings screen for that code. Step Two: Assign a password or PIN to each function you want to protect, ...
Embedded Web Server Administrator's Guide
Page 19
... Edit Security Setups. 2 Select Access Control. 3 For each function you will be pulled from the existing network, making access to the printer as seamless as PINs and Passwords-do not support separate authorization. 7 To use the LDAP+GSSAPI capabilities of the Embedded Web Server to...the authorization building blocks available on the network. Step 1: Collect information about the network Before configuring the Embedded Web Server to the printer Using security features in the security template. It can be helpful to use authorization, click Add authorization, and then select a ...
... Edit Security Setups. 2 Select Access Control. 3 For each function you will be pulled from the existing network, making access to the printer as seamless as PINs and Passwords-do not support separate authorization. 7 To use the LDAP+GSSAPI capabilities of the Embedded Web Server to...the authorization building blocks available on the network. Step 1: Collect information about the network Before configuring the Embedded Web Server to the printer Using security features in the security template. It can be helpful to use authorization, click Add authorization, and then select a ...
Embedded Web Server Administrator's Guide
Page 20
... gathered in the Embedded Web Server 20 Using security features in step 1. For more information on configuring LDAP+GSSAPI, see "Configuring Kerberos 5 for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to 128 characters. Hold down the Ctrl key to your LDAP+GSSAPI...
... gathered in the Embedded Web Server 20 Using security features in step 1. For more information on configuring LDAP+GSSAPI, see "Configuring Kerberos 5 for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to 128 characters. Hold down the Ctrl key to your LDAP+GSSAPI...
Embedded Web Server Administrator's Guide
Page 21
... the IPv4 address (128-character maximum). 5 Click Generate New Certificate . 3 For each function you want to protect, select the newly created security template from your printer, including authentication and group information, as well as document outputs. For example, enter an IP address using the format IP:1.2.3.4, or a DNS address using the...
... the IPv4 address (128-character maximum). 5 Click Generate New Certificate . 3 For each function you want to protect, select the newly created security template from your printer, including authentication and group information, as well as document outputs. For example, enter an IP address using the format IP:1.2.3.4, or a DNS address using the...
Embedded Web Server Administrator's Guide
Page 24
... screen click Delete Entry again to confirm. Encrypting the hard disk Hard disk encryption helps prevent loss of sensitive data in the event your printer-or its hard disk-is in Configuration mode by locating the Exit Configuration button in the lower right corner of the touch screen. Once ...menu, select Enable to turn on . Using security features in the drop-down arrow to scroll through the Embedded Web Server). 1 Turn off the printer during the encryption process. • Select No to cancel and return to proceed with disk wiping and encryption. Note: On some devices the button will...
... screen click Delete Entry again to confirm. Encrypting the hard disk Hard disk encryption helps prevent loss of sensitive data in the event your printer-or its hard disk-is in Configuration mode by locating the Exit Configuration button in the lower right corner of the touch screen. Once ...menu, select Enable to turn on . Using security features in the drop-down arrow to scroll through the Embedded Web Server). 1 Turn off the printer during the encryption process. • Select No to cancel and return to proceed with disk wiping and encryption. Note: On some devices the button will...
Embedded Web Server Administrator's Guide
Page 25
... to be logged to on a device including, among others, user authorization failures, successful administrator authentication, or Kerberos files being uploaded to normal operating mode. The printer will be logged (e.g.
... to be logged to on a device including, among others, user authorization failures, successful administrator authentication, or Kerberos files being uploaded to normal operating mode. The printer will be logged (e.g.
Embedded Web Server Administrator's Guide
Page 26
...one certificate has been installed, default will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will recognize by clicking the check box next to specify whether E-mail will be sent using an encrypted link. 8 If your ...1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will wait for your SMTP server requires user credentials, select an authentication method from the SMTP server before changing 802.1x authentication settings. ...
...one certificate has been installed, default will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will recognize by clicking the check box next to specify whether E-mail will be sent using an encrypted link. 8 If your ...1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will wait for your SMTP server requires user credentials, select an authentication method from the SMTP server before changing 802.1x authentication settings. ...
Embedded Web Server Administrator's Guide
Page 27
... SNMP. 2 Click Set SNMP Traps. 3 From the IP Address list, click one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. SNMP Version 1, 2c 1 From ...used in network management systems to monitor network-attached devices for SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore default values. Setting up SNMP Simple Network Management Protocol (SNMP) is...
... SNMP. 2 Click Set SNMP Traps. 3 From the IP Address list, click one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. SNMP Version 1, 2c 1 From ...used in network management systems to monitor network-attached devices for SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore default values. Setting up SNMP Simple Network Management Protocol (SNMP) is...
Embedded Web Server Administrator's Guide
Page 29
... Scan to FTP function Protects access to the Held Jobs function Protects access to the Manage Shortcuts section of the Settings menu on the printer control panel Protects access to the Manage Shortcuts item of any source other than a flash drive. Users who are denied will have their... Server, etc., will have their copy jobs output in black and white Controls the ability to use the Color Dropout feature for your printer. Function Access Control Address Book Change Language from Home Screen Color Dropout Configuration Menu Copy Color Printing Copy Function Create Bookmarks at the Device...
... Scan to FTP function Protects access to the Held Jobs function Protects access to the Manage Shortcuts section of the Settings menu on the printer control panel Protects access to the Manage Shortcuts item of any source other than a flash drive. Users who are denied will have their... Server, etc., will have their copy jobs output in black and white Controls the ability to use the Color Dropout feature for your printer. Function Access Control Address Book Change Language from Home Screen Color Dropout Configuration Menu Copy Color Printing Copy Function Create Bookmarks at the Device...
Embedded Web Server Administrator's Guide
Page 30
... Card Configuration item of MarkVision Professional). Controls the ability to the Option Card Configuration section of the Settings menu from the printer control panel. Certificate Management is installed in the creation or configuration of the Settings menu from the Embedded Web Server. Controls... access to the operations available from the printer control panel. Protects access to the Network/Ports section of the application or profile. When disabled, it does Protects access ...
... Card Configuration item of MarkVision Professional). Controls the ability to the Option Card Configuration section of the Settings menu from the printer control panel. Certificate Management is installed in the creation or configuration of the Settings menu from the Embedded Web Server. Controls... access to the operations available from the printer control panel. Protects access to the Network/Ports section of the application or profile. When disabled, it does Protects access ...
Embedded Web Server Administrator's Guide
Page 31
Function Access Control Supplies Menu at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF applications Controls the ability to import and export printer settings files (UCF files) from the Embedded Web Server Appendix 31
Function Access Control Supplies Menu at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF applications Controls the ability to import and export printer settings files (UCF files) from the Embedded Web Server Appendix 31