Embedded Web Server Administrator's Guide
Page 3
Contents Using security features in the Embedded Web Server 5 Understanding the basics...5 Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11 Configuring Kerberos 5 for use with LDAP+GSSAPI ...13 Using NTLM authentication ... the hard disk ...24 Configuring security audit log settings ...25 Configuring 802.1x authentication ...26 Setting up SNMP ...27 Enabling the security reset jumper ...28 Contents 3
Contents Using security features in the Embedded Web Server 5 Understanding the basics...5 Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11 Configuring Kerberos 5 for use with LDAP+GSSAPI ...13 Using NTLM authentication ... the hard disk ...24 Configuring security audit log settings ...25 Configuring 802.1x authentication ...26 Setting up SNMP ...27 Enabling the security reset jumper ...28 Contents 3
Embedded Web Server Administrator's Guide
Page 14
...use the "Install auth keys" link to browse to the file containing the NTP authentication credentials. 7 Click Submit to save changes, or Reset Form to restore default values. Using NTLM authentication NTLM (Windows NT LAN Manager) is Microsoft's solution for enabling authentication without requiring the ... only one used as needed. 5 To sync to automatically sync with a trusted clock-typically the same one NTLM configuration on the user's password. An administrator can be used in a security template only after a supported device has registered with the NTLM domain. • The NTLM ...
...use the "Install auth keys" link to browse to the file containing the NTP authentication credentials. 7 Click Submit to save changes, or Reset Form to restore default values. Using NTLM authentication NTLM (Windows NT LAN Manager) is Microsoft's solution for enabling authentication without requiring the ... only one used as needed. 5 To sync to automatically sync with a trusted clock-typically the same one NTLM configuration on the user's password. An administrator can be used in a security template only after a supported device has registered with the NTLM domain. • The NTLM ...
Embedded Web Server Administrator's Guide
Page 16
...To help prevent unauthorized access, users are not authenticated), administrators can be assigned to each function you want to protect, select a password or PIN from the drop-down list for that function. For simple authorization-level security (in remotely before being automatically logged off ...assets such as needed. Embedded Web Server administrators should verify that function. 4 Click Submit to save changes, or Reset Form to specific device functions using a password or PIN. Only one method of building block, see the relevant section(s) under "Configuring building blocks" on the...
...To help prevent unauthorized access, users are not authenticated), administrators can be assigned to each function you want to protect, select a password or PIN from the drop-down list for that function. For simple authorization-level security (in remotely before being automatically logged off ...assets such as needed. Embedded Web Server administrators should verify that function. 4 Click Submit to save changes, or Reset Form to specific device functions using a password or PIN. Only one method of building block, see the relevant section(s) under "Configuring building blocks" on the...
Embedded Web Server Administrator's Guide
Page 17
..._ Template." 5 From the Authentication list, select a method for authenticating users. Users will be different from the list. 4 Edit the fields as Passwords and Pins-do , see "Menu of security templates must be populated with the authentication building blocks that function. 4 Click Submit to save changes, or...by selecting Log out on the device. Note: Certain building blocks-such as necessary. 5 Click Modify to save changes, or Reset Form to include in the Embedded Web Server 17 Using security features in the security template. Editing or deleting an existing security ...
..._ Template." 5 From the Authentication list, select a method for authenticating users. Users will be different from the list. 4 Edit the fields as Passwords and Pins-do , see "Menu of security templates must be populated with the authentication building blocks that function. 4 Click Submit to save changes, or...by selecting Log out on the device. Note: Certain building blocks-such as necessary. 5 Click Modify to save changes, or Reset Form to include in the Embedded Web Server 17 Using security features in the security template. Editing or deleting an existing security ...
Embedded Web Server Administrator's Guide
Page 19
... click Add authorization, and then select a building block from the existing network, making access to the printer as seamless as PINs and Passwords-do not support separate authorization. 7 To use the LDAP+GSSAPI capabilities of the Embedded Web Server to take advantage of that function. ...4 Click Submit to save changes, or Reset Form to know the following: 1 Kerberos configuration information • Character encoding (used for authenticating users. Step 1: Collect information about the...
... click Add authorization, and then select a building block from the existing network, making access to the printer as seamless as PINs and Passwords-do not support separate authorization. 7 To use the LDAP+GSSAPI capabilities of the Embedded Web Server to take advantage of that function. ...4 Click Submit to save changes, or Reset Form to know the following: 1 Kerberos configuration information • Character encoding (used for authenticating users. Step 1: Collect information about the...
Embedded Web Server Administrator's Guide
Page 27
... type an SNMPPv3 Read/Write User name and Password in the appropriate fields. 4 To allow device monitoring only, type an SNMPv3 Read Only User name and Password in the Embedded Web Server 27 4 From ... through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore the default settings. SNMP Version 1, 2c 1 From the Embedded Web Server Home screen, browse ... one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or...
... type an SNMPPv3 Read/Write User name and Password in the appropriate fields. 4 To allow device monitoring only, type an SNMPv3 Read Only User name and Password in the Embedded Web Server 27 4 From ... through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore the default settings. SNMP Version 1, 2c 1 From the Embedded Web Server Home screen, browse ... one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or...
Embedded Web Server Administrator's Guide
Page 28
...access the security menus. Using security features in the Embedded Web Server 28 Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard. 4 Under Trap Destination, type the IP address of using this... jumper. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Miscellaneous Security Settings. 2 From the Security Reset Jumper list , select No Effect (to remove access to all security menus-use with caution), Access controls = "No security" (to remove security...
...access the security menus. Using security features in the Embedded Web Server 28 Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard. 4 Under Trap Destination, type the IP address of using this... jumper. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Miscellaneous Security Settings. 2 From the Security Reset Jumper list , select No Effect (to remove access to all security menus-use with caution), Access controls = "No security" (to remove security...
Embedded Web Server Administrator's Guide
Page 40
...6 authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM authentication... accounts 8 Kerberos authentication 13 LDAP authentication 9 LDAP+GSSAPI authentication 11 login restrictions 16 NTLM authentication 14 password 7 PIN 7 reset jumper on motherboard 28 security audit log 25 security templates 16 SNMP 27 USB devices 23 security audit log configuring ...
...6 authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM authentication... accounts 8 Kerberos authentication 13 LDAP authentication 9 LDAP+GSSAPI authentication 11 login restrictions 16 NTLM authentication 14 password 7 PIN 7 reset jumper on motherboard 28 security audit log 25 security templates 16 SNMP 27 USB devices 23 security audit log configuring ...