PKI-Enabled Device Installation and Configuration Guide
Page 2
.... therefore, this agreement are the property of Lexmark International, Inc., registered in conjunction with other products, programs, or services, except those expressly designated by mail: Lexmark International, Inc. For Lexmark technical support, visit support.lexmark.com. All other countries. Bldg 004-2/CSC... to you. Evaluation and verification of express or implied warranties in which it operates. If you can contact Lexmark by the manufacturer, are inconsistent with diamond design, and MarkVision are periodically made at private expense. these available...
.... therefore, this agreement are the property of Lexmark International, Inc., registered in conjunction with other products, programs, or services, except those expressly designated by mail: Lexmark International, Inc. For Lexmark technical support, visit support.lexmark.com. All other countries. Bldg 004-2/CSC... to you. Evaluation and verification of express or implied warranties in which it operates. If you can contact Lexmark by the manufacturer, are inconsistent with diamond design, and MarkVision are periodically made at private expense. these available...
PKI-Enabled Device Installation and Configuration Guide
Page 3
Contents Configuring PKI-enabled devices 5 Overview...5 Supported devices ...5 Before configuring the printer ...5 Installing the firmware and applications...6 Verifying and updating the firmware...6 Installing the authentication token application...7 Installing PKI applications...7 Configuring printer settings for use with PKI applications 8 TCP/IP settings ...8 Date and time...9 Panel login timeout...9 Certificate management ...10 Configuring Scan to Email...
Contents Configuring PKI-enabled devices 5 Overview...5 Supported devices ...5 Before configuring the printer ...5 Installing the firmware and applications...6 Verifying and updating the firmware...6 Installing the authentication token application...7 Installing PKI applications...7 Configuring printer settings for use with PKI applications 8 TCP/IP settings ...8 Date and time...9 Panel login timeout...9 Certificate management ...10 Configuring Scan to Email...
PKI-Enabled Device Installation and Configuration Guide
Page 5
... Multi-function devices • Lexmark X46x • Lexmark X65x • Lexmark X73x • Lexmark X86x Before configuring the printer After initial setup tasks have been completed according to the User's Guide, connect the printer to your network. Configuring PKI-enabled devices Overview This guide describes how to install Lexmark PKI applications, and configure supported Lexmark devices to take advantage...
... Multi-function devices • Lexmark X46x • Lexmark X65x • Lexmark X73x • Lexmark X86x Before configuring the printer After initial setup tasks have been completed according to the User's Guide, connect the printer to your network. Configuring PKI-enabled devices Overview This guide describes how to install Lexmark PKI applications, and configure supported Lexmark devices to take advantage...
PKI-Enabled Device Installation and Configuration Guide
Page 6
...support for your Web browser. Note: You can print a network setup page to find additional information about many application settings using the mouseover help found in the address field of your printer involves three main components: • The printer firmware • The authentication token • The Lexmark... PKI applications All three must be performed through the printer Embedded Web Server, so make sure you are...
...support for your Web browser. Note: You can print a network setup page to find additional information about many application settings using the mouseover help found in the address field of your printer involves three main components: • The printer firmware • The authentication token • The Lexmark... PKI applications All three must be performed through the printer Embedded Web Server, so make sure you are...
PKI-Enabled Device Installation and Configuration Guide
Page 10
... server as a relay. Additional certificates may be added to send E-mail but does not support Kerberos, the IP address or hostname of seconds the printer will not be in PEM (.cer) format. If Kerberos is empty. 7 For Use ...FTP Settings > SMTP Setup. 2 Under SMTP Setup, type the IP address or hostname of the Primary SMTP Gateway the printer will use PKI Authentication, you must install the certificate of the file should resemble the following: -----BEGIN CERTIFICATE----MIIE1jCCA76gAwIBAgIQY6sV0KL3tIhBtlr4gHG85zANBgkqhkiG9w0BAQUFADBs ... ...
... server as a relay. Additional certificates may be added to send E-mail but does not support Kerberos, the IP address or hostname of seconds the printer will not be in PEM (.cer) format. If Kerberos is empty. 7 For Use ...FTP Settings > SMTP Setup. 2 Under SMTP Setup, type the IP address or hostname of the Primary SMTP Gateway the printer will use PKI Authentication, you must install the certificate of the file should resemble the following: -----BEGIN CERTIFICATE----MIIE1jCCA76gAwIBAgIQY6sV0KL3tIhBtlr4gHG85zANBgkqhkiG9w0BAQUFADBs ... ...
PKI-Enabled Device Installation and Configuration Guide
Page 12
...LDAP query. 12 Select Use user credentials. 13 Click Submit. It provides the login screen and authentication mechanism, and supports user authorization to access the printer. Custom screen images must be configured and running for users, or a custom Logon Screen Image. Example: "ou=...From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication > Configure. 2 For Logon Type, select whether users can access the printer using Card Only (SmartCard), Card or Manual Login, or Manual Login Only (userid/password). 3 Select whether Card Pin must be Numeric Only,...
...LDAP query. 12 Select Use user credentials. 13 Click Submit. It provides the login screen and authentication mechanism, and supports user authorization to access the printer. Custom screen images must be configured and running for users, or a custom Logon Screen Image. Example: "ou=...From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication > Configure. 2 For Logon Type, select whether users can access the printer using Card Only (SmartCard), Card or Manual Login, or Manual Login Only (userid/password). 3 Select whether Card Pin must be Numeric Only,...
PKI-Enabled Device Installation and Configuration Guide
Page 14
... If DNS is not enabled on the network, or if some servers are not supported on your network. 3 To use an SSL connection when performing an LDAP lookup to...as color printing. Multiple groups can select this option if the userid is not needed to allow the printer to communicate on your network. 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI... 2 Select Disable Reverse DNS Lookups if they are multi-homed, click Browse to locate a Hosts File with Lexmark Document Distributor (LDD). Adjust them as needed by commas. You can be used by other applications. •...
... If DNS is not enabled on the network, or if some servers are not supported on your network. 3 To use an SSL connection when performing an LDAP lookup to...as color printing. Multiple groups can select this option if the userid is not needed to allow the printer to communicate on your network. 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI... 2 Select Disable Reverse DNS Lookups if they are multi-homed, click Browse to locate a Hosts File with Lexmark Document Distributor (LDD). Adjust them as needed by commas. You can be used by other applications. •...
PKI-Enabled Device Installation and Configuration Guide
Page 21
...error message A SUPPORTED SMARTCARD READER HAS BEEN INSTALLED BEFORE THE PKI FIRMWARE AND APPLICATIONS The reader can not be installed until the firmware and applications have been installed. Remove the unsupported reader and attach the OmniKey reader. The printer home screen ...printer home screen does not return to a locked state when not in use, check the following: THE AUTHENTICATION TOKEN IS NOT INSTALLED OR RUNNING. 1 From the Embedded Web Server, click Settings > Embedded Solutions. 2 Verify that the authentication token appears in the list of installed solutions, contact the Lexmark...
...error message A SUPPORTED SMARTCARD READER HAS BEEN INSTALLED BEFORE THE PKI FIRMWARE AND APPLICATIONS The reader can not be installed until the firmware and applications have been installed. Remove the unsupported reader and attach the OmniKey reader. The printer home screen ...printer home screen does not return to a locked state when not in use, check the following: THE AUTHENTICATION TOKEN IS NOT INSTALLED OR RUNNING. 1 From the Embedded Web Server, click Settings > Embedded Solutions. 2 Verify that the authentication token appears in the list of installed solutions, contact the Lexmark...
PKI-Enabled Device Installation and Configuration Guide
Page 24
...normally occurs either during login (at "Getting User Info..." "Realm on page 24. User is correct. 3 If you are used by the printer to communicate with the LDAP server, and must create and upload a krbf5.conf file, containing the needed realms. If you are using a ... the time (in the Kerberos Configuration File" error message This error occurs during address book searches. The PKI Authentication solution settings do not support multiple Kerberos Realm entries. "Client [NAME] unknown" error message This error indicates the KDC being used to authenticate the user does not ...
...normally occurs either during login (at "Getting User Info..." "Realm on page 24. User is correct. 3 If you are used by the printer to communicate with the LDAP server, and must create and upload a krbf5.conf file, containing the needed realms. If you are using a ... the time (in the Kerberos Configuration File" error message This error occurs during address book searches. The PKI Authentication solution settings do not support multiple Kerberos Realm entries. "Client [NAME] unknown" error message This error indicates the KDC being used to authenticate the user does not ...
PKI-Enabled Device Installation and Configuration Guide
Page 27
... MESSAGE ID" ERROR FROM THE SMTP SERVER This problem occurs in earlier versions of the firmware, so verify that the intended recipient is not supported, select No Authentication Required. "501 5.5.4 INVALID ADDRESS" ERROR FROM THE SMTP SERVER The domain name on page 8. Note: For more information... Settings > E-mail/FTP Settings > SMTP Setup. 2 Under SMTP Setup, type the hostname of the printer must have verified or updated your firmware and still experience this problem, contact the Lexmark Solutions Help Desk. Unable to send E-mail, there can only be sent to recipients found in your...
... MESSAGE ID" ERROR FROM THE SMTP SERVER This problem occurs in earlier versions of the firmware, so verify that the intended recipient is not supported, select No Authentication Required. "501 5.5.4 INVALID ADDRESS" ERROR FROM THE SMTP SERVER The domain name on page 8. Note: For more information... Settings > E-mail/FTP Settings > SMTP Setup. 2 Under SMTP Setup, type the hostname of the printer must have verified or updated your firmware and still experience this problem, contact the Lexmark Solutions Help Desk. Unable to send E-mail, there can only be sent to recipients found in your...
PKI-Enabled Device Installation and Configuration Guide
Page 28
SMTP SERVER AUTHENTICATION IS SET TO KERBEROS 5, BUT THE SMTP SERVER REPORTS GSSAPI IS NOT SUPPORTED 1 From the Embedded Web Server, click Settings > E-mail/FTP Settings > SMTP Setup. 2 For SMTP Server Authentication, select No Authentication Required. 3 Click Submit to save any ...needed changes. Scan to Network issues "You are not authorized to scan to any needed share (or shares). Troubleshooting 28 THE PRINTER IS UNABLE TO CONNECT TO THE SMTP SERVER BECAUSE PORT 25 IS BLOCKED You must adjust server and/or firewall settings to Network" on page...
SMTP SERVER AUTHENTICATION IS SET TO KERBEROS 5, BUT THE SMTP SERVER REPORTS GSSAPI IS NOT SUPPORTED 1 From the Embedded Web Server, click Settings > E-mail/FTP Settings > SMTP Setup. 2 For SMTP Server Authentication, select No Authentication Required. 3 Click Submit to save any ...needed changes. Scan to Network issues "You are not authorized to scan to any needed share (or shares). Troubleshooting 28 THE PRINTER IS UNABLE TO CONNECT TO THE SMTP SERVER BECAUSE PORT 25 IS BLOCKED You must adjust server and/or firewall settings to Network" on page...
PKI-Enabled Device Installation and Configuration Guide
Page 35
... terminated or rejected. This Agreement is governed non-exclusively by such export laws, including, without limitation, any time by you and Lexmark relating to comply with the terms of the Software Program. 12 LIMITATION ON ACTIONS. Use, duplication and disclosure by you . Additional... will be governed by the laws of the political subdivision in any form, or as otherwise provided for support services conflict with RESTRICTED RIGHTS. If you and Lexmark relating to restrictions as provided under applicable law. 13 APPLICABLE LAW. Copyright (c) 2001 Markus Friedl Notices 35...
... terminated or rejected. This Agreement is governed non-exclusively by such export laws, including, without limitation, any time by you and Lexmark relating to comply with the terms of the Software Program. 12 LIMITATION ON ACTIONS. Use, duplication and disclosure by you . Additional... will be governed by the laws of the political subdivision in any form, or as otherwise provided for support services conflict with RESTRICTED RIGHTS. If you and Lexmark relating to restrictions as provided under applicable law. 13 APPLICABLE LAW. Copyright (c) 2001 Markus Friedl Notices 35...
PKI-Enabled Device Installation and Configuration Guide
Page 37
... 19 scan settings 17 R reverse DNS lookups 14 S scan settings for E-mail 11 screen customizing the 12 security certificates 10 SMTP settings configuring 10 supported devices 5 T TCP/IP settings 8 timeout automatic 9 troubleshooting 501 5.5.4 Invalid Address error 27 authentication failure 22 authorization to use Held Jobs 31 authorization... does not lock 21 invalid character in filename 30 invalid filename specified 30 Invalid Message ID error 27 jobs not being held at printer 32 jobs print immediately 32 KDC and MFP clocks out of sync 22 KDC did not respond within the required time 23 Kerberos...
... 19 scan settings 17 R reverse DNS lookups 14 S scan settings for E-mail 11 screen customizing the 12 security certificates 10 SMTP settings configuring 10 supported devices 5 T TCP/IP settings 8 timeout automatic 9 troubleshooting 501 5.5.4 Invalid Address error 27 authentication failure 22 authorization to use Held Jobs 31 authorization... does not lock 21 invalid character in filename 30 invalid filename specified 30 Invalid Message ID error 27 jobs not being held at printer 32 jobs print immediately 32 KDC and MFP clocks out of sync 22 KDC did not respond within the required time 23 Kerberos...
PKI-Enabled Device Installation and Configuration Guide
Page 38
... to use Held Jobs 31 not authorized to use Print Release Lite 31 not authorized to use Scan to Network 28 port 25 blocked 27 printer clock out of sync 22 problem getting user info 24 realm on card not found 24 scanned and saved file sizes do not match 29... SMTP server does not support GSSAPI 27 SMTP server must use hostname with Kerberos 27 SMTP server requires authentication 27 unable to authenticate 22 unable to determine Windows User ID...
... to use Held Jobs 31 not authorized to use Print Release Lite 31 not authorized to use Scan to Network 28 port 25 blocked 27 printer clock out of sync 22 problem getting user info 24 realm on card not found 24 scanned and saved file sizes do not match 29... SMTP server does not support GSSAPI 27 SMTP server must use hostname with Kerberos 27 SMTP server requires authentication 27 unable to authenticate 22 unable to determine Windows User ID...
Maintenance Manual
Page 3
...cause damage to your printer. 5 Make sure the paper support and standard exit bin are ready to use them. Warning-Potential Damage: Using a damp cloth to clean the interior may damage the finish of the printer. 4 Wipe only the outside of the printer, making sure to print...Supplies menu," "Quality menu," and "Finishing menu." Storing supplies Choose a cool, clean storage area for accuracy before beginning a new print job. Maintaining the printer 3 Do not expose supplies to: • Direct sunlight • Temperatures above 35°C (95°F) • High humidity above 80% •...
...cause damage to your printer. 5 Make sure the paper support and standard exit bin are ready to use them. Warning-Potential Damage: Using a damp cloth to clean the interior may damage the finish of the printer. 4 Wipe only the outside of the printer, making sure to print...Supplies menu," "Quality menu," and "Finishing menu." Storing supplies Choose a cool, clean storage area for accuracy before beginning a new print job. Maintaining the printer 3 Do not expose supplies to: • Direct sunlight • Temperatures above 35°C (95°F) • High humidity above 80% •...
Maintenance Manual
Page 8
... covered by following these guidelines to avoid personal injury or printer damage: • Turn the printer off the optional drawer. Maintaining the printer 8 Any cart used to move the options must have a surface able to support the dimensions of the options. • Keep the printer in an upright position. • Avoid severe jarring movements. CAUTION...
... covered by following these guidelines to avoid personal injury or printer damage: • Turn the printer off the optional drawer. Maintaining the printer 8 Any cart used to move the options must have a surface able to support the dimensions of the options. • Keep the printer in an upright position. • Avoid severe jarring movements. CAUTION...