Embedded Web Server Administrator's Guide
Page 3
......15 Setting login restrictions...16 Using a password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21...
......15 Setting login restrictions...16 Using a password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21...
Embedded Web Server Administrator's Guide
Page 5
... other public area of a business, so that will need to use the printer. Using security features in the Embedded Web Server The latest suite of security features available in the Lexmark Embedded Web Server represents an evolution in keeping document outputs safe and confidential in... Server 5 This type of security might include the location of the printer and whether non-authorized persons have access to that area, sensitive documents that only employees who is , who has been authenticated by Lexmark to enable administrators to build secure, flexible profiles that require a user...
... other public area of a business, so that will need to use the printer. Using security features in the Embedded Web Server The latest suite of security features available in the Lexmark Embedded Web Server represents an evolution in keeping document outputs safe and confidential in... Server 5 This type of security might include the location of the printer and whether non-authorized persons have access to that area, sensitive documents that only employees who is , who has been authenticated by Lexmark to enable administrators to build secure, flexible profiles that require a user...
Embedded Web Server Administrator's Guide
Page 6
..." group, and a "Sales and Marketing" group. Individually, building blocks, groups, and access controls may not meet the needs of device, but those in some multifunction printers, over 40 individual menus and functions can be controlled varies depending on page 29. Access Controls (also referred to in sales and marketing use color...
..." group, and a "Sales and Marketing" group. Individually, building blocks, groups, and access controls may not meet the needs of device, but those in some multifunction printers, over 40 individual menus and functions can be controlled varies depending on page 29. Access Controls (also referred to in sales and marketing use color...
Embedded Web Server Administrator's Guide
Page 9
... users are encouraged to securely end each unique LDAP configuration. • As with any form of authentication that prevents the printer from communicating with the LDAP server. Using security features in the LDAP server where user accounts reside. Specifying settings for internal ...), or dc (domain)-separated by commas. Notes: • Supported devices can interact with many different kinds of an outage that relies on the printer control panel. Note: A Search Base consists of multiple attributes-such as the information a user must have a unique name. • Administrators can...
... users are encouraged to securely end each unique LDAP configuration. • As with any form of authentication that prevents the printer from communicating with the LDAP server. Using security features in the LDAP server where user accounts reside. Specifying settings for internal ...), or dc (domain)-separated by commas. Notes: • Supported devices can interact with many different kinds of an outage that relies on the printer control panel. Note: A Search Base consists of multiple attributes-such as the information a user must have a unique name. • Administrators can...
Embedded Web Server Administrator's Guide
Page 11
... or user-defined. • Search Base-The Search Base is the node in the event of an outage that relies on the printer control panel. Note: A Search Base consists of authenticating directly with the LDAP server, the user will first authenticate with the authenticating ... a Kerberos "ticket." Multiple search bases may be configured. • Supported devices can store a maximum of authentication that prevents the printer from communicating with a Kerberos server to securely end each particular LDAP+GSSAPI Server Setup when creating security templates. • Server Address-Enter...
... or user-defined. • Search Base-The Search Base is the node in the event of an outage that relies on the printer control panel. Note: A Search Base consists of authenticating directly with the LDAP server, the user will first authenticate with the authenticating ... a Kerberos "ticket." Multiple search bases may be configured. • Supported devices can store a maximum of authentication that prevents the printer from communicating with a Kerberos server to securely end each particular LDAP+GSSAPI Server Setup when creating security templates. • Server Address-Enter...
Embedded Web Server Administrator's Guide
Page 13
An administrator must thus anticipate the different types of an outage that prevents the printer from the selected device. • Click View File to view the Kerberos configuration file for the selected device. • Click Test Setup to verify that ... configuration file (krb5.conf) can be stored on the selected device, or Reset Form to securely end each session by selecting Log out on the printer control panel. Creating a simple Kerberos configuration file 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit...
An administrator must thus anticipate the different types of an outage that prevents the printer from the selected device. • Click View File to view the Kerberos configuration file for the selected device. • Click Test Setup to verify that ... configuration file (krb5.conf) can be stored on the selected device, or Reset Form to securely end each session by selecting Log out on the printer control panel. Creating a simple Kerberos configuration file 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit...
Embedded Web Server Administrator's Guide
Page 14
...network in clear text. Setting date and time Because Kerberos servers require that key requests bear a recent timestamp (usually within 300 seconds), the printer clock must be updated manually, or set to use the "Install auth keys" link to browse to the file containing the NTP authentication ...and then use Network Time Protocol (NTP), to a single NT domain. Using security features in the event of authentication that prevents the printer from the Time Zone drop-down list. Using NTLM authentication NTLM (Windows NT LAN Manager) is Microsoft's solution for enabling authentication without ...
...network in clear text. Setting date and time Because Kerberos servers require that key requests bear a recent timestamp (usually within 300 seconds), the printer clock must be updated manually, or set to use the "Install auth keys" link to browse to the file containing the NTP authentication ...and then use Network Time Protocol (NTP), to a single NT domain. Using security features in the event of authentication that prevents the printer from the Time Zone drop-down list. Using NTLM authentication NTLM (Windows NT LAN Manager) is Microsoft's solution for enabling authentication without ...
Embedded Web Server Administrator's Guide
Page 16
...Submit to save changes, or Reset Form to the name of building block, see the relevant section(s) under "Configuring building blocks" on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit Access...save changes, or Reset Form to specific device functions using a password or PIN. For more information on configuring a specific type of that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª...
...Submit to save changes, or Reset Form to the name of building block, see the relevant section(s) under "Configuring building blocks" on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit Access...save changes, or Reset Form to specific device functions using a password or PIN. For more information on configuring a specific type of that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª...
Embedded Web Server Administrator's Guide
Page 17
... with a unique name of up to Settings ª Security ª Edit Security Setups. 2 Select Access Control. 3 For each session by selecting Log out on the printer control panel. • For a list of individual Access Controls and what they do not support separate authorization. 7 To use authorization, click Add authorization, and then...
... with a unique name of up to Settings ª Security ª Edit Security Setups. 2 Select Access Control. 3 For each session by selecting Log out on the printer control panel. • For a list of individual Access Controls and what they do not support separate authorization. 7 To use authorization, click Add authorization, and then...
Embedded Web Server Administrator's Guide
Page 18
... Setups. 2 Select Access Control. 3 For each function you do not use can be edited. Using security features in a public place If your printer is that anyone who knows a password or PIN can be created and stored within the Embedded Web Server for that template. • You can ...To delete an individual security template, select it is located in use; Scenario: Standalone or small office If your printer is not in a public space such as needed . Scenarios Scenario: Printer in the Embedded Web Server 18 Step One: Create a password or PIN 1 From the Embedded Web Server Home...
... Setups. 2 Select Access Control. 3 For each function you do not use can be edited. Using security features in a public place If your printer is that anyone who knows a password or PIN can be created and stored within the Embedded Web Server for that template. • You can ...To delete an individual security template, select it is located in use; Scenario: Standalone or small office If your printer is not in a public space such as needed . Scenarios Scenario: Printer in the Embedded Web Server 18 Step One: Create a password or PIN 1 From the Embedded Web Server Home...
Embedded Web Server Administrator's Guide
Page 19
User credentials and group designations can be required to enter the appropriate credentials in order to gain access to the printer Using security features in the security template. Step 2: Create a security template 1 From the Embedded Web Server Home screen, browse to ...helpful to 128 characters. It can use authorization, click Add authorization, and then select a building block from the drop-down the Ctrl key to the printer as seamless as "Administrator _ Only", or "Common _ Functions _ Template." 5 From the Authentication list, select a method for authenticating users. Step ...
User credentials and group designations can be required to enter the appropriate credentials in order to gain access to the printer Using security features in the security template. Step 2: Create a security template 1 From the Embedded Web Server Home screen, browse to ...helpful to 128 characters. It can use authorization, click Add authorization, and then select a building block from the drop-down the Ctrl key to the printer as seamless as "Administrator _ Only", or "Common _ Functions _ Template." 5 From the Authentication list, select a method for authenticating users. Step ...
Embedded Web Server Administrator's Guide
Page 20
...+GSSAPI setup. 7 To use groups, click Modify Groups, and then select one or more information on configuring LDAP+GSSAPI, see "Configuring Kerberos 5 for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks...
...+GSSAPI setup. 7 To use groups, click Modify Groups, and then select one or more information on configuring LDAP+GSSAPI, see "Configuring Kerberos 5 for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks...
Embedded Web Server Administrator's Guide
Page 21
... that function. 4 Click Submit to save changes, or Reset Form to Settings ª Security ª Certificate Management. 2 Select Device Certificate Management. 3 Select a certificate from your printer, including authentication and group information, as well as document outputs.
... that function. 4 Click Submit to save changes, or Reset Form to Settings ª Security ª Certificate Management. 2 Select Device Certificate Management. 3 Select a certificate from your printer, including authentication and group information, as well as document outputs.
Embedded Web Server Administrator's Guide
Page 24
...button will be returned to confirm the action: Contents will be turned on only at the device (not through the configuration menus until the printer status bar reaches %100. Encrypting the hard disk Hard disk encryption helps prevent loss of disk wiping (Automatic, Manual, and Scheduled). 6... Click Submit to confirm. Encryption takes approximately two minutes, and a status bar will appear in the event your printer-or its hard disk-is in Configuration mode by locating the Exit Configuration button in the Embedded Web Server 24 When finished, use the browser...
...button will be returned to confirm the action: Contents will be turned on only at the device (not through the configuration menus until the printer status bar reaches %100. Encrypting the hard disk Hard disk encryption helps prevent loss of disk wiping (Automatic, Manual, and Scheduled). 6... Click Submit to confirm. Encryption takes approximately two minutes, and a status bar will appear in the event your printer-or its hard disk-is in Configuration mode by locating the Exit Configuration button in the Embedded Web Server 24 When finished, use the browser...
Embedded Web Server Administrator's Guide
Page 25
... send all events regardless of certain log events, type one or more E-mail addresses (separated by network monitoring or intrusion detection software. if level "4 - The printer will be logged (e.g. Note: The Enable Remote Syslog check box will use E-mail alerts, you must be before an alert is triggered E-mail log exported...
... send all events regardless of certain log events, type one or more E-mail addresses (separated by network monitoring or intrusion detection software. if level "4 - The printer will be logged (e.g. Note: The Enable Remote Syslog check box will use E-mail alerts, you must be before an alert is triggered E-mail log exported...
Embedded Web Server Administrator's Guide
Page 26
...1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will recognize by clicking the check box next to send E-mail, enter the information appropriate for your SMTP server requires user credentials,... select an authentication method from the printer (in order to each applicable protocol. The default is integral to TLS (Transport Layer Security), PEAP (Protected Extensible Authentication Protocol),...
...1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will recognize by clicking the check box next to send E-mail, enter the information appropriate for your SMTP server requires user credentials,... select an authentication method from the printer (in order to each applicable protocol. The default is integral to TLS (Transport Layer Security), PEAP (Protected Extensible Authentication Protocol),...
Embedded Web Server Administrator's Guide
Page 27
... Click Set SNMP Traps. 3 From the IP Address list, click one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to configure settings for the SNMP Community identifier (the default ...community name is used for SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to reset. Note: Changes made to settings marked with an asterisk (*) will be...
... Click Set SNMP Traps. 3 From the IP Address list, click one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to configure settings for the SNMP Community identifier (the default ...community name is used for SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to reset. Note: Changes made to settings marked with an asterisk (*) will be...
Embedded Web Server Administrator's Guide
Page 29
... white Controls the ability to use the Color Dropout feature for your printer. Appendix Menu of Access Controls Depending on device type and installed options, some Access Controls (referred to on... the printer control panel Protects access to print color from the Embedded Web Server Appendix 29 Users ... Email functions Controls access to the Change Language feature from the printer control panel Controls the ability to use the Copy function Controls the ability to create new bookmarks from the...
... white Controls the ability to use the Color Dropout feature for your printer. Appendix Menu of Access Controls Depending on device type and installed options, some Access Controls (referred to on... the printer control panel Protects access to print color from the Embedded Web Server Appendix 29 Users ... Email functions Controls access to the Change Language feature from the printer control panel Controls the ability to use the Copy function Controls the ability to create new bookmarks from the...
Embedded Web Server Administrator's Guide
Page 30
...in the device. This applies only when an Option Card with configuration options is assigned in the device. Controls access to printer settings and functions by remote management tools such as that provided by a properly configured installation of MarkVision Professional). The Access...the application or profile. When protected, no longer possible to manage certificates using remote management tools. Certificate Management is no printer configuration setting can be altered except through Solution 10 Access Controls can be assigned to installed eSF applications and/or profiles ...
...in the device. This applies only when an Option Card with configuration options is assigned in the device. Controls access to printer settings and functions by remote management tools such as that provided by a properly configured installation of MarkVision Professional). The Access...the application or profile. When protected, no longer possible to manage certificates using remote management tools. Certificate Management is no printer configuration setting can be altered except through Solution 10 Access Controls can be assigned to installed eSF applications and/or profiles ...
Embedded Web Server Administrator's Guide
Page 31
Function Access Control Supplies Menu at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF applications Controls the ability to import and export printer settings files (UCF files) from the Embedded Web Server Appendix 31
Function Access Control Supplies Menu at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF applications Controls the ability to import and export printer settings files (UCF files) from the Embedded Web Server Appendix 31