Embedded Web Server Administrator's Guide
Page 9
...is used by commas. Using LDAP Lightweight Directory Access Protocol (LDAP) is a standards-based, cross-platform, extensible protocol that prevents the printer from communicating with the LDAP server. Each configuration must have a unique name. • Administrators can interact with any form of authentication ... layer, and is the node in the LDAP server where user accounts reside. To add a new LDAP setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select LDAP. 3 Click Add an LDAP ...
...is used by commas. Using LDAP Lightweight Directory Access Protocol (LDAP) is a standards-based, cross-platform, extensible protocol that prevents the printer from communicating with the LDAP server. Each configuration must have a unique name. • Administrators can interact with any form of authentication ... layer, and is the node in the LDAP server where user accounts reside. To add a new LDAP setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select LDAP. 3 Click Add an LDAP ...
Embedded Web Server Administrator's Guide
Page 11
...out on an external server, users will not be configured. • Supported devices can store a maximum of an outage that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to securely end each particular LDAP+GSSAPI ... bases may be performed. • Server Port-The port used by commas. To validate an existing LDAP setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select LDAP. 3 Click Test LDAP Authentication ...
...out on an external server, users will not be configured. • Supported devices can store a maximum of an outage that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to securely end each particular LDAP+GSSAPI ... bases may be performed. • Server Port-The port used by commas. To validate an existing LDAP setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select LDAP. 3 Click Test LDAP Authentication ...
Embedded Web Server Administrator's Guide
Page 13
...end each session by the Kerberos server in conjunction with the LDAP +GSSAPI building block. Uploading a Kerberos configuration file 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select Kerberos 5. 3 Click Browse to find and... the krb5.conf file to reset the field and search for authentication. • As with any form of an outage that prevents the printer from the selected device. • Click View File to view the Kerberos configuration file for the selected device. • Click Test Setup...
...end each session by the Kerberos server in conjunction with the LDAP +GSSAPI building block. Uploading a Kerberos configuration file 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select Kerberos 5. 3 Click Browse to find and... the krb5.conf file to reset the field and search for authentication. • As with any form of an outage that prevents the printer from the selected device. • Click View File to view the Kerberos configuration file for the selected device. • Click Test Setup...
Embedded Web Server Administrator's Guide
Page 14
... YYYY-MM-DD HH:MM format, and then choose from the Time Zone list will require configuration of authentication that relies on the printer control panel. Using security features in a security template only after a supported device has registered with the KDC system clock... the client generate and compare three encrypted strings based on a supported device because each session by the Kerberos server. 1 From the Embedded Web Server Home screen, browse to securely end each device can be updated manually, or set to use Network Time Protocol (NTP), to automatically sync with a trusted...
... YYYY-MM-DD HH:MM format, and then choose from the Time Zone list will require configuration of authentication that relies on the printer control panel. Using security features in a security template only after a supported device has registered with the KDC system clock... the client generate and compare three encrypted strings based on a supported device because each session by the Kerberos server. 1 From the Embedded Web Server Home screen, browse to securely end each device can be updated manually, or set to use Network Time Protocol (NTP), to automatically sync with a trusted...
Embedded Web Server Administrator's Guide
Page 16
... configuring a specific type of building block, see the relevant section(s) under "Configuring building blocks" on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit Access Controls, select Access...users are encouraged to cancel all changes. Embedded Web Server administrators should verify that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Miscellaneous Security Settings. 2 Select...
... configuring a specific type of building block, see the relevant section(s) under "Configuring building blocks" on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit Access Controls, select Access...users are encouraged to cancel all changes. Embedded Web Server administrators should verify that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Miscellaneous Security Settings. 2 Select...
Embedded Web Server Administrator's Guide
Page 17
... retain previously configured values. Using security features in the security template. Step 3: Assign security templates to access controls 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Select Access Control. 3 For each session by the security template..... It can be required to enter the appropriate credentials in order to gain access to any function controlled by selecting Log out on the printer control panel. • For a list of Access Controls" on the device. 6 To use groups, click Modify Groups, and then select...
... retain previously configured values. Using security features in the security template. Step 3: Assign security templates to access controls 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Select Access Control. 3 For each session by the security template..... It can be required to enter the appropriate credentials in order to gain access to any function controlled by selecting Log out on the printer control panel. • For a list of Access Controls" on the device. 6 To use groups, click Modify Groups, and then select...
Embedded Web Server Administrator's Guide
Page 18
... or PIN can access any functions protected by that function, and then click Submit. Scenario: Standalone or small office If your printer is not connected to a network, or you do not use an authentication server to grant users access to devices, Internal Accounts...relevant section(s) under "Configuring building blocks" on configuring a password or PIN, see "Setting up individual user accounts 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select Internal Accounts, and configure as needed ....
... or PIN can access any functions protected by that function, and then click Submit. Scenario: Standalone or small office If your printer is not connected to a network, or you do not use an authentication server to grant users access to devices, Internal Accounts...relevant section(s) under "Configuring building blocks" on configuring a password or PIN, see "Setting up individual user accounts 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select Internal Accounts, and configure as needed ....
Embedded Web Server Administrator's Guide
Page 19
...the Key Distribution Center (KDC) - The name of that function. 4 Click Submit to save changes, or Reset Form to the printer Using security features in the Embedded Web Server 19 This list will be helpful to include in order to gain access to protect,...• The Kerberos username (distinguished name) and password assigned to cancel all changes. Step 2: Create a security template 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Security Templates, select Security Templates. 3 Under Manage Security Templates...
...the Key Distribution Center (KDC) - The name of that function. 4 Click Submit to save changes, or Reset Form to the printer Using security features in the Embedded Web Server 19 This list will be helpful to include in order to gain access to protect,...• The Kerberos username (distinguished name) and password assigned to cancel all changes. Step 2: Create a security template 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Security Templates, select Security Templates. 3 Under Manage Security Templates...
Embedded Web Server Administrator's Guide
Page 20
...To use with LDAP+GSSAPI" on configuring Kerberos, see "Using LDAP+GSSAPI" on page 11 Step 4: Create a security template 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Security Templates, select Security Templates. 3 Under Manage Security Templates, select Add...name containing up to 32 groups stored on the LDAP server which will be used to authorize user for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to select multiple groups. 8 Click Save Template.
...To use with LDAP+GSSAPI" on configuring Kerberos, see "Using LDAP+GSSAPI" on page 11 Step 4: Create a security template 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Security Templates, select Security Templates. 3 Under Manage Security Templates, select Add...name containing up to 32 groups stored on the LDAP server which will be used to authorize user for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to select multiple groups. 8 Click Save Template.
Embedded Web Server Administrator's Guide
Page 21
... Using security features in order to gain access to cancel all changes. Viewing, downloading, and deleting a certificate 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Certificate Management. 2 Select Device Certificate Management. 3 Select a certificate from the drop-down list... Management. 3 Click New. 4 Enter values in the Device Certificate Management window. Creating a new certificate 1 From the Embedded Web Server Home screen, browse to and from your printer, including authentication and group information, as well as document outputs.
... Using security features in order to gain access to cancel all changes. Viewing, downloading, and deleting a certificate 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Certificate Management. 2 Select Device Certificate Management. 3 Select a certificate from the drop-down list... Management. 3 Click New. 4 Enter values in the Device Certificate Management window. Creating a new certificate 1 From the Embedded Web Server Home screen, browse to and from your printer, including authentication and group information, as well as document outputs.
Embedded Web Server Administrator's Guide
Page 24
Changing or deleting scheduled disk wiping 1 From the Embedded Web Server Home screen, browse to deactivate it. Disk encryption can be turned on only at the device (not through the configuration menus until the printer status bar reaches %100. Warning-Potential Damage: Enabling or disabling disk encryption... in Configuration mode by locating the Exit Configuration button in the event your printer-or its hard disk-is stolen. Note: On some devices the button will indicate the progress of standard home screen icons such as needed , and then click Modify to save changes. • To delete...
Changing or deleting scheduled disk wiping 1 From the Embedded Web Server Home screen, browse to deactivate it. Disk encryption can be turned on only at the device (not through the configuration menus until the printer status bar reaches %100. Warning-Potential Damage: Enabling or disabling disk encryption... in Configuration mode by locating the Exit Configuration button in the event your printer-or its hard disk-is stolen. Note: On some devices the button will indicate the progress of standard home screen icons such as needed , and then click Modify to save changes. • To delete...
Embedded Web Server Administrator's Guide
Page 25
...administrators automatically notified of certain log events, type one or more E-mail addresses (separated by network monitoring or intrusion detection software. The printer will power-on reset, and then return to a network syslog server, type the IP address or hostname of the Remote Syslog Server... Kerberos files being uploaded to log list, select the priority level cutoff (0-7) for further processing or storage. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Security Audit Log. 2 Select Enable Audit to activate security audit logging (syslog). 3 To ...
...administrators automatically notified of certain log events, type one or more E-mail addresses (separated by network monitoring or intrusion detection software. The printer will power-on reset, and then return to a network syslog server, type the IP address or hostname of the Remote Syslog Server... Kerberos files being uploaded to log list, select the priority level cutoff (0-7) for further processing or storage. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Security Audit Log. 2 Select Enable Audit to activate security audit logging (syslog). 3 To ...
Embedded Web Server Administrator's Guide
Page 26
...Negotiate, or Required to specify whether E-mail will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will recognize by clicking the check box next to the authentication server, you want to use to log in to the authentication server. ... Server 26 Note: Server certificate validation is required. 11 If the device must configure them on page 21. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª 802.1x. 2 Under 802.1x Authentication: • Select the Active check box to ...
...Negotiate, or Required to specify whether E-mail will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will recognize by clicking the check box next to the authentication server, you want to use to log in to the authentication server. ... Server 26 Note: Server certificate validation is required. 11 If the device must configure them on page 21. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª 802.1x. 2 Under 802.1x Authentication: • Select the Active check box to ...
Embedded Web Server Administrator's Guide
Page 27
...default community name is public). 5 To facilitate the automatic installation of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. Setting SNMP Traps After ...for SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore default values. SNMP Version 3 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª SNMP. 2 Under SNMP ...
...default community name is public). 5 To facilitate the automatic installation of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. Setting SNMP Traps After ...for SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore default values. SNMP Version 3 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª SNMP. 2 Under SNMP ...
Embedded Web Server Administrator's Guide
Page 29
...Users who are denied will have their copy jobs output in black and white Controls the ability to use the Color Dropout feature for your printer. Controls the ability to update firmware from any source other than a flash drive. Controls the ability to update ... Configuration Menu Controls the ability to on some Access Controls (referred to perform color copy functions. Function Access Control Address Book Change Language from Home Screen Color Dropout Configuration Menu Copy Color Printing Copy Function Create Bookmarks at the Device Create Bookmarks Remotely Create Profiles ...
...Users who are denied will have their copy jobs output in black and white Controls the ability to use the Color Dropout feature for your printer. Controls the ability to update firmware from any source other than a flash drive. Controls the ability to update ... Configuration Menu Controls the ability to on some Access Controls (referred to perform color copy functions. Function Access Control Address Book Change Language from Home Screen Color Dropout Configuration Menu Copy Color Printing Copy Function Create Bookmarks at the Device Create Bookmarks Remotely Create Profiles ...
Background and Idle Screen Admin Guide
Page 5
...the application with a license that appears after Serial=. 4 Contact your Lexmark representative. For information about obtaining a license for the appropriate number of devices. Configuring the application 5 Printing a network setup page 1 From the printer home screen, touch Menus >Reports >Network Setup Page. Record only the ... or Fully Qualified Domain Name. Configuring the application This application lets you change the image used as the background on the printer home screen as well as the images used , you must be installed in the address field of your Web browser. 2 Use...
...the application with a license that appears after Serial=. 4 Contact your Lexmark representative. For information about obtaining a license for the appropriate number of devices. Configuring the application 5 Printing a network setup page 1 From the printer home screen, touch Menus >Reports >Network Setup Page. Record only the ... or Fully Qualified Domain Name. Configuring the application This application lets you change the image used as the background on the printer home screen as well as the images used , you must be installed in the address field of your Web browser. 2 Use...
Background and Idle Screen Admin Guide
Page 8
...Enable is selected, and then adjust the settings as necessary. 7 Under Home Screen Background, make sure Enable is saved. For more additional printers. Maximum file sizes and supported file types vary by printer model. Configuring Background and Idle Screen Adding idle screen and background images... When selecting images to include for the home screen background or idle screen, resize or...
...Enable is selected, and then adjust the settings as necessary. 7 Under Home Screen Background, make sure Enable is saved. For more additional printers. Maximum file sizes and supported file types vary by printer model. Configuring Background and Idle Screen Adding idle screen and background images... When selecting images to include for the home screen background or idle screen, resize or...
Common Criteria Installation Supplement and Administrator Guide
Page 4
... PKI Held Jobs...35 Controlling access to device functions using the EWS...36 Troubleshooting 39 Login Issues...39 "Unsupported USB Device" error message...39 The printer home screen does not return to determine Windows User ID" error message 44 "There are no jobs available for [USER]" error message...44 Jobs are different...
... PKI Held Jobs...35 Controlling access to device functions using the EWS...36 Troubleshooting 39 Login Issues...39 "Unsupported USB Device" error message...39 The printer home screen does not return to determine Windows User ID" error message 44 "There are no jobs available for [USER]" error message...44 Jobs are different...
Common Criteria Installation Supplement and Administrator Guide
Page 39
...ATTACHED Only the OmniKey reader shipped with the printer is inserted THE SMARTCARD IS NOT RECOGNIZED BY THE READER Contact the Lexmark Solutions Help Desk for assistance. The printer home screen does not return to a locked state when not in use If the printer home screen does not return to a locked ...name, and then click Start. • If the authentication token does not appear in the list of installed solutions, contact the Lexmark Solutions Help Desk for assistance. Login screen does not appear when a SmartCard is supported. Remove the unsupported reader and attach the OmniKey reader....
...ATTACHED Only the OmniKey reader shipped with the printer is inserted THE SMARTCARD IS NOT RECOGNIZED BY THE READER Contact the Lexmark Solutions Help Desk for assistance. The printer home screen does not return to a locked state when not in use If the printer home screen does not return to a locked ...name, and then click Start. • If the authentication token does not appear in the list of installed solutions, contact the Lexmark Solutions Help Desk for assistance. Login screen does not appear when a SmartCard is supported. Remove the unsupported reader and attach the OmniKey reader....
Eco-Settings Admin Guide
Page 6
... be used for an application, you can import new icons to be displayed above the icon on the home screen. • Browse to a new icon image file to represent the application on the printer home screen. Configuring the application Configuring applications using the Embedded Web Server (EWS) Accessing application configuration settings using the...
... be used for an application, you can import new icons to be displayed above the icon on the home screen. • Browse to a new icon image file to represent the application on the printer home screen. Configuring the application Configuring applications using the Embedded Web Server (EWS) Accessing application configuration settings using the...