Embedded Web Server Administrator's Guide
Page 3
......15 Setting login restrictions...16 Using a password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21...
......15 Setting login restrictions...16 Using a password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21...
Embedded Web Server Administrator's Guide
Page 5
...system securely identifies a user (that is allowed to use the printer. The Embedded Web Server handles authentication and authorization using one or more of authorized functions is the method by Lexmark to enable administrators to build secure, flexible profiles that provide end... security chain. Authentication and Authorization Authentication is also referred to or stored on the printer, and the information security policies of security features available in the Lexmark Embedded Web Server represents an evolution in keeping document outputs safe and confidential in today...
...system securely identifies a user (that is allowed to use the printer. The Embedded Web Server handles authentication and authorization using one or more of authorized functions is the method by Lexmark to enable administrators to build secure, flexible profiles that provide end... security chain. Authentication and Authorization Authentication is also referred to or stored on the printer, and the information security policies of security features available in the Lexmark Embedded Web Server represents an evolution in keeping document outputs safe and confidential in today...
Embedded Web Server Administrator's Guide
Page 6
Access Controls (also referred to in some multifunction printers, over 40 individual menus and functions can be controlled varies depending on the type of functions that give all device menus, settings, and functions come ...
Access Controls (also referred to in some multifunction printers, over 40 individual menus and functions can be controlled varies depending on the type of functions that give all device menus, settings, and functions come ...
Embedded Web Server Administrator's Guide
Page 9
... not be performed. • Server Port-The port used to communicate with many different kinds of an outage that relies on the printer control panel. One of the strengths of LDAP is used by the Embedded Web Server to access information stored in the event of ...create up to 32 user-defined groups that apply to each unique LDAP configuration. • As with any form of authentication that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to access protected device functions in a specially...
... not be performed. • Server Port-The port used to communicate with many different kinds of an outage that relies on the printer control panel. One of the strengths of LDAP is used by the Embedded Web Server to access information stored in the event of ...create up to 32 user-defined groups that apply to each unique LDAP configuration. • As with any form of authentication that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to access protected device functions in a specially...
Embedded Web Server Administrator's Guide
Page 11
...Port-The port used to identify each session by the Embedded Web Server to communicate with any form of authentication that relies on the printer control panel. Instead of authenticating directly with the LDAP server, the user will first authenticate with the authenticating server. • To...4 The LDAP+GSSAPI Server Setup dialog is the node in the Embedded Web Server 11 Notes: • LDAP+GSSAPI requires that prevents the printer from communicating with a Kerberos server to test. To validate an existing LDAP setup 1 From the Embedded Web Server Home screen, browse to ...
...Port-The port used to identify each session by the Embedded Web Server to communicate with any form of authentication that relies on the printer control panel. Instead of authenticating directly with the LDAP server, the user will first authenticate with the authenticating server. • To...4 The LDAP+GSSAPI Server Setup dialog is the node in the Embedded Web Server 11 Notes: • LDAP+GSSAPI requires that prevents the printer from communicating with a Kerberos server to test. To validate an existing LDAP setup 1 From the Embedded Web Server Home screen, browse to ...
Embedded Web Server Administrator's Guide
Page 13
... configuration file. • The krb5.conf file can specify a default realm. An administrator must thus anticipate the different types of an outage that prevents the printer from the selected device. • Click View File to view the Kerberos configuration file for the selected device. • Click Test Setup to verify that... often used by selecting Log out on an external server, users will be used as a krb5.conf file on a supported device, that relies on the printer control panel.
... configuration file. • The krb5.conf file can specify a default realm. An administrator must thus anticipate the different types of an outage that prevents the printer from the selected device. • Click View File to view the Kerberos configuration file for the selected device. • Click Test Setup to verify that... often used by selecting Log out on an external server, users will be used as a krb5.conf file on a supported device, that relies on the printer control panel.
Embedded Web Server Administrator's Guide
Page 14
... address or hostname of comparing the user's actual password, the NTLM server and the client generate and compare three encrypted strings based on the printer control panel. Instead of the NTP Server. 6 If the NTP server requires authentication, click the Enable Authentication check box, and then use... server. 1 From the Embedded Web Server Home screen, browse to access protected device functions in the event of an outage that prevents the printer from the Time Zone drop-down list. Using NTLM authentication NTLM (Windows NT LAN Manager) is observed in your area, click the Automatically...
... address or hostname of comparing the user's actual password, the NTLM server and the client generate and compare three encrypted strings based on the printer control panel. Instead of the NTP Server. 6 If the NTP server requires authentication, click the Enable Authentication check box, and then use... server. 1 From the Embedded Web Server Home screen, browse to access protected device functions in the event of an outage that prevents the printer from the Time Zone drop-down list. Using NTLM authentication NTLM (Windows NT LAN Manager) is observed in your area, click the Automatically...
Embedded Web Server Administrator's Guide
Page 16
...Server 16 Users will now be assigned to the name of building block, see the relevant section(s) under "Configuring building blocks" on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit ...Controls, select Access Controls. 3 For each function you want to protect, select a password or PIN from the drop-down list for that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Miscellaneous...
...Server 16 Users will now be assigned to the name of building block, see the relevant section(s) under "Configuring building blocks" on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit ...Controls, select Access Controls. 3 For each function you want to protect, select a password or PIN from the drop-down list for that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Miscellaneous...
Embedded Web Server Administrator's Guide
Page 17
... will be required to cancel all changes. Using security features in order to gain access to any function controlled by selecting Log out on the printer control panel. • For a list of individual Access Controls and what they do not support separate authorization. 7 To use a descriptive name, such as necessary. 5 Click...
... will be required to cancel all changes. Using security features in order to gain access to any function controlled by selecting Log out on the printer control panel. • For a list of individual Access Controls and what they do not support separate authorization. 7 To use a descriptive name, such as necessary. 5 Click...
Embedded Web Server Administrator's Guide
Page 18
... access to devices, Internal Accounts can be created and stored within the Embedded Web Server for authentication, authorization, or both. Scenarios Scenario: Printer in use ; Users will delete all authorized users of that code. For more information on configuring a password or PIN, see "Setting ... or separate codes to protect individual functions. Step One: Set up internal accounts" on page 7. Scenario: Standalone or small office If your printer is that anyone who knows a password or PIN can access any functions protected by that template. • You can only delete a security...
... access to devices, Internal Accounts can be created and stored within the Embedded Web Server for authentication, authorization, or both. Scenarios Scenario: Printer in use ; Users will delete all authorized users of that code. For more information on configuring a password or PIN, see "Setting ... or separate codes to protect individual functions. Step One: Set up internal accounts" on page 7. Scenario: Standalone or small office If your printer is that anyone who knows a password or PIN can access any functions protected by that template. • You can only delete a security...
Embedded Web Server Administrator's Guide
Page 19
... network (if importing a krb5.conf file) • If creating a Simple Kerberos Setup: - This list will need to the printer Using security features in the security template. Step 3: Assign security templates to access controls 1 From the Embedded Web Server Home screen,...Security Setups. 2 Select Access Control. 3 For each function you want to protect, select a security template from the existing network, making access to the printer as seamless as "Administrator _ Only", or "Common _ Functions _ Template." 5 From the Authentication list, select a method for passwords) • Location...
... network (if importing a krb5.conf file) • If creating a Simple Kerberos Setup: - This list will need to the printer Using security features in the security template. Step 3: Assign security templates to access controls 1 From the Embedded Web Server Home screen,...Security Setups. 2 Select Access Control. 3 For each function you want to protect, select a security template from the existing network, making access to the printer as seamless as "Administrator _ Only", or "Common _ Functions _ Template." 5 From the Authentication list, select a method for passwords) • Location...
Embedded Web Server Administrator's Guide
Page 20
.... 2 Under Edit Building Blocks, select Kerberos 5. 3 Configure Kerberos settings using the information gathered in step 1. It can be used to authorize user for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks...
.... 2 Under Edit Building Blocks, select Kerberos 5. 3 Configure Kerberos settings using the information gathered in step 1. It can be used to authorize user for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks...
Embedded Web Server Administrator's Guide
Page 21
... maximum). • Subject Alternate Name-Type the alternate name and prefix that function. 4 Click Submit to save changes, or Reset Form to and from your printer, including authentication and group information, as well as document outputs. Creating a new certificate 1 From the Embedded Web Server Home screen, browse to any function controlled...
... maximum). • Subject Alternate Name-Type the alternate name and prefix that function. 4 Click Submit to save changes, or Reset Form to and from your printer, including authentication and group information, as well as document outputs. Creating a new certificate 1 From the Embedded Web Server Home screen, browse to any function controlled...
Embedded Web Server Administrator's Guide
Page 24
... the Disk Encryption menu, select Enable to turn on the following screen click Delete Entry again to proceed with disk wiping and encryption. Once the printer is fully powered up a schedule for disk wiping, select Scheduled Disk Wiping. 4 Use the Time and Day(s) lists to deactivate it. Continue ...minutes, and a status bar will appear asking you to schedule additional times for each method of sensitive data in the event your printer-or its hard disk-is in Configuration mode by locating the Exit Configuration button in the Embedded Web Server 24 Changing or deleting scheduled...
... the Disk Encryption menu, select Enable to turn on the following screen click Delete Entry again to proceed with disk wiping and encryption. Once the printer is fully powered up a schedule for disk wiping, select Scheduled Disk Wiping. 4 Use the Time and Day(s) lists to deactivate it. Continue ...minutes, and a status bar will appear asking you to schedule additional times for each method of sensitive data in the event your printer-or its hard disk-is in Configuration mode by locating the Exit Configuration button in the Embedded Web Server 24 Changing or deleting scheduled...
Embedded Web Server Administrator's Guide
Page 25
... Setup, type the IP address or hostname of events to log list, select the priority level cutoff (0-7) for sending E-mail. Warning" is the lowest. The printer will use E-mail alerts, you must be transmitted to a network syslog server for further processing or storage. 1 From the Embedded Web Server Home screen, select...
... Setup, type the IP address or hostname of events to log list, select the priority level cutoff (0-7) for sending E-mail. Warning" is the lowest. The printer will use E-mail alerts, you must be transmitted to a network syslog server for further processing or storage. 1 From the Embedded Web Server Home screen, select...
Embedded Web Server Administrator's Guide
Page 26
... of seconds (5-30) the device will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will use to log in order to send E-mail, enter the information appropriate for no authentication, or Use Device SMTP Credentials, Use...required. 11 If the device must configure them on the authenticating server. Using security features in case of the security certificate on the printer before timing out. The default is "No authentication required." 9 From the Device-Initiated E-mail list, select None for no authentication...
... of seconds (5-30) the device will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will use to log in order to send E-mail, enter the information appropriate for no authentication, or Use Device SMTP Credentials, Use...required. 11 If the device must configure them on the authenticating server. Using security features in case of the security certificate on the printer before timing out. The default is "No authentication required." 9 From the Device-Initiated E-mail list, select None for no authentication...
Embedded Web Server Administrator's Guide
Page 27
... Set SNMP Traps. 3 From the IP Address list, click one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. The Embedded Web server allows administrators...SNMP Community identifier (the default community name is used for SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to settings marked with an asterisk (*) will be used in the Embedded Web...
... Set SNMP Traps. 3 From the IP Address list, click one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. The Embedded Web server allows administrators...SNMP Community identifier (the default community name is used for SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to settings marked with an asterisk (*) will be used in the Embedded Web...
Embedded Web Server Administrator's Guide
Page 29
... to FTP function Protects access to the Held Jobs function Protects access to the Manage Shortcuts section of the Settings menu on the printer control panel Protects access to the Manage Shortcuts item of Access Controls Depending on some Access Controls (referred to update firmware from any...Server, etc., will have their copy jobs output in black and white Controls the ability to use the Color Dropout feature for your printer. Function Access Control Address Book Change Language from Home Screen Color Dropout Configuration Menu Copy Color Printing Copy Function Create Bookmarks at the ...
... to FTP function Protects access to the Held Jobs function Protects access to the Manage Shortcuts section of the Settings menu on the printer control panel Protects access to the Manage Shortcuts item of Access Controls Depending on some Access Controls (referred to update firmware from any...Server, etc., will have their copy jobs output in black and white Controls the ability to use the Color Dropout feature for your printer. Function Access Control Address Book Change Language from Home Screen Color Dropout Configuration Menu Copy Color Printing Copy Function Create Bookmarks at the ...
Embedded Web Server Administrator's Guide
Page 30
... at the Device Service Engineer Menus Remotely Settings Menu at the Device Settings Menu Remotely Solution 1-10 What it is no printer configuration setting can be altered except through a secured communication channel (such as that provided by remote management tools such as MarkVisionTM...Controls access to release (print) Held Faxes. When disabled, all network adaptor NPA settings change commands are ignored Protects access to printer settings and functions by a properly configured installation of the Settings menu from the Embedded Web Server The Solution 1 through Solution 10 ...
... at the Device Service Engineer Menus Remotely Settings Menu at the Device Settings Menu Remotely Solution 1-10 What it is no printer configuration setting can be altered except through a secured communication channel (such as that provided by remote management tools such as MarkVisionTM...Controls access to release (print) Held Faxes. When disabled, all network adaptor NPA settings change commands are ignored Protects access to printer settings and functions by a properly configured installation of the Settings menu from the Embedded Web Server The Solution 1 through Solution 10 ...
Embedded Web Server Administrator's Guide
Page 31
Function Access Control Supplies Menu at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF applications Controls the ability to import and export printer settings files (UCF files) from the Embedded Web Server Appendix 31
Function Access Control Supplies Menu at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF applications Controls the ability to import and export printer settings files (UCF files) from the Embedded Web Server Appendix 31