Embedded Web Server Administrator's Guide
Page 3
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
Embedded Web Server Administrator's Guide
Page 6
...either the Internal accounts or LDAP/LDAP+GSSAPI building blocks. In order to accommodate users in association with Groups Authentication and authorization Password Authorization only PIN Authorization only Each device can support up to 32 groups to similar functions. Using security features in ways that... printing, copying, and faxing, administrators must be able to combine these components in the Embedded Web Server 6 Access Controls By default, all users the functions they need to only authorized users. Access controls can be used to manage access to specific menus and...
...either the Internal accounts or LDAP/LDAP+GSSAPI building blocks. In order to accommodate users in association with Groups Authentication and authorization Password Authorization only PIN Authorization only Each device can support up to 32 groups to similar functions. Using security features in ways that... printing, copying, and faxing, administrators must be able to combine these components in the Embedded Web Server 6 Access Controls By default, all users the functions they need to only authorized users. Access controls can be used to manage access to specific menus and...
Embedded Web Server Administrator's Guide
Page 7
... the list, whether they are used as administrator-level. Notes: • To edit a password, select a password from the list, and then modify the settings. • To delete a password, select a password from the list and then click Delete Entry. Note: The default PIN length is protected by requiring a user to type a correct PIN to confirm it...
... the list, whether they are used as administrator-level. Notes: • To edit a password, select a password from the list, and then modify the settings. • To delete a password, select a password from the list and then click Delete Entry. Note: The default PIN length is protected by requiring a user to type a correct PIN to confirm it...
Embedded Web Server Administrator's Guide
Page 9
The default LDAP port is 389. • Use SSL/TLS-From the drop-down menu select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security), or TLS. • Userid Attribute-Type either User ID or User ID and Password to specify the information a user must have a unique name. • Administrators can create up...
The default LDAP port is 389. • Use SSL/TLS-From the drop-down menu select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security), or TLS. • Userid Attribute-Type either User ID or User ID and Password to specify the information a user must have a unique name. • Administrators can create up...
Embedded Web Server Administrator's Guide
Page 14
...template. • As with any form of authentication that prevents the printer from the Time Zone list will not be able to restore default values. An administrator can store only one used as needed. 5 To sync to an NTP server rather than manage date and time ...NTLM (Windows NT LAN Manager) is Microsoft's solution for enabling authentication without requiring the transmission of an outage that relies on the user's password. Using security features in a security template only after a supported device has registered with a trusted clock-typically the same one NTLM configuration ...
...template. • As with any form of authentication that prevents the printer from the Time Zone list will not be able to restore default values. An administrator can store only one used as needed. 5 To sync to an NTP server rather than manage date and time ...NTLM (Windows NT LAN Manager) is Microsoft's solution for enabling authentication without requiring the transmission of an outage that relies on the user's password. Using security features in a security template only after a supported device has registered with a trusted clock-typically the same one NTLM configuration ...
Embedded Web Server Administrator's Guide
Page 15
... Web Server administrators to Settings ª Security ª Edit Security Setups. 2 Under Edit Backup Password, select Backup Password. 3 Select the Use Backup Password box, and then type and re-enter the password. 4 Click Submit. Using security features in the Default User Domain field, and then click Register Domain to access additional configuration settings. 5 On the...
... Web Server administrators to Settings ª Security ª Edit Security Setups. 2 Under Edit Backup Password, select Backup Password. 3 Select the Use Backup Password box, and then type and re-enter the password. 4 Click Submit. Using security features in the Default User Domain field, and then click Register Domain to access additional configuration settings. 5 On the...
Embedded Web Server Administrator's Guide
Page 16
...function. Users will now be logged in order to gain access to specific device functions using a password or PIN. Using security features in which individual users are encouraged to restore default values. For simple authorization-level security (in the Embedded Web Server 16 Note: To help ...Click Submit to save changes, or Reset Form to cancel all changes. Using a password or PIN to control function access Each Access Control (or Function Access Control), can be set to require No Security (the default), or to use any function controlled by selecting Log out on page 7. Using...
...function. Users will now be logged in order to gain access to specific device functions using a password or PIN. Using security features in which individual users are encouraged to restore default values. For simple authorization-level security (in the Embedded Web Server 16 Note: To help ...Click Submit to save changes, or Reset Form to cancel all changes. Using a password or PIN to control function access Each Access Control (or Function Access Control), can be set to require No Security (the default), or to use any function controlled by selecting Log out on page 7. Using...
Embedded Web Server Administrator's Guide
Page 26
...default is 30 seconds. 6 To receive responses to messages sent from the printer (in to the authentication server. • Select the Validate Server Certificate check box to send E-mail, enter the information appropriate for no authentication, or Use Device SMTP Credentials, Use Session User ID and Password, Use Session E-mail address and Password...1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will wait for that server. 5 For SMTP Timeout, type the number of the security certificate on the ...
...default is 30 seconds. 6 To receive responses to messages sent from the printer (in to the authentication server. • Select the Validate Server Certificate check box to send E-mail, enter the information appropriate for no authentication, or Use Device SMTP Credentials, Use Session User ID and Password, Use Session E-mail address and Password...1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will wait for that server. 5 For SMTP Timeout, type the number of the security certificate on the ...
Embedded Web Server Administrator's Guide
Page 27
... the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore default values. The Embedded Web server allows administrators to configure settings for conditions that trigger an alert message. 1 From the Embedded Web Server... 2 Under SNMP Version 3, select the Enabled check box. 3 To allow device monitoring only, type an SNMPv3 Read Only User name and Password in the Embedded Web Server 27 Setting SNMP Traps After configuring SNMP Version 1, 2c or SNMP Version 3, you can further customize which authentication ...
... the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore default values. The Embedded Web server allows administrators to configure settings for conditions that trigger an alert message. 1 From the Embedded Web Server... 2 Under SNMP Version 3, select the Enabled check box. 3 To allow device monitoring only, type an SNMPv3 Read Only User name and Password in the Embedded Web Server 27 Setting SNMP Traps After configuring SNMP Version 1, 2c or SNMP Version 3, you can further customize which authentication ...
Embedded Web Server Administrator's Guide
Page 28
... all security menus-use with caution), Access controls = "No security" (to remove security only from function access controls), or Reset factory security defaults (to return all security settings to default values). 3 Click Submit to save changes, or Reset Form to clear all fields. Warning-Potential Damage: If "No Effect" is chosen and...
... all security menus-use with caution), Access controls = "No security" (to remove security only from function access controls), or Reset factory security defaults (to return all security settings to default values). 3 Click Submit to save changes, or Reset Form to clear all fields. Warning-Potential Damage: If "No Effect" is chosen and...
Embedded Web Server Administrator's Guide
Page 40
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
Common Criteria Installation Supplement and Administrator Guide
Page 27
...takes approximately a minute to reset the security settings on the device. Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on . Under the evaluated configuration, three options are required to login to devices... MFP from the evaluated configuration. 1 From the home screen, touch Menus > Security > Miscellaneous Security Settings. 2 For Security Reset Jumper, scroll to select No Security (to remove security only from function access controls), Reset to Defaults (to return all security settings to default ...
...takes approximately a minute to reset the security settings on the device. Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on . Under the evaluated configuration, three options are required to login to devices... MFP from the evaluated configuration. 1 From the home screen, touch Menus > Security > Miscellaneous Security Settings. 2 For Security Reset Jumper, scroll to select No Security (to remove security only from function access controls), Reset to Defaults (to return all security settings to default ...
Common Criteria Installation Supplement and Administrator Guide
Page 30
... security templates. 4 For Server Address, type the IP address or hostname of the print server(s). • MFP Password-Type the Kerberos password for those groups under the Group Search Base list. The default LDAP port is 389. • Use SSL/TLS-Select None, SSL/TLS (Secure Sockets Layer/Transport Layer ...Security), or TLS. • Userid Attribute-Specify either User ID and Password or User ID to specify which credentials a user must...
... security templates. 4 For Server Address, type the IP address or hostname of the print server(s). • MFP Password-Type the Kerberos password for those groups under the Group Search Base list. The default LDAP port is 389. • Use SSL/TLS-Select None, SSL/TLS (Secure Sockets Layer/Transport Layer ...Security), or TLS. • Userid Attribute-Specify either User ID and Password or User ID to specify which credentials a user must...
Common Criteria Installation Supplement and Administrator Guide
Page 31
... Use SSL/TLS-Select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security), or TLS. • Userid Attribute-Specify either sAMAccountName (the default), uid, userid, user-defined, or cn (common name). • Search Base-The node in the LDAP server where user accounts reside. When... Server Setup when creating security templates. • Server Address-The IP address or the hostname of the print server(s). • MFP Password-The Kerberos password for group, and Group Identifier must be performed. • Server Port-Used to device functions. 31 The distinguished name of the...
... Use SSL/TLS-Select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security), or TLS. • Userid Attribute-Specify either sAMAccountName (the default), uid, userid, user-defined, or cn (common name). • Search Base-The node in the LDAP server where user accounts reside. When... Server Setup when creating security templates. • Server Address-The IP address or the hostname of the print server(s). • MFP Password-The Kerberos password for group, and Group Identifier must be performed. • Server Port-Used to device functions. 31 The distinguished name of the...
IPDS Emulation User's Guide
Page 45
...flash memory. To capture resources, remove the password protection, capture the resources, and password protect the disk again. If the flash is password protected, no resources will be printed; To capture resources, remove the password protection, capture the resources, and password protect the flash again. 45 This saves...font or data object eligible for further details. Save To Flash Capture resources and store them on page 17. If the disk is password protected, no resources will be captured. This setting displays only if a flash is installed. The selected value for each of the ...
...flash memory. To capture resources, remove the password protection, capture the resources, and password protect the disk again. If the flash is password protected, no resources will be printed; To capture resources, remove the password protection, capture the resources, and password protect the flash again. 45 This saves...font or data object eligible for further details. Save To Flash Capture resources and store them on page 17. If the disk is password protected, no resources will be captured. This setting displays only if a flash is installed. The selected value for each of the ...
PKI-Enabled Device Installation and Configuration Guide
Page 11
...Use Device SMTP Credentials. Suggestion: "Scanned Document". 3 Type a default Message to be displayed in order to send E-mail, enter the appropriate information under Device Credentials. 10 For User-Initiated E-mail, select Use Session User ID and Password if using Kerberos, or None if not using Kerberos. 11 Click ... is off, but it will always receive a copy of E-mail messages they send from the printer. 5 Continue to E-mail Settings to set scan defaults, or click Submit to send themselves a copy of E-mail messages they send from the printer: • Never appears-The "Send me a copy"...
...Use Device SMTP Credentials. Suggestion: "Scanned Document". 3 Type a default Message to be displayed in order to send E-mail, enter the appropriate information under Device Credentials. 10 For User-Initiated E-mail, select Use Session User ID and Password if using Kerberos, or None if not using Kerberos. 11 Click ... is off, but it will always receive a copy of E-mail messages they send from the printer. 5 Continue to E-mail Settings to set scan defaults, or click Submit to send themselves a copy of E-mail messages they send from the printer: • Never appears-The "Send me a copy"...
PKI-Enabled Device Installation and Configuration Guide
Page 12
...authentication mechanism, and supports user authorization to separate multiple entries. The most commonly-used values are: Non-SSL connections-Port 389 (the default setting on the printer) SSL connections-Port 636 Non-SSL Global Catalog-Port 3268 SSL Global Catalog-Port 3269 4 Select whether or ...2 For Logon Type, select whether users can access the printer using Card Only (SmartCard), Card or Manual Login, or Manual Login Only (userid/password). 3 Select whether Card Pin must be used when querying the LDAP directory. Logon screen The logon screen contains text and a graphic prompting the...
...authentication mechanism, and supports user authorization to separate multiple entries. The most commonly-used values are: Non-SSL connections-Port 389 (the default setting on the printer) SSL connections-Port 636 Non-SSL Global Catalog-Port 3268 SSL Global Catalog-Port 3269 4 Select whether or ...2 For Logon Type, select whether users can access the printer using Card Only (SmartCard), Card or Manual Login, or Manual Login Only (userid/password). 3 Select whether Card Pin must be used when querying the LDAP directory. Logon screen The logon screen contains text and a graphic prompting the...
Scan to Network and Scan to Network Premium Administrator's Guide
Page 15
...printer touch screen. • Prompt Text-This is the maximum value users will be allowed to enter in response to the Prompt Text. • Password (Mask Characters)-If set to users. Choose True or False. Users can keep this response or create their own. • Minimum-This is ...the user on the printer touch screen. • Prompt Text-This is the text that will appear on the printer touch screen. • Default Value-Type a default value for the prompt response. Message Deliver a message on the printer touch screen. • Items-This is the maximum number of choices that...
...printer touch screen. • Prompt Text-This is the maximum value users will be allowed to enter in response to the Prompt Text. • Password (Mask Characters)-If set to users. Choose True or False. Users can keep this response or create their own. • Minimum-This is ...the user on the printer touch screen. • Prompt Text-This is the text that will appear on the printer touch screen. • Default Value-Type a default value for the prompt response. Message Deliver a message on the printer touch screen. • Items-This is the maximum number of choices that...
Scan to Network and Scan to Network Premium Administrator's Guide
Page 18
... Settings Network/Ports TCP/IP. 2 In the Domain Search Order box, type the names of the print server(s). • MFP's Password- For more additional printers. The search base used to 300 seconds. • Use user credentials- 4 Configure or verify the following settings: •...The mail attribute of the LDAP server. • Search Base- The default port is 389. • Use SSL/TLS- Configuring the application 18 Can be from 5 to configure that application on your Lexmark representative. The distinguished name of all domains found on one or more information...
... Settings Network/Ports TCP/IP. 2 In the Domain Search Order box, type the names of the print server(s). • MFP's Password- For more additional printers. The search base used to 300 seconds. • Use user credentials- 4 Configure or verify the following settings: •...The mail attribute of the LDAP server. • Search Base- The default port is 389. • Use SSL/TLS- Configuring the application 18 Can be from 5 to configure that application on your Lexmark representative. The distinguished name of all domains found on one or more information...
Universal Print Driver Version 2.0 White Paper
Page 21
The Print and Hold tab is available only on the allowed digits for the user's Windows ID and submit the ID as the default user name associated with a four‑digit personal identification number (PIN). The PIN is printed. Print the first copy of security for inspection. ...appropriate Print and Hold tab option. The Print and Hold tab provides varying levels of a complex multiple‑copy print job for held jobs. Password‑protect confidential print jobs with the held print job. Use Use a different overlay on the first page Use a different overlay on odd/even...
The Print and Hold tab is available only on the allowed digits for the user's Windows ID and submit the ID as the default user name associated with a four‑digit personal identification number (PIN). The PIN is printed. Print the first copy of security for inspection. ...appropriate Print and Hold tab option. The Print and Hold tab provides varying levels of a complex multiple‑copy print job for held jobs. Password‑protect confidential print jobs with the held print job. Use Use a different overlay on the first page Use a different overlay on odd/even...