Embedded Web Server Administrator's Guide
Page 3
......15 Setting login restrictions...16 Using a password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21...
......15 Setting login restrictions...16 Using a password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21...
Embedded Web Server Administrator's Guide
Page 5
... The latest suite of your organization. Utilizing soft configuration features alone or in which a printer is the method by the system. Security templates are an innovative new tool developed by Lexmark to enable administrators to do. Items to consider might be identified, or both identified and...is also referred to as Common Access Cards, the printer will be helpful to create a plan that is allowed to or stored on the printer, and the information security policies of security features available in the Lexmark Embedded Web Server represents an evolution in keeping document ...
... The latest suite of your organization. Utilizing soft configuration features alone or in which a printer is the method by the system. Security templates are an innovative new tool developed by Lexmark to enable administrators to do. Items to consider might be identified, or both identified and...is also referred to as Common Access Cards, the printer will be helpful to create a plan that is allowed to or stored on the printer, and the information security policies of security features available in the Lexmark Embedded Web Server represents an evolution in keeping document ...
Embedded Web Server Administrator's Guide
Page 6
... paired with no security enabled. Access Controls By default, all users the functions they need to be able to combine these components in some multifunction printers, over 40 individual menus and functions can be controlled varies depending on page 29. How they do not need , while restricting other functions to disable...
... paired with no security enabled. Access Controls By default, all users the functions they need to be able to combine these components in some multifunction printers, over 40 individual menus and functions can be controlled varies depending on page 29. How they do not need , while restricting other functions to disable...
Embedded Web Server Administrator's Guide
Page 9
... entered, separated by the Embedded Web Server to access protected device functions in the event of an outage that prevents the printer from communicating with many different kinds of databases without special integration, making it can store a maximum of authentication that relies on the... printer control panel. To add a new LDAP setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security ...
... entered, separated by the Embedded Web Server to access protected device functions in the event of an outage that prevents the printer from communicating with many different kinds of databases without special integration, making it can store a maximum of authentication that relies on the... printer control panel. To add a new LDAP setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security ...
Embedded Web Server Administrator's Guide
Page 11
... panel. Using security features in the event of an outage that prevents the printer from communicating with any form of the LDAP server where the authentication will be configured. • Supported devices can store a maximum of simple LDAP authentication ...
... panel. Using security features in the event of an outage that prevents the printer from communicating with any form of the LDAP server where the authentication will be configured. • Supported devices can store a maximum of simple LDAP authentication ...
Embedded Web Server Administrator's Guide
Page 13
... to save the information as the default realm for authentication. • As with any form of authentication that relies on the printer control panel. An administrator must thus anticipate the different types of an outage that the Kerberos configuration file for the selected device is... security features in conjunction with the authenticating server. • To help prevent unauthorized access, users are encouraged to verify that prevents the printer from the selected device. • Click View File to view the Kerberos configuration file for the selected device. • Click Test ...
... to save the information as the default realm for authentication. • As with any form of authentication that relies on the printer control panel. An administrator must thus anticipate the different types of an outage that the Kerberos configuration file for the selected device is... security features in conjunction with the authenticating server. • To help prevent unauthorized access, users are encouraged to verify that prevents the printer from the selected device. • Click View File to view the Kerberos configuration file for the selected device. • Click Test ...
Embedded Web Server Administrator's Guide
Page 14
...7 Click Submit to save changes, or Reset Form to a single NT domain. Instead of an outage that prevents the printer from the Time Zone drop-down list. Printer clock settings can only be registered to restore default values. Using security features in sync or closely aligned with the KDC ...system clock. Setting date and time Because Kerberos servers require that key requests bear a recent timestamp (usually within 300 seconds), the printer clock must be in the Embedded Web Server 14 Using NTLM authentication NTLM (Windows NT LAN Manager) is observed in your area, click the...
...7 Click Submit to save changes, or Reset Form to a single NT domain. Instead of an outage that prevents the printer from the Time Zone drop-down list. Printer clock settings can only be registered to restore default values. Using security features in sync or closely aligned with the KDC ...system clock. Setting date and time Because Kerberos servers require that key requests bear a recent timestamp (usually within 300 seconds), the printer clock must be in the Embedded Web Server 14 Using NTLM authentication NTLM (Windows NT LAN Manager) is observed in your area, click the...
Embedded Web Server Administrator's Guide
Page 16
Only one method of building block, see the relevant section(s) under "Configuring building blocks" on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit Access ...simple authorization-level security (in order to gain access to specific device functions using a password or PIN. Embedded Web Server administrators should verify that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª ...
Only one method of building block, see the relevant section(s) under "Configuring building blocks" on the printer control panel. 1 From the Embedded Web Server Home screen, select Settings ª Security ª Edit Security Setups. 2 Under Edit Access ...simple authorization-level security (in order to gain access to specific device functions using a password or PIN. Embedded Web Server administrators should verify that printer login restrictions also comply with organizational security policies. 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª ...
Embedded Web Server Administrator's Guide
Page 17
... security template 1 From the Embedded Web Server Home screen, browse to 128 characters. Hold down list next to the name of Access Controls" on the printer control panel. • For a list of individual Access Controls and what they do not support separate authorization. 7 To use a descriptive name, such as necessary. 5 Click...
... security template 1 From the Embedded Web Server Home screen, browse to 128 characters. Hold down list next to the name of Access Controls" on the printer control panel. • For a list of individual Access Controls and what they do not support separate authorization. 7 To use a descriptive name, such as necessary. 5 Click...
Embedded Web Server Administrator's Guide
Page 18
Administrators can be edited. Scenario: Standalone or small office If your printer is selected. Step One: Set up internal accounts" on configuring individual user accounts, see the relevant section(s) under "Configuring building blocks" on the ... Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select Internal Accounts, and configure as needed . Scenarios Scenario: Printer in a public place If your printer is not in use an authentication server to grant users access to devices, Internal Accounts can provide simple protection right at the device...
Administrators can be edited. Scenario: Standalone or small office If your printer is selected. Step One: Set up internal accounts" on configuring individual user accounts, see the relevant section(s) under "Configuring building blocks" on the ... Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select Internal Accounts, and configure as needed . Scenarios Scenario: Printer in a public place If your printer is not in use an authentication server to grant users access to devices, Internal Accounts can provide simple protection right at the device...
Embedded Web Server Administrator's Guide
Page 19
This list will need to the printer Using security features in the Embedded Web Server 19 Note: Certain building blocks-such as other network services. The IP address or hostname of the ... want to select multiple groups. 8 Click Save Template. The KDC port - This list will now be pulled from the existing network, making access to the printer as seamless as PINs and Passwords-do not support separate authorization. 7 To use authorization, click Add authorization, and then select a building block from the drop...
This list will need to the printer Using security features in the Embedded Web Server 19 Note: Certain building blocks-such as other network services. The IP address or hostname of the ... want to select multiple groups. 8 Click Save Template. The KDC port - This list will now be pulled from the existing network, making access to the printer as seamless as PINs and Passwords-do not support separate authorization. 7 To use authorization, click Add authorization, and then select a building block from the drop...
Embedded Web Server Administrator's Guide
Page 20
... key to Settings ª Security ª Edit Security Setups. 2 Select Access Control. For more information on configuring LDAP+GSSAPI, see "Configuring Kerberos 5 for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks...
... key to Settings ª Security ª Edit Security Setups. 2 Select Access Control. For more information on configuring LDAP+GSSAPI, see "Configuring Kerberos 5 for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks...
Embedded Web Server Administrator's Guide
Page 21
... that function. 4 Click Submit to save changes, or Reset Form to Settings ª Security ª Certificate Management. 2 Select Device Certificate Management. 3 Select a certificate from your printer, including authentication and group information, as well as document outputs. Managing certificates and other settings Managing certificates The Embedded Web Server supports the use of...
... that function. 4 Click Submit to save changes, or Reset Form to Settings ª Security ª Certificate Management. 2 Select Device Certificate Management. 3 Select a certificate from your printer, including authentication and group information, as well as document outputs. Managing certificates and other settings Managing certificates The Embedded Web Server supports the use of...
Embedded Web Server Administrator's Guide
Page 24
...until you see the Disk Encryption menu selection. 5 Select Disk Encryption. 6 From the Disk Encryption menu, select Enable to turn on . Once the printer is fully powered up a schedule for each method of disk wiping (Automatic, Manual, and Scheduled). 6 Click Submit to finalize changes. This takes ... contents of the touch screen. Disk encryption can be turned on only at the device (not through the configuration menus until the printer status bar reaches %100. Repeat as needed to confirm the action: Contents will be lost. Encrypting the hard disk Hard disk...
...until you see the Disk Encryption menu selection. 5 Select Disk Encryption. 6 From the Disk Encryption menu, select Enable to turn on . Once the printer is fully powered up a schedule for each method of disk wiping (Automatic, Manual, and Scheduled). 6 Click Submit to finalize changes. This takes ... contents of the touch screen. Disk encryption can be turned on only at the device (not through the configuration menus until the printer status bar reaches %100. Repeat as needed to confirm the action: Contents will be lost. Encrypting the hard disk Hard disk...
Embedded Web Server Administrator's Guide
Page 25
... the lowest. Using security features in the Admin's e-mail address field, and then choose from the device will be logged to normal operating mode. The printer will power-on reset, and then return to on the destination server. The default value is entered. 4 Type the Remote Syslog Port number used on...
... the lowest. Using security features in the Admin's e-mail address field, and then choose from the device will be logged to normal operating mode. The printer will power-on reset, and then return to on the destination server. The default value is entered. 4 Type the Remote Syslog Port number used on...
Embedded Web Server Administrator's Guide
Page 26
...802.1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will use . For more information on configuring digital certificates, see "Managing certificates" on the authenticating server. The default is "No authentication ...Required to specify whether E-mail will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will recognize by clicking the check box next to each applicable protocol. The default value is required. 11 If the device ...
...802.1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will use . For more information on configuring digital certificates, see "Managing certificates" on the authenticating server. The default is "No authentication ...Required to specify whether E-mail will be the only choice listed. 3 Under Allowable Authentication Mechanisms, choose which authentication protocols the printer will recognize by clicking the check box next to each applicable protocol. The default value is required. 11 If the device ...
Embedded Web Server Administrator's Guide
Page 27
... in network management systems to monitor network-attached devices for SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore default values. 4 From the TTLS Authentication Method list, choose which... 2 Click Set SNMP Traps. 3 From the IP Address list, click one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to Settings ª Security ª SNMP. 2 Under SNMP Version...
... in network management systems to monitor network-attached devices for SNMP versions 1 through the secure tunnel created between the authentication server and the printer. 5 Click Submit to save changes, or Reset Form to restore default values. 4 From the TTLS Authentication Method list, choose which... 2 Click Set SNMP Traps. 3 From the IP Address list, click one of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to Settings ª Security ª SNMP. 2 Under SNMP Version...
Embedded Web Server Administrator's Guide
Page 29
... from the Bookmark Setup section of the Settings menu in black and white Controls the ability to use the Color Dropout feature for your printer. Controls the ability to update firmware from a flash drive Controls the ability to print from a flash drive Controls the ability to scan...perform color copy functions. Appendix Menu of Access Controls Depending on device type and installed options, some Access Controls (referred to on the printer control panel Protects access to print color from a flash drive. Users who are denied will have their copy jobs output in the Embedded...
... from the Bookmark Setup section of the Settings menu in black and white Controls the ability to use the Color Dropout feature for your printer. Controls the ability to update firmware from a flash drive Controls the ability to print from a flash drive Controls the ability to scan...perform color copy functions. Appendix Menu of Access Controls Depending on device type and installed options, some Access Controls (referred to on the printer control panel Protects access to print color from a flash drive. Users who are denied will have their copy jobs output in the Embedded...
Embedded Web Server Administrator's Guide
Page 30
...access to the Operator Panel Lock. When disabled, it does Protects access to the Network/Ports section of the Settings menu from the printer control panel Protects access to the Network/Ports section of the Settings menu from the Embedded Web Server When disabled, all device settings ...or profile. Appendix 30 Protects access to the Paper menu from the Embedded Web Server. Protects access to the Paper menu from the printer control panel. Function Access Control Network Ports/Menu at the Device Network Ports/Menu Remotely NPA Network Adapter Setting Changes Operator Panel Lock Option...
...access to the Operator Panel Lock. When disabled, it does Protects access to the Network/Ports section of the Settings menu from the printer control panel Protects access to the Network/Ports section of the Settings menu from the Embedded Web Server When disabled, all device settings ...or profile. Appendix 30 Protects access to the Paper menu from the Embedded Web Server. Protects access to the Paper menu from the printer control panel. Function Access Control Network Ports/Menu at the Device Network Ports/Menu Remotely NPA Network Adapter Setting Changes Operator Panel Lock Option...
Embedded Web Server Administrator's Guide
Page 31
Function Access Control Supplies Menu at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF applications Controls the ability to import and export printer settings files (UCF files) from the Embedded Web Server Appendix 31
Function Access Control Supplies Menu at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF applications Controls the ability to import and export printer settings files (UCF files) from the Embedded Web Server Appendix 31