Embedded Web Server Administrator's Guide
Page 3
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
Embedded Web Server Administrator's Guide
Page 6
...in some multifunction printers, over 40 individual menus and functions can be controlled varies depending on page 29. Access Controls By default, all users the functions they are used to manage access to specific menus and functions or to disable them entirely. In ... LDAP Authentication only LDAP with Groups Authentication and authorization LDAP + GSSAPI Authentication only LDAP + GSSAPI with Groups Authentication and authorization Password Authorization only PIN Authorization only Each device can support up to 32 groups to be able to combine these components in the ...
...in some multifunction printers, over 40 individual menus and functions can be controlled varies depending on page 29. Access Controls By default, all users the functions they are used to manage access to specific menus and functions or to disable them entirely. In ... LDAP Authentication only LDAP with Groups Authentication and authorization LDAP + GSSAPI Authentication only LDAP + GSSAPI with Groups Authentication and authorization Password Authorization only PIN Authorization only Each device can support up to 32 groups to be able to combine these components in the ...
Embedded Web Server Administrator's Guide
Page 7
...appropriate box, and then re-enter the PIN to retrieve a held print, copy, or fax job. Administrator-level passwords override normal passwords. Note: The default PIN length is protected by modifying the Minimum PIN length field under Settings ª Security ª Miscellaneous Security ...Settings. To create a password 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2...
...appropriate box, and then re-enter the PIN to retrieve a held print, copy, or fax job. Administrator-level passwords override normal passwords. Note: The default PIN length is protected by modifying the Minimum PIN length field under Settings ª Security ª Miscellaneous Security ...Settings. To create a password 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2...
Embedded Web Server Administrator's Guide
Page 9
... identify each session by selecting Log out on top of the TCP/IP layer, and is that runs directly on the printer control panel. The default LDAP port is 389. • Use SSL/TLS-From the drop-down menu select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security), ...or TLS. • Userid Attribute-Type either User ID or User ID and Password to make the E-mail address a required field when creating new internal accounts. • Required user credentials-Select either cn (common name), uid, userid, or...
... identify each session by selecting Log out on top of the TCP/IP layer, and is that runs directly on the printer control panel. The default LDAP port is 389. • Use SSL/TLS-From the drop-down menu select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security), ...or TLS. • Userid Attribute-Type either User ID or User ID and Password to make the E-mail address a required field when creating new internal accounts. • Required user credentials-Select either cn (common name), uid, userid, or...
Embedded Web Server Administrator's Guide
Page 14
... time zone or an area that prevents the printer from communicating with a trusted clock-typically the same one NTLM configuration on the user's password. Printer clock settings can be updated manually, or set to use Network Time Protocol (NTP), to automatically sync with the authenticating server. ...• To help prevent unauthorized access, users are encouraged to securely end each device can only be registered to restore default values. Notes: • The NTLM building block can store only one used as part of a security template. • As with the...
... time zone or an area that prevents the printer from communicating with a trusted clock-typically the same one NTLM configuration on the user's password. Printer clock settings can be updated manually, or set to use Network Time Protocol (NTP), to automatically sync with the authenticating server. ...• To help prevent unauthorized access, users are encouraged to securely end each device can only be registered to restore default values. Notes: • The NTLM building block can store only one used as part of a security template. • As with the...
Embedded Web Server Administrator's Guide
Page 15
...method that might compromise those policies. To create a backup password 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 3 Under Edit Building Blocks, select NTLM. 4 Type the default user domain in the Embedded Web Server 15 Using security ...administrators to the Embedded Web Server using the secure version of the Primary Domain Controller) • User ID • Password 6 Click Submit. Specifying the default user domain for example, if there is not successful, the Manage NTLM Setup screen will not be helpful if other ...
...method that might compromise those policies. To create a backup password 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 3 Under Edit Building Blocks, select NTLM. 4 Type the default user domain in the Embedded Web Server 15 Using security ...administrators to the Embedded Web Server using the secure version of the Primary Domain Controller) • User ID • Password 6 Click Submit. Specifying the default user domain for example, if there is not successful, the Manage NTLM Setup screen will not be helpful if other ...
Embedded Web Server Administrator's Guide
Page 16
... that function. 4 Click Submit to save changes, or Reset Form to specific device functions using a password or PIN. Users will now be set to require No Security (the default), or to use any function controlled by selecting Log out on page 7. For more information on configuring.... 3 Enter the appropriate login restrictions: • Login failures-Specify the number of times a user can control access to restore default values. Using a password or PIN to control function access Each Access Control (or Function Access Control), can be logged in order to gain access to cancel...
... that function. 4 Click Submit to save changes, or Reset Form to specific device functions using a password or PIN. Users will now be set to require No Security (the default), or to use any function controlled by selecting Log out on page 7. For more information on configuring.... 3 Enter the appropriate login restrictions: • Login failures-Specify the number of times a user can control access to restore default values. Using a password or PIN to control function access Each Access Control (or Function Access Control), can be logged in order to gain access to cancel...
Embedded Web Server Administrator's Guide
Page 26
...; Select the Validate Server Certificate check box to messages sent from the SMTP server before changing 802.1x authentication settings. The default is "No authentication required." 9 From the Device-Initiated E-mail list, select None for no authentication, or Use Device SMTP...Password, or Prompt user if authentication is port 25. 4 If using digital certificates to establish a secure connection to the authentication server, you want to send E-mail, enter the information appropriate for that server. 5 For SMTP Timeout, type the number of seconds (5-30) the device will use . The default...
...; Select the Validate Server Certificate check box to messages sent from the SMTP server before changing 802.1x authentication settings. The default is "No authentication required." 9 From the Device-Initiated E-mail list, select None for no authentication, or Use Device SMTP...Password, or Prompt user if authentication is port 25. 4 If using digital certificates to establish a secure connection to the authentication server, you want to send E-mail, enter the information appropriate for that server. 5 For SMTP Timeout, type the number of seconds (5-30) the device will use . The default...
Embedded Web Server Administrator's Guide
Page 27
...Enabled check box. 3 To allow remote installation and configuration changes as well as device monitoring, type an SNMPPv3 Read/Write User name and Password in the appropriate fields. 5 From the SNMPv3 Minimum Authentication Level list, select No Authentication, No Privacy, Authentication, No Privacy, or Authentication...the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. Using security features in network management systems to monitor network-attached devices for SNMP versions 1 through the secure tunnel created...
...Enabled check box. 3 To allow remote installation and configuration changes as well as device monitoring, type an SNMPPv3 Read/Write User name and Password in the appropriate fields. 5 From the SNMPv3 Minimum Authentication Level list, select No Authentication, No Privacy, Authentication, No Privacy, or Authentication...the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 Click Submit to finalize changes, or Reset Form to restore default values. Using security features in network management systems to monitor network-attached devices for SNMP versions 1 through the secure tunnel created...
Embedded Web Server Administrator's Guide
Page 28
... the security menus. Using security features in the Embedded Web Server 28 Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard. Administrators can use the Embedded Web Server to specify the effect... with caution), Access controls = "No security" (to remove security only from function access controls), or Reset factory security defaults (to return all security settings to default values). 3 Click Submit to clear all fields. Enabling the security reset jumper The Security Reset Jumper is lost, you ...
... the security menus. Using security features in the Embedded Web Server 28 Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard. Administrators can use the Embedded Web Server to specify the effect... with caution), Access controls = "No security" (to remove security only from function access controls), or Reset factory security defaults (to return all security settings to default values). 3 Click Submit to clear all fields. Enabling the security reset jumper The Security Reset Jumper is lost, you ...
Embedded Web Server Administrator's Guide
Page 40
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
User's Guide
Page 47
... an additional layer of security, then you may need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up the printer. 1 Connect the power cable to the printer and then to communicate... on the network by selecting the Default WEP Transmit Key. Note: Using an unsecured wireless network is set up and working properly. • The computer you are using the Advanced ...
... an additional layer of security, then you may need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up the printer. 1 Connect the power cable to the printer and then to communicate... on the network by selecting the Default WEP Transmit Key. Note: Using an unsecured wireless network is set up and working properly. • The computer you are using the Advanced ...
User's Guide
Page 162
...Device SMTP Credentials User-Initiated E-mail None Use Device SMTP Credentials Use Session User ID and Password Use Session E-mail address and Password Prompt User Device Userid Device password Kerberos 5 Realm NTLM Domain Description Specifies SMTP server port information Note: 25 is a ...required item. Specifies the amount of 512 characters. • Disabled is the factory default setting for Use SSL. Notes: ...
...Device SMTP Credentials User-Initiated E-mail None Use Device SMTP Credentials Use Session User ID and Password Use Session E-mail address and Password Prompt User Device Userid Device password Kerberos 5 Realm NTLM Domain Description Specifies SMTP server port information Note: 25 is a ...required item. Specifies the amount of 512 characters. • Disabled is the factory default setting for Use SSL. Notes: ...
User's Guide
Page 201
... that will be scanned to e-mail Note: 1.5 is the factory default setting. Menu item E-mail Server Setup Max E-mail size 0-65535 KB E-mail Server Setup Size Error Message E-mail Server Setup Limit destinations E-mail Server Setup Web Link Setup Server Login Password Path Base file name Web Link Format PDF (.pdf) Secure...
... that will be scanned to e-mail Note: 1.5 is the factory default setting. Menu item E-mail Server Setup Max E-mail size 0-65535 KB E-mail Server Setup Size Error Message E-mail Server Setup Limit destinations E-mail Server Setup Web Link Setup Server Login Password Path Base file name Web Link Format PDF (.pdf) Secure...
User's Guide
Page 221
...Error On Off Font Priority Resident Flash/Disk Description Adjusts the contrast lighting of the backlight on the display Notes: • 5 is the factory default setting. • A higher setting makes the display appear lighter. • A lower setting makes the display appear darker. Prints annotations in ...8226; The flash memory option or printer hard disk cannot be Read/Write, Write, or password protected. • Job Buffer Size must be set to fit the selected paper size Note: No is the factory default setting. Establishes the font search order Notes: • Resident is the factory...
...Error On Off Font Priority Resident Flash/Disk Description Adjusts the contrast lighting of the backlight on the display Notes: • 5 is the factory default setting. • A higher setting makes the display appear lighter. • A lower setting makes the display appear darker. Prints annotations in ...8226; The flash memory option or printer hard disk cannot be Read/Write, Write, or password protected. • Job Buffer Size must be set to fit the selected paper size Note: No is the factory default setting. Establishes the font search order Notes: • Resident is the factory...
User's Guide
Page 222
... Off is a set of alphabetic and numeric characters, punctuation, and special symbols. Understanding printer menus 222 Specifies the symbol set is the factory default setting. • Image Smoothing has no effect on images that option. • Flash option must be properly formatted and cannot be Read/Write..., Write, or password protected. • Download shows all the fonts downloaded into RAM. • Flash and Disk settings show all fonts available to the height...
... Off is a set of alphabetic and numeric characters, punctuation, and special symbols. Understanding printer menus 222 Specifies the symbol set is the factory default setting. • Image Smoothing has no effect on images that option. • Flash option must be properly formatted and cannot be Read/Write..., Write, or password protected. • Download shows all the fonts downloaded into RAM. • Flash and Disk settings show all fonts available to the height...