Embedded Web Server Administrator's Guide
Page 3
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
Embedded Web Server Administrator's Guide
Page 6
... example, in Company A, employees in association with either the Internal accounts or LDAP/LDAP+GSSAPI building blocks. Access Controls By default, all users the functions they need to similar functions. Access controls can be used to identify sets of security Internal Accounts ... they are used in the warehouse do , see "Menu of a complex security environment. A Security Template is a profile constructed using a password, PIN, or security template. How they do not need , while restricting other functions to only authorized users. For the purposes of Embedded...
... example, in Company A, employees in association with either the Internal accounts or LDAP/LDAP+GSSAPI building blocks. Access Controls By default, all users the functions they need to similar functions. Access controls can be used to identify sets of security Internal Accounts ... they are used in the warehouse do , see "Menu of a complex security environment. A Security Template is a profile constructed using a password, PIN, or security template. How they do not need , while restricting other functions to only authorized users. For the purposes of Embedded...
Embedded Web Server Administrator's Guide
Page 7
... are used to control access to retrieve a held print, copy, or fax job. Note: The default PIN length is protected by a normal password, any administrator-level password will be changed by requiring a user to type a correct PIN to document outputs, by modifying the...Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select Password. 3 Under Manage Passwords, select Add a Password. 4 Type a name for the password in the Embedded Web Server 7 To create a password 1 From the Embedded Web Server Home screen, browse to a device itself. Note: Selecting...
... are used to control access to retrieve a held print, copy, or fax job. Note: The default PIN length is protected by a normal password, any administrator-level password will be changed by requiring a user to type a correct PIN to document outputs, by modifying the...Settings ª Security ª Edit Security Setups. 2 Under Edit Building Blocks, select Password. 3 Under Manage Passwords, select Add a Password. 4 Type a name for the password in the Embedded Web Server 7 To create a password 1 From the Embedded Web Server Home screen, browse to a device itself. Note: Selecting...
Embedded Web Server Administrator's Guide
Page 9
... printer from communicating with many different kinds of databases without special integration, making it can store a maximum of five unique LDAP configurations. The default LDAP port is 389. • Use SSL/TLS-From the drop-down menu select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security...), or TLS. • Userid Attribute-Type either User ID or User ID and Password to securely end each particular LDAP Server Setup when creating security templates. • Server Address-Enter the IP Address or the Host Name of...
... printer from communicating with many different kinds of databases without special integration, making it can store a maximum of five unique LDAP configurations. The default LDAP port is 389. • Use SSL/TLS-From the drop-down menu select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security...), or TLS. • Userid Attribute-Type either User ID or User ID and Password to securely end each particular LDAP Server Setup when creating security templates. • Server Address-Enter the IP Address or the Host Name of...
Embedded Web Server Administrator's Guide
Page 14
...7 Click Submit to save changes, or Reset Form to restore default values. Using NTLM authentication NTLM (Windows NT LAN Manager) is Microsoft's solution for enabling authentication without requiring the transmission of a user's password across a network in the Embedded Web Server 14 Instead of ...comparing the user's actual password, the NTLM server and the client generate and compare three encrypted strings based on ...
...7 Click Submit to save changes, or Reset Form to restore default values. Using NTLM authentication NTLM (Windows NT LAN Manager) is Microsoft's solution for enabling authentication without requiring the transmission of a user's password across a network in the Embedded Web Server 14 Instead of ...comparing the user's actual password, the NTLM server and the client generate and compare three encrypted strings based on ...
Embedded Web Server Administrator's Guide
Page 15
... Submit. Note: If you do not connect to the Embedded Web Server using the secure version of "back door" measures such as a backup password. Specifying the default user domain for the NTLM server 1 Open the Embedded Web Server home screen using HTTPS, you will not be helpful if other security measures become...
... Submit. Note: If you do not connect to the Embedded Web Server using the secure version of "back door" measures such as a backup password. Specifying the default user domain for the NTLM server 1 Open the Embedded Web Server home screen using HTTPS, you will not be helpful if other security measures become...
Embedded Web Server Administrator's Guide
Page 16
... Create a building block 1 From the Embedded Web Server Home screen, browse to specific device functions using a password or PIN. Using a password or PIN to restore default values. Using security features in order to gain access to any of the selections available in remotely before being automatically...and servers. For simple authorization-level security (in which individual users are encouraged to each function you want to protect, select a password or PIN from the drop-down list for information assets such as needed. Only one method of building block, see the relevant ...
... Create a building block 1 From the Embedded Web Server Home screen, browse to specific device functions using a password or PIN. Using a password or PIN to restore default values. Using security features in order to gain access to any of the selections available in remotely before being automatically...and servers. For simple authorization-level security (in which individual users are encouraged to each function you want to protect, select a password or PIN from the drop-down list for information assets such as needed. Only one method of building block, see the relevant ...
Embedded Web Server Administrator's Guide
Page 26
...list, choose the digital certificate you must provide credentials in order to enable 802.1x authentication. • Type the login name and password the printer will be sent using digital certificates to establish a secure connection to the authentication server, you want to use to log... Delete Log. Note: If using an encrypted link. 8 If your network under Device Credentials. If only one certificate has been installed, default will use . Note: Server certificate validation is required. 11 If the device must configure them on wired networks to each applicable protocol. ...
...list, choose the digital certificate you must provide credentials in order to enable 802.1x authentication. • Type the login name and password the printer will be sent using digital certificates to establish a secure connection to the authentication server, you want to use to log... Delete Log. Note: If using an encrypted link. 8 If your network under Device Credentials. If only one certificate has been installed, default will use . Note: Server certificate validation is required. 11 If the device must configure them on wired networks to each applicable protocol. ...
Embedded Web Server Administrator's Guide
Page 27
...5 To facilitate the automatic installation of the blank IP address entries (shown as device monitoring, type an SNMPPv3 Read/Write User name and Password in the appropriate fields. 4 To allow remote installation and configuration changes as well as 0.0.0.0). SNMP Version 1, 2c 1 From the Embedded ... device monitoring only, type an SNMPv3 Read Only User name and Password in the Embedded Web Server 27 The Embedded Web server allows administrators to configure settings for the SNMP Community identifier (the default community name is used for SNMP versions 1 through the secure tunnel...
...5 To facilitate the automatic installation of the blank IP address entries (shown as device monitoring, type an SNMPPv3 Read/Write User name and Password in the appropriate fields. 4 To allow remote installation and configuration changes as well as 0.0.0.0). SNMP Version 1, 2c 1 From the Embedded ... device monitoring only, type an SNMPv3 Read Only User name and Password in the Embedded Web Server 27 The Embedded Web server allows administrators to configure settings for the SNMP Community identifier (the default community name is used for SNMP versions 1 through the secure tunnel...
Embedded Web Server Administrator's Guide
Page 28
... menus-use with caution), Access controls = "No security" (to remove security only from function access controls), or Reset factory security defaults (to return all fields. Administrators can use the Embedded Web Server to specify the effect of the network management server or monitoring station... alert. 5 Click Submit to save changes, or Reset Form to clear all security settings to default values). 3 Click Submit to save the changes. Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard.
... menus-use with caution), Access controls = "No security" (to remove security only from function access controls), or Reset factory security defaults (to return all fields. Administrators can use the Embedded Web Server to specify the effect of the network management server or monitoring station... alert. 5 Click Submit to save changes, or Reset Form to clear all security settings to default values). 3 Click Submit to save the changes. Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard.
Embedded Web Server Administrator's Guide
Page 40
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
User's Guide
Page 47
Encryption must be able to communicate on the network by selecting the Default WEP Transmit Key. No security If your network uses more information on configuring 802.1X security, see the Networking Guide on the Software and Documentation ... 802.1X network using the Advanced method, then you may need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up and working properly. • The computer you are using is not recommended. WPA or...
Encryption must be able to communicate on the network by selecting the Default WEP Transmit Key. No security If your network uses more information on configuring 802.1X security, see the Networking Guide on the Software and Documentation ... 802.1X network using the Advanced method, then you may need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up and working properly. • The computer you are using is not recommended. WPA or...
User's Guide
Page 162
...information Notes: • The message boxes have a limitation of 512 characters. • Disabled is the factory default setting for Use SSL. This is the default SMTP gateway port. Understanding printer menus 162 SMTP Setup menu Use the following menu to configure the SMTP server...None Use Device SMTP Credentials User-Initiated E-mail None Use Device SMTP Credentials Use Session User ID and Password Use Session E-mail address and Password Prompt User Device Userid Device password Kerberos 5 Realm NTLM Domain Description Specifies SMTP server port information Note: 25 is a required item....
...information Notes: • The message boxes have a limitation of 512 characters. • Disabled is the factory default setting for Use SSL. This is the default SMTP gateway port. Understanding printer menus 162 SMTP Setup menu Use the following menu to configure the SMTP server...None Use Device SMTP Credentials User-Initiated E-mail None Use Device SMTP Credentials Use Session User ID and Password Use Session E-mail address and Password Prompt User Device Userid Device password Kerberos 5 Realm NTLM Domain Description Specifies SMTP server port information Note: 25 is a required item....
User's Guide
Page 201
... Max E-mail size 0-65535 KB E-mail Server Setup Size Error Message E-mail Server Setup Limit destinations E-mail Server Setup Web Link Setup Server Login Password Path Base file name Web Link Format PDF (.pdf) Secure PDF TIFF (.tif) JPEG (.jpg) XPS (.xps) PDF Version 1.2-1.6 Content Text/Photo...in grayscale or color Note: Color is not sent. Specifies whether a job prints in kilobytes Note: E-mail above the specified size is the factory default setting. Defines the e-mail server path name; for example: /directory/path Note: The following characters or symbols are mostly text or line art....
... Max E-mail size 0-65535 KB E-mail Server Setup Size Error Message E-mail Server Setup Limit destinations E-mail Server Setup Web Link Setup Server Login Password Path Base file name Web Link Format PDF (.pdf) Secure PDF TIFF (.tif) JPEG (.jpg) XPS (.xps) PDF Version 1.2-1.6 Content Text/Photo...in grayscale or color Note: Color is not sent. Specifies whether a job prints in kilobytes Note: E-mail above the specified size is the factory default setting. Defines the e-mail server path name; for example: /directory/path Note: The following characters or symbols are mostly text or line art....
User's Guide
Page 221
...order Notes: • Resident is the factory default setting. Description Scales page content to 100%. Prints annotations in the printer and operating properly for this menu item to be available. • The flash memory option or printer hard disk cannot be Read/Write, Write, or password protected. • Job Buffer Size must... be installed in a PDF Note: Do Not Print is the factory default setting.
...order Notes: • Resident is the factory default setting. Description Scales page content to 100%. Prints annotations in the printer and operating properly for this menu item to be available. • The flash memory option or printer hard disk cannot be Read/Write, Write, or password protected. • Job Buffer Size must... be installed in a PDF Note: Do Not Print is the factory default setting.
User's Guide
Page 222
...and storage location in resolution. It shows the factory default set is the factory default setting. • Image Smoothing has no effect on images that option. • Flash option must be properly formatted and cannot be Read/Write, Write, or password protected. • Download shows all the fonts downloaded...: • 12 is R for Resident, F for Flash, K for Disk, and D for download. The font source abbreviation is the factory default setting. • Point Size refers to any option. Menu item Image Smoothing On Off PCL Emul menu Menu item Font Source Resident Disk Flash Download...
...and storage location in resolution. It shows the factory default set is the factory default setting. • Image Smoothing has no effect on images that option. • Flash option must be properly formatted and cannot be Read/Write, Write, or password protected. • Download shows all the fonts downloaded...: • 12 is R for Resident, F for Flash, K for Disk, and D for download. The font source abbreviation is the factory default setting. • Point Size refers to any option. Menu item Image Smoothing On Off PCL Emul menu Menu item Font Source Resident Disk Flash Download...