Embedded Web Server Administrator's Guide
Page 3
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
Embedded Web Server Administrator's Guide
Page 6
... come with one or more groups. A Security Template is a profile constructed using a password, PIN, or security template. Using security features in the Embedded Web Server 6 Access Controls By default, all users the functions they need to print in color, but in some devices as...to similar functions. Groups Administrators can designate up to 32 groups to be used in association with Groups Authentication and authorization Password Authorization only PIN Authorization only Each device can support up to 140 security templates, allowing administrators to create very specific profiles...
... come with one or more groups. A Security Template is a profile constructed using a password, PIN, or security template. Using security features in the Embedded Web Server 6 Access Controls By default, all users the functions they need to print in color, but in some devices as...to similar functions. Groups Administrators can designate up to 32 groups to be used in association with Groups Authentication and authorization Password Authorization only PIN Authorization only Each device can support up to 140 security templates, allowing administrators to create very specific profiles...
Embedded Web Server Administrator's Guide
Page 7
...of the PIN configuration in the appropriate box, and then re-enter the password to retrieve a held print, copy, or fax job. Note: The default PIN length is protected by a normal password, any administrator-level password will be changed by requiring a user to type a correct PIN to ...confirm it . Configuring building blocks Creating a password The Embedded Web Server can store a combined total ...
...of the PIN configuration in the appropriate box, and then re-enter the password to retrieve a held print, copy, or fax job. Note: The default PIN length is protected by a normal password, any administrator-level password will be changed by requiring a user to type a correct PIN to ...confirm it . Configuring building blocks Creating a password The Embedded Web Server can store a combined total ...
Embedded Web Server Administrator's Guide
Page 9
...Server to access protected device functions in a specially organized information directory. Using security features in the LDAP server where user accounts reside. The default LDAP port is 389. • Use SSL/TLS-From the drop-down menu select None, SSL/TLS (Secure Sockets Layer/Transport Layer ...Security), or TLS. • Userid Attribute-Type either User ID or User ID and Password to identify each unique LDAP configuration. • As with any form of authentication that it more flexible than other authentication methods. One of...
...Server to access protected device functions in a specially organized information directory. Using security features in the LDAP server where user accounts reside. The default LDAP port is 389. • Use SSL/TLS-From the drop-down menu select None, SSL/TLS (Secure Sockets Layer/Transport Layer ...Security), or TLS. • Userid Attribute-Type either User ID or User ID and Password to identify each unique LDAP configuration. • As with any form of authentication that it more flexible than other authentication methods. One of...
Embedded Web Server Administrator's Guide
Page 14
...to the file containing the NTP authentication credentials. 7 Click Submit to save changes, or Reset Form to restore default values. Instead of comparing the user's actual password, the NTLM server and the client generate and compare three encrypted strings based on a supported device because each... NTLM building block cannot be deleted or unregistered if it is Microsoft's solution for enabling authentication without requiring the transmission of a user's password across a network in YYYY-MM-DD HH:MM format, and then choose from communicating with the authenticating server. • To help ...
...to the file containing the NTP authentication credentials. 7 Click Submit to save changes, or Reset Form to restore default values. Instead of comparing the user's actual password, the NTLM server and the client generate and compare three encrypted strings based on a supported device because each... NTLM building block cannot be deleted or unregistered if it is Microsoft's solution for enabling authentication without requiring the transmission of a user's password across a network in YYYY-MM-DD HH:MM format, and then choose from communicating with the authenticating server. • To help ...
Embedded Web Server Administrator's Guide
Page 15
... URL beginning "https://"), rather than an unsecured browsing window. Securing access Setting a backup password The Backup Password allows Embedded Web Server administrators to your organization's policies before deploying any security method that might compromise those policies. Specifying the default user domain for the NTLM server 1 Open the Embedded Web Server home screen using...
... URL beginning "https://"), rather than an unsecured browsing window. Securing access Setting a backup password The Backup Password allows Embedded Web Server administrators to your organization's policies before deploying any security method that might compromise those policies. Specifying the default user domain for the NTLM server 1 Open the Embedded Web Server home screen using...
Embedded Web Server Administrator's Guide
Page 16
...restrictions: • Login failures-Specify the number of times a user can be set to require No Security (the default), or to specific device functions using a password or PIN. Note: To help prevent unauthorized access, users are not authenticated), administrators can control access to use any...select Settings ª Security ª Edit Security Setups. 2 Under Edit Access Controls, select Access Controls. 3 For each session by a password or PIN. Embedded Web Server administrators should verify that function. 4 Click Submit to save changes, or Reset Form to any of the selections...
...restrictions: • Login failures-Specify the number of times a user can be set to require No Security (the default), or to specific device functions using a password or PIN. Note: To help prevent unauthorized access, users are not authenticated), administrators can control access to use any...select Settings ª Security ª Edit Security Setups. 2 Under Edit Access Controls, select Access Controls. 3 For each session by a password or PIN. Embedded Web Server administrators should verify that function. 4 Click Submit to save changes, or Reset Form to any of the selections...
Embedded Web Server Administrator's Guide
Page 26
... the security audit log • To view or save a text file of the destination server. If only one certificate has been installed, default will be sent using an encrypted link. 8 If your network under Device Credentials. Note: If using a secondary or backup SMTP server, enter... 2 Under 802.1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will wait for your SMTP server requires user credentials, select an authentication method from the SMTP Server Authentication list. Using security features in...
... the security audit log • To view or save a text file of the destination server. If only one certificate has been installed, default will be sent using an encrypted link. 8 If your network under Device Credentials. Note: If using a secondary or backup SMTP server, enter... 2 Under 802.1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will wait for your SMTP server requires user credentials, select an authentication method from the SMTP Server Authentication list. Using security features in...
Embedded Web Server Administrator's Guide
Page 27
...SNMP Version 1, 2c, select the Enabled check box. 3 To allow device monitoring only, type an SNMPv3 Read Only User name and Password in network management systems to monitor network-attached devices for SNMP versions 1 through the secure tunnel created between the authentication server and the ... that warrant administrative attention. Setting up SNMP Simple Network Management Protocol (SNMP) is used for the SNMP Community identifier (the default community name is public). 5 To facilitate the automatic installation of the blank IP address entries (shown as device monitoring, type...
...SNMP Version 1, 2c, select the Enabled check box. 3 To allow device monitoring only, type an SNMPv3 Read Only User name and Password in network management systems to monitor network-attached devices for SNMP versions 1 through the secure tunnel created between the authentication server and the ... that warrant administrative attention. Setting up SNMP Simple Network Management Protocol (SNMP) is used for the SNMP Community identifier (the default community name is public). 5 To facilitate the automatic installation of the blank IP address entries (shown as device monitoring, type...
Embedded Web Server Administrator's Guide
Page 28
...access the security menus. Using security features in the Embedded Web Server 28 Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard. 4 Under Trap Destination, type the IP address of using this ...with caution), Access controls = "No security" (to remove security only from function access controls), or Reset factory security defaults (to return all security settings to default values). 3 Click Submit to save changes, or Reset Form to clear all fields. Administrators can use the Embedded ...
...access the security menus. Using security features in the Embedded Web Server 28 Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located on the motherboard. 4 Under Trap Destination, type the IP address of using this ...with caution), Access controls = "No security" (to remove security only from function access controls), or Reset factory security defaults (to return all security settings to default values). 3 Click Submit to save changes, or Reset Form to clear all fields. Administrators can use the Embedded ...
Embedded Web Server Administrator's Guide
Page 40
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
User's Guide
Page 47
... set up to the same wireless network where you may need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more information on configuring 802.1X security, see the Networking Guide on the Software and Documentation CD. Note: Using an unsecured..., or the printer will not have any type of security. WEP key If your wireless network does not use on the network by selecting the Default WEP Transmit Key.
... set up to the same wireless network where you may need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more information on configuring 802.1X security, see the Networking Guide on the Software and Documentation CD. Note: Using an unsecured..., or the printer will not have any type of security. WEP key If your wireless network does not use on the network by selecting the Default WEP Transmit Key.
User's Guide
Page 162
... Use Device SMTP Credentials Use Session User ID and Password Use Session E-mail address and Password Prompt User Device Userid Device password Kerberos 5 Realm NTLM Domain Description Specifies SMTP server port information Note: 25 is the factory default setting. Specifies server information. Specifies the amount of... of time in seconds before the server stops trying to send the e-mail Note: 30 seconds is the default SMTP gateway port. This is the factory default setting for Use SSL. Understanding printer menus 162 Specifies server information Notes: • The message boxes have...
... Use Device SMTP Credentials Use Session User ID and Password Use Session E-mail address and Password Prompt User Device Userid Device password Kerberos 5 Realm NTLM Domain Description Specifies SMTP server port information Note: 25 is the factory default setting. Specifies server information. Specifies the amount of... of time in seconds before the server stops trying to send the e-mail Note: 30 seconds is the default SMTP gateway port. This is the factory default setting for Use SSL. Understanding printer menus 162 Specifies server information Notes: • The message boxes have...
User's Guide
Page 201
...Max E-mail size 0-65535 KB E-mail Server Setup Size Error Message E-mail Server Setup Limit destinations E-mail Server Setup Web Link Setup Server Login Password Path Base file name Web Link Format PDF (.pdf) Secure PDF TIFF (.tif) JPEG (.jpg) XPS (.xps) PDF Version 1.2-1.6 Content Text/Photo... Photograph Text Color Gray Color Description Specifies the maximum e-mail size in grayscale or color Note: Color is the factory default setting. Sends a message when an e-mail is greater than the configured size limit Sends an e-mail only when the address contains the domain...
...Max E-mail size 0-65535 KB E-mail Server Setup Size Error Message E-mail Server Setup Limit destinations E-mail Server Setup Web Link Setup Server Login Password Path Base file name Web Link Format PDF (.pdf) Secure PDF TIFF (.tif) JPEG (.jpg) XPS (.xps) PDF Version 1.2-1.6 Content Text/Photo... Photograph Text Color Gray Color Description Specifies the maximum e-mail size in grayscale or color Note: Color is the factory default setting. Sends a message when an e-mail is greater than the configured size limit Sends an e-mail only when the address contains the domain...
User's Guide
Page 221
...default setting. • A higher setting makes the display appear lighter. • A lower setting makes the display appear darker. Prints annotations in the printer and operating properly for this menu item to be available. • The flash memory option or printer hard disk cannot be Read/Write, Write, or password...Font Priority Resident Flash/Disk Description Adjusts the contrast lighting of the backlight on the display Notes: • 5 is the factory default setting. • A higher setting makes the display appear lighter. • A lower setting makes the display appear darker. ...
...default setting. • A higher setting makes the display appear lighter. • A lower setting makes the display appear darker. Prints annotations in the printer and operating properly for this menu item to be available. • The flash memory option or printer hard disk cannot be Read/Write, Write, or password...Font Priority Resident Flash/Disk Description Adjusts the contrast lighting of the backlight on the display Notes: • 5 is the factory default setting. • A higher setting makes the display appear lighter. • A lower setting makes the display appear darker. ...
User's Guide
Page 222
...-1008.00 Description Enhances the contrast and sharpness of low-resolution images and smooths their color transitions Notes: • Off is the factory default setting. • RO Courier shows the font name, font ID, and storage location in the printer. Description Specifies the set of alphabetic... font name Notes: • 10U PC-8 is the US factory default setting. • 12U PC-850 is the international factory default setting. • A symbol set of an inch. • Point sizes can be Read/Write, Write, or password protected. • Download shows all the fonts downloaded into RAM. ...
...-1008.00 Description Enhances the contrast and sharpness of low-resolution images and smooths their color transitions Notes: • Off is the factory default setting. • RO Courier shows the font name, font ID, and storage location in the printer. Description Specifies the set of alphabetic... font name Notes: • 10U PC-8 is the US factory default setting. • 12U PC-850 is the international factory default setting. • A symbol set of an inch. • Point sizes can be Read/Write, Write, or password protected. • Download shows all the fonts downloaded into RAM. ...