Embedded Web Server Administrator's Guide
Page 3
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
... Authentication and Authorization ...5 Groups ...6 Access Controls...6 Security Templates...6 Configuring building blocks...7 Creating a password ...7 Creating a PIN...7 Setting up internal accounts ...8 Using LDAP ...9 Using LDAP+GSSAPI ...11...password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other settings...21 Managing certificates...21 Setting certificate defaults...
Embedded Web Server Administrator's Guide
Page 6
... using a building block, or certain building blocks paired with one or more groups. A Security Template is a profile constructed using a password, PIN, or security template. For the purposes of Embedded Web Server security, groups are combined determines the type of security created: Building... + GSSAPI Authentication only LDAP + GSSAPI with Groups Authentication and authorization Password Authorization only PIN Authorization only Each device can support up to 32 groups to be protected. Access Controls By default, all users the functions they need to print in color, but ...
... using a building block, or certain building blocks paired with one or more groups. A Security Template is a profile constructed using a password, PIN, or security template. For the purposes of Embedded Web Server security, groups are combined determines the type of security created: Building... + GSSAPI Authentication only LDAP + GSSAPI with Groups Authentication and authorization Password Authorization only PIN Authorization only Each device can support up to 32 groups to be protected. Access Controls By default, all users the functions they need to print in color, but ...
Embedded Web Server Administrator's Guide
Page 7
... Typically, Personal Identification Numbers (PINs) are selected or not. Notes: • To edit a password, select a password from the list, and then modify the settings. • To delete a password, select a password from the list and then click Delete Entry. Note: The default PIN length is protected by requiring a user to type a correct PIN to Settings ª...
... Typically, Personal Identification Numbers (PINs) are selected or not. Notes: • To edit a password, select a password from the list, and then modify the settings. • To delete a password, select a password from the list and then click Delete Entry. Note: The default PIN length is protected by requiring a user to type a correct PIN to Settings ª...
Embedded Web Server Administrator's Guide
Page 9
... Sockets Layer/Transport Layer Security), or TLS. • Userid Attribute-Type either User ID or User ID and Password to identify each session by selecting Log out on the printer control panel. The default LDAP port is used to access information stored in the LDAP server where user accounts reside. Using security...
... Sockets Layer/Transport Layer Security), or TLS. • Userid Attribute-Type either User ID or User ID and Password to identify each session by selecting Log out on the printer control panel. The default LDAP port is used to access information stored in the LDAP server where user accounts reside. Using security...
Embedded Web Server Administrator's Guide
Page 14
... the Time Zone drop-down list. Using security features in the Embedded Web Server 14 Printer clock settings can only be registered to restore default values. Using NTLM authentication NTLM (Windows NT LAN Manager) is observed in your area, click the Automatically Observe DST check box. 4 ... the event of the NTP Server. 6 If the NTP server requires authentication, click the Enable Authentication check box, and then use of a user's password across a network in clear text. Notes: • Entering manual settings automatically disables use the "Install auth keys" link to browse to the file...
... the Time Zone drop-down list. Using security features in the Embedded Web Server 14 Printer clock settings can only be registered to restore default values. Using NTLM authentication NTLM (Windows NT LAN Manager) is observed in your area, click the Automatically Observe DST check box. 4 ... the event of the NTP Server. 6 If the NTP server requires authentication, click the Enable Authentication check box, and then use of a user's password across a network in clear text. Notes: • Entering manual settings automatically disables use the "Install auth keys" link to browse to the file...
Embedded Web Server Administrator's Guide
Page 15
...display "Status....Registered." • If registration is a network communication problem, or an authentication server fails. Using security features in the Default User Domain field, and then click Register Domain to access additional configuration settings. 5 On the Settings screen under Register Domain, provide ...NT domain: • Domain Name • Domain PDC Name (the server name of the Primary Domain Controller) • User ID • Password 6 Click Submit. Consult your device with an NT domain. 2 From the Embedded Web Server Home screen, browse to Settings ª Security ª...
...display "Status....Registered." • If registration is a network communication problem, or an authentication server fails. Using security features in the Default User Domain field, and then click Register Domain to access additional configuration settings. 5 On the Settings screen under Register Domain, provide ...NT domain: • Domain Name • Domain PDC Name (the server name of the Primary Domain Controller) • User ID • Password 6 Click Submit. Consult your device with an NT domain. 2 From the Embedded Web Server Home screen, browse to Settings ª Security ª...
Embedded Web Server Administrator's Guide
Page 16
...specific type of lockout. • Panel Login Timeout-Specify how long a user may be set to require No Security (the default), or to specific device functions using a password or PIN. Only one method of security can attempt login before being locked out. • Failure time frame-Specify the ...in order to gain access to each function you want to protect, select a password or PIN from the drop-down list for that function. 4 Click Submit to save changes, or Reset Form to restore default values. Note: To help prevent unauthorized access, users are not authenticated), administrators ...
...specific type of lockout. • Panel Login Timeout-Specify how long a user may be set to require No Security (the default), or to specific device functions using a password or PIN. Only one method of security can attempt login before being locked out. • Failure time frame-Specify the ...in order to gain access to each function you want to protect, select a password or PIN from the drop-down list for that function. 4 Click Submit to save changes, or Reset Form to restore default values. Note: To help prevent unauthorized access, users are not authenticated), administrators ...
Embedded Web Server Administrator's Guide
Page 26
....1x. 2 Under 802.1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will use . The default is "No authentication required." 9 From the Device-Initiated E-mail list, select None for no authentication, or Use Device SMTP Credentials if authentication is...
....1x. 2 Under 802.1x Authentication: • Select the Active check box to enable 802.1x authentication. • Type the login name and password the printer will use . The default is "No authentication required." 9 From the Device-Initiated E-mail list, select None for no authentication, or Use Device SMTP Credentials if authentication is...
Embedded Web Server Administrator's Guide
Page 27
.... 2 Under SNMP Version 3, select the Enabled check box. 3 To allow device monitoring only, type an SNMPv3 Read Only User name and Password in the appropriate fields. 5 From the SNMPv3 Minimum Authentication Level list, select No Authentication, No Privacy, Authentication, No Privacy, or Authentication, Privacy...Web Server 27 The Embedded Web server allows administrators to reset. Using security features in network management systems to restore the default settings. Setting SNMP Traps After configuring SNMP Version 1, 2c or SNMP Version 3, you can further customize which authentication ...
.... 2 Under SNMP Version 3, select the Enabled check box. 3 To allow device monitoring only, type an SNMPv3 Read Only User name and Password in the appropriate fields. 5 From the SNMPv3 Minimum Authentication Level list, select No Authentication, No Privacy, Authentication, No Privacy, or Authentication, Privacy...Web Server 27 The Embedded Web server allows administrators to reset. Using security features in network management systems to restore the default settings. Setting SNMP Traps After configuring SNMP Version 1, 2c or SNMP Version 3, you can further customize which authentication ...
Embedded Web Server Administrator's Guide
Page 28
... caution), Access controls = "No security" (to remove security only from function access controls), or Reset factory security defaults (to return all security settings to default values). 3 Click Submit to replace the device RIP card (motherboard). Using security features in the Embedded Web Server 28... Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located ...
... caution), Access controls = "No security" (to remove security only from function access controls), or Reset factory security defaults (to return all security settings to default values). 3 Click Submit to replace the device RIP card (motherboard). Using security features in the Embedded Web Server 28... Warning-Potential Damage: If "No Effect" is chosen and the password (or other applicable credential) is a hardware jumper located ...
Embedded Web Server Administrator's Guide
Page 40
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
... authenticating using Kerberos 13 using LDAP 9 using LDAP+GSSAPI 11 using NTLM authentication 14 Authentication understanding 5 Authorization understanding 5 B backup password creating 15 using 15 building blocks adding to security templates 16 internal accounts 8 Kerberos 5 13 LDAP 9 LDAP+GSSAPI 11 NTLM ...authentication 14 C certificates creating 21 deleting 21 setting defaults 22 viewing 21 confidential printing configuring 22 D disk encryption 24 disk wiping modifying 23 scheduling 23 E encrypting the hard disk 24...
Wireless Setup Guide
Page 12
...to connect wirelessly Information you will need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up the printer on the network by the wireless router. Select ...or TKIP. or - Note: Using an unsecured wireless network is also referred to as an additional layer of addresses allowed by selecting the Default WEP Transmit Key. This identification number is not specifically allowed on the network. - If this address is called MAC address filtering. No security...
...to connect wirelessly Information you will need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up the printer on the network by the wireless router. Select ...or TKIP. or - Note: Using an unsecured wireless network is also referred to as an additional layer of addresses allowed by selecting the Default WEP Transmit Key. This identification number is not specifically allowed on the network. - If this address is called MAC address filtering. No security...
Wireless Setup Guide
Page 18
... Applications. 2 Double-click the Utilities folder. 3 Locate and double-click Print Center or Printer Setup Utility. 4 From the Printer List, choose Add. 5 Choose the Default Browser tab. 6 Click More Printers. 7 From the first pop-up menu, choose AppleTalk. 8 From the second pop-up menu, select Local AppleTalk zone. 9 Select the... double-click Printer Setup Utility or Print Center. 4 From the Printer List, choose Add. 5 Select the printer from the list. 5 Click Add. h Type the user password, and then click OK.
... Applications. 2 Double-click the Utilities folder. 3 Locate and double-click Print Center or Printer Setup Utility. 4 From the Printer List, choose Add. 5 Choose the Default Browser tab. 6 Click More Printers. 7 From the first pop-up menu, choose AppleTalk. 8 From the second pop-up menu, select Local AppleTalk zone. 9 Select the... double-click Printer Setup Utility or Print Center. 4 From the Printer List, choose Add. 5 Select the printer from the list. 5 Click Add. h Type the user password, and then click OK.
Wireless Setup Guide
Page 23
...you copy the network information down the SSID. Note: Make sure you do not know the IP address of your user name and password for future reference. The SSID of numbers separated by your operating system or wireless network software. 2 Type your Web browser and continue...is typically the wireless access point. • The IP address appears as 192.168.0.100. c Click AirPort. c Press Enter. • The "Default Gateway" entry is connected to Step 2. b Click Network. Troubleshooting wireless setup 23 This is displayed in a safe place for the wireless access point...
...you copy the network information down the SSID. Note: Make sure you do not know the IP address of your user name and password for future reference. The SSID of numbers separated by your operating system or wireless network software. 2 Type your Web browser and continue...is typically the wireless access point. • The IP address appears as 192.168.0.100. c Click AirPort. c Press Enter. • The "Default Gateway" entry is connected to Step 2. b Click Network. Troubleshooting wireless setup 23 This is displayed in a safe place for the wireless access point...
Wireless Setup Guide
Page 31
...: You may be prompted to connect the printer to the computer again using the installation cable as 192.168.1.1. 2 Type the user name and password for future reference. Troubleshooting wireless setup 31 Note: Make sure you copy them down the SSID, security type, and the WEP key or WPA ... when prompted. 3 Click OK. 4 Locate the page where the SSID is displayed. 5 Write down exactly, including any capital letters. c Press Enter. • The "Default Gateway" entry is typically the access point. • The IP address appears as four sets of numbers separated by periods, such as part of the...
...: You may be prompted to connect the printer to the computer again using the installation cable as 192.168.1.1. 2 Type the user name and password for future reference. Troubleshooting wireless setup 31 Note: Make sure you copy them down the SSID, security type, and the WEP key or WPA ... when prompted. 3 Click OK. 4 Locate the page where the SSID is displayed. 5 Write down exactly, including any capital letters. c Press Enter. • The "Default Gateway" entry is typically the access point. • The IP address appears as four sets of numbers separated by periods, such as part of the...
User's Guide
Page 37
...for the same type on the router and on the printer, or the printer will be able to auto for ad hoc networks)-The channel defaults to communicate on a wireless network, make sure that: • Your wireless network is set up and working properly. • The ...network using is not recommended. Information you will need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up to set up the printer. Installing the printer on a wireless network (Windows)...
...for the same type on the router and on the printer, or the printer will be able to auto for ad hoc networks)-The channel defaults to communicate on a wireless network, make sure that: • Your wireless network is set up and working properly. • The ...network using is not recommended. Information you will need the following: • Authentication type • Inner authentication type • 802.1X username and password • Certificates Note: For more than one WEP key, enter up to set up the printer. Installing the printer on a wireless network (Windows)...
User's Guide
Page 105
... use SSL for increased security when connecting to the SMTP server Notes: • Disabled is the factory default setting for Device-Initiated E-mail. • Device Userid and Device Password are used to log in to the SMTP server when "Use Device SMTP Credentials" is used, your ...Digest-MD5 NTLM Kerberos 5 Device-Initiated E-mail None Use Device SMTP Credentials Device Userid Device Password Kerberos 5 Realm NTLM Domain Description Specifies SMTP server port information Note: 25 is the factory default setting. Specifies the type of time in order to configure the SMTP server. Range is...
... use SSL for increased security when connecting to the SMTP server Notes: • Disabled is the factory default setting for Device-Initiated E-mail. • Device Userid and Device Password are used to log in to the SMTP server when "Use Device SMTP Credentials" is used, your ...Digest-MD5 NTLM Kerberos 5 Device-Initiated E-mail None Use Device SMTP Credentials Device Userid Device Password Kerberos 5 Realm NTLM Domain Description Specifies SMTP server port information Note: 25 is the factory default setting. Specifies the type of time in order to configure the SMTP server. Range is...
User's Guide
Page 123
...available. • The flash memory option or printer hard disk cannot be Read/Write, Write, or password protected. • Job Buffer Size must not be Read/Write, Write, or password protected. • Download shows all the fonts downloaded into RAM. • Flash and Disk settings ...show all fonts available to 100%. Enhances the contrast and sharpness of low-resolution images and smooths their color transitions Notes: • Off is the factory default setting. •...
...available. • The flash memory option or printer hard disk cannot be Read/Write, Write, or password protected. • Job Buffer Size must not be Read/Write, Write, or password protected. • Download shows all the fonts downloaded into RAM. • Flash and Disk settings ...show all fonts available to 100%. Enhances the contrast and sharpness of low-resolution images and smooths their color transitions Notes: • Off is the factory default setting. •...