Lexmark Color Laser Common Criteria Installation Supplement and Administrator
Lexmark Color Laser Manual
View all Lexmark Color Laser manuals
Add to My Manuals
Save this manual to your list of manuals |
Lexmark Color Laser manual content summary:
- Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 1
Common Criteria Installation supplement and administrator guide April 2010 www.lexmark.com Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries. All other trademarks are the property of their respective - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 2
programs described may be made at any time. For Lexmark technical support, visit support.lexmark.com. For information on supplies and downloads, visit www.lexmark.com. If you don't have access to the Internet, you can contact Lexmark by mail: Lexmark International, Inc. Bldg 004-2/CSC 740 New Circle - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 3
steps 5 Overview...5 Using this guide...5 Supported devices...5 Operating environment...5 Before access to device functions...12 Disabling home screen icons...14 Administering the device 21 Security audit logging...22 E-mail...24 Fax...26 Configuring security reset jumper behavior...27 User - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 4
device functions...35 Configuring PKI Held Jobs...35 Controlling access to device functions using the EWS...36 Troubleshooting 39 Login Issues...39 "Unsupported USB Device" error message...39 The printer home screen does not return to a locked state when not in use 39 Login screen does not appear - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 5
of Lexmark multifunction printers is required for effective use of this guide. Some settings can be configured using either the Embedded Web Server (EWS), or the device touch screen. Where applicable, instructions for both methods are included. For information about physically setting up the MFP or - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 6
one network interface is installed. There should be no optional network, parallel, or serial interfaces. Note: USB ports that perform document processing functions are disabled at the factory. 2 Turn the MFP on using the power switch. 3 From the home screen touch Menus > Reports > Menu Settings Page - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 7
is fully powered up, the touch screen should display a list of functions, instead of standard home screen icons such as Copy or Fax. 3 Verify that the MFP is in Configuration mode by locating the Exit Config Menu icon in the lower right corner of the touch screen. 4 Scroll through the configuration - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 8
the progress of the encryption task. After the disk has been encrypted, the MFP will return to the Enable/Disable screen. Warning: Do not power off the host port on the back of the device. 1 From the home screen, touch Menus > Network/Ports > Standard USB. 2 Scroll to the left to set - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 9
Administering the device" on page 15. After completing the the home screen, touch Menus > Security > Disk Wiping. 2 Set Wiping Mode to Auto. 3 Set Automatic Method to Multi-pass 8 characters. • Contain at least one lower case letter, one upper case letter, and one non-alphabetic character. • Not be - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 10
You will select one or more of these groups when configuring security templates, and then apply a security template to each device function, to control access to that function. The MFP supports a maximum of 250 user accounts and 32 user groups. Step 1: Defining groups 1 From the home screen, touch - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 11
Step 2: Creating accounts 1 From the home screen, touch Menus > Security > Edit ID and password, and then touch Submit. The MFP will return to the Internal Accounts screen. 3 8 characters. • Contain at least one lower case letter, one upper case letter, and one non-alphabetic character. • Not be - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 12
Setup, select the internal accounts building block. Touch Next. 6 Select one or more groups to be included in the template, and then touch of Access Controls and what they do, see "Access Controls" on page 48. 1 From the home screen, touch Menus > Security > Edit Security Setups > Edit Access - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 13
Device Change Language from Home Screen Color Dropout Configuration Menu Copy Color Printing Copy Function Create Bookmarks at the Device Create Bookmarks Remotely Create Profiles E-mail Function eSF Configuration Fax Function Firmware Updates Flash Drive Color Printing Flash Drive Firmware Updates - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 14
is to remove unneeded icons from the MFP home screen: 1 From the home screen, touch Menus > Settings > General Settings. 2 Scroll to locate Home Screen Customization. 3 Set FTP, FTP Shortcuts, and USB Drive to Do not display. Note: If other functions (such as Fax) are not available to users, you can - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 15
, and then touch Submit. 6 Touch the home icon to return to the home screen. 7 Reboot the MFP by turning it off and back on using the HTTPS) 3 Click Submit. Disabling HTTP/HTTPS access using the touch screen 1 From the home screen, touch Menus > Network/Ports > Standard Network > STD NET SETUP > TCP/ - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 16
, you can find it by printing a network setup page. Printing a network setup page 1 From the home screen, touch Menus. 2 Touch Reports. 3 Touch Network Setup Page. After the network setup page prints, the MFP will return to the home screen. Settings for network-attached devices After attaching the - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 17
information about accessing the EWS, see "Using the Embedded Web Server" on page 15. Be sure to disable HTTP and HTTPS access after you have finished information about accessing the EWS, see "Using the Embedded Web Server" on page 15. Be sure to disable HTTP and HTTPS access after you have finished - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 18
Note: For information about accessing the EWS, see "Using the Embedded Web Server" on page 15. Be sure to disable HTTP and HTTPS access after you have finished using the , and then one of the numbered Host fields. 8 Type the IP address of the client device you want to connect to the MFP. If using - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 19
about accessing the EWS, see "Using the Embedded Web Server" on page 15. Be sure to disable HTTP and HTTPS access after you have finished . The MFP will return to the AppleTalk screen. From there you can select Back to return to Std Network Setup, or the home icon to return to the home screen. - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 20
. From there you can select Back to return to Std Network Setup, or the home icon to return to the home screen. Shutting down port access Disabling virtual ports helps prevent intruders from accessing the MFP using a network connection. Once the HTTP and HTTPS ports have been disabled, you will - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 21
see "Using the Embedded Web Server" on page 15. Be sure to disable HTTP and HTTPS Click Submit. Using the touch screen 1 From the home screen touch Menus > Security > Set Date and to control user access to the MFP, you must first configure Kerberos. Using one krb5.conf file is used, - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 22
be configured or adjusted using the touch screen. 1 From the home screen, touch Menus > Security > Edit Security Setups > Edit Note: For information about accessing the EWS, see "Using the Embedded Web Server" on page 15. Be sure to disable HTTP and HTTPS access after you have finished using the EWS - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 23
configure SMTP settings. 9 Click Submit. Using the touch screen 1 From the home screen, touch Menus > Security > Security Audit Log > Configure Log. 2 then delete. 8 If you want the MFP to automatically notify administrators of certain log events, type one or more E-mail addresses (separated by - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 24
Note: In order to use E-mail alerts, you must also configure SMTP settings. For information about SMTP settings, see "E-mail" on page 24. E-mail User data sent by the MFP using E-mail must be sent as an attachment. Using the EWS 1 From the EWS, click Settings > E-mail/FTP Settings > E-mail Settings - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 25
sent as". Set "E-mail images sent as" to Attachment. 5 Touch Submit. SMTP settings 1 From the home screen, touch Menus > Network/Ports > SMTP Setup. 2 Type the IP address or hostname of the Primary SMTP Gateway the MFP will use for sending E-mail. 3 Select the Primary SMTP Gateway Port number of the - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 26
NTLM Domain fields. 12 Touch Submit. Fax If your MFP includes fax capabilities and is attached to a phone line, you must disable fax forwarding, enable held faxes, and disable driver to fax. Using the EWS 1 From the EWS, click Settings > Fax Settings > Analog Fax Setup. Note: For information about - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 27
takes approximately a minute to boot into the Configuration menu. Once the MFP is fully powered up, the touch screen should display a list of functions, instead of standard home screen icons such as Copy or Fax. 3 Verify that the MFP is in Configuration mode by locating the Exit Config Menu icon in - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 28
user, but also segmenting users into groups. You will select one or more of these groups when configuring security templates, and then apply a security template to each device function, to control access to that function. The MFP supports a maximum of 250 user accounts and 32 user groups. Example - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 29
as other network services. Supported devices can store a maximum of five LDAP + GSSAPI configurations. Each configuration must have a unique name. Note: You must configure Kerberos before setting up LDAP+GSAPPI. For information about configuring Kerberos, see "Kerberos" on page 21. Using the - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 30
Credentials (optional) • MFP Kerberos Username- Type the distinguished name of the print server(s). • MFP Password-Type the Kerberos access to device functions. 5 Click Submit. Using the touch screen 1 From the home screen, touch Menus > Security > Edit Security Setups > Edit Building Blocks > - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 31
the General Information screen, select Device Credentials, and then adjust the following settings as needed (optional): • MFP Kerberos Username- The distinguished name of the print server(s). • MFP Password-The Kerberos password for the print server(s). Touch Submit, to save settings and return to - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 32
page instruction for users, or a custom Logon Screen Image. Custom screen images must be in GIF format, and no larger than 800 x 320 pixels. 7 Clear the Allow Copy without Card check box. 8 Clear the Allow Fax without Card check box. 9 Set User Validation Mode to Active Directory. 10 Select Use MFP - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 33
MFP should wait for a response from the domain controller before moving to the next one in the list. 12 If users are allowed to login manually, provide at least one Manual reverse lookups are not supported on your network. 17 network, or if some servers are multi-homed, click Browse to locate a Hosts - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 34
For information about accessing the EWS, see "Using the Embedded Web Server" on page 15. Be sure to disable HTTP and HTTPS access after you have finished been configured on the MFP (internal accounts, LDAP+GSSAPI, and/or PKI Authentication). 7 Click Modify Groups, and then select one or more groups - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 35
page 15. Be sure to disable HTTP and HTTPS access after you have finished using the EWS. 2 You can specify custom Icon Text to be displayed above the Held Jobs icon on the MFP home each job from the printer. • Select Allow one of four intervals ranging from one hour to one week. • Repeat - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 36
to device functions using the EWS Access to MFP functions can be restricted by applying security templates do can be found in the "Access Controls" on page 48. 1 From the EWS, click Settings > Home Screen Color Dropout Configuration Menu Copy Color Fax Function Firmware Updates Flash Drive Color - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 37
Remotely PictBridge Printing PJL Device Setting Changes Release Held Faxes Remote Certificate Management Remote Management Reports Menu at the Device Security Menu at the Device Security Menu Remotely Service Engineer Menus at the Device Service Engineer Menus Remotely Settings Menu at the Device - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 38
Access Control Supplies Menu Remotely Use Profiles Web Import/Export Settings Level of protection Not applicable - all remote access disabled Authenticated users Not applicable - all remote access disabled 38 - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 39
Troubleshooting Login Issues "Unsupported USB Device" error message A NON-SUPPORTED SMARTCARD READER IS ATTACHED Only the OmniKey reader shipped with the printer is supported. Remove the unsupported reader and attach the OmniKey reader. The printer home , contact the Lexmark Solutions Help Desk - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 40
MFP's date and time" error message This error indicates the printer clock is more than five minutes out of sync with the domain controller clock. Verify the date and time on the printer the DHCP server before manually configuring NTP settings. 3 If you have configured the printer to use an NTP - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 41
BY A FIREWALL Port 88 must be opened between the printer and the KDC in order for authentication to work. " file" error message This error occurs during manual login, and indicates the Windows Domain is PKI Authentication solution settings do not support multiple Kerberos Realm entries. If multiple - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 42
Info..." For information about LDAP-related issues, see"LDAP Issues" on page 42. User is logged out almost immediately after logging in Try increasing PORT 636 (SSL) IS BLOCKED BY A FIREWALL These ports are used by the printer to communicate with the LDAP server, and must be open in order for LDAP - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 43
during address book searches, user E-mail address searches, or user home directory searches. THE ADDRESS BOOK SETUP CONTAINS AN IP ADDRESS FOR CORRECT Verify that the LDAP attributes for the user's E-mail address and/or home directory are correct. Held Jobs/Print Release Lite Issues "You are not - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 44
principal name, or the credential provided by manual login is used to set the userid ( the SmartCard principal name, or the credential provided by manual login is used to set the userid (userid). sent the job (or jobs) to a different printer, or the jobs were automatically deleted because they were - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 45
of the MFP is touch-sensitive, and can be used to access device functions, and navigate settings and configuration menus. The "home screen" looks administrators only. Using the on-screen keyboard Some device settings require one or more alphanumeric entries, such as server addresses, user names, - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 46
To type a single upper case or Shift character, touch the up-arrow A, and then touch the letter or number you need to capitalize or shift-select. To turn on caps-lock, touch the up-arrow A with the lock symbol, and then continue typing. Uppercase/Shift will remain engaged until you touch the lock - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 47
Security Service Applications Programming Interface Hypertext Transfer Protocol Secure Hypertext Transfer Protocol Internet Protocol Internet Protocol Security Internet Protocol Version 4 Internet Protocol Version 6 Key Distribution Center Lightweight Directory Access Protocol Multifunction printer - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 48
your printer. Function Access Control Address Book Change Language from Home Screen Color Dropout Configuration Menu Copy Color Printing configuration of any installed eSF applications Controls access to the Scan to Fax function Controls the ability to update firmware from any source other than - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 49
Remotely PictBridge Printing PJL Device Setting Changes Release Held Faxes Remote Certificate Management Remote Management Reports Menu at the access to the Sevice Engineer menu from the printer control panel Protects access to the Service Engineer menu from the Embedded Web Server Protects access - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 50
at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 51
Appendix D: Using Common Access Cards Using a Common Access Card to access the MFP 1 Insert your Common Access Card into the card reader attached to the MFP: Note: The appearance of your MFP, including the location of the card reader, may vary. 2 When prompted, use the number pad located on the - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 52
your credentials: 3 After your logon credentials have been validated, the MFP will return to the home screen: Note: The MFP home screen may contain different icons than the one shown here. For more information about using the touch screen, see "Appendix A: Using the touch screen" on page 45. 52 - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 53
or provided by Lexmark for use in connection with your Lexmark product. The term "Software Program" includes machine-readable instructions, audio/visual or as a result of, the Software Program. b Copying. You may make one (1) copy of the Software Program solely for purposes of backup, archiving, or - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 54
OF THE NATURE OF THE CLAIM, INCLUDING BUT NOT LIMITED TO BREACH OF WARRANTY OR CONTRACT, TORT (INCLUDING NEGLIGENCE OR STRICT LIABILITY), AND EVEN IF LEXMARK, OR ITS SUPPLIERS, AFFILIATES, OR REMARKETERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, OR FOR ANY CLAIM BY YOU BASED ON A THIRD - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 55
with the terms of this License Agreement, any other written agreement signed by you and Lexmark relating to your Use of the Software Program). To the extent any Lexmark policies or programs for support services conflict with the terms of this License Agreement, the terms of this License Agreement - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 56
fax settings Driver to fax 26 fax forwarding 26 held faxes 26 fax storage 26 firmware verifying 6 function access using the EWS to restrict 36 using the touch screen to restrict 12 Function Access Controls list of 48 H held faxes 26 home screen 45 home 15 network setup page printing 15 Network Time - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 57
supported devices 5 syslog configuring 22 T touch screen using the 45 troubleshooting home screen does not lock 39 jobs not being held at printer 44 jobs print immediately 44 KDC and MFP to use Print Release Lite 43 printer clock out of sync 40 problem getting user info 42 realm on guide 5 57 - Lexmark Color Laser | Common Criteria Installation Supplement and Administrator - Page 58
www.lexmark.com
Common Criteria
Installation supplement and administrator
guide
April 2010
www.lexmark.com
Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries.
All other trademarks are the property of their respective owners.
© 2010 Lexmark International, Inc.
All rights reserved.
740 West New Circle Road
Lexington, Kentucky 40550
3060008-002