Lexmark MX6500e 6500e PKI-Enabled Device Installation and Configuration Guide
Lexmark MX6500e 6500e Manual
View all Lexmark MX6500e 6500e manuals
Add to My Manuals
Save this manual to your list of manuals |
Lexmark MX6500e 6500e manual content summary:
- Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 1
PKI-Enabled Device Installation and Configuration Guide February 2010 www.lexmark.com Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries. All other trademarks are the property of their respective owners. © - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 2
programs described may be made at any time. For Lexmark technical support, visit support.lexmark.com. For information on supplies and downloads, visit www.lexmark.com. If you don't have access to the Internet, you can contact Lexmark by mail: Lexmark International, Inc. Bldg 004-2/CSC 740 New Circle - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 3
PKI-enabled devices 5 Overview...5 Supported devices ...5 Before configuring the printer ...5 Installing the firmware and a file share ...19 Configuring PKI Held Jobs...19 PKI Held Jobs settings ...19 Troubleshooting 21 Login Issues...21 LDAP issues...24 Scan to Email issues...26 Scan to Network - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 4
Notices 33 Index 37 Contents 4 - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 5
came with the printer. Supported devices This guide covers the following models: Single-function devices • Lexmark C736 • Lexmark T654 • Lexmark T656 • Lexmark W85x Multi-function devices • Lexmark X46x • Lexmark X65x • Lexmark X73x • Lexmark X86x Before configuring the printer After initial setup - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 6
screen. Installing the firmware and applications Verifying and updating the firmware Enabling PKI support for your printer involves three main components: • The printer firmware • The authentication token • The Lexmark PKI applications All three must be installed and configured before you install - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 7
LR.FL.P224cLDc LR.SP.P108LDc Note: If your printer does not have the minimum firmware version or a later version installed, you will need to install a firmware update before proceeding to other configuration tasks. Contact the Lexmark Solutions Help Desk for help in obtaining the correct firmware - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 8
each file. For information about available versions, contact the Lexmark Solutions Help Desk. PKI Authentication must be installed first. , verify the WINS Server Address, and the DNS Server Address. • If the printer is located in a different domain than the domain controller, the E-mail server, - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 9
Date and time In order for users to login to the printer, the printer clock must be set to within five minutes of the domain controller system clock. Printer clock settings can be updated manually, or configured to use Network Time Protocol (NTP), to automatically sync with a trusted clock-typically - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 10
select Kerberos 5 for SMTP Server Authentication. If Kerberos is not supported, select No Authentication Required. Note: If the SMTP server requires user authentication to send E-mail but does not support Kerberos, the IP address or hostname of the printer must be added to the SMTP server as a relay - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 11
: "Please see the attached document." 4 From Send me a copy, select whether users can choose to send themselves a copy of E-mail messages they send from the printer: • Never appears-The "Send me a copy" option never appears. • On by default-The option is on, but can be turned off by users. • Off by - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 12
mechanism, and supports user authorization to printer using Card Only (SmartCard), Card or Manual Login, or Manual Login Only (userid/password). 3 Select whether Card Pin must be Numeric Only, or can be Alphanumeric. 4 If desired, provide custom Logon Screen Text, with special instruction - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 13
, provide at least one Manual Login Domain (a Windows Domain Name) to choose from when logging in. Multiple domains can be entered, separated by commas. 6 Select a DC Validation Mode for validating the domain controller certificate when users login to the printer: • Device Certificate Validation-The - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 14
principal name, or the credential provided by manual login is used to set the userid user information to be shared with Lexmark Document Distributor (LDD). Note: Directory groups access to specific printer functions, such as color printing DNS Lookups if they are not supported on your network. 3 To - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 15
Configure. 2 For From Address, select either Card Email Address (SmartCard) or LDAP Lookup, to specify how the printer should retrieve the user's address when sending E-mail. Note: If manual login is allowed, you must select LDAP Lookup. 3 Under S/MIME Options, adjust the following settings: • Sign - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 16
> PKI Scan to Network > Configure. 2 Under General Settings, you can specify custom Button Text to be displayed above the Scan to Network icon on the printer home screen. 3 To select an alternate image for the Up Icon (the image that displays when the Scan to Network icon has not been pressed - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 17
5 From Scan to Network Authorization, select which Access Control should be used to authorize user groups. If groups are not being used, select the same setting used for Device Access Control in PKI Authentication (usually Solution-specific access control 1). Note: Authorization can be further - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 18
• UNC Path-The path that corresponds to the network location of this share. The format will depend on whether it is a static or dynamic path. Possible options include: - Static-Use the fully-qualified UNC Path. Example: \\fileserver\CACNetworkShare - Dynamic-Use %u in the path to represent the data - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 19
click Settings > Embedded Solutions > PKI Held Jobs > Configure. 2 You can specify custom Icon Text to be displayed above the Held Jobs icon on the printer home screen. 3 To select an alternate image for the Up Icon (the image that displays when the Held Jobs icon has not been pressed), click - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 20
want to allow users to change the number of copies for each job from the printer. • Select Allow Users to Print All if you want to allow users to Jobs to be Held if you want to require all jobs to remain on the printer until released by an authorized user, or until they expire. • Select Clear Print - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 21
the MFP is supported. Remove the unsupported reader and attach the OmniKey reader. The printer home screen does not return to a locked state when not in use If the printer home screen does in the list of installed solutions, contact the Lexmark Solutions Help Desk for assistance. Troubleshooting 21 - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 22
Lexmark Solutions Help Desk for assistance. "The KDC and MFP clocks are different beyond an acceptable range; check the MFP's date and time" error message This error indicates the printer server before manually configuring NTP settings. 3 If you have configured the printer to use Troubleshooting 22 - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 23
PORT 88 IS BLOCKED BY A FIREWALL Port 88 must be opened between the printer and the KDC in order for authentication to work. "User's Realm was the Kerberos Configuration file" error message This error occurs during manual login, and indicates the Windows Domain is not specified in Troubleshooting 23 - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 24
occurs during SmartCard login. The PKI Authentication solution settings do not support multiple Kerberos Realm entries. If multiple realms are needed, you must ports are used by the printer to communicate with the LDAP server, and must be open in order for LDAP lookups to work. Troubleshooting 24 - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 25
REVERSE DNS LOOKUPS ARE DISABLED ON THE NETWORK The printer uses reverse DNS lookups to verify IP addresses. If reverse lookup is disabled on the network: 1 From the Embedded CORRECT Verify that the LDAP attributes for the user's E-mail address and/or home directory are correct. Troubleshooting 25 - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 26
Click Apply. THE LDAP LOOKUP FAILED For help resolving LDAP-related problems, see "LDAP issues" on page 24. "Email cannot be email cannot be sent because it cannot be digitally signed when a manual login is performed" error message E-mail can only be digitally signed Sign Email. Troubleshooting 26 - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 27
printer, see "Verifying and updating the firmware" on page 6. If you have verified or updated your firmware and still experience this problem, contact the Lexmark to send E-mail but does not support Kerberos, the IP address or hostname of the printer must be added to the SMTP mail. Troubleshooting 27 - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 28
SET TO KERBEROS 5, BUT THE SMTP SERVER REPORTS GSSAPI IS NOT SUPPORTED 1 From the Embedded Web Server, click Settings > E-mail/FTP must adjust server and/or firewall settings to allow communication between the printer and SMTP server on port 25. Scan to Network issues "You are . Troubleshooting 28 - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 29
to the saved file. If the user does not have read access to the file share, the file size cannot be determined. To correct this problem, grant the user read access to the file share. Troubleshooting 29 - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 30
search order specified in the printer settings will be used to same one assigned to user workstations. • If the printer is located in a different domain than the domain allow communication between the printer and file server (or servers) server" error message THE PRINTER CONNECTED TO THE FILE - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 31
needed by other applications. • User Principal Name-The SmartCard principal name, or the credential provided by manual login is used to set the userid (userid@domain). • EDI-PI-The userid portion of the LDAP Lookup for the Session Userid. 3 Click Apply to save any needed changes. Troubleshooting 31 - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 32
, BUT NO JOBS ARE LISTED The user may have sent the job (or jobs) to a different printer, or the jobs were automatically deleted because they were not printed in time. Jobs are printing out immediately Show the user how to select the print and hold feature in the print driver. Troubleshooting 32 - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 33
suppliers, governs your use of any Software Program installed on or provided by Lexmark for use in connection with your Lexmark product. The term "Software Program" includes machine-readable instructions, audio/visual content (such as images and recordings), and associated media, printed materials - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 34
OF THE NATURE OF THE CLAIM, INCLUDING BUT NOT LIMITED TO BREACH OF WARRANTY OR CONTRACT, TORT (INCLUDING NEGLIGENCE OR STRICT LIABILITY), AND EVEN IF LEXMARK, OR ITS SUPPLIERS, AFFILIATES, OR REMARKETERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, OR FOR ANY CLAIM BY YOU BASED Notices 34 - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 35
with the terms of this License Agreement, any other written agreement signed by you and Lexmark relating to your Use of the Software Program). To the extent any Lexmark policies or programs for support services conflict with the terms of this License Agreement, the terms of this License Agreement - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 36
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 37
10 supported devices 5 T TCP/IP settings 8 timeout automatic 9 troubleshooting 501 file share 30 E-mail cannot be digitally signed with manual login 26 home screen does not lock 21 invalid Message ID error 27 jobs not being held at printer 32 jobs print immediately 32 KDC and MFP clocks - Lexmark MX6500e 6500e | PKI-Enabled Device Installation and Configuration Guide - Page 38
Held Jobs 31 not authorized to use Print Release Lite 31 not authorized to use Scan to Network 28 port 25 blocked 27 printer clock out of sync 22 problem getting user info 24 realm on card not found 24 scanned and saved file sizes do not match 29 SMTP server does
PKI-Enabled Device
Installation and Configuration Guide
February 2010
www.lexmark.com
Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries.
All other trademarks are the property of their respective owners.
© 2010 Lexmark International, Inc.
All rights reserved.
740 West New Circle Road
Lexington, Kentucky 40550