Lexmark T652 Embedded Web Server Administrator's Guide

Lexmark T652 Manual

Lexmark T652 manual content summary:

  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 1
    Administrator's Guide February 2009 www.lexmark.com Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries. All other trademarks are the property of their respective owners. © 2009 Lexmark International, Inc
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 2
    programs described may be made at any time. For Lexmark technical support, visit support.lexmark.com. For information on supplies and downloads, visit www.lexmark.com. If you don't have access to the Internet, you can contact Lexmark by mail: Lexmark International, Inc. Bldg 004-2/CSC 740 New Circle
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 3
    ...16 Using a password or PIN to control function access...16 Using a security template to control function access ...16 Scenarios...18 Scenario: Printer in a public place...18 Scenario: Standalone or small office...18 Scenario: Network running Active Directory ...19 Managing certificates and other
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 4
    Appendix 29 Notices 32 Glossary of Security Terms 39 Index 40 Contents 4
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 5
    Lexmark to enable administrators to build secure, flexible profiles that provide end users the functionality they require, while limiting access to sensitive printer functions or outputs to only those users limiting access to a printer-or specific functions of a printer-to anyone who knows the correct
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 6
    to manage access to specific menus and functions or to disable them entirely. Access controls can be set using a password, PIN, or security template. The number of functions that can be controlled varies depending on the type of device, but in some multifunction printers, over 40 individual menus
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 7
    can store a combined total of 250 user-level and administrator-level passwords on each supported device. To create a password 1 From to control access to specific device menus or to a device itself. PINs can also be used to control access to document outputs, by requiring a user to type a correct
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 8
    used as the Administrator PIN. Note: If an activity is secured by a specific Administrator PIN, then only that PIN will grant access to it. 7 Click building block per supported device. Each internal account building block can include a maximum of 250 user accounts, and 32 user groups. The internal
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 9
    more flexible than other authentication methods. Notes: • Supported devices can store a maximum of five unique LDAP printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to securely end each session by selecting Log out on the printer
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 10
    to 30 seconds. • Required User Input-Select either User ID and Password or User ID to specify which credentials a user must provide when attempting to name of the print server(s). • MFP Password-Enter the password for the print server(s). Search specific object classes • Person-Click to select
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 11
    functions in the event of an outage that prevents the printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to securely end each session by selecting Log out on the printer control panel. To add a new LDAP+GSSAPI setup 1 From the
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 12
    which credentials a user must provide when attempting to access a function protected by the LDAP building block. Device Credentials • MFP Kerberos Username-Enter the distinguished name of the print server(s). • MFP Password-Enter the Kerberos password for the print server(s). Search specific object
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 13
    printer from communicating with the authenticating server. • To help prevent unauthorized access, users are encouraged to securely end each session by selecting Log out on the printer you click Submit, the Embedded Web Server will automatically test the krb5.conf file to verify that it is functional
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 14
    printer clock must be in sync or closely aligned with the KDC system clock. Printer clock settings can be updated manually Entering manual settings automatically disables use of NTP. • Choosing "(UTC+user) Custom in a security template only after a supported device has registered with the NTLM domain.
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 15
    Domain PDC Name (the server name of the Primary Domain Controller) • User ID • Password 6 Click Submit. A status screen will appear with the measures become unavailable, for example, if there is a network communication problem, or an authentication server fails. Note: In some organizations, security
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 16
    can control access to specific device functions using a password or PIN. Only one method of security can be assigned to each Access Control. Note: To help prevent unauthorized access, users are encouraged to securely end each session by selecting Log out on the printer control panel. 1 From the
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 17
    . Note: Certain building blocks-such as Passwords and Pins-do not support separate authorization. 7 To use groups, click Modify Groups, and then • To help prevent unauthorized access, users are encouraged to securely end each session by selecting Log out on the printer control panel. • For a list of
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 18
    order to gain access to a function controlled by that code. Scenario: Standalone or small office If your printer is not connected to a network, or you do not use an authentication server to grant users access to devices, Internal Accounts can be created and stored within the Embedded Web Server for
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 19
    building blocks-such as PINs and Passwords-do not support separate authorization. 7 To use groups, click Modify services already deployed on the network. User credentials and group designations can be pulled from the existing network, making access to the printer as seamless as other network services
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 20
    during authentication (optional) • A list of up to 32 groups stored on the LDAP server which will be used to authorize user for access to printer functions Step 2: Configure Kerberos setup 1 From the Embedded Web Server Home screen, browse to Settings ª Security ª Edit Security Setups. 2 Under
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 21
    , or Reset Form to cancel all changes. Users will now be required to enter the appropriate supports the use of digital certificates to help ensure the integrity of information transmitted to and from your printer Click Generate New Certificate . Viewing, downloading, and deleting a certificate 1 From
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 22
    Download Signing Request-Download or save the signing request as a .csr file. • Install Signed Certificate-Upload a previously signed certificate. Setting certificate defaults Administrators can set default values for certificates generated for a supported print queue until the user enters a PIN on
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 23
    wiping to remove residual confidential material from the device and free up memory space. Disk wiping uses random data patterns to securely menu, it is not supported on your device. 2 From the Wiping Mode list, select Off (for no wiping), Auto (for automatic wiping), or Manual (for either scheduled
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 24
    of standard home screen icons such as Copy or Fax. 3 Verify that the printer is in Configuration mode by locating the Exit Configuration button in the lower right corner of the touch screen. Note: On some devices the button will appear as "Exit Config Menu." 4 Press the down arrow to scroll through
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 25
    printer will power-on reset, and then return to normal operating mode. Configuring security audit log settings The security audit log allows administrators to monitor security-related events on a device including, among others, user alert-When the Delete Log button is clicked E-mail log wrapped
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 26
    The default is 30 seconds. 6 To receive responses to messages sent from the printer (in case of failed or bounced messages), type the Reply Address . 7 From using an encrypted link. 8 If your SMTP server requires user credentials, select an authentication method from the SMTP Server Authentication
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 27
    To facilitate the automatic installation of device drivers and other printing applications, select the Enable PPM Mib (Printer Port Monitor MIB) check box. 6 . 4 To allow device monitoring only, type an SNMPv3 Read Only User name and Password in the appropriate fields. 5 From the SNMPv3 Minimum
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 28
    the password (or other applicable credential) is lost, you will not be able to access the security menus. To regain access to the security menus, a service call will be required to replace the device RIP card (motherboard). Using security features in the Embedded Web Server 28
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 29
    to print color from a flash drive. Users who are denied will have their print jobs output in black and white. Controls the ability to update firmware from a Manage Shortcuts section of the Settings menu on the printer control panel Protects access to the Manage Shortcuts item of the Settings menu
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 30
    access to the Operator Panel Lock. Users who are denied access cannot enable or disable the printer control panel lock. Controls access to the access to the Sevice Engineer menu from the printer control panel Protects access to the Service Engineer menu from the Embedded Web Server Protects access
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 31
    Function Access Control Supplies Menu at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 32
    /or other materials provided with the distribution. 3 The end-user documentation included with the redistribution, if any, must include the DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 33
    hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 34
    This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 35
    ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. GNU Lesser General provided by Lexmark for use in connection with your Lexmark product. The term "Software Program" includes machine-readable instructions, audio/
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 36
    reimbursement of the price paid for the Software Program. 3 LICENSE GRANT. Lexmark grants you the following download. Use of the Freeware by you shall be governed entirely by the terms and conditions of such license. 4 TRANSFER. You may transfer the Software Program to another end-user. Any transfer
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 37
    Lexmark as eligible for the upgrade. After upgrading, you may no longer use the original Software Program that formed the basis for your upgrade testing. If you have such statutory rights, you will notify Lexmark , without limitation, any goods and services and personal property taxes, resulting from
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 38
    with the terms of this License Agreement, any other written agreement signed by you and Lexmark relating to your Use of the Software Program). To the extent any Lexmark policies or programs for support services conflict with the terms of this License Agreement, the terms of this License Agreement
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 39
    tools used in the Embedded Web Server. They include: password, PIN, Internal accounts, LDAP, LDAP+GSSAPI, Kerberos 5, and NTLM. A collection of users sharing common characteristics. A profile created and stored in the Embedded Web Server, used in conjunction with Access Controls to manage device
  • Lexmark T652 | Embedded Web Server Administrator's Guide - Page 40
    and 14 using 14 P password creating or editing 7 Personal Identification Number (PIN) 7 PIN creating or editing 7 Index 40 S Scenario Active Directory networks 19 printer in a public place 18 standalone or small office 18 using passwords and PINs 18 security 802.1x authentication 26 Authentication
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40

Embedded Web Server
Administrator's Guide
February 2009
www.lexmark.com
Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries.
All other trademarks are the property of their respective owners.
© 2009 Lexmark International, Inc.
All rights reserved.
740 West New Circle Road
Lexington, Kentucky 40550