Lexmark X463 Common Criteria Installation Supplement and Administrator Guide
Lexmark X463 Manual
View all Lexmark X463 manuals
Add to My Manuals
Save this manual to your list of manuals |
Lexmark X463 manual content summary:
- Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 1
Common Criteria Installation supplement and administrator guide April 2010 www.lexmark.com Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries. All other trademarks are the property of their respective - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 2
conjunction with other products, programs, or services, except those expressly designated by the manufacturer, are the user's responsibility. © 2010 Lexmark International, Inc. All rights reserved. UNITED STATES GOVERNMENT RIGHTS This software and any accompanying documentation provided under this - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 3
down port access...20 Other settings and functions...20 Network Time Protocol...20 Kerberos...21 Security audit logging...22 E-mail...24 Fax...26 Configuring security reset jumper behavior...27 User access...27 Creating user accounts through the EWS...28 Configuring LDAP+GSSAPI...29 Configuring - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 4
immediately...43 Held Jobs/Print Release Lite Issues...43 "You are not authorized to use this feature" Held Jobs error message 43 "Unable to determine Windows User ID" error message 44 "There are no jobs available for [USER]" error message...44 Jobs are printing out immediately...44 Appendix - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 5
device features, see the User Guide that came with your MFP. For information about using the MFP touch screen, see"Appendix A: Using the touch screen" on page 45. Supported devices This guide describes how to implement an evaluated configuration on the following models: • Lexmark X463 • Lexmark X464 - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 6
device information will print. 4 Under Installed Features, verify that no Download Emulator (DLE) option cards have been installed. 5 If you find additional interfaces, or if a DLE card has been installed, contact your Lexmark representative before proceeding. 6 To verify the firmware version, under - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 7
is fully powered up, the touch screen should display a list of functions, instead of standard home screen icons such as Copy or Fax. 3 Verify that the MFP is in Configuration mode by locating the Exit Config Menu icon in the lower right corner of the touch screen. 4 Scroll through the configuration - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 8
to the Enable/Disable screen. Warning: Do not power off the device during the encryption process. Doing so may result in loss of data. Note: Disk encryption can take several hours to complete. 8 To finish, press Back, and then Exit Config Menu. The MFP will power-on reset, and then return to normal - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 9
evaluated configuration on a non-networked (standalone) device in just : 1 Set up disk wiping. 2 Create user accounts. 3 Create security templates. 4 Restrict access pass. 4 Touch Submit. Enabling the backup password (optional) Warning: Using a backup password is strongly discouraged because it can - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 10
templates, and then apply a security template to each device function, to control access to that function. The MFP supports a maximum of 250 user accounts and 32 user groups. Step 1: Defining groups 1 From the home screen, touch Menus > Security > Edit Security Setups > Edit Building Blocks - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 11
the General Settings screen, set Required User Credentials to User ID and password, and then touch Submit. The MFP will return to the Internal Accounts grant access to specific device functions, select all groups in which the administrator should be included. • For all other users, add only the - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 12
- Can be any valid setting available for a function, at the discretion of the administrator. • Disabled- Disables access to a function for all users and administrators. • Not applicable-The function has been disabled by another setting. No change required, though it is recommended that you set these - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 13
Flash Drive Firmware Updates Flash Drive Print Flash Drive Scan FTP Function Held Jobs Access Manage Shortcuts at the Device Manage Shortcuts Remotely Network Ports/Menu at the Device Network Ports/Menu Remotely NPA Network Adapter Setting Changes Operator Panel Lock Option Card Configuration at - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 14
Faxes Remote Certificate Management Remote Management Reports Menu at the Device Reports Menu Remotely Security Menu at the Device Security Menu Remotely Service Engineer Menus at the Device Service icons from the MFP home screen: 1 Fax) are not available to users, you can also disable the icons - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 15
to the Embedded Web Server is disabled as part of the evaluated configuration on network-attached devices. Once a device is in the Submit. 6 Touch the home icon to return to the home screen. 7 Reboot the MFP by turning it off and back on using the power switch. Disabling HTTP/HTTPS access using - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 16
printing a network setup page. Printing a network setup page 1 From the home screen, touch Menus. 2 Touch Reports. 3 Touch Network Setup Page. After the network setup page prints, the MFP issuing the certificate. • Country Name-Type the country location for the company or organization issuing the - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 17
company or organization issuing the certificate. • Country Name-Type the country location for the company or organization issuing the certificate (2- Device Certificate Management window. 4 From here, you can: • Delete-Remove a previously stored certificate. • Download to File-Download or save the - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 18
Download Signing Request-Download up IPSec IPSec encrypts IP packets as they are transmitted over the network between devices. It does not handle authentication or restrict access. one of the numbered Host fields. 8 Type the IP address of the client device you want to connect to the MFP. If using Pre - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 19
be necessary to scroll down to find the AppleTalk selection. c Set Activate to No. d Touch Submit. The MFP will return to the AppleTalk screen. From there you can select Back to return to Std Network Setup, or the home icon to return to the home screen. 2 To disable NetWare: a If not starting - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 20
9500/TCP 9501 (NPAP) • TCP 9600 (IPDS) • UDP 9700 (Plug-n-Print) • TCP 10000 (Telnet) • Web Services 3 Click Submit. Other settings and functions Network Time Protocol Use Network Time Protocol (NTP), to automatically sync MFP date and time settings with a trusted clock, so that Kerberos requests - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 21
If you will be using LDAP+GSSAPI or Common Access Cards to control user access to the MFP, you must first configure Kerberos. Using the EWS 1 hostname of the KDC (Key Distribution Center) IP. 4 For KDC Port, type the number of the port used by the Kerberos server. 5 For Realm, type the realm used - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 22
Setup screen, select KDC Address, type the KDC (Key Distribution Center) IP address or hostname, and then touch Submit. 3 Select KDC Port, type the number of the port used by the Kerberos server, and then touch Submit. 4 Select Realm, and then type the realm used by the Kerberos server. Note: - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 23
or hostname of the Remote Syslog Server. 5 Type the Remote Syslog Port number used on the destination server. 6 For Remote Syslog Method, select Normal oldest entries, or E-mail log then delete. 8 If you want the MFP to automatically notify administrators of certain log events, type one or more E- - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 24
13 Touch Submit. Note: In order to use E-mail alerts, you must also configure SMTP settings. For information about SMTP settings, see "E-mail" on page 24. E-mail User data sent by the MFP SMTP Gateway the MFP will use for sending E-mail. 3 Type the Primary SMTP Gateway Port number of the destination - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 25
Network/Ports > SMTP Setup. 2 Type the IP address or hostname of the Primary SMTP Gateway the MFP will use for sending E-mail. 3 Select the Primary SMTP Gateway Port number encrypted link. 8 If the SMTP server requires user credentials, select a method for SMTP Server Authentication. 9 Set - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 26
appropriate for your network in the Device Userid, Device password, and Kerberos 5 Realm or NTLM Domain fields. 12 Touch Submit. Fax If your MFP includes fax capabilities and is attached to a phone line, you must disable fax forwarding, enable held faxes, and disable driver to fax. Using the EWS - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 27
the security menus. To regain access to the security menus, a service call will be required to replace the device RIP card (motherboard). User access Administrators and users are required to login to the MFP using a method that provides both authentication and authorization. Under the evaluated - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 28
access to that function. The MFP supports a maximum of 250 user accounts and 32 user groups. Example: Employees in the warehouse will be given access to black and white printing only; administrative office staff will be able to print in black and white, and send faxes; and employees in the marketing - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 29
services already deployed on the network. User credentials and group designations can be pulled from your existing system, making access to the MFP as seamless as other network services. Supported an LDAP+GSSAPI Setup. 4 The LDAP+GSSAPI Server Setup dialog is divided into four parts: 29 - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 30
user must provide when attempting to access a function protected by the LDAP building block. Device Credentials (optional) • MFP Kerberos Username- Type the distinguished name of the print server(s). • MFP Password-Type the Kerberos password for the print server(s). Search specific the Short name - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 31
print server(s). • MFP Password-The Kerberos password for the print server(s). Touch Submit, to save settings and return to General Information. 7 From the General Information Screen, select Search Specific want to define, select a numbered group, and then specify the Short name for the group, and - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 32
instruction for users, or a custom Logon Screen Image. Custom screen images must be in GIF format, and no larger than 800 x 320 pixels. 7 Clear the Allow Copy without Card check box. 8 Clear the Allow Fax without Card check box. 9 Set User Validation Mode to Active Directory. 10 Select Use MFP - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 33
Common Access Card uses "123456789@mil" to identify a user, " Manual Login Domain (a Windows Domain Name) to choose from when logging in. Multiple domains can be entered, separated by commas. 13 Select a DC Validation Mode for validating the domain controller certificate when users login to the MFP - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 34
for authenticating users. This list will be populated with the authentication building blocks that have been configured on the MFP (internal accounts . For information about starting PKI Authentication, see "Configuring Common Access Card access" on page 32. 6 Click Add authorization, and then - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 35
above the Held Jobs icon on the MFP home screen. 3 To select an alternate users to change the number of copies for each job from the printer. • Select Allow Users to Print All if you want to enable users to select a Print All button, rather than select each print job individually. • Display Print - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 36
users Book Cancel Jobs at the Device Change Language from Home Screen Color Dropout Configuration Menu Copy Color Printing Copy Function Create Bookmarks at the Device Create Bookmarks Remotely Create Profiles E-mail Function eSF Configuration Fax Function Firmware Updates Flash Drive Color Printing - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 37
Network Ports/Menu Remotely NPA Network Adapter Setting Changes Operator Panel Lock Option Card Configuration at the Device Option Card Configuration Remotely Paper Menu at the Device Paper Menu Remotely PictBridge Printing PJL Device Setting Changes Release Held Faxes Authenticated users Note: - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 38
Access Control Supplies Menu Remotely Use Profiles Web Import/Export Settings Level of protection Not applicable - all remote access disabled Authenticated users Not applicable - all remote access disabled 38 - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 39
Troubleshooting Login Issues "Unsupported USB Device" error message A NON-SUPPORTED SMARTCARD READER IS ATTACHED Only the OmniKey reader shipped with the printer is supported. Remove the unsupported reader and attach the OmniKey reader. The printer solutions, contact the Lexmark Solutions Help Desk - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 40
are different beyond an acceptable range; check the MFP's date and time" error message This error indicates the printer clock is more than five minutes out of sync with the domain controller clock. Verify the date and time on the printer: 1 From the Embedded Web Server, click Settings > Security - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 41
resolve the issue. PORT 88 IS BLOCKED BY A FIREWALL Port 88 must be opened between the printer and the KDC in order for authentication to work. "User's Realm was not found in the Kerberos Configuration file" error message This error occurs during manual login, and indicates the Windows Domain is - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 42
long time at "Getting User Info..." For information about LDAP-related issues, see"LDAP Issues" on page 42. User is logged out almost immediately Getting User Info"), or during address book searches. PORT 389 (NON-SSL) OR PORT 636 (SSL) IS BLOCKED BY A FIREWALL These ports are used by the printer to - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 43
the Embedded Web Server, click Settings > Network/Ports > Address Book Setup. 2 Verify or adjust the user's E-mail address and/or home directory are correct. Held Jobs/Print Release Lite Issues "You are not authorized to use this feature" Held Jobs error message This error usually indicates the user - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 44
a different printer, or the jobs were automatically deleted because they were not printed in time. Jobs are printing out immediately Most likely, the user is not selecting the print and hold feature when printing the job. Show the user how to select the print and hold feature in the print driver. 44 - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 45
screen The screen located on the front of the MFP is touch-sensitive, and can be used to access user names, or passwords. When an alphanumeric entry is needed, a keyboard will be displayed: As you touch the letters and numbers, your selections will be displayed in a corresponding field at the top - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 46
To type a single upper case or Shift character, touch the up-arrow A, and then touch the letter or number you need to capitalize or shift-select. To turn on caps-lock, touch the up-arrow A with the lock symbol, and then continue typing. Uppercase/ - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 47
MFP NTLM NTP OCSP PEM PKI PSK RFC SMTP SSL TCP TLS UDP USB Certificate Authority Common Access Card Domain Controller Dynamic Host Configuration Protocol Domain Name Service Lightweight Directory Access Protocol Multifunction printer NT LAN Manager Network Time Protocol Online Certificate Status - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 48
Firmware Updates Flash Drive Print Flash Drive Scan FTP Function Held Jobs Access Manage Shortcuts at the Device Manage Shortcuts Remotely What it does Controls the ability to perform address book searches in the Scan to Fax and Scan to Email functions Controls access to the Change Language feature - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 49
the Device Network Ports/Menu Remotely NPA Network Adapter Setting Changes Operator Panel Lock Option Card Configuration at the Device Option Card Configuration Remotely Paper Menu at the Device Paper Menu Remotely PictBridge Printing PJL Device Setting Changes Release Held Faxes Remote Certificate - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 50
at the Device Supplies Menu Remotely User Profiles Web Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 51
Appendix D: Using Common Access Cards Using a Common Access Card to access the MFP 1 Insert your Common Access Card into the card reader attached to the MFP: Note: The appearance of your MFP, including the location of the card reader, may vary. 2 When prompted, use the number pad located on the - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 52
to validate your credentials: 3 After your logon credentials have been validated, the MFP will return to the home screen: Note: The MFP home screen may contain different icons than the one shown here. For more information about using the touch screen, see "Appendix A: Using the touch screen" - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 53
means storing, loading, installing, executing, or displaying the Software Program. If Lexmark has licensed the Software Program to you for concurrent use, you must limit the number of authorized users to the number specified in your agreement with Lexmark. You may not separate the components of the - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 54
terms at the time of download. Use of the Freeware by you shall be governed entirely by the terms and conditions of such license. 4 TRANSFER. You may transfer the Software Program to another end-user. Any transfer must include all software components, media, printed materials, and this License - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 55
applicable law. 13 APPLICABLE LAW. This Agreement is governed non-exclusively by the laws of the country in which you acquired the Software Program (or, you and Lexmark relating to your Use of the Software Program). To the extent any Lexmark policies or programs for support services conflict with - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 56
network data 18 encrypting the hard disk 7 encryption IPSec 18 environment operating 5 EWS using 15 F fax forwarding 26 fax settings Driver to fax 26 fax forwarding 26 held faxes 26 fax storage 26 firmware network protocols allowed 19 network settings finding 15 network setup page printing 15 Network - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 57
44 not authorized to use Held Jobs 43 not authorized to use Print Release Lite 43 printer clock out of sync 40 problem getting user info 42 realm on card not found 41 unable to authenticate 40 unable to determine Windows User ID 44 unexpected logout 42 unknown client 42 unsupported USB device 39 - Lexmark X463 | Common Criteria Installation Supplement and Administrator Guide - Page 58
www.lexmark.com
Common Criteria
Installation supplement and administrator
guide
April 2010
www.lexmark.com
Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries.
All other trademarks are the property of their respective owners.
© 2010 Lexmark International, Inc.
All rights reserved.
740 West New Circle Road
Lexington, Kentucky 40550
3060008-002