Lexmark X463 PKI-Enabled Device Installation and Configuration Guide
Lexmark X463 Manual
View all Lexmark X463 manuals
Add to My Manuals
Save this manual to your list of manuals |
Lexmark X463 manual content summary:
- Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 1
PKI-Enabled Device Installation and Configuration Guide February 2010 www.lexmark.com Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries. All other trademarks are the property of their respective owners. © - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 2
conjunction with other products, programs, or services, except those expressly designated by the manufacturer, are the user's responsibility. © 2010 Lexmark International, Inc. All rights reserved. UNITED STATES GOVERNMENT RIGHTS This software and any accompanying documentation provided under this - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 3
Supported devices ...5 Before configuring the printer ...5 Installing the firmware and applications...6 Verifying and updating the firmware ...19 Troubleshooting 21 Login Issues...21 LDAP issues...24 Scan to Email issues...26 Scan to Network issues...28 Held Jobs/Print Release Lite issues...31 - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 4
Notices 33 Index 37 Contents 4 - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 5
for use by Lexmark service providers, and network administrators responsible for the management of security appliances and software in their network environment. For information about physically setting up the printer or using printer features, see the User Guide or Software and Documentation CD - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 6
Page. The network setup page prints, and the printer returns to the home screen. Installing the firmware and applications Verifying and updating the firmware Enabling PKI support for your printer involves three main components: • The printer firmware • The authentication token • The Lexmark PKI - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 7
to sign and encrypt E-mail messages sent from the printer, securely scan documents and images to a network file share, and hold documents at the printer until released by an authorized user. The authentication application is required, but all other applications are optional and can be installed - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 8
-x.x.x.fls PKI Scan to Network pkiadnetworkscan.x.x.x-fls PKI Held Jobs (Print Release Lite) pkiadheldjobs.x.x.x.fls The file names shown are not version-specific. Use the latest version available for each file. For information about available versions, contact the Lexmark Solutions Help - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 9
Date and time In order for users to login to the printer, the printer clock must be set to within five minutes of the domain controller system clock. Printer clock settings can be updated manually, or configured to use Network Time Protocol (NTP), to automatically sync with a trusted clock-typically - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 10
+sOnCaQ== -----END CERTIFICATE----- Configuring Scan to Email If users will have access to Scan to Email (with or without S/MIME capability), you must configure E-mail and address book settings on the printer. If users will not be allowed to access Scan to Email, you can skip this section - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 11
setting is Print only for error. • E-mail Bit Depth-Set to 8-bit for grayscale imaging, or 1-bit for black and white. 3 Adjust other scan settings as needed. 4 Click Submit. Address Book setup Configuring the printer Address Book enables users to search your network Global Address Book for E-mail - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 12
Type, select whether users can access the printer using Card Only (SmartCard), Card or Manual Login, or Manual Login Only (userid/password). 3 Select whether Card Pin must be Numeric Only, or can be Alphanumeric. 4 If desired, provide custom Logon Screen Text, with special instruction for users, or - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 13
Configuration Note: As with any form of authentication that relies on an external server, users will not be able to access protected device functions in the event a network issue prevents the printer from communicating with the authenticating server. 1 From the Embedded Web Server, click Settings - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 14
values can be entered, separated by commas. 6 Use the Group Authorization List to allow only users in certain Active Directory groups access to specific printer functions, such as color printing. Multiple groups can be entered, separated by commas. Leave blank if not using group authorization - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 15
Web Server, click Settings > Embedded Solutions > PKI S/MIME Email > Configure. 2 For From Address, select either Card Email Address (SmartCard) or LDAP Lookup, to specify how the printer should retrieve the user's address when sending E-mail. Note: If manual login is allowed, you must select LDAP - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 16
users from the printer touch screen: • User Can Only Send to Self (no other recipients can be added) • User Can Change Options (scan settings) • User Can Change Subject • User Can Change Message • User Can Change Attachment Name • Return to Email Screen-By default, users the Scan to Network icon is - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 17
be used to authorize user groups. If groups are not being used, select the same setting used for Device Access Control in PKI Authentication (usually Solution-specific access control 1). Note: Authorization can be further restricted when configuring specific Scan to Network file shares. 6 Continue - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 18
blank Using a dynamic file share with the Windows User ID: - Display Name-User Share - UNC Path-\\dfs\shares\%u - Replacement Value-LDAP Lookup - LDAP - Replacement Attribute-samaccountname • Default Filename-The default filename for scanned documents. If users are not allowed to change the default - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 19
PKI Scan to Network > PKI Scan to Network > Print Release Lite, you can skip this section. 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Held Jobs > Configure. 2 You can specify custom Icon Text to be displayed above the Held Jobs icon on the printer user groups. - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 20
you want to allow users to change the number of copies for each job from the printer. • Select Allow Users to Print All if you want to allow users to select a Print All (jobs) button, rather than select each print job individually. • Select Date Printed (Descending), Date Printed (Ascending), or Job - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 21
Troubleshooting Login Issues "Unsupported USB Device" error message A SUPPORTED SMARTCARD READER HAS BEEN INSTALLED BEFORE THE PKI FIRMWARE AND APPLICATIONS The reader can not be installed until the firmware and applications have been installed. Remove the card reader, and see "Installing the - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 22
THE SMARTCARD IS NOT RECOGNIZED BY THE READER Contact the Lexmark Solutions Help Desk for assistance. "The KDC and MFP clocks are different beyond an acceptable range; check the MFP's date and time" error message This error indicates the printer clock is more than five minutes out of sync with - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 23
resolve the issue. PORT 88 IS BLOCKED BY A FIREWALL Port 88 must be opened between the printer and the KDC in order for authentication to work. "User's Realm was not found in the Kerberos Configuration file" error message This error occurs during manual login, and indicates the Windows Domain is - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 24
normally occurs either during login (at "Getting User Info"), or during address book searches. PORT 389 (NON-SSL) OR PORT 636 (SSL) IS BLOCKED BY A FIREWALL These ports are used by the printer to communicate with the LDAP server, and must be open in order for LDAP lookups to work. Troubleshooting 24 - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 25
This normally occurs during address book searches, user E-mail address searches, or user home directory searches. THE ADDRESS BOOK SETUP CONTAINS AN IP ADDRESS FOR THE LDAP SERVER 1 From the Embedded Web Server, click Settings > Network/Ports > Address Book Setup. 2 Verify that the Server - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 26
Click Apply. THE LDAP LOOKUP FAILED For help resolving LDAP-related problems, see "LDAP issues" on page 24. "Email cannot be sent because you are not authorized to perform this function" error message This error usually indicates the user in not in an Active Directory group that is authorized to use - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 27
recipient is in your global address book. Unable to send E-mail (SMTP-related issues) When users are unable to send E-mail, there can be several possible causes: "INVALID MESSAGE ID" ERROR FROM THE SMTP SERVER This problem occurs in earlier versions of the firmware, so verify that you have the - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 28
SET TO KERBEROS 5, BUT THE SMTP SERVER REPORTS GSSAPI IS NOT SUPPORTED 1 From the Embedded Web Server, click Settings > E-mail/ printer and SMTP server on port 25. Scan to Network issues "You are not authorized to use this feature" Scan to Network error message This error usually indicates the user - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 29
to verify the file size" error message After scanning, the number of bytes scanned is compared to the number written to the saved file. If the user does not have read access to the file share, the file size cannot be determined. To correct this problem, grant the user read access to the file share - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 30
(or servers) on port 445. "The network share name does not exist on the specified file server" error message THE PRINTER CONNECTED TO THE FILE SERVER, BUT THE SHARE NAME DOES NOT EXIST Verify that the share name is correct, and that the user has read/write access to that share. Troubleshooting 30 - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 31
last dollar sign in the UNC path. 4 Click Apply to save any needed changes. Held Jobs/Print Release Lite issues "You are not authorized to use this feature" Held Jobs error message This error usually indicates the user in not in an Active Directory group that is authorized to use the function. If - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 32
, or the jobs were automatically deleted because they were not printed in time. Jobs are printing out immediately Most likely, the user is not selecting the print and hold feature when printing the job. Show the user how to select the print and hold feature in the print driver. Troubleshooting 32 - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 33
means storing, loading, installing, executing, or displaying the Software Program. If Lexmark has licensed the Software Program to you for concurrent use, you must limit the number of authorized users to the number specified in your agreement with Lexmark. You may not separate the components of the - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 34
terms at the time of download. Use of the Freeware by you shall be governed entirely by the terms and conditions of such license. 4 TRANSFER. You may transfer the Software Program to another end-user. Any transfer must include all software components, media, printed materials, and this License - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 35
applicable law. 13 APPLICABLE LAW. This Agreement is governed non-exclusively by the laws of the country in which you acquired the Software Program (or, you and Lexmark relating to your Use of the Software Program). To the extent any Lexmark policies or programs for support services conflict with - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 36
conditions are met: 1. Redistributions of source code must retain the above copyright notice, this /or other materials provided with the distribution: THIS SOFTWARE IS PROVIDED BY THE AUTHOR "AS IS" AND NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 37
configuring 10 supported devices 5 T TCP/IP settings 8 timeout automatic 9 troubleshooting 501 5.5.4 Invalid Address error 27 authentication failure 22 authorization to use Held Jobs 31 authorization to use Print Release Lite 31 authorization to use Scan to Network 28 certificate error 23 client - Lexmark X463 | PKI-Enabled Device Installation and Configuration Guide - Page 38
Jobs 31 not authorized to use Print Release Lite 31 not authorized to use Scan to Network 28 port 25 blocked 27 printer clock out of sync 22 problem getting user info 24 realm on card not found 24 scanned and saved file sizes do not match 29 SMTP server does not support GSSAPI 27 SMTP server must
PKI-Enabled Device
Installation and Configuration Guide
February 2010
www.lexmark.com
Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries.
All other trademarks are the property of their respective owners.
© 2010 Lexmark International, Inc.
All rights reserved.
740 West New Circle Road
Lexington, Kentucky 40550