Lexmark X464 Common Criteria Installation Supplement and Administrator Guide
Lexmark X464 Manual
View all Lexmark X464 manuals
Add to My Manuals
Save this manual to your list of manuals |
Lexmark X464 manual content summary:
- Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 1
Common Criteria Installation supplement and administrator guide April 2010 www.lexmark.com Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries. All other trademarks are the property of their respective - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 2
programs described may be made at any time. For Lexmark technical support, visit support.lexmark.com. For information on supplies and downloads, visit www.lexmark.com. If you don't have access to the Internet, you can contact Lexmark by mail: Lexmark International, Inc. Bldg 004-2/CSC 740 New Circle - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 3
Contents Overview and first steps 5 Overview...5 Using this guide...5 Supported devices...5 Operating environment...5 Before configuring the device (required)...6 Verifying physical interfaces and installed firmware...6 Attaching a lock...6 Encrypting the hard disk...7 Disabling the USB Buffer...8 - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 4
using the EWS...34 Controlling access to device functions...35 Configuring PKI Held Jobs...35 Controlling access to device functions using the EWS...36 Troubleshooting 39 Login Issues...39 "Unsupported USB Device" error message...39 The printer home screen does not return to a locked state when not - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 5
the MFP touch screen, see"Appendix A: Using the touch screen" on page 45. Supported devices This guide describes how to implement an evaluated configuration on the following models: • Lexmark X463 • Lexmark X464 • Lexmark X466 • Lexmark X651 • Lexmark X652 • Lexmark X654 • Lexmark X656 • Lexmark - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 6
processing functions are disabled at the factory. 2 Turn the MFP on using the power switch. 3 From the home screen touch Menus > Reports > Menu Settings Page. Several pages of device information will print. 4 Under Installed Features, verify that no Download Emulator (DLE) option cards have been - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 7
a minute to boot into the Configuration menu. Once the MFP is fully powered up, the touch screen should display a list of functions, instead of standard home screen icons such as Copy or Fax. 3 Verify that the MFP is in Configuration mode by locating the Exit Config Menu icon in the lower right - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 8
, and then Exit Config Menu. The MFP will power-on reset, and then return to normal operating mode. Disabling the USB Buffer Disabling the USB buffer disables the USB host port on the back of the device. 1 From the home screen, touch Menus > Network - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 9
Configuring disk wiping Note: Not all devices have a hard disk installed. This section applies only to devices containing a hard disk. Disk wiping is used to remove 4 Touch Submit. Enabling the backup password (optional) Warning: Using a backup password is strongly discouraged because it can degrade - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 10
assigning a user ID and password to each user, but also segmenting users into groups. You will select one or more of these groups when configuring security templates, and then apply a security template to each device function, to control access to that function. The MFP supports a maximum of 250 - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 11
to use device functions, and access the Security menu • Administrators permitted to access all device functions Setups > Edit Building Blocks > Internal Accounts > General Settings. 2 On the General Settings screen, set Required User Credentials to User ID and password, and then touch Submit. The MFP - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 12
however, security templates currently in use can be modified. 1 From the home screen, touch Menus > Security > Edit Security Setups > Edit Security Templates. 2 To remove all security templates, select Delete List. 3 To remove an individual security template, select it from the list, and then touch - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 13
Function eSF Configuration Fax Function Firmware Updates Flash Drive Color Printing Flash Drive Firmware Updates Flash Drive Print Flash Drive Scan FTP Function Held Jobs Access Manage Shortcuts at the Device Manage Shortcuts Remotely Network Ports/Menu at the Device Network Ports/Menu Remotely NPA - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 14
access disabled Disabling home screen icons The final step is to remove unneeded icons from the MFP home screen: 1 From the home screen, touch Menus > Settings > General Settings. 2 Scroll to locate Home Screen Customization. 3 Set FTP, FTP Shortcuts, and USB Drive to Do not display. Note: If other - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 15
part of the evaluated configuration on network-attached devices. Once a device is in the evaluated configuration configuration. Enabling HTTP/HTTPS access to the Embedded Web Server 1 From the home screen, touch Menus > Network/Ports > Standard Network > STD NET SETUP 7 Reboot the MFP by turning it - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 16
screen, touch Menus. 2 Touch Reports. 3 Touch Network Setup Page. After the network setup page prints, the MFP will return to the home screen. Settings for network-attached devices After attaching the MFP to a network, you will need to configure additional settings. This section covers the basic - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 17
Certificate Management. 3 Select a certificate from the list. The details of the certificate are displayed in the Device Certificate Management window. 4 From here, you can: • Delete-Remove a previously stored certificate. • Download to File-Download or save the certificate as a PEM (.cer) file. 17 - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 18
IP address of the client device you want to connect to the MFP. If using Pre-Shared Key (PSK) Authentication, also type the key. Note: If using PSK Authentication, retain the key to use later when configuring client devices. 9 Configure IPSec, as needed, on client devices that will connect to the - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 19
be necessary to scroll down to find the AppleTalk selection. c Set Activate to No. d Touch Submit. The MFP will return to the AppleTalk screen. From there you can select Back to return to Std Network Setup, or the home icon to return to the home screen. 2 To disable NetWare: a If not starting from - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 20
9500/TCP 9501 (NPAP) • TCP 9600 (IPDS) • UDP 9700 (Plug-n-Print) • TCP 10000 (Telnet) • Web Services 3 Click Submit. Other settings and functions Network Time Protocol Use Network Time Protocol (NTP), to automatically sync MFP date and time settings with a trusted clock, so that Kerberos requests - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 21
authentication, select the Enable Authentication check box, and then click "Install auth keys" to browse to the file containing the NTP user access to the MFP, you must first configure Kerberos. Using the EWS 1 From the EWS, click Settings > Security > Security Setup. Note: For information - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 22
Delete File to remove the Kerberos configuration file from the selected device. • Click View File to view the Kerberos configuration file for the selected device. • Click Test Setup to verify that the Kerberos configuration Remote Syslog check box will be grayed out until an IP address or hostname - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 23
then delete. • Select E-mail % full alert if you want the MFP to send an E-mail when log storage space reaches a specified percentage of capacity. • you must click Submit to save changes, and then follow the Setup E-mail Server link to configure SMTP settings. 9 Click Submit. Using the touch screen 1 - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 24
you must also configure SMTP settings. For information about SMTP settings, see "E-mail" on page 24. E-mail User data sent by the MFP using E-mail must sent as". 3 Under Web Link Setup, verify the following settings: • Server-must be blank. • Login-must be blank. • Password-must be blank. • Path- - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 25
out. 6 If you want to receive responses to messages sent from the MFP (in case of failed or bounced messages), type a Reply Address. 7 From the Use home screen, touch Menus > Network/Ports > SMTP Setup. 2 Type the IP address or hostname of the Primary SMTP Gateway the MFP will use for sending E-mail - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 26
appropriate for your network in the Device Userid, Device password, and Kerberos 5 Realm or NTLM Domain fields. 12 Touch Submit. Fax If your MFP includes fax capabilities and is attached to a phone line, you must disable fax forwarding, enable held faxes, and disable driver to fax. Using the EWS - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 27
menus until you locate the Fax Storage Location menu selection. 5 Select Disk as the Fax Storage Location, and then touch Submit. The MFP will return to the main Configuration menu. 6 To finish, press Back, and then Exit Config Menu. The MFP will power-on reset, and then return to normal - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 28
and white printing, color printing, and faxing. Scenario 1: Creating groups based on department Security template basic_user Groups included in template • Warehouse • Office • Marketing Template will be applied to Copy Function color_user Marketing Copy Color Printing fax_user • Office - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 29
Password. 4 Click Submit. 5 Return to Settings > Security > Security Setup Password-Type the password entered MFP as seamless as other network services. Supported devices can store a maximum of five LDAP + GSSAPI configurations. Each configuration must have a unique name. Note: You must configure - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 30
communicate with the LDAP server. The default LDAP port is 389. • MFP Kerberos Username- Type the distinguished name of the print server(s). • MFP Password-Type the Kerberos password for the print Group Names • Configure Groups-Administrators can pick groups from this setup for controlling access to - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 31
, select Device Credentials, and then adjust the following settings as needed (optional): • MFP Kerberos Username- The distinguished name of the print server(s). • MFP Password-The Kerberos password for the print server(s). Touch Submit, to save settings and return to General Information. 7 From the - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 32
larger than 800 x 320 pixels. 7 Clear the Allow Copy without Card check box. 8 Clear the Allow Fax without Card check box. 9 Set User Validation Mode to Active Directory. 10 Select Use MFP Kerberos Setup to use the Kerberos settings already configured on the MFP, or clear the check box to use Simple - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 33
-IP address mappings. 19 Select Wait for Active Network, to display Waiting for network... on the touch screen after the MFP is powered on. This message disappears when the network becomes available. 20 Click Apply. Note: You must install at least one Certificate Authority (CA) certificate in - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 34
the Authorization Setup list. This list will be populated with the authentication building blocks that have been configured on the MFP (internal accounts or deleting an existing security template 1 From the EWS, click Settings > Security > Security Setup. 2 Under Advanced Security Setup, Step - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 35
can only delete a security template if it is not in use; however, security templates currently in use can be modified. Controlling access to device functions Configuring PKI Held Jobs PKI Held Jobs, also referred to as Release Print Jobs, is used to securely hold documents at the MFP until released - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 36
from Home Screen Color Dropout Configuration Menu Copy Color Printing Copy Function Create Bookmarks at the Device Create Bookmarks Remotely Create Profiles E-mail Function eSF Configuration Fax Function Firmware Updates Flash Drive Color Printing Flash Drive Firmware Updates Level of protection - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 37
Card Configuration Remotely Paper Menu at the Device Paper Menu Remotely PictBridge Printing PJL Device Setting Changes Release Held Faxes Remote Certificate Management Remote Management Reports Menu at the Device Reports Menu Remotely Security Menu at the Device Security Menu Remotely Service - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 38
Access Control Supplies Menu Remotely Use Profiles Web Import/Export Settings Level of protection Not applicable - all remote access disabled Authenticated users Not applicable - all remote access disabled 38 - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 39
Troubleshooting Login Issues "Unsupported USB Device" error message A NON-SUPPORTED SMARTCARD READER IS ATTACHED Only the OmniKey reader shipped with the printer is supported. Remove the unsupported reader and attach the OmniKey reader. The printer installed solutions, contact the Lexmark Solutions - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 40
MFP's date and time" error message This error indicates the printer clock is more than five minutes out of sync with the domain controller clock. Verify the date and time on the printer: 1 From the Embedded Web Server, click Settings > Security > Set Date and Time. 2 If you have manually configured - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 41
BY A FIREWALL Port 88 must be opened between the printer and the KDC in order for authentication to work. "User's Realm was not found in the Kerberos Configuration file" error message This error occurs during manual login, and indicates the Windows Domain is not specified in the Kerberos settings - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 42
user does not recognize the User Principle Name specified in the error message 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication >Configure. 2 If the Simple Kerberos Setup has been configured in PKI Authentication, verify that the IP address or hostname of the - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 43
REQUIRES SSL 1 From the Embedded Web Server, click Settings > Network/Ports > Address Book Setup. 2 Verify or adjust the following settings: • Server Port are correct. Held Jobs/Print Release Lite Issues "You are not authorized to use this feature" Held Jobs error message This error usually indicates - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 44
a different printer, or the jobs were automatically deleted because they were not printed in time. Jobs are printing out immediately Most likely, the user is not selecting the print and hold feature when printing the job. Show the user how to select the print and hold feature in the print driver. 44 - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 45
on the front of the MFP is touch-sensitive, and can be used to access device functions, and navigate settings and configuration menus. The "home screen" more alphanumeric entries, such as server addresses, user names, or passwords. When an alphanumeric entry is needed, a keyboard will be displayed - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 46
to capitalize or shift-select. To turn on caps-lock, touch the up-arrow A with the lock symbol, and then continue typing. Uppercase/Shift will remain engaged until you touch the lock key again. Touch Backspace, to delete a single character, or Clear, to delete everything you have typed. 46 - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 47
guide CA CAC DC DHCP DNS DoD EAL EWS GIF GSSAPI HTTP HTTPS IP IPSec IPv4 IPv6 KDC LDAP MFP NTLM NTP OCSP PEM PKI PSK RFC SMTP SSL TCP TLS UDP USB Certificate Authority Common Access Card Domain Controller Dynamic Host Configuration Protocol Domain Name Service printer NT LAN Manager Network Time - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 48
Color Dropout Configuration Menu Copy Color Printing Copy Function Create Bookmarks at the Device Create Bookmarks Remotely Create Profiles E-mail Function eSF Configuration Fax Function Firmware Updates Flash Drive Color Printing Flash Drive Firmware Updates Flash Drive Print Flash Drive Scan - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 49
This applies only when an Option Card with configuration options is installed in the device. Protects access to the Paper menu from the printer control panel. Protects access to the Paper menu from the Embedded Web Server. Controls ability to print from an attached PictBridge capable digital camera - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 50
Import/Export Settings What it does Protects access to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF applications Controls the ability to import and export - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 51
Appendix D: Using Common Access Cards Using a Common Access Card to access the MFP 1 Insert your Common Access Card into the card reader attached to the MFP: Note: The appearance of your MFP, including the location of the card reader, may vary. 2 When prompted, use the number pad located on the - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 52
to validate your credentials: 3 After your logon credentials have been validated, the MFP will return to the home screen: Note: The MFP home screen may contain different icons than the one shown here. For more information about using the touch screen, see "Appendix A: Using the touch screen" - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 53
of any Software Program installed on or provided by Lexmark for use in connection with your Lexmark product. The term "Software Program" includes machine-readable instructions, audio/visual content (such as images and recordings), and associated media, printed materials and electronic documentation - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 54
at the time of download. Use of the printed materials, and this License Agreement and you may not retain copies UPGRADES. To Use a Software Program identified as an upgrade, you must first be licensed to the original Software Program identified by Lexmark as eligible for the upgrade. After upgrading - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 55
, or biological weapons proliferation. 17 CAPACITY AND AUTHORITY TO CONTRACT. You represent that you are of the legal age of majority in the place by you and Lexmark relating to your Use of the Software Program). To the extent any Lexmark policies or programs for support services conflict with the - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 56
configuring 24 Embedded Web Server disabling 20 enabling 15 using 15 encrypting network data 18 encrypting the hard disk 7 encryption IPSec 18 environment operating 5 EWS using 15 F fax forwarding 26 fax settings Driver to fax 26 fax forwarding 26 held faxes 26 fax storage 26 firmware verifying - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 57
supported devices 5 syslog configuring 22 T touch screen using the 45 troubleshooting authentication failure 40 authorization to use Held Jobs 43 authorization to use Print Release Lite 43 certificate error 40 client unknown 42 domain certificate error 40 domain controller certificate not installed - Lexmark X464 | Common Criteria Installation Supplement and Administrator Guide - Page 58
www.lexmark.com
Common Criteria
Installation supplement and administrator
guide
April 2010
www.lexmark.com
Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries.
All other trademarks are the property of their respective owners.
© 2010 Lexmark International, Inc.
All rights reserved.
740 West New Circle Road
Lexington, Kentucky 40550
3060008-002