Lexmark X464 PKI-Enabled Device Installation and Configuration Guide
Lexmark X464 Manual
View all Lexmark X464 manuals
Add to My Manuals
Save this manual to your list of manuals |
Lexmark X464 manual content summary:
- Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 1
PKI-Enabled Device Installation and Configuration Guide February 2010 www.lexmark.com Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries. All other trademarks are the property of their respective owners. © - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 2
programs described may be made at any time. For Lexmark technical support, visit support.lexmark.com. For information on supplies and downloads, visit www.lexmark.com. If you don't have access to the Internet, you can contact Lexmark by mail: Lexmark International, Inc. Bldg 004-2/CSC 740 New Circle - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 3
Settings...16 Default Scan Settings ...17 Creating file shares...17 Editing or deleting a file share ...19 Configuring PKI Held Jobs...19 PKI Held Jobs settings ...19 Troubleshooting 21 Login Issues...21 LDAP issues...24 Scan to Email issues...26 Scan to Network issues...28 Held Jobs/Print Release - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 4
Notices 33 Index 37 Contents 4 - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 5
user. Also referred to as Print Release Lite. PKI Authentication is the only required application, and must be installed and configured if you plan to attach a SmartCard reader to the printer. This guide is intended for use by Lexmark service providers, and network administrators responsible for the - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 6
Setup Page. The network setup page prints, and the printer returns to the home screen. Installing the firmware and applications Verifying and updating the firmware Enabling PKI support for your printer involves three main components: • The printer firmware • The authentication token • The Lexmark - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 7
version LR.FL.P224cLDc LR.SP.P108LDc Note: If your printer does not have the minimum firmware version or a later version installed, you will need to install a firmware update before proceeding to other configuration tasks. Contact the Lexmark Solutions Help Desk for help in obtaining the correct - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 8
files include: Application PKI Authentication PKI S/MIME Email Installation file pkiadauth-x.x.x.fls pkiademail-x.x.x.fls PKI Scan to Network pkiadnetworkscan.x.x.x-fls PKI Held Jobs (Print Release Lite) pkiadheldjobs.x.x.x.fls The file names shown are not version-specific. Use the - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 9
Date and time In order for users to login to the printer, the printer clock must be set to within five minutes of the domain controller system clock. Printer clock settings can be updated manually, or configured to use Network Time Protocol (NTP), to automatically sync with a trusted clock-typically - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 10
capability), you must configure E-mail and address book settings on the printer. If users will not be allowed to access Scan to Email, you can skip this section. SMTP settings 1 From the Embedded Web Server, click Settings > E-mail/FTP Settings > SMTP Setup. 2 Under SMTP Setup, type the IP address - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 11
recommended setting is Print only for error. • E-mail Bit Depth-Set to 8-bit for grayscale imaging, or 1-bit for black and white. 3 Adjust other scan settings as needed. 4 Click Submit. Address Book setup Configuring the printer Address Book enables users to search your network Global Address Book - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 12
such as Copy and Fax. 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication > Configure. 2 For Logon Type, select whether users can access the printer using Card Only (SmartCard), Card or Manual Login, or Manual Login Only (userid/password). 3 Select whether - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 13
PIN. 3 Select Use MFP Kerberos Setup to use the Kerberos settings already configured on the printer, or clear the check box to use Simple Kerberos Setup. 4 For Simple Kerberos Setup you must provide: • Realm-The Kerberos realm as configured in Active Directory; typically the Windows Domain Name. The - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 14
. Adjust them as needed to allow the printer to communicate on your network. 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication > Configure. 2 Select Disable Reverse DNS Lookups if they are not supported on your network. 3 To use only the information provided by - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 15
. If you are not using Scan to Email, you can skip this section. 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI S/MIME Email > Configure. 2 For From Address, select either Card Email Address (SmartCard) or LDAP Lookup, to specify how the printer should retrieve the user - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 16
Name • Return to Email Screen-By default, users are returned to the home screen after sending E-mail. This option returns the user to the E-maill screen, preserving previously selected recipients, subject, message, and scan options. 5 Click Apply. Configuring PKI Scan to Network If users will have - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 17
> PKI Scan to Network > Configure. 2 Under Default Scan Settings, adjust the following settings as needed: • Format-The default file format for scanned documents. • Content-The default for the type of content in scanned documents. • Color-Determines whether scanned documents will be in color, black - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 18
-Leave blank Using a dynamic file share with the Windows User ID: - Display Name-User Share - UNC Path-\\dfs\shares\%u - Replacement Value-LDAP Lookup - LDAP - Replacement Attribute-samaccountname • Default Filename-The default filename for scanned documents. If users are not allowed to change the - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 19
the Embedded Web Server, click Settings > Embedded Solutions > PKI Scan to Network > Configure. 2 Under File Shares, highlight the name of the share you want to remove, and then click Delete. A confirmation page will be displayed. 3 Click Remove to finish deleting the share and return to the list of - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 20
Require All Jobs to be Held if you want to require all jobs to remain on the printer until released by an authorized user, or until they expire. • Select Clear Print Data to clear the memory associated with each print job once the job is released. 9 Click Apply. Configuring PKI-enabled devices 20 - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 21
Troubleshooting Login Issues "Unsupported USB Device" error message A SUPPORTED SMARTCARD READER HAS BEEN INSTALLED BEFORE THE PKI FIRMWARE AND APPLICATIONS The reader can not be installed until the firmware and applications have been installed. Remove the card reader, and see "Installing the - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 22
MFP's date and time" error message This error indicates the printer clock is more than five minutes out of sync with the domain controller clock. Verify the date and time on the printer: 1 From the Embedded Web Server, click Settings > Security > Set Date and Time. 2 If you have manually configured - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 23
BY A FIREWALL Port 88 must be opened between the printer and the KDC in order for authentication to work. "User's Realm was not found in the Kerberos Configuration file" error message This error occurs during manual login, and indicates the Windows Domain is not specified in the Kerberos settings - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 24
message 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication >Configure. 2 If the Simple Kerberos Setup has been configured ports are used by the printer to communicate with the LDAP server, and must be open in order for LDAP lookups to work. Troubleshooting 24 - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 25
NETWORK The printer uses reverse DNS lookups to verify IP addresses. If reverse lookup is disabled on the network: 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication > Configure , click Settings > Network/Ports > Address Book Setup. 2 Verify or Troubleshooting 25 - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 26
Scan to Email issues "Email cannot be sent because an error occurred trying to get your email address" error message THERE IS A CONFLICT BETWEEN THE LOGIN TYPE, AND HOW THE FROM ADDRESS IS BEING RETRIEVED This error occurs when a user is logged in manually, but PKI S/MIME Email is configured to - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 27
you have the correct firmware version installed. For information about finding the correct version for your printer, see "Verifying and updating the firmware" on page 6. If you have verified or updated your firmware and still experience this problem, contact the Lexmark Solutions Help Desk. "501 - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 28
is not available because no file shares have been configured by the system administrator" error message You need to add at least one file share for users to scan to. For information on adding file shares, see "Configuring PKI Scan to Network" on page 16. "This feature is not available because - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 29
Lookup" is selected to obtain the Replacement Value. 4 Click Apply to save any needed changes. "No UNC Path has been defined for this destination" error message 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Scan to Network > Configure. 2 Under File Shares, highlight the - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 30
(or servers) on port 445. "The network share name does not exist on the specified file server" error message THE PRINTER CONNECTED TO THE FILE SERVER, BUT THE SHARE NAME DOES NOT EXIST Verify that the share name is correct, and that the user has read/write access to that share. Troubleshooting 30 - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 31
Scan to Network > Configure. 2 Under File Shares, highlight the name of the share you want to modify, and then click Edit. The configuration page for that share will be displayed. 3 Under General Settings, select Remove "$" from Fileshare Name to remove Windows User ID" error message by manual login - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 32
, or the jobs were automatically deleted because they were not printed in time. Jobs are printing out immediately Most likely, the user is not selecting the print and hold feature when printing the job. Show the user how to select the print and hold feature in the print driver. Troubleshooting 32 - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 33
of any Software Program installed on or provided by Lexmark for use in connection with your Lexmark product. The term "Software Program" includes machine-readable instructions, audio/visual content (such as images and recordings), and associated media, printed materials and electronic documentation - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 34
installation, provided the copy contains all of the original Software Program's proprietary notices. You may not copy the Software Program to any public or distributed network. c Reservation of Rights. The Software Program, including all fonts, is copyrighted and owned by Lexmark of download. Use - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 35
, or biological weapons proliferation. 17 CAPACITY AND AUTHORITY TO CONTRACT. You represent that you are of the legal age of majority in the place by you and Lexmark relating to your Use of the Software Program). To the extent any Lexmark policies or programs for support services conflict with the - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 36
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 37
error message unsupported USB device 21 F file shares creating 17 editing or deleting 19 firmware updating 6 version 6 H hosts file 14 L LDAP referrals 14 Logon Screen customizing 12 logout automatic 9 M multi-homed servers hosts file for 14 N network settings finding 5 network setup page printing - Lexmark X464 | PKI-Enabled Device Installation and Configuration Guide - Page 38
31 not authorized to use Print Release Lite 31 not authorized to use Scan to Network 28 port 25 blocked 27 printer clock out of sync 22 problem getting user info 24 realm on card not found 24 scanned and saved file sizes do not match 29 SMTP server does not support GSSAPI 27 SMTP server must
PKI-Enabled Device
Installation and Configuration Guide
February 2010
www.lexmark.com
Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries.
All other trademarks are the property of their respective owners.
© 2010 Lexmark International, Inc.
All rights reserved.
740 West New Circle Road
Lexington, Kentucky 40550