Lexmark X466 Common Criteria Installation Supplement and Administrator Guide
Lexmark X466 Manual
View all Lexmark X466 manuals
Add to My Manuals
Save this manual to your list of manuals |
Lexmark X466 manual content summary:
- Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 1
Common Criteria Installation supplement and administrator guide April 2010 www.lexmark.com Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries. All other trademarks are the property of their respective - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 2
will be incorporated in later editions. Improvements or changes in the products or the programs described may be made at any time. For Lexmark technical support, visit support.lexmark.com. For information on supplies and downloads, visit www.lexmark.com. If you don't have access to the Internet - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 3
up IPSec...18 Disabling non-IP network protocols...19 Shutting down port access...20 Other settings and functions...20 Network Time Protocol...20 Kerberos...21 Security audit logging...22 E-mail...24 Fax...26 Configuring security reset jumper behavior...27 User access...27 Creating user accounts - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 4
using the EWS...34 Controlling access to device functions...35 Configuring PKI Held Jobs...35 Controlling access to device functions using the EWS...36 Troubleshooting 39 Login Issues...39 "Unsupported USB Device" error message...39 The printer home screen does not return to a locked state when not - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 5
appliances and software in their network environment. A working knowledge of Lexmark multifunction printers is required for effective use of this guide. Some settings can be configured using either the Embedded Web Server (EWS), or the device touch screen. Where applicable, instructions for both - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 6
network, parallel, or serial interfaces. Note: USB ports that perform document processing functions are disabled at the factory. 2 Turn the MFP on using the power switch. 3 From the home screen touch Menus > Reports > Menu Settings Page. Several pages of device information will print. 4 Under - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 7
It takes approximately a minute to boot into the Configuration menu. Once the MFP is fully powered up, the touch screen should display a list of functions, instead of standard home screen icons such as Copy or Fax. 3 Verify that the MFP is in Configuration mode by locating the Exit Config Menu icon - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 8
Config Menu. The MFP will power-on reset, and then return to normal operating mode. Disabling the USB Buffer Disabling the USB buffer disables the USB host port on the back of the device. 1 From the home screen, touch Menus > Network/Ports > Standard USB. 2 Scroll to the left to set the USB Buffer - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 9
for securely erasing data from a hard disk. 1 From the home screen, touch Menus > Security > Disk Wiping. 2 Set Wiping Mode to Auto. 3 Set Automatic Method to Multi-pass. 4 Touch Submit. Enabling the backup password (optional) Warning: Using a backup password is strongly discouraged because it can - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 10
assigning a user ID and password to each user, but also segmenting users into groups. You will select one or more of these groups when configuring security templates, and then apply a security template to each device function, to control access to that function. The MFP supports a maximum of 250 - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 11
Blocks > Internal Accounts > General Settings. 2 On the General Settings screen, set Required User Credentials to User ID and password, and then touch Submit. The MFP will return to the Internal Accounts screen. 3 From the Internal Accounts screen, select Add Entry. 4 Type the user's account name - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 12
> Edit Security Templates. 2 Select Add Entry. 3 Type a unique name to identify the template. Use a descriptive Controls and what they do, see "Access Controls" on page 48. 1 From the home screen, touch Menus > by another setting. No change required, though it is recommended that you set these access - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 13
Flash Drive Firmware Updates Flash Drive Print Flash Drive Scan FTP Function Held Jobs Access Manage Shortcuts at the Device Manage Shortcuts Remotely Network Ports/Menu at the Device Network Ports/Menu Remotely NPA Network Adapter Setting Changes Operator Panel Lock Option Card Configuration at - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 14
is to remove unneeded icons from the MFP home screen: 1 From the home screen, touch Menus > Settings > General Settings. 2 Scroll to locate Home Screen Customization. 3 Set FTP, FTP Shortcuts, and USB Drive to Do not display. Note: If other functions (such as Fax) are not available to users, you can - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 15
part of the evaluated configuration on network-attached devices. Once a device is in the evaluated configuration, administrators can still adjust many settings HTTPS. 5 Set Enable HTTPS to Yes, and then touch Submit. 6 Touch the home icon to return to the home screen. 7 Reboot the MFP by turning it - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 16
page. Printing a network setup page 1 From the home screen, touch Menus. 2 Touch Reports. 3 Touch Network Setup Page. After the network setup page prints, the MFP will return to the home screen. Settings for network-attached devices After attaching the MFP to a network, you will need to configure - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 17
in the appropriate fields: • Friendly Name-Type a name for the certificate (64-character maximum). • Common Name-Type a name for the device. Note: Leave , except where noted. Viewing, downloading, and deleting a certificate 1 From the EWS, click Settings > Security > Certificate Management. - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 18
IP address of the client device you want to connect to the MFP. If using Pre-Shared Key (PSK) Authentication, also type the key. Note: If using PSK Authentication, retain the key to use later when configuring client devices. 9 Configure IPSec, as needed, on client devices that will connect to the - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 19
page 15. Be sure to disable HTTP and HTTPS access after you have finished using the EWS. 1 To disable NetWare: a From the EWS, click Settings > Network . c Set Activate to No. d Touch Submit. The MFP will return to the AppleTalk screen. From there you can select Back to return to Std Network Setup, - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 20
9501 (NPAP) • TCP 9600 (IPDS) • UDP 9700 (Plug-n-Print) • TCP 10000 (Telnet) • Web Services 3 Click Submit. Other settings and functions Network Time Protocol Use Network Time Protocol (NTP), to automatically sync MFP date and time settings with a trusted clock, so that Kerberos requests and audit - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 21
touch Menus > Security > Set Date and Time. 2 Set Enable NTP to On. 3 Type the IP address or MFP, you must first configure Kerberos. Using the EWS 1 From the EWS, click Settings > Security > Security Setup. Note: For information about accessing the EWS, see "Using the Embedded Web Server" on page - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 22
configure the Simple Kerberos Setup. 1 From the EWS, click Settings > Security > Security Setup. Note: For information about accessing the EWS, see "Using the Embedded Web Server" on page until an IP address or hostname is entered. 4 Type the Remote Syslog Port number used on the destination server - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 23
to save changes, and then follow the Setup E-mail Server link to configure SMTP settings. 9 Click Submit. Using the touch screen 1 From the home screen, touch Menus > Security > Security Audit Log > Configure Log. 2 Set Enable Audit to On. 3 Set Enable Remote Syslog to On. 4 Type the IP address - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 24
signature to E-mail alerts. 13 Touch Submit. Note: In order to use E-mail alerts, you must also configure SMTP settings. For information about SMTP settings, see "E-mail" on page 24. E-mail User data sent by the MFP using E-mail must be sent as an attachment. Using the EWS 1 From the EWS, click - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 25
wait for a response from the SMTP server before timing out. 6 If you want to receive responses to messages sent from the MFP (in case of failed or bounced messages), type a Reply Address. 7 Set Use SSL to Disabled, Negotiate, or Required to specify whether E-mail will be sent using an encrypted link - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 26
" on page 15. Be sure to disable HTTP and HTTPS access after you have finished using the EWS. 2 Under Fax Receive Settings, click Holding Faxes. 3 Set Held Fax Mode to Always On. 4 Click Submit, to save changes and return to Settings. 5 Under Fax Send Settings, clear the Driver to fax check box - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 27
display a list of functions, instead of standard home screen icons such as Copy or Fax. 3 Verify that the MFP is in Configuration mode by locating the Exit Config Menu icon in the lower right corner of the touch screen. 4 To set up a fax storage location, press the down arrow to scroll through the - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 28
assigning a user ID and password to each user, but also segmenting users into groups. You will select one or more of these groups when configuring security templates, and then apply a security template to each device function, to control access to that function. The MFP supports a maximum of 250 - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 29
the MFP as seamless as other network services. Supported devices can store a maximum of five LDAP + GSSAPI configurations. Each configuration must have a unique name. Note: You must configure Kerberos before setting up LDAP+GSAPPI. For information about configuring Kerberos, see "Kerberos" on page - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 30
with the LDAP server. The default LDAP port is 389. • print server(s). • MFP Password-Type the Kerberos password for the print server(s). Search specific object classes (optional) • Person-Click to select or clear; this specifies that the "person" object class will also be searched. • Custom - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 31
, select Device Credentials, and then adjust the following settings as needed (optional): • MFP Kerberos Username- The distinguished name of the print server(s). • MFP Password-The Kerberos password for the print server(s). Touch Submit, to save settings and return to General Information. 7 From the - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 32
instruction for users, or a custom Logon Screen Image. Custom screen images must be in GIF format, and no larger than 800 x 320 pixels. 7 Clear the Allow Copy without Card check box. 8 Clear the Allow Fax without Card check box. 9 Set User Validation Mode to Active Directory. 10 Select Use MFP - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 33
installed on the MFP, and Online Certificate Status Protocol (OCSP) settings must be configured. 14 If you selected OCSP Validation, configure the following: selected. 16 Under Advanced Settings, select Disable Reverse DNS Lookups if reverse lookups are not supported on your network. 17 To use only - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 34
configure PKI Authentication. 1 From the EWS, click Settings > Security > Security Setup. Note: For information about accessing the EWS, see "Using the Embedded Web Server" on page with the authentication building blocks that have been configured on the MFP (internal accounts, LDAP+GSSAPI, and/or PKI - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 35
to as Release Print Jobs, is used to securely hold documents at the MFP until released by an authorized user. 1 From the EWS, click Settings > Embedded Solutions > PKI Held Jobs > Configure. Note: For information about accessing the EWS, see "Using the Embedded Web Server" on page 15. Be sure - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 36
Configuration Menu Copy Color Printing Copy Function Create Bookmarks at the Device Create Bookmarks Remotely Create Profiles E-mail Function eSF Configuration Fax Function Firmware Updates Flash Drive Color Printing Flash Drive Firmware Updates Level of protection Any valid setting Administrator - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 37
the Device Network Ports/Menu Remotely NPA Network Adapter Setting Changes Operator Panel Lock Option Card Configuration at the Device Option Card Configuration Remotely Paper Menu at the Device Paper Menu Remotely PictBridge Printing PJL Device Setting Changes Release Held Faxes Remote Certificate - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 38
Access Control Supplies Menu Remotely Use Profiles Web Import/Export Settings Level of protection Not applicable - all remote access disabled Authenticated users Not applicable - all remote access disabled 38 - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 39
Troubleshooting Login Issues "Unsupported USB Device" error message A NON-SUPPORTED SMARTCARD READER IS ATTACHED Only the OmniKey reader shipped with the printer is supported. Remove the unsupported reader and attach the OmniKey reader. The printer home screen does not return to a locked state when - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 40
MFP's date and time" error message This error indicates the printer clock is more than five minutes out of sync with the domain controller clock. Verify the date and time on the printer: 1 From the Embedded Web Server, click Settings > Security > Set Date and Time. 2 If you have manually configured - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 41
for the "mil" domain). "Realm on the card was not found in the Kerberos Configuration File" error message This error occurs during SmartCard login. The PKI Authentication solution settings do not support multiple Kerberos Realm entries. If multiple realms are needed, you must create and upload - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 42
the user does not recognize the User Principle Name specified in the error message 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication >Configure. 2 If the Simple Kerberos Setup has been configured in PKI Authentication, verify that the IP address or hostname of - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 43
changes. PORT 389 IS BEING USED, BUT THE LDAP SERVER REQUIRES SSL 1 From the Embedded Web Server, click Settings > Network/Ports > Address Book Setup. 2 Verify or adjust the following settings /Print Release Lite Issues "You are not authorized to use this feature" Held Jobs error message This error - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 44
to save any needed changes. "There are no jobs available for [USER]" error message PKI AUTHENTICATION IS NOT SETTING THE CORRECT USERID Normally, LDAP lookup is used to set this value. 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication > Configure. 2 Under User - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 45
Appendix A: Using the touch screen The home screen The screen located on the front of the MFP is touch-sensitive, and can be used to access device functions, and navigate settings and configuration menus. The "home screen" looks similar to this (yours may contain additional icons): Touch the Menus - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 46
or number you need to capitalize or shift-select. To turn on caps-lock, touch the up-arrow A with the lock symbol, and then continue typing. Uppercase/Shift will remain engaged until you touch the lock key again. Touch Backspace, to delete a single character, or Clear, to delete everything you have - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 47
guide CA CAC DC DHCP DNS DoD EAL EWS GIF GSSAPI HTTP HTTPS IP IPSec IPv4 IPv6 KDC LDAP MFP NTLM NTP OCSP PEM PKI PSK RFC SMTP SSL TCP TLS UDP USB Certificate Authority Common Access Card Domain Controller Dynamic Host Configuration Protocol Domain Name Service printer NT LAN Manager Network Time - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 48
your printer. Function Access Control Address Book Change Language from Home Screen Color Dropout Configuration Menu Copy Color Printing Copy Function Create Bookmarks at the Device Create Bookmarks Remotely Create Profiles E-mail Function eSF Configuration Fax Function Firmware Updates Flash Drive - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 49
the Device Network Ports/Menu Remotely NPA Network Adapter Setting Changes Operator Panel Lock Option Card Configuration at the Device Option Card Configuration Remotely Paper Menu at the Device Paper Menu Remotely PictBridge Printing PJL Device Setting Changes Release Held Faxes Remote Certificate - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 50
to the Supplies menu from the printer control panel Protects access to the Supplies menu from the Embedded Web Server Controls access to Profiles, such as scanning shortcuts, workflows, or eSF applications Controls the ability to import and export printer settings files (UCF files) from the Embedded - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 51
Appendix D: Using Common Access Cards Using a Common Access Card to access the MFP 1 Insert your Common Access Card into the card reader attached to the MFP: Note: The appearance of your MFP, including the location of the card reader, may vary. 2 When prompted, use the number pad located on the - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 52
your credentials: 3 After your logon credentials have been validated, the MFP will return to the home screen: Note: The MFP home screen may contain different icons than the one shown here. For more information about using the touch screen, see "Appendix A: Using the touch screen" on page 45. 52 - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 53
of the price paid for the Software Program. 3 LICENSE GRANT. Lexmark grants you the following rights provided you comply with all terms and conditions of this License Agreement: a Use. You may Use one copy of the Software Program. The term "Use" means storing, loading, installing, executing - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 54
and your money will be refunded upon the return of all of your copies of the Software Program. 9 LIMITATION OF LIABILITY. To the maximum extent permitted by applicable law, for any claim arising out of Lexmark's limited warranty, or for any other claim whatsoever related to the subject matter - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 55
Computer Software clause at DFARS 252.227-7013 and in similar FAR provisions (or any equivalent agency regulation or contract clause). 15 CONSENT TO USE OF DATA. You agree that Lexmark, its affiliates, and agents may collect and use information you provide in relation to support services performed - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 56
configuring 24 Embedded Web Server disabling 20 enabling 15 using 15 encrypting network data 18 encrypting the hard disk 7 encryption IPSec 18 environment operating 5 EWS using 15 F fax forwarding 26 fax settings Driver to fax 26 fax forwarding 26 held faxes 26 fax storage 26 firmware verifying - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 57
access 20 SmartCards 51 SMTP settings configuring 24 supported devices 5 syslog configuring 22 T touch screen using the 45 troubleshooting authentication failure 40 authorization to use Held Jobs 43 authorization to use Print Release Lite 43 certificate error 40 client unknown 42 domain certificate - Lexmark X466 | Common Criteria Installation Supplement and Administrator Guide - Page 58
www.lexmark.com
Common Criteria
Installation supplement and administrator
guide
April 2010
www.lexmark.com
Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries.
All other trademarks are the property of their respective owners.
© 2010 Lexmark International, Inc.
All rights reserved.
740 West New Circle Road
Lexington, Kentucky 40550
3060008-002