Lexmark X548 Common Criteria Installation Supplement and Administrator Guide
Lexmark X548 Manual
View all Lexmark X548 manuals
Add to My Manuals
Save this manual to your list of manuals |
Lexmark X548 manual content summary:
- Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 1
and Administrator Guide November 2011 www.lexmark.com Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries. All other trademarks are the property of their respective owners. © 2011 Lexmark International, Inc - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 2
conjunction with other products, programs, or services, except those expressly designated by the manufacturer, are the user's responsibility. © 2011 Lexmark International, Inc. All rights reserved. UNITED STATES GOVERNMENT RIGHTS This software and any accompanying documentation provided under this - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 3
...9 Enabling the backup password (optional) ...9 Creating user accounts ...10 Creating security templates...11 Controlling access to device functions...12 Disabling home screen icons ...14 Administering the device 15 Using the Embedded Web Server...15 Settings for network-connected devices 15 - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 4
using the EWS 34 Troubleshooting 37 Login issues...37 "Unsupported USB Device" error message ...37 The printer home screen fails to return Unable to determine Windows User ID" error message 42 "There are no jobs available for [USER]" error message 42 Jobs are printing out immediately ... - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 5
of the evaluation. Using this guide This guide is intended for use by Lexmark service providers, and network administrators responsible for the management of security appliances and software in their network environment. A working knowledge of Lexmark multifunction printers is required for effective - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 6
DLE) option cards have been installed. 5 If you find additional interfaces, or if a DLE card has been installed, then contact your Lexmark representative before proceeding. 6 To verify the firmware version, under Device Information, locate Base =, and Network =. 7 Contact your Lexmark representative - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 7
cannot be accessed without causing visible damage to the device. Note: If you are using a Lexmark 6500e scanner with a T650, T652, T654, or T656 printer, then you must attach a lock to both the scanner and the printer. 1 Verify that the MFP case is closed. 2 Locate the security slot, and then attach - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 8
3 Verify that the MFP is in Configuration mode by locating the Exit Config Menu icon in Touch Back, and then touch Exit Config Menu. The MFP will undergo a power‑on reset, and then return to normal operating mode. Disabling the USB buffer Disabling the USB buffer disables the USB host port on the - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 9
on a non-networked (standalone) Mode to Auto. 3 Set Automatic Method to Multi‑pass. 4 Touch Submit. Enabling the backup password (optional) Warning: Using a backup password user ID. 1 From the home screen, touch > Security > Edit Security Setups > Edit Backup Password > Password. 2 Type the password - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 10
to each device function to control access to that function. The MFP supports a maximum of 250 user accounts and 32 user groups. Step 1: Defining groups 1 From the home screen, touch > Security > Edit Security Setups > Edit Building Blocks > Internal Accounts > General Settings > Groups for Internal - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 11
Security Setups > Edit Building Blocks > Internal Accounts > 2 On the General Settings screen, set Required User Credentials to User ID and password, and should be included. • For all other users, add only the Authenticated_Users group. 10 After selecting the appropriate group or groups, touch - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 12
modified. From the home screen, touch > Security > Edit Security Setups > Edit Security Templates. • To remove all security templates, Disabled-This disables access to a function for all users and administrators. • Not applicable-The function has been Service Engineer Menus at the Device Service - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 13
access only Firmware Updates Disabled PJL Device Setting Changes Disabled Operator Panel Lock Authenticated users only Address Book Authenticated users only Create Profiles Disabled Create Bookmarks at the Device Disabled Create Bookmarks Remotely Disabled Flash Drive Print Not - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 14
Printing Solution 1 Solutions 2‑10 New Solutions Level of protection Disabled Authenticated users only Authenticated users screen customization. 3 Set FTP, FTP shortcuts, and USB Drive to Do not display. Note: If other functions (such as Fax) are not available to users, then you can also disable - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 15
your device. Using the Embedded Web Server Many settings can be configured using either the Embedded Web Server (EWS) or the touch screen. by printing a network setup page. Printing a network setup page From the home screen, touch > Reports > Network Setup Page. After the network setup page prints, - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 16
about accessing the EWS, see "Using the Embedded Web Server" on page 15. 2 Click Device Certificate Management. 3 Select a certificate from the list. The details of the certificate are displayed in the Device Certificate Management window. 4 Do any of the following: • Delete-Remove a previously - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 17
power switch. Setting up IPSec IPSec encrypts IP packets as they are transmitted over the network between devices. It does not handle authentication or restrict access. 1 From the Embedded Web Server, click Settings > Security > IPSec. Note: For information about accessing the EWS, see "Using the - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 18
the Embedded Web Server, click Settings > Network/Ports > AppleTalk. 2 Verify that the Activate check box is cleared, and then click Submit. Using the touch screen 1 From the home screen, touch > Network/Ports > Standard Network > STD NET SETUP. 2 From the Std Network Setup screen, touch AppleTalk - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 19
If you will be using LDAP+GSSAPI or Common Access Cards to control user access to the MFP, then you must first configure Kerberos. Using the EWS 1 From the Embedded Web Server, click Settings > Security > Security Setup. Note: For information about accessing the EWS, see "Using the Embedded Web - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 20
file. Importing a Kerberos configuration file Using the EWS, you can also import a krb5.conf file rather than configure the Simple Kerberos Setup. 1 From the Embedded Web Server, click Settings > Security > Security Setup. Note: For information about accessing the EWS, see "Using the Embedded Web - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 21
device to add a digital signature to e-mail alerts. Note: To use e-mail alerts, click Submit to save changes, and then follow the Setup E-mail Server link to configure SMTP settings. 9 Click Submit. Using the touch screen 1 From the home screen, touch > Security > Security Audit Log > Configure Log - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 22
to e-mail alerts, then set "Digitally sign exports" to On. 10 For "Severity of events to log," select 5 ‑ Notice. The chosen be "image" (default). • Web Link-This must be blank. SMTP settings 1 From the Embedded Web Server, click Settings > E-mail/FTP Settings > SMTP Setup. 2 Under SMTP Setup, - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 23
SMTP Credentials. 10 From the User‑Initiated E‑mail list, select the option most appropriate for your network or server environment. 11 If screen. 4 Set E‑mail images sent as to Attachment. 5 Touch Submit. SMTP settings 1 From the home screen, touch > Network/Ports > SMTP Setup. 2 Touch the Primary - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 24
an encrypted link. 8 If the SMTP server requires user credentials, then select a method for SMTP Server Authentication. 9 Set Device‑Initiated E‑mail to Use Device SMTP Credentials. 10 For User‑Initiated E‑mail, select the option most appropriate for your network or server environment. 11 If the MFP - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 25
is selected and the password (or other applicable credential) is lost, then you will not be able to access the security menus. To regain access to the security menus, a service call will be required to replace the device RIP card (motherboard). User access Administrators and users are required to - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 26
printing, color printing, user: • Warehouse employee-Black_and_white group only. • Office employee-Black_and_white group, fax group. • Marketing employee-Black_and_white group, color group, fax group. Step 1: Defining groups 1 From the Embedded Web Server, click Settings > Security > Security Setup - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 27
+GSSAPI to take advantage of authentication and authorization services already deployed on the network. User credentials and group designations can be pulled from your existing system, making access to the MFP as seamless as other network services. Supported devices can store a maximum of five LDAP - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 28
Credentials (optional) • Use Active Directory Device Credentials-Click to select or clear. When the printer authenticates to the LDAP server, it can provide Active Directory device credentials in addition to supporting anonymous binding or the specified credentials in the MFP's Kerberos Username and - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 29
needed (optional): • Use Active Directory Device Credentials-Touch to select or clear. When the printer authenticates to the LDAP server, it can provide Active Directory device credentials in addition to supporting anonymous binding or the specified credentials in the MFP's Kerberos Username and MFP - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 30
a custom Logon Screen Image. Custom screen images must be in GIF format and must not be larger than 800 x 320 pixels. 7 Clear the Allow Copy without Card and the Allow Fax without Card check boxes. 8 Set "User Validation Mode" to Active Directory. 9 Select the Use Device Kerberos Setup check box to - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 31
are allowed to log in manually, then provide at least one Manual Login Domain (a Windows Domain Name) to choose from when logging in. Multiple domains can be entered, separated by commas. 12 Select a DC Validation Mode for validating the domain controller certificate when users log into the MFP - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 32
users authorized to access the functions protected by that template. A "PKI Authentication" security template is created automatically when you configure PKI Authentication. 1 From the Embedded Web Server, click Settings > Security > Security Setup select an option from the Authorization Setup list. - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 33
to use. To view the default icon image, click View Current Value. 5 For Access Control, select Solution‑specific access control 1. 6 Select from the following Release Options to specify how users will be able to release print jobs: • Release Method-Select User Selects job(s) to print if you want to - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 34
be Held and Clear Print Data check boxes. Server, click Settings > Security > Security Setup. Note: For information about accessing the EWS, see "Using the Embedded Web Server" on page 15. 2 Under Advanced Security Setup for all users and administrators. Service Engineer Menus at the Device Service - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 35
Firmware Updates PJL Device Setting Changes Operator Panel Lock Function Access Access control Address Book Create Profiles Create Bookmarks at the Device Create Bookmarks Remotely Flash Drive Print Flash Drive Color Printing Flash Drive Scan Copy Function Copy Color Printing Color Dropout - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 36
at the Device PictBridge Printing Level of protection Authenticated users only Authenticated users only Administrator access only Not applicable-USB port disabled Device Solutions Access control Solution 1 Solutions 2-10 New Solutions Level of protection Authenticated users only Note: When eSF - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 37
37 Troubleshooting Login issues "Unsupported USB Device" error message MAKE SURE A SUPPORTED SMART CARD READER IS ATTACHED Only the OmniKey reader that came with the printer is supported. Remove the unsupported reader and attach the OmniKey reader. The printer home screen fails to return to a locked - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 38
savings time settings are correct. Note: If your network uses DHCP, then verify that NTP settings are not automatically provided by the DHCP server before manually configuring NTP settings. 3 If you have configured the printer to use an NTP server, then verify that those settings are correct and - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 39
88 must be opened between the printer and the KDC for authentication to work. "User's Realm was not found in the Kerberos Configuration file" error message MAKE SURE THE WINDOWS DOMAIN IS SPECIFIED IN THE KERBEROS SETTINGS 1 From the Embedded Web Server, click Settings > Device Solutions > Solutions - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 40
not support user does not recognize the User Principal Name specified in the error message. VERIFY THAT THE DOMAIN CONTROLLER INFORMATION IS CORRECT 1 From the Embedded Web Server, click Settings > Device Solutions > Solutions (eSF) > PKI Authentication > Configure. 2 If the Simple Kerberos Setup - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 41
address book searches, user e-mail address searches, or user home directory searches. Try one or more of the following: VERIFY THAT THE ADDRESS BOOK SETUP CONTAINS THE HOST NAME FOR THE LDAP SERVER 1 From the Embedded Web Server, click Settings > Network/Ports > Address Book Setup. 2 Verify that the - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 42
, specify how the Windows user ID will be obtained when a user attempts to log in: • None-The user ID is not set. You can select this option if the user ID is not needed by other applications. • User Principal Name-The Smart Card principal name or the credential provided by manual login is used to - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 43
the Lexmark Solutions Help Desk for assistance. MAKE SURE ALL JOBS ARE REQUIRED TO BE HELD 1 From the Embedded Web Server, click Settings > Device Solutions > Solutions (eSF) > PKI Held Jobs > Configure. 2 Under Advanced Settings, select the Require All Jobs to be Held and Clear Print - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 44
(yours may contain additional icons): Copy Release Held Faxes E-mail @ Search FTP Held Jobs Held jobs Status/ Supplies Ready. Touch on the lower right to more alphanumeric entries, such as server addresses, user names, and passwords. When an alphanumeric entry is needed, a keyboard appears - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 45
continue typing. Caps Lock will remain engaged until you touch Caps again. Password ~ 1! @# $ %^ 23456 &* 7 8 ( 9 ) 0 _ + - = @ QWE RT Y U I O P [{ ]} \| : " Caps A S D F G H J K L ; Clear Shift Z X C V B N M ? , . / Backspace .com .org Space Cancel Done - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 46
Service Department of Defense Evaluation Assurance Level Embedded Web Server Graphic Interchange Format Generic Security Service Distribution Center Lightweight Directory Access Protocol Multifunction printer NT LAN Manager Network Time Protocol Online Certificate Status Protocol Privacy Enhanced - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 47
This protects access to the Service Engineer menu from the printer control panel. Service Engineer Menus Remotely This protects access to the Service Engineer menu from the Embedded Web Server. Settings Menu at the Device This protects access to the General and Print Settings sections of the - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 48
update firmware from any source other than a flash drive. Firmware files that are received through FTP, the Embedded Web Server, etc., will be ignored (flushed) when this function is protected. This protects access to the locking function of the printer control panel. If this is enabled, then users - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 49
. Users who are denied will have their print jobs printed in black and white. This controls the ability to update firmware from a flash drive. This controls the ability to print from a flash drive. This controls the ability to scan documents to a flash drive. This controls access to the Scan to FTP - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 50
the keypad that appears on the touch screen, and then touch Next. It may take a moment for the printer to validate your credentials. After your credentials have been validated, the printer will return to the home screen. Note: For more information about using the touch screen, see "Appendix A: Using - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 51
Program installed on or provided by Lexmark for use in connection with your Lexmark product. The term "Software Program" includes machine-readable instructions, audio/visual content (such as images and recordings), and associated media, printed materials and electronic documentation. BY USING - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 52
Freeware by you shall be governed entirely by the terms and conditions of such license. 4 TRANSFER. You may transfer the Software Program to another end-user. Any transfer must include all software components, media, printed materials, and this License Agreement and you may not retain copies of the - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 53
with the terms of this License Agreement, any other written agreement signed by you and Lexmark relating to your Use of the Software Program). To the extent any Lexmark policies or programs for support services conflict with the terms of this License Agreement, the terms of this License Agreement - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 54
mail configuring 22 Embedded Web Server using 15 encrypting network data 17 encrypting the hard disk 7 encryption IPSec 17 environment operating 6 EWS using 15 F fax forwarding 24 fax settings Driver to fax 24 fax forwarding 24 held faxes 24 fax storage 24 firmware verifying 6 function access using - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 55
42 not authorized to use Held Jobs 42 not authorized to use Print Release Lite 42 printer clock out of sync 38 problem getting user info 40 realm on card not found 40 unable to authenticate 38 unable to determine Windows User ID 42 unexpected logout 40 unknown client 40 unsupported USB device 37 - Lexmark X548 | Common Criteria Installation Supplement and Administrator Guide - Page 56
PN 3065326 Rev. 001 www.lexmark.com *3065326*
Common Criteria
Installation Supplement and Administrator Guide
November 2011
www.lexmark.com
Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries.
All other trademarks are the property of their respective owners.
© 2011 Lexmark International, Inc.
All rights reserved.
740 West New Circle Road
Lexington, Kentucky 40550
3065326-001