Lexmark X548 PKI-Enabled Device Installation and Configuration Guide
Lexmark X548 Manual
View all Lexmark X548 manuals
Add to My Manuals
Save this manual to your list of manuals |
Lexmark X548 manual content summary:
- Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 1
and Configuration Guide February 2010 www.lexmark.com Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries. All other trademarks are the property of their respective owners. © 2010 Lexmark International, Inc - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 2
conjunction with other products, programs, or services, except those expressly designated by the manufacturer, are the user's responsibility. © 2010 Lexmark International, Inc. All rights reserved. UNITED STATES GOVERNMENT RIGHTS This software and any accompanying documentation provided under this - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 3
Settings...16 Default Scan Settings ...17 Creating file shares...17 Editing or deleting a file share ...19 Configuring PKI Held Jobs...19 PKI Held Jobs settings ...19 Troubleshooting 21 Login Issues...21 LDAP issues...24 Scan to Email issues...26 Scan to Network issues...28 Held Jobs/Print Release - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 4
Notices 33 Index 37 Contents 4 - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 5
for use by Lexmark service providers, and network administrators responsible for the management of security appliances and software in their network environment. For information about physically setting up the printer or using printer features, see the User Guide or Software and Documentation CD - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 6
Setup Page. The network setup page prints, and the printer returns to the home screen. Installing the firmware and applications Verifying and updating the firmware Enabling PKI support for your printer involves three main components: • The printer firmware • The authentication token • The Lexmark - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 7
and encrypt E-mail messages sent from the printer, securely scan documents and images to a network file share, and hold documents at the printer until released by an authorized user. The authentication application is required, but all other applications are optional and can be installed as needed - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 8
workstations. • If using a static IP address, verify the WINS Server Address, and the DNS Server Address. • If the printer is located in a different domain than the domain controller, the E-mail server, or any file share users may need to scan to from the device, list the additional domains in the - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 9
Date and time In order for users to login to the printer, the printer clock must be set to within five minutes of the domain controller system clock. Printer clock settings can be updated manually, or configured to use Network Time Protocol (NTP), to automatically sync with a trusted clock-typically - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 10
must configure E-mail and address book settings on the printer. If users will not be allowed to access Scan to Email, you can skip this section. SMTP settings 1 From the Embedded Web Server, click Settings > E-mail/FTP Settings > SMTP Setup. 2 Under SMTP Setup, type the IP address or hostname of the - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 11
Adjust other scan settings as needed. 4 Click Submit. Address Book setup Configuring the printer Address Book enables users to search your network Global Address Book for E-mail addresses. 1 From the Embedded Web Server, click Settings > Network/Ports > Address Book Setup. 2 For Server Address, type - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 12
or a custom image, or icons for options such as Copy and Fax. 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication > Configure. 2 For Logon Type, select whether users can access the printer using Card Only (SmartCard), Card or Manual Login, or Manual Login Only - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 13
event a network issue prevents the printer from communicating with the authenticating server. 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication > Configure. 2 Under Active Directory Configuration, select a User Validation Mode: • PIN Only-Users are validated - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 14
values can be entered, separated by commas. 6 Use the Group Authorization List to allow only users in certain Active Directory groups access to specific printer functions, such as color printing. Multiple groups can be entered, separated by commas. Leave blank if not using group authorization - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 15
select either Card Email Address (SmartCard) or LDAP Lookup, to specify how the printer should retrieve the user's address when sending E-mail. Note: If manual login is allowed, you must select LDAP Lookup. 3 Under S/MIME Options, adjust the following settings: • Sign Email- Select Disabled, Prompt - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 16
how text and icons are displayed on the printer home screen for Scan to Network, as well as which users are allowed to access the application. 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Scan to Network > Configure. 2 Under General Settings, you can specify custom - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 17
Server, click Settings > Embedded Solutions > PKI Scan to Network > Configure. 2 Under Default Scan Settings, adjust the following settings as needed: • Format-The default file format for scanned documents. • Content-The default file share. If a user is not allowed to access this share, it - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 18
-Leave blank Using a dynamic file share with the Windows User ID: - Display Name-User Share - UNC Path-\\dfs\shares\%u - Replacement Value-LDAP Lookup - LDAP - Replacement Attribute-samaccountname • Default Filename-The default filename for scanned documents. If users are not allowed to change the - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 19
are not using Print Release Lite, you can skip this section. 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Held Jobs > Configure. 2 You can specify custom Icon Text to be displayed above the Held Jobs icon on the printer home screen. 3 To select an alternate image for the - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 20
types of Held Jobs: Confidential Print, Reserve Print, Verify Print, and Repeat Print. The expiration of Confidential and Reserve Print jobs is controlled by the printer Confidential Print Setup (Settings > Security > Confidential Print Setup). By default, only Confidential Print jobs can be set to - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 21
the card reader, and see "Installing the firmware and applications" on page 6. A NON-SUPPORTED SMARTCARD READER IS ATTACHED Only the OmniKey reader shipped with the MFP is supported. Remove the unsupported reader and attach the OmniKey reader. The printer home screen does not return to a locked - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 22
savings time settings are correct. Note: If your network uses DHCP, verify that NTP settings are not automatically provided by the DHCP server before manually configuring NTP settings. 3 If you have configured the printer to use an NTP server, verify that those settings are correct, and that - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 23
on page 10. "The printer and the KDC in order for authentication to work. "User's Realm was not found in the Kerberos Configuration file" error message This error occurs during manual login, and indicates the Windows Domain is not specified in the Kerberos settings. 1 From the Embedded Web Server - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 24
settings do not support multiple Kerberos Realm User Info"), or during address book searches. PORT 389 (NON-SSL) OR PORT 636 (SSL) IS BLOCKED BY A FIREWALL These ports are used by the printer to communicate with the LDAP server, and must be open in order for LDAP lookups to work. Troubleshooting - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 25
during address book searches, user E-mail address searches, or user home directory searches. THE ADDRESS BOOK SETUP CONTAINS AN IP ADDRESS FOR THE LDAP SERVER 1 From the Embedded Web Server, click Settings > Network/Ports > Address Book Setup. 2 Verify that the Server Address has been entered as - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 26
in with a SmartCard. Verify that PKI S/MIME Email is not configured to require that E-mail be signed. 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI S/MIME Email > Configure. 2 Under S/Mime Options, select either Disabled or Prompt User for Sign Email. Troubleshooting 26 - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 27
finding the correct version for your printer, see "Verifying and updating the firmware" on page 6. If you have verified or updated your firmware and still experience this problem, contact the Lexmark Solutions Help Desk. "501 5.5.4 INVALID ADDRESS" ERROR FROM THE SMTP SERVER The domain name on the - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 28
and/or firewall settings to allow communication between the printer and SMTP server on port 25. Scan to Network issues "You are not authorized to use this feature" Scan to Network error message This error usually indicates the user in not in an Active Directory group that is authorized to use the - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 29
size" error message After scanning, the number of bytes scanned is compared to the number written to the saved file. If the user does not have read access to the file share, the file size cannot be determined. To correct this problem, grant the user read access to the file share. Troubleshooting 29 - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 30
(or servers) on port 445. "The network share name does not exist on the specified file server" error message THE PRINTER CONNECTED TO THE FILE SERVER, BUT THE SHARE NAME DOES NOT EXIST Verify that the share name is correct, and that the user has read/write access to that share. Troubleshooting 30 - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 31
to determine how the Windows Userid will be obtained when a user attempts to log in: • None-The userid is not set. You can select this option if the userid is not needed by other applications. • User Principal Name-The SmartCard principal name, or the credential provided by manual login is used to - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 32
, or the jobs were automatically deleted because they were not printed in time. Jobs are printing out immediately Most likely, the user is not selecting the print and hold feature when printing the job. Show the user how to select the print and hold feature in the print driver. Troubleshooting 32 - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 33
Program installed on or provided by Lexmark for use in connection with your Lexmark product. The term "Software Program" includes machine-readable instructions, audio/visual content (such as images and recordings), and associated media, printed materials and electronic documentation. BY USING - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 34
Freeware by you shall be governed entirely by the terms and conditions of such license. 4 TRANSFER. You may transfer the Software Program to another end-user. Any transfer must include all software components, media, printed materials, and this License Agreement and you may not retain copies of the - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 35
EVEN IF THE ABOVE-STATED REMEDIES FAIL OF THEIR ESSENTIAL PURPOSE. 10 TERM. This License Agreement is effective unless terminated or rejected. You by you and Lexmark relating to your Use of the Software Program). To the extent any Lexmark policies or programs for support services conflict with the - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 36
in the documentation and/or other materials provided with the distribution: THIS SOFTWARE IS PROVIDED BY THE AUTHOR "AS IS" AND ANY EXPRESS OR IMPLIED DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 37
creating 17 editing or deleting 19 firmware updating 6 version 6 H hosts file 14 L LDAP referrals 14 Logon Screen customizing 12 logout automatic 9 M multi-homed servers hosts file for 14 N network settings finding 5 network setup page printing 5 notices 2 P panel login timeout 9 PKI applications - Lexmark X548 | PKI-Enabled Device Installation and Configuration Guide - Page 38
Release Lite 31 not authorized to use Scan to Network 28 port 25 blocked 27 printer clock out of sync 22 problem getting user info 24 realm on card not found 24 scanned and saved file sizes do not match 29 SMTP server does not support GSSAPI 27 SMTP server must use hostname with Kerberos 27 SMTP
PKI-Enabled Device
Installation and Configuration Guide
February 2010
www.lexmark.com
Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries.
All other trademarks are the property of their respective owners.
© 2010 Lexmark International, Inc.
All rights reserved.
740 West New Circle Road
Lexington, Kentucky 40550