Lexmark X651DE PKI-Enabled Device Installation and Configuration Guide
Lexmark X651DE - Mfp Laser Mono P/f/s/c Manual
UPC - 734646093729
View all Lexmark X651DE manuals
Add to My Manuals
Save this manual to your list of manuals |
Lexmark X651DE manual content summary:
- Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 1
Device Installation and Configuration Guide February 2010 www.lexmark.com Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries. All other trademarks are the property of their respective owners. © 2010 Lexmark - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 2
conjunction with other products, programs, or services, except those expressly designated by the manufacturer, are the user's responsibility. © 2010 Lexmark International, Inc. All rights reserved. UNITED STATES GOVERNMENT RIGHTS This software and any accompanying documentation provided under this - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 3
...11 Address Book setup ...11 Configuring PKI Authentication...12 Logon screen...12 Active Directory Configuration...13 User Session and Access Control...14 Advanced Settings ...14 Configuring PKI S/MIME Email...15 PKI S/MIME settings ...15 Configuring PKI Scan to Network...16 General Settings - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 4
Notices 33 Index 37 Contents 4 - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 5
and software in their network environment. For information about physically setting up the printer or using printer features, see the User Guide or Software and Documentation CD that came with the printer. Supported devices This guide covers the following models: Single-function devices • Lexmark - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 6
network setup page prints, and the printer returns to the home screen. Installing the firmware and applications Verifying and updating the firmware Enabling PKI support for your printer involves three main components: • The printer firmware • The authentication token • The Lexmark PKI applications - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 7
from the printer, securely scan documents and images to a network file share, and hold documents at the printer until released by an authorized user. The authentication application is required, but all other applications are optional and can be installed as needed. Configuring PKI-enabled devices 7 - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 8
files include: Application PKI Authentication PKI S/MIME Email Installation file pkiadauth-x.x.x.fls pkiademail-x.x.x.fls PKI Scan to Network pkiadnetworkscan.x.x.x-fls PKI Held Jobs (Print Release Lite) pkiadheldjobs.x.x.x.fls The file names shown are not version-specific. Use the - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 9
for users to login to the printer, the printer clock must be set to within five minutes of the domain controller system clock. Printer clock settings can be updated manually, or configured to use Network Time Protocol (NTP), to automatically sync with a trusted clock-typically the same one used - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 10
E-mail and address book settings on the printer. If users will not be allowed to access Scan to Email, you can skip this section. SMTP settings 1 From the Embedded Web Server, click Settings > E-mail/FTP Settings > SMTP Setup. 2 Under SMTP Setup, type the IP address or hostname of the Primary - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 11
setting is Print only for error. • E-mail Bit Depth-Set to 8-bit for grayscale imaging, or 1-bit for black and white. 3 Adjust other scan settings as needed. 4 Click Submit. Address Book setup Configuring the printer Address Book enables users to search your network Global Address Book for E-mail - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 12
Leave the Fax Number Attribute at the default value. 8 Type one or Configuring PKI Authentication PKI Authentication must be configured and running for other PKI applications to work. It provides the login screen and authentication mechanism, and supports user authorization to the device and device - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 13
with SmartCard and PIN. Network functions that require authentication will not be available to users. • Active Directory-Users are validated against Active Directory with SmartCard and PIN. 3 Select Use MFP Kerberos Setup to use the Kerberos settings already configured on the printer, or clear the - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 14
authorize users. Solution-specific access control 1 is the default and recommended setting. 8 Continue to Advanced Settings, or click Apply at the bottom of the screen to save changes. Advanced Settings Not all networks will require the advanced settings. Adjust them as needed to allow the printer - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 15
the Email Sign the Email Encrypt the Email Sign and Encrypt the Email User is prompted to choose: Encrypt the Email Sign and Encrypt the Email E-mail messages are always signed, but not encrypted. User is prompted to choose: Sign the Email Sign and Encrypt the Email Configuring PKI-enabled devices - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 16
Require Email to be Signed or Encrypted if you want to require users to choose at least one of printer home screen for Scan to Network, as well as which users are allowed to access the application. 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Scan to Network > Configure - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 17
Device Access Control in PKI Authentication (usually Solution-specific access control 1). Note: Authorization can be further restricted when configuring specific Scan to Network file shares. 6 Continue to Default Scan Settings, or click Apply at the bottom of the screen to save changes. Default Scan - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 18
the last dollar sign in the UNC path, so that users will be able to write to this share (necessary on some networks). • Select Create Directory to create the specified directory if it does not already exist when a user attempts to scan a document to this share. Configuring PKI-enabled devices 18 - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 19
Adjust the settings for the selected share as needed, and then click Apply to save your changes. To delete a file share: 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Scan to Network > Configure. 2 Under File Shares, highlight the name of the share you want to remove, and - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 20
intervals ranging from one hour to one week. 8 Select Advanced Settings as needed: • Select Require All Jobs to be Held if you want to require all jobs to remain on the printer until released by an authorized user, or until they expire. • Select Clear Print Data to clear the memory associated with - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 21
Troubleshooting Login Issues "Unsupported USB Device" error message A SUPPORTED SMARTCARD READER HAS BEEN INSTALLED BEFORE THE PKI FIRMWARE AND APPLICATIONS The reader can not be installed until the firmware and applications have been installed. Remove the card reader, and see "Installing the - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 22
needed. Make sure the time zone and daylight savings time settings are correct. Note: If your network uses DHCP, verify that NTP settings are not automatically provided by the DHCP server before manually configuring NTP settings. 3 If you have configured the printer to use an NTP server, verify that - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 23
IS BLOCKED BY A FIREWALL Port 88 must be opened between the printer and the KDC in order for authentication to work. "User's Realm was not found in the Kerberos Configuration file" error message This error occurs during manual login, and indicates the Windows Domain is not specified in the Kerberos - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 24
KDC being used to authenticate the user does not recognize the User Principle Name specified in the error message 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication >Configure. 2 If the Simple Kerberos Setup has been configured in PKI Authentication, verify that - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 25
Server, click Settings > Embedded Solutions > PKI Authentication > Configure. 2 Select Disable LDAP Referrals. Note: Leaving LDAP Network/Ports > Address Book Setup. 2 Verify that the Server Address has been entered as the hostname (not the IP address), of the LDAP server. 3 Click Submit to save - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 26
Scan to Email issues "Email cannot be sent because an error occurred trying to get your email address" error message THERE IS A CONFLICT BETWEEN THE LOGIN TYPE, AND HOW THE FROM ADDRESS IS BEING RETRIEVED This error occurs when a user is logged in manually, but PKI S/MIME Email is configured to - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 27
or updated your firmware and still experience this problem, contact the Lexmark Solutions Help Desk. "501 5.5.4 INVALID ADDRESS" ERROR FROM THE SMTP SERVER The domain name on the device has not been configured correctly: 1 From the Embedded Web Server, click Settings > Network/Ports > TCP/IP - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 28
is not available because no file shares have been configured by the system administrator" error message You need to add at least one file share for users to scan to. For information on adding file shares, see "Configuring PKI Scan to Network" on page 16. "This feature is not available because - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 29
size" error message After scanning, the number of bytes scanned is compared to the number written to the saved file. If the user does not have read access to the file share, the file size cannot be determined. To correct this problem, grant the user read access to the file share. Troubleshooting 29 - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 30
> Network/Ports > TCP/IP. 2 Under TCP/IP: • Verify the Domain Name. Normally, the domain will be the same one assigned to user workstations. • If the printer is located in a different domain than the domain controller, the E-mail server, or any file share users may need to scan to from the device - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 31
Windows User ID" error message This error applications. • User Principal Name-The SmartCard principal name, or the credential provided by manual Configure. 2 Under User Session and Access Control, select LDAP Lookup for the Session Userid. 3 Click Apply to save any needed changes. Troubleshooting - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 32
, or the jobs were automatically deleted because they were not printed in time. Jobs are printing out immediately Most likely, the user is not selecting the print and hold feature when printing the job. Show the user how to select the print and hold feature in the print driver. Troubleshooting 32 - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 33
NOT INSTALL, COPY, DOWNLOAD, OR OTHERWISE USE THE SOFTWARE PROGRAM. IF YOU DO number of authorized users to the number specified in your agreement with Lexmark. You may not separate the components of the Software Program for use on more than one computer. You agree that you will not Use the Software - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 34
reverse compile or otherwise translate the Software Program, except as and to the extent expressly permitted to do so by applicable law for the purposes of inter-operability, error correction, and security testing. If you have such statutory rights, you will notify Lexmark in writing of any intended - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 35
age of majority in the place you sign this License Agreement and, if applicable, you are duly authorized by your employer or principal to enter into by you and Lexmark relating to your Use of the Software Program). To the extent any Lexmark policies or programs for support services conflict with the - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 36
in the documentation and/or other materials provided with the distribution: THIS SOFTWARE IS PROVIDED BY THE AUTHOR "AS IS" AND ANY EXPRESS OR IMPLIED DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 37
5 network setup page printing 5 notices 2 P panel login timeout 9 PKI applications application descriptions 5 installing 7 PKI Authentication Active Directory configuration 13 logon screen settings 12 user session and access control 14 PKI Held Jobs configuring 19 PKI S/MIME configuring 15 PKI Scan - Lexmark X651DE | PKI-Enabled Device Installation and Configuration Guide - Page 38
use Print Release Lite 31 not authorized to use Scan to Network 28 port 25 blocked 27 printer clock out of sync 22 problem getting user info 24 realm on card not found 24 scanned and saved file sizes do not match 29 SMTP server does not support GSSAPI 27 SMTP server must use hostname with Kerberos
PKI-Enabled Device
Installation and Configuration Guide
February 2010
www.lexmark.com
Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries.
All other trademarks are the property of their respective owners.
© 2010 Lexmark International, Inc.
All rights reserved.
740 West New Circle Road
Lexington, Kentucky 40550