Lexmark X782e PKI-Enabled MFP Installation and Configuration Guide - Page 53

Resolution, Cause

Get Lexmark X782e PDF manuals and user guides View all Lexmark X782e manuals
Add to My Manuals
Save this manual to your list of manuals

Page 53 highlights

beyond an acceptable range; check the MFP's date and time. Kerberos configuration file has not been uploaded. The Domain Controller Issuing Certificate has not been installed. The Domain Controller Issuing Certificate ("name of certificate") has not been installed. The KDC did not respond within the required time. User's Realm was not found in the Kerberos Configuration File. minutes of each other. Resolution: Verify the date and time on the MFP; see section 3.1. Be sure the time zone and daylight savings time settings are correct. Cause: The PKI/AD Authentication solution is configured to use the MFP Kerberos setup but no Kerberos file was uploaded. Resolution: See section 4.1 If the Kerberos settings are provided in the PKI/AD Authentication are provided in the settings, uncheck the "Use MFP Kerberos Setup" checkbox and click apply. Resolution: If a Kerberos file really needs to be used, click "Configuration | Security | Kerberos Setup". Browse to the Kerberos file and click submit. A reboot will be required. Cause: No certificate has been installed on the MFP. Resolution: See section 3.6. If you install the wrong certificate, the error message on the device will provide the name of the certificate needed. Cause: The certificate specified in the error message is needed to validate the domain controller. Resolution: See the PKI Pre-Installation Guide for information on obtaining the certificate. See section 3.6 for information on installing the certificate. Cause: The hostname or IP address of the KDC is not correct. Resolution: Verify the hostname or IP address and check against the value in the PKI/AD Authentication solution or Kerberos file. Cause: The KDC is not currently available. Resolution: Multiple KDCs can be specified in the PKI/AD Authentication solution or Kerberos file; this will typically resolve this issue. Cause: Port 88 is blocked by a firewall. Resolution: This is the Kerberos Port and is used by the MFP to communicate with the KDC. The port must be opened between the MFP and KDC in order for authentication to work. Cause: This error occurs during a manual login and indicates the Windows domain is not specified in the Kerberos Configuration file. Resolution: If using the PKI/AD Authentication solution for the Kerberos settings, add the Version 2.0.0 Page 47

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
Version 2.0.0
Page 47
beyond an acceptable range; check the
MFP's date and time.
minutes of each other.
Resolution:
Verify the date and time on the MFP; see
section 3.1.
Be sure the time zone and daylight
savings time settings are correct.
Kerberos configuration file has not
been uploaded.
Cause:
The PKI/AD Authentication solution is
configured to use the MFP Kerberos setup but no
Kerberos file was uploaded.
Resolution:
See section 4.1
If the Kerberos settings
are provided in the PKI/AD Authentication are
provided in the settings, uncheck the “Use MFP
Kerberos Setup” checkbox and click apply.
Resolution:
If a Kerberos file really needs to be used,
click “Configuration | Security | Kerberos Setup”.
Browse to the Kerberos file and click submit.
A
reboot will be required.
The Domain Controller Issuing
Certificate has not been installed.
Cause:
No certificate has been installed on the MFP.
Resolution:
See section 3.6.
If you install the wrong
certificate, the error message on the device will
provide the name of the certificate needed.
The Domain Controller Issuing
Certificate (“name of certificate”) has
not been installed.
Cause:
The certificate specified in the error message
is needed to validate the domain controller.
Resolution:
See the PKI Pre-Installation Guide for
information on obtaining the certificate.
See
section 3.6 for information on installing the
certificate.
The KDC did not respond within the
required time.
Cause:
The hostname or IP address of the KDC is not
correct.
Resolution:
Verify the hostname or IP address and
check against the value in the PKI/AD
Authentication solution or Kerberos file.
Cause:
The KDC is not currently available.
Resolution:
Multiple KDCs can be specified in the
PKI/AD Authentication solution or Kerberos file;
this will typically resolve this issue.
Cause:
Port 88 is blocked by a firewall.
Resolution:
This is the Kerberos Port and is used by
the MFP to communicate with the KDC. The port
must be opened between the MFP and KDC in
order for authentication to work.
User's Realm was not found in the
Kerberos Configuration File.
Cause:
This error occurs during a manual login and
indicates the Windows domain is not specified in
the Kerberos Configuration file.
Resolution:
If using the PKI/AD Authentication
solution for the Kerberos settings, add the