Lexmark X792 PKI-Enabled Device Installation and Configuration Guide
Lexmark X792 Manual
View all Lexmark X792 manuals
Add to My Manuals
Save this manual to your list of manuals |
Lexmark X792 manual content summary:
- Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 1
PKI-Enabled Device Installation and Configuration Guide February 2010 www.lexmark.com Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries. All other trademarks are the property of their respective owners. © - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 2
of operation in conjunction with other products, programs, or services, except those expressly designated by the manufacturer, are the user's responsibility. © 2010 Lexmark International, Inc. All rights reserved. UNITED STATES GOVERNMENT RIGHTS This software and any accompanying documentation - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 3
Settings...16 Default Scan Settings ...17 Creating file shares...17 Editing or deleting a file share ...19 Configuring PKI Held Jobs...19 PKI Held Jobs settings ...19 Troubleshooting 21 Login Issues...21 LDAP issues...24 Scan to Email issues...26 Scan to Network issues...28 Held Jobs/Print Release - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 4
Notices 33 Index 37 Contents 4 - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 5
authorizing printer users. PKI S/MIME Email-Enables users to sign and encrypt E-mail messages. PKI Scan to Network-Enables users to scan documents to a network file share. PKI Held Jobs-Holds print jobs securely at the printer until released by an authorized user. Also referred to as Print Release - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 6
Setup Page. The network setup page prints, and the printer returns to the home screen. Installing the firmware and applications Verifying and updating the firmware Enabling PKI support for your printer involves three main components: • The printer firmware • The authentication token • The Lexmark - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 7
to sign and encrypt E-mail messages sent from the printer, securely scan documents and images to a network file share, and hold documents at the printer until released by an authorized user. The authentication application is required, but all other applications are optional and can be installed as - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 8
Server, click Settings > Network/Ports > TCP/IP. 2 Under TCP/IP: • Verify the Domain Name. Normally, the domain will be the same one assigned to user workstations. • If using a static IP address, verify the WINS Server Address, and the DNS Server Address. • If the printer is located in a different - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 9
Date and time In order for users to login to the printer, the printer clock must be set to within five minutes of the domain controller system clock. Printer clock settings can be updated manually, or configured to use Network Time Protocol (NTP), to automatically sync with a trusted clock-typically - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 10
, and for SSL support in LDAP. In order to address book settings on the printer. If users will not be allowed to access Scan to Email, you can skip this section. SMTP settings 1 From the Embedded Web Server, click Settings > E-mail/FTP Settings > SMTP Setup. 2 Under SMTP Setup, type the IP address - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 11
setting is Print only for error. • E-mail Bit Depth-Set to 8-bit for grayscale imaging, or 1-bit for black and white. 3 Adjust other scan settings as needed. 4 Click Submit. Address Book setup Configuring the printer Address Book enables users to search your network Global Address Book for E-mail - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 12
the printer using Card Only (SmartCard), Card or Manual Login, or Manual Login Only (userid/password). 3 Select whether Card Pin must be Numeric Only, or can be Alphanumeric. 4 If desired, provide custom Logon Screen Text, with special instruction for users, or a custom Logon Screen Image. Custom - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 13
locally with SmartCard and PIN. Network functions that require authentication will not be available to users. • Active Directory-Users are validated against Active Directory with SmartCard and PIN. 3 Select Use MFP Kerberos Setup to use the Kerberos settings already configured on the printer - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 14
values can be entered, separated by commas. 6 Use the Group Authorization List to allow only users in certain Active Directory groups access to specific printer functions, such as color printing. Multiple groups can be entered, separated by commas. Leave blank if not using group authorization - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 15
should retrieve the user's address when sending E-mail. Note: If manual login is allowed, you must select LDAP Lookup. 3 Under S/MIME Options, adjust the following settings: • Sign Email- Select Disabled, Prompt User, or Always Sign to determine whether outgoing E-mail messages will be signed - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 16
be available to users from the printer touch screen: • User Can Only Send to Self (no other recipients can be added) • User Can Change Options (scan settings) • User Can Change Subject • User Can Change Message • User Can Change Attachment Name • Return to Email Screen-By default, users are returned - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 17
user groups. If groups are not being used, select the same setting used for Device Access Control in PKI Authentication (usually Solution-specific access control 1). Note: Authorization can be further restricted when configuring specific Scan to Network file shares. 6 Continue to Default Scan - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 18
-Leave blank Using a dynamic file share with the Windows User ID: - Display Name-User Share - UNC Path-\\dfs\shares\%u - Replacement Value-LDAP Lookup - LDAP - Replacement Attribute-samaccountname • Default Filename-The default filename for scanned documents. If users are not allowed to change the - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 19
. For information about the settings, see "Default Scan Settings" on page 17. 5 Click Apply. Editing or deleting a file share To edit an existing file share: 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Scan to Network > Configure. 2 Under File Shares, highlight the - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 20
types of Held Jobs: Confidential Print, Reserve Print, Verify Print, and Repeat Print. The expiration of Confidential and Reserve Print jobs is controlled by the printer Confidential Print Setup (Settings > Security > Confidential Print Setup). By default, only Confidential Print jobs can be set to - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 21
Troubleshooting Login Issues "Unsupported USB Device" error message A SUPPORTED SMARTCARD READER HAS BEEN INSTALLED BEFORE THE PKI FIRMWARE AND APPLICATIONS The reader can not be installed until the firmware and applications have been installed. Remove the card reader, and see "Installing the - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 22
does not appear when a SmartCard is inserted THE SMARTCARD IS NOT RECOGNIZED BY THE READER Contact the Lexmark Solutions Help Desk for assistance. "The KDC and MFP clocks are different beyond an acceptable range; check the MFP's date and time" error message This error indicates the printer clock is - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 23
BY A FIREWALL Port 88 must be opened between the printer and the KDC in order for authentication to work. "User's Realm was not found in the Kerberos Configuration file" error message This error occurs during manual login, and indicates the Windows Domain is not specified in the Kerberos settings - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 24
time, and then may or may not work This normally occurs either during login (at "Getting User Info"), or during address book searches. PORT 389 (NON-SSL) OR PORT 636 (SSL) IS BLOCKED BY A FIREWALL These ports are used by the printer to communicate with the LDAP server, and must be open in order for - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 25
occurs during address book searches, user E-mail address searches, or user home directory searches. THE ADDRESS BOOK SETUP CONTAINS AN IP ADDRESS FOR THE LDAP SERVER 1 From the Embedded Web Server, click Settings > Network/Ports > Address Book Setup. 2 Verify that the Server Address has been - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 26
Email > Configure. 2 For From Address, select LDAP Lookup. 3 Click Apply. THE LDAP LOOKUP FAILED For help resolving LDAP-related problems, see "LDAP issues" on page 24. "Email cannot be sent because you are not authorized to perform this function" error message This error usually indicates the user - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 27
3 Click Apply. "Email cannot be sent. Unable to find valid encryption certificate for [E-mail address]" error message This error indicates the LDAP Directory found in the Address Book Setup did not contain an encryption certificate for the specified E-mail address. Encrypted E-mail can only be sent - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 28
adjust server and/or firewall settings to allow communication between the printer and SMTP server on port 25. Scan to Network issues "You are not authorized to use this feature" Scan to Network error message This error usually indicates the user in not in an Active Directory group that is authorized - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 29
size" error message After scanning, the number of bytes scanned is compared to the number written to the saved file. If the user does not have read access to the file share, the file size cannot be determined. To correct this problem, grant the user read access to the file share. Troubleshooting 29 - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 30
(or servers) on port 445. "The network share name does not exist on the specified file server" error message THE PRINTER CONNECTED TO THE FILE SERVER, BUT THE SHARE NAME DOES NOT EXIST Verify that the share name is correct, and that the user has read/write access to that share. Troubleshooting 30 - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 31
principal name, or the credential provided by manual login is used to set the userid (userid). • LDAP Lookup-The userid is retrieved from Active Directory. 3 Click Apply to save any needed changes. "There are no jobs available for [USER]" error message PKI AUTHENTICATION IS NOT SETTING THE CORRECT - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 32
, or the jobs were automatically deleted because they were not printed in time. Jobs are printing out immediately Most likely, the user is not selecting the print and hold feature when printing the job. Show the user how to select the print and hold feature in the print driver. Troubleshooting 32 - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 33
Program installed on or provided by Lexmark for use in connection with your Lexmark product. The term "Software Program" includes machine-readable instructions, audio/visual content (such as images and recordings), and associated media, printed materials and electronic documentation. BY USING - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 34
terms at the time of download. Use of the Freeware by you shall be governed entirely by the terms and conditions of such license. 4 TRANSFER. You may transfer the Software Program to another end-user. Any transfer must include all software components, media, printed materials, and this License - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 35
14 UNITED support services performed with respect to the Software Program and requested by you. Lexmark agrees not to use this information in a form that personally identifies you except to the extent necessary to provide such services. 16 EXPORT RESTRICTIONS. You may not (a) acquire, ship, transfer - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 36
provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions, and DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 37
error message unsupported USB device 21 F file shares creating 17 editing or deleting 19 firmware updating 6 version 6 H hosts file 14 L LDAP referrals 14 Logon Screen customizing 12 logout automatic 9 M multi-homed servers hosts file for 14 N network settings finding 5 network setup page printing - Lexmark X792 | PKI-Enabled Device Installation and Configuration Guide - Page 38
Jobs 31 not authorized to use Print Release Lite 31 not authorized to use Scan to Network 28 port 25 blocked 27 printer clock out of sync 22 problem getting user info 24 realm on card not found 24 scanned and saved file sizes do not match 29 SMTP server does not support GSSAPI 27 SMTP server must
PKI-Enabled Device
Installation and Configuration Guide
February 2010
www.lexmark.com
Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries.
All other trademarks are the property of their respective owners.
© 2010 Lexmark International, Inc.
All rights reserved.
740 West New Circle Road
Lexington, Kentucky 40550