Lexmark X860 PKI-Enabled Device Installation and Configuration Guide
Lexmark X860 Manual
View all Lexmark X860 manuals
Add to My Manuals
Save this manual to your list of manuals |
Lexmark X860 manual content summary:
- Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 1
PKI-Enabled Device Installation and Configuration Guide February 2010 www.lexmark.com Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries. All other trademarks are the property of their respective owners. © - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 2
are periodically made to the information herein; these changes will be incorporated in later editions. Improvements or changes in the products or the programs described may be made at any time. For Lexmark technical support, visit support.lexmark.com. For information on supplies and downloads, visit - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 3
Supported devices ...5 Before configuring the printer ...5 Installing the firmware and applications...6 Verifying and updating the firmware Editing or deleting a file share ...19 Configuring PKI Held Jobs...19 PKI Held Jobs settings ...19 Troubleshooting 21 Login Issues...21 LDAP issues...24 Scan to - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 4
Notices 33 Index 37 Contents 4 - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 5
share. PKI Held Jobs-Holds print jobs securely at the printer until released by an authorized user. Also referred to as Print Release Lite. PKI Authentication is the only required application, and must be installed and configured if you plan to attach a SmartCard reader to the printer. This guide is - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 6
returns to the home screen. Installing the firmware and applications Verifying and updating the firmware Enabling PKI support for your printer involves three main components: • The printer firmware • The authentication token • The Lexmark PKI applications All three must be installed and configured - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 7
version LR.FL.P224cLDc LR.SP.P108LDc Note: If your printer does not have the minimum firmware version or a later version installed, you will need to install a firmware update before proceeding to other configuration tasks. Contact the Lexmark Solutions Help Desk for help in obtaining the correct - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 8
to Network pkiadnetworkscan.x.x.x-fls PKI Held Jobs (Print Release Lite) pkiadheldjobs.x.x.x.fls The file names shown are not version-specific. Use the latest version available for each file. For information about available versions, contact the Lexmark Solutions Help Desk. PKI Authentication - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 9
Date and time In order for users to login to the printer, the printer clock must be set to within five minutes of the domain controller system clock. Printer clock settings can be updated manually, or configured to use Network Time Protocol (NTP), to automatically sync with a trusted clock-typically - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 10
have access to Scan to Email (with or without S/MIME capability), you must configure E-mail and address book settings on the printer. If users will not be allowed to access Scan to Email, you can skip this section. SMTP settings 1 From the Embedded Web Server, click Settings > E-mail/FTP - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 11
users. • Always on-Users will always receive a copy of E-mail messages they send from the printer. 5 Continue to E-mail Settings to set scan defaults, or click Submit to save changes -300 dpi. A higher resolution can be chosen to improve image quality, but it will also increase the file size of - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 12
the printer using Card Only (SmartCard), Card or Manual Login, or Manual Login Only (userid/password). 3 Select whether Card Pin must be Numeric Only, or can be Alphanumeric. 4 If desired, provide custom Logon Screen Text, with special instruction for users, or a custom Logon Screen Image. Custom - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 13
commas. Example: If a U.S. DoD Common Access Card uses "123456789@mil" to identify a user, "mil" is the principle name. In printer should wait for a response from the domain controller before moving to the next one in the list. 5 If users are allowed to login manually, provide at least one Manual - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 14
User Principal Name-The SmartCard principal name, or the credential provided by manual user information from the domain controller. 4 Select Share Session with LDD if you want to allow user information to be shared with Lexmark users in certain Active Directory groups access to specific printer - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 15
Embedded Solutions > PKI S/MIME Email > Configure. 2 For From Address, select either Card Email Address (SmartCard) or LDAP Lookup, to specify how the printer should retrieve the user's address when sending E-mail. Note: If manual login is allowed, you must select LDAP Lookup. 3 Under S/MIME Options - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 16
DES users from the printer touch screen: • User Can Only Send to Self (no other recipients can be added) • User Can Change Options (scan settings) • User Can Change Subject • User Can Change Message • User Can Change printer home screen. 3 To select an alternate image for the Up Icon (the image - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 17
specific Scan to Network file shares. 6 Continue to Default Scan Settings, or click Apply at the bottom of the screen to save changes the edges that is not scanned usually results in better image quality. • Select Scan Preview to allow users preview and verify the first page of a document before the - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 18
added automatically based on the file type selected. • Select User Can Rename File if you want to allow users to change the default filename. • Select User Can Change Scan Settings if you want to allow users to change scan settings. • If users are allowed to rename files, select Append Timestamp to - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 19
. 2 You can specify custom Icon Text to be displayed above the Held Jobs icon on the printer home screen. 3 To select an alternate image for the Up Icon (the image that displays when the Held Jobs icon has not been pressed), click Browse to locate the image you want to use. To view the default icon - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 20
want to print, or All jobs print automatically to have all jobs pending for a user print automatically when they select the Held Jobs icon. • Select Show Copies Screen if you want to allow users to change the number of copies for each job from the printer. • Select Allow Users to Print All if you - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 21
been installed. Remove the card reader, and see "Installing the firmware and applications" on page 6. A NON-SUPPORTED SMARTCARD READER IS ATTACHED Only the OmniKey reader shipped with the MFP is supported. Remove the unsupported reader and attach the OmniKey reader. The printer home screen does not - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 22
Lexmark Solutions Help Desk for assistance. "The KDC and MFP clocks are different beyond an acceptable range; check the MFP's date and time" error message This error indicates the printer manually configuring NTP settings. 3 If you have configured the printer Submit. Users are unable Troubleshooting 22 - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 23
on the printer. If a Apply to save any needed changes. 3 If a krb5 printer and the KDC in order for authentication to work. "User's Realm was not found in the Kerberos Configuration file" error message This error occurs during manual and the Windows Domain is "x.y.z", change the Domain setting to "mil - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 24
normally occurs either during login (at "Getting User Info"), or during address book searches. PORT 389 (NON-SSL) OR PORT 636 (SSL) IS BLOCKED BY A FIREWALL These ports are used by the printer to communicate with the LDAP server, and must be open in order for LDAP lookups to work. Troubleshooting 24 - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 25
/TLS. • LDAP Certificate Verification-Select Never. 3 Click Submit to save any needed changes. THE LDAP SEARCH BASE IS INCORRECT Narrow the LDAP search base to the lowest possible scope that will include all necessary users. THE LDAP ATTRIBUTE BEING SEARCHED FOR IS NOT CORRECT Verify that the LDAP - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 26
This error occurs when a user is logged in manually, but PKI S/MIME Email LOOKUP FAILED For help resolving LDAP-related problems, see "LDAP issues" on page 24 card" error message If users are required (or choose), to digitally sign E-mail messages, the Smart Card User for Sign Email. Troubleshooting 26 - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 27
installed. For information about finding the correct version for your printer, see "Verifying and updating the firmware" on page 6. If you have verified or updated your firmware and still experience this problem, contact the Lexmark Solutions Help Desk. "501 5.5.4 INVALID ADDRESS" ERROR FROM THE - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 28
NOT SUPPORTED 1 From the Embedded Web Server, click Settings > E-mail/FTP Settings > SMTP Setup. 2 For SMTP Server Authentication, select No Authentication Required. 3 Click Submit to save any needed changes. THE PRINTER about LDAP-related issues, see "LDAP issues" on page 24. Troubleshooting 28 - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 29
size" error message After scanning, the number of bytes scanned is compared to the number written to the saved file. If the user does not have read access to the file share, the file size cannot be determined. To correct this problem, grant the user read access to the file share. Troubleshooting 29 - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 30
the server hostname. 4 Click Apply to save any needed changes. THE HOSTNAME OF THE FILE SERVER COULD NOT BE RESOLVED PRINTER CONNECTED TO THE FILE SERVER, BUT THE SHARE NAME DOES NOT EXIST Verify that the share name is correct, and that the user has read/write access to that share. Troubleshooting - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 31
changes. Held Jobs/Print Release Lite issues "You are not authorized to use this feature" Held Jobs error message This error usually indicates the user not needed by other applications. • User Principal Name-The SmartCard principal name, or the credential provided by manual login is used to set the - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 32
, or the jobs were automatically deleted because they were not printed in time. Jobs are printing out immediately Most likely, the user is not selecting the print and hold feature when printing the job. Show the user how to select the print and hold feature in the print driver. Troubleshooting 32 - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 33
Lexmark for use in connection with your Lexmark product. The term "Software Program" includes machine-readable instructions, audio/visual content (such as images price paid for the Software Program. 3 LICENSE GRANT. Lexmark authorized users to the number specified in your agreement with Lexmark. You - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 34
license. 4 TRANSFER. You may transfer the Software Program to another end-user. Any transfer must include all software components, media, printed materials, and to updates or supplements to the original Software Program provided by Lexmark unless Lexmark provides other terms along with the update or - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 35
with the terms of this License Agreement, any other written agreement signed by you and Lexmark relating to your Use of the Software Program). To the extent any Lexmark policies or programs for support services conflict with the terms of this License Agreement, the terms of this License Agreement - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 36
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 37
27 jobs not being held at printer 32 jobs print immediately 32 KDC and MFP clocks out of sync 22 KDC did not respond within the required time 23 Kerberos file not uploaded 22 LDAP lookup failure 25 LDAP lookups take too long 24 login hangs getting user info 24 login screen does not appear when card - Lexmark X860 | PKI-Enabled Device Installation and Configuration Guide - Page 38
not authorized to use Held Jobs 31 not authorized to use Print Release Lite 31 not authorized to use Scan to Network 28 port 25 blocked 27 printer clock out of sync 22 problem getting user info 24 realm on card not found 24 scanned and saved file sizes do not match 29 SMTP server does not
PKI-Enabled Device
Installation and Configuration Guide
February 2010
www.lexmark.com
Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries.
All other trademarks are the property of their respective owners.
© 2010 Lexmark International, Inc.
All rights reserved.
740 West New Circle Road
Lexington, Kentucky 40550