Dell B3465dnf Mono Smart Access Card Solution Administrators Guide
Dell B3465dnf Mono Manual
View all Dell B3465dnf Mono manuals
Add to My Manuals
Save this manual to your list of manuals |
Dell B3465dnf Mono manual content summary:
- Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 1
Smart Access Card Solution Administrator's Guide June 2013 A00 www.dell.com | dell.com/support/printers - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 2
Configuring printer settings for use with the applications 5 Changing the panel login timeout...5 Installing certificates manually ...5 ...24 Scanning documents at the printer ...24 Using Secure Print Jobs Release...25 Printing held jobs ...25 Troubleshooting 26 Smart Card Authentication Client - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 3
Contents 3 Secure Scan To E-mail issues...36 Secure Print Jobs Release issues...40 LDAP issues...41 Licensing issues...42 Appendix...43 Notices...45 Edition notice...45 Index...50 - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 4
and on configuring the application, see the Scan to Network and Scan to Network Premium Administrator's Guide. • • For a list of requirements for each application, including supported printers and required firmware versions, see the Readme file for the application. For information on physically - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 5
Set the Panel Login Timeout value (in seconds). The recommended value is 30 seconds. 4 Click Submit. Installing certificates manually Note: In select printer models, you can automatically download the CA. For more information, see "Installing certificates automatically" on page 6. Before configuring - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 6
the printer to the Active Directory, see the Embedded Web Server Administrator's Guide for your printer. printer using Kerberos authentication, the time on the printer clock must be within five minutes of the time on the domain controller system clock. Printer clock settings can be updated manually - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 7
network uses Dynamic Host Configuration Protocol (DHCP), then verify that NTP settings are not provided by the DHCP server automatically before configuring NTP settings manually. 1 From the Embedded Web Server, click Settings or Configuration. 2 Click Security > Set Date and Time. 3 Verify that the - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 8
is installed and running. For more information about Application Access Manager, see the Application Access Manager Administrator's Guide. There are two ways to secure access to the printer: • Enable a secure idle screen that restricts access to the entire home screen. When users insert a Smart Card - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 9
or more groups, and then click Save Template. For more information on configuring security templates and using access controls, see the Embedded Web Server Administrator's Guide for your printer. Securing access to the home screen Use this method to require users to authenticate to view and use the - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 10
or function to which you want to secure access, select your security template from the drop‑down menu. 6 Click Submit. On printers running eSF version 2.0: 1 Access the Application Access Manager application configuration settings from the Embedded Web Server. 2 For each application or function - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 11
login setup settings" on page 12. If you do not configure this setting, then users will not be allowed to log in to the printer manually (using their user name and password). - If you selected Smart Card Only, then configure the setting to User Validation Mode. For more information, see "Configuring - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 12
a list of Windows domains for users to select from during login. • For eSF v4.x printers, make sure to specify the domain or domains available for manual login to work. To view the complete list of supported printers for each version of the Embedded Web Server, see the Readme file. 1 Access the - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 13
the domain controller certificate: Note: Before configuring this setting, make sure the appropriate certificates are installed on the printer. See "Installing certificates manually" on page 5. • Use device certificate validation-This is the most common method. This method uses the certificate of - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 14
Principal Name (UserID@DomainName) retrieved from the Smart Card or provided during manual login is used to set the user ID. - EDI‑PI-The ID is retrieved from Active Directory. • E‑mail From Address-Select where the printer should retrieve the user's e-mail address when sending e-mail. - Smart Card- - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 15
without the need to maintain a full Kerberos authentication system. The user inserts the Smart Card into the reader and then enters the PIN in the printer home screen. If the Smart Card PIN matches the PIN entered in the home screen matches, then the user can access the application. 1 Access the - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 16
select No authentication required. Note: If the SMTP server requires user authentication to send an e-mail but does not support Kerberos, then the IP address or host name of the printer must be added to the SMTP server as a relay. • Device‑Initiated E‑mail-Select None or Use Device SMTP Credentials - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 17
that will be used for address book lookups. The most commonly used values are: - Non‑SSL connections-Port 389 (the default setting on the printer) - SSL connections-Port 636 - Non‑SSL Global Catalog-Port 3268 - SSL Global Catalog-Port 3269 • LDAP Certificate Verification-Select Never, Allow, Try, or - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 18
be prompted to authenticate. When Smart Card Authentication Client is associated with the e‑mail function, it must be configured to specify where the printer should retrieve an authenticated user's e‑mail address when the user sends an e‑mail. The user's e‑mail address will be placed in the "From - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 19
Configuring the applications 19 To secure access to the e‑mail function and specify where to get the user's e‑mail address: 1 Make sure you have created a security template that uses Smart Card Authentication Client to obtain user credentials. See "Setting up a security template" on page 8. 2 From - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 20
Network using Smart Card Authentication Client. On printers running the Embedded Solutions Framework (eSF) version template. f Click Submit. On printers running eSF version 2.0: a Access printer is running, then see "Checking which version of the Embedded Solutions Framework is installed on a printer - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 21
to print or to print all pending jobs. • Display Print Jobs Sorted By-Specify the order in which print jobs will be listed on the printer control panel. 4 Under Job Expiration, set the expiration for Verify and Repeat print jobs. There are four types of held jobs: • Confidential-This lets you - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 22
the Device Solutions or Apps folder. h From the Secure Print Jobs Release menu, select your security template, and then click Submit. On printers running eSF version 2.0: a From the Embedded Web Server, access the configuration page for the Application Access Manager application. b From the Secure - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 23
E‑mail. If this option is not selected, then manual login users cannot send e‑mail to themselves automatically. see the User's Guide that came with the printer. 2 From the printer home screen, touch certificate error message appears, then follow the instructions on the screen: • If the message - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 24
methods of loading documents, see the User's Guide that came with the printer. 2 From the printer home screen, touch the application icon. 3 application has been configured. Follow the instructions on the screen to update the options. Contact your system support person for more information on each - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 25
the print job type: • Confidential-This lets you store print jobs on the printer until you log in and release or delete them. • Verify-This lets you print one copy of a print job and store the remaining copies on the printer. This enables you to make sure that the first copy is satisfactory before - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 26
IS ATTACHED If you want users to access the printer using a Smart Card, then attach a supported Smart Card reader to the printer. See the Readme file for a list of supported card readers. ALLOW USERS TO LOG IN MANUALLY If you have enabled manual login, then this error message will prompt users that - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 27
Troubleshooting 27 3 From the Filter menu, select an application status. 4 From the User is unable to log in manually MAKE SURE THE MANUAL LOGIN DOMAIN(S) FIELD ARE SPECIFIED Verify that the domains under Manual Login Domain(s) are specified. See "Configuring manual login setup settings" on page - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 28
Troubleshooting 28 The printer home screen fails to return to a locked state when not in make sure the file is installed on the printer. If you want to use simple Kerberos setup to create the Kerberos configuration file, then manually configure the simple Kerberos setup settings. For information - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 29
Troubleshooting 29 "Unable to authenticate. Check Kerberos configuration file to verify Windows support enabled" error message This system log error indicates that the uppercase realm. When you are done, reinstall the file on the printer. If you used simple Kerberos setup, then: 1 Access the - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 30
Troubleshooting 30 "The domain controller did not respond within the required time if the domain controller is not available at the time a user is trying to authenticate to the printer. You can resolve this by specifying multiple domain controllers. If a domain controller is not available, then - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 31
Troubleshooting 31 ." MAKE SURE THE CORRECT CERTIFICATES ARE INSTALLED ON THE PRINTER See "Installing certificates manually" on page 5. "The realm on the card was in uppercase. Note: The simple Kerberos setup settings do not support multiple Kerberos realm entries. If multiple realms are needed, then - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 32
Troubleshooting 32 "Unable to contact the domain controller for the user's realm" THE DATE AND TIME ON THE PRINTER 1 From the Embedded Web Server, click Settings or Configuration. 2 Click Security > Set Date and Time. • If you configured date and time settings manually, then verify or correct the - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 33
Troubleshooting system log errors indicate that there is a problem with one or more of the certificates needed CHECK THE CERTIFICATES INSTALLED ON THE PRINTER 1 From the Embedded Web Server, to install certificates, then see "Installing certificates manually" on page 5. If all certificates are - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 34
Troubleshooting 34 "An error one or more of the following: CHECK THE CERTIFICATES INSTALLED ON THE PRINTER 1 From the Embedded Web Server, click Settings or Configuration. 2 for chain validation are configured correctly. See "Installing certificates manually" on page 5. ALLOW USERS TO LOG IN IF THE - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 35
Troubleshooting 35 "The OCSP responder certificate, stored on the printer, does not match the one returned by the responder" error the user is not in an Active Directory group that is authorized to use the printer. Try one or more of the following: ADD THE USER TO AN AUTHORIZED ACTIVE DIRECTORY GROUP - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 36
Troubleshooting 36 ADD THE USER'S GROUP TO THE AUTHORIZATION LIST FOR THE PRINTER Make sure the user's Active Directory • Select Smart Card if users log in to the printer using Smart Cards. • Select LDAP Lookup if users log in to the printer manually (using a user name and password). 3 Click Apply - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 37
Troubleshooting certificate. Users cannot digitally sign e‑mail if they log in manually (using a user name and password) or if they printer are configured correctly. For information on networking the printer, see the printer User's Guide on the Software and Documentation CD that came with the printer - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 38
certificate in the global address book. "Unable to connect to the e-mail server" error message This error usually occurs when there is a problem with the SMTP or e‑mail settings on the printer. See "Configuring printer e‑mail settings" on page 15, or try one or more of the following: MAKE SURE THE - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 39
for sending e-mail but does not support Kerberos, then the IP address or host name of the printer must be added to the SMTP server printer are configured correctly. For information on networking the printer, see the printer User's Guide on the Software and Documentation CD that came with the printer - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 40
Troubleshooting 40 3 Click Apply. Secure Print Jobs Release issues "Unable to 3 Click Apply. MAKE SURE JOBS WERE SENT TO THE CORRECT PRINTER AND HAVE NOT EXPIRED The user may have sent the job or jobs to a different printer, or the jobs may have been automatically deleted because they were - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 41
Troubleshooting 41 LDAP issues LDAP lookups fail Try one or more of the following: MAKE SURE PORT 389 (NON‑SSL) AND PORT 636 (SSL) ARE NOT BLOCKED BY A FIREWALL The printer uses these ports to communicate with the LDAP server. The ports must be open for LDAP lookups to work. VERIFY THAT THE - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 42
Troubleshooting 42 NARROW THE LDAP SEARCH BASE Narrow the LDAP search base attributes for the user are correct. Licensing issues License error A license error can occur if there is a problem with the Smart Access Card Solution application or its license. Try one or more of the following: MAKE SURE - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 43
as 123.123.123.123. 2 Open a Web browser, and then type the printer IP address in the address field. The Embedded Web Server appears. 3 From To export a configuration to a file, click Export, and then follow the instructions on the computer screen to save the configuration file. Note: If a JVM Out - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 44
contact your Dell representative. Checking which version of the Embedded Solutions Framework is installed on a printer 1 Obtain the printer IP address: • From the printer home Note: To view the complete list of supported printers for each version of the Embedded Web Server, see the Readme file. - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 45
Corporation. Other trademarks and trade names may be used in this document to refer to the entities claiming the marks and names of their products. Dell Inc. disclaims any proprietary interest in trademarks and trade names other than its own. GOVERNMENT END USERS The Software Program and any related - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 46
resulted from accident, abuse, misapplication, or service or modification by someone other than Dell. Any replacement media is warranted for the this Agreement do not entitle you to any maintenance or support for the Software. DELL, ON BEHALF OF ITSELF AND ITS SUPPLIERS, DISCLAIMS ALL OTHER - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 47
or accessible to you through the Internet. In such case, Dell may suspend, terminate, withdraw, or discontinue all or part of BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS support of missile projects, or chemical or biological weapons. - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 48
AND AFTER THE EVALUATION PERIOD AND HAS NO DUTY TO PROVIDE SUPPORT OF SUCH SOFTWARE TO YOU. General This license is effective until and exclusive statement of the Agreement between you and Dell regarding the Software. Your new Dell printer comes with patented print cartridges specially priced for a - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 49
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 50
jobs 25 digital certificates installing 5, 6 digital signing configuring 18 disabling reverse DNS lookups 14 DNS settings configuring 6 documents scanning at the printer 24 domain controller and device clocks out of sync 32 domain controller certificate validation error 35 domain controller did not - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 51
a configuration using the Embedded Web Server 43 installing certificates automatically 6 installing certificates manually 5 J job expiration settings configuring 21 jobs are not held at printer 40 jobs print immediately 40 K Kerberos configuration file installing 12 Kerberos configuration file - Dell B3465dnf Mono | Smart Access Card Solution Administrators Guide - Page 52
troubleshooting not lock 28 jobs are not held at printer 40 jobs print immediately 40 Kerberos configuration file 39 user's realm not found 31 verify Windows support enabled 29 your card has been locked out from quickly 27 user is unable to log in manually 27 user not authorized to use the device
Smart Access Card Solution
Administrator's Guide
June 2013
www.dell.com | dell.com/support/printers
A00