Dell B3465dnf Mono Smart Card Authentication Client Administrators Guide
Dell B3465dnf Mono Manual
View all Dell B3465dnf Mono manuals
Add to My Manuals
Save this manual to your list of manuals |
Dell B3465dnf Mono manual content summary:
- Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 1
Smart Card Authentication Client Administrator's Guide June 2013 A00 www.dell.com | dell.com/support/printers - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 2
and functions 9 Configuring login screen settings...10 Configuring manual login setup settings 10 Configuring Smart Card setup settings...11 Configuring advanced settings...13 Configuring User Validation Mode settings 14 Troubleshooting 15 Smart Card Authentication Client login issues 15 Smart - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 3
the home screen. For a list of application requirements, including supported printers and required firmware versions, see the Readme file. For information on physically setting up the printer or using the printer features, see the User's Guide on the Software and Documentation CD that came with the - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 4
Set the Panel Login Timeout value (in seconds). The recommended value is 30 seconds. 4 Click Submit. Installing certificates manually Note: In select printer models, you can automatically download the CA. For more information, see "Installing certificates automatically" on page 5. Before configuring - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 5
the printer to the Active Directory, see the Embedded Web Server Administrator's Guide for your printer. printer using Kerberos authentication, the time on the printer clock must be within five minutes of the time on the domain controller system clock. Printer clock settings can be updated manually - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 6
the DHCP server automatically before configuring NTP settings manually. 1 From the Embedded Web Server, click Security > Set Date and Time. 3 Verify that the "Manually Set Date & Time" field is cleared. 4 Select the access to the printer Note: Before securing access to the printer, make sure - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 7
on configuring a specific type of building block, see the "Configuring building blocks" section of the Embedded Web Server Administrator's Guide for your printer. 2 Create a security template. a From the Embedded Web Server, click Settings or Configuration. b Click Security > Security Setup. c Under - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 8
or more groups, and then click Save Template. For more information on configuring security templates and using access controls, see the Embedded Web Server Administrator's Guide for your printer. Securing access to the home screen Use this method to require users to authenticate to view and use the - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 9
or function to which you want to secure access, select your security template from the drop‑down menu. 6 Click Submit. On printers running eSF version 2.0: 1 Access the Application Access Manager application configuration settings from the Embedded Web Server. 2 For each application or function - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 10
login setup settings" on page 10. If you do not configure this setting, then users will not be allowed to log in to the printer manually (using their user name and password). - If you selected Smart Card Only, then configure the setting to User Validation Mode. For more information, see "Configuring - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 11
Configuring Smart Card Authentication Client 11 • For eSF v4.x printers, if a manual domain is not specified, then the printer will use the domain in the Kerberos configuration file. To view the complete list of supported printers for each version of the Embedded Web Server, see the Readme file. 1 - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 12
the domain controller certificate: Note: Before configuring this setting, make sure the appropriate certificates are installed on the printer. See "Installing certificates manually" on page 4. • Use device certificate validation-This is the most common method. This method uses the certificate of - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 13
Principal Name (UserID@DomainName) retrieved from the Smart Card or provided during manual login is used to set the user ID. - EDI‑PI-The ID is retrieved from Active Directory. • E‑mail From Address-Select where the printer should retrieve the user's e-mail address when sending e-mail. - Smart Card- - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 14
without the need to maintain a full Kerberos authentication system. The user inserts the Smart Card into the reader and then enters the PIN in the printer home screen. If the Smart Card PIN matches the PIN entered in the home screen matches, then the user can access the application. 1 Access the - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 15
IS ATTACHED If you want users to access the printer using a Smart Card, then attach a supported Smart Card reader to the printer. See the Readme file for a list of supported card readers. ALLOW USERS TO LOG IN MANUALLY If you have enabled manual login, then this error message will prompt users that - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 16
Troubleshooting 16 3 From the Filter menu, select an application status. 4 From the User is unable to log in manually MAKE SURE THE MANUAL LOGIN DOMAIN(S) FIELD ARE SPECIFIED Verify that the domains under Manual Login Domain(s) are specified. See "Configuring manual login setup settings" on page - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 17
Troubleshooting 17 The printer home screen fails to return to a locked state when not in make sure the file is installed on the printer. If you want to use simple Kerberos setup to create the Kerberos configuration file, then manually configure the simple Kerberos setup settings. For information - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 18
Troubleshooting 18 "Unable to authenticate. Check Kerberos configuration file to verify Windows support enabled" error message This system log error indicates that the uppercase realm. When you are done, reinstall the file on the printer. If you used simple Kerberos setup, then: 1 Access the - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 19
Troubleshooting 19 "The domain controller did not respond within the required time if the domain controller is not available at the time a user is trying to authenticate to the printer. You can resolve this by specifying multiple domain controllers. If a domain controller is not available, then - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 20
Troubleshooting 20 ." MAKE SURE THE CORRECT CERTIFICATES ARE INSTALLED ON THE PRINTER See "Installing certificates manually" on page 4. "The realm on the card was in uppercase. Note: The simple Kerberos setup settings do not support multiple Kerberos realm entries. If multiple realms are needed, then - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 21
Troubleshooting 21 "Unable to contact the domain controller for the user's realm" THE DATE AND TIME ON THE PRINTER 1 From the Embedded Web Server, click Settings or Configuration. 2 Click Security > Set Date and Time. • If you configured date and time settings manually, then verify or correct the - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 22
Troubleshooting system log errors indicate that there is a problem with one or more of the certificates needed CHECK THE CERTIFICATES INSTALLED ON THE PRINTER 1 From the Embedded Web Server, to install certificates, then see "Installing certificates manually" on page 4. If all certificates are - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 23
Troubleshooting 23 "An error one or more of the following: CHECK THE CERTIFICATES INSTALLED ON THE PRINTER 1 From the Embedded Web Server, click Settings or Configuration. 2 for chain validation are configured correctly. See "Installing certificates manually" on page 4. ALLOW USERS TO LOG IN IF THE - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 24
Troubleshooting 24 "The OCSP responder certificate, stored on the printer, does not match the one returned by the responder" error the user is not in an Active Directory group that is authorized to use the printer. Try one or more of the following: ADD THE USER TO AN AUTHORIZED ACTIVE DIRECTORY GROUP - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 25
Troubleshooting 25 ADD THE USER'S GROUP TO THE AUTHORIZATION LIST FOR THE PRINTER Make sure the user's Active Directory group is PORT 389 (NON‑SSL) AND PORT 636 (SSL) ARE NOT BLOCKED BY A FIREWALL The printer uses these ports to communicate with the LDAP server. The ports must be open for LDAP lookups - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 26
Troubleshooting 26 NARROW THE LDAP SEARCH BASE Narrow the LDAP search base IS LICENSED Applications require a license to run. For more information on purchasing a license, contact your Dell representative. MAKE SURE THE LICENSE IS UP‑TO‑DATE Make sure the license for the application has not - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 27
such as 123.123.123.123. 2 Open a Web browser, and then type the printer IP address in the address field. The Embedded Web Server appears. 3 From the navigation , or for any other licensing information, contact your Dell representative. Exporting and importing configuration files After configuring an - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 28
following: • To export a configuration to a file, click Export, and then follow the instructions on the computer screen to save the configuration file. Note: If a JVM Out of Memory Note: To view the complete list of supported printers for each version of the Embedded Web Server, see the Readme file. - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 29
Corporation. Other trademarks and trade names may be used in this document to refer to the entities claiming the marks and names of their products. Dell Inc. disclaims any proprietary interest in trademarks and trade names other than its own. GOVERNMENT END USERS The Software Program and any related - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 30
resulted from accident, abuse, misapplication, or service or modification by someone other than Dell. Any replacement media is warranted for the this Agreement do not entitle you to any maintenance or support for the Software. DELL, ON BEHALF OF ITSELF AND ITS SUPPLIERS, DISCLAIMS ALL OTHER - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 31
or accessible to you through the Internet. In such case, Dell may suspend, terminate, withdraw, or discontinue all or part of BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS support of missile projects, or chemical or biological weapons. - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 32
AND AFTER THE EVALUATION PERIOD AND HAS NO DUTY TO PROVIDE SUPPORT OF SUCH SOFTWARE TO YOU. General This license is effective until and exclusive statement of the Agreement between you and Dell regarding the Software. Your new Dell printer comes with patented print cartridges specially priced for a - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 33
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 34
applications 27 locking home screen icons 9 locking the home screen 8 login screen settings configuring 10 logout automatic 4 M manual login domains 10 manual login settings configuring 10 missing Kerberos realm 20 N Network Time Protocol settings configuring 5 NTP settings configuring 5 O OCSP - Dell B3465dnf Mono | Smart Card Authentication Client Administrators Guide - Page 35
Client 3 P panel login timeout changing 4 printer functions securing 9 R realm must be in IP settings configuring 5 timeout automatic 4 troubleshooting a card reader was not detected log in manually 16 user not authorized to use the device 24 user's realm not found 20 verify Windows support enabled
Smart Card Authentication Client
Administrator's Guide
June 2013
www.dell.com | dell.com/support/printers
A00