Home » Dell Manuals » Printers » Dell B3465dnf Mono » Manual Viewer

Dell B3465dnf Mono Smart Card Authentication Client Administrators Guide - Page 22

the certificates in the domain controller certificate chain has been revoked error

Add to My Manuals
Save this manual to your list of manuals

Page 22 highlights

Troubleshooting 22 CHECK THE DOMAIN CONTROLLER VALIDATION METHOD 1 Access the application configuration settings from the Embedded Web Server. 2 Under the Smart Card Setup heading, make sure you selected the correct method from the Domain Controller Validation menu. For information about configuring this setting, see "Selecting the domain controller validation method" on page 12. 3 Click Apply. "An error occurred during domain controller chain validation" or "At least one of the certificates in the domain controller certificate chain has been revoked" error message These system log errors indicate that there is a problem with one or more of the certificates needed for chain validation. Certificates may be missing, expired, or revoked, or they may contain incorrect information. CHECK THE CERTIFICATES INSTALLED ON THE PRINTER 1 From the Embedded Web Server, click Settings or Configuration. 2 Click Security > Certificate Management > Certificate Authority Management. 3 Make sure all certificates required for chain validation are installed and contain correct information. Make sure none of the certificates have been revoked or are expired. If you need to install certificates, then see "Installing certificates manually" on page 4. If all certificates are installed correctly and these issues still occur, then contact your solutions provider. "The OCSP responder URL or certificate has not been configured" error message This system log error indicates that OCSP settings are not configured correctly. CHECK THE OCSP RESPONDER URL AND RESPONDER CERTIFICATE 1 Access the application configuration settings from the Embedded Web Server. 2 Under the Online Certificate Status Protocol (OCSP) heading, make sure the values in the Responder URL and Responder Certificate fields are correct. For information about configuring these settings, see "Selecting the domain controller validation method" on page 12. 3 Click Apply.

Section	Page
Contents	2
Overview	3
Configuring Smart Card Authentication Client	4
Configuring printer settings for use with the application	4
Changing the panel login timeout	4
Installing certificates manually	4
Installing certificates automatically	5
Configuring TCP/IP settings	5
Setting the date and time	5
Securing access to the printer	6
Setting up a security template	7
Securing access to the home screen	8
Securing access to individual applications and functions	9
Configuring login screen settings	10
Configuring manual login setup settings	10
Configuring Smart Card setup settings	11
Configuring advanced settings	13
Configuring User Validation Mode settings	14
Troubleshooting	15
Smart Card Authentication Client login issues	15
“A card reader was not detected on this device” error message	15
Make sure a supported Smart Card reader is attached	15
Allow users to log in manually	15
“Unsupported USB Device” error message when a Smart Card reader is attached to the printer	15
Make sure that the Smart Card reader is supported	15
Make sure that the required firmware version is installed	15
Make sure that all required applications are installed and running	15
“An error occurred while reading the card. Remove your card and try again” error message	15
Check the system log for relevant details	15
“Your card has been locked out from future login attempts” error message	16
Reset or replace the card	16
“An error occurred while checking your PIN. Remove your card and try again” error message	16
Check the system log for relevant details	16
User is unable to log in manually	16
Make sure the Manual Login Domain(s) field are specified	16
User is logged out almost immediately after logging in	16
Increase the panel login timeout interval	16
The printer home screen fails to return to a locked state when not in use	17
Make sure all required applications are installed and running	17
Make sure the home screen or home screen icons are secured	17
Smart Card Authentication Client authentication issues	17
“Authentication failed” error message	17
Check the system log for relevant details	17
“Kerberos configuration file has not been uploaded” error message	17
Make sure the Kerberos configuration file is installed	17
“Kerberos configuration file is not properly formatted” error message	18
Modify the installed Kerberos configuration file	18
“Unable to authenticate. Check Kerberos configuration file to verify Windows support enabled” error ...	18
Make sure the Windows domain is specified	18
“Unable to generate certificate from card” or “Unable to read certificate information from card” err ...	18
Check the certificate on the Smart Card	18
“The domain controller did not respond within the required time; the domain controller timeout may n ...	19
Increase the domain controller timeout	19
Make sure the domain controller IP address or host name is correct	19
Make sure the domain controller is available	19
Make sure Port 88 is not blocked by a firewall	19
“The domain controller issuing certificate has not been installed” error message	20
Make sure the correct certificates are installed on the printer	20
“The realm on the card was not found in the Kerberos configuration file” or “User’s realm was not fo ...	20
Add the missing realm or modify the incorrect realm	20
“Unable to authenticate. Verify the realm was specified in UPPERCASE” error message	20
Make sure the Kerberos realm is in uppercase	20
“Unable to contact the domain controller for the user’s realm” error message	21
Check the domain, realm, and domain controller in the Kerberos configuration file	21
“Domain controller and device clocks are different beyond an acceptable range. Check the device's da ...	21
Check the date and time on the printer	21
“Unable to validate certificate from domain controller” error message	21
Make sure the correct certificates are installed on the printer	21
Check the domain controller validation method	22
“An error occurred during domain controller chain validation” or “At least one of the certificates i ...	22
Check the certificates installed on the printer	22
“The OCSP responder URL or certificate has not been configured” error message	22
Check the OCSP responder URL and responder certificate	22
“An error occurred while trying to connect to the OCSP responder” error message	23
Check the OCSP responder URL	23
Increase the responder timeout	23
“The status of at least one of the certificates in the domain controller certificate chain is unknow ...	23
Check the certificates installed on the printer	23
Allow users to log in if the certificate status is unknown	23
“The OCSP responder certificate, stored on the printer, does not match the one returned by the respo ...	24
Check the OCSP responder certificate	24
Check the certificate returned from the OCSP responder	24
“An error occurred while trying to validate the domain controller certificate against the OCSP respo ...	24
Check the domain controller certificate	24
Check the OCSP responder	24
“The user is not authorized to use this device. Make sure the user belongs to an Active Directory gr ...	24
Add the user to an authorized Active Directory group	24
Add the user’s group to the authorization list for the printer	25
Smart Card Authentication Client LDAP issues	25
LDAP lookups fail	25
Make sure Port 389 (non-SSL) and Port 636 (SSL) are not blocked by a firewall	25
Disable reverse DNS lookups	25
If the LDAP server requires SSL, then enable SSL for LDAP lookups	25
Narrow the LDAP search base	26
Verify that the LDAP attributes being searched for are correct	26
Smart Card Authentication Client licensing issues	26
License error	26
Make sure the application is licensed	26
Make sure the license is up-to-date	26
Appendix	27
Configuring applications using the Embedded Web Server	27
Accessing application configuration settings using the Embedded Web Server	27
Licensing the application	27
Licensing applications	27
Exporting and importing configuration files	27
Exporting and importing a configuration using the Embedded Web Server	27
Checking the Embedded Solutions Framework version	28
Checking which version of the Embedded Solutions Framework is installed on a printer	28
Notices	29
Edition notice	29
Trademarks	29
GOVERNMENT END USERS	29
GNU Lesser General Public License	29
Dell End-User License Agreement	29
Additional copyrights	32