Lexmark T656 PKI-Enabled Device Installation and Configuration Guide
Lexmark T656 Manual
![]() |
View all Lexmark T656 manuals
Add to My Manuals
Save this manual to your list of manuals |
Lexmark T656 manual content summary:
- Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 1
PKI-Enabled Device Installation and Configuration Guide February 2010 www.lexmark.com Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries. All other trademarks are the property of their respective owners. © - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 2
programs described may be made at any time. For Lexmark technical support, visit support.lexmark.com. For information on supplies and downloads, visit www.lexmark.com. If you don't have access to the Internet, you can contact Lexmark by mail: Lexmark International, Inc. Bldg 004-2/CSC 740 New Circle - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 3
Supported devices ...5 Before configuring the printer ...5 Installing the firmware and applications...6 Verifying and updating the firmware Active Directory Configuration...13 User Session and Access Control... ...19 PKI Held Jobs settings ...19 Troubleshooting 21 Login Issues...21 LDAP issues...24 - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 4
Notices 33 Index 37 Contents 4 - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 5
the User Guide or Software and Documentation CD that came with the printer. Supported devices This guide covers the following models: Single-function devices • Lexmark C736 • Lexmark T654 • Lexmark T656 • Lexmark W85x Multi-function devices • Lexmark X46x • Lexmark X65x • Lexmark X73x • Lexmark X86x - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 6
network setup page prints, and the printer returns to the home screen. Installing the firmware and applications Verifying and updating the firmware Enabling PKI support for your printer involves three main components: • The printer firmware • The authentication token • The Lexmark PKI applications - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 7
Firmware. 2 From the Update Firmware page, Browse to locate the new flash file, and then click Submit. It may take several minutes for the update to complete. Note: Do not power off the printer PKI applications enable users to sign and encrypt E-mail messages sent from the printer, securely scan - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 8
each file. For information about available versions, contact the Lexmark Solutions Help Desk. PKI Authentication must be installed first. For Server Address. • If the printer is located in a different domain than the domain controller, the E-mail server, or any file share users may need to scan to - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 9
Date and time In order for users to login to the printer, the printer clock must be set to within five minutes of the domain controller system clock. Printer clock settings can be updated manually, or configured to use Network Time Protocol (NTP), to automatically sync with a trusted clock-typically - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 10
select Kerberos 5 for SMTP Server Authentication. If Kerberos is not supported, select No Authentication Required. Note: If the SMTP server requires user authentication to send E-mail but does not support Kerberos, the IP address or hostname of the printer must be added to the SMTP server as a relay - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 11
of scanned documents. • Transmission Log-The recommended setting is Print only for error. • E-mail Bit Depth-Set to 8-bit for grayscale imaging, or 1- needed. 4 Click Submit. Address Book setup Configuring the printer Address Book enables users to search your network Global Address Book for E-mail - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 12
Type, select whether users can access the printer using Card Only (SmartCard), Card or Manual Login, or Manual Login Only (userid/password). 3 Select whether Card Pin must be Numeric Only, or can be Alphanumeric. 4 If desired, provide custom Logon Screen Text, with special instruction for users, or - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 13
users are allowed to login manually, provide at least one Manual Login Domain (a Windows Domain Name) to choose from when logging in. Multiple domains can be entered, separated by commas. 6 Select a DC Validation Mode for validating the domain controller certificate when users login to the printer - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 14
values can be entered, separated by commas. 6 Use the Group Authorization List to allow only users in certain Active Directory groups access to specific printer functions, such as color printing. Multiple groups can be entered, separated by commas. Leave blank if not using group authorization - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 15
Configure. 2 For From Address, select either Card Email Address (SmartCard) or LDAP Lookup, to specify how the printer should retrieve the user's address when sending E-mail. Note: If manual login is allowed, you must select LDAP Lookup. 3 Under S/MIME Options, adjust the following settings: • Sign - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 16
, you can skip this section. General Settings General Settings control how text and icons are displayed on the printer home screen for Scan to Network, as well as which users are allowed to access the application. 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Scan to - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 17
type of content in scanned documents. • Color-Determines whether scanned documents will be in color, black and white, or grayscale. • results in better image quality. • Select Scan Preview to allow users preview and verify the first page of a document before the rest is scanned. 3 Click Apply - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 18
: - Display Name-Network Share - UNC Path-\\fileserver\CACNetworkShare - Replacement Value-User Principal Name - LDAP - Replacement Attribute-Leave blank Using a dynamic file share with the Windows User ID: - Display Name-User Share - UNC Path-\\dfs\shares\%u - Replacement Value-LDAP Lookup - LDAP - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 19
want to modify, and then click Edit. The configuration page for that share will be displayed. 3 Adjust the to be displayed above the Held Jobs icon on the printer home screen. 3 To select an alternate image for Access Control should be used to authorize user groups. If groups are not being used - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 20
. 8 Select Advanced Settings as needed: • Select Require All Jobs to be Held if you want to require all jobs to remain on the printer until released by an authorized user, or until they expire. • Select Clear Print Data to clear the memory associated with each print job once the job is released - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 21
Troubleshooting Login Issues "Unsupported USB Device" error message A SUPPORTED SMARTCARD READER HAS BEEN INSTALLED BEFORE THE PKI FIRMWARE AND APPLICATIONS The reader can not be installed until the firmware and applications have been installed. Remove the card reader, and see "Installing the - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 22
Lexmark Solutions Help Desk for assistance. "The KDC and MFP clocks are different beyond an acceptable range; check the MFP's date and time" error message This error indicates the printer manually configuring NTP settings. 3 If you have configured the printer Submit. Users are unable Troubleshooting 22 - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 23
management" on page 10. "The KDC did not respond within the required time" error message THE IP printer and the KDC in order for authentication to work. "User's Realm was not found in the Kerberos Configuration file" error message This error occurs during manual login, and indicates the Windows - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 24
normally occurs either during login (at "Getting User Info"), or during address book searches. PORT 389 (NON-SSL) OR PORT 636 (SSL) IS BLOCKED BY A FIREWALL These ports are used by the printer to communicate with the LDAP server, and must be open in order for LDAP lookups to work. Troubleshooting 24 - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 25
REVERSE DNS LOOKUPS ARE DISABLED ON THE NETWORK The printer uses reverse DNS lookups to verify IP addresses. If all necessary users. THE LDAP ATTRIBUTE BEING SEARCHED FOR IS NOT CORRECT Verify that the LDAP attributes for the user's E-mail address and/or home directory are correct. Troubleshooting 25 - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 26
problems, see "LDAP issues" on page 24. "Email cannot be sent because you are not authorized to perform this function" error message This error usually indicates the user manual login is performed" error message E-mail can only be digitally signed if the user User for Sign Email. Troubleshooting 26 - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 27
about finding the correct version for your printer, see "Verifying and updating the firmware" on page 6. If you have verified or updated your firmware and still experience this problem, contact the Lexmark Solutions Help Desk. "501 5.5.4 INVALID ADDRESS" ERROR FROM THE SMTP SERVER The domain name - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 28
adjust server and/or firewall settings to allow communication between the printer and SMTP server on port 25. Scan to Network issues "You are not authorized to use this feature" Scan to Network error message This error usually indicates the user in not in an Active Directory group that is authorized - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 29
page for error message After scanning, the number of bytes scanned is compared to the number written to the saved file. If the user does not have read access to the file share, the file size cannot be determined. To correct this problem, grant the user read access to the file share. Troubleshooting - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 30
(or servers) on port 445. "The network share name does not exist on the specified file server" error message THE PRINTER CONNECTED TO THE FILE SERVER, BUT THE SHARE NAME DOES NOT EXIST Verify that the share name is correct, and that the user has read/write access to that share. Troubleshooting 30 - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 31
to modify, and then click Edit. The configuration page for that share will be displayed. 3 Under to determine Windows User ID" error message This error indicates that User Session and Access Control, select LDAP Lookup for the Session Userid. 3 Click Apply to save any needed changes. Troubleshooting - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 32
, or the jobs were automatically deleted because they were not printed in time. Jobs are printing out immediately Most likely, the user is not selecting the print and hold feature when printing the job. Show the user how to select the print and hold feature in the print driver. Troubleshooting 32 - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 33
DO NOT SO AGREE, DO NOT INSTALL, COPY, DOWNLOAD, OR OTHERWISE USE THE SOFTWARE PROGRAM. IF YOU reimbursement of the price paid for the Software Program. 3 LICENSE GRANT. Lexmark grants you the the number of authorized users to the number specified in your agreement with Lexmark. You may not separate - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 34
download. Use of the Freeware by you shall be governed entirely by the terms and conditions of such license. 4 TRANSFER. You may transfer the Software Program to another end-user. Any transfer , error correction, and security testing. If you have such statutory rights, you will notify Lexmark in - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 35
No choice of law rules in any jurisdiction will apply. 14 UNITED STATES GOVERNMENT RESTRICTED RIGHTS. The Software has been developed entirely at by you and Lexmark relating to your Use of the Software Program). To the extent any Lexmark policies or programs for support services conflict with the - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 36
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 37
10 supported devices 5 T TCP/IP settings 8 timeout automatic 9 troubleshooting 501 5.5.4 Invalid Address error 27 authentication manual login 26 home screen does not lock 21 invalid character in filename 30 invalid filename specified 30 Invalid Message ID error 27 jobs not being held at printer - Lexmark T656 | PKI-Enabled Device Installation and Configuration Guide - Page 38
sync 22 problem getting user info 24 realm on card not found 24 scanned and saved file sizes do not match 29 SMTP server does not support GSSAPI 27 SMTP server must use hostname with Kerberos 27 SMTP server requires authentication 27 unable to authenticate 22 unable to determine Windows User ID 31
![](/manual_guide/products/lexmark-t656-pkienabled-device-installation-configuration-guide-f818969/1.png)
PKI-Enabled Device
Installation and Configuration Guide
February 2010
www.lexmark.com
Lexmark and Lexmark with diamond design are trademarks of Lexmark International, Inc., registered in the United States and/or other countries.
All other trademarks are the property of their respective owners.
© 2010 Lexmark International, Inc.
All rights reserved.
740 West New Circle Road
Lexington, Kentucky 40550