Lexmark X792 PKI-Enabled Device Installation and Configuration Guide - Page 23
The Domain Controller Issuing Certificate has not been installed
View all Lexmark X792 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 23 highlights
"The Domain Controller Issuing Certificate has not been installed" error message This error indicates that no certificate, or an incorrect certificate, has been installed on the printer. If a certificate has been installed but it is not the correct certificate, the error message displayed will be "The Domain Controller Issuing Certificate [NAME OF CERTIFICATE] has not been installed. For information on installing, viewing, or modifying certificates, see "Certificate management" on page 10. "The KDC did not respond within the required time" error message THE IP ADDRESS OR HOSTNAME OF THE KDC IS NOT CORRECT 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication > Configure. 2 If the Simple Kerberos Setup has been configured in PKI Authentication, verify the IP address or hostname specified for the Domain Controller, and then click Apply to save any needed changes. 3 If a krb5.conf file has been uploaded, verify that the IP address or hostname specified for the Domain Controller is correct. THE KDC IS NOT CURRENTLY AVAILABLE You can specify multiple KDCs in the PKI Authentication settings, or in the krb5.conf file. This will typically resolve the issue. PORT 88 IS BLOCKED BY A FIREWALL Port 88 must be opened between the printer and the KDC in order for authentication to work. "User's Realm was not found in the Kerberos Configuration file" error message This error occurs during manual login, and indicates the Windows Domain is not specified in the Kerberos settings. 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication > Configure. 2 Under Simple Kerberos setup, add the Windows Domain in lowercase to the Domain setting. Example: If the Domain setting is "mil,.mil" and the Windows Domain is "x.y.z", change the Domain setting to "mil,.mil,x.y.z". 3 If using a krb5.conf file, add an entry to the domain_realm section, mapping the lower case Windows Domain to the uppercase realm (similar to the existing mapping for the "mil" domain). Troubleshooting 23