background image

c. Click Certificate Validation - Edit in the Configuration Settings menu.

d. Select the required Validation Options.

e. If you have selected one or more options, to configure further settings, click Next.
f. If prompted, enter the OCSP Server URL to use for certificate validation.

3-23

Xerox

®

AltaLink

®

Series

Smart Card Installation and Configuration Guide

Installation

Summary of Contents for AltaLink 8035

Page 1: ...Xerox AltaLink Series Smart Card Installation and Configuration Guide Version A February 2018 702P06264...

Page 2: ...2018 Xerox Corporation All rights reserved Xerox and Xerox and Design are trademarks of Xerox Corporation in the United States and or other countries...

Page 3: ...Authentication 3 10 Enable NTP Service 3 12 Configure Alternate Authentication 3 14 Configure a Security Certificate 3 15 Create a Device Certificate 3 16 Import a Certificate Authority Certificate 3...

Page 4: ...leshooting 4 1 Fault Clearance 4 1 Locating the Serial Number 4 1 Troubleshooting Tips 4 2 During Installation 4 2 After Installation 4 2 Xerox AltaLink Series ii Smart Card Installation and Configura...

Page 5: ...n email and fax information After validation you are logged in to the Xerox device for all walk up features For added security the functions are tracked This guide explains how to install and configur...

Page 6: ...configured on the MFD according to the network infrastructure Hold All Jobs Xerox offers a feature called Hold All Jobs This feature ensures that jobs are held securely at the MFD and only are availab...

Page 7: ...te key making the payload readable again Supported Card Readers The customer is responsible for providing a card reader for each Xerox device The following card readers are compatible with the solutio...

Page 8: ...Xerox product the following resources are available System Administrator Guide provides detailed instructions and information about connecting your device to the network and installing optional featur...

Page 9: ...e obtain the IP address or Host Name for the OCSP server 4 If a software upgrade is required obtain and install the required software release 5 Mount the Smart Card Reader to the MFD and connect the U...

Page 10: ...ing Encryption settings Refer to Configure SMTP Email Settings 11 Configure the Hold All Jobs Secure Print policy if necessary Refer to Printing Features Xerox AltaLink Series 2 2 Smart Card Installat...

Page 11: ...it then install the card reader device Enabling the Smart Card To enable the Smart Card for configuration use the Feature Enable Key Configuring the Smart Card Enable the Smart Card function then cust...

Page 12: ...ads Three Cable Ties One Ferrite Bead Ensure that you have read the license agreement and agree to the terms and conditions specified before installation 2 Locate the card reader device to install The...

Page 13: ...dministrator configures the cards before the card reader is installed on the printer 3 Attach the ferrite bead to the reader cable 3 3 Xerox AltaLink Series Smart Card Installation and Configuration G...

Page 14: ...s to the card reader device Fasteners are provided to secure the card reader to the Xerox device a Peel back the fastener backing strip b Position the fastener on the under side of the card reader as...

Page 15: ...c Repeat these steps for each of the fasteners supplied 5 Remove the fastener backing strips 3 5 Xerox AltaLink Series Smart Card Installation and Configuration Guide Installation...

Page 16: ...or the opening of doors or covers c Check that the cable has sufficient length to connect to the rear of the network controller d Once the card reader is in a suitable location press on it firmly to f...

Page 17: ...In the URL field enter http followed by the IP Address of the device For example If the IP Address is 192 168 100 100 enter the following into the URL field http 192 168 100 100 c Press Enter to view...

Page 18: ...lternate method of authentication select User Name Password from the Alternate Control Panel Login menu g If the device uses the email address registered to the authenticated user select the Personali...

Page 19: ...e Smart Card Enablement Guide j Click Next A confirmation message appears k Click Next The Smart Card settings are now ready to configure Note No services are restricted until the Smart Card is config...

Page 20: ...click Login Methods 2 Enter the Domain Controller details for the authentication server a Click Domain Controllers Edit from the Configuration Settings list Note Initially the Domain Controllers are e...

Page 21: ...Host Name then enter the Domain Controller details e Unless your Kerberos Port is different ensure that Port 88 is selected f Enter the fully qualified Domain Name 3 11 Xerox AltaLink Series Smart Ca...

Page 22: ...lick Save Enable NTP Service Configure the Date and Time to update automatically a Click Network Time Protocol Edit Xerox AltaLink Series 3 12 Smart Card Installation and Configuration Guide Installat...

Page 23: ...P c Enter the IP address or Host Name of the Primary and Alternate Time Server Often this address is the same address as the Domain Controller d Click Save 3 13 Xerox AltaLink Series Smart Card Instal...

Page 24: ...required refer to Configure a Security Certificate If Alternate Authentication is enabled to configure the server click Authentication Servers Control Panel Alternate Edit in the Configuration Settin...

Page 25: ...Close Configure a Security Certificate If you require the MFD to be configured for certificate validation complete this section The following instructions are included Create a Device Certificate Imp...

Page 26: ...icate a In the Properties tab click Security b Click Certificates Security Certificates c Click the Xerox Device Certificate tab d Click Create New Xerox Device Certificate e Complete the Self Signed...

Page 27: ...e To import a certificate from the Certificate Authority a In the Properties tab click Security b Click Certificates Security Certificates c Click the Root Intermediate Trusted Certificates tab 3 17 X...

Page 28: ...e and navigate your Certificate Authority certificates f Click Next g If the certificate is encrypted enter the password on the Password Required screen Xerox AltaLink Series 3 18 Smart Card Installat...

Page 29: ...individual Smart Card i Refer to Configure SSL Install a Domain Controller Certificate To install a Domain Controller Certificate a In the Properties tab click Security b Click Certificates Security C...

Page 30: ...k Browse and navigate to your Domain Controller certificates f If the certificate is encrypted enter the password on the Password Required screen Xerox AltaLink Series 3 20 Smart Card Installation and...

Page 31: ...ter and the MFD when you configure security certificates on the MFD SSL is enabled on the device automatically If you do not want to configure SSL proceed to Configure Certificate Validation a In the...

Page 32: ...anges to apply click Save and the device automatically reboots If you have not made changes click Cancel Configure Certificate Validation If you do not require certificate validation proceed to Config...

Page 33: ...the required Validation Options e If you have selected one or more options to configure further settings click Next f If prompted enter the OCSP Server URL to use for certificate validation 3 23 Xero...

Page 34: ...Configure If the OCSP server is outside the firewall a proxy server can be required to access the server h Select the Domain Controller Certificates to validate each domain controller Xerox AltaLink S...

Page 35: ...Smart Card authentication proceed to Configure Acquiring Logged In User Email Address a In the Properties tab click Login Permissions Accounting b Click Login Methods c Click Smart Card Inactivity Ti...

Page 36: ...rver information If you do not want to Configure Acquiring Logged In Email Addresses for Users settings proceed to Confirm the Installation a In the Properties tab click the Login Permissions Accounti...

Page 37: ...ail Addresses for Users e If you select Auto or Only Network Address Book LDAP click Network Address Book LDAP Edit to configure LDAP server settings f Click Add New 3 27 Xerox AltaLink Series Smart C...

Page 38: ...tory Root Typically this directory root is related to the domain name for the server For example if the Fully Qualified Domain Name for the server is Hostname Example Search Root the search directory...

Page 39: ...able SASL Binds to LDAP Note Smart Cards use a ticket based authentication to LDAP and require SASL for authentication p Click Save q Click Close 3 29 Xerox AltaLink Series Smart Card Installation and...

Page 40: ...click the Required Settings tab a Click SMTP Edit b To configure the server address click Use DNS to identify SMTP Server Or click IP Address or Host Name then enter the SMTP server address Xerox Alt...

Page 41: ...c Enter the required Device Email Address d Click Save 3 31 Xerox AltaLink Series Smart Card Installation and Configuration Guide Installation...

Page 42: ...n the Login credentials used for user initiated email jobs select Logged in User Note The credentials for the logged in user typically provide authentication for the SMTP server when you enable Smart...

Page 43: ...lick Save Configure Connection Encryption Click SMTP Edit a Click the Connection Encryption tab b Select the required encryption setting c Click Save 3 33 Xerox AltaLink Series Smart Card Installation...

Page 44: ...the File Size Management tab Note This screen defines how to manage large email payloads b Select the required settings c Click Save Test Configuration Click SMTP Edit Xerox AltaLink Series 3 34 Smart...

Page 45: ...t all email settings are correct b Enter a valid email address in the To Address field c Click Send Email Note If the SMTP settings are correct a success message appears and an email is received at th...

Page 46: ...appear to confirm that the required settings are configured e Click Save Configure General Email Settings Click Apps Email Setup On the Email Setup screen click the General tab Xerox AltaLink Series...

Page 47: ...r the information to be included in the Signature d Select the required option for printing a Confirmation Sheet from the menu e If you want the MFD to add your email address to the To field automatic...

Page 48: ...Device Address Book Edit b Configure the Device Address Book Instructions are available in the System Administration Guide Configure Email Defaults Click the Defaults tab a Select the required option...

Page 49: ...ion Select the Compression tab a Select the required Compression Settings b Click Save Configure Email Security 1 Click the Security tab 3 39 Xerox AltaLink Series Smart Card Installation and Configur...

Page 50: ...Signing Edit b Select the required Encryption Enablement setting Off You cannot sign email Always On An email signature is required Xerox AltaLink Series 3 40 Smart Card Installation and Configuration...

Page 51: ...ignature is required c If you selected Editable by User if the ability to sign is required by default click On for Email Encryption Default d Select the required Encryption Algorithm 3 41 Xerox AltaLi...

Page 52: ...If you want to configure email domain restrictions click Edit in the Network Policies area a Select the required restrictions Xerox AltaLink Series 3 42 Smart Card Installation and Configuration Guid...

Page 53: ...a corporate name This option requires configuration of your email server b Click Save 3 If you want to configure restrictions on email recipients click Edit in the User Policies area a Select the req...

Page 54: ...s Configure Hold All Jobs Hold All Jobs allows you to configure the MFD to require users to release print jobs manually at the Control Panel If you want to configure Hold All Jobs follow these instruc...

Page 55: ...re allows you to send a job to the MFD with a unique passcode Jobs are stored at the MFD until you enter the same passcode to release them Further information about how to use Secure Print is availabl...

Page 56: ...jobs at the Control Panel If required enter a number from 4 10 to specify the length of the Secure Print Passcode User ID requires you to log in at the Control Panel to release your Secure Print jobs...

Page 57: ...om the Smart Card certificate or from the Windows Operating System To configure the print driver to pull the user name from the Smart Card certificate Install your Xerox Print Driver Instructions are...

Page 58: ...c Select Enabled from the Access and Verification menu Xerox AltaLink Series 3 48 Smart Card Installation and Configuration Guide Installation...

Page 59: ...gure Hold All Jobs and Configure Secure Print Driver Defaults Confirm the Installation When you install and configure the card reader and the software the Card Reader Detected screen appears on the Xe...

Page 60: ...ivity To use the Smart Card The Authentication Required window can appear on the touch screen if that is how your device is configured 1 Insert your card into the card reader 2 Use the touch screen an...

Page 61: ...d refer to Troubleshooting Tips on page 45 If the problem persists identify whether it is related to the card reader device or the Xerox device For problems with the card reader device contact the man...

Page 62: ...Refer to Connect the USB Smart Card Reader to the MFD for instructions Unplug the card reader cable then plug it back in Plug the card reader into a differ ent USB port Check that the card reader is...

Page 63: ...the network cable is con nected firmly Network error Contact the Registration Authority to reset the PIN or to get a new card Card was locked due to failed login attempts The number of attempts were...

Page 64: ...In structions are available in the System Administrator Guide Verify that GMT offset is correct for Daylight Savings Time Note Unforeseen errors are mapped to this error message The IP Address is inc...

Page 65: ......

Page 66: ......

Reviews: