Xerox AltaLink B8045, Security Manual, Page: 29 / 70

Xerox® Security Guide for Office Class Products: AltaLink®

VersaLink®
November 2018 Page 27
Network Authentication
When configured for network authentication, user credentials are validated by a remote authentication
server.
AltaLink®
Multifunction VersaLink®
Multifunction VersaLink® Printers
B8045, B8055, B8065, B8075,
B8090, C8030, C8035, C8045,
C8055, C8070 B405, B605, B615, B7025,
B7030, B7035, C405, C505,
C605, C7020, C7025, C7030 B400, B600, B610, C400,
C500, C600, C7000, C8000,
C9000
Network Authentication Providers
Kerberos (Microsoft Active Directory) Supported Supported Supported
Kerberos (MIT) Supported Supported Supported
SMB NTLM Versions Supported
NTLMv2 NTLMv2 NTLMv2
LDAP Versions Supported
Version 3 (including TLS
1.2) Version 3 (including TLS
1.2) Version 3 (including TLS
1.2)
Smart Card Authentication
Two-factor security - Smart Card plus User Name/Password combination. Requires optional card reader
hardware and software plugin. Authentication is handled by a remote server. Supported remote
authentication methods include Kerberos, SMB and LDAP.
Smart Card authentication is considered very secure due to the nature of the Smart Card architecture and
potential levels of encryption of data on the card itself.
Support for the SIPR network is provided using the XCP Plug-in architecture and a Smart Card
authentication solution created by 90meter under contract for Xerox.
Details regarding 90meter can be found online here: http://www.90meter.com/
Other Smart Card authentication solutions are offered including support for CAC/PIV and .NET
compatible cards leveraging XCP Plug-ins.
AltaLink®
Multifunction VersaLink®
Multifunction VersaLink® Printers
B8045, B8055, B8065, B8075,
B8090, C8030, C8035, C8045,
C8055, C8070 B405, B605, B615, B7025,
B7030, B7035, C405, C505,
C605, C7020, C7025, C7030 B400, B600, B610, C400, C500,
C600, C7000, C8000, C9000
Smart Cards
Common Access Card (CAC) Supported Supported Supported
PIV / PIV II Supported Supported Supported
Net (Gemalto .Net v1, Gemalto .Net v2) Supported Supported Supported
Gemalto MD Supported (Not Currently Supported) (Not Currently Supported)
Convenience Authentication
Convenience authentication offloads authentication to a third-party solution which may offer more or less
security than native security implementations. Users swipe a pre-programmed identification card or key
fob to access the device.
For example, employees may be issued key fobs for access to facilities. Convenience mode may be
configured to allow an employee to authenticate using their fob or require the fob in a multi-factor manor.
The level of security provided is dependent upon the chosen implementation.