Xerox® Security Guide for Entry Production Color Class Products
March 2019
Page 6-23
Identification, Authentication, and Authorization
ColorPress® and Versant® products offer a range of authentication and authorization options to support
various environments.
Single Factor authentication is supported locally on the product or via external network authentication
servers (e.g. LDAP, Kerberos, ADS). Multi Factor authentication is supported by addition of card reader
hardware. (Where ease of access is desired, open access and simple user identification modes also
exist, however these are not recommended for secure environments.)
In all modes, product administrator accounts always require authentication. This cannot be disabled.
A flexible RBAC (Role Based Access Control) security model supports granular assignment of user
permissions. Once a user has been authenticated, the product grants (or denies) user permissions
based upon the role(s) they have been assigned to. Pre-defined roles that may be used or custom roles
may be created as desired.
Authentication
ColorPress® and Versant® devices support the following authentication modes:
Local Authentication
Network Authentication
Smart Card Authentication (CAC, PIV, SIPR, .Net)
Convenience Authentication
Local Authentication
The local user database stores user credential information. The printer uses this information for local
authentication and authorization, and for Xerox ® Standard Accounting. When you configure local
authentication, the printer checks the credentials that a user provides against the information in the user
database. When you configure local authorization, the printer checks the user database to determine
which features the user is allowed access.
Note: User names and passwords stored in the user database are not transmitted over the network
Password Policy
The following password attributes can be configured:
Versant® 80/180 Press Versant® 2100/3100
Press
Color 800/100 Press®
Versant 80 Press, Versant
180 Press
Versant 2100 Press,
Versant 3100 Press
Color 800/1000 Presses,
Color 800i/1000i Presses
Password Policy
Minimum Length
1
1
1
Maximum Length
63
63
63
Password cannot contain User Name
Supported
Supported
Supported
Password complexity options (in addition to
alphabetic characters)
Require a number
Require a number
Require a number
