White Papers
Table Of Contents
- Contents
- Change history
- Overview
- Securing network connections
- Managing devices remotely
- Managing login methods
- Restricting public access to functions, applications, printer management, and security options
- Using local accounts
- Using LDAP or LDAP+GSSAPI
- Using Kerberos
- Using Active Directory
- Creating LDAP, LDAP+GSSAPI, or Active Directory groups
- Editing or deleting LDAP, LDAP+GSSAPI, or Active Directory groups
- Understanding access controls
- Managing certificates
- Managing other access functions
- Securing data
- Troubleshooting
- User is locked out
- User is logged out automatically
- User cannot access applications or functions
- KDC and MFP clocks are out of sync
- Domain controller certificate is not installed
- KDC is not responding within the required time
- LDAP lookups fail
- Make sure that the server and firewall settings are configured to allow communication between the pr ...
- If reverse DNS lookup is not used in your network, then disable it in the Kerberos settings
- If the LDAP server requires SSL, then enable SSL for LDAP lookups
- Narrow the LDAP search base to the lowest possible scope that includes all necessary users
- Make sure that all LDAP attributes that are being searched for are correct
- Notices
- Index
Managing
certificates
Certificates
are used when you want the printer to establish an SSL, IPSec, and 802.1x connection and to identify
securely other devices on the network. Printers can also use these
certificates
for LDAP over SSL authentication
and address book look-ups.
Certificate Authorities (CA) are trusted locations established on the network that are required in secure
environments. Otherwise, the default printer certificate is used to identify devices on the network.
Configuring printer certificate defaults
1 From the Embedded Web Server, click Settings > Security > Certificate Management.
2 From the Device
Certificates
section, click
Configure
Certificate
Defaults.
3 Configure the settings.
• Friendly Name—Type a unique name for the certificate.
• Common Name—Type the name for the printer.
Note: If you want to use the printer host name, then leave this
field
blank.
• Organization Name—Type the name of the company or organization issuing the certificate.
• Unit Name—Type the name of the unit within the company or organization issuing the certificate.
• Country/Region—Type the country or region where the company or organization issuing the certificate
is located.
• Province Name—Type the name of the province or state where the company or organization issuing
the
certificate
is located.
• City Name—Type the name of the city where the company or organization issuing the certificate is
located.
• Subject Alternate Name—Type the alternate name and prefix that conforms to RFC 2459. For example,
type an IP address using the format IP:1.2.3.4, or a DNS address using the format
DNS:ldap.company.com.
Note: If your printer is using an IPv4 address, then leave this
field
blank.
4 Click Save.
Creating a printer certificate
1 From the Embedded Web Server, click Settings > Security > Certificate Management.
2 From the Device Certificates section, click Generate.
3 Configure the settings. For more information, see “Configuring printer certificate defaults” on page 23.
4 Click Generate or Generate and Download.
Managing certificates 23