White Papers
Table Of Contents
- Contents
- Change history
- Overview
- Securing network connections
- Managing devices remotely
- Managing login methods
- Restricting public access to functions, applications, printer management, and security options
- Using local accounts
- Using LDAP or LDAP+GSSAPI
- Using Kerberos
- Using Active Directory
- Creating LDAP, LDAP+GSSAPI, or Active Directory groups
- Editing or deleting LDAP, LDAP+GSSAPI, or Active Directory groups
- Understanding access controls
- Managing certificates
- Managing other access functions
- Securing data
- Troubleshooting
- User is locked out
- User is logged out automatically
- User cannot access applications or functions
- KDC and MFP clocks are out of sync
- Domain controller certificate is not installed
- KDC is not responding within the required time
- LDAP lookups fail
- Make sure that the server and firewall settings are configured to allow communication between the pr ...
- If reverse DNS lookup is not used in your network, then disable it in the Kerberos settings
- If the LDAP server requires SSL, then enable SSL for LDAP lookups
- Narrow the LDAP search base to the lowest possible scope that includes all necessary users
- Make sure that all LDAP attributes that are being searched for are correct
- Notices
- Index
Configure e‑mail notification
Before you begin, make sure that the printer settings have been
configured
properly for e‑mail.
a In the Admin’s E‑mail Address field, type one or more e‑mail addresses, separated by commas.
b
Configure
the
notification
settings.
• E‑mail Log Cleared Alert—Send a
notification
when the Delete Log button is clicked.
• E‑mail Log Wrapped Alert—Send a notification when the log becomes full and begins to overwrite
the oldest entries.
• Log Full Behavior—Wrap over oldest entries or e‑mail the log and then delete all entries.
• E‑mail % Full Alert—Send a notification when log storage space reaches a certain percentage of
capacity.
• % Full Alert Level—Specify how full the log must be before an alert is triggered.
• E‑mail Log Exported Alert—Send a notification when the log file is exported.
• E‑mail Log Settings Changed Alert—Send a notification when the log settings are changed.
• Log Line Endings—Specify how the log file terminates the end of each line.
• Digitally Sign Exports—Add a digital signature to each exported log
file.
3 Click Save.
Managing security audit logs
• To delete the syslog, in the Clear Log menu, click Clear.
• To view or save the syslog, in the Export Log menu, select the file type, and then click Export.
Updating firmware
Automated
firmware
updates can be done simultaneously over a network of printers. For security, the ability
to perform this update can be restricted to authorized administrators by using access control.
Printers inspect all downloaded
firmware
packages for some required attributes before adopting and executing
the packages. The firmware is packaged in a proprietary format and encrypted with a symmetric encryption
algorithm through an embedded key that is known only to the manufacturer. However, the strongest security
measure comes from requiring all
firmware
packages to include multiple digital 2048-bit RSA signatures from
the manufacturer. If these signatures are not valid, or if the message logs indicate a change in
firmware
after
the signatures were applied, then the firmware is discarded.
1 From the Embedded Web Server, click Settings > Device > Update Firmware.
2 Browse to the firmware file.
3 Click Upload.
Managing devices remotely 11