Document Outline

• Contents
• Overview
• Configuring the applications
  • Configuring printer settings for use with the applications
    • Changing the panel login timeout
    • Installing certificates manually
    • Installing certificates automatically
    • Configuring TCP/IP settings
    • Setting the date and time
  • Configuring Smart Card Authentication Client
    • Securing access to the printer
      • Setting up a security template
      • Securing access to the home screen
      • Securing access to individual applications and functions
    • Configuring login screen settings
    • Configuring manual login setup settings
    • Configuring Smart Card setup settings
    • Configuring advanced settings
    • Configuring User Validation Mode settings
  • Configuring Secure Scan To E-mail
    • Configuring printer e-mail settings
    • Configuring the application settings
    • Securing access to the application
  • Configuring Scan to Network
    • Using a Kerberos ticket for authentication
  • Configuring Secure Print Jobs Release
    • Configuring and securing the application
• Using the applications
  • Using Secure Scan To E-mail
    • Sending secure e-mail
  • Using Scan to Network
    • Scanning documents at the printer
  • Using Secure Print Jobs Release
    • Printing held jobs
• Troubleshooting
  • Smart Card Authentication Client login issues
    • “A card reader was not detected on this device” error message
      • Make sure a supported Smart Card reader is attached
      • Allow users to log in manually
    • “Unsupported USB Device” error message when a Smart Card reader is attached to the printer
      • Make sure that the Smart Card reader is supported
      • Make sure that the required firmware version is installed
      • Make sure that all required applications are installed and running
    • “An error occurred while reading the card. Remove your card and try again” error message
      • Check the system log for relevant details
    • “Your card has been locked out from future login attempts” error message
      • Reset or replace the card
    • “An error occurred while checking your PIN. Remove your card and try again” error message
      • Check the system log for relevant details
    • User is unable to log in manually
      • Make sure the Manual Login Domain(s) field are specified
    • User is logged out almost immediately after logging in
      • Increase the panel login timeout interval
    • The printer home screen fails to return to a locked state when not in use
      • Make sure all required applications are installed and running
      • Make sure the home screen or home screen icons are secured
  • Smart Card Authentication Client authentication issues
    • “Authentication failed” error message
      • Check the system log for relevant details
    • “Kerberos configuration file has not been uploaded” error message
      • Make sure the Kerberos configuration file is installed
    • “Kerberos configuration file is not properly formatted” error message
      • Modify the installed Kerberos configuration file
    • “Unable to authenticate. Check Kerberos configuration file to verify Windows support enabled” error ...
      • Make sure the Windows domain is specified
    • “Unable to generate certificate from card” or “Unable to read certificate information from card” err ...
      • Check the certificate on the Smart Card
    • “The domain controller did not respond within the required time; the domain controller timeout may n ...
      • Increase the domain controller timeout
      • Make sure the domain controller IP address or host name is correct
      • Make sure the domain controller is available
      • Make sure Port 88 is not blocked by a firewall
    • “The domain controller issuing certificate has not been installed” error message
      • Make sure the correct certificates are installed on the printer
    • “The realm on the card was not found in the Kerberos configuration file” or “User’s realm was not fo ...
      • Add the missing realm or modify the incorrect realm
    • “Unable to authenticate. Verify the realm was specified in UPPERCASE” error message
      • Make sure the Kerberos realm is in uppercase
    • “Unable to contact the domain controller for the user’s realm” error message
      • Check the domain, realm, and domain controller in the Kerberos configuration file
    • “Domain controller and device clocks are different beyond an acceptable range. Check the device's da ...
      • Check the date and time on the printer
    • “Unable to validate certificate from domain controller” error message
      • Make sure the correct certificates are installed on the printer
      • Check the domain controller validation method
    • “An error occurred during domain controller chain validation” or “At least one of the certificates i ...
      • Check the certificates installed on the printer
    • “The OCSP responder URL or certificate has not been configured” error message
      • Check the OCSP responder URL and responder certificate
    • “An error occurred while trying to connect to the OCSP responder” error message
      • Check the OCSP responder URL
      • Increase the responder timeout
    • “The status of at least one of the certificates in the domain controller certificate chain is unknow ...
      • Check the certificates installed on the printer
      • Allow users to log in if the certificate status is unknown
    • “The OCSP responder certificate, stored on the printer, does not match the one returned by the respo ...
      • Check the OCSP responder certificate
      • Check the certificate returned from the OCSP responder
    • “An error occurred while trying to validate the domain controller certificate against the OCSP respo ...
      • Check the domain controller certificate
      • Check the OCSP responder
    • “The user is not authorized to use this device. Make sure the user belongs to an Active Directory gr ...
      • Add the user to an authorized Active Directory group
      • Add the user’s group to the authorization list for the printer
  • Secure Scan To E-mail issues
    • “The e-mail cannot be sent because your e-mail address could not be retrieved” error message
      • Make sure the printer e-mail function is secured
      • Make sure user e-mail addresses are retrieved correctly
      • Check the LDAP settings
    • “Your e-mail cannot be sent because your signing certificate could not be retrieved” error message
      • Check the signing certificate on the user’s Smart Card
    • “No signing certificate is available to sign your e-mail. Press Next to continue without digital sig ...
    • “The e-mail cannot be sent because an error occurred trying to retrieve user certificates from the L ...
      • Check the address book setup
      • Make sure the address book function is secured
      • Check the LDAP settings
      • Make sure the printer is connected to the network
    • “Cannot encrypt e-mail for one or more recipients. Choose one of the following” or “Encryption certi ...
    • “No encryption certificates could be found for any of the addresses you entered. Press Next to send ...
    • “Unable to connect to the e-mail server” error message
      • Make sure the printer is connected to a domain
      • Check the SMTP Server Authentication setting
      • Provide the server host name if the SMTP server uses Kerberos
      • Make sure Port 25 is not blocked
      • Make sure the printer is connected to the network
    • “Send me a copy” is not available
      • Make sure all user information is placed in the login session
  • Secure Print Jobs Release issues
    • “Unable to determine user id. Contact your system administrator” error message
      • Make sure the session user ID is set correctly
      • Make sure the application is secured
    • “There are no jobs available for [user]” error message
      • Make sure the session user ID is set correctly
      • Make sure jobs were sent to the correct printer and have not expired
    • Jobs print immediately
      • Make sure the user selects the print-and-hold feature
  • LDAP issues
    • LDAP lookups fail
      • Make sure Port 389 (non-SSL) and Port 636 (SSL) are not blocked by a firewall
      • Verify that the address book setup contains the host name for the LDAP server
      • Disable reverse DNS lookups
      • If the LDAP server requires SSL, then enable SSL for LDAP lookups
      • Narrow the LDAP search base
      • Verify that the LDAP attributes being searched for are correct
  • Licensing issues
    • License error
      • Make sure that the license is up-to-date
• Appendix
  • Accessing application configuration settings using the Embedded Web Server
  • Exporting and importing a configuration using the Embedded Web Server
  • Licensing applications
  • Checking which version of the Embedded Solutions Framework is installed on a printer
• Notices
  • Edition notice
  • Trademarks
  • GOVERNMENT END USERS
  • GNU Lesser General Public License
  • Dell End-User License Agreement
  • Additional copyrights
• Index