Document Outline

• Contents
• Overview
• Configuring Smart Card Authentication Client
  • Configuring printer settings for use with the application
    • Changing the panel login timeout
    • Installing certificates manually
    • Installing certificates automatically
    • Configuring TCP/IP settings
    • Setting the date and time
  • Securing access to the printer
    • Setting up a security template
    • Securing access to the home screen
    • Securing access to individual applications and functions
  • Configuring login screen settings
  • Configuring manual login setup settings
  • Configuring Smart Card setup settings
  • Configuring advanced settings
  • Configuring User Validation Mode settings
• Troubleshooting
  • Smart Card Authentication Client login issues
    • “A card reader was not detected on this device” error message
      • Make sure a supported Smart Card reader is attached
      • Allow users to log in manually
    • “Unsupported USB Device” error message when a Smart Card reader is attached to the printer
      • Make sure that the Smart Card reader is supported
      • Make sure that the required firmware version is installed
      • Make sure that all required applications are installed and running
    • “An error occurred while reading the card. Remove your card and try again” error message
      • Check the system log for relevant details
    • “Your card has been locked out from future login attempts” error message
      • Reset or replace the card
    • “An error occurred while checking your PIN. Remove your card and try again” error message
      • Check the system log for relevant details
    • User is unable to log in manually
      • Make sure the Manual Login Domain(s) field are specified
    • User is logged out almost immediately after logging in
      • Increase the panel login timeout interval
    • The printer home screen fails to return to a locked state when not in use
      • Make sure all required applications are installed and running
      • Make sure the home screen or home screen icons are secured
  • Smart Card Authentication Client authentication issues
    • “Authentication failed” error message
      • Check the system log for relevant details
    • “Kerberos configuration file has not been uploaded” error message
      • Make sure the Kerberos configuration file is installed
    • “Kerberos configuration file is not properly formatted” error message
      • Modify the installed Kerberos configuration file
    • “Unable to authenticate. Check Kerberos configuration file to verify Windows support enabled” error ...
      • Make sure the Windows domain is specified
    • “Unable to generate certificate from card” or “Unable to read certificate information from card” err ...
      • Check the certificate on the Smart Card
    • “The domain controller did not respond within the required time; the domain controller timeout may n ...
      • Increase the domain controller timeout
      • Make sure the domain controller IP address or host name is correct
      • Make sure the domain controller is available
      • Make sure Port 88 is not blocked by a firewall
    • “The domain controller issuing certificate has not been installed” error message
      • Make sure the correct certificates are installed on the printer
    • “The realm on the card was not found in the Kerberos configuration file” or “User’s realm was not fo ...
      • Add the missing realm or modify the incorrect realm
    • “Unable to authenticate. Verify the realm was specified in UPPERCASE” error message
      • Make sure the Kerberos realm is in uppercase
    • “Unable to contact the domain controller for the user’s realm” error message
      • Check the domain, realm, and domain controller in the Kerberos configuration file
    • “Domain controller and device clocks are different beyond an acceptable range. Check the device's da ...
      • Check the date and time on the printer
    • “Unable to validate certificate from domain controller” error message
      • Make sure the correct certificates are installed on the printer
      • Check the domain controller validation method
    • “An error occurred during domain controller chain validation” or “At least one of the certificates i ...
      • Check the certificates installed on the printer
    • “The OCSP responder URL or certificate has not been configured” error message
      • Check the OCSP responder URL and responder certificate
    • “An error occurred while trying to connect to the OCSP responder” error message
      • Check the OCSP responder URL
      • Increase the responder timeout
    • “The status of at least one of the certificates in the domain controller certificate chain is unknow ...
      • Check the certificates installed on the printer
      • Allow users to log in if the certificate status is unknown
    • “The OCSP responder certificate, stored on the printer, does not match the one returned by the respo ...
      • Check the OCSP responder certificate
      • Check the certificate returned from the OCSP responder
    • “An error occurred while trying to validate the domain controller certificate against the OCSP respo ...
      • Check the domain controller certificate
      • Check the OCSP responder
    • “The user is not authorized to use this device. Make sure the user belongs to an Active Directory gr ...
      • Add the user to an authorized Active Directory group
      • Add the user’s group to the authorization list for the printer
  • Smart Card Authentication Client LDAP issues
    • LDAP lookups fail
      • Make sure Port 389 (non-SSL) and Port 636 (SSL) are not blocked by a firewall
      • Disable reverse DNS lookups
      • If the LDAP server requires SSL, then enable SSL for LDAP lookups
      • Narrow the LDAP search base
      • Verify that the LDAP attributes being searched for are correct
  • Smart Card Authentication Client licensing issues
    • License error
      • Make sure the application is licensed
      • Make sure the license is up-to-date
• Appendix
  • Configuring applications using the Embedded Web Server
    • Accessing application configuration settings using the Embedded Web Server
  • Licensing the application
    • Licensing applications
  • Exporting and importing configuration files
    • Exporting and importing a configuration using the Embedded Web Server
  • Checking the Embedded Solutions Framework version
    • Checking which version of the Embedded Solutions Framework is installed on a printer
• Notices
  • Edition notice
  • Trademarks
  • GOVERNMENT END USERS
  • GNU Lesser General Public License
  • Dell End-User License Agreement
  • Additional copyrights
• Index