To configure Xerox Secure Access with Remote Authentication:
1. Open your Web browser and enter the IP address of the printer in the address field. Press Enter to open CentreWare Internet Services.
2. Click the Properties tab.
3. If prompted, enter the system administrator user name and password (default: admin, 1111). 4. Click the Security folder, then Authentication Configuration.
5. In the Authentication Configuration > Step 1 of 2 page:
a. Select Xerox Secure Access from the Login Type drop down list.
b. Select the Print Stored File from Folder, or Folder to PC/Server Enabled check boxes to enable these services.
c. Select the Non-account Print: Enabled check box if you wish to allow printing for a user without and account.
d. Select Apply, then reboot the printer after the prompt.
e. Select Next to continue to the Authentication Configuration > Step 2 of 2 page.
6. In the Authentication Configuration > Step 2 of 2 page, click Configure next to Authentication System.
7. In the Authentication System page:
a. Select Authentication Agent from the Authentication System Settings drop down list, b. Set the Server Response Time-out, and Search Time-out.
c. Select the Assign UPN (User Principal Name): Enabled check box to assign a user principal name.
d. Select Apply, then reboot the printer after the prompt. 8. To set service access:
a. Refresh your Web browser.
b. Click the Security folder, then Authentication Configuration. c. In the Authentication Configuration > Step 1 of 2 page, click Next.
d. Under Device Default State Configuration, click Configure next to Service Access. e. Select one of the following for each service you want to control:
• Unlocked: Allow unrestricted access.
• Locked (Show Icon): Require login for access. The service icon is visible to all users in the all services screen.
• Locked (Hide Icon): Require login for access. The service icon is hidden until an authorized user logs in.
f. Click Apply and enter the Administrator User name and password when prompted (default of
admin and 1111). g. Click OK.
Authentication
Enable Specific Xerox Secure Access Settings
1. Open your Web browser and enter the IP address of the printer in the address field. Press Enter to open CentreWare Internet Services.
2. Click the Properties tab.
3. Enter the system administrator User Name and Password (default admin, 1111) if prompted. 4. Select the Security folder.
5. In the Security folder, select the Remote Authentication Servers folder.
6. In the Remote Authentication Servers folder, select Xerox Secure Access Settings. 7. In the Xerox Secure Access Settings area:
a. Enter text in the Default Prompt and Default Title boxes to create the prompt and prompt title that will be displayed on the printer’s screen informing users how to authenticate themselves at the printer.
b. If the Title and Prompt have been configured on the Secure Access Server, then that information will override the information entered here.
c. Select the Enable box for Local Login to allow users to log in locally at the printer.
d. Select the Enable box for Get Accounting Code to get user accounting data from a networked Accounting Server (if used).
e. Click Apply.
Using Secure Access
1. Read the printer’s prompt to determine what needs to be done to be authenticated at the printer. Authentication methods include swiping a card, placing a proximity card near the reader, or entering a user ID or PIN (personal identification number).
2. If the printer requests further information such as accounting details, enter this information at the printer.
3. The printer will confirm successful authentication allowing access to previously locked system features.
4. When finished, press the Login/Out button.
Configure Color Copy Access for LDAP Group
Refer to your LDAP server documentation for the full range of information that can be entered into this LDAP dialog to fully support both e-mail applications and authentication using your LDAP server.
Creating Color Access Group within Active Directory
This procedure describes how to create an Active Directory color access group to be used to restrict color copying and printing.
Click Start, click Control Panel, double-click Administrative Tools, and then click Active Directory Users and Computers.
1. In the Active Directory Users and Computers window, expand the domain folder. 2. In the console tree, right-click the Users folder in which you want to add a new group. 3. Click New, and then click Group.
4. Type the name of the new group. Use a name that you can easily associate with the role or service for which you are creating.
5. To add users and/or groups to the newly created color access group, right-click the group and select
Properties.
6. Click the Members tab, then click the Add button to add members to the group. 7. Click Finish.
LDAP Group Access
1. Click the Properties tab, click the Connectivity folder, click the Protocols folder, then click the LDAP
folder.
2. In the LDAP folder, click LDAP Group Access. 3. On the LDAP Group Access page:
4. In the Color Authorization area, on the Color Access Group line, type
CN=Color,CN=Users,DC=crmttrinity,DC=lab
5. Click Apply, then reboot the printer at the prompt.
6. Continue with the next procedure to set Authentication Configuration.
Authentication Configuration
1. Click the Properties tab, then click the Security folder. 2. Click Authentication Configuration.
3. The Properties tab refreshes and the Authentication Configuration > Step 1 of 2 page appears. 4. On the Authentication Configuration > Step 1 of 2 page, in the Authentication Configuration box:
a. In the Login Type drop down list, click or verify Login to Remote Accounts. b. On the Folder to PC / Server line, click or verify the Enabled check box.
c. On the Non-account Print line, ensure that the Enabled check box is not checked if you wish to enable people without accounts to continue to print.
d. On the Guest User line, in the drop down list, click or verify Off. 5. Click Apply, then reboot the printer following the prompt.
6. Continue with the next procedure to set Authentication System.
Authentication System
1. Click the Properties tab, click the Security folder, then click the Remote Authentication Servers
folder.
2. In the Remote Authentication Servers folder, click Authentication System. 3. On the Authentication System page, in the Authentication Type box:
a. In the Authentication System Settings drop down list, click or verify LDAP. b. Click Apply, then reboot the printer at the prompt.
Authentication 4. Press the Machine Status button.
5. Touch the Tools tab.
6. Touch Authentication / Security Settings. 7. In the Group column, touch Authentication. 8. In the Features column, touch Access Control. 9. On the Access Control screen, touch Feature Access. 10. On the Feature Access screen:
a. In the Items column, touch Color Copying. b. Touch the Change Settings button.
11. On the Color Copy screen, touch Locked, then touch Save. 12. Reboot the printer.
13. Press the Services button, touch the Copy icon, then the Color button.
14. The Login screen appears. The printer is configured for Color Copy Access for LDAP Group.
To Enable Print Color Access Control
This process will restrict a user from printing in color unless they are authorized to do so via the Active Directory group.
1. Click Start, click Control Panel, double-click Printers and Faxes, then right-click the printer to be enabled. In the printer pop-up menu, click Properties.
2. In the Properties dialog box, click the Options tab.
3. On the Options tab, in the Options Settings area, click the Predefined Configurations folder. 4. In the the Predefined Configurations area, click the Color Access Control field and click Enabled. 5. Click the Color Access Group field and type or enter the color access group name.
6. Click Apply, then click OK.
Note:On the client side, if the user that installs the print driver is a member of the group given permission to print in color, then the Output Color option within the driver will be selectable between Color and Black and White. If the user does not have permission to print in color, then the Output Color option within the driver will list Black and White and is not selectable.