Configure Acquiring Logged-In Email Addresses for Users..........3-26 Configure SMTP Email Settings..................3-30 Configure General Email Settings..................3-36 Printing Features..............................3-44 Configure Hold All Jobs........................3-44 Configure Secure Print Driver Defaults..................3-45 Configure the Print Driver.........................3-47 Confirm the Installation..........................3-49 Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Page 4
Table of Contents Using Smart Card..............................3-50 4 Troubleshooting........................4-1 Fault Clearance..............................4-1 Locating the Serial Number.......................4-1 Troubleshooting Tips............................4-2 During Installation..........................4-2 After Installation............................4-2 Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
The Smart Card solution brings an advanced level of security to sensitive information. Organizations ® can restrict access to the walk-up features of a Xerox device. This practice ensures that only authorized users are able to print, copy, scan, email, and fax information.
Hold All Jobs Xerox offers a feature called Hold All Jobs. This feature ensures that jobs are held securely at the MFD and only are available for release after you authenticate at the MFD. The MFD holds the jobs for a specified period and releases them only when you release them at the MFD.
After it is in your inbox, you can decrypt the email with your private key, making the payload readable again. Supported Card Readers ® The customer is responsible for providing a card reader for each Xerox device. The following card readers are compatible with the solution: • Gemplus GemPC USB SL •...
• User Guide provides detailed information about all the features and functions on the device. This guide is intended for general users. Most answers to your questions are provided by the support documentation supplied for your product. Alternatively you can contact the Xerox Support Center or access the Xerox website at www.xerox.com. Xerox ®...
8. Install any required certificates and configure validation settings. Refer to Configure a Security Certificate. 9. Configure the MFD LDAP settings. Refer to Configure Acquiring Logged-In User's Email Address. Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Page 10
Preparation 10.Configure the MFD SMTP email and Signing/Encryption settings. Refer to Configure SMTP (Email) Settings. 11. Configure the Hold All Jobs/Secure Print policy, if necessary. Refer to Printing Features. Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
• Configuring the Smart Card: Enable the Smart Card function, then customize the settings. • Using Smart Card: For instructions on how to use the card reader to access the device functions, refer to Using Smart Card, in this guide. Xerox ® AltaLink ®...
2. Locate the card reader device to install. • There are four types of card reader available, one upright model, or three slimline models. • Locate the device to install and ensure it is configured. Xerox ® AltaLink ®...
Page 13
Installation Note The System Administrator configures the cards before the card reader is installed on the printer. 3. Attach the ferrite bead to the reader cable. Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Page 14
Clip the ferrite bead onto the cable directly behind the connector. 4. Attach the fasteners to the card reader device. ® Fasteners are provided to secure the card reader to the Xerox device. a. Peel back the fastener backing strip.
Page 15
Installation c. Repeat these steps for each of the fasteners supplied. 5. Remove the fastener backing strips. Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Page 16
When all the fasteners are attached to the card reader, remove the backing strips on each of the fasteners. ® 6. Place the card reader on the Xerox device. a. Gently place the card reader on the device. Do not fix the card reader in place at this time.
Enter the Smart Card Enablement Key Before you configure the Smart Card solution, use Internet Services to enable the Smart Card feature on your Xerox ® device. The Feature Enablement Key is printed on the inside cover of the Enablement guide provided within the Smart Card kit.
Page 18
If users need an alternate method of authentication, select User Name/Password from the Alternate Control Panel Login menu. g. If the device uses the email address registered to the authenticated user, select the Personalized User Profile check box. Xerox ® AltaLink ®...
Page 19
Click Next. A confirmation message appears. k. Click Next. The Smart Card settings are now ready to configure. Note No services are restricted until the Smart Card is configured fully through Internet Services. Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Initially the Domain Controllers are empty and the NTP server is not set. b. Click Add Domain Controller. c. Select the Windows Based Domain Controller check box. Or, to select the Linux-Based Domain Controller, clear the check box. 3-10 Xerox ® AltaLink ® Series...
Page 21
Select either the IP Address or the fully qualified Host Name, then enter the Domain Controller details. e. Unless your Kerberos Port is different, ensure that Port 88 is selected. f. Enter the fully qualified Domain Name. Xerox ® AltaLink ®...
Installation g. Click Save. Enable NTP Service Configure the Date and Time to update automatically. a. Click Network Time Protocol - Edit. 3-12 Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Page 23
Select the Enabled check box to enable NTP. c. Enter the IP address or Host Name of the Primary and Alternate Time Server. Often this address is the same address as the Domain Controller. d. Click Save. Xerox ® AltaLink ®...
Certificate. If Alternate Authentication is enabled, to configure the server, click Authentication Servers / Control Panel (Alternate) - Edit in the Configuration Settings list. a. Select Authentication Type as Kerberos from the menu. 3-14 Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Create a Device Certificate • Import a Certificate Authority Certificate • Install a Domain Controller Certificate If certificate validation is not required, refer to Configure Smart Card Inactivity Timer. Xerox ® AltaLink ® Series 3-15 Smart Card Installation and Configuration Guide...
To create a device certificate: a. In the Properties tab, click Security. b. Click Certificates > Security Certificates. c. Click the Xerox Device Certificate tab. d. Click Create New Xerox Device Certificate. e. Complete the Self Signed Certificate fields. 3-16 Xerox ®...
SSL. Import a Certificate Authority Certificate To import a certificate from the Certificate Authority: a. In the Properties tab, click Security. b. Click Certificates > Security Certificates. c. Click the Root/Intermediate Trusted Certificates tab. Xerox ® AltaLink ® Series 3-17...
Page 28
Click Install Certificate. e. Click Browse and navigate your Certificate Authority certificates. f. Click Next. g. If the certificate is encrypted, enter the password on the Password Required screen. 3-18 Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
SSL. Install a Domain Controller Certificate To install a Domain Controller Certificate: a. In the Properties tab, click Security. b. Click Certificates > Security Certificates. c. Click the Domain Controller Certificates tab. Xerox ® AltaLink ® Series 3-19 Smart Card Installation and Configuration Guide...
Page 30
Installation d. Click Install Certificate. e. Click Browse and navigate to your Domain Controller certificates. f. If the certificate is encrypted, enter the password on the Password Required screen. 3-20 Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
SSL, proceed to Configure Certificate Validation. a. In the Properties tab, click Connectivity. b. Click Setup. c. In the Protocol list, click HTTP - Edit. Xerox ® AltaLink ® Series 3-21 Smart Card Installation and Configuration Guide...
Configure Certificate Validation If you do not require certificate validation, proceed to Configure Smart Card Inactivity Timer. a. In the Properties tab, click the Login/Permissions/Accounting link. b. Click Login Methods. 3-22 Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Page 33
Click Certificate Validation - Edit in the Configuration Settings menu. d. Select the required Validation Options. e. If you have selected one or more options, to configure further settings, click Next. f. If prompted, enter the OCSP Server URL to use for certificate validation. Xerox ® AltaLink ®...
Page 34
If prompted, to enter the proxy server information, select Proxy Server - Configure. If the OCSP server is outside the firewall, a proxy server can be required to access the server. h. Select the Domain Controller Certificates to validate each domain controller. 3-24 Xerox ® AltaLink ®...
If you do not require inactivity settings for Smart Card authentication, proceed to Configure Acquiring Logged-In User Email Address. a. In the Properties tab, click Login/Permissions/Accounting. b. Click Login Methods. c. Click Smart Card Inactivity Timer-Edit. Xerox ® AltaLink ® Series...
Configure Acquiring Logged-In Email Addresses for Users settings, proceed to Confirm the Installation. a. In the Properties tab, click the Login/Permissions/Accounting link. b. Click Login Methods. c. Click Acquiring Logged-In Email Addresses for Users - Edit. 3-26 Xerox ® AltaLink ® Series...
Page 37
Select the required option for Acquire Logged-In Email Addresses for Users. e. If you select Auto or Only Network Address Book (LDAP), click Network Address Book (LDAP) - Edit to configure LDAP server settings. f. Click Add New. Xerox ® AltaLink ®...
Page 38
For example, if the Fully Qualified Domain Name for the server is "Hostname.Example.Search.Root", the search directory root is "dc=Example,dc=Search,dc=Root". k. Enter the required Login Credentials to Access LDAP Server. l. Click Apply. m. Click Close. 3-28 Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Page 39
Select LDAP Policies. o. Select Enable SASL Binds to LDAP. Note Smart Cards use a ticket-based authentication to LDAP and require SASL for authentication. p. Click Save. q. Click Close. Xerox ® AltaLink ® Series 3-29 Smart Card Installation and Configuration Guide...
Click Apps > Email > Setup. In the Email Setup screen, click the Required Settings tab. a. Click SMTP - Edit. b. To configure the server address, click Use DNS to identify SMTP Server. Or, click IP Address or Host Name, then enter the SMTP server address. 3-30 Xerox ® AltaLink ® Series...
Page 41
Installation c. Enter the required Device Email Address. d. Click Save. Xerox ® AltaLink ® Series 3-31 Smart Card Installation and Configuration Guide...
Page 42
Logged-in User. Note The credentials for the logged-in user typically provide authentication for the SMTP server when you enable Smart Card authentication. c. Click Always Use Kerberos Tickets. 3-32 Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Page 43
Click None for automated emails. e. Click Save. Configure Connection Encryption Click SMTP - Edit. a. Click the Connection Encryption tab. b. Select the required encryption setting. c. Click Save. Xerox ® AltaLink ® Series 3-33 Smart Card Installation and Configuration Guide...
Page 44
Click the File Size Management tab. Note This screen defines how to manage large email payloads. b. Select the required settings. c. Click Save. Test Configuration Click SMTP - Edit. 3-34 Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Page 45
Enter a valid email address in the To Address field. c. Click Send Email. Note If the SMTP settings are correct, a success message appears and an email is received at the address. Xerox ® AltaLink ® Series 3-35...
Required Settings Configured appear to confirm that the required settings are configured. e. Click Save. Configure General Email Settings Click Apps > Email > Setup. On the Email Setup screen, click the General tab. 3-36 Xerox ® AltaLink ® Series...
Page 47
Select the required option for printing a Confirmation Sheet from the menu. e. If you want the MFD to add your email address to the To field automatically when you are logged in, click Enabled for Auto Add Me. f. Click Apply. Xerox ® AltaLink ®...
Page 48
Configure the Device Address Book. Instructions are available in the System Administration Guide. Configure Email Defaults Click the Defaults tab. a. Select the required options for email default settings. b. Save your changes. 3-38 Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Page 49
Installation Configure Email Compression Select the Compression tab. a. Select the required Compression Settings. b. Click Save. Configure Email Security 1. Click the Security tab. Xerox ® AltaLink ® Series 3-39 Smart Card Installation and Configuration Guide...
Page 50
Click Encryption/Signing - Edit. b. Select the required Encryption Enablement setting: • Off - You cannot sign email. • Always On - An email signature is required. 3-40 Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Page 51
• Editable by user - The local user settings determine whether an email signature is required. c. If you selected Editable by User, if the ability to sign is required by default, click On for Email Encryption Default. d. Select the required Encryption Algorithm. Xerox ® AltaLink ®...
Page 52
Installation e. Click Apply. 2. If you want to configure email domain restrictions, click Edit in the Network Policies area. a. Select the required restrictions. 3-42 Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Page 53
Click Save. 3. If you want to configure restrictions on email recipients, click Edit in the User Policies area. a. Select the required settings for User Permissions. b. Save your changes. Xerox ® AltaLink ® Series...
Access Internet Services and select Properties. Refer to Access Internet Services in the Enter the Smart Card Enablement Key procedure for instructions. a. Click Apps > Printing > Hold All Jobs. b. Select the required Enablement option. 3-44 Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Access Internet Services and click Properties. Refer to Access Internet Services in the Enter the Smart Card Enablement Key procedure for instructions. a. Click Apps > Printing > Secure Print. b. Click the Defaults tab. Xerox ® AltaLink ® Series 3-45...
Page 56
Panel. If required, enter a number from 4-10 to specify the length of the Secure Print Passcode. • User ID: requires you to log in at the Control Panel to release your Secure Print jobs. d. Click Save. 3-46 Xerox ® AltaLink ® Series...
Windows Operating System. To configure the print driver to pull the user name from the Smart Card certificate: ® Install your Xerox Print Driver. Instructions are available in the System Administrator Guide. a. Access the Properties for your print driver.
Page 58
Installation c. Select Enabled from the Access and Verification menu. 3-48 Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Configure Secure Print Driver Defaults. Confirm the Installation When you install and configure the card reader and the software, the Card Reader Detected screen appears on the Xerox ® device local user interface. The Smart Card is now ready for use.
Tips. 3. Complete the job. 4. To end the session, remove your card from the card reader. The current session is terminated and the Authentication Required window appears. 3-50 Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
If a fault cannot be resolved by following the instructions provided, refer to Troubleshooting Tips on page 45. ® If the problem persists, identify whether it is related to the card reader device or the Xerox device: • For problems with the card reader device, contact the manufacturer for further assistance. ®...
LDAP is not configured properly or Check the authorization method. you do not have the appropriate ac- the local user permission roles are cess to the operation you requested. not configured properly. Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Page 63
The card reader was disconnected. • Verify that the card reader is connected properly . • If you suspect the reader has failed, swap with a known work- ing reader. Xerox ® AltaLink ® Series Smart Card Installation and Configuration Guide...
Page 64
Ensure the DHCP settings match your site settings. • To print a configuration report at the Xerox ® device, select Device, then Information Pages. Select the Configuration Report from the list, then select Print. Xerox ®...
Need help?
Do you have a question about the AltaLink B8045 and is the answer not in the manual?
Questions and answers