Using Lexmark Management Console

Accessing Lexmark Management Console

Launch LMC from your Web browser using the URL http://loadbalancer:9780/lmc, where loadbalancer is the computer where the load balancer is installed.
The load balancer selects a server to host the LMC session, indicated by a green arrow beside a server in the Servers list on the Home tab after logging in.
Notes:
- On a computer where a server is installed, you can use the desktop shortcut to access LMC.
- To access LMC on a particular server, use the URL http://server:9788/lmc, where server is the computer where the chosen server is installed.
- It may take several minutes to start all services after the system boots. If LMC cannot be accessed immediately after booting the system, wait a few minutes, and then try again.
- Cookies must be enabled on your Web browser in order to use LMC.
- Adobe Flash Player 10 or later is required. If your Web browser settings do not allow ActiveX controls to run, then you must upgrade manually by visiting the Adobe Web site.
Enter the administrator user name and password, and then click Login.
Notes:
- The default user name and password are both admin.
- If LMC is configured to connect to an LDAP server, any valid user name and password may be used.
The Home tab is displayed after a successful login.

Enabling LDAP server authentication for LMC

The administrator can set up a connection with an LDAP server to authenticate user names and passwords other than those for the administrator account.

Select LDAP Setup from the System list.
Select the Enable LDAP Authentication check box.
If your LDAP server requires a secure connection, then select Use Secure Connection (SSL/TLS).
Type the LDAP server address and server port.
Note: Port 389 is typically used for non-secure communication, and Port 636 is typically used for secure communication.
In the User Search Filter field, type the attribute used in the directory to identify a user name, such as cn, sn, uid, or sAMAccountName.
In the User Search Base field, type the relative distinguished name where a subtree search for a user should begin in the directory, such as ou=Employees.
Do the following to filter the search to users in specific groups:
1. In the Group Search Filter field, type the attribute used to identify a member of the group, such as member or uniquemember.
2. In the Group Search Base field, type the relative distinguished name where a subtree search should begin in the directory for groups, such as ou=Groups.
3. In the “Member of Groups” field, type a comma-delimited list of group names to search. The user name must be a member of at least one of the groups listed.
4. In the Group Identifier field, type a name for the object class.
  Note: The object class name can be used to search for the group base when assigning privileges to groups.
  Example
  - User Search Filter: uid
  - User Search Base: ou=Employees
  - Group Search Filter: uniquemember
  - Group Search Base: ou=Groups
  - Group Identifier: groupOfNames
  - Member of Groups: Dept A,Dept C
    If the user name testuser is used to log in to LMC, then the user can be authenticated if each of the following is true:
    - The distinguished name uid=testuser,ou=Employees,o=MyOrganization is found in the directory.
    - The distinguished name cn=Dept A,ou=Groups,o=MyOrganization or cn=Dept C,ou=Groups,o=MyOrganization is found in the directory and contains the attribute uniquemember: uid=testuser,ou=Employees,o=MyOrganization.
    - The object class is groupOfNames .
    - The correct password is supplied for the user.
Select an authentication method:
- If the LDAP server accepts anonymous connections, then select Anonymous.
- If the LDAP server requires authentication, then do the following:
  1. Select the Username option.
  2. In the Username field, type a distinguished name used to log on to the LDAP server, such as uid=ldapuser,ou=Employees,o=MyOrganization.
  3. Type the password associated with the selected user name.

If you want to test the connection settings, then click Test Settings.

Note: If the LDAP server accepts anonymous connections but you want to authenticate with a user name and password, then the test cannot determine whether the user name and password are correct. If the test reports an anonymous connection when you have chosen to use a user name and password, then you should check the user name and password.

In the Search Base field, type the distinguished name where the directory search should begin, such as o=MyOrganization.
Click Save Settings.

Assigning privileges to groups

You can add access control to users accessing LMC. This feature allows you to restrict system access to authorized groups. The Privileges settings depend on the role assigned to the user.

Notes:

You need to add a group first before defining privileges. By default, the Default Group is already added to the group list. This group has access to all tabs and tasks of LMC. The administrator can modify the privileges of the default group.
If a user belongs to multiple groups, then group privileges are combined. Privileges can be modified for LDAP users only. The default administrator has access to all tabs and tasks, and these settings cannot be modified.

Select Privileges from the System list.
Select a group from the “Group Names from LDAP” list, or add a new group.
To add a group:
1. Click Add, then type the first few characters of the group name, and then click Search.
2. Select a group name from the list, and then click Add.
Select the tabs and tasks the group is allowed to access and perform.
When assigning privileges, you can select specific tasks under each tab.
Click Save Privileges to save settings.

Device Groups tab tasks

Task	Operation
* These tasks are not available when All Device Groups is selected.
Summary	Displays the following information for a selected group: A list of solutions deployed for the device group The number of discovered printers The number of unlicensed printers. Unlicensed printers are those that do not have a license available on the server. The number of missing printers. Missing printers are those that have been previously discovered but did not respond on the network during the most recent discovery operation. The number of out-of-policy printers. Out-of-policy printers are those that have not been updated with policy changes initiated on the server. Whether the device group is configured to use a secure communication channel when submitting jobs. When Secure Server Communication is enabled, communication between the server and printers associated with the selected group is encrypted. Some of these values are linked to appropriate tasks for more information or to make changes. When All Device Groups is selected in the Device Groups list, a table is displayed that lists the following information for each device group: A list of solutions deployed The number of discovered printers The number of unlicensed printers The number of missing printers The number of out-of-policy printers Whether Secure Server Communication is enabled
Name*	Allows you to change the unique name for the selected group
Discovery Profiles*	Allows you to add, edit, import, and remove discovery profiles used to discover printers
Discovery	Finds printers on the network that match the discovery profile for each selected group
Discovered Devices	Displays a table listing the following information for all printers within selected device groups: Address Host name Model Serial number Contact name Contact location Property tag Last discovered date Policy last applied date
Unlicensed Devices	Displays a table of unlicensed printers within the selected device groups. The table contains the same fields as the Discovered Devices table.
Solutions*	Allows you to select solutions to deploy to the printers within the selected group. When the solutions are selected, you can edit local settings for the current device group, and the solutions are deployed using the Policy Update task.
cSF Apps*	Allows you to select cSF apps to deploy to the printers within the selected group. cSF apps are custom applications written using the Cloud Solutions Framework and deployed from an application server to a supported Lexmark device. For more information, see the Cloud Solutions Framework SDK Developer’s Guide.
eSF Configuration*	Allows you to edit the settings of eSF application associated with hybrid solutions deployed to the device group
Home Screen*	Allows you to customize the layout of the home screens for the printers included in the device group. There is a tab for each supported class of printer.
Profiles*	Displays the profile settings for the device group for each device class
Fax Forwarding*	Allows you to configure MFPs such that incoming faxes are forwarded to a fax number, e-mail address, FTP site, or LDSS. Based on configuration, you can set the system to manage all incoming fax requests for processing before the MFP prints and forwards received faxes.
Policy Update	Deploys group device policies to printers included in selected device groups
Out of Policy Devices	Displays a table that lists all out-of-policy printers in the specified device group. The table contains the same fields as the Discovered Devices table. You can click Update Policy to apply any changes.
Missing Devices	Displays a table of missing printers in the selected device group or groups. The table contains the same fields as the Discovered Devices table.
Schedule	Allows you to add, edit, and delete Discovery, Policy Update, and script tasks scheduled to run for the selected device group or groups
Security*	Enables or disables secure communication between the server and the printers in the device group

Software Client Groups tab tasks

Task	Operation
* These tasks are not available when All Software Client Groups is selected.
Summary	When an individual software client group is selected in the Software Client Groups list, it displays the group name and solutions added to the group. When All Software Client Groups is selected in the Software Client Groups list, it displays a table containing the preceding information about all the software client groups in the system.
Name*	Allows you to change the unique name for the selected group
Client Profiles*	Allows you to add and remove software clients within the selected group
Solutions*	Allows you to select solutions which solutions are available to software clients within the group
Profiles*	Displays the profile settings for the software client group
Schedule	Allows you to add, edit, and delete script tasks scheduled to run for the selected software client group or groups

Devices tab tasks

The Devices tab is used for maintenance of printers that have already been discovered through the Device Groups tab. Only discovered printers can be found using the search function on this tab.

Task	Description
Summary	When one device is selected, it displays the following device information: Address Host name List of device groups to which the device belongs List of solutions deployed on the device Model Serial number Contact name Contact location Property tag Last discovered date and time Unlicensed status When multiple devices are selected, it displays a table with the same information for each device. The total number is shown for Device Groups and Solutions and may be expanded to show the list for each.
Profiles	Displays each profile and the associated settings for a selected device Note: This task shows only one device at a time. When multiple devices are selected, the first device selected is shown, and other devices may be selected by clicking Next, Previous, or individual page numbers.
Policy Update	Sends policy updates to selected devices
Missing Devices	Identifies any missing devices in the current selection
Unlicensed Devices	Identifies any unlicensed devices in the current selection
Home Screen	Displays the layout of the home screen on a selected device and provides an interface to edit the home screen of an individual device Note: This task shows only one device at a time. When multiple devices are selected, the first device selected is shown, and other devices may be selected by clicking Next, Previous, or individual page numbers.
Jobs	Displays a sortable table of the jobs for selected devices
Log	Displays a sortable table of logged messages for the selected device

Solutions tab tasks

Task	Description
^* This task is not available when All Solutions is selected in the Solutions list.
Summary	When an individual solution is selected in the Solutions list, it displays the solution name, version number, install time, update time, lists of the device groups and software client groups to which the selected solution is assigned, and lists of the formsets and reports included in the solution. When All Solutions is selected in the Solutions list, a table is displayed containing the preceding information about all the solutions deployed on the network.
Configuration^*	Adjusts the global settings for the selected solution. The parameters are predetermined for each solution.
EForms^*	Displays a list of the formsets associated with the selected solution
eSF^*	Displays a list of eSF applications associated with the selected solution
Jobs^*	Displays a table of the jobs that utilize the selected solution
Log^*	Displays a table of the events and messages generated by the selected solution

Task	Description
Summary	When an individual cSF App is selected in the cSF Apps list, it displays the cSF app name, list of device groups to which the selected cSF app is assigned, cSF App version, WebClient version, install time, and update time. When All cSF Apps is selected in the cSF Apps list, a table is displayed containing the preceding information about all the cSF Apps deployed on the network.

Task	Description
Form printers	Allows you to view and manage the virtual printers that process e-forms
Formsets	Allows you to view and manage formsets for all solutions

Services tab tasks

Task	Description
Confirm	Allows you to set the font parameters for all services.
DeviceSecurity	Allows you to set the authentication type for security-enabled devices.
E-mail	Allows you to set the e-mail server parameters.
General	Allows you to configure the chunk size for device discovery and policy updates.
NPA	Allows you to set the default port and the timeout periods between retries during device discovery.
PolicyUpdate	Allows you to set the policy update parameters, such as the timeout for each device and whether to overwrite function overrides on the device such as copy or fax.
Reports	Allows you to configure the e-mail parameters, such as the default sender, receiver, and e-mail message.
SNMP	Allows you to configure the SNMP parameters.
IDRLicenseMonitor	Allows you to configure e-mails and thresholds for IDR licenses. Note: This service uses e-mail server parameters defined in the e-mail service. For this service to function, make sure the e-mail service is properly configured.

System tab tasks

Task	Description
System Status	Shows a table that lists all servers in the system, and the corresponding server address, host name, status, license, number of running tasks, CPU usage, memory usage, network load, and thread count for each server. The server where the current LMC session is running is indicated by a green arrow beside the server address in the table. Note: You can also set a server online or offline.
Schedule	Shows all script, report, backup and restore, discovery, and policy update tasks scheduled to run on the system and lets you add, edit, and delete scheduled tasks. This task is equivalent to the Schedule task on the Device Groups tab when All Device Groups is selected.
Jobs	Shows a sortable table of all pending and completed jobs from all printers within the system.
Log	Shows a sortable table of event messages generated from all pending and completed jobs from all printers within the system.
Reports	Allows you to manage and schedule built-in and custom reports.
Username & Password	Allows you to set a new administrator user name and password for LMC.
LDAP Setup	Allows you to set up a connection with the LDAP server to enable other user accounts.
Licenses	Shows a table that lists all licenses installed on the system, the license usage of the IDR engine, and the corresponding feature ID (where the license applies), expiration date, number of licenses, licenses in use, and license type for each license. You can also add new licenses to the system.
AP Bundle	Allows you to update the Advanced Prompting Bundle (AP Bundle) eSF application that e-Task 2 printers require for support. Specifying updated files here updates the applications on the printers during the next policy update.
Privileges	Allows you to add access control to users. You can assign privileges to users depending on the group to which they belong.
cSF App Certificates	Allows you to update the certificates required for https. The public key uploaded here will update the one on the printers during the next policy update.