Security

Note:  In some printer models, this menu can be configured only from the Embedded Web Server.

Login Methods

Manage Permissions

Menu item

Description

Function Access

Modify Address Book

Create Profiles

Manage Bookmarks

Flash Drive Print

Flash Drive Color Printing

Held Jobs Access

User Profiles

Cancel Jobs at the Device

Change Language

Internet Printing Protocol (IPP)

B/W Print

Color Print

Control access to the printer functions.

Administrative Menus

Security Menu

Network/Ports Menu

Paper Menu

Reports Menu

Function Configuration Menus

Supplies Menu

Option Card Menu

SE Menu

Device Menu

Control access to the printer menus.

Device Management

Remote Management

Firmware Updates

Apps Configuration

Operator Panel Lock

Import / Export All Settings

Out of Service Erase

Control access to the printer management options.

Apps

New Apps

Slideshow

Change Wallpaper

Screen Saver

Forms and Favorites

Eco-Settings

Control access to the printer applications.

Note:  The list may vary depending on the applications that are enabled from the Embedded Web Server.


Local Accounts

Menu item

Description

Manage Groups/Permissions

Add Group

Import Access Controls

Function Access

Administrative Menus

Device Management

Apps

All Users

Import Access Controls

Function Access

Administrative Menus

Device Management

Apps

Admin

Control group or user access to the printer functions, applications, and security settings.

Add User

User Name/Password

User Name

Password

PIN

Create local accounts to manage access to the printer functions.

User Name/Password Accounts

Add User

User Name Accounts

Add User

Password Accounts

Add User

PIN Accounts

Add User


Schedule USB Devices

Menu item

Description

Schedules

Add New Schedule

Schedule access to the USB ports.


Security Audit Log

Menu item

Description

Enable Audit

Off*

On

Record the events in the secure audit log and remote syslog.

Enable Remote Syslog

Off*

On

Send audit logs to a remote server.

Remote Syslog Server

Specify the remote syslog server.

Remote Syslog Port

1–65535 (514*)

Specify the remote syslog port.

Remote Syslog Method

Normal UDP*

Stunnel

Specify a syslog method to transmit logged events to a remote server.

Remote Syslog Facility

0 - Kernel Messages

1 - User-Level Messages

2 - Mail System

3 - System Daemons

4 - Security/Authorization Messages*

5 - Messages Generated Internally by Syslogs

6 - Line Printer Subsystem

7 - Network News Subsystem

8 - UUCP Subsystem

9 - Clock Daemon

10 - Security/Authorization Messages

11 - FTP Daemon

12 - NTP Subsystem

13 - Log Audit

14 - Log Alert

15 - Clock Daemon

16 - Local Use 0 (local0)

17- Local Use 1 (local1)

18 - Local Use 2 (local2)

19 - Local Use 3 (local3)

20 - Local Use 4 (local4)

21 - Local Use 5 (local5)

22 - Local Use 6 (local6)

23 - Local Use 7 (local7)

Specify a facility code that the printer uses when sending log events to a remote server.

Severity of Events to Log

0 - Emergency

1 - Alert

2 - Critical

3 - Error

4 - Warning*

5 - Notice

6 - Informational

7 - Debug

Specify the priority level cutoff for logging messages and events.

Remote Syslog Non-Logged Events

Off*

On

Send all events, regardless of severity level, to the remote server.

Admin’s E-mail Address

Send e-mail notification of logged events to the administrator.

E-mail Log Cleared Alert

Off*

On

Send e-mail notification to the administrator when a log entry is deleted.

E-mail Log Wrapped Alert

Off*

On

Send e-mail notification to the administrator when the log becomes full and begins to overwrite the oldest entries.

Log Full Behavior

Wrap Over Older Entries*

E-mail Log Then Delete All Entries

Resolve log storage issues when the log fills its allotted memory.

E-mail % Full Alert

Off*

On

Send e-mail notification to the administrator when the log fills its allotted memory.

% Full Alert Level

1–99 (90*)

E-mail Log Exported Alert

Off*

On

Send e-mail notification to the administrator when a log is exported.

E-mail Log Settings Changed Alert

Off*

On

Send e-mail notification to the administrator when Enable Audit is set.

Log Line Endings

LF (\n)*

CR (\r)

CRLF (\r\n)

Specify how the log file terminates the end of each line.

Digitally Sign Exports

Off*

On

Add a digital signature to each exported log file.

Clear Log

Delete all audit logs.

Export Log

Syslog (RFC 5424)

Syslog (RFC 3164)

CSV

Export a security log to a flash drive.


Login Restrictions

Menu item

Description

Login failures

1–10 (3*)

Specify the number of failed login attempts before the user gets locked out.

Failure time frame

1–60 minutes (5*)

Specify the time frame between failed login attempts before the user gets locked out.

Lockout time

1–60 minutes (5*)

Specify the lockout duration.

Web Login Timeout

1–120 minutes (10*)

Specify the delay for a remote login before the user is logged off automatically.


Confidential Print Setup

Menu item

Description

Max Invalid PIN

2–10

Set the number of times an invalid PIN can be entered.

Notes:

  • A value of zero turns off this setting.
  • When the limit is reached, the print jobs for that user name and PIN are deleted.
Confidential Job Expiration

Off*

1 Hour

4 Hours

24 Hours

1 Week

Set the expiration time for confidential print jobs.

Notes:

  • If this menu item is changed while confidential print jobs reside in the printer memory or hard disk, then the expiration time for those print jobs does not change to the new default value.
  • If the printer is turned off, then all confidential jobs held in the printer memory are deleted.
Repeat Job Expiration

Off*

1 Hour

4 Hours

24 Hours

1 Week

Set the expiration time for a print job that you want to repeat.

Verify Job Expiration

Off*

1 Hour

4 Hours

24 Hours

1 Week

Set the expiration time that the printer prints a copy for the user to examine its quality, before printing the remaining copies.

Reserve Job Expiration

Off*

1 Hour

4 Hours

24 Hours

1 Week

Set the expiration time that the printer stores print jobs for printing later.

Require All Jobs to be Held

Off*

On

Set the printer to hold all print jobs.

Keep duplicate documents

Off*

On

Set the printer to print other documents with the same file name without overwriting any of the print jobs.


Disk Encryption

Note:  This menu appears only when a printer hard disk is installed.

Menu item

Description

Status

Enabled

Disabled

Determine whether Disk Encryption is enabled.

Start encryption

Prevent the loss of sensitive data in case the printer or its hard disk is stolen.

Note:  Enabling disk encryption erases all contents in the hard disk. If necessary, back up important data from the printer before starting the encryption.


Erase Temporary Data Files

Menu item

Description

Stored in onboard memory

Off*

On

Delete all files stored on the printer memory.

Stored on hard disk

1 Pass Erase*

3 Pass Erase

7 Pass Erase

Delete all files stored on the printer hard disk.


Solutions LDAP Settings

Use

To

Follow LDAP Referrals

Off*

On

Search the different servers in the domain for the logged-in user account.

LDAP Certificate Verification

No*

Yes

Enable verification of LDAP certificates.


Mobile Services Management

Use

To

AirPrint

Print

Off

On*

Enable AirPrint printing.


Miscellaneous

Menu item

Description

Protected Features

Show*

Hide

Show all the features that Function Access Control (FAC) protects regardless of the security permission that the user has.

Note:  FAC manages access to specific menus and functions or disables them entirely.

Print Permission

Off*

On

Let the user log in before printing.

Default Print Permission Login

Set the default login for Print Permission.

Security Reset Jumper

Enable “Guest” access*

No Effect

Specify the effect of using the security reset jumper.

Notes:

  • The jumper is located beside a lock icon on the controller board.
  • Enable “Guest” access provides full access control to users who are not logged in.
  • No Effect means that the reset has no effect on the printer security configuration.
Minimum Password Length

0–32 (0*)

Specify the minimum characters that are allowed for a password.