Configuring Lexmark Management Console

Accessing Lexmark Management Console

Note: LDD version 5.0 supports accessing LMC using only HTTPS mode by default. To disable this feature, open the server.properties file, and then set the server.hsts.enable property value to false.

From your web browser, launch LMC by using either of the following URLs:
- http://loadbalancer:9780/lmc
- https://loadbalancer/lmc
where loadbalancer is the IP address of the computer where the load balancer is installed.
To access LMC on a particular server, do either of the following:
- If HTTP Strict Transport Security (HSTS) is enabled, then use the URL https://server:9743/lmc
- If HSTS is disabled, then use the URL http://server:9788/lmc
Where server is the IP address of the computer where the particular server is installed.
Notes:
- On a computer where a server is installed, you can use the LMC desktop shortcut.
- Starting all services may take several minutes when the system is first booted. If LMC cannot be accessed immediately after starting the system, then wait a few minutes, and then try again.
- Make sure that your web browser allows cookies for the address where you access LMC.
Type the administrator user name and password.
Notes:
- The default user name and password is admin.
- If LMC is configured to connect to an LDAP server, then use any valid user name and password.
Click Login.

A green arrow beside the server address indicates the server that hosts the LMC session.

Enabling LDAP authentication for LMC

To authenticate users other than the administrator account, set up a connection with an LDAP server.

From LMC, click the System tab.
From the System section, click LDAP Setup.
Select Enable LDAP Authentication.
If your LDAP server requires a secure connection, then select Use Secure Connection (SSL/TLS).
Type the LDAP server address and port number.
Note: For non-secure communication, use port 389. For secure communication, use port 636.
In the User Search Filter field, type the attribute that is used to identify a user name, such as cn, sn, uid, or sAMAccountName.
In the User Search Base field, type the relative distinguished name (RDN) where a subtree search for a user must begin, such as ou=Employees.
To filter the search to users in specific groups, do the following:
1. In the Group Search Filter field, type the attribute that is used to identify a member of the group, such as member or uniquemember.
2. In the Group Search Base field, type the RDN where a subtree search for groups must begin in the directory, such as ou=Groups.
3. In the “Member of Groups” field, type a comma-delimited list of group names to search. The user name must be a member of at least one of the groups listed.
4. In the Group Identifier field, type a name for the object class.
  Note: The object class name can be used to search for the group base when assigning privileges to groups.
  Example
  - User Search Filter: uid
  - User Search Base: ou=Employees
  - Group Search Filter: uniquemember
  - Group Search Base: ou=Groups
  - Group Identifier: groupOfNames
  - Member of Groups: Dept A,Dept C
    If the user name testuser is used to log in to LMC, then the user can be authenticated if each of the following is true:
    - The distinguished name uid=testuser,ou=Employees,o=MyOrganization is found in the directory.
    - The distinguished name cn=Dept A,ou=Groups,o=MyOrganization or cn=Dept C,ou=Groups,o=MyOrganization is found in the directory and contains the attribute uniquemember: uid=testuser,ou=Employees,o=MyOrganization.
    - The object class is groupOfNames.
    - The correct password is supplied for the user.
Select an authentication method:
- If the LDAP server accepts anonymous connections, then select Anonymous.
- If the LDAP server requires authentication, then do the following:
  1. Select Username.
  2. In the Username field, type a distinguished name that is used to log in to the LDAP server, such as uid=ldapuser,ou=Employees,o=MyOrganization.
  3. Type the password that is associated with the selected user name.

To test the connection settings, click Test Settings.

Note: For anonymous connections, the test cannot determine whether a user name and password are correct if they are used for authentication. If the test reports an anonymous connection when a user name and password are used, then manually check them.

In the Search Base field, type the distinguished name where the directory search must begin, such as o=MyOrganization.
Click Save Settings.

Assigning privileges to groups

Adding access control to users accessing LMC lets you restrict system access to specific groups. The Privileges settings depend on the role that is assigned to the user.

Notes:

Add a group before defining privileges. By default, the Default Group has access to all tabs and tasks of LMC and is already added to the group list. The administrator can modify the privileges of the default group.
If a user belongs to multiple groups, then group privileges are combined. Privileges can be modified for LDAP users only. The administrator has access to all tabs and tasks, but these settings cannot be modified.

From LMC, click the System tab.
From the System section, select Privileges.
In the “Group Names from LDAP" list, select or add a group.
To add a group, do the following:
1. Click or Add, type the group name, and then click Search.
2. In the list, select a group name, and then click Add.
Select the tabs and tasks that the group is allowed to access and perform.
When assigning privileges, you can select specific tasks in each tab.
Click or Save Privileges.

Understanding the Device Groups tab

When a device group is selected, the following tasks are shown:

Task	Operation
^* These tasks are not available when All Device Groups is selected.
Summary	Shows the following information: List of solutions that are deployed to the device group. The number of discovered, unlicensed, missing, and out-of-policy printers in the device group. Whether the device group is configured to use a secure communication channel when submitting jobs. When Secure Server Communication is enabled, communication between the server and printers that are associated with the selected group is encrypted. Some of these values are linked to appropriate tasks that let you view more information or change the settings.
Name^*	Lets you change the unique name of the device group.
Discovery Profiles^*	Lets you add, edit, import, and remove discovery profiles for the device group.
Discovery	Finds printers on the network that match the discovery profile for the device group. For more information, see Manually discovering printers.
Discovered Devices	Shows the following information for printers in the device group: IP address Host name Model Serial number Contact name Contact location Property tag Last discovered date Policy last applied date
Unlicensed Devices	Shows the unlicensed printers in the device group.
Solutions^*	Lets you select solutions to deploy to the printers in the device group. It also lets you configure the local settings for the device group.
eSF Configuration^*	Lets you edit the settings of eSF applications associated with hybrid solutions that are deployed to the device group.
Security Setup Files^*	Lets you manage any printer security setup files of solutions that are deployed to the device group.
Home Screen^*	Lets you customize the layout of the home screen for the printers in the device group. Click the appropriate device class to customize the printer home screen.
Profiles^*	Shows each profile and the associated settings for each device class in the device group.
Fax Forwarding^*	Lets you configure MFPs to forward incoming faxes to a fax number, e-mail address, FTP site, or Lexmark Document Solution Services (LDSS). Depending on the printer configuration, you can set the system to manage all incoming fax requests for processing before the MFP prints and forwards received faxes.
Policy Update	Deploys group device policies to printers in the device group.
Out of Policy Devices	Lists all out-of-policy printers in the device group.
Missing Devices	Shows a list of previously discovered printers that are not responding in the device group.
Schedule	Lets you add, edit, and delete Discovery, Policy Update, and script tasks that are scheduled to run for the device group.
Security^*	Enables or disables secure communication between the server and the printers in the device group.

Understanding the Software Client Groups tab

When a software client group is selected, the following tasks are shown:

Task	Operation
^* These tasks are not available when All Software Client Groups is selected.
Summary	Shows the following information: Group name List of solutions that are deployed to the software client group
Name^*	Lets you change the unique name of the software client group.
Client Profiles^*	Lets you add, edit, import, and remove client profiles in the software client group.
Solutions^*	Lets you add, edit, or delete solutions that are deployed to the software clients in the software client group.
Profiles^*	Shows each profile and the associated settings for the software client group.
Schedule	Lets you add, edit, and delete script tasks that are scheduled to run for the software client group.

Understanding the Devices tab

The Devices tab is used for maintenance of printers that have already been discovered. Only discovered printers can be found using the search function on this tab.

When a device is selected, the following tasks are shown:

Task	Description
Summary	Shows the following information: IP address Host name List of device groups that the device belongs to List of solutions that are deployed to the device Model Serial number Contact name Contact location Property tag Last discovered date and time Unlicensed status When multiple devices are selected, a table containing the preceding information for all devices in the system is shown. The total number is shown for Device Groups and Solutions and may be expanded to show the list for each.
Profiles	Shows each profile and the associated settings for a device. Note: This task shows only one device at a time. When multiple devices are selected, the first device that is selected is shown. If you want to select other devices, then click Next or Previous.
Policy Update	Deploys policy updates to devices.
Missing Devices	Shows a list of previously discovered printers that are not responding.
Unlicensed Devices	Shows a list of unlicensed devices.
Home Screen	Lets you customize the layout of the home screen for the device. Note: This task shows only one device at a time. When multiple devices are selected, the first device that is selected is shown. If you want to select other devices, then click Next or Previous.
Jobs	Shows a table of the jobs for the device.
Log	Shows a table of logged messages for the device.

Understanding the Solutions tab

When a solution is selected, the following tasks are shown:

Task	Description
^* This task is not available when All Solutions is selected.
Summary	Shows the following information: Solution name Version number Installation time Update time List of device groups and software client groups that the solution is deployed to List of formsets, reports, eSF applications, and security setup files in the solution
Configuration^*	Lets you configure the global settings for the solution. The parameters are predetermined for each solution.
EForms^*	Shows a list of the formsets that are associated with the solution.
eSF^*	Shows a list of eSF applications that are associated with the solution.
Jobs^*	Shows a table of the jobs that use the solution.
Log^*	Shows a table of the logged events and messages that the solution generates.
Security Setup Files^*	Lets you manage any printer security setup files in a solution.

Task	Description
Form printers	Lets you view and manage the virtual printers that process e-forms
Formsets	Lets you view and manage formsets for all solutions

Understanding the Services tab

Task	Description
Confirm	Lets you set the font parameters for all services
DeviceSecurity	Lets you set the authentication type for security-enabled devices
Email	Lets you set the e-mail server parameters
General	Lets you configure the chunk size for device discovery and policy updates
NPA	Lets you set the default unsecured port and the timeout periods between retries during device discovery
PolicyUpdate	Lets you set the policy update parameters, and whether to overwrite function overrides on the device such as copy or fax
Reports	Lets you configure the e-mail parameters, such as the default sender, receiver, and e-mail message
SNMP	Lets you configure the SNMP parameters

Understanding the System tab

Task	Description
System Status	Lists all servers in the system. It also shows the following information for each server: Server address Host name Status License Number of running tasks CPU usage Memory usage Network load Thread count List of installed components and their versions A green arrow beside the server address in the table indicates the server where the current LMC session is running. You can also set a server online or offline.
Schedule	Shows all report, backup and restore, discovery, policy update, and script tasks that are scheduled to run on the system. It also lets you add, edit, and delete scheduled tasks.
Jobs	Shows a table of all pending and completed jobs from all printers in the system.
Log	Shows a table of the logged event and messages that are generated from all pending and completed jobs from all printers in the system.
Reports	Lets you manage and schedule built-in and custom reports.
Username & Password	Lets you create an administrator user name and password for LMC.
LDAP Setup	Lets you set up a connection with the LDAP server to enable other user accounts.
Licenses	Lists all licenses that are installed on the system. It also shows the feature ID (where the license applies), expiration date, number of licenses, licenses in use, and license type for each license. You can also add new licenses to the system.
Advanced Prompting Bundle (AP Bundle)	Lets you update the AP Bundle eSF application that e-Task 2 printers require for support. Specifying updated files here updates the applications on printers during the next policy update.
Privileges	Lets you add access control to users. You can assign privileges to users depending on the group to which they belong to.