Deploying Lexmark Print Management

The eSF applications, card reader drivers, and UCF files required to use LPM are provided with the solution. Lexmark Management Console lets you configure and deploy the applications to the printers.

The required files can be found in the following folders:

• Advancedprompt—<install-Dir>\Lexmark\Solutions\apps\wf-ldss\firmware

• eSF applications and drivers—<install-Dir>\Lexmark\Solutions\apps\wf-ldss\solutions\PrintReleasev2-release version\firmware

• UCF files—<install-Dir>\Lexmark\Solutions\Apache2\htdocs\apachewebdav\ucf\PrintReleasev2

Where <install-Dir> is the installation folder of LDD.

Supported components

Managing eSF configurations

1. From Lexmark Management Console, click the Device Groups tab.

2. From the Device Groups section, click Print Release.

3. From the Tasks section, click eSF Configuration.

4. Do any of the following:

   Change the deployment order

   From the eSF Applications: (Solution) section, select an application, and then click the up or down arrow button.

   The following order of deployment is recommended:

   • deviceusage

   • Card reader drivers: keyboardreader, omnikey5427ckdriver, ominikeydriver

   • advancedprompt

   • IdleScreen

   • badgeauth or cardAuth

   • mobileAuth

   Notes:

   • IdleScreen is available only in LPM On-Premises version 2.5 or earlier.
   • mobileAuth is available only in LPM On-Premises version 2.6 or earlier.
   • By default, the compatible eSF level and the recommended deployment order are installed.

   Exclude an eSF application from a policy update

   1. From the eSF Applications: (Solution) section, select an application.

   2. From the Settings section, in the Deploy to list, clear the settings.

   Note: When Card Authentication for e-Task5 is excluded from application deployment or policy update, exclude the corresponding security setup files (CardAuth_e5.ucf) as well. For more information on how to exclude UCF file, see Managing UCF settings.

   Configure the eSF application settings.

   1. From the eSF Applications: (Solution) section, select an application.

   2. From the Settings section, configure the eSF application settings.

      Note: To select an e-Task printer, make sure that Deploy to is selected.

5. Click Save Settings.

   Note: To deploy multiple applications, make sure that you save the settings after configuring each application.

6. From the Tasks section, click Policy Update > Update Policy.

   Note: The deployment can take from one to two minutes. For more information on how to improve the policy update performance, see Improving device discovery and policy update speed.

7. Click Done.

Understanding UCF files

You can deploy the following UCF files to the printers using Lexmark Management Console:

• BadgeAuth—Creates an LDAP security building block that is compatible with e-Task 2 devices.

• BadgeAuth2—Similar to BadgeAuth except that it is compatible with e-Task 2+, e-Task 3, and e-Task 4 devices.

• CardAuth_e5—Secures access to e-Task 5 devices using a card reader. For LPM version 2.6, CardAuth_e5.ucf must be updated after installation.

  The following settings must be removed from the configuration file:

  <name>esf.IdleScreen.ChgBkgnd</name>
  <name>esf.IdleScreen.Idle</name>
  <name>esf.IdleScreen.showroomFAC</name>

  The following setting must be added:

  <name>use profiles</name>

• MobileAuth_e5—Secures access to e-Task 5 devices using a mobile device.

  Note: MobileAuth_e5 is available only in LPM On-Premises version 2.6 or earlier.

Managing UCF settings

Solutions level

The settings at the Solutions level serve as global values. During deployment, the system uses the global values unless local values defined at the Device Groups level are specified.

1. From Lexmark Management Console, click the Solutions tab.

2. From the Solutions section, click PrintReleasev2.

3. From the Tasks section, click Security Setup Files.

4. Exclude a UCF file from a policy update. In the Deploy to menu, clear the check boxes.

5. Click Apply.

Device Groups level

The settings at the Device Groups level serve as local values.

1. From Lexmark Management Console, click the Device Groups tab.

2. From the Device Groups section, click Print Release.

3. From the Tasks section, click Security Setup Files.

4. Exclude a UCF file from a policy update. In the Deploy to menu, clear the check boxes.

5. To let the policy update use the UCF settings at the Device Groups level, clear Use Solution Configuration.

6. Click Apply.

Configuring UCF settings

1. From Lexmark Management Console, click the Device Groups tab.

2. From the Device Groups section, click Print Release.

3. From the Tasks section, click Security Setup Files.

4. Select a UCF file, and then configure the settings.

   BadgeAuth.ucf

   Set the values for your environment, such as Active Directory.

   Set the values for the LDAP server settings: mfp.ldap.searchBase, mfp.ldap.serverAddress, and mfp.ldap.userIdAttribute

   The other settings can remain in their default values.

   BadgeAuth2.ucf

   Set the values for your environment, such as Active Directory.

   Set the values for the LDAP server settings: searchBase, serverAddress, and useridAttribute

   If your environment does not allow anonymous binding, then sent anonBind to 0. Set the values for mfpDN and mfpPassword.

   The other settings can remain in their default values.

   CardAuth_e5.ucf

   Set the values for your environment, such as Active Directory.

   If your environment allows anonymous binding, then set the values for address, search_base, and userid_attr.

   If your environment does not allow anonymous binding, then set anon_bind to 0. Set the values for machine_dn and machine_password.

   The other settings can remain in their default values.

5. Click Apply.