Configuring Active Directory

Notes:

• This feature is available only in some printer models.
• Use HTTPS to protect the credentials that are used to connect the printer to the domain.
• Make sure to select Enable NTP. From the Embedded Web Server, click Settings or Configuration, and then click Security > Set Date and Time > Enable NTP.

1. Open a Web browser, and then type the printer IP address.

   Note: View the IP address in the TCP/IP section of the Network/Ports menu.

2. Click Settings or Configuration, and then click Security > Security Setup > Active Directory > Join an Active Directory Domain.

3. Type the domain name or the realm name that you want to use.

4. If necessary, type the domain controllers, separated by commas.

5. Type the credentials of the user who has the rights to add computers to a network.

   Note: Passwords are case-sensitive, but these are not cached by the device.

6. Apply the changes.

Configuring LDAP+GSSAPI

Notes:

• This feature requires you to configure Kerberos 5 settings.
• For authentication that relies on an external server, users cannot access protected printer functions if an outage prevents the printer from authenticating to the server.
• To help prevent unauthorized access, log out from the printer after each session.
• Make sure to select Enable NTP. From the Embedded Web Server, click Settings or Configuration, and then click Security > Set Date and Time > Enable NTP.

1. Open a Web browser, and then type the printer IP address.

   Note: View the IP address in the TCP/IP section of the Network/Ports menu.

2. Click Settings or Configuration.

3. Create an LDAP+GSSAPI configuration.

   Note: You can store a maximum of five configurations.

   1. Click Security > Security Setup > LDAP+GSSAPI > Add an LDAP+GSSAPI Setup.

   2. Specify the required configuration settings.

   3. Apply the changes.

4. Click Security Template > Add a Security Template.

5. Type an LDAP security template name, and then select the custom building block name that you created for LDAP+GSSAPI.

6. Save the template.

Configuring Kerberos 5 for use with LDAP+GSSAPI

Kerberos 5 is used in conjunction with the LDAP+GSSAPI building block. While only one Kerberos configuration file (krb5.conf) can be stored on a supported device, the file can apply to multiple realms and Kerberos Domain Controllers (KDCs).

Notes:

• Because only one krb5.conf file is used, uploading or resubmitting a simple Kerberos file overwrites the configuration file.
• The krb5.conf file can specify a default realm. But if a realm is unspecified in the configuration file, then the first realm specified in the Embedded Web Server is used as the default realm.
• Make sure that krb5.conf status is verified. If not, click Test Setup.
• For authentication that relies on an external server, users cannot access protected printer functions if an outage prevents the printer from authenticating to the server.
• To help prevent unauthorized access, log out from the printer after each session.

1. Open a Web browser, and then type the printer IP address.

   Note: View the IP address in the TCP/IP section of the Network/Ports menu.

2. Click Settings or Configuration.

3. Create a Kerberos configuration file.

   1. Click Security > Security Setup > Kerberos 5.

   2. Specify the required configuration settings.

   3. Apply the changes.

4. Import the new configuration file.

   1. Click Security > Security Setup > Kerberos 5.

   2. From the Import Kerberos File section, browse to the folder where the configuration file is stored.

   3. Apply the changes.

Assigning security templates

1. Open a Web browser, and then type the printer IP address.

   Note: View the IP address in the TCP/IP section of the Network/Ports menu.

2. Click Settings or Configuration, and then click Security > Security Setup > Access Controls.

3. Click Device Apps or Device Solutions.

4. Set the following functions to the appropriate security template:

   • App 1 or Solution 1 for Active Directory or LDAP+GSSASPI

   • App 2 or Solution 2 for Card Authentication

   • App 3 or Solution 3 for Smart Card Authentication Client

5. Apply the changes.