Xerox COLORQUBE 9300, COLORQUBE 9202, COLORQUBE 9201, COLORQUBE 9203 Smart Card

Version 5.0 09/11
Xerox® Smart Card
Xerox® WorkCentre 7755/7765/ 7775 Xerox Xerox
®
®
©2011 Xerox Corporation. All Rights Reserved. Unpublished rights reserved under the copyright laws of the United States. Contents of this publication may not be reproduced in any form without permission of Xerox Corporation.
XEROX® and XEROX and Design® are trademarks of Xerox Corporation in the United States and/or other countries.
Changes are periodically made to this document. Changes, technical inaccuracies, and typographic errors will be corrected in subsequent editions.
Document version 5.0: September 2011

Table of Contents

1Introduction
Compatibility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Card Readers and Card Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Supported Card Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Supported Card Readers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Documentation and Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
2Preparation
Server Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Electrical Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
3Installation
Software Enablement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Configuring the Smart Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Hardware Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Using Smart Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
4 Troubleshooting
Fault Clearance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Locating the Serial Number . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Troubleshooting Tips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
During Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
After Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
A Retrieving the Certificate from a Domain Controller or OCSP Server
B Determining the Domain in which your Card is Registered
Xerox® Smart Card
Installation Guide
3
4
Xerox® Smart Card Installation Guide

Introduction

The Xerox Smart Card solution brings an advanced level of security to sensitive information. Organizations can restrict access to the walk-up features of a Xerox device. This ensures only authorized users are able to copy, scan, e-mail and fax information.
The key benefit of this solution is its two-factor identification requirement. Users must insert their access card and enter a unique Personal Identification Number (PIN) at the device. This provides added security in the event that a card is lost or stolen.
Once validated, a user is logged into the Xerox device for all walk-up features. The system allows for functions to be tracked for an added layer of security.
The Xerox Smart Card enablement kit integrates with Xerox multifunction printers and existing smart and personal identity verification cards and readers.
This guide explains how to install and configure the Smart Card solution. It identifies the resources and equipment required to complete a successful installation.
Should you require any further information, please contact your Local Xerox Representative.
1
Xerox® Smart Card
Installation Guide
5
Introduction

Compatibility

This solution is compatible with the following product and configurations:
Configuration Software Level
06x.050.xxx.xxxxx
ColorQube™ 9201/9202/9203
06x.080.xxx.xxxxx
ColorQube™ 9301/9302/9303 06x.180.xxx.xxxxx
Xerox WorkCentre 7755/7765/7775 06x.090.xxx.xxxxx
To identify the software level on your machine, press the Machine Status button on the control
panel.
•The System Software Version number is displayed.
6
Xerox® Smart Card Installation Guide
Introduction

Card Readers and Card Types

Supported Card Types

The customer is responsible for purchasing and configuring the access cards. The following card types are recommended:
Gemalto TOP DL GX4 144K V2.6.2b Applets
Oberthur ID-One Cosmo v5.2 128K V2.6.2 Applets
Oberthur ID-One Cosmo v5.2 72K V2.6.1 Applets
Oberthur ID-One Cosmo v5.2D 72K V2.6.1 Applets
Oberthur ID-One Cosmo v5.2 72K V2.6.2 Applets
Gemalto GemCombiXpresso R4 dual interface 72K V2.6.2 Applets
Axalto Access 64KV1
Axalto Access 64KV1
Gemplus GXP3 64V2N V2.6.1 Applets
Gemalto Cyberflex Access V2C 64K V2.6.1 Applets
Oberthur ID-One Cosmo V5.2D 64K
Oberthur OCS Galactic V1 32K V1 Applets
Oberthur Cosmo V4 32K V1 Applets
Schlumberger / Axalto Cyberflex V2 32K V1 Applets
Other card types may function with the solution, but have not been validated.Supported Card Types

Supported Card Readers

The customer is responsible for providing a card reader for each Xerox device. The following card readers are compatible with the solution:
Gemplus GemPC USB SL
•Gemplus GEMPC Twin
•SCM Micro SCR3310
•SCM Micro SCR3311
OmniKey Cardman 3021 USB
OmniKey Cardman 3121 USB
ActivCard USB Reader V2 with SCR-331 firmware
Other CCID compliant readers may function with the solution, but have not been validated.
Note: Information about CCID compliant card readers can be obtained from various websites, for
example www.pcsclite.alioth.debian.org/ccid.This site is not a Xerox website and is not endorsed by Xerox.
Xerox® Smart Card
Installation Guide
7
Introduction
Additional information from your System Administrator may be required to validate which card reader works best in your environment.
Note: Information about CCID compliant card types can be obtained from various websites, for
example www.pcsclite.alioth.debian.org/ccid.This site is not a Xerox website and is not endorsed by Xerox.
8
Xerox® Smart Card Installation Guide
Introduction

Documentation and Support

For information specifically about your Xerox product, the following resources are available:
System Administrator Guide provides detailed instructions and information about connecting
your device to the network and installing optional features. This guide is intended for System/Machine Administrators.
User Guide provides detailed information about all the features and functions on the device. This
guide is intended for general users.
Most answers to your questions will be provided by the support documentation supplied on disc with your product. Alternatively you can contact the Xerox Support Center or access the Xerox website at
www.xerox.com.
Xerox® Smart Card
Installation Guide
9
Introduction
10
Xerox® Smart Card Installation Guide

Preparation

This section explains the preparation and resources required to install the Smart Card Reader.
The installation will take approximately one hour for each device. The following items are required in order to complete the installation:
Item Supplier
Compatible Card Reader (refer to Supported Card Types on page 7) Customer
2
Compatible Access Card (refer to Other card types may function with
the solution, but have not been validated.Supported Card Types on
page 7)
Smart Card enablement kit 498K17543 (one for each Xerox device)
Feature Enable Key Xerox
TCP/IP enabled on the device Customer
DNS Host name or static IP address assigned Customer
Network Settings to be checked to ensure network is fully functional Customer
Domain Controller (DC) information:
• Domain Controller authentication environment
• lP address or Host Name
• Domain information
• Domain Controller Root and Intermediate certificates
• Check that all certificates are in 64 bit X.509 format
• Determine if the DC is registered with the OCSP at this site
Online Certificate Status Protocol (OCSP) Server Information:
•OCSP Server URL
• OCSP - Root and Intermediate Certificates
• Check that all certificates are in 64 bit X.509 format
Customer
Xerox
Customer
Customer
Proxy Server configuration details Customer
To set up the Domain Controller (DC) validation, you will need to determine if your site validates the DC against the Online Certificate Status Protocol (OCSP) server. Many sites use OCSP to validate individuals, but do not register the DC with it. If you set up the Xerox device to validate the DC and it isn't registered, the procedure will fail.
If your site does register the DC with OCSP, you will need to decide whether:
to validate the DC against OCSP before validation of the user, or
Xerox® Smart Card
Installation Guide
11
Preparation
to validate the DC after validation of the user
The first method requires installation of the DC certificate as part of this procedure and is the more accepted method for validation. The second method retrieves the DC certificate automatically for each authentication and doesn't require installation of the DC certificate onto the Xerox device.
An additional option is to combine the first and second options and compare the retrieved DC certificate to the one stored at installation. This provides the most security as it prevents rogue DCs masquerading as the real DC.
Note: Certificates are often obtained from the Information Technology professionals that support
your organization. If you are unable to obtain the required certificates, refer to the process outlined in Appendix A. You can determine the domain that you are registered in using the process outlined in Appendix B.

Server Specifications

Prior to installation, ensure your network infrastructure supports Smart Card or Personal Identification Verification (PIV).
Names or IP addresses of all servers and domains are required during setup.

Electrical Requirements

The USB port on the back of the Xerox device network controller provides the power required for any of the supported card readers.
12
Xerox® Smart Card Installation Guide
Loading...
+ 28 hidden pages