Software Version 5.3
August 2014
702P03157
Embedded for Xerox EIP
Setup Guide
©2014 Xerox Corporation. All rights reserved. XEROX® and XEROX and Design®, and Xerox Secure Access
Unified ID System
®
Equitrac
and Follow-You Printing® are registered trademarks of Nuance Communications.
®
are trademarks of Xerox Corporation in the United States and/or other countries.
Document Version: 1.0 (August 2014)
Table of Contents
1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1
About User Authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2
About Secure Document Release . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3
Installation and Configuration Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-4
Licensing, Server, and MFP Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-4
Authentication Device Component Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . 1-5
System Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-5
Supported MFPs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-5
Supported Card Readers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6
Magstripe Device Reader . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6
Proximity and Contactless Smart Cards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6
Additional Documentation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6
List of Terms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6
2 MFP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1
Configuring MFP Properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2
WorkCentre 52xx, 7232/7242, 73xx, and 74xx Series. . . . . . . . . . . . . . . . . . . . . . . . 2-3
WorkCentre 56xx Series . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7
Locating Custom Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7
On the MFP Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8
Via the Internet Services Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8
WorkCentre 75xx Series . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11
Locating Custom Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-12
On the MFP Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-13
Via the Internet Services Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-14
WorkCentre 76xx Series . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-20
Locating Custom Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-20
On the MFP Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-21
Via the Internet Services Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-21
WorkCentre 77xx Series and ColorQube 93xx, 92xx or 89xx Series . . . . . . . . . . 2-25
Locating Custom Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-26
On the MFP Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-27
Via the Internet Services Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-28
WorkCentre Pro 2xx Series . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-33
Locating Custom Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-33
On the MFP Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-33
Via the Internet Services Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-34
Phaser 3635. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35
Internet Services Interface Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35
Phaser MFP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-36
Other settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-37
Smart Card Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-38
On the MFP Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-38
Via the Internet Services Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-39
3 Server-Side Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1
Setup Guide iv
Table of Contents Embedded for Xerox EIP
Licensing Embedded Devices. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-2
Assigning Licenses to Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-2
Configuring Printer Ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-4
Add a Printer on an Equitrac Printer Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-4
Convert an Existing TCP/IP Port to Equitrac Port . . . . . . . . . . . . . . . . . . . . . . . . 3-5
Configuring Physical Devices with the Configuration Wizard . . . . . . . . . . . . 3-9
Enabling Secure Printing on the Queue . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-10
Configuring Authentication Prompts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-11
Setting Xerox Secure Access Prompts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-12
Configuring Card Self-Registration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-13
Configuring Embedded Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-14
Configuring Smart Card Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-16
Setting Up Authentication Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-18
Set the Authentication Device IP Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-18
Mount the Authentication Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-21
Connect the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-22
Associating Authentication Devices with MFPs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-23
Configuring Print Tracking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-24
Print Tracking Through Equitrac Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-24
Print Tracking Using Xerox Network Accounting . . . . . . . . . . . . . . . . . . . . . . . 3-26
4 User Workflow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4-1
Authenticating at a Card Reader . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2
Authenticating with a Magnetic Stripe Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2
Authenticating with a Proximity or Smart Card . . . . . . . . . . . . . . . . . . . . . . . . . 4-2
Card Reader Status Messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3
Idle Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3
Ready Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3
Logging In to a User Session . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4
Smart Card Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4
Server Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4
Using Follow-You Printing®. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-5
Logging Out of a User Session . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-6
Resetting an Authentication Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-7
5 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5-1
Symptoms and Solutions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-1
Configuration Tear Sheet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5
v Setup Guide
1
Introduction
To pi cs
About User Authentication
About Secure Document Release
Installation and Configuration Requirements
Authentication Device Component Requirements
System Requirements
Supported MFPs
Supported Card Readers
Additional Documentation
List of Terms
Xerox Secure Access supports Secure Access Authentication Devices within an Xerox Secure Access
environment. In a secure printing Xerox Secure Access environment, users must authenticate at a Secure
Access Device before they are allowed to access the supported
Xerox
MFP controlled by the device.
In addition to authentication, users can select and release secure print documents directly from the MFP
front panel.
This guide provides instructions to configure the server-side requirements within an Xerox Secure Access
environment.
Setup Guide 1-1
Introduction Embedded for Xerox EIP
Authentication
Request
Generated
For wa rd
Request
Authentication
Device
Card
Reader
Send Unlock
Requ est to
MFP
DCE
CAS
Database
Ver if y U se r
User Verified
User triggers
card reader
Xerox
MFP
Ethernet
Serial Cable
Ethernet CAP
1
2
4
5
6
3
About User Authentication
Xerox Secure Access provides the ability to control access to the print and copy functions of
Multifunction peripheral (MFP) devices. When a user approaches an
Xerox
-controlled device, they enter user
Xerox
credentials either by using a card, or manually entering data on the MFP front panel. The MFP front panel is
unlocked only when the user’s account information is authenticated by the accounting server.
Using a proprietary protocol (Convenience Authentication Protocol), the Authentication Device contacts the
accounting server via an Ethernet network connection to verify the user information gathered from the swipe
or proximity card. If the accounting server verifies the user, the MFP device panel unlocks and is ready for
use. If the user is not verified, the MFP remains locked and the user cannot perform any tasks at the device.
The Device Control Engine (DCE) handles all communication with the MFP devices. When a user wants to use
the copy, or fax functionality on a MFP, they must first trigger the card reader. A swipe or proximity read
initiates an access request. The Authentication Device forwards the login request to the DCE, which then
contacts the Core Accounting Server (CAS) to verify the user account data associated with the card. This
process is depicted below.
1-2 Setup Guide
Embedded for Xerox EIP Introduction
User prints document
in a secure printing
environment
Document is held in
a secure print
Workstation
MFP controlled by Authentication Device
Secure Print Queue
1. Doc 1
2. Doc 2
...
1
2
User authenticates
via the Secure Access
Authentication
Device at the MFP
3
Document list
retrieved
5
User accesses the Release
My Documents/Follow-
You P rin ting scre en on
the MFP front panel to
view documents in one or
more secure queues
4
About Secure Document Release
Secure document release (SDR) holds jobs in the print queue until a user releases them from the MFP panel.
When CAS is configured to support SDR, users can view a Follow-You
®
Printing screen on the MFP via the
Release My Documents option. This screen displays queued print jobs for the current user. The user can select
one or more jobs and release or delete them directly from the MFP front panel.
If you enable multi-server Follow-You Printing on the CAS, the user can view print jobs on other servers also.
For additional information on multi-server Follow-You Printing, refer to the
Advanced Printing Configuration
chapter in the Xerox Secure Access Administration Guide.
The following diagram illustrates the process flow that occurs after a user submits a print job to a controlled
queue on a
Xerox
MFP. After sending the print job, the user goes to a controlled MFP, authenticates via a
Secure Access Authentication Device, then uses the Follow-You Printing screen on the front panel to access
the Embedded secure document release functions.
Note
When the Follow-You Printing extension is not configured, the Follow-You Printing screens are not available
on the MFP panel and the user cannot select individual jobs for release. After the user authenticates, all jobs
are released from the local or home server or workstation.
Setup Guide 1-3
Introduction Embedded for Xerox EIP
Installation and Configuration Requirements
If you have already set up and configured your Xerox Secure Access server, you do not need to install the
basic Xerox Secure Access application; you only need to follow configuration procedures.
For instructions on installing and configuring Xerox Secure Access, see the
System® Installation Guide
Before configuring Xerox Secure Access, you need the following:
• The IP address of the Device Control Engine (DCE) server. You need this address when configuring the
MFP to communicate with the DCE server.
• Administrative access to System Manager. For details, see
Xerox Secure Access Administration Guide.
and the
Xerox Secure Access Administration Guide.
Configuring Administrative Access
Xerox Secure Access Unified ID
in the
Licensing, Server, and MFP Requirements
To enable the Embedded solution, you must obtain the following:
• Xerox Secure Access Software
Xerox Secure Access requires configuration of the MFPs, the Core Accounting Server (CAS), and the Secure
Access Authentication Devices. This guide provides complete setup instructions for all of these components.
• One Authentication Device per controlled Xerox MFP
Each MFP is controlled by an Authentication Device, comprised of an authentication terminal and card
reader. See Authentication Device Component Requirements on page 5 for details.
• One embedded license per Xerox MFP
Each Secure Access Authentication Device requires an embedded license applied in System Manager. For
example, if you plan to control 20
(enabled for
CAS.
• EIP-enabled Xerox MFPs
If you are not certain whether your MFPs meet this requirement, contact
www.nuance.com/for-business/by-product/equitrac/supported-devices/xerox/index.htm for a list of supported
MFP models.
• One Network Accounting Enablement Option per Xerox MFP
Only required if you are tracking copy, or fax usage. This is NOT required to track printing if you are using
Equitrac® printer ports.
This licensable device option obtained from
fax and copy usage for each account.
Xerox
). See Licensing Embedded Devices on page 2 for instructions on adding licenses to the
Xerox
MFPs, you need to obtain 20 corresponding embedded licenses
Xerox
for further details. Visit http://
Xerox
enables the
Xerox
MFP to automatically track print, server
1-4 Setup Guide
Embedded for Xerox EIP Introduction
Card Reader
Authentication Terminal
Ethernet Connection
Authentication Device Component Requirements
A Secure Access Authentication Device is comprised of an Authentication Terminal and an external card
reader. When connected to an external card reader, the Authentication Terminal controls user access to the
MFP. The user must swipe or pass a card through or near the card reader, and validate user credentials
against the accounting server before the MFP is available for use.
Ensure that you have all the hardware provided with each Authentication Device:
•Power supply
•Power cable
• Bypass (Reset) key (metal key used to reset the device to defaults) See Resetting an Authentication
Device on page 7.
• 10/100 Base-T Ethernet network cable
• Card Reader
System Requirements
To review the system requirements for the machine or machines hosting the Core Accounting Server and
Device Control Engine server components, see the
Guide
Supported MFPs
For a list of Xerox Secure Access supported MFP models, visit http://www.nuance.com/for-business/by-
product/equitrac/supported-devices/xerox/index.htm.
Note
Newer models of
processing power of late-model
than
Embedded for
Supported MFP models must be EIP-enabled prior to installing the Xerox Secure Access solution. Please
contact your local
Xerox Secure Access Unified ID System® Installation
.
Xerox
MFP may be able to use Xerox ECSP.
Xerox
MFPs to offer enhanced features.
Xerox
EIP, and has different requirements. If your device(s) use
Xerox
ESCP
documentation instead of this guide.
Xerox
Sales Representative for more information.
Xerox
ECSP is able to leverage the displays and
Xerox
ECSP is a different platform
Xerox
ECSP, please consult the
Setup Guide 1-5
Introduction Embedded for Xerox EIP
Supported Card Readers
For a list of Xerox Secure Access supported card readers, visit http://www.equitrac.com/card_readers.html.
All card readers are pre-configured from the manufacturer and require no further configuration.
Magstripe Device Reader
Xerox Secure Access supports external magnetic stripe reader devices. Users can enter validation data by
swiping an encoded magnetic card through the card reader. The reader reads virtually any standard
magnetic card medium on track 2, and accepts standard or custom encoded data.
Proximity and Contactless Smart Cards
Xerox Secure Access supports HID proximity cards, and Mifare and Legic contactless smart cards. Users can
enter validation data by passing the card within about one inch of the card reader.
Additional Documentation
You may need to refer to one of the following documents when performing server-side configuration tasks.
These documents are located on the
server-side component in the Program Files\
Guide When to refer to this guide
Xerox Secure Access
Xerox Secure Access
Installation Guide Use this guide to perform an initial installation or upgrade.
Administration Guide After installing
Xerox Secure Access
Equitrac\MPS
options for use on your campus or in your organization.
product CD, and are installed automatically with any
\Docs folder.
Xerox Secure Access
, use this guide to configure advanced
List of Terms
The following unique terms are used within this guide.
Te rm Description
Alternate Primary PIN A sequence of personal identification numbers that uniquely identifies a user who wants to
release a print job. The alternate primary PIN can be data encoded on a magnetic swipe
card or entered into an MFP keypad.
Authentication The process of entering a primary and optional secondary personal identification number to
gain access to a controlled MFP. Users can authenticate via a card reader, or through the
MFP control panel.
1-6 Setup Guide
Embedded for Xerox EIP Introduction
Te rm Description
Core Accounting Server
(CAS)
Convenience
Authentication
Device Control Engine
(DCE)
Device Routing Engine
(DRE)
Follow-You Printing A secure printing feature that holds print jobs in a virtual print queue until the user “pulls”
Follow-You Printing
screen
Multi-server
Follow-You
Network Accounting A feature of the
The Core Accounting Server is a core component of Xerox Secure Access. This service
controls the accounting database that stores all printer, user, transaction and balance
information. The CAS also verifies users, calculates printing charges and assigns charges to
an appropriate user.
A protocol that enables communication between the Authentication Device and the
server to verify user information gathered from a swipe or proximity card.
A core component of Xerox Secure Access, the DCE communicates with terminals that
control access to MFPs.
A core component of Xerox Secure Access, the DRE enables document flow from
workstations to output devices. When a job is released, the DRE captures the job
characteristics and communicates the characteristics to the CAS.
the print job to a selected device. A user can select a particular printer when they submit a
print request, then walk to an entirely different compatible MFP and pull the job to that
device.
An additional screens that appears as a custom service on the MFP when the Follow-You
Printing extension is configured. Users can select one or more jobs from different print
servers.
A secure printing feature that extends the Follow-You functionality to allow users to view
and release secure print jobs from different print servers.
Xerox
MFP which automatically tracks print, server, fax and copy usage for
each user. Network accounting is run over a network and the accounting transactions are
performed remotely by Xerox Secure Access server software.
Xerox
Print Tracking The ability to track the attributes of a released network print job. For example, number of
pages, page size, color, etc. You can configure Xerox Secure Access to track printing through
Equitrac
the embedded device or through an
Primary PIN A sequence of numbers that act as a user ID to uniquely identify a user who wants to
release a print job. The primary PIN can be entered on the MFP keypad.
Secondary PIN A sequence of numbers that act as a password when used in conjunction with a Primary
PIN. After entering the Primary PIN, the user must enter the Secondary PIN code on a MFP
keypad before the print job is released to a device. Secondary PINs are an optional
configuration.
Secure Document Release
(SDR)
An Xerox Secure Access feature that holds network print jobs in a secure virtual print queue.
Users must authenticate at an MFP to release jobs from the secure queue. The goal of
secure printing is to ensure that proprietary information does not sit at an output device for
public consumption.
Port.
Setup Guide 1-7
Introduction Embedded for Xerox EIP
1-8 Setup Guide
2
MFP Configuration
To pi c s
Configuring MFP Properties
WorkCentre 52xx, 7232/7242, 73xx, and 74xx Series
WorkCentre 56xx Series
WorkCentre 75xx Series
WorkCentre 76xx Series
WorkCentre 77xx Series and ColorQube 93xx, 92xx or 89xx Series
WorkCentre Pro 2xx Series
Phaser 3635
To enable Xerox Secure Access, you must configure the MFPs. Follow the steps for each MFP series in the
order they are presented to ensure a successful install.
Setup Guide 2-1
MFP Configuration Embedded for Xerox EIP3
Configuring MFP Properties
The following are the main steps when configuring
1. Ensure that the time zone on the MFP is correct. if the time zone is not correct,
transaction times are incorrectly reported.
2. Confirm that the date and time setting on the MFP is within 24 hours of the date and time configured
on the server that hosts the DCE component. If the settings are more than 24 hours apart, the
Embedded application on the MFP will not connect to the server.
3. Configure the MFP to use Secure Access Authentication and to communicate with the DCE Server.
4. Ensure that the SNMPv2 settings on the device are correct. Read-only (Get) and Read and Write (Set)
community names must be configured as public and private respectively. Note that all characters must
be entered in lower case. Also ensure that these SNMP settings are enabled in System Manager >
Configuration > SNMP configuration.
5. Ensure SSL is enabled on the
enable SSL communication.
6. Verify the firmware version on the
that the Embedded Manual Override is Enabled in order for the attached card reader to operate
normally. Contact your local
MFPs. Refer to WorkCentre 75xx Series on page 11 for details on enabling this option.
Xerox
MFP. If it is not enabled, generate a self-signed certificate and then
Xerox
MFP. MFPs running EIP firmware versions 1.5 and 2.0 require
Xerox
representative for information on the appropriate firmware for your
Xerox
MFPs:
Xerox
Embedded
2-2 Setup Guide
Embedded for Xerox EIP MFP Configuration
WorkCentre 52xx, 7232/7242, 73xx, and 74xx Series
All configuration of the WorkCentre 52xx, 7232/7242, and 73xx MFPs is performed via the Internet Services
interface. No configuration at the MFP console is required.
Note
If prompted to reboot during this process, reboot and resume configuration at the next step.
1. Open a Web browser and enter the URL
2. Select the Properties tab, and login with your Administrator user ID and password when prompted.
3. In the left pane, select the Services folder, then the Custom Services subfolder, and then Custom
Services.
4. In the right pane, ensure that Custom Services is set to Enabled, then click Apply. The Custom Services
button should now be present on the MFP user interface when All Services is selected.
5. In the left pane, select the Accounting folder, then the Accounting Configuration subfolder.
http://<MFP IP address> in the Address field.
6. In the Authentication Configuration > Step 1 of 2 page, set the following options:
a. Select Network Accounting from the Accounting Type drop-down list.
b. Enable the services you want to track on this MFP: Copy, Fax, and Print.
c. Select Yes from the Verify Use r Deta ils drop-down list.
d. Select No from the Verify User Details for Printer Jobs drop-down list. (Jobs will not print if set to
Yes. )
Setup Guide 2-3
MFP Configuration Embedded for Xerox EIP3
Note
For models 72x2 with older firmware, it may be necessary to set the
Ver ify Use r De tails
option to
No
in
order to avoid transactions being recorded against “Unidentified user”.
e. Select Display User ID & Account ID Prompts from the Customize User Prompts drop-down list.
Failure to set this option causes transactions to be recorded against “Unidentified user”.
7. Click Apply to save these settings.
8. Click Reboot Machine, if prompted.
Caution
While the MFP is rebooting, do NOT click anywhere on the web page, as an error message indicating
that services are unavailable will appear. If this occurs, once the device is back online, you will need to
login again to the web page and navigate to the applicable menu before continuing.
9. In the left pane, select the Security folder, then the Authentication Configuration subfolder.
10. In the Authentication Configuration > Step 1 of 2 page, set the following options:
a. Select Xerox Secure Access from the Login Type drop-down list.
b. Select Off from the Guest User drop-down list.
c. Leave all other options unchanged.
2-4 Setup Guide
Embedded for Xerox EIP MFP Configuration
11. Click Apply to save the settings.
12. Reboot the machine when prompted. Do NOT click anywhere on the web page until the reboot is
complete.
13. Click Next to continue to the Authentication Configuration > Step 2 of 2 page.
14. To lock the front panel of the MFP, click the Configure button beside the Device Access option.
15. Set the All Services Pathway to Locked, and then click Apply.
16. Reboot the machine when prompted. Do NOT click anywhere on the Web page until the reboot is
complete.
17. To lock some, but not all, of the Services, click the Configure button located beside the Service Access
option.
18. On the Service Access page, select the services you want to control access to, then click Save.
Setup Guide 2-5
MFP Configuration Embedded for Xerox EIP3
• Locked (Show Icon) - the service appears on the MPF control panel, but cannot be accessed without
authentication.
• Unlocked - the service appears on the control panel and is accessible without authentication.
19. Click the Apply button to save all of the Configuration Authentication settings.
20. In the left pane, select the Security folder, then the Remote Authentication Servers subfolder, and then
XeroxSecureAccess Settings.
21. In the
Xerox
Secure Access Settings page in the right pane, set the following options:
a. Set Local Login to Enabled (checked) if you want to make the keyboard access button visible.
Note
Although the Local Login setting is optional, ensure that you check this option at first configuration.
After first initialization, this option can only be enabled if the device is cleared from all settings (back to
the factory defaults).
b. Set Get Accounting Code to Enabled (checked). You must select this option to enable
authentication.
c. Set the Connection Time-Out value to at least 15 seconds, or a larger value to avoid timeout
messages on the MFP.
22. Click Apply to save these settings and to complete the configuration of this MFP
23. Click Reboot Machine, then close the web browser.
2-6 Setup Guide
Embedded for Xerox EIP MFP Configuration
WorkCentre 56xx Series
You must configure the WorkCentre 56xx series MFP from both the MFP Console and via the Internet
Services interface. Before you perform the configuration, ensure that Custom Services is installed on the MFP.
Locating Custom Services
1. Open a Web browser and enter the URL http://<MFP IP address> in the Address field.
2. Select the Properties tab, and login with your Administrator user ID and password when prompted.
3. In the left pane, click the General Setup folder, then select the Custom Services Setup subfolder.
•If it says Configured beside Custom Service Registration the option is enabled.
•If it says Not Configured, click the Configure button and click the Custom Services Registration
option. Click the Save button.
4. In the Enable Custom Services section, select the Display Custom Services Section button at the local
user interface option.
5. In the Browser Settings section, select the Enable the Custom Services Browser option. If you do not
enable this option, nothing will happen when you press the button.
Caution
If the services are not installed, contact
6. In the right pane, ensure that Custom Services is set to Enabled, then click Apply. The Custom Services
button should now be present on the MFP user interface when All Services is selected.
Xerox
regarding custom services installation.
Setup Guide 2-7
MFP Configuration Embedded for Xerox EIP3
On the MFP Console
1. Log into the To ol s menu with your Administrator user ID and password.
2. Touch All Services. Ensure that you can see the Custom Services button. If not, power off/on the MFP
and wait until the MFP is ready.
3. Touch Access and Accounting.
4. Touch Authentication Mode.
5. Under Network Accounting, touch the On option to enable Network Accounting. Ensure that all other
authentication options are disabled. Touch Save.
6. Return to the Access and Accounting menu, then touch Network Accounting Setup.
7. Touch Network Accounting Authentication.
8. Exit the Tools screen, and return to copy mode. Configuration on the MFP console is now complete.
Via the Internet Services Interface
1. Open a Web browser and enter the URL http://<MFP IP address> in the Address field.
2. Select the Properties tab, and login with your Administrator user ID and password when prompted.
3. In the left pane, click the Security folder, then select Authentication Configuration.
4. In the Where is the information located section, select Xerox Secure Access from the Device User
Interface Authentication drop-down list, and the click Next.
2-8 Setup Guide
Embedded for Xerox EIP MFP Configuration
Note
If the MFP device is in Sleep mode, click the Exit Sleep Mode button to wake the device.
5. Click the Edit button beside the Access Setup Wizard option.
6. In the Pathway Services section, select the services you want to control access to, then click Save.
7. In the Installed Services Pathway Access section, select Locked under Services Pathway and click the
Finished button to lock everything on the device. To lock only certain features, leave Services Pathway
set to Unlocked and click the Next button. Select the services you want to control access to, then click
Save.
• Unlocked - the service appears on the control panel and is accessible without authentication.
• Locked - the service appears on the MPF control panel, but cannot be accessed without
authentication.
• Hidden - the service does not appear on the control panel.
Setup Guide 2-9
MFP Configuration Embedded for Xerox EIP3
8. Still on the Authentication Configuration page, click the Edit button beside the Device User Interface
Authentication option.
9. Click the Manual Override Settings button at the bottom of the page
10. Under Device Log In Methods, select the preferred method:
•
Xerox
Secure Access Device Only – if you do not want people to use the alternate key board login
button to enter their user ID
•
Xerox
Secure Access Device + alternate on-screen authentication method – if you want people to
also be able to use the alternate key board login button to enter their user ID
11. Under Accounting Information (Requires Network Accounting), select Automatically apply
Accounting Codes from the server. This prevents additional unnecessary authentication prompts.
12. Click the Save button.
13. Logout of the MFP’s configuration utility and close the web browser.
2-10 Setup Guide
Embedded for Xerox EIP MFP Configuration
WorkCentre 75xx Series
The WorkCentre 75xx series MFPs utilize the Job Limits functionality to support Copy Stop enforcement. The
MFP scans the copy job, collects the job information in a JBA (Job-based Accounting) style record and sends
it to the server for approval. The server approves or rejects the job depending upon the funds available, color
quotas, and copy/print rules. The user balance is updated as each job is copied. The Copy Stop is enforced at
the start or during the session.
You must configure the WorkCentre 75xx series MFP from both the MFP Console and via the Internet
Services interface. Before you perform the configuration, ensure that Custom Services is installed on the MFP.
Setup Guide 2-11
MFP Configuration Embedded for Xerox EIP3
Locating Custom Services
Xerox
EIP cannot be configured unless Custom Service is installed on the MFP. To determine if custom
services is installed on a WorkCentre 75xx series, perform these steps:
1. Open a Web browser and enter the URL
2. Select the Properties tab, and login with your Administrator user ID and password when prompted.
3. In the left pane, select the General Setup folder, then select Extensible Service Setup.
4. Click the Edit button beside the Extensible Service Registration option.
http://<MFP IP address> in the Address field.
5. Click on Enable All, then click Save. The Custom Services button should now be present on the MFP user
interface when All Services is selected.
If you cannot access or locate these options, contact
Xerox
regarding correct installation of Custom Services.
2-12 Setup Guide
Embedded for Xerox EIP MFP Configuration
On the MFP Console
1. Log into the To ol s menu with your Administrator user ID and password.
2. Touch All Services. Ensure that you can see the Custom Services button. If not, power off/on the MFP
and wait until the MFP is ready.
3. Enter the user name and password.
4. On the Machine Status screen, touch the Tools tab.
5. Touch Accounting Settings > Accounting Mode.
6. On the Accounting Mode screen, touch Network Accounting, then touch Customize Prompts.
7. On the Customize User Prompts screen, touch Display Prompt 1 and 2, then touch Save. Failure to set
this option causes transactions to be recorded against “Unidentified user”.
8. Set Code Entry Validation to Disabled.
9. Touch the Save button again to save all changes, then log off the MFP Console. Configuration at the
console itself is now complete. You now need to complete the rest of the configuration via the web
interface.
Setup Guide 2-13
MFP Configuration Embedded for Xerox EIP3
Via the Internet Services Interface
1. Open a Web browser and enter the URL http://<MFP IP address> in the Address field.
2. Select the Properties tab, and login with you User ID and Password when prompted.
3. In the left pane, click the General Setup folder, then select Extensible Service Setup.
4. Click the Edit button beside the HTTP (SSL) option.
5. Set the Secure HTTP (SSL) option to Enabled, then click Save.
6. Click the Edit button beside the Extensible Service Registration option.
2-14 Setup Guide
Embedded for Xerox EIP MFP Configuration
7. Click Enable All, then click Save.
Ensure that both Authentication & Accounting Configuration and Job Limits are enabled. They are
enabled by default. These services must be enabled via the Internet Services interface—not through the
physical device.
If these services are not enabled, errors occur when initializing the
Xerox
embedded device in System
Manager, causing the Copy Stop feature to not work.
Setup Guide 2-15
MFP Configuration Embedded for Xerox EIP3
Note
Job Limits is not supported on all
Xerox
devices.
8. In the Browser Settings section on the Extensible Service Setup page, select the Enable the Extensible
Services Browser checkbox. and click Apply.
9. In the left pane, click the Security folder, then the Authentication subfolder, and then Setup.
10. On the
Xerox
Access Setup page, click the Edit button to change the Authentication method.
Note
If the copier has not been previously configured, you may need to click the Next button (instead of Edit)
and then work through a wizard to configure the copier.
11. On the Authentication, Authorization and Personalization page, do the following:
2-16 Setup Guide
Embedded for Xerox EIP MFP Configuration
a. Select Xerox Secure Access Unified ID System from the Authentication method on the machine’s
touch interface drop-down list.
b. Select User Name/Password Validated Locally on the
Xerox
Machine from the Authentication
method on the machine’s web user interface drop-down list.
c. Select Locally on the
Xerox
Machine from the Authorization information is stored drop-down list.
d. Click Save to apply the changes.
12. On the
Xerox
Access Setup page, click the Edit button beside the
Xerox
Secure Access Setup option
under Configuration Setting.
13. On the
Xerox
Secure Access Setup page, click the Manually Override Settings button.
14. On the Manual Override page, set the following:
a. In the Server Communication section, set the Embedded option to Enabled.
Note
The Embedded option must be Enabled on
Xerox
MFPs running EIP firmware version 1.5 or 2.0 in
order for the attached card reader to operate normally.
b. In the Device Log In Methods section, select the preferred method.
c. In the Accounting Information section, select Automatically apply Account Codes from the
server.
Setup Guide 2-17
MFP Configuration Embedded for Xerox EIP3
15. Click Save to apply the changes, then click Close.
16. Click Close again on the
Xerox
Secure Access Setup page to return to the main Authentication
Configuration page.
17. Click the Edit button beside the Service Registration option.
18. Select the services you want users to access, then click Save.
19. In the left pane, click the Security folder, then the Authentication subfolder, and then Tools & Feature
Access.
2-18 Setup Guide
Embedded for Xerox EIP MFP Configuration
20. In the Presets section, select the Custom Access option to select the services you want to control access
to.
• Unlocked - the service appears on the control panel and is accessible without authentication.
• Locked - the service appears on the MPF control panel, but cannot be accessed until the user
authenticates.
• Hidden - the service does not appear on the control panel.
21. Click Apply to complete the configuration of this MFP.
22. Logout of the MFP’s configuration utility and close the web browser.
Setup Guide 2-19
MFP Configuration Embedded for Xerox EIP3
WorkCentre 76xx Series
You must configure the WorkCentre 76xx series from both the MFP Console and the Internet Services
interface. Before starting the configuration, ensure that Custom Services is installed on the MFP.
Locating Custom Services
1. Open a Web browser and enter the URL http://<MFP IP address> in the Address field.
2. Select the Properties tab, and login with your Administrator user ID and password when prompted.
3. In the left pane, select the General Setup folder, then select Extensible Service Setup.
4. Click the Settings button for the Extensible Service Registration setup option.
5. Click Enable All, then click Save. The Custom Services button should now be present on the MFP user
interface when All Services is selected.
If you cannot access or locate these options, contact
Xerox
regarding correct installation of Custom Services.
2-20 Setup Guide
Embedded for Xerox EIP MFP Configuration
On the MFP Console
1. Log into the To ol s menu with your Administrator user ID and password.
2. Touch All Services. Ensure that you can see the Custom Services button. If not, power off/on the MFP
and wait until the MFP is ready.
3. Enter the user name and password.
4. On the Machine Status screen, touch the Tools tab.
5. Touch Accounting > Accounting Enablement > Accounting Mode.
6. On the Accounting Mode screen, touch Network Accounting, then touch Customize Prompts.
7. On the Customize User Prompts screen, touch Display Prompt 1 and 2, then touch Save to save the
changes. Failure to set this option causes transactions to be recorded against “Unidentified user”.
8. Touch the Save button again to save all changes, then log off the MFP Console. Configuration at the
console itself is now complete. You now need to complete the rest of the configuration via the web
interface.
Via the Internet Services Interface
1. Open a Web browser and enter the URL http://<MFP IP address> in the Address field.
2. Select the Properties tab, and login with your Administrator user ID and password when prompted.
3. In the left pane, click the Security folder, then select Authentication Configuration.
4. On the Authentication Configuration page, click Edit Methods to change the Authentication method.
Setup Guide 2-21
MFP Configuration Embedded for Xerox EIP3
Note
If the copier has not been previously configured, you may need to click the Next button (instead of Edit
Methods) and then work through a wizard to configure the copier.
5. Select Xerox Secure Access from the Device User Interface Authentication drop-down list. Leave both
Web User Interface Authentication and Authorization options set to Locally on the Device.
6. Click Save to apply the changes.
7. On the Authentication Configuration page, click the Edit button beside the
Xerox
Secure Access option.
8. Ensure that all services listed are enabled, and then click save.
2-22 Setup Guide
Embedded for Xerox EIP MFP Configuration
9. On the Authentication Configuration page, click the Edit button beside the Device User Interface
Authentication option.
10. On the
Xerox
Secure Access Setup page, click the Manually Override Settings button.
11. Click Manual Override Setting at the bottom of the page.
12. On the Manual Override page, set the following:
a. In the Device Log In Methods section, select the preferred method.
•
Xerox
Secure Access Device Only – if you do not want people to use the alternate key board login
button to enter their user ID
•
Xerox
Secure Access Device + alternate on-screen authentication method – if you want people to
also be able to use the alternate key board login button to enter their user ID
Setup Guide 2-23
MFP Configuration Embedded for Xerox EIP3
b. In the Accounting Information section, select Automatically apply Account Codes from the
server.
13. Click Save to apply the changes, then click Close.
14. On the Authentication Configuration page, scroll down and click the Edit button beside the Access
Setup Wizard option.
15. In the Device Access page, if you want to lock the front panel of the MFP, set the Services Pathway to
Locked and then click Save, otherwise click the Next to continue.
16. To lock only certain features, leave Services Pathway set to Unlocked and click Next. Select the services
you want to control access to, then click Next
• Unlocked - the service appears on the control panel and is accessible without authentication.
• Locked - the service appears on the MPF control panel, but cannot be accessed until the user
authenticates.
• Hidden - the service does not appear on the control panel.
17. Click Finished on the Feature Access page to complete the configuration of this MFP. The WorkCentre
76xx series device is now configured.
18. Logout of the MFP’s configuration utility and close the web browser.
2-24 Setup Guide
Embedded for Xerox EIP MFP Configuration
WorkCentre 77xx Series and ColorQube 93xx, 92xx or 89xx Series
You must configure the WorkCentre 77xx series MFP and the ColorQube 93xx, 92xx or 89xx Series MFP from
both the MFP Console and via the Internet Services interface. Before you perform the configuration, ensure
that Custom Services is installed on the MFP.
Note
This document assumes that any 89xx devices are running upgraded firmware that allows the device to
function as a "ConnectKey" device. Devices with older firmware do not follow these instructions. For
information about identifying which firmware version your device is running, see the Xerox support web site.
Setup Guide 2-25
MFP Configuration Embedded for Xerox EIP3
Locating Custom Services
Xerox
EIP cannot be configured unless Custom Service is installed on the MFP. To determine if custom
services is installed on a WorkCentre 77xx series and ColorQube 93xx, 92xx or 89xx Series, perform these
steps:
1. Open a Web browser and enter the URL http://<MFP IP address> in the Address field.
2. Select the Properties tab, and login with your Administrator user ID and password when prompted.
3. In the left pane, select the General Setup folder, then select Extensible Service Setup.
4. Click the Edit button beside the Extensible Service Registration option.
5. Click on Enable All, then click Save. The Custom Services button should now be present on the MFP user
interface when All Services is selected.
If you cannot access or locate these options, contact
Xerox
regarding correct installation of Custom Services.
2-26 Setup Guide
Embedded for Xerox EIP MFP Configuration
On the MFP Console
1. Log into the To ol s menu with your Administrator user ID and password.
2. Touch All Services. Ensure that you can see the Custom Services button. If not, power off/on the MFP
and wait until the MFP is ready.
3. Enter the user name and password.
4. On the Machine Status screen, touch the Tools tab.
5. Touch Accounting Settings > Accounting Mode.
6. On the Accounting Mode screen, touch Network Accounting, then touch Customize Prompts.
7. On the Customize User Prompts screen, touch Display Prompt 1 and 2, then touch Save. Failure to set
this option causes transactions to be recorded against “Unidentified user”.
8. Set Code Entry Validation to Disabled.
9. Touch the Save button again to save all changes, then log off the MFP Console. Configuration at the
console itself is now complete. You now need to complete the rest of the configuration via the web
interface.
Setup Guide 2-27
MFP Configuration Embedded for Xerox EIP3
Via the Internet Services Interface
1. Open a Web browser and enter the URL http://<MFP IP address> in the Address field.
2. Select the Properties tab, and login with you User ID and Password when prompted.
3. In the left pane, click the General Setup folder, then select Extensible Service Setup.
4. Click the Edit button beside the HTTP (SSL) option.
5. Set the Secure HTTP (SSL) option to Enabled, then click Save.
6. Click the Edit button beside the Extensible Service Registration option.
2-28 Setup Guide
Embedded for Xerox EIP MFP Configuration
7. Click Enable All, then click Save.
8. In the Browser Settings section on the Extensible Service Setup page, select the Enable the Extensible
Services Browser checkbox. and click Apply.
9. In the left pane, click the Security folder, then the Access Rights subfolder, and then Setup.
Setup Guide 2-29
MFP Configuration Embedded for Xerox EIP3
10. In the right pane, click Edit Methods to change the Authentication method.
Note
E
If the copier has not been previously configured, you may need to click the Next button (instead of
dit
Methods) and then work through a wizard to configure the copier.
11. Select Xerox Secure Access from the Device User Interface Authentication drop-down list. Leave both
Web User Interface Authentication and Authorization options set to Locally on the Device.
12. Click Save to apply the changes.
13. On the Authentication Configuration page, click the Edit button beside the Device User Interface
Authentication option.
14. On the
Xerox
Secure Access Setup page, click the Manually Override Settings button.
15. On the Manual Override page, set the following:
a. In the Server Communication section, set the Embedded option to Enabled.
b. In the Device Log In Methods section, select the preferred method.
2-30 Setup Guide
Embedded for Xerox EIP MFP Configuration
c. In the Accounting Information section, select Automatically apply Account Codes from the
server.
16. Click Save to apply the changes, then click Close.
17. Click Close again on the
Xerox
Secure Access Setup page to return to the main Authentication
Configuration page.
18. Click the View button beside the Service Registration option.
19. Select the services you want users to access, then click Save.
Setup Guide 2-31
MFP Configuration Embedded for Xerox EIP3
20. In the left pane, click the Security folder, then the Access Rights subfolder, and then Tools & Feature
Access.
21. In the Presets section, select the Custom Access option to select the services you want to control access
to.
• Unlocked - the service appears on the control panel and is accessible without authentication.
• Locked - the service appears on the MPF control panel, but cannot be accessed until the user
authenticates.
• Hidden - the service does not appear on the control panel.
22. Click Apply to complete the configuration of this MFP.
23. Logout of the MFP’s configuration utility and close the web browser.
2-32 Setup Guide
Embedded for Xerox EIP MFP Configuration
WorkCentre Pro 2xx Series
You must configure the WorkCentre Pro 2xx series MFP from both the MFP Console and via the Internet
Services interface. Before you perform the configuration, ensure that Custom Services is installed on the MFP.
Locating Custom Services
1. Open a Web browser and enter the URL http://<MFP IP address> in the Address field.
2. Select the Properties tab, and login with your Administrator user ID and password when prompted.
3. Select the Services folder in the left navigation pane, then select the Custom Services subfolder. If there
is another sub-option in this folder called Custom Services, then the service is installed and you can
proceed.
Note
If the services are not installed, contact
4. In the right pane, ensure that Custom Services is set to Enabled, then click Apply. The Custom Services
button should now be present on the MFP user interface when All Services is selected.
Xerox
regarding correct installation of these services.
On the MFP Console
1. Log into the To ol s menu with your Administrator user ID and password.
2. Touch All Services. Ensure that you can see the Custom Services button. If not, power off/on the MFP
and wait until the MFP is ready.
3. Touch Access and Accounting.
4. Touch Authentication Mode.
5. Under Network Accounting, touch the On option to enable Network Accounting. Ensure that all other
authentication options are disabled. Touch Save.
6. Return to the Access and Accounting menu, then touch Network Accounting Setup.
7. Touch Network Accounting Authentication.
8. Exit the Tools screen, and return to copy mode. Configuration on the MFP is now complete.
Setup Guide 2-33
MFP Configuration Embedded for Xerox EIP3
Via the Internet Services Interface
1. Open a web browser and enter the URL http://<MFP IP address> in the Address field.
2. Select the Properties tab, and login with your Administrator user ID and password when prompted.
3. In the left pane, click the Security folder, then the Authentication Server subfolder, and the General.
4. In the right pane, set the following options:
a. In the General section, set the Authentication Type to
b. In Feature Coverage, select All Features.
c. In Account Codes Access, enable the Accounting Codes Provided by Server option.
d. In Login Initiation, enable the Allow Local User Interface Initiation option to make the keyboard
access button visible. This is optional.
e. In Server Communication, leave the fields blank. The
information when you Initialize this MFP later on in the workflow.
5. Click Apply to complete the configuration of this MFP.
6. Logout of the MFP’s configuration utility and close the web browser.
2-34 Setup Guide
Xerox
Secure Access.
Xerox Secure Access
server will complete this
Embedded for Xerox EIP MFP Configuration
Phaser 3635
Configuration of Phaser 36xx MFPs is performed in two steps: First, via the Internet Services interface, and
then at the MFP to select
Caution
In order to enable Network Authentication, a default "From" address must be configured. If you have not yet
done so, designate an email address by navigating to Services > E-mail Settings > Defaults. Under the
General section, click the Edit button, and type a default From email address in the From address field, then
click Apply.
Internet Services Interface Configuration
1. Open a Web browser and enter the URL http://<MFP IP address> in the Address field.
2. Select the Properties tab, and login with your Administrator user ID and password when prompted.
3. In the left pane, select the Services > Custom Services. The Custom Services screen displays:
Xerox
ECSP as the default application.
4. Ensure that Custom Services is set to Enabled, then click Apply. The Custom Services button should
now be present on the MFP user interface when All Services is selected.
Note
Select this option only if you want to enable keyboard access to the device for login purposes. With this
option deselected, only card swipe login is possible.
a. The settings in the Server Communication section are populated from settings determined when
the embedded device was set up.
b. Provide a Default Title and Default Prompt the user sees when starting to use the device.
c. The Logoff Reminder is selected by default, and cannot be altered.
5. Click Apply.
Setup Guide 2-35
MFP Configuration Embedded for Xerox EIP3
Phaser MFP Configuration
Phaser MFPs require that you set the device default application manually. By setting this, the device uses the
Xerox
ECSP by default.
For each Phaser MFP using
1. Press the Machine Status hard key to the left of the display.
2. Touch the Guest button at the top right of the display, then select Log In from the drop-down menu.
3. Touch the Keyboard icon in the center of the screen, and using the soft keyboard, provide your
administrator password to log in to the device. The System Administration screen displays:
4. Select the To ol s tab, then select User Interface, and General. The User Interface General settings
options display.
Xerox
ECSP, go to the device, and do the following:
2-36 Setup Guide
Embedded for Xerox EIP MFP Configuration
5. From the list of features, select Screen Defaults.
a. Select Entry Screen Default
b. Select Feat ures
c. Select Save
d. Select Default Feature and Priority Order
6. Set the Highest Priority service:
a. From the list of priorities, touch the Custom Services... button to select it.
Note
If the Custom Services... option is absent from the list, return to the Entry Screen Default list,
deselect Features and then reselect Features. This resets the Highest Priority list.
b. Use the arrow buttons to the right of the list to move the Custom Services... button to the top of the
list.
Note
The Highest Priority list can only display 4 options. If your option is not listed, move one of the
listed options to the bottom of the list.
7. From the EIP app list, touch
8. Touch Save.
9. Touch Close.
10. Touch the Admin button at the top right of the display, then select Log Out.
Caution
If a device is initialized to point to a different DWS server after initial setup, the default Highest Priority
service must be manually reset to prevent ECSP from inappropriately displaying the login screen. To
reset the Highest Priority service follow steps 6. through 8. above, selecting Custom Services from EIP
app list, and then follow these steps a second time, reselecting
service.
Xerox
ECSP to select it.
Xerox
ECSP as the Highest Priority
Other settings
1. In the left pane, select the Security > Authentication > Authentication. The Authentication screen
displays:
a. Ensure in the Guest Access section, Allow Guess Access is deselected.
b. Ensure in the Feature Coverage section, All Features is selected.
c. Ensure Accounting Code Access is Enabled.
d. In the Login Initiation section, deselect Allow Local User Interface Initiation.
Setup Guide 2-37
MFP Configuration Embedded for Xerox EIP3
Smart Card Configuration
The
Xerox
Smart Card solution provides a two-factor identification requirement. Users must insert their
access card and enter a unique PIN at the device. Once validated, a user is logged into the
features.
Xerox
device for all
The Smart Card solution requires a Smart Card Enablement Kit and a Feature Enable Key, provided by
Before installing the
and via the Internet Services interface.
Xerox
Smart Card solution, the software needs to be enabled on both the MFP Console
Xerox
On the MFP Console
1. Log into the To ol s menu with your Administrator user ID and password.
2. Touch More to access additional Tools options.
3. Touch Optional Services. If necessary, use More to navigate to the option.
4. Touch Smart Card. If necessary, use More to navigate to the option.
5. When prompted, touch the Option Kit Number entry field and enter the unique Feature Enable Key
provided with the Smart Card Enablement kit.
6. Touch Exit Tools.
7. Reboot the device. The device may automatically reboot.
Once the reboot is complete, the Smart Card function is ready to be configured using the Internet Services
interface.
Note
No services on the device will be restricted until Smart Card has been configured using Internet Services.Via
the Internet Services Interface
.
2-38 Setup Guide
Embedded for Xerox EIP MFP Configuration
Via the Internet Services Interface
To enable and configure the Smart Card, do the following:
1. Open a Web browser and enter the URL http://<MFP IP address> in the Address field.
2. Select the Properties tab, and login with your Administrator user ID and password when prompted.
3. In the left pane, click the Security folder, then the Authentication subfolder, and then Setup.
4. On the
5. On the Authentication, Authorization and Personalization page, do the following:
Xerox
Access Setup page, click the Edit button to change the Authentication method.
a. Select SmartCards from the Authentication method on the machine’s touch interface drop-down
list.
b. Select User Name/Password Validated Remotely on the Network from the Alternate
authentication method on the machine’s touch interface (Touch UI) drop-down list.
c. Select User Name/Password Validated Locally on the
method on the machine’s web user interface (Web UI) drop-down list.
d. Select Locally on the
stored drop-down list.
e. Click Save to apply the changes.
A list of configuration settings appears at the bottom of the
configure any settings that are marked in red text as Required; Not Configured.
Setup Guide 2-39
Xerox
Machine (Internal Database) from the Authorization information is
Xerox
Machine from the Authentication
Xerox
Access Setup page. Click Edit to
MFP Configuration Embedded for Xerox EIP3
Configuring Domain Controller Settings
1. In the Configuration Settings table on the
Controller(s) row. The domain certificate on a user’s Smart Card must be validated on the domain
controller server before they can access the MFP.
Xerox
Access Setup page, click Edit on the Domain
2. Click Add Domain Controller.
3. Under Domain Controller Type, select Windows Based Domain Controller.
4. Select the IPv4 option and enter the domain controller server IP Address and Port number.
5. Enter the Domain name.
6. Click Save to apply the new settings and return to the Domain Controller page.
2-40 Setup Guide
Embedded for Xerox EIP MFP Configuration
Note
If you have more that one domain controller server, you can click Change Domain Priority and use the
Up and Down arrows to change the search priority of the server.
7. Click Edit beside Network Time Protocol (NTP).
8. Enable NTP to ensure time synchronization between the domain controller and the MFP.
9. Click Close to return to the
Xerox
Access Setup page.
Setting the Inactive Time Limit
1. In the Configuration Settings table on the
Inactivity Timer row.
2. Specify the maximum amount of Smart Card inactivity time (in minutes) before a user is automatically
logged out.
3. Click Save to apply the new settings and return to the Authentication Setup page.
The Smart Card settings are now configured. Please refer to the
the Smart Card hardware.
Xerox
Access Setup page, click Edit on the Smart Card
Xerox
Smart Card Installation Guide
to install
Setup Guide 2-41
MFP Configuration Embedded for Xerox EIP3
2-42 Setup Guide
Server-Side Configuration
To pi c s
Licensing Embedded Devices
Configuring Printer Ports
Configuring Authentication Prompts
Configuring Card Self-Registration
Configuring Embedded Devices
Configuring Embedded Devices
Configuring Smart Card Authentication
Setting Up Authentication Devices
Associating Authentication Devices with MFPs
Configuring Print Tracking
3
To enable Xerox Secure Access, you must configure the Authentication Devices, MFPs, and the core
accounting server (CAS). Follow the steps below in the order they are presented to ensure a successful install.
Setup Guide 3-1
Server-Side Configuration Embedded for Xerox IP
Licensing Embedded Devices
The Xerox Secure Access system utilizes a 6 tier licensing structure which allows licenses to be assigned on a
per device basis. The license tiers are as follows:
Authentication – Any time the user approaches a device and authenticates themselves, they are using an
Authentication license. This could be for a PageCounter, ID Controller, Web Release or Embedded device.
Desktop Printing is not considered authentication.
• Licenses are assigned per device where authentication is required.
• Does not require a prerequisite.
Follow-You Printing
it. Includes Web Release, PageCounter, Embedded and ID Controller.
• License are assigned per device where Follow-You Printing is required.
• Requires an Authentication license as a prerequisite.
®
– Allows the user the ability to release a job from a device with this license assigned to
Assigning Licenses to Devices
Licenses must be assigned to each printer that will use that particular feature.
To assign a license, do the following:
1. Open System Manager, and select Licensing in the left pane.
2. Select the Assignment View tab to open the list of all assigned licenses.
3. Expand or right-click the desired license option, and select Add to open the Assign license dialog box.
4. On the Assign license dialog box, select the checkbox for the device(s) to assign the license to.
At the bottom of the dialog box is a counter displaying the number of available licenses and available
devices. These numbers decrease with every license assigned.
5. Click OK after the licenses have been assigned to the desired devices.
3-2 Setup Guide
Embedded for Xerox IP Server-Side Configuration
The devices assigned to the license now display under the selected license option.
To remove an assigned license from a device, right-click the device and select Remove assignment. The
number of used licenses will be adjusted accordingly.
Setup Guide 3-3
Server-Side Configuration Embedded for Xerox IP
Configuring Printer Ports
Controlled
printing. If you are configuring a secure print environment, ensure that your devices comply with this
requirement.
You can c re at e
ports into
new devices can be created using standard TCP/IP ports and then converted it to an
existing devices, see Convert an Existing TCP/IP Port to Equitrac Port on page 5. Converting from TCP/IP to
Equitrac
the print environment are due to the
Xerox
MFPs must use an
Equitrac
Equitrac
ports allows them to be quickly converted back to TCP/IP ports to determine if reported errors within
printer ports directly for new devices, or convert existing devices from standard TCP/IP
ports. For new devices, see Add a Printer on an Equitrac Printer Port (below). Alternatively,
Equitrac® Port (rather than standard TCP/IP ports) to enable secure
Xerox Secure Access
Equitrac
server or the normal print environment.
ports. For
Add a Printer on an Equitrac Printer Port
To create
1. Using the standard Windows interface, open the Add Printer wizard.
2. Follow the prompts to add a local printer and create a new port.
3. Select Equitrac Port as the type of port you want to create and click Next.
4. The Add
5. Click Next and select Physical printer as your Device Type from the drop-down list.
6. Specify a Printer name or IP Address. The wizard supplies a Port name prefaced with
7. Click Next to continue with the port configuration options. The Port Configuration screen displays. The
8. Select the Use custom settings option:
9. Click Next and specify the Physical device name. This is the name of the device that is displayed within
10. Review the details for this new port and device registration, and click Finish to close the Add
11. Specify the Manufacture and model to install the printer driver, and click Next.
Equitrac
turned on, connected to the network, and properly configured. Click Next to continue.
printer name or IP address. If another naming convention is preferred, rename the port accordingly.
Detected device information displays automatically if the wizard is able to collect this data from the
printer.
•If you select Raw port communication, identify the TCP Port number, and specify if the port
monitor should hold the connection open.
•If you select LPR, specify the name of the print Queue on the physical device (e.g. PORT1).
•If you select Specific device, select the appropriate Manufacturer and Model from the drop-down
lists. The device uses the relevant default communications parameters based on these selections.
System Manager.
Printer Port wizard, or Back to change any of the settings.
printer ports for new devices, do the following:
Equitrac
Printer Port wizard displays and you are prompted to ensure that the printer device is
"EQ_"
based on the
Equitrac
3-4 Setup Guide
Embedded for Xerox IP Server-Side Configuration
Note
If the device is part of a pull group, it must use the same drivers as all other devices in the pull group. You
must select the model of the pull group driver, not the model of the device. If the DRE is a 64-bit server
you must also load the 32-bit driver to the server.
12. Specify the version of the print driver to use, and click Next.
13. Enter the Printer name, and click Next. This is the name of the device that is displayed in System
Manager.
14. Select to share or not to share the printer with others, and click Next. If sharing the printer, enter a Share
name, and optionally provide a printer location and any comments.
15. Click the Print a test page button, and click Finish to close the Add Printer wizard.
16. Confirm that the test page printed successfully.
17. Verify that the physical device and its printer port and print queue appear in System Manager >
Devices.
Convert an Existing TCP/IP Port to Equitrac Port
Use the
TCP /IP to
To convert from TCP/IP printer ports to
1. Select Start > All Programs > Xerox Secure Access > Printer Configuration Wizard.
2. Click Next on the Welcome screen to continue with the conversion.
3. Select Convert printers to use
Equitrac
the printers are off-line or have SNMP disabled. If selected, the wizard sends an SNMP request to each
device, and then times-out on each failed connection attempt, greatly increasing the time to run the
conversion.
Printer Configuration Wizard to convert from a TCP/IP port to
Equitrac
ports allows them to be quickly converted back to TCP/IP ports if desired.
Equitrac
Equitrac
ports, do the following:
Ports, and click Next. Optional – Uncheck Auto-discover model if
Equitrac
ports. Converting from
Setup Guide 3-5
Server-Side Configuration Embedded for Xerox IP
4. Select the desired print server(s) from the list, and click Next. Optionally, enter the name of other print
servers in the Add field, and click the Add button to place them in the PrintServer list. Print servers can
only be added one at a time.
5. Select the printer(s) to be converted, and click Next. If a printer exists on more than one print server, it
displays multiple times in the Printer list along with the name of its associated server in the PrintServer
list.
3-6 Setup Guide
Embedded for Xerox IP Server-Side Configuration
6. Set the Printer Name and Port Name as they will display in the System Manager Devices view. You can
use the default naming templates for the printer "<ip>_<printer>" and port "EQ_<ip>", or change the
names as desired.
For example, you can change the printer default from "<ip>_<printer>" to "2nd floor <printer>" to
associate the selected printer(s) with the 2nd floor in your environment, or remove "<printer>" from the
name to only display the printer’s IP address in System Manager (where <ip> is typed, the printers IP will
be automatically replaced; where <printer> is typed, the queue name will be automatically replaced).
Setup Guide 3-7
Server-Side Configuration Embedded for Xerox IP
Note
The printer and port names can be changed individually or as a group. If multiple printers are selected,
the naming convention affects the entire selection.
7. On the Properties page, select the properties you want to assign to the printers from the Rule Set, SDR
and Pull Group drop-down lists. The properties can be applied to single or grouped printers.
8. On the Price Lists page, select the price list. you want to assign from the Print, Copy, Fax receive, and Fax
send drop-down lists. The price lists can be applied to single or grouped printers.
9. Click Finish to complete the conversion process. Alternatively, you can select the Return to Start
checkbox and click Next to return to the Wizard’s main page without completing the conversion.
10. Open the Printers and Faxes window, and print a test page for EACH converted printer.
11. Confirm that the test page printed successfully.
12. Verify that the physical device and its printer port and print queue display in System Manager >
Devices.
3-8 Setup Guide
Embedded for Xerox IP Server-Side Configuration
Configuring Physical Devices with the Configuration Wizard
Use the Printer Configuration Wizard to reconfigure existing printers. The wizard allows for properties such as
price lists, rule sets, pull groups and SDR to be set across multiple devices simultaneously.
To configure existing printers, do the following:
1. Select Start > All Programs > Xerox Secure Access > Printer Configuration Wizard.
2. Click Next on the Welcome screen to continue with the conversion.
3. Select Configure
printers are off-line or have SNMP disabled. If selected, the wizard sends an SNMP request to each
device, and then times-out on each failed connection attempt, greatly increasing the time to run the
configuration.
4. On the Properties page, select the properties you want to assign to the printers from the Rule Set, SDR
and Pull Group drop-down lists. The properties can be applied to single or grouped printers.
Equitrac
Printers, and click Next. Optional – Uncheck Auto-discover model if the
5. On the Price Lists page, select the price list. you want to assign from the Print, Copy, Fax receive, and Fax
send drop-down lists. The price lists can be applied to single or grouped printers.
6. Click Finish to complete the configuration process.
Setup Guide 3-9
Server-Side Configuration Embedded for Xerox IP
Enabling Secure Printing on the Queue
If you are configuring a secure print environment, the queue must be configured to hold print jobs.
1. In System Manager, navigate to Configuration > Devices.
2. Click on the Print queue you want to configure. You may need to expand the Physical device to see the
print queue.
Note
The print queue is created automatically the first time a user prints to the controlled device, including
when you print a test page upon configuration. If a print queue does not appear beneath the Physical
Device, send a print job to the MFP, then wait 30 seconds and refresh System Manager.
3. In the Print queue summary dialog box, set the Secure printing option to Enabled from the Behavior
section, and click OK.
3-10 Setup Guide
Embedded for Xerox IP Server-Side Configuration
Configuring Authentication Prompts
The user authentication prompts on the MFP login screen are determined by your Xerox Secure Access
configuration.
1. In System Manager, navigate to Configuration > User authentication.
2. Select one of the following Authentication options from the Input type drop-down list:
• Card swipe only – Users authenticate with a swipe card.
• Card swipe or keypad entry – Users authenticate with a swipe card or at the MFP front panel.
• Keypad only – Users authenticate at the MFP front panel
3. Select one of the following options from the Secondary prompt drop-down list:
• Always – User must enter a secondary PIN via the keyboard after they swipe their card.
• If PIN2 available – User must enter a secondary PIN if they have a PIN 2 value associated with
their user account.
• If PIN2 available or keyboard login – User must enter a secondary PIN if they have a PIN 2 value
associated with their user account, or if they entered their primary PIN via the keyboard.
• Never – Secondary PIN is not required.
• Only with keyboard login – User must enter a secondary PIN if they entered their primary PIN via
the keyboard (rather than with a swipe card). This option prevents users from typing in someone
else’s primary PIN while still allowing valid users to login without a card.
Setup Guide 3-11
Server-Side Configuration Embedded for Xerox IP
Note
If a change is made to the Secondary prompt option, then you must re-initialize the device in order to
enable the new selection.
4. In the Card setup area, enter the data start and stop positions in the Use data from position.
5. Select Auto-register primary PINs if you want users to register an unrecognized swipe card for future
use. An External authority must be selected to allow card self-registration. See Configuring Card Self-
Registration on page 13 for details.
6. Click OK to save the change.
For more detailed user authentication options see Accounts System Configuration in the Xerox Secure Access
Administration Guide.
Setting Xerox Secure Access Prompts
The following settings must be set before creating
1. In System Manager, navigate to Configuration > Embedded Devices.
2. Select
3. Enter a Title and Login prompt to display on the login screen of the embedded device.
Xerox
Secure Access from the Device type drop-down list.
Note
If you modify the Title or Login prompt after a device has been initialized by the
server, you will have to re-initialize the device again. See Configuring Embedded Devices on page 14 for
instructions.
Xerox
embedded devices.
Xerox Secure Access
4. Select Enable release all jobs prompt if you are not using the Follow-You Printing application and want
to prompt for batch release of all jobs.
5. Select Force logout on swipe to allow the user to logout by swiping their card a second time.
6. Click OK to save the changes.
3-12 Setup Guide
Embedded for Xerox IP Server-Side Configuration
Configuring Card Self-Registration
f you want users to self-register their swipe cards, you must enable this option in System Manager. When a
user swipes an unregistered card, they are required to login to the MFP with valid User ID and Password. The
User ID must already exist in CAS, or in the External authority defined to allow self-registration. The
Password comes from one of the defined external authorities. The information the user must enter depends
upon the authentication options that are set in System Manager. Two-level authentication is required to
register new cards, and the user must manually enter both primary and secondary login credentials.
1. Open System Manager and navigate to Configuration > User authentication.
2. In the Authentication options section, do the following:
a. Set Secondary Prompt to either If PIN2 available or keyboard login or Only on keyboard login to
ensure that the password is prompted during card registration.
b. Select the Auto-register primary PINs checkbox. Optionally, you can select Register as alternate
PIN to record the PIN as the Alternate PIN instead of the Primary PIN.
3. Select one or more Authentication mechanisms:
• Xerox Secure Access PINs – Select to connect an Xerox Secure Access print account with login
information.
• External user ID and password – Select to verify all user information outside of Xerox Secure
Access.
• Xerox Secure Access PIN with external password – Select if users swipe their cards for
identification, and must also enter their domain user account password. Xerox cross-checks the
database for the corresponding Xerox Secure Access account name, then verifies the credentials
against the selected external authority for network logon.
4. Click OK to save the changes and close the User authentication dialog box.
5. Navigate to Configuration > External authentication and select an External authority – Windows or
LDAP. Refer to External User Authentication in the
details on setting up an external user authentication method.
Once the user registers their card, their account information is automatically associated with that card.
The next time the user swipes their card, they can login automatically without manually entering their
password. However, if Secondary prompt is set to Always in System Manager, the user must enter a
secondary PIN, or an external authority password after they swipe their card.
Xerox Secure Access Administration Guide
for more
Setup Guide 3-13
Server-Side Configuration Embedded for Xerox IP
Configuring Embedded Devices
Embedded devices are manufacturer-specific software bridges that handle the transfer of user
authentication and transaction details between these devices and your accounting server database.
Supported devices prompt users for valid user and account ID information for all print release, walk-up copy,
and fax jobs.
You must create an embedded interface for each
The System Manager component provides the tools to create these interfaces.
1. Open System Manager and select Devices in the left pane.
2. Right-click on a
3. Select
4. Enter a Name and Description to identify the embedded device.
5. Select the Server hosting the DCE associated with the embedded device from the drop-down list.
Xerox
Xerox
MFP in the right pane, then select Add embedded device from the menu.
EIP, JBA from the Type drop-down list.
Xerox
MFP that will be controlled by Xerox Secure Access.
Note
If you change the server associated with an embedded device that has already been initialized by the
Xerox Secure Access
6. Select the Card Reader HID decoding from the drop-down list.
For details on HID decoding, see the Xerox Secure Access Administration Guide.
7. Click Pricing to configure pricing at the embedded device level.
For pricing details, see Configuring Price Lists in the
3-14 Setup Guide
server, you must re-initialize the device.
Xerox Secure Access Administration Guide
.
Embedded for Xerox IP Server-Side Configuration
Note
To configure the embedded device to use the price list for that device, select the default price list. If you
select an alternate price list for the embedded device, the embedded device price list overrides the
default price.
8. Enter an Admin ID and Password to set up secure administrator access to the device. This password and
ID must be identical to those used with the eq
xerox
eipregistration.exe utility.
9. Click the Initialize button to open the Initialize device dialog box.
10. Select the Server-based authentication option, and choose a method from the drop-down list.
• Xerox Secure Access– to track printing through
Xerox
Network Accounting. See Print Tracking Using
Xerox Network Accounting on page 26.
•
Xerox
off-box JBA – to validate prior to processing print activity.
11. Click Initialize to configure communication between this device and the
Xerox Secure Access
server, and
return to the Embedded device dialog box.
Caution
Clicking Initialize changes the configuration on the device itself and requires some MFPs to reboot.
Ensure that the MFP is not in use before you click Initialize. You must manually reboot WorkCentre 52xx,
7232/7242, 73xx, and 74xx models for these settings to take effect. Click the Reboot button on the
MFP’s web configuration page to accomplish the reboot remotely.
12. Click OK to save the embedded device details and close the dialog box. The new embedded device
appears in the Devices list beneath the Physical device it is associated with.
13. Repeat these steps to create an embedded device on each supported
Xerox
MFP in the Devices list.
Note
If initialization fails, and the
Xerox
device does not appear in System Manager, go back to Configuring
Printer Ports on page 4 and confirm that the MFP is properly configured.
After Initialization, log into a
Xerox
MFP configuration page as the Administrator to verify that the Admin ID
and Password entered in System Manager are configured properly. When login is successful, a web page
opens displaying the
Xerox
MFP model name and its settings.
Note
If the MFP is running EIP firmware version 1.5 or 2.0, the Embedded Manual Override option must be
Enabled through the MFP Internet Services Interface in order for the attached card reader to operate
normally. See WorkCentre 75xx Series on page 11 for setup details.
Setup Guide 3-15
Server-Side Configuration Embedded for Xerox IP
Configuring Smart Card Authentication
Embedded devices configured with Smart Card authentication require users to log in using the physical
Smart Card and entering a valid userID at the device for all print, copy, and fax jobs.
To configure Smart Card authentication, do the following:
1. Open System Manager and select Devices in the left pane.
2. Right-click on a
Xerox
MFP in the right pane, then select Add embedded device from the menu.
3. Select
4. Enter a Name and Description to identify the embedded device.
5. Select the Server hosting the DCE associated with the embedded device from the drop-down list.
6. Select the Card Reader HID decoding from the drop-down list. For details on HID decoding, see the
7. Click Pricing to configure pricing at the embedded device level. For pricing details, see
8. Enter an Admin ID and Password to set up secure administrator access to the device. This password and
9. Click the Initialize button to open the Initialize device dialog box.
Xerox
EIP, JBA from the Type drop-down list.
Xerox Secure Access Administration Guide.
Lists in the
ID must be identical to those used with the eq
Xerox Secure Access Administration Guide
.
xerox
eipregistration.exe utility.
C
onfiguring Price
3-16 Setup Guide
Embedded for Xerox IP Server-Side Configuration
10. Select the Local authentication option, and choose
Xerox
Native SmartCard from the drop-down list.
Caution
Xerox Print Admin Suite relies upon existing SmartCard functionality to allow authentication for
embedded functions. Authentication through SmartCard is dependent upon a pre-existing operational
native smart card setup per device. Ensure your setup includes smart card authentication before
installing the embedded solution.
11. Select the Enable Follow-You Printing applet checkbox to enable Follow-You Printing on the device.
12. Click Initialize to configure communication between this device and the
Xerox Secure Access
server, and
return to the Embedded device dialog box.
13. Click OK to save the embedded device details and close the dialog box.
Setup Guide 3-17
Server-Side Configuration Embedded for Xerox IP
Authentication
Request
Generated
For wa rd
Requ est
Authentication
Device
Card
Read er
Send Unlock
Request to MFP
DCE
CAS
Database
Ver ify U ser
User Verified
User triggers
card reader
Xerox
MFP
Ethernet
Serial Cable
Ethernet CAP Protocol
1
2
4
5
6
3
Setting Up Authentication Devices
Using a proprietary protocol called Convenience Authentication, the Authentication Device contacts the
accounting server via an ethernet network connection to verify the user information gathered from the swipe
or proximity card. If the accounting server verifies the user, the MFP device panel unlocks and is ready for
use. If the user is not verified, the MFP remains locked and the user cannot perform any tasks at the device.
The user can access the Embedded functions only when they are authenticated and the front panel is
unlocked.
Setup of each Authentication Device requires a three-step process, outlined below. Before proceeding, ensure
that you have all required Authentication Device components. See Authentication Device Component
Requirements on page 5.
1. Set the IP Address for each Authentication Device and indicate the DCE IP Address that will
communicate with this Authentication Device. Follow Set the Authentication Device IP Address on
page 18.
2. Mount the Authentication Device hardware on or near the MFP. Follow Mount the Authentication
Device on page 21.
3. Plug in the power, serial, expansion, and card reader connections. Follow Connect the Hardware on
page 22.
Set the Authentication Device IP Address
Xerox
Authentication Devices are configured for DHCP communication by default. You need to assign an IP
Address to each Authentication Device, and set the server IP Address of the DCE component. There are two
methods to assign the IP Address:
• Using a DHCP server to assign addresses ensures that the IP Address assignments are handled by the
DHCP server when you connect the Authentication Device to the network. However, you need to
3-18 Setup Guide
Embedded for Xerox IP Server-Side Configuration
configure the DHCP server to locate the Authentication Devices. Follow Configure the DHCP Server to
Locate the Authentication Devices on page 19.
• If you are not using a DHCP server, or if you prefer not to set option 230 on your DHCP server, you need
to use the Authentication Device Web Admin application to set the addresses manually. Follow
Manually Assign the IP Address on page 19.
Configure the DHCP Server to Locate the Authentication Devices
1. In Windows Administrative Tools, open the DHCP windows management console.
2. Select the DHCP server root node.
3. From the Action menu, select Set Predefined Options.
4. From the Option Class drop-down list, select DHCP Standard Options.
5. In the Option Name section, click Add.
a. In the Name field, enter Xerox Secure Access. This field is used for identification purposes only.
b. From the Datatype drop-down list, select String.
c. In the Code field, enter 230.
d. In the Description field, type: Secure Access.
e. Click OK.
6. In the String Value section, enter EQ;A;<DCE Server IP Address> in the String field, where <DCE Server
IP Address> is the IP Address of your DCE server. For example:
7. EQ;A; 192.168.100.137
8. Expand the Scope node and select Scope Options.
9. From the Action menu, select Configure Options.
10. Select 230.
11. Click OK to save the changes.
Manually Assign the IP Address
Caution
Follow these instructions only if you are not using a DHCP server to set the IP Address of the Authentication
Device OR if you are using a DHCP server, but prefer to use static IP Addresses rather than using option 230.
When first powered up, the Authentication Device looks for a DHCP server to secure an IP Address. If no
DHCP server is found, the device switches to static communication and defaults to a static IP Address of
192.168.2.1. You can use a standard ethernet cable to connect a system (for example, a laptop) to the
Downlink port on each Authentication Device, then use the Web Admin tool to change the IP Address, and
enter the DCE Server IP Address.
Print out the Tear sheet found on page 5 before you start. Use this sheet to record the IP Addresses you
assign to each Authentication Device.
Setup Guide 3-19
Server-Side Configuration Embedded for Xerox IP
Configure the Admin Laptop
The system running the Web Admin tool must recognize the static IP Address before you can access the Web
Admin tool.
1. On the system (laptop) that will run the Web Admin tool, select Network Connections > Local Area
Connection > Properties.
2. Double-click Internet Properties (TCP/IP), then click Advanced.
3. In the IP Addresses section, click Add.
4. Enter the following:
IP Address: 192.168.2.x (where x is an unassigned IP)
Subnet Mask: 255.255.255.0
5. Click Add to save the changes.
Use the Web Admin Tool to Set IP Addresses:
Perform the following procedure on each Authentication Device.
1. Use a regular Ethernet cable to connect a laptop to the Downlink port on the Authentication Terminal.
2. To power up the Authentication Terminal, attach one end of the AC power cable to the Authentication
Terminal, then plug the other end into an available outlet.
3. Open a web browser, and enter 192.168.2.1 in the Address field.
This is the factory default IP Address assigned to the Authentication Device.
4. Select the Configure link at the top of the page.
5. Enter the following to login:
User name: deviceadmin
Password: pc_passwd
6. Change the password used to access the Web Admin tool. You can reset the password at any time, but
ensure that you change the password from the default setting before the Authentication Device is up
and running.
7. In the Configure Authentication Device section, choose Static IP from the Addressing mode drop-
down list.
8. Enter a static IP Address in the IP Address field to set the address of this Authentication Device.
9. In the Configure Server section, enter the DCE Server’s IP Address in the Server IP Address field.
10. Click the Update Configuration button located below the Configure Server fields.
3-20 Setup Guide
Embedded for Xerox IP Server-Side Configuration
Authentication Device
Card Reader
Xerox
MFP
Ethernet Connection
11. Click the Restart link at the top of the page, then click “Click here to confirm restart” to restart the
terminal.
12. Repeat these instructions for each Authentication Device that you are deploying.
Note
Remember to reconfigure the laptop Internet Properties when you are done.
Mount the Authentication Device
Print out the Configuration Tear Sheet found on page 5. As you work, complete the Authentication Device’s
IP Address and MAC Address columns on this sheet. You need this information when you configure
communication between devices within System Manager.
1. Lay the Authentication Device on the floor, behind and on the input side of the MFP. The device should
be placed in an unobtrusive location, but ensure that the device is placed within 6 feet of the card reader
(serial cable length is 6 feet).
2. Mount the Card Reader on the shelf on the left side of the MFP front panel using the supplied Velcro
strip. If you have the Convenience Stapler option, place the Card Reader to the right of the stapler so the
Card Reader is between the stapler and MFP. Ensure the Document Handler top cover can be opened
without being obstructed by the Card Reader before attaching the Velcro strip.
3. Use the Tear Sheet (see page 5) to record the IP and MAC Address of the MFP that this Authentication
Device will control.
Setup Guide 3-21
Server-Side Configuration Embedded for Xerox IP
Power Supply
Connection
Downlink Port
Card Reader
Connector
Uplink
Port
Connect the Hardware
Using the labeled graphic below for reference, connect the components. Note that the Authentication Device
provides a serial port and a copy control port that is not used in this configuration.
1. Use the Tear sheet to record the MAC address of the Authentication Device. Enter this address in the
same row as the MFP it will control.
2. Plug the Card Reader serial cable into the Card Reader connector on the Authentication Device.
3. Connect one end of the Ethernet cable into the network drop and the other end into the Uplink port on
the Authentication Device.
4. Connect the MFPs ethernet cable to the Downlink port on the Authentication Device.
Note
When the Authentication Device is powered off, there is no Ethernet connectivity available from the
Downlink port. Alternatively, you can plug the MFP Ethernet cable directly into another Ethernet port.
The Downlink port is provided on the Authentication Device for situations when another Ethernet port is
not available.
5. Connect the power supply to the Authentication Device, then plug the other end into the nearby
receptacle.
The physical hardware setup of the Authentication Device is now complete. Repeat these instructions for
each Authentication Device.
Note
The Authentication Device does not control access to an MFP until you perform an association in System
Manager, described below.
3-22 Setup Guide
Embedded for Xerox IP Server-Side Configuration
Associating Authentication Devices with MFPs
When you initially power on an Authentication Device connected to the network, the DCE registers the
device. The DCE then forwards the configuration details to the accounting server, and the Devices list in
System Manager updates accordingly.
Unassigned Authentication Devices appear in the Devices list under the <Unassigned control terminals>
section (using the Standard view in the Devices window).
Each Authentication Device is labelled as “Auto-generated device”, but can be differentiated by MAC
Address. Use your Tear sheet to determine which Authentication Device MAC Address maps to the
corresponding MFP IP Address.
1. Open System Manager and select Devices in the left pane.
2. To associate an Authentication Device with a Physical Device (MFP), simply drag and drop the terminal
to the Physical Device. The Authentication Device will then appear below the Physical device.
Users must now authenticate to use the MFP. See User Workflow on page 1 for instructions that you can
provide to end-users.
Setup Guide 3-23
Server-Side Configuration Embedded for Xerox IP
Configuring Print Tracking
There are two methods to track printing—through
(also called
print tracking setup for your environment.
Xerox
JBA or Job-based Accounting). Read the descriptions below to determine the appropriate
Equitrac
ports or through the
Xerox
client driver popup
Print Tracking Through Equitrac Ports
When DRE is set to track printing, it gathers details when the user submits a print job. When a job is released,
DRE forwards these details to CAS based on the job characteristics determined by the
The job details are gathered by the Port Monitor when the user releases the print job at a device. If the user
decides to cancel the print job mid-way through printing, or if the user originally selected color printing but
the final output device cannot print in color, the precise page details are not captured at the time of output
and therefore tracking may not be fully accurate.
Equitrac
Port monitor.
3-24 Setup Guide
Embedded for Xerox IP Server-Side Configuration
Enable tracking from the physical device
1. Open System Manager and select Devices in the left pane.
2. Select the physical device to open the Physical device summary dialog box.
3. In the Settings area, ensure Track and record print transactions on this device is selected from the
Tracking Behavior drop-down list. This is the default setting.
4. Click OK to save the changes.
5. Navigate to Configuration > Devices > Embedded devices.
6. Select
7. Click on the link beside Tracked activities to open the Embedded device configuration dialog box.
8. Ensure that Print is NOT selected, then click OK.
Xerox
/Fuji
Xerox
JBA from the Device Type drop-down list.
Setup Guide 3-25
Server-Side Configuration Embedded for Xerox IP
Print Tracking Using Xerox Network Accounting
When tracking print jobs through a
Xerox
embedded device, configure the device and its print drivers to
accept only authenticated print jobs. Users are prompted to enter user and account credentials prior to
printing. The user authentication data is checked by the
Xerox
device when it receives the print job. The
embedded device tracks printing and captures appropriate accounting information.
Use this method when you require precise job accounting. When the user releases a print job, the precise
output details are gathered and held at the device after the job is completed. If the user cancels mid-way
through a job, or if the device is not capable of producing output as the user intended (i.e. duplex was
selected, but the device is not capable of duplexing and produces single-sided output only), the device
calculates the precise output details only after the job is fully processed.
The DCE obtains the transaction details from the output device and forwards them to the CAS at a later
interval.
This method requires additional configuration steps and your
Xerox
devices must meet the following
prerequisites:
•JBA-supported
Xerox
device with the Network Accounting module installed and enabled and
Authentication (Network Accounting option) enabled.
• TCP/IP enabled and configured on the devices.
• A static IP Address or reserved DHCP IP Address (recommended).
• TCP/IP port 443 communication enabled on the network between the
Xerox Secure Access
server and the
devices.
• Depending on the
Management before you can enable the Accounting option on the printer driver. See the
Xerox
device and server operating system, you may require
Xerox
Advanced Services
Xerox
device
documentation for details.
• Off-printer (also called off-box) validation must be configured on the
option forces the device to send a request to
•For
Xerox
devices to accept authenticated print jobs and the embedded device to track print jobs
correctly, the
Xerox
device and
Xerox
print drivers must be configured as described in the following table.
Xerox
to validate the data input by the user.
Xerox Secure Access
server. This
Device and Print Driver Configuration Notes
The Network Accounting module must be
installed and enabled on each
The Network Accounting Configuration >
Authentication option must be enabled.
3-26 Setup Guide
Xerox
device.
Xerox Secure Access does not support the Internal Auditron
authentication method. When you set the authentication mode
on the device, ensure you select the Network Accounting option.
Depending on the
information can be accurately tracked by the
regardless of whether or not the user and account information
exists on that device. See the
details on configuring options for the physical device.
Xerox
device Authentication configuration, job
Xerox
device
Xerox
device documentation for
Embedded for Xerox IP Server-Side Configuration
Device and Print Driver Configuration Notes
Installed
Accounting option enabled for each printer
to prompt users for user and account ID prior
to printing.
The device must use an
configuring secure document release.
Xerox
print drivers must have the
Equitrac
Port if
The location of the Accounting option in the
dialogs may not be the same for all printer connections you
create.
The option may be located on the Properties > Document
Details or the Printer Preferences dialogs. You may find that the
location of the Accounting option varies by Windows platform,
driver language type (Postscript or PCL), driver version, or device
model.
Xerox
The
billable) printing when any of the following situations apply:
• The
• The Accounting option for the print driver is disabled.
Secure Document Release is enabled through
Regardless of the print tracking method you choose, you must
establish an
documents for secure release.
device deletes print jobs to prevent anonymous (un-
Xerox
print driver does not have authentication features.
Equitrac
Port on the device if you plan to hold
Xerox
Equitrac
print driver
Ports only.
Once the prerequisites and configuration steps are complete, you must disable tracking on the physical
device.
Setup Guide 3-27
Server-Side Configuration Embedded for Xerox IP
3-28 Setup Guide
User Workflow
To pi cs
Authenticating at a Card Reader
Card Reader Status Messages
Using Follow-You Printing®
Resetting an Authentication Device
4
This section provides end-user instructions for authenticating and using the Embedded functions at the
MFP.
Xerox
Setup Guide 4-1
User Workflow Embedded for Xerox IP
Pass the proximity card over
this symbol on the card
reader
Authenticating at a Card Reader
When Xerox Secure Access controls an MFP, users must authenticate with a magnetic stripe card, proximity
card, or smart card before they are able to use the device functions.
Authenticating with a Magnetic Stripe Card
1. Insert the card into the guide track with the magnetic stripe facing the indicated direction.
Ensure the card is pressed firmly against the guide.
2. Pull the card down through the guide track and remove the card.
Note
Do not run the card through at an angle or the terminal will not accept the data.
3. If the terminal cannot read the entry, the LED flashes red. Reinsert the card into the guide track and run
the card through the reader again.
4. If Secondary prompt is enabled in System Manager, and a secondary PIN has been assigned in the
database, the user must enter their ‘password’ on the MFP front panel when prompted. If the user has
not been assigned a secondary PIN in the database, they can leave the field blank to proceed.
Authenticating with a Proximity or Smart Card
To enter data using a proximity card or smart card, pass the card within 1 inch or 2.5 cm of the proximity
symbol located on the top of the card reader device. To locate the proximity card reader on the data reader
module, look for this symbol:
If the swipe is invalid, the LED flashes red.
If secondary PINs are enabled, the user must enter their ‘password’ on the MFP front panel when prompted.
If secondary PINs are enabled, but the user has not been assigned a secondary PIN, the user can leave the
field blank to proceed.
4-2 Setup Guide
Embedded for Xerox IP User Workflow
The LED light
indicates the status
Card Reader Status Messages
Xerox Secure Access displays its authentication messages through an LED light on the card reader module.
The following signals may be displayed on the card reader:
LED Behavior Meaning
Solid red MFP is in Idle mode; it is ready but there is no active session.
Solid green MFP is in Ready mode and a session is active.
Slow flashing green Data received from card reader, awaiting authentication for active session. The
light continues to flash green until the user enters their secondary PIN at the front
panel.
If the time-out expires and the user does not enter their PIN, the LED changes back
to solid red and the device remains locked.
Slow flashing red No communication between card reader and MFP.
The MFP has two functional modes, Idle mode or Ready mode.
Idle Mode
An MFP that is ready for use is in Idle mode. When a user passes a key fob or swipes a magstripe card, the
device changes to Ready mode.
The MFP returns to Idle mode when:
• A user completes a transaction
• After a specified period of inactivity in Ready mode (Sleep Mode Timer, as configured on the device)
• The user logs out
When the device is in Idle mode, the LED light on the card reader is solid red.
Ready Mode
When the device is in Ready mode, the LED light on the card reader is solid green and the user can begin
using the controlled device to perform a transaction.
Setup Guide 4-3
User Workflow Embedded for Xerox IP
Logging In to a User Session
A user session begins when the user logs in with valid credentials through the MFP device interface. Once
their login credentials have been authenticated, the user can manage and release documents via Follow-You
Printing
®
, or they can access any of the other device features, such as copying, scanning and faxing.
There are two authentication methods available to validate users at a
• Local authentication - users are authenticated at the
solution uses local authentication. See Configuring Smart Card Authentication on page 16.
• Server-based authentication - users are authenticated by CAS. See Configuring Embedded Devices on
page 14 for details.
Xerox
Xerox
MFP:
device. For example, the
Xerox
Smart Card
Smart Card Authentication
To authenticate through
1. The user inserts their Smart Card into the
2. On the Login screen, the user enters their user PIN.
3. On the All Services screen, the user can access any of the native device features (e.g. copy or fax), of they
can touch Custom Services to access Follow-You Printing. See Using Follow-You Printing® on page 5.
Xerox
Smart Card, do the following:
Xerox
supported card reader to open the MFP Login screen.
Server Authentication
To authenticate through Xerox Secure Access, do the following:
1. On the Login screen, the user enters their User ID or swipes their card. If System Manager is configured
to prompt for Secondary PIN, the user may also need to enter a password.
Depending on how System Manager is configured, one of the following occurs after user authentication:
• The MFP All Services screen opens, and the user can proceed to the Follow-You Printing application
to release their documents.
2. On the All Services screen, the user can access any of the native device features (e.g. copy or fax), of they
can touch Custom Services to access Follow-You Printing. See Using Follow-You Printing® on page 5.
4-4 Setup Guide
Embedded for Xerox IP User Workflow
Using Follow-You Printing
®
Users can use Follow-You Printing to release documents held in the print queue associated with the user’s
account from any device within a predefined pull group, which is connected to the particular print server.
Multi-Server Follow-You Printing allows users to select any remote print server accessible to the device within
a predefined pull group, and pull documents for printing
1. On the MFP Login screen, the user enters their user credentials or swipes their card. See Smart Card
Authentication on page 4 or Server Authentication on page 4 for login options.
2. On the All Services screen, the user touches Custom Services.
3. On the Custom Services screen, the user touches Follow- You Printi ng (or Release Documents on some
devices). The Follow-You Printing screen opens.
Setup Guide 4-5
User Workflow Embedded for Xerox IP
4. On the Follow-You Printing screen, the user can perform the following functions at the device:
Function Description
Print Touch one or more documents in the list, then touch Print to print the documents and delete
the jobs from the list.
Print & Save Touch one or more documents in the list, then touch Print & Save to print the documents but
keep the jobs in the list.
Delete Touch one or more documents in the list, then touch Delete to remove the jobs from the queue
without printing them.
Select All Selects all jobs in the list, after which you can touch Print, Print & Save, or Delete.
Server If multiserver Follow-You Printing is enabled on the
display a list of authorized network print servers. If you select another server from the list, the
Follow-You Printing screen refreshes to show any print jobs waiting on the other server.
If multiserver Follow-You is not enabled, you will only see the local server listed.
For multiserver Follow-You Printing configuration information, see the “Advanced Printing
Configuration” chapter in the Xerox Secure Access Administration Guide.
Refresh Contacts the DCE server to determine if any new pending jobs are available for the current
user. If any print jobs are found, they are added to the bottom of the document list.
Exit Returns to the MFP Service screen.
Force
Monochrome
Number of
Copies
Allows a user to force a color job to print in black & white.
Touch the Plus (+) and Minus (-) buttons to change the number of copies for the selected print
job(s).
If the number of copies is changed at the MFP, a confirmation page appears verifying the
number of copies to print. Touch OK to continue, or Cancel to leave the number of copies at 1.
Note: By default, the number of copies is reset to 1 after the selected job prints. If more than 1
copy is desired for additional print jobs, the number of copies must be set again before the
next job is released.
Xerox Secure Access
server, touch Server to
5. The user touches Exit to end the user session and return to the Custom Services screen.
Logging Out of a User Session
While in the Follow-You Printing screen, the user must first touch Exit to return to the Custom Services screen,
then touches Close to return to the main screen on the MFP.
To fully log out of an active session, the user touches the Clear All button beside the panel keyboard, then
chooses Log out in the confirmation dialog box.
If using the Smart Card solution, the user can simply remove their Smart Card to end the user session and
completely log out of the device.
4-6 Setup Guide
Embedded for Xerox IP User Workflow
Bypass slot
Resetting an Authentication Device
Use the metal bypass key to reset the Authentication Device to the default settings. This key was provided
with the device and should be stored in a safe place.
1. Ensure the Authentication Device is powered on.
2. Insert the bypass key into the key slot.
3. Holding the device as shown above, turn the key a quarter turn TOWARD you.
4. After 5 seconds, turn the key back to the original position.
5. Ensure the key is fully back in its original position, then remove the key.
Note
The device will beep every 10 seconds if the key is not turned back to its original position before you
remove the key.
Setup Guide 4-7
User Workflow Embedded for Xerox IP
4-8 Setup Guide
5
Troubleshooting
Before contacting Technical Support for assistance, refer to the following table for symptoms that match the
problem you are experiencing. Instructions for possible solutions are also provided.
Symptoms and Solutions
If you experience a problem with your Xerox Secure Access application at a device, refer to the table below
for symptoms and solutions that match your problem before contacting Technical Support for help.
Symptom Possible Resolution
The indicator light on the card
reader is off
The Authentication device does
not have power
The card reader indicator light is
flashing red slowly
When the light is not lit, this indicates a loss of power to the reader.
Check the cable connection to the Authentication Device and ensure that it is firmly
seated. If the light remains unlit, check the power to the Authentication Device. If
the Authentication Device does not have power, neither does the card reader.
To determine if the unit has power, check the back (connector side) of the unit. A
yellow indicator light next to the jack marked “Ethernet” should be lit.
If this light is not lit, ensure that the power supply cable is firmly seated in the
Authentication Device, and that the power cord is plugged into the power supply
brick and into the A/C wall jack. If the light is still not lit, verify that the wall jack has
power.
The Card Reader is working correctly; however, the Authentication device has failed
to connect to the
Ensure that the Ethernet cable is connected to both the Ethernet port on the
Authentication Device and to the wall Ethernet jack.
If the Ethernet link light on the Authentication Device flashes green when you first
swipe your card, the Ethernet is active, and the problem is likely server-side.
Ensure that the Authentication Device has been assigned to the correct MFP. See
Associating Authentication Devices with MFPs on page 23 for instructions.
Xerox Secure Access
server.
Setup Guide 5-1
Troubleshooting Embedded for Xerox EIP
Symptom Possible Resolution
The card reader indicator light
rapidly flashes red upon swipe
The card reader indicator light
stays red upon swipe
The Ethernet link light on the
Authentication Device is off
The Ethernet link light on the
Authentication Device is solid
green (as opposed to flashing)
The Authentication Device is
not listed in System Manager >
Devices
The swipe was invalid at the card reader. The
determined that the card ID does not correspond to a valid user on the network.
Test the reader with another card for a user whose card is known to work at other
readers. If the cards are not being read correctly at any reader, server configuration
may be the cause. Read Configuring Authentication Prompts on page 11 to ensure
the card data positions are set correctly.
If the indicator light does not change color when you swipe, the reader has not
detected the card.
Verify that the swipe was performed correctly. A magnetic card may have been
encoded with a different standard or swiped upside down or facing the wrong
direction; a proximity card or contactless smart card may not have been placed
close enough to the reader, or may not be a supported card type.
If the same card works at other readers at the same site, the reader module may be
at fault. If the card does not work at other readers, verify the card technology with
the card vendor and reference Supported Card Readers on page 6.
There is no Ethernet connection.
Verify the Ethernet patch cable and verify that the Ethernet wall jack is active.
There is Ethernet connectivity, but no activity.
Ensure that the Ethernet wall jack is connected to the correct hub or switch.
Authentication Devices appear in the Devices list by MAC Address. Check the list of
<Unassigned control terminals> to check for the IP Address of the Authentication
Device in question.
If you cannot locate the correct MAC Address, the DCE Server has not located the
device on the Ethernet.
If you manually configured the Authentication Device (without DHCP) ensure that
you entered the correct DCE IP Address in the Web Admin utility.
If you allowed DHCP to assign an IP Address, ensure the Authentication Device is
connected to the Ethernet and powered on. You may need to wait approximately 60
seconds for the DCE to contact the device and communicate with the Core
Accounting Server before it can populate the Devices list. Also check to ensure that
the DHCP server sets value 230 to the DCE Server’s IP Address.
Ensure the Authentication Device is powered on.
Xerox Secure Access
server has
Cannot connect to the
Authentication Device’s web
page
The Authentication Device
beeps at a frequent interval
5-2 Setup Guide
If you set the IP Address manually, check the Tear sheet to ensure you are entering
the correct IP Address. If the address looks correct, either the device is not
connected correctly, it cannot communicate, or the IP Address was recorded
incorrectly. To check the device connection, use an Ethernet cable to connect the
Downlink Port on the Authentication Device directly to a PC. If the connection is
established, verify the network settings and IP Addresses set for both the
Authentication Device itself and the DCE Server.
If you cannot connect to the device using an Ethernet cable, reset the
Authentication device. See Resetting an Authentication Device on page 7 for
instructions. Perform the Authentication Device setup and configuration again.
If the web page is still unreachable, the Authentication terminal may be defective.
The bypass key was not returned to its correct position before the key was removed.
See Resetting an Authentication Device on page 7 for instructions on correctly
resetting the device.
Embedded for Xerox EIP Troubleshooting
Symptom Possible Resolution
After the user authenticates at
the MFP, an error message
appears stating “access to copy
job denied”.
Device initialization failed A common cause of device initialization failure is due to incorrect DNS
What trace logging settings are
required by Support?
A copy rule has been applied to the user and device. The user is not authorized to
use the copy function on this device. The user can touch Yes or Exit to logout.
For more information on copy rules, refer to the Routing Rules chapter in the
Secure Access Administration Guide.
configurations. To determine where the error has occurred, run the
XeroX
EQ
This program will produce a verbose error description that will help you diagnose
the problem. If DNS configuration is the problem, this file allows you to change DNS
addresses into IP Address registrations.
Run the executable from a command prompt, followed by /h to view a list of
options.
In case of failure to initialize
Authentication devices, undesirable authentication behavior, or undesirable
network accounting behavior, enable all
logs.
EIPRegistration.exe file located in the Xerox Secure Access Tools folder.
Xerox
devices, failure to initialize
Xerox
DC items within the CAS and DCE
Xerox
Secure Access
Xerox
Setup Guide 5-3
Troubleshooting Embedded for Xerox EIP
5-4 Setup Guide
Embedded for Xerox EIP
Configuration Tear Sheet
Tear this sheet out and use it when performing the physical setup of the Authentication Devices. You must
keep careful track of the IP and MAC Address of each Authentication Device and the corresponding MFP
that it will control. The MAC Address of the Authentication Device is printed on the serial number label.
Authentication Device Multifunction Device
MAC Address IP Address IP Address Hostname
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
Setup Guide 5-5
Embedded for Xerox EIP
5-6 Setup Guide
Loading...