Xerox Secure Access Unified ID System Embedded for Xerox EIP Setup Guide

Software Version 5.3 August 2014 702P03157

Embedded for Xerox EIP

Setup Guide

Unified ID System

Equitrac

and Follow-You Printing® are registered trademarks of Nuance Communications.

are trademarks of Xerox Corporation in the United States and/or other countries.

Document Version: 1.0 (August 2014)

Table of Contents

1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1

About User Authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

About Secure Document Release . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3

Installation and Configuration Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-4

Licensing, Server, and MFP Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-4

Authentication Device Component Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . 1-5

System Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-5

Supported MFPs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-5

Supported Card Readers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6

Magstripe Device Reader . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6

Proximity and Contactless Smart Cards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6

Additional Documentation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6

List of Terms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6

2 MFP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1

Configuring MFP Properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2

WorkCentre 52xx, 7232/7242, 73xx, and 74xx Series. . . . . . . . . . . . . . . . . . . . . . . . 2-3

WorkCentre 56xx Series . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7

Locating Custom Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7

On the MFP Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8

Via the Internet Services Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8

WorkCentre 75xx Series . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11

Locating Custom Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-12

On the MFP Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-13

Via the Internet Services Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-14

WorkCentre 76xx Series . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-20

Locating Custom Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-20

On the MFP Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-21

Via the Internet Services Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-21

WorkCentre 77xx Series and ColorQube 93xx, 92xx or 89xx Series . . . . . . . . . . 2-25

Locating Custom Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-26

On the MFP Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-27

Via the Internet Services Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-28

WorkCentre Pro 2xx Series . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-33

Locating Custom Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-33

On the MFP Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-33

Via the Internet Services Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-34

Phaser 3635. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35

Internet Services Interface Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35

Phaser MFP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-36

Other settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-37

Smart Card Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-38

On the MFP Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-38

Via the Internet Services Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-39

3 Server-Side Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1

Setup Guide iv

Table of Contents Embedded for Xerox EIP

Licensing Embedded Devices. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-2

Assigning Licenses to Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-2

Configuring Printer Ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-4

Add a Printer on an Equitrac Printer Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-4

Convert an Existing TCP/IP Port to Equitrac Port . . . . . . . . . . . . . . . . . . . . . . . . 3-5

Configuring Physical Devices with the Configuration Wizard . . . . . . . . . . . . 3-9

Enabling Secure Printing on the Queue . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-10

Configuring Authentication Prompts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-11

Setting Xerox Secure Access Prompts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-12

Configuring Card Self-Registration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-13

Configuring Embedded Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-14

Configuring Smart Card Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-16

Setting Up Authentication Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-18

Set the Authentication Device IP Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-18

Mount the Authentication Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-21

Connect the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-22

Associating Authentication Devices with MFPs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-23

Configuring Print Tracking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-24

Print Tracking Through Equitrac Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-24

Print Tracking Using Xerox Network Accounting . . . . . . . . . . . . . . . . . . . . . . . 3-26

4 User Workflow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4-1

Authenticating at a Card Reader . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2

Authenticating with a Magnetic Stripe Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2

Authenticating with a Proximity or Smart Card . . . . . . . . . . . . . . . . . . . . . . . . . 4-2

Card Reader Status Messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3

Idle Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3

Ready Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3

Logging In to a User Session . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4

Smart Card Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4

Server Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4

Using Follow-You Printing®. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-5

Logging Out of a User Session . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-6

Resetting an Authentication Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-7

5 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5-1

Symptoms and Solutions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-1

Configuration Tear Sheet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5

v Setup Guide

Introduction

To pi cs

About User Authentication

About Secure Document Release

Installation and Configuration Requirements

Authentication Device Component Requirements

System Requirements

Supported MFPs

Supported Card Readers

Additional Documentation

List of Terms

Xerox Secure Access supports Secure Access Authentication Devices within an Xerox Secure Access environment. In a secure printing Xerox Secure Access environment, users must authenticate at a Secure Access Device before they are allowed to access the supported

Xerox

MFP controlled by the device.

In addition to authentication, users can select and release secure print documents directly from the MFP front panel.

This guide provides instructions to configure the server-side requirements within an Xerox Secure Access environment.

Setup Guide 1-1

Introduction Embedded for Xerox EIP

Authentication

Request

Generated

For wa rd Request

Authentication

Device

Card

Reader

Send Unlock

Requ est to

MFP

DCE

CAS

Database

Ver if y U se r

User Verified

User triggers

card reader

Xerox

MFP

Ethernet

Serial Cable

Ethernet CAP

About User Authentication

Xerox Secure Access provides the ability to control access to the print and copy functions of Multifunction peripheral (MFP) devices. When a user approaches an

Xerox

-controlled device, they enter user

Xerox

credentials either by using a card, or manually entering data on the MFP front panel. The MFP front panel is unlocked only when the user’s account information is authenticated by the accounting server.

Using a proprietary protocol (Convenience Authentication Protocol), the Authentication Device contacts the accounting server via an Ethernet network connection to verify the user information gathered from the swipe or proximity card. If the accounting server verifies the user, the MFP device panel unlocks and is ready for use. If the user is not verified, the MFP remains locked and the user cannot perform any tasks at the device.

The Device Control Engine (DCE) handles all communication with the MFP devices. When a user wants to use the copy, or fax functionality on a MFP, they must first trigger the card reader. A swipe or proximity read initiates an access request. The Authentication Device forwards the login request to the DCE, which then contacts the Core Accounting Server (CAS) to verify the user account data associated with the card. This process is depicted below.

1-2 Setup Guide

Embedded for Xerox EIP Introduction

User prints document

in a secure printing

environment

Document is held in

a secure print

Workstation

MFP controlled by Authentication Device

Secure Print Queue

1. Doc 1

2. Doc 2 ...

User authenticates

via the Secure Access

Authentication

Device at the MFP

Document list

retrieved

User accesses the Release

My Documents/Follow-

You P rin ting scre en on

the MFP front panel to

view documents in one or

more secure queues

About Secure Document Release

Secure document release (SDR) holds jobs in the print queue until a user releases them from the MFP panel. When CAS is configured to support SDR, users can view a Follow-You

Printing screen on the MFP via the Release My Documents option. This screen displays queued print jobs for the current user. The user can select one or more jobs and release or delete them directly from the MFP front panel.

If you enable multi-server Follow-You Printing on the CAS, the user can view print jobs on other servers also. For additional information on multi-server Follow-You Printing, refer to the

Advanced Printing Configuration

chapter in the Xerox Secure Access Administration Guide.

The following diagram illustrates the process flow that occurs after a user submits a print job to a controlled queue on a

Xerox

MFP. After sending the print job, the user goes to a controlled MFP, authenticates via a Secure Access Authentication Device, then uses the Follow-You Printing screen on the front panel to access the Embedded secure document release functions.

Note

When the Follow-You Printing extension is not configured, the Follow-You Printing screens are not available on the MFP panel and the user cannot select individual jobs for release. After the user authenticates, all jobs are released from the local or home server or workstation.

Setup Guide 1-3

Introduction Embedded for Xerox EIP

Installation and Configuration Requirements

If you have already set up and configured your Xerox Secure Access server, you do not need to install the basic Xerox Secure Access application; you only need to follow configuration procedures.

For instructions on installing and configuring Xerox Secure Access, see the

System® Installation Guide

Before configuring Xerox Secure Access, you need the following:

• The IP address of the Device Control Engine (DCE) server. You need this address when configuring the

MFP to communicate with the DCE server.

• Administrative access to System Manager. For details, see

Xerox Secure Access Administration Guide.

and the

Xerox Secure Access Administration Guide.

Configuring Administrative Access

Xerox Secure Access Unified ID

in the

Licensing, Server, and MFP Requirements

To enable the Embedded solution, you must obtain the following:

• Xerox Secure Access Software

Xerox Secure Access requires configuration of the MFPs, the Core Accounting Server (CAS), and the Secure Access Authentication Devices. This guide provides complete setup instructions for all of these components.

• One Authentication Device per controlled Xerox MFP

Each MFP is controlled by an Authentication Device, comprised of an authentication terminal and card reader. See Authentication Device Component Requirements on page 5 for details.

• One embedded license per Xerox MFP

Each Secure Access Authentication Device requires an embedded license applied in System Manager. For example, if you plan to control 20 (enabled for CAS.

• EIP-enabled Xerox MFPs

If you are not certain whether your MFPs meet this requirement, contact

www.nuance.com/for-business/by-product/equitrac/supported-devices/xerox/index.htm for a list of supported

MFP models.

• One Network Accounting Enablement Option per Xerox MFP

Only required if you are tracking copy, or fax usage. This is NOT required to track printing if you are using Equitrac® printer ports.

This licensable device option obtained from fax and copy usage for each account.

Xerox

). See Licensing Embedded Devices on page 2 for instructions on adding licenses to the

Xerox

MFPs, you need to obtain 20 corresponding embedded licenses

Xerox

for further details. Visit http://

Xerox

enables the

Xerox

MFP to automatically track print, server

1-4 Setup Guide

Embedded for Xerox EIP Introduction

Card Reader

Authentication Terminal

Ethernet Connection

Authentication Device Component Requirements

A Secure Access Authentication Device is comprised of an Authentication Terminal and an external card reader. When connected to an external card reader, the Authentication Terminal controls user access to the MFP. The user must swipe or pass a card through or near the card reader, and validate user credentials against the accounting server before the MFP is available for use.

Ensure that you have all the hardware provided with each Authentication Device:

•Power supply

•Power cable

• Bypass (Reset) key (metal key used to reset the device to defaults) See Resetting an Authentication

Device on page 7.

• 10/100 Base-T Ethernet network cable

• Card Reader

System Requirements

To review the system requirements for the machine or machines hosting the Core Accounting Server and Device Control Engine server components, see the

Guide

Supported MFPs

For a list of Xerox Secure Access supported MFP models, visit http://www.nuance.com/for-business/by-

product/equitrac/supported-devices/xerox/index.htm.

Note

Newer models of processing power of late-model than

Embedded for

Supported MFP models must be EIP-enabled prior to installing the Xerox Secure Access solution. Please contact your local

Xerox Secure Access Unified ID System® Installation

Xerox

MFP may be able to use Xerox ECSP.

Xerox

MFPs to offer enhanced features.

Xerox

EIP, and has different requirements. If your device(s) use

Xerox

ESCP

documentation instead of this guide.

Xerox

Sales Representative for more information.

Xerox

ECSP is able to leverage the displays and

Xerox

ECSP is a different platform

Xerox

ECSP, please consult the

Setup Guide 1-5

Introduction Embedded for Xerox EIP

Supported Card Readers

For a list of Xerox Secure Access supported card readers, visit http://www.equitrac.com/card_readers.html.

All card readers are pre-configured from the manufacturer and require no further configuration.

Magstripe Device Reader

Xerox Secure Access supports external magnetic stripe reader devices. Users can enter validation data by swiping an encoded magnetic card through the card reader. The reader reads virtually any standard magnetic card medium on track 2, and accepts standard or custom encoded data.

Proximity and Contactless Smart Cards

Xerox Secure Access supports HID proximity cards, and Mifare and Legic contactless smart cards. Users can enter validation data by passing the card within about one inch of the card reader.

Additional Documentation

You may need to refer to one of the following documents when performing server-side configuration tasks. These documents are located on the server-side component in the Program Files\

Guide When to refer to this guide

Xerox Secure Access

Installation Guide Use this guide to perform an initial installation or upgrade.

Administration Guide After installing

Xerox Secure Access

Equitrac\MPS

options for use on your campus or in your organization.

product CD, and are installed automatically with any

\Docs folder.

Xerox Secure Access

, use this guide to configure advanced

List of Terms

The following unique terms are used within this guide.

Te rm Description

Alternate Primary PIN A sequence of personal identification numbers that uniquely identifies a user who wants to

release a print job. The alternate primary PIN can be data encoded on a magnetic swipe card or entered into an MFP keypad.

Authentication The process of entering a primary and optional secondary personal identification number to

gain access to a controlled MFP. Users can authenticate via a card reader, or through the MFP control panel.

1-6 Setup Guide

Embedded for Xerox EIP Introduction

Te rm Description

Core Accounting Server (CAS)

Convenience Authentication

Device Control Engine (DCE)

Device Routing Engine (DRE)

Follow-You Printing A secure printing feature that holds print jobs in a virtual print queue until the user “pulls”

Follow-You Printing screen

Multi-server Follow-You

Network Accounting A feature of the

The Core Accounting Server is a core component of Xerox Secure Access. This service controls the accounting database that stores all printer, user, transaction and balance information. The CAS also verifies users, calculates printing charges and assigns charges to an appropriate user.

A protocol that enables communication between the Authentication Device and the server to verify user information gathered from a swipe or proximity card.

A core component of Xerox Secure Access, the DCE communicates with terminals that control access to MFPs.

A core component of Xerox Secure Access, the DRE enables document flow from workstations to output devices. When a job is released, the DRE captures the job characteristics and communicates the characteristics to the CAS.

the print job to a selected device. A user can select a particular printer when they submit a print request, then walk to an entirely different compatible MFP and pull the job to that device.

An additional screens that appears as a custom service on the MFP when the Follow-You Printing extension is configured. Users can select one or more jobs from different print servers.

A secure printing feature that extends the Follow-You functionality to allow users to view and release secure print jobs from different print servers.

Xerox

MFP which automatically tracks print, server, fax and copy usage for each user. Network accounting is run over a network and the accounting transactions are performed remotely by Xerox Secure Access server software.

Xerox

Print Tracking The ability to track the attributes of a released network print job. For example, number of

pages, page size, color, etc. You can configure Xerox Secure Access to track printing through

Equitrac

the embedded device or through an

Primary PIN A sequence of numbers that act as a user ID to uniquely identify a user who wants to

release a print job. The primary PIN can be entered on the MFP keypad.

Secondary PIN A sequence of numbers that act as a password when used in conjunction with a Primary

PIN. After entering the Primary PIN, the user must enter the Secondary PIN code on a MFP keypad before the print job is released to a device. Secondary PINs are an optional configuration.

Secure Document Release (SDR)

An Xerox Secure Access feature that holds network print jobs in a secure virtual print queue. Users must authenticate at an MFP to release jobs from the secure queue. The goal of secure printing is to ensure that proprietary information does not sit at an output device for public consumption.

Port.

Setup Guide 1-7

Introduction Embedded for Xerox EIP

1-8 Setup Guide

MFP Configuration

To pi c s

Configuring MFP Properties

WorkCentre 52xx, 7232/7242, 73xx, and 74xx Series

WorkCentre 56xx Series

WorkCentre 75xx Series

WorkCentre 76xx Series

WorkCentre 77xx Series and ColorQube 93xx, 92xx or 89xx Series

WorkCentre Pro 2xx Series

Phaser 3635

To enable Xerox Secure Access, you must configure the MFPs. Follow the steps for each MFP series in the order they are presented to ensure a successful install.

Setup Guide 2-1

MFP Configuration Embedded for Xerox EIP3

Configuring MFP Properties

The following are the main steps when configuring

1. Ensure that the time zone on the MFP is correct. if the time zone is not correct, transaction times are incorrectly reported.

2. Confirm that the date and time setting on the MFP is within 24 hours of the date and time configured on the server that hosts the DCE component. If the settings are more than 24 hours apart, the Embedded application on the MFP will not connect to the server.

3. Configure the MFP to use Secure Access Authentication and to communicate with the DCE Server.

4. Ensure that the SNMPv2 settings on the device are correct. Read-only (Get) and Read and Write (Set) community names must be configured as public and private respectively. Note that all characters must be entered in lower case. Also ensure that these SNMP settings are enabled in System Manager > Configuration > SNMP configuration.

5. Ensure SSL is enabled on the enable SSL communication.

6. Verify the firmware version on the that the Embedded Manual Override is Enabled in order for the attached card reader to operate normally. Contact your local MFPs. Refer to WorkCentre 75xx Series on page 11 for details on enabling this option.

Xerox

MFP. If it is not enabled, generate a self-signed certificate and then

Xerox

MFP. MFPs running EIP firmware versions 1.5 and 2.0 require

Xerox

representative for information on the appropriate firmware for your

Xerox

MFPs:

Xerox

Embedded

2-2 Setup Guide

Embedded for Xerox EIP MFP Configuration

WorkCentre 52xx, 7232/7242, 73xx, and 74xx Series

All configuration of the WorkCentre 52xx, 7232/7242, and 73xx MFPs is performed via the Internet Services interface. No configuration at the MFP console is required.

Note

If prompted to reboot during this process, reboot and resume configuration at the next step.

1. Open a Web browser and enter the URL

2. Select the Properties tab, and login with your Administrator user ID and password when prompted.

3. In the left pane, select the Services folder, then the Custom Services subfolder, and then Custom Services.

4. In the right pane, ensure that Custom Services is set to Enabled, then click Apply. The Custom Services button should now be present on the MFP user interface when All Services is selected.

5. In the left pane, select the Accounting folder, then the Accounting Configuration subfolder.

http://<MFP IP address> in the Address field.

6. In the Authentication Configuration > Step 1 of 2 page, set the following options:

a. Select Network Accounting from the Accounting Type drop-down list.

b. Enable the services you want to track on this MFP: Copy, Fax, and Print.

c. Select Yes from the Verify Use r Deta ils drop-down list.

d. Select No from the Verify User Details for Printer Jobs drop-down list. (Jobs will not print if set to

Yes. )

Setup Guide 2-3

MFP Configuration Embedded for Xerox EIP3

Note

For models 72x2 with older firmware, it may be necessary to set the

Ver ify Use r De tails

option to

order to avoid transactions being recorded against “Unidentified user”.

e. Select Display User ID & Account ID Prompts from the Customize User Prompts drop-down list.

Failure to set this option causes transactions to be recorded against “Unidentified user”.

7. Click Apply to save these settings.

8. Click Reboot Machine, if prompted.

Caution

While the MFP is rebooting, do NOT click anywhere on the web page, as an error message indicating that services are unavailable will appear. If this occurs, once the device is back online, you will need to login again to the web page and navigate to the applicable menu before continuing.

9. In the left pane, select the Security folder, then the Authentication Configuration subfolder.

10. In the Authentication Configuration > Step 1 of 2 page, set the following options:

a. Select Xerox Secure Access from the Login Type drop-down list.

b. Select Off from the Guest User drop-down list.

c. Leave all other options unchanged.

2-4 Setup Guide

Embedded for Xerox EIP MFP Configuration

11. Click Apply to save the settings.

12. Reboot the machine when prompted. Do NOT click anywhere on the web page until the reboot is complete.

13. Click Next to continue to the Authentication Configuration > Step 2 of 2 page.

14. To lock the front panel of the MFP, click the Configure button beside the Device Access option.

15. Set the All Services Pathway to Locked, and then click Apply.

16. Reboot the machine when prompted. Do NOT click anywhere on the Web page until the reboot is complete.

17. To lock some, but not all, of the Services, click the Configure button located beside the Service Access option.

18. On the Service Access page, select the services you want to control access to, then click Save.

Setup Guide 2-5

MFP Configuration Embedded for Xerox EIP3

• Locked (Show Icon) - the service appears on the MPF control panel, but cannot be accessed without

authentication.

• Unlocked - the service appears on the control panel and is accessible without authentication.

19. Click the Apply button to save all of the Configuration Authentication settings.

20. In the left pane, select the Security folder, then the Remote Authentication Servers subfolder, and then XeroxSecureAccess Settings.

21. In the

Xerox

Secure Access Settings page in the right pane, set the following options:

a. Set Local Login to Enabled (checked) if you want to make the keyboard access button visible.

Note

Although the Local Login setting is optional, ensure that you check this option at first configuration. After first initialization, this option can only be enabled if the device is cleared from all settings (back to the factory defaults).

b. Set Get Accounting Code to Enabled (checked). You must select this option to enable

authentication.

c. Set the Connection Time-Out value to at least 15 seconds, or a larger value to avoid timeout

messages on the MFP.

22. Click Apply to save these settings and to complete the configuration of this MFP

23. Click Reboot Machine, then close the web browser.

2-6 Setup Guide

Embedded for Xerox EIP MFP Configuration

WorkCentre 56xx Series

You must configure the WorkCentre 56xx series MFP from both the MFP Console and via the Internet Services interface. Before you perform the configuration, ensure that Custom Services is installed on the MFP.

Locating Custom Services

1. Open a Web browser and enter the URL http://<MFP IP address> in the Address field.

2. Select the Properties tab, and login with your Administrator user ID and password when prompted.

3. In the left pane, click the General Setup folder, then select the Custom Services Setup subfolder.

•If it says Configured beside Custom Service Registration the option is enabled.

•If it says Not Configured, click the Configure button and click the Custom Services Registration

option. Click the Save button.

4. In the Enable Custom Services section, select the Display Custom Services Section button at the local user interface option.

5. In the Browser Settings section, select the Enable the Custom Services Browser option. If you do not enable this option, nothing will happen when you press the button.

Caution

If the services are not installed, contact

6. In the right pane, ensure that Custom Services is set to Enabled, then click Apply. The Custom Services button should now be present on the MFP user interface when All Services is selected.

Xerox

regarding custom services installation.

Setup Guide 2-7

MFP Configuration Embedded for Xerox EIP3

On the MFP Console

1. Log into the To ol s menu with your Administrator user ID and password.

2. Touch All Services. Ensure that you can see the Custom Services button. If not, power off/on the MFP and wait until the MFP is ready.

3. Touch Access and Accounting.

4. Touch Authentication Mode.

5. Under Network Accounting, touch the On option to enable Network Accounting. Ensure that all other authentication options are disabled. Touch Save.

6. Return to the Access and Accounting menu, then touch Network Accounting Setup.

7. Touch Network Accounting Authentication.

8. Exit the Tools screen, and return to copy mode. Configuration on the MFP console is now complete.

Via the Internet Services Interface

1. Open a Web browser and enter the URL http://<MFP IP address> in the Address field.

2. Select the Properties tab, and login with your Administrator user ID and password when prompted.

3. In the left pane, click the Security folder, then select Authentication Configuration.

4. In the Where is the information located section, select Xerox Secure Access from the Device User Interface Authentication drop-down list, and the click Next.

2-8 Setup Guide

Embedded for Xerox EIP MFP Configuration

Note

If the MFP device is in Sleep mode, click the Exit Sleep Mode button to wake the device.

5. Click the Edit button beside the Access Setup Wizard option.

6. In the Pathway Services section, select the services you want to control access to, then click Save.

7. In the Installed Services Pathway Access section, select Locked under Services Pathway and click the Finished button to lock everything on the device. To lock only certain features, leave Services Pathway set to Unlocked and click the Next button. Select the services you want to control access to, then click Save.

• Unlocked - the service appears on the control panel and is accessible without authentication.

• Locked - the service appears on the MPF control panel, but cannot be accessed without

authentication.

• Hidden - the service does not appear on the control panel.

Setup Guide 2-9

MFP Configuration Embedded for Xerox EIP3

8. Still on the Authentication Configuration page, click the Edit button beside the Device User Interface Authentication option.

9. Click the Manual Override Settings button at the bottom of the page

10. Under Device Log In Methods, select the preferred method:

•

Xerox

Secure Access Device Only – if you do not want people to use the alternate key board login

button to enter their user ID

•

Xerox

Secure Access Device + alternate on-screen authentication method – if you want people to

also be able to use the alternate key board login button to enter their user ID

11. Under Accounting Information (Requires Network Accounting), select Automatically apply Accounting Codes from the server. This prevents additional unnecessary authentication prompts.

12. Click the Save button.

13. Logout of the MFP’s configuration utility and close the web browser.

2-10 Setup Guide

Embedded for Xerox EIP MFP Configuration

WorkCentre 75xx Series

The WorkCentre 75xx series MFPs utilize the Job Limits functionality to support Copy Stop enforcement. The MFP scans the copy job, collects the job information in a JBA (Job-based Accounting) style record and sends it to the server for approval. The server approves or rejects the job depending upon the funds available, color quotas, and copy/print rules. The user balance is updated as each job is copied. The Copy Stop is enforced at the start or during the session.

You must configure the WorkCentre 75xx series MFP from both the MFP Console and via the Internet Services interface. Before you perform the configuration, ensure that Custom Services is installed on the MFP.

Setup Guide 2-11

MFP Configuration Embedded for Xerox EIP3

Locating Custom Services

Xerox

EIP cannot be configured unless Custom Service is installed on the MFP. To determine if custom

services is installed on a WorkCentre 75xx series, perform these steps:

1. Open a Web browser and enter the URL

2. Select the Properties tab, and login with your Administrator user ID and password when prompted.

3. In the left pane, select the General Setup folder, then select Extensible Service Setup.

4. Click the Edit button beside the Extensible Service Registration option.

http://<MFP IP address> in the Address field.

5. Click on Enable All, then click Save. The Custom Services button should now be present on the MFP user interface when All Services is selected.

If you cannot access or locate these options, contact

Xerox

regarding correct installation of Custom Services.

2-12 Setup Guide

Embedded for Xerox EIP MFP Configuration

On the MFP Console

1. Log into the To ol s menu with your Administrator user ID and password.

2. Touch All Services. Ensure that you can see the Custom Services button. If not, power off/on the MFP and wait until the MFP is ready.

3. Enter the user name and password.

4. On the Machine Status screen, touch the Tools tab.

5. Touch Accounting Settings > Accounting Mode.

6. On the Accounting Mode screen, touch Network Accounting, then touch Customize Prompts.

7. On the Customize User Prompts screen, touch Display Prompt 1 and 2, then touch Save. Failure to set this option causes transactions to be recorded against “Unidentified user”.

8. Set Code Entry Validation to Disabled.

9. Touch the Save button again to save all changes, then log off the MFP Console. Configuration at the console itself is now complete. You now need to complete the rest of the configuration via the web interface.

Setup Guide 2-13

MFP Configuration Embedded for Xerox EIP3

Via the Internet Services Interface

1. Open a Web browser and enter the URL http://<MFP IP address> in the Address field.

2. Select the Properties tab, and login with you User ID and Password when prompted.

3. In the left pane, click the General Setup folder, then select Extensible Service Setup.

4. Click the Edit button beside the HTTP (SSL) option.

5. Set the Secure HTTP (SSL) option to Enabled, then click Save.

6. Click the Edit button beside the Extensible Service Registration option.

2-14 Setup Guide

Embedded for Xerox EIP MFP Configuration

7. Click Enable All, then click Save.

Ensure that both Authentication & Accounting Configuration and Job Limits are enabled. They are enabled by default. These services must be enabled via the Internet Services interface—not through the physical device.

If these services are not enabled, errors occur when initializing the

Xerox

embedded device in System

Manager, causing the Copy Stop feature to not work.

Setup Guide 2-15

MFP Configuration Embedded for Xerox EIP3

Note

Job Limits is not supported on all

Xerox

devices.

8. In the Browser Settings section on the Extensible Service Setup page, select the Enable the Extensible Services Browser checkbox. and click Apply.

9. In the left pane, click the Security folder, then the Authentication subfolder, and then Setup.

10. On the

Xerox

Access Setup page, click the Edit button to change the Authentication method.

Note

If the copier has not been previously configured, you may need to click the Next button (instead of Edit) and then work through a wizard to configure the copier.

11. On the Authentication, Authorization and Personalization page, do the following:

2-16 Setup Guide

Embedded for Xerox EIP MFP Configuration

a. Select Xerox Secure Access Unified ID System from the Authentication method on the machine’s

touch interface drop-down list.

b. Select User Name/Password Validated Locally on the

Xerox

Machine from the Authentication

method on the machine’s web user interface drop-down list.

c. Select Locally on the

Xerox

Machine from the Authorization information is stored drop-down list.

d. Click Save to apply the changes.

12. On the

Xerox

Access Setup page, click the Edit button beside the

Xerox

Secure Access Setup option

under Configuration Setting.

13. On the

Xerox

Secure Access Setup page, click the Manually Override Settings button.

14. On the Manual Override page, set the following:

a. In the Server Communication section, set the Embedded option to Enabled.

Note

The Embedded option must be Enabled on

Xerox

MFPs running EIP firmware version 1.5 or 2.0 in

order for the attached card reader to operate normally.

b. In the Device Log In Methods section, select the preferred method.

c. In the Accounting Information section, select Automatically apply Account Codes from the

server.

Setup Guide 2-17

MFP Configuration Embedded for Xerox EIP3

15. Click Save to apply the changes, then click Close.

16. Click Close again on the

Xerox

Secure Access Setup page to return to the main Authentication

Configuration page.

17. Click the Edit button beside the Service Registration option.

18. Select the services you want users to access, then click Save.

19. In the left pane, click the Security folder, then the Authentication subfolder, and then Tools & Feature Access.

2-18 Setup Guide

+ 68 hidden pages