Common Development and Distribution License 1.0 . . . . . . . . . . . . . . . . . . . A-12
ivSetup Guide
1
Introduction
To pi c s
About User Authentication
Xerox ECSP Features
Installation and Configuration Requirements
System Requirements
Supported MFPs
Supported Card Readers
Additional Documentation
List of Terms
The
Xerox Secure Access
and secure printing on
application controls access to the MFP, valid account information is required before the MFP will unlock and
be ready for use. Account information must be provided in the form of a supported ID card, personal
identification numbers (PINs), or Windows credentials based on authentication settings on the server.
for
Xerox
Embedded Capture Send and Print (ECSP) application provides copy control
Xerox
manufactured multi-functional printers (MFPs). Embedded on the MFP, the
Xerox ECSP communicates with the print tracking and accounting application on your network to validate
authentication information. Once successfully logged in, users can securely release print jobs, and use native
device functions through Xerox ECSP. During the copy process, Xerox ECSP collects detailed document
characteristics such as paper sizing, color, duplexing, stapling, or input trays on specific models.
Caution
In order to use the
Xerox Secure Access
document contains instructions and information about
framework. Older model devices may not be able to use these functions. It is the responsibility of your install
technician to determine the class of device before attempting to use this information.
Setup Guide 1-1
Xerox
ECSP application, you must install the Device Web Server (DWS) component for
. See the
Xerox Secure Access
Installation Guide
Xerox
devices that can leverage the Xerox ECSP
for information about this component. This
IntroductionEmbedded for Xerox ECSP
About User Authentication
Xerox Secure Access provides the ability to control access to the print, and copy functions of
Multifunction printer (MFP) devices. When a user approaches an
enter user credentials either by using a card, or manually entering data on the MFP front panel. The MFP
front panel is unlocked only when the user’s account information is authenticated by the accounting server.
The
Xerox Secure Access
user wants to use the copy, or fax functionality on a MFP, they must log in using either a swipe card or by
entering credentials on the soft keyboard. A swipe or proximity read initiates an access request. The login
data is sent to the DWS, which brokers communication with an
(DCE). At this time, the DWS and DCE must reside on the same server. The DCE then contacts the Core
Accounting Server (CAS) to verify the user account data associated with the card. Once authenticated, the
device unlocks. This process is depicted below.
Device Web Server (DWS) handles all communication with the MFP devices. When a
Xerox Secure Access
Xerox Secure Access
-controlled device, they
Device Control Engine
Xerox
1-2 Setup Guide
Embedded for Xerox ECSPIntroduction
Xerox ECSP Features
Xerox ECSP is a robust application that provides additional functionality beyond print and copy control. This
version of Xerox ECSP supports the following features:
•Follow-You Printing® - After successful login at the MFP, the user can access the virtual print queue to
"pull" a print job to this device. Through the Follow-You screen on the MFP, users can view documents in
the queue, then select, delete, or release documents for printing. See Enabling Secure Printing on the
Queue on page 10 for configuration instructions, and Using Follow-You Printing® on page 5 for end-user
instructions.
•Card self-registration - Allows users to associate an unassigned card with their user credentials. Once
associated, each time the user swipes the card, the system automatically recognizes the card and
associated user. See Configuring Card Self-Registration on page 14for instructions.
•Configuration - All installation and configuration tasks can be accomplished easily to configure Xerox
ECSP. See Installation and Configuration Requirements on page 3, and Server-Side Configuration on
page 1.
Installation and Configuration Requirements
If you have already set up and configured your Xerox Secure Access server and also installed the DWS
component, you do not need to install the basic Xerox Secure Access application; you only need to follow
configuration procedures.
For instructions on installing and configuring Xerox Secure Access, see the
System® Installation Guide
Before configuring Xerox Secure Access, ensure you have Administrative access to
Manager. For details, see
Guide
.
and the
Xerox Secure Access Administration Guide.
Configuring Administrative Access
in the
Xerox Secure Access Administration
Xerox Secure Access Unified ID
Xerox Secure Access
System
Licensing, Server, and MFP Requirements
To enable the
•Xerox Secure Access Software
Xerox Secure Access requires configuration of the MFPs and
(CAS). For detailed information about setting up and configuring
Access Unified ID System® Installation Guide
•One embedded license per Xerox MFP
Each
example, if you plan to control 20
(enabled for
CAS.
•ECSP-enabled Xerox MFPs
Visit http://www.nuance.com/for-business/by-product/equitrac/supported-devices/xerox/index.htm for a
list of supported MFP models.
Xerox Secure Access
Xerox
Device requires an embedded license applied in the
Xerox
). See Licensing Embedded Devices on page 2 for instructions on adding licenses to the
Embedded solution, you must obtain the following:
.
Xerox
MFPs, you need to obtain 20 corresponding embedded licenses
Xerox Secure Access
Xerox Secure Access
Xerox Secure Access
core accounting server
see the
System Manager. For
Xerox Secure
Setup Guide1-3
IntroductionEmbedded for Xerox ECSP
•One Network Accounting Enablement Option per
Only required if you are tracking copy or fax usage through
track printing if you are using
This licensable device option obtained from
server fax and copy usage for each account.
•Open communications between the
To enable communication between the MFP and the server, copier access to the server requires ports
2939, 8080 and 8443.
Xerox Secure Access
Xerox
MFP and the DWS
Xerox
printer ports.
Xerox
enables the
MFP
Xerox
Secure Access. This is NOT required to
Xerox
MFP to automatically track print,
System Requirements
To review the system requirements for the machine or machines hosting the
components (Core Accounting Server Device Web Server, and Device Control Engine), see the
Access Unified ID System® Installation Guide
.
Xerox Secure Access
server
Xerox Secure
Supported MFPs
For a list of Xerox Secure Access supported MFP models, visit http://www.nuance.com/for-business/by-
All card readers are preconfigured from the manufacturer and require no further configuration.
Magstripe Device Reader
Xerox Secure Access supports external magnetic stripe reader devices. Users can enter validation data by
swiping an encoded magnetic card through the card reader. The reader reads virtually any standard
magnetic card medium on track 2, and accepts standard or custom encoded data.
Proximity Cards
Xerox Secure Access supports HID proximity cards. Users can enter validation data by passing the card within
about one inch of the card reader.
1-4 Setup Guide
Embedded for Xerox ECSPIntroduction
Additional Documentation
You may need to refer to one of the following documents when performing server-side configuration tasks.
These documents are located on the product CD, and are installed automatically with any server-side
component in the Program Files\
appropriate combination of product variables to support the needs of
your institution or organization.
Xerox Secure Access
Xerox Secure Access
Installation GuideUse this guide to perform an initial installation or upgrade.
Administration GuideAfter installing
options for use on your campus or in your organization.
Xerox Secure Access
Xerox Secure Access
, use this guide to select the
, use this guide to configure advanced
List of Terms
The following unique terms are used within this guide.
Te rmDescription
Alternate Primary PINA sequence of personal identification numbers that uniquely identifies a user who wants to
release a print job. The alternate primary PIN can be data encoded on a magnetic swipe
card or entered into an MFP keypad.
AuthenticationThe process of entering a primary and optional secondary personal identification number to
gain access to a controlled MFP. Users can authenticate via a card reader, or through the
MFP control panel.
Core Accounting Server
(CAS)
Convenience
Authentication
Device Control Engine
(DCE)
Document Routing
Engine
(DRE)
Device Web Server (DWS) A core component of
Setup Guide1-5
The Core Accounting Server is a core component of Xerox Secure Access. This service
controls the accounting database that stores all printer, user, transaction and balance
information. The CAS also verifies users, calculates printing charges and assigns charges to
an appropriate user.
Xerox
protocol that enables communication between the Authentication Device and the
A
server to verify user information gathered user interaction at an MFP.
A core component of Xerox Secure Access, the DCE communicates with terminals that
control access to MFPs.
A core component of Xerox Secure Access, the DRE enables document flow from
workstations to output devices. When a job is released, the DRE captures the job
characteristics and communicates the characteristics to the CAS.
Xerox Secure Access
communication between a
Xerox
, the DWS acts as a virtual web server, and brokers
MFP and the Device Control Engine (DCE).
IntroductionEmbedded for Xerox ECSP
Te rmDescription
Follow-You PrintingAn secure printing feature that holds print jobs in a virtual print queue until the user “pulls”
the print job to a selected device. A user can select a particular printer when they submit a
print request, then walk to an entirely different compatible MFP and pull the job to that
device.
Follow-You Printing
screen
Multi-server
Follow-You
Network AccountingA feature of the
Print TrackingThe ability to track the attributes of a released network print job. For example, number of
Primary PINA sequence of numbers that act as a user ID to uniquely identify a user. The primary PIN
Secondary PINA sequence of numbers that act as a password when used in conjunction with a Primary
An application on the MFP when the Follow-You Printing extension is configured. Users can
select one or more jobs from different print servers.
A secure printing feature that extends the Follow-You functionality to allow users to view
and release secure print jobs from different print servers.
Xerox
MFP which automatically tracks print, server fax and copy usage for
each user. Network accounting is run over a network and the accounting transactions are
collected remotely by Xerox Secure Access server software.
pages, page size, color, etc. You can configure Xerox Secure Access to track printing through
the embedded device or through an
can be entered on the MFP keypad.
PIN. After entering the Primary PIN, the user must enter the Secondary PIN code on a MFP
keypad before accessing the device or applications. Secondary PINs are an optional
configuration.
Equitrac
Port.
1-6 Setup Guide
2
MFP Configuration
To pi cs
Configuring MFP Properties
WorkCentre 57xx Series
WorkCentre 75xx Series
WorkCentre 58xx, 72xx, and 78xx Series
ColorQubeTM 93xx, 92xx or 89xx Series
To enable Xerox Secure Access, you must configure any MFP that will use it. Follow the steps for each MFP
series in the order they are presented to ensure a successful install.
Configuring MFP Properties
The following are the main steps when configuring
1.Ensure that the time zone on the MFP is correct. If the time zone is not correct, transaction times are
incorrectly reported.
2.Confirm that the date and time setting on the MFP is within 24 hours of the date and time configured
on the server that hosts the DCE component. If the settings are more than 24 hours apart, the
Embedded application on the MFP will not connect to the server.
3.Configure the MFP to use
4.Ensure that the SNMPv2 settings on the device are correct. Read-only (Get) and Read and Write (Set)
community names must be configured as public and private respectively. Note that all characters must
be entered in lower case. Also ensure that these SNMP settings are enabled in System Manager > Configuration > Network environment > SNMP configuration.
5.Ensure SSL is enabled on the
enable SSL communication.
Xerox
Convenience Authentication and to communicate with the DWS Server.
Xerox
MFP. If it is not enabled, generate a self-signed certificate and then
Xerox
MFPs:
Setup Guide 2-1
MFP ConfigurationEmbedded for Xerox ECSP
WorkCentre 57xx Series
You must configure the WorkCentre 57xx series MFP from both the MFP Console and via the Internet
Services interface. Before you perform the configuration, ensure that Custom Services is installed on the MFP.
Locating Custom Services
Xerox
ECSP cannot be configured unless Custom Service is installed on the MFP. To determine if custom
services is installed on a WC57xx series, perform these steps:
1.Open a Web browser and enter the URL
2.Select the Properties tab, and login with your Administrator user ID and password when prompted.
3.In the left pane, select the General Setup folder, then select Custom Service Setup.
4.Click the Edit button beside the Custom Service Registration option.
http://<MFP IP address> in the Address field.
2-2 Setup Guide
Embedded for Xerox ECSPMFP Configuration
5.Click on Enable All, then click Save. The Custom Services button should now be present on the MFP user
interface when All Services is selected.
Xerox
If you cannot access or locate these options, contact
regarding correct installation of Custom Services.
On the MFP Console
1.Log into the Tools menu with your Administrator user ID and password.
2.Touch All Services. Ensure that you can see the Custom Services button. If not, power off/on the MFP
and wait until the MFP is ready.
3.Enter the user name and password.
4.On the Machine Status screen, touch the Too ls tab.
5.Touch Accounting Settings > Accounting Mode.
6.On the Accounting Mode screen, touch Network Accounting, then touch Customize Prompts.
7.On the Customize User Prompts screen, touch Display Prompt 1 and 2, then touch Save. Failure to set
this option causes transactions to be recorded against “Unidentified user”.
8.Set Code Entry Validation to Disabled.
9.Touch the Save button again to save all changes, then log off the MFP Console. Configuration at the
console itself is now complete. You now need to complete the rest of the configuration via the web
interface.
Setup Guide2-3
MFP ConfigurationEmbedded for Xerox ECSP
Configuration Via the Internet Services Interface
1.Open a Web browser and enter the URL http://<MFP IP address> in the Address field.
2.Select the Properties tab, and login with your User ID and Password when prompted.
3.In the left pane, click the General Setup folder, then select Custom Service Setup. The Custom Service Setup screen displays:
4.Click the Edit button beside the HTTP (SSL) option.
5.Ensure the Secure HTTP (SSL) option to Enabled (it is by default), then click Save to return to the Custom Service Setup screen.
6.Click the Edit button beside the Custom Service Registration option.
2-4 Setup Guide
Embedded for Xerox ECSPMFP Configuration
7.Click Enable All, then click Save.
Setup Guide2-5
MFP ConfigurationEmbedded for Xerox ECSP
Note
Ensure that both Authentication & Accounting Configuration and Job Limits are enabled. They are
enabled by default. These services must be enabled via the Internet Services interface—not through the
physical device. If these services are not enabled, errors occur when initializing the
Xerox
embedded
device in System Manager, causing the Copy Stop feature to not work. Job Limits is not supported on all
Xerox
devices.
8.In the Browser Settings section on the Custom Service Setup page, ensure the Enable the Custom Services Browser check box is selected (it is by default), and click Apply.
9.In the left pane, click the Security folder, then the Authentication subfolder, and then Setup.
10. On the Authentication & Authorization Setup page, click the Edit button to change the Authentication
method.
2-6 Setup Guide
Embedded for Xerox ECSPMFP Configuration
Note
If the copier has not been previously configured, you may need to click the
Next
button (instead of
Edit
and then work through a wizard to configure the copier.
11. On the Authentication, Authorization and Personalization page, do the following:
)
a.Select Xerox Secure Access Unified ID System from the Authentication method on the machine’s
touch interface drop-down list.
b.Select User Name/Password Validated Locally on the
Xerox
Machine from the Authentication
method on the machine’s web user interface drop-down list.
c.Select Locally on the
Xerox
Machine from the Authorization information is stored drop-down list.
d.ClickSave to apply the changes.
Setup Guide2-7
MFP ConfigurationEmbedded for Xerox ECSP
12. On the
Xerox
Secure Access Setup page, click the Manually Override Settings button.
13. On the Manual Override page, set the following:
a.In the Server Communication section, select the Enabled check box under the Embedded option if
you use a standard
Xerox
card reader. If you use a generic card reader, deselect the check box.
Note
The Embedded option must be Enabled on
Xerox
MFPs running ECSP firmware version 1.5 or 2.0 in order
for the attached card reader to operate normally.
b.In the Device Log In Methods section, select the preferred method.
c.In the Accounting Information section, select Automatically apply Account Codes from the
server.
2-8 Setup Guide
Embedded for Xerox ECSPMFP Configuration
14. Click Save to apply the changes, then click Close.
15. Click Close again to return to the Authentication & Authorization Setup page.
16. In the left pane, click the Security > Authentication > Tools & Feature Access.
17. In the Presets section, select the Custom Access option to select the services you want to control access
to.
•Unlocked - the service appears on the control panel and is accessible without authentication.
•Locked - the service appears on the MPF control panel, but cannot be accessed until the user
authenticates.
•Hidden - the service does not appear on the control panel.
18. Click Apply to complete the configuration of this MFP.
19. Logout of the MFP’s configuration utility and close the web browser.
20. From the left pane, navigate to Accounting > Network Accounting. The Accounting screen displays:
Setup Guide2-9
MFP ConfigurationEmbedded for Xerox ECSP
21. From the Accounting Workflow row, click Edit... The Accounting Workflow screen displays:
22. Select Capture Usage from the drop-down list of any service from which you want to record
transactions.
23. Click Save.
2-10 Setup Guide
Embedded for Xerox ECSPMFP Configuration
WorkCentre 75xx Series
You must configure the WorkCentre 75xx series MFPs from both the MFP Console and via the Internet
Services interface. Before you perform the configuration, ensure that Custom Services is installed on the MFP.
Locating Custom Services
Xerox
ECSP cannot be configured unless Custom Service is installed on the MFP. To determine if custom
services is installed on a WorkCentre 75xx series, perform these steps:
1.Open a Web browser and enter the URL http://<MFP IP address> in the Address field.
2.Select the Properties tab, and login with your Administrator user ID and password when prompted.
3.In the left pane, select the General Setup folder, then select Extensible Service Setup.
4.Click the Edit button beside the Extensible Service Registration option.
5.Click Enable All. The Custom Services button should now be present on the MFP user interface when All
Services is selected.
If you cannot access or locate these options, contact
Setup Guide2-11
Xerox
regarding correct installation of Custom Services.
MFP ConfigurationEmbedded for Xerox ECSP
On the MFP Console
1.Log into the Tools menu with your Administrator user ID and password.
2.Touch All Services. Ensure that you can see the Custom Services button. If not, power off/on the MFP
and wait until the MFP is ready.
3.Enter the user name and password.
4.On the Machine Status screen, touch the Too ls tab.
5.Touch Accounting Settings > Accounting Mode.
6.On the Accounting Mode screen, touch Network Accounting, then touch Customize Prompts.
7.On the Customize User Prompts screen, touch Display Prompt 1 and 2, then touch Save. Failure to set
this option causes transactions to be recorded against “Unidentified user”.
8.Set Code Entry Validation to Disabled.
9.Touch the Save button again to save all changes, then log off the MFP Console. Configuration at the
console itself is now complete. You now need to complete the rest of the configuration via the web
interface.
2-12 Setup Guide
Embedded for Xerox ECSPMFP Configuration
Configuration Via the Internet Services Interface
1.Open a Web browser and enter the URL http://<MFP IP address> in the Address field.
2.Select the Properties tab, and login with your User ID and Password when prompted.
3.In the left pane, click the General Setup folder, then select Extensible Service Setup. The Extensible Service Setup screen displays:
4.Click the Edit button beside the HTTP (SSL) option.
5.Ensure the Secure HTTP (SSL) option is set to Enabled (it is by default), then click Save.
6.Click the Edit button beside the Extensible Service Registration option.
Setup Guide2-13
MFP ConfigurationEmbedded for Xerox ECSP
7.Click Enable All, then click Save.
2-14 Setup Guide
Embedded for Xerox ECSPMFP Configuration
Note
Ensure that both Authentication & Accounting Configuration and Job Limits are enabled. They are
enabled by default. These services must be enabled via the Internet Services interface—not through the
physical device. If these services are not enabled, errors occur when initializing the
Xerox
embedded
device in System Manager, causing the Copy Stop feature to not work. Job Limits is not supported on all
Xerox
devices.
8.In the Browser Settings section on the Extensible Service Setup page, ensure the Enable the Extensible Services Browser check box is selected (it is by default). and click Apply.
9.In the left pane, click the Security >Authentication > Setup. The Authentication & Authorization Setup screen displays:
10. Click the Edit button to change the Authentication method.
Setup Guide2-15
MFP ConfigurationEmbedded for Xerox ECSP
Note
If the copier has not been previously configured, you may need to click the
Next
button (instead of
Edit
and then work through a wizard to configure the copier.
11. On the Authentication, Authorization and Personalization page, do the following:
)
a.Select Xerox Secure Access Unified ID System from the Authentication method on the machine’s
touch interface drop-down list.
b.Select User Name/Password Validated Locally on the
Xerox
Machine from the Authentication
method on the machine’s web user interface drop-down list.
c.Select Locally on the
Xerox
Machine from the Authorization information is stored drop-down list.
d.Click Save to apply the changes.
2-16 Setup Guide
Embedded for Xerox ECSPMFP Configuration
12. On the
Xerox
Access Setup page, click the Edit button beside the
under Configuration Setting.
13. On the
Xerox
Secure Access Setup page, click the Manually Override Settings button. The Manual
Override screen displays:
Xerox
Secure Access Setup option
Setup Guide2-17
MFP ConfigurationEmbedded for Xerox ECSP
14. On the Manual Override page, set the following:
a.In the Server Communication section, select the Enabled check box under the Embedded option if
you use a standard
Xerox
card reader. If you use a generic card reader, deselect the check box.
Note
The Embedded option must be Enabled on
Xerox
MFPs running ECSP firmware version 1.5 or 2.0 in
order for the attached card reader to operate normally.
b.In the Device Log In Methods section, select the preferred method.
c.In the Accounting Information section, select Automatically apply Account Codes from the
server.
15. Click Save to apply the changes, then click Close.
16. Click Close again on the
Xerox
Secure Access Setup page to return to the main Authentication
Configuration page.
17. Click the Edit button beside the Service Registration option. The Service Registration screen displays.
18. Select the services you want users to access, then click Save.
2-18 Setup Guide
Embedded for Xerox ECSPMFP Configuration
19. In the left pane, click Security > Authentication > Tools & Feature Access. The Tools & Feature Access
screen displays:
20. In the Presets section, select the Custom Access option to select the services you want to control access
to:
•Unlocked - the service appears on the control panel and is accessible without authentication.
•Locked - the service appears on the MPF control panel, but cannot be accessed until the user
authenticates.
•Hidden - the service does not appear on the control panel.
21. Click Apply to complete the configuration of this MFP.
22. From the left pane, navigate to Accounting > Setup. The Accounting screen displays:
Setup Guide2-19
MFP ConfigurationEmbedded for Xerox ECSP
23. From the Accounting Workflow row, click Edit... The Accounting Workflow screen displays:
24. Select Capture Usage from the drop-down list of any service from which you want to record
transactions.
25. Click Save.
2-20 Setup Guide
Loading...
+ 74 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.