More Information ............................................................................................................................................................. 11
2. Initial Setup 13
Physically Connecting the Printer .............................................................................................................................. 14
Assigning a Network Address ...................................................................................................................................... 15
Accessing Administration and Configuration Settings ..................................................................................... 16
Accessing the Control Panel as a System Administrator ......................................................................... 16
Accessing CentreWare Internet Services as a System Administrator ................................................ 16
Initial Setup at the Control Panel ...................................................................................................................... 17
Initial Setup in CentreWare Internet Services ...................................................................................................... 18
Accessing CentreWare Internet Services ........................................................................................................ 18
Assigning a Printer Name and Location ......................................................................................................... 18
Printing the Configuration Report ..................................................................................................................... 18
Restricting Access to the Printer ......................................................................................................................... 19
Using the Configuration Page ............................................................................................................................. 19
Selecting Services to Appear on the Touch Screen .................................................................................... 19
Changing the System Administrator Password ................................................................................................... 20
Raw TCP/IP Printing ......................................................................................................................................................... 31
Configuring Raw TCP/IP Settings ...................................................................................................................... 31
LDAP Server ......................................................................................................................................................................... 33
Editing LDAP Server Information ....................................................................................................................... 33
Adding or Editing an LDAP Server ..................................................................................................................... 35
Enabling HTTP at the Control Panel ................................................................................................................. 37
Configuring HTTP Settings in CentreWare Internet Services ................................................................ 37
Enabling or Disabling HTTP Web Services ..................................................................................................... 38
Proxy Server ......................................................................................................................................................................... 39
Configuring the Proxy Server ............................................................................................................................... 39
Connecting to a Wireless Network Using the Wireless Install Wizard ....................................................... 44
Connecting to a Wireless Network Manually ........................................................................................................ 45
Configuring the Printer for Wireless LAN WPA-Enterprise ...................................................................... 45
Configuring the Printer for Open System ....................................................................................................... 46
Configuring the Printer for Shared Key or WPA/WPA2-Personal ......................................................... 46
Configuring Wi-Fi Direct ................................................................................................................................................ 47
4. Security 49
Setting Access Rights ...................................................................................................................................................... 50
Setting the Login Method .....................................................................................................................................
Creating a Passcode ................................................................................................................................................ 57
About User Permissions .................................................................................................................................................. 58
Configuring User Roles ........................................................................................................................................... 58
®
Enabling Xerox
Standard Accounting ................................................................................................................... 59
Configuring the Log Out Confirmation Screen .................................................................................................... 60
FIPS 140-2 ........................................................................................................................................................................... 62
Enabling FIPS 140 Mode and Checking for Compliance ......................................................................... 62
IP Filtering ............................................................................................................................................................................ 63
Enabling IP Filtering ................................................................................................................................................ 63
Managing the Audit Log ................................................................................................................................................ 64
Configuring 802.1X in CentreWare Internet Services ............................................................................... 66
System Timeout ................................................................................................................................................................ 68
Setting System Timeout Values ......................................................................................................................... 68
Overwriting Image Data ................................................................................................................................................ 69
USB Port Security .............................................................................................................................................................. 71
Enabling or Disabling USB Ports ......................................................................................................................... 71
Displaying or Hiding Network Settings .................................................................................................................... 72
Machine Digital Certificate .................................................................................................................................. 73
Installing a Trusted CA Certificate .................................................................................................................... 74
Printing from a Linux Workstation .................................................................................................................... 83
Adding the Printer .................................................................................................................................................... 83
Printing with CUPS ................................................................................................................................................... 83
Print from USB ................................................................................................................................................................... 85
Enabling Print from USB ........................................................................................................................................ 85
Setting the Delete Held Job After Timer ................................................................................................................. 86
6. Copying 87
Changing the Default Copy Settings ....................................................................................................................... 88
Specifying Default Copy Settings in CentreWare Internet Services ................................................... 88
Setting Defaults for Covers at the Control Panel ........................................................................................ 88
Setting Defaults for Transparency Separators at the Control Panel .................................................. 88
Changing the Feature Order on the Control Panel .................................................................................... 89
Showing, Locking, and Hiding Copy Features on the Control Panel ................................................... 89
Managing User Presets at the Control Panel ................................................................................................ 89
Changing the Paper Supply Auto Select Policy at the Control Panel ................................................. 90
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 5
Contents
Reducing or Enlarging Presets on the Control Panel ................................................................................. 90
Limiting Access to Copying ........................................................................................................................................... 91
Managing Access to 1-Touch Services and Presets ............................................................................................ 92
Specifying ID Card Copy Settings ............................................................................................................................. 93
7. Scanning 95
Scanning to an Email Address ..................................................................................................................................... 96
Configuring Template Pool Refresh ................................................................................................................ 105
Configuring a Validation Server ....................................................................................................................... 106
Scan to USB ....................................................................................................................................................................... 111
Enabling Scan to USB ........................................................................................................................................... 111
Scanning to a User Home Folder ............................................................................................................................. 112
Enabling Remote Scanning using TWAIN ............................................................................................................ 114
Configuring Scan To Destination ............................................................................................................................. 115
Before You Begin .................................................................................................................................................... 115
LAN Fax ............................................................................................................................................................................... 127
9. Accounting 129
6 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Contents
Xerox® Standard Accounting ..................................................................................................................................... 130
®
Enabling Xerox
Standard Accounting ......................................................................................................... 130
Setting Service Tracking Options ..................................................................................................................... 131
Adding a User and Setting Usage Limits ...................................................................................................... 131
Assigning Users to an Account ......................................................................................................................... 132
Configuring Validation Policies and Print Job Exceptions ..................................................................... 137
Enabling Accounting in Print Drivers ...................................................................................................................... 138
Enabling Accounting in a Windows Print Driver ........................................................................................ 138
Enabling Accounting in a Windows Print Driver ........................................................................................ 138
Enabling Accounting in an Apple Macintosh Print Driver...................................................................... 139
10. Administrator Tools 141
Monitoring Alerts and Status ..................................................................................................................................... 142
Energy Saving Settings ................................................................................................................................................. 143
Setting the Power Saver Mode Timers in CentreWare Internet Services ....................................... 143
Smart eSolutions and Billing Information ........................................................................................................... 145
Device Address Book ............................................................................................................................................. 149
Network Address Book .......................................................................................................................................... 153
LAN Fax Address Book .......................................................................................................................................... 153
Font Management Utility ........................................................................................................................................... 154
Customizing Printer Contact Information ........................................................................................................... 155
Xerox Online Support .................................................................................................................................................... 156
Displaying Xerox Online Support ..................................................................................................................... 156
Restarting the Printer in CentreWare Internet Services ................................................................................. 157
Resetting the Printer to Factory Default Settings............................................................................................. 158
Updating the Printer Software .................................................................................................................................. 159
Determining the Printer Software Version ................................................................................................... 159
• More Information ................................................................................................................................................................ 11
®
Xerox
System Administrator Guide
WorkCentre® 4265 Multifunction Printer 9
Introduction
Overview
This guide is designed for a system administrator with network administrator rights who understands
networking concepts and has experience creating and managing network user accounts.
Use this guide to help you install, configure, and manage your printer on a network.
Notes:
• Network features are not available when you are connected over USB.
• Embedded fax features are not available for all printer models.
Configuration Steps
When you configure the printer for the first time, complete the following tasks.
1. Connect your printer to a network with an Ethernet cable.
2. Confirm that your network recognizes your printer. By default, the printer receives an IP address
from a DHCP server over a TCP/IP network. If you have a different type of network or want to assign
a static IP address, see TCP/IP on page 22.
3. Complete the installation wizard that launches automatically the first time the printer powers on.
The installation wizard helps you configure basic printer settings such as your location, time zone,
and date and time preferences.
4. To view the new IP address and ensure that the connection is successful, print a Configuration
Report. For details, see Configuration Report on page 18.
5. To access CentreWare Internet Services, open a Web browser, then type the IP address for your
printer. CentreWare Internet Services is the administration and configuration software installed on
the embedded Web server in the printer. It allows you to configure and administer the printer from
a Web browser. For details, see Accessing CentreWare Internet Services on page 16.
Note: You can access most configuration settings in CentreWare Internet Services on the Properties
tab.
6. Print the Configuration Checklist. The Configuration Checklist provides space for you to write down
important information as you go through the configuration process. Use it to record information
about your network settings, including passwords, network paths, and server addresses.
7. Configure authentication. For details, see Setting Up Access Rights on page 50.
8. Configure Security. For details, see Security on page 49.
9. Enable services in CentreWare Internet Services. For details, see User Permissions on page 58.
10. Configure Print, Copy, Scan, and Fax features. For details, see Printing on page 75, Copying on page
87, Scanning on page 95, and Faxingon page 117.
11. Configure Accounting. For details, see Accountingon page 129.
Note: Not all printer models support these features.
10 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
More Information
You can obtain more information about your printer from these sources:
Resource Location
Introduction
Installation Guide
Other documentation for your printer www.xerox.com/office/WC4265docs
Technical support information for your printer;
including online technical support, Online Support
Assistant, and driver downloads.
Information about menus or error messages
Information Pages Print from the control panel, or from CentreWare
CentreWare Internet Services documentation
Order supplies for your printer www.xerox.com/office/WC4265supplies
A resource for tools and information, including
interactive tutorials, printing templates, helpful tips,
and customized features to meet your individual
needs.
Local sales and support center www.xerox.com/office/worldcontacts
Internet Services, click Status > Information Pages.
In CentreWare Internet Services, click Help.
www.xerox.com/office/businessresourcecenter
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 11
2
Initial Setup
This chapter includes:
• Physically Connecting the Printer ................................................................................................................................. 14
• Assigning a Network Address .......................................................................................................................................... 15
• Accessing Administration and Configuration Settings ........................................................................................ 16
• Initial Setup in CentreWare Internet Services ......................................................................................................... 18
• Changing the System Administrator Password ....................................................................................................... 20
®
Xerox
System Administrator Guide
WorkCentre® 4265 Multifunction Printer 13
Initial Setup
Physically Connecting the Printer
1. Connect the power cord to the printer, and plug it into an electrical outlet.
2. Connect one end of a Category 5 or better Ethernet cable to the Ethernet port on the back of the
printer. Connect the other end of the cable to a correctly configured network port.
3. If your printer has fax installed, connect it to a correctly configured telephone line.
4. Turn on the printer.
14 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Initial Setup
Assigning a Network Address
The printer acquires a network address automatically from a DHCP server by default. To assign a static
IP address, configure DNS server settings. To configure other TCP/IP settings, see TCP/IP on page 22.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 15
Initial Setup
Accessing Administration and Configuration
Settings
You can access the administration and configuration settings from the Tools tab on the control panel or
from the Properties tab in CentreWare Internet Services. The control panel consists of a touch screen and
buttons you press to control the functions available on the printer. CentreWare Internet Services is the
administration and configuration software installed on the embedded Web server in the printer. It allows
you to configure and administer the printer from a Web browser.
The administrator password is required when accessing locked settings in CentreWare Internet Services
or at the control panel. Most printer models have a default configuration that restricts access to some
settings. Access is restricted for settings on the Properties tab in CentreWare Internet Services, and
settings on the Tools tab on the control panel touch screen.
Accessing the Control Panel as a System Administrator
1. At the printer control panel, press the Log In/Out button.
2. Type admin and touch Next.
3. Type the administrator password, then touch Done. The default password is 1111.
Accessing CentreWare Internet Services as a System Administrator
Before you begin:
•Locate your printer IP address using the Configuration Report. For details, see Printing the
Configuration Report on page 18.
•Ensure that TCP/IP and HTTP are enabled. If you disabled either of these protocols, enable them at
the control panel before accessing CentreWare Internet Services.
•Many features in CentreWare Internet Services require an administrator user name and password.
The system administrator user name is admin and the default password is 1111.
Accessing CentreWare Internet Services
At your computer, open a Web browser, in the address field, type the IP address of the printer, then press
Enter or Return.
16 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Initial Setup
Initial Setup at the Control Panel
Installation Wizard
The Installation wizard starts the first time you turn on the printer. The wizard prompts you with a series
of questions to help you configure basic printer settings.
Note: You can change these settings at any time.
For details, see the User Guide for your printer.
Setting Altitude Adjustment
Atmospheric pressure, determined by altitude, can affect print quality. If the printer is located at an
elevation greater than 8000 feet or 2436 meters, to improve print quality, you can use Altitude
Adjustment.
To set Altitude Adjustment:
1. At the printer control panel, press the Machine Status button.
CentreWare Internet Services is the administration and configuration software installed on the
embedded Web server in the printer. It allows you to configure and administer the printer from a Web
browser.
Before you begin:
•TCP/IP and HTTP must be enabled to access CentreWare Internet Services. If you disable either of
these services, enable them at the printer before accessing CentreWare Internet Services.
•Locate your printer IP address using the Configuration Report.
Note: If your printer is locked, type the system administrator user name and password to access the
Properties tab. The administrator user name is admin and the default password is 1111.
Accessing CentreWare Internet Services
At your computer, open a Web browser, in the address field, type the IP address of the printer, then press
Enter or Return.
Assigning a Printer Name and Location
The Description page displays the printer model information and product code or serial number. It also
provides a place to assign a name and location to the printer. Asset tags let you enter unique identifiers
for inventory management.
1. In CentreWare Internet Services, click Properties > Description.
2. For Machine Name, type a name for the printer.
3. For Location, type the location of the printer.
®
4. For Customer Asset Tag Number and Xerox
Asset Tag Number, type unique identifiers as needed.
5. To enter a physical location or address for the printer, in the Geo-Location field, enter the
geographic latitude and longitude coordinates in decimal form.
6. Click Apply.
Printing the Configuration Report
The Configuration Report lists all current settings of the printer. A configuration report prints at startup
by default.
1. In CentreWare Internet Services, click Properties > Services.
2. Click Printing > Reports.
3. For Configuration Report, click Print.
18 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Initial Setup
Restricting Access to the Printer
You can lock or unlock the printer by selecting preset services and tools permissions for non-logged-in
users.
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click User Permissions.
3. To configure Guest User roles, click the Pencil icon.
4. To define Access Rights to Services, Pathways, and Tools for Guest User, for Service/Pathway
options, select the radio button.
5. Click Save.
Using the Configuration Page
The Configuration page displays the current configuration. Use the Configuration page to help you
install your printer successfully.
1. In CentreWare Internet Services, click Properties > General Setup > Configuration.
2. To print the configuration report, click Print System Data List.
Selecting Services to Appear on the Touch Screen
Services must be enabled before they can be managed through the Tools and Feature Access page. A
standard service is a service that comes standard with the printer. An extensible service is an optional,
third-party service installed on the printer.
To specify the services to display on the touch screen:
1. In CentreWare Internet Services, click Properties > Services > Display.
2. To select all of the services in the list to appear on the touch screen, click Show All.
3. To hide all of the services in the list so that none appear on the touch screen, click Hide All.
4. To select individual services to appear on the touch screen, for Displayed, select the services that
you want to display.
5. Click Apply.
To rearrange the services on the touch screen, select the service, then click the Move Up or Move Down
arrow.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 19
Initial Setup
Changing the System Administrator Password
Xerox recommends that you change the default system administrator password after you configure the
printer. Be sure to store the password in a secure location. The default password is 1111.
1. In CentreWare Internet Services, click Properties.
2. Click Maintenance > Administrator Password.
3. Type the password, then type the password again to verify.
4. To save the new password, for Select to save new password, select the check box.
• LDAP Server ............................................................................................................................................................................ 33
• Proxy Server ............................................................................................................................................................................ 39
• Configuring the Network Address Manually at the Control Panel .................................................................. 22
• Configuring DNS Settings at the Control Panel ...................................................................................................... 23
• Configuring IP Settings in CentreWare Internet Services .................................................................................. 23
Computers and printers primarily use TCP/IP protocols to communicate over an Ethernet network.
Generally, Macintosh computers use either TCP/IP or the Bonjour protocol to communicate with a
network printer. For Macintosh OS X systems, TCP/IP is preferred. Unlike TCP/IP, however, Bonjour does
not require printers or computers to have IP addresses.
With TCP/IP protocols, each printer and computer must have a unique IP address. Many networks and
cable and DSL routers have a Dynamic Host Configuration Protocol (DHCP) server. A DHCP server
automatically assigns an IP address to every computer and printer on the network that is configured to
use DHCP.
If you use a Cable or DSL router, see the documentation for your router for information on IP addressing.
Enabling TCP/IP
1. At the printer control panel, press the Machine Status button.
2. To access this feature at the control panel, log in as an administrator.
Note: If DHCP is enabled, your DHCP server can provide the following information.
e. Touch Domain Name, then touch the Requested Domain Name field. To type the domain
name, use the touch screen keypad.
f. Touch OK.
g. To close the screen, touch X.
4. Touch DNS Servers.
a. Touch Primary DNS Server, then type the server address. Touch OK.
b. Touch Alternate DNS Server #1, then type the server address. Touch OK.
c. Touch Alternate DNS Server #2, then type the server address. Touch OK.
d. To close the screen, touch X.
Configuring IP Settings in CentreWare Internet Services
If your printer has a valid network address, you can configure TCP/IP settings in CentreWare Internet
Services. For details, see Assigning a Network Address on page 15.
Configuring IPv4
You can use IPv4 or IPv6 in addition to or in place of the other.
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click TCP/IP.
3. For Protocol, select Enabled.
4. For Host Name, type a unique name for your printer.
5. For IP Address Resolution, select an option. Fields that appear depend on the option that you select.
−STATIC disables dynamic addressing and allows you to type a static IP address. Type the
Machine IP Address, Subnet Mask, and Gateway Address.
−BOOTP allows the printer to obtain an IP address from a BOOTP server that does not respond
to DHCP requests.
−DHCP allows your DHCP server to assign an IP address to the printer. Dynamic DNS
Registration is enabled.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 23
Network Connectivity
6. For Domain Name, type the domain name of your authentication server.
7. For DNS Configuration, type the IP address for up to three servers.
8. To send a release request to the DHCP and DNS servers, for Dynamic DNS Registration, select
Enabled. If the servers grant the request, when the printer is turned off, the current IP address and
dynamic DNS name are released.
9. For Zero-Configuration Networking, perform the following steps.
−To configure the printer to assign itself an address if a DHCP server does not provide one, for
Self Assigned Address, select Enabled.
−To allow users to see and connect to the printer using Bonjour, for Multicast DNS, select
Enabled.
10. Click Apply.
Configuring IPv6
IPv6 hosts can automatically configure themselves when connected to a routed IPv6 network using the
Internet Control Message Protocol Version 6 (ICMPv6). ICMPv6 performs error reporting for IP along
with other diagnostic functions. When first connected to a network, a host sends a link-local multicast
router solicitation request for configuration parameters. If suitably configured, routers respond to this
request with a router advertisement packet containing network-layer configuration parameters.
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click TCP/IP.
3. To enable TCP/IPv6, for Protocol, select Enabled.
4. Under Default Dynamic Host Configuration Protocol (DHCP) Settings, select how DHCP operates for
IPv6.
5. To specify an address manually, perform the following steps.
− For Manual Address, select Enabled.
− Select a Router Prefix from the menu, or to populate the prefix for manual entry address, click
Add.
6. To configure DNSv6, perform the following steps.
− Enter a valid IPv6 Domain Name.
− For Primary DNSv6 Server Address, enter an IP address.
− For Secondary DNSv6 Server Address, enter an IP address.
− To enable Dynamic DNSv6 Registration, select Enable.
7. Click Apply.
24 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Network Connectivity
SLP
Printers use Service Location Protocol (SLP) to announce and look up services on a local network without
prior configuration. When SLP is enabled, the printer becomes a Service Agent (SA) and announces its
services to User Agents (UA) on the network using SLP.
Directory Agents (DA) are components that cache services. They are used in larger networks to reduce
the amount of traffic. DAs are optional. If a DA is present, then User Agents (UAs) and System Agents
(SAs) are required to use it instead of communicating directly with the printer.
Configuring SLP
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click SLP.
3. For Protocol, select Enable.
4. For Directory Agent, type the IP address for the Directory Agent (DA) as needed.
−To group services, under Scope 1, 2, and 3, type a name as needed. Printers cannot recognize
services that are in different scopes.
− For Message Type, select an option.
• Multicast: This option routes multicast packets between subnets for service discovery.
• Broadcast: If your network does not support multicast routing, select this option.
5. Under Multicast Radius, type a value from 0 through 255.
6. For Maximum Transmission Unit (MTU), type a value from 484 through 32768.
7. For Registration Lifetime, type a value in hours.
8. Click Apply.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 25
Network Connectivity
SNMP
Simple Network Management Protocol (SNMP) is a set of network protocols designed to allow you to
manage and monitor devices on your network.
You can use the SNMP configuration pages in CentreWare Internet Services to:
• Enable or disable Authentication Failure Generic Traps.
• Enable SNMPv3 to create an encrypted channel for secure printer management.
• Assign privacy, authentication protocols, and keys to Administrative and key user accounts.
• Assign read and write access to User accounts.
• Limit SNMP access to the printer using hosts.
Enabling SNMP
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click SNMP.
3. For Protocol, select Enable.
4. Click Apply.
Configuring SNMP Advanced Settings
You can add, edit, or delete IP and IPX addresses for Network Management workstations that receive
traps from the printer.
Configuring SNMP Advanced Settings
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click SNMP.
3. Click Add IP Address.
4. For IP Trap Destination Address, type the IP address of the host running the SNMP manager that
receives traps.
5. Type the UDP Port Number.
6. To add the traps, perform the following steps.
− Under TRAP Community Name, type a name.
− Select the type of traps that the SNMP manager receives under Traps to be Received.
7. Click Apply.
26 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Network Connectivity
Configuring SNMPv3
SNMPv3 is the current standard version of SNMP defined by the Internet Engineering Task Force (IETF).
It provides three important security features:
• Message integrity to ensure that a packet has not been tampered with in transit
• Authentication to verify that the message is from a valid source
• Encryption of packets to prevent unauthorized access
Configuring SNMPv1/v2c with SNMPv3
SNMP version 1 (SNMPv1) is the initial implementation of the SNMP protocol. SNMPv1 operates over
protocols such as User Datagram Protocol (UDP), IP, and Novell Internet Packet Exchange (IPX).
SNMPv2c includes improvements in performance, confidentiality, and manager-to-manager
communications over SNMPv1, however it uses the simple-community based security scheme of
SNMPv1.
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click SNMPv3.
3. For Allow SNMPv3 with SNMPv1/v2c, select Enable.
4. For SNMPv3, select Enable.
Note: Some options become editable after you enable SNMPv3.
5. For User Name, type the administrative user name for SNMPv3 authentication.
6. For Authentication Password, type a password. The Authentication Password is used to generate a
key used for authentication.
7. For Algorithm, select an encryption checksum algorithm.
8. For Privacy Password, type a password. The Privacy Password is used for encryption of SNMPv3
data. The passphrase used to encrypt the data must match the passphrase on the Server.
Note: Ensure that the passwords are at least eight characters in length. You can include any
characters except control characters.
9. Click Apply.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 27
Network Connectivity
Configuring SSDP
Simple Service Discovery Protocol (SSDP) provides processes to allow network clients with little or no
static configuration to discover network services. SSDP provides multicast discovery, server-based
notification, and discovery routing options.
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click SSDP.
3. For Protocol, select Enable.
4. For Time to Live, type a value for router hops for discovery advertisement.
5. Click Apply.
28 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Network Connectivity
WINS
When running WINS, the printer registers its IP address and NetBIOS Host Name with a WINS server.
WINS allows the printer to communicate using host name only. Using Microsoft Networking removes
significant overhead for systems administrators.
Configuring WINS
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click WINS.
3. For Protocol, select Enable.
4. For Primary Server IP Address, type the IP address for your primary server.
5. For Secondary Server IP Address, enter the IP Address as needed.
Note: If DHCP is configured, WINS IP addresses are overridden.
6. Click Apply.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 29
Network Connectivity
Configuring LPR/LPD
The Line Printer Daemon (LPD) and Line Printer Remote (LPR) protocols provide printer spooling and
network print server functionality for UNIX-based systems, such as HP-UX, Linux, and Macintosh.
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click LPR/LPD.
3. For Protocol, select Enable.
4. Type an LPR/LPD Port Number or use the default port number of 515.
5. Click Apply.
30 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Network Connectivity
Raw TCP/IP Printing
Raw TCP/IP is used to open a TCP socket-level connection over Port 9100, and stream a print-ready file
to the printer input buffer. It then closes the connection either after sensing an End Of Job character in
the PDL or after expiration of a preset timeout value. Port 9100 does not require an LPR request from the
computer or the use of an LPD running on the printer. Raw TCP/IP printing is selected in Windows as the
Standard TCP/IP port.
Configuring Raw TCP/IP Settings
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click Raw TCP/IP Printing.
3. For Protocol, select Enable.
4. Ensure that Port Number is set to 9100.
5. Click Apply.
Enabling Raw TCP/IP Printing at the Control Panel
1. At the printer control panel, press the Machine Status button, then touch the Tools tab.
2. Touch Network Settings > Advanced Settings.
3. Touch Raw TCP/IP-Printing.
4. Touch Enable, then touch OK.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 31
Network Connectivity
Configuring IPP
Internet Printing Protocol (IPP) is a standard network protocol that allows you to print and manage jobs
remotely.
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click IPP.
3. For Protocol, select Enable.
4. Enter additional information as needed.
5. For Secure IPP Connection with SSL/TLS, select Enable.
6. Click Apply.
32 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Network Connectivity
LDAP Server
This section includes:
• Editing LDAP Server Information .................................................................................................................................. 33
• Adding or Editing an LDAP Server ................................................................................................................................. 35
Lightweight Directory Access Protocol (LDAP) is a protocol used to process queries and updates to an
LDAP information directory, on an external server. LDAP can also be used for network authentication and
authorization.
The LDAP Server page displays the current LDAP servers configured for your printer. You can configure a
maximum of nine LDAP servers for your printer.
Note: Before you configure an LDAP server, ensure that Network Authentication is enabled. For
details, see Setting the Login Method on page 51.
Editing LDAP Server Information
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click LDAP Directory.
3. For the Default LDAP Server, click Edit.
4. To configure server information, perform the following steps.
a. Type a Friendly Name. The Friendly Name appears as the default description for the template
when a user scans a job at the control panel.
b. Select the Name or IP Address type. Fields update based on the options that you select.
c. Type the LDAP IP address or host name and port number.
d. Type the appropriately formatted address or host name of your backup server and change the
default port number as needed.
5. To configure LDAP Access, perform the following steps.
a. Enter the Search Directory Root.
Notes:
• It is not necessary to include 'DC=Users' in the Search Directory Root.
• For details on Base DN formatting, see the RFC 2849 - LDAP Data Interchange Format (LDIF)
Technical Specification on the IETF website.
b. For Login Credentials to Access LDAP Server, select an option.
•System: This setting instructs the printer to use specific credentials when the printer
accesses the server.
•Authenticated User: The printer uses the user name and password of the authenticated
user to access the server.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 33
Network Connectivity
6. To configure LDAP Bind, perform the following steps.
a. To specify the Bind Method to connect to the directory server, select an option.
•Simple: This method uses a DN-password combination to authenticate to the directory
server.
•Anonymous: This method does not require authentication to connect to the directory
server.
b. Enter the Login Name.
c. Type the password, then type the password again to verify.
d. To save the new password, click Select to save new password.
e. To append a base DN to the bind, for Append Base DN, select Enable.
f. For Root to append, enter the root directory of the database.
7. To configure Secure LDAP Connection, for Secure LDAP via SSL, select Enable.
8. To configure LDAP Mappings, for each field, select an option.
9. To configure Search Criteria, perform the following steps.
a. For Search Name Order, select an option.
b. Under Maximum Number of Search Results, to define the maximum number of addresses
returned that match search criteria, type a number from 5–100.
c. Select the amount of time that the printer can search before it times out.
d. To enable LDAP Referrals, select Enable.
10. To append an email domain to login credentials, click Enable.
11. For Domain Name, type the domain name for your server.
12. Click Save.
34 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Network Connectivity
Adding or Editing an LDAP Server
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click LDAP Directory.
3. To edit the default LDAP server settings, for LDAP (Default), click Edit.
4. To configure another LDAP server, for Additional LDAP Servers, click Add or Edit.
5. To configure server information, perform the following steps.
a. Type a Friendly Name. The Friendly Name appears as the default description for the template
when a user scans a job at the control panel.
b. Select the Name or IP Address type. Fields update based on the options that you select.
c. Type the LDAP IP address or host name and port number.
d. Type the appropriately formatted address or host name of your backup server and change the
default port number as needed.
6. To configure LDAP Access, perform the following steps.
a. Enter the Search Directory Root.
Notes:
• It is not necessary to include 'DC=Users' in the Search Directory Root.
• For details on Base DN formatting, see the RFC 2849 - LDAP Data Interchange Format (LDIF)
Technical Specification on the IETF website.
b. For Login Credentials to Access LDAP Server, select an option.
•System: This setting instructs the printer to use specific credentials when the printer
accesses the server.
•Authenticated User: The printer uses the user name and password of the authenticated
user to access the server.
7. To configure LDAP Bind, perform the following steps.
a. To specify the Bind Method to connect to the directory server, select an option.
•Simple: This method uses a DN-password combination to authenticate to the directory
server.
•Anonymous: This method does not require authentication to connect to the directory
server.
b. Enter the Login Name.
c. Type the password, then type the password again to verify.
d. To save the new password, click Select to save new password.
e. To append a base DN to the bind, for Append Base DN, select Enable.
f. For Root to append, enter the root directory of the database.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 35
Network Connectivity
8. To configure Secure LDAP Connection, for Secure LDAP via SSL, select Enable.
9. To configure LDAP Mappings, for each field, select an option.
10. To configure Search Criteria, perform the following steps.
a. For Search Name Order, select an option.
b. Under Maximum Number of Search Results, to define the maximum number of addresses
returned that match search criteria, type a number from 5–100.
c. Select the amount of time that the printer can search before it times out.
d. To enable LDAP Referrals, select Enable.
11. To append an email domain to login credentials, click Enable.
12. For Domain Name, type the domain name for your server.
13. Click Save.
36 Xerox
®
WorkCentre® 4265 Multifunction Printer
System Administrator Guide
Network Connectivity
HTTP
Hypertext Transfer Protocol (HTTP) is a request-response standard protocol between clients and servers.
Clients that make HTTP requests are called User Agents (UAs). Servers that respond to these requests for
resources, such as HTML pages, are called Origin Servers. There can be any number of intermediaries,
such as tunnels, proxies, or gateways between User Agents and Origin Servers.
Enabling HTTP at the Control Panel
1. At the printer control panel, press the Machine Status button, then touch the Tools tab.
2. Touch Network Settings > Advanced Settings.
3. Touch HTTP Setting.
4. Touch Enable, then touch OK.
Configuring HTTP Settings in CentreWare Internet Services
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click HTTP.
3. To enable the protocol, for Protocol, select Enabled.
4. For Keep Alive Timeout, enter the time that the printer waits for a response from a connected user
before it terminates the connection. Increasing the Keep Alive Timeout can cause slow connections.
5. Change the Port Number as needed.
Note: If a machine digital certificate is configured, you can edit the following fields.
6. For HTTP Security Mode, select an SSL security option.
7. To allow connections to the device using SSL v3 only, for Require SSL v3, select Enable.
8. Click Apply.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 37
Network Connectivity
Enabling or Disabling HTTP Web Services
You can enable or disable Web Services on the Web Services page. This page provides a list of all
available Web services on your printer, and displays the configuration status of each service.
To enable or disable Web Services:
1. In CentreWare Internet Services, click Properties > Services.
2. Click Web Services.
3. To enable or disable individual services, select the check box next to one or more services. To enable
or disable all services at one time, click Enable All or Disable All.
4. If additional settings are required for a selected service, the status column indicates the required
update and a Settings button appears. Click Settings to configure the service.
5. Click Apply to save the new settings or Undo to retain the previous settings.
®
For more information about Xerox Extensible Interface Platform
documentation included in the Xerox Extensible Interface Platform
The Xerox Extensible Interface Platform
website.
®
SDK is available on the Xerox Extensible Interface Platform®
and Web services, see the
®
Software Development Kit (SDK).
38 Xerox
®
WorkCentre® 4265 Multifunction Printer
System Administrator Guide
Network Connectivity
Proxy Server
A proxy server acts as a go-between for clients seeking services and servers that provide them. The proxy
server filters client requests and if the requests meet the proxy server filtering rules, it grants the request
and allows the connection.
A proxy server has two main purposes:
• To keep any devices behind it anonymous for security purposes.
• To cache content from resources, such as Web pages from a Web server, to increase resource access
time.
Configuring the Proxy Server
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click Proxy Server.
3. To configure the printer to detect proxy settings automatically, for Auto Detect Proxy Settings,
select Enabled.
Note: If Auto Detect Proxy Settings is enabled, you cannot edit the fields for HTTP Proxy Server,
Name or IP Address, and IPV4 Address and Port.
4. For HTTP Proxy Server, select Enabled.
5. Select the Name or IP Address type.
6. Type the appropriately formatted address and port number.
7. If your proxy server requires authentication, next to Authentication, select Enabled.
8. If authentication is enabled, next to Login Name, type the login name for the proxy server.
9. Type the password, then type the password again to verify.
10. To save the new password, click Select to save new password.
11. To add a proxy exception list, for Exception List, type the URL.
12. To use the configured default proxy settings script, for Use Automatic Configuration script, type the
URL.
13. Click Apply.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 39
Network Connectivity
WSD
Web Services for Devices (WSD) is technology from Microsoft that provides a standard method for
discovering and using network connected devices. It is supported in Windows Vista, Windows Server
2008, and newer operating systems. WSD is one of several supported communication protocols.
Enabling WSD
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click WSD.
3. For Protocol, select Enable.
4. Click Apply.
40 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Network Connectivity
Configuring AirPrint
Use AirPrint to print directly from a wired or wireless device without using a print driver. AirPrint is a
software feature that allows for driverless printing from Apple iOS-based mobile devices and Mac
OS-based devices. AirPrint-enabled printers let you print directly from a Mac or from an iPhone, iPad, or
iPod touch.
If you specify the geographical latitude and longitude of the printer, use decimal form. For latitude, type
a coordinate value from –90 through 90. For longitude, type a coordinate value from –180 through 180.
For example, use coordinates such as 45.325026, -122.766831.
Notes:
•When HTTP, IPP, and Bonjour mDNS protocols are enabled, AirPrint is enabled by default. If
you disable HTTP, IPP, or Bonjour, AirPrint is disabled.
• Not all iOS applications support printing using AirPrint.
• Wireless devices must join the same wireless network as the printer. A system administrator can
connect the printer by its wired network interface.
•The device that submits the AirPrint job must be on the same subnet as the printer. To allow
devices to print from different subnets, configure your network to pass multicast DNS traffic
across subnets.
•AirPrint-enabled printers work with iPad (all models), iPhone (3GS or later), and iPod touch (3rd
generation or later), running the latest version of iOS.
•The Mac OS device must be Mac OS 10.7 or later.
To configure AirPrint:
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click AirPrint.
3. Configure HTTP, IPP, and Multicast DNS Registration as required.
4. To enable software upgrades, for Software Upgrades, click Details.
5. To create a certificate, for Machine Digital Certificate, click Details.
6. For Protocol, select Enabled.
7. To edit the name and location for your printer that appears in the list of AirPrint-enabled printers on
connected devices, next to Device Name, click Edit.
8. Click Apply.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 41
Network Connectivity
Configuring SNTP
Simple Network Time Protocol (SNTP) synchronizes the internal clocks of computers over a network
connection.
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click SNTP.
3. For Name or IP Address, select an option.
4. Type the appropriately formatted IP address.
5. For Enable SNTP Broadcast, select the check box.
6. Click Apply.
42 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Network Connectivity
Wireless Network Connection
A wireless local area network (WLAN) provides the means to connect two or more devices in a LAN
without a physical connection. The printer can connect to a wireless LAN that includes a wireless router
or wireless access point. Before connecting the printer to a wireless network, the wireless router must be
configured with a service set identifier (SSID), a passphrase, and security protocols.
Notes:
•Wireless networking is available only on printers with the optional Wireless Network Adapter
installed.
•Before you connect to the wireless network, ensure the Ethernet cable is not attached to the
printer.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 43
Network Connectivity
Connecting to a Wireless Network Using the
Wireless Install Wizard
Before you begin, ensure that you have the wireless network Service Set Identifier (SSID), encryption
type, and passphrase. For details, see Connecting to a Wireless Network Manually on page 45.
1. Plug the Wireless Network Adapter into the USB port on the left side of the printer, then disconnect
the Ethernet cable.
2. At the printer control panel, press the Machine Status button.
Note: To access this feature at the control panel, log in as an administrator.
4. To connect to a network, touch Pick Another Network.
5. From the list of available networks, select a network.
6. Touch Continue.
7. Touch Network Login.
8. To access the network, enter the passcode for the selected network, then touch Next.
9. On the Network Confirmation screen, note the IP Address, then touch Done.
Note: For the new settings to take effect, restart your printer.
44 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Network Connectivity
Connecting to a Wireless Network Manually
When connecting to a wireless network that does not include a WPS-compliant router, set up and
configure the printer manually. Before starting, you must get the setup and configuration information,
such as name and passphrase, from the router. After you collect the network information, you can set up
the printer from the control panel or from CentreWare Internet Services. For the easiest manual
connection, use CentreWare Internet Services.
Before you begin:
•The wireless router must be connected and properly configured for the network before you install
the printer. For details, see your router documentation.
•Use the instructions provided with your wireless router or access point to record the following
information:
− Name (SSID)
− Security Options (Encryption Type)
− Passphrase
Note: The network name and passphrase are case sensitive.
Configuring the Printer for Wireless LAN WPA-Enterprise
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click Wireless Setup.
3. Click Edit Settings.
4. For Network Name SSID, select an option.
5. To refresh the list of available networks, click Refresh.
6. For Security Type, select WPA/WPA2-Enterprise.
7. For 802.1x Authentication, select an authentication protocol.
−If you select EAP-TTLS, select an Inner Authentication Protocol, then type an Identity Name,
User Name, and User Password.
−If you select PEAP, type a User Name and Password.
8. For Root Certificate Setup, upload a Root Certificate.
9. For Client Certificate Setup, upload a Client Certificate, then enter the Private Key Password.
10. For Address Acquisition, select a protocol option.
11. Click Apply.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 45
Network Connectivity
Configuring the Printer for Open System
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click Wireless Setup.
3. Click Edit Settings.
4. For Network Name SSID, select an option.
5. To refresh the list of available networks, click Refresh.
6. For Security Type, select Open System.
7. For Encryption Type, select an option.
8. For Security Key or Passphrase, type the passphrase.
9. For Address Acquisition, select a protocol option.
10. Click Apply.
Configuring the Printer for Shared Key or WPA/WPA2-Personal
1. Click Wireless Setup.
2. Click Edit Settings.
3. For Network Name SSID, select an option.
4. To refresh the list of available networks, click Refresh.
5. For Security Type, select Shared Key or WPA/WPA2-Personal.
6. For Encryption Type, select an option.
7. For Security Key or Passphrase, type the passphrase.
8. For Address Acquisition, select a protocol option.
9. Click Apply.
46 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Network Connectivity
Configuring Wi-Fi Direct
You can connect to your printer from a Wi-Fi mobile device, such as a tablet, computer, or smart phone,
using Wi-Fi Direct.
Note: Wi-Fi Direct is disabled by default.
To configure Wi-Fi Direct:
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click Wi-Fi Direct.
3. For Wi-Fi Direct, select On.
4. For Device Name, type a name to appear in a list of available wireless networks and devices.
5. For IP Address, use the default or type a new IP Address.
6. To set the printer as Group Owner for a Wi-Fi Direct group, similar to a wireless access point, select
Activate.
7. Enter a Network Key or use the default value.
8. To hide the Network Key, select the check box.
9. Click Apply.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 47
4
Security
This chapter includes:
• Setting Access Rights .......................................................................................................................................................... 50
• About User Permissions ..................................................................................................................................................... 58
®
• Enabling Xerox
• Configuring the Log Out Confirmation Screen ....................................................................................................... 60
• FIPS 140-2 ............................................................................................................................................................................... 62
• IP Filtering ............................................................................................................................................................................... 63
• Managing the Audit Log ................................................................................................................................................... 64
• System Timeout .................................................................................................................................................................... 68
• Overwriting Image Data ................................................................................................................................................... 69
• USB Port Security ................................................................................................................................................................. 71
• Displaying or Hiding Network Settings ....................................................................................................................... 72
Standard Accounting ....................................................................................................................... 59
See also:
www.xerox.com/security
®
Xerox
System Administrator Guide
WorkCentre® 4265 Multifunction Printer 49
Security
Setting Access Rights
You can control access to services and features by setting up authentication and authorization.
Personalization allows the printer to retrieve user information to customize features.
Authentication
Authentication is the process of confirming your identity. When the system administrator enables
authentication, the printer compares the information that you provide to another source of information,
such as an LDAP directory. The information can be a user name and password, or the information stored
on a magnetic, proximity, or smart card. If the information is valid, you are considered an authenticated
user.
There are several ways to authenticate a user:
•User Name / Password - Validate on the Device enables local authentication. Users prove their
identity by typing a user name and password at the control panel or in CentreWare Internet
Services. The printer compares the user credentials to the information stored in the user database. If
you have a limited number of users, or do not have access to an authentication server, use this
authentication method.
•User Name / Password - Validate on the Network enables network authentication. Users prove
their identity by typing a user name and password at the control panel or in CentreWare Internet
Services. The printer compares the user credentials to the information stored on an authentication
server.
Note: The printer can use one of the following authentication server types: Kerberos (Solaris or
Windows), NDS, SMB (Windows 2000/2003), or LDAP.
•Convenience Authentication enables authentication for a proximity card reader. Users swipe a
pre-programmed identification card at the control panel. To use this method, purchase and install a
®
USB card reader and an authentication server that supports the Xerox
Convenience Authentication
API.
•Xerox Secure Access Unified ID System enables authentication for the Xerox Secure Access
Unified ID System. Users present a pre-programmed identification card to a card reader at the
control panel. The printer compares the user credentials to the information stored on the Xerox
Secure Access server. To use this method, purchase and install the Xerox Secure Access Unified ID
System.
•Smart Cards enables authentication for a smart card reader. Users insert a pre-programmed
identification card in a carder reader at the control panel. To use this method, purchase and install a
smart card reader system.
®
50 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Setting the Login Method
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Login Methods.
3. To set the authentication method used to log in to the control panel, select an option.
− Passcode: Panel lock requires users to enter a passcode.
− Local: User login information is stored on the printer in the User Information Database.
− Network: User login information is stored externally in a network database, such as an LDAP
directory.
−Convenience: This method requires users to swipe a pre-programed identification card through
a proximity card reader at the control panel. This method requires a USB card reader and an
authentication server that supports the Xerox
−Smart Card: This authentication method requires users to swipe a pre-programed identification
card at the control panel. This method requires a Smart Card reading system.
4. If you select Convenience or Smart Card as the authentication method, you can configure the
printer to allow users to log in at the control panel. For Alternate AlternateTouch UI Method, select
User can login at device if card is not available. This option is useful if a user loses their smart card
but must access the printer.
5. If you select Passcode, click Apply.
®
Convenience Authentication API.
Security
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 51
Security
Configuring Authentication Settings
Configuring Local Authentication Settings
When you configure local authentication, users prove their identity by typing a user name and password
at the control panel or in CentreWare Internet Services. The printer compares the user credentials to the
information stored in the user database. If you have a limited number of users, or do not have access to
an authentication server, use this authentication method.
To configure access rights using local authentication:
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Login Methods.
3. To store user login information on the printer in the User Information Database, select Local Authentication.
4. To retrieve profile information from LDAP, select Retrieve Profile Information for Authenticated User from LDAP.
5. To configure the Device User Database, click the Pencil icon.
6. To configure the LDAP Server, click the Pencil icon.
7. To configure the Log Out Confirmation Screen, select an option.
User Database
The user database stores user credential information. The printer uses this information for local
authentication and authorization, and for Xerox
authentication, the printer checks the credentials that a user provides against the information in the user
database. When you configure local authorization, the printer checks the user database to determine
which features the user is allowed to access.
Note: User names and passwords stored in the user database are not transmitted over the network.
®
Standard Accounting. When you configure local
Adding User Information to the User Database
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Device User Database.
3. Click Add New.
4. Type a User Name and Friendly Name for the user.
5. Type a Password for the user, then retype it to verify.
6. Click Save.
Notes:
• The Password field only appears if the selected authentication method is local authentication.
• If you have configured local authorization, you can add the user to a role.
52 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Security
Configuring Network Authentication Settings
When you configure network authentication, users prove their identity by typing a user name and
password at the control panel or in CentreWare Internet Services. The printer compares the user
credentials to the information stored on an authentication server.
To configure access rights using network authentication:
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Login Methods.
3. To store user login information in an external network database, such as an LDAP directory, select
Network Authentication.
4. To retrieve profile information from LDAP, select Retrieve Profile Information for Authenticated User from LDAP.
5. To configure the Authentication Server, click the Pencil icon.
6. To configure the LDAP Server, click the Pencil icon.
Configuring Authentication Server Settings for Kerberos
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Login Methods.
3. For Authentication Server, click the Pencil icon.
4. For Authentication Protocol, select the authentication protocol for your network.
5. Select your AutoLookup preferences.
6. For Default Server information, type the domain or realm for your authentication server.
7. Select the desired address type.
8. Type the appropriately formatted address and port numbers for both the primary and backup
addresses.
9. To use an LDAP server for network authorization or personalization, select the LDAP server from the
list.
10. For Alternate Server, enter your alternate server authentication settings.
11. Click Save.
Configuring Authentication Server Settings for SMB
1. For Authentication Server, click the Pencil icon.
2. For Authentication Protocol, select SMB (Windows ADS).
3. For Domain Name, type the domain name of your authentication server.
4. Select the address type.
5. Type the appropriately formatted address and port number.
6. For Alternate Server, enter your alternate server authentication settings.
7. Click Save.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 53
Security
Configuring Authentication Server Settings for LDAP
The printer uses the primary LDAP server for authentication, authorization, and personalization. The
primary LDAP server is the server that appears at the top of the LDAP server list on the LDAP Server page
in CentreWare Internet Services. If you already have configured LDAP server settings, the printer uses
this server automatically when you select LDAP as the network authentication or authorization method.
The printer only uses alternate LDAP servers for authorization and personalization when primary LDAP
server communication fails.
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Login Methods.
3. For Authentication Server, click the Pencil icon.
4. For Authentication Protocol, select LDAP.
5. To configure the LDAP Server, click the Pencil icon.
6. Click Save.
Configuring Convenience Authentication Settings
When Convenience Authentication is enabled, users swipe a pre-programmed identification card
through a proximity card reader at the control panel. To use this method, purchase and install a USB
card reader and an authentication server that supports the Xerox
®
Convenience Authentication API.
To configure access rights using Convenience Authentication:
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Login Methods.
3. To require users to swipe a pre-programmed identification card through a proximity card reader at
the control panel, select Convenience. To use Convenience login, purchase and install a USB card
reader and an authentication server that supports the Xerox
®
Convenience Authentication API.
4. To allow an alternate login method, select User can login at device if card is not available.
5. To configure each feature, click the Pencil icon.
6. To configure the Log Out Confirmation Screen, select an option.
Configuring an Authentication Server for Convenience Authentication
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Login Methods.
3. Set the login method to Convenience authentication.
4. For Convenience Authorization Setup, click the Pencil icon.
5. For Accounting Code Access, select an option.
6. Under Server Communication, select an address type. Type the appropriately formatted address or
host name of your server and change the default port number as needed.
7. For Path, type the HTTP path that your authentication server provides.
8. When Network Accounting is configured, the printer can obtain user accounting information from
the authentication server. To reduce the number of screens that appear when a user logs in at the
control panel, select Automatically apply Accounting Codes from the server.
9. Click Save.
54 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Security
Configuring Smart Card Authentication Settings
When Smart Card authentication is configured, users swipe a pre-programmed identification card at the
control panel. Purchase and install a Smart Card reading system before configuring Smart Card
authentication.
To configure access rights using Smart Card authentication:
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Login Methods.
3. To require users to swipe a pre-programmed identification card at the control panel, select Smart Card (CAC/PV).
4. To configure each feature, click the Pencil icon.
5. To configure the Log Out Confirmation Screen, select an option.
The Login Methods page in CentreWare Internet Services provides links to authentication and
personalization configuration settings.
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Login Methods.
See also:
Setting the Login Method on page 51
Configuring LDAP Servers
Setting Up Authentication for a Smart Card System
Adding a Domain Controller
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Login Methods.
3. For Domain Controllers, click the Pencil icon. The domain controller server must validate the domain
certificate on the smart card of the user before the user can access the printer.
4. For PIV Auth Mode, select an option.
5. Click Add New CAC Server.
6. For Domain Controller Type, select an option.
7. Type the domain controller server address information.
8. Click Save.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 55
Security
Configuring OCSP Validation Server Settings
If you have an OCSP server, or an OCSP certificate validation service, you can configure the printer to
validate certificates installed on the domain controller.
Before you begin:
Add a domain controller.
To configure OCSP validation server settings:
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Login Methods.
3. For Certificate Validation, click the Pencil icon.
4. For Certificate validation using OCSP, select the check box.
5. For OCSP URL, type the URL of the OCSP server.
6. To ensure that the printer can communicate with the OCSP server and the domain controller,
configure your proxy server settings as needed.
7. For Validate the EKU Extended Key Usage and Host Name in KDC certificate, select the check box.
8. For Permitted Hostname in KDC Certificate, type the host name.
9. For KDC Certificate EKU, select an option.
10. Click Apply.
Setting the Inactive Time Limit
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Login Methods.
3. For Smart Card Inactivity Timer, click the Pencil icon.
4. Specify the maximum amount of time before a user is logged out automatically. Type the time in
minutes.
5. Click Save.
Displaying Your Company Logo on the Blocking Screen
You can customize the blocking screen to display your company logo. The blocking screen appears on the
printer touch screen when card reader authentication or an auxiliary accounting device is configured.
The screen displays a message when a user attempts to access a restricted feature, reminding users to
swipe an identification card to access the feature.
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Login Methods.
3. For Import Customer Logo, click the Pencil icon.
4. Click Browse or Choose File.
5. Select a .png file that is not larger than 300 x 200 pixels, and click Open.
6. Click Import.
7. Click Reboot Machine.
56 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Creating a Passcode
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Login Methods.
3. Click Passcode.
4. In the Passcode field, type a passcode.
5. For Save Password, select the check box.
6. Click Apply.
Security
Xerox
®
WorkCentre® 4265 Multifunction Printer 57
System Administrator Guide
Security
About User Permissions
You can control access to service and tools, and printing times and methods for a group of users.
Print permissions are rules that allow you to control printing methods for a group of users. For example:
• Restrict 1-sided printing, requiring users to print 2-sided.
• Restrict a Job Type, such as Secure Print.
Services and Tools permissions are rules that allow you to control access to features or configuration
settings for a group of users. Configure Services and Tools Permissions to:
• Restrict access to specific services, such as Copy, Email, or Fax.
• Restrict access to settings managed on the Tools menu at the control panel.
• Restrict access to settings managed on the Properties tab in CentreWare Internet Services.
Note: Not all options listed are supported on all printers. Some options apply only to a specific
printer model, configuration, operating system, or driver type.
Configuring User Roles
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click User Permissions.
3. To configure Guest User roles, click the Pencil icon.
4. To define Access Rights to Services, Pathways, and Tools for Guest User, for Service/Pathway
options, select the radio button.
5. Click Save.
58 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Enabling Xerox® Standard Accounting
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Accounting Methods.
3. Click Edit.
4. For Current Accounting Method, select Xerox Standard Accounting.
5. Click Save.
Security
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 59
Security
Configuring the Log Out Confirmation Screen
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click Login Methods.
3. To enable the log out confirmation screen, select Show at Log Out.
4. To show the log out confirmation screen after every job, select Show After Every Job.
5. To disable the log out confirmation screen, select Don't Show.
60 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Security
Secure HTTP (SSL)
You can establish an HTTP Secure(HTTPS) connection to the printer by encrypting data sent over HTTP
using SSL.
You can also enable SSL encryption for the following features.
• Configuring the printer in CentreWare Internet Services
• Printing from CentreWare Internet Services
• Printing using IPP
• Managing scan templates
• Workflow scanning
• Network accounting
Note: SSL encryption is protocol-independent. You can turn on or off SSL for each protocol or scan
destination as needed
Before you begin:
• Ensure that the printer has an established Machine Digital Certificate.
• Ensure DNS is enabled and configured.
• Ensure that the date and time configured on the printer is correct. The time that is set on the printer
is used to set the start time for the Xerox
when you enable HTTP (SSL).
®
Device Certificate. A Xerox® Device Certificate is installed
Enabling HTTPS (SSL)
1. In CentreWare Internet Services, click Properties > Connectivity > Protocols.
2. Click HTTP.
3. To enable the protocol, for Protocol, select Enabled.
4. For Keep Alive Timeout, enter the time that the printer waits for a response from a connected user
before it terminates the connection. Increasing the Keep Alive Timeout can cause slow connections.
5. Change the Port Number as needed.
Note: If a machine digital certificate is configured, you can edit the following fields.
6. For HTTP Security Mode, select an SSL security option.
7. To allow connections to the device using SSL v3 only, for Require SSL v3, select Enable.
8. Click Apply.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 61
Security
FIPS 140-2
If FIPS 140-2 encryption is required, all computers, servers, browser software, security certificates, and
applications must comply with the standard or operate in FIPS-compliant mode. Transmitted and stored
data must be encrypted as specified in United States Federal Information Processing Standard (FIPS)
140-2 (Level 1). You can enable the printer to check that the current configuration ensures the specified
encryption.
Enabling FIPS 140 Mode can prevent the printer from communicating with network devices that
communicate using protocols that do not use FIPS-compliant encryption algorithms. To allow non-FIPS
compliant protocols or features when FIPS 140 mode is enabled, acknowledge the notification of
non-compliance during the validation process.
When non-FIPS compliant protocols are enabled after FIPS mode is enabled, a message appears
indicating the protocols use non-FIPS compliant encryption algorithms. Examples of non-FIPS compliant
protocols include SNMPv3 or NetWare.
When you enable FIPS-140 mode, the printer validates the current configuration by performing the
following checks:
•Validates certificates for features where the printer is the server in the client-server relationship. An
SSL certificate for HTTPS is an example.
•Validates certificates for features where the printer is the client in the client-server relationship. CA
certificates for LDAP, Xerox Extensible Interface Platform, and Smart eSolutions are examples.
•Validates certificates that are installed on the printer, but not used. Certificates for HTTPS, LDAP, or
SNMPv3 are examples.
•Checks features and protocols for non-compliant encryption algorithms. For example, NetWare and
SNMPv3 use encryption algorithms that are not FIPS-compliant.
When validation is complete, information and links appear in a table at the bottom of the page.
• Click the appropriate link to disable a non-compliant feature, or protocol.
• Click the appropriate link to replace any non-compliant certificates.
• Click the appropriate link to acknowledge that you allow the printer to use non-compliant features
and protocols.
Enabling FIPS 140 Mode and Checking for Compliance
1. In CentreWare Internet Services, click Properties > Security > Encryption.
2. Click FIPS 140-2.
3. To enable FIPS140 Validation Mode, select Enabled.
4. Click Apply.
5. If the configuration check passes, a Reboot Machine prompt appears. At the prompt, click OK.
6. If the configuration check fails, to disable the protocol, click the appropriate link, replace the
certificate, or allow the printer to use the non-compliant protocol.
62 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Security
IP Filtering
You can prevent unauthorized network access by creating an IP Filter to block or allow data sent from
particular IP addresses.
Enabling IP Filtering
1. In CentreWare Internet Services, click Properties > Security.
2. Click IP Filtering.
3. To enable IP filtering, select IPv4 Filtering Enabled, IPv6 Filtering Enabled, or both.
4. To permit access to the device, type the IP Address and Port or Prefix as needed.
5. Click Apply.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 63
Security
Managing the Audit Log
The Audit Log feature records events that occur on the printer. You can then download the log as a
tab-delimited text file to review for potential problems or security issues.
To enable the audit log:
1. In CentreWare Internet Services, click Properties > Security.
2. Click Audit Log.
3. To enable the audit log, select the check box.
4. Click Apply.
To save the audit log:
1. To save the audit log file, click Save as Text File.
2. Right-click the Download Log link to save the auditfile.txt file to your computer.
64 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
IPsec
Internet Protocol Security (IPsec) is a group of protocols used to secure Internet Protocol (IP)
communications by authenticating and encrypting each IP data packet. It allows you to control IP
communication by creating protocol groups, policies, and actions.
You can control IP communication on the printer for the following:
Security
• DHCP v4/v6 (TCP and UDP)
• DNS (TCP and UDP)
• FTP (TCP)
• HTTP (Scan Out, TCP port 80)
• HTTPS (Scan Out, TCP port 443)
• HTTPS (Web Server, TCP port 443)
• ICMP v4/v6
• IPP (TCP port 631)
• LPR Print (TCP port 515)
• Port 9100 Print (TCP port 9100)
• SMTP (TCP/UDP port 25)
• SNMP (TCP/UDP port 161)
• SNMP Traps (TCP/UDP port 162)
• WS-Discovery (UDP port 3702)
• Up to 10 additional services
Configuring IPsec
1. In CentreWare Internet Services, click Properties > Security.
2. Click IPsec.
3. To enable the protocol, for Protocol, select Enabled.
4. To remove IPsec connections, click Flush All IP Sec Connections.
5. For Shared Secret, enter the shared key value.
6. For Verify Shared Secret, reenter the shared key value.
7. Click Apply.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 65
Security
802.1X
802.1X is an Institute for Electrical and Electronics Engineers (IEEE) standard that defines a method for
port-based network access control or authentication. In an 802.1X secured network, the printer must be
authenticated by a central authority, typically a RADIUS server, before it can access the physical
network.
You can enable and configure the printer to be used in an 802.1X secured network from the printer
control panel or in CentreWare Internet Services.
Before you begin:
•Ensure that your 802.1X authentication server and authentication switch are available on the
network.
• Determine the supported authentication method.
• Create a user name and password on your authentication server.
Note: This procedure causes the printer to restart and be unavailable over the network for several
minutes.
Configuring 802.1X in CentreWare Internet Services
1. In CentreWare Internet Services, click Properties > Security.
2. Click 802.1X.
3. For 802.1X, select Enabled.
4. For Authentication Method, select an option.
5. For Credentials, type the user name and password.
6. To upload a root certificate, do the following steps.
a. For Upload Root Certificate, to locate and select the file, click Browse or Choose File.
b. Click Upload.
7. To upload a client certificate, do the following steps.
a. To locate and select the Client Certificate, for Upload Client Certificate, click Browse or Choose
File.
b. To assign a private password, for Private Key Password, type a password.
c. Click Upload.
8. Click Apply.
66 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Security
Enabling and Configuring 802.1X at the Control Panel
1. At the printer control panel, press the Machine Status button, then touch the Tools tab.
2. Touch Network Settings > Advanced Settings.
3. Touch 802.1X.
4. Touch Enable.
5. Touch Authentication Method, then select the method used on your network.
Notes:
• When the printer is in FIPS 140 mode, EAP-TLS authentication is required.
• To configure 802.1X settings for EAP-TLS, use CentreWare Internet Services.
6. Touch Username.
7. Using the touch screen keyboard, type the user name and server that your authentication switch
requires. Touch OK.
8. Touch Password, then type the password using the touch screen keyboard. Touch OK.
9. Touch OK again.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 67
Security
System Timeout
You can specify how long the printer waits to log out an inactive user.
Setting System Timeout Values
1. In CentreWare Internet Services, click Properties > Security.
2. Click System Timeout.
3. For Touch User Interface System Timer, type the time that the printer waits before it logs a user out
of the touch screen.
4. To instruct the printer to display a warning message before it logs a user out of the touch screen,
under Warning Screen, touch Enabled.
5. For Web System Timer, type the amount of time the system waits before it logs an inactive user out
of CentreWare Internet Services.
6. Click Apply.
Setting the System Timeout Values at the Control Panel
1. At the printer control panel, press the Machine Status button, then touch the Tools tab.
2. Touch Device Settings > Timers > System Timeout.
3. Specify the time the printer waits to log out an inactive user at the control panel. Next to Timeout
(Mins), and Timeout (Secs), touch the arrows.
4. To instruct the printer to display a warning message before it logs a user out of the touch screen,
under Warning Screen, touch Enabled.
5. Touch OK.
68 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Security
Overwriting Image Data
Image data is any in-process or temporary user data on the hard drive, such as current jobs, queued jobs,
temporary files, saved jobs, and saved folders. To ensure that image data on the printer hard drive
cannot be accessed, you can delete and overwrite image data.
Standard Image Overwrite deletes all image data from the printer memory and hard drive, except:
• Jobs and folders stored in the Reprint Saved Jobs feature
• Jobs stored in the Scan to Mailbox feature
• Fax Dial Directories
• Fax Mailbox contents
Note: Standard image overwrite takes approximately 20 minutes to complete.
Full Image Overwrite deletes all image data from the printer memory and hard drive, including:
• Jobs and folders stored in the Reprint Saved Jobs feature
• Jobs stored in the Scan to Mailbox feature
• Fax Dial Directories
• Fax Mailbox contents
Note: Full image overwrite takes approximately 60 minutes to complete.
Immediate Job Overwrite prompts the printer to overwrite each job immediately after it finishes
processing.
Manually Deleting Image Data
1. In CentreWare Internet Services, click Properties > Security.
2. Click Image Overwrite Security > On Demand Image Overwrite.
3. For Standard or Full, click Start.
4. To delete image data, click OK.
Note: If the number of files to delete is large, during the deletion process, the printer can be offline
for up to 120 minutes.
Xerox
®
WorkCentre® 4265 Multifunction Printer 69
System Administrator Guide
Security
Scheduling Routine Deletion of Image Data
1. In CentreWare Internet Services, click Properties > Security.
2. Click Image Overwrite Security > Scheduled.
3. To enable image overwrite, select an option.
4. For Frequency, select an option.
5. Select the time for the overwrite in hours and minutes
6. Click Apply.
Immediate Job Overwrite
Immediate Job Overwrite prompts the printer to overwrite each job immediately after it finishes
processing.
Enabling Immediate Image Overwrite
1. In CentreWare Internet Services, click Properties > Security.
You can prevent unauthorized access to the printer through USB ports by disabling the ports.
Note: If USB ports are disabled, you cannot use a USB card reader for authentication, update the
software, or print from a USB Flash drive.
Enabling or Disabling USB Ports
1. In CentreWare Internet Services, click Properties > Security.
2. Click USB Port Security.
3. To enable a port, next to a port, select Enabled.
4. To disable the ports, clear the check box.
5. Click Apply.
Security
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 71
Security
Displaying or Hiding Network Settings
You can show or hide the IPv4 address or host name of the printer on the control panel touch screen.
1. In CentreWare Internet Services, click Properties > Security.
2. Click Display Network Settings.
3. Select Show IPv4 Address or Show Host Name. To hide network information, select Hide Network Information.
4. Click Apply.
72 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Security
Security Certificates
A digital certificate is a file that contains data used to verify the identity of the client or server in a
network transaction. A certificate also contains a public key used to create and verify digital signatures.
One device proves its identity to another by presenting a certificate trusted by the other device. Or, the
device can present a certificate signed by a trusted third party and a digital signature proving its
ownership of the certificate.
A digital certificate includes the following data:
• Information about the owner of the certificate
• The certificate serial number and expiration date
• The name and digital signature of the certificate authority (CA) that issued the certificate
• A public key
• A purpose defining how the certificate and public key can be used
There are three types of certificates:
•A Device Certificate is a certificate for which the printer has a private key. The purpose specified in
the certificate allows it to be used to prove identity.
• A CA Certificate is a certificate with authority to sign other certificates.
• A Trusted Certificate is a self-signed certificate from another device that you want to trust.
Machine Digital Certificate
A digital certificate is a file that contains data used to verify the identity of the client or server in a
network transaction. A certificate also contains a public key used to create and verify digital signatures.
One device proves its identity to another by presenting a certificate trusted by the other device. Or, the
device can present a certificate signed by a trusted third party and a digital signature proving its
ownership of the certificate.
Creating a Certificate
1. In CentreWare Internet Services, click Properties > Security.
2. Click Machine Digital Certificate.
3. Click Create New Certificate, then select an option.
4. Click Continue.
5. For the selected certificate type, complete the fields.
6. Click Apply.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 73
Security
Installing a Trusted CA Certificate
If the printer uses the Xerox® Device Certificate, and a user attempts to access the printer using
CentreWare Internet Services, an error message can appear in their Web browser. To avoid error
messages, install a Trusted CA Certificate in the Web browsers of all users.
1. In CentreWare Internet Services, click Properties > Security.
2. Click Trusted Certificate Authorities.
3. To add a certificate, click Add.
a. Click Browse or Choose File, navigate to the signed certificate in .pem or PKCS#12 format,
then click Open or Choose File.
b. Click Apply, then click OK.
4. For Installed Certificates, perform the following steps.
− To delete a certificate, select the certificate, then click Delete.
• UNIX, Linux, and AS/400 Printing ................................................................................................................................. 82
• Print from USB ....................................................................................................................................................................... 85
• Setting the Delete Held Job After Timer .................................................................................................................... 86
®
Xerox
System Administrator Guide
WorkCentre® 4265 Multifunction Printer 75
Printing
Managing Banner Page Printing Options
You can set the printer to print a banner page with each print job. The banner page contains information
identifying the user and job name. You can set this option in the print driver, in CentreWare Internet
Services, or at the control panel.
Note: Enable Banner page printing in the print driver and at the control panel or in CentreWare Internet
Services or a banner page does not print.
Enabling Banner Page Printing in CentreWare Internet Services
1. In CentreWare Internet Services, click Properties > Services.
2. Click Printing > Banner Page.
3. For Banner Page Settings, select Enabled.
4. Click Apply.
76 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Printing an Error Page
1. In CentreWare Internet Services, click Properties > Services.
2. Click Printing > Error Page.
3. To print an error page when a print job fails, for Error Page Settings, select Enable.
4. Click Apply.
Printing
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 77
Printing
Configuring Default Print Settings
1. In CentreWare Internet Services, click Properties > Services.
2. Click Printing > General.
3. Configure as needed.
4. Click Apply.
78 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Enabling Print Spooling Settings
1. In CentreWare Internet Services, click Properties > Services.
2. Click Printing > Print Spooling.
3. To enable print spooling, for Print Spooling Settings, select Enabled.
4. Click Apply.
Printing
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 79
Printing
Printing Reports
Your printer has a printable set of reports. These include configuration and font information,
demonstration pages, and more.
1. In CentreWare Internet Services, click Properties > Services.
2. Click Printing > Reports.
3. To print a report, next to the report name, click Print.
80 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Printing
Configuring Secure Print Settings
You can configure Secure Print settings to specify how the printer behaves when a user sends a Secure
Print job to the printer.
Configuring Secure Print
1. In CentreWare Internet Services, click Properties > Services.
2. Click Printing > Secure Print.
3. Enter a value for the minimum passcode length.
4. Click Apply.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 81
Printing
UNIX, Linux, and AS/400 Printing
UNIX-based printing uses LPD/LPR port 515 to provide printer spooling and network print server
functionality. Xerox
®
printers can communicate using either protocol.
Xerox® Printer Manager
Xerox® Printer Manager is an application that allows you to manage and print to multiple printers in
UNIX and Linux environments.
®
Xerox
• Configure and check the status of network connected printers.
• Set up a printer on your network as well as monitor the operation of the printer once installed.
• Perform maintenance checks and view supplies status at any time.
• Provide a common look and feel across the many different suppliers of UNIX and Linux operating
Installing Xerox® Printer Manager
Before you begin:
Ensure that you have root or superuser privileges to install Xerox
1. Download the appropriate package for your operating system. To locate drivers for your printer, see
2. To install the custom driver, expand the file, then install the package.
Printer Manager allows you to:
systems.
®
www.xerox.com/office/drivers.
The installation creates a Xerox directory in /opt/Xerox/prtsys.
Printer Manager.
Launching Xerox® Printer Manager
To launch Xerox® Printer Manager, do one of the following tasks.
• For UNIX, log in as root. From a terminal window, type xosdprtmgr, then press Enter or Return.
• For Linux, type sudo xeroxprtmgr, then press Enter or Return.
82 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Printing
Printing from a Linux Workstation
To print from a Linux workstation, install either a Xerox® print driver for Linux or a CUPS print driver. You
do not need both drivers.
Xerox recommends that you install one of the full-featured custom print drivers for Linux. To locate
drivers for your printer, see www.xerox.com/office/drivers.
If you use CUPS, ensure that CUPS is installed and running on your workstation. The instructions for
installing and building CUPS are contained in the CUPS Software Administrators Manual, written and
copyrighted by Easy Software Products. For complete information on CUPS printing capabilities, refer to
the CUPS Software Users Manual available from www.cups.org/documentation.php.
Installing the PPD on the Workstation
1. Download the Xerox® PPD for CUPS from the Drivers and Downloads page on the Xerox® Support
website.
2. Copy the PPD into the CUPS ppd/Xerox folder on your workstation. If you are unsure of the location
of the folder, use the Find command to locate the PPD files.
3. Follow the instructions that are included with the PPD.
Adding the Printer
1. Verify that the CUPS daemon is running.
2. Open a Web browser and type http://localhost:631/admin, then click Enter or Return.
3. For User ID, type root. For password, type the root password.
4. Click Add Printer and follow the onscreen prompts to add the printer to the CUPS printer list.
Printing with CUPS
CUPS supports the use of both the System V (lp) and Berkeley (lpr) printing commands.
1. To print to a specific printer in System V, type: lp -dprinter filename, then click Enter.
2. To print to a specific printer in Berkeley, type: lpr -Pprinter filename, then click Enter.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 83
Printing
AS/400
Xerox provides Work Station Customization Object (WSCO) files to support AS/400 or Iseries, V6 or later
systems. The WSCO file provides printer-specific PCL codes. The host print transform uses these codes to
select the correct tray, 2-sided printing option, font size and type, and orientation. The XTOOLSxxxx
library provides a source WSCO for each supported Xerox
library once.
Notes:
• The host print transform only works on AFPDS and SCS files. Convert IPDS formatted printer files to AFPDS files
to use the WSCO for printing.
• You must have IOSYSCFG permissions to create a device description or a remote queue.
• For details on AS/400, refer to the IBM AS/400 Printing V, (Red Book), available on the IBM website.
Installing the WSCO and Setting up Print Queues
For detailed instructions on installing the library and setting up print queues, refer to the installation
instructions that are included with the library.
®
printer. You only download and install the
84 Xerox
®
WorkCentre® 4265 Multifunction Printer
System Administrator Guide
Printing
Print from USB
This feature allows you to print a file that is stored on a USB Flash Drive from the USB port on the printer
control panel.
Before you begin:
Enable USB ports. For details, see USB Port Security on page 71.
Enabling Print from USB
1. In CentreWare Internet Services, click Properties > Services.
2. Click USB.
3. For Enable Print from USB, select Enable.
4. Click Save.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 85
Printing
Setting the Delete Held Job After Timer
When the Delete Held Job After timer expires, jobs held in the Active Jobs and Personal & Secure Job
tabs are deleted.
1. At the control panel, press Log In/Out.
2. Type admin, then touch Next.
3. Type your password, then touch Done.
Note: The system administrator user name is admin and the default password is 1111.
4. At the printer control panel, press the Machine Status button, then touch the Tools tab.
5. Touch Device Settings > Timers.
6. Touch Delete Held Job After.
7. To enable the Delete Held Job After timer, touch Enabled.
8. To select the desired time, press the arrow buttons, or enter a value using the numeric keypad.
9. Touch OK.
86 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
6
Copying
This chapter includes:
• Changing the Default Copy Settings ........................................................................................................................... 88
• Limiting Access to Copying .............................................................................................................................................. 91
• Managing Access to 1-Touch Services and Presets ............................................................................................... 92
• Specifying ID Card Copy Settings ................................................................................................................................. 93
®
Xerox
System Administrator Guide
WorkCentre® 4265 Multifunction Printer 87
Copying
Changing the Default Copy Settings
The printer uses the default copy settings on all copy jobs unless you change them for an individual job.
You can modify the default copy settings.
Specifying Default Copy Settings in CentreWare Internet Services
1. In CentreWare Internet Services, click Properties > Services.
2. Click Copy.
3. For Defaults, click the Pencil icon.
4. To modify copy settings, click Copy Settings, then click Edit.
5. To modify the input settings, click Input Settings, then click Edit.
6. To modify the output settings, click Output Settings, then click Edit.
Setting Defaults for Covers at the Control Panel
Note: If Booklet Creation is turned off or the paper supply is set to Auto Select, Covers Options are
unavailable.
To set covers defaults:
1. At the printer control panel, press the Machine Status button, then touch the Tools tab.
Note: To access this feature at the control panel, log in as an administrator.
2. Touch Service Settings > Copy > Feature Defaults.
3. Touch MoreFeatures > Covers.
4. Touch an option, then touch OK.
Setting Defaults for Transparency Separators at the Control Panel
Note: The default option for transparency separators is available only when you set the paper
supply for transparencies.
To set defaults for Transparency Separators:
1. At the printer control panel, press the Machine Status button, then touch the Tools tab.
Note: To access this feature at the control panel, log in as an administrator. administrator.
2. Touch Service Settings > Copy > Feature Defaults.
3. Touch More Features > Transparency Separators.
4. Touch an option, then touch OK.
88 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Copying
Changing the Feature Order on the Control Panel
You can change the order that copy features appear on the control panel touch screen.
To change the feature order:
1. At the printer control panel, press the Machine Status button, then touch the Tools tab.
Note: To access this feature at the control panel, log in as an administrator. administrator.
2. Touch Service Settings > Copy > Feature Order.
3. For First Tab Layout, select the number of features to include on the first tab. Features not included
on the First Tab Layout are included on the More Features tab.
4. To change the position of a feature, select the feature, then use the arrows.
5. When finished, touch OK.
Showing, Locking, and Hiding Copy Features on the Control Panel
You can select the features to appear on the control panel and lock settings to prevent change.
To set controls for copy features:
1. At the printer control panel, press the Machine Status button, then touch the Tools tab.
Note: To access this feature at the control panel, log in as an administrator. administrator.
2. Touch Service Settings > Copy > Show/Lock/Hide Features.
3. Touch a feature, then for Feature Status, select an option.
4. When finished, touch OK.
Managing User Presets at the Control Panel
You can manage user presets for copy features at the control panel.
To manage user presets:
1. At the printer control panel, press the Machine Status button, then touch the Tools tab.
Note: To access this feature at the control panel, log in as an administrator. administrator.
2. Touch Service Settings > Copy > Preset Management.
3. Select a preset, then choose an option.
− To edit the preset, touch the Pencil icon.
− To delete the preset, touch X.
− To delete all presets, touch XX.
4. When finished, touch OK.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 89
Copying
Changing the Paper Supply Auto Select Policy at the Control Panel
If Paper Supply Auto Select is set to On, the printer selects the most appropriate size paper tray when
there is no exact match for the copy job. If Paper Supply Auto Select is set to Off, the printer hides the
Auto Select option, and the default paper selection is set to Tray 1.
To set the Paper Supply Auto Select policy:
1. At the printer control panel, press the Machine Status button, then touch the Tools tab.
Note: To access this feature at the control panel, log in as an administrator. administrator.
2. Touch Service Settings > Copy > Paper Supply Auto Detect Policy.
3. Select On or Off, then touch OK.
Reducing or Enlarging Presets on the Control Panel
To set the Reduce/Enlarge Presets:
1. At the printer control panel, press the Machine Status button, then touch the Tools tab.
Note: To access this feature at the control panel, log in as an administrator. administrator.
2. Touch Service Settings > Copy > Reduce/Enlarge Presets.
3. To reduce or enlarge a preset, touch an existing preset, then touch - or +.
4. To restore the original values, touch Reset All.
5. After you have changed your presets, touch OK.
90 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Copying
Limiting Access to Copying
The Copy Lock options limit access to copying by requiring a password to use the Copy function. You can
also turn off copying.
To view or modify user permissions:
1. In CentreWare Internet Services, click Properties > Services.
2. Click Copy.
3. To edit security settings, for Security, click the Pencil icon.
4. To modify User Permissions, for Feature, click Edit.
5. To configure Guest User roles, click the Pencil icon.
6. For Manage Permissions, select the required options.
7. Click Save.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 91
Copying
Managing Access to 1-Touch Services and
Presets
You can use 1-Touch Services and Presets to save settings for Copy, Email, Fax, Scan To, and Workflow
Scanning services. You can set access to these features for all users or for administrators only. You can
also turn off access to specific 1-Touch Services and presets for individual users.
Note: Not all features are available for all services.
To set permission to save 1-Touch Services and presets:
1. At the printer control panel, press the Machine Status button.
2. Touch Tools > Service Settings > 1-Touch/Presets.
Note: To access this feature at the control panel, log in as an administrator.For Permission to Save
1-Touch, select an option.
3. For Permission to Save Preset, select an option.
4. Touch OK.
To limit access to 1-Touch Services:
1. In CentreWare Internet Services, click Properties > Login/Permissions/Accounting.
2. Click User Permissions.
3. To configure Guest User roles, click the Pencil icon.
4. To limit access to a specific 1-Touch Service, select Not Allowed.
5. Click Save.
92 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Specifying ID Card Copy Settings
1. In CentreWare Internet Services, click Properties > Services.
2. Click ID Card Copy.
3. For Defaults, click the Pencil icon.
4. Configure settings as needed, then click Save.
5. To edit security settings, for Security, click the Pencil icon.
6. To modify user permissions roles, click the Pencil icon.
7. To configure Guest User roles, click the Pencil icon.
8. For Manage Permissions, select the required options.
9. Click Save.
Copying
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 93
7
Scanning
This chapter includes:
• Scanning to an Email Address ........................................................................................................................................ 96
• Scan to USB .......................................................................................................................................................................... 111
• Scanning to a User Home Folder ................................................................................................................................. 112
• Enabling Remote Scanning using TWAIN ............................................................................................................... 114
• Configuring Scan To Destination ................................................................................................................................ 115
®
Xerox
System Administrator Guide
WorkCentre® 4265 Multifunction Printer 95
Scanning
Scanning to an Email Address
The email feature allows you to scan a document and send it to an email address as an attachment.
Before you begin:
• Configure SMTP settings. For details, see Configuring SMTP Server Settings on page 97.
• Note the IP address or host name of the server.
For instructions on using this feature, see the User Guide for your printer model.
96 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Scanning
Email
Configure email settings on the Email Setup page in CentreWare Internet Services. Email settings apply
to all services that use SMTP, including Internet Fax and Scan to Email.
Accessing the Email Setup Page
1. In CentreWare Internet Services, click Properties > Services.
2. Click Email.
Configuring SMTP Server Settings
1. In CentreWare Internet Services, click Properties > Services.
2. Click Email.
3. To access SMTP server settings, for Server to Send Emails (SMTP), click the Pencil icon.
4. To set auto discovery, for Auto Discover SMTP Server, select the check box or enter the SMTP server
domain.
5. Select the Name or IP Address type.
6. Type the appropriately formatted address or host name of your server and change the default port
number as needed.
7. Under Device Email Address, type the email address of the printer.
8. If the SMTP server requires authentication, for SMTP Authentication, complete the following steps.
a. For Server Requires SMTP Authentication, select the check box.
b. For Login Credentials, select an option.
•System: The printer authenticates itself using the Login Name and Password that you
configure on this page.
•Authenticated User: This option is available only when Network Authentication is
enabled.
c. If you select System, type the Login Name and Password used to access the server. Enable
Select to save new password to update the password for an existing Login Name.
9. For Connection Encryption, select a protocol that your server supports, then for Validate Server
Certificate, select Enable.
10. To define a maximum message size for emails with attachments, for Maximum Email Size (Message
and Attachment), select a size.
11. Click Apply.
12. If prompted, enter your password, then click OK.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 97
Scanning
Editing Optional Email Settings
You can use optional email settings to configure common features that apply to all emails sent from the
printer. Common features include email receipts, message body and signature, and From field editing.
To edit optional email settings:
1. In CentreWare Internet Services, click Properties > Services.
2. Click Email.
3. To edit a setting, click the Pencil icon.
Configuring Address Book Policies
1. In CentreWare Internet Services, click Properties > Services.
2. Click Email.
3. To configure the Address Book settings stored in the printer, for Device Address Book, click Edit.
4. To allow users to locate email addresses in the Device Address Book, for Use Device Address Book,
select Yes. To hide the address book from users, select No.
5. To configure favorite email contacts to appear first when you access the email service, select View Favorites on Scan To Service Entry.
6. To use a network address book and configure LDAP server settings, for Network Address Book
(LDAP), click Edit.
7. If an LDAP network address book is configured, to allow users to locate email addresses in the
Network Address Book, select Yes. To hide the address book from users, select No.
8. To allow users to create or edit contacts in the Device Address Book from the printer control panel,
select All Users.
9. Click Save.
98 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Scanning
Configuring Email Security Settings
Configuring Email Security
1. In CentreWare Internet Services, click Properties > Services.
2. Click Email.
3. To edit security settings, for Security, click the Pencil icon.
4. For Security Settings, configure the settings.
a. For Email Encryption Enablement, select an option.
• Off: Use this option to disable email encryption.
• Always On; Not editable by user: Use this option to restrict users from turning Email
Encryption on or off at the control panel.
•On; Editable by user: Use this option to allow users to turn Email Encryption on or off at
the control panel.
b. If you select Editable by user, select the default setting for users at the control panel. For Email
Encryption Default, select On or Off.
c. For Encryption Algorithm, select the algorithm used by your email server.
d. To enable email signing, for Email Signing Enablement, select an option.
• Off: Use this option to disable email signing.
• Always On; Not editable by user restricts users from turning Email Signing off at the
control panel.
•On; Editable by user: Use this option to allow users to turn Email Signing on or off at the
control panel.
e. If you select Editable by user, select the default setting for users at the control panel. Under
Email Signing Default, select On or Off.
5. For From Field Display, select an option.
6. For User Policies, configure settings as needed.
a. For "To:" Field Security Options, select a restriction policy.
b. For Restrict to Defined Domains, to configure a list of acceptable domains, click Add Domains.
c. To restrict authenticated users from sending emails to others, next to Auto Send to Self, select
Enable.
7. To clear the Recipient List after an emailed scan job completes, for Global Policies: Shared Scan
Policy, select an option.
8. To import a certificate, for Certificate Management, click Import.
9. To export a certificate, for Certificate Management, click Export.
10. To delete a certificate, select the certificate, then click Delete.
11. Click Save.
Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer 99
Scanning
Workflow Scanning
Workflow Scanning allows you to scan an original document, distribute, and archive the scanned image
file. The Workflow Scanning feature simplifies the task of scanning many multi-page documents and
saving the scanned image files in one or more file locations.
To specify how and where scanned images are stored, create a template. You can create, manage, and
store multiple templates in a template pool repository on a network server. For instructions on using this
feature, see the User Guide for your printer model.
Creating a Local Template for Workflow Scanning
1. In CentreWare Internet Services, click Properties > Services.
2. Click Workflow Scanning.
3. To configure a template, for Manage Template Collection, click the Pencil icon.
4. To create a local template, click Create Template (Local).
5. Enter the Template Name and, as needed, information for Description and Owner.
6. Click Add.
7. Configure as needed.
Configuring a Remote Template Pool for Workflow Scanning
1. In CentreWare Internet Services, click Properties > Services.
2. Click Workflow Scanning.
3. To configure a template, for Manage Template Collection, click the Pencil icon.
4. To configure a Template Pool, click Setup Template Pool (Remote).
5. Select a Default Repository Protocol.
6. Select the destination address, then enter the host and port information.
7. Type the path and filename required by the protocol.
8. To save files to a destination, type the login and password for that destination.
9. Click Save.
100 Xerox
System Administrator Guide
®
WorkCentre® 4265 Multifunction Printer
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.