Xerox WorkCentre 6400 System Administrator Guide

Download

Page 1

Xerox® WorkCentre®6400

System Administrator Guide Guide de l’administrateur système

Español Guía del administrador del sistema

Português Guia de Administração do Sistema

Xerox WorkCentre 6400

Color Multifunction Printer

Page 2

© 2009 Xerox Corporation. All Rights Reserved. Unpublished rights reserved under the copyright laws of the United States. Contents of this publication may not be reproduced in any form without permission of Xerox Corporation.

Copyright protection claimed includes all forms of matters of copyrightable materials and information now allowed by statutory or judicial law or hereinafter granted, including without limitation, material generated from the software programs which are displayed on the screen such as styles, templates, icons, screen displays, looks, etc.

Xerox

, CentreWare®, WorkCentre®, PrintingScout®, Walk-Up®, FreeFlow®, SMARTsend®, Scan to PC Desktop®, and the sphere of

connectivity design are trademarks of Xerox Corporation in the United States and/or other countries.

Adobe

Reader®, Adobe Type Manager®, ATM™, Flash®, Macromedia®, Photoshop®, and PostScript® are trademarks of

Adobe Systems Incorporated in the United States and/or other countries.

Apple

, AppleTalk®, Bonjour®, EtherTalk®, Macintosh®, Mac OS®, and TrueType® are trademarks of Apple Computer, Inc. in the

United States and/or other countries.

HP-GL

, HP-UX®, and PCL® are trademarks of Hewlett-Packard Corporation in the United States and/or other countries.

IBM

and AIX® are trademarks of International Business Machines Corporation in the United States and/or other countries.

Microsoft

, Windows Vista®, Windows®, and Windows Server® are trademarks of Microsoft Corporation in the United States and/or

other countries.

Novell

, NetWare®, NDPS®, NDS®, Novell Directory Services®, IPX™, and Novell Distributed Print Services™are trademarks of

Novell, Incorporated in the United States and/or other countries.

SGI

IRIX® is a trademark of Silicon Graphics, Inc.

Sun

, Sun Microsystems™, and Solaris™ are trademarks of Sun Microsystems, Incorporated in the United States and/or other

countries.

UNIX

is a trademark in the United States and other countries, licensed exclusively through X/ Open Company Limited.

Page 3

1Introduction

Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Configuration Steps. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

2 Initial Setup

Physical Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Initial Setup at the Control Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

The Installation Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Quick Setup Home . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Configuration Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

System Administrator Access at the Control Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Manually Setting the Printer’s Ethernet Interface Speed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Assigning a Network Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Initial Setup in CentreWare IS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Accessing CentreWare IS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Locking or Unlocking the Printer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Changing the System Administrator Password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Accessing the Configuration Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Using the Configuration Overview Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Assigning a Name and Location to the Printer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Enabling Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

3 Network Configuration

TCP/IP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Enabling TCP/IP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Configuring TCP/IP Settings at the Control Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Configuring TCP/IP Settings in CentreWare IS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

SLP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

SNMP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Configuring SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Editing SNMP v1/v2c Properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Editing SNMP v3 Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

SNMP Advanced Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

SSDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

LPR/LPD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Enabling LPR/LPD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Raw TCP/IP Printing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Basic Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Advanced Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 4

Contents

SMTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Configuring SMTP Server Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

LDAP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Configuring LDAP/LDAPS Server Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Configuring Contexts for LDAP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

Defining User Mappings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

Configuring Authorization Access by Groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

Configuring Filters for LDAP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

POP3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

HTTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Enabling HTTP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Configuring HTTP Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Proxy Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

NTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

AppleTalk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

Enabling AppleTalk on the printer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

NetWare . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Configuring NetWare Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Microsoft Networking. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

Configuring Microsoft Networking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

Configuring WINS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

WSD. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

Enabling WSD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

4Security

Setting up Access Rights . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Local Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

Network Authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

Authentication Using a Card Reader System. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

Controlling Access to Tools and Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

Controlling Access for All Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

Controlling Access for an Individual User or Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

Digital Certificates. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

Installing a Digital Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

Managing Trusted Certificate Authorities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Secure HTTP (SSL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

Enabling Secure HTTP (SSL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

IPsec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

Enabling IPsec. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

Managing Actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

Managing Protocol Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

Managing Host Groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

Managing Security Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 5

802.1X. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

Enabling and Configuring 802.1X . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

Stored Data Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

Overwriting Image Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

Manually Deleting Image Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

Scheduling Routine Deletion of Image Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

PostScript Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

IP Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

Creating an IP Filter Rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

Editing or Deleting IP Filter Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

Arranging the Execution Order of IP Filter Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

Audit Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Enabling Audit Log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Saving an Audit Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Interpreting the Audit Log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

5Printing

Saving and Reprinting Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82

Enabling the Reprint Saved Jobs Feature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82

Creating and Managing Saved Jobs Folders . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82

Saving and Printing Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

Backing up Saved Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

Restoring Saved Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

Managing Banner Sheet Printing Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86

Enabling Banner Sheet Printing in CentreWare IS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86

Enabling Banner Sheet Printing for LPR Print Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86

Enabling Banner Sheet Printing at the Control Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86

Enabling Banner Sheet Printing in the Printer Driver. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86

UNIX, Linux, and AS/400 Printing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

Xerox Services for UNIX Systems (XSUS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

Supported Printing Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

Installing XSUS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

Printing from a Linux Workstation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90

AS/400. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90

Contents

6 Managing Copy Functions

Specifying Default Copy Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94

Changing the Reading Order . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95

Creating Copy Feature Presets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96

Edge Erase Presets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96

Image Shift Presets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96

Reduce/Enlarge Presets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 6

Contents

7Scanning

Scanning to a Folder on the Printer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100

Enabling or Disabling Scan to Mailbox . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100

Setting Scan Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100

Managing Folders and Scanned Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101

Scanning to an Email Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104

Editing Default Scan Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104

Managing the Email Address Book . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104

Troubleshooting Scan to Email . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104

Workflow Scanning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106

Configuring Workflow Scanning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106

Configuring File Repository Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106

Configuring the Default Template . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111

Configuring Workflow Scanning General Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112

Setting Scanned Image File Naming Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113

Configuring Template Pool Repository Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113

Updating the List of Templates at the Control Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

Configuring a Validation Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

Troubleshooting Workflow Scanning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115

Scanning to a User’s Home Folder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116

Configuring Scan to Home . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116

Configuring the Printer for the Xerox Scan Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117

8Fax

Embedded Fax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120

Enabling Embedded Fax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120

Configuring Embedded Fax Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120

Setting Fax Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121

Setting Transmission Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123

Fax Mailboxes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124

Fax Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126

Chain Dialing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127

Fax Polling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127

Troubleshooting Embedded Fax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129

Server Fax. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131

Configure a Server Fax Filing Repository. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131

Configure Server Fax Default Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133

Troubleshooting Server Fax. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134

Internet Fax. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135

Configuring Default Internet Fax Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .135

Configuring Internet Fax Receive Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .136

Internet Fax Addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137

Troubleshooting Internet Fax. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 7

LAN Fax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138

Sending a LAN Fax. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138

Adding a Fax Recipient. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138

Adding a Recipient from a Personal Phonebook. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138

Setting up a Cover Sheet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139

Setting LAN Fax Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139

Editing the Phonebook . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140

9 Accounting

Xerox Standard Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142

Enabling Xerox Standard Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142

Creating a Group Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142

Creating a New User Account and Setting Usage Limits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143

Creating a General Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143

Maximum Usage Limits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144

Resetting Usage Limits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144

Printing a Report. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145

Network Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146

Enabling and Configuring Network Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146

Troubleshooting Network Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .147

Enabling Accounting in Print Drivers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148

Contents

10 Administrator Tools

Monitoring Alerts and Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150

Alerts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150

Energy Saving Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152

Touch Screen Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153

Setting the Default Touch Screen View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153

System Time Out . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153

Taking the Printer Offline . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154

SMart eSolutions and Billing Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156

SMart eSolutions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156

View Usage and Billing Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157

Cloning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159

Address Books. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161

Internet Fax and Email Address Book . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161

Fax Address Book . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 162

LAN Fax Address Book . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 162

Font Management Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163

Network Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164

Downloading a Network Log to a USB Memory Stick . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164

Downloading a Network Log from CentreWare IS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164

Customizing Printer Contact Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165

Updating the Printer Software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166

Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166

Auto Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 8

Contents

11 Customization and Expansion

Xerox Extensible Interface Platform (EIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

Enabling Extensible Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

Auxiliary Interface Kit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171

A Audit Log Event Identification Numbers

Audit Log Event Identification Numbers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174

Index

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 9

Introduction

This chapter includes:

• Overview on page 10

• More Information on page 11

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 10

Introduction

Overview

This guide is designed for a system administrator with network administrator rights who has knowledge of networking concepts as well as experience creating and managing network user accounts.

This guide will help you install, configure, and manage the printer on a network.

Notes:

• Network features are not available if you are connected over USB.

• Embedded fax features are not available for all printer models.

Configuration Steps

When configuring the printer for the first time, Xerox suggests that you follow these steps in this order:

1. Connect an Ethernet cable from your printer to the network.

2. Confirm that your printer is recognized on your network. By default, the printer is configured to receive an IP address from a DHCP server over a TCP/IP network. If you have another type of network, or want to assign a static IP address, see Enabling TCP/IP on page 22.

3. Provide basic information such as your location, time zone, and date and time preferences, by completing the Installation Wizard and the Quick Setup Home wizard. For details, see Quick Setup

Home on page 15.

4. Print a Configuration Report listing the printer’s current configuration. Review the report and locate the printer’s IP address. For details, see Configuration Report on page 15.

5. Open a Web browser andtype the IP address of your printer to access CentreWare Internet Services (CentreWare IS). CentreWare IS is administration and configuration software installed on the printer’s embedded Web server. For more information see Accessing CentreWare IS on page 17.

Note: Most configuration settings are located on the Properties tab in CentreWare IS. If you set

your printer to Locked in the Installation Wizard, you must log in as the system administrator. For details, see Accessing CentreWare IS on page 17.

6. Print the configuration checklist. The Configuration Checklist lists provides space for you to write down important information as you go through the configuration process. Use it to record information about your network settings, including passwords, network paths, and server addresses. For details, see Accessing the Configuration Report on page 18.

7. Configure Authentication. For details, see Setting up Access Rights on page 54.

8. Configure Security. For details, see Security on page 53.

9. Enable services in CentreWare IS. For details, see Enabling Services on page 19.

10. Configure Print, Scan, and Fax features. For details, see Printing on page 81, Scanning on page 99, and Fax on page 119.

11. Configure Accounting. For details, see Accounting on page 141.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 11

More Information

See the following links for more information about your printer.

Information Source

Installation Guide Packaged with printer

www.xerox.com/office/WC6400docs

Quick Use Guide Packaged with printer and

www.xerox.com/office/WC6400docs

User Guide (PDF) Software and Documentation Disc

www.xerox.com/office/WC6400docs

Quick Start Tutorials www.xerox.com/office/WC6400docs

Video Tutorials www.xerox.com/office/WC6400docs

Recommended Media List www.xerox.com/paper (United States)

www.xerox.com/europaper (Europe)

Introduction

Online Support Assistant www.xerox.com/office/WC6400support

Tec hn ic al Su pp o rt www.xerox.com/office/support

Information about touch screen or error messages

Information pages Click Status > Information Pages in CenterWare IS

CentreWare IS Help Help button in CentreWare IS

Control panel Help button

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 12

Introduction

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 13

Initial Setup

This chapter includes:

• Physical Connection on page 14

• Initial Setup at the Control Panel on page 15

• Initial Setup in CentreWare IS on page 17

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 14

Initial Setup

Physical Connection

To connect your printer:

1. Connect the power cable to the printer, and plug it into an electrical outlet.

2. Connect one end of a Category 5 or better Ethernet cable to the Ethernet port in the back of the printer. Connect the other end of the cable to a correctly configured network port.

3. If your printer has fax installed, connect it to a correctly configured telephone line.

4. Turn the printer on.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 15

Initial Setup

Initial Setup at the Control Panel

The Installation Wizard

The first time the printer is turned on, the Installation Wizard starts. The wizard prompts you with a series of questions to help you configure basic settings for your printer. You are prompted to:

• Select the preferred language for the printer.

• Select Customer as your profile.

• Select default paper size preferences.

• Set the current date and time.

• Select your local time zone.

Set the access status of the printer to be Locked or Unlocked. If you select Locked, you must log in as a system administrator to configure the printer at the control panel or from within CentreWare IS. For details, see Accessing CentreWare IS on page 17.

Note: You can change these settings at any time.

Quick Setup Home

Once the Installation Wizard completes, the Quick Setup Home screen displays. This screen contains three wizards:

• IP Address Settings: You can assign a static IP address or change the default dynamic addressing settings.

• Contact Numbers: You can type phone numbers that users can reference for support or supplies.

• Fax Setup: You can type the printer’s fax phone number or numbers and specify if you want the printer to send, receive, or send and receive faxes.

Note: You can complete these wizards at any time.

Configuration Report

When the Quick Setup Home wizard completes, the printer restarts and a Configuration Report automatically prints. The Configuration Report lists the printer’s current settings. If you want to disable automatic printing of a Configuration Report at startup, see Accessing the Configuration Report on page 18.

System Administrator Access at the Control Panel

To configure the printer from the control panel, press the Machine Status button, then touch the To ol s tab. If the printer is locked, log in as the system administrator.

To log in as a system administrator:

1. At the printer control panel, press the Log In/Out button.

2. Type admin and touch Next.

3. Type the Admin Password and touch Enter. The default password is 1111.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 16

Initial Setup

Manually Setting the Printer’s Ethernet Interface Speed

The printer’s Ethernet interface automatically detects the speed of your network. If your network is connected to another auto-sensing device, such as a hub, the hub may not detect the correct speed. Refer to the configuration page to make sure the printer has detected the correct speed of your network. To view the configuration page, see Accessing the Configuration Report on page 18.

To manually set the speed of the printer’s Ethernet interface:

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. At the printer control panel, press the Machine Status button, then touch the To ol s tab.

2. Touch Network Settings > Advanced. When the warning message displays, touch Continue.

3. Touch Ethernet Physical Media.

4. Select the Speed to match the speed set on your hub or switch.

5. Touch Save, then touch Close.

6. Press the Log In/Out button.

7. Touch Confirm to exit the Tools Pathway.

Assigning a Network Address

By default, the printer automatically acquires a network address from a DHCP server. To assign a static IP address, configure DNS server settings, or configure other TCP/IP settings, see TCP/IP on page 22.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 17

Initial Setup

Initial Setup in CentreWare IS

CentreWare IS is an application on the printer’s embedded Web server that allows you to configure and administer the printer from a Web browser on any computer.

Accessing CentreWare IS

Before you begin:

• TCP/IP and HTTP must be enabled to access CentreWare IS. If you disable either of these services, you must enable them at the printer before you can access CentreWare IS. For details, see

Accessing CentreWare IS on page 17.

• Refer to the Configuration Report to determine your printer’s IP address.

To access CentreWare IS:

At your computer, open a Web browser, type the printer’s IP address in the address field, then press Enter or Return.

Note: If your printer is locked, type the system administrator user name and password to access

the Properties tab. The administrator user name is admin and the default password is 1111.

Locking or Unlocking the Printer

To lock or unlock the printer:

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > Access Rights > Tools and Feature Access.

• Select Open Access - Unlock All Tools and Features to unlock the printer.

• Select Standard Access - Only Lock Tools to lock the printer.

• Select Custom Access to lock or unlock the services in the list.

2. Click Apply.

Changing the System Administrator Password

Xerox recommends that you change the default system administrator password after you configure the printer for security. Be sure to store the password in a secure location.

To change the administrator password:

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > Admin Password.

2. Under User Name, type the New Password.

3. Retype the password to verify.

4. Click Apply.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 18

Initial Setup

Accessing the Configuration Report

The Configuration Report lists the printer’s current settings. By default, a Configuration Report prints at startup.

Viewing or Printing the Configuration Report in CentreWare IS.

1. Click Status > Configuration Report.

2. To print the report, click Print Configuration Page.

Disabling the Configuration Report at Startup

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Services > Printing > General.

2. Under Configuration Report, clear Print at Power on.

3. Click Apply.

Using the Configuration Overview Page

The Configuration Overview page provides shortcuts to commonly accessed pages under the Properties tab.

To access the Configuration Overview page, click Properties > Configuration Overview.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

Assigning a Name and Location to the Printer

The Description page provides a place to assign a name and location to the printer for future reference.

To assign a name and location:

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Description.

2. Under Device Name, type a name for the printer.

3. Under Location, type the location of the printer.

4. Click Apply.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 19

Initial Setup

Enabling Services

Services must be enabled in CentreWare IS on the Service Registration page before they can be managed through the Tools & Feature Access page. For details on Tools & Feature Access setup, see

Controlling Access to Tools and Features on page 61.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Services > Service Registration.

2. Ensure that all listed services are enabled.

3. Click Apply.

Note: If a service is not enabled on the Service Registration page, you may not be able to view or

manage it from the Tools and Features page. Ensure that the desired service is enabled.

Viewing Services on the Control Panel

To ssee which services are enabled:

1. At the printer control panel, press Machine Status, then touch the Machine Information tab.

2. Touch Installed Options.

3. All installed options registered in CentreWare IS and set to Locked or Unlocked on the Tools & Services page, along with their status display.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 20

Initial Setup

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 21

Network Configuration

This chapter includes:

• TCP/IP on page 22

• SLP on page 27

• SNMP on page 28

• SSDP on page 31

• LPR/LPD on page 32

• Raw TCP/IP Printing on page 33

• SMTP on page 35

• LDAP on page 37

• POP3 on page 42

• HTTP on page 43

• Proxy Server on page 44

• NTP on page 45

• AppleTalk on page 46

• NetWare on page 47

• Microsoft Networking on page 49

• WSD on page 50

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 22

Network Configuration

TCP/IP

Transmission Control Protocol (TCP) and Internet Protocol (IP) are a two protocols within the Internet Protocol Suite. IP manages the transmission of messages from computer to computer while TCP manages the actual end-to-end connections.

Note: You can configure IPv4 settings at the printer control panel or through CentreWare IS. You

can only configure IPv6 through CentreWare IS.

Enabling TCP/IP

Notes:

• By default, TCP/IP is enabled. If you disable TCP/IP, you must enable it at the printer

control panel before you can access CentreWare IS.

• If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. At the printer control panel, press the Machine Status button, then touch the To ol s tab.

2. Touch Network Settings > TCP/IP Settings.

3. Touch TCPIP Enablement.

4. Touch Enable for IPv4 or IPv6, then touch Save.

Configuring TCP/IP Settings at the Control Panel

Manually Configuring the Network Address

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. At the printer control panel, press the Machine Status button, then touch the To ol s tab.

2. Touch Network Settings > TCP/IP Settings.

3. Touch Dynamic Addressing > Disabled for DHCP, then touch Save.

4. Touch IP Address/Host Name.

5. Touch the field under IPv4 Address, then type the static IP address using the touch-screen

keypad.

6. Touch the field under Host Name, then type the host name.

7. Touch Save, then touch Close.

8. Touch Subnet and Gateway.

9. Touch Subnet Mask, then type the subnet mask address using the touch-screen keypad.

10. Touch Save.

11. Touch IP Gateway, type the gateway address using the touch-screen keypad, then touch Save.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 23

Network Configuration

Configuring Dynamic Address Settings

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. At the printer control panel, press the Machine Status button, then touch the To ol s tab.

2. Touch Network Settings > TCP/IP Settings.

3. Touch Dynamic Addressing.

4. Touch DHCP, BOOTP, or RARP, then touch Save.

Configuring DNS/DDNS Settings

Domain Name System (DNS) and Dynamic Domain Name System (DDNS) is a system that maps host names to IP addresses.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. At the printer control panel, press the Machine Status button, then touch the To ol s tab.

2. Touch Network Settings > TCP/IP Settings.

3. Touch DNS Configuration.

Note: Your company’s DHCP server may provide the following information if DHCP is enabled.

4. Touch Domain Name, then touch the field under Domain Name, type the domain name using the touch-screen keypad, then touch Save.

5. Touch Preferred DNS Server, then touch the field under Preferred DNS Server, type the server address using the touch-screen keypad, then touch Save.

6. Touch Alternate DNS Servers, then touch the field under Alternate DNS Server #1, type the server address using the touch-screen keypad.

7. Touch the field under Alternate DNS Server #2, type the server address using the touch-screen keypad, then touch Save.

8. Touch Dynamic DNS Registration, then touch Enabled if required.

Configuring TCP/IP Settings in CentreWare IS

If your printer has a valid network address, you can configure TCP/IP settings in CentreWare IS.

Configuring Settings for IPv4

IPv4 can be used in addition to or in place of IPv6. If both protocols are disabled, you cannot access CentreWare IS.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > IP (Internet Protocol).

2. IPv4 is enabled by default.

CAUTION: If both IPv4 and IPv6 are disabled, you cannot access CentreWare IS. You must re-

enable TCP/IP at the printer control panel before you can access CentreWare IS. Disabling TCP/IP or changing the IP address also disables any dependant protocols.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 24

Network Configuration

3. Type a unique Host Name for your printer.

4. Select the desired method for obtaining a dynamic IP address from the IP Address Resolution drop-down menu, or select Static to define a static IP address.

5. If you select Static, type the Machine IP Address, Subnet Mask, and Gateway Address in the appropriate fields.

Notes:

• If you select BOOTP or DHCP, you cannot change the IP address, Subnet Mask, or

default gateway.

• If RARP address resolution mode is selected, you cannot change the IP address. Select

Static to disable dynamic addressing.

6. Type a valid Domain Name.

DNS Configuration for IPv4

1. Type an IP address for the Preferred DNS Server, Alternate DNS Server 1, and Alternate DNS Server 2.

Note: If DHCP or BOOTP is the IP Address Resolution setting, you cannot change the Domain

Name, Primary DNS Server, Alternate DNS Server 1, and Alternate DNS Server 2 settings.

2. Under Dynamic DNS Registration (DDNS), select Enabled.

Note: If your DNS Server does not support dynamic updates, you do not need to enable DDNS.

3. Under Release Registration, select Enabled if you want the printer to release its IP address when it restarts.

Zero-Configuration Networking

1. If the printer cannot connect to a DHCP server to obtain an IP address, select Self Assigned Address to allow the printer to assign itself a Link-Local address. Link-Local addresses are between

169.254.0.0 and 169.254.255.255.

2. Select Enable under Multicast DNS to enable the printer to use DNS queries over IP Multicast

Note: Multicast DNS allows the Apple Bonjour protocol to map host names to IP addresses on a

network without using a conventional DNS server. This is used to advertise printer services over a network.

3. Click Apply.

Configuring IP Settings for IPv6

IPv6 hosts can automatically configure themselves when connected to a routed IPv6 network using the Internet Control Message Protocol Version 6 (ICMPv6). ICMPv6 performs error reporting for IP along with other diagnostic functions. When first connected to a network, a host sends a link-local multicast router solicitation request for its configuration parameters. If suitably configured, routers

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 25

Network Configuration

respond to this request with a router advertisement packet containing network-layer configuration parameters.

Notes:

• IPv6 is optional and may be used in addition to or in place of IPv4. If both protocols are

disabled, you cannot access CentreWare IS.

• If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > IP (Internet Protocol).

2. Under Protocol, select Enabled. By default, IPv6 is disabled.

CAUTION: If both IPv4 and IPv6 are disabled, you cannot access CentreWare IS. You must re-

enable TCP/IP at the printer control panel before you can access CentreWare IS. Disabling TCP/IP or changing the IP address also disables any dependant protocols.

Notes:

• The host name is the same for IPv4 and IPv6. If you change the host name for IPv6, the

host name changes for IPv4 as well.

• Enabling or Disabling IPv6 will restart the Network Controller when you click Apply.

3. Type the required Domain Name.

4. Under Stateless Addresses, select Use Router Supplied Prefixes.

Notes:

• Router-supplied prefixes are 64-bit sub-network address that define how the printer can

perform auto-configuration. If routers are present, they will periodically send Router Advertisement packets containing address prefixes.

• Routers will not forward packets with link-local addresses.

• Enabling Stateless Addresses allows the printer to automatically populate the Link-Local

Address. Link-Local addresses are network addresses that are used to communicate on point-to-point links within one segment of a local network. They allow addressing hosts without requiring a public address prefix.

Default DHCP Settings

By default, the printer performs auto-address DHCP configuration every time it starts up. This is used for neighbor discovery and address resolution on the local IPv6 subnet.

1. Select one of the following options:

• Use DHCP as directed by a router: This default option is fully automatic and allows the

printer to obtain and display the DHCPv6 Address on the screen.

• Always Enable DHCP for address assignment and other configuration data: This options is

fully automatic and allows the printer to obtain and display the DHCPv6 Address on the screen along with additional configuration data.

• Never use DHCP: If you select this option, you must configure the Manual Address Options

and DNS separately.

• Always Enable DHCP for other configuration data only: This option only obtains other

configuration data.

2. If you want the printer to release its IP address when the it restarts, select Release DHCPv6 Address at Power Down.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 26

Network Configuration

DNS Configuration for IPv6

1. Type an IP address for the Preferred DNS Server, Alternate DNS Server 1, and Alternate DNS Server 2.

2. Select Prefer IPv6 DNS severs over IPv4 if you want to use IPv6 addresses.

Note: There is no support for IPv6 DDNS. The printer directs the DHCPv6 server to update DNS.

Manual Address Options

1. Select Enable Manual Address to enable Router Prefix attachment.

2. Select a router address prefix from the Router Prefix drop-down menu to populate the prefix for manual address entry.

Note: The Router Prefix is derived from router advertisements.

3. Click Add.

Note: Xerox recommends that you add one manual IPv6 address by choosing from the list of

router-supplied prefixes, however you can also supply your own prefix.

4. Click Apply.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 27

Network Configuration

SLP

Devices use Service Location Protocol (SLP) to announce and look up services on a local network. If you enable SLP on the printer, it becomes a Service Agent (SA) and announces its services on the network to User Agents (UA), who search for services, using the protocol.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > SLP.

2. If available, type an IP address for the Directory Agent (DA).

Note: Directory Agents (DA) are devices that cache services. They are used in larger networks to

reduce the amount of traffic. DAs are optional, however if a DA is present, then UAs and SAs are required to use it instead of communicating directly with the device.

3. Type the names for Scope 1, 2, and 3. Scopes are used to group services. Devices cannot see services that are in different scopes. The default value for Scope 1 is DEFAULT.

4. Select Multicast or Broadcast from the Message Type drop-down menu.

5. Type a value for Multicast Radius between 1 and 255. The default is 255.

6. Type a value for the Maximum Transmission Unit (MTU) between 484 and 32768. The default setting is 1400 bytes. MTU determines maximum packet size allowed to be transmitted for SLP.

Note: The maximum MTU for IP over Ethernet is 1500 bytes.

7. Click Apply.

8. Click OK.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 28

Network Configuration

SNMP

Simple Network Management Protocol (SNMP) is used in network management systems to monitor network-attached devices for conditions that require administrative attention. It consists of a set of standards for network management including an application layer, a database schema, and a set of data objects. Agents, or software modules, reside in the printer’s SNMPv3 engine. A manager is an SNMPv3 management application such as OpenView, that is used to monitor and configure devices on the network. The agent responds to read (GET) and write (SET) requests from the manager and can also generate alert messages, or Traps, based on certain events.

SNMP settings can be configured in CentreWare IS. You can also enable or disable Authentication Failure Generic Traps on the printer. SNMPv3 can be enabled to create an encrypted channel for secure printer management.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

Configuring SNMP

1. In CentreWare IS, click Properties > Connectivity > Protocols > SNMP.

2. Under SNMP Properties, select Enable SNMP v1/v2c Protocols to enable the protocol.

3. Select Enable SNMP v3 Protocol to enable this protocol, then click Apply.

Note: You m us t c li c k Apply to save your settings or the protocol will remain disabled.

4. Under Authentication Failure Generic Traps, select Enabled if you want the printer to generate a trap for every SNMP request that is received by the printer that contains an invalid community name.

Editing SNMP v1/v2c Properties

Note: Xerox recommends that you change the SNMP v1/v2c public and private community names

from the default values for security purposes.

1. In CentreWare IS, click Properties > Connectivity > Protocols > SNMP.

2. Under SNMP Properties, click Edit SNMP v1/v2c Properties.

3. Type a name up to 256 characters for the GET Community Name or use the default value of public. GET returns the password for the SNMP GET requests to the printer. Applications obtaining information from the printer using SNMP, such as CentreWare IS, use this password.

4. Type a name up to 256 characters for the SET Community Name or use the default value of private. SET returns the password for the SNMP SET requests to the printer. Applications that set information on the printer using SNMP, use this password

CAUTION: Any changes made to the GET or SET community names for this printer require

corresponding changes to GET or SET community names for each application that uses SNMP to communicate with this printer.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 29

Network Configuration

5. Type a name up to 256 characters for the default TRAP Community Name or use the default value of SNMP_TRAP.

Note: The Default TRAP community name is used to specify the default community name for all

traps generated by this printer. The Default TRAP community name can be overridden by the TRAP community name specified for each individual TRAP destination address. The TRAP community name for one address may not be the same TRAP community name specified for another address.

6. Click Apply button to accept the changes or Undo to retain the previous settings.

Editing SNMP v3 Settings

Notes:

• An administrator account is required to access this feature even if the printer is set to

unlocked. For details, see Accessing CentreWare IS on page 17.

• Before SNMPv3 can be enabled, a digital certificate must be installed on the printer and

SSL must be enabled. For more detail see Installing a Digital Certificate on page 62.

1. In CentreWare IS, click Properties > Connectivity > Protocols > SNMP.

2. Under SNMP Properties, click Edit SNMP v3 Properties.

3. Under Administrator Account, click Account Enabled to create the administrator account.

4. Type an Authentication Password then confirm it. This password is used to generate a key used

for authentication.

Note: The password must be at least 8 characters in length and can include any characters except

control characters.

5. Type a Privacy Password and confirm it. The Privacy password is used for encryption of SNMPv3

data. The passphrase used to encrypt the data needs to match with the Server.

6. Under Print Drivers/Remote Clients Account, click Account Enabled.

7. Click Save to accept the current settings or Undo to retain the previous settings.

8. Click OK.

SNMP Advanced Settings

Adding IP Trap Destination Addresses

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > SNMP.

2. Click Advanced Settings at the bottom of the page.

3. Under Trap Destination Addresses, click Add IP Address.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 30

Network Configuration

4. Type the IP address of the host running the SNMP manager application to be used to receive traps.

Note: Port 162/UDP is the default port for traps. You can select v1 or v2c based on what the trap

receiving system supports.

5. Under Traps, select the type of Trap s t o be Received by the SNMP manager.

6. Click Save to accept the new settings or Undo to retain the previous settings.

7. Click Apply.

8. Click OK.

Adding IPX Trap Destination Addresses

Internetwork Packet eXchange (IPX) is a routing protocol used by Novell NetWare environments.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > SNMP.

2. Click Advanced Settings at the bottom of the page.

3. Under Trap Destination Addresses, click Add IPX Address.

4. Type the 8-digit hexadecimal number that identifies the IPX External Network host configured to receive the trap.

5. Type the 48-bit Physical MAC Address of the computer running the SMNP manager application that is to receive the trap.

6. Type the IPX Socket Number of the computer running the SNMP manager application configured to receive the packets.

7. Under Traps, select the type of Traps to be Recei ved by the SNMP manager.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 31

Network Configuration

SSDP

Simple Service Discovery Protocol (SSDP) provides processes to allow network clients with little or no static configuration to discover network services. SSDP provides multicast discovery, server-based notification, and discovery routing options.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > SSDP.

2. Select Enabled to enable the protocol.

3. Type a value between 1 and 43200 minutes in the Cache Control field. The default value is 1440 minutes.

4. Type a number between 1 and 60 router hops in Time to Live for discovery advertisement. The default number of hops is 4.

5. Click Apply.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 32

Network Configuration

LPR/LPD

The Line Printer Daemon (LPD) and Line Printer Remote (LPR) protocols are used to provide printer spooling and network print server functionality for UNIX-like systems such as HP-UX, Linux, and Macintosh.

Note: For information on setting up print queues on your client system, refer to your client

system’s documentation.

Enabling LPR/LPD

Notes:

• Verify that TCP/IP and HTTP have been configured.

• If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > LPR/LPD.

2. Select Enable to enable the protocol.

Note: Disabling LPR/LPD will affect clients printing to the printer over TCP/IP using the LPR

printing port.

3. Type an LPR/LPD Port Number or use the default port number of 515.

4. Under Advanced Settings, select Enabled to allow PDL Switching. PDL switching allows the

printer to process single print jobs that contain two or more printer languages, such as a job with a PCL header prepended to a PostScript print job.

Note: This setting should normally be disabled.

5. Select Enabled to enable PDL banner page attributes override LPR control file attributes for job name and owner. This feature allows you to replace the standard information displayed on a banner page with the user name and job name from the print job.

6. Select the desired option from the Place temporary hold on which jobs drop-down menu. Options include:

• None (Use printer's default banner sheet job name if data file 1st): The printer will not

wait to receive the job control information. This selection may cause banner sheet information to print incorrectly.

• Only those with data file received 1st: The printer holds the job if the job's data file is

received first. This ensures the printer waits to receive the job's control file information so that the banner sheet contains accurate information.

• All (consistent with older implementations): This option puts all jobs on hold. All data is

received before a job begins to print. This setting can cause jobs to print slowly but will result in accurate banner sheet information.

7. Click Apply.

8. Click OK.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 33

Network Configuration

Raw TCP/IP Printing

Raw TCP/IP is a printing method used to open a TCP socket-level connection over Port 9100, to stream a print-ready file to the printer's input buffer. It then closes the connection either after sensing an End Of Job character in the PDL or after expiration of a preset time-out value. Port 9100 does not require an LPR request from the computer or the use of an LPD running on the printer. Raw TCP/IP printing is selected in Windows as the Standard TCP/IP port.

Basic Settings

Notes:

• TCP/IP must be enabled before Raw TCP/IP Printing is enabled.

• Raw TCP/IP printing is selected in Windows 2000 as the Standard TCP/IP port.

• If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Connectivity > Protocols > Raw TCP/IP Printing.

2. Select Enabled to enable the protocol.

3. Ensure that the TCP Port Number is set to 9100 for Port 1.

Note: To emulate HP JetDirect EX Plus 3, set Port 2 to 9101 and Port 3 to 9102.

4. Select Enabled for bidirectional communication.

5. Ensure that Maximum Connections per port (1-32) for each port is set to the default value of 8.

6. Set the End of Job Timeout to the desired number of seconds between 0 and 1800 before processing a job with an End of Job character. The default time is 300 seconds.

7. Select Enabled for PDL Switching to allow the printer to automatically switch between multiple supported PDLs within a single job.

Note: PDL Switching should normally be disabled.

8. Click Apply. To set all fields to printer default values, click Default All.

9. Click OK.

Advanced Settings

Additional Raw TCP/IP Printing options can be specified in the Advanced page. These include:

1. Connections

• Total Job Limit per Connection: Type a value between 0 and 32768 to limit the number of

jobs that can be active for each port.

• Maximum concurrent connections.

• Maximum concurrent jobs: Type a value between 0 and 500 to specify the maximum

number of concurrent jobs. A setting of 0 allows unlimited concurrent jobs.

2. Job Boundary Determination

•Enable Control D Marks End of PostScript Job if you want the Control D character to be used

to indicate the end of a PostScript print job.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 34

Network Configuration

3. Backchannel Data

• To allow data from several jobs to be interspersed, enable Backchannel Data Transmission

to Client, then enable Out of Order Backchannel Data.

Note: Out of Order Backchannel Data is only available when Backchannel Data Transmission to

Client is enabled.

4. Banner Page Printing

• To allow banner pages to print for specific jobs only, select the job types from the Banner

Page Enabled drop-down menu. You can select First Job Only, No Jobs, or All Jobs.

• To enable banner pages to print before each PDL document within a single job, select

Enabled for Banner Page for Each Document of Job.

• To enable banner pages to print only for jobs that specifically request them through PJL,

select Enabled for Banner Page for Job Containing only PJL Commands.

5. Miscellaneous

• To allow the printer to switch between multiple PDLs within a single job, select Enabled for

Language (PDL) Switching within PJL Job.

• To force parsing of job data, select Enabled for Job Data Parsing Override.

Note: Job data is not parsed when bidirectional communication and PDL switching are disabled.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 35

Network Configuration

SMTP

Simple Mail Transfer Protocol (SMTP) is used by the printer’s email feature to deliver scanned images and Internet Fax jobs through email. After you enable SMTP, the Email button is enabled on the printer’s control panel.

Configuring SMTP Server Settings

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > SMTP (Email).

2. Under Required Information, select the method to use to locate an SMTP server.

• To allow DNS to automatically find an SMTP server on the network, select Use DNS to

identify SMTP Server.

• To map to a specific SMTP server, select Specify SMTP Server manually.

Note: If you select Use DNS to identify SMTP Server, you must ensure that DNS is configured for

either IPv4 or IPv6 before you can define the SMTP server. For details, see Configuring Dynamic

Address Settings on page 23.

3. Select the address type. Options include IPv4, IPv6, or Host Name.

4. Type the appropriately formatted address and port number in the Address: Port field. The default port number is 25.

5. Type the specific email address assigned to this printer by the SMTP server in the multifunction

device Email Address field.

Optional Information

1. To define a maximum message size for messages with attachments, type a value between 512 KB and 20480 KB of space in the Maximum Message Size field. The default size is 10240 KB.

2. To improve transmission speed, you can set messages to be fragmented between 2 and 500 times. The default value for Number of Fragments is one, or unfragmented.

3. To set a maximum job size, type a value between 512 KB and 2000000 KB of space in the To ta l Job Size field.

4. If you selected more than 1 fragment in Number of Fragments, you can select how the email jobs should be split for Email Job Splitting Boundary. Options are:

• Page Boundary: If you select this option, the mail client will not reassemble the job on

receipt.

• Automatic Boundary: If you select this option, the mail client is required to reassemble the

job on receipt.

5. Under Login Credentials for the multifunction device to Access the SMTP Server to send automated Emails select System to have the printer authenticate itself using the Login Name and Password set up on this page. If you select None, the printer will not provide authentication credentials to SMTP server.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 36

Network Configuration

6. If you select System for Login Credentials for the multifunction device to Access the SMTP Server to send automated Emails, type in the Login Name and Password.

Note: Select the Select to save new password check box to save the Login and Password

information.

7. If authentication is enabled, and Tools and Feature Access is configured to require users to log in before they can access email, select Authenticated User under Login Credentials for the Walkup User to send Scanned Emails to use the credentials of the user to access the SMTP server. Alternatively, you can allow this field to default to the same setting you selected for sending Automated emails.

8. Click Apply.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 37

Network Configuration

LDAP

Lightweight Directory Access Protocol (LDAP) is a protocol used to process queries and updates to an information directory, also known as an LDAP directory, stored on an external server. LDAP directories are heavily optimized for read performance. Use this page to define how the printer retrieves user information from an LDAP directory.

Configuring LDAP/LDAPS Server Settings

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > LDAP.

2. Under Server Information, select the preferred address type. Options are IPv4, IPv6, or Host Name.

3. Type the appropriately formatted Primary and Alternate LDAP Server addresses and port numbers for the selected address type. The default port number is 389.

4. Select the LDAP server type from the LDAP Server drop-down menu.

Optional Information

1. Type the search directory root path in the Search Directory Root field using Base DN format.

• For more detail on Base DN formatting, refer to the RFC 2849 - LDAP Data Interchange

Format (LDIF) Technical Specification on the IETF website.

2. Specify the login credentials required to access the LDAP directory. Options are:

• None: No authentication occurs when users access LDAP.

• Authenticated User: The user’s credentials, upon logging in, are used to access the SMTP

server.

Note: Authentication must be enabled and Tools and Features Access must be configured to

require the user to log in before accessing email. For detail on these topics, see Setting up Access

Rights on page 54 and Controlling Access to Tools and Features on page 61.

• System: The printer logs into the LDAP directory and is authenticated using its own login

credentials.

3. After you select the Login Credential type, type the Login Name and Password, if required.

4. Retype the password and select Save Password, if needed.

5. If SSL is desired, select Enable SSL under SSL.

6. If SSL is selected, click View Trusted SSL Certificates to view any secure certificates that have been uploaded to the printer.

Note: If the LDAP Server is operating with encryption enabled, you need the certificate from that

server’s certificate authority installed on the printer.

7. Under Maximum Number of Search Results, type a number between 5 and 100 for the maximum number of addresses that can be returned matching the search criteria entered. The default number is 25.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 38

Network Configuration

8. Under Search Timeout, select Use LDAP Server Timeout to allow the printer to time out based on the LDAP server settings, or select Wait, and type in the number of seconds between 5 and 100 that the printer will wait before timing out. The default is 30 seconds.

Note: If you are having trouble retrieving results from your LDAP server, use the Wait option.

9. If your primary LDAP server is connected to additional servers, select LDAP Referrals to include those LDAP servers in your searches.

10. Under the Perform Query on heading, select:

• Surname and Given Name Fields: This option allows you to search for the user’s last name

and first name.

• Mapped Name Field: This option allows you to specify how the name fields are mapped.

After you apply this setting, click User Mappings to define the field mapping. For details, see

Defining User Mappings below.

11. Click Apply.

Configuring Contexts for LDAP

Contexts are a defined starting points in an LDAP database from which the search function begins searching. Contexts are used with the Authentication feature. You can configure the printer to automatically add an authentication context to the Login Name provided by the user.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > LDAP.

2. Click the Contexts button under the LDAP title.

3. Type details in the Default Login Context field.

4. Click Apply.

Defining User Mappings

LDAP servers display different results depending on how they implement mappings. Editing the mapping allows you to fine-tune server search results.

Note: Internet Fax users must ensure that the Internet Fax field is not set to No Mappings

Available in the drop-down menu. This setting prevents the LDAP Address Book from displaying on the Internet Fax screen on the printer's control panel. Select Mail as the Internet Fax setting.

1. In CentreWare IS, click Properties > Connectivity > Protocols > LDAP.

2. Under Search, type the name of the user you want to search for in the Enter Name field, then click Search.

If a match occurs, the user’s information displays.

3. Use the drop-down menus under Imported Heading to remap fields as needed.

Note: Headings are defined by your LDAP server’s schema.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 39

Network Configuration

Configuring Authorization Access by Groups

LDAP server user groups can be used to control access to services and features of the printer. For example, the LDAP server may contain a group of users called Admin. You can configure the Admin group on the printer so that only members of this group have administrator access to the printer. When a user belonging to the group Admin logs onto the printer, the printer performs an LDAP directory lookup to verify the user. Once authenticated, the user is allowed administrative rights to the printer.

You can set up and control access to your printer in four ways:

• User Roles Access Setup on page 39

• Device Access Setup on page 39

• Service Access Setup on page 40

• Feature Access Setup on page 40

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > LDAP.

2. Click the Authorization Access tab at the top of the page.

User Roles Access Setup

You can assign users to specific roles groups to allow them types of access.

1. On the Authorization Access page, click the User Roles tab.

2. In the System Administrator Access field, type the name of the group, defined in the LDAP server database, that you want to use to grant system administrator access to the printer.

3. In the Accounting Administrator Access field, type the name of the group, defined in the LDAP server database, that you want to use to grant accounting administrator access to the printer.

4. To verify a user’s access to either role, type the user’s name in the Enter User Name field, then click Te st .

The Test Results column displays the users name if the user is a member of the LDAP group or No Access if they are not a member.

5. Click Apply.

Device Access Setup

Note: Device Access setup requires that Authentication is enabled and Tools and Feature Access

are configured to require users to log in before they can access pathways. For details on these topics, see Setting up Access Rights on page 54 and Controlling Access to Tools and Features on page 61.

1. On the Authorization Access page, click the Device Access tab.

2. In the Services Pathway field, type the name of a group, defined at the LDAP server, that you want to use to provide access to the Services features on the printer.

3. Repeat the process for Job Status Pathway and Machine Status Pathway.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 40

Network Configuration

4. To verify a users access to either role, type the user’s name in the Enter User Name field, then click Te st .

The Test Results column displays the users name if the user is a member of the LDAP group or No Access if they are not a member.

5. Click Apply.

Service Access Setup

Note: Service Access setup requires that Authentication is enabled and Tools and Feature Access

are configured to require users to log in before they can access services. For detail on these topics, see Setting up Access Rights on page 54 and Controlling Access to Tools and Features on page 61.

You can specify access to the services of the printer under Service Access. Type the names of the LDAP groups for any of the services listed.

1. On the Authorization Access page, click the Service Access tab.

2. Under Access Group, type the names of the LDAP groups allowed to access each of the individual printer services.

3. To verify a users access to either role, type the user’s name in thanker User Name field, then click Te st .

The Test Results column displays the users name if the user is a member of the LDAP group or No Access if they are not a member.

4. Click Apply.

Feature Access Setup

Note: Feature Access setup requires that Authentication is enabled and Tools and Feature Access

are configured to require users to log in before they can access features. For detail on these topics, see Setting up Access Rights on page 54 and Controlling Access to Tools and Features on page 61.

You can set specific access to the color copying feature of the printer listed on the Feature Access page.

1. On the Authorization Access page, click the Feature Access tab.

2. Under Access Group, type the names of the LDAP groups allowed to access each individual feature.

3. To verify a users access to either role, type the user’s name in thanker User Name field, then click Te st .

The Test Results column displays the users name if the user is a member of the LDAP group or No Access if they are not a member

4. Click Apply.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 41

Network Configuration

Configuring Filters for LDAP

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > LDAP.

2. Click Custom Filters at the top of the page.

3. Under LDAP Authentication on the Custom Filters page, select Prepend Base DN. When enabled, the user's Active Directory domain name will be added to the user name in the form of domain_name\username, when authenticating to the LDAP server.

Notes:

• Many UNIX/Linux LDAP servers require the Append Base DN attribute to be set when

• For more detail on Base DN formatting, refer to the RFC 2849 - LDAP Data Interchange

Format (LDIF) Technical Specification on the IETF website.

4. Under Email Address Book Filter, select Enable Custom Filter.

5. In the Email Address Book Filter field, type the LDAP search string or filter that you want to

apply. The filter defines a series of conditions that the LDAP search must fulfill in order to return the information you want.

Note: Format the search string as LDAP objects placed inside parentheses. For example, to find all

users that have an email attribute (mail enabled), type (objectClass=user) (mail=*).

6. Under User ID Query Filter, select Enable Custom Filter.

7. In the User ID Query Filter field, type the LDAP search string or filter that you wish to apply. The

filter defines a series of conditions that the LDAP search must fulfill in order to return the information you want.

Note: The search string should be formatted as LDAP objects inside of parentheses. For example,

to find the user with a sAMAccountName of Bob, type (objectClass=user) (sAMAccountName=Bob).

8. Click Apply.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 42

Network Configuration

POP3

Post Office Protocol, version 3 (POP3) is a protocol that allows email clients to retrieve email from remote servers over TCP/IP on network port 110. This printer uses POP3 for the Internet Fax service.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > POP3 Setup.

2. Select the address type. Options are IPv4 and Host Name.

3. Type the appropriately formatted address and port number in the POP3 Server field. The default

port number is 110.

4. Type the Login Name assigned to the printer that will be used to log in to the POP3 server.

5. Type then retype an alphanumeric password.

6. Enable to save new password.

7. Under POP3 Settings, select Enable receipt of Email via POP3.

8. Type a Polling Interval value between 1 and 60 minutes. The default value is 15 minutes.

9. Click Apply.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 43

Network Configuration

HTTP

Hypertext Transfer Protocol (HTTP) is a request-response standard protocol between clients and servers. Clients making HTTP requests are referred to as UAs while servers responding to these requests for resources such as HTML pages, are referred to as origin servers. There can be any number of intermediaries, such as tunnels, proxies, or gateways between User Agents and Origin Servers.

Enabling HTTP

By default HTTP is enabled. If you disable HTTP, you will need to enable it at the printer before you can access CentreWare IS.

Note: If your printer is locked, you must log in as a system administrator. For details, see Initial Setup at the Control Panel on page 15.

1. At the printer control panel, press the Machine Status button, then touch the To ol s tab.

2. Touch Network Settings > Advanced Settings.

3. Touch Continue.

4. Touch HTTP Settings.

5. Touch Enable, then touch Save.

Configuring HTTP Settings

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > HTTP.

2. In Keep Alive Timeout, type the time between 1 and 60 seconds to specify how long the printer

will wait for a response from a connected user before terminating the connection. The default value is 15 seconds.

Note: Increasing the Keep Alive Timeout time can cause connections to slow down.

3. Change the HTTP Port Number if required. The default is 80.

4. Click Apply.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 44

Network Configuration

Proxy Server

A proxy server acts as a go-between for clients seeking services and servers that provide them. The proxy server filters client requests and if the requests conform to the proxy server’s filtering rules, grants the request and allows the connection.

A proxy server has two main purposes:

• To keep any devices behind it anonymous for security purposes.

• To decrease the amount of time needed to access a resource by caching content, such as Web pages from a Web server.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > Proxy Server.

2. Under HTTP Proxy Server, select Enabled.

3. Select the Proxy Server address type. Options are IPv4 Address, IPv6 Address, or Host Name.

4. Type the appropriately formatted address and port number in the Proxy Server Address field. The

default port number is 8080.

5. Click Apply to accept the settings or Undo to retain the previous settings.

Note: Proxy server settings are used for SMart eSolutions setup, HTTP(S) File Destination setup,

and HTTP(S) Template Pool settings.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 45

Network Configuration

NTP

Network Time Protocol (NTP) is used to synchronize the internal clocks of computers over a network connection at system startup and every subsequent 24-hour period thereafter. This feature ensures that the printer’s internal clock stays synchronized with the NTP server you specify. If the printer is configured to use DHCP and an NTP server, or if the Greenwich Mean Time (GMT) offset is provided by the DHCP server, then data entered on this page is overwritten by the corresponding parameters retrieved from the DHCP server.

CAUTION: Enabling NTP or modifying NTP settings causes the printer to restart.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > NTP.

2. Under Offset of Greenwich Mean Time, select the number of hours your local time is offset from

GMT.

3. Under Network Time Protocol, select Enabled to enable the protocol.

4. Select either IPv4 or Host Name for the address type of the NTP server.

5. Type the appropriately formatted addresses and port numbers in the Primary Server and, if needed, the Alternate Server address fields. The default port number is 123.

6. Click Apply.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 46

Network Configuration

AppleTalk

AppleTalk is a proprietary suite of protocols developed for networking computers by Apple, Inc.

Notes:

• AppleTalk has been deprecated by Apple, Inc., in favor of TCP/IP networking.

• If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

Before you begin, ensure the following items are available:

1. An existing operational AppleTalk network.

2. The AppleTalk Name you wish to assign to your printer.

3. The AppleTalk Zone, if used, to assign to your printer.

Enabling AppleTalk on the printer

1. In CentreWare IS, click Properties > Connectivity > Protocols > AppleTalk.

2. Select Enabled to enable the protocol.

3. Type a name for the printer in Printer Name or use the default name XRX_MAC address.

4. Type the AppleTalk zone name in the Zone Name field.

Note: The default star (*) symbol for zone allows the closest router to assign the printer to a zone.

Only change the Zone Name if you have defined zones on your network.

5. Click Apply, then click OK.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 47

Network Configuration

NetWare

NetWare is a network operating system developed by Novell to run various services using cooperative multitasking.

Before you begin:

1. Ensure an existing operational NetWare network is available

2. Verify that you have administrator rights to log in to a NetWare file server/tree.

3. Ensure the printer is connected to the network.

4. Set up a print server object using the appropriate Novell utility. Refer to the Novell system documentation for help.

Configuring NetWare Settings

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. Click Properties > Connectivity > Protocols > NetWare.

2. Select Enabled to enable the protocol.

3. Select IP or IPX from the Filing Transport drop-down menu.

4. Select the Frame Type from the drop-down menu. Options are:

• Auto

• Ethernet II

• Ethernet 802.2

• Ethernet 802.3

5. Type a polling rate between 1 and 240 seconds for the print server in Queue Poll Interval. The default value is 5 seconds.

6. Type the Printer Server Name. The default name is XRX_MAC address.

7. Type then retype the server password in the New Print Server Password and Retype New Print

Server Password fields. Select the Select to save new password option.

Service Advertising Protocol (SAP)

SAP facilitates dynamic adding and removing of services on an IPX internetwork. As servers start up and shut down, they can advertise and remove their services using SAP.

1. Select Enabled to enable the protocol.

2. Type the SAP Frequency between 15 and 300 seconds or type 0 for none. The default is 60 seconds.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 48

Network Configuration

Bindery Settings

NetWare can use Bindery services for authentication. Bindery services are a stand-alone database system containing user information and security data.

If you are using NetWare in Bindery mode, under Bindery Settings, type the names of up to four primary File Servers for the printer in the File Server fields.

Note: When the printer uses Bindery mode, the NDS Tree and NDS Context fields are blank.

NetWare Directory Services (NDS)

NDS is a hierarchical, object-oriented database that represents all of the assets of an organization in a logical tree structure. Assets can include printers, servers, computers, people, organizations, and more.

1. Under NetWare Directory Services (NDS), select the address type for the NDS server. Options are IPv4 Address or Host Name.

2. Type the appropriately formatted address and port number in the NDS Server field.

Note: The NDS server is used for Workflow Scanning and Server Fax only.

3. Type a name for the NDS tree in the NDS Tree field. The default entry for this field is Xerox_DS_Tree. If you are using Bindery mode, leave this field blank.

4. Type a context in the NDS Context field. The default entry for this field is Xerox_DS_Context. If you are using Bindery mode, leave this field blank.

5. Click Apply then click OK.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 49

Network Configuration

Microsoft Networking

Configuring Microsoft Networking

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. Click Properties > Connectivity > Protocols > Microsoft Networking.

2. Select Enabled to enable the protocol.

3. Type the workgroup name in the Workgroup field.

4. Type the host name in the SMB Host Name field.

5. Type a descriptive comment, if desired, in the SMB Host Name Comment field.

6. Type the name of the share in the Share Name field.

7. Type a descriptive comment, if desired, in the Share Name Comment field.

8. Type the maximum number of connections allowed in Maximum Connections. The range is between 10 and 30.

9. Type the desired number of seconds until the connection times out in the Connection Timeout field. The range is between 1 and 32767 seconds.

Configuring WINS

When running WINS, the printer registers its IP address and NetBIOS host name with a WINS server. WINS allows users to communicate with the printer using host name only, removing a significant overhead from the systems administrators.

To manually enable WINS and configure primary and secondary WINS servers through CentreWare IS:

1. Under Server Information, select Enabled to enable the protocol.

2. Type the IP Address in the Primary Server IP Address for your primary server.

3. If desired, type the IP Address in the Secondary Server IP Address for a secondary server.

Note: If DHCP is configured, WINS IP Addresses will be overridden.

4. Click Apply.

Note: The settings are not applied until you restart the printer.

5. Click OK.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 50

Network Configuration

WSD

Web Services for Devices (WSD) is technology from Microsoft that provides a standard method for discovering and using network connected devices. It is supported in Windows Vista and Windows Server 2008 operating systems. WSD is one of several supported communication protocols.

Enabling WSD

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Services > WSD (Web Services for Devices).

2. Under WSD Services, select Enabled.

3. Under WSD Services Selection, select the WSD services you want to enable.

a. WS-Discovery: WS-Discovery supports the discovery of services in an ad hoc network with a

minimum of networking services, such as DNS, UDDI, or other directory services. It does this by announcing or advertising the existence of the printer and its services on the network when it becomes available, and announcing its departure when unavailable.

• The default state is Enabled.

• The default port number is 3.

Notes:

• When disabled, WSD does not respond to WS-Discovery requests.

• Disabling WSD-Discovery does not disable or prevent access to CentreWare IS.

b. WS-Discovery Multicast: If enabled, this setting allows the printer to use Multicast to

respond to and announce the service URLs provided by the printer to the client computers on the network. The default state is selected.

• The assigned port number is identical to that of WS-Discovery.

• IPv4 multicast address: 239.255.255.250

• IPv6 multicast address: FF02::C (link-local scope)

Notes:

• WS-Discovery must be enabled for WS-Discovery Multicast to be available for selection.

• WS-Discovery Multicast should be disabled if your network uses a discovery proxy to

handle multicast group communication to reduce overall WS-Discovery traffic.

c. WS-Print: If enabled, this setting allows the printer’s print capabilities to be announced

through WS-Discovery.

• The default state is selected.

• The default port number is 53303.

Note: If WS-Print is disabled, print capabilities are not discoverable and printing is not possible

through any WSD port.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 51

Network Configuration

d. WS-Transfer: If enabled, this setting lets you specify an alternate communication port

number used for metadata exchange with WSD clients. WS-Transfer defines how to invoke a simple set of familiar verbs, such as Get, Post, Put, and Delete, using SOAP. The default port number is 53202.

Note: This service is always available when WSD Services is enabled.

4. Click Apply.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 52

Network Configuration

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 53

Security

This chapter includes:

• Setting up Access Rights on page 54

• Controlling Access to Tools and Features on page 61

• Digital Certificates on page 62

• Secure HTTP (SSL) on page 65

• IPsec on page 66

• 802.1X on page 71

• Stored Data Encryption on page 73

• Overwriting Image Data on page 74

• PostScript Passwords on page 76

• IP Filtering on page 77

• Audit Log on page 79

Setting up Access Rights

Overview

You can control access to the printer’s services and features by setting up authentication, authorization, and personalization.

Authentication

Authentication is the process of confirming a user’s identity by comparing information provided by the user, such as their user name and password, against another source of user information such as an LDAP directory. Users can be authenticated when accessing the control panel or when accessing CentreWare IS.

There are several ways to authenticate a user:

• Local: If you have a limited number of users, or do not have access to an LDAP network directory,

you can add user information, such as user names and passwords, to the printer’s internal database. You can then specify tools and feature access for all users. Users are authenticated and authorized when they log in at the control panel.

• Network: The printer retrieves user information from an LDAP network directory to authenticate

and authorize users when they log in at the control panel. You must configure LDAP server settings first. The printer can use of the following four protocols to communicate with your authentication server:

• Kerberos (Solaris)

• Kerberos (Windows 2000/2003)

• SMB (Windows 2000/2003)

•LDAP

• Card Reader: You must purchase and install a magnetic or proximity card reading system, such as

Xerox Secure Access. To access the printer, users must swipe a pre-programmed identification card.

Authorization

Authorization is the process of defining the services and features that users are allowed to access. For example, you can configure the printer to allow a user to copy, scan, and fax, but not email. There are two types of authorization:

• Locally on the Device (Internal Database): User login information is stored locally in the printer’s

internal User Information Database.

• Remotely on the Network: User login information is stored externally in a network database such

as an LDAP directory.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 55

Security

Personalization

Personalization is the process of customizing services for a specific user. If your network is connected to an LDAP server, the printer can look up a user’s home directory and email address when using the Scan to Home, or Email scanning features.

Note: Personalization is only available when the printer is configured to use network

authentication.

Local Authentication

Before you can define access rights for users, user information must be defined. You can add or edit the printer’s internal User Information Database with user information, or you can specify a network database or LDAP server containing user information.

User Information

Adding User Information to the Local Database

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > User Information Database > Setup.

2. Click Add New User.

3. Type the user’s Name, Friendly Name, and Password. Retype the Password to verify.

4. Select a User Role:

• System Administrator: The authenticated user in this role is allowed to access all services

and settings.

• Accounting Administrator: The authenticated user in this role is allowed to access

accounting settings and other services and settings that are locked.

• User: The authenticated user in this role is allowed to access services and features defined by

the system administrator.

Note: Users who are not authenticated cannot access features that are locked.

5. Click Add New User.

Editing User Information in the Local Database

1. On the User Information Database page, click Edit next to the user you want to edit.

2. Update the user information, then click Edit User.

Specifying Password Requirements

You can specify password requirements if desired.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > User Information Database > Password Settings.

2. Specify the password Minimum Length and Maximum Length.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 56

Security

3. Select rules as desired:

• Cannot contain Friendly Name

• Cannot contain User Name

•Must contain at least 1 number

4. Click Save.

Note: Existing passwords are not affected by new password rules.

Setting Up Local Authentication

To configure local authentication:

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > Access Rights > Setup.

2. On the Authentication Configuration page, next to Authentication, click Edit Methods.

3. Click Next.

4. Under Device User Interface Authentication, select Locally on the Device (Internal Database).

5. Under Authorization, select Locally on the Device (Internal Database).

6. Select Personalization if you want to allow the printer to automatically retrieve user information,

such as email address or home directory, from an LDAP server.

Note: LDAP must be configured to be able to use personalization.

7. Click Save.

8. The Authentication Configuration page displays.

To restrict or allow access to tools and features, see Controlling Access to Tools and Features on page 61.

Network Authentication

If you have an LDAP server connected to your network, you can configure the printer to retrieve user information from the LDAP directory when authenticating a user at the control panel. For details on configuring LDAP settings, see LDAP on page 37.

Setting up Network Authentication

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > Access Rights > Setup.

2. If this is the first time you have configured authentication, click Next otherwise, click Edit Methods.

3. Under Device User Interface Authentication, select Remotely on the Network.

4. Under Authorization, select Remotely on the Network.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 57

Security

5. Select Personalization if you want to allow the printer to automatically retrieve user information, such as email address or the home directory from an LDAP server. This is used for the Scan to Home feature.

Note: If LDAP is not configured, Personalization is not available.

6. Click Save.

Configuring Authentication Server Settings for Kerberos (Solaris)

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. On the Authentication Configuration page, click Configure next to Authentication Server.

2. Under Authentication Type, select Kerberos (Solaris).

3. Under Default Key Distribution Center (Required), in Realm, type the realm for your authentication server.

4. Select the desired address type. Options are IPv4 Address, IPv6 Address, or Host Name.

5. Type the appropriately formatted address type and port numbers for both the primary and backup addresses in the address fields. The default port number is 88.

6. A backup address is optional.

7. Under Alternate Key Distribution Centers type the realm or domain names, IP addresses, primary ports, and backup ports of any alternate servers you want to use.

8. Click Save.

Configuring Authentication Server Settings for Kerberos (Windows 2000/2003)

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. On the Authentication Configuration page, click Configure next to Authentication Server.

2. Under Authentication Type, select Kerberos (Windows 2000/2003).

3. Under Default Domain Controller (Required), in Domain, type the domain name of your authentication server.

4. Select the desired address type. Options are IPv4 Address, IPv6 Address, or Host Name.

5. Type the appropriately formatted address type and port numbers for both the primary and backup addresses in the address fields. The default port number is 88.

Note: A backup address is optional.

6. Under Alternate Domain Controllers type the domain names, IP addresses, primary ports, and backup ports of any alternate servers you want to use.

7. Click Save.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 58

Security

Configuring Authentication Server Settings for SMB

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. On the Authentication Configuration page, click Configure next to Authentication Server.

2. Under Authentication Type, select SMB (Windows NT 4) or SMB (Windows 2000/2003).

3. Under Default Domain, type the domain name of your authentication server.

4. If you want to specify domain controller IP addresses or host names, select Optional Information.

Note: Address options do not display unless you have selected Optional Information.

5. Select the address type. Options are IPv4 Address, or Host Name.

6. Type the appropriately formatted address and port number. The default port number is 137.

7. To specify any alternate domains and controllers, type the IP addresses, host names, domains, and port numbers in the Alternate Domains (Optional) fields.

8. Click Save.

Configuring Authentication Server Settings for NDS (Novell)

Notes:

• If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

• Netware must be enabled. For details, see NetWare on page 47.

1. On the Authentication Configuration page, click Configure next to Authentication Server.

2. Under Authentication Type, select NDS (Novell).

3. Under Default Tree/Context (Required), type the details in the NDS Tree and NDS Context

fields.

4. Under Alternate Tree/Context (Optional), type the details in the NDS Tree and NDS Context

fields, if required.

5. Click Save.

Configuring Authentication Server Settings for LDAP

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. On the Authentication Configuration page, click Configure next to Authentication Server.

2. Under Authentication Type, select LDAP.

3. To configure LDAP settings, click LDAP Settings. For more details, see LDAP on page 37.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 59

Security

Authentication Using a Card Reader System

Setting Up Authentication Using Xerox Secure Access

Before you begin:

• Enable Secure HTTP (SSL). For details, see Enabling HTTP on page 43.

• Enable the Authentication & Authorization Configuration Web Service. For details, see

Authentication on page 54.

• Install the Xerox Secure Access authentication server and configure with user accounts. Refer to the authentication server documentation for help.

Note: Accounts created on the Xerox Secure Access authentication server must match accounts

stored in the printer’s local database or in another network authentication server.

• Connect and configure your card reader.

To configure authentication using Xerox Secure Access:

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > Access Rights > Setup. The Step 1 of 3 window displays.

2. If this is the first time you have configured authentication, click Next otherwise, click Edit Methods.

3. Under Device User Interface Authentication, select Xerox Secure Access.

4. Under Web User Interface Authentication, select Locally on the Device (Internal Database) or Remotely on the Network to specify how the printer will validate the user's rights to access CentreWare IS.

5. If a user normally authenticates at the control panel with a card reader, you must specify a method for the printer to authenticate users who access CentreWare IS from their computer. If you select Remotely on the Network, you must configure a network authentication server.

6. Under Authorization, select Locally on the Device (Internal Database), or Remotely on the Network.

7. Click Next.

8. Click Configure next to Device User Interface Authentication.

9. Configure the Remote Server. For instructions, refer to the information provided with your server hardware.

After the server is configured, the server communicates with the printer and automatically completes the configuration process.

10. If required, click Manually Configure to manually configure communication, personalize instructional windows, and review accounting options. For details, see Manually Configuring

Control Panel Authentication on page 60.

11. If you selected Remotely on the Network for the Web User Interface Authentication method, click Configure next to Web User Interface Authentication. Configure the authentication server settings. For details, seeNetwork Authentication on page 56.

12. Click Finish.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 60

Security

Manually Configuring Control Panel Authentication

If you are using a card reader system, and you want to allow users to access the printer when they have lost or misplaced their identification card, you can configure the printer to allow them to log in at the control panel. In this case, the remote server still has the responsibility for authenticating the user.

Before you begin, ensure that the Xerox Secure Access authentication server has been configured to point to the printer.

1. At the Authentication Configuration screen click the Configure button next to Device User Interface Authentication Xerox Secure Access.

2. If the Authentication Solution has been configured correctly the Authentication Solution server address information displays. If the information is incomplete or incorrect, click Manually Configure.

3. Under Server Communication, select the address type and port number. Options are IPv4 Address or Host name.

4. Type the appropriately formatted address and port number.

5. Type the details in the Path field.

Note: Type the HTTP path public/dce/xeroxvalidation/convauth and port number of 1824 to

facilitate communication.

6. If you are using Network Accounting and you want the printer to automatically obtain accounting information for the user from the Authentication server when the user authenticates, select Automatically apply Accounting Codes from the server. This reduces the number of screens that the user sees when they log in at the control panel.

If you want the user to provide accounting data manually at the control panel, select User must manually enter accounting codes at the device.

7. In the Device Instructional Blocking Window area, type text in the Window Title field to define a title that will display on the printer’s touch screen.

8. Type text in the Instructional Text field to define a prompt that will show on the printer’s touch screen to tell the user what they need to do to access the printer.

Note: If the Title and Prompt have been configured on the Xerox Partner authentication server,

then any instructional text that you type will be ignored.

9. Click Save.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 61

Security

Controlling Access to Tools and Features

Controlling Access for All Users

To lock, unlock, or hide tools and features for all users:

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > Access Rights > Tools & Feature Access.

2. Under Presets, select Custom Access.

3. Select Locked or Unlocked. Select Hidden to hide services in the Services Pathway.

Controlling Access for an Individual User or Group

If your network is connected to an LDAP server, you can configure network authentication and control individual user or group access to services and features.

Before you begin:

• Configure Network Authentication. For details, see LDAP on page 37.

• Configure LDAP server settings. For details, see Configuring LDAP/LDAPS Server Settings on page 37.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 62

Security

Digital Certificates

A digital certificate must be installed on the printer before you can enable secure HTTP (SSL). A digital certificate is a set of data used to verify the identity of the holder or sender of the certificate. A certificate includes the following data:

• Information about the person, organization, or computer that the certificate is issued to, including the name, location, Email address and other contact information.

• Serial number of the certificate

• Expiration date of the certificate

• Name of the certificate authority that issued the certificate

• A public key

• A certificate authority’s digital signature

Installing a Digital Certificate

There are three ways to install a certificate on the printer:

• Create a Self-Signed Certificate. A Self-Signed Certificate is the result when the printer creates its own certificate, signs it, and creates a public key for the certificate to be used in SSL encryption.

• Create a request to have a certificate authority, or a server functioning as a certificate authority sign a certificate and then upload the certificate to the printer. An example of a server functioning as a CA is Windows Server running Certificate Services.

• Install a trusted root certificate created by a CA. For details, see Managing Trusted Certificate

Authorities on page 63.

Note: Installing a self-signed certificate is less secure than installing a certificate signed by a

trusted CA. However, if you do not have a server functioning as a certificate authority this is your only option.

Creating a Self-Signed Certificate

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > Machine Digital Certificate Management.

2. Click Create New Certificate.

3. Select Self Signed Certificate.

4. Click Continue.

5. Complete the form with your 2-Letter Country Code, State/Province Name, Locality Name, Organization Name, Organization Unit, Common Name, Email Address, and Days of Validity.

6. Click Apply.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 63

Security

Creating a Request

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > Machine Digital Certificate Management.

2. Click Create New Certificate.

3. Select Certificate Signing Request.

4. Fill out the form with your 2-Letter Country Code, State/Province Name, Locality Name, Organization Name, Organization Unit, and Email Address.

5. Click Apply.

6. Values from the form are used to generate a Certificate Signing Request.

7. When the process is complete, you are prompted to save the Certificate Signing Request. Rightclick the link and save the csr.pem file to your computer.

8. Email the file to a trusted certificate authority to be signed.

9. When the signed certificate is received back from the trusted certificate authority, upload the certificate to the printer. From the Machine Digital Certificate Management page, click Upload Signed Certificate.

10. Click Browse or Choose File, navigate to the signed certificate in .crt format, and click Open or Choose.

11. Click Upload Certificate.

Note: The signed certificate must match the CSR created by the printer.

Managing Trusted Certificate Authorities

You can add, delete, or reset trusted certificate authorities (trusted root certificates).

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

To install a root certificate:

1. In CentreWare IS, click Properties > Security > Trusted Certificate Authorities.

2. Click Add.

3. Click Browse or Choose File, navigate to the signed certificate file, then click Open or Choose.

4. Click Upload Certificate Authority. The digital certificate displays in the list of Installed Certificates.

To delete a certificate:

1. Select a certificate from the list.

2. Click Delete.

3. Click OK to acknowledge the warning message.

4. To delete all certificates, click Reset.

Downloading the Generic Xerox CA

If the printer does not have a trusted root certificate, or if a self-signed certificate is installed, users may see an error message related to the certificate when attempting to connect to the printer using

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 64

Security

CentreWare IS. To resolve this, install the generic Xerox Root CA Certificate in your Web browser. For details, see your Web browser’s help.

To download the Xerox Root CA certificate, click Download the Generic Xerox Device CA, and save the file on your computer.

The printer can sign its own certificate signing request (CSR) by using the Xerox generic CA.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > Trusted Certificate Authorities.

2. Under Installed Certificates, right-click the Download the Generic Xerox Device CA.

3. Select Save Target As.

4. Browse to the location where you want to save the cacert.pem file and click Save.

The cacert.pem certificate can now be used to upload to any printer requiring a Machine Root Certificate.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 65

Security

Secure HTTP (SSL)

You can encrypt all data sent over HTTP by establishing an encrypted SSL connection. You can enable SSL encryption for the following services:

• Configuring the printer in CentreWare IS

• Printing from CentreWare IS

• Printing using IPP

• Managing scan templates

• Workflow scanning

• Network accounting

Before you begin:

• Install a digital certificate. For details, see Installing a Digital Certificate on page 62.

• DNS must be enabled and configured.

• Ensure that the date and time configured on the printer is correct. This is used to set the start time for self signed certificates.

Enabling Secure HTTP (SSL)

To enable Secure HTTP:

Notes:

• A digital certificate must be installed on the printer before you can enable Secure HTTP.

For details, see Installing a Digital Certificate on page 62.

• If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Protocols > HTTP.

2. Under Secure HTTP (SSL) select Enabled if required.

Note: If Secure HTTP is enabled, to access CentreWare IS, all pages will contain https:// in the URL

for the Web page.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 66

Security

IPsec

Internet Protocol Security (IPsec) is a group of protocols used to secure Internet Protocol (IP) communications by authenticating and encrypting each IP data packet. It allows you to control IP communication by creating protocol groups, policies, and actions for the following:

• DHCP v4/v6 (TCP and UDP)

• DNS (TCP and UDP)

•FTP (TCP)

• HTTP (Scan Out, TCP port 80)

• HTTPS (Scan Out, TCP port 443)

• HTTPS (Web Server, TCP port 443)

•ICMP v4/v6

• IPP (TCP port 631)

• LPR Print (TCP port 515)

• Port 9100 Print (TCP port 9100)

•SMTP (TCP/UDP port 25)

• SNMP (TCP/UDP port 161)

• SNMP Traps (TCP/UDP port 162)

• WS-Discovery (UDP port 3702)

• Up to 10 additional services

Enabling IPsec

Notes:

• Secure HTTP (SSL) must be enabled with an installed digital certificate before you can

enable IPsec.

• If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > IP Sec.

2. Under Enablement, select Enabled.

3. Click Apply.

Managing Actions

Use actions to more specifically manage how IPSec controls dependent protocols.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

Creating a New Action

1. In CentreWare IS, click Properties > Security > IPSec.

2. Click Actions.

3. Click Add New Action.

4. On the Step 1 of 2 page, under IP Action Details, type in the Name. This field is required.

5. In the Description field, type a description for the action, if desired.

6. Under Keying Method, select Manual Keying or Internet Key Exchange (IKE).

Note: Select Manual Keying if client devices are not configured for or do not support IKE.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 67

Security

7. If you selected IKE, under Pre-shared Key Passphrase, type the passphrase, then click Next.

8. Configure selected settings below.

Manual Keying Settings

Manual Keying is used when client systems either do not support IKE or are not configured for IKE.

1. Under IPsec Mode, select Transport M o d e or Tunnel Mode.

Note: Transport mode only encrypts the IP payload whereas Tunnel mode encrypts the IP header

and the IP payload. Tunnel mode provides protection for an entire IP packet by treating it as an Authentication Header (AH), or Encapsulating Security Payload (ESP).

2. If you select Tunnel Mode, under Enable Security End Point Address, select the address type. Options are Disabled, IPv4 Address, or IPv6 Address.

3. Under IPsec Security, select ESP, AH, or BOTH.

4. In the Security Parameter Index: IN field.

5. In the Security Parameter Index: OUT field, type a 32-bit number larger than 256 that identifies the outbound Security Association (SA).

6. Under Hash, select an option:

• Secure Hash Algorithm 1 (SHA1): SHA1 is a one-way hashing algorithm that produces a 128-

bit hash. It is considered stronger than MD5 for security, but slower for encryption speed.

•Method Digest 5 (MD5): MD5 is a one-way hashing algorithm that produces a 128-bit hash.

It is considered weaker than MD5 for security, but faster for encryption speed.

• None

7. Under Enter Keys as, select ASCII format or Hexadecimal number.

8. Type the following keys:

• Hash Key: IN (20 characters)

• Hash Key: OUT (20 characters)

9. If ESP or BOTH were selected as the IP Security type, select the Encryption Method (3DES, AES, or None) then type the following:

• Encryption Key: IN (24 characters)

• Encryption Key: OUT (24 characters)

10. Click Save.

Internet Key Exchange Settings

IKE is a keying protocol that allows automatic negotiation and authentication, anti-replay services, CA support, and the ability to change encryption keys during an IPSec session. IKE is generally used as part of virtual private networking.

IKE Phase 1 authenticates the IPSec peers and sets up a secure channel between the peers to enable IKE exchanges. IKE Phase 2 negotiates IPSec SAs to set up the IPSec tunnel.

1. Under IKE Phase 1, in the Key Lifetime field, type length of time this key will live in Seconds, Minutes, or Hours. When a key reaches its lifetime, the SA is renegotiated and the key is regenerated or refreshed.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 68

Security

Note: DH is a public-key cryptography scheme that allows two parties to establish a shared secret

over an insecure communications channel. It is also used within IKE to establish session keys.

2. Select the DH Group. Options are:

• Group 2: Provides a 1024-bit Modular Exponential (MODP) keying strength.

• Group 14: Provides a 2048-bit MODP keying strength.

3. Select one or more of the following Hash - Encryption algorithms:

• SHA1 - Advanced Encryption Standard (AES)

• SHA1 - Triple Data Encryption Standard (3DES)

•MD5 - AES

•MD5 - 3DES

Notes:

• 3DES is a variation on DES that uses a168-bit key. 3DES is more secure than DES.

• AES is more secure than 3DES.

4. Under IKE Phase 2, select the IPsec Mode. Options are Transport Mode or Tunnel Mode.

Note: Transport mode only encrypts the IP payload whereas Tunnel mode encrypts the IP header

and the IP payload. Tunnel mode provides protection for an entire IP packet by treating it as an Authentication Header (AH), or Encapsulating Security Payload (ESP).

5. If you select Tunnel Mode, under Enable Security End Point Address, select the address type. Options are Disabled, IPv4 Address, or IPv6 Address.

6. Under IPsec Security, select ESP, AH, or BOTH.

7. Type the Key Lifetime, and select the units; Seconds, Minutes, or Hours.

8. Under Perfect Forward Secrecy (PFS), select None, Group 2, or Group 14.

Note: PFS is disabled by default. PFS allows faster IPSec setup, but is not very secure.

9. Under Hash, select from the following:

•SHA1

•MD5

•None

10. If you selected ESP or BOTH for the IPsec Security type, select one or more of the following Encryption types:

Note: Encryption will not display if IPsec Security is set to AH.

•AES

•3DES

ull

•N

11. Click Save.

Editing or Deleting an Action

To edit or delete an action, select the action from the list, then click Edit or Delete.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 69

Security

Managing Protocol Groups

Protocol groups are logical groupings of selected protocols based on service type, service name, port number, device type. If you want to apply specific security policies only to some protocols, use a group to define these.

Notes: If your printer is locked, you must log in as a system administrator. For details, see

Accessing CentreWare IS on page 17.

Creating a New Protocol Group

1. In CentreWare IS, click Properties > Security > IPSec.

2. Click Protocol Groups.

3. Click Add New Protocol Group.

4. Type a Name and a Description for the group.

5. Under Service Name, select the protocols that you want to add to the group.

6. If you want to control a TCP or UDP service that is not in the list, under Custom Protocols type a name for the service and select the check box under Service Name.

7. Select TCP or UDP from the Protocol drop-down menu.

8. Type the port number, and specify if the printer is the server or client.

9. Click Save.

Editing or Deleting a Protocol Group

To edit or delete a protocol group, select the protocol group from the list, and click Edit or Delete.

Managing Host Groups

Host groups are groupings of computers, servers, or other devices that you want to control using security policies.

Creating a New Host Group

1. In CentreWare IS, click Properties > Security > IPSec.

2. Click Host Groups.

3. Click Add New Host Group.

4. Type a Name and a Description for the group.

5. Under Address List, select IPv4 or IPv6.

6. Select an Address Type. Options are Specific, All, or Subnet.

7. Type the appropriately formatted IP address.

8. To continue to add addresses to the group, click Add.

9. To delete addresses, next to any address, click Delete.

10. Click Save.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 70

Security

Editing or Deleting a Host Group

To edit or delete a host group, select the host group from the list, and click Edit or Delete.

Managing Security Policies

IPSec security policies are sets of conditions, configuration options, and security settings that enable two systems to agree on how to secure traffic between them. You can have multiple policies active at the same time, however the scope and policy list order may alter the overall policy behavior.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

Defining a Security Policy

1. In CentreWare IS, click Properties > Security > IPSec.

2. Click Security Policies.

3. Under Define Policy, select a Host Group from the drop-down menu.

4. Select a Protocol Group from the drop-down menu.

5. Select an Action from the drop-down menu.

6. Click Add Policy.

Prioritizing a Security Policy

To prioritize policies, under Saved Policies, select the policy you want to move, then click the Promote or Demote buttons.

Editing or Deleting Security Policies

To delete a policy, under Saved Policies, select the policy and click Delete.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 71

Security

802.1X

802.1X is an Institute for Electrical and Electronics Engineers (IEEE) standard that defines a method for

port-based network access control or authentication. In an 802.1X secured network, the printer must be authenticated by a central authority, typically a RADIUS server, before it can access the physical network.

You can enable and configure the printer to be used in an 802.1X secured network.

Before you begin:

• Ensure your 802.1X authentication server and authentication switch are available on the network.

• Determine the supported authentication method.

• Create a user name and password on your authentication server.

Enabling and Configuring 802.1X

You can enable 802.1X settings from the printer control panel or in CentreWare IS.

Notes:

• Changing and applying 802.1X settings causes the printer to restart. The printer may be

offline for several minutes.

• If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

At the Control Panel

1. Press the Machine Status button, then touch the Tools tab.

2. Touch Network Settings > Advanced Settings.

3. Touch Continue.

4. Touch 802.1X.

5. Touch Enable.

6. Touch Authentication Method and select the method used on your network. Options are

• EAP-MD5,

• PEAPv0/EAP-MS-CHAPv2

• EAP-MS-CHAPv2

7. Touch Username.

8. Type the user name required by your authentication switch and server using the touch-screen keyboard.

9. Touch Password, and type the password using the touch-screen keyboard.

10. Touch Save, and Save again.

11. Touch Close.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 72

Security

In CentreWare IS

1. Click Properties > 802.1X.

2. Under Protocol, select Enable 802.1X.

3. Under Authentication Method, select the method used on your network. Options are:

• EAP-MD5

• PEAPv0/EAP-MS-CHAPv2

• EAP-MS-CHAPv2

4. Type the User Name (Device Name) required by your authentication switch and server.

5. Type the Password, then retype it.

6. Enable Save to save new password.

7. Click Apply.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 73

Security

Stored Data Encryption

All data on the printer’s hard drive can be encrypted to protect it from unauthorized access in the event the drive is removed.

To enable User Data Encryption:

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > User Data Encryption.

2. Under User Data Encryption Enablement select Enabled.

3. Click Apply.

CAUTION: The printer will restart. This may result in a loss of user data and will interrupt or delete

current jobs. Xerox recommends that you back up jobs and folders before enabling. For details, see

Backing up Saved Jobs on page 84.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 74

Security

Overwriting Image Data

To ensure that image data on the printer’s hard drive cannot be accessed, you can delete and overwrite image data. Image data is any and all in-process or temporary user data on the disk, such as current jobs, queued jobs, temporary scan files, but not saved jobs or folders.

Manually Deleting Image Data

To manually delete image data on the printer’s hard drive:

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > On Demand Overwrite > Manual.

2. Under Standard, click Start to delete all data except:

• Jobs and folders stored by the Reprint Saved Jobs service

• Jobs stored by the Scan to Mailbox service

• Speed dial entries in the Fax Address Book

• Internet Fax mailbox contents

Note: Depending on how many files are being deleted, the printer can be offline for up to 20

minutes while data is being deleted.

To manually delete all image data on the printer’s hard drive:

CAUTION: All image data will be deleted.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > On Demand Overwrite > Manual.

2. Under Full, click Start to delete all data.

Note: Depending on how full the hard drive is, the printer can be offline for up to 60 minutes while

data is being deleted.

Scheduling Routine Deletion of Image Data

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > On Demand Overwrite > Scheduled.

2. To enable Scheduled On Demand Overwrite, under Frequency, select how often you want data to be deleted: Daily, Weekly or Monthly.

3. Under Time, type the time that you want data to be deleted.

4. If you selected Weekly or Monthly frequency, under Day of Week or Day of Month, select the day that you want data to be deleted.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 75

5. Under Type, select Full to completely delete all data, or Standard to delete all data except:

• Jobs and folders stored by the Reprint Saved Jobs service

• Jobs stored by the Scan to Mailbox service

• Fax Dial Directories

• Fax Mailbox contents

CAUTION: If you select Full, all image data will be deleted.

6. Click Apply.

Security

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 76

Security

PostScript Passwords

The PostScript language includes commands that allow PostScript print jobs to change the printer’s configuration. By default, this capability is allowed. To ensure that unauthorized changes are not made, you can require PostScript jobs to include a password.

You can enable the following password:

• Run Start Job: This password controls the execution of the Sys/Start file.

You can create the following passwords:

• System Parameters Password: This password can be used to control the execution of PostScript snippets.

• Start Job Password: The Start Job password, used with the Startjob and Exitserver operators, restricts PostScript jobs from running unencapsulated to prevent them from changing default settings.

• For more information on these passwords, see CentreWare IS help.

To enable or create these passwords:

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > PostScript

2. Under Run Start Job, under Startup Mode, select Enabled to enable the Run Start job password feature.

3. Under System Parameters Password or Job Start Password, type a password.

4. Retype the password to verify.

5. Click Apply.

Passwords.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 77

Security

IP Filtering

You can prevent unauthorized network access by blocking or allowing data sent from particular IP addresses.

Creating an IP Filter Rule

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > IP Filtering.

2. Click Add.

3. From the Protocol drop-down menu, select the protocol to apply the rule to. Options include All, TCP, UDP, or ICMP.

4. From the Action drop-down menu, select how you want the filter to handle the incoming packet. Select Reject if you want the printer to reject the packet and send an ICMP message back to the source host. Select Drop if you want the printer to ignore the packet.

5. From the Move This Rule To drop-down menu, select either End of List or Beginning of List. Actions are performed in the order defined on the rule list.

Note: You can also arrange the rule execution order on the main IP Filtering page.

6. Type the Source IP Address.

7. Type a number for the Source IP Mask that will use this rule. The allowable range of 0 to 32 corresponds to the 32-bit binary number comprising IP addresses. A number of 8, for example, represents a Class A address (mask of 255.0.0.0). The number 16 represents a Class B address (mask of 255.255.0.0). The number 24 represents a Class C address (mask of 255.255.255.0).

8. Source Port: This selection is only available when the Protocol is set to TCP or UDP. Type the originating port, if applicable, that the rule has been created to handle. If the incoming packet does not originate from this source port, the rule will not be applied.

9. Destination Port: This selection is only available when the Protocol is set to TCP or UDP. Type the destination port that the rule has been created to handle. If the incoming packet is not sent to this port, the rule will not be applied.

10. ICMP Message Type: This selection is only available when the protocol is set to ICMP. Select which ICMP Message type the rule is meant to handle.

11. Click the Apply.

Note: Settings are not applied until you restart the printer.

Editing or Deleting IP Filter Rules

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > IP Filtering.

2. Click an IP filter rule.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 78

Security

3. To edit a rule, click Edit and edit the rule. Click Apply.

4. To delete a rule, click Delete. Click OK to confirm.

Arranging the Execution Order of IP Filter Rules

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > IP Filtering.

2. Click an IP filter rule.

3. Under Move selected rule to position, select the position and click Move.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 79

Security

Audit Log

When the Audit Log feature is enabled, the printer begins recording events that happen on the printer. You can download the Audit Log as a tab-delimited text file, and review it to find security breaches and assess the printer’s security.

Enabling Audit Log

Notes:

• Secure HTTP (SSL) must be enabled before you can enable Audit Log. For details, see Enabling Secure HTTP (SSL) on page 65.

• If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > Audit Log.

2. Click Enabled under Enabling Audit Log on machine.

3. Click Apply.

Saving an Audit Log

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Security > Audit Log.

2. Click Save.

3. Right-click the Download Log link and save the compressed auditfile.txt.gz file to your computer.

4. Extract the Auditfile.txt text file, and open it in a spreadsheet application that can read a tab-

delimited text file.

Interpreting the Audit Log

The Audit Log is formatted into ten columns

• Index: Column 1 lists a unique value that identifies the event.

• Date: Column 2 lists the date that the event happened in mm/dd/yy format.

• Time: Column 3 lists the time that the event happened in hh:mm:ss format.

• Event ID: Column 4 lists the type of event. The number corresponds to a unique description. For

details, see Audit Log Event Identification Numbers on page 174.

• Event Description: Column 5 lists an abbreviated description of the type of event. For details, see

Audit Log Event Identification Numbers on page 174.

Notes:

• One audit log entry is recorded for each network destination within a Workflow Scanning

scan job.

• For Server Fax jobs: One audit log entry is recorded for each Server Fax job.

• For Email jobs: One audit log entry is recorded for each SMTP recipient within the job.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 80

Security

• Other Event Details: Columns 6-10 list other information about the event, such as:

• Identity: User Name, Job Name, Computer Name, Printer Name, Folder Name, or Accounting

Account ID (when Network Accounting is enabled).

Note: Network Authentication must be configured to record the user's name in the Audit Log.

• Completion Status

• Image Overwrite Status: The status of overwrites completed on each job. Immediate Image

must be enabled.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 81

Printing

This chapter includes:

• Saving and Reprinting Jobs on page 82

• Managing Banner Sheet Printing Options on page 86

• UNIX, Linux, and AS/400 Printing on page 88

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 82

Printing

Saving and Reprinting Jobs

The Reprint Saved Jobs feature allows you to save a print job on the printer so that it can be printed at any time.

Enabling the Reprint Saved Jobs Feature

Note: If your printer is locked, you must log in as a system administrator. For details, see Initial Setup in CentreWare IS on page 17.

1. In CentreWare IS, click Services > Reprint Saved Jobs > Enablement.

2. Under Enablement, select Enabled, then click Apply.

Creating and Managing Saved Jobs Folders

By default, if Reprint Saved Jobs is enabled, jobs will be saved in the Default Public Folder. To create new folders or manage folders, use the Saved Jobs page.

To access the Saved Jobs page, in CentreWare IS, click Jobs > Saved Jobs. The Reprint Saved Jobs page displays.

Creating a New Folder

Note: If your printer is locked, you must log in as a system administrator. For details, see Initial Setup in CentreWare IS on page 17.

1. In CentreWare IS, click Jobs > Saved Jobs.

2. Under Folder Operations, click Create New Folder.

3. Type the desired Name for the folder. Leave the folder permissions set to Public.

Note: Private and Read-only folders are not supported.

4. Click Apply to save your settings. The new folder displays under Folders in the list.

Managing Folders

You can easily modify or delete folders created on the printer to save reprint jobs.

Note: If your printer is locked, you must log in as a system administrator. For details, see Initial Setup in CentreWare IS on page 17.

To edit a folder:

1. In CentreWare IS, click Jobs > Saved Jobs.

2. Click Manage Folders; the list of existing folders displays.

3. To edit a specific folder, click the pencil icon next to the folder name. The Edit Folder Properties page displays.

You can rename the folder and change folder permissions, if allowed.

4. Click Apply to accept the current settings or Cancel to retain the previous settings.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 83

Printing

To delete a folder:

1. In CentreWare IS, click Jobs > Saved Jobs.

2. Click Manage Folders; the list of existing folders displays.

3. Select the folder you want to delete; the Delete Folder button activates.

4. Click Delete Folder; a dialog box displays warning you that the delete is permanent. Click OK to delete the folder or Cancel to exit without saving.

Saving and Printing Jobs

Saving a Job from Your Computer

1. With your file open, from your application’s File menu, click Print. The application Print window displays.

2. Select your printer from the Printer Name drop-down menu.

3. Click Properties to access the print settings for the job.

4. On the Paper/Output tab, click the Job Type drop-down menu, then select Saved Job. The Saved Job options display.

5. To save the job for printing later, select Save, or to both store the job and print it immediately, select Save and Print.

6. Type in a Job Name for the job or select Use Document Name to use the file name of the document being submitted.

7. Select the folder to use to save the job from the Save in Folder drop-down menu. You can save the file to the Default Public Folder or you can create a new public folder to use for your job.

8. To save your job to a different folder, type the name of the folder or type a path including the new folder name that you want to create, then click OK.

9. To save your job as a secure job, type in and retype a 4-10 digit passcode in the passcode fields then click ok. For details on the Secure Job feature, see the User Guide at

www.xerox.com/office/WC6400docs.

10. Click OK to save the settings.

Note: If User Data Encryption is Enabled, saved jobs are encrypted. For details, see Stored Data Encryption on page 73.

Saving and Printing a Job in CentreWare IS

You can save and reprint jobs from the Print tab in CentreWare IS. The job submitted must be a print ready file, such as a PDF or PostScript file.

Note: If your printer is locked, you must log in as a system administrator. For details, see Initial Setup in CentreWare IS on page 17.

1. In CentreWare IS, select Print to access the Job Submission page.

2. Type the name of the file or click Browse to locate the file on your computer.

3. From the Job Type drop-down menu select Save Job for Reprint. The Saved Job options display.

4. To save the job for printing later, select Save or select Save and Print to store and print the job immediately.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 84

Printing

5. Type in a Job Name for the job or select use the file name of the document being submitted.

6. From the Save in Folder drop-down menu, select the folder to use for the saved job.

Note: You can also use the Default Public Folder or create a new public folder for your jobs.

7. If you want to secure your saved job, select Secure Saved Job. Type in and retype a 4-10 digit passcode in the Passcode and Confirm Passcode fields.

8. Select printing options and output destination for the job as desired.

9. Click Submit Job. Jobs are placed in the folder specified on the printer and can be accessed and printed as many times as desired.

Note: If User Data Encryption is Enabled, saved jobs are encrypted. For details, see Stored Data Encryption on page 73.

Backing up Saved Jobs

Note: If your printer is locked, you must log in as a system administrator. For details, see Initial Setup in CentreWare IS on page 17.

To back up saved jobs to an FTP file repository:

1. In CentreWare IS, click Services > Reprint Saved Jobs > Backup Jobs.

2. Under Settings, select FTP as the protocol.

3. Select the address type and Port for the FTP server to be used to backup jobs. Options are IPv4 Address, IPv6 Address, or Host Name.

4. Type the appropriately formatted address in the IP Address: Port field. The default port number is

21.

5. In the Document Path field, specify the path to the file repository.

6. In the File Name field, type the name for the backup. This name will be appended to the end of the document path.

7. In the Login Name field, type the login name for the FTP server.

8. Type a Password and Retype Password.

9. Enable Select to Save New Password.

10. Click Start to begin the back up or Undo to retain the previous settings.

Restoring Saved Jobs

CAUTION: When you restore backed-up jobs, existing stored jobs are overwritten, and the Default

Public Folder will be empty.

Note: If your printer is locked, you must log in as a system administrator. For details, see Initial Setup in CentreWare IS on page 17.

To restore jobs from an FTP file repository:

1. In CentreWare IS, click Properties > Services > Reprint Saved Jobs > Restore Jobs.

2. Under Settings, select FTP as the protocol.

3. Select the address type and Port for the server to use to restore saved jobs from. Options are IPv4 Address, IPv6 Address, or Host Name.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 85

Printing

4. Type the appropriately formatted address in the IP Address: Port field. The default port number is

21.

5. In the Document Path field, specify the path to the file repository.

6. In the File Name field, type the name for the backup to restore. This name will be appended to the end of the document path.

7. In the Login Name field, type the login name of the FTP server.

8. Type a Password and Retype Password.

9. Enable Select to Save New Password.

10. Click Start to begin restoring Saved Jobs or Undo to retain the previous settings.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 86

Printing

Managing Banner Sheet Printing Options

You can set the printer to print a Banner Sheet with each print job. The banner sheet contains information identifying the user and job name. This option can be set in the print driver, in CentreWare IS, or at the printer control panel.

Notes:

• Banner sheet printing must be enabled in the print driver. It must also be enabled at the

control panel, or in CentreWare IS or a banner sheet will not print.

• If your printer is locked, you must log in as a system administrator. For details, see System Administrator Access at the Control Panel on page 15. or Accessing CentreWare IS on page 17.

Enabling Banner Sheet Printing in CentreWare IS

1. In CentreWare IS, click Properties > Services > Printing > General.

2. Under Banner Sheet, select Enabled to allow banner sheets to print or clear Enabled to disable

this options.

3. Click Apply.

Enabling Banner Sheet Printing for LPR Print Jobs

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Connectivity > Protocols > LPR/LPD.

2. Under Advanced Settings, clear the Enabled check box for PDL banner page attributes over LPR control file attributes for job name and owner and click Apply.

Enabling Banner Sheet Printing at the Control Panel

Note: If your printer is locked, you must log in as a system administrator. For details, see System Administrator Access at the Control Panel on page 15.

1. At the printer control panel, press the Machine Status button, then touch To o ls .

2. Touch Service Settings.

3. Touch Job Sheets > Banner Sheets.

4. Touch Enabled to allow banner sheets or Disabled to prevent this feature.

5. Touch Save.

Enabling Banner Sheet Printing in the Printer Driver

1. With your file open, from your application’s File menu, click Print. The application Print window displays.

2. Select your printer from the Printer Name drop-down menu.

3. Click Properties to access the print settings for the job.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 87

4. Click the Advanced tab.

5. Click to expand the Paper/Output option.

6. Click Banner Sheets, then click the down arrow and select Enabled or Disabled.

Note: If banner page printing is disabled through CentreWare IS or the at the printer control

panel, setting the print driver to print banner pages will have no effect.

7. Click OK.

Printing

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 88

Printing

UNIX, Linux, and AS/400 Printing

UNIX-based printing uses LPD/LPR port 515 or lp to port 9100 to provide printer spooling and network print server functionality. Xerox printers can communicate using either protocol.

Xerox Services for UNIX Systems (XSUS)

XSUS is an application that allows you to manage and print to multiple printers in UNIX and Linux environments. With XSUS you can:

• Configure and check the status of network connected printers.

• Set up a printer on your network as well as monitor the operation of the printer once installed.

• Perform maintenance checks and view supplies status at any time.

• Provide a common look-and-feel across the many different suppliers of UNIX and Linux operating systems.

Supported Printing Models

• Workstation-to-printer (Peer-to-Peer): Print jobs are processed and spooled locally on your computer, then sent directly to the printer. XSUS must be installed on each computer.

• Workstation-to-Server (Client-Server): Print jobs are processed and spooled on your computer and then sent to the printer to be printed. This model requires XSUS to be installed on both the server and on the computer.

• Server Based: Print jobs are sent unprocessed from your computer and are spooled on the server and then sent to the printer. This model requires XSUS to be installed on the server only. Individual computers can print to the printer by setting up a generic lp or lpr queue pointing to the queue on the print server.

• Network Information Service (NIS) Based: NIS uses a printer configuration map on the server. When new printer queues are added to a print server, only the configuration file in the master NIS server must be updated. NIS clients can then print to any of the queues listed on the server map without setting up local queues.

Note: Consult your UNIX or Linux operating system manual for more information on how to set up

NIS-based printing.

Installing XSUS

Before you begin:

Note: You must have root or superuser privileges to install XSUS.

Obtain the latest software from the Xerox website.

Locate the Installation Files

1. Open a Web browser and type www.xerox.com.

2. On the Xerox Support Page, click Support and Drivers.

3. Click Support & Drivers > Multifunction > WorkCentre > 6400 Multifunction Printer > Drivers & Downloads.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 89

4. In the Operating System list, select UNIX, Linux, or Sun Solaris.

5. In the language list, select language.

6. Click Go.

You must download the following two .tgz files:

1. Printer Model Package file which contains ppd files for all printer models. The file name is PrinterPkgXPXX_20xx_xx_xx.tgz.

2. Printer Driver for your operating system. The available files are:

• XeroxAIXpowerpcxpxx_x.xx.xx.tgz for the IBM RS6000 family.

• XeroxHPUXXPXX_x.xx.xx.tgz to support HP workstations.

• XeroxLinuxi386XPXX_x.xx.xx.tgz to support Linux environments.

• XeroxSolarisXPXX_x.xx.xx.tgz for Sun Solaris systems.

Note: Each of the .tgz files, when expanded, will require approximately four times the file size in

disk space.

Download the Files

1. Set up a temporary directory to download the files.

2. Download the printer driver and Printer Model Package .tgz files to the temporary directory.

Printing

Note: Each expanded .tgz file requires as much as four times its original size in disk space.

3. At the UNIX command line, type gzip -dfv {filename.tgz} then press Return or Enter. The {filename} must include a .tgz extension.

4. Type tar -xvf {filename.tgz} then press Return or Enter.

5. The files are expanded and two directories are created with names that match the printer driver and Printer Model Package .tgz file names.

Note: The expansion steps must done for both .tgz files.

Perform the Installation Procedure

1. Change to the directory created by the expansion of the Code .tgz file.

2. On the command line, type ./setup then press Return or Enter.

3. Change to the directory created by the expansion of the Printer Definition .tgz file.

4. Type ./setup then press Return or Enter.

The installation creates a Xerox directory in /usr or /opt depending on your operating system.

Launch XSUS

To launch XSUS from a terminal window prompt as root, type xpadmin, then press Enter or Return.

Note: XSUS automatically detects if your system’s X server is able to run in graphical mode or not

and starts accordingly.

For more information on managing printers and queues through XSUS, see the XSUS Administrator Online Help.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 90

Printing

Printing from a Linux Workstation

Ensure that CUPS is installed and running on your workstation. The instructions for installing and building CUPS are contained in the CUPS Software Administrators Manual, written and copyrighted by Easy Software Products.

Note: For complete information on CUPS printing capabilities, see the CUPS Software Users

Manual available from www.cups.org/documentation.php.

Installing the Xerox PPD on the workstation

The Xerox PPD for CUPS is available on the Xerox website. Download the file and follow the instructions that come with it.

1. Open a Web browser and type www.xerox.com.

2. On the Xerox Support Page, click Support and Drivers.

3. Click Support & Drivers > Multifunction > WorkCentre > 6400 Multifunction Printer > Drivers & Downloads.

4. In the Operating System list, select UNIX.

5. In the language list, select language.

6. Click Go.

7. Select the PPD

Copy the PPD into your CUPS ppd/Xerox folder on your workstation. If you are unsure of the folder's location, use the Find command to locate the ppd's.

Adding the Xerox printer

1. Verify that the CUPS daemon is running.

2. Open a Web browser and type http://localhost:631/admin, then click Enter or Return.

3. In User ID, type root. For password, type the root password.

4. Click Add Printer and follow the on screen prompts to add the printer to the CUPS printer list.

Printing with CUPS

CUPS supports the use of both the System V (lp) and Berkeley (lpr) printing commands.

1. To print to a specific printer in System V, type: lp -dprinter filename, then click Enter.

2. To print to a specific printer in Berkeley, type: lpr -Pprinter filename, then click Enter.

AS/400

Xerox provides Work Station Customization Object (WSCO) files to support AS/400 or Iseries, V5R2 or later. The WSCO is a file that provides printer-specific PCL codes that the host print transform uses to select the correct tray, 2-sided option, font size and type, and orientation.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 91

Printing

The XTOOLSxxxx library provides a source WSCO for each supported Xerox printer or device. You only need to download and install the library once.

Notes:

• The host print transform only works on files that are of the type AFPDS and SCS. PIDS

formatted printer files must be recreated as type AFPDS to use the WSCO for printing.

• You must have IOSYSCFG permissions to create a device description or a remote queue.

• For details on AS/400, refer to the IBM AS/400 Printing V, (Red Book), available on the

IBM website.

Installing the WSCO and Setting up Print Queues

For detailed instructions on installing the library and setting up print queues, refer to the installation instructions that are included with the library.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 92

Printing

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 93

Managing Copy Functions

This section includes:

• Specifying Default Copy Settings on page 94

• Changing the Reading Order on page 95

• Creating Copy Feature Presets on page 96

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 94

Managing Copy Functions

Specifying Default Copy Settings

Note: If your printer is locked, you must log in as a system administrator. For details, see System Administrator Access at the Control Panel on page 15.

1. At the printer control panel, press the Machine Status button.

2. Touch the To ol s tab, then touch Service Settings.

3. Touch Copy Service Settings.

4. Touch Feature Defaults.

5. Make the desired changes to the settings on the following tabs:

• Copy: Update Output Color, Reduce/Enlarge settings, Paper Supply, 2-Sided Copying, and

Copy Output settings.

• Image Quality: Update Image Options, Image Enhancement, and Color Balance settings.

• Layout Adjustment: Update Original Size, Image Shift, and Edge Erase settings.

• Output Format: Set Annotations for copy jobs.

Note: You must touch Save after changing settings on each tab.

6. Touch Save Defaults.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 95

Managing Copy Functions

Changing the Reading Order

Note: If your printer is locked, you must log in as a system administrator. For details, see System Administrator Access at the Control Panel on page 15.

You c an ch ang e:

• The order that pages are scanned in books. This impacts the Book Copy and Book Fax features.

• The order that pages are printed. This impacts the Page Layout and Booklet Creation features.

Note: Reading order is left-to-right by default.

1. At the printer control panel, press the Machine Status button, then touch the To o ls tab.

2. Touch Service Settings.

3. Touch Copy Service Settings.

4. Touch Reading Order Options.

5. Under Scan Order, touch Show Reading Order.

6. Touch either Left to Right or Right to Left.

7. Under Print Order, touch Show Reading Order.

8. Touch either Left to Right or Right to Left.

9. Touch Save.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 96

Managing Copy Functions

Creating Copy Feature Presets

Note: If your printer is locked, you must log in as a system administrator. For details, see System Administrator Access at the Control Panel on page 15.

You can define copy feature presets for the following features:

•Edge Erase

• Image Shift

• Reduce/Enlarge

To access the copy presets screen:

1. At the printer control panel, press the Machine Status button.

2. Touch the To ol s tab, then touch Service Settings.

3. Touch Copy Service Settings.

Edge Erase Presets

To create an Edge Erase Preset:

1. Touch Edge Erase Presets.

2. To create a new preset, touch Presets, then touch Available in the list of presets.

3. Touch Name at the bottom of the window, then, using the touch screen keyboard, touch Clear Text,

4. Enter the name of the new preset,

5. Touch Save.

To edit an existing preset, touch Presets, then touch the desired preset.

1. Touch Side 1, then touch the arrows to change the amount to erase from each edge.

2. Touch Side 2, then touch the arrows to change the amount to erase from each edge, or touch Mirror Side 1.

3. Touch Save.

Image Shift Presets

To change the presets for shifting the image on the page:

1. Touch Image Shift Presets.

2. Touch Presets, then touch the desired preset.

3. Touch the arrows to change the amount of Up/Down and Left/Right shift for Side 1 and Side 2.

4. Touch Save.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 97

Managing Copy Functions

Reduce/Enlarge Presets

To change the presets for reducing or enlarging images:

1. Touch Reduce/Enlarge Presets.

2. To change a proportional preset, touch Proportional %, touch the desired preset between 1 and 10, then type the percentage using the touch-screen keypad.

3. To change a preset that uses an independent percentage for the width and length of the image, touch Independent X-Y%.

4. Touch the X and Y for the preset you want to change, type the scale percentage using the touchscreen keypad.

5. Touch Save.

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 98

Managing Copy Functions

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 99

Scanning

This chapter includes:

• Scanning to a Folder on the Printer on page 100

• Scanning to an Email Address on page 104

• Workflow Scanning on page 106

• Scanning to a User’s Home Folder on page 116

• Configuring the Printer for the Xerox Scan Utility on page 117

WorkCentre 6400 Multifunction Printer

System Administrator Guide

Page 100

Scanning

Scanning to a Folder on the Printer

The Scan to Mailbox feature allows users to scan files to mailboxes, which are folders created on the printer’s hard drive. These files can then be retrieved through CentreWare IS. This feature provides network scanning capability without the need to configure a separate server and is supported in Workflow Scanning.

Note: For instructions explaining how to use this feature, see the User Guide at www.xerox.com/office/WC6400docs.

Enabling or Disabling Scan to Mailbox

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Services > Scan to Mailbox > Enablement.

2. Select Enable Scan to Mailbox.

Note: Once you enable Scan to Mailbox, the created mailboxes display in Workflow Scanning.

3. To have mailboxes display on the Scan tab in CentreWare IS, select On Scan tab, view Mailboxes by default.

4. Click Apply.

Setting Scan Policies

Scan policies allow you manage how users are allowed to scan files, create folders, and assign passwords to their folders on the printer.

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1. In CentreWare IS, click Properties > Properties > Services > Scan to Mailbox > Scan Policies.

2. Under Scan Policies, select or clear:

• Allow scanning to Default Public Folder: Enable this option to allow users to scan files to the

Default Public Folder without requiring a password.

• Require per job password for public folders: Enable this option to require users to type a

password for every job they scan to the public folder.

• Allow additional folders to be created: Enable this option to allow users to create additional

public or private folders on the printer. If Require password when creating additional folders is disabled, assigning a password to the folder is optional. This creates a public folder.

Note: If Allow additional folders to be created is disabled, the Create Folder button does not

display on the Scan tab.

• Require password when creating additional folders: Enable this option to require users to

type a new password every time they create a new folder. This feature only allows users to create private folders.

WorkCentre 6400 Multifunction Printer

100

System Administrator Guide

Xerox WorkCentre 6400 System Administrator Guide

Specifications and Main Features

Frequently Asked Questions

User Manual

Contents

Introduction

Overview

Configuration Steps

More Information

Initial Setup

Physical Connection

Initial Setup at the Control Panel

The Installation Wizard

Quick Setup Home

Configuration Report

System Administrator Access at the Control Panel

Manually Setting the Printer’s Ethernet Interface Speed

Assigning a Network Address

Initial Setup in CentreWare IS

Accessing CentreWare IS

Locking or Unlocking the Printer

Changing the System Administrator Password

Accessing the Configuration Report

Using the Configuration Overview Page

Assigning a Name and Location to the Printer

Enabling Services

Network Configuration

TCP/IP

Enabling TCP/IP

Configuring TCP/IP Settings at the Control Panel

Configuring TCP/IP Settings in CentreWare IS

SNMP

Configuring SNMP

Editing SNMP v1/v2c Properties

Editing SNMP v3 Settings

SNMP Advanced Settings

SSDP

LPR/LPD

Enabling LPR/LPD

Raw TCP/IP Printing

Basic Settings

Advanced Settings

SMTP

Configuring SMTP Server Settings

LDAP

Configuring LDAP/LDAPS Server Settings

Configuring Contexts for LDAP

Defining User Mappings

Configuring Authorization Access by Groups

Configuring Filters for LDAP

POP3

HTTP

Enabling HTTP

Configuring HTTP Settings

Proxy Server

AppleTalk

Enabling AppleTalk on the printer

NetWare

Configuring NetWare Settings

Microsoft Networking

Configuring Microsoft Networking

Configuring WINS

Enabling WSD

Security

Setting up Access Rights

Overview

Local Authentication

Network Authentication

Authentication Using a Card Reader System

Controlling Access to Tools and Features

Controlling Access for All Users

Controlling Access for an Individual User or Group

Digital Certificates

Installing a Digital Certificate

Managing Trusted Certificate Authorities

Secure HTTP (SSL)

Enabling Secure HTTP (SSL)

IPsec

Enabling IPsec

Managing Actions