Beruflich Dokumente
Kultur Dokumente
Administrators Manual
D60705-21
September 2012
Trademarks: SafeCom, SafeCom Go, SafeCom P:Go, SafeCom ePay and the
SafeCom logo are trademarks of SafeCom a/s. Company and product names
mentioned in this manual are trademarks or registered trademarks of their
respective owners. SafeCom a/s cannot be held responsible for any technical or
typographical errors and reserves the right to make changes to products and
documentation without prior notification.
Third Party Software: This software may contain third party software which
requires notices and/or additional terms and conditions. Such required third
party software notices and/or additional terms and conditions are located in
the SafeCom Third Party Notice document.
Portions of the application are subject to the following notice:
Copyright 2004-2010 Xerox Corporation".
Patent: SafeCom has received the following British patent GB 2350 713 B, US
patent US 6,952,780 B2 and Europe EUR EP1 120 701.
Feedback: If you have any feedback or ideas concerning this manual or the
SafeCom product, then please send an e-mail to feedback@safecom.eu
Copyright 1999 - 2012 SafeCom a/s
SafeCom a/s
Lautrupvang 12
DK-2750 Ballerup
Denmark
Phone: +45 4436 0240
E-mail: info@safecom.eu
Web: safecom.eu
D60705-21
Table of contents
1
Introduction ............................................................................................7
1.1
SafeCom Go Xerox ......................................................................... 7
1.2
Requirements ............................................................................... 7
1.3
SafeCom ID devices ........................................................................ 9
1.4
Xerox global print driver ................................................................ 10
1.5
Supported languages .................................................................... 10
1.6
Available documentation ............................................................... 10
1.7
About this manual........................................................................ 11
1.8
Document history ........................................................................ 11
D60705-21
2.7
2.8
2.9
2.10
2.11
2.12
2.13
D60705-21
2.6.3
Enable Extensible Service Registration on the printer ............ 31
2.6.4
Configure authentication and access control on the printer ..... 31
2.6.5
Enable extensible services browser ................................... 32
2.6.6
Allow login by code on the printer .................................... 32
2.6.7
Add the device in SafeCom Administrator ........................... 32
Xerox WorkCentre 52xx, 72xx, 73xx and 74xx ...................................... 33
2.7.1
Set up the printer ........................................................ 33
2.7.2
Create certificate and enable SSL on the printer .................. 33
2.7.3
Enable custom services .................................................. 34
2.7.4
Enable ports ............................................................... 34
2.7.5
Configure authentication and access control on the printer ..... 34
2.7.6
Allow login by code on the printer .................................... 35
2.7.7
Add the device in SafeCom Administrator ........................... 35
2.7.8
Allow device error messages to appear on 73xx .................... 36
Xerox WorkCentre 64xx ................................................................. 37
2.8.1
Set up the printer ........................................................ 37
2.8.2
Create certificate on the printer ...................................... 37
2.8.3
Enable HTTPS on the printer ........................................... 38
2.8.4
Enable Extensible Service Registration on the printer ............ 38
2.8.5
Configure authentication and access control on the printer ..... 38
2.8.6
Allow login by code on the printer .................................... 38
2.8.7
Add the device in SafeCom Administrator ........................... 39
Xerox WorkCentre 57xx ................................................................. 39
2.9.1
Create certificate on the printer ...................................... 39
2.9.2
Enable HTTPS on the printer ........................................... 40
2.9.3
Enable Extensible Service Registration on the printer ............ 40
2.9.4
Configure authentication and access control on the printer ..... 40
2.9.5
Allow login by code on the printer .................................... 41
2.9.6
Add the device in SafeCom Administrator ........................... 41
Xerox WorkCentre 56xx ................................................................. 42
2.10.1
Set up the printer ........................................................ 42
2.10.2
Create certificate and Enable SSL on the printer .................. 42
2.10.3
Enable custom services on the printer ............................... 43
2.10.4
Enable web services on the printer ................................... 43
2.10.5
Configure authentication and access control on the printer ..... 43
2.10.6
Allow login by code on the printer .................................... 44
2.10.7
Set custom services as the default entry screen ................... 44
2.10.8
Add the device in SafeCom Administrator ........................... 45
2.10.9
Enable custom services (EIP) on older 56xx ......................... 45
Xerox Workcentre 53xx ................................................................. 45
2.11.1
Set up the printer ........................................................ 45
2.11.2
Create certificate and enable SSL on the printer .................. 45
2.11.3
Enable extensible services and extensible services browser ..... 46
2.11.4
Allow login by code on the printer .................................... 47
2.11.5
Add the device in SafeCom Administrator ........................... 47
2.11.6
Configure authentication and access control on the printer ..... 48
Xerox WorkCentre Pro 2xx.............................................................. 50
2.12.1
Set up the printer ........................................................ 50
2.12.2
Create certificate and enable SSL on the printer .................. 50
2.12.3
Enable custom services on the printer ............................... 51
2.12.4
Configure authentication and access control on the printer ..... 51
2.12.5
Allow login by code on the printer .................................... 51
2.12.6
Add the device in SafeCom Administrator ........................... 51
2.12.7
Check EIP hardware on WorkCentre Pro 2xx ........................ 52
Xerox Phaser 3635MFP .................................................................. 53
2.13.1
Set up the printer ........................................................ 53
2.13.2
Enable USB card reader ................................................. 53
2.13.3
Create certificate and Enable SSL on the printer .................. 53
2.13.4
Enable custom services on the printer ............................... 54
2.13.5
Add the device in SafeCom Administrator ........................... 54
2.13.6
2.13.7
D60705-21
7.2
7.3
7.4
7.5
7.1.5
7.1.6
Xerox
7.2.1
7.2.2
7.2.3
7.2.4
7.2.5
7.2.6
Xerox
7.3.1
7.3.2
7.3.3
7.3.4
7.3.5
7.3.6
Xerox
7.4.1
7.4.2
7.4.3
7.4.4
7.4.5
7.4.6
Xerox
7.5.1
7.5.2
7.5.3
7.5.4
7.5.5
7.5.6
10
D60705-21
1 Introduction
Introduction
1.1
SafeCom Go Xerox
SafeCom Go Xerox is the embedded solution for Xerox printers. It integrates
with the touch-screen control panel of the Xerox printer and offers user
authentication by code and/or card.
SafeCom Go Xerox works together the SafeCom G3 Server software and is
designed to help companies and organizations gain control over their printing
costs and document security. The SafeCom solution can be enhanced with addon modules to build customer specific and scalable solutions.
1.2
Requirements
D60705-21
SafeCom Go Xerox supports all printers in Table 1 with the listed version
or newer firmware. The printers must be EIP-enabled.
SafeCom Go device license.
The SafeCom Device Server REQUIRES Java Runtime Environment (JRE)
version 1.6 or later. It can run on the same physical hardware as the
SafeCom Server. If SafeCom Device Server is installed on a 64-bit
operating system, a Java version 32-bit needs to be installed. JRE can
be downloaded from www.java.com.
1 Introduction
D60705-21
Printer
firmware
SafeCom
Controller
55.1.3
20.104.04.007
May require EIP hw
(P/N 097N09148)
13.060.22.50
Requires EIP hw
(2.12.7)
OK
SafeCom
Device
Server
OK
OK
OK
1.207.7
OK
53.3.21
OK
OK
25.54.39.000
OK
21.120.39.000
OK
061.132.222.03800
OK
OK
060.070.109.11403
OK
71.20.31
OK
OK
1.207.5
OK
1.237.4
OK
75.13.62
OK
OK
061.120.100.31400
OK
OK
040.033.53120
OK
060.090.009.23712
OK
060.050.009.13415
OK
071.160.101.36000
OK
061.180.221.31500
OK
OK
1 Introduction
1.3
SafeCom ID devices
Table 2 SafeCom Go Xerox supported SafeCom ID Devices
SafeCom
Controller
SafeCom
Device Server
Identification Method
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
USB *
USB
keyboard
**
674110
674120
674620
697410
673110
673120
673720
671110
654110
671120
654120
654720
670010
651010
670110
658010
679110
670120
670620
679120
679720
970120
970620
USB
Serial
696420
694020
652420
678020
674120
674420
697420
673120
673420
671120
654120
654420
670420
651020
670120
658420
679120
679420
696010
694010
652010
959010
954010
657010
692010
691020
692020
970120
970420
970110
695620
698420
698010
The ID device is either fitted or supplied with a 1.8 - 2.0 m cable. Additional
information about the ID devices is available in SafeCom G3 Administrators
Manual D60603.
* USB reader for Xerox series 7120, 53xx, 550, 560, 74xx
** USB Keyboard reader for Xerox series 3635, 57xx, 75xx, 93xx
D60705-21
1 Introduction
1.4
1.5
Supported languages
The languages, with their postfixes, listed below are supported by SafeCom.
Postfix
None
da
de
es
fr
it
iw
ja
ko
nl
no
sv
zh
zh_tw
1.6
Language
English
Danish
German
Spanish
French
Italian
Hebrew
Japanese
Korean
Dutch
Norwegian
Swedish
Chinese
Chinese, Taiwan
Available documentation
SafeCom Smart Printing
D60705-21
10
1 Introduction
1.7
1.8
Document history
Revision D60705-21
Revision D60705-20
Xerox Phaser 3635 now supports USB card reader (2.13.2).
Support for Xerox ColorQube 87xx/89xx (2.6)
D60705-21
11
1 Introduction
Revision D60705-19
Revision D60705-18
Revision D60705-17
Revision D60705-16
Revision D60705-15
Revision D60705-14
Revision D60705-13
D60705-21
12
1 Introduction
Revision D60705-12
D60705-21
13
D60705-21
14
2.1
2.1.1
admin
1111
3.
4.
5.
6.
Open the printers web page and click on the Properties tab. Enter the
Device Administrator Password to log in.
Click Security and then Machine Digital Certificate Management on the
menu. View the Machine Digital Certificate area and confirm that the
Current Status of the Machine Digital Certificate indicates that the
printer does not have a Certificate established on the printer. If a
certificate is established, proceed to enable HTTPS (2.1.2).
Click Create New Certificate.
Select Self Signed Certificate. Click Continue.
The maximum Days of Validity allowed are 1800 (and not 9999 as
indicated).
Click Apply.
In order for the certificate to work properly, you need to disable verification of
remote server certificate:
1.
2.
3.
4.
2.1.2
D60705-21
Open the printers web page and click on the Properties tab.
Click Connectivity, Protocols, and then HTTP and check that Secure
HTTP (SSL) is enabled on port 443.
Click Apply.
Click OK to restart the devices web server.
Click Reboot Machine. Click OK to reboot.
15
2.1.3
2.1.4
2.1.5
Open the printers web page and click on the Properties tab. Refer to
section 8.4 if you have problems accessing the Properties tab.
Click General Setup and then Extensible Service Setup
In Extensible Service Registration click Configure. Scroll down to
Remote System Management and select Enable next to Extensible
Service Registration.
Click Apply. Click OK.
Open the printers web page and click on the Properties tab.
Click General Setup and then Extensible Service Setup.
Check Export password to Extensible Browser.
Check Enable the Extensible Services Browser.
Check Verify server certificates.
Click Apply.
D60705-21
3.
Open the printers web page and click on the Properties tab.
Click Security, Remote Authentication Servers and then Xerox Secure
Access Settings.
The Xerox Secure Access Settings web page appears.
4.
5.
6.
16
2.1.6
Make sure the SafeCom server software installation has been completed.
Add a device either via the SafeCom Administrator (3.3.1) or via the
SafeCom Device Server (3.3.2).
Configure the device (3.4).
2.1.7
D60705-21
Make sure the SafeCom server software installation has been completed.
Connect the SafeCom Controller (4.1).
In SafeCom Administrator use Add device (4.3) to add the SafeCom
Controller. Remember to select SafeCom Go Xerox as the SafeCom type.
If relevant Enable copy tracking on the Printer web page of the SafeCom
Controller (4.4).
Open the printers web page and click on the Properties tab.
Click Security and then Authentication Configuration.
The Authentication Configuration> Step 1 of 2 web page appears. In
Login type select Xerox Secure Access Device.
Click Apply.
17
5.
6.
7.
8.
9.
Device Access
By locking the Service Pathway (recommended) users will be
requested to authenticate to access all available services: Copy, Email, Pull Print, etc. Proceed with step A1 - A3.
Service Access
Instead of device access it is possible to control access on a perservice basis. However, Pull Print must always be locked, because
otherwise the SafeCom solution does not know who the user is.
Proceed with step B1 - B3.
Device Access to lock or unlock tools and features for all users:
A1.
A2.
A3.
D60705-21
18
Service Access to lock, unlock or hide individual services for all users:
B1.
B2.
B3.
D60705-21
19
2.2
2.2.1
2.2.2
admin
1111
Open the printers web page and click on the Properties tab.
Click on General Setup on the menu. Skip to section 2.2.2 if Extensible
Service Setup is in the menu. Otherwise visit www.xerox.com search for
Custom Services (EIP). Read the instructions carefully, download the DLM
file that matches your printer model and perform a manual upgrade
(5.2.10).
3.
4.
5.
Open the printers web page and click on the Properties tab.
Click Security and then Machine Digital Certificate Management on the
menu. View the Machine Digital Certificate area and confirm that the
Current Status of the Machine Digital Certificate indicates that the
printer does not have a Certificate established on the printer. If a
certificate is established, proceed to section 2.2.3.
Click Create New Certificate.
Select Self Signed Certificate. Click Continue.
Complete the details required for the Self Signed Certificate. Note that
the Letter Country Code is a required field.
Note: If you are able to enter Days of Validity, PLEASE NOTE that the
maximum number of days allowed are 997 (for models where you can
enter 3 digits) and 1800 (for models where you can enter 4 digits).The
maximum number indicated (999 and 9999 respectively) will not create
the certificate.
6.
D60705-21
Click Apply. You will need the Device Administrator Password to apply
the certificate.
20
2.2.3
2.2.4
2.2.5
Open the printers web page and click on the Properties tab.
Click General Setup and then Extensible Service Setup.
Check Export password to Extensible Browser.
Check Enable the Extensible Services Browser.
Check Verify server certificates.
Click Apply.
4.
5.
D60705-21
Open the printers web page and click on the Properties tab. Refer to
section 8.4 if you have problems accessing the Properties tab.
Click Connectivity, Protocols, and then HTTP in the menu. Select the
Web Services tab and select Enable next to Extensible Service
Registration.
Click Apply.
2.2.6
Open the printers web page and click on the Properties tab.
Click Connectivity, Protocols, and then HTTP and check that Secure
HTTP (SSL) is enabled on port 443.
Click OK.
Open the printers web page and click on the Properties tab.
Click Security, Access Rights, and then Tools & Feature Access on the
menu.
Under Presets select Custom Access. Choose if the users must
authenticate to use the features by locking or unlocking each feature. If
you set Service Pathway to Unlocked or Lock, all features underneath is
set to the same. Remember that Pull Print and Billing must be locked in
order to work.
Click Apply.
Click OK when the properties have been saved.
21
2.2.7
9.
2.2.8
Open the printers web page and click on the Properties tab.
Click Security, Access Rights and then Setup on the menu.
The Authentication Configuration web page appears. In the Current
Configuration area click the Edit Methods button for Authentication.
In Device User Interface Authentication select Xerox Secure Access
Device.
Click Save to return to the Authentication Configuration web page.
In the Current Configuration area click on the Configure button for
Device User Interface Authentication - Xerox Secure Access.
Click the Manually Configure button.
Click Xerox Secure Access Device + alternate on-screen authentication
method to allow logging in by entering an ID code on the printers control
panel. A button labeled Alternate Login is displayed on the Instructional
Blocking Window.
Click Save.
Make sure the SafeCom server software installation has been completed.
Add a device either via the SafeCom Administrator (3.3.1) or via the
SafeCom Device Server (3.3.2).
3. Configure the device (3.4).
If SafeCom is enabled via the SafeCom Controller:
1.
2.
3.
4.
D60705-21
Make sure the SafeCom server software installation has been completed.
Connect the SafeCom Controller (4.1).
In SafeCom Administrator use Add device (4.3) to add the SafeCom
Controller. Remember to select SafeCom Go Xerox as the SafeCom type.
If relevant Enable copy tracking on the Printer web page of the SafeCom
Controller (4.4).
22
2.3
2.3.1
2.3.2
admin
1111
Open the printers web page and click on the Properties tab.
Click Services on the menu. Skip to section 2.4.2 if Custom Services is in
the menu. Otherwise visit www.xerox.com search for Custom Services
(EIP). Read the instructions carefully, download the DLM file that matches
your printer model and perform a manual upgrade (5.2.10).
3.
4.
5.
Open the printers web page and click on the Properties tab.
Click Security and then Machine Digital Certificate Management on the
menu. View the Machine Digital Certificate area and confirm that the
Current Status of the Machine Digital Certificate indicates that the
printer does not have a Certificate established on the printer. If a
certificate is established, proceed to section2.3.3.
Click Create New Certificate.
Select the Select Self Signed Certificate option if not already selected.
Complete the details required for the Self Signed Certificate. Note that
the Letter Country Code is a required field.
Note: If you are able to enter Days of Validity, PLEASE NOTE that the
maximum number of days allowed are 997 (for models where you can
enter 3 digits) and 1800 (for models where you can enter 4 digits).The
maximum number indicated (999 and 9999 respectively) will not create
the certificate.
6.
D60705-21
Click Apply. You will need the Device Administrator Password to apply
the certificate.
23
2.3.3
2.3.4
2.3.5
Open the printers web page and click on the Properties tab. Refer to
section 8.4 if you have problems accessing the Properties tab.
Click Connectivity, Protocols and then HTTP in the menu.
Click Web Services at the top of the page. Select Enable next to
Extensible Service Registration.
Click Apply. Click OK.
D60705-21
Open the printers web page and click on the Properties tab.
Click Connectivity, Protocols and then HTTP and check that Secure
HTTP (SSL) is enabled on port 443.
Click Apply.
Click OK to restart the devices web server.
Click Reboot Machine. Click OK to reboot.
Open the printers web page and click on the Properties tab.
Click Security, Access Rights and then Tools & Feature Access.
Under Presets, select Custom Access.
Set Services Pathway to Locked if you want SafeCom to authenticate for
all services and continue to step 9. Otherwise select Unlocked.
Click Next to continue.
Select the services you wish to have locked by the SafeCom
authentication system. The service named Pull Print has to be set to
either Locked or Hidden.
Click Next to continue.
Select whether or not color copying is allowed on the printer.
This setting only applies when using the printers Local Login, so it does
not matter what is selected here.
Click Finished.
24
2.3.6
8.
2.3.7
Open the printers web page and click on the Properties tab.
Click Security and Access Rights. Click Setup submenu.
In Authentication Configuration click Next.
In the Xerox Secure Access window, click the Next button.
For the setting Device User Interface Authentication click Edit.
Click Manually Override Settings.
Under Device Login Methods select:
Xerox Secure Access Device Authentication to allow logging in by card.
Or
Xerox Secure Access Device Authentication + alternate on-screen
authentication method to allow logging in by entering an ID code on the
printers control panel.
Click Save.
D60705-21
Make sure the SafeCom server software installation has been completed.
Connect the SafeCom Controller (4.1).
In SafeCom Administrator use Add device (4.3) to add the SafeCom
Controller. Remember to select SafeCom Go Xerox as the SafeCom type.
If relevant Enable copy tracking on the Printer web page of the SafeCom
Controller (4.4).
25
2.4
2.4.1
2.4.2
admin
1111
Open the printers web page and click on the Properties tab.
Click Services on the menu. Skip to section 2.4.2 if Custom Services is in
the menu. Otherwise visit www.xerox.com search for Custom Services
(EIP). Read the instructions carefully, download the DLM file that matches
your printer model and perform a manual upgrade (5.2.10).
3.
4.
5.
Open the printers web page and click on the Properties tab.
Click Security and then Machine Digital Certificate Management on the
menu. View the Machine Digital Certificate area and confirm that the
Current Status of the Machine Digital Certificate indicates that the
printer does not have a Certificate established on the printer. If a
certificate is established, proceed to section 2.4.3.
Click Create New Certificate.
Select the Select Self Signed Certificate option if not already selected.
Complete the details required for the Self Signed Certificate. Note that
the Letter Country Code is a required field.
Note: If you are able to enter Days of Validity, PLEASE NOTE that the
maximum number of days allowed are 997 (for models where you can
enter 3 digits) and 1800 (for models where you can enter 4 digits).The
maximum number indicated (999 and 9999 respectively) will not create
the certificate.
6.
7.
8.
D60705-21
Click Apply. You will need the Device Administrator Password to apply
the certificate.
Click Connectivity, Protocols and then HTTP and check that Secure
HTTP (SSL) is enabled on port 443.
Click OK.
26
2.4.3
2.4.4
2.4.5
Open the printers web page and click on the Properties tab. Refer to
section 8.4 if you have problems accessing the Properties tab.
Click Connectivity, Protocols and then HTTP in the menu. Select the
Web Services tab and check that all Web Services are enabled.
2.4.6
Open the printers web page and click on the Properties tab.
Click Services, Custom Services and then Custom Services on the menu.
Confirm that the SSL is enabled. Otherwise return to section 2.4.2.
Select Enabled in the Enablement area and then click Apply.
Open the printers web page and click on the Properties tab.
Go to Security and then click Authentication Configuration in the menu
Click Edit next to Access Setup Wizard.
Set Services Pathway to Locked if you want SafeCom to authenticate for
all services and continue to step 9. Otherwise select Unlocked.
Click Next to continue.
Select the services you wish to have locked by the SafeCom
authentication system. The service named Pull Print has to be set to
either Locked or Hidden.
Click Next to continue.
Select whether or not color copying is allowed on the printer.
This setting only applies when using the printers Local Login, so it does
not matter what is selected here.
Click Finished.
8.
D60705-21
Open the printers web page and click on the Properties tab.
Click Security and Access Rights. Click Setup submenu.
In Authentication Configuration click Next.
In the Xerox Secure Access window, click the Next button.
For the setting Device User Interface Authentication click Edit.
Click Manually Override Settings.
Under Device Login Methods select:
Xerox Secure Access Device Authentication to allow logging in by card.
Or
Xerox Secure Access Device Authentication + alternate on-screen
authentication method to allow logging in by entering an ID code on the
printers control panel.
Click Save.
27
2.4.7
2.5
Make sure the SafeCom server software installation has been completed.
Connect the SafeCom Controller (4.1).
In SafeCom Administrator use Add device (4.3) to add the SafeCom
Controller. Remember to select SafeCom Go Xerox as the SafeCom type.
If relevant Enable copy tracking on the Printer web page of the SafeCom
Controller (4.4).
2.5.1
admin
1111
2.5.2
D60705-21
Open the printers web page and click on the Properties tab.
Click Security and then Security Certificates. If a certificate is
established, proceed to section 2.5.2.
Click Add.
Select Create Xerox Device Certificate.
Click Continue.
Complete the form with the requested information.
Click Finish. You will need the Device Administrator Password to apply
the certificate.
Open the printers web page and click on the Properties tab.
Click Connectivity, Protocols and then HTTP and check that Secure
HTTPS is Enabled on port 443.
Click Apply.
Click OK to restart the devices web server.
Click Reboot Machine. Click OK to reboot.
28
2.5.3
2.5.4
2.5.5
Open the printers web page and click on the Properties tab.
Click Security, Authentication and then Tools & Feature Access.
Under Presets, select Custom Access.
Set Services Pathway to Locked if you want SafeCom to authenticate for
all services and continue to step 6. Otherwise select Unlocked.
Select the services you wish to have locked by the SafeCom
authentication system. The service named Pull Print has to be set to
either Locked or Hidden.
Click Apply.
2.
3.
2.5.6
Open the printers web page and click on the Properties tab. Refer to
section 8.4 if you have problems accessing the Properties tab.
Click Connectivity, Protocols and then HTTP in the menu.
Click Web Services at the top of the page. Select Enable next to
Extensible Service Registration.
Click Apply. Click OK.
To access the relevant web page on the Xerox device use the following
URL, replacing xxx.xxx.xxx.xxx with the IP address of the Xerox device:
http://xxx.xxx.xxx.xxx/diagnostics/holdFdiPrintJobs.php
(if prompted for login, then log in as administrator)
On the web page clear the Hold Foreign Device Interface Network Print
Jobs checkbox.
Click Apply.
2.5.7
Open the printers web page and click on the Properties tab.
Click General Setup and then Extensible Service Setup.
Under Browser Settings check the Enable the Extensible Services
Browser, and click Apply.
D60705-21
29
1.
2.
3.
4.
5.
6.
7.
8.
2.5.8
Open the printers web page and click on the Properties tab.
Click Security and Authentication. Click Setup submenu.
In Authentication and Authorization Methods click Edit Methods
For the setting Device User Interface Authentication select Xerox
Secure Access. Click Save.
Scroll to Xerox Secure Access Setup and click Edit
Click Manually Override Settings.
Under Device Login Methods select:
Xerox Secure Access Device Authentication to allow logging in by card.
Or
Xerox Secure Access Device Authentication + alternate on-screen
authentication method to allow logging in by entering an ID code on the
printers control panel.
Click Save.
Make sure the SafeCom server software installation has been completed.
Add a device either via the SafeCom Administrator (3.3.1) or via the
SafeCom Device Server (3.3.2).
3. Configure the device (3.4).
If SafeCom is enabled via the SafeCom Controller:
1.
2.
3.
4.
2.6
Make sure the SafeCom server software installation has been completed.
Connect the SafeCom Controller (4.1).
In SafeCom Administrator use Add device (4.3) to add the SafeCom
Controller. Remember to select SafeCom Go Xerox as the SafeCom type.
If relevant Enable copy tracking on the Printer web page of the SafeCom
Controller (4.4).
2.6.1
admin
1111
D60705-21
30
1.
2.
3.
4.
5.
6.
7.
8.
After creating the certificate, check the date and time for when the certificate
becomes valid on the device web page by clicking the certificate in the address
field. Click View certificates, then the Details tab and make a note of the
Valid from and Valid to dates and times.
2.6.2
2.6.3
2.6.4
Open the printers web page and go to the Properties tab. Refer to
section 8.4 if you have problems accessing the Properties tab.
Expand Connectivity, Protocols and then HTTP in the menu.
Click Web Services at the top of the page. Select Enable next to
Extensible Service Registration.
Click Apply. Click OK.
D60705-21
31
2.6.5
2.6.6
6.
2.6.7
Make sure the SafeCom server software installation has been completed.
Connect the SafeCom Controller (4.1).
In SafeCom Administrator use Add device (4.3) to add the SafeCom
Controller. Remember to select SafeCom Go Xerox as the SafeCom type.
4.
If relevant Enable copy tracking on the Printer web page of the SafeCom
Controller (4.4).
D60705-21
32
2.7
2.7.1
74xx
User name
Password
admin
1111
73xx, 72xx,
52xx
11111
x-admin
2.7.2
Xerox printer
Open the printers web page and click on the Properties tab.
Click Services on the menu. Skip to section 2.7.2 if Custom Services is in
the menu. Otherwise visit www.xerox.com search for Custom Services
(EIP). Read the instructions carefully, download the DLM file that matches
your printer model and perform a manual upgrade (5.2.10).
3.
4.
D60705-21
Open the printers web page and click on the Properties tab.
Click Security and then Machine Digital Certificate Management on the
menu. View the Machine Digital Certificate area and confirm that the
Current Status of the Machine Digital Certificate indicates that the
printer does not have a Certificate established on the printer. If a
certificate is established, proceed to section 2.7.3.
Click Create New Certificate.
Select the Select Self Signed Certificate option if not already selected.
33
5.
Complete the details required for the Self Signed Certificate. Note that
the Letter Country Code is a required field.
Note: If you are able to enter Days of Validity, PLEASE NOTE that the
maximum number of days allowed are 997 (for models where you can
enter 3 digits) and 1800 (for models where you can enter 4 digits).The
maximum number indicated (999 and 9999 respectively) will not create
the certificate.
6.
7.
8.
9.
2.7.3
Click Apply. You will need the Device Administrator Password to apply
the certificate.
Click Security and then SSL / TLS Settings in the menu and confirm that
HTTP - SSL / TLS Communication is enabled.
Click Connectivity, Protocols and then HTTP and check that Secure
HTTP (SSL) is enabled on port 443.
Click OK.
Open the printers web page and click on the Properties tab. Refer to
section 8.4 if you have problems accessing the Properties tab.
Click Services, Custom Services and then Custom Services on the menu.
Select Enabled in the Enabled area and then click Apply.
The Custom Services button should now be present on the touch-screen
of the printer when All Services is selected. If not, you may have to power
cycle the printer.
Note: If changes were made to the SSL settings, you may have to power
cycle the printer.
2.7.4
Enable ports
1.
2.
3.
2.7.5
D60705-21
Open the printers web page and click on the Properties tab.
Click the Connectivity and then Port Settings.
Check SNMP, SMB, FTP Client and SOAP.
Open the printers web page and click on the Properties tab.
Click Security and then click Authentication Configuration in the menu
Ensure that Xerox Secure Access is selected in the Login Type box.
Click Apply.
Click Reboot Machine. Click OK to reboot. This reboot MUST occur
otherwise the subsequent steps cannot be performed. After the reboot
continue with the remaining steps.
6.
7.
Open the printers web page and click on the Properties tab.
Click Security and then click Authentication Configuration in the menu.
34
8.
Click Next.
9.
From the Device Default State Configuration area you can configure:
Device Access
By locking the Service Pathway (recommended) users will be
requested to authenticate to access all available services: Copy, Email, Custom Services, etc. Proceed with step A1 - A3.
Service Access
Instead of device access it is possible to control access on a perservice basis. However, Custom Services must always be locked,
because otherwise the SafeCom solution does not know who the
user is. Proceed with step B1 - B3.
Device Access to lock or unlock tools and features for all users:
A1.
A2.
A3.
Service Access to lock, unlock or hide individual services for all users:
B1.
B2.
B3.
2.7.6
2.7.7
Open the printers web page and click on the Properties tab.
Click Security, Remote Authentication Servers and then Xerox Secure
Access Settings.
Check Local Login to allow logging in by entering an ID code on the
printers control panel.
Click Apply.
D60705-21
35
Make sure the SafeCom server software installation has been completed.
Add a device either via the SafeCom Administrator (3.3.1) or via the
SafeCom Device Server (3.3.2).
3. Configure the device (3.4).
If SafeCom is enabled via the SafeCom Controller:
1.
2.
3.
4.
2.7.8
Make sure the SafeCom server software installation has been completed.
Connect the SafeCom Controller (4.1).
In SafeCom Administrator use Add device (4.3) to add the SafeCom
Controller. Remember to select SafeCom Go Xerox as the SafeCom type.
If relevant Enable copy tracking on the Printer web page of the SafeCom
Controller (4.4).
D60705-21
36
2.8
2.8.1
2.8.2
admin
1111
Open the printers web page and click on the Properties tab.
Click on General Setup on the menu. Skip to section 2.8.2 if Extensible
Service Setup is in the menu. Otherwise visit www.xerox.com search for
Custom Services (EIP). Read the instructions carefully, download the DLM
file that matches your printer model and perform a manual upgrade
(5.2.10).
3.
4.
5.
Open the printers web page and click on the Properties tab.
Click Security and then Machine Digital Certificate Management on the
menu. View the Machine Digital Certificate area and confirm that the
Current Status of the Machine Digital Certificate indicates that the
printer does not have a Certificate established on the printer. If a
certificate is established, proceed to section 2.8.3.
Click Create New Certificate.
Select Self Signed Certificate. Click Continue.
Complete the details required for the Self Signed Certificate. Note that
the Letter Country Code is a required field.
Note: If you are able to enter Days of Validity, PLEASE NOTE that the
maximum number of days allowed are 997 (for models where you can
enter 3 digits) and 1800 (for models where you can enter 4 digits).The
maximum number indicated (999 and 9999 respectively) will not create
the certificate.
6.
D60705-21
Click Apply. You will need the Device Administrator Password to apply
the certificate.
37
2.8.3
2.8.4
2.8.5
Open the printers web page and click on the Properties tab. Refer to
section 8.4 if you have problems accessing the Properties tab.
Click Connectivity, Protocols and then HTTP in the menu. Select the
Web Services tab and select Enable next to Extensible Service
Registration.
Click Apply.
2.8.6
Open the printers web page and click on the Properties tab.
Click Connectivity, Protocols and then HTTP and check that Secure
HTTP (SSL) is enabled on port 443.
Click OK.
Open the printers web page and click on the Properties tab.
Click Security, Access Rights and then Tools & Feature Access on the
menu.
Under Presets select Custom Access and make your selections.
Make sure that Local UI Tools & CWIS Properties Tab is set to Locked,
otherwise it is not possible to log in with code.
Make sure that Pull Print is set to Locked.
Click Apply.
Click OK when the properties have been saved.
D60705-21
Open the printers web page and click on the Properties tab.
Click Security, Access Rights and then Setup on the menu.
The step 1 of 3 windows appears.
If this is the first time you have configured authentication, click Next
otherwise, click Edit Methods.
In Device User Interface Authentication select Xerox Secure Access
Device.
Under Web User Interface Authentication, select Locally on the Device
(Internal Database).
Under Authorization, select Locally on the Device (Internal Database).
Click Next.
38
2.8.7
2.9
Make sure the SafeCom server software installation has been completed.
Connect the SafeCom Controller (4.1).
In SafeCom Administrator use Add device (4.3) to add the SafeCom
Controller. Remember to select SafeCom Go Xerox as the SafeCom type.
If relevant Enable copy tracking on the Printer web page of the SafeCom
Controller (4.4).
2.9.1
admin
1111
3.
4.
5.
Open the printers web page and click on the Properties tab.
Click Security and then Machine Digital Certificate Management on the
menu. View the Machine Digital Certificate area and confirm that the
Current Status of the Machine Digital Certificate indicates that the
printer does not have a Certificate established on the printer. If a
certificate is established, proceed to section 2.9.2.
Click Create New Certificate.
Select Self Signed Certificate. Click Continue.
Complete the details required for the Self Signed Certificate. Note that
the Letter Country Code is a required field.
Note: If you are able to enter Days of Validity, PLEASE NOTE that the
maximum number of days allowed are 997 (for models where you can
enter 3 digits) and 1800 (for models where you can enter 4 digits).The
maximum number indicated (999 and 9999 respectively) will not create
the certificate.
6.
D60705-21
Click Apply. You will need the Device Administrator Password to apply
the certificate.
39
2.9.2
2.9.3
2.9.4
Open the printers web page and click on the Properties tab. Refer to
section 8.4 if you have problems accessing the Properties tab.
Click General Setup and then Custom Service Setup.
In the Setup (Required) area, for Custom Service Registration, click on
the [Configure] button to display the HTTP: Web Services web page.
In the Remote System Management area:
Check Custom Service Registration and
Check Device Configuration.
In the Security Area:
Check Xerox Secure Access.
Click Save.
Click OK.
In the Enable Custom Services area:
Check Export passwords to Custom Services.
In the Browser Settings area:
Check Enable the Custom Services Browser.
Check Verify Server Certificates.
Click Apply.
Click OK.
D60705-21
Open the printers web page and click on the Properties tab.
Click Connectivity, Protocols and then HTTP and check that Secure
HTTP (SSL) is enabled on port 443.
Click Apply.
Open the printers web page and click on the Properties tab.
Click Security and then Authentication Configuration on the menu.
Click on the Edit Methods/Configure button for Authentication.
In Device User Interface Authentication select Xerox Secure Access.
Under Web User Interface Authentication, select Locally on the Device
(Internal Database).
Under Authorization, select Locally on the Device (Internal Database).
Click Save.
40
2.9.5
4.
2.9.6
Open the printers web page and click on the Properties tab.
Click Security and then Authentication Configuration on the menu.
Under Device Login Methods select:
Xerox Secure Access Device Authentication to allow logging in by card.
Or
Xerox Secure Access Device Authentication + alternate on-screen
authentication method to allow logging in by entering an ID code on the
printers control panel.
Click Save.
Make sure the SafeCom server software installation has been completed.
Add a device either via the SafeCom Administrator (3.3.1) or via the
SafeCom Device Server (3.3.2).
3. Configure the device (3.4).
If SafeCom is enabled via the SafeCom Controller:
1.
2.
3.
4.
D60705-21
Make sure the SafeCom server software installation has been completed.
Connect the SafeCom Controller (4.1).
In SafeCom Administrator use Add device (4.3) to add the SafeCom
Controller. Remember to select SafeCom Go Xerox as the SafeCom type.
If relevant Enable copy tracking on the Printer web page of the SafeCom
Controller (4.4).
41
2.10
admin
1111
Open the printers web page and click on the Properties tab.
Click General Setup on the menu.
Note: On older 56xx with firmware 21.133.xxx.xxx you need to click
Services instead of General Setup.
Skip to section 2.10.2 if Custom Services is in the menu. Otherwise visit
www.xerox.com search for Custom Services (EIP). Read the instructions
carefully, download the DLM file that matches your printer model and
perform a manual upgrade (5.2.10).
3.
4.
5.
Open the printers web page and click on the Properties tab.
Click Security and then Machine Digital Certificate Management on the
menu. View the Machine Digital Certificate area and confirm that the
Current Status of the Machine Digital Certificate indicates that the
printer does not have a Certificate established on the printer. If a
certificate is established, go to step 7.
Click Create New Certificate.
Select the Select Self Signed Certificate option if not already selected.
Complete the details required for the Self Signed Certificate. Note that
the Letter Country Code is a required field.
Note: If you are able to enter Days of Validity, PLEASE NOTE that the
maximum number of days allowed are 997 (for models where you can
enter 3 digits) and 1800 (for models where you can enter 4 digits).The
maximum number indicated (999 and 9999 respectively) will not create
the certificate.
D60705-21
42
6.
7.
8.
Click Apply. You will need the Device Administrator Password to apply
the certificate.
Click Connectivity, Protocols and then HTTP and check that Secure
HTTP (SSL) is enabled on port 443.
Click OK.
Open the printers web page and click on the Properties tab.
Click General Setup and then Custom Service Setup on the menu.
Confirm that the SSL is enabled. Otherwise return to section 2.10.2.
Open the printers web page and click on the Properties tab. Refer to
section 8.4 if you have problems accessing the Properties tab.
Click Connectivity, Protocols and then HTTP in the menu. Select the
Web Services tab and check that all Web Services are enabled.
D60705-21
Open the printers web page and click on the Properties tab.
Go to Security and then click Authentication Configuration in the menu.
Ensure that Xerox Secure Access is selected under Device User Interface
Authentication.
Click Apply.
Click Reboot Machine. Click OK to reboot. This reboot MUST occur
otherwise the subsequent steps cannot be performed. After the reboot
continue with the remaining steps.
Open the printers web page and click on the Properties tab.
Go to Security and then click Authentication Configuration in the menu.
Click Next.
From here you can configure:
Device Access
By locking the Service Pathway (recommended) users will be
requested to authenticate to access all available services: Copy, Email, Pull Print, etc. Proceed with step A1 - A3.
Service Access
Instead of device access it is possible to control access on a perservice basis. However, Pull Print must always be locked, because
otherwise the SafeCom solution does not know who the user is.
Proceed with step B1 - B3.
43
Device Access to lock or unlock tools and features for all users:
A1.
A2.
A3.
Service Access to lock, unlock or hide individual services for all users:
B1.
B3.
10.
Click Finished.
B2.
Open the printers web page and click on the Properties tab.
Click Security and then Authentication Configuration.
Confirm that the Device User Interface is set to Xerox Secure Access.
Click Next.
Click Edit next to Device User Interface Authentication.
Check Enable alternate access via on-screen keyboard to allow logging
in by entering an ID code on the printers control panel.
D60705-21
44
Make sure the SafeCom server software installation has been completed.
Connect the SafeCom Controller (4.1).
In SafeCom Administrator use Add device (4.3) to add the SafeCom
Controller. Remember to select SafeCom Go Xerox as the SafeCom type.
If relevant Enable copy tracking on the Printer web page of the SafeCom
Controller (4.4).
2.11
Open the printers web page and click the Properties tab.
Click Services, Custom Services and then Custom Services on the menu.
Confirm that the SSL is enabled. If not then return to step 6 in
section2.10.2.
Select Enabled in the Enablement area and then click Apply.
The Custom Services button should now be present on the touch-screen
of the printer when All Services is selected. If not, you may have to
power cycle the printer.
admin
1111
Open the printers web page and click on the Properties tab.
Click General Setup on the menu.
Note: On older 53xx with click Services instead of General Setup.
Skip to section 2.11.2 if Custom Services is in the menu. Otherwise visit
www.xerox.com search for Custom Services (EIP). Read the instructions
carefully, download the DLM file that matches your printer model and
perform a manual upgrade (5.2.10).
45
field. Click View certificates, then the Details tab and make a note of the
Valid from and Valid to dates and times.
To create a certificate:
1.
2.
3.
4.
5.
Open the printers web page and click on the Properties tab.
Click Security and then Machine Digital Certificate Management on the
menu. View the Machine Digital Certificate area and confirm that the
Current Status of the Machine Digital Certificate indicates that the
printer does not have a Certificate established on the printer. If a
certificate is established, proceed to section 2.7.3.
Click Create New Certificate.
Select the Select Self Signed Certificate option if not already selected.
Complete the details required for the Self Signed Certificate. Note that
the Letter Country Code is a required field.
Note: If you are able to enter Days of Validity, PLEASE NOTE that the
maximum number of days allowed are 997 (for models where you can
enter 3 digits) and 1800 (for models where you can enter 4 digits).The
maximum number indicated (999 and 9999 respectively) will not create
the certificate.
6.
7.
8.
9.
Click Apply. You will need the Device Administrator Password to apply
the certificate.
Click Security and then SSL / TLS Settings in the menu and confirm that
HTTP - SSL / TLS Communication is enabled.
Click Connectivity, Protocols and then HTTP and check that Secure
HTTP (SSL) is enabled on port 443.
Click OK.
Open the printers web page and click on the Properties tab. Refer to
section 8.4 if you have problems accessing the Properties tab.
Click General Setup and then Extensible Service Setup.
In the Setup (Required) area, click Configure.
Select Extensible Services and click Apply.
Note: Other services are enabled by default.
5.
6.
7.
8.
D60705-21
Click OK.
In the Enable Extensible Services area, check the Export password to
Extensible services checkbox.
In the Browser Settings area, check the Enable Extensible Services
Browser checkbox.
Click Apply.
46
4.
5.
6.
Make sure the SafeCom server software installation has been completed.
Add a device either via the SafeCom Administrator (3.3.1) or via the
SafeCom Device Server (3.3.2).
3. Configure the device (3.4).
If SafeCom is enabled via the SafeCom Controller:
1.
2.
3.
4.
D60705-21
Make sure the SafeCom server software installation has been completed.
Connect the SafeCom Controller (4.1).
In SafeCom Administrator use Add device (4.3) to add the SafeCom
Controller. Remember to select SafeCom Go Xerox as the SafeCom type.
If relevant Enable copy tracking on the Printer web page of the SafeCom
Controller (4.4).
47
5.
6.
7.
8.
9.
D60705-21
Open the printers web page and click on the Properties tab.
Click Security and then Authentication Configuration.
The Authentication Configuration> Step 1 of 2 web page appears. In
Login type select Xerox Secure Access.
Click Apply.
Device Access
By locking the Service Pathway (recommended) users will be
requested to authenticate to access all available services: Copy, Email, Pull Print, etc. Proceed with step A1 - A3.
Service Access
Instead of device access it is possible to control access on a perservice basis. However, Pull Print must always be locked, because
otherwise the SafeCom solution does not know who the user is.
Proceed with step B1 - B3.
48
Device Access to lock or unlock tools and features for all users:
A1.
A2.
A3.
Service Access to lock, unlock or hide individual services for all users:
B1.
B2.
B3.
D60705-21
49
2.12
admin
1111
Open the printers web page and click on the Properties tab.
Click Services on the menu. Skip to section 2.12.2 if Custom Services is
in the menu. Otherwise visit www.xerox.com search for Custom Services
(EIP). Read the instructions carefully, download the DLM file that matches
your printer model and perform a manual upgrade (5.2.10).
3.
4.
5.
Open the printers web page and click on the Properties tab.
Click Security and then SSL on the menu. View the Machine Digital
Certificate area and confirm that the Current Status of the Machine
Digital Certificate indicates that the printer does not have a Certificate
established on the printer. If a certificate is established go to step 7.
Click Create New Certificate.
Select the Select Self Signed Certificate option if not already selected.
Complete the details required for the Self Signed Certificate. Note that
the Letter Country Code is a required field.
Note: If you are able to enter Days of Validity, PLEASE NOTE that the
maximum number of days allowed are 997 (for models where you can
enter 3 digits) and 1800 (for models where you can enter 4 digits).The
maximum number indicated (999 and 9999 respectively) will not create
the certificate.
6.
7.
8.
D60705-21
Click Apply. You will need the Device Administrator Password to apply
the certificate.
Confirm that the SSL Protocol is enabled on port 443 in the Configure
SSL area. If not, then select the box and click Apply.
Click OK.
50
Open the printers web page and click on the Properties tab. Refer to
section 8.4 if you have problems accessing the Properties tab.
Click Services, Custom Services and then Custom Services on the menu.
Confirm that the SSL is enabled. Otherwise return to section 2.12.2.
Select Enabled in the Enablement area and then click Apply.
The Custom Services button should now be present on the touch-screen of
the printer when All Services is selected. If not, you may have to power
cycle the printer.
Open the printers web page and click on the Properties tab.
Click Security, Authentication Server and then General on the menu.
Under Feature Coverage there are two options:
Open the printers web page and click on the Properties tab.
Click Security, Authentication Server and then General on the menu.
Scroll to Login Initiation and check Allow Local User Interface Initiation
to allow logging in by entering an ID code on the printers control panel.
D60705-21
Make sure the SafeCom server software installation has been completed.
Connect the SafeCom Controller (4.1).
In SafeCom Administrator use Add device (4.3) to add the SafeCom
Controller. Remember to select SafeCom Go Xerox as the SafeCom type.
If relevant Enable copy tracking on the Printer web page of the SafeCom
Controller (4.4).
51
D60705-21
52
2.13
admin
1111
3.
Open the printers web page and click on the Properties tab.
Click Services on the menu.
Skip to section 2.13.3 if Custom Services is in the menu. Otherwise visit
www.xerox.com search for Custom Services (EIP). Read the instructions
carefully, download the DLM file that matches your printer model and
perform a manual upgrade (5.2.10).
If after the manual upgrade Custom Services is still not in the menu,
please contact Xerox to find out if additional hardware is needed.
Note: The only way to establish whether the USB card reader is enabled is to
verify that the SFO 35 reads Yes.
D60705-21
53
1.
2.
3.
4.
5.
6.
7.
8.
Open the printers web page and click on the Properties tab.
Click Security and then Machine Digital Certificate on the menu. View
the Machine Digital Certificate area and confirm that the Current Status
of the Machine Digital Certificate indicates that the printer does not
have a Certificate established on the printer. If a certificate is
established, go to step 7.
Click Create New Certificate.
Select the Select Self Signed Certificate option if not already selected.
Complete the details required for the Self Signed Certificate. Note that
the Letter Country Code is a required field.
Note: If you are able to enter Days of Validity, PLEASE NOTE that the
maximum number of days allowed are 997 (for models where you can
enter 3 digits) and 1800 (for models where you can enter 4 digits).The
maximum number indicated (999 and 9999 respectively) will not create
the certificate.
Click Apply. You will need the Device Administrator Password to apply
the certificate.
Click Connectivity, Protocols and then HTTP and check that Secure
HTTP (SSL) is enabled on port 80.
Click OK.
Open the printers web page and click on the Properties tab.
Click Services and then Custom Services on the menu.
Confirm that the Customer Services is enabled. Click Apply. Otherwise
return to section 2.13.3.
Make sure the SafeCom server software installation has been completed.
Connect the SafeCom Controller (4.1).
In SafeCom Administrator use Add device (4.3) to add the SafeCom
Controller. Remember to select SafeCom Go Xerox as the SafeCom type.
If relevant Enable copy tracking on the Printer web page of the SafeCom
Controller (4.4).
D60705-21
Open the printers web page and click on the Properties tab. Refer to
section 8.4 if you have problems accessing the Properties tab.
54
2.
3.
4.
5.
6.
D60705-21
Open the printers web page and click on the Properties tab.
Click Security, Authentication and then Authentication in the menu.
Ensure that Allow Local User Interface Initiation is selected under Login
information to allow logging in by entering an ID code on the printers
control panel.
Click Apply.
55
D60705-21
56
3.1
3.
4.
5.
6.
D60705-21
Click Next.
Detecting Java version. Click Next.
Review settings before copying of files starts. Click Next.
Click Finish.
57
3.1.1
You can also manually ensure that the port numbers below are open.
SafeCom
Server
TCP
7500
7700
UDP
5742
Web
Browser
SafeCom
Device Server
TCP
8080
TCP
80
443
50003
UDP
161
D60705-21
TCP
8080
50002
TCP
9100
TCP
Protocol
8080
50002
HTTP
HTTPS
UDP
Protocol
161
SNMP
TCP
Protocol
443
7500
7700
50003
HTTPS
SafeCom
SafeCom
HTTPS
UDP
Protocol
5742
SafeCom
TCP
Protocol
9100
RAW
58
3.2
3.2.1
Open a web browser and enter the server address (IP address or
hostname) for the device server followed by :8080/safecom in the
address field.
Example: http://localhost:8080/safecom
Note: Use of JavaScript (Active Scripting) must be enabled.
2.
3.
3.2.2
D60705-21
Open a web browser and log in to the SafeCom Device Server (3.2.1).
Click Device Server in the menu to the left.
59
3.
4.
5.
6.
Under SafeCom Servers, click the [+] icon to add a failover SafeCom
Server.
Enter the server address and click OK. To add localhost as the server,
leave the Address field blank and click OK.
Add the additional failover servers to the list and organize them
according to the order in which the failover should progress, using the up
and down arrows.
Click Save.
The SafeCom Server is now added, and the next step is to add a device to the
device server (3.3).
3.3
3.3.1
3.
4.
5.
Note: To delete the device server again you right-click the device server and
select Delete device server.
The SafeCom Device Server is now added to SafeCom Administrator and you can
now add a device.
D60705-21
60
D60705-21
Click the Devices container, right-click the content area and then Add
device. The Add device wizard is now launched.
From the Device server drop down menu, select the SafeCom Device
Server and click Next.
3.
4.
Enter the Printer address (the device IP address or host name) and click
Next.
5.
61
6.
Now select SafeCom Go Xerox as the type of device and click Next.
7.
Enter the username and password, as specified on the device web page
and click Next.
The device properties dialog now opens. Make sure to specify on the
Settings tab the device server and the properties of the device (duplex
and color supported).
8.
9.
D60705-21
Click Add to register the device and save it in the database. After approx.
2 minutes the device is added to the device server and available to be
configured in SafeCom Device Server.
62
The device server device is now added and listed both under Devices and under
the device server under Device servers with the name SafeCom Device Server.
Note: After approx. 2 minutes the printer is added to the SafeCom Device
Server and you can see on the SafeCom Device Server webpage.
10.
D60705-21
63
3.3.2
4.
5.
6.
Click Finish.
Click the Save
button.
Note: The device is now added to the SafeCom solution, but it does not appear
in the SafeCom Administrator before a user logs in at the device.
D60705-21
64
3.3.3
Device icons
Once the devices are added in the SafeCom Device Server the following device
icons represent the status of the devices.
User is logged in at the device.
Device is idle, no user logged in.
Wait for at least 2 minutes. If the warning signal is gone, the printer is
now configured. If the warning signal remains, the printer cannot be
configured because, for example the SSL is not on, or another device
server is trying to configure the printer.
An error occurred.
The printer is receiving print data.
Device server cannot contact the printer.
D60705-21
65
3.4
D60705-21
66
Login method: This determines how users log in. Choose between:
o
Auto-sense (default). Auto-sense maps to Card or Windows if an ID
device is connected to the MFP and on printers it maps to Card.
Otherwise it maps to ID code. Mapping changes within 10 seconds
after the ID device is either connected or disconnection. If it does
not change a restart of the device may be required.
o
ID code
o
Card
o
Card or ID code
o
Card or Windows: Allows the user to log in by either card or by
entering their Windows username, password, and domain.
o
Keypad only relevant if an external keypad is connected.
Note: Identification by card requires connecting a USB ID Device (card
reader). The option Card or Windows allows the user to log in by either
card or by entering their Windows username, password, and domain. The
SafeCom G3 server must be a member of the domain or trusted by the
domain.
Enable post tracking: This is relevant only with SafeCom Tracking. Refer
to SafeCom G3 Administrators ManualD60603
SNMP Put Community name: This must match the SNMPGet Community
Name if this is different from public. By default SNMP GetCommunity
name is public.
RAW print port: The TCP port used to send print data.
D60705-21
Click Get All to obtain the list of drivers from the SafeCom Server,
or add and delete drivers manually.
67
D60705-21
Device Properties:
o
OperatorName: Specify the user name with which the administrator
can log in to device. The default is set to admin.
o
OperatorPassword (mandatory):Specify the device password with
which the administrator can log in to device. By default there is no
device password set.
o
LockJobStatusPathway: Set property value to 'true' to require users
to log in in order to see the job status on the device. Set to 'false' if
you want to allow users to see the job status without logging in
first. The default value is 'skip' which means that the job status is
shown according to the settings on the device.
o
LockMachineStatusPathway: Set property value to 'true' to require
users to log in in order to see the machine status on the device. Set
to 'false' if you want to allow users to see the machine status
without logging in first. The default value is 'skip' which means that
the machine status is shown according to the settings on the device.
o
LockFeaturesPathway: Set property value to 'true' to require users
to log in in order to see the features available on the device. Set to
'false' if you want to allow users to see the features available
without logging in first. The default value is 'skip' which means that
the features available are shown according to the settings on the
device.
o
OverrideLanguage: This property key is used if you need SafeCom
Device Server to override the language on the device. Change the
property value to the language that you want to override any other
language settings on the device using the postfix, e.g. "de" for
German (refer to1.5).
o
DefaultDomain: Specify a default domain. When users log in at the
device the Domain field is then pre-filled with the specified
domain.
o
HideDomain: Set the property value to True to not require users to
enter the domain when they log in to a device.
o
CheckEIPStatus: Default property value is 'true' which means that
SafeCom Go automatically checks if the devices is EIP enabled. This
might cause trouble during the configuration, in which case the
property value can be set to 'false'.
o
BillingEnabled: Set to True in order to enable the Account icon on
the device. Set to False to remove the Account icon from the
device display.
Restore factory default: Set all settings to their default value. Except
from the password.
68
3.4.1
5.
6.
7.
8.
D60705-21
Click Start, point to All Programs, SafeCom G3, and click SafeCom
Administrator.
In SafeCom Administrator click on the server to log in.
Enter User logon (default is ADMIN) and Password (default is nimda).
Open the list of devices. If the device you added is not present press F5
to refresh the list. Double-click the device to open the Device properties
dialog.
On the Settings tab make the appropriate changes. Make sure that the
Home server and Device server are specified and that Duplex supported
and Color supported is set correctly.
On the Charging scheme tab select the appropriate charging scheme.
On the License tab check the appropriate licenses.
Click OK.
69
4 SafeCom Controller
SafeCom Controller
In the following it is covered how to enable SafeCom via SafeCom Controller.
In this chapter the following topics are covered:
4.1
4.1.1
D60705-21
70
4 SafeCom Controller
4.2
Connect hardware
Make sure that the SafeCom software installation has been completed before
you connect the hardware. When powered up, the hardware automatically
discovers the server software.
serial port
test button
USB host
USB
device
LAN
network port
power
4.3
D60705-21
71
4 SafeCom Controller
1.
2.
3.
D60705-21
4b.
5.
6.
7.
8.
72
4 SafeCom Controller
D60705-21
9.
10.
Enter the Printer address (IP address or host name) of the Xerox printer
connected to the SafeCom Controller. Click Next.
73
4 SafeCom Controller
11.
12.
73xx, 72xx,52xx
11111
x-admin
13.
4.4
D60705-21
74
4 SafeCom Controller
Note: Tracking of E-mail and scan is not supported, and Copy jobs are only
tracked if the SafeCom license includes SafeCom Tracking. (See 8.2)
4.5
4.5.1
Open a web browser and enter the IP address of the SafeCom Controller
in the address field. Use of JavaScript (Active Scripting) must be enabled.
Click Advanced Configuration to open the Advanced Configuration web
page (4.5.2).
Note: If a password is set you will be prompted for the password.
4.5.2
D60705-21
75
4 SafeCom Controller
4.5.3
SafeCom Group Name, SafeCom Server Address and SafeCom Server Port
Number must be specified for the SafeCom Controller to work. It is possible to
specify multiple SafeCom servers for the purpose of failover. The SafeCom
Controller will attempt to contact the servers in their order of appearance.
If the IP Address is 0.0.0.0 the SafeCom Controller will send a broadcast on the
Broadcast subnets.
Front End Language. The default language is English.
Front End Identification determines how users are identified. It can be
CODE_CARD (default), CODE, CARD or Windows_Auth.
The Front End Timeout defaults to 60 seconds. Users will be logged out if they
do not perform an operation on the Xerox printers touch-screen or buttons for
this period.
D60705-21
76
4 SafeCom Controller
4.5.4
Select Network Port 9100 if the SafeCom Controller connects to the printer
via the network.
Printer IP Address must be that of the Xerox printer.
Use auto-configuration should normally be set to YES allow the SafeCom
Controller to automatically determine the Printer Manufacturer and Print
Model.
Printer Manufacturer should be XEROX.
SafeCom Go must be YES.
D60705-21
77
4 SafeCom Controller
Force logout1.When Force Logout is enabled SafeCom Go Xerox can send a
request to the Xerox device asking it to logout the user. This means users can
logout by card instead of going through a key press sequence consisting of up to
4 steps (depending on model).
Copy Enabled must be YES if you wish SafeCom to track the number of copies.
Requires a SafeCom Tracking device license.
Copy Idle Timeout. When the printer has been idle for this timeout the
SafeCom controller automatically logouts the user. Idle timeout = 0 means no
timeout.
High Speed Print Enabled should be YES to allow faster printing. With high
speed print the print speed is comparable to that of printing the document
directly to the printer rather than via the SafeCom Controller.
Note: High Speed Print is ignored if the document is sent as encrypted.
Note: With High Speed Print enabled in environments where users are allowed
to do both Push and Pull printing, there is a potential risk that the user
standing at the device printing and copying experience that other users' Push
Prints are printed in between jobs.
Post Tracking will cause tracking data to be adjusted to reflect the actual
number of mono and color pages printed.
Drivers. When Pull Printing SafeCom will compare the driver name embedded
in the print job with its list of driver names. If no match is found the document
will appear with a question mark [?] in the document list. This way the user is
warned that fidelity is low and the document may print incorrectly.
D60705-21
78
5.1
5.1.1
5.1.2
Open the device web page and log in with device username and password.
Click the Properties tab and then Security in the left menu.
Click Plug-in Settings and then Plug-in Settings again.
Make sure to enable Plug-in Settings by selecting the checkbox Enabled.
Click Apply.
Reboot the Xerox device.
Go to List of Embedded Plug-ins and make sure that the SafeCom plug-in
(SafeCom HID Reader Provider) is activated. If not, select the plug-in and
click Start.
Open a web browser and log in to the SafeCom Device Server (3.2.1).
Click on Device server in the left-hand menu, and then click on the
device.
In the Login method drop down menu under SafeCom Settings, select
how users must identify themselves at the device.
Choose between:
Auto-sense (default)
ID code
Card
Card or ID code
Card or windows
5.1.3
Register device
Register the device with the SafeCom solution in one of the following ways:
D60705-21
Add the device in the SafeCom Administrator, using the Add device
function.
Log in at the device, if the user has Technician or Administrator rights.
79
5.1.4
Open a web browser and log in to the SafeCom Device Server (3.2.1).
Click Restore factory default at the bottom of the web page.
Device Information
Drivers
Device Properties
D60705-21
Field
Model
MAC Address
Device Message
Login Method
Idle timeout
Post tracking
Address
SNMP Get Community
SNMP Put Community
RAW print port
Contact
Location
Description
Manufacturer
OperatorName
OperatorPassword
LockJobStatusPathway
LockMachineStatusPathway
LockFeaturePathway
OverrideLanguage
DefaultDomain
HideDomain
CheckEIPStatus
Default value
Auto-sense
60 seconds
Cleared (No)
Device IP address
Public
Private
admin
1111
skip
skip
skip
None
false
true
80
5.1.5
Open a web browser and log in to the SafeCom Device Server (3.2.1).
Click Device server in the menu and select the device from which the
SafeCom Go solution must be uninstalled.
Click the Delete icon in the top menu to uninstall.
Click Save.
5.2
5.2.1
3.
4.
5.
After approx. 1 minute the SafeCom Controller has restarted and you can make
a settings printout.
5.2.2
Warning: Make sure to store the password in a secure place. If you forget the
password you need to return the SafeCom Controller to SafeCom a/s for
unlocking.
D60705-21
81
5.2.3
5.2.4
Register device
The device can be registered when a user with Technician or Administrator
rights has logged in at the device. Once the device is registered it will appear
in the SafeCom Administrator. The device is also registered when you add it in
SafeCom Administrator.
Note: You can use the built-in Technician account TECH with the default PUK
code 12345678 and default PIN code 1234.
5.2.5
5.2.6
5.2.7
D60705-21
82
5.2.8
5.2.9
Resend configuration
If a device added in the SafeCom Administrator is not configured correctly, or if
the device must be reconfigured to a different server, it is possible to resend
the configuration details (Server address and Group name) to the device.
1.
2.
The configuration details are now sent to the device and the configuration is
successful when the message "Server is reconfigured" appears.
Note: The Resend configuration functionality does not work with devices that
are SafeCom enabled via the device server.
Open the printers web page and click on the Properties tab.
Click Services, Machine Software, and then Manual Upgrade on the
menu.
In the Manual Upgrade section browse to where the
InstallCustomServices.dlm is located.
Select the file and then click the green Install Software button.
D60705-21
83
6.1
6.2
D60705-21
84
6.3
Open the printers web page and click on the Properties tab.
Click Accounting and then Setup.
Click Edit.
Change Current Accounting Method to Network Accounting.
Click Save.
6.4
D60705-21
85
7.1
7.1.1
Login
The login sequence is initiated if you are not already logged in and taps any
icon that requires SafeCom to handle the printer authentication.
The recommended login sequences are described in the following.
Login with card:
1.
D60705-21
86
7.1.2
Documents appear in chronological order with the newest at the top of the list.
The number preceding the document title is the cost of the document. A
delegated print is marked with a preceding D. Tap the Info button to see
information about who delegated the document. A retained document has a
preceding R. A group print document has a preceding G. If Print all at login is
checked any documents pending collection will be printed first.
Note: The document list does look slightly different from the above.
On the touch-screen there are the following options:
87
7.1.3
Copy
Tap the Copy icon to copy the documents placed in the automatic document
feeder (ADF).
7.1.4
Logout
There is a configurable Timeout that defaults to 60 seconds. The logout
process is initiated if no buttons are taped for this period.
To logout actively:
Note: Logout by card is possible on Xerox firmware that supports the Force
Logout request.
7.1.5
7.1.6
D60705-21
88
7.2
7.2.1
Control panel
D60705-21
89
7.2.2
Login
The login sequence is initiated if you are not already logged in and taps any
icon that requires SafeCom to handle the printer authentication.
The recommended login sequences are described in the following.
Login with card:
1.
D60705-21
90
7.2.3
Documents appear in chronological order with the newest at the top of the list.
The number preceding the document title is the cost of the document. If Print
all at login is checked any documents pending collection will be printed first.
Note: The document list does look slightly different from the above.
On the touch-screen there are the following options:
D60705-21
91
7.2.4
Copy
Tap the Copy icon to copy the documents placed in the automatic document
feeder (ADF).
7.2.5
Logout
There is a configurable Timeout that defaults to 60 seconds. The logout
process is initiated if no buttons are taped for this period.
To logout actively:
Note: Logout by card is possible on Xerox firmware that supports the Force
Logout request.
7.2.6
D60705-21
92
7.3
7.3.1
Control panel
7.3.2
Login
The login sequence is initiated if you are not already logged in and taps any
icon that requires SafeCom to handle the printer authentication.
Login with card:
1.
D60705-21
93
Tap
Tap
Tap
Tap
Tap
Keyboard Access.
Username and enter Username on the touch-screen. Tap OK.
Password and enter Password on the touch-screen. Tap OK.
Domain and enter the domain using the keypad or touch-screen.
OK.
D60705-21
94
7.3.3
Documents appear in chronological order with the newest at the top of the list.
The number preceding the document title is the cost of the document. A
delegated print is marked with a preceding D. Tap the Info button to see
information about who delegated the document. A retained document has a
preceding R. A group print document has a preceding G. If Print all at login is
checked any documents pending collection will be printed first.
Note: The document list does look slightly different from the above.
On the touch-screen there are the following options:
Refresh: Updates the list of documents with pending documents that has
finished spooling after the user logged in.
Retain: The selected documents remains on the list (server) after they
have been printed. When a document has been retained it is specified in
the list with an R preceding the document title.
D60705-21
95
7.3.4
Copy
Press the Copy button to copy the documents placed in the automatic
document feeder (ADF).
7.3.5
Logout
There is a configurable Timeout that defaults to 60 seconds. The logout
process is initiated if no buttons are taped for this period. To logout actively:
7.3.6
D60705-21
96
7.4
7.4.1
Control panel
7.4.2
Login
The recommended login sequences are described in the following.
Login with card:
1.
D60705-21
97
7.4.3
Documents appear in chronological order with the newest at the top of the list.
The number preceding the document title is the cost of the document. A
delegated print is marked with a preceding D. Tap the Info button to see
information about who delegated the document. A retained document has a
preceding R. A group print document has a preceding G. If Print all at login is
checked any documents pending collection will be printed first
D60705-21
98
D60705-21
99
7.4.4
Copy
Press the Copy button to copy the documents placed in the automatic
document feeder (ADF).
7.4.5
Logout
There is a configurable Timeout that defaults to 60 seconds. The logout
process is initiated if no buttons are taped for this period. To logout actively:
1.
2.
3.
4.
7.4.6
D60705-21
100
7.5
7.5.1
Control panel
7.5.2
Login
The recommended login sequences are described in the following.
Login with card:
1.
101
7.5.3
Documents appear in chronological order with the newest at the top of the list.
The number preceding the document title is the cost of the document. A
delegated print is marked with a preceding D. Tap the Info button to see
information about who delegated the document. A retained document has a
preceding R. A group print document has a preceding G. If Print all at login is
checked any documents pending collection will be printed first.
102
7.5.4
Copy
Press the Copy button to copy the documents placed in the automatic
document feeder (ADF).
7.5.5
Logout
There is a configurable Timeout that defaults to 60 seconds. The logout
process is initiated if no buttons are taped for this period. To logout actively:
7.5.6
D60705-21
103
8 Troubleshooting
Troubleshooting
8.1
8.2
8.3
8.4
D60705-21
104
8 Troubleshooting
8.5
WorkCentre 71xx
WorkCentre 550/560
8.6
8.7
D60705-21
105
8 Troubleshooting
8.8
2.
Stop the SafeCom Device Server Service with the following command:
net stop scDeviceServer
3.
Start the SafeCom Device Server again with the following command:
net start scDeviceServer
4.
D60705-21
106
9 Regulatory information
Regulatory information
WARNING NOTE: This equipment has been tested and found to comply with the
limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These
limits are designed to provide reasonable protection against harmful
interference in a residential installation.
This equipment generates, uses and can radiate radio frequency energy and, if
not installed and used in accordance with the instructions, may cause harmful
interference to radio communications. However, there is no guarantee that
interference will not occur in a particular installation. If this equipment does
cause harmful interference to radio or television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try
to correct the interference by one or more of the following measures
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to
which the receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.
CAUTION: Changes or modifications not expressly approved by SafeCom a/s
could void the users authority to operate this equipment according to part 15
of the FCC rules.
This equipment generates, uses, and can radiate radio frequency energy and if
not installed and used in accordance with the instruction manual, may cause
interference to radio communications. It has been tested and found to comply
with the limits for a Class A computing device pursuant to Subpart B of Part 15
of FCC Rules, which are designed to provide reasonable protection against such
interference when operated in a commercial environment. Operation of this
equipment in a residential area is likely to cause interference in which case the
user will be required to take whatever measures may be required to correct the
interference at his own expense.
CE conformance: This product has been developed and produced in accordance
with the EMC directive and the Low Voltage directive and therefore carries the
CE mark.
EMCdirective: This product observes the rules and regulations of the EMC
directive. If so required, a declaration of conformity in local language
stipulating the applied rules and regulations can be obtained.
D60705-21
107
10 Index
10
Index
Access Control List, 82
ACL, 82
Password, 81
Patent, 2
Post track, 67
Document history, 11
Firewall, 58
Fixed IP address, 82
Help Desk Assistant, 104
High speed printing, 78
Host access list, 82
ID code, 67
Manuals, 10
Network Accounting, 14
D60705-21
Register device
SafeCom Controller, 79, 82
Regulatory information, 107
SafeCom Go Xerox, 7, 14
Printer firmware, 8
SafeCom Help Desk Assistant, 104
System requirements
SafeCom Go Xerox, 7
Tracking data adjustment, 67
Trademarks, 2
Windows Firewall, 58
108