User manual XEROX WORKCENTRE 5845 5855 SMART CARD INSTALLATION AND CONFIGURATION GUIDE

[. . . ] Changes, technical inaccuracies, and typographic errors will be corrected in subsequent editions. Document version 7. 0: September 2011 Table of Contents 1 Introduction Compatibility . 36 36 37 37 38 A B Retrieving the Certificate from a Domain Controller or OCSP Server Determining the Domain in which your Card is Registered Xerox® Smart Card Installation Guide 3 4 Xerox® Smart Card Installation Guide Introduction 1 The Xerox Smart Card solution brings an advanced level of security to sensitive information. Organizations can restrict access to the walk-up features of a Xerox device. [. . . ] Determine how many Domain Controllers used in your environment need to be accessed from the particular device. Identify the order the Domain Controllers should be interrogated when users present their card for authentication. The Domain Controller which services most of your users should be first followed by less popular Domain Controllers. Ensure the Domain Controller Type is configured correctly for your authentication environment. Enter the IP Address or enter the Domain Controller Host Name (this must be the fully qualified Host Name). If you selected the option that the Domain Controller Signature must match the uploaded Domain Controller Certificate, then a field will be presented to enter that certificate. This field will be missing if it is not required to upload the Domain Controller Certificate. At the Domain Controller Certificate option select Add and browse to the Domain Controller Certificate. Note: If you are unable to obtain the required certificates, refer to Retrieving the Certificate from a Domain Controller or OCSP Server on page 39. Select the Certificate then select Upload Domain Controller Certificate. 18 Xerox® Smart Card Installation Guide Installation If the Domain Controller certificate is not available, the certificate that was used to issue the Domain Controller certificate can be uploaded instead. The Domain Controller certificate, or its issuing certificate is needed by the device to validate the interactions between the device and the domain controller. In the related services table on the Authentication Setup page, click Edit. . . The domain certificate on a Smart Card of a user must be validated on the domain controller server before they can access the printer. Under Domain Controller Type, select Windows Based Domain Controller if you are using one. Click Save to apply the new settings or Cancel to return to the previous screen. If you have added more that one domain controller server, you can prioritize the alternate servers. On the Change Domain Priority page, select a domain controller in the list. Click the Up Arrow or Down Arrow to change the search priority of the server. 7. Installation 8. 9. To configure NTP settings, under Action, click Edit. . . The domain controller time and the time set on the printer must be synchronized. Click Close to return to the Authentication Setup page. Configuring OCSP Validation Server Settings If you have an OCSP server, or an OCSP certificate validation service, you can configure the printer to validate certificates installed on the domain controller. On the Authentication Setup page, under Action, click Edit next to Certificate Validation. [. . . ] · For problems with the card reader device, contact the manufacturer for further assistance. · For problems relating to the Xerox device, contact the Xerox Welcome and Support Center. The Welcome and Support Center will want to know the nature of the problem, the Machine Serial number, the fault code (if any) plus the name and location of your company. Contact Xerox using the numbers 1-800-ASK-XEROX or 1-800-275-9376. Locating the Serial Number 1. [. . . ]