Xerox ColorQube 8700 Installationsanleitung PDF herunterladen (Seite 6)

Introduction Smart Card

Installation and Configuration Guide6

Smart Card Feature Overview

Authentication

Xerox offers a feature called Smart Card authentication. This enables users who possess smart cards to use them for

network authentication at the multifunction device (MFD). Smart cards contain the user’s Identity Certificate along

with their public and private key. This enables the MFD to perform a Kerberos authentication to the Windows Active

Domain Controller which originally issued the Identity Certificate.

The Smart Card feature was developed to support CAC smart cards and has been extended to support PIV, .NET,

Access Client, Rijkspas, and other smart cards. This document describes the configuration settings for these smart

cards.

The MFD will automatically determine which type of smart card type is inserted in the card reader and use the

appropriate software libraries to communicate with the specific card. Authentication settings are configured on the

MFD according to the network infrastructure.

Hold All Jobs

Xerox offers a feature called Hold All Jobs. This feature ensures all jobs are held securely at the MFD and are only

available for release after a user has authenticated at the MFD. The MFD holds the jobs for a specified period of

time and releases them only when the user releases them at the MFD. It is not necessary to enter a secure print PIN

to use this feature.

To use Hold All Jobs, the print driver needs to be configured to either pull the user’s name (alias) from the smart card

certificate or from the Windows Operating System. See the instructions in this document to configure the print

driver.

This feature provides the following benefits:

• Banner Pages are not required to separate jobs, which reduces waste.

• Users can manage their held jobs more efficiently. Users can select only the jobs they want to print and delete

older versions of documents that they no longer wish to print.

• Confidential documents are held in the queue for the owner to release them, rather than waiting in the output

tray to be picked up.

E-mail Signing and Encryption

With Smart Card authentication the MFD has full access to the user’s public and private keys and can use these keys

for e-mail signing and encryption.

An e-mail payload can be signed via the smart card with the user’s private key. This enables other users to validate

the signature with the user’s public key, which can be obtained from the user or from LDAP. This assures the recipient

that the content is original and has not been tampered with in transit.

An e-mail payload can also be encrypted with the user’s public key via the smart card or LDAP, and then sent to the

user. This offers the benefit that while in transit from the MFD through the e-mail infrastructure, no one can

decipher the contents of the mail note. Once in the user’s inbox, the e-mail can be decrypted with the user’s private

key, making the payload readable again.

1 2 3 4 5 6 7 8 9 10 11 ... 41 42

Keine Kommentare

Xerox ColorQube 8700 Installationsanleitung Seite 6