Xerox 9201 Printer User Manual


 
System Administrator Guide 21-1
21
Xerox Secure Access
Administrators can configure the device so that users must be authenticated and authorized before they can
access specific services or areas. Xerox Secure Access provides a means of authenticating users via an
authentication server and optional card reader.
This convenient security solution allows people to simply swipe the ID card at the device to unlock access to
features that can be tracked for accounting and regulatory requirements.
Secure Access and Accounting
Secure Access can be enabled with the Network Accounting, Xerox Standard Accounting and Workflow
Scanning features to provide accounting functionality.
Note
Secure Access cannot be enabled at the same time as Foreign Device Interface.
Information Checklist
Before starting the installation procedure, please ensure the following items are available or have been
performed:
Ensure the Xerox device is fully functional on the network. TCP/IP and HTTP protocols must be
configured so that Internet Services can be accessed.
Ensure the Xerox Secure Access authentication server is installed and configured with user accounts.
Refer to the documentation with the authentication server to complete this task.
Contact your Xerox Sales Representative if you do not have the Xerox Secure Access authentication
server.
Note
There must be a mapping between the accounts created on the authentication server and accounts
created in the Local User Information Database or remote Authentication server (see steps 4 and 5).
Connect and configure your card reader, if required. Attach the card reader to the left hand shelf on the
device. Place the controller box on the floor at the back of the device.
Ensure that SSL (Secure Sockets Layer) is configured on the Xerox device via Internet Services.
To configure Authorization locally, the Local User Information Database must be configured. For
instructions, refer to the Local User Information Database section within the System Administration
CD1. There must be a mapping between the accounts created on the Authentication Server and the