SecurityXerox ® WorkCentre® 6655 Color Multifunction Printer 79System Administrator GuideSetting Up Authentication for a Smart Card SystemDomain Controller1. On the Login Methods page, next to Domain Controllers, click Edit. The domain controller servermust validate the domain certificate on the smart card of the user before the user can access theprinter.2. Click Add Domain Controller.3. If you are using a Windows-based domain controller, under Domain Controller Type, selectWindows-Based Domain Controller.4. Type the domain controller server address information.5. Click Save to apply the new settings or Cancel to return to the previous screen.6. To change the search priority of the domain controller, click Change Domain Priority.a. To change the priority of the server, select a server in the list and click the arrows.b. Click Close.7. To configure NTP settings, next to Network Time Protocol, click Edit. Synchronize the domaincontroller time with the time set on the printer.Note: Xerox recommends that you enable NTP to ensure time synchronization.8. To return to the Login Methods page, click Close.To associate an LDAP server with your Domain Controller for authorization or personalization, underLDAP Server Mapping, click Add LDAP Mapping.Configuring OCSP Validation Server SettingsIf you have an OCSP server, or an OCSP certificate validation service, you can configure the printer tovalidate certificates installed on the domain controller.Before you begin:Add a domain controller.1. On the Login Methods page, next to Certificate Validation, click Edit.2. Select a validation method and click Next.3. On the Required Settings page, type the URL of the OCSP server.4. To ensure that the printer can communicate with the OCSP server and the domain controller,configure your proxy server settings as needed.5. For each domain controller listed, under Domain Controller Certificate, select the correspondingdomain controller certificate from the menu. If there are no certificates installed, click InstallMissing Certificate.6. Click Save.Setting the Inactive Time Limit1. On the Login Methods page, next to Smart Card Inactivity Timer, click Edit.2. Specify the maximum amount of time before a user is logged out automatically. Type the time inminutes.3. Click Save.
