3.3. System Accounts
3.3.1. Printing [Multifunction models only]
The device may be set up to connect to a print queue maintained on a remote print server. The login name and
password are sent to the print server in clear text. IPSec should be used to secure this channel.
3.3.2. Network Scanning [Multifunction models only]
Network Scanning may require the device to log into a server. The instances where the device logs into a server are
detailed in the following table. Users may also need to authenticate for scanning. This authentication is detailed in
subsequent sections.
3.3.2.1.
Device log on
Scanning feature
Scan to File, Public Template
Scan to E-mail, I-Fax
Scan to Fax Server
Please note that when the device logs into any server the device username and password are sent over the network in
clear text unless SSL has been enabled or IPSec has been configured to encrypt the traffic.
3.3.2.2.
Scan Template Management
This is a web service that allows the SA to manage templates stored in a remote template pool. The connection to
the remote pool can be secured with SSL.
3.4. Diagnostics
3.4.1. Service [All product configurations]
To access onboard diagnostics from the local user interface, Xerox service representatives must enter a unique 4-digit
password. This PIN is the same for all product configurations and cannot be changed.
3.4.2. tty Mode
When the Network Controller has completed booting a login line will be displayed. This mode is a typical tty window,
and is password protected. This password changes with each major software release. The password is stored on the
Network Controller hard disk in an encrypted format similarly to how UNIX encrypts and stores passwords. Through
this port a user can gain information and access to any files or information stored in the Network Controller DRAM or
Network Controller hard disk. However, this mode is only used by a CSE if directed by a Field Engineer when all other
diagnostics fail to solve a problem. The written repair procedures that direct the CSE never employ this mode.
Ver. 1.00, May 2010
XEROX WorkCentre 6400 Information Assurance Disclosure Paper
Device behavior
The device logs in to the scan repository as set up by the SA in User
Tools.
The device logs into an SMTP Server as set up by the SA in User
Tools. It will only log into the Server when a user attempts to use
the scan-to-email feature. At the time the LDAP server must be
accessed, the device will log into the LDAP server.
The device uses simple authentication on the SMTP server. A network
username and password must be assigned to the device. The device
logs in as a normal user, with read only privileges. User credentials are
not used for this authentication step, and are never transmitted over the
network.
The device logs in to the Fax Server as set up by the SA in User Tools on
the Local UI or from the Properties tab on the WebUI.
27
Page 27 of 44
Stampa la pagina