Security
WorkCentre 7425/7428/7435
System Administrator Guide
90
Preparation
The following items and information are required before installation
• Compatible Card Reader: See Supported Card Readers on page 89.
• Compatible Access Card: See Supported Card Types on page 89.
• Common Access Card Enablement Kit
• TCP/IP enabled on the Printer
• DNS Host name or static IP address assigned
• Network Settings to be checked to ensure network is fully functional
• Domain Controller (DC) information:
• Domain Controller authentication environment
• IP address or Host Name
• Domain information
• Domain Controller Root and Intermediate certificates
• Check that all certificates are in 64 bit X.509 format
• Determine if the DC is registered with the OCSP at this site
• OCSP Server information:
•OCSP Server URL
• OCSP Root and Intermediate Certificates
• Check that all certificates are in 64 bit X.509 format
• Proxy Server configuration details
To set up the Domain Controller (DC) validation, you will need to determine if your site validates the
DC against the OCSP server. Many sites use OCSP to validate individuals, but do not register the DC
with it. If you set up the Printer to validate the DC and it isn’t registered, the procedure will fail.
The retrieved DC certificate is compared to the one stored at installation. This provides a high level of
security as it prevents rogue DCs masquerading as the real DC.
Note: Certificates are often obtained from the Information Technology professionals that support your
organization.
Server Requirements
Ensure your network infrastructure supports Common Access Card or Personal Identification
Verification (PIV).
Names or IP addresses of all servers and domains are required during setup.
Electrical Requirements
The USB port on the back of the printer’s network controller provides the power required for any of the
supported card readers.
