BENEFICIOS DE LA DANZA ÁRABE

If your Equitrac Office deployment uses Client Billing, control terminals, or embedded devices, you can configure CAS to validate user accounts against primary and secondary accounts PINs. PIN information connects an Equitrac Office printing account with user logon information when a user logs onto a control terminal or releases a print job.

The primary PIN is the numeric sequence that uniquely identifies the user, and can be data encoded on a magnetic swipe card or entered via a terminal keypad. The secondary PIN acts as a device password, and is entered via a terminal keypad.

To configure user authentication settings, perform the following procedure:

2 Select your Authentication options:

a Select the Input type to determines how users are authenticated. • Card swipe only – Users authenticate with a swipe card.

• Card swipe or keypad entry – Users authenticate with a swipe card or at the MFP front panel. • Keypad only – Users authenticate at the MFP front panel.

b Select when to Prompt for secondary PIN.

• Always – User must enter a secondary PIN via the keyboard after they swipe their card. • Never – Secondary PIN is not required.

• Only with keyboard login – User must enter a secondary PIN if they entered their primary PIN via the keyboard (rather than with a swipe card). This option prevents users from typing in someone else’s primary PIN while still allowing valid users to login without a card.

Use the Only with keyboard login option when two-level authentication is required to register new cards. In order to register the card, the user is required to manually enter the primary and secondary login credentials. There is no secondary prompt once a card is registered.

c If using a PageCounter terminal, determine the Card setup. For details on entering the decoding parameters, see Configuring HID in Equitrac Office on page 120.

d Select Auto-register primary PINs to enable users to register an unrecognized swipe card for future use. To complete the card registration, the user is required to login with a valid user ID and password (the user ID must already exist in CAS).

NOTE: If this checkbox is not selected, then a user cannot register a card, and must login manually. e Select Register as alternate PIN to record the primary PIN as the alternate PIN. When selected, the

user can also login with a valid primary PIN and secondary PIN to complete registration. 3 Select one or more Authentication mechanisms:

a Equitrac Office PINs – Leave selected only if you want to connect an Equitrac Office printing account with logon information. See Implementing PINs on page 177 for PIN information.

b External user ID and password – Select only if you are using swipe cards to verify all user information outside of Equitrac Office.

c Equitrac Office PIN with external password – Enable if users swipe their cards for identification, but must also enter their domain user account password. Equitrac Office cross-checks the database for the corresponding Equitrac account name, then verify the credentials against the selected external authority for network logon.

4 Select the Store secondary PIN encrypted check box if you want the secondary PIN to be encrypted. 5 Select the CAS offline behavior:

a Set the Login caching from the DCE servers drop-down list. • Disabled – Prevents user login when CAS is offline.

DCE login caching determines whether a user login is accepted or denied when CAS is offline. If DCE caching is disabled when CAS is offline, then users cannot login. If DCE caching is enabled when CAS is offline, then DCE allows users to login only if they had previously logged in when CAS was online. For example, if DCE caching is enabled, and User1 authenticated while CAS was online, but User2 did not, then if CAS goes offline, User1 can still login, but User2 cannot login until CAS comes online again. Once CAS is back online, then User2 can login, and continue to login even if CAS goes offline again. This option also controls login caching on PageCounter terminals. If the PageCounter cannot contact DCE, it goes into local mode and validates against its login cache. Only copying is supported in this mode.

NOTE: Account limits are not enforced, and Billing Codes are not validated when DCE is operating without a connection to CAS.

b Determine how DRE servers handle print jobs when CAS is offline.

• Auto select – If account limits are enforced, then the Do not print option is used. If account limits are not enforced, then the Print, charge accounts later option is used.

• Do not print – Users cannot print, and must wait until CAS is back online in order to print. • Print, charge accounts later – Users can print, and then the print job is charged to their account

when CAS is back online. 6 Select one or more external authorities:

a Windows validates accounts against a default Windows domain. Type the domain name in the Default domain field.

b NetWare validates accounts against a default NetWare context. Enter the name in the Default context field.

c LDAP validates accounts against a default LDAP server. Type the server name, then choose an LDAP type from the list.

• Select Force SSL if you want use Secure Socket Layer encryption.

• Select Use LDAP version 3 if you want to use LDAP version 3. The DN prefix and suffix are placed before and after, respectively, the supplied userid before attempting simple authentication against LDAP.

• Select your user ID modification method. If the userid has the format of an email address, this setting allows the email domain to be removed.

NOTE: Use the left and right arrow keys to quickly scroll through lists of Windows domains, NetWare context, and LDAP servers, if available.