Enable Smart card authentication for printers

Enable Smart card Authentication for Printers

You enable Smart card authentication by creating an Access Control Rule and assigning the rule to a printer. You however cannot assign an Access Control Rule directly to a printer. Instead, you create an Access & Rules Profile for a printer and add the Access Control Rule to the Access & Rules Profile.

Workflow

1. Add a New Access & Rules Profile to a Printer

1. Select the printer to add the Access and Rules Profile to.
2. Click . The Access & Rules dialog is displayed.
   
3. Click . The Access and Rules profile is displayed.
   
4. At [Profile Name], specify a unique name for the Access & Rules Profile.

2. Add a New Access Control Rule to the Access and Rules Profile

1. Click , located in the same row as the [Access Control Rules] drop-down. The Access & Rules Profile displays.
   
2. At [Rule Name], specify a unique name for the Access Control Rule.

3. Add Smart card Authentication as the Identification Method

1. Click [Add], located below [Identification Method]. The Rule Definition displays.
   
2. From the [Criteria] drop-down, select [UPN in Smartcard Cert].
3. From the [Operator] drop-down, select [Is In].

NOTE:

• A Smartcard license feature connector is required to use [UPN In Smartcard Certification]
• [UPN In Smartcard Certification] identification method can be combined with [Username and Password]
• [UPN In Smartcard Certification] identification method cannot be used with the [Celiveo Authentication Gateway] authentication method.

4. Build the Authentication Profile to Validate the Smart card

1. Click , located next to the [Source] drop-down. The Authentication Source Profile displays.
   
2. In the [Profile Name] box, specify a unique name to identify the profile.
3. Click , located in the same row as the [Authentication Profile] drop-down. The Authentication Profile is displayed.
4. Specify the AD/LDAP query (similar to that of the screen capture shown below) that returns the list of users who are authorized to use the printer.
   
5. Click [Test].
   If login to the Authentication Server is successful, a message is displayed below the [Test] button.

*Note: A Write error to the Enrollment Primary field will not prevent the SmartCard authentication profile from being successfully created.

6. Click [Save]. You are returned to the Authentication Source Profile.

Dual Service Account System

To avoid any connection error after refreshing/changing the login/password on service accounts used by Celiveo, the administrator can define a secondary set of credentials so that if the default (primary) set is declined by the solution, then the secondary set takes over and prevents the access from being denied.

p(banner tip). Note: The Login User (Login Name) used in Celiveo Authentication Profile requires AD/LDAP Read and Write rights to user’s attributes.

5. Specify How to Process Smart card

1. Under [Smart card] section, click [Upload Smart card configuration File] to upload a SCAS file.
2. Click [Card Validation].
3. Click the settings icon next to [Card Validation] to configure the Card Validation settings.
   You can select any of the validation methods:
   • Pin Code: You will be prompted to enter a pin code after inserting the Smart card into the reader.
   • Certificate Expiration Date: The Smart card is verified using the Certificate expiration date.
   • Certificate KeyPair Validation: The Smart card is verified using the Certificate Keypair.
   • Certificate Authority: The Smart card is verified using the Certificate Authority file. You can add multiple certificate authority files for card validation. Select a file in the drop-down list or click the + icon next to the drop menu to add a new certificate authority file.
   • CRL: The Smart card is verified using the Certificate Revocation List (CRL). You can only use one CRL file for card validation. Select a file in the drop-down list or click the + icon next to the drop menu to add a new CRL file.
4. Select [High Availability] option, to configure the settings that determine how to manage authentication when the printer cannot connect to the organization network.

!IMPORTANT NOTE: For security reasons, Smart Card Authentication support High Availability feature in Dynamic Cache mode with Read Cache Last method only. Read Cache First method selection, if configured, will be ignored and no cache will be applied.

5. Click [Save] until all dialogs close.

6. Enable Smart card Authentication for Remaining Printers

1. In the Printers List, select the printers you want to apply the Access and Rules Profile to.
2. Click . The Access & Rules dialog is displayed.
   
3. From the [Access & Rules Profile] drop-down, select the Access and Rules profile for the Printer.

©2024 Celiveo Pte Ltd – All Rights Reserved