Security

This section covers the following topics related to printer and networking security.

Administrator Account
Print Operator Account
Operator Panel Access
IP Filters
Firmware Updates

Administrator Account

The Administrator (Admin) account is the master access account. It controls access to the printer and networking configuration from all setup and management utilities including the HTML web pages.

! Note: The factory default for the IB-21E is no password. Setting the Admin password is highly recommended to prevent unauthorized changes to the printer and networking configuration.

WARNING: If the Admin password is forgotten, a reset to factory defaults with a jumper setting is required to eliminate the password.

The Admin password may be set with any of the printer management utilities. The procedure in the Print Operator Account section below describes using a web browser to access the Administrator and Print Operator pages.

Print Operator Account

Some of the management utilities offer an additional security level called Print Operator. With the Print Operator account, organizations have the flexibility to assign different levels of security access; Administrator for full control and Print Operator for partial control.

This section describes using the Print Operator function in the HTML web pages.

The Print Operator account has access to the following pages:

• Pages where settings cannot be changed, such as the Home page.
• The Print Operator page.
• All pages under the Printing heading.

The following procedure describes using a web browser to access the Administrator and Print Operator pages.

1. Open the printer Home page by entering the printer's IP address in the web browser.
2. Select Security on the navigation bar. This opens the Security sub menu.
3. Select Administrator or Print Operator on the navigation bar. If a password has been previously set, a password entry dialog will be displayed.

Figure 1. Password Entry Dialog

4. Enter any user name (or leave blank). Enter the Admin password to access the Administrator page. Enter either the Print Operator or Admin password to access the Print Operator page.
5. The Security pages allow the passwords to be created or modified.
   ! Note: On the Print Operator page the Old Password may be entered as either the Print Operator password or the Admin password. This gives the Administrator the ability to modify the Print Operator password.

Figure 2. Administrator Page

Figure 3. Print Operator Page

Operator Panel Access

The IB-21E utilities provide the ability to restrict access to the operator panel (also called front panel). This section focuses on the capabilities provided by the web interface.

Lock Printer Front Panel

This feature provides the capability to prevent any changes to the device settings from the front operator panel. It is set on the Print Operator page (see Print Operator Account and Figure 3).

! Note: Not all KM digital copier models support the Lock Printer Front Panel function.

Ignore Front Panel Network Configuration Changes

This feature allows disabling changes to the printer network configuration, while leaving the front panel unlocked. The networking portion of the front panel settings may be accessed and appears to be modifiable, however, all changes are discarded by the IB-21E. This feature is set on the Print Operator page (see Print Operator Account and Figure 3).

IP Filters

The IB-21E offers the capability to filter IP traffic by source address, allowing only authorized addresses access to specific protocols. For example, an IP filter could be set for HTTP so only specific addresses could access the printer's HTML web pages.

Filtering up to 4 IP address ranges is available for each of the following protocols:

FTP (port 21)
Telnet (port 23)
HTTP (port 80)
SNMP (port 161)
LPR / LPD (port 515)
IPP (port 631)
AdminManager (port 1063)
Logical Printers (ports 9100 - 9107)

IP Filters may be configured using AdminManager or the HTML web pages. The procedure below describes using a web browser for configuration.

1. Open the printer Home page by entering the printer's IP address in the web browser.
2. Select Protocol Setup on the navigation bar.
3. Select the TCP/IP tab.
4. Select the IP Filters link.
5. To enable filtering on any protocol, click the checkbox next to the protocol name.
6. Enter up to four IP address ranges that will be allowed. To allow a single IP address, enter the Starting Address only.
7. Click Submit to register the new settings.
   
   The configuration shown in Figure 4 below allows only IP addresses 10.10.10.1 - 50 and IP address 10.10.10.125 to connect on LPR/LPD (port 515).

Figure 4. IP Filtering

Firmware Updates

Unauthorized firmware updates present a potentially serious security threat. Someone could unintentionally or maliciously render the networking inoperable by updating the network component with modified or incorrect firmware. The IB-21E utilities provide security measures to prevent unauthorized firmware updates.

IBVERUP

IBVERUP is a stand-alone utility specifically for performing firmware updates. It is usually distributed along with updated firmware. To prevent accidental or malicious updates with IBVERUP, AdminManager and the HTML web pages allow disabling updates with IBVERUP.

In the web interface, updates with IBVERUP may be disabled on the Administrator page (see Figure 2).

Updates via E-mail

If the printer is set up for e-mail printing (POP3) then it may also be configured to receive IB-21E firmware updates via e-mail from authorized e-mail addresses.

E-mail offers a very convenient method for updating the IB-21E firmware in multiple printers. The printer e-mail addresses could all be added to a distribution list. Then a single e-mail to the distribution list could update all IB-21Es.

Use the following steps to perform IB-21E firmware updates via e-mail.

1. Set up the IB-21E to receive e-mail. See Activate and Configure POP3 in the Windows Printing via E-mail section.
2. Open the printer Home page by entering the printer's IP address in the web browser.
3. Select Mgmt / Notification on the navigation bar.
4. Select the Advanced E-mail tab.
5. Enable Advanced E-mail Functions.
6. Enter the E-mail Address of each Authorized User. The printer will reject report requests and firmware updates from any e-mail address that is not authorized.
7. Click the Firmware Update checkbox for each Authorized User.
8. Click Submit to register the new settings.

Figure 5. Advanced E-mail Page

An authorized user may then perform the IB-21E firmware update by creating an e-mail addressed to the printer with the firmware binary file as an attachment. The e-mail subject and body should be blank.

Top of page