Konica Minolta bizhub C451 User manual

PageScope
Authentication Manager Ver. 2.1
User’s Guide
Authentication Manager

Authentication Manager i
Contents
1Introduction
1.1 What is Authentication Manager? .................................................... 1-1
1.2 General setup operation.................................................................... 1-2
1.2.1 Server settings ................................................................................ 1-2
1.2.2 Setting up the device ...................................................................... 1-2
2 Basic operations
2.1 Logging on to Enterprise Suite ......................................................... 2-1
2.2 Basic operations ................................................................................ 2-2
2.2.1 Top Menu page .............................................................................. 2-2
2.2.2 Pages for the functions .................................................................. 2-3
3 Authentication Manager
3.1 User List.............................................................................................. 3-1
3.1.1 Available operations in the User List page ..................................... 3-1
3.1.2 Viewing the user list ........................................................................ 3-2
3.1.3 Specifying display settings for the user list .................................... 3-3
3.1.4 Registering a new user ................................................................... 3-4
3.1.5 Editing user information ................................................................. 3-7
3.1.6 Editing information of multiple users .............................................. 3-7
3.1.7 Deleting a user ................................................................................ 3-8
3.1.8 Importing data ................................................................................ 3-9
3.1.9 Importing from a file ..................................................................... 3-10
3.1.10 Creating an import file .................................................................. 3-11
3.1.11 Creating a deletion file .................................................................. 3-15
3.1.12 Checking the import result ........................................................... 3-16
3.1.13 Importing from a device ............................................................... 3-18
Selecting a device to be imported................................................ 3-18
Selecting a user to be imported ................................................... 3-20
3.1.14 Checking the import result ........................................................... 3-21

Authentication Manager ii
3.1.15 Importing from an external server ................................................ 3-23
Selecting an external server ......................................................... 3-23
Specifying user search conditions and acquired information ...... 3-24
Selecting a user............................................................................ 3-25
3.1.16 Checking the import result ........................................................... 3-28
3.1.17 Deleting a user according to the external server .......................... 3-29
Selecting an external server ......................................................... 3-29
Selecting a user............................................................................ 3-29
3.1.18 Exporting data .............................................................................. 3-30
3.1.19 Editing an exported file ................................................................. 3-32
Editing an exported file................................................................. 3-32
Editing a text or CSV file............................................................... 3-32
3.2 User Counter .................................................................................... 3-34
3.2.1 Displaying the device list .............................................................. 3-34
3.2.2 Selecting a specific device ........................................................... 3-35
3.2.3 Displaying counter totals .............................................................. 3-35
3.2.4 Specifying display settings for the counter list ............................. 3-36
3.3 Account Track List........................................................................... 3-38
3.3.1 Available operations in the Account Track List page ................... 3-38
3.3.2 Displaying the account track list .................................................. 3-39
3.3.3 Registering a new account ........................................................... 3-40
3.3.4 Editing an account ........................................................................ 3-40
3.3.5 Deleting an account ...................................................................... 3-41
3.3.6 Importing data .............................................................................. 3-41
3.3.7 Importing from a file ..................................................................... 3-41
3.3.8 Creating a file to be imported ....................................................... 3-43
3.3.9 Creating a deletion file .................................................................. 3-47
3.3.10 Checking the import result ........................................................... 3-48
3.3.11 Importing from a device ............................................................... 3-50
Selecting a device to be imported................................................ 3-50
Selecting the account to be imported .......................................... 3-52
3.3.12 Checking the import result ........................................................... 3-53
3.3.13 Exporting data .............................................................................. 3-54
3.4 Account Track Counter ................................................................... 3-56
3.4.1 Displaying counter totals .............................................................. 3-56
3.5 Specifying a function permission template ................................... 3-58

Authentication Manager iii
3.5.1 Registering and editing function permission templates ............... 3-59
Registering templates................................................................... 3-59
Editing templates.......................................................................... 3-61
3.5.2 Deleting function permission templates ....................................... 3-61
3.6 Specifying a function permission ................................................... 3-63
3.6.1 Basic Settings (By User) ............................................................... 3-63
3.6.2 Advanced settings (By Device) ..................................................... 3-65
3.6.3 Function permission operations ................................................... 3-70
3.7 Specifying a user group................................................................... 3-72
3.7.1 Registering and editing groups .................................................... 3-72
Specifying display settings for the group list ............................... 3-74
3.7.2 Deleting a group ........................................................................... 3-74
3.8 Account Group Settings .................................................................. 3-75
3.8.1 Registering and editing groups .................................................... 3-75
Specifying display settings for the group list ............................... 3-77
3.8.2 Deleting a group ........................................................................... 3-77
3.9 Specifying a template ...................................................................... 3-78
3.9.1 Registering and editing user templates ........................................ 3-79
Registering user templates........................................................... 3-79
Editing user templates.................................................................. 3-80
3.9.2 Deleting user templates ................................................................ 3-82
3.9.3 Registering and editing account track templates ......................... 3-82
Registering account track templates............................................ 3-83
Editing account track templates................................................... 3-84
3.9.4 Deleting account track templates ................................................. 3-85
3.9.5 Registering and editing external server templates ....................... 3-85
Registering external server templates .......................................... 3-86
Editing external server templates ................................................. 3-87
3.9.6 Deleting external server templates ............................................... 3-88
3.10 Specifying an external server ......................................................... 3-89
3.10.1 Registering a new server .............................................................. 3-90
3.10.2 Editing a server ............................................................................. 3-97
3.10.3 Deleting a server ........................................................................... 3-97
3.11 Managing a specific device............................................................. 3-98
3.11.1 Editing device settings ................................................................. 3-99
3.11.2 Function Permission Setting for Public User .............................. 3-104

Authentication Manager iv
3.11.3 SSFC Authentication Settings .................................................... 3-105
3.11.4 Specifying a list (User name) ...................................................... 3-106
Displaying a user template on the device panel......................... 3-107
Displaying login history on the device panel .............................. 3-108
3.11.5 Specifying a list (Account name) ................................................ 3-108
Displaying an account track template on the device panel ....... 3-109
Displaying login history on the device panel .............................. 3-110
3.11.6 Specifying a list (External server name) ...................................... 3-110
Displaying an external server template on the device panel...... 3-111
Displaying login history on the device panel .............................. 3-112
3.11.7 Registering a specific device ...................................................... 3-112
3.11.8 Unregistering a specific device .................................................. 3-114
3.11.9 Checking the result of registering or unregistering a specific
device ......................................................................................... 3-115
3.12 IC card information ........................................................................ 3-117
Registering card information ...................................................... 3-117
3.12.1 Enabling/disabling IC card information ...................................... 3-118
3.12.2 Checking or modifying card information .................................... 3-119
3.12.3 Specifying an IC card name ....................................................... 3-120
3.12.4 Deleting IC card information ....................................................... 3-120
3.13 IC Card Authentication Setting..................................................... 3-121
3.13.1 IC card self-registration setting .................................................. 3-121
3.13.2 IC card self-registration .............................................................. 3-122
3.14 IC Card Information Template Settings ....................................... 3-123
3.14.1 Registering and editing an IC card information template ........... 3-124
Registering templates................................................................. 3-124
Editing a template....................................................................... 3-125
Registering IC card information (when the data type is "Bit").... 3-125
Registering IC card information
(when the data type is "Byte").................................................... 3-126
3.14.2 Deleting an IC card information template ................................... 3-126
3.15 Biometric information.................................................................... 3-127
3.15.1 Displaying a user list ................................................................... 3-128
3.15.2 Changing the biometric unit No. ................................................ 3-129
3.15.3 Deleting biometric information ................................................... 3-129
3.16 Biometric Authentication Server Setting ..................................... 3-130
3.17 Changing the password ................................................................ 3-132

Authentication Manager v
3.18 Specifying an administrator .......................................................... 3-133
3.18.1 Specifying the administrator ....................................................... 3-133
3.18.2 Adding an administrator ............................................................. 3-134
3.18.3 Deleting an administrator ........................................................... 3-135
3.19 Specifying a group manager......................................................... 3-136
3.19.1 Adding a group manager ............................................................ 3-137
3.19.2 Deleting a group manager .......................................................... 3-138
3.20 Version ............................................................................................ 3-138
3.21 Using with Account Manager........................................................ 3-139
Precautions for use with Account Manager ............................... 3-139
3.21.1 Real-time Upper Limit Settings .................................................. 3-140
3.21.2 Operation when the Real-time Upper Limit Settings is
enabled ....................................................................................... 3-140
3.21.3 Device panel display when logging on ....................................... 3-141
If the residual number of pages for a user is greater than
the reserved number of printable pages when a user uses
the device: .................................................................................. 3-141
If the residual number of pages by a user is smaller than
the reserved number of printable pages when a user uses
the device: .................................................................................. 3-142
If the residual number of pages by a user group is greater than
the reserved number of printable pages when a user uses
the device: .................................................................................. 3-142
3.22 Precautions on using Gateway for Biometric Authentication
Manager .......................................................................................... 3-143
3.23 Operation for authentication.........................................................3-144
3.23.1 Internal authentication and external authentication ................... 3-144
3.23.2 Handling a user for authentication ............................................. 3-144
Handling regardless of internal authentication or external
authentication............................................................................. 3-144
Handling regardless of the external server to perform
authentication in the external authentication ............................. 3-145
3.23.3 Account track authentication ..................................................... 3-145
3.23.4 Default external server ................................................................ 3-146
3.23.5 Logging on to the device as the device administrator ............... 3-146
3.23.6 License and authentication ........................................................ 3-146

Authentication Manager vi
4 Setting by Purpose
4.1 Performing device authentication using
Authentication Manager .................................................................... 4-1
Performing device authentication................................................... 4-1
4.2 Restricting available device functions by user group or user ....... 4-2
Restricting device functions ........................................................... 4-2
4.3 Switching available functions between devices
in the account track to which a user belongs and devices
in other account tracks ..................................................................... 4-3
Template setting............................................................................. 4-3
4.4 Linking with an existing Active Directory for authentication......... 4-4
Linking with Active Directory .......................................................... 4-4
4.5 Simplifying authentication with IC card........................................... 4-5
Registering a card .......................................................................... 4-5
4.6 Easily registering new card information for a user who lost an
IC card................................................................................................. 4-6
Easily registering card information ................................................. 4-6
4.7 Easily registering a card already registered as one of
other user............................................................................................ 4-7
Easily registering a card user ......................................................... 4-7
4.8 Using biometric authentication to enhance security level.............4-8
Performing biometric authentication .............................................. 4-8
4.9 Using Public User............................................................................... 4-9
Configuring Public User Settings ................................................... 4-9
4.10 Changing your password ................................................................ 4-10
Changing a password .................................................................. 4-10
4.11 Performing counter management by job or work besides
user.................................................................................................... 4-11
5 Troubleshooting
5.1 Problems on Device Management ................................................... 5-1
5.2 Problems on User Import .................................................................. 5-2
5.3 Problems on Authentication ............................................................. 5-3

Authentication Manager vii
About this product
Authentication Manager is a utility for centrally managing devices, such as
multifunctional peripherals, on the network. When used in a Web browser,
Authentication Manager can manage accounts, users and external servers
used by the network devices, total copies and prints, and apply specified
function limitations.
Authentication Manager is an application that runs on Device Manager.
Device Manager must be installed in order for you to be able to install
Authentication Manager.

Authentication Manager viii
Abbreviation of product names
This manual describes product names with the following abbreviations.
Product name Abbrev.
KONICA MINOLTA PageScope Enterprise Suite Enterprise Suite
KONICA MINOLTA PageScope Web Connection Web Connection
KONICA MINOLTA PageScope Net Care Device
Manager
Device Manager
KONICA MINOLTA PageScope Authentication Man-
ager
Authentication Manager
KONICA MINOLTA PageScope Account Manager Account Manager
KONICA MINOLTA Registration Tool for User Au-
thentication
Registration Tool for User Authen-
tication
KONICA MINOLTA Gateway for Biometric Authenti-
cation Manager
Gateway for Biometric Authenti-
cation Manager

Authentication Manager ix
Trademarks and registered trademarks
Trademark acknowledgements
KONICA MINOLTA and KONICA MINOLTA logo are registered trademarks or
trademarks of KONICA MINOLTA HOLDINGS, INC.
PageScope and bizhub are registered trademarks or trademarks of KONICA
MINOLTA BUSINESS TECHNOLOGIES, INC.
Microsoft, Windows, Active Directory and Excel are either registered
trademarks or trademarks of Microsoft Corporation in the United States
and/or other countries.
Mozilla and Firefox are trademarks of the Mozilla Foundation.
Apple and Mac OS are trademarks of Apple Inc., registered in the U.S. and
other countries. Safari is a trademark of Apple Inc.
Intel and Pentium are trademarks or registered trademarks of Intel
Corporation or its subsidiaries in the United States and other countries.
All other company and product names are either trademarks or registered
trademarks of their respective companies.
!
Detail
The dialog boxes that appear in this document may differ from those that
appear on your computer, depending on the installed devices and
specified settings.
Note
Unauthorized reproduction, translation or duplication of this document,
whether in its entirety or in part, is strictly prohibited.
The content of this document is subject to change without notice.
Copyright © 2007 KONICA MINOLTA BUSINESS TECHNOLOGIES, INC. All
rights reserved.

Introduction 1
Authentication Manager 1-1
1 Introduction
1.1 What is Authentication Manager?
Accounts, users and external servers used by the network devices can be
managed, and copies and printouts can be totaled. In addition, permissions
can be applied to the functions available to users by registering function
permission templates and configuring settings.
For details, refer to "Authentication Manager" on page 3-1.

Introduction 1
Authentication Manager 1-2
1.2 General setup operation
In order to use Authentication Manager, configure settings in the following
order.
1.2.1 Server settings
Log on to Enterprise Suite as a system administrator, and then specify
settings for the following. The following settings are necessary to enable
Authentication Manager.
1.2.2 Setting up the device
In order to use Authentication Manager, configure the following device
settings.
Before installing the application, use Web Connection to configure the
following settings.
-Click the "Security" tab, click "SSL/TLS Setting", and then configure SSL
settings.
-Click the "Network" tab, select "OpenAPI Setting", and then select the
"Use SSL/TLS" check box, or select "Accept SSL communication only"
from the drop-down list.
-Click the "Network" tab, select "TCP Socket Setting", and then select the
"Use SSL/TLS" check box.
2
Reminder
For details on using Web Connection, refer to the User's Guide for the
device.
Function Description
Device List • Device Auto Discovery: Specify the conditions for searching for
devices to be registered.
• Manual Device Registration: Manually register devices that can-
not be found automatically.
• Device Management Settings: From the found devices, specify
the devices to be managed.
• Device Information Settings: Specify the communication set-
tings for each device.
For details, refer to the "Device Manager User's Guide".
Authentication Manager • External Server Settings: If authentication is performed by using
an external server, register the name of the external server.
(page 3-89)
• Device Management: Determine the devices that are authenti-
cated by Authentication Manager. Various settings for authenti-
cating devices can also be specified. (page 3-98)
Server Settings • E-mail Server Settings: Select whether or not to use e-mail func-
tions, such as notifications.
For details, refer to the "Device Manager User's Guide".

Basic operations 2
Authentication Manager 2-1
2 Basic operations
This chapter provides details on logging on to Enterprise Suite.
2.1 Logging on to Enterprise Suite
For details on logging on to the Enterprise Suite server, refer to the "Device
Manager User's Guide".

Basic operations 2
Authentication Manager 2-2
2.2 Basic operations
The basic operation of Authentication Manager is described below.
2.2.1 Top Menu page
1
2
3
4
No. Function Description
1 Device List Register and manage devices. For details, refer to the "De-
vice Manager User's Guide".
2 Authentication Manager Manage accounts, users, and external servers used by the
network devices, and add up values on copies and print-
outs. In addition, permissions can be applied to the func-
tions available to users by registering function permission
templates and configuring settings. For details, refer to
"3 Authentication Manager".
2
Reminder
Limits may be applied to the available functions
according to the user permissions. For details,
refer to "3 Authentication Manager".
3 Counter Reader The number of copies and printouts are totaled for each
registered device. For details, refer to the "Device Manager
User's Guide".
4 Server Settings Configure the server settings for Authentication Manager.
For details, refer to the "Device Manager User's Guide".

Basic operations 2
Authentication Manager 2-3
2.2.2 Pages for the functions
12
3
4
5
9
10
7
6
8
No. Function Description
1 Login user name Displays the name of the user who has logged in.
2 Logout Click this button to log off of Enterprise Suite server and
display the Login page.
3 Go to Top Menu Click this button to display the top page of Enterprise Suite.
4 Menu The menu items are displayed.
Click a menu item to display details on the right side of the
page.
2
Reminder
If appears beside the menu title, click
to display the collapsed menu. Click to
close the menu.
If is displayed, the collapsed menu will not
appear.

Basic operations 2
Authentication Manager 2-4
5 Click this button to display the page for the item one level
higher in the menu.
2
Note
The "Back" button of the Web browser cannot
be used.
Click this button to update the information on the current
page.
2
Note
Do not use the "Update" button of the Web
browser.
Click this button to display the Help information for the cur-
rent page.
6 Select View Target Select the target to be displayed in the list.
7 Search Condition When a list is displayed in the page, the listed items can be
narrowed.
Select a column to search from the drop-down list, and
then type in the text to be searched for in the text box.
8 Select All/Uncheck All but-
ton
When a list is displayed in the page, all items can be select-
ed or cleared.
9 Maximum number of dis-
played lines
When a list is displayed on the page, select the number of
data items displayed in the list.
For example, if "10" is clicked, 10 data items are displayed
in the current page.
10 Sort When a list is displayed in the page, click an item name in
the list to sort the entire list using the item as a sort key.
No. Function Description

Authentication Manager 3
Authentication Manager 3-1
3 Authentication Manager
3.1 User List
3.1.1 Available operations in the User List page
From the User List page, settings can be specified with the following.
2
Note
The user name is not case-sensitive. For example, "USER1" and "user1"
are considered to be the same user name.
2
Reminder
When logged on as a "group manager", only information for managed
groups and users can be edited or deleted. For details on "group
manager" settings, refer to "Specifying a group manager" on page 3-136.
Function Details
[Register User] button Click this button to register a new user.
[Edit User] button Click this button to edit the information for a registered us-
er.
[Delete User] button Click this button to delete a registered user.
[Import] button Click this button to import user information to register the
users.
[Export] button Click this button to export the information for the currently
registered users and save it.
[Display Settings] button Click this button, and then select the items to be displayed
in the user list.
Display Details Select a category of each user to be displayed in the list.
Search Condition Specify the condition to narrow down users to be displayed
in the list.

Authentication Manager 3
Authentication Manager 3-2
3.1.2 Viewing the user list
The list of registered users can be viewed.
1From the [User Group] drop-down list, select the user group to be
displayed.
– To display all users, select "All Users".
– If master and subordinate relationships are specified in the group,
select the [All subgroups] check box of [Display Details] to display
all users, including those in subordinate groups.
– Specifying the search condition can narrow down users to be
displayed in the list. Select a column to search from the drop-down
list, and then type in the text to be searched for in the text box. Click
the [Display] button to display user groups based on the specified
condition.
2Click the [Display] button.
A list of users registered in the selected group appears.
The following items are displayed in the user list.
Function Description
(Icon) Displays whether the user is enabled.
The user is enabled.
The user is disabled.

Authentication Manager 3
Authentication Manager 3-3
3.1.3 Specifying display settings for the user list
The items to be displayed or hidden in the user list can be selected. Settings
can be specified for the following parameters.
-User Name
-User Group Name
-Description
The user is deleted via an external server.
User Name Displays the user name.
User Group Name Displays the name of the group to belong to.
Description Displays the description of the user.
External Server Name Displays the name of the registered external server.
Account Name Displays the account track information of the user. If you do
not synchronize the user and account when managing the
account, "Do Not Synchronize" is displayed. When you
synchronize them, the account name is displayed if the
name of the account that the user belongs to is specified.
"None" is displayed if no account name is specified.
E-mail Address Displays the e-mail address of the user.
Home Displays the address of the SMB server that is normally
used by the user.
2
Reminder
To use "Home" (send the scanned data to the
Home address) for the device, the following
conditions must be satisfied.
- The device supports the use of "Home".
- Active Directory is used to perform authenti-
cation of the external server.
If other than Active Directory is used for authen-
tication, "Home" cannot be used for the device.
Maximum Number of Box Displays the upper limit on the number of boxes that the
user can create. The upper limit of the user with this item
blank is not managed.
Apply Level Displays the access permission level for the address book.
Biometric Unit No. Displays the biometric unit No.
2
Reminder
This page is displayed when the license for
Gateway for Biometric Authentication Manager
is registered.
Function Description

Authentication Manager 3
Authentication Manager 3-4
-External Server Name
-Account Name
-E-mail Address
-Home
-Maximum Number of Box
-Apply Level
-Biometric Unit No.
2
Reminder
- The user name must be displayed.
- "Biometric Unit No." is displayed when the license for Gateway for
Biometric Authentication Manager is registered.
1Click the [Display Settings] button on the User List page.
The User List Display Setting page appears.
2Select the check box for the items to be displayed, and then click the
[Apply] button.
– To clear the entered information, click the [Clear] button.
3.1.4 Registering a new user
New users who can log on can be registered. The following information is
required for registration.
Function Details
User Group Name From the drop-down list, select the group to belong to. If
the group does not exist, register the group before starting
this operation. For details on registering groups, refer to
"Registering and editing groups" on page 3-72.
User Name Type in a user name.
Description Type in a description of the user.