Safecom Go Xerox Administrators Manual 60705

SafeCom Go Xerox
Administrators Manual
D60705-21
September 2012
Trademarks: SafeCom, SafeCom Go, SafeCom P:Go, SafeCom ePay and the
SafeCom logo are trademarks of SafeCom a/s. Company and product names
mentioned in this manual are trademarks or registered trademarks of their
respective owners. SafeCom a/s cannot be held responsible for any technical or
typographical errors and reserves the right to make changes to products and
documentation without prior notification.
Third Party Software: This software may contain third party software which
requires notices and/or additional terms and conditions. Such required third
party software notices and/or additional terms and conditions are located in
the SafeCom Third Party Notice document.
Portions of the application are subject to the following notice:
Copyright 2004-2010 Xerox Corporation".
Patent: SafeCom has received the following British patent GB 2350 713 B, US
patent US 6,952,780 B2 and Europe EUR EP1 120 701.
Feedback: If you have any feedback or ideas concerning this manual or the
SafeCom product, then please send an e-mail to feedback@safecom.eu
Copyright 1999 - 2012 SafeCom a/s
SafeCom a/s
Lautrupvang 12
DK-2750 Ballerup
Denmark
Phone: +45 4436 0240
E-mail: info@safecom.eu
Web: safecom.eu
D60705-21
Table of contents
1
Introduction ............................................................................................7
1.1
SafeCom Go Xerox ......................................................................... 7
1.2
Requirements ............................................................................... 7
1.3
SafeCom ID devices ........................................................................ 9
1.4
Xerox global print driver ................................................................ 10
1.5
Supported languages .................................................................... 10
1.6
Available documentation ............................................................... 10
1.7
About this manual........................................................................ 11
1.8
Document history ........................................................................ 11
Install SafeCom Go Xerox ......................................................................... 14

2.1
Xerox WorkCentre 7120 and 7125, Xerox Color 550/560 .......................... 15
2.1.1
Create certificate on the printer ...................................... 15
2.1.2
Enable HTTPS on the printer ........................................... 15
2.1.3
Enable Extensible Service Registration on the printer ............ 16
2.1.4
Set up Extensible Service on the printer ............................. 16
2.1.5
Allow login by code on the printer .................................... 16
2.1.6
Add the device in SafeCom Administrator ........................... 17
2.1.7
Configure authentication and access control on the printer ..... 17
2.2
Xerox ColorQube 92xx and 93xx ....................................................... 20
2.2.1
Set up the printer ........................................................ 20
2.2.2
2.2.3
2.2.4
2.2.5
Setup Extensible Service on the printer .............................. 21
2.2.6
2.2.7
2.2.8
2.3
Xerox WorkCentre 77xx ................................................................. 23
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
2.3.6
2.3.7
2.4
2.4.1
2.4.2
2.4.3
2.4.4
Enable web services ..................................................... 27
2.4.5
2.4.6
2.4.7
2.5
2.5.1
2.5.2
2.5.3
2.5.4
2.5.5
Enable copy locking using SafeCom copy cable ..................... 29
2.5.6
Enable extensible services browser ................................... 29
2.5.7
2.5.8
2.6
Xerox ColorQube 87xx, 89xx ........................................................... 30
2.6.1
2.6.2
D60705-21
2.7
2.8
2.9
2.10
2.11
2.12
2.13
D60705-21
2.6.3
2.6.4
2.6.5
Enable extensible services browser ................................... 32
2.6.6
2.6.7
Xerox WorkCentre 52xx, 72xx, 73xx and 74xx ...................................... 33
2.7.1
2.7.2
Create certificate and enable SSL on the printer .................. 33
2.7.3
Enable custom services .................................................. 34
2.7.4
Enable ports ............................................................... 34
2.7.5
2.7.6
2.7.7
2.7.8
Allow device error messages to appear on 73xx .................... 36
2.8.1
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.9.1
2.9.2
2.9.3
2.9.4
2.9.5
2.9.6
2.10.1
2.10.2
Create certificate and Enable SSL on the printer .................. 42
2.10.3
Enable custom services on the printer ............................... 43
2.10.4
Enable web services on the printer ................................... 43
2.10.5
2.10.6
2.10.7
Set custom services as the default entry screen ................... 44
2.10.8
2.10.9
Enable custom services (EIP) on older 56xx ......................... 45
Xerox Workcentre 53xx ................................................................. 45
2.11.1
2.11.2
2.11.3
Enable extensible services and extensible services browser ..... 46
2.11.4
2.11.5
2.11.6
Xerox WorkCentre Pro 2xx.............................................................. 50
2.12.1
2.12.2
2.12.3
2.12.4
2.12.5
2.12.6
2.12.7
Check EIP hardware on WorkCentre Pro 2xx ........................ 52
Xerox Phaser 3635MFP .................................................................. 53
2.13.1
2.13.2
Enable USB card reader ................................................. 53
2.13.3
Create certificate and Enable SSL on the printer .................. 53
2.13.4
2.13.5
2.13.6
2.13.7

SafeCom Device Server ............................................................................ 56

3.1
Install SafeCom Device Server ......................................................... 57
3.1.1
Windows Firewall - Ports that must be opened ..................... 58
3.2
Configure SafeCom Device Server ..................................................... 59
3.2.1
Log in to SafeCom Device Server ...................................... 59
3.2.2
Add SafeCom Server ..................................................... 59
3.3
Add device to the SafeCom Device Server ........................................... 60
3.3.1
Add device via the SafeCom Administrator .......................... 60
3.3.2
Add device via the SafeCom Device Server .......................... 64
3.3.3
Device icons ............................................................... 65
3.4
Configure device in SafeCom Device Server ......................................... 66
3.4.1
Check device properties ................................................ 69
SafeCom Controller ................................................................................. 70

4.1
Install SafeCom Controller ............................................................. 70
4.1.1
Write down the IP address of the printer ............................ 70
4.2
Connect hardware ....................................................................... 71
4.3
Add device in SafeCom Administrator ................................................ 71
4.4
Enable copy tracking .................................................................... 74
4.5
SafeCom Go Xerox Controller Web Interface ....................................... 75
4.5.1
Log in to the SafeCom Controller Web Interface ................... 75
4.5.2
Advanced configuration web page .................................... 75
4.5.3
SafeCom web page ....................................................... 76
4.5.4
Printer web page ......................................................... 77
SafeCom Go Xerox How to ...................................................................... 79

5.1
SafeCom Go Xerox on Device Server .................................................. 79
5.1.1
Enable Plug-in Settings on device web page ........................ 79
5.1.2
Select login method ...................................................... 79
5.1.3
Register device ........................................................... 79
5.1.4
Restore factory default ................................................. 80
5.1.5
Uninstall SafeCom Go Xerox ............................................ 81
5.2
SafeCom Go Xerox on Controller ...................................................... 81
5.2.1
Specify SafeCom server and printer connection .................... 81
5.2.2
Set password to prevent unauthorized access ...................... 81
5.2.3
Assign a fixed IP address to the SafeCom Controller............... 82
5.2.4
Register device ........................................................... 82
5.2.5
Restore factory default ................................................. 82
5.2.6
Uninstall SafeCom Go Xerox ............................................ 82
5.2.7
Make all printing go through SafeCom ................................ 82
5.2.8
Enable force logout ...................................................... 83
5.2.9
Resend configuration .................................................... 83
5.2.10
Manually upgrade DLM File. ............................................ 83
5.2.11
Configure multiple SafeCom Controllers ............................. 83
Set up network accounting ....................................................................... 84

6.1
Xerox WorkCentre 7120 and 7125 ..................................................... 84
6.2
Xerox ColorQube 92xx and 93xx ....................................................... 84
6.3
6.4
Xerox WorkCentre 56xx and WorkCentre Pro 2xx ................................. 85
Using SafeCom Go Xerox .......................................................................... 86

7.1
Xerox WorkCentre 71xx, 74xx, and 75xx............................................. 86
7.1.1
Login ........................................................................ 86
7.1.2
Pull Print - Document list ............................................... 87
7.1.3
Copy ........................................................................ 88
7.1.4
Logout ...................................................................... 88
D60705-21
7.2
7.3
7.4
7.5
7.1.5
7.1.6
Xerox
7.2.1
7.2.2
7.2.3
7.2.4
7.2.5
7.2.6
Xerox
7.3.1
7.3.2
7.3.3
7.3.4
7.3.5
7.3.6
Xerox
7.4.1
7.4.2
7.4.3
7.4.4
7.4.5
7.4.6
Xerox
7.5.1
7.5.2
7.5.3
7.5.4
7.5.5
7.5.6
Register card at device with Windows credentials ................. 88

Register card with PUK code ........................................... 88
WorkCentre 76xx and 77xx ..................................................... 89
Control panel.............................................................. 89
Login ........................................................................ 90
Copy ........................................................................ 92
Logout ...................................................................... 92
WorkCentre 52xx, 72xx, 73xx and 74xx ...................................... 93
Control panel.............................................................. 93
Login ........................................................................ 93
Copy ........................................................................ 96
Logout ...................................................................... 96
WorkCentre 56xx ................................................................. 97
Control panel.............................................................. 97
Login ........................................................................ 97
Copy ....................................................................... 100
Logout ..................................................................... 100
Register card with PUK code .......................................... 100
WorkCentre Pro 2xx............................................................. 101
Control panel............................................................. 101
Login ....................................................................... 101
Pull Print - Document list .............................................. 102
Copy ....................................................................... 103
Logout ..................................................................... 103
Register card with PUK code .......................................... 103
Troubleshooting ................................................................................... 104

8.1
SafeCom Help Desk Assistant ......................................................... 104
8.2
Copy jobs are not tracked ............................................................. 104
8.3
No communication between SafeCom controller and printer ................... 104
8.4
Cannot access properties tab on printers web page ............................. 104
8.5
At the printer: Cannot access the Tools menu..................................... 105
8.6
At the printer: Error message: "Communication error" at login ................ 105
8.7
SafeCom Device Server: "Unable to configure device because: Device is
configured against a different server" ............................................... 105
8.8
Error when upgrading existing Device Server installation ....................... 106
Regulatory information .......................................................................... 107
10
Index ................................................................................................. 108
D60705-21
1 Introduction
Introduction
1.1
SafeCom Go Xerox
SafeCom Go Xerox is the embedded solution for Xerox printers. It integrates
with the touch-screen control panel of the Xerox printer and offers user
authentication by code and/or card.
SafeCom Go Xerox works together the SafeCom G3 Server software and is
designed to help companies and organizations gain control over their printing
costs and document security. The SafeCom solution can be enhanced with addon modules to build customer specific and scalable solutions.
1.2
Requirements
D60705-21
SafeCom Go Xerox supports all printers in Table 1 with the listed version
or newer firmware. The printers must be EIP-enabled.
SafeCom Go device license.
The SafeCom Device Server REQUIRES Java Runtime Environment (JRE)
version 1.6 or later. It can run on the same physical hardware as the
SafeCom Server. If SafeCom Device Server is installed on a 64-bit
operating system, a Java version 32-bit needs to be installed. JRE can
be downloaded from www.java.com.
1 Introduction
Table 1 SafeCom Go Xerox supported Xerox printers and requirements

Xerox printer
Xerox Color 550/560
Xerox Phaser 36xx
3635MFP
Xerox WorkCentre Pro 2xx
232, 238, 245, 255, 265, 275
Xerox WorkCentre 52xx
5222, 5225, 5230
5325,5330,5335
Xerox WorkCentre 56xx (SBC)
5632, 5638, 5645, 5655
Xerox WorkCentre 56xx (MBC)
5632, 5638, 5645, 5655,
5665, 5675, 5687
5735, 5740, 5745, 5755,
5765, 5775, 5790
6400
7120, 7125
7232, 7242
7328, 7335, 7345, 7346
7425, 7428, 7435
7525, 7530, 7535, 7545, 7556
7655, 7665, 7675
7755, 7765, 7775
Xerox ColorQube 92xx
9201, 9202, 9203
Xerox ColorQube 87xx/89xx
Xerox ColorQube 93xx
9301, 9302, 9303
D60705-21
Printer
firmware
SafeCom
Controller
55.1.3
20.104.04.007
May require EIP hw
(P/N 097N09148)
13.060.22.50
Requires EIP hw
(2.12.7)
OK
SafeCom
Device
Server
OK
OK
OK
1.207.7
OK
53.3.21
OK
OK
25.54.39.000
OK
21.120.39.000
OK
061.132.222.03800
OK
OK
060.070.109.11403
OK
71.20.31
OK
OK
1.207.5
OK
1.237.4
OK
75.13.62
OK
OK
061.120.100.31400
OK
OK
040.033.53120
OK
060.090.009.23712
OK
060.050.009.13415
OK
071.160.101.36000
OK
061.180.221.31500
OK
OK
1 Introduction
1.3
SafeCom ID devices
Table 2 SafeCom Go Xerox supported SafeCom ID Devices
SafeCom
Controller
SafeCom
Device Server
Identification Method
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
SafeCom
AWID Reader [R]

Barcode Reader
Casi-Rusco Reader [R]
Cotag Reader
EM Reader [E]
EM Reader [R]
Felica Reader [R]
HID Prox Reader [E]
HID Prox Reader [R]
HID Prox Reader 37 bit [E]
iCLASS Reader [E]
iCLASS Reader [R]
Indala Reader [R]
Indala Reader 29 bit [R]
Inditag Reader [E]
IoProx Reader [R]
Legic Reader [E]
Legic Reader [R]
Magnetic Card Reader (Tr 1)
Magnetic Card Reader DD (Tr 1)
Mifare Reader [E]
Mifare Reader [R]
MultiISO Reader[E]
NexWatch Reader [R]
USB *
USB
keyboard
**
674110
674120
674620
697410
673110
673120
673720
671110
654110
671120
654120
654720
670010
651010
670110
658010
679110
670120
670620
679120
679720
970120
970620
USB
Serial
696420
694020
652420
678020
674120
674420
697420
673120
673420
671120
654120
654420
670420
651020
670120
658420
679120
679420
696010
694010
652010
959010
954010
657010
692010
691020
692020
970120
970420
970110
695620
698420
698010
The ID device is either fitted or supplied with a 1.8 - 2.0 m cable. Additional
information about the ID devices is available in SafeCom G3 Administrators
Manual D60603.
* USB reader for Xerox series 7120, 53xx, 550, 560, 74xx
** USB Keyboard reader for Xerox series 3635, 57xx, 75xx, 93xx
D60705-21
1 Introduction
1.4
Xerox global print driver

Xerox Global Print Driver (X-GPD) is available for PCL5, PCL6, and PostScript at
xerox.com/global and can be used with SafeCom Pull Print if bi-directional
communication is disabled. The PostScript version is recommended in all
scenarios.
1.5
Supported languages
The languages, with their postfixes, listed below are supported by SafeCom.
Postfix
None
da
de
es
fr
it
iw
ja
ko
nl
no
sv
zh
zh_tw
1.6
Language
English
Danish
German
Spanish
French
Italian
Hebrew
Japanese
Korean
Dutch
Norwegian
Swedish
Chinese
Chinese, Taiwan
Available documentation
SafeCom Smart Printing
SafeCom Smart Printing Administrators Quick Guide D10600

How to install a SafeCom Smart Printing solution.
SafeCom G3
SafeCom G3 Administrators Manual D60603

A comprehensive Manual that the administrator should consult to make a
successful SafeCom solution. Includes information about SafeCom
Tracking, SafeCom Rule Based Printing, SafeCom Client Billing, and
SafeCom Pay.
SafeCom Go Xerox
SafeCom Go Xerox Administrators Manual D60705 (this manual)

Manual on how to install, configure and use SafeCom Go Xerox.
SafeCom Go Xerox Users Guide D20705

User's Guide on how to use SafeCom Go Xerox.
D60705-21
10
1 Introduction
1.7
About this manual

This manual applies to SafeCom G3 Server version S82 070.440*04, SafeCom
Device Server version S82 060.060*04, and SafeCom Controller version S80
508.780*64.
This manual is organized as follows:
1.8
Chapter 1 Introduction lists the supplied SafeCom documentation,

introduces SafeCom relevant terms, system requirements, and describes
how this manual is organized.
Chapter 2 Install SafeCom Go Xerox describes the installation of the

solution on Xerox printers.
Chapter 3 SafeCom Device Server describes how to install with SafeCom

Device Server.
Chapter 4 SafeCom Controller describes how to install with SafeCom

Controller.
Chapter 5 SafeCom Go Xerox How to contains step-by-step instructions

for some of the administrators most common tasks.
Chapter 6 Set up network accounting describes how to setup network

accounting on different Xerox devices.
Chapter 7 Using SafeCom Go Xerox describes how to interact with the

printers control panel when SafeCom Go Xerox is installed.
Chapter 8 Troubleshooting contains hints for troubleshooting.
Chapter 9 Regulatory information contains regulatory information.
Document history
Revision D60705-21
Support for Xerox Color 550/560

Support for Xerox Workcentre 5330 (2.11)
Support for Xerox Workcentre 5765
Support for Xerox ColorQube 9302
Added section 2.5.5 Enable copy locking using SafeCom copy cable
Updated section 1.3 SafeCom ID devices
Updated section 1.2, Table 1 SafeCom Go Xerox supported Xerox printers
and requirements
Revision D60705-20
Xerox Phaser 3635 now supports USB card reader (2.13.2).
Support for Xerox ColorQube 87xx/89xx (2.6)
D60705-21
11
1 Introduction
Revision D60705-19
SafeCom Device Server version S82 060.060*04 and SafeCom Controller

version S80 508.780*64.
Revision D60705-18
SafeCom Device Server version S82 060.060*03 and

SafeCom Controller version S80 508.780*64.
SafeCom Device Server implementation support selection of client billing
codes at the device through the Account icon. The Account icon can be
disabled by setting the property key BillingEnabled to false (3.4).
SafeCom Device Server implementation support delegate print.
Revision D60705-17

Configure device server failover section removed.
Xerox WorkCentre 7125 is now supported (2.1).
Updated chapter on SafeCom Device Server to reflect new version (3).
Now set up of network accounting for WorkCentre 75xx, 7125, 56xx, and
WorkCentre Pro 2xx (6).
Updated SafeCom Device Server section.
Revision D60705-16

Xerox ColorQube 93xx is now supported (2.2).
New chapter on how to setup network accounting for ColorQube 92xx and
93xx, WorkCentre 7120, and WorkCentre 7545 (6).
Revision D60705-15

Support for Xerox Phaser 3635MFP (2.13).
Added section (5.1.1) regarding the configuration of Plug-in Settings on
Xerox WorkCentre 7120.
Section (8.6) in Troubleshooting has been added.
The Create certificate sections for all Xerox models have been changed
regarding the maximum days of validity.
Revision D60705-14
SafeCom Device Server version S82 060.020*09.

Added chapter 3 on how to enable SafeCom via SafeCom Device Server.
Updated Table 1 in Requirements - which models can be enabled with
SafeCom Device Server (1.2).
Updated the Add device section for Xerox WorkCentre 7120 (2.1.6).
Revision D60705-13
D60705-21
12
1 Introduction
SafeCom Go Xerox version S80 508.780*52.

Added section on Xerox Global Print Driver (1.4).
Separate section on Xerox WorkCentre 77xx (2.3).
New section on Xerox WorkCentre 75xx (2.5).
How to configure multiple SafeCom Controllers (5.2.11).
Revision D60705-12
D60705-21
SafeCom Go Xerox version S80 508.780*46.

Updated to reflect the introduction of SafeCom G3 Server.
The installation steps have be reorganized according to model.
Support for Xerox WorkCentre 57xx and 7120.
Added section: Cannot access properties tab on printers web page (8.4).
13
2 Install SafeCom Go Xerox
Install SafeCom Go Xerox

This chapter covers how to set up and configure various Xerox devices to
SafeCom Go Xerox.
Depending on the device model and the configuration, be aware of the
following issues:
Authentication by ID code varies between the Xerox device series, so a

different login process should be expected. If possible, limit variety in the
selection of Xerox devices.
With Xerox Network Accounting enabled on the Xerox device, it is

possible to track E-mail, Scan, and Fax and to do detailed tracking of
page sizes for copy and print jobs. Furthermore post tracking of Pull Print
jobs is without delay between jobs. How to setup Xerox Network
Accounting is covered in chapter 6.
For devices without Xerox Network Accounting enabled, tracking of copy
and Pull Print jobs is done via SNMP.
If SafeCom is enabled via the SafeCom Controller, it is possible to do
tracking via both Xerox Network Accounting and SNMP. However, if
SafeCom is enabled via the SafeCom Device Server, it is only possible to
do tracking via Xerox Network Accounting. If Xerox Network
Accounting is not setup, when using SafeCom Device Server, tracking
cannot be done.
Note: If tracking is done via SNMP, then all copy jobs made within a
single login session is tracked as one job.
D60705-21
14
2.1
Xerox WorkCentre 7120 and 7125, Xerox

Color 550/560
The Device Administrator user name and password is required to log in:
User name
Password
2.1.1
admin
1111
Create certificate on the printer

Be aware that when you create a certificate on the printer, it might take a few
hours before the certificate becomes valid.
After creating the certificate, check the date and time for when the certificate
becomes valid on the device web page by clicking the certificate in the address
field. Click View certificates, then the Details tab and make a note of the
Valid from and Valid to dates and times.
To create a certificate:
1.
2.
3.
4.
5.
6.
Open the printers web page and click on the Properties tab. Enter the
Device Administrator Password to log in.
Click Security and then Machine Digital Certificate Management on the
menu. View the Machine Digital Certificate area and confirm that the
Current Status of the Machine Digital Certificate indicates that the
printer does not have a Certificate established on the printer. If a
certificate is established, proceed to enable HTTPS (2.1.2).
Click Create New Certificate.
Select Self Signed Certificate. Click Continue.
The maximum Days of Validity allowed are 1800 (and not 9999 as
indicated).
Click Apply.
In order for the certificate to work properly, you need to disable verification of
remote server certificate:
1.
2.
3.
4.
2.1.2
Enable HTTPS on the printer

1.
2.
3.
4.
5.
D60705-21
On the printer's web page, click the Properties tab.

In the left menu click Security and then SSL/TLS Settings.
For Verify Remote Server Certificate uncheck the Enabled check box.
Click Apply.
Open the printers web page and click on the Properties tab.
Click Connectivity, Protocols, and then HTTP and check that Secure
HTTP (SSL) is enabled on port 443.
Click Apply.
Click OK to restart the devices web server.
Click Reboot Machine. Click OK to reboot.
15
2.1.3
Enable Extensible Service Registration on the printer

1.
2.
3.
4.
2.1.4
Set up Extensible Service on the printer

1.
2.
3.
4.
5.
6.
2.1.5
Open the printers web page and click on the Properties tab. Refer to
section 8.4 if you have problems accessing the Properties tab.
Click General Setup and then Extensible Service Setup
In Extensible Service Registration click Configure. Scroll down to
Remote System Management and select Enable next to Extensible
Service Registration.
Click Apply. Click OK.
Click General Setup and then Extensible Service Setup.
Check Export password to Extensible Browser.
Check Enable the Extensible Services Browser.
Check Verify server certificates.
Click Apply.
Allow login by code on the printer

If users are to log in by card only then nothing needs to be configured.
However, if users are to log in by entering an ID code on the printers control
panel then the printer must be configured to allow keyboard access.
1.
2.
D60705-21
3.
Click Security, Remote Authentication Servers and then Xerox Secure
Access Settings.
The Xerox Secure Access Settings web page appears.
4.
5.
6.
Check Enabled for Local Login.

Click Apply.
16
2.1.6
Add the device in SafeCom Administrator

Depending on how SafeCom is enabled on these models, add the device
according to the following:
If SafeCom is enabled via the SafeCom Device Server:
1.
2.
3.
Make sure the SafeCom server software installation has been completed.
Add a device either via the SafeCom Administrator (3.3.1) or via the
SafeCom Device Server (3.3.2).
Configure the device (3.4).
If SafeCom is enabled via the SafeCom Controller:

1.
2.
3.
4.
2.1.7
Configure authentication and access control on the printer

1.
2.
3.
4.
D60705-21
Connect the SafeCom Controller (4.1).
In SafeCom Administrator use Add device (4.3) to add the SafeCom
Controller. Remember to select SafeCom Go Xerox as the SafeCom type.
If relevant Enable copy tracking on the Printer web page of the SafeCom
Controller (4.4).
Click Security and then Authentication Configuration.
The Authentication Configuration> Step 1 of 2 web page appears. In
Login type select Xerox Secure Access Device.
Click Apply.
17
5.
6.
7.
8.
9.
Click Reboot Machine. Click OK to reboot. This reboot MUST occur

otherwise the subsequent steps cannot be performed. After the reboot
continue with the remaining steps.
The Authentication Configuration > Step 1 of 2 web page appears.
Click Next. The Authentication Configuration > Step 2 of 2 web page
appears.
From the Device Default State Configuration area you can configure:
Device Access
By locking the Service Pathway (recommended) users will be
requested to authenticate to access all available services: Copy, Email, Pull Print, etc. Proceed with step A1 - A3.
Service Access
Instead of device access it is possible to control access on a perservice basis. However, Pull Print must always be locked, because
otherwise the SafeCom solution does not know who the user is.
Proceed with step B1 - B3.
Device Access to lock or unlock tools and features for all users:
A1.
A2.
A3.
D60705-21
Under Device Default State Configuration, next to Device Access, click

Configure.
Select Locked for Services Pathway to require authentication for all
services at the control panel. If is recommended to leave the Job Status
Pathway and Machine Status Pathway unlocked. They control the access
to the Job status and the Machine Status button.
Click Apply to accept the changes or Undo to retain the previous settings.
18
Service Access to lock, unlock or hide individual services for all users:
B1.
B2.
B3.
D60705-21
Under Device Default State Configuration, next to Service Access, click

Configure.
Select Locked (Show Icon) for Pull Print so users must authenticate to
access the Pull Print icon on the control panel. Select Locked to require
authentication for any additional services. Print should remain unlocked.
19
2.2
Xerox ColorQube 92xx and 93xx

User name
Password
2.2.1
Set up the printer

1.
2.
2.2.2
admin
1111
Click on General Setup on the menu. Skip to section 2.2.2 if Extensible
Service Setup is in the menu. Otherwise visit www.xerox.com search for
Custom Services (EIP). Read the instructions carefully, download the DLM
file that matches your printer model and perform a manual upgrade
(5.2.10).

1.
2.
3.
4.
5.
certificate is established, proceed to section 2.2.3.
Complete the details required for the Self Signed Certificate. Note that
the Letter Country Code is a required field.
Note: If you are able to enter Days of Validity, PLEASE NOTE that the
maximum number of days allowed are 997 (for models where you can
enter 3 digits) and 1800 (for models where you can enter 4 digits).The
maximum number indicated (999 and 9999 respectively) will not create
the certificate.
6.
D60705-21
Click Apply. You will need the Device Administrator Password to apply
the certificate.
20
2.2.3

1.
2.
3.
2.2.4

1.
2.
3.
2.2.5
Check Export password to Extensible Browser.
Check Enable the Extensible Services Browser.
Check Verify server certificates.
Click Apply.

1.
2.
3.
4.
5.
D60705-21
Click Connectivity, Protocols, and then HTTP in the menu. Select the
Web Services tab and select Enable next to Extensible Service
Registration.
Click Apply.
Setup Extensible Service on the printer

1.
2.
3.
4.
5.
6.
2.2.6
Click Connectivity, Protocols, and then HTTP and check that Secure
Click OK.
Click Security, Access Rights, and then Tools & Feature Access on the
menu.
Under Presets select Custom Access. Choose if the users must
authenticate to use the features by locking or unlocking each feature. If
you set Service Pathway to Unlocked or Lock, all features underneath is
set to the same. Remember that Pull Print and Billing must be locked in
order to work.
Click Apply.
Click OK when the properties have been saved.
21
2.2.7

1.
2.
3.
4.
5.
6.
7.
8.
9.
2.2.8
Click Security, Access Rights and then Setup on the menu.
The Authentication Configuration web page appears. In the Current
Configuration area click the Edit Methods button for Authentication.
In Device User Interface Authentication select Xerox Secure Access
Device.
Click Save to return to the Authentication Configuration web page.
In the Current Configuration area click on the Configure button for
Device User Interface Authentication - Xerox Secure Access.
Click the Manually Configure button.
Click Xerox Secure Access Device + alternate on-screen authentication
method to allow logging in by entering an ID code on the printers control
panel. A button labeled Alternate Login is displayed on the Instructional
Blocking Window.
Click Save.

1.
2.
3. Configure the device (3.4).
1.
2.
3.
4.
D60705-21
Controller (4.4).
22
2.3

User name
Password
2.3.1
Set up the printer

1.
2.
2.3.2
admin
1111
Click Services on the menu. Skip to section 2.4.2 if Custom Services is in
the menu. Otherwise visit www.xerox.com search for Custom Services
(EIP). Read the instructions carefully, download the DLM file that matches
your printer model and perform a manual upgrade (5.2.10).

1.
2.
3.
4.
5.
certificate is established, proceed to section2.3.3.
Select the Select Self Signed Certificate option if not already selected.
the certificate.
6.
D60705-21
the certificate.
23
2.3.3

1.
2.
3.
4.
5.
2.3.4

1.
2.
3.
4.
2.3.5
Click Connectivity, Protocols and then HTTP in the menu.
Click Web Services at the top of the page. Select Enable next to
Extensible Service Registration.

1.
2.
3.
4.
5.
6.
7.
8.
9.
D60705-21
Click Connectivity, Protocols and then HTTP and check that Secure
Click Apply.
Click Security, Access Rights and then Tools & Feature Access.
Under Presets, select Custom Access.
Set Services Pathway to Locked if you want SafeCom to authenticate for
all services and continue to step 9. Otherwise select Unlocked.
Click Next to continue.
Select the services you wish to have locked by the SafeCom
authentication system. The service named Pull Print has to be set to
either Locked or Hidden.
Select whether or not color copying is allowed on the printer.
This setting only applies when using the printers Local Login, so it does
not matter what is selected here.
Click Finished.
24
2.3.6

1.
2.
3.
4.
5.
6.
7.
8.
2.3.7
Click Security and Access Rights. Click Setup submenu.
In Authentication Configuration click Next.
In the Xerox Secure Access window, click the Next button.
For the setting Device User Interface Authentication click Edit.
Click Manually Override Settings.
Under Device Login Methods select:
Xerox Secure Access Device Authentication to allow logging in by card.
Or
Xerox Secure Access Device Authentication + alternate on-screen
authentication method to allow logging in by entering an ID code on the
printers control panel.
Click Save.

With this model SafeCom must be enabled with the SafeCom
Controller(Chapter4):
1.
2.
3.
4.
D60705-21
Controller (4.4).
25
2.4

User name
Password
2.4.1
Set up the printer

1.
2.
2.4.2
admin
1111

1.
2.
3.
4.
5.
the certificate.
6.
7.
8.
D60705-21
the certificate.
Click OK.
26
2.4.3

1.
2.
3.
4.
2.4.4
Enable web services

1.
2.
2.4.5
Click Connectivity, Protocols and then HTTP in the menu. Select the
Web Services tab and check that all Web Services are enabled.

1.
2.
3.
4.
5.
6.
7.
8.
9.
2.4.6
Click Services, Custom Services and then Custom Services on the menu.
Confirm that the SSL is enabled. Otherwise return to section 2.4.2.
Select Enabled in the Enablement area and then click Apply.
Go to Security and then click Authentication Configuration in the menu
Click Edit next to Access Setup Wizard.
Select whether or not color copying is allowed on the printer.
This setting only applies when using the printers Local Login, so it does
not matter what is selected here.
Click Finished.

1.
2.
3.
4.
5.
6.
7.
8.
D60705-21
Click Security and Access Rights. Click Setup submenu.
In Authentication Configuration click Next.
In the Xerox Secure Access window, click the Next button.
For the setting Device User Interface Authentication click Edit.
Or
Click Save.
27
2.4.7

With this model SafeCom must be enabled with the SafeCom Controller
(Chapter4):
1.
2.
3.
4.
2.5
Controller (4.4).

User name
Password
2.5.1
admin
1111

1.
2.
3.
4.
5.
6.
7.
2.5.2

1.
2.
3.
4.
5.
D60705-21
Click Security and then Security Certificates. If a certificate is
established, proceed to section 2.5.2.
Click Add.
Select Create Xerox Device Certificate.
Click Continue.
Complete the form with the requested information.
Click Finish. You will need the Device Administrator Password to apply
the certificate.
HTTPS is Enabled on port 443.
Click Apply.
28
2.5.3

1.
2.
3.
4.
2.5.4

1.
2.
3.
4.
5.
6.
2.5.5
Click Security, Authentication and then Tools & Feature Access.
Under Presets, select Custom Access.
Click Apply.
Enable copy locking using SafeCom copy cable

1.
2.
3.
2.5.6
Click Connectivity, Protocols and then HTTP in the menu.
To access the relevant web page on the Xerox device use the following
URL, replacing xxx.xxx.xxx.xxx with the IP address of the Xerox device:
http://xxx.xxx.xxx.xxx/diagnostics/holdFdiPrintJobs.php
(if prompted for login, then log in as administrator)
On the web page clear the Hold Foreign Device Interface Network Print
Jobs checkbox.
Click Apply.
Enable extensible services browser

When running with a controller based SafeCom Go Xerox the Enable the
Extensible Services Browser needs to be enabled, otherwise it is not possible
to choose pull print at the printer.
1.
2.
3.
2.5.7
Under Browser Settings check the Enable the Extensible Services
Browser, and click Apply.

D60705-21
29
1.
2.
3.
4.
5.
6.
7.
8.
2.5.8
Click Security and Authentication. Click Setup submenu.
In Authentication and Authorization Methods click Edit Methods
For the setting Device User Interface Authentication select Xerox
Secure Access. Click Save.
Scroll to Xerox Secure Access Setup and click Edit
Or
Click Save.

1.
2.
1.
2.
3.
4.
2.6
Controller (4.4).
Xerox ColorQube 87xx, 89xx

User name
Password
2.6.1
admin
1111

D60705-21
30
1.
2.
3.
4.
5.
6.
7.
8.
Open the printers web page and go to the Properties tab.

Expand Security and then Certificates. If a certificate is established,
proceed to section 2.6.2.
Click Security Certificates.
Go to the Xerox Device Certificate tab.
Select Create New Xerox Device Certificate.
Click OK to the message that Secure HTTP (SSL) must be disabled and
then enabled.
Complete the form with the requested information.
Click Finish. You will need the Device Administrator Password to apply
the certificate.
2.6.2

1.
2.
3.
4.
2.6.3

1.
2.
3.
4.
2.6.4
Open the printers web page and go to the Properties tab. Refer to
Expand Connectivity, Protocols and then HTTP in the menu.

1.
2.
3.
4.
5.
6.
7.
D60705-21

Expand Connectivity, Protocols and then HTTP.
In the Secure HTTPS section select Enabled.

Click Security, Authentication and then Setup.
Next to the Xerox Secure Access Setup click Edit. The User
Permissions page opens.
On the User Permissions page, next to the Non-Authenticated User click
Edit. The Manage User Permissions (Non-Authenticated User) page
opens.
On the Manage User Permissions (Non-Authenticated User) page click
Services & Tools at the top of the page.
Under Presets click Custom. Select the services you wish to have locked
by the SafeCom authentication system. The service named Pull Print has
to be set to either Not allowed or Hidden.
Click Apply.
31
2.6.5
Enable extensible services browser

When running with a controller based SafeCom Go Xerox the Enable the
Extensible Services Browser needs to be enabled, otherwise it is not possible
to choose pull print at the printer.
1.
2.
3.
2.6.6

Expand General Setup and then Extensible Service Setup.
Under Browser Settings check the Enable the Extensible Services
Browser, and click Apply.

1.
2.
3.
4.
5.
6.
2.6.7

Expand Security and Authentication, and then select Setup.
Scroll to Xerox Secure Access Setup and click Edit
Or
Click Save.

(Chapter4):
1.
2.
3.
4.
Controller (4.4).
D60705-21
32
2.7
Xerox WorkCentre 52xx, 72xx, 73xx and 74xx

The Device Administrator username and password is required to log in:
2.7.1
74xx
User name
Password
admin
1111
73xx, 72xx,
52xx
11111
x-admin
Set up the printer

1.
2.
2.7.2
Xerox printer
Create certificate and enable SSL on the printer

1.
2.
3.
4.
D60705-21
33
5.
the certificate.
6.
7.
8.
9.
2.7.3
the certificate.
Click Security and then SSL / TLS Settings in the menu and confirm that
HTTP - SSL / TLS Communication is enabled.
Click OK.
Enable custom services

1.
2.
3.
4.
Select Enabled in the Enabled area and then click Apply.
The Custom Services button should now be present on the touch-screen
of the printer when All Services is selected. If not, you may have to power
cycle the printer.
Note: If changes were made to the SSL settings, you may have to power
cycle the printer.
2.7.4
Enable ports
1.
2.
3.
2.7.5
D60705-21
Click the Connectivity and then Port Settings.
Check SNMP, SMB, FTP Client and SOAP.

1.
2.
3.
4.
5.
Click Security and then click Authentication Configuration in the menu
Ensure that Xerox Secure Access is selected in the Login Type box.
Click Apply.
6.
7.
Click Security and then click Authentication Configuration in the menu.
34
8.
Click Next.
9.
From the Device Default State Configuration area you can configure:
Device Access
requested to authenticate to access all available services: Copy, Email, Custom Services, etc. Proceed with step A1 - A3.
Service Access
Instead of device access it is possible to control access on a perservice basis. However, Custom Services must always be locked,
because otherwise the SafeCom solution does not know who the
user is. Proceed with step B1 - B3.
A1.
A2.
A3.

Configure.
B1.
B2.
B3.
2.7.6

Configure.
Select Locked (Show Icon) for Custom Services so users must
authenticate to access the Pull Print icon on the control panel. Select
Locked to require authentication for any additional services..

1.
2.
3.
4.
2.7.7
Access Settings.
Check Local Login to allow logging in by entering an ID code on the
Click Apply.

D60705-21
35

1.
2.
1.
2.
3.
4.
2.7.8
Controller (4.4).
Allow device error messages to appear on 73xx

On the 73xx series the Auto Job Promotion feature prevents dialogs with
device error messages (paper out, paper jam, etc.) from being displayed to the
user. To have the messages appear follow these steps to disable Auto Job
Promotion.
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
D60705-21
Go to the Xerox printer.

Press the Key button to log in.
Log in as local administrator.
Press the Settings button.
Tap the Tools tab.
In Group choose Common Service Settings.
Under Features choose Other Settings
Tap Auto Job Promotion.
Tap Change Settings.
Tap Disable.
Tap Save.
Press the Key button and select Logout.
36
2.8

User name
Password
2.8.1
Set up the printer

1.
2.
2.8.2
admin
1111
Click on General Setup on the menu. Skip to section 2.8.2 if Extensible
Service Setup is in the menu. Otherwise visit www.xerox.com search for
Custom Services (EIP). Read the instructions carefully, download the DLM
file that matches your printer model and perform a manual upgrade
(5.2.10).

1.
2.
3.
4.
5.
the certificate.
6.
D60705-21
the certificate.
37
2.8.3

1.
2.
3.
2.8.4

1.
2.
3.
2.8.5
Web Services tab and select Enable next to Extensible Service
Registration.
Click Apply.

1.
2.
3.
4.
5.
6.
7.
2.8.6
Click OK.
Click Security, Access Rights and then Tools & Feature Access on the
menu.
Under Presets select Custom Access and make your selections.
Make sure that Local UI Tools & CWIS Properties Tab is set to Locked,
otherwise it is not possible to log in with code.
Make sure that Pull Print is set to Locked.
Click Apply.
Click OK when the properties have been saved.

1.
2.
3.
4.
5.
6.
7.
D60705-21
Click Security, Access Rights and then Setup on the menu.
The step 1 of 3 windows appears.
If this is the first time you have configured authentication, click Next
otherwise, click Edit Methods.
In Device User Interface Authentication select Xerox Secure Access
Device.
Under Web User Interface Authentication, select Locally on the Device
(Internal Database).
Under Authorization, select Locally on the Device (Internal Database).
Click Next.
38
2.8.7

(Chapter4):
1.
2.
3.
4.
2.9
Controller (4.4).

User name
Password
2.9.1
admin
1111

1.
2.
3.
4.
5.
the certificate.
6.
D60705-21
the certificate.
39
2.9.2

1.
2.
3.
2.9.3

1.
2.
3.
4.
6.
7.
8.
9.
10.
11.
12.
2.9.4
Click General Setup and then Custom Service Setup.
In the Setup (Required) area, for Custom Service Registration, click on
the [Configure] button to display the HTTP: Web Services web page.
In the Remote System Management area:
Check Custom Service Registration and
Check Device Configuration.
In the Security Area:
Check Xerox Secure Access.
Click Save.
Click OK.
In the Enable Custom Services area:
Check Export passwords to Custom Services.
In the Browser Settings area:
Check Enable the Custom Services Browser.
Check Verify Server Certificates.
Click Apply.
Click OK.

1.
2.
3.
4.
5.
6.
7.
D60705-21
Click Apply.
Click Security and then Authentication Configuration on the menu.
Click on the Edit Methods/Configure button for Authentication.
In Device User Interface Authentication select Xerox Secure Access.
Under Web User Interface Authentication, select Locally on the Device
(Internal Database).
Under Authorization, select Locally on the Device (Internal Database).
Click Save.
40
2.9.5

1.
2.
3.
4.
2.9.6
Click Security and then Authentication Configuration on the menu.
Or
Click Save.

1.
2.
1.
2.
3.
4.
D60705-21
Controller (4.4).
41
2.10

User name
Password
admin
1111
2.10.1 Set up the printer

1.
2.
Click General Setup on the menu.
Note: On older 56xx with firmware 21.133.xxx.xxx you need to click
Services instead of General Setup.
Skip to section 2.10.2 if Custom Services is in the menu. Otherwise visit
www.xerox.com search for Custom Services (EIP). Read the instructions
carefully, download the DLM file that matches your printer model and
perform a manual upgrade (5.2.10).
2.10.2 Create certificate and Enable SSL on the printer

1.
2.
3.
4.
5.
certificate is established, go to step 7.
the certificate.
D60705-21
42
6.
7.
8.
the certificate.
Click OK.
2.10.3 Enable custom services on the printer

Note: If your 56xx is an older one with firmware 21.113.xxx.xxx you need to
proceed as described in 2.10.1.
1.
2.
3.
Click General Setup and then Custom Service Setup on the menu.
2.10.4 Enable web services on the printer

1.
2.
Web Services tab and check that all Web Services are enabled.
2.10.5 Configure authentication and access control on the printer

1.
2.
3.
4.
5.
6.
7.
8.
9.
D60705-21
Go to Security and then click Authentication Configuration in the menu.
Ensure that Xerox Secure Access is selected under Device User Interface
Authentication.
Click Apply.
Go to Security and then click Authentication Configuration in the menu.
Click Next.
From here you can configure:
Device Access
Service Access
43
A1.
A2.
A3.

Configure.
Click Save.
B1.
B3.

Configure.
Select Locked/Visible for Custom Services so users must authenticate to
authentication for any additional services.
Click Save.
10.
Click Finished.
B2.
2.10.6 Allow login by code on the printer

1.
2.
3.
4.
5.
6.
Confirm that the Device User Interface is set to Xerox Secure Access.
Click Next.
Click Edit next to Device User Interface Authentication.
Check Enable alternate access via on-screen keyboard to allow logging
in by entering an ID code on the printers control panel.
2.10.7 Set custom services as the default entry screen

1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
D60705-21
Go to the Xerox printer.

Press the Access button to log in.
Tap Login and enter the user name and pin.
Tap Tools Pathway.
Tap Screen Defaults.
Tap Entry Screen.
Tap Features.
Tap Save.
Tap Feature Defaults and Priority Order.
Scroll down then select Custom Services and promote it to the top.
Tap Save.
Exit Tools.
44
2.10.8 Add the device in SafeCom Administrator

(Chapter4):
1.
2.
3.
4.
Controller (4.4).
2.10.9 Enable custom services (EIP) on older 56xx

1.
2.
3.
4.
5.
2.11
Open the printers web page and click the Properties tab.
Confirm that the SSL is enabled. If not then return to step 6 in
section2.10.2.
The Custom Services button should now be present on the touch-screen
of the printer when All Services is selected. If not, you may have to
power cycle the printer.
Xerox Workcentre 53xx

User name
Password
admin
1111

1.
2.
Click General Setup on the menu.
Note: On older 53xx with click Services instead of General Setup.
2.11.2 Create certificate and enable SSL on the printer

D60705-21
45
1.
2.
3.
4.
5.
the certificate.
6.
7.
8.
9.
the certificate.
Click Security and then SSL / TLS Settings in the menu and confirm that
HTTP - SSL / TLS Communication is enabled.
Click OK.
2.11.3 Enable extensible services and extensible services browser

1.
2.
3.
4.
In the Setup (Required) area, click Configure.
Select Extensible Services and click Apply.
Note: Other services are enabled by default.
5.
6.
7.
8.
D60705-21
Click OK.
In the Enable Extensible Services area, check the Export password to
Extensible services checkbox.
In the Browser Settings area, check the Enable Extensible Services
Browser checkbox.
Click Apply.
46

1.
2.
3.

Access Settings.
The Xerox Secure Access Settings web page appears.
4.
5.
6.
Check Enabled for Local Login.

Click Apply.

1.
2.
1.
2.
3.
4.
D60705-21
Controller (4.4).
47

1.
2.
3.
4.
5.
6.
7.
8.
9.
D60705-21
The Authentication Configuration> Step 1 of 2 web page appears. In
Login type select Xerox Secure Access.
Click Apply.

The Authentication Configuration > Step 1 of 2 web page appears.
Click Next. The Authentication Configuration > Step 2 of 2 web page
appears.
From the Access Control area you can configure:
Device Access
Service Access
48
A1.
A2.
A3.
Under Access Control, next to Device Access, click Configure.

B1.
B2.
B3.
D60705-21
Under Access Control, next to Service Access, click Configure.

Select Locked (Show Icon) for Pull Print so users must authenticate to
authentication for any additional services. Print should remain unlocked.
49
2.12

User name
Password
admin
1111

WorkCentre Pro 2xx requires EIP hardware (2.12.7)!
1.
2.
Click Services on the menu. Skip to section 2.12.2 if Custom Services is
in the menu. Otherwise visit www.xerox.com search for Custom Services
2.12.2 Create certificate and enable SSL on the printer

1.
2.
3.
4.
5.
Click Security and then SSL on the menu. View the Machine Digital
Certificate area and confirm that the Current Status of the Machine
Digital Certificate indicates that the printer does not have a Certificate
established on the printer. If a certificate is established go to step 7.
the certificate.
6.
7.
8.
D60705-21
the certificate.
Confirm that the SSL Protocol is enabled on port 443 in the Configure
SSL area. If not, then select the box and click Apply.
Click OK.
50

1.
2.
3.
4.
5.
The Custom Services button should now be present on the touch-screen of
the printer when All Services is selected. If not, you may have to power
cycle the printer.

1.
2.
3.
Click Security, Authentication Server and then General on the menu.
Under Feature Coverage there are two options:
All Features: This makes SafeCom control all features on the

printer, making the printer completely locked until a user is logged
in. Furthermore, the fact that SafeCom controls all services, gives
the user a more consistent user experience,
Scanning Features Only: This leaves the copying screen open, but
will still demand login for other services, e.g. Email and Custom
Services (and SafeCom Pull Print).
Note: It is recommended to select access control All Features. Selecting

Scanning Features Only leaves the copy function with no access control.

1.
2.
3.
Click Security, Authentication Server and then General on the menu.
Scroll to Login Initiation and check Allow Local User Interface Initiation
to allow logging in by entering an ID code on the printers control panel.

(Chapter4):
1.
2.
3.
4.
D60705-21
Controller (4.4).
51
2.12.7 Check EIP hardware on WorkCentre Pro 2xx

The Xerox EIP hardware is
located on the rear top left
side and it is connected with
a USB cable to the formatter
on the rear bottom left side.
D60705-21
52
2.13
Xerox Phaser 3635MFP

User name
Password
admin
1111

Phaser 3635MFP may require EIP hardware!
To establish whether your Phaser 3635MFP is EIP ready, look at the
Configuration Report under the Web Services section: If Custom Services is
not listed here your Phaser 3635MFP is not EIP ready.
1.
2.
3.
Click Services on the menu.
If after the manual upgrade Custom Services is still not in the menu,
please contact Xerox to find out if additional hardware is needed.
2.13.2 Enable USB card reader

1.
2.
3.
4.
5.
At the printer, log in with administrator credentials.

Press the Machine Status button.
Select the Tools tab, then User Interface, then General, then SFO.
Go to SFO 35 and select it, then press the Enable button. The SFO 35
now indicates Yes.
Save and log out.
Note: The only way to establish whether the USB card reader is enabled is to
verify that the SFO 35 reads Yes.
2.13.3 Create certificate and Enable SSL on the printer

D60705-21
53
1.
2.
3.
4.
5.
6.
7.
8.
Click Security and then Machine Digital Certificate on the menu. View
the Machine Digital Certificate area and confirm that the Current Status
of the Machine Digital Certificate indicates that the printer does not
have a Certificate established on the printer. If a certificate is
established, go to step 7.
the certificate.
the certificate.
Click OK.

1.
2.
3.
Click Services and then Custom Services on the menu.
Confirm that the Customer Services is enabled. Click Apply. Otherwise
return to section 2.13.3.

(Chapter 4):
1.
2.
3.
4.
Controller (4.4).

1.
D60705-21
54
2.
3.
4.
5.
6.
Click Security, Authentication and then Authentication in the menu.

Ensure that Require Network Authentication is selected under Setup.
Ensure that Xerox Secure Access is selected under General.
Click Apply.
A machine reboot MUST occur.

1.
2.
3.
4.
D60705-21
Click Security, Authentication and then Authentication in the menu.
Ensure that Allow Local User Interface Initiation is selected under Login
information to allow logging in by entering an ID code on the printers
control panel.
Click Apply.
55
3 SafeCom Device Server
SafeCom Device Server

SafeCom can be enabled either via the SafeCom Device Server or via the
SafeCom Controller. In the following it is covered how SafeCom is enabled via
SafeCom Device Server.
Note: SafeCom can so far only be enabled via the Device Server on models
Xerox WorkCentre 71xx, 74xx, and 75xx (Refer to table 1 - SafeCom Go Xerox
supported printers and requirements in section1.2).
In this chapter the following topics are covered:
D60705-21
Install SafeCom Device Server (3.1)

Configure SafeCom Device Server (3.2)
Add device to the SafeCom Device Server (3.3)
Configure device in SafeCom Device Server (3.4)
56
3.1
Install SafeCom Device Server

Pre-requisite:
Make sure the SafeCom G3 Server software installation has been

completed as described in SafeCom Smart Printing Administrators Quick
Guide D10600.
The SafeCom Device Server REQUIRES Java Runtime Environment (JRE)

version 1.6 or later. It can run on the same physical hardware as the
SafeCom Server. If SafeCom Device Server is installed on a 64-bit
operation system, a Java version 32 bit needs to be installed. JRE can
be downloaded from www.java.com.
Install SafeCom Device Server:
1.
2.
Download the safecom_device_server_nnn.exe file from the link supplied

to you. The installation must be Run as administrator. When the
installation program is launched click Next.
Choose the destination folder for the files. Click Next.
The default installation folder is:
C:\Program Files\
SafeCom\SafeCom Device Server
On Windows 64-bit:
C:\Program Files (x86)\
SafeCom\SafeCom Device Server
3.
4.
5.
6.
D60705-21
Click Next.
Detecting Java version. Click Next.
Review settings before copying of files starts. Click Next.
Click Finish.
57
3.1.1
Windows Firewall - Ports that must be opened

If Windows Firewall is enabled it may prevent the SafeCom solution from
working. Disable the firewall or run the script below.
1.
2.
Browse to the SafeCom Device Server installation folder.

Right-click open_firewall_safecom_device_server.cmd. The command file
must be Run as administrator. In the file you can see what TCP and UDP
ports will be opened.
You can also manually ensure that the port numbers below are open.
SafeCom
Server
TCP
7500
7700
UDP
5742
Web
Browser
SafeCom
Device Server
TCP
8080
TCP
80
443
50003
UDP
161
D60705-21
TCP
8080
50002
TCP
9100
TCP
Inbound on SafeCom Device Server
Protocol
8080
50002
Web browser and MFP

Device
HTTP
HTTPS
UDP
Inbound on SafeCom Device Server
Protocol
161
Used to register notifications
SNMP
TCP
Outbound on SafeCom Device Server
Protocol
443
7500
7700
50003
Used to contact MFP during operation

SafeCom Server (Job Server)
SafeCom Server (Job Server)
Device
HTTPS
SafeCom
SafeCom
HTTPS
UDP
Protocol
5742
SafeCom Server (Broadcast Server)
SafeCom
TCP
Protocol
9100
Used for printing
RAW
58
3.2
Configure SafeCom Device Server

The SafeCom Device Server must be configured manually to reference the right
SafeCom Server. This is done by adding the SafeCom Server in the SafeCom
Device Server. Furthermore a list of failover SafeCom Servers can be set up.
3.2.1
Log in to SafeCom Device Server

To log in to SafeCom Device Server:
1.
Open a web browser and enter the server address (IP address or
hostname) for the device server followed by :8080/safecom in the
address field.
Example: http://localhost:8080/safecom
Note: Use of JavaScript (Active Scripting) must be enabled.
2.
3.
3.2.2
Add SafeCom Server

1.
2.
D60705-21
Enter Username (default is admin) and Password (default is nimda).

Click OK. If a Limited access dialog opens, click OK.
Open a web browser and log in to the SafeCom Device Server (3.2.1).
Click Device Server in the menu to the left.
59
3.
4.
5.
6.
Under SafeCom Servers, click the [+] icon to add a failover SafeCom
Server.
Enter the server address and click OK. To add localhost as the server,
leave the Address field blank and click OK.
Add the additional failover servers to the list and organize them
according to the order in which the failover should progress, using the up
and down arrows.
Click Save.
The SafeCom Server is now added, and the next step is to add a device to the
device server (3.3).
3.3
Add device to the SafeCom Device Server

There are two ways of adding a device to the SafeCom Device Server:
3.3.1
Via the SafeCom Administrator (3.3.1)

Via the SafeCom Device Server web page (3.3.2)
Add device via the SafeCom Administrator

Before adding a device server device in SafeCom Administrator a SafeCom
Device Server must be added to the Device server container in the left menu.
If the device server is already added in the SafeCom Administrator, go to Add
device server device below.
Add device server
1.
2.
Start SafeCom Administrator.

Log in to the server by double-clicking its group name listed to the left.
Note: In a multi-server installation, best practice is to make sure that
the device server references the slave server.
3.
4.
5.
Enter User logon (default is ADMIN) and Password (default is nimda).

Right-click the Device servers container and select Add device server...
Enter the IP address or hostname of the device server and if necessary a
note. Click Add.
Note: To delete the device server again you right-click the device server and
select Delete device server.
The SafeCom Device Server is now added to SafeCom Administrator and you can
now add a device.
D60705-21
60
Add device server device

1.
2.
D60705-21
Click the Devices container, right-click the content area and then Add
device. The Add device wizard is now launched.
From the Device server drop down menu, select the SafeCom Device
Server and click Next.
3.
Information is retrieved from the device server to establish the status of

device server. Click Next.
4.
Enter the Printer address (the device IP address or host name) and click
Next.
5.
Information is then retrieved from the device. Click Next.
61
6.
Now select SafeCom Go Xerox as the type of device and click Next.
7.
Enter the username and password, as specified on the device web page
and click Next.
The device properties dialog now opens. Make sure to specify on the
Settings tab the device server and the properties of the device (duplex
and color supported).
8.
9.
D60705-21
Click Add to register the device and save it in the database. After approx.
2 minutes the device is added to the device server and available to be
configured in SafeCom Device Server.
62
The device server device is now added and listed both under Devices and under
the device server under Device servers with the name SafeCom Device Server.
Note: After approx. 2 minutes the printer is added to the SafeCom Device
Server and you can see on the SafeCom Device Server webpage.
10.
D60705-21
Now proceed to configure SafeCom Go Xerox in the SafeCom device

server. (3.4)
63
3.3.2
Add device via the SafeCom Device Server

1.
2.
3.
Click Device Server in the left menu.

Click the Add device
button and the Add device wizard launches.
Enter the hostname or the IP address of the device. Click Next.
4.
Information is retrieved from the device to establish the type of device.

In the OperatorPassword field you MUST enter the same password that is
used to access the device web page.
5.
6.
Click Finish.
Click the Save
button.
Note: The device is now added to the SafeCom solution, but it does not appear
in the SafeCom Administrator before a user logs in at the device.
D60705-21
64
3.3.3
Device icons
Once the devices are added in the SafeCom Device Server the following device
icons represent the status of the devices.
User is logged in at the device.
Device is idle, no user logged in.
Wait for at least 2 minutes. If the warning signal is gone, the printer is
now configured. If the warning signal remains, the printer cannot be
configured because, for example the SSL is not on, or another device
server is trying to configure the printer.
An error occurred.
The printer is receiving print data.
Device server cannot contact the printer.
D60705-21
65
3.4
Configure device in SafeCom Device Server

The Device tab is used to configure SafeCom Go Xerox with regards to which
device it is connected to, how users are to be identified etc.
To save any changes you make to the configuration, click Save in the upper
right corner of the web page.
Expect between 60 and 90 seconds for the saved changes to take effect if they
involve changes to select settings like the Login method. During the update the
device icon has a yellow warning sign
and the device shows the text: Now
Remote Operating. Please do not turn off the Power.
D60705-21
66
Change the settings according to the following descriptions:
Login method: This determines how users log in. Choose between:
o
Auto-sense (default). Auto-sense maps to Card or Windows if an ID
device is connected to the MFP and on printers it maps to Card.
Otherwise it maps to ID code. Mapping changes within 10 seconds
after the ID device is either connected or disconnection. If it does
not change a restart of the device may be required.
o
ID code
o
Card
o
Card or ID code
o
Card or Windows: Allows the user to log in by either card or by
entering their Windows username, password, and domain.
o
Keypad only relevant if an external keypad is connected.
Note: Identification by card requires connecting a USB ID Device (card
reader). The option Card or Windows allows the user to log in by either
card or by entering their Windows username, password, and domain. The
SafeCom G3 server must be a member of the domain or trusted by the
domain.
Idle timeout: Users are automatically logged out after 60 seconds if

there's no activity. Idle timeout is not controlled within the SafeCom
solution. To change the idle timeout setting, go to the devices webpage
or change the setting on the device itself.
Enable post tracking: This is relevant only with SafeCom Tracking. Refer
to SafeCom G3 Administrators ManualD60603
Address: The IP address of the device.
SNMP Put Community name: This must match the SNMPGet Community
Name if this is different from public. By default SNMP GetCommunity
name is public.
RAW print port: The TCP port used to send print data.
Contact and Location: Provides useful information in maintaining the

SafeCom solution.
Description and Manufacturer: These fields are automatically filled-in

and together with Location they are also viewable in the Device
properties dialog in SafeCom Administrator.
Drivers: When Pull Printing, SafeCom compares the driver name

embedded in the print job with its list of driver names. If no match is
found and if Show fidelity warning is checked in the Server properties in
the SafeCom Administrator, the document appears with a question mark
[?] in the document list. This way the user is warned that fidelity is low
and the document may print incorrectly.
o
D60705-21
Click Get All to obtain the list of drivers from the SafeCom Server,
or add and delete drivers manually.
67
D60705-21
Device Properties:
o
OperatorName: Specify the user name with which the administrator
can log in to device. The default is set to admin.
o
OperatorPassword (mandatory):Specify the device password with
which the administrator can log in to device. By default there is no
device password set.
o
LockJobStatusPathway: Set property value to 'true' to require users
to log in in order to see the job status on the device. Set to 'false' if
you want to allow users to see the job status without logging in
first. The default value is 'skip' which means that the job status is
shown according to the settings on the device.
o
LockMachineStatusPathway: Set property value to 'true' to require
users to log in in order to see the machine status on the device. Set
to 'false' if you want to allow users to see the machine status
without logging in first. The default value is 'skip' which means that
the machine status is shown according to the settings on the device.
o
LockFeaturesPathway: Set property value to 'true' to require users
to log in in order to see the features available on the device. Set to
'false' if you want to allow users to see the features available
without logging in first. The default value is 'skip' which means that
the features available are shown according to the settings on the
device.
o
OverrideLanguage: This property key is used if you need SafeCom
Device Server to override the language on the device. Change the
property value to the language that you want to override any other
language settings on the device using the postfix, e.g. "de" for
German (refer to1.5).
o
DefaultDomain: Specify a default domain. When users log in at the
device the Domain field is then pre-filled with the specified
domain.
o
HideDomain: Set the property value to True to not require users to
enter the domain when they log in to a device.
o
CheckEIPStatus: Default property value is 'true' which means that
SafeCom Go automatically checks if the devices is EIP enabled. This
might cause trouble during the configuration, in which case the
property value can be set to 'false'.
o
BillingEnabled: Set to True in order to enable the Account icon on
the device. Set to False to remove the Account icon from the
device display.
Enable logging: Select if log information should be collected.
Restore factory default: Set all settings to their default value. Except
from the password.
Reconfigure device: Reference the device to the current SafeCom Device

Server.
68
3.4.1
Check device properties

If the device was added via the SafeCom Device Server (3.3.2) it was also
added to the SafeCom solution and appears in the list of devices in SafeCom
Administrator.
To update the device properties in the SafeCom Administrator:
1.
2.
3.
4.
5.
6.
7.
8.
D60705-21
Click Start, point to All Programs, SafeCom G3, and click SafeCom
Administrator.
In SafeCom Administrator click on the server to log in.
Open the list of devices. If the device you added is not present press F5
to refresh the list. Double-click the device to open the Device properties
dialog.
On the Settings tab make the appropriate changes. Make sure that the
Home server and Device server are specified and that Duplex supported
and Color supported is set correctly.
On the Charging scheme tab select the appropriate charging scheme.
On the License tab check the appropriate licenses.
Click OK.
69
4 SafeCom Controller
SafeCom Controller
In the following it is covered how to enable SafeCom via SafeCom Controller.
In this chapter the following topics are covered:
4.1
Install SafeCom Controller

1.
2.
3.
4.
4.1.1
Install SafeCom Controller (4.1)

Connect hardware (4.2)
Add device in SafeCom Administrator (4.3)
Enable copy tracking (4.4)
Make sure the SafeCom G3 Server software installation has been

completed as described in SafeCom Smart Printing Administrators Quick
Guide D10600.
In SafeCom Administrator use Add device to add the SafeCom
Controller. Remember to select SafeCom Go Xerox as the type of device.
Configure the Xerox web interface (4.5).
Write down the IP address of the printer

The IP address can normally be found in the printers control panel and on the
configuration page. Refer to the printers manual.
IP address /
hostname:
Note: The SafeCom Controller MUST reference the Xerox printer by a fixed IP
address or a fixed fully qualified hostname. Example: myxerox.safecom.eu.
D60705-21
70
4.2
Connect hardware
Make sure that the SafeCom software installation has been completed before
you connect the hardware. When powered up, the hardware automatically
discovers the server software.
serial port
test button
USB host
USB
device
LAN
network port
power
Figure 1 SafeCom Controllers rear panel

1.
2.
3.
4.
5.
6.
4.3
Switch off the power to the printer.

Connect a network cable to the LAN port on the rear panel of the
SafeCom Controller. Connect the other end of the cable to the network.
Connect a network cable to the printer. Connect the other end of the
cable to the SafeCom Controllers other network port.
Connect the SafeCom Controller and the optional SafeCom Card Reader.
Connect the power supply to the SafeCom Controller. When you power
on, you must wait approx. 1 minute while SafeCom initializes.
Switch on the power to the printer.
Add device in SafeCom Administrator

The SafeCom Controllers LAN light changes from flashing to on when an IP
address is set. Next you need to determine the IP address of the SafeCom
Controller so you can add it to the SafeCom solution.
D60705-21
Find IP address via broadcasting

Use SafeCom Administrator and its Broadcast function. However, if the
SafeCom Controller is on a different VLAN broadcasting will not work. In
such cases you may have to configure the SafeCom Controller with a
static IP address and gateway.
Find IP address in the DHCP server

Log in to the DHCP server and look up the assigned IP address based on
the MAC address. The MAC address of the SafeCom Controller is printed
on the white label on the bottom of the SafeCom Controller. The MAC
address is a 12-digit hexadecimal number. Example: 00C076FF00F2.
71
1.
2.
3.
Start SafeCom Administrator.

Log in to the server by double-clicking its Group name listed to the left.
IP address known from DHCP server:

4a.
Click Add device and proceed to step 7.
Find it via Broadcasting:
D60705-21
4b.
5.
6.
Click on the Find button and select Devices.

Click Broadcast
Right-click on the SafeCom Controller in the list and click Add device.
7.
The Add device wizard is launched.

Enter the IP address of the SafeCom Controller. Click Next.
8.
Information is retrieved from the device to establish the type of device.

Click [change] as the SafeCom type needs to be changed from Other
(SafeCom Controller) to Xerox.
72
D60705-21
9.
Select Xerox as the type of device. Click Next.
10.
Enter the Printer address (IP address or host name) of the Xerox printer
connected to the SafeCom Controller. Click Next.
73
11.
12.
Information is retrieved from the Xerox printer. Click Next.

Enter the User name and Password of the Xerox printer. Click Next.
The default values are:
Table 3 Device Administrator Password
92xx, 77xx
76xx, 75xx, 74xx,
Xerox printer
71xx, 64xx,
57xx, 56xx,
36xx, 2xx
User name
admin
Password
1111
73xx, 72xx,52xx
11111
x-admin
13.
On the Settings tab specify the properties of the device (Duplex

supported and Color supported).
14. Click Add to register the device and save it in the database.
After approx. 1 minute the SafeCom Controller has restarted and you can verify
the connection to the Xerox printer by pressing the test button once on the
SafeCom Controller's rear panel.
After the restart the SafeCom Pull Print icon should appear on the printers
control panel. On the 2xx and 56xx printers, the Pull Print icon will be under
the Custom Services menu.
Note: If the Pull Print icon does not appear restart the Xerox printer, and wait
until it has restarted completely. Then restart the SafeCom Controller.
4.4
Enable copy tracking

By default copy tracking is disabled. To manually enable copy tracking, follow
these steps:
1.
2.
3.
D60705-21
Open the SafeCom Controllers Printer web page (4.5.4).

Change Copy Enabled to YES and click Save and Continue.
Click Restart.
74
Note: Tracking of E-mail and scan is not supported, and Copy jobs are only
tracked if the SafeCom license includes SafeCom Tracking. (See 8.2)
4.5
SafeCom Go Xerox Controller Web Interface

The SafeCom Go Xerox web interface is shared with the SafeCom Controller and
consists of multiple web pages, some of which can be password-protected. Most
web pages include online help. The web interface is available in English.
4.5.1
Log in to the SafeCom Controller Web Interface

1.
2.
Open a web browser and enter the IP address of the SafeCom Controller
in the address field. Use of JavaScript (Active Scripting) must be enabled.
Click Advanced Configuration to open the Advanced Configuration web
page (4.5.2).
Note: If a password is set you will be prompted for the password.
4.5.2
Advanced configuration web page

The Advanced Configuration web page can be accessed from the link on the
SafeCom Controller opening page. If the page is password-protected you will be
prompted for a user name and password.
D60705-21
75
4.5.3
SafeCom web page

The SafeCom web page can be opened from the Advanced Configuration web
page (4.5.2) by clicking on SafeCom.
SafeCom Group Name, SafeCom Server Address and SafeCom Server Port
Number must be specified for the SafeCom Controller to work. It is possible to
specify multiple SafeCom servers for the purpose of failover. The SafeCom
Controller will attempt to contact the servers in their order of appearance.
If the IP Address is 0.0.0.0 the SafeCom Controller will send a broadcast on the
Broadcast subnets.
Front End Language. The default language is English.
Front End Identification determines how users are identified. It can be
CODE_CARD (default), CODE, CARD or Windows_Auth.
The Front End Timeout defaults to 60 seconds. Users will be logged out if they
do not perform an operation on the Xerox printers touch-screen or buttons for
this period.
D60705-21
76
4.5.4
Printer web page

The Printer web page can be opened from the Advanced Configuration web
page (4.5.2) by clicking on Printer.
Select Network Port 9100 if the SafeCom Controller connects to the printer
via the network.
Printer IP Address must be that of the Xerox printer.
Use auto-configuration should normally be set to YES allow the SafeCom
Controller to automatically determine the Printer Manufacturer and Print
Model.
Printer Manufacturer should be XEROX.
SafeCom Go must be YES.
D60705-21
77
Force logout1.When Force Logout is enabled SafeCom Go Xerox can send a
request to the Xerox device asking it to logout the user. This means users can
logout by card instead of going through a key press sequence consisting of up to
4 steps (depending on model).
Copy Enabled must be YES if you wish SafeCom to track the number of copies.
Requires a SafeCom Tracking device license.
Copy Idle Timeout. When the printer has been idle for this timeout the
SafeCom controller automatically logouts the user. Idle timeout = 0 means no
timeout.
High Speed Print Enabled should be YES to allow faster printing. With high
speed print the print speed is comparable to that of printing the document
directly to the printer rather than via the SafeCom Controller.
Note: High Speed Print is ignored if the document is sent as encrypted.
Note: With High Speed Print enabled in environments where users are allowed
to do both Push and Pull printing, there is a potential risk that the user
standing at the device printing and copying experience that other users' Push
Prints are printed in between jobs.
Post Tracking will cause tracking data to be adjusted to reflect the actual
number of mono and color pages printed.
Drivers. When Pull Printing SafeCom will compare the driver name embedded
in the print job with its list of driver names. If no match is found the document
will appear with a question mark [?] in the document list. This way the user is
warned that fidelity is low and the document may print incorrectly.
D60705-21
Force Logout was introduced in SafeCom Go Xerox version S80 508.780*25.
78
5 SafeCom Go Xerox How to
SafeCom Go Xerox How to

The following subsections contain step-by-step instructions for some of the
administrators common tasks for:
SafeCom Go Xerox on Device Server (5.1)

SafeCom Go Xerox on Controller (5.2)
5.1
SafeCom Go Xerox on Device Server
5.1.1
Enable Plug-in Settings on device web page

For the card reader to work, the plug-in settings must be activated on the
device web page:
1.
2.
3.
4.
5.
6.
7.
5.1.2
Open the device web page and log in with device username and password.
Click the Properties tab and then Security in the left menu.
Click Plug-in Settings and then Plug-in Settings again.
Make sure to enable Plug-in Settings by selecting the checkbox Enabled.
Click Apply.
Reboot the Xerox device.
Go to List of Embedded Plug-ins and make sure that the SafeCom plug-in
(SafeCom HID Reader Provider) is activated. If not, select the plug-in and
click Start.
Select login method

To set the method of user identification:
1.
2.
3.
Click on Device server in the left-hand menu, and then click on the
device.
In the Login method drop down menu under SafeCom Settings, select
how users must identify themselves at the device.
Choose between:
Auto-sense (default)
ID code
Card
Card or ID code
Card or windows
5.1.3
Register device
Register the device with the SafeCom solution in one of the following ways:
D60705-21
Add the device in the SafeCom Administrator, using the Add device
function.
Log in at the device, if the user has Technician or Administrator rights.
79
5.1.4
Restore factory default

1.
2.
Click Restore factory default at the bottom of the web page.
The factory default values are:

Configuration
settings
Device Settings
SafeCom Settings
Network Settings
Device Information
Drivers
Device Properties
D60705-21
Field
Model
MAC Address
Device Message
Login Method
Idle timeout
Post tracking
Address
SNMP Get Community
SNMP Put Community
RAW print port
Contact
Location
Description
Manufacturer
OperatorName
OperatorPassword
LockJobStatusPathway
LockMachineStatusPathway
LockFeaturePathway
OverrideLanguage
DefaultDomain
HideDomain
CheckEIPStatus
Default value
Auto-sense
60 seconds
Cleared (No)
Device IP address
Public
Private
admin
1111
skip
skip
skip
None
false
true
80
5.1.5
Uninstall SafeCom Go Xerox

To uninstall the SafeCom Go Xerox software from the device:
1.
2.
3.
4.
Click Device server in the menu and select the device from which the
SafeCom Go solution must be uninstalled.
Click the Delete icon in the top menu to uninstall.
Click Save.
5.2
SafeCom Go Xerox on Controller
5.2.1
Specify SafeCom server and printer connection

1.
2.
3.
4.
5.
Open the Advanced Configuration web page (4.5.2).

Click SafeCom (4.5.3) and enter the SafeCom Server address (Hostname
or IP address). It is possible to specify multiple SafeCom servers for the
purpose of failover. The SafeCom Controller will attempt to contact the
servers in their order of appearance. If the SafeCom server is clustered
you must specify the address of the virtual server. Click Save and
Continue.
Click Printer and check Network Port 9100.
Enter the Printer IP address.
Click Save and Continue.
Click Restart.
After approx. 1 minute the SafeCom Controller has restarted and you can make
a settings printout.
5.2.2
Set password to prevent unauthorized access

To prevent unauthorized access to the SafeCom Controllers configuration we
recommend that you change the password from the default: adm. To disable
security, change the password back to adm.
1.
2.
3.
4.
5.

Click Password.
Enter the Old Password, New Password and Verify Password. The
password is maximum 8 characters.
Click Restart.
Warning: Make sure to store the password in a secure place. If you forget the
password you need to return the SafeCom Controller to SafeCom a/s for
unlocking.
D60705-21
81
5.2.3
Assign a fixed IP address to the SafeCom Controller

The IP address can be assigned via DHCP (dynamic or fixed) or manually. The
steps below describe how to assign a fixed IP address via the SafeCom
Controller web interface.
1.
2.
3.
4.
5.
5.2.4

Click TCP/IP.
Check Manual and enter the IP address etc.
Click Restart.
Register device
The device can be registered when a user with Technician or Administrator
rights has logged in at the device. Once the device is registered it will appear
in the SafeCom Administrator. The device is also registered when you add it in
SafeCom Administrator.
Note: You can use the built-in Technician account TECH with the default PUK
code 12345678 and default PIN code 1234.
5.2.5
Restore factory default

You can either restore settings by holding down the SafeCom Controller's test
(4.1) button for 8 seconds, or from the SafeCom Controller web interface:
1.
2.
5.2.6
Uninstall SafeCom Go Xerox

1.
2.
3.
5.2.7

Click Restore Factory Default.
On the SafeCom Controller Printer web page (4.5.4) change SafeCom Go

to No. Click Save and Continue. Click Restart.
Go through the various screens and reset the values. Apply changes and
reboot the printer.
Make all printing go through SafeCom

1.
2.
3.
Open the printers web page.

Click the Properties tab.
Click Security and then IP Filtering on the menu.
Refer to the Xerox printers documentation for additional information.
D60705-21
82
5.2.8
Enable force logout

1.
2.
3.
4.
5.
5.2.9

Click Printer.
Change Force logout to YES.
Click Restart.
Resend configuration
If a device added in the SafeCom Administrator is not configured correctly, or if
the device must be reconfigured to a different server, it is possible to resend
the configuration details (Server address and Group name) to the device.
1.
2.
Browse to Devices in the SafeCom Administrator.

Right-click the device and click Resend configuration.
The configuration details are now sent to the device and the configuration is
successful when the message "Server is reconfigured" appears.
Note: The Resend configuration functionality does not work with devices that
are SafeCom enabled via the device server.
5.2.10 Manually upgrade DLM File.

1.
2.
3.
4.
Click Services, Machine Software, and then Manual Upgrade on the
menu.
In the Manual Upgrade section browse to where the
InstallCustomServices.dlm is located.
Select the file and then click the green Install Software button.
5.2.11 Configure multiple SafeCom Controllers

Chapter 13 in SafeCom G3 Administrators ManualD60603 describes how
SafeCom Device Utility can be used to set the configuration on multiple
SafeCom Controllers.
D60705-21
83
6 Set up network accounting
Set up network accounting
6.1
Xerox WorkCentre 7120 and 7125

Enable Xerox Network Accounting:
1.
2.
3.
4.
5.
6.
6.2
Log in as a local administrator on the device control panel.

Press the Machine Information button.
Tap the Tools tab, then Accounting, and then Accounting Type.
In the Accounting Type setup, tap Network accounting.
Tap Save.
In the Tools menu, tap the Key button and accept to logout from the
device.
Xerox ColorQube 92xx and 93xx

1.
2.
3.
4.

Press the Machine Information button.
Tap the Tools tab, then Accounting setting, and then Accounting Mode.
In the Accounting Mode setup, tap Network accounting.
Disable prompts for accounting codes:

5.
6.
7.
8.
9.
D60705-21
Tap Customize Prompts.

Change the dropdown list to Display No Prompts.
Tap Save.
Tap Save.
In the Tools menu, tap the Key button and accept to logout from the
device.
84
6 Set up network accounting
6.3

1.
2.
3.
4.
5.
Click Accounting and then Setup.
Click Edit.
Change Current Accounting Method to Network Accounting.
Click Save.
Disable Code Entry Validation:

6.
7.
8.
9.
10.
11.
12.
13.
6.4
On the row User Accounting Prompts / Validation click Edit.

In the section Code Entry Validation click Disabled.
Click Save.
Click Security and then Authentication and then Setup.
On the row Xerox Secure Access Setup, click Edit.
Click Manually Override.
In the section Accounting Information (Requires Network Accounting)
click Automatically apply Accounting Codes from the server.
Click Save.
Xerox WorkCentre 56xx and

WorkCentre Pro 2xx
1.
2.
3.
4.
5.

Tap Tools Pathway.
Tap Access and Accounting.
Tap Authentication Mode.
Under Network Accounting tap On, tap Save.
Disable Network Accounting Authentication:

6.
7.
8.
9.
10.
D60705-21
Tap Tools Pathway.

Tap Access and Accounting.
Tap Network Accounting Setup.
Tap Network Accounting Authentication.
Select Disable and Save.
85
7 Using SafeCom Go Xerox
Using SafeCom Go Xerox
7.1
Xerox WorkCentre 71xx, 74xx, and 75xx
7.1.1
Login
The login sequence is initiated if you are not already logged in and taps any
icon that requires SafeCom to handle the printer authentication.
The recommended login sequences are described in the following.
Login with card:
1.
Use card reader.
Login with card and PIN code:

1.
2.
3.
Use card reader.

Enter PIN code on the keypad or touch-screen.
Tap Enter.
Login with ID code:

1.
2.
3.
Tap Keyboard Access.

Enter Code on the keypad or touch-screen.
Tap Enter.
Login with ID code and PIN code:

1.
2.
3.
4.
5.

Enter Code on the touch-screen.
Tap Enter.
Tap Enter.
Login with Windows:

If Front End Identification (4.5.3) is Windows_Auth it is possible to log in by
either using your card or entering your Windows logon credentials:
1.
2.
3.
Tap Username and enter Username on the touch-screen. Tap OK.

Tap Password and enter Password on the touch-screen. Tap OK.
Tap OK.
Note: Username and Password cannot be blanks.
D60705-21
86
7.1.2
Pull Print - Document list

Access the Document list that allows you to print individual documents.
1.
Tap Pull Print.
Documents appear in chronological order with the newest at the top of the list.
The number preceding the document title is the cost of the document. A
delegated print is marked with a preceding D. Tap the Info button to see
information about who delegated the document. A retained document has a
preceding R. A group print document has a preceding G. If Print all at login is
checked any documents pending collection will be printed first.
Note: The document list does look slightly different from the above.
On the touch-screen there are the following options:
Print all: Prints all documents, excluding any retained documents.

Documents are printed in chronological order (oldest first).
Refresh: Updates the list of documents with pending documents that has
finished spooling after the user logged in.
Back: Returns to the previous screen.
Print: Prints the selected documents.
Retain: The selected documents remains on the list (server) after they
have been printed. When a document has been retained it is specified in
the list with an R preceding the document title.
Delete: Deletes the selected documents.
Info: See information about the selected documents, including cost,
driver name, use of color and duplex.
Copies: Request multiple copies of a document. Print all always prints
one copy of each document.
Note: The maximum number of multiple documents that can be selected at

once for printing, deletion, or retention is 48.
D60705-21
87
7.1.3
Copy
Tap the Copy icon to copy the documents placed in the automatic document
feeder (ADF).
7.1.4
Logout
There is a configurable Timeout that defaults to 60 seconds. The logout
process is initiated if no buttons are taped for this period.
To logout actively:
Note: Logout by card is possible on Xerox firmware that supports the Force
Logout request.
7.1.5
Register card at device with Windows credentials

1.
2.
3.
4.
5.
7.1.6
Use the card reader.

Tap Exit to get to the registration with Windows credentials.
Enter Windows user name and tap Enter.
Enter Windows domain and tap Enter.
Enter Windows password, tap Enter and the card is now registered.
Register card with PUK code

Use the card reader and if the card is unknown and there is an available PUK
code in the SafeCom system the user is asked to register with PUK and PIN
code.
Enter PUK code and PIN code:
1.
2.
3.
4.
D60705-21
Enter PUK code on the keypad or touch-screen.

Tap Enter.
Tap Enter and the card is now registered.
88
7.2
Xerox WorkCentre 76xx and 77xx
7.2.1
Control panel
D60705-21
89
7.2.2
Login
Login with card:
1.
Use card reader.

1.
2.
3.
Use card reader.

Tap Enter.
Login with ID code:

1.
2.
3.

Tap Enter.

1.
2.
3.
4.
5.

Tap Enter.
Tap Enter.
Login with Windows:

2.
2.
3.

Tap OK.
D60705-21
90
7.2.3

1.
Tap Pull Print.
The number preceding the document title is the cost of the document. If Print
all at login is checked any documents pending collection will be printed first.

Retain: The selected documents remain on the list (server) after they

D60705-21
91
7.2.4
Copy
Tap the Copy icon to copy the documents placed in the automatic document
feeder (ADF).
7.2.5
Logout
process is initiated if no buttons are taped for this period.
To logout actively:
Note: Logout by card is possible on Xerox firmware that supports the Force
Logout request.
7.2.6

The user goes to the printer and uses the card reader. If the card is unknown
and there is an available PUK code in the SafeCom system the user is asked to
register with PUK and PIN code.
1.
2.
3.
4.
D60705-21

Tap Enter.
Tap Enter.
92
7.3
Xerox WorkCentre 52xx, 72xx, 73xx and 74xx
7.3.1
Control panel
7.3.2
Login
Login with card:
1.
Use card reader.

1.
2.
3.
Use card reader.

Tap Enter.
Login with ID code:

1.
2.
3.

Tap Enter.

1.
2.
3.
4.
5.
D60705-21

Tap Enter.
Tap Enter.
93
Login with Windows:

1.
2.
3.
4.
5.
Tap
Tap
Tap
Tap
Tap
Keyboard Access.
Username and enter Username on the touch-screen. Tap OK.
Password and enter Password on the touch-screen. Tap OK.
Domain and enter the domain using the keypad or touch-screen.
OK.
D60705-21
94
7.3.3

1.
Tap Pull Print.



D60705-21
95
7.3.4
Copy
Press the Copy button to copy the documents placed in the automatic
document feeder (ADF).
7.3.5
Logout
process is initiated if no buttons are taped for this period. To logout actively:
7.3.6

The user goes to the printer to log in by using a card (if card reader is
connected). If the card is unknown and there is an available PUK code in the
SafeCom system the user is asked to register with PUK and PIN code.
1.
2.
3.
4.
D60705-21

Tap Enter.
Tap Enter.
96
7.4
7.4.1
Control panel
7.4.2
Login
Login with card:
1.
Use card reader.

1.
2.
3.
Use card reader.

Tap Enter.
Login with ID code:

1.
2.
3.

Tap Enter.

1.
2.
3.
4.
5.
D60705-21

Tap Enter.
Tap Enter.
97
Login with Windows:

1.
2.
3.
4.
3.

Tap Username and enter Username on the touch-screen.
Tap Password and enter Password on the touch-screen.
If prompted, enter the domain in the Domain field.
Tap OK.
Note: Username and Password cannot be left blank.
7.4.3

1.
2.
3.
Tap All Services.

Tap Custom Services.
Tap Pull Print.
checked any documents pending collection will be printed first
D60705-21
98


D60705-21
99
7.4.4
Copy
7.4.5
Logout
1.
2.
3.
4.
7.4.6
Press the Key button.

Tap YES to leave Custom Services.
Press the Key button.
Tap YES to logout.

1.
2.
3.
4.
D60705-21

Tap Enter.
Tap Enter.
100
7.5
7.5.1
Control panel
7.5.2
Login
Login with card:
1.
Use card reader.

1.
2.
3.
Use card reader.

Tap Enter.
Login with ID code:

1.
2.
3.

Tap Enter.

1.
2.
3.
4.
5.

Tap Enter.
Tap Enter.
Login with Windows:

1.
2.
3.

Tap OK.

D60705-21
101
7.5.3

1.
2.
3.
Tap All Services.

Tap Custom Services.
Tap Pull Print.
On the touch-screen, there are the following options:


D60705-21
102
7.5.4
Copy
7.5.5
Logout
7.5.6

1.
2.
3.
4.
D60705-21

Tap Enter.
Tap Enter.
103
8 Troubleshooting
Troubleshooting
8.1
SafeCom Help Desk Assistant

We want your SafeCom solution to be one that reduces not only print costs, but
is also easy to support. In the following you will find useful troubleshoot hints.
The most common problems reported by end-users have been compiled into an
online SafeCom Help Desk Assistant available at safecom.eu/help
8.2
Copy jobs are not tracked

Please check the following:
8.3
On the SafeCom Controllers Printer web page (4.5.4) Copy Enabled is

YES.
In SafeCom Administrator Tracking is checked on the License tab in the
Device properties dialog.
In SafeCom Administrator cost control is set to Tracking or Pay on the
Settings tab in the User properties dialog.
No communication between SafeCom

controller and printer
Please check the following:
8.4
Has the SSL certificate on the printer expired?
Cannot access properties tab on printers web

page
If you cannot access the Properties tab on the printers web page it is most
likely because the installed certificate is not valid or expired. A certificate can
be used from its Valid from date. It has been reported that the Valid from date
is 1 hour later than the time the certificate was generated. You may therefore
have to wait 1 hour before the generated certificate can be used. To work
around the problem try changing the machine time back while issuing the self
signed certificate and then set it correctly again once the certificate has been
applied but before HTTPS is enabled (2.1.2).
D60705-21
104
8 Troubleshooting
8.5
At the printer: Cannot access the Tools menu

On Xerox devices that are based on Fuji Xerox engines, users with
Administrator or Technician rights cannot access the Tools menu with the
SafeCom login. On these devices users must log in in locally in order to access
the Tools menu.
The following Xerox devices are based on Fuji Xerox engines:
WorkCentre 52xx,72xx, 73xx, 74xx
WorkCentre 71xx
WorkCentre 550/560
8.6
At the printer: Error message:

"Communication error" at login
If the network is lost or disconnected, on a device with card reader, when a
user is logging out, then the Controller and Xerox device sometimes get out of
sync.
When the next user attempts to log in the error message "Communication error"
appears followed by a "Please wait logging out".
The device now hangs, but this can be fixed by swiping the card.
8.7
SafeCom Device Server: "Unable to configure

device because: Device is configured against a
different server"
When making changes to the configuration of the device server device and the
Device Message field shows the message "Unable to configure device because:
Device is configured against a different server", it is because the device is
configured to a different server.
In order to make changes to the device configuration, you must first click
Reconfigure device which configures the device to your server, make the
necessary changes, and then click Save.
D60705-21
105
8 Troubleshooting
8.8
Error when upgrading existing Device Server

installation
The following error might appear when upgrading an existing Device Server
installation:
"Error in action StopWindowsService"
The following must be completed before running the installer again:
1.
Kill the installer process with the following command:

taskkill /F /IM scDeviceServer.exe
2.
Stop the SafeCom Device Server Service with the following command:
net stop scDeviceServer
3.
Start the SafeCom Device Server again with the following command:
net start scDeviceServer
4.
D60705-21
Re-run the SafeCom Device Server installer.
106
9 Regulatory information
Regulatory information
WARNING NOTE: This equipment has been tested and found to comply with the
limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These
limits are designed to provide reasonable protection against harmful
interference in a residential installation.
This equipment generates, uses and can radiate radio frequency energy and, if
not installed and used in accordance with the instructions, may cause harmful
interference to radio communications. However, there is no guarantee that
interference will not occur in a particular installation. If this equipment does
cause harmful interference to radio or television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try
to correct the interference by one or more of the following measures
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to
which the receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.
CAUTION: Changes or modifications not expressly approved by SafeCom a/s
could void the users authority to operate this equipment according to part 15
of the FCC rules.
This equipment generates, uses, and can radiate radio frequency energy and if
not installed and used in accordance with the instruction manual, may cause
interference to radio communications. It has been tested and found to comply
with the limits for a Class A computing device pursuant to Subpart B of Part 15
of FCC Rules, which are designed to provide reasonable protection against such
interference when operated in a commercial environment. Operation of this
equipment in a residential area is likely to cause interference in which case the
user will be required to take whatever measures may be required to correct the
interference at his own expense.
CE conformance: This product has been developed and produced in accordance
with the EMC directive and the Low Voltage directive and therefore carries the
CE mark.
EMCdirective: This product observes the rules and regulations of the EMC
directive. If so required, a declaration of conformity in local language
stipulating the applied rules and regulations can be obtained.
D60705-21
107
10 Index
10
Index
Access Control List, 82
ACL, 82
Password, 81
Patent, 2
Post track, 67
Document history, 11
Firewall, 58
Fixed IP address, 82
Help Desk Assistant, 104
High speed printing, 78
Host access list, 82
ID code, 67
Manuals, 10
Network Accounting, 14
D60705-21
Register device
SafeCom Controller, 79, 82
Regulatory information, 107
SafeCom Go Xerox, 7, 14
Printer firmware, 8
SafeCom Help Desk Assistant, 104
System requirements
SafeCom Go Xerox, 7
Tracking data adjustment, 67
Trademarks, 2
Windows Firewall, 58
108

Safecom Go Xerox Administrators Manual 60705

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Safecom Go Xerox Administrators Manual 60705

Uploaded by

Copyright:

Available Formats

SafeCom Go Xerox

Install SafeCom Go Xerox ......................................................................... 14

Configure authentication and access control on the printer ..... 54

SafeCom Device Server ............................................................................ 56

SafeCom Controller ................................................................................. 70

SafeCom Go Xerox How to ...................................................................... 79

Set up network accounting ....................................................................... 84

Using SafeCom Go Xerox .......................................................................... 86

Register card at device with Windows credentials ................. 88

Troubleshooting ................................................................................... 104

Regulatory information .......................................................................... 107

Index ................................................................................................. 108

Table 1 SafeCom Go Xerox supported Xerox printers and requirements

AWID Reader [R]

Xerox global print driver

SafeCom Smart Printing Administrators Quick Guide D10600

SafeCom G3 Administrators Manual D60603

SafeCom Go Xerox Administrators Manual D60705 (this manual)

SafeCom Go Xerox Users Guide D20705

About this manual

Chapter 1 Introduction lists the supplied SafeCom documentation,

Chapter 2 Install SafeCom Go Xerox describes the installation of the

Chapter 3 SafeCom Device Server describes how to install with SafeCom

Chapter 4 SafeCom Controller describes how to install with SafeCom

Chapter 5 SafeCom Go Xerox How to contains step-by-step instructions

Chapter 6 Set up network accounting describes how to setup network

Chapter 7 Using SafeCom Go Xerox describes how to interact with the

Chapter 8 Troubleshooting contains hints for troubleshooting.

Chapter 9 Regulatory information contains regulatory information.

Support for Xerox Color 550/560

SafeCom Device Server version S82 060.060*04 and SafeCom Controller

SafeCom Device Server version S82 060.060*03 and

SafeCom Device Server version S82 060.050*03 and

SafeCom Device Server version S82 060.040*05 and

SafeCom Device Server version S82 060.040*05 and

SafeCom Device Server version S82 060.020*09.

SafeCom Go Xerox version S80 508.780*52.

SafeCom Go Xerox version S80 508.780*46.

2 Install SafeCom Go Xerox

Install SafeCom Go Xerox

Authentication by ID code varies between the Xerox device series, so a

With Xerox Network Accounting enabled on the Xerox device, it is

2 Install SafeCom Go Xerox

Xerox WorkCentre 7120 and 7125, Xerox

Create certificate on the printer

Enable HTTPS on the printer

On the printer's web page, click the Properties tab.

2 Install SafeCom Go Xerox

Enable Extensible Service Registration on the printer

Set up Extensible Service on the printer

Allow login by code on the printer

Check Enabled for Local Login.

2 Install SafeCom Go Xerox

Add the device in SafeCom Administrator

If SafeCom is enabled via the SafeCom Controller:

Configure authentication and access control on the printer

2 Install SafeCom Go Xerox

Click Reboot Machine. Click OK to reboot. This reboot MUST occur

Under Device Default State Configuration, next to Device Access, click

2 Install SafeCom Go Xerox

Under Device Default State Configuration, next to Service Access, click

2 Install SafeCom Go Xerox

Xerox ColorQube 92xx and 93xx

Set up the printer