PrimeLink configuration

PrimeLink SNMP settings

Select Connectivity > Protocols > SNMP Configuration.
Make sure all four options under SNMP Properties are selected:
- Enable SNMP v1/v2c Protocols and Allow Write.
- Enable SNMP v3 Protocol and Allow Write.
When you are finished, click Apply.
Click Edit SNMP v3 Properties.

The Edit SNMP v3 Properties screen appears.
In the Administrator Account section, complete the following:
1. Turn on Account Enabled.
2. For Message Digest Algorithm, select either MD5 or SHA-1. This must match the settings for the device in DRS.
3. Enter the Authentication Password for the user listed in the User Name field.
4. For Message Encryption Algorithm, select either DES or AES-128. This must match the settings for the device in DRS.
5. Enter the Privacy Password for the user listed in the User Name field.
In the Print Drivers / Remote Clients Account section, click Reset if you need to reset to the default password.

Note:
The Message Digest Algorithm and Message Encryption Algorithm fields match the settings in the Administrator Account section.
Click Apply.

Select Connectivity > Protocols > HTTP.

The HTTP screen appears.
Set the following options on the HTTP screen:
1. For the Secure HTTP (SSL) field, select Enabled.
2. Set the Secure HTTP Port Number field to 443.
3. Click Apply.
Select Security > SSL / TLS Settings.

The SSL / TLS Settings screen appears.
Set the following options on the SSL / TLS Settings screen.
1. For the HTTP - SSL/TLS Communication field, select Enabled.
2. Set the HTTP - SSL/TLS Communication Port Number field to 443.
3. For the Protocol Version field, select the version of TLS for your network.
4. Click Apply.

Select General Setup > Extensible Service Setup.

The Extensible Service Setup screen appears.
In the Extensible Services Registration field, click Edit.

The Extensible Services Registration screen appears.
Click Enable All.

When a message indicates Your request has been successfully processed, click OK.
Under Browser Settings, make sure Enable the Extensible Services Browser is selected.
Click Apply.

You can configure the device to require users to authenticate themselves to access services at the control panel. To lock, unlock, or hide services:

Select Security > Authentication Configuration.
Click Next.
In the Access Control section under Service Access, click Configure.
If you want to control access to all services, do either of the following:
- To require authentication for all services, click Lock All.
- To allow unauthenticated access for all service, click Unlock All.
To set the access for individual services, select the required access:
- Locked (Show Icon): Require authentication for the service at the control panel. The service icon is visible to all users.
- Locked (Hide Icon): Require authentication for the service at the control panel. The service icon is hidden until an authorized user logs in.
- Locked: Use this option to hide the service so that it is not available at the control panel.
- Unlocked: Use this option to allow access to the service without authentication.
Click Apply.

Select Security > Device Digital Certificate Management.

The Upload Signed Certificate screen appears.
Click Choose File.
Select the certificate you exported from DWS and click Open.

The certificate file name appears next to the Choose File button.
Click Import.
Select Security > Certificate Management.
For the Category field, Trusted Certificate Authorities.
Select Display the list and make sure the certificate is listed and indicated as Valid.
Select Security > Certificate Revocation Settings and make sure the fields are set as follows:
- Level of Certificate Verification: Low
- Retrieval of Certificate Status: By Retrieving CRL
- Send Query to OCSP Responder With: URL as Specified in Certificate
Select Setup > Extensible Service Setup > Browser settings > Verify server certificate.