Thank you for purchasing the Authorized Send software application. Please read this manual thoroughly before operating the product on your MEAP-enabled machine to familiarize yourself with its capabilities, and to make the most of its many functions. After reading this manual, store it in a safe place for future reference.

How to Use This Manual

This manual assumes that the reader has a good understanding of MEAP (Multifunctional

Embedded Application Platform). This manual does not provide instructions for using or operating the Authorized Send application. For instructions on using the Authorized Send application, see the

Authorized Send User’s Guide for imageRUNNER Machines.

Symbols Used in This Manual

The following symbols are used in this manual to explain procedures, restrictions, and instructions that should be observed for safety.

IMPORTANT Indicates operational requirements and restrictions. Be sure to read these items carefully to operate the machine correctly, and avoid damaging the machine. for a procedure. Reading these notes is highly recommended.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 7

Keys and Buttons Used in This Manual

Keys for using the machine’s main functions are located on the top of the touch panel display. To use any of the desired function’s features, you must first press the key or application tab for the desired function. Press [ ] (arrow key) to access installed MEAP applications.

On the MEAP Application screen, there may be several application tabs that you can select.

Select only the proper tab for the application that you want to use.

The default application tab for Authorized Send is:

NOTE

The default tab name can be customized, and therefore the Authorized Send tab could have a different name.

8 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

The following key and button names are a few examples of how keys and buttons to be pressed and clicked are represented in this manual:

Touch Panel Display Keys: [Key Name]

Examples: [Scan]

[Cancel]

Control Panel Keys:

Examples:

Key Icon (Key Name)

~ (Start)

(Stop)

Buttons on Computer Operations Screens: [Key Name]

Examples: [Install]

[OK]

Displays Used in This Manual

Most screen shots used in this manual are those taken when Authorized Send is being installed using MEAP SMS (Service Management Service), or when Authorized Send is running on the Color imageRUNNER C5185, unless otherwise specified.

The keys/buttons you should select or click are marked with a circle, as shown below. When multiple keys/buttons can be selected on the screen, all keys/buttons are circled.

Example:

Select the [Authorized Send] radio button ➞ click [Start].

Select these buttons for operation

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 9

Abbreviations and Terms Used in This Manual

The following abbreviations are used in this manual.

Abbreviation

ADF

DFS

FQDN

HID

HTTP

HTTPS

KDC

LAN

LDAP

LMS

MEAP

MEAP device

NTLM

Printable ASCII

SMS

SMTP

SSL

STRING

UDP

URL

Definition

Active Directory

Automatic Document Feeder

Distributed File System

Distinguished Name

Fully Qualified Domain Name

Human Interface Device

Hypertext Transfer Protocol

Hypertext Transfer Protocol Secure

Internet Protocol

Key Distribution Center

Local Area Network

Lightweight Directory Access Protocol

License Management System

Multifunctional Embedded Application Platform

Supported Canon imagePRESS, imageRUNNER, or

Color imageRUNNER multifunctional machine featuring embedded MEAP technology.

NT LAN Manager

These characters are from ‘ ’ (space) up to and including

‘~’ (tilde) on the ASCII table (the decimal values for the characters, x , are: 32 (space) ≤ x ≤ 126 (tilde)).

Service Management Service

Simple Mail Transfer Protocol

Secure Sockets Layer

A set of consecutive characters that the user is able to input into a text box. If input into a text box is required, a string consisting of all spaces is not valid.

User Datagram Protocol

User Interface

Uniform Resource Locator

Hyperlinks

When this manual is in its native PDF form, the blue underlined text represents a hyperlink to the corresponding sections of this manual or to external Web sites.

For example: See Chapter 1, “Overview,” on p. 13.

Likewise, all entries in the Table of Contents are hyperlinks.

10 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Legal Notices

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 11

This page is intentionally left blank.

12 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Chapter 1 Overview

Authorized Send is a customized MEAP application. It should be installed and operated on a

Canon MEAP-enabled device, and provides authenticated scan to e-mail, scan to fax, and scan to folder functionalities. Authorized Send does not require the user to be authenticated to use the native functions of the machine, such as Copy, Print, and Scan, and does not interfere with any of these functions.

MEAP (Multifunctional Embedded Application Platform) is a software platform embedded in Canon imageRUNNER and imagePRESS machines that enables the development of custom applications, which run alongside native functions, such as Copy, Print, and Scan.

MEAP, developed by Canon, is based on Sun Microsystems’ Java and Java 2 Micro Edition technology.

“MEAP device” is a MEAP-enabled Canon imageRUNNER or imagePRESS that is running the Authorized Send application. It may also be referred to as “MEAP imageRUNNER” or

“machine.” imageRUNNER machines are the Canon imageRUNNERs, Color imageRUNNERs, and imagePRESS multifunctional machines.

Authorized Send is designed to perform the following functions once configured from the

Authorized Send Configuration servlet:

• Authenticate against an LDAP server.

• Ability to disable LDAP authentication.

• Authenticate to an address book server anonymously.

• Retrieve a user’s e-mail address and home directory.

• Search the LDAP address book server for e-mail addresses.

• Browse a network for valid share folders.

• Provide the ability to configure preset shares.

• Scan and send a document to a valid e-mail address, networked folder, or fax server.

• Enables a System Administrator to control the features that are available to a user.

• Enables a System Administrator to set default values for the Scan to E-Mail function.

• If activated, enables the use of the Searchable PDF, Encrypted PDF, and Compact PDF modes.

• Logs error and debugging information that is generated by the application to your local hard drive and to optional remote syslog servers.

• Scan in the PDF, TIFF, TIFF(Single), and JPEG file formats.

• Create folders that do not exist dynamically (in particular, using the user’s User Name).

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 13

• Authenticate to a separate domain when scanning to a folder.

• Provide the ability to use NTLM Authentication for Scan to Folder, regardless of the authentication method used.

• Provide the ability to dynamically locate the closet available domain controller within the domain, and cache that domain controller until it becomes no longer available.

• Provide the ability to populate the User Name text box from a login application.

• Authenticate to a separate SMTP server.

• Job Build feature

• Ability to upgrade from previous versions of Authorized Send.

• MEAP Configuration Tool 1.0 compatibility.

• Ability to change the application display name.

• Ability to configure the application’s images and colors.

• Ability to alter address book search results.

• Provide USB keyboard support.

• Enables a System Administrator to configure default scan settings for each file type.

IMPORTANT

• Basic knowledge of networking and imageRUNNER/imagePRESS machines is necessary to install and configure the Authorized Send application.

• For instructions on using Authorized Send, see the

Authorized Send User’s Guide for imageRUNNER Machines.

• The device must support MEAP Spec Version 13 to use the PDF Encryption feature.

14 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Authorized Send requires the proper installation and configuration of all items documented in this guide

Failure to correctly install or configure the application will affect its operation.

If Authorized Send is not working properly, the problem can likely be traced to an installation or configuration issue. Please consult the appropriate chapters (including

Chapter 5, “Troubleshooting,” on p. 149) before contacting

Canon U.S.A.’s e-Support .

1.1.1 Hardware

Authorized Send is designed to operate on the following Canon MEAP-enabled devices using the minimum specified MEAP Contents version.

Device Family imageRUNNER 2270/2870/3570/4570

MEAP Contents

32.02 imageRUNNER 8070/9070/85+/105+ imageRUNNER 5570/5070/6570 imageRUNNER C3170 imageRUNNER 7105/7095/7086 imageRUNNER C6870/C5870 imageRUNNER C5180/C4580/C4080 imagePRESS C1 imageRUNNER C3380/C2880 imageRUNNER 3025/3030/3035/3045 imageRUNNER 5075/5065/5055 imageRUNNER C5185/C5180/C4580/C4080

(Version up) imageRUNNER C3380/C2880

(Version up) imagePRESS C7000VP/C6000VP/C6000 imageRUNNER C5058/C5068 imageRUNNER 5055/5065/5075 V2 imageRUNNER 5050 imageRUNNER

7086/7086N/7086B/7095/7095P/7105/7105B V2 imageRUNNER C2550/C3480 imageRUNNER 3225/3230/3235/3245 imagePRESS C1+

11.03

35.02

20.25

35.02

11.03

20.05

1.08

10.02

10.05

10.04

65.13

60.06

10.07

60.13

30.04

55.03

75.45

21.06

1.10

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 15

IMPORTANT

• MEAP and Use HTTP settings (from the Additional Functions screen) on the

MEAP device must be enabled. (See the Reference Guide or the appropriate e-manual that came with your machine.)

• Access to System Manager Settings (from the Additional Functions screen) on the

MEAP device is necessary.

• There must be network connectivity between the MEAP device, Active Directory servers, an e-mail server, and shared file servers.

• Inbox 99 on the MEAP device must be available for use, and without password protection.

Authorized Send communicates with the following servers:

• Supported authentication servers:

- Windows 2000 SP4/2003 SP2/2008 SP1 Active Directory

- Lotus Domino Version 7

- Novell NetWare 6.5/eDirectory 8.7 SP1 (or later)

• Supported address book servers:

- Windows 2000 SP4/2003 SP2/2008 SP1 Active Directory

- Lotus Domino Version 7

- Novell NetWare 6.5/eDirectory 8.7 SP1 (or later)

• Supported name servers:

- Windows 2000 SP4/2003 SP2/2008 SP1 (or later) DNS server

• Supported Scan to E-Mail servers:

- Microsoft Exchange Server 2000/2003/2007 SP1

• Supported Scan to Network Share servers (with the exclusion of Cluster Server environment):

- Windows Vista SP1/XP SP2/2000 SP4/2003 SP2 (or later)/2008 SP1 Local Share

- Windows Vista SP1/XP SP2/2000 SP4/2003 SP2 (or later)/2008 SP1 Domain

- Windows DFS (Distributed File System) Share

- Windows Vista SP1/XP SP2/2000 SP4/2003 SP2/2008 SP1

• The following fax servers have been tested:

- Relay Fax 6.7 by ALT-N Technologies

(In order for the Scan to Fax function to work successfully with Relay Fax, each fax number used must have a corresponding e-mail address.)

16 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Microsoft Internet Explorer 6.0 or later, with JavaScript enabled, must be installed and configured prior to installing the Authorized Send application.

KDC is necessary for running Kerberos authentication.

1.1.4 Home Directory Requirements

If the System Administrator wants to configure the Retrieve Home Directory (Active

Directory only) feature, the following three types of configurations are supported.

■

Local Share

This configuration illustrates when the home directory exists on the authentication server as a local share. No text manipulation is required, and the value entered is used exactly as is.

Home Directory as a Local Share

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 17

■ Local Path

This configuration illustrates when the home directory exists on the authentication server as a local folder.

Home Directory as a Local Path

When the home directory exists on the authentication server as a local folder, it is impossible for Authorized Send to use the text as it is. Therefore, some text manipulation is required. In this case, Authorized Send removes the leading drive letter (in this case, “C:”), and then the rest of the text is treated as a local share. In this example, “home_directories” must be a valid share name.

■

Mapped Share

This configuration illustrates when the home directory exists as a mapped share.

In this example, “fileserver” is used as the host name of the file server, and

“\home\dev\user1” is used as the share’s file path.

Home Directory as a Mapped Share

18 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

1.1.5 Distributed File System Requirements

Authorized Send supports the following two DFS (Distributed File System) roots.

■

Stand-alone DFS root

■

Domain-based DFS root

Successful domain-based DFS root support for Authorized Send requires that certain configuration settings be implemented and understood.

End users can only access the domain-based DFS roots that belong to the domain against which they were authenticated.

The authentication server created with Authorized Send’s Configuration servlet must have the Domain Name configured to match the FQDN.

IMPORTANT

If the authentication server is configured with a NetBIOS domain name, access is granted to the application; however, you will not be able to access any domain-based DFS roots.

Browsing for domain-based DFS roots are not supported. A preset share or home directory must be configured, or be manually entered in the share location.

IMPORTANT

If you configure a preset share for a domain-based DFS root, the file server must be configured with the FQDN of the Domain (i.e., If the domain name is “MyCompany.com,” then the file server must be configured with the

FQDN “MyCompany.com.” The FQDN is not case-sensitive.). This results in the domain-based DFS root’s preset share on the file server matching the authentication server’s domain name.

The first successful DFS target is used; otherwise, the end user will not be able to scan to the DFS root.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 19

The table below shows the different communication interfaces, their specific port numbers, and descriptions used with Authorized Send.

Communication Interface

NTLM

Kerberos

Port Description

Determined by AD server

Used for authentication.

UDP/TCP Port 88 Used for authentication.

SMB

TCP Port 139 and

TCP Port 445

Used for the Scan to Folder function.

20 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

1.1.7 Supported Authentication Protocols

Kerberos and NTLM are the supported protocols when communicating with a

Microsoft Active Directory server.

Simple Binding is the supported protocol when communicating with Novell eDirectory and Lotus Domino.

Anonymous Binding is the protocol reserved for communication with any of the supported address book servers (when applicable).

IMPORTANT

If Simple is selected as the authentication method and Novell eDirectory is the targeted authentication server, set the following settings on the eDirectory server:

Disable “Require TLS for Simple Binds with Password” for the LDAP Group.

Disable “Require TLS for all operations” for the LDAP Server in the Connections section.

In the Restrictions section, select [Use Low Cipher (56 or 64-bit)].

1.1.8 MEAP Application Coexistence Support

Authorized Send can coexist with other installed MEAP applications that have received verification by Canon U.S.A., Inc., provided that there are sufficient resources available on the MEAP device.

The following table shows the maximum values for MEAP resources that Authorized

Send could use in a MEAP device.

MEAP Device Resource Requirements Maximum

File space usage 25,000 KB

Memory usage

File descriptor usage

Socket usage

5,000 KB

Thread usage 50

Authorized Send has been confirmed to coexist with the following applications:

• Scan to Database 1.1

• Pharos 2.3.10 with Uniprint 8.0 (Not supported when the [Enable USB Keyboard input] check box on the Options screen is selected.)

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 21

Authorized Send must be installed on a MEAP-enabled device. There must be network connectivity between the MEAP device, DNS, authentication servers, address book servers, SMTP server, and shared file servers.

It is necessary to configure Authorized Send to communicate with the authentication servers and address book servers.

The following table lists the supported authentication servers and authentication methods.

Supported Authentication Servers Authentication Methods

Windows Active Directory NTLM, Kerberos (with or without SSL)

Novell NetWare 6.5/eDirectory 8.7 SP1 Simple LDAP (with or without SSL)

Lotus Domino v7 Simple LDAP (with or without SSL)

The following table lists the supported address book servers and binding methods.

Supported Address Book Servers Binding Methods

Windows Active Directory NTLM, Kerberos (with or without SSL)

Novell NetWare 6.5/eDirectory 8.7 SP1 Simple LDAP (with or without SSL)

Lotus Domino v7 Simple LDAP (with or without SSL)

22 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

The following illustrations represent a flow of operations for the Scan to E-Mail,

Scan to Fax, and Scan to Folder functions of the Authorized Send application.

Scan to E-Mail

The user makes an address book query from the Scan to E-Mail function on the

MEAP machine. The machine sends an LDAP query to the address book server to retrieve the desired list of e-mail addresses.

Once all e-mail addresses are verified and selected, the machine sends the e-mail message to the E-mail or SMTP server.

Scan to Fax

The user manually inputs the recipient’s fax number.

The machine sends the scanned document to the SMTP server.

The SMTP server sends the scanned document to the fax server.

The fax server sends the scanned document to the destination.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 23

Scan to Folder

The user browses for the desired folder on the file server directly from the machine.

Once the directory is found and selected, the machine sends the file to the designated location on the file server.

NOTE

When a user accesses a network share, they are authenticated against that share using their credentials. If they do not have access rights to that share, they will be prompted to enter a user name and password.

Scan to Folder with NTLM Authentication

The user logs on to the machine using one of the authentication methods.

The user browses and enters their credentials to gain access to a network shared folder using NTLM as the authentication method.

Once access is granted, the scanned document is stored in the selected folder.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Scan to a Dynamically Created Folder

The authenticated user selects a folder, enters a document name, and scans the document.

The scanned document is automatically stored in a sub-folder (that was dynamically created) of the selected folder.

Dynamic Domain Controller Location

The user tries to log on to the machine using one of the authentication methods.

The system is unable to contact the authentication server previously cached.

The system locates the next closest available domain controller.

Authentication or address book lookup is performed by the new domain controller.

The new domain controller is cached.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 25

This section shows the flow of communication protocols based on the authentication method that you select. You can configure up to 10 authentication servers.

1.2.1.1 Authentication Communication Diagrams

Kerberos Authentication

Communication Protocol LDAP/Kerberos

NTLM Authentication

Communication Protocol LDAP/NTLM

Simple Authentication

Communication Protocol LDAP/Simple

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Kerberos Communication with an Address Book Server

NTLM Communication with an Address Book Server

Simple Communication with an Address Book Server

Anonymous Bind Communication Using LDAP with an Address Book Server

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 27

This page is intentionally left blank.

28 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Chapter 2 Installing Authorized Send

This chapter describes how to install Authorized Send on a MEAP-enabled machine using the MEAP SMS program.

The System Administrator for the target MEAP device is best suited for installing the

Authorized Send application, using a networked computer that is connected to the Internet and the device.

Before installation, you must obtain the license file from www.canon.com/Meap , and have the IP address of the MEAP-enabled device.

IMPORTANT

• This chapter describes the procedure for a new installation of Authorized Send Version 4.1.

• If you want to upgrade from a previous version of Authorized Send, you must uninstall the previous version from the MEAP device before installing this version. If you are upgrading from version 3.0, 3.51, 3.52, or 4.0 you do not have to uninstall the previous version if you are using the same license file (although you still must [Stop] the program).

• Do not use the browser’s [Back] and [Forward] buttons during the installation process.

Only use the clickable links in the browser’s window.

• For more information on using SMS and uninstalling MEAP applications, see the

MEAP

SMS Administrator Guide

that came with your MEAP device.

Open a browser window ➞ enter the following URL: http://<device IP>:8000/sms https://<device IP>:8443/sms

(if you are using SSL for communications)

(Replace <device IP> with the IP address of the MEAP device.)

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 29

Enter

MeapSmsLogin

in [Password] ➞ click [Log In].

Click the [Install] tab.

The SMS Application List screen is displayed.

The SMS Install Application/License screen is displayed.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Under <Application File>, click [Browse] to the right of Path.

Navigate to the drive or directory containing the .jar file ➞ select the file ➞ click

[Open].

IMPORTANT

Make sure that you select the file that ends with the .jar extension for the application file.

Verify that the correct file was selected.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 31

Under <License File>, click [Browse] to the right of Path.

IMPORTANT

The license file must be downloaded from the LMS beforehand. For more information, contact your local authorized Canon dealer.

Navigate to the drive or directory containing the .lic file ➞ select the file ➞ click [Open].

IMPORTANT

Make sure that you select the file that ends with the .lic extension for the license file.

Verify that the correct file was selected ➞ click [OK].

The SMS Confirm Install Application/License screen is displayed.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

10.

Click [OK].

During installation, the message <Installing…Please wait a moment.> is displayed.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 33

11.

Click the [Authorized Send] radio button ➞ click [Start].

Note that the status of the Authorized Send application is <Installed> before clicking

[Start].

The status will change to <Started> if successful.

Installation is complete.

12.

Click [Log Out] to exit SMS.

34 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Chapter 3 Configuring Authorized Send

This chapter describes how to configure Authorized Send from a Web browser and set up the authentication servers, address book servers, share names, and options for the Scan to

E-Mail, Scan to Fax, and Scan to Folder functions. It also describes how to configure the application’s interface appearance using the optional Brand Configuration Tool.

The Authorized Send Configuration page contains the following items for configuring

Authorized Send: up 10 authentication servers.

E-Mail Service:

General: Configure an SMTP server.

Address Book: Configure up to 10 address book servers.

Scan to E-Mail: Configure the Scan to E-Mail settings.

Scan to Fax: Configure the Scan to Fax Settings.

Scan to Folder:

General: Configure the Scan to Folder settings.

Preset Shares: Create preset folders for users to scan to.

Options:

Logs:

Configure the optional settings.

Configure the log settings, remote syslog servers, and download and view the logs.

3.1 Flow of Configuration Operations

From the Authorized Send Configuration screen, you can configure the settings necessary to use the Authorized Send application.

Open a browser window ➞ enter the following URL: http://<device IP>:8000/AuthSendConfiguration

(Replace <device IP> with the IP address of the MEAP device.)

The Please enter Login ID and Password screen is displayed.

IMPORTANT

• Enter

AuthSendConfiguration

exactly as shown, as it is case-sensitive.

• If Portal Service is installed, you can also access the Authorized Send

Configuration screen by entering http://<device IP>:8000 ➞ click the

Authorized Send Configuration link. (Replace <device IP> with the IP address of the MEAP device.)

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 35

Enter your user name in [Login ID] and your password in [Password] ➞ click

[Login].

The default Login ID is ‘Administrator’, and the default password is ‘Admin’.

The Authentication Servers screen is displayed.

IMPORTANT

If you are using a temporary license and the license has expired, the message

Click [Add]. will be displayed. You must update your license file, or you will not be able to access the Configuration servlet.

The Create Authentication Server screen is displayed.

36 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Select the authentication method ➞ configure the settings based on the selected authentication method ➞

click [Create]. (See “Creating an Authentication Server,” on p. 49.)

The available settings vary, depending on the selected authentication method.

The Authentication Server is created, and is added to the list on the Authentication

Servers screen.

Click [E-Mail Service] ➞ [General].

The E-Mail Service screen is displayed.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 37

Configure the settings under <General Settings> ➞

click [Save]. (See “Configuring

E-Mail Service Settings,” on p. 65.)

Click [E-Mail Service] ➞ [Address Book].

The Address Book Servers screen is displayed.

Click [Add].

The Create Address Book Server screen is displayed.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Configure the settings on the Create Address Book Server screen ➞ click [Create].

The address book server is created, and is added to the list on the Address Book

Servers screen.

10.

Click [Scan to E-Mail].

The Scan to E-Mail screen is displayed.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 39

11.

Click the [Enable Scan to E-mail] check box ➞ click [Save].

If you want to restrict users to only send e-mail messages to themselves, select the

[E-mail to self only] check box.

If you want to restrict access to the [Address Book] key or the [To], [Subject],

[Body], or [File Name] text boxes on the SCAN TO EMAIL screen on the machine, select the respective check boxes under <Disabled>.

If you want to restrict the [To] text box to only show the user’s e-mail address, select the [Self] check box.

If you require that the [Subject] text box is always populated, select the [Required] check box.

You can set up default recipients, subjects, and body text by entering their default values in the [To], [Subject], and [Body] text boxes under <Default Value>.

If you want to send a copy of the scanned document to the e-mail address registered to your user account, select the [E-mail CC to self] check box.

A message is displayed, informing you that the settings have been saved.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

12.

Click [Scan to Fax].

The Scan to Fax screen is displayed.

13.

Click the [Enable Scan to Fax] check box ➞ enter the appropriate template configuration in the [Fax Recipient Template] text box ➞ click [Save]. (See

“Configuring Scan to Fax Settings,” on p. 97.)

A message is displayed, informing you that the settings have been saved.

NOTE

The Scan to Fax function is disabled by default.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 41

14.

Click [Scan to Folder] ➞ [General].

The Scan to Folder screen is displayed.

15.

Select the [Enable Scan to Folder] check box ➞ configure the Scan to Folder

Access Controls ➞ enter the IP address of the NetBIOS name server in [WINS

Server IP] ➞ click [Save].

Select the [Scan to Home Directory/Preselected Share only] check box if you want to automatically disable the [Preset Share], [File Server/Path], and [Browse] check boxes with one click.

If you want to manually restrict user access to the Preset Share drop-down list, File

Server and File Path text boxes, Browse key, or File Name text box on the SCAN

TO FOLDER screen on the machine, select the [Preset Share], [File Server/Path],

[Browse], or [File Name] check boxes under <Disabled>.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Select the [Test] check box if you want the connection to the WINS server to be verified before you save the settings.

Select the [Enable Dynamic Folder Creation] check box if you want a sub-folder to be automatically created when a user tries to scan to a folder that does not exist.

Select the [Only for Preset Shares] check box to restrict a user to only scan to a dynamic folder that was created as a preset share by the System Administrator beforehand. When this option is selected, the user must enter a valid file server/file path manually.

A message is displayed, informing you that the settings have been saved.

16.

Click [Scan to Folder] ➞ [Preset Shares].

The Preset Shares screen is displayed.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 43

17.

Click [Add] ➞ specify the Share Name settings ➞ click [Create]. (See

“Creating a

Preset Share,” on p. 103.)

The new preset share is added to the list on the Preset Shares screen.

17.1 If you want to specify your home directory as a preselected share that will automatically appear in the Preset Share drop-down list on the SCAN TO

FOLDER screen, select [Home Directory (if exists)] from the Preselected

Share drop-down list ➞

click [Save]. (See “Creating a Preset Share,” on p. 103.)

A message is displayed, informing you that the settings have been saved.

44 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

18.

Click [Scan Settings]

The Scan Settings screen is displayed.

19.

Specify the scan settings, as necessary ➞

click [Save]. (See “Configuring Scan

Settings,” on p. 108.)

A message is displayed, informing you that the settings have been saved.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 45

20.

Click [Options].

The Options screen is displayed.

21.

Specify the optional settings, as necessary ➞

click [Save]. (See “Configuring

Optional Settings,” on p.113.)

A message is displayed, informing you that the settings have been saved.

46 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

22.

Click [Logs].

The Logs screen is displayed.

23.

Check the [Enable Logging] check box ➞ specify the Severity Level ➞ configure the syslog servers ➞

click [Save]. (See “Configuring Log Settings,” on p. 117.)

You can also view, download, or delete the current log file. For more information,

see “Configuring Log Settings,” on p. 117.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 47

24.

If you want to verify the version number of Authorized Send, click [About].

25.

Click [Logout].

48 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

3.2 Creating an Authentication Server

You can create up to 10 domains for authentication.

IMPORTANT

If you select the Kerberos protocol for the authentication method, make sure that the device clock setting is properly synchronized with the configured authentication server and address book server. For more information on synchronizing the device

clock with the server clock, see “Synchronizing the Device and Server Time,”

p. 142.

Display the Authorized Send Configuration screen.

NOTE

For instructions on displaying the Authorized Send Configuration screen, see

“Flow of Configuration Operations,” on p. 35.

Enter your user name in [Login ID] and your password in [Password] ➞ click

[Login].

NOTE

For more details on logging on to the Authorized Send Configuration screen, see

“Flow of Configuration Operations,” on p. 35.

Click [Authentication] ➞ [Add].

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 49

Click the Method drop-down list to select the authentication method.

[Kerberos]: The machine communicates directly to Active Directory.

[NTLM]: The machine communicates directly to Active Directory.

[Simple]: Necessary if you use Domino or eDirectory for authentication.

[Anonymous]: Configuring an anonymous authentication server enables you to use Authorized Send without logging on to the application.

IMPORTANT

• If an Anonymous authentication server is configured, the

Authorized Send SIGN IN screen on the machine is always bypassed, and the user is logged in as an anonymous user.

• If an Anonymous server is created, other servers cannot be used.

• To disable Anonymous authentication, the Anonymous authentication server must be deleted. When Anonymous authentication is deleted, the default screen is the Authorized

Send SIGN IN screen on the machine. For details about deleting

an Anonymous authentication server, see "Deleting an

Authentication Server," on p. 64.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Specify the settings for the selected authentication method.

5.1 If you select [Kerberos] as the authentication method, specify the

Authentication Settings, Retrieve User E-Mail Address During

Authentication, Scan to Home Directory Settings, and Scan to Folder

Authentication Settings.

Authentication Settings

Method: Kerberos

Pull Host from Select [Yes] to automatically pull the host information

DNS: from the DNS after you click [Create]. Select [No] if you want to manually configure the host information. The default setting is ‘No’.

If you select the [Yes] radio button, the first “live” domain controller is used as the authentication server after you click [Create].

Host: This text box is only displayed if Pull Host from DNS is set to ‘No’. Enter the DNS name or IP address of the authentication server.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 51

Port: This text box is only displayed if Pull Host from DNS is set to ‘No’ and if the [Pull Port from DNS] check box is not selected. Enter the connecting port number of the authentication server. You can enter a maximum of five numbers. The default port number is ‘389’.

SSL: This check box is only displayed if Pull Host from DNS is set to ‘No’ and if the [Pull Port from DNS] check box is not selected. Select this check box if you want the authentication server to use SSL. If you select this check box, the host port number automatically changes to ‘636’.

Test: This check box is only displayed if Pull Host from DNS is set to ‘No’. Select this check box if you want the connection to the authentication server to be verified before you save the settings. The [Test] check box is selected by default.

Hostname: This text box is only displayed for Kerberos if Pull Host from DNS is set to ‘No’. Enter the host name of the authentication server.

Domain Name: Enter the domain name of the authentication server.

Pull Port from This check box is only displayed if Pull Host from DNS

DNS: is set to ‘Yes’. Select the [Pull Port from DNS] check box if you want the Port text box to be dynamically populated from the DNS.

Retrieve User E-Mail Address During Authentication

Address Book If you have already configured an address book server

Server: select the address book server from which your e-mail address will be retrieved from the drop-down list.

52 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Scan to Home Directory Settings

Retrieve Home Select this check box to obtain the currently logged on

Directory

(Active user’s home directory information from the authentication server. This will create a Home Directory

Directory only): element in the Preselected Share drop-down list on the Scan to Folder Preset Shares configuration screen.

Search Root:

IMPORTANT

If this check box is selected, and the [Retrieve Home

Directory (Active Directory only)] check box on the

Create Address Book Server screen is also selected, the authentication server is checked first for the Home

Directory. If no Home Directory is found on the authentication server, then the address book server is searched.

Specify the search root for searching the user’s home directory via LDAP.

Depending on your environment, you must enter the Base

DN (Distinguished Name) of the location of the user accounts.

If the directory server is authenticating against Active

Directory and the domain is, for example, us.canon.com, then the search root is dc=us, dc=canon, dc=com.

[Search Root] only appears if the [Retrieve Home

Directory (Active Directory only)] check box is selected.

LDAP Match Select [sAMAccountName] or [userPrincipalName]

Attribute: from the drop-down list. This enables you to search for the user’s Home Directory.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 53

Scan to Folder Authentication Settings

NTLM Select this check box to use NTLM as the authentication

Authentication: method for the Scan to Folder feature, regardless of the authentication method you selected for the authentication server.

NTLM Enter the domain name to be used for NTLM domain name: authentication of a share for the Scan to Folder feature.

IMPORTANT

“Synchronizing the Device and Server Time,” on p. 142.

5.2 If you select [NTLM] as the authentication method, specify the

Authentication Settings, Retrieve User E-Mail Address During

Authentication, Scan to Home Directory Settings, and Scan to Folder

Authentication Settings.

54 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Authentication Settings

Method: NTLM

Pull Host from Select [Yes] to automatically pull the host information

DNS: from the DNS after you click [Create]. Select [No] if you want to manually configure the host information. The default setting is ‘No’.

If you select the [Yes] radio button, the first “live” domain controller is used as the authentication server after you click [Create].

Host: This text box is only displayed if Pull Host from DNS is set to ‘No’. Enter the DNS name or IP address of the authentication server.

Domain Name: Enter the domain name of the authentication server.

Pull Port from This check box is only displayed if Pull Host from DNS

DNS: is set to ‘Yes’. Select the [Pull Port from DNS] check box if you want the Port text box to be dynamically populated from the DNS.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 55

Retrieve User E-Mail Address During Authentication

Address Book If you have already configured an address book server

Server: select the address book server from which your e-mail address will be retrieved from the drop-down list.

Scan to Home Directory Settings

Retrieve Home Select this check box to obtain the currently logged on

Directory user’s home directory information from the

(Active authentication server. This will create a Home Directory

Directory only): element in the Preselected Share drop-down list on the Scan to Folder Preset Shares configuration screen.

Search Root:

IMPORTANT

If this check box is selected, and the [Retrieve Home

Directory (Active Directory only)] check box on the

Create Address Book Server screen is also selected, the authentication server is checked first for the Home

Directory. If no Home Directory is found on the authentication server, then the address book server is searched.

Specify the search root for searching the user’s home directory via LDAP.

Depending on your environment, you must enter the Base

DN (Distinguished Name) of the location of the user accounts.

If the directory server is authenticating against Active

Directory and the domain is, for example, us.canon.com, then the search root is dc=us, dc=canon, dc=com.

[Search Root] only appears if the [Retrieve Home

Directory (Active Directory only)] check box is selected.

LDAP Match Select [sAMAccountName] or [userPrincipalName]

Attribute: from the drop-down list. This enables you to search for the user’s Home Directory.

56 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Scan to Folder Authentication Settings

NTLM Select this check box to use NTLM as the authentication

Authentication: method for the Scan to Folder feature, regardless of the authentication method you selected for the authentication server.

NTLM Enter the domain name to be used for NTLM domain name: authentication of a share for the Scan to Folder feature.

5.3 If you select [Simple] as the authentication method, specify the

Authentication Settings, Retrieve User E-Mail Address During

Authentication, Scan to Home Directory Settings, and Scan to Folder

Authentication Settings.

Authentication Settings

Method: Simple

Host: Enter the DNS name or IP address of the authentication server.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 57

Port:

Use Public

Credentials:

Enter the connecting port number of the authentication server. You can enter a maximum of five numbers. The default port number is ‘389’.

SSL: Select this check box if you want the authentication server to use SSL. If you select this check box, the host port number automatically changes to ‘636’.

Test: Select this check box if you want the connection to the authentication server to be verified before you save the settings. The [Test] check box is selected by default.

Domain Name: Enter the domain name of the authentication server.

Select [Yes] to configure the public credentials (Public

DN and Public Password), or select [No] to use anonymous binding.

Public DN: This text box is only displayed if Use Public Credentials is set to ‘Yes’. Enter the user’s login Distinguished Name to use when performing the first bind of the Simple

Binding process.

Public Password: This text box is only displayed if Use Public Credentials is set to ‘Yes’. It is used as the password for authentication against the address book server. It is an optional text box, with no limit on the number of characters that can be used.

LDAP Match Enter the user name’s LDAP attribute to be matched with

Attribute: the user name when performing the first bind of the

Simple Binding process.

Search Root: Enter the root to search for the authenticating user’s

Domain Name.

If the directory server is authenticating against eDirectory or Domino and the organization is, for example, Canon, then the search root is o=canon.

Retrieve User E-Mail Address During Authentication

Address Book If you have already configured an address book

Server: server, select the address book server from which your e-mail address will be retrieved from the drop-down list.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Scan to Home Directory Settings

Retrieve Home Select this check box to obtain the currently logged on

Directory

(Active user’s home directory information from the authentication server. This will create a Home Directory

Directory only): element in the Preselected Share drop-down list on the Scan to Folder Preset Shares configuration screen.

IMPORTANT

If this check box is selected, and the [Retrieve Home

Directory (Active Directory only)] check box on the

Create Address Book Server screen is also selected, the authentication server is checked first for the Home

Directory. If no Home Directory is found on the authentication server, then the address book server is searched.

Search Root:

Attribute:

Specify the search root for searching the user’s home directory via LDAP.

[Search Root] only appears if the [Retrieve Home

Directory (Active Directory only)] check box is selected.

LDAP Match Select [sAMAccountName] or [userPrincipalName] from the drop-down list. This enables you to search for the user’s Home Directory.

Scan to Folder Authentication Settings

NTLM Select this check box to use NTLM as the authentication

Authentication: method for the Scan to Folder feature, regardless of the authentication method you selected for the authentication server.

NTLM Enter the domain name to be used for NTLM domain name: authentication of a share for the Scan to Folder feature.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 59

5.4 If you select [Anonymous] as the authentication method, specify the

Anonymous User Information, and Address Book Server for E-Mail

Lookup.

Authentication Settings

Method: Anonymous

Anonymous User Information

Anonymous

User Name:

Enter the user name for anonymous sending. You can enter a maximum of 40 characters. Validation cannot occur if this text box is blank. The default setting is

‘anonymous’.

Anonymous

User E-Mail:

This text box is used as the sender’s e-mail address for the Scan to Fax and Scan to E-Mail functions. Enter the

Anonymous user’s e-mail address. You can enter a maximum of 64 characters for the first (local) part, and a maximum of 255 characters for the domain part. This text box is optional.

60 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

IMPORTANT

• If an anonymous authentication server is configured, the SIGN IN screen on the machine is bypassed, and the user is logged on as an anonymous user. If more than one Authorized Send function is enabled, the MAIN screen on the machine is displayed. If only one Authorized Send function is enabled, that function’s screen is displayed.

• If the [Anonymous User E-Mail] text box is blank, the Scan to Fax and

Scan to E-Mail functions do not work on the machine.

• If only one function is enabled but that function is inaccessible due to insufficient data (such as no sender’s e-mail address for the SCAN TO

EMAIL or SCAN TO FAX screens on the machine), the MAIN screen on the machine is displayed with that function’s button disabled and an error message.

NOTE

Validation of the Anonymous User Name and Anonymous User E-Mail occurs when [Create] is clicked. If validation fails, an error message is displayed.

Address Book Server for E-Mail Lookup

Address Book Select a configured address book server to use with the

Server: e-mail lookup feature of the Scan to E-Mail function.

Click [Create].

If you make a mistake while configuring the authentication server settings, click

[Reset] to return the settings to their original values.

To cancel creating the authentication server and return to the Authentication Servers screen, click [Cancel].

A message is displayed informing you that the configuration has been saved, and the screen returns to the Authentication Servers screen.

IMPORTANT

• Click the [Test] check box next to <Host> if you want to test the validity of the IP addresses you entered before saving.

• If validation fails, an error message will be displayed. Enter the correct information ➞ click [Save].

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 61

3.3 Editing an Authentication Server

You can edit a previously created authentication server from the Authorized Send

Configuration screen.

Click [Authentication] ➞ select the check box next to the authentication server you want to edit ➞ click [Edit].

62 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Edit the settings for the authentication server as necessary ➞ click [Update].

If you make a mistake, click [Reset] to return the settings to their original values.

To cancel editing the authentication server and return to the Authentication Servers screen, click [Cancel].

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 63

3.4 Deleting an Authentication Server

You can delete a previously created authentication server from the Authorized Send

Configuration screen.

Click [Authentication] ➞ select the check box next to the authentication server you want to delete ➞ click [Delete].

Click [OK].

If you do not want to delete the authentication server, click [Cancel].

The authentication server is deleted from the list.

64 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

3.5 Configuring the E-Mail Service Settings

You can configure the settings for the SMTP server.

NOTE

The E-Mail Service Settings must be configured to use the Scan to E-Mail and Scan to Fax functions.

Click [E-Mail Service] ➞ [General].

If necessary, see the screen shot in step 5 of

"Flow of Configuration Operations," on p. 35.

Configure the settings as necessary.

General Settings

SMTP Server Enter the IP Address or DNS name of the SMTP server.

Address:

Port: Enter the connecting port number of the SMTP server. You can enter a maximum of five numbers. The default port number is ‘25’.

Test: Select this check box if you want the connection to the SMTP server to be verified before you save the settings. The [Test] check box is selected by default.

Enable SMTP Select this check box to have the user authenticated on the

Authentication: SMTP server when using the Scan to E-Mail or Scan to Fax function.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 65

Use Public

Credentials:

Select [Yes] to configure the SMTP public credentials

(Public User Name, Public Password). If [Yes] is selected, enter the user’s SMTP public name and password for SMTP authentication. If [No] is selected, the user’s normal login credentials are used.

SMTP Public If [Yes] is selected for Use Public Credentials, you must enter

Username: the user name for SMTP authentication.

SMTP Public If [Yes] is selected for Use Public Credentials, you must enter

Password:

Click [Save]. the password for SMTP authentication.

If you make a mistake while configuring the settings, click [Reset] to return the settings to their original values.

A message is displayed informing you that the configuration has been saved.

IMPORTANT

• Click the [Test] check box if you want to test the validity of the IP address you entered before saving.

• If validation fails, an error message will be displayed. Enter the correct information ➞ click [Save].

NOTE

The [Test] check box is selected by default. If you do not want to test the validity of the address you entered, click the check box to clear the check mark.

66 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

3.6 Creating an Address Book Server

You can create up to 10 address book Servers.

When you create an address book server, you can either associate it with an authentication server, which has been previously created, or you can create a standalone address book server with no association to an authentication server.

IMPORTANT

• You must configure an address book for an authentication server to retrieve an e-mail address for the end user when authenticating against the authentication server.

• If you select the Kerberos protocol for the authentication method, make sure that the device clock setting is properly synchronized with the configured authentication server and address book server. For more information on synchronizing the device

clock with the server clock, see “Synchronizing the Device and Server Time,”

p. 142.

NOTE

• To associate an address book with an authentication server, you must first create an authentication server for Authorized Send. For instructions on creating an authentication server, see

“Creating an Authentication Server,” on p. 49.

• This option may be initially set on this screen, as well as configured and edited on the

Create Authentication Server screen.

• If you select [None] from the Authentication Server drop-down list when creating an address book server, the address book server will not be associated with an authentication server and will not interact with any other features of Authorized Send.

Select [None] if you want to create an address book server that can be configured at a later time.

1. Click [E-Mail Service] ➞ [Address Book] ➞ [Add] on the Address Book Servers screen.

If necessary, see the screen shots in steps 7 and 8 of

"Flow of Configuration

Operations," on p. 35.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 67

2. Specify whether you want to create an address book server with or without an association to an authentication server.

2.1 If you want to create an address book server with an association to an authentication server, select [Kerberos], [NTLM], [Simple], or

[Anonymous] from the Authentication Server drop-down list under

<Retrieve User E-Mail Address for the Following Authentication Server>.

IMPORTANT

If you select [Kerberos], [NTLM], or [Simple] as the authentication server, [Same as Authentication Server] appears as an additional setting under <Address Book Settings>. Select [Yes] to create the address book with the same credentials as the selected authentication server. If you select [No], you must enter the configuration information for the authentication method.

NOTE

The items in the Authentication Server drop-down list correspond to previously registered authentication servers.

68 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

2.1.1 If you select a Kerberos or NTLM authentications server, specify the Address Book Settings and Scan to Home Directory Settings

➞ proceed to step 4.

Address Book Settings

Same as Select [Yes] to create the address book with the

Authentication same credentials as the selected authentication

Server: server. If you select [No], proceed to step 3 and enter the configuration information for the authentication method.

NOTE

Although step 3 shows a standalone address book server with no association to an authentication server, the configuration information is identical to if you were creating an address book server with an association to an authentication server (except for selecting

[None] for the authentication server and not displaying [Same as Authentication Server]).

Search Root: Depending on your environment, you must enter the Base DN (Distinguished Name) of the location of the user accounts.

If the directory server is authenticating against

Active Directory and the domain is, for example, us.canon.com, then the search root is dc=us, dc=canon, dc=com.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 69

LDAP Match Enter the LDAP Match Attribute to be used for

Attribute: e-mail address retrieval. If the [Retrieve Home

Directory (Active Directory only] check box is selected under <Scan to Home Directory

Settings>, the value entered here is also used for

Home Directory retrieval.

An example for Active Directory is

‘sAMAccountName’ or ‘userPrincipalName’.

LDAP Email Enter the e-mail LDAP attribute to pull the

Attribute: user’s

Maximum

An example for Active Directory is ‘mail’.

Select [10], [25], [50], [75], or [100] from the

Search Results: drop-down list for the maximum number of search results that you want displayed on the

ADDRESS BOOK screen of the machine. The default setting is ‘25’.

70 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Scan to Home Directory Settings

Retrieve Home Select this check box to obtain the currently

Directory

(Active logged on user’s home directory information from the address book server with the LDAP

Directory only): attribute of “Home Directory.” This will create a

Home Directory element in the Preselected

Share drop-down list on the Scan to Folder

Preset Shares configuration screen.

IMPORTANT

If this check box is selected, and the [Retrieve

Home Directory (Active Directory only] check box on the Create Authentication Server screen is also selected, the authentication server is checked first for the Home Directory.

If no Home Directory is found on the authentication server, then the address book server is searched.

IMPORTANT

with the server clock, see “Synchronizing the Device and Server

Time,” on p. 142.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 71

2.1.2 If you select a Simple authentication server, specify the Address

Book Settings and Scan to Home Directory Settings ➞ proceed to step 4.

Address Book Settings

Same as Select [Yes] to create the address book with the

Authentication same credentials as the selected authentication

Server: server. If you select [No], proceed to step 3 and enter the configuration information for the authentication method.

NOTE

[None] for the authentication server and not displaying [Same as Authentication Server]).

LDAP Email Enter the e-mail LDAP attribute to pull the

Attribute: user’s

Maximum

An example for Active Directory is ‘mail’.

Select [10], [25], [50], [75], or [100] from the

Search Results: drop-down list for the maximum number of search results that you want displayed on the

ADDRESS BOOK screen of the machine. The default setting is ‘25’.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Scan to Home Directory Settings

Retrieve Home Select this check box to obtain the currently

Directory

(Active logged on user’s home directory information from the address book server with the LDAP

Directory only): attribute of “Home Directory.” This will create a

Home Directory element in the Preselected

Share drop-down list on the Scan to Folder

Preset Shares configuration screen.

IMPORTANT

If this check box is selected, and the [Retrieve

Home Directory (Active Directory only] check box on the Create Authentication Server screen is also selected, the authentication server is checked first for the Home Directory.

If no Home Directory is found on the authentication server, then the address book server is searched.

2.1.3 If you select an Anonymous authentication server, proceed to step 3 and enter the configuration information for the authentication method.

NOTE

[Same as Authentication Server]).

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 73

2.2 If you want to create a standalone address book server with no association to an authentication server, select [None] from the Authentication Server dropdown list under <Retrieve User E-Mail Address for the Following

Authentication Server>.

NOTE

• The items in the Authentication Server drop-down list correspond to previously registered authentication servers.

• If you select [None] from the Authentication Server drop-down list, the address book server you create will not be associated with an authentication server and will not interact with any other features of

Authorized Send. Select [None] if you want to create an address book server that can be configured at a later time.

74 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

3. Select the authentication method from the Method drop-down list.

[Kerberos]: The machine communicates directly to Active Directory.

[NTLM]:

[Simple]:

The machine communicates directly to Active Directory.

Necessary, if you use Domino or eDirectory for authentication.

[Anonymous]: Authorized Send will not use any user login credentials to search the address book for e-mail addresses.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 75

3.1 If you select [Kerberos] as the authentication method, specify the Address

Book Settings and Scan to Home Directory Settings.

Address Book Settings

Method: Kerberos

Pull Host from Select [Yes] to automatically pull the host information

DNS: from the DNS after you click [Create]. Select [No] if you want to manually configure the host information. The default setting is ‘No’.

If you select the [Yes] radio button, the first “live” domain controller is used as the address book server after you click [Create].

Host: This text box is only displayed if Pull Host from DNS is set to ‘No’. Enter the DNS name or IP address of the address book server.

Port: This text box is only displayed if Pull Host from DNS is set to ‘No’ and if the [Pull Port from DNS] check box is not selected. Enter the connecting port number of the address book server. You can enter a maximum of five numbers. The default port number is ‘389’.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

SSL: This check box is only displayed if Pull Host from DNS is set to ‘No’ and if the [Pull Port from DNS] check box is not selected. Select this check box if you want the address book server to use SSL. If you select this check box, the host port number automatically changes to ‘636’.

Test: This check box is only displayed if Pull Host from DNS is set to ‘No’. Select this check box if you want the connection to the address book server to be verified before you save the settings. The [Test] check box is selected by default.

Hostname: This text box is only displayed if Pull Host from DNS is set to ‘No’. Enter the host name of the address book server.

Domain Name: Enter the domain name of the address book server.

Pull Port from This check box is only displayed if Pull Host from DNS

DNS: is set to ‘Yes’. Select the [Pull Port from DNS] check box if you want the Port text box to be dynamically populated from the DNS.

Use Public

Credentials:

Select [Yes] to use the public credentials (Public User

Name and Public Password) configured by the System

Administrator. Select [No] to use Anonymous binding.

Public User:

Name:

This text box is only displayed if Use Public Credentials is set to ‘Yes’. It is used as the user name for authentication against the address book server. It is a required text box, with no limit on the number of characters that can be used.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 77

Search Root: Depending on your environment, you must enter the Base

DN (Distinguished Name) of the location of the user accounts.

If the directory server is authenticating against Active

Directory and the domain is, for example, us.canon.com, then the search root is dc=us, dc=canon, dc=com.

LDAP Match Enter the LDAP Match Attribute to be used for e-mail

Attribute: address retrieval. If the [Retrieve Home Directory (Active

Directory only] check box is selected under <Scan to

Home Directory Settings>, the value entered here is also used for Home Directory retrieval.

An example for Active Directory is ‘sAMAccountName’ or ‘userPrincipalName’.

LDAP Email Enter the e-mail LDAP attribute to pull the user’s e-mail

Attribute: address.

Maximum

An example for Active Directory is ‘mail’.

Select [10], [25], [50], [75], or [100] from the drop-down

Search Results: list for the maximum number of search results that you want displayed on the ADDRESS BOOK screen of the machine. The default setting is ‘25’.

78 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Scan to Home Directory Settings

Retrieve Home Select this check box to obtain the currently logged on

Directory

(Active user’s home directory information from the address book server with the LDAP attribute of “Home

Directory only): Directory.” This will create a Home Directory element in the Preselected Share drop-down list on the Scan to

Folder Preset Shares configuration screen.

IMPORTANT

If this check box is selected, and the [Retrieve Home

Directory (Active Directory only] check box on the

Create Authentication Server screen is also selected, the authentication server is checked first for the Home

Directory. If no Home Directory is found on the authentication server, then the address book server is searched.

IMPORTANT

“Synchronizing the Device and Server Time,” on p. 142.

• Click the [Test] check box if you want to test the validity of the IP addresses you entered before saving.

• If validation fails, an error message will be displayed. Enter the correct information ➞ click [Save].

NOTE

The [Test] check box is selected by default. If you do not want to test the validity of the addresses you entered, click the check box to clear the check mark.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 79

3.2 If you select [NTLM] as the authentication method, specify the Address

Book Settings and Scan to Home Directory Settings.

Address Book Settings

Method: NTLM

Pull Host from Select [Yes] to automatically pull the host information

DNS: from the DNS after you click [Create]. Select [No] if you want to manually configure the host information. The default setting is ‘No’.

If you select the [Yes] radio button, the first “live” domain controller is used as the address book server after you click [Create].

Host: This text box is only displayed if Pull Host from DNS is set to ‘No’. Enter the DNS name or IP address of the address book server.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Domain Name: This text box is only displayed if Pull Host from DNS is set to ‘No’. Enter the domain name of the address book server.

Pull Port from This check box is only displayed if Pull Host from DNS

DNS: is set to ‘Yes’. Select the [Pull Port from DNS] check box if you want the Port text box to be dynamically populated from the DNS.

Use Public

Credentials:

Select [Yes] to use the public credentials (Public User

Name and Public Password) configured by the System

Administrator. Select [No] to use Anonymous binding.

Public User:

Name:

Search Root: Depending on your environment, you must enter the Base

DN (Distinguished Name) of the location of the user accounts.

If the directory server is authenticating against Active

Directory and the domain is, for example, us.canon.com, then the search root is dc=us, dc=canon, dc=com.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 81

LDAP Match Enter the LDAP Match Attribute to be used for e-mail

Attribute: address retrieval. If the [Retrieve Home Directory (Active

Directory only] check box is selected under <Scan to

Home Directory Settings>, the value entered here is also used for Home Directory retrieval.

An example for Active Directory is ‘sAMAccountName’ or ‘userPrincipalName’.

LDAP Email Enter the e-mail LDAP attribute to pull the user’s e-mail

Attribute: address.

An example for Active Directory is ‘mail’.

Maximum Select [10], [25], [50], [75], or [100] from the drop-down

Search Results: list for the maximum number of search results that you want displayed on the ADDRESS BOOK screen of the machine. The default setting is ‘25’.

82 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Scan to Home Directory Settings

Retrieve Home Select this check box to obtain the currently logged on

Directory

(Active user’s home directory information from the address book server with the LDAP attribute of “Home

Directory only): Directory.” This will create a Home Directory element in the Preselected Share drop-down list on the Scan to

Folder Preset Shares configuration screen.

IMPORTANT

If this check box is selected, and the [Retrieve Home

Directory (Active Directory only] check box on the

Create Authentication Server screen is also selected, the authentication server is checked first for the Home

Directory. If no Home Directory is found on the authentication server, then the address book server is searched.

IMPORTANT

• Click the [Test] check box if you want to test the validity of the IP addresses you entered before saving.

• If validation fails, an error message will be displayed. Enter the correct information ➞ click [Save].

NOTE

The [Test] check box is selected by default. If you do not want to test the validity of the addresses you entered, click the check box to clear the check mark.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 83

3.3 If you select [Simple] as the authentication method, specify the Address

Book Settings and Scan to Home Directory Settings.

Address Book Settings

Method: Simple

Host: Enter the DNS name or IP address of the address book server.

Port: Enter the connecting port number of the address book server. You can enter a maximum of five numbers. The default port number is ‘389’.

SSL: Select this check box if you want the address book server to use SSL. If you select this check box, the host port number automatically changes to ‘636’.

Test: Select this check box if you want the connection to the address book server to be verified before you save the settings. The [Test] check box is selected by default.

Domain Name: Enter the domain name of the address book server.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Use Public

Credentials:

Select [Yes] to configure the public credentials (Public

DN and Public Password), or select [No] to use anonymous binding.

Public DN: This text box is only displayed if Use Public Credentials is set to ‘Yes’. Enter the user’s login Distinguished Name to use when performing the first bind of the Simple

Binding process.

Search Root: Depending on your environment, you must enter the Base

DN (Distinguished Name) of the location of the user accounts.

If the directory server is authenticating against eDirectory or Domino and the organization is, for example, Canon, then the search root is o=canon.

LDAP Match Enter the LDAP Match Attribute to be used for e-mail

Attribute: address retrieval. If the [Retrieve Home Directory (Active

Directory only] check box is selected under <Scan to

Home Directory Settings>, the value entered here is also used for Home Directory retrieval.

An example for eDirectory and Domino is ‘uid’.

LDAP Email Enter the e-mail LDAP attribute to pull the user’s e-mail

Attribute: address.

An example for eDirectory and Domino is ‘mail’.

Maximum Select [10], [25], [50], [75], or [100] from the drop-down

Search Results: list for the maximum number of search results that you want displayed on the ADDRESS BOOK screen of the machine. The default setting is ‘25’.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 85

Scan to Home Directory Settings

Retrieve Home Select this check box to obtain the currently logged on

Directory

(Active user’s home directory information from the address book server with the LDAP attribute of “Home

Directory only): Directory.” This will create a Home Directory element in the Preselected Share drop-down list on the Scan to

Folder Preset Shares configuration screen.

IMPORTANT

If this check box is selected, and the [Retrieve Home

Directory (Active Directory only] check box on the

Create Authentication Server screen is also selected, the authentication server is checked first for the Home

Directory. If no Home Directory is found on the authentication server, then the address book server is searched.

IMPORTANT

• Click the [Test] check box if you want to test the validity of the IP addresses you entered before saving.

• If validation fails, an error message will be displayed. Enter the correct information ➞ click [Save].

NOTE

The [Test] check box is selected by default. If you do not want to test the validity of the addresses you entered, click the check box to clear the check mark.

86 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

3.4 If you select [Anonymous] as the authentication method, specify the

Address Book Settings and Scan to Home Directory Settings.

Address Book Settings

Method: Anonymous

Host: Enter the DNS name or IP address of the address book server.

Port: Enter the connecting port number of the address book server. You can enter a maximum of five numbers. The default port number is ‘389’.

SSL: Select this check box if you want the address book server to use SSL. If you select this check box, the host port number automatically changes to ‘636’.

Test: Select this check box if you want the connection to the address book server to be verified before you save the settings. The [Test] check box is selected by default.

Domain Name: Enter the domain name of the address book server.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 87

Search Root: Depending on your environment, you must enter the Base

DN (Distinguished Name) of the location of the user accounts.

If the directory server is authenticating against Active

Directory and the domain is, for example, us.canon.com, then the search root is dc=us, dc=canon, dc=com.

If the directory server is authenticating against eDirectory or Domino and the organization is, for example, Canon, then the search root is o=canon.

LDAP Match Enter the LDAP Match Attribute to be used for e-mail

Attribute: address retrieval. If the [Retrieve Home Directory (Active

Directory only] check box is selected under <Scan to

Home Directory Settings>, the value entered here is also used for Home Directory retrieval.

An example for Active Directory is ‘sAMAccountName’ or ‘userPrincipalName’.

An example for eDirectory and Domino is ‘uid’.

LDAP Email Enter the e-mail LDAP attribute to pull the user’s e-mail

Attribute: address.

An example for Active Directory, eDirectory, and

Domino is ‘mail’.

Maximum Select [10], [25], [50], [75], or [100] from the drop-down

Search Results: list for the maximum number of search results that you want displayed on the ADDRESS BOOK screen of the machine. The default setting is ‘25’.

88 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Scan to Home Directory Settings

Retrieve Home Select this check box to obtain the currently logged on

Directory

(Active user’s home directory information from the address book server with the LDAP attribute of “Home

Directory only): Directory.” This will create a Home Directory element in the Preselected Share drop-down list on the Scan to

Folder Preset Shares configuration screen.

IMPORTANT

If this check box is selected, and the [Retrieve Home

Directory (Active Directory only] check box on the

Create Authentication Server screen is also selected, the authentication server is checked first for the Home

Directory. If no Home Directory is found on the authentication server, then the address book server is searched.

IMPORTANT

• Click the [Test] check box if you want to test the validity of the IP addresses you entered before saving.

• If validation fails, an error message will be displayed. Enter the correct information ➞ click [Save].

NOTE

The [Test] check box is selected by default. If you do not want to test the validity of the addresses you entered, click the check box to clear the check mark.

4. Click [Create].

If you make a mistake while configuring the address book server settings, click

[Reset] to return the settings to their original values.

To cancel creating the address book server and return to the Address Book

Servers screen, click [Cancel].

The address book server is created and added to the address book servers list on the Address Book Servers screen.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 89

3.7 Editing an Address Book Server

You can edit a previously created address book server from the Address Book Servers configuration screen.

Click [E-Mail Service] ➞ [Address Book] ➞ select the check box next to the address book server you want to edit ➞ click [Edit].

90 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Edit the settings for the address book server as necessary ➞ click [Update].

If you make a mistake while editing the address book server settings, click [Reset] to return the settings to their original values.

To cancel editing the address book server and return to the Address Book Servers screen, click [Cancel].

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 91

3.8 Deleting an Address Book Server

You can delete a previously created address book server from the Address Book

Servers configuration screen.

Click [E-Mail Service] ➞ [Address Book] ➞ select the check box next to the address book server you want to delete ➞ click [Delete].

Click [OK].

If you do not want to delete the address book server, click [Cancel].

The address book server is deleted from the list.

92 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

3.9 Configuring Scan to E-Mail Settings

You can enable the Scan to E-Mail function, restrict user access to the [Address Book] key and [To], [Subject], [Body], and [File Name] text boxes on the SCAN TO EMAIL screen on the machine, as well as enable E-mail CC to self.

Click [Scan to E-Mail].

If necessary, see the screen shot in step 10 of

“Flow of Configuration Operations,” on p. 35.

Click the [Enable Scan to E-mail] check box.

If you want to disable the Scan to E-Mail function, click the [Enable Scan to

E-mail] check box to clear the check mark.

NOTE

You can only disable the Scan to E-Mail function if there is at least one other

Authorized Send function enabled.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 93

Configure the settings under <Access Controls>.

Access Controls

E-mail to self only: Select this check box if you want to restrict users to only send e-mail messages to themselves, and to automatically disable the [Address Book] key and the [To] text box on the SCAN TO EMAIL screen on the machine.

Disabled Column

Address Book: Select this check box if you want to restrict user access to the [Address Book] key on the SCAN TO EMAIL screen on the machine. If you select this check box, the [Address

Book] key is not displayed on the SCAN TO EMAIL screen. The user can manually specify an e-mail address, but cannot select an address from the address book.

To: Select this check box if you want to prevent the user from manually entering an e-mail address. If you select this check box, the [To] text box on the SCAN TO EMAIL screen on the machine is grayed out. The user can select an e-mail address from the address book, but cannot manually specify an address.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Self This check box is only displayed when the [E-mail to self only] check box is not selected. When the [Self] check box is selected, the e-mail address of the user logged on to

Authorized Send is displayed in the [To] text box on the

SCAN TO EMAIL Screen.

Subject: Select this check box to disable the [Subject] text box on the SCAN TO EMAIL screen.

Required: Select this check box if you require the user to enter a subject for their e-mail messages.

Body: Select this check box to disable the [Body] text box on the

SCAN TO EMAIL screen.

File Name:

Default Value Column

Select this check box to disable the [File Name] text box on the SCAN TO EMAIL screen.

To: Enter the default e-mail address to be displayed in the [To] text box on the SCAN TO EMAIL screen.

Subject: Enter a default subject to be displayed in the [Subject] text box on the SCAN TO EMAIL screen.

Body: Enter a default e-mail message to be displayed in the

[Body] text box on the SCAN TO EMAIL screen.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 95

If necessary, click the [E-mail CC to self] check box ➞ click [Save].

If you select [E-mail CC to self], a copy of each e-mail message sent via SCAN TO

EMAIL will be sent to the currently logged on user’s e-mail address.

IMPORTANT

You must select the [Self] check box next to the [To] text box if you selected to disable the [Address Book] and [To] check boxes under <Disabled> at the same time, and the default value for the [To] text box is blank.

96 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

3.10 Configuring Scan to Fax Settings

You can enable the Scan to Fax function and configure the General Settings.

Click [Scan to Fax].

If necessary, see the screen shot in step 12 of

“Flow of Configuration Operations,” on p. 35.

Click the [Enable Scan to Fax] check box.

If you want to disable the Scan to Fax function, click the [Enable Scan to Fax] check box to clear the check mark.

NOTE

• The Scan to Fax function is disabled by default.

• You can only disable the Scan to Fax function if there is at least one other

Authorized Send function enabled.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 97

Specify the General Settings ➞ click [Save].

General Settings

Fax Recipient Template: Enter the appropriate template configuration.

For example, if you enter

${FAXNUMBER}@faxserver.company.com

as the string, and the fax number entered by the user (for example, ‘1234567’) when sending from the Scan to Fax screen, Authorized Send sends an e-mail message to the

SMTP server with “ [email protected]

” in the “To:” text box.

Append: Clicking [Append] appends a dynamic variable (set in the

Append drop-down list) to the string in the Fax Recipient

Template. This is unnecessary if the string is entered manually in the [Fax Recipient Template] text box.

Append drop-down: Selecting [Fax Number] in conjunction with pressing

[Append] adds the fax number variable

‘${FAXNUMBER}’ to the string in the [Fax Recipient

Template] text box.

98 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

NOTE

• The user does not see the template. The user only has to enter the fax number(s) on the Authorized Send SCAN TO FAX screen on the machine.

• If you upgrade Authorized Send from version 3.x to 4.0 or later, the fax template is automatically updated to the current format, which would include:

'${FAXNUMBER}' as the prefix to what was configured in version 3.x.

For example, if the Domain text box on the Scan to Fax screen of the Authorized

Send Configuration servlet was configured with “auth.send.com” in Authorized

Send v3.x, when upgrading to Authorized Send v4.0 or later, the Fax Recipient

Template text box on the Scan to Fax screen of the Authorized Send

Configuration servlet is configured with ‘${FAXNUMBER}@auth.send.com’.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 99

3.11 Configuring Scan to Folder Settings

You can enable the Scan to Folder function and configure the Access Controls and

General Settings.

Click [Scan to Folder] ➞ [General].

If necessary, see the screen shot in step 14 of

“Flow of Configuration Operations,” on p. 35.

Select the [Enable Scan to Folder] check box.

If you want to disable the Scan to Folder function, click the [Enable Scan to Folder] check box to clear the check mark.

NOTE

You can only disable the Scan to Folder function if there is at least one other

Authorized Send function enabled.

100 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Configure the settings under <Access Controls>.

Access Controls

Scan to Home Select this check box if you want to automatically disable

Directory/Preselected the [Preset Share], [File Server/Path], and [Browse] check

Share only: boxes with one click.

Disabled Column

Preset Share: Select this check box if you want to prevent the user from selecting a preset share from the Preset Share drop-down list on the SCAN TO FOLDER screen. If you select this check box, the Preset Share drop-down list is grayed out.

File Server/Path: Select this check box if you want to disable the [File

Server] and [File Path] text boxes on the SCAN TO

FOLDER screen. If you select this check box, the [File

Server] and [File Path] text boxes are grayed out.

Browse: Select this check box if you want to disable the [Browse] button on the SCAN TO FOLDER screen. If you select this check box, the [Browse] button does not appear on the

SCAN TO FOLDER screen.

File Name: Select this check box if you want to prevent the user from using the [File Name] text box on the SCAN TO FOLDER screen. If you select this check box, the [File Name] text box is grayed out.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 101

Specify the General Settings ➞ click [Save].

General Settings

WINS Server IP:

Test:

Enable Dynamic

Folder Creation:

Only for Preset

Enter the IP address of the NetBIOS name server.

Select this check box if you want the connection to the

WINS server to be verified before you save the settings.

The [Test] check box is selected by default.

Select this check box to automatically create any folders in the share path that may not exist when a user scans a document.

Select this check box to enable dynamic folder creation for preset shares created only by a System Administrator. If a user enters a share path manually that does not exist, the share is not dynamically created when a user scans a document.

102 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

3.12 Creating a Preset Share

You can create any number of preset shares.

Click [Scan to Folder] ➞ [Preset Shares].

If necessary, see the screen shot in step 16 of

“Flow of Configuration Operations,” on p. 35.

Click [Add].

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 103

If you want to specify your home directory as a preselected share that will automatically appear in the Preset Share drop-down list on the SCAN TO FOLDER screen, select [Home Directory (if exists)] from the Preselected Share drop-down list ➞ click [Save].

NOTE

If you do not have a Home Directory, or if you do not select [Home Directory (if exists)] from the Preselected Share drop-down list, no share will appear on the

SCAN TO FOLDER screen.

104 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Specify the Share Name settings ➞ click [Create].

Create Share Name

Share Name: Enter a name for the preset share. The Share Name is case-sensitive. You can enter a maximum of 31 characters.

File Server: Enter the DNS name or IP Address to send documents.

File Path: Enter the path of the folder to send documents.

Append: Click [Append] to add a user’s name to the string in the [File Path] text box.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 105

3.13 Editing a Preset Share

You can edit a previously created preset share from the Scan to Folder configuration screen.

Click [Scan to Folder] ➞ [Preset Shares] ➞ select the check box next to the preset share you want to edit ➞ click [Edit].

Edit the settings for the preset share as necessary ➞ click [Update].

106

If you make a mistake, click [Reset] to return the settings to their original values.

To cancel editing the preset share and return to the Scan to Folder configuration screen, click [Cancel].

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

3.14 Deleting a Preset Share

You can delete a previously created preset share from the Scan to Folder configuration screen.

Click [Scan to Folder] ➞ [Preset Shares] ➞ select the check box next to the preset share you want to delete ➞ click [Delete].

Click [OK] on the confirmation dialog box.

If you do not want to delete the preset share, click [Cancel].

The preset share is deleted from the list.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 107

3.15 Configuring Scan Settings

You can configure the Default File Type Settings and Default Scan Settings For File

Types. This causes the default scan settings to automatically change based on the file type that is selected.

Click [Scan Settings].

If necessary, see the screen shot in step 18 of

“Flow of Configuration Operations,” on p. 35.

Specify the Default File Type Settings.

Default File Type Settings

Default File Type Selected: If want to change the default file type, select a file type from the drop-down list. The default Default File

Type Selected is ‘PDF’.

Disabled: Select this check box if you want to disable and gray out the File Type drop-down list on the SCAN

SETTINGS screen.

108 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Configure the settings under <Default Scan Settings for File Types> ➞ click

[Save].

Default Scan Settings for File Types

Scan Settings for File Type: Select [PDF], [PDF(Compct)], [PDF(OCR)], [TIFF],

[TIFF(Single)], or [JPEG] from the drop-down list.

This file type in conjunction with the specific scan settings that you select and save, are displayed as the new default settings for that file type on the SCAN

SETTINGS screen. The default Scan Settings for File

Type is ‘PDF’.

Disabled Column

By default, each check box in this column is not selected unless a particular default scan setting, which is based on the file type selected from the Scan

Settings for File Type drop-down list, requires it to be disabled and grayed out.

Paper Size: Select this check box to disable and gray out the

Paper Size drop-down list on the SCAN SETTINGS screen.

Resolution: Select this check box to disable and gray out the

Resolution drop-down list on the SCAN SETTINGS screen.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 109

110

Brightness:

PDF Encryption:

Image Mode:

Color Mode:

Sided:

Settings Column

Paper Size:

Select this check box to disable and gray out the

Brightness scroll bar on the SCAN SETTINGS screen.

Select this check box to hide the PDF Encryption icon on the SCAN SETTINGS screen.

NOTE

The PDF Encryption check box only appears on machines that support PDF encryption.

Select this check box to disable and gray out the

Image Mode drop-down list on the SCAN

SETTINGS screen.

Select this check box to disable and gray out the

Color Mode drop-down list on the SCAN SETTINGS screen.

Select this check box to disable and gray out the

Document check box on the SCAN SETTINGS screen.

By default, some settings are automatically selected and grayed out, based on the file type selected from the Scan Settings for File Type drop-down list.

Select [Auto], [Letter], [Legal], or [11x17] from the drop-down list to correspond with the file type that you selected from the Scan Settings for File Type drop-down list. The default Paper Size is ‘Auto’.

NOTE

• Select [Letter] if you want to scan in a portrait orientation.

• If you select [Letter] for scanning in a landscape orientation, the scanned image is truncated.

• Select [Auto] if you want to scan a letter-size document in a landscape orientation.

• If [Auto] is selected, scanning originals with different sizes or with different orientations may produce unexpected results.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Resolution: Select [200x200], [300x300], or [600x600] from the drop-down list to correspond with the file type that you selected from the Scan Settings for File Type drop-down list. The default Resolution depends on the file type that you selected. selected and an upgrade to Authorized Send

Version 4.1 is performed, the resolution is disabled for all file types.

[Auto], [10%], [20%], [30%], [40%], [50%],

[60%], [70%], [80%], [90%], or [100%] from the drop-down list to correspond with the file type that you selected from the Scan Settings for File Type drop-down list. The default Brightness is ‘Auto’.

PDF Encryption: The default setting is for the PDF Encryption icon to appear on the SCAN SETTINGS screen. PDF encryption is available only for PDF, PDF(Compct), and PDF(OCR) file types.

Image Mode:

NOTE

• If your machine does not support a particular resolution, that resolution is not displayed.

• Authorized Send Version 4.0 and lower versions have a ‘DPI is user Configurable’ setting on the

Options screen in the Configuration servlet. This allows the System Administrator to enable or disable the resolution on the SCAN SETTINGS screen for the end user. However, this setting has been removed from Authorized Send Version 4.1, since the resolution enable or disable state is now configured on the Scan Settings screen in the

Configuration servlet.

• If the [DPI is user Configurable] check box was not

Select [Text], [Text/Photo], or [Photo] from the drop-down list to correspond with the file type that you selected from the Scan Settings for File Type drop-down list. The default Image Mode is ‘Text’.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 111

112

Color Mode: Select [Auto], [Full Color], or [Black] from the drop-down list to correspond with the file type that you selected from the Scan Settings for File Type drop-down list. The default Color Mode depends on the file type that you selected.

NOTE

• If your machine is black-and-white only, [Black] is automatically selected and the Color Mode drop-down list is disabled and grayed out.

• The Color Mode selections that are available depend on the file type that you selected from the

Scan Settings for File Type drop-down list.

−

PDF: [Auto], [Full Color], and [Black]

PDF(Compct): [Full

− PDF(OCR): [Auto], [Full Color], and [Black]

− TIFF: [Black]

− TIFF(Single): [Black]

− JPEG: [Full

Sided: Select [1-Sided] or [2-Sided] from this drop-down list to correspond with the file type that you selected from the Scan Settings for File Type drop-down list. The default Sided is ‘1 Sided’.

NOTE

The table below displays the default scan settings for each file type that automatically appears on the SCAN SETTINGS screen on the machine, unless they are changed and saved by the System Administrator.

File Type

Paper

Size

Res.

Bright.

PDF

Encrypt.

Img.

Mode

Color

Mode

Sided

PDF(Compct) Auto 300x300 *1 Auto Available Text

Full

Color *2

1 Sided

PDF(OCR) Auto 200x200 Auto Available Sided

Text Black *2

TIFF(Single) Auto 200x200 Auto

Not

Available

Text Black *2

Text

Full

Color *2

1 Sided

*1 The Resolution Mode drop-down list is disabled.

*2 The Color Mode drop-down list is disabled.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

3.16 Configuring Optional Settings

You can configure the timeout settings, decide whether to populate the User Name text box on the Authorized Send SIGN IN screen, enable USB keyboard input, and rename the tab of the Authorized Send application on the machine.

IMPORTANT

You can use third-party USB keyboards with Authorized Send. However, only the

Cherry G84 keyboard has been tested with this application.

1. Click [Options].

If necessary, see the screen shot in step 20 of

“Flow of Configuration Operations,”

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 113

Enable USB Keyboard input:

Select this check box to enable your machine to utilize an attached USB keyboard. If this check box is not selected, your machine cannot utilize an attached

USB keyboard and automatically uses the MEAP virtual keyboard instead. If you select the [Enable

USB Keyboard input] check box, the [Only Use

Cherry G84 Keyboard] check box is selected automatically. The [Enable USB Keyboard input] check box is not selected by default.

NOTE

• If a USB keyboard is attached to or detached from the machine after Authorized Send has been installed and started, the machine must be restarted.

• imageRUNNERs 3225/3230/3235/3245 have a setting to enable or disable the MEAP driver for

USB input. This setting must be turned on to use the

USB keyboard with Authorized Send. To turn this setting on, go to the machine’s control panel, press

(Additional Functions) ➞ [System Settings] ➞

[USB Settings] ➞ [Use MEAP Driver for USB

Input Device] ➞ select [On].

• If the [Enable USB Keyboard input] check box is selected and the machine is restarted, you will only be able to use an attached USB keyboard to input text. If no USB keyboard is attached, you have no way to input text into Authorized Send since the

MEAP virtual keyboard is not displayed.

• The machine must be restarted each time you select or clear the [Enable USB Keyboard input] check box for the change to take effect.

114 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Only Use Cherry G84

Keyboard:

Configuration Session

Timeout (min):

Network Socket

Timeout (seconds):

Select this check box if you want to only use the

Cherry G84 keyboard. By default, this check box is selected.

NOTE

• The [Only Use Cherry G84 Keyboard] check box is displayed only if the [Enable USB Keyboard input] check box is selected.

• If a Cherry G84 keyboard and another HID are connected to your machine at the same time, only the Cherry G84 keyboard is functional for

Authorized Send.

• If the [Only Use Cherry G84 Keyboard] check box is not selected and a non-keyboard HID is the only device connected to your machine, you have no way to input text into Authorized Send since the MEAP virtual keyboard is not displayed.

• If the [Only Use Cherry G84 Keyboard] check box is not selected and the [Enable USB Keyboard input] check box is selected, any USB keyboard can be used to input text, but only the Cherry G84 keyboard is supported. In this case, to avoid any incompatibility issues between MEAP installed applications and HID card readers, or other HIDs, it is recommended that you select the [Only Use

Cherry G84 Keyboard] check box.

• The machine must be restarted each time you select or clear the [Only Use Cherry G84 Keyboard] check box for the change to take effect.

Enter the time in minutes until the Authorized Send

Configuration servlet session times out. You can set the timeout period between ‘1’ and ‘60’ minutes. The default setting is ‘5’ minutes.

Enter the time in seconds until the connection to the authentication server and address book server times out. You can set the timeout period between ‘1’ and

‘30’ seconds. The default setting is ‘5’ minutes.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 115

Application Display Name Enter the application display name. You can enter a

(up to 20 characters): maximum of 20 characters. Valid characters are the printable ASCII characters and the carriage return.

The default setting is ‘Authorized Send’.

If the application display name is changed, restart the machine for the change to take effect. If you want to return to the default setting, leave this text box blank.

116 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

3.17 Configuring Log Settings

You can enable the Log function and view or delete the current log file.

Click [Logs].

If necessary, see the screen shot in step 22 of

“Flow of Configuration Operations,” on p. 35.

Click the [Enable Logging] check box.

When the [Enable Logging] check box is selected, Authorized Send will log debug and error messages up to a maximum file size of 1 MB (1,024 KB).

There are can be two log files, each with a maximum file size of 512 KB.

Current Log: Contains the most recent logging information. Once the Current

Log reaches the maximum file size, it replaces the History Log (if it exists), or it creates a new History Log. The Current Log is then cleared to 0 KB.

History Log: Contains the contents of the last Current Log that reached the maximum file size. The History Log does not exist until the

Current Log reaches its maximum size and resets itself.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 117

Select the severity level from the Severity Level drop-down list.

The table below shows the supported levels of increasing severity and their respective numeric codes.

Severity Level Numeric Code

Emergency 0

Alert 1

Critical 2

Error 3

Warning 4

Notice 5

Info 6

Debug 7

When you select a severity from the drop-down list, that severity and all severities with a lower numeric value are logged.

The default setting is ‘Debug’. If [Debug] is selected, all severities are logged.

118 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Select the [Enable Syslog] check box.

If you select the [Enable Syslog] check box, at least one syslog server must be configured.

Authorized Send supports only the user-level messages (Numeric Code = 1) and security/authorization messages (Numeric Code = 4) Facilities of the Syslog

RFC3164 Protocol.

User-level messages are logged locally within the Authorized Send application.

Security/authorization messages are also logged locally, as well as sent to all configured remote syslog servers.

Messages are logged in the following format:

<PRI#> HEADER MSG

PRI = Priority number depending on the Facility and Severity.

HEADER = Mmm dd hh:mm:ss HostName/IP

MSG = Tag (the application) followed by the message.

For example: <34>Feb 23 22:14:15 iR-HostName AS sign-in failed.

NOTE

The messages sent to a remote syslog server cannot exceed 1,024 bytes. Any messages that exceed 1,024 bytes are split and sent as multiple messages.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 119

Enter a syslog server’s IP address under <Syslog Server> in the table ➞ enter the corresponding UDP port number for the syslog server under <UDP Port> in the table.

120

You can configure up to three syslog servers. You can enter a maximum of five numbers for the UDP port.

Click [Save].

To view the log file, click [Current Log] or [History Log] (if available).

A browser window opens to display a snapshot of the contents of the log file.

NOTE

• The log file contents displayed are not live. To view the latest contents of the log file, you must close the log window ➞ refresh the Authorized Send Configuration servlet ➞ click [Current Log] to open a new browser window.

• [History Log] only appears after the current log reaches a maximum size of

512 KB. Once the current log reaches the maximum size, it replaces the history log (if it exists), or creates a new history log.

To download the log file, right-click [Current Log] or [History Log] ➞ select [Save

Target As] ➞ select a location to save the file.

NOTE

If HTTPS is being used for the Configuration servlet, you must first open the log file (by clicking [Current Log] or [History Log]), and then save the log file (by clicking [File] ➞ [Save As]). Right-clicking [Current Log] or [History Log] does not work with HTTPS enabled.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

To delete the log file, click [Delete].

If you want to disable the Log function, click the [Enable Logging] check box to clear the check mark ➞ click [Save].

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 121

3.18 Changing the Login ID and Password

You can change your Login ID and password to log on to the Authorized Send

Configuration servlet.

Display the Authorized Send Configuration screen and log on to the Authorized

Send Configuration servlet.

If necessary, see steps 1 and 2 of

"Flow of Configuration Operations," on p. 35.

Click [Change ID & Password].

122 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Enter the new login ID in the [New Login ID] text box ➞ confirm the ID in the

[Confirm New Login ID] text box ➞ enter the new password in the [New

Password] text box ➞ confirm the password in the [Confirm New Password] text box ➞ click [OK].

If you want to cancel changing the login ID and password, press [Cancel].

NOTE

• There is no limit to the number of characters that can be used for the new login ID and new password.

• Any alphanumeric character can be used for the new login ID and password.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 123

3.19 Using the Brand Configuration Tool (Optional)

This section describes how to dynamically modify the appearance of the end user’s interface screens using the optional Brand Configuration tool. You can customize the application’s banner image and colors, portal service logo, screen colors, button colors, and special button colors.

NOTE

• If you are upgrading from a previous version of Authorized Send that uses the default brand configuration, the new brand configuration takes effect when Authorized Send

Version 4.1 is installed.

• If you are upgrading from a previous version of Authorized Send that uses a customized brand configuration, the new brand configuration does not take effect when Authorized Send Version 4.1 is installed (the brand configuration is left as is).

1. Open a browser window ➞ enter the following URL: http://<device IP>:8000/AuthSendConfiguration/branding

(Replace <device IP> with the IP address of the MEAP device.)

IMPORTANT

Enter AuthSendConfiguration/branding exactly as shown, as it is case-sensitive.

The Brand Configuration tool screen is displayed.

124 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

The following section describes the different areas that make up the Brand

Configuration tool screen.

Description Area:

The description area displays an explanation of the Brand Configuration tool’s purpose.

Preview Area:

The preview area displays a preview of how the end user’s interface screens appear after changing the selected images and colors. This area displays a Banner

Foreground, Screen Foreground, Normal Button, Special Button, and all of the images and colors relevant to each.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 125

Status Area:

The status area displays messages as various brand configuration operations are performed. It also displays informative messages whenever errors occur. If a message is larger than the display area, a scrollbar appears to enable you to view the entire message.

126 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Settings Area:

The settings area displays the text boxes used for modifying image and color settings seen in the preview area. The settings area is made up of the Portal Service

Logo, Banner, Screen, Button, and Special Button.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 127

128

Portal Service Logo:

The Portal Service Logo provides a text box for entering the location of the application logo you want, and provides a preview of the selected image.

Banner:

The Banner area provides text boxes for specifying the background and foreground colors, and entering the location of the banner you want.

Screen:

The Screen area provides text boxes for specifying the background, foreground, and border colors.

Button:

The Button area provides text boxes for specifying the background and foreground colors for normal buttons. A normal button is any button except for the Sign In and

Sign Out buttons.

Special Button:

The Special Button area provides text boxes for specifying the background and foreground colors for special buttons. The special buttons are the Sign In and Sign

Out buttons.

NOTE

• The default values for the Portal Service Logo and Banner Image screens are:

Item Value

Portal Service Logo A blank image is used by default.

Banner Image

• The default values for the Background Color, Foreground Color, Border Color,

Banner, Screen, Button, and Special Button screens are:

Default Color Banner Screen Button

Special

Button

Background Color

255, 255, 255 187, 187, 170 187, 187, 170 255, 255, 255

Foreground Color 0, 0, 0 0, 0, 0 0, 0, 0 250, 0, 30

Border Color N/A 64, 64, 64 N/A N/A

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

2. Select [Clear All], [Default], or [Current].

[Clear All]: Click to clear all of the settings.

[Default]: Click to load the default values for each setting and populate the corresponding text boxes in the settings area.

[Current]: Click to load the currently saved values for each setting and populate the corresponding text boxes in the settings area.

3. If you want to specify the end user’s interface portal service logo:

3.1 Click the [Image Path] text box under <Portal Service Logo> ➞ enter the path to the image file you want to display, or click [Browse] ➞ navigate to the drive or directory containing the path to the image file you want to display.

3.2 Click [Save] to save the settings currently displayed in the settings area, and to update the end user’s interface portal service logo to use the new settings.

The preview area displays the updated image.

IMPORTANT

The supported file formats are jpg, jpeg, gif, and png.

NOTE

The recommended image size is 88 pixels (W) x 23 pixels (H).

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 129

4. If you want to specify the background and foreground colors, and select the image to be displayed in the end user’s interface banner area:

4.1 Click the [Background Color] text box under <Banner> ➞ enter three comma-separated digits representing the desired RGB color.

4.2 Click the [Foreground Color] text box under <Banner> ➞ enter three comma-separated digits representing the desired RGB color.

4.3 Click the [Image Path] text box under <Banner> ➞ enter the path to the image file you want to display, or click [Browse] ➞ navigate to the drive or directory containing the path to the image file you want to display.

4.4 Click [Save] to save the settings currently displayed in the settings area, and to update the end user’s interface banner to use the new settings.

The preview area displays the updated colors and image.

IMPORTANT

The supported file formats are jpg, jpeg, gif, and png.

NOTE

The recommended image size is 164 pixels (W) x 43 pixels (H).

130 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

5. If you want to specify the background, foreground, and border colors to be displayed in the end user’s interface screen area:

5.1 Click the [Background Color] text box under <Screen> ➞ enter three comma-separated digits representing the desired RGB color.

5.2 Click the [Foreground Color] text box under <Screen> ➞ enter three comma-separated digits representing the desired RGB color.

5.3 Click the [Border Color] text box under <Screen> ➞ enter three comma-separated digits representing the desired RGB color.

5.4 Click [Save] to save the settings currently displayed in the settings area, and to update the end user’s interface screen to use the new settings.

The preview area displays the updated colors.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 131

6. If you want to specify the end user’s interface background and foreground colors for the normal buttons:

6.1 Click the [Background Color] text box under <Button> ➞ enter three comma-separated digits representing the desired RGB color.

6.2 Click the [Foreground Color] text box under <Button> ➞ enter three comma-separated digits representing the desired RGB color.

6.3 Click [Save] to save the settings currently displayed in the settings area, and to update the end user’s interface normal buttons to use the new settings.

The preview area displays the updated colors.

132 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

7. If you want to specify the end user’s interface background and foreground colors for the special buttons:

7.1 Click the [Background Color] text box under <Special Button> ➞ enter three comma-separated digits representing the desired RGB color.

7.2 Click the [Foreground Color] text box under <Special Button> ➞ enter three comma-separated digits representing the desired RGB color.

7.3 Click [Save] to save the settings currently displayed in the settings area, and to update the end user’s interface special buttons to use the new settings.

The preview area displays the updated colors.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 133

This page is intentionally left blank.

134 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Chapter 4 Configuring the MEAP Device

This chapter describes how to configure your MEAP-enabled device so that you can use it with the Authorized Send application.

IMPORTANT

Inbox 99 must be available for use on the MEAP device (i.e., is not full), and with no password protection. Authorized Send temporarily stores scanned images in this inbox, and therefore, it is important that Inbox 99 have sufficient space available for these images to be stored. The images are automatically erased from Inbox 99 after scanning is complete.

4.1 Setting DNS Server Settings

After the servers and operating environment is set up, and Authorized Send is installed and configured properly, you must configure your MEAP-enabled device.

Follow the procedure below to configure the MEAP device for Authorized Send.

On the machine’s control panel, press (Additional Functions).

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 135

Press [System Settings].

If the System Manager ID and System Password have been set, enter the System

Manager ID and System Password using ⓪ – ⑨ (numeric keys) ➞ press

(Log In/Out).

136 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Press [Network Settings].

Press [TCP/IP Settings].

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 137

Press [DNS Server Settings].

138 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Press [Primary DNS Server] ➞ enter the IP address using

⓪ – ⑨ (numeric keys).

IMPORTANT

• It is not necessary to enter a [Secondary DNS Server] or [Host Name]; however, you must enter a [Domain Name].

• If you are using SMTP Authentication, make sure that the host name does not contain spaces (including trailing spaces) or trailing periods.

Press [Domain Name] ➞ enter the domain name ➞ press [OK].

Press [OK].

Press [Done] repeatedly until the Basic Features screen is displayed.

10.

Restart the machine.

IMPORTANT

The MEAP device must be restarted before the settings can take effect.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 139

4.2 Specifying the Auto Clear Mode for Auto Log Off

If the machine is idle for a certain period of time (after a scan to e-mail, scan to fax, or scan to folder key operation or job), you will be logged off of Authorized Send. This period of time is called the "Auto Clear Time."

The Auto Clear Time mode can be set from ‘0’ to ‘9’ minutes in 1 minute increments, and can also be set to ‘Off’.

NOTE

• If [0] is selected, the Auto Clear Time mode is not set.

• The default setting is ‘2’ minutes.

On the machine’s control panel, press (Additional Functions).

Press [Timer Settings].

140 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Press [Auto Clear Time].

Press [-] or [+] to specify the desired Auto Clear Time ➞ press [OK].

You can also enter values using ⓪ – ⑨ (numeric keys).

Press [Done] repeatedly until the Basic Features screen is displayed.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 141

1 4 9 s ] T J 0 5 6 i B T 2 l 1 C 0 0 5 6 i B .

0 8 0 0 3 2 3 c m / I m 1 D g 3 2 3 a .

5 1 .

0 .

2 5 1 a 3 5 1 .

0 .

2 5 F 1 o u c 0 0 3 1 1 3 5 .

7 T f 6 0 .

4 8 6 ( l a 4 g ( ) T j 2 7 .

( ) T j 1 l .

0 0 2 e .

T d [ ( P 1 4 9 s ] T J 0 5 6 i B T 2 s 7 a .

5 R 2 5 5 w 1 0 h ) 3 1 0 .

4 9 a t u ) 3 5 T 1 0 h D c 0 0 3 1 1 3 5 .

7 T f 6 0 1 0 1 e 0 .

0 0 2 5 T 9 t 0 .

4 8 6 ( l a 4 g ( ) T j 2 1 ( ) T j 1 l .

0 3 1 1 3 5 .

7 T f J l 3 1 1 3 5 .

7 T f J l 3 1 E ( ) T j 0 .

R o T 0 i C c 1 e 0 .

0 0 2 3 a .

5 R 2 5 5 n ) T j 1 l .

0 j 0 .

R o T 0 i C c 1 e 0 .

0 0 2 3 a .

5 R 2 n 2

4.3 Synchronizing the Device and Server Time

If you configure an authentication server or address book server for Kerberos authentication, you must ensure that the device clock and server clock are synchronized within the maximum server specified clock skew tolerance of ‘5’ minutes. When you authenticate using Kerberos, if there is more than a 5 minute time difference between the device clock and server clock, an error message is displayed.

You can manually adjust the device time to synchronize with the server time, or you can set to automatically synchronize the device clock with the server clock.

4.3.1 Specifying Automatic Time Synchronization

You can set the SNTP (Simple Network Time Protocol) settings to enable the device to automatically synchronize its system time with a public time server.

On the machine’s control panel, press (Additional Functions).

2. Press [System Settings].

142

If the System Manager ID and System Password have been set, enter the System

Manager ID and System Password using ⓪ – ⑨ (numeric keys) ➞ press

(Log In/Out).

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

3. Press [Network Settings].

4. Press [TCP/IP Settings].

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 143

5. Press [SNTP Settings].

NOTE

If the desired setting is not displayed, press [ ▼ ] or [ ▲ ] to scroll to the desired setting.

144 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

6. Specify the SNTP settings.

<Use SNTP>: Select [On] to perform time synchronization using SNTP.

<Polling Interval>: Select the interval for performing time synchronization from ‘1’ to ‘48’ hours.

[NTP Server Address]: Enter the NTP server address or host name.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 145

7. Press [NTP Server Check] to check the status of the NTP server.

If <OK> is displayed next to [NTP Server Check], time synchronization is working correctly via SNTP.

If <Error> is displayed next to [NTP Server Check], check the settings for [NTP

Server Address] set in step 6.

8. Press [OK].

IMPORTANT

To perform time synchronization via SNTP, it is necessary to set the time zone of the region in which you are using the machine in advance. For instructions on how to set the time zone, see the Reference Guide that came with your machine.

9. Press [Done] repeatedly until the Basic Features screen is displayed.

146 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

4.3.2 Manually Adjusting the Device Time

You can manually adjust the device time to match the Kerberos authentication server or address book server time.

On the machine’s control panel, press (Additional Functions).

2. Press [Timer Settings].

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 147

3. Press [Time Fine Adjustment].

4. Press [-] or [+] to adjust the time as necessary ➞ press [OK].

148

5. Press [Done] repeatedly until the Basic Features screen is displayed.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Chapter 5 Troubleshooting

This chapter explains the various issues that may arise when installing and configuring the necessary components of the Authorized Send application, along with possible causes and remedies.

Problem You cannot connect to the network.

Remedy Make sure that:

• The IP addresses of the MEAP device and server PCs are correct, and that you can ping the device.

• The server PC is on the network.

• You are not using a proxy server.

Problem The Authorized Send application is not functioning properly.

Remedy Verify that the supported MEAP contents and system software versions are installed on the MEAP device.

Problem When creating a share name on the Authorized Send Configuration screen, the message <Connection failed. Could not resolve host name: xxx.> is displayed.

Remedy Make sure that the MEAP device is on the same domain as your domain

controller. (See “Setting DNS Server Settings,” on p. 135.)

Problem Cannot access SMS.

Remedy Two people cannot be logged on to SMS at the same time. Make sure that you are the only one logged on to SMS, and that you have the correct IP address and port number (:8000).

Problem The Authorized Send application cannot be installed or started.

Remedy Check to make sure that:

• Another application is not using resources.

• An authorized copy of the software is being used.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 149

Problem The [Scan to E-Mail] button is disabled.

Remedy Check to make sure that:

• An e-mail address is specified in the user’s address book account.

• An SMTP server address is configured for Authorized Send.

•

For more information, see “LDAP Failure Notification Messages,” on p. 168.

IMPORTANT

It is necessary for the user to log off, and then log back on after the changes mentioned above have been made to activate the [Scan to E-Mail] key.

Problem The Browse feature in the Scan to Folder function only displays non-hidden and non-system shares (i.e., the first level directory under the root is not displayed in the Browse window).

Remedy Specify the first level directory share in the path text box, and then you can browse from this directory.

Problem The address book feature in the Scan to E-Mail function does not work.

Remedy Make sure that the correct Base DN (Distinguished Name) is entered in the

[E-Mail Service] ➞ [Address Book] tab in the Authorized Send Configuration

servlet. (See “Creating an Address Book Server,” on p. 67.)

150 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Chapter 6 List of Error Messages

This chapter explains the various messages that appear on the Authorized Send Configuration servlet screen or on the touch panel display of the MEAP device, along with possible causes and remedies.

Any words that appear italicized are variables, and will be replaced with their corresponding values on the actual application screen.

NOTE

• If an error message is too long to display in full in the Message Notification Section on the touch panel display, click [ ] next to the message to display a pop-up dialog box containing the full text of the error message ➞ click [OK] to close the dialog box.

• If any error messages are displayed but are not listed in this chapter, contact your local authorized Canon dealer.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 151

6.1 Configuration Screen Error Messages

Configuration screen messages are displayed on the Configuration screen of the

Authorized Send Configuration servlet. If an error occurs during the configuration process, it is displayed in the body of the Configuration servlet screen, and is listed here.

6.1.1 Authentication Servers Screen Error Message

This section explains the Authentication Servers screen error message, along with a

possible cause and remedy. For more information on the remedy, see “Creating an

Authentication Server,” on p. 49.

Message Cause Remedy

Maximum authentication servers have been created. To create a new authentication server, you have to delete the old one(s) first.

The maximum number of 10 authentication servers has been created.

Delete the old authentication server(s) first, and make sure you do not exceed 10 servers in total.

6.1.2 Create/Update Authentication Server Screen Error

Messages

This section explains the Create Authentication Server and Update Authentication

Server screen error messages, along with possible causes and remedies. For more

information on the remedies, see “Creating an Authentication Server,” on p. 49, and

“Editing an Authentication Server,” on p. 62.

Message Cause Remedy

Authentication Host is missing.

Authentication Port has to be a number.

Authentication Port cannot be zero.

The [Host] text box is blank.

Authentication Port is missing.

The [Port] text box is blank.

A non-numeric value is entered in the [Port] text box.

Zero is entered in the [Port] text box.

Enter the DNS name or IP address of the authentication server.

Enter the numeric value for the connecting port number of the authentication server.

Enter the numeric value greater than zero for the connecting port number of the authentication server.

152 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Authentication Port has to be a positive number.

Authentication Hostname is missing.

Authentication Public DN is missing.

Authentication LDAP Match

Attribute is missing.

Authentication Search Root is missing.

Anonymous User Name is missing.

Message Cause

A negative number is entered in the [Port] text box.

The [Hostname] text box is blank.

The [Public DN] text box is blank.

The [LDAP Match Attribute] text box is blank.

The [Search Root] text box is blank.

The [Anonymous User Name] text box is blank.

Remedy

Enter the numeric value greater than zero for the connecting port number of the authentication server.

Enter the host name of the authentication server.

Enter the public DN.

Enter the LDAP match attribute.

Enter the search root.

Enter the anonymous user name for anonymous sending.

Anonymous User Name is too long. It cannot exceed 40 characters.

The anonymous user name in the

[Anonymous User Name] text box exceeds 40 characters.

Make sure the anonymous user name does not exceed

40 characters.

Anonymous User Name cannot contain the following symbols:

‘x’, ‘y’, ‘z’…

The [Anonymous User Name] text box contains ‘x’, ‘y’, and ‘z’ which represent invalid symbols, such as ‘\’, ‘:’, ‘?’, etc.

Make sure the anonymous user name is using valid symbols.

Anonymous User E-Mail is not valid.

An e-mail address with an invalid format is entered in the

[Anonymous User E-Mail] text box.

The part before the ‘@’ symbol is blank.

Make sure the e-mail address format is valid. See

step 5.4 in “Creating an

Authentication Server,”

p. 49.

Make sure the part before the ‘@’ symbol is not blank.

Anonymous User E-Mail is not valid: local part cannot be empty

Anonymous User E-Mail is not valid: local part cannot exceed

64 characters

Anonymous User E-Mail is not valid: dot, ‘.’, cannot be the first or the last character in the local part

Anonymous User E-Mail is not valid: ‘non-ASCII printable

character’ is not an ASCII printable character.

Anonymous User E-Mail is not valid: dot, ‘.’, cannot appear consecutively in the local part.

The part before the ‘@’ symbol exceeds 64 characters.

The dot, ‘.’, is the first or last character in the local part.

A non-ASCII printable character is entered.

The dot, ‘.’, is entered consecutively in the local part.

Make sure the part before the ‘@’ symbol does not exceed 64 characters.

Make sure the dot, ‘.’, is not the first or last character in the local part.

Make sure an ASCII printable character is entered.

Make sure the dot, ‘.’, is not entered consecutively in the local part.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 153

154

Message

Anonymous User E-Mail is not valid: local part cannot contain character(s) ‘?’, ‘&’

Cause

The local part contains non-alphanumeric values other than ‘.’, ‘-’, and ‘_’ (such as ‘?’,

‘&’, ‘$’, ‘#’, ‘%’, etc.).

Anonymous User E-Mail is not valid: domain cannot be empty if ‘@’ is present.

The symbol, ‘@’, is present, but the domain part is blank.

Remedy

Make sure the local part contains only the non-alphanumeric values

‘.’, ‘-’, and ‘_’.

Make sure if the symbol,

‘@’, is present, the domain part is not blank.

Make sure the domain part does not exceed 255 characters.

Anonymous User E-Mail is not valid: domain cannot exceed

255 characters.

The domain part exceeds 255 characters.

Anonymous User E-Mail is not valid: hyphen, ‘-’, or dot, ‘.’, cannot be the first or the last character in the domain.

Anonymous User E-Mail is not valid: hyphen, ‘-’, or dot, ‘.’, cannot appear consecutively in the domain.

The hyphen, ‘-’, or dot, ‘.’, appear first or last in the domain.

Make sure the hyphen, ‘-’, or dot, ‘.’, does not appear first or last in the domain.

The hyphen, ‘-’, or dot, ‘.’, appears consecutively in the domain.

Make sure the hyphen, ‘-’, or dot, ‘.’, does not appear consecutively in the domain.

Anonymous User E-Mail is not valid: domain cannot contain character(s) ‘?’, ‘&’

The domain contains non-alphanumeric values other than ‘.’, ‘-’, and ‘_’ (such as ‘?’,

‘&’, ‘$’, ‘#’, ‘%’, etc.).

Domain name is missing.

Pre-Set Share Search Root cannot be empty.

NTLM domain name cannot be empty.

Cannot pull a live domain controller from DNS servers.

Connection Failed. Could not connect to x:y

Connection Failed. Could not resolve host name: x.

Make sure the domain contains only the non-alphanumeric values

‘.’, ‘-’, and ‘_’.

The [Domain Name] text box is blank.

The [Search Root] text box for the Retrieve Home Directory function is blank.

The [NTLM domain name] text box is blank.

The [Pull host from DNS] radio button is set to ‘Yes’ and a live domain controller cannot be found.

The connection to the authentication server failed because Authorized Send cannot connect to the host name, represented by x , and the port, represented by y .

The connection to the authentication server failed because Authorized Send cannot resolve the host name, represented by x .

Enter the domain name of the authentication server.

Enter the search root.

Enter the NTLM domain name.

Check the configuration and try again.

Check the host name and/or port and try again.

Check the host name and/or server configuration and try again.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Message Cause Remedy

Duplicated authentication server: an authentication server with domain [x] and authentication method [y] already exists.

An authentication server already exists where the domain is represented by x , and the authentication method is represented by y .

Check the authentication server, domain, and authentication method and try again.

6.1.3 E-Mail Service Configuration Screen Error Messages

This section explains the E-mail Service Configuration screen error messages, along with possible causes and remedies. For more information on the remedies, see

“Configuring the E-Mail Service Settings,” on p. 65.

Message Remedy

SMTP Server Address is missing.

SMTP Server Port has to be a number.

Cause

The [SMTP Server Address] text box is blank.

A non-numeric value is entered in the [Port] text box, or the [Port] text box is blank.

Enter the SMTP server address.

SMTP Server Port cannot be zero.

SMTP Server Port has to be a positive number.

Zero is entered in the [Port] text box.

A negative number is entered in the [Port] text box.

Enter the numeric value for the connecting port number of the

SMTP server.

Enter the numeric value greater than zero for the connecting port number of the SMTP server.

SMTP Public Username

Missing.

SMTP Public Password

Missing.

Connection Failed. Could not connect to x:y

Connection Failed. Could not resolve host name: x.

The [SMTP Public Username] text box is blank.

The [SMTP Public Password] text box is blank.

The connection to the SMTP server failed because

Authorized Send cannot connect to the host name, represented by x , and the port, represented by y .

The connection to the SMTP server failed because

Authorized Send cannot resolve the host name, represented by x .

Enter the SMTP public username.

Enter the SMTP public password.

Check the host name and/or port and try again.

Check the host name and/or server configuration and try again.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 155

6.1.4 Address Book Servers Screen Error Message

This section explains the Address Book Servers screen error message, along with a

possible cause and remedy. For more information on the remedy, see “Creating an

Address Book Server,” on p. 67.

Message Cause Remedy

Maximum address book servers have been created.

To create a new address book server, you have to delete the old one(s) first.

The maximum number of 10 address book servers has been created.

Delete the old address book server(s) first, and make sure you do not exceed 10 servers in total.

6.1.5 Create/Update Address Book Server Screen Error

Messages

This section explains the Create Address Book Server and Update Address Book

Server screen error messages, along with possible causes and remedies. For more

information on the remedies, see “Creating an Address Book Server,” on p. 67, and

“Editing an Address Book Server,” on p. 90.

Message

Address Book Port has to be a number.

Address Book Port cannot be zero.

Address Book port has to be a positive number.

Cannot pull a live domain controller from DNS servers.

Cause

A non-numeric value is entered in the [Port] text box.

Zero is entered in the [Port] text box.

A negative number is entered in the [Port] text box.

The [Pull Host from DNS] radio button is set to ‘Yes’ and a live domain controller cannot be found.

Remedy

Enter a numeric value for the port.

Enter a numeric value greater than zero for the port.

Check the configuration and try again.

Address Book Host is missing.

Address Book Port is missing.

Address Book Hostname is missing.

The [Host] text box is blank.

The [Port] text box is blank.

Enter the DNS name or IP address of the address book server.

Enter a valid number for the port.

Enter the host name of the address book server.

Address Book Public DN is missing.

Address Book Public User

Name is missing.

The [Hostname] text box is blank.

The [Public DN] text box is blank.

The [Public User Name] text box is blank.

Enter the public DN.

Enter the public user name.

156 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Message

Address Book Domain is missing.

Address Book Search Root is missing.

Address Book LDAP

Match Attribute is missing.

Address Book LDAP

Email Attribute is missing.

Connection Failed. Could not connect to x:y

Connection Failed. Could not resolve host name: x.

Cause

The [Domain Name] text box is blank.

The [Search Root] text box is blank.

The [LDAP Match Attribute] text box is blank.

The [LDAP Email Attribute] text box is blank.

The connection to the address book server failed because

Authorized Send cannot connect to the host name, represented by x , and the port, represented by y .

The connection to the address book server failed because

Authorized Send cannot resolve the host name, represented by x .

Remedy

Enter the domain name of the address book server.

Enter the search root.

Enter the LDAP match attribute.

Enter the LDAP e-mail attribute.

Check the host name and/or port and try again.

Check the host name and/or server configuration and try again.

Duplicated address book server: an address book server with domain [x] and bind method [y] already exists.

An address book server already exists where the domain is represented by x , and the bind method is represented by y

Check the address book server, domain, and bind method and try again.

6.1.6 Scan to E-Mail Configuration Screen Error Messages

This section explains the Scan to E-Mail Configuration screen error messages, along with possible causes and remedies. For more information on the remedies, see

“Configuring Scan to E-Mail Settings,” on p. 93.

Message Cause Remedy

‘To’ and ‘Address Book’ are disabled and no default value is specified for ‘To’ field.

The [To] and [Address Book] check boxes are selected, the

[To] text box is blank, and the

[Self] check box is not selected.

Perform any of the following:

• Clear the check mark from either the [To] or [Address

Book] check box, or clear the check marks from both the

[To] and [Address Book] check boxes.

• Enter a default value in the

[To] text box.

• Select the [Self] check box.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 157

Message

Default value for ‘Subject’ field cannot be empty if the field is disabled and required.

Cause

The [Subject] check box is selected, the [Subject] text box is blank, and the [Required] check box is selected.

Remedy

Perform any of the following:

• Clear the check mark from the

[Subject] check box.

• Enter a default value in the

[Subject] text box.

• Clear the check mark from the

[Required] check box.

Make sure the default value in the

[Subject] text box does not exceed

255 characters.

Default value for ‘Subject’ field is too long. It cannot exceed 255 characters.

The default value in the

[Subject] text box exceeds 255 characters.

Default value for ‘Body’ field is too long. It cannot exceed 255 characters.

The default value in the

[Body] text box exceeds 255 characters.

Make sure the default value in the

[Body] text box does not exceed

255 characters.

6.1.7 Scan to Fax Configuration Screen Error Messages

This section explains the Scan to Fax Configuration screen error messages, along with possible causes and remedies. For more information on the remedies, see

“Configuring Scan to Fax Settings,” on p. 97.

Message Cause Remedy

Fax Recipient Template cannot be empty.

The [Fax Recipient Template] text box is blank.

Enter a fax recipient template.

Fax Recipient Template must contain the ‘Fax

Number’ variable.

The value entered in the [Fax

Recipient Template] text box does not contain the ‘Fax

Number’ variable

‘${FAXNUMBER}’.

Add the variable

${FAXNUMBER} to the fax recipient template.

6.1.8 Scan to Folder Configuration Screen Error Messages

This section explains the Scan to Folder Configuration screen error messages, along with possible causes and remedies. For more information on the remedies, see

“Configuring Scan to Folder Settings,” on p. 100.

Message Remedy

Connection Failed. Could not connect to x:42

Cause

The connection to the WINS server failed because

Authorized Send cannot connect to the WINS server IP, represented by x , and the

WINS server port 42.

Check the WINS server IP and try again.

158 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Message Cause Remedy

Connection Failed. Could not resolve host name: x.

The connection to the WINS server failed because

Authorized Send cannot resolve the WINS server host name, represented by x .

Check the WINS server host name and/or server configuration and try again.

6.1.9 Create/Update Share Name Screen Error Messages

This section explains the Create Share Name and Update Share Name screen error messages, along with possible causes and remedies. For more information on the

remedies, see “Creating a Preset Share,” on p. 103, and

“Editing a Preset Share,” on p. 106.

Message Cause Remedy

Share Name is missing.

File Server is missing.

File path is missing.

Share name x is reserved.

Please choose another one.

Share name x exists. Please choose another one.

Connection Failed. Could not connect to x:y

Connection Failed. Could not resolve host name: x.

The [Share Name] text box is blank.

The [File Server] text box is blank.

The [File Path] text box is blank.

The share name, represented by x , can be one of the following reserved names:

• “-Select Share-”

• “Home Directory”

• “Home Directory (if exists)”

The share name, represented by x , already exists.

The connection to the file server failed because

Authorized Send cannot connect to the file server IP, represented by x , and the file server port, represented by y

(139 or 445).

The connection to the file server failed because

Authorized Send cannot resolve the file server host name, represented by x

Enter a share name.

Enter the DNS name or IP address to send documents.

Enter the path of the folder to send documents.

Enter a share name other than a name that is already on the list of reserved names.

Enter a share name that does not already exist.

Check the file server IP and try again.

Check the file server host name and/or server configuration and try again.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 159

6.1.10 Options Screen Error Messages

This section explains the Options screen error messages, along with possible causes

and remedies. For more information on the remedies, see “Configuring Optional

Settings,” on p. 113.

Message

Configuration Session

Timeout cannot be zero.

Configuration Session

Timeout cannot exceed 60 minutes.

Configuration Session

Timeout has to be a number.

Configuration Session

Timeout needs to be set.

Configuration Session

Timeout needs to be a positive number.

Network Socket Timeout cannot be zero.

Network Socket Timeout needs to be a positive number.

Network Socket Timeout cannot exceed 30 seconds.

Network Socket Timeout has to be a number.

Network Socket Timeout needs to be set.

The application display name is too long.

Maximum length is 20 characters.

Cause

Zero is entered in the

[Configuration Session

Timeout (min)] text box.

A number greater than 60 is entered in the [Configuration

Session Timeout (min)] text box.

A non-numeric value is entered in the [Configuration

Session Timeout (min)] text box.

The [Configuration Session

Timeout (min)] text box is blank.

A negative value is entered in the [Configuration Session

Timeout (min)] text box.

Zero is entered in the

[Network Socket Timeout

(seconds)] text box.

A negative value is entered in the [Network Socket Timeout

(seconds)] text box.

The number entered in the

[Network Socket Timeout

(seconds)] text box is greater than 30.

A non-numeric value is entered in the [Network Socket

Timeout (seconds)] text box.

The [Network Socket Timeout

(seconds)] text box is blank.

The application display name entered in the [Application

Display Name (up to 20 characters)] text box exceeds

20 characters.

Remedy

Enter a numeric value greater than zero for the configuration session timeout.

Enter a number less than or equal to 60 for the configuration session timeout.

Enter a numeric value for the configuration session timeout.

Enter a positive numeric value between 1 and 60 for the configuration session timeout.

Enter a numeric value greater than zero for the network socket timeout.

Enter a number less than or equal to 30 for the network socket timeout.

Enter a numeric value for the network socket timeout.

Make sure the application display name does not exceed 20 characters.

160 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Message

Application Display Name cannot contain the following characters: ‘x’,

‘y’, ‘z’

Cause

The [Application Display

Name (up to 20 characters)] text box contains ‘x’ , ‘y ’, and

‘ z’ , which represent invalid characters.

Remedy

Make sure the application display name is using valid characters.

See step 2 in

“Configuring

Optional Settings,” on p. 113.

*Warning!: Due to the size of the Application Display name entered, Application

Display Name may cover the Authorized Send tab icon.

The application display name entered in the [Application

Display Name (up to 20 characters)] text box may be covering up the icon on the display tab.

If this result is not desirable, reduce the size of the application display name entered.

*Warning!: Due to the size of the Application Display name entered, Application

Display Name may be cut off.

The application display name entered in the [Application

Display Name (up to 20 characters)] text box may get cut off on the display tab.

If this result is not desirable, reduce the size of the application display name entered.

* This denotes a warning message. A warning message will not stop the saving of the configuration data.

6.1.11 Logs Screen Error Messages

This section explains the Logs screen error messages, along with possible causes and remedies. For more information on the remedies, see

“Configuring Log Settings,” on p. 117.

Message Cause Remedy

Port for Syslog Server x must be a number.

Port for Syslog Server x cannot be zero.

Port for Syslog Server x must be a positive number.

Unknown host: server

The syslog server x , where x is

1, 2, or 3, has a UDP port whose value is not a numeric value.

The syslog server x , where x is

1, 2, or 3, has a UDP port whose value is zero.

The syslog server x , where x is

1, 2, or 3, has a UDP port whose value is a negative number.

An unknown host, represented by server , is entered in the

[Syslog Server] text box.

Enter a numeric value for the

UDP port.

Enter a numeric value greater than zero for the UDP port.

Check the host and try again.

At least one Syslog Server must be configured.

The [Enable Syslog] check box is selected, but no syslog servers are configured.

Either configure at least one syslog server or clear the check mark from the [Enable Syslog] check box.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 161

6.1.12 Change Login ID & Password Screen Error Messages

This section explains the Change Login ID and Password screen error messages, along with possible causes and remedies. For more information on the remedies, see

“Changing the Login ID and Password,”

on p. 162.

Message Remedy

New Login ID and

Confirm New Login ID do not match.

New Password and

Confirm New Password do not match.

Cause

The value entered for the [New

[Confirm New Login ID] text box.

The value entered for the [New

Password] text box does not match the value entered for the

[Confirm New Password] text box.

Enter matching values in the

[New Login ID] and [Confirm

New Login ID] text boxes.

Enter matching values in the

[New Password] and [Confirm

New Password] text boxes.

No data has been entered.

No data has been entered in any of the text boxes.

Enter values into the desired text boxes.

6.1.13 Brand Configuration Servlet Screen Error Message

This section explains the Brand Configuration servlet screen error message, along

with a possible cause and remedy. For more information on the remedy, see “Using the Brand Configuration Tool (Optional),” on p. 124.

Message Remedy

ERROR: x y Color ::

Invalid property value.

Portal Image Path::

Invalid file type.

Banner Image Path::

Invalid file type.

Cause

The value x y , where x is the settings area (Banner, Screen,

Button, or Special Button), and y is the value in the

[Background Color] or

[Foreground Color] text box, is not in the correct RGB format.

The value entered in the [Image

Path] text box on the Portal

Service Logo screen is an invalid file type.

The value entered in the [Image

Path] text box on the Banner screen is an invalid file type.

The RGB format accepts numeric values only. Enter the correct numeric values.

The valid file types are ‘.jpg’,

‘.jpeg’, ‘.png’, and ‘.gif’. Enter a valid file type for the portal image path.

The valid file types are ‘.jpg’,

‘.jpeg’, ‘.png’, and ‘.gif’. Enter a valid file type for the banner image path.

162 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

6.1.14 Authorized Send Configuration Servlet Log On Screen

Error Messages

This section explains the Authorized Send Configuration servlet log on screen error messages, along with possible causes and remedies. For more information on the

remedies, see “Flow of Configuration Operations,” on p. 35.

Message Cause Remedy

Invalid Login ID and/or

Password. Please try again.

The [Login ID] or [Password] text box contains an invalid entry.

Enter the correct login ID or password credentials.

The Authorized Send license has expired. Please contact your Canon dealer.

The Authorized Send license has expired.

Update Authorized Send with a valid license. by contacting your local authorized Canon dealer.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 163

6.2 SIGN IN Screen Notification Messages

The SIGN IN screen notification messages are displayed on the SIGN IN screen in the upper-right hand portion of the MEAP device’s UI. You will remain at the SIGN IN screen until they are resolved.

6.2.1 General Authentication Notification Messages

This section explains the general authentication notification messages, along with possible causes and remedies.

Message Cause

User name and password fields cannot be empty

The [User Name] or

[Password] text box is blank.

Remedy

Enter values for the user name and password, and do not leave them blank.

Please contact administrator to configure this device

You are attempting to log on to a MEAP device that has not been configured by a System

Administrator.

Configure Authorized Send for the environment via the Configuration servlet.

Server connect error, connection timed out

(host)

The log on authentication process exceeds the specified value in the [Network Socket

Timeout (seconds)] text box on the Options tab of the

Configuration servlet. The default setting is ‘5’ seconds.

• Check that the configured servers are active.

• Try to ping the servers from the

MEAP device.

• Increase the network socket timeout in the Configuration servlet.

Check User Name and

Password and try again.

• The [User Name] or

[Password] text box contain an invalid entry.

• If you are using an authentication method other than Kerberos, this error message may be displayed even if you entered a correct user name and password. In this case, the error message is due to another problem unrelated to the correct credentials.

Enter the correct user name or password credentials. If this does not work, contact the System

Administrator.

164 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

6.2.2 Kerberos Authentication Notification Messages

This section explains the Kerberos authentication notification messages, along with possible causes and remedies.

Message Cause

Kerberos requires username, password, host and domain

The entered user name or password is blank, or the Configuration servlet host or domain value is blank.

Remedy

Verify and reconfigure the authentication server settings for the appropriate authentication server in the

Configuration servlet, and try to log on again.

Kerberos bind failed, no connection to (host)

A Kerberos bind is attempted, and an LDAP connection has not been established.

Check your Kerberos configuration.

Kerberos bind failed, ldap ticket to (hostname)

A Kerberos session could not be established.

• Check your Kerberos configuration.

• Ensure that the configured server’s host name is correct.

Kerberos bind failed to host (host) hostname

(hostname)

A Kerberos bind is unsuccessful to the specified host and host name.

Check your Kerberos configuration.

Unable to get LDAP ticket to (hostname)

An LDAP ticket to the host name could not be acquired.

Kerberos Error Code:

KDC_S_PRINCIPAL_UNKNOWN

• Check your Kerberos configuration.

• Ensure that the configured server’s host name is correct.

Clock skew exceeds maximum tolerance at host (host)

Unable to connect to

KDC at host (host)

Unable to connect to

KDC at domain

(domain)

The MEAP device clock and KDC server clock are not within the server’s specified maximum clock skew tolerance. The default setting for the Windows 2000, Windows

2003, and Windows 2008 servers is

‘5’ minutes.

Kerberos Error Code:

AP_ERR_SKEW

A connection to the KDC at the specified host cannot be reached.

Kerberos Error Code:

UNABLE_TO_CONNECT_KDC

Insufficient cross realm privileges are configured for the MEAP device’s domain.

Kerberos Error Code:

KDC_WRONG_REALM

Verify that the MEAP device clock and configured server’s clock are in sync within the server’s maximum clock skew tolerance.

For more information, see

“Synchronizing the Device and

Server Time,” on p. 142.

• Check your Kerberos configuration.

• Ensure that the configured server is active.

• Check your Kerberos configuration.

• Verify the Kerberos cross-realm configuration.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 165

Message

Unknown host (host)

An unknown Kerberos error has occurred

Any other Kerberos error message that has not been defined as caught has occurred.

Check your Kerberos configuration.

6.2.3 NTLM Authentication Notification Messages

This section explains the NTLM authentication notification messages, along with possible causes and remedies.

Message Cause

NTLM requires username, password and domain

The entered user name, password, or domain is blank.

Remedy

Verify and reconfigure the authentication server settings for the appropriate authentication server in the Configuration servlet, and try to log on again.

NTLM bind failed, no connection to (host)

NTLM bind failed to host

(host) domain (domain)

An unknown NTLM error has occurred

Cause

The host cannot be resolved.

A NTLM bind is attempted, and an LDAP connection has not been established.

A NTLM bind is unsuccessful to the specified host and host name.

Any other NTLM error message that has not been defined as caught has occurred.

Remedy

• Check your Kerberos configuration.

• Ensure that the configured server is active.

Check your NTLM configuration.

166 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

6.2.4 Simple Authentication Notification Messages

This section explains the Simple authentication notification messages, along with possible causes and remedies.

Message Remedy

Check Public DN and

Public Password and try again

Cause

The public DN and public password have been configured in the Configuration servlet, however they are incorrect.

Verify the public DN and public password.

Anonymous binding not accepted by host (host)

Confidentiality Required

The server does not allow anonymous binding, and the public DN and public password are not configured in the

Configuration servlet.

The authentication server you are using has a “Require

TLS/SSL” option enabled, and

Authorized Send is not using

SSL for authentication.

• Verify that anonymous connections are enabled on the server.

• If anonymous connections are required to be disabled, configure the public DN and public password credentials.

• Disable any “Require

TLS/SSL” options on the authentication server.

• Enable SSL for authentication in Authorized

Send. See

“Creating an

Authentication Server,”

p. 49.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 167

6.3 MAIN Screen Notification Messages

The MAIN screen notification messages are displayed on the MAIN screen in the upper-right hand portion of the MEAP device’s UI. If an error has occurred during the authentication process, it will be displayed here.

6.3.1 LDAP Failure Notification Messages

This section explains the LDAP failure notification messages, along with possible causes and remedies.

These errors will not prevent you from authenticating into Authorized Send.

However, [Scan to E-Mail] and [Scan to Fax] will be disabled, and you will only be allowed to use the Scan to Folder function.

Message Cause Remedy

Your E-mail was not found, admin limit exceeded.

Your E-mail was not found, ambiguous response.

An LDAP server limit set by an admin authority has been exceeded.

An ambiguous response from the server was received by the client.

Check your LDAP configuration.

Your E-mail was not found, authentication not supported.

Your E-mail was not found, server busy.

Your E-mail was not found, confidentiality required.

The client authentication method is not supported by the server.

There are too many connections to the server, and the client must wait.

The session is not protected by a protocol, such as TLS.

• Check your LDAP configuration.

• Use a different authentication method.

• Check your LDAP configuration.

• Increase the amount of connections allowed by the server.

• Try authenticating later.

• Check your LDAP configuration.

• Configure Authorized Send with SSL.

Your E-mail was not found, inappropriate authentication.

Your E-mail was not found, insufficient access rights.

Your E-mail was not found, bad attribute.

During a bind operation, the client is attempting to use an authentication method that the client cannot use correctly.

The client does not have sufficient rights to perform the requested operation.

A bad LDAP object has been specified.

Check your LDAP configuration.

168 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Message

Your E-mail was not found, invalid credentials.

Your E-mail was not found, invalid DN syntax.

Cause

Invalid credentials have been supplied by the client.

Invalid DN syntax has been supplied by the client (for example, an invalid search root is entered for the authentication server settings in the

Configuration servlet).

Remedy

Check your LDAP configuration.

• Check your LDAP configuration.

• Ensure that the configured search root in the authentication server settings in the Configuration servlet is correct.

Your E-mail was not found, LDAP not supported.

Your E-mail was not found, searched partial results.

Your E-mail was not found, LDAP timed out.

Your E-mail was not found, no results.

Your E-mail was not found, bad object class.

Your E-mail was not found, could not handle referral.

Your E-mail was not found, time limit exceeded.

Your E-mail was not found, size limit exceeded.

Your E-mail was not found, unknown error

(resultCode).

LDAP is not a supported protocol on the server.

An LDAP referral was received, but was not followed.

An unknown LDAP error was received.

Check your LDAP configuration.

The LDAP server has timed out.

No results were returned by the

LDAP server.

The target object cannot be found.

An LDAP referral was received, however it could not be followed.

The client has exceeded its operation time limit.

The client has exceeded its operation size limit

Check your LDAP configuration.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 169

6.3.2 Configuration Notification Message

This section explains the configuration notification message, along with a possible cause and remedy.

Message Cause Remedy

Please contact administrator to configure

E-Mail Service.

There is a bad configuration.

Configure a valid SMTP server for the appropriate address book server in the Configuration servlet.

6.3.3 Warning Notification Message

This section explains the warning notification message, along with a possible cause and remedy.

Message Remedy

Usernames over 20 characters may cause issues with AD.

Cause

User names that are longer than 20 characters may cause problems with Active

Directory.

Make sure the user name does not exceed 20 characters.

170 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

6.4 SCAN TO EMAIL Screen Notification Messages

The SCAN TO EMAIL screen notification messages are displayed on the SCAN TO

EMAIL screen in the upper-right hand portion of the MEAP device’s UI. As you interact with the application, different types of messages are displayed to notify you of an event.

6.4.1 SCAN TO EMAIL Warning Message

This section explains the SCAN TO EMAIL warning message, along with a possible cause and remedy.

Message Cause Remedy

Scanning is disabled because the device is not ready.

The MEAP device is still in the process of sending an e-mail message, and you are attempting to start another scan.

• Wait until the MEAP device has completed the operation in progress.

• Restart the MEAP device.

6.4.2 SCAN TO EMAIL Input Request Messages

This section explains the SCAN TO EMAIL input request messages, along with possible causes and remedies.

Message Cause

Please specify at least one recipient.

Place a document in the

ADF or on the Platen then close the lid.

You tried to scan a document to e-mail, but you have not specified an e-mail address, and the [E-mail CC to self] check box is not selected.

Remedy

• Specify an e-mail address.

• Select the [E-mail CC to self] check box from the [Scan to

E-Mail] tab in the

Configuration servlet. See

“Configuring Scan to E-Mail

Settings,” on p. 93.

Place your document in the automatic document feeder or on the platen glass.

Please input subject. It is required.

Press the [Scan] button or

<Start> key to begin scanning.

You have not placed a document in the automatic document feeder or on the platen glass.

The device is ready to scan a document to be e-mailed, you did not specify a subject in the

[Subject] text box, and the

[Subject] text box is configured as enabled in the Configuration servlet.

The MEAP device is ready to scan, and validation for the

SCAN TO EMAIL screen is successful.

You must enter a subject before the device scans and sends your document.

Press [Scan] or ~ (Start).

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 171

Message Cause Remedy

Press <Enter> key to validate.

The USB keyboard is in use, and a text box was changed that requires validation.

Press [ENTER] on the USB keyboard.

6.4.3 SCAN TO EMAIL Notification Messages

This section explains the SCAN TO EMAIL notification messages, along with possible causes and remedies.

Message Cause Remedy

Checking SMTP

Connection…

You are attempting to scan and send a document via SMTP.

If the connection is OK, your document is sent to the specified destination.

Checking SMTP

Authentication…

You are attempting to scan and send a document via SMTP, and

SMTP authentication is enabled.

You must enter the correct user name and password to gain access to the SMTP server.

6.4.4 SCAN TO EMAIL Error Messages

This section explains the SCAN TO EMAIL error messages, along with possible causes and remedies.

Message Remedy

Cannot connect to the

SMTP Server.

Cause

• Connection to the SMTP server cannot be established.

• The connection has timed out from the network socket timeout setting in the

Configuration servlet.

Contact the System

Administrator to make sure that the SMTP server is connected to the network properly, and is accepting connections.

Cannot Authenticate to

SMTP Server; Invalid

Credentials.

SMTP authentication is enabled, and the SMTP authentication credentials used are invalid.

• If you are not using public credentials, make sure that you enter the correct SMTP authentication credentials on the SMTP Authentication

Password pop-up screen.

• If you are using public credentials, contact the

System Administrator to verify the public credentials configured in the

Configuration servlet. See

“Configuring the E-Mail

Service Settings,” on p. 65.

172 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

6.5 SCAN TO FAX Screen Notification Messages

The SCAN TO FAX screen notification messages are displayed on the SCAN TO FAX screen in the upper-right hand portion of the MEAP device’s UI. As you interact with the application, different types of messages are displayed notifying you of an event.

6.5.1 SCAN TO FAX Warning Message

This section explains the SCAN TO FAX warning message, along with a possible cause and remedy.

Message Cause Remedy

Scanning is disabled because the device is not ready.

The MEAP device is still in the process of sending a fax, and you are attempting to start another scan.

• Wait until the MEAP device has completed the operation in progress.

• Restart the MEAP device.

6.5.2 SCAN TO FAX Input Request Messages

This section explains the SCAN TO FAX input request messages, along with possible causes and remedies.

Message Cause Remedy

Please specify at least one fax number.

Place a document in the

ADF or on the Platen then close the lid.

Press the [Scan] button or

<Start> key to begin scanning.

Press <Enter> key to validate.

You tried to scan a fax document, but you have not specified a fax number.

You have not placed a document in the automatic document feeder or on the platen glass.

The MEAP device is ready to scan, and validation for the

SCAN TO FAX screen is successful.

The USB keyboard is in use, and a text box was changed that requires validation.

Specify a fax number.

Place your document in the automatic document feeder or on the platen glass.

Press [Scan] or ~ (Start).

Press [ENTER] on the USB keyboard.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 173

6.5.3 SCAN TO FAX Notification Messages

This section explains the SCAN TO FAX notification messages, along with possible causes and remedies.

Message Cause

Checking SMTP

Connection…

You are attempting to scan and send a document via SMTP.

Remedy

If the connection is OK, your document is sent to the specified destination.

Checking SMTP

Authentication…

You are attempting to scan and send a document via SMTP, and

SMTP authentication is enabled.

You must enter the correct user name and password to gain access to the SMTP server.

6.5.4 SCAN TO FAX Error Messages

This section explains the SCAN TO FAX error messages, along with possible causes and remedies.

Message Remedy

Cannot connect to the

SMTP Server.

Cause

• Connection to the SMTP server cannot be established.

• The connection has timed out from the network socket timeout setting in the

Configuration servlet.

Contact the System

Administrator to make sure that the SMTP server is connected to the network properly, and is accepting connections.

Cannot Authenticate to

SMTP Server; Invalid

Credentials.

SMTP authentication is enabled, and the SMTP authentication credentials used are invalid.

• If you are not using public credentials, make sure that you enter the correct SMTP authentication credentials on the SMTP Authentication

Password pop-up screen.

• If you are using public credentials, contact the

System Administrator to verify the public credentials configured in the

Configuration servlet. See

“Configuring Scan to Fax

Settings,” on p. 97.

174 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

6.6 SCAN TO FOLDER Screen Notification Messages

The SCAN TO FOLDER screen notification messages are displayed on the SCAN TO

FOLDER screen in the upper-right hand portion of the MEAP device’s UI. As you interact with the application, different types of messages are displayed notifying you of an event.

6.6.1 SCAN TO FOLDER Warning Message

This section explains the SCAN TO FOLDER warning message, along with a possible cause and remedy.

Message Cause Remedy

Scanning is disabled because the device is not ready.

The MEAP device is still in the process of sending a document to a shared folder, and you are attempting to start another scan.

• Wait until the MEAP device has completed the operation in progress.

• Restart the MEAP device.

6.6.2 SCAN TO FOLDER Input Request Messages

This section explains the SCAN TO FOLDER input request messages, along with possible causes and remedies.

Message Remedy

Select a Preset Share or enter a File Server and

File Path.

Place a document in the

ADF or on the Platen then close the lid.

Press the [Scan] button or

<Start> key to begin scanning.

Press <Enter> key to validate.

Cause

You have a document in the automatic document feeder or on the platen glass, and you have not selected a preset share or entered a file server and file path.

You have not placed a document in the automatic document feeder or on the platen glass.

The MEAP device is ready to scan the document to the share, and validation for the SCAN TO

FOLDER screen is successful.

The USB keyboard is in use, and a text box was changed that requires validation.

Select a preset share, or enter a file server and file path.

Place your document in the automatic document feeder or on the platen glass.

Press [Scan] or ~ (Start).

Press [ENTER] on the USB keyboard.

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 175

6.6.3 SCAN TO FOLDER Notification Messages

This section explains the SCAN TO FOLDER notification messages, along with possible causes and remedies.

Message Remedy

Checking access to [share] share…

Cause

The MEAP device is attempting to acquire sufficient read privileges.

Not applicable.

Validating File Server and

File Path…

The MEAP device is validating correct formatting of the file server and file path.

Not applicable.

6.6.4 SCAN TO FOLDER Error Messages

This section explains the SCAN TO FOLDER error messages, along with possible causes and remedies.

Message Cause Remedy

Specified share is inaccessible. Please enter or select another.

Home Directory is not configured. Contact administrator.

No share is pre-selected.

Contact administrator.

No share can be selected.

Contact administrator.

The MEAP device cannot acquire sufficient read privileges to the specified file path on the specified file server.

Verify that the share exists and that sufficient privileges have been configured.

The [Scan to Home

Directory/Preselected Share only] check box is selected in the

Configuration servlet, and the user has no Home Directory configured in Active Directory.

The [Scan to Home

Directory/Preselected Share only] check box is selected in the

Configuration servlet, and no preselected share is selected from the Preselected Share drop-down list.

The [File Server/Path] and

[Browse] check boxes in the

<Disabled> column are selected in the Configuration servlet, and no preset shares have been created.

• Verify that the user has a

Home Directory configured in Active Directory, or

• Clear the check mark from the [Scan to Home

Directory/Preselected

Share only] check box.

• Select or configure a preselected share in the

Configuration servlet, or

• Clear the check mark from the [Scan to Home

Directory/Preselected

Share only] check box.

• Create a preset share in the

Configuration servlet, or

• Clear the check marks from the [File Server/Path] and

[Browse] check boxes in the <Disabled> column.

See

“Configuring Scan to

Folder Settings,” on p. 100.

176 Authorized Send Installation and Configuration Guide for imageRUNNER Machines

Hello! I am an AI chatbot specifically trained to assist you with the Canon Authorized Send software Installation and Configuration Guide. I have thoroughly reviewed the document and can help you locate the exact information you need or explain the content in clear and simple terms. Whether you’re looking for guidance on specific features, troubleshooting steps, or general usage, feel free to ask your questions. The more details you provide about your concerns or needs, the more accurately and effectively I can assist you!

Assistant typing

Assistant terminated