Page 1
Administrator's Guide Required Settings to Suit Your Purpose Network Settings Required Settings for Scanning Basic Security Settings Advanced Security Settings Authentication Settings NPD6726-00 EN...
Page 2
Neither Seiko Epson Corporation nor its affiliates shall be liable to the purchaser of this product or third parties for damages, losses, costs, or expenses incurred by the purchaser or third parties as a result of accident, misuse, or abuse of this product or unauthorized modifications, repairs, or alterations to this product, or (excluding the U.S.)
Page 3
Trademarks ❏ EPSON, EPSON EXCEED YOUR VISION, EXCEED YOUR VISION and their logos are registered trademarks or trademarks of Seiko Epson. ❏ Microsoft ® ® ® , Windows , and Windows Server are registered trademarks of Microsoft Corporation. ❏ Apple, Mac, macOS, OS X, Bonjour, Safari, and AirPrint are trademarks of Apple Inc., registered in the U.S. and other countries.
Disabling the External Interface....86 Epson Device Admin..... . . 35...
Page 5
Controlling Using Protocols....91 Job History Reports Using Epson Device Admin. . 144 Controlling protocols..... 91 Items that can be Included in the Report.
Page 6
Introduction The Contents of This Document........7 Using this Guide.
To build a system, use Document Capture Pro Server Authentication Edition (the abbreviated name is Document Capture Pro Server AE). For further information, contact your local Epson office. Using this Guide Marks and Symbols Caution: Instructions that must be followed carefully to avoid bodily injury.
Introduction > > Using this Guide Operating System References Operating System References Windows In this manual, terms such as "Windows 10", "Windows 8.1", "Windows 8", "Windows 7", "Windows Server 2019", "Windows Server 2016", "Windows Server 2012 R2", "Windows Server 2012", and "Windows Server 2008 R2" refer to the following operating systems.
Page 9
Required Settings to Suit Your Purpose Required Settings to Suit Your Purpose........10...
Contacts. “Making Contacts Available” on page 58 I want to save scanned images to a cloud Setup Epson Connect. See the Epson Connect portal website for details on service. setting up. (Scan to Cloud) When setting up, you need a user account for the online storage service you want to link to.
Page 11
“About Authentication Method” on page 122 Using a Server’s Authentication System With Document Capture Pro Server Authentication Edition (abbreviated to Document Capture Pro Server AE), you can build an authentication system that uses a server for authentication. For further information, contact your local Epson office.
Access the following website, and then enter the product name. Go to Setup, and then start setting up. http://epson.sn ❏ Setting up using the software disc (only for models that come with a software disc and users with Windows computers with disc drives.)
Page 14
For the following functions, the scanner directly connects to the internet . ❏ Epson Connect Services ❏ Cloud services of other companies ❏ Firmware updating ❏ Sending scanned images to SharePoint(WebDAV) ❏...
Network Settings > > Connecting the Scanner to the Network Connecting to the Network from the Control Panel DNS Server and Proxy Server The DNS server has a host name, domain name of the email address, etc. in association with the IP address information.
Page 16
Set up the proxy server if both of the following are true. ❏ The proxy server is built for Internet connection. ❏ When using a function in which a scanner directly connects to the Internet, such as Epson Connect service or another company's cloud services.
Page 17
Network Settings > > Connecting the Scanner to the Network Connecting to the Network from the Control Panel 2. Select on the home screen. 3. Select Router. 4. Make sure that the Connection and IP Address settings are correct. 5. Tap Close. Connecting to the Wireless LAN (Wi-Fi) You can connect the scanner to the wireless LAN (Wi-Fi) in several ways.
Page 18
Network Settings > > Connecting the Scanner to the Network Connecting to the Network from the Control Panel Note: ❏ If you do not know the SSID, check if it is written on the label of the wireless router. If you are using the wireless router with its default settings, use the SSID written on the label.
Access the following website, and then enter the product name. Go to Setup, and then start setting up. http://epson.sn ❏ Setting up using the software disc (only for the models that come with a software disc and users with Windows computers with disc drives.)
Page 20
Network Settings > > … Adding or Replacing the Computer or Devices Connecting to a Scanner that has been Con Selecting the Scanner Follow the on-screen instructions until the following screen is displayed, select the scanner name you want to connect to, and then click Next.
3. Select Start Setup. 4. Start Epson Smart Panel on your smart device. 5. Follow the instructions displayed on the Epson Smart Panel to connect to your scanner. When your smart device is connected to the scanner, go to the next step.
Page 22
Network Settings > > … Adding or Replacing the Computer or Devices Connecting a Smart Device and Scanner Dir Disconnecting Wi-Fi Direct (Simple AP) Connection There are two methods available to disable a Wi-Fi Direct (Simple AP) connection; you can disable all connections by using the scanner's control panel, or disable each connection from the computer or the smart device.
Access the following website, and then enter the product name. Go to Setup, and then start setting up. http://epson.sn ❏ Setting up using the software disc (only for the models that come with a software disc and users with Windows computers with disc drives.)
Page 24
To use the scanner from a smart device, access the following website, and then enter the product name. Go to Setup, and then start setting up. http://epson.sn Access to the website from the smart device that you want to connect to the scanner.
Access the following website, and then enter the product name. Go to Setup, and then start setting up. http://epson.sn ❏ Setting up using the software disc (only for the models that come with a software disc and users with Windows computers with disc drives.)
Network Settings > > Network Specifications Wi-Fi Specifications Displays the network connection status. Select the icon to check and change the current settings. This is the shortcut for the following menu. Settings > Network Settings > Wi-Fi Setup The scanner is not connected to a wireless (Wi-Fi) network. The scanner is searching for SSID, unset IP address, or having a problem with a wireless (Wi-Fi) network.
Page 27
Network Settings > > Network Specifications Wi-Fi Specifications Countries or regions except for those listed Table A below Australia Table B New Zealand Taiwan South Korea Table A Standards IEEE802.11b/g/n Frequency Range 2.4 GHz Maximum radio-frequency 2400-2483.5 MHz: 20 dBm (EIRP) power transmitted Channels 1/2/3/4/5/6/7/8/9/10/11/12/13...
Use a category 5e or higher STP (Shielded twisted pair) cable to prevent risk of radio interference. The connected device should comply with IEEE802.3az standards. Network Functions and IPv4/IPv6 Functions Supported Epson Scan 2 IPv4, IPv6 Document Capture Pro/Document Capture IPv4 Document Capture Pro Server...
SMTP SSL/TLS (TCP) SMTP STARTTLS (TCP) POP before SMTP connection (When scan to POP server POP3 (TCP) mail is used from the scanner) When Epson Connect is used Epson Connect HTTPS Server XMPP 5222 Collecting user information (Use the contacts...
Network Settings > Solving Problems When the Sender (Client) is the Client Computer Destination Protocol Port (Server) Number Discover the scanner from an application Scanner ENPC (UDP) 3289 such as EpsonNet Config and scanner driver. Collect and set up the MIB information from Scanner SNMP (UDP) an application such as EpsonNet Config and...
Page 31
Network Settings > Solving Problems When changing the wireless router, the settings do not match the new router. Solutions Make the connection settings again so that they match the new wireless router. The SSIDs connected from the computer or smart device and computer are different. Solutions When you are using multiple wireless routers at the same time or the wireless router has multiple SSIDs and devices are connected to different SSIDs, you cannot connect to the wireless router.
Page 32
Network Settings > Solving Problems The scanner has been connected by Ethernet using devices that support IEEE802.3az (Energy Efficient Ethernet). Solutions When you connect the scanner by Ethernet using devices that support IEEE802.3az (Energy Efficient Ethernet), the following problems may occur depending on the hub or router that you are using. ❏...
Software for Setting Up the Scanner > > Web Config Running Web Config on Windows Web Config Web Config is an application that runs in web browsers such as Internet Explorer and Safari on a computer. You can confirm the scanner status or change the network service and scanner settings. Since the scanners are accessed and operated directly from the network, it is suitable for setting up one scanner at a time.
You can use configuration templates to apply unified settings to multiple scanners on a network, making it suitable for installing and managing multiple scanners. You can download Epson Device Admin from the Epson support website. For details on how to use this application, see the documentation or help for Epson Device Admin.
Page 36
Software for Setting Up the Scanner > > Epson Device Admin Configuration Template 2. Select Configuration on the side bar task menu. 3. Select New on the ribbon menu. 4. Set each item. Item Explanation Configuration Template Name Name of the configuration template.
Page 37
Software for Setting Up the Scanner > > Epson Device Admin Configuration Template Applying the Configuration Template Apply the saved configuration template to the scanner. The items selected on the template are applied. If the target scanner does not have the appropriate function, it is not applied.
Page 38
Software for Setting Up the Scanner > > Epson Device Admin Configuration Template 4. Select the configuration template you want to apply. Note: ❏ When you select Devices and groups containing devices from the pull-down menu, each device is displayed.
Required Settings for Scanning > > Configuring a Mail Server Mail Server Setting Items Configuring a Mail Server Set the mail server from Web Config. When the scanner can send the email by setting the mail server, the following are possible. ❏...
Required Settings for Scanning > > Configuring a Mail Server Checking a Mail Server Connection Items Settings and Explanation Secure Connection Specify the secure connection method for the email server. None If you select POP before SMTP in Authentication Method, the connection method is set to None.
Page 42
Required Settings for Scanning > > Configuring a Mail Server Checking a Mail Server Connection Messages Cause POP3 server communication error. This message appears when Check the following. - Network ❏ The scanner is not connected to a network Settings ❏...
Required Settings for Scanning > > Setting a Shared Network Folder Creating the Shared Folder Messages Cause Sender's Email Address is incorrect. This message appears when the specified sender’s Email address is wrong. Change to the email address for your email service.
Page 44
Required Settings for Scanning > > Setting a Shared Network Folder Creating the Shared Folder 3. Click Change advanced sharing settings, and then click for the profile with (current profile) in the displayed network profiles. 4. Check whether Turn on file and printer sharing is selected on File and Printer Sharing. If already selected, click Cancel and close the window.
Page 45
Required Settings for Scanning > > Setting a Shared Network Folder Creating the Shared Folder 2. Start explorer. 3. Create the folder on the root of drive, and then name it "scan_folder". For the folder name, enter between 1 and 12 alphanumeric characters. If the character limit of the folder name is exceeded, you may not be able to access it normally by the varied environment.
Page 46
Required Settings for Scanning > > Setting a Shared Network Folder Creating the Shared Folder 5. Click Advanced Sharing on the Sharing tab.
Page 47
Required Settings for Scanning > > Setting a Shared Network Folder Creating the Shared Folder 6. Select Share this folder, and then click Permissions. 7. Select Everyone group of Group or user names, select Allow on Change, and then click OK.
Page 48
Required Settings for Scanning > > Setting a Shared Network Folder Creating the Shared Folder 8. Click OK. 9. Select Security tab, and then select Authenticated Users on the Group or user names. "Authenticated Users" is the special group that includes all users who can log in to the domain or computer. This group is displayed only when the folder is created just below the root folder.
Page 49
Required Settings for Scanning > > Setting a Shared Network Folder Creating the Shared Folder 10. Check that Allow on Modify is selected in Permissions for Authenticated Users. If it is not selected, select Authenticated Users, click Edit, select Allow on Modify in Permissions for Authenticated Users, and then click OK.
Page 50
Required Settings for Scanning > > Setting a Shared Network Folder Creating the Shared Folder 11. Select Sharing tab. The network path of the shared folder is displayed. This is used when registering to the contacts of the scanner. Please write it down. 12.
Page 51
Required Settings for Scanning > > Setting a Shared Network Folder Creating the Shared Folder ❏ Folder path: C:\Users\xxxx\Desktop\scan_folder ❏ Access permission via network (Share Permissions): Everyone ❏ Access permission on file system (Security): do not add, or add User/Group names to permit access 1.
Page 52
Required Settings for Scanning > > Setting a Shared Network Folder Creating the Shared Folder 5. Click Advanced Sharing on the Sharing tab.
Page 53
Required Settings for Scanning > > Setting a Shared Network Folder Creating the Shared Folder 6. Select Share this folder, and then click Permissions. 7. Select Everyone group of Group or user names, select Allow on Change, and then click OK.
Page 54
Required Settings for Scanning > > Setting a Shared Network Folder Creating the Shared Folder 8. Click OK. 9. Select Security tab. 10. Check the group or the user in the Group or user names. The group or the user that is displayed here can access the shared folder. In this case, the user who logs in to this computer and the Administrator can access the shared folder.
Page 55
Required Settings for Scanning > > Setting a Shared Network Folder Creating the Shared Folder 11. Select Sharing tab. The network path of the shared folder is displayed. This is used when registering to the contacts of the scanner. Please write it down. 12.
Page 56
Required Settings for Scanning > > Setting a Shared Network Folder Creating the Shared Folder 3. Click Edit.
Page 57
Required Settings for Scanning > > Setting a Shared Network Folder Creating the Shared Folder 4. Click Add under the Group or user names. 5. Enter the group or user name that you want to permit access, and then click Check Names. An underline is added to the name.
Required Settings for Scanning > Making Contacts Available 6. Click OK. 7. On the Permission screen, select the user name that is entered in Group or user names , select the access permission on Modify, and then click OK. 8. Click OK or Close to close the screen. Check whether the file can be written or read on the shared folder from the computers of users or groups with access permission.
“Cooperation between the LDAP Server and Users” on page 65 & Contacts Configuration Comparison There are three tools for configuring the scanner's contacts: Web Config, Epson Device Admin, and the scanner's control panel. The differences between three tools are listed in the table below. Features Epson Device Admin Scanner’s control panel...
Page 60
Required Settings for Scanning > > … Making Contacts Available Registering a Destination to Contacts usin Destination Setting Items Items Settings and Explanation Common Settings Name Enter a name displayed in the contacts in 30 characters or less in Unicode (UTF-16).
Required Settings for Scanning > > … Making Contacts Available Registering Destinations as a Group Using Items Settings and Explanation Certificate Validation The FTP server's certificate is validated when this is enabled. This is available when FTPS is selected for Secure Connection. To set up, you need to import the CA Certificate to the scanner.
Contacts data may be lost due to a scanner malfunction. We recommend that you make a backup of the data whenever you update the data. Epson shall not be responsible for the loss of any data, for backing up or recovering data and/or settings even during a warranty period.
Export and Bulk Registration of Contacts U Export and Bulk Registration of Contacts Using Tool If you use Epson Device Admin, you can back up just the contacts and edit the exported files, then register them all at once. It is useful if you want to back up only the contacts or when you replace the scanner and you want to transfer the contacts from the old one to new one.
Page 64
You can import the files saved in SYLK format or csv format or the backed-up binary file that includes the security items. 1. Start Epson Device Admin. 2. Select Devices on the side bar task menu. 3. Select the device you want to configure from the device list.
Required Settings for Scanning > > … Making Contacts Available Cooperation between the LDAP Server an Cooperation between the LDAP Server and Users When cooperating with the LDAP server, you can use the address information registered to the LDAP server as the destination of an email.
Page 66
Required Settings for Scanning > > … Making Contacts Available Cooperation between the LDAP Server an Items Settings and Explanation Administrator DN / User Name Enter the user name for the LDAP server in 128 characters or less in Unicode (UTF-8).
Page 67
Required Settings for Scanning > > … Making Contacts Available Cooperation between the LDAP Server an Items Settings and Explanation User name Attribute Specify the attribute name to display when searching for user names. Enter between 1 and 255 characters in Unicode (UTF-8). The first character should be a-z or A-Z.
Install it on the server computer. For more information on Document Capture Pro Server, contact your local Epson office. Setting Server Mode To use Document Capture Pro Server, set up as follows.
Required Settings for Scanning > > Problems when Preparing Network Scanning Hints to Solving Problems Items Explanation Wide-Area Bonjour Set whether or not to use Wide-Area Bonjour. If you use it, the scanner must be registered on the DNS server in order to search for the scanner over the segment. Enable AirPrint Bonjour and AirPrint (Scan service) are enabled.
Page 70
Required Settings for Scanning > > Problems when Preparing Network Scanning Hints to Solving Problems CA-signed Certificate is expired. Solutions If there is a problem with the expiration date of the certificate, "The certificate has expired" is displayed when connecting to Web Config with SSL/TLS communication (https). If the message appears before its expiration date, make sure that the scanner's date is configured correctly.
Customizing the Control Panel Display > Registering Presets Registering Presets You can register frequently used scanning setting as Presets. You can register up to 48 presets. Note: ❏ You can register the current settings by selecting on the start scanning screen. ❏...
Customizing the Control Panel Display > > Registering Presets Menu Options of Presets 3. Select the menu you want to use to register a preset. 4. Set each item, and then select Note: When you select Scan to Computer, select the computer on which Document Capture Pro is installed, and then select a registered job.
Customizing the Control Panel Display > > … Editing the Home Screen of the Control Panel Changing th Change Icon: Changes the icon image and color of the preset. Quick Send Setting: Immediately starts scanning without confirmation when the preset is selected. Change Position: Changes the display order of the presets.
Customizing the Control Panel Display > > Editing the Home Screen of the Control Panel Add Icon 2. Select Line or Matrix. Line: Matrix: 3. Select to return and check the home screen. Add Icon 1. Select Settings > Edit Home > Add Icon on the scanner's control panel. 2.
Customizing the Control Panel Display > > Editing the Home Screen of the Control Panel Remove Icon ❏ Presets: Displays registered presets. 3. Select the item you want to add to the home screen. 4. Select the blank space where you want to add the item. If you want to add multiple icons, repeat steps 3 to 4.
Customizing the Control Panel Display > > Editing the Home Screen of the Control Panel Move Icon 2. Select the icon you want to remove. 3. Select Yes to finish. If you want to remove multiple icons, repeat procedure 2 to 3. 4.
Page 78
Customizing the Control Panel Display > > Editing the Home Screen of the Control Panel Move Icon 3. Select the destination frame. If another icon is already set in the destination frame, the icons are replaced. 4. Select to return and check the home screen.
To find the serial number, check the label attached to the rear of the scanner. You can change the administrator password using either Web Config, the scanner's control panel, or Epson Device Admin. When using Epson Device Admin, see the Epson Device Admin guide or help.
Page 81
Basic Security Settings > > Administrator Settings Configuring the Administrator Password 2. Enter the necessary information in Current password, User Name, New Password, and Confirm New Password. Enter at least one character for the new password. Note: The following provides the default values for the administrator information. ❏...
Basic Security Settings > > Administrator Settings Using Lock Setting for the Control Panel Using Lock Setting for the Control Panel You can use Lock Setting to lock the control panel to prevent users from changing items related to system settings. Note: If you enable Authentication Settings on the scanner, Lock Setting is also enabled for the control panel.
Page 83
Basic Security Settings > > Administrator Settings Using Lock Setting for the Control Panel Settings menu Lock Setting LCD Brightness Sounds ✓ Sleep Timer ✓ Power Off Timer ✓ Date/Time Settings ✓/- Language Keyboard (This feature may not be available depending on your region.) ✓...
Page 84
Network Settings ✓ Wi-Fi Setup ✓ Wired LAN Setup ✓ Network Status ✓ Advanced ✓ Web Service Settings ✓ Epson Connect Services Document Capture Pro ✓ Change Settings Contacts Manager Register/Delete ✓/- Frequent View Options Search Options ✓ System Administration ✓...
Basic Security Settings > > Administrator Settings Logging in as an Administrator from the Control Panel Settings menu Lock Setting Serial Number Current Version Total Number of Scans Number of 1-Sided Scans Number of 2-Sided Scans Number of Scans of Carrier Sheet Number of Scans After Replacing Roller Number of Scans After Regular Cleaning ✓...
Basic Security Settings > Disabling the External Interface 2. Tap Yes when the confirmation screen is displayed. 3. Enter the administrator's password. A login complete message is displayed, and then the Home screen on the control panel is displayed. To logout, tap at the top right of the Home screen.
Basic Security Settings > > Monitoring a Remote Scanner Receiving Email Notifications When Events Occur Monitoring a Remote Scanner Checking Information for a Remote Scanner You can check the following information of the operating scanner from Status by using Web Config. ❏...
For scanners that do not have access protection from the outside, it will be possible to read the contacts that are stored in the scanner from the Internet. In order to avoid this risk, Epson scanners have a variety of security technologies. Set the scanner as necessary according to the environmental conditions that have been built with the customer's environment information.
Advanced Security Settings > > Controlling Using Protocols Protocols you can Enable or Disable Security Feature Settings When setting IPsec/IP filtering or IEEE802.1X, it is recommended that you access Web Config using SSL/TLS to communicate settings information in order to reduce security risks such as tampering or interception. Make sure you configure the administrator password before setting IPsec/IP filtering or IEEE802.1X.
Advanced Security Settings > > Controlling Using Protocols Protocol Setting Items Protocol Description SNMPv1/v2c Settings You can specify whether or not to enable SNMPv1/v2c. This is used to set up devices, monitoring, and so on. SNMPv3 Settings You can specify whether or not to enable SNMPv3. This is used to set up encrypted devices, monitoring, etc.
Page 93
Advanced Security Settings > > Controlling Using Protocols Protocol Setting Items Items Setting value and Description Enable LLMNR Select this to enable LLMNR. You can use name resolution without NetBIOS even if you cannot use DNS. SNMPv1/v2c Settings Items Setting value and Description Enable SNMPv1/v2c Select to enable SNMPv1/v2c.
Advanced Security Settings > > Using a Digital Certificate Configuring a CA-signed Certificate Using a Digital Certificate About Digital Certification ❏ CA-signed Certificate This is a certificate signed by the CA (Certificate Authority.) You can obtain it to apply to the Certificate Authority.
Page 95
Advanced Security Settings > > Using a Digital Certificate Configuring a CA-signed Certificate 1. Access Web Config, and then select the Network Security tab. Next, select SSL/TLS > Certificate or IPsec/IP Filtering > Client Certificate or IEEE802.1X > Client Certificate. Whatever you choose, you can obtain the same certificate and use it in common.
Page 96
Advanced Security Settings > > Using a Digital Certificate Configuring a CA-signed Certificate Items Settings and Explanation Common Name You can enter between 1 and 128 characters. If this is an IP address, it should be a static IP address. You can enter 1 to 5 IPv4 addresses, IPv6 addresses, host names, FQDNs by separating them with commas.
Page 97
Advanced Security Settings > > Using a Digital Certificate Configuring a CA-signed Certificate ❏ A certificate of the PKCS#12 format obtained from a computer ❏ Private Key: Do not configure. ❏ Password: Optional ❏ CA Certificate 1/CA Certificate 2: Do not configure. 4.
Advanced Security Settings > > Using a Digital Certificate Configuring a CA Certificate 3. Confirm that you want to delete the certificate in the message displayed. Related Information “Running Web Config on a Web Browser” on page 34 & Updating a Self-signed Certificate Because the Self-signed Certificate is issued by the scanner, you can update it when it has expired or when the content described changes.
Advanced Security Settings > > SSL/TLS Communication with the Scanner Configuring Basic SSL/TLS Settings Importing a CA Certificate Import the CA Certificate to the scanner. 1. Access Web Config and then select the Network Security tab > CA Certificate. 2. Click Import. 3.
Advanced Security Settings > > … SSL/TLS Communication with the Scanner Configuring a Server Certificate f 2. Select a value for each item. ❏ Encryption Strength Select the level of encryption strength. ❏ Redirect HTTP to HTTPS Redirect to HTTPS when HTTP is accessed. 3.
Advanced Security Settings > > Encrypted Communication Using IPsec/IP Filtering Configuring Default Policy Encrypted Communication Using IPsec/IP Filtering About IPsec/IP Filtering You can filter traffic based on IP addresses, services, and port by using IPsec/IP Filtering function. By combining of the filtering, you can configure the scanner to accept or block specified clients and specified data.
Page 102
Advanced Security Settings > > Encrypted Communication Using IPsec/IP Filtering Configuring Default Policy ❏ IKE Version Select IKEv1 or IKEv2 for IKE Version. Select one of them according to the device that the scanner is connected to. ❏ IKEv1 The following items are displayed when you select IKEv1 for IKE Version. Items Settings and Explanation Authentication Method...
Page 103
Advanced Security Settings > > Encrypted Communication Using IPsec/IP Filtering Configuring Default Policy Items Settings and Explanation Remote Authentication Method To select Certificate, you need to obtain and import a CA-signed certificate in advance. ID Type If you select Pre-Shared Key for Authentication Method, select the type of ID for the device that you want to authenticate.
Advanced Security Settings > > Encrypted Communication Using IPsec/IP Filtering Configuring Group Policy ❏ Algorithm Settings It is recommended that you select Any for all settings or select an item other than Any for each setting. If you select Any for some of the settings and select an item other than Any for the other settings, the device may not communicate depending on the other device that you want to authenticate.
Page 105
Advanced Security Settings > > Encrypted Communication Using IPsec/IP Filtering Configuring Group Policy Items Settings and Explanation Permit Access Select this to permit configured IP packets to pass through. Refuse Access Select this to refuse configured IP packets to pass through. IPsec Select this to permit configured IPsec packets to pass through.
Page 106
Advanced Security Settings > > Encrypted Communication Using IPsec/IP Filtering Configuring Group Policy IKE Version Select IKEv1 or IKEv2 for IKE Version. Select one of them according to the device that the scanner is connected ❏ IKEv1 The following items are displayed when you select IKEv1 for IKE Version. Items Settings and Explanation Authentication Method...
Page 107
Advanced Security Settings > > Encrypted Communication Using IPsec/IP Filtering Configuring Group Policy ❏ IKEv2 The following items are displayed when you select IKEv2 for IKE Version. Items Settings and Explanation Local Authentication Method If you select IPsec for Access Control, select an option. Used certificate is common with a default policy.
Page 108
Advanced Security Settings > > Encrypted Communication Using IPsec/IP Filtering Configuring Group Policy Items Settings and Explanation Transport Mode If you only use the scanner on the same LAN, select this. IP packets of layer 4 or later are encrypted. Tunnel Mode If you use the scanner on the Internet-capable network such as IPsec-VPN, select this option.
Page 109
Searching for a scanner from applications such as Epson Device Admin and the a scanner driver SNMP Any port Acquiring and configuring MIB from applications such as Epson Device Admin and the Epson scanner driver Any port 5357 Controlling WSD WS-Discovery 3702 Any port...
Advanced Security Settings > > … Encrypted Communication Using IPsec/IP Filtering Configuration Examples Service name Protocol type Local port Remote port Features controlled number number NetBIOS Name Any port CIFS client (forwarding scanned data Service (Remote) to a folder) NetBIOS Any port Datagram Service (Remote)
Advanced Security Settings > > … Connecting the Scanner to an IEEE802.1X Network Configuring an IEEE802. Receiving access from a specified IP address only This example allows a specified IP address to access the scanner. Default Policy: ❏ IPsec/IP Filtering: Enable ❏...
Page 112
Advanced Security Settings > > … Connecting the Scanner to an IEEE802.1X Network Configuring an IEEE802. 3. Click Next. A confirmation message is displayed. 4. Click OK. The scanner is updated. Related Information “Running Web Config on a Web Browser” on page 34 &...
Advanced Security Settings > > Solving Problems for Advanced Security Restoring the Security Settings Items Settings and Explanation Encryption Strength You can select one of the followings. High AES256/3DES Middle AES256/3DES/AES128/RC4 Configuring a Certificate for IEEE802.1X Configure the Client Certificate for IEEE802.1X. When you set it, you can use EAP-TLS and PEAP-TLS as an authentication method of IEEE802.1x.
Advanced Security Settings > > … Solving Problems for Advanced Security Problems Using Network Security Problems Using Network Security Features Forgot a Pre–shared Key Re-configure a pre-shared key. To change the key, access Web Config and select the Network Security tab > IPsec/IP Filtering > Basic > Default Policy or Group Policy.
Page 115
Advanced Security Settings > > … Solving Problems for Advanced Security Problems Using Network Security If the DHCP is out of date, rebooting or the IPv6 address is out of date or has not been obtained, then the IP address registered for the scanner's Web Config (Network Security tab > IPsec/IP Filtering > Basic > Group Policy >...
Advanced Security Settings > > … Solving Problems for Advanced Security Problems on Using a Digital Certifi Problems on Using a Digital Certificate Cannot Import a CA-signed Certificate CA-signed Certificate and the information on the CSR do not match. If the CA-signed Certificate and CSR do not have the same information, the CSR cannot be imported. Check the following: ❏...
Page 117
Advanced Security Settings > > … Solving Problems for Advanced Security Problems on Using a Digital Certifi Unsupported characters have been entered to Common Name, Organization, Organizational Unit, Locality, and State/Province. Enter characters of either IPv4, IPv6, host name, or FQDN format in ASCII (0x20-0x7E). A comma or space is included in the Common Name.
Page 118
Advanced Security Settings > > … Solving Problems for Advanced Security Problems on Using a Digital Certifi Messages Cause/What to do Invalid file. Cause: You are not importing a certificate file in X509 format. What to do: Make sure that you are selecting the correct certificate sent by a trusted certificate authority.
Page 119
Advanced Security Settings > > … Solving Problems for Advanced Security Problems on Using a Digital Certifi Messages Cause/What to do Setup failed. Cause: Cannot finish the configuration because the communication between the scanner and computer failed or the file cannot be read by some errors. What to do: After checking the specified file and communication, import the file again.
Page 120
Registering and Setting Information........129 Job History Reports Using Epson Device Admin......144 Logging in as an Administrator from the Control Panel.
❏ In addition to the Authentication Settings introduced in this manual, you can also build an authentication system using an authentication server. To build a system, use Document Capture Pro Server Authentication Edition (the abbreviated name is Document Capture Pro Server AE). For further information, contact your local Epson office. Available Functions for Authentication Settings...
Authentication Settings > About Authentication Method Authentication Settings Scanning Function on the Control Panel When enabled When disabled ✓ ✓ Scan to Email Sends images to the email address you set. ✓ ✓ Scan to Cloud Sends images to the cloud service you set. ✓...
Page 123
Authentication Settings > About Authentication Method Local DB LDAP Local DB and LDAP User Scanner's memory Scanner's memory and LDAP LDAP server informatio server This authentication method This authentication method n location checks the user information Check the user information checks the user information of registered to the scanner and registered in the scanner first (...
❏ When you use Web Config, you can set up the scanner only by using a web browser. “Web Config” on page 34 ❏ When you use Epson Device Admin, you can set up multiple scanners at once using a configuration template. “Epson Device Admin” on page 35 Updating the Scanner's Firmware Before enabling Authentication Settings, update the scanner's firmware to the latest version.
Page 125
Authentication Settings > > Connecting and Configuring an Authentication Device Card Reader Compatible List Maker Model Model Authentication card Mode Num- MIFARE FeliCa™ IEC/ Global ISO14 iClass EM40 Clas- Ultra- Stand- Lite/ (Type light Lite-S Com- pli- ance pcProx RDR-80 Key- IDEAS Plus...
Page 126
Authentication Settings > > Connecting and Configuring an Authentication Device Card Reader Compatible List Maker Model Model Authentication card Mode Num- MIFARE FeliCa™ IEC/ Global ISO14 iClass EM40 Clas- Ultra- Stand- Lite/ (Type light Lite-S Com- pli- ance ACR125 ACR125 PC/SC Sony PaSoRi...
If you need to use data in a particular area in the card other than the standard ID of the card as an authentication ID by configuring product settings, please contact your Epson partner or local representative for more information about a way to set up the product.
This cannot be mixed when using other card information. When setting up from Web Config: Select the Device Management tab > Card Reader. When setting up from Epson Device Admin: Select Administrator Settings > Authentication Settings > Card Reader from the configuration template. Item...
Authentication Settings > > Registering and Setting Information Setting Up Registering and Setting Information Setting Up Make the necessary settings depending on the Authentication Method and the scanning method you use. Important: Before starting the setup, check that the time setting for the scanner is correct. If the time setting is incorrect, the error message "License is expired"...
When setting up from Web Config: Select On (Device/LDAP Server) from the Product Security tab > Basic > Authentication. When setting up from Epson Device Admin: On the configuration template, select On (Device/LDAP Server) from Administrator Settings > Authentication Settings > Basic > Authentication.
Authentication Settings > > Registering and Setting Information Registering User Settings Item Explanation Authentication Select the Authentication Method. Method ❏ Local DB Authenticate using the User Settings registered to the scanner. It is necessary to register the user to the scanner. ❏...
Page 132
Registering and Setting Information Registering User Settings ❏ Registering Multiple User Settings as a Batch Using a CSV File (Web Config) ❏ Registering User Settings to Multiple Scanners as a Batch Using a Configuration Template (Epson Device Admin) Related Information “Registering User Settings Individually (Web Config)”...
Page 133
Authentication Settings > > Registering and Setting Information Registering User Settings Item Explanation Scan to My Folder Set the save destinations individually when you select Individual in Scan to My Folder > Setting Type. See the following for more information on the setting items.
Page 134
Authentication Settings > > Registering and Setting Information Registering User Settings 5. Edit and save this CSV file in a spreadsheet application such as Microsoft Excel or in a text editor. Important: When editing the file, do not change the encoding and header information. CSV File Setting Items Item Settings and Explanation...
Page 135
Authentication Settings > > Registering and Setting Information Registering User Settings Item Settings and Explanation FtpPort Set the port number for sending scanned data to the FTP server from 0 to 65535 when FTP is selected as the Type for the Scan to My Folder function. ScanToMemory Set the restrictions for Scan to USB Drive.
Page 136
An ENE file is a binary file provided by Epson that encrypts and saves information for Contacts such as personal information and User Settings. It can be exported from Epson Device Admin and you can set a password. It is useful when you want to import the User Settings from a backup file.
Page 137
Authentication Settings > > Registering and Setting Information Registering User Settings 4. Click Settings. The LDAP Server settings are displayed. Note: This LDAP server setting is for importing the user settings from the LDAP server. The imported (copied) user settings are used to authenticate users by using the scanner itself.
If you select Kerberos Authentication as the Authentication Method, select Network > Kerberos Settings to make settings for Kerberos. When setting up from Epson Device Admin: Select Network > LDAP server > Server Settings (Primary Server) or Server Settings (Secondary Server) from the configuration template.
Page 139
10 Kerberos settings. When setting up from Web Config: Select the Network tab > Kerberos Settings. When setting up from Epson Device Admin: Select Network > Security > Kerberos Settings from the configuration template. Item Settings and Explanation...
Page 140
When setting up from Web Config: Select the Network tab > LDAP Server > Search Settings (Authentication). When setting up from Epson Device Admin: Select Administrator Settings > Authentication Settings > LDAP server > Search Settings (Authentication) from the configuration template.
You can set Scan to My Email only when Scan to Email has been enabled. When setting up from Web Config: Select the Network tab > Email Server > Basic. When setting up from Epson Device Admin: Select Common > Email Server > Mail Server Settings from the configuration template. Item...
Authentication Settings > > Registering and Setting Information Setting Scan to My Folder Item Settings and Explanation Authenticated Account If you select SMTP AUTH or POP before SMTP as the Authentication Method, enter the authenticated account name. Enter between 0 and 255 characters in ASCII (0x20 - 0x7E). Authenticated Password If you select SMTP AUTH or POP before SMTP as the Authentication Method, enter the authenticated password.
Page 143
> > Registering and Setting Information Setting Scan to My Folder When setting up from Epson Device Admin: Select Administrator Settings > Authentication Settings > Scan to Network Folder/FTP > Scan to My Folder from the configuration template. Item Explanation ❏...
Job History Reports Using Epson Device Admin You can create a Job History report for each group and each user by using Epson Device Admin. You can save up to 3,000 instances of usage histories to the scanner. You can create the report by specifying a period or setting a regular schedule.
Authentication Settings > Disabling Authentication Settings Logging in as an Administrator from the Control Panel You can use any of the following methods to log in as an administrator from the scanner's control panel. 1. Tap at the top right of the screen. ❏...
Authentication Settings > > Solving Problems Cannot Read the Authentication Card Deleting Authentication Settings Information (Restore Default Settings) To delete all Authentication Settings information (Card Reader, Authentication Method, User Settings, and so on), restore all of the scanner settings to the default settings at the time of purchase. Select Settings >...
You can check the latest number of scans on the control panel or in the Epson Scan 2 Utility. If a surface is stained with a hard-to-remove material, use a genuine Epson cleaning kit to remove the stains. Use a small amount of cleaner on the cleaning cloth to remove the stains.
Page 149
3. Pull the lever and open the scanner cover. 4. Wipe off any stains on the plastic roller and glass surface at the bottom inside of the scanner cover using a soft cloth or a genuine Epson cleaning kit. Important: ❏...
Page 150
6. Open the cover, and then remove the separation roller. See “Replacing the Roller Assembly Kit” for more details. 7. Wipe off any dust or dirt on the separation roller using a genuine Epson cleaning kit or a soft, moist cloth. Important: Use only a genuine Epson cleaning kit or a soft, moist cloth to clean the roller.
Page 151
8. Open the cover, and then remove the pickup roller. See “Replacing the Roller Assembly Kit” for more details. 9. Wipe off any dust or dirt on the pickup roller using a genuine Epson cleaning kit or a soft, moist cloth. Important: Use only a genuine Epson cleaning kit or a soft, moist cloth to clean the roller.
Page 152
15. Slowly rotate the rollers at the bottom by tapping anywhere on the LCD. Wipe the surface of the rollers using a genuine Epson cleaning kit or a soft cloth dampened with water. Repeat this until the rollers are clean.
Maintenance > Replacing the Roller Assembly Kit Replacing the Roller Assembly Kit The roller assembly kit (the pickup roller and the separation roller) needs to be replaced when the number of scans exceeds the life cycle of the rollers. When a replacement message is displayed on the control panel or your computer screen, follow the steps below to replace it.
Page 154
Maintenance > Replacing the Roller Assembly Kit 4. Open the cover of the pickup roller, and then slide and remove it. 5. Pull down the fixture of the roller axis, and then slide and remove the installed pickup rollers. Important: Do not pull out the pickup roller forcibly.
Page 155
Maintenance > Replacing the Roller Assembly Kit 6. While holding down the fixture, slide the new pickup roller to the left and insert it into the hole in the scanner. Press the fixture to secure it. 7. Put the edge of the cover of the pickup roller into the groove and slide it. Close the cover firmly.
Page 156
Maintenance > Replacing the Roller Assembly Kit Important: ❏ Make sure the pick up cover is closed correctly. ❏ Make sure the pickup rollers are installed correctly if the cover is hard to close. ❏ Do not install the cover while it is raised. 8.
Page 157
Maintenance > Replacing the Roller Assembly Kit 9. Lift the left side of the separation roller, and then slide and remove the installed separation rollers. 10. Insert the new separation roller axis into the hole on the right side, and then lower the roller. 11.
Parts (the pickup roller and separation roller) should be replaced when the number of scans exceeds the service number. You can check the latest number of scans on the control panel or in the Epson Scan 2 Utility. A: pickup roller, B: separation roller...
Maintenance > Transporting the Scanner 3. Select Power Off Settings, and then make settings. Note: Available features may vary depending on the location of purchase. Transporting the Scanner When you need to transport the scanner to move or for repairs, follow the steps below to pack the scanner. 1.
Maintenance > > Backing Up the Settings Export the settings 5. Remove the input tray. 6. Attach the packing materials that came with the scanner, and then repack the scanner in its original box or a sturdy box. Backing Up the Settings You can export the setting value set from Web Config to the file.
Maintenance > Restore Default Settings 4. Click Export. Important: If you want to export the scanner’s network settings such as the device name and IPv6 address, select Enable to select the individual settings of device and select more items. Only use the selected values for the replacement scanner.
Select Finder > Go > Applications > Epson Software > EPSON Software Updater. Note: If you cannot find the application you want to update in the list, you cannot update using the EPSON Software Updater. Check for the latest versions of the applications on your local Epson website.
You can also update the firmware using Epson Device Admin. You can visually confirm the firmware information on the device list. It is useful when you want to update multiple devices' firmware. See the Epson Device Admin guide or help for more details.
Page 164
Updating Applications and Firmware Updating Firmware without Connecting to the Internet 2. Connect the computer that contains the downloaded firmware to the scanner by USB cable. 3. Double-click the downloaded .exe file. Epson Firmware Updater starts. 4. Follow the on-screen instructions.