Error Message - Lexmark 6500e Installation And Configuration Manual

"The Domain Controller Issuing Certificate has not been installed"

error message

This error indicates that no certificate, or an incorrect certificate, has been installed on the printer. If a certificate has
been installed but it is not the correct certificate, the error message displayed will be "The Domain Controller Issuing
Certificate [NAME OF CERTIFICATE] has not been installed.
For information on installing, viewing, or modifying certificates, see "Certificate management" on page 10.
"The KDC did not respond within the required time" error message
T IP
HE ADDRESS OR HOSTNAME OF THE
1
From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication > Configure.
2
If the Simple Kerberos Setup has been configured in PKI Authentication, verify the IP address or hostname
specified for the Domain Controller, and then click Apply to save any needed changes.
3
If a krb5.conf file has been uploaded, verify that the IP address or hostname specified for the Domain Controller
is correct.
T KDC
HE IS NOT CURRENTLY AVAILABLE
You can specify multiple KDCs in the PKI Authentication settings, or in the krb5.conf file. This will typically resolve
the issue.
P 88
ORT IS BLOCKED BY A FIREWALL
Port 88 must be opened between the printer and the KDC in order for authentication to work.
"User's Realm was not found in the Kerberos Configuration file"
error message
This error occurs during manual login, and indicates the Windows Domain is not specified in the Kerberos settings.
1
From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication > Configure.
2
Under Simple Kerberos setup, add the Windows Domain in lowercase to the Domain setting.
Example: If the Domain setting is "mil,.mil" and the Windows Domain is "x.y.z", change the Domain setting to
"mil,.mil,x.y.z".
3
If using a krb5.conf file, add an entry to the domain_realm section, mapping the lower case Windows Domain to
the uppercase realm (similar to the existing mapping for the "mil" domain).
KDC
IS NOT CORRECT
Troubleshooting
23