The Kdc And Mfp Clocks Are Different Beyond An Acceptable Range; Check The Mfp's Date And Time" Error Message; Kerberos Configuration File Has Not Been Uploaded" Error Message; Users Are Unable To Authenticate; The Domain Controller Issuing Certificate Has Not Been Installed" Error Message - Lexmark Color Laser Installation And Administration Manual

Common criteria installation supplement and administrator guide
Hide thumbs Also See for Color Laser:
Table of Contents

Advertisement

"The KDC and MFP clocks are different beyond an acceptable range;
check the MFP's date and time" error message
This error indicates the printer clock is more than five minutes out of sync with the domain controller clock.
Verify the date and time on the printer:
1
From the Embedded Web Server, click Settings > Security > Set Date and Time.
2
If you have manually configured date and time settings, verify and correct as needed. Make sure the time zone
and daylight savings time settings are correct.
Note: If your network uses DHCP, verify that NTP settings are not automatically provided by the DHCP server
before manually configuring NTP settings.
3
If you have configured the printer to use an NTP server, verify that those settings are correct, and that the NTP
server is functioning correctly.

"Kerberos configuration file has not been uploaded" error message

This error occurs when PKI Authentication is configured to use the Device Kerberos Setup, but no Kerberos file has
been uploaded
1
From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication > Configure.
2
If the Simple Kerberos Setup has been configured in PKI Authentication, clear the Use Device Kerberos Setup
check box, and then click Apply.
3
If a Kerberos configuration file is needed:
a
From the Embedded Web Server, click Settings > Security > Security Setup >Kerberos 5.
b
Under Import Kerberos File, Browse to locate the appropriate krb5.conf file, and then click Submit.

Users are unable to authenticate

T
R
HE
EALM SPECIFIED IN THE
1
From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication > Configure.
2
If the Simple Kerberos Setup has been used, verify that the Realm is correct, and has been typed in UPPERCASE.
3
If a krb5.conf file has been uploaded, verify that the Realm entries in the configuration file are in UPPERCASE.
"The Domain Controller Issuing Certificate has not been installed"
error message
If a certificate has been installed but it is not the correct certificate, the error message displayed will be "The Domain
Controller Issuing Certificate [NAME OF CERTIFICATE] has not been installed.
N
,
O CERTIFICATE
OR AN INCORRECT CERTIFICATE HAS BEEN INSTALLED ON THE PRINTER
For information on installing, viewing, or modifying certificates, see "Creating and modifying digital certificates"
on page 16.
K
ERBEROS SETTINGS IS IN LOWERCASE
40

Advertisement

Table of Contents
loading

Table of Contents