Configuring Basic SSL/TLS Settings..16 Configuring a Server Certificate for the Printer. . 17 Problems Using Network Software... . . 52 Configuring IPsec/IP Filtering.
Page 3
Configuring to Share the Printer - Windows..68 Sharing the Printer..... . .68 Installing Additional Drivers....68 Using the Shared Printer.
Copyright and Trademarks Copyright and Trademarks ❏ EPSON is a registered trademark, and EPSON EXCEED YOUR VISION or EXCEED YOUR VISION is a trademark of Seiko Epson Corporation. ❏ Microsoft, Windows, and Windows Vista are registered trademarks of Microsoft Corporation.
Instructions that must be followed carefully to avoid bodily injury. Important: Instructions that must be observed to avoid damage to your equipment. Note: Instructions containing useful tips and restrictions on printer operation. & Related Information Clicking this icon takes you to related information.
❏ Notwithstanding the preceding article, Epson cannot be held responsible for any effects resulting from the use of the product. ❏ Epson cannot be held responsible for any failures caused by the improper use of the product and the improper repair of the product by a third party.
SSL/TLS Communication You can set a server certificate for the printer and encrypt communications between the printer and a computer by an SSL/TLS (Secure Sockets Layer/Transport Layer Security) communication. Use this feature to avoid spoofing and unauthorized access to the printer.
Encryption of IP Communication and Connection to an Authentication Network You can encrypt communications and control access to the printer. If you want to avoid interception of communications and data tampering, use the IPsec/IP Filtering feature or the SNMPv3 protocol. If you want to authenticate access to the printer, use the IEEE802.1X feature.
User Features Restriction and the Administrator Password You can restrict printer features on a per user basis. For example, User A can copy and scan, while User B can only fax. When you set the administrator password, only an administrator can change the printer's settings. It is recommended that you set the administrator password to improve security.
About Web Config Web Config is a browser-based application for configuring the printer's settings. To access the printer's Web Config, you need to have first assigned an IP address to the printer. Note: You can lock the settings by configuring the administrator password to the printer.
Enter the printer's IP address into a web browser. JavaScript must be enabled. When accessing Web Config via HTTPS, a warning message will appear in the browser since a self-signed certificate, stored in the printer, is used. ❏ Accessing via HTTP IPv4: http://<printer IP address>...
❏ If the printer name is registered with the DNS server, you can use the printer name instead of the printer’s IP address. ❏ Not all menus are displayed when accessing Web Config via HTTP. To see all the menus, access Web Config via HTTPS.
Using Network Configuration Software Using EpsonNet Config – Windows Installing EpsonNet Config – Windows Install EpsonNet Config from the following folder on the software disc that came with the printer: \Network\EpsonNetConfig Running EpsonNet Config - Windows Select All Programs > EpsonNet > EpsonNet Config Vxx > EpsonNet Config.
Web Config and EpsonNet Config Feature Comparison There are two pieces of software to configure the printer’s network settings, Web Config and EpsonNet Config. The following are features covered in this manual and a comparison between the two pieces of software.
& About EpsonNet SetupManager EpsonNet SetupManager is a software to create a package for a simple printer installation, such as installing the printer driver, installing EPSON Status Monitor and creating a printer port. This software allows the administrator to create unique software packages and distribute them among groups.
Using the Printer in a Secure Network Using the Printer in a Secure Network In this topic, the security features that Epson products support are explained. The available features vary by model. For information on availability of features, see the printer's documentation.
1. Access the printer’s Web Config and select Network Security Settings >SSL/TLS> Certificate. 2. Specify a certificate to use on Server Certificate. ❏ Self-signed Certificate A self-signed certificate has been generated by the printer. If you do not obtain a CA-signed certificate, select this. ❏ CA-signed Certificate If you obtain and import a CA-signed certificate in advance, you can specify this.
For more fine-grained control over users and groups of users, configure group policies. A group policy is one or more rules applied to a user or user group. The printer controls IP packets that match with configured policies. IP packets are authenticated in the order of a group policy 1 to 10 then a default policy.
Page 19
Encapsulation If you select IPsec for Access Control, you need to configure an encapsulation mode. Transport Mode If you only use the printer on the same LAN, select this. IP packets of layer 4 or later are encrypted. Tunnel Mode If you use the printer on the Internet-capable network such as IPsec-VPN, select this option.
“Configuring Default Policy” on page 18 & Configuring Group Policy 1. Access the printer's Web Config and select Network Security Settings > IPsec/IP Filtering > Basic. 2. Click a numbered tab you want to configure. 3. Enter a value for each item.
Page 21
Administrator's Guide Using the Printer in a Secure Network Group Policy Setting Items Items Settings and Explanation Enable this Group Policy You can enable or disable a group policy. Access Control Configure a control method for traffic of IP packets.
Page 22
Encapsulation If you select IPsec for Access Control, you need to configure an encapsulation mode. Transport Mode If you only use the printer on the same LAN, select this. IP packets of layer 4 or later are encrypted. Tunnel Mode If you use the printer on the Internet-capable network such as IPsec-VPN, select this option.
Page 23
Administrator's Guide Using the Printer in a Secure Network ✓ ✓ Setting of Remote IPv4*1 – Address(Host) ✓ ✓ IPv6*1*2 – ✓ ✓ ✓ Blank *1If IPsec is selected for Access Control, you cannot specify in a prefix length. *2If IPsec is selected for Access Control, you can select a link-local address (fe80::) but group policy will be disabled.
❏ Pre-Shared Key: Enter up to 127 characters. Group Policy: Do not configure. Receiving printing data and printer settings This example allows communications of printing data and printer configuration from specified services. Default Policy: ❏ IPsec/IP Filtering: Enable ❏ Access Control: Refuse Access Group Policy: ❏...
Regardless of policy configuration, the client will be able to access and configure the printer. Configuring a Certificate for IPsec/IP Filtering 1. Access the printer's Web Config and select Network Security Settings > IPsec/IP Filtering > Certificate. 2. Specify a certificate to use on Use the following CA Certificate.
Using SNMPv3 Protocol Configuring SNMPv3 If the printer supports the SNMPv3 protocol, you can monitor and control accesses to the printer. 1. Access the printer's Web Config and select Wi-Fi/Network Settings > Services > Protocol . 2. Enter a value for each item of SNMPv3 Settings.
Connecting the Printer to an IEEE802.1X Network Configuring an IEEE802.1X Network If the printer supports IEEE802.1X, you can use the printer on a network with authentication that is connected to a RADIUS server and a hub as an authenticator. 1. Access the printer's Web Config and select Network Security Settings > IEEE802.1X > Basic.
Page 28
The connection status of IEEE802.1X (Wi-Fi) is displayed. Connection Method The connection method of a current network is displayed. EAP Type Select an option for an authentication method between the printer and a RADIUS server. EAP-TLS You need to obtain and import a CA-signed certificate. PEAP-TLS PEAP/MSCHAPv2 You need to configure a password.
& Configuring a Certificate for IEEE802.1X 1. Access the printer's Web Config and select Network Security Settings > IEEE802.1X > Certificate. 2. Specify a certificate to use on Use the following CA Certificate. You can specify an imported certificate for other features.
Authentication has failed since there is no answer from the RADIUS server and/or authenticator. User ID Error Authentication has failed since the printer's user ID and/or certificate protocol is incorrect. Server ID Error Authentication has failed since the server ID of the server certificate and the server's ID do not match.
Using the Printer in a Secure Network ❏ Self-signed certificate Self-signed certificate is a certificate that the printer issues and signs itself. This certificate is unreliable and cannot avoid spoofing. If you use this certificate for an SSL/TLS certificate, a security alert may be displayed on a browser.
Page 32
Administrator's Guide Using the Printer in a Secure Network Related Information “Accessing Web Config” on page 11 & “CSR Setting Items” on page 32 & “Importing a CA-signed Certificate” on page 33 & CSR Setting Items Items Settings and Explanation Key Length Select a key length for a CSR.
Page 33
❏ Make sure that the printer’s date and time is set correctly. ❏ If you obtain a certificate using a CSR created from Web Config, you can import a certificate one time. 1. Access the printer’s Web Config and select Network Security Settings > SSL/TLS, IPsec/IP Filtering or IEEE802.1X > Certificate.
Administrator's Guide Using the Printer in a Secure Network CA-signed Certificate Importing Setting Items Items Settings and Explanation Server Certificate Select a certificate’s format. Private Key If you obtain a certificate of the PEM/DER format by using a CSR created from a computer, specify a private key file that is match a certificate.
1. Access the printer’s Web Config and select Network Security Settings > SSL/TLS > Certificate. 2. Click Update. 3. Enter Common Name. Enter an IP address, or an identifier such as an FQDN name for the printer. You can enter between 1 and 128 characters. Note: You can separate distinguished name (CN) with commas.
Page 36
Administrator's Guide Using the Printer in a Secure Network 5. Click Next. A confirmation message is displayed. 6. Click OK. The printer is updated. Note: Click Confirm to verify the certificate information. Related Information “Accessing Web Config” on page 11...
Configuring Scan and Fax Destination Destination Setting Features You can use the printer's contacts list or the LDAP server to choose the destination for the scan and fax features. Note: ❏ The available features may vary by model. For more details, see the printer's documentation.
❏ You can also configure the fax destination using the FAX Utility. Registering a Destination to Contacts 1. Access the printer's Web Config and select Contacts. 2. Click Add for the number that you want to register. 3. Select the destination type as the Type option.
Page 39
Administrator's Guide Configuring Scan and Fax Destination Destination Setting Items Items Settings and Explanation Common Settings Name Enter a name displayed on the contacts between 0 and 30 characters in Unicode (UTF-8). Index Word Enter words to search between 0 and 30 characters in Unicode (UTF-8). Fax Number Enter between 1 and 64 characters using 0-9 - * # and space.
Enter a password to access to an FTP server between 0 and 20 characters in Unicode (UTF-8). Connection Mode Select the connection mode from the menu. If a firewall is set between the printer and the FTP server, select Passive Mode. Port Number Enter the FTP server port number between 1 and 65535.
You can use the LDAP server to provide fax and email destination information. You need to configure the search settings before using the information on your LDAP server. Configuring the LDAP Server 1. Access the printer's Web Config and select Wi-Fi/Network Settings > LDAP Server > Basic. 2. Enter a value for each item. 3. Select OK.
Page 42
Administrator's Guide Configuring Scan and Fax Destination LDAP Server Setting Items Items Settings and Explanation Connection Settings Use LDAP Server Select Use or Do Not Use. LDAP Server Address Enter the address of the LDAP server. Enter between 1 and 255 characters of either IPv4, IPv6, or FQDN format.
“Configuring the LDAP Server” on page 41 & Configuring the LDAP Server Search Settings 1. Access the printer's Web Config and select Wi-Fi/Network Settings > LDAP Server > Search Settings. 2. Enter a value for each item. 3. Click OK to display the setting result.
“Configuring the LDAP Server Search Settings” on page 43 & Checking the LDAP Server Connection 1. Access the printer's Web Config and select Wi-Fi/Network Settings > LDAP Server > Connection Test. 2. Select Start. The connection test is started. After the test, the check report is displayed.
If you want to send scan and fax data by email or if you want to use the email notification feature, you need to configure a mail server. Configuring a Mail Server 1. Access the printer's Web Config and select Wi-Fi/Network Settings > Email Server > Basic. 2. Enter a value for each item. 3. Select OK.
Page 46
Mail Server Setting Items Items Settings and Explanation Authentication Method Specify the authentication method for the printer to access the mail server. Authentication is disabled when communicating with a mail server. SMTP AUTH Requires that a mail server supports SMTP Authentication.
“Configuring a Mail Server” on page 45 & Checking a Mail Server Connection 1. Access the printer's Web Config and select Wi-Fi/Network Settings > Email Server > Connection Test. 2. Select Start. The connection test is started. After the test, the check report is displayed.
User Features Restriction You can create up to 10 unique users and restrict available printer features for each user. Users have to log in with a username and password using the printer's control panel. Users can log out manually or the printer will log them out automatically after a period of time.
Page 49
❏ The OS default driver ❏ The PCL printer driver/ PostScript printer driver ❏ Web services such as Epson Connect and Google Cloud Print ❏ Smartphones and other mobile devices 3. Select Access Control Settings > User Settings.
“Configuring User Features” on page 48 & Configuring the Administrator Password When you set the administrator password, clients will not be able to change the settings. 1. Access the printer's Web Config and select Administrator Settings > Change Administrator Password.
Page 51
If you want to change the password to new one, enter a current password. 3. Select OK. Note: The administrator password is the same for Web Config, EpsonNet Config and the printer’s control panel. If you forget the administrator password, contact Epson support. For the contact information, see the printer’s documentation.
Cannot Access Web Config Is the IP address of the printer properly configured? Configure the IP address using EpsonNet Config or the printer’s control panel. You can confirm the current setting information with a network status sheet or from the printer’s control panel.
Problems Using Network Security Features Forgot a Pre–shared Key Configure the key again using Web Config. To change the key, access the printer's Web Config and select Network Security Settings > IPsec/IP Filtering > Default Policy or Group Policy. Cannot Communicate with IPsec Communication Are you using an unsupported algorithm for the computer settings? The printer supports the following algorithms.
If the DHCP is out of date, rebooting or the IPv6 address is out of date or has not been obtained, then the IP address registered for the printer's Web Config (Network Security Settings > IPsec/IP Filtering > Group Policy >...
Check the information of the CSR and then import the certificate to a device that has the same information. ❏ Did you overwrite the CSR saved into the printer after sending the CSR to a certificate authority? Obtain the CA-signed certificate again with the CSR.
Administrator's Guide Solving Problems Cannot Update a Self-Signed Certificate Has the Common Name been entered? Common Name must be entered. Have unsupported characters been entered to Common Name? For example, Japanese is not supported. Enter between 1 and 128 characters of either IPv4, IPv6, host name, or FQDN format in ASCII (0x20-0x7E). Is a comma or space included in the Common Name? If a comma is entered, the Common Name is divided at that point.
Page 57
Invalid date and time. Cause: Date and time for the printer have not been set. What to do: Set date and time using Web Config, EpsonNet Config or the printer's control panel. Invalid password. Cause: The password set for CA certificate and entered password do not match.
What to do: ❏ If the certificate is out of date, obtain and import the new certificate. ❏ If the certificate is not out of date, make sure the printer's date and time are set correctly. Private key is required.
Printing Problems Cannot Print with AirPrint Is AirPrint disabled? To enable AirPrint, access the printer's Web Config and select AirPrint Setup and then click Enable AirPrint. Printed Random Characters Is the setting for the print port correct? Make sure that the print port of the installed driver and the printer match.
About Email Notifications You can use this feature to receive alerts by email when events occur, such as your printer running out of paper. You can register up to 5 email addresses and choose which events you want to receive notifications for.
Configuring a Network for the Printer Individually If you want to configure a network setup to the printer individually, use the installer on the software disc that came with the printer or the website for a product setup. For more information, see the printer's documentation.
Connected printer(s) are displayed. It may take a while for all available printer to be showed up. 4. Double-click the printer. Note: You can identify the printer by a MAC address even if multiple printers of the same model are connected.
Page 63
Note: ❏ If you want to connect the printer to a secure network, configure a static IP address. ❏ You can also configure the DNS settings in the DNS section and the proxy settings in the Internet section of the...
Installing the Printer Driver - Windows Install the printer driver to configure a printer port. If the printer supports the PostScript or PCL and you want to install the Epson PostScript printer driver or PCL printer driver, see the printer’s documentation.
Administrator's Guide Appendix Note: If you do not have the software disc or if a computer does not have a disc drive, download the driver from the Epson support website. Related Information “Configuring a Network Interface - Ethernet” on page 61 &...
Page 66
❏ For Windows Server 2008 or later, the additional installation of Desktop Experience is required before installing EPSON Scan. ❏ If you do not have the software disc or if a computer does not have a disc drive, download the driver from the Epson support website.
Mapping an External Storage as a Network Drive - Windows 1. Check the name and IP address for the printer with an external storage device that you want to share. You can check them using Web Config, EpsonNet Config and the printer's control panel.
Configuring to Share the Printer - Windows Sharing the Printer If you want to use a computer connected to the printer as a print server, share the printer with the computer you want use a server connected to it. 1. Select Control Panel > View devices and printers.
2. Select System Preferences > Print & Scan. 3. Select + > Add Printer or Scanner. 4. Make sure the Default is selected, and then select the printer that you want to add from the list. 5. Specify a product name for Driver, and then select Add.