Network Authentication; Smart Card Authentication; Convenience Authentication - Xerox AltaLink B8045 Security Manual

Xerox® Security Guide for Office Class Products: AltaLink®  VersaLink®

Network Authentication

When configured for network authentication, user credentials are validated by a remote authentication
server.
Network Authentication Providers
Kerberos (Microsoft Active Directory)
Kerberos (MIT)
SMB NTLM Versions Supported
LDAP Versions Supported

Smart Card Authentication

Two-factor security - Smart Card plus User Name/Password combination. Requires optional card reader
hardware and software plugin. Authentication is handled by a remote server. Supported remote
authentication methods include Kerberos, SMB and LDAP.
Smart Card authentication is considered very secure due to the nature of the Smart Card architecture and
potential levels of encryption of data on the card itself.
Support for the SIPR network is provided using the XCP Plug-in architecture and a Smart Card
authentication solution created by 90meter under contract for Xerox.
Details regarding 90meter can be found online here:
Other Smart Card authentication solutions are offered including support for CAC/PIV and .NET
compatible cards leveraging XCP Plug-ins.
Smart Cards
Common Access Card (CAC)
PIV / PIV II
Net (Gemalto .Net v1, Gemalto .Net v2)
Gemalto MD

Convenience Authentication

Convenience authentication offloads authentication to a third-party solution which may offer more or less
security than native security implementations. Users swipe a pre-programmed identification card or key
fob to access the device.
For example, employees may be issued key fobs for access to facilities. Convenience mode may be
configured to allow an employee to authenticate using their fob or require the fob in a multi-factor manor.
The level of security provided is dependent upon the chosen implementation.
November 2018
AltaLink® VersaLink®
Multifunction Multifunction
B8045, B8055, B8065, B8075, B405, B605, B615, B7025,
B8090, C8030, C8035, C8045, B7030, B7035, C405, C505,
C8055, C8070 C605, C7020, C7025, C7030
Supported Supported
Supported Supported
NTLMv2 NTLMv2
Version 3 (including TLS Version 3 (including TLS
1.2) 1.2)
http://www.90meter.com/
AltaLink® VersaLink®
Multifunction Multifunction
B8045, B8055, B8065, B8075, B405, B605, B615, B7025,
B8090, C8030, C8035, C8045, B7030, B7035, C405, C505,
C8055, C8070 C605, C7020, C7025, C7030
Supported Supported
Supported Supported
Supported Supported
Supported (Not Currently Supported) (Not Currently Supported)
VersaLink® Printers
B400, B600, B610, C400,
C500, C600, C7000, C8000,
C9000
Supported
Supported
NTLMv2
Version 3 (including TLS
1.2)
VersaLink® Printers
B400, B600, B610, C400, C500,
C600, C7000, C8000, C9000
Supported
Supported
Supported
Page 27