Card Authentication Package

CARD
AUTHENTICATION
PACKAGE
Product
Support
Guide
Card Authentication Package
CAP version 2.X
Product Support Guide
Card Authentication Package Version 2.X
PRODUCT SUPPORT GUIDE

PURPOSE
This document is intended to provide a general outline and guide of support for CAP
version 2.x as referenced in this guide. This document may contain information that is not
available in service manuals, operators manuals or installation guides. The information is
provided for trained Ricoh US service personnel and authorized dealer organizations only.
This document may also include a general overview of common technologies and more
specific technical information regarding Ricoh US solutions and products.
NOTICE
This document may not be reproduced or distributed in whole or in part, for any purpose or
in any fashion, without the prior written consent of the Technology Support Service Center
Atlanta, Georgia. Sole discretion, is retained, to grant or deny any such consent to any
person or party. All product names, domain names or product illustrations, including
desktop images, used in this document are trademarks, registered trademarks or the
property of their respective owners. They are used throughout this document in an
informational or editorial fashion only. Ricoh US does not grant or intend to grant any right
to such trademarks or property to any third parties. The use of any trade name or web site
is not intended to convey endorsement or any other affiliation with Ricoh products.
Although best efforts were made to prepare this document, Ricoh US makes no
representation or warranties of any kind with regard to the completeness or accuracy of the
contents and accepts no liability of any kind including, but not limited to performance,
merchantability, fitness for any particular purpose, or any loses or damages of any kind
caused or alleged to be caused directly or indirectly from use of or information contained
within, this document.
08/21/2013
2
Ricoh Americas Corporation is a registered trademark of Ricoh Company Limited
All other trademarks are the property of their respective owner
Table of Contents
Contents
A.
Product Concept Outline Card Authentication Package ....................................... 4

Overview .................................................................................................................. 4
CAP Configuration ................................................................................................... 7
B.
Product Numbers .................................................................................................... 9
C.
Training Information .............................................................................................. 10

Technical Documentation ..................................................................................... 10
Training Delivery Methods .................................................................................... 10
Sales Support Training ......................................................................................... 10
Technical Support Training ................................................................................... 10
D.
Support Information............................................................................................... 10
Training Prerequisites: .......................................................................................... 10
Pre-Sales Support: ............................................................................................... 11
Post-Sales Support: .............................................................................................. 11
Technical Support: ................................................................................................. 11
Support Reference URLs: ...................................................................................... 12
E.
Delivery Information .............................................................................................. 12
F.
Specifications/Requirements ................................................................................. 12
G.
Special Tools......................................................................................................... 13
H.
Contact Information ............................................................................................... 14

Support Information: ............................................................................................. 14
Web Support ......................................................................................................... 15
08/21/2013
3
A.
Product Concept Outline Card Authentication Package

Overview
Card Authentication Package allows you to simplify your authentication workflow to
maximize document security and reduce TCO by replacing user name and password
input from the device control panel. Instead the user swipes their ID card to gain
access to device functions. And when used with Enhanced Locked Print NX for
Secure Release Printing, all print jobs are first stored in the device and only released
when the job owners ID card is swiped. Besides saving time, ID card Authentication
prevents onlookers from observing PIN entry.
Card Authentication Package is a translation of the Layer 3 (Authentication,
Authorization and Accounting/Auditing) into a software product as a core of Ricohs
Document Security Framework concept.
What Is Common Access Card
Windows/LDAP Authentication enables access limitation management by limiting the

machines available functions to specific individuals or groups, thereby protecting the
machine settings and data stored in the system from unauthorized access. If the
user does not enter a valid user name/password, verified by the Windows server,
access to device functions is denied. Ricoh has designed the Windows
authentication capability to utilize existing Windows user names and passwords,
which facilitates seamless integration and eliminates the need to create and
remember additional user names/passwords.
A complete listing of every job executed by the device is stored in memory. This list
may be viewed via Web Smart Device Monitor to track device usage by job and/or
user. When used in conjunction with external user authentication modes, it will be
possible to determine which specific users may be abusing a device, or whom and
which device was used to send an unauthorized transmission to trace the source of
leaks.
08/21/2013
4
Enhanced Locked Print NX Overview

Enhanced Locked Print NX allows you to realize all the benefits of a shared,
centralized network printing environment by addressing the largest security threat
today, the unrestricted access to hardcopy sitting on a devices output tray. With
Enhanced Lock Print NX users store, release, and manage confidential documents
with the security of user ID and password authorization. Because this feature is builtin, with no extra hardware or software to deal with, it's a fast and simple solution for
protecting your organization's confidential and proprietary data, as this prevents
others from inspecting or removing output from the tray. An optional card reader
offers additional ease of use for environments using existing proximity card systems
by providing the automated release of print jobs stored on the MFP.
With Enhanced Locked Print NX, you can print confidential documents only after
your Card is swiped on the MFP. The confidential document of Card owner cannot
be seen by anybody else. Users can store, release and manage confidential
documents with the security of a swipe of Card and password authorization. (There
is non-password input mode available for medium security level). Documents stored
at the MFP/LP are encrypted (information cant be compromised if the hard drive is
stolen) and jobs stored on the devices are retained even when the device is
powered off. Because Enhanced Locked Print NX n is built-in, with no extra
hardware or software to deal with, it's a fast and simple solution for protecting your
organization's confidential and proprietary data.
Flex Release Server Overview (ELP-NX FRS)
ELP-NX FS enables users to print at any network printer that they choose. Users
just send their print jobs as usual. Print jobs are stored in the ELP-NX FRS. Users
go to the printer chosen and swipe ID card and select the tab of the server or MFP
that holds their print jobs in the LCD panel. Then the list of users own print jobs will
be shown on the panel. Users can select jobs they need to print then the document
will be released and printed. ELP-NX FRS will now work without CAP-ES and CAP,
if CAP is required then both CAP and CAP-ES is required to function properly.
08/21/2013
5
CAP 2.x New Features

Flex Release Server support without CAP and CAP-ES
Print settings change allows users to change number of prints, duplex settings and
color or monochrome. Requires ELP Flex Release Server and PCL driver only,
changes can only be made at MFD
Check print allows user to print one set of a multiple page job to determine if setting
are correct
Enhanced job information
Direct print allows administrator to determine if non-locked print jobs are allowed
when CAP is installed with ELP
New model support
Auto card registration
Workflow:
Once installed, CAP locks the MFD down
requiring users to log in using their user
name or ID card. The default installation
locks all features except the printer
feature. With optional ELP NX, printing
will also require authentication.
The user walks up to the MFD and

scans their ID card. The user is
then prompted for their
authentication password.
When the user is finished using the MFD they can press the log out button.
Note:
Screens will vary based on device model, thus may appear different from those shown above.
How long the authentication process takes depends on the type of authentication and network
infrastructure, thus the time period will vary.
08/21/2013
6
ELP-NX without CAP

ELP-NX can work standalone same as current ELP-SE or ELP-EX.
Customers who do not have ID card can enjoy secure print environment.
Users select user name and input pass code instead of swiping ID card.
CAP Configuration
Card Authentication Package has basically two types of configurations. One is a
configuration with MFP embedded software and a customers authentication server
or LDAP server. The other is MFP embedded software with Card Authentication
Package Enterprise Server (CAP-ES) and a customers authentication server or
LDAP server. The server configuration enables a choice of settings whether or not to
require password input from MFP operation panel. Configuration without deployment
of CAP enterprise server will require input of password at MFP operation panel
Embedded Software and MFPs Built-In Basic Authentication /Customers
Authentication Servers
A card reader reads card ID from a card when the card is swiped. CAP has a card ID
mapping function to manage references between card IDs and login usernames.
When a user swipes a card, it retrieves login user name from card ID and sends it to
device user authentication.
Device user authentication provides the following three authentications. Password
input is required for all cases.
Basic Authentication
Windows Authentication
LDAP Authentication
Embedded Type is suitable for a company with less than 500 user accounts.
Embedded Software with Enterprise Server and Customers Authentication
Servers / LDAP Server
A card reader reads card ID from a card when the card is swiped. Card
Authentication Package Enterprise Server authentication running on embedded
software securely communicates with enterprise server to send card ID. CAP-ES
has a card ID mapping function to manage references between card IDs and login
usernames. When a user swipes a card, it retrieves login username from card ID
and sends it to authentication program or LDAP search program in the Enterprise
Server.
Authentication program provides following three authentications. Password input is
required for all those cases.
Basic Authentication
Windows Authentication
LDAP Authentication
08/21/2013
7
When LDAP search program is selected from web U/I of enterprise server, password
input is not required. LDAP search program has its own username and password to
login to the LDAP server. Such username and password are saved in advance in the
enterprise server from Web U/I and only used to login to the LDAP server and
search login username provided by card ID mapping. When the username was
successfully found, authentication is made without input of password from operating
panel.
Server type is suitable for an enterprise level company with a huge number of user
accounts and central control of authentication for multiple MFP/LPs with plug-in I/F
for additional authentication customizations.
Product Licensing
CAP and ELP-NX is licensed per MFP and is available in single and multiple seat
packs. Refer to the installation instructions for both products for details of registration
and activation.
CAP-ES is licensed per server. Refer to the CAP-ES installation instructions for
details of registration and activation.
ELP-FRS is licensed per server; a CAP-ES license is included with every ELP-FRS
license. ELP-FRS license cannot be added together, purchase a single license that
includes the total number of devices.
CAP Documentation
Card Authentication Package Install Guide
Card Authentication Package Administrator Guide
Card Authentication Package User Guide
Card Authentication Package Enterprise Server Installation Guide
Card Authentication Package Enterprise Server Administrator Guide
Enhanced Locked Print Install Guide
Enhanced Locked Print NX Administrators Guide
Enhanced Locked Print NX Administrators Guide (with CAP)
Enhanced Locked Print NX User Guide
Enhanced Locked Print NX User Guide (with CAP)
Enhanced Locked Print NX Flex Release Server Installation Guide
Enhanced Locked Print NX Flex Release Server Administrator Guide
Enhanced Locked Print NX Flex Release Server User Guide
Card Authentication Package Release notes
Note:
The above documents have been developed and will be used as the resource for
field SE and FE during installations and as reference material.
These documents will also serve as a resource for the TSSC staff. These
documents can be obtained from the TSRC site Solutions Security section.
08/21/2013
8
B.
Product Numbers
Product Name
Card Authentication Package 1 Device License
Card Authentication Package Enterprise Server
Enhanced Locked Print NX 1 Device License
HID Card Reader Kit
CASI Card Reader Kit
NXT/WTCH Card Reader Kit
Enhanced Locked Print NX Flex Release Server 1 Device License
Enhanced Locked Print NX Flex Release Server Unlimited Device License
Enhanced Locked Print NX Flex Release Server Additional Server License
Card Authentication Package Enterprise Server Additional Server License
Ricoh ID
420531
420532
420533
420534
420535
420536
420537
420538
420539
420540
420541
420567
420542
420543
420544
420545
420546
420547
420548
420549
420550
420551
420621
003169MIU
003171MIU
003172MIU
420553
420554
420555
420556
420557
420558
420559
420560
420561
420562
420563
420564
420565
420566
Note: Above readers are tested with CAP Authentication Solution; however other complaint
readers may also be used.
08/21/2013
9
C.
Training Information
Technical Documentation
Installation and administration guides will be available on the TSRC web site at
http://tscweb.net these documents will also serve as a resource for the Technology
Support Service Centers (TSSC) staff.
Note: You must have Ricoh tech ID # to log into the http://tscweb.net website. For
information on how to obtain access to the TSRC website please click the
link on the TSRC web site home page.
Training Delivery Methods

Sales Support Training
This product information will be added to the current Security training class offered
by RLI (Ricoh Learning Institute).
Technical Support Training

This product information will also be added to the current Security training class
offered by RLI.
Current documentation will be available on the TSRC website at http://tscweb.net.
The product manager will conduct the initial training for the TSSC staff and solution
engineering support staff.
D.
Support Information
Service Concept
This product is being developed by Ricoh Corporation for Ricohs MFP products.
The product installation is similar to many existing Ricoh Java applications and as
such will be supported and serviced under the exiting standard processes used by
the Ricoh service provider for such RC developed products.
Support Considerations
Field Support Effort Estimations
Not available at time of publication
Field Support
Training Prerequisites:
Mandatory - previous certification on CAP/ELP Version 1
08/21/2013
10
STRONGLY Recommended
Minimum six months experience with document routing, and printing customer
environments
Complete review of the provided support documentation, and pre-training product
overview material
Ricoh Learning Institute will provide CAP/ELP product certification upon the
successful completion of the eLearning self paced.
During this eLearning event, product installation, and CAP/ELP differences are
highlighted. Troubleshooting information will be emphasized.
While designed more towards the technical support professional, Solutions
Engineers as well as service professionals who provide post sales support will find
value in this program.
Pre-Sales Support:
Professional Services Solution Consultants (SCs) are the primary resources for presales technical support, as well as solution related questions. Global Solution
Consultants (GSCs) and Global Solutions Analysts (GSAs) are responsible for presales support of global accounts. They also serve as key contacts for customization,
working directly with Level 3 support. They can be engaged as required through the
specific regional offices.
Post-Sales Support:
Professional Services Solutions Analysts (SAs) are the primary technical resource
for installation of solution products. The Technology Support Services Center
(TSSC) is the primary resource for post install support issues with Solution Analysts
or Service Technicians serving as the first responders for field escalations based on
the product.
Post sales field support will be provided by field resources described above and
regional ASM staff in support of the dealers through the standard escalation process
below.
Technical Support:
The Ricoh Technology Support Services Center (TSSC) will handle all support
related email/phone calls for this product. The workflow should follow the steps
below where customers report issues to their Ricoh Branch/Dealer field resource.
The Ricoh Branch/Dealer engineer will be considered Tier 1. If no resolution is
possible, the Branch/Dealer Engineer will open a support ticket with TSSC.
TSSC will be considered Tier 2. If no resolution is possible, then the TSSC will
escalate the issue to ATS Engineering Support which will be considered Tier 3.
If required, ATS Engineering support will contact RCL Engineering
Support/Development which will be Tier 4.
08/21/2013
11
Support Reference URLs:
Knowledge Base
http://www.tsrc.ricoh-usa.com/ref/faq.asp
TRTM
http://133.139.166.80/trtm/LOGIN_FORM/index.asp
Cross Reference
http://172.16.154.21/xref_web/intmain.asp
TSC Web Site
http://tscweb.net/
RFG-eSource
http://rfg-esource
Info Center
http://216.244.107.90/indexcustom.asp?include=ss%5Fssindex%2Easp
E.
Delivery Information
Updates and fixes will be made available, as needed, on the TSRC web site
accessible by authorized service personnel at (http://tscweb.net).
F.
Specifications/Requirements
Required Firmware/Java version
Consult the installation guide for required firmware/java versions for each model.
Note: Pre-production firmware is not supported. Global Scan NX can be installed
with CAP and ELP NX, other SDK and J/SDK may not function properly when
installed in conjunction with CAP and ELP NX. Contact TSSC solution support for
specific information.
CAP/CAP ES Specifications
Authentication Supported CAP core
Basic authentication (MFP address book)
Active Directory
LDAP
Authentication Supported CAP-ES
Active Directory
LDAP
CAP-ES/ELP NX FRS Server Specifications
CPU: Pentium 4 2.4GHz or above
Main Memory: 1GB or above
Supported OS: (32 bit version only)
Windows Server 2003 Standard / Enterprise
Windows Server 2003 R2 Standard / Enterprise
08/21/2013
12
Windows Server 2008 R2

CAP Activation
Global Marketplace Activation
ELP-NX Specifications
Supported Printer Driver
PCL, RPCS, and Universal Postscript (Postscript driver requires CAP to be installed)
ELP-NX Activation
Global Marketplace Activation
Supported Models
Please see supported device list available on TSRC web site
Future product support
Ricoh plans to expand the supported models not only to later MFP models but also
to later laser printers. There is no plan to expand the supported model to the other
existing MFP and laser printer models. Supported models for CAP 2.x will be
announced later.
Supported Browsers
IE (Internet Explorer) 6.0 or greater is required for web administration.
G.
Special Tools
Ricoh SD Card
All MFPs with CAP can support firmware updates via SD Card and though WIM;
you will need the following configuration to load the CAP firmware to the MFP.
Environment:
Environment #1
Windows PC w/USB Port
USB SD Card Reader/Writer - Part #: B645-6800
Ricoh Java SD Card - Part #: as listed in release notes for MFP
Environment #2
Windows PC
Remote Install Manager (RIM)
08/21/2013
13
H.
Contact Information
Support Information:
Hours of Operation
8:00 AM to 8:00 PM Eastern
Monday through Friday, excluding national and Ricoh (U.S.) company holidays.
NOTE: Please
listen to the prompts carefully as the menu may change from time to time.
You may access technical hardware, document / printing solutions and marketing / presales support by following the correct prompts.
Name
Technical Services Call Center
(Hotline)
Hytec Parts and Logistics

Control
Technology Solutions Resource
Center
Headquarter Web Sites
Material Safety Data Sheets

Ricoh University
Contact
Parts (800) 333-3147
Ricoh: (800) 537-4264
Savin: (800) 291-6044
Lanier: (800) 346-6057
Canada (800) 922-4072
Solutions (888) 424-1573
Customer Support (800) 577-4264
Automated Services (866) 239-8494 myricoh@ricohusa.com
Printer/Scanner/Projector Support (800) 742- 6438
Realer Printer Customers (800) 972-8796
Warranty Processing (800) 557-4264
(800) 883-1001 www.hytecrepair.com
http://www.tscweb.net
Ricoh Corporation: http://www.ricoh-usa.com
Savin Corporation: http://www.savin.com
Lanier Corporation: http://www.lanier.com
(800) 336-MSDS (6737) http://msds.ricohusa.com/msds/
973.882.2200. email address:
www.ricohlearninginstitute.com
Lorin McCollough
Manager, Solutions Help Desk
Technology Support Services Center
Ricoh Americas Corporation
Office 770.723.4465
Fax 770.723.4410
Lorin.mccollough@ricoh-usa.com
08/21/2013
14
Web Support
Product information will be available via all RFG company public web sites. FAQ
information will be available via the RNW web portal. Product Support information will be
available to all registered users of the TSRC website. The TSRC site will also be the portal
for product download, registration and licensing.
08/21/2013
15

Card Authentication Package

Diunggah oleh

Informasi Dokumen

Hak Cipta

Format Tersedia

Bagikan dokumen Ini

Bagikan atau Tanam Dokumen

Opsi Berbagi

Apakah menurut Anda dokumen ini bermanfaat?

Apakah konten ini tidak pantas?

Hak Cipta:

Format Tersedia

Card Authentication Package

Diunggah oleh

Hak Cipta:

Format Tersedia

CARD

Product Support Guide