[Authentication/Accounting] : Device : Reference Guide

[Network Settings]

[Maintenance]

[`Authentication/Accounting`]

[User Details Setup]
[Accounting]
[Authentication/Security Settings]

[`User Details Setup`]

[`Change Password`]

Enables login users to change their own passwords.

Refer

Refer to Changing a Registered User Password.

[`Accounting`]

Performs account setup for machine users, and sets authentication and accounting type.

Refer

Refer to Authentication and Accounting Feature.

[`Create/View User Accounts`]

Creates user IDs and user names for authentication of created users if accounting is set to enabled.

The maximum use quantity can be set for each user using the machine. This also enables management like confirming the cumulative pages for each created user.

This is the same as [Authentication/Security Settings] > [Authentication] > [Create/View User Accounts].

Note

Create user accounts after setting Accounting Mode to be used with [Authentication/Accounting Settings].
This item is not displayed when [Authentication/Accounting Settings] is set to [Network], [Remote] or [Custom].
If you change the User ID of the user who has Private Charge Print jobs stored on the machine, the stored files are deleted.

[`Delete/Reset Account Data`]

Enables tasks such as deleting user accounts for all users, and resetting meter data. Before deleting/resetting, it is also possible to print a report and confirm beforehand the information to be deleted/reset.

This is the same as [Authentication/Security Settings] > [Authentication] > [Delete/Reset Account Data].

Note

This item is not displayed when [Authentication/Accounting Settings] is set to [Network].

Item	Description
[`All User Accounts`]	Deletes all setting specifics set for each user. Also deletes all data such as account limits, cumulative pages, and meter (print jobs).
[`All Feature Access Settings`]	Deletes all feature access settings for all users.
[`All Account Limits`]	Resets the upper limit settings of the available number of pages per user all to the default.
[`Usage Data of All Users`]	Resets all total impressions for all users, including the administrator. Number of pages is also reset to “0”.
[`All Permission Groups`]	Resets all authorization groups for all users.
[`Meter (Print Jobs)`]	Resets all meters (print jobs), and deletes automatically created job owner names. All meter printing counts are reset to “0”. Note [`Meter (Print Jobs)`] is displayed if the setting is to disable accounting for printers.
[`Accounting Rpt (All Jobs)`]	Enables printing of report on accounting data for all apps. Used when confirming beforehand the information to be deleted/reset.
[`Meter Report (Print Jobs)`]	Enables printing of report on accounting data for printing. Used when confirming beforehand the information to be deleted/reset. Note [`Meter Report (Print Jobs)`] is displayed if the setting is to disable accounting for printers.
[`Delete/Reset`]	Deletes/resets data for selected item.

[`System Administrator Meter (Copy Jobs)`]

Enables confirmation/resetting on screen of cumulative pages of copying used from Administrator Mode.

Note

This item is not displayed when [Authentication/Accounting Settings] is set to [Network].

[`Authentication/Accounting Settings`]

Sets the authentication/accounting method.

This is the same as [Authentication/Security Settings] > [Authentication] > [Authentication/Accounting Settings].

Item	Description
[`Off`]	Does not use the authentication and accounting feature.
[`Local`]	Uses user details set in the machine for authentication and accounting. Note If the setting is changed from [`Local`] to [`Off`] or [`Remote`], all user details set in the machine are deleted.
[`Network`]	Register the user details managed with remote services and performs authentication and accounting using the details. Note [Account ID] can be input at the authentication screen displayed when an attempt is made to use services requiring accounting.
[`Remote`]	Uses user details set in a remote authentication server for authentication. Note Enables saving of user details used for log in to remote accounts in the machine. Even if the remote authentication server has not started at the time of login to remote accounts, the machine can be used by logging in the user using user details saved in the machine. Set [`Save Remote Accounts in This Device`] to [`Off`] when not saving user details used for remote accounts in the machine. Refer to [`Authentication`] for [`Save Remote Accounts in This Device`]. When [`Authentication System`] is [`Authentication Agent`], accounting is performed using an authentication server.
[`Custom`]	Set this feature when using the authentication customization contents or plug-ins.
[`Accounting Mode`]	Enables use of accounting feature for each service. Note The displayed items differ depending on the installed services. [`Client Scan`] is a scan operated from a client computer using AirPrint, etc.

[`Accounting Login Screen Settings`]

Item	Description
[`Alternative Name for User ID`]	Enables changing the indication, displayed as the “User ID” on the login screen displayed when the login information field (Login icon) on the touch panel display is tapped on, to another such as “UserName” or “Number” as required.
[`Hide User ID (***)`]	Sets method of displaying text string when entering user ID.
[`Alternative Name for Account ID`]	Changes the indication, displayed as the “Account ID” on the login screen displayed when the login information field (Login icon) on the touch panel display is tapped on, to another such as “Account Name” or “Number” as required. Note This item is displayed when [`Authentication/Accounting Settings`] is set to [`Network`].
[`Hide Account ID (***)`]	Sets method of displaying text string when entering account ID. Note This item is displayed when [`Authentication/Accounting Settings`] is set to [`Network`].
[`Display Billing Information upon Login`]	Enables display of billing information for each user immediately after authentication. Note This item is displayed when [`Authentication/Accounting Settings`] is set to [`Local`].

[`Fax Billing Data`]

Sets unit rates for fax billing.

Note

For communication time per message in each time slot (night time, midnight, day time), set using [Billing (Day Time)], [Billing (Night Time)], and [Billing (Midnight)]. For details, refer to Setting Detailed Items for Each Service.

[`Accounting/Billing Device Settings`]

Item	Description
[`Connect with Acct./Billing Device`]	Sets whether to use a connected accounting/billing device.
[`Accounting/Billing Device`]	Selects type of accounting/billing device.
[`Track Print Jobs`]	Sets whether to track print jobs.
[`Track Scan/Fax Jobs`]	Sets whether to track scan, fax, and Internet fax jobs. This can be used when equipment other than a payment device and dispenser is installed.
[`Job with Insufficient Credit`]	Sets whether to cancel or hold jobs when credit is insufficient. This can be used when equipment other than a card-type cumulative device or an IC Card authentication device is installed.
[`Charge Print Jobs`]	Sets whether to charge print jobs by card number. This can be used when a card-type cumulative device or card-type subtracter is installed.
[`Print Control with Cumulative Device`]	Sets timing for billing of print or copy jobs. This can be used when a card-type cumulative device is installed.
[`Scan Ahead for Copy Job`]	Sets whether to scan ahead for copy job. This can be used when a card-type cumulative device or card-type subtracter is installed.

[`Authentication/Security Settings`]

Enables creation of users of the machine, and setting of authentication and security.

Refer

Refer to Authentication and Accounting Feature.

[`Administrator Settings`]

Item	Description
[`Administrator ID`]	Sets user ID for the system administrator.
[`Administrator Password`]	Sets password for the system administrator.
[`Reset System Administrator Information`]	Enables resetting the user ID and password for the system administrator from the [`Login`] screen. If you select [`Allow`], fill in [`Email Address to Receive Security Code`] with the email address where the security code will be sent.

Item

Description

[Administrator ID]

Sets user ID for the system administrator.

[Administrator Password]

Sets password for the system administrator.

[Reset System Administrator Information]

Enables resetting the user ID and password for the system administrator from the [Login] screen.

If you select [Allow], fill in [Email Address to Receive Security Code] with the email address where the security code will be sent.

[`Authentication`]

Item			Description
[`Authentication/Accounting Settings`]			Sets the authentication/accounting method. This is the same as [`Authentication/Accounting Settings`].
[`Access Control`]			You can restrict access to the machine and each service in Authentication Mode. User login is necessary to use this. Note When logging in to remote accounts (other than when using our products (sold separately)), this is based on access permission information for usable services, retrieved from the remote authentication server.
	[`System Settings Access`]		Enables limitation of changes to machine settings by anyone other than the administrator.
	[`Device Access`]		Enables restriction of button operation on touch panel display of the machine.
	[`App Access`]		Enables limitation of each service of the machine. Note If a service is set to [`Locked (Hide Icon)`], the pertinent service is not displayed on the Home screen. The pertinent service is also displayed when authentication is finished.
	[`Feature Access`]
		[`Color Copying`]	Enables limitation of color copying.
		[`Print Files from Folder`]	Enables limitation of printing files from folder.
		[`Retrieve Files from Folder`]	Enables limitation of sending and transfer of files from folder.
		[`Recipient Selection Method`]	Enables limitation of selecting recipients not set in the Address Book when sending faxes, Internet faxes, or Email. When set to [`Only from Address Book`], it becomes impossible to input the recipient from a keypad or keyboard. Sending is limited only to recipients set in the Address Book.
		[`Address Book Editing`]	Enables limitation of creating or changing recipients in the Address Book by local users.
[`Create/View User Accounts`]			Creates user IDs and user names for authentication of created users if authentication is set to enabled. The maximum use quantity can be set for each user using the machine. This also enables management like confirming the cumulative pages for each created user. User data can be created for up to 1,000 accounts. This is the same as [`Create/View User Accounts`].
[`Delete/Reset Account Data`]			Enables tasks such as deleting user accounts for all users, and resetting meter data. Before deleting/resetting, it is also possible to print a report and confirm beforehand the information to be deleted/reset. This is the same as [`Delete/Reset Account Data`].
[`Create Permission Groups`]			Enables the administrator to grant “Authorization” enabling use of features that cannot normally be used to login users. If an authorization group is created, management can be done by grouping users by authorization.
[`User Details Setup`]			Sets information needed when logging in.
	[`Alternative Name for User ID`]		Enables changing the indication, displayed as the “User ID” on the login screen displayed when the login information field (Login icon) on the touch panel display is tapped on, to another such as “UserName” or “Number” as required.
	[`Hide User ID (***)`]		Enables setting of method of displaying text string when entering user ID. Set items such as strengthening of security if necessary. When set to [`Show`], the display shows the entered text string when a user ID is input. If set to [`Hide`], [*****] is displayed.
	[`Failed Access Log`]		Sets the number of login attempts for detecting unauthorized access. If login fails the number of times set here within a specified time (10 minutes), it is recorded as an error.
	[`Logout Confirmation Screen`]		Enables display of a confirmation screen when logging out.
	[`User ID for Login`]		Sets text type of user ID for login. When set to [`Case Sensitive`], login is done with the user ID in the created form (including both upper and lower case). When set to [`Non-Case Sensitive`], login is done without distinguishing upper and lower case, even if there is mixture of upper and lower case in the user ID.
	[`Login When Card Reader Is Connected`]		Enables user ID login when an IC Card reader is connected to the machine, if logging in to local accounts. User ID login cannot be used if set to [`IC Card Login Only`]. If set to [`IC Card / Control Panel Login`], then both IC Card login and user ID login can be used.
	[`Guest User`]		Enables use of guest users in case of log in to remote accounts.
	[`Account Auto Setup for Card Login`]		Enables account setup when an IC Card is held over the IC Card reader if a user has not been created with log in to local accounts. Account setup is not done if set to [`Disabled`]. Account setup is done if set to [`Enabled`].
	[`Use of IC Card`]		Enables use of IC Cards when an IC Card reader is connected to the machine. When set to [`On`], it is possible to set for each feature whether to control jobs with IC Cards. [`On (PKI Only)`] is set when only the security feature is controlled, without using an IC Card for authentication and job control.
	[`IC Card Link Mode`]		Enables requiring input of password at IC Card login in the case of log in to remote accounts.
	[`Contactless IC Card Logout Timing`]		Sets the method of logging out in case of IC Card login. If set to [`Log Out When Card Is Removed`], logout is done when the IC Card is moved away from the IC Card reader. If set to [`Log Out from Control Panel`], logout is done through operation of the touch panel display.
	[`Cache Login Credentials on Device`]		Enables saving of user details used for log in to remote accounts in the machine. When [`Enabled`] is set, and even if the remote authentication server has not been started at log in to remote accounts, the machine can be used by logging in the user using user details saved in the machine. Note This applies only to users who sets [`IC Card Link Mode`] to [`No Password Required`] and logs in with an IC Card. Users logged in using user details saved in the machine are set in [`(Remote Accounts Logged In with Cached Credentials)`].
	[`Delete Cached Login Credentials`]		Enables deletion of user details for log in to remote accounts saved in the machine. Note This applies only to users logged in with an IC Card.
[`Invalid Login Settings`]			Sets this setting so that invalid operation is not performed through impersonation. Sets the number of attempts until access is denied for the [`Maximum Failed Attempts`], so that access is denied if there are consecutive failures in authenticating the same user ID. Note When the machine is restarted, the number of failed attempts is reset. When setting, set [`Maximum Login Attempts - System Administrator`] or [`Maximum Login Attempts - Local User`] to [`On`]. Restart the machine to cancel the access denied state. Maximum login attempts for local users can be set in the case of login to local accounts.
[`Password Policy`]
	[`Password for Control Panel Login`]		Enables input of a password when a user uses the machine. If set to [`On`], the [`Password`] for [`Create/View User Accounts`] is enabled. If set to [`Off`], password input is not required, even if a password is specified with the above setting.
	[`Password for IC Card Login`]		Enables input of password when the administrator or user performs IC Card login for log in to local accounts.
	[`Minimum Password Length`]		Specifies minimum password length.
	[`Maximum Password Length`]		Specifies maximum password length.
	[`Authentication from External Services`]		Set whether to accept the authentication that does not involve login operations such as print jobs when the set password no longer satisfies the requirements as a result of changing the password security strength settings of the machine, containing the minimum and maximum length of a password, permission for the use of User ID in a password, the requested character types for a password.
[`Charge/Private Print Settings`]			Sets for control of the Charge Print or Private Charge Print.
	[`Receive Control`]		Sets how to handle received print jobs.
		[`Control by Job Login Results`]	Sets handling of jobs for, respectively, [`Job Login Success`], [`Job Login Failure`] and [`Job Without User ID`] when [`Printer`] in [`App Access`] is set to [`Locked`] using the authentication/accounting feature.
		[`Save as Private Charge Print Job`]	Saves all jobs with user ID attached as private charge prints, regardless of whether the authentication feature is used or not. This sets handling of jobs for, respectively, [`Job Without User ID`] and [`Non-PJL Command Jobs`].
		[`Save as Charge Print Job`]	Saves all received jobs as charge prints, regardless of whether the authentication feature is used or not.

[`Force Print Suspension`]

Used in cases such as printing where forced printing is done, but there is no forced printing for specific output only.

Active settings can be temporarily disabled, even if active settings have been set, such as force watermark, force secure watermark, print universal unique ID, and force annotation.

If copy, folder print, stored file print, or print from USB is performed in the state set to [On], then active settings are disabled. (They are not disabled in the case of a fax, ordinary print, or report/list.)

This is displayed only when [Force Print Suspension] for the authorization group to which the login user belongs has been set to [Allow].

Note

Active settings can be disabled even in cases where a file in a folder is selected and running is done manually using job flow sheets.
This can be set for users with administrator rights, regardless of the authorization group.
For watermarks specified by the user in ApeosWare Copy Protection (sold separately) or copying, this setting is disabled even if it's allowed.
The features that allow forced printing vary depending on the model.

[`Job Operation Settings`]

Enables restriction of display of active jobs. This protects privacy and deters information leaks for unauthenticated users and users who are not job owners.

Item		Description
[`Active Jobs View`]		Enables restriction of display of information for active jobs.
[`Completed Jobs View`]
	[`Allow Job Viewing at All Times`]	Enables confirmation all finished jobs, regardless of login. Display of detailed information on jobs can be restricted.
	[`Require Login to View Jobs`]	Enables confirmation of finished jobs only by users currently logged into the machine. Display of detailed information on jobs can be restricted by setting jobs that can be confirmed to only the jobs of logged in users.
	[`Hide`]	Disables display of all finished jobs, regardless of login.
[`Job Operation Restrictions`]		Sets range of users allowed to perform job operation for each type of operation.

[`Disable Direct Print Feature`]

When set to [On], direct print features are disabled, such as print from USB, print Email, print Internet fax, and mobile print.

[`Runtime Integrity Protection`]

Sets whether to detect access to or running of unauthorized file during machine operation.

If set to [On], file writing or running are denied, and the specifics of the access are recorded in the audit log.

If set to [On (Log Only)], recording is done in the audit log, but access to the file is not denied.

Note

The audit log feature must be set to enabled to record in the audit log. For details, refer to [Audit Log Settings].