1. Manuals
  2. Brands
  3. Epson Manuals
  4. Printer
  5. WorkForce WF-3640
  6. Administrator's manual

Epson WorkForce WF-3640 Administrator's Manual

Hide thumbs Also See for WorkForce WF-3640:
Table of Contents

Advertisement

Quick Links

See also: User Manual , Quick Manual
Administrator's Guide

Advertisement

Table of Contents
loading

Related Manuals for Epson WorkForce WF-3640

Summary of Contents for Epson WorkForce WF-3640

  • Page 1 Administrator's Guide...

  • Page 3: Table Of Contents

    Contents Administrator's Guide..........................7 Using Web Config Network Configuration Software ................8 About Web Config ..........................8 Accessing Web Config ......................... 8 Restricting Features Available for Users ....................9 User Feature Restriction........................ 10 Configuring User Feature Restrictions................... 10 Changing the Administrator Password in Web Config ..............12 Using Your Product on a Secure Network ..................
  • Page 4 CSR Import Settings ......................... 33 Deleting a CA-signed Certificate ....................34 Updating a Self-signed Certificate..................... 34 Using an LDAP Server........................35 Configuring the LDAP Server and Selecting Search Settings ........... 35 LDAP Server Settings ....................... 37 LDAP Search Settings ......................38 Checking the LDAP Server Connection ..................
  • Page 5 Cannot Import a Digital Certificate ....................53 Cannot Update a Certificate or Create a CSR ................53 Deleted a CA-signed Certificate ....................53 Where to Get Help..........................54 Notices ............................... 55 Trademarks ............................55 Copyright Notice..........................55 Copyright Attribution ........................56...

  • Page 7: Administrator's Guide

    Administrator's Guide Welcome to the Administrator's Guide. For a printable PDF copy of this guide, click here. Note: Not all features mentioned in this Administrator's Guide are available with every product model.

  • Page 8: Using Web Config Network Configuration Software

    Using Web Config Network Configuration Software Follow the instructions in these sections to configure your product's adminstrator network settings using the Web Config software. Note: Before you can configure system administration settings, connect the product to a network. See the product's Start Here sheet and User's Guide for instructions. About Web Config Accessing Web Config Restricting Features Available for Users...

  • Page 9: Restricting Features Available For Users

    • IPv6: http://[product IP address]/ The Basic Settings page appears: 4. To use HTTPS, configure the address to use HTTPS in your browser. A message warning about the self-signed certificate appears. To access Web Config after configuring the address to use HTTPS, enter https:// before the product IP address, shown in step 3.

  • Page 10: User Feature Restriction

    User Feature Restriction You can restrict available product features for up to 10 individual users, with different features available to each user. This requires users to log into the product control panel with their user name and password before they can use control panel features. With Windows, you can also restrict printing and scanning from the product software.
  • Page 11 • Web services such as Epson Connect or Google Cloud Print • Smartphones and other mobile devices 4. Click OK. 5. Select Access Control Settings and select User Settings. 6. Click Add. You see a window like this: 7. Enter a name for a user in the User Name field following the guidelines on the screen. Use ASCII (0x20-0x7E) characters.

  • Page 12: Changing The Administrator Password In Web Config

    EpsonNet Config. You use the same administrator password in all cases. Note: See your product's User's Guide for instructions on setting an administrator password using the control panel. If you forget your administrator password, contact Epson for support, as described in the product's User's Guide.

  • Page 13: Using Your Product On A Secure Network

    Using Your Product on a Secure Network Follow the instructions in these sections to configure security features for your product on the network using the Web Config software. Configuring SSL/TLS Communication Configuring IPsec/IP Filtering Configuring SNMPv3 Protocol Settings Connecting the Product to an IEEE802.1X Network Using a Digital Certificate Using an LDAP Server Using an Email Server...

  • Page 14: Configuring A Server Certificate For The Product

    You see a window like this: 3. Select one of the following options for the Encryption Strength setting: • High for AES256/3DES • Middle for AES256/3DES/AES128/RC4 4. Select Enable or Disable for the Redirect HTTP to HTTPS setting as necessary. 5.

  • Page 15: Configuring Ipsec/Ip Filtering

    You see a window like this: 3. Select one of the following options for the Server Certificate setting: • Self-signed Certificate: select if you have not obtained a CA-signed certificate and want the product to generate a self-signed certificate • CA-signed Certificate: select if you have obtained a CA-signed certificate 4.

  • Page 16: About Ipsec/Ip Filtering

    About IPsec/IP Filtering You can filter traffic to the product over the network based on IP address, service, and port by configuring a default policy that applies to every user or group connecting to the product. For control of individual users or user groups, you can configure group policies. Note: IPsec is supported only by computers running Windows Vista or later, or Windows Server 2008 or later.

  • Page 17: Configuring Group Ipsec/Ip Filtering Policies

    Configuring Group IPsec/IP Filtering Policies You can configure group policies for IPsec/IP traffic filtering using Web Config. 1. Access Web Config and select Network Security Settings. 2. Select IPsec/IP Filtering and select Basic. 3. Click a tab number for the policy number you want to configure. You see a window like this: 4.

  • Page 18: Ipsec/Ip Filtering Policy Settings

    IPsec/IP Filtering Policy Settings Default Policy Settings Setting Options/Description Access Control Permit Access to permit IP packets to pass through Refuse Access to prevent IP packets from passing through IPsec to permit IPsec packes to pass through Authentication Method Select an authentication method, or select Certificate if you have imported a CA-signed certificate Pre-Shared Key If necessary, enter a pre-shared key between 1 and 127...
  • Page 19 Group Policy Settings Setting Options/Description Access Control Permit Access to permit IP packets to pass through Refuse Access to prevent IP packets from passing through IPsec to permit IPsec packes to pass through Local Address(Printer) Select an IPv4 or IPv6 address that matches your network environment;...
  • Page 20 Setting Options/Description Local Port If you selected Port Number as the Method of Choosing Port option, and TCP or UDP for the Transport Protocol option, enter the port numbers that control receiving packets (up to 10 ports), separated by commas, for example 25,80,143,5220;...
  • Page 21 Setting Options/Description Security Protocol If you selected IPsec as the Access Control option, select one of these security protocols: ESP, to ensure the integrity of authentication and data, and encrypt data AH, to ensure the integrity of authentication and data; if data encryption is prohibited, you can use IPsec Group Policy Guidelines Service name...

  • Page 22: Ipsec/Ip Filtering Configuration Examples

    Forwarding Web Config and WSD data to a HTTP or HTTPS server HTTPS (Local) 443/Any port HTTP (Remote) Any port/80 Communicating with Epson Connect, Google Cloud Printer, firmware HTTPS (Remote) Any port/443 update, and root certificate update on a HTTP or HTTPS client...

  • Page 23: Configuring An Ipsec/Ip Filtering Certificate

    • Access Control: IPsec • Authentication Method: Pre-Shared Key • Pre-Shared Key: Enter a key up to 127 characters long Receiving Printing Data and Printer Settings Use this example to allow communication of printing data and printer settings from specified services. Default policy: •...

  • Page 24: Configuring Snmpv3 Protocol Settings

    You see a window like this: 3. Select the certificate you want to use as the Use the following CA Certificate option. 4. Select the certificate you want to use as the Use the following Client Certificate option. 5. Click Next. You see a confirmation message.

  • Page 25: Snmpv3 Settings

    You see a window like this: 3. Select the Enable SNMPv3 checkbox to enable SNMPv3 settings. 4. Select the settings you want in SNMPv3 Settings section. 5. Click Next. You see a confirmation message. 6. Click OK. SNMPv3 Settings Parent topic: Using Your Product on a Secure Network SNMPv3 Settings You can configure these SNMPv3 settings in Web Config.

  • Page 26: Connecting The Product To An Ieee802.1X Network

    Setting Options/Description Algorithm Select and algorithm for an encryption Password Enter a password from 8 to 32 characters long in ASCII Confirm Password Enter the encryption password again Context Name Enter a context name from 1 to 32 characters long in ASCII Parent topic: Configuring SNMPv3 Protocol Settings...

  • Page 27: Ieee802.1X Network Settings

    You see a window like this: 3. Select Enable as the IEEE802.1X (Wired LAN) setting. 4. To use the product on a Wi-Fi network, enable your product's Wi-Fi settings. See your product's User's Guide for instructions. The status of the connection shown in the IEEE802.1X (Wi-Fi) setting. Note: You can share the network settings for Ethernet and Wi-Fi networking.

  • Page 28: Configuring A Certificate For An Ieee802.1X Network

    Setting Options/Description EAP Type Select one of these authentication methods for connections between the product and a RADIUS server: EAP-TLS or PEAP-TLS: You must obtain and import a CA- signed certificate PEAP/MSCHAPv2: You must configure a password User ID Enter an ID for authentication on a RADIUS server Password Enter a password for authentication of the product Confirm Password...

  • Page 29: Ieee802.1X Network Status

    You see a window like this: 3. Select the certificate you want to use as the Use the following CA Certificate option. 4. Select the certificate you want to use as the Use the following Client Certificate option. 5. Click Next. You see a confirmation message.

  • Page 30: Using A Digital Certificate

    Status ID Status description User ID Error Authentication has failed because the product's user ID and/or certificate protocol is incorrect Server ID Error Authentication has failed because the server ID on the server certificate and the server's ID do not match Server Certificate Error Authentication has failed because the server certificate is out of date or the chain of the server certificate is incorrect...

  • Page 31: Obtaining And Importing A Ca-Signed Certificate

    Parent topic: Using a Digital Certificate Obtaining and Importing a CA-signed Certificate You can obtain a CA-signed certificate by creating a CSR (Certificate Signing Request) using Web Config and submitting it to a certificate authority. The CSR created in Web Config is in PEM/DER format. You can import one CSR created from Web Config at a time.
  • Page 32 8. In the CSR section, click the Download option that matches the format specified by your certificate authority to download the CSR. Caution: Do not generate another CSR or you may not be able to import a CA-signed certificate. 9. Submit the CSR to the certificate authority following the format guidelines provided by that authority. 10.

  • Page 33: Csr Setup Settings

    CSR Setup Settings You can select these settings when setting up a CSR in Web Config. Note: The available key length and abbreviations vary by certificate authority, so follow the rules of that authority when entering information in the CSR. Setting Options/Description Key Length...

  • Page 34: Deleting A Ca-Signed Certificate

    Certificate format Setting descriptions PKCS#12 format obtained from a computer Private Key: Do not configure Password: Optional CA Certificate 1/CA Certificate 2: Do not configure Parent topic: Using a Digital Certificate Deleting a CA-signed Certificate You can delete an imported CA-signed certificate with Web Config when the certificate expires or if you have no more need for an encrypted connection.

  • Page 35: Using An Ldap Server

    You see a window like this: 3. Enter an identifier for your product from 1 to 128 characters long in the Common Name field. 4. Select a validity period for the certificate as the Certificate Validity (year) setting. 5. Click Next. You see a completion message.
  • Page 36 1. Access Web Config and select Wi-Fi/Network Settings. 2. Select LDAP Server and select Basic. You see a window like this: 3. Select Use as the Use LDAP Server setting. 4. Select the LDAP server settings. 5. Click OK. 6. Select Wi-Fi/Network Settings and select LDAP Server again. 7.

  • Page 37: Ldap Server Settings

    8. Select the LDAP search settings you want to use. 9. Click OK. Parent topic: Using an LDAP Server LDAP Server Settings You can configure these LDAP server settings in Web Config. Setting Options/Description LDAP Server Address Enter the address of the LDAP server as necessary, depending on the format of the server: •...

  • Page 38: Ldap Search Settings

    Setting Options/Description Kerberos Server Realm If you selected Kerberos Authentication as the Authentication Method option, enter the realm of Kerberos authentication from 0 to 255 characters long in ASCII Parent topic: Using an LDAP Server LDAP Search Settings You can configure these LDAP search settings in Web Config. Setting Options/Description Search Base (Distinguished Name)

  • Page 39: Ldap Connection Report Messages

    1. Access Web Config and select Wi-Fi/Network Settings. 2. Select LDAP Server and select Connection Test. 3. Click Start. Web Config tests the connection and displays the connection report when it is finished. Parent topic: Using an LDAP Server LDAP Connection Report Messages You can review the connection report messages to diagnose LDAP connection problems in Web Config.

  • Page 40: Configuring An Email Server

    Configuring an Email Server Email Server Settings Checking the Email Server Connection Email Server Connection Report Messages Configuring Email Notification Parent topic: Using Your Product on a Secure Network Configuring an Email Server You can configure an email server using Web Config. 1.

  • Page 41: Checking The Email Server Connection

    Setting Options/Description Authenticated Account Enter the authenticated account name from 0 to 30 characters long in ASCII Authenticated Password Enter the authenticated password from 0 to 20 characters long in ASCII using A-Z, a-z, 0-9, and these characters: ! # $ % ' * + - . / = ? ^ _ { ! } ~ @ Sender's Email Address Enter the sender's email address from 0 to 255 characters long in ASCII;...

  • Page 42: Configuring Email Notification

    Message Description Connection test failed. Check the One of the following has occurred: settings. • The email server address or port number is incorrect • A timeout has occurred Cannot access the printer until The product is busy. processing is complete. Parent topic: Using an Email Server Configuring Email Notification...
  • Page 43 6. Select the checkboxes to indicate the events for which you want to receive email notifications. 7. Click OK. Parent topic: Using an Email Server...

  • Page 44: Using Epsonnet Config Network Configuration Software

    Start, and select All Programs or Programs. Select EpsonNet and click EpsonNet Config. • OS X: Open the Applications folder, open the Epson Software folder, select EpsonNet, select EpsonNet Config, and double-click the EpsonNet Config icon. After a few moments, the program displays the connected products.

  • Page 45: Configuring A Product Ip Address Using Epsonnet Config - Wifi

    4. Double-click the product you are configuring. Note: If several products of the same model are connected, you can identify them by their MAC address. 5. From the menu on the left, select Network Interface, select TCP/IP, and select Basic. You see a window like this: 6.
  • Page 46 Start, and select All Programs or Programs. Select EpsonNet and click EpsonNet Config. • OS X: Open the Applications folder, open the Epson Software folder, select EpsonNet, select EpsonNet Config, and double-click the EpsonNet Config icon. After a few moments, the program displays the connected products.
  • Page 47 You see a window like this: 8. Enter the Communication Mode, Wireless Mode, SSID, and Security Level settings for the Wi-Fi network as necessary. 9. Select Transmit. 10. Confirm the Wi-Fi connection to the product and disconnect the Ethernet cable from the product. Parent topic: Using EpsonNet Config Network Configuration Software...

  • Page 48: Solving Problems

    Solving Problems Check these sections for solutions to problems you may have with the network configuration software. Solving Network Software Usage Problems Solving Network Security Problems Solving Digital Certificate Problems Where to Get Help Solving Network Software Usage Problems Check these sections if you have problems using the network software. Cannot Find Access Web Config The "Out of Date"...

  • Page 49: The "Out Of Date" Message Appears

    The "Out of Date" Message Appears If the "Out of Date" message appears when you are accessing Web Config using SSL communication (HTTPS), the certificate is out of date. Make sure that the product date and time are configured correctly, and obtain a new certificate.

  • Page 50: Pre-Shared Key Was Forgotten

    Pre-Shared Key was Forgotten If you forget a pre-shared key, change the key using Web Config for the default or group policy. Parent topic: Solving Network Security Problems Cannot Communicate with the Product Using IPsec Communication Make sure your computer is using one of these supported algorithms for communicating with the product: Security method Supported algorithms...

  • Page 51: Cannot Create The Secure Ipp Printing Port

    • If DHCP is out of date, or the IPv6 address is out of date or was not obtained, you may not be able to find the IP address registered in Web Config. • If that does not solve the problem, enter a static IP address using Web Config. Parent topic: Solving Network Security Problems Cannot Create the Secure IPP Printing Port...
  • Page 52 Message Solution Invalid value below. Remove any unsupported characters in the file path and password. Invalid date and time. Set the date and time on the product using Web Config, EpsonNet Config, or the product control panel. Invalid password Enter the password that matches the password set for the CA certificate.

  • Page 53: Cannot Import A Digital Certificate

    Message Solution Setup failed. Make sure the computer and product are connected, and the certificate file is not corrupted, then import the certificate file again. Parent topic: Solving Digital Certificate Problems Cannot Import a Digital Certificate If you cannot import a digital certificate, try these solutions: •...

  • Page 54: Where To Get Help

    Where to Get Help If you need to contact Epson for technical support services, use the following support options. Internet Support Visit Epson's support website at epson.com/support (U.S.) or epson.ca/support (Canada) for solutions to common problems. You can download drivers and documentation, get FAQs and troubleshooting advice, or e-mail Epson with your questions.

  • Page 55: Notices

    Seiko Epson Corporation. The information contained herein is designed only for use with this Epson product. Epson is not responsible for any use of this information as applied to other products.

  • Page 56: Copyright Attribution

    Seiko Epson Corporation shall not be held liable for any damage resulting from electromagnetic interference that occurs from the use of any interface cables other than those designated as Epson approved Products by Seiko Epson Corporation. This information is subject to change without notice.

Table of Contents