Xerox VersaLink C7000 - Network Authentication; Smart Card Authentication; Convenience Authentication

Xerox® Security Guide for Office Class Products: AltaLink®  VersaLink®
November 2018 Page 27
Network Authentication
When configured for network authentication, user credentials are validated by a remote authentication
server.
AltaLink®
Multifunction
VersaLink®
Multifunction
VersaLink® Printers
B8045, B8055, B8065, B8075,
B8090, C8030, C8035, C8045,
C8055, C8070
B405, B605, B615, B7025,
B7030, B7035, C405, C505,
C605, C7020, C7025, C7030
B400, B600, B610, C400,
C500, C600, C7000, C8000,
C9000
Network Authentication Providers
Kerberos (Microsoft Active Directory)
Supported
Supported
Supported
Kerberos (MIT)
Supported
Supported
Supported
SMB NTLM Versions Supported
NTLMv2
NTLMv2
NTLMv2
LDAP Versions Supported
Version 3 (including TLS
1.2)
Version 3 (including TLS
1.2)
Version 3 (including TLS
1.2)
Smart Card Authentication
Two-factor security - Smart Card plus User Name/Password combination. Requires optional card reader
hardware and software plugin. Authentication is handled by a remote server. Supported remote
authentication methods include Kerberos, SMB and LDAP.
Smart Card authentication is considered very secure due to the nature of the Smart Card architecture and
potential levels of encryption of data on the card itself.
Support for the SIPR network is provided using the XCP Plug-in architecture and a Smart Card
authentication solution created by 90meter under contract for Xerox.
Details regarding 90meter can be found online here: http://www.90meter.com/
Other Smart Card authentication solutions are offered including support for CAC/PIV and .NET
compatible cards leveraging XCP Plug-ins.
AltaLink®
Multifunction
VersaLink®
Multifunction
VersaLink® Printers
B8045, B8055, B8065, B8075,
B8090, C8030, C8035, C8045,
C8055, C8070
B405, B605, B615, B7025,
B7030, B7035, C405, C505,
C605, C7020, C7025, C7030
B400, B600, B610, C400, C500,
C600, C7000, C8000, C9000
Smart Cards
Common Access Card (CAC)
Supported
Supported
Supported
PIV / PIV II
Supported
Supported
Supported
Net (Gemalto .Net v1, Gemalto .Net v2)
Supported
Supported
Supported
Gemalto MD
Supported
(Not Currently Supported)
(Not Currently Supported)
Convenience Authentication
Convenience authentication offloads authentication to a third-party solution which may offer more or less
security than native security implementations. Users swipe a pre-programmed identification card or key
fob to access the device.
For example, employees may be issued key fobs for access to facilities. Convenience mode may be
configured to allow an employee to authenticate using their fob or require the fob in a multi-factor manor.
The level of security provided is dependent upon the chosen implementation.