Xerox® Security Guide for Office Class Products: AltaLink® VersaLink®
November 2018 Page 26
7 Identification, Authentication, and Authorization
AltaLink® and VersaLink® products offer a range of authentication and authorization options to support
various environments.
Single Factor authentication is supported locally on the product or via external network authentication
servers (e.g. LDAP, Kerberos, ADS). Multi Factor authentication is supported by addition of card reader
hardware. (Where ease of access is desired, open access and simple user identification modes also
exist, however these are not recommended for secure environments.)
In all modes, product administrator accounts always require authentication. This cannot be disabled.
A flexible RBAC (Role Based Access Control) security model supports granular to assign of user
permissions. Once a user has been authenticated, the product grants (or denies) user permissions
based upon the role(s) they have been assigned to. Pre-defined roles that may be used or custom roles
may be created as desired.
Authentication
AltaLink® and VersaLink® devices support the following authentication mode:
Local Authentication
Network Authentication
Smart Card Authentication (CAC, PIV, SIPR, .Net)
Convenience Authentication
Local Authentication
The local user database stores user credential information. The printer uses this information for local
authentication and authorization, and for Xerox ® Standard Accounting. When you configure local
authentication, the printer checks the credentials that a user provides against the information in the user
database. When you configure local authorization, the printer checks the user database to determine
which features the user is allowed access.
Note: User names and passwords stored in the user database are not transmitted over the network
Password Policy
The following password attributes can be configured:
B8045, B8055, B8065, B8075,
B8090, C8030, C8035, C8045,
C8055, C8070
B405, B605, B615, B7025,
B7030, B7035, C405, C505,
C605, C7020, C7025, C7030
B400, B600, B610, C400,
C500, C600, C7000, C8000,
C9000
Password cannot contain User Name
Password complexity options (in addition
to alphabetic characters)
Require a number
Require non-alphabetic
Require a number
Require non-alphabetic
To Next Page
Loading...
Need help?
General
