Xerox® Security Guide for Entry Production Color Class Products 
March 2019   Page  6-23 
 
 
  Identification, Authentication, and Authorization 
ColorPress® and Versant® products offer a range of authentication and authorization options to support 
various environments.   
Single Factor authentication is supported locally on the product or via external network authentication 
servers (e.g. LDAP, Kerberos, ADS).  Multi Factor authentication is supported by addition of card reader 
hardware.  (Where ease of access is desired, open access and simple user identification modes also 
exist, however these are not recommended for secure environments.) 
In all modes, product administrator accounts always require authentication.  This cannot be disabled. 
A flexible RBAC (Role Based Access Control) security model supports granular assignment of user 
permissions. Once a user has been authenticated, the product grants (or denies) user permissions 
based upon the role(s) they have been assigned to.  Pre-defined roles that may be used or custom roles 
may be created as desired. 
 
Authentication 
ColorPress® and Versant® devices support the following authentication modes: 
 Local Authentication 
 Network Authentication 
 Smart Card Authentication (CAC, PIV, SIPR, .Net) 
 Convenience Authentication    
 
Local Authentication 
The local user database stores user credential information. The printer uses this information for local 
authentication and authorization, and for Xerox ® Standard Accounting. When you configure local 
authentication, the printer checks the credentials that a user provides against the information in the user 
database. When you configure local authorization, the printer checks the user database to determine 
which features the user is allowed access. 
Note: User names and passwords stored in the user database are not transmitted over the network 
Password Policy 
The following password attributes can be configured: 
 
Versant 80 Press, Versant 
180 Press  
Versant 2100 Press, 
Versant 3100 Press 
Color 800/1000 Presses, 
Color 800i/1000i Presses 
Password cannot contain User Name 
Password complexity options (in addition to 
alphabetic characters)