Issuing Printer Certificates

Hey,
I've rolled out port security for windows workstations and now I'm working on other devices, primarily Lexmark printers (using Certificates). Can someone explain to how I can issue a certificate to the printer with my enterprise CA? I can generate the request
from the printer but If I request it using the web interface then:
a) I need to pick a template
b) Its listed as issued to "me"
I found documentation for lexmark: http://www.lexmark.com/publications/pdfs/2007/embedded-web-server/EWS_HSP_Security_AdminGuide_Lexmark_en.pdf Pg22
But it lacks the insight I need for the windows side of thing. Any advise or blogs of someone doing this would be great. Thanks.

Hi,
Thanks for your time and patience on this issue and hope this may help:
Obtain a Certificate
http://technet.microsoft.com/en-us/library/cc754246.aspx
When attempting to add an IPP printer over HTTPS, you receive an error.
http://support.microsoft.com/kb/2021626
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Similar Messages

Issue printing PDF Packages

I'm having issues printing PDF Packages.Clients have contacted us stating that our PDF Packages don't print properly. Essentially they were only able to print the "coversheet" and nothing else. I ran some test scenarios and noted that PDF Packages print feature behaved differently depending on several criterias:
how it was viewed (ie: desktop, Firefox browser, IE browser)
what Adobe Reader Plugin
what command was used to access print feature (ie: file>print, ctrl + P, print icon)
So far I've noticed that Adobe Reader utilizes two versions of the Print Dialog Box. The first one shows four choices for "Print Range" (All, Current View, Current Page, Pages...) seems to always be misconfigured and does not print as intended. The second one I've noticed seems to limit your Print Range choices (All, Current View) which usually works.
This seems to be an Adobe bug. This Print Bug exists on both Acrobat 8 and 9, and the bug may or may not exist depending on how you view the "PDF Package" (ie: Desktop, Firefox, IE).
If you open the PDF Package on your desktop and view via Adobe Reader for the most part it prints as expected for "Print Current Documents" or "Print All Documents". Although the "Print Range" is misaligned (ie: "Print All" behaves as "Current View", "Current View" behaves as "Current Page".
If you open the PDF Package on a browser with an Adobe Reader plugin, a different scenario occurs.
You might experience that you're locked into printing only the "coversheet" of the PDF Package.
And again your "Print Range" might be misaligned.
In Adobe Reader 8, a dropdown appeared when you selected "File>Print" or the "Print Icon". The dropdown then gave you an option to "Print Current Documents" or "Print All Documents". Which basically provided you an option to print the entire "PDF Package" or choose to print only a section of the "PDF Package".
In Adobe Reader 9, the option to choose between "Print Current Documents" or "Print All Documents" was removed.
In fact I started to document the instances to see if its an isolated issue and it looks like it fails to print (as intended) 60% of the time. Of the 40% that does print as intended... it looks like half the time the "Print Range" is misconfigured.
Also, I've noticed that Reader utilizes two different "Print Dialog" boxes.
The testing scenario I set up was that you can print in three different ways:
    1. File>Print
    2. <ctrl + P>
    3. <print icon>
Three ways to view the PDF package:
    1. Download PDF Package & view on your desktop via Adobe Reader
    2. View PDF Package on Firefox w/ Adobe Reader plugin
    3. View PDF Package on Internet Explored w/ Adobe Reader plugin
My computer is using:
XP Pro SP3, Acrobat Reader 9
I've also spot tested on:
XP Pro SP3, Acrobat Reader 8
Vista, Acrobat Reader 8
Any Ideas?

Hi Greg,
Since this is sytem defined settings that you are trying to implement, I presume that the INI changes ought to be done in FSISYS.INI rather than the FSIUSER.INI.
Apart from that most of your INI changes look fine as we are also using pdf as our Output type. Please find the INI change swe have implemented in our system for printing pdf.
Device = ..\Print\Prt.pdf
Bookmark = Yes,Page
Compression = 0
DownLoadFonts = Yes,Enabled
LanguageLevel = Level2
Module = PDFW32
PageNumbers = Yes
PrintFunc = PDFPrint
PrintType = PDF
SendOverlays = No,Enabled
SendColor = Yes,Enabled
PrintViewOnly = No
SplitText = No
SplitPercent = 50
TextCommentOn = FORMSET
Papersize = 0
FontCompression = 1
Hope this is helpful.
Thanks,
Akhil

I teach Continuing education classes to Real Estate agents and I need to issue them certificates at the class, whihc need to be signed by me and it needs to contain their info on the certificate. The certificate is currently saved in a word format.What i'

I teach Continuing education classes to Real Estate agents and I need to issue them certificates at the class, whihc need to be signed by me and it needs to contain their info on the certificate. The certificate is currently saved in a word format.What i'm trying to accomplish is to do a "mail merge " ( as some classes i have as many as 150 attendees) for the document, digitally sign each one with my signature on the certificate and then e-mail it out to the respective attendees. can this be done? if so How?

This is the step that I took after inputting my signature.
On the right, after saving my document, I click "Get Others to Sign." I was confused because it says that it's powered by EchoSign. Like I stated before, my clients are able to sign this document when I send it to them, but it is returned to me with their signature (not in the signature field, but at the end of the document), and my signature is missing. I tested this on myself - my signature is missing when they receive it.

Issue Printing One or Two Checks on HP LaserJet Pro 200 MFP M276nw

I just purchased an HP LaserJet Pro 200 MFP M276nw which replaces an HP Color LaserJet 2605dn.
I've run into an issue printing checkes from Quicken when I print less than a full sheet (one or two) checks.
With my old printer, I used the manual feed for a partial sheet.
Since the new printer does not have a manual feed, I have to put the partial sheet in the paper tray.
It seems one of two things happen:
1) Sometimes the printer will print the partial page but then displays an error message which says something like "Unexpected paper size, load letter."
It then re-prints the partial page on the next sheet of paper.
2) Othertimes, it prints the partial page without the error message, but then feeds the next sheet of paper throught the printer.
In either case the next page contains the next three checks, so it's either wasting checks or printing on the wrong check numbers.
Any suggestions on how to avoid these issues would be appreciated.

Me too.
I've been using an alternate printer for printing the checks, but I'd rather get rid of the old one. (The HP Laser Pro 200 takes up a lot of space!)
KC, Seems like you've been waiting for an answer for a VERY long time. I'm not going to hold my breath.
Hey HP! Do you ever monitor this site?!
KC-Texas wrote:
I just purchased an HP LaserJet Pro 200 MFP M276nw which replaces an HP Color LaserJet 2605dn.
I've run into an issue printing checkes from Quicken when I print less than a full sheet (one or two) checks.
With my old printer, I used the manual feed for a partial sheet.
Since the new printer does not have a manual feed, I have to put the partial sheet in the paper tray.
It seems one of two things happen:
1) Sometimes the printer will print the partial page but then displays an error message which says something like "Unexpected paper size, load letter."
It then re-prints the partial page on the next sheet of paper.
2) Othertimes, it prints the partial page without the error message, but then feeds the next sheet of paper throught the printer.
In either case the next page contains the next three checks, so it's either wasting checks or printing on the wrong check numbers.
Any suggestions on how to avoid these issues would be appreciated.

Secure connection failed: The Certifying Authority for this certificate is not permitted to issue a certificate with this name. (Error code: sec_error_cert_not_in_name_space) PLEASE HELP ME!!

I have gone to this website almost everyday for years and I have not changed anything in my internet settings, but now I'm getting this message: secure connection failed: The Certifying Authority for this certificate is not permitted to issue a certificate with this name. (Error code: sec_error_cert_not_in_name_space) The only thing I KNOW I did differently, was I installed a CAC reader to my computer, since then, this has been happening. Is there a setting I can change?? E-mail is: [email protected] Thanks! Megan

There were recently several users getting this error code who use AVAST 2015. If you recently got that program, please see:
* [https://support.mozilla.org/questions/1029578 Can NOT access https://www.google.com for google voice, mail etc.]
* [https://support.mozilla.org/questions/1028985 Avast Forum connection failed - works in Chrome etc.]
* [https://support.mozilla.org/questions/1028190 Since last FF update I can't sign out of Yahoo and when I close FF it tells me it has crashed.]

Failed to issue print from win7 laptop to Canon MP230 which is connected to mac mini os x 10.8.3

HI
I have recently bought a Canon MP230 printer and connected to my Mac Mini 10.8.3 usb port.
To setup the printer I downloaded the latest driver from canon web site and install all of them
When I issue print from my mac mini it works fine.
Next step was to issue print from Windows 7 laptop .
To do that I intalled Bonjoure in my Windows 7 latpot and set the printer connected to MAc Mini as default printer.
Upto this point every thing works fine.
When I tried to issue print from my Windows 7 laptop the printer gets activated the power button start blinking . But it just pass a page from
input tray to out tary without printing a single line. I have looked into cups server page at my mac mini. It shows that the job fired from windows
laptop was done.
I treid a lot debug it myself . But no luck yet.
Please help me. I am very upset.
Thanks
Anirban

I just updated to 10.8.3 today, and my computer and Apple TV won't even recognize each other now. I have absolutely no advice, but wanted to throw this in so you (and Apple) know you're not the only one.

Goods Issue print for Pull list

All,
WHile doing Goods Issue by 201 mvt type one print format is coming .
So we are designing a format for that .
This print is coming thru output type WA03 .
Also while doing pull list (MF60) , one print document is coming .
Business wants a different format for that .
And for both transactions ,output type is WA03 .
How to tackle this situation ?
regards

Hello Sandeep,
I think this query is already addressed. Follow the steps in this post, if you still have problem write to this forum.
Goods Issue Print
Hope this helps.
Regards
Arif Mansuri

How to renew the issuing CA certificate

Hi,
We have one root CA and two issuing CAs setup in our environment in Windows server 2003 platform. The CA certificate of one of the issuing CA has expired and the other will expire in two weeks. The root
CA certificate is valid through 2018. The MS PKI infrastructure is primarily used for issuing workstation certificates via GPO to client
machines for VPN two factor authentication.
Any help you can provide will greatly be appreciated.
Thanks in advance,
V

The ship has sailed on the issuing CA that expired. You need to uninstall certificate services and reinstall ADCS (I would consider setting up a new CA (new name, newer OS)
The second issuing CA can be renewed anytime within the next two weeks. After the certificate expires, renewal is not possible.
There is no risk in setting up the new CA. All of the certificates are expired as well on the first issuing CA, so there will be no loss of functionality.
That being said, this is a horribly managed PKI. A CA should be renewed when half of its lifetime has expired. To leave a CA to the point of two weeks left or worse yet, letting the CA certificate expired is terrible. Who is managing the service - they really
need to step it up
Brian

Leopard upgrade issue printing to Xerox Docucolor 5000

We recently upgraded to Leopard and have come up with an issue printing to our Docucolor 5000. When printing multiple copies of a page set up for landscape from AI CS3 or CS4 the first page prints okay. On subsequent pages the paper has flipped to protrait, although the are remains in landscape. Any thoughts on how to overcome this?
Has happened to all of our Macs (all identical) with the upgrade. No other changes to our hardware or software.
Docucolor 5000
Fiery EXP50
Driver: Fiery Docucolor 5000 v2.0

Hello Terry. We had the same problems with our Canon printers that use the Fiery print controller. After blaming Adobe for the problem EFI, the makers of the Fiery, released a patch and updated driver that resolved this orientation problem. So I suggest you contact your Xerox support to see if they have these same fixes for your model of Fiery. Or you could check the EFI web site for any updates.
PaHu

Update was terminated when trying to issue print output using VL02N tcode

Hi friends,
I am getting follwing error when trying to issue print output using VL02N tcode:
Error: Update was terminated.
When seen in SM13 i saw following info for function module RV_MESSAGE_UPDATE,which was showing error:
Error Info: MC 601: Object requested is currently locked by user RAMU.
When seen in SM12,i don't find any lock by above user RAMU(which is my user id itself).
I request please give me some inputs on how to avoid this error.
Thanks & Regards
Seshagiri

Hi Nam,
This probelm is becuase you are trying to enter a record for which primary key already exists in the table.
The insertion you are doing with a set of values which already exist and sap is getting this error that the "Duplicate record during insertion". try to check your insertion values and through se16 check if they already exist in the table mkpf.
To rectify the data or else change the table and add one more unique to the primary key.
Abhishek Purwar
http://abhishek.purwar.googlepages.com

Peachtree Classic 12 Issues printing from PDQ

This is a long-shot but I am looking to see if anyone has any knowledge of Peachtree Classic 12. We have a user that does accounting through Peachtree Classic 12 which resides on a Windows 2000 VM running on VMWare Workstation 11. Every so often she has issues printing from the PDQ module it where it will either not print at all or print in a way that data doesn't fit on the page and gets cut off. Usually we can get it to print again by messing with port settings, power cycling the printer, etc. but what I am stuck on right now is getting it to fit all the data on one page. There is something in the PDQ Printer setup about compression codes and setup codes but I am not sure where to find the correct codes that will compress the data output so that it fits on one page. Any help would be appreciated.
This topic first appeared in the Spiceworks Community

I had a similar issue. Are the fonts on the pages the same or do they differ?
My issue was a font, check that.

LSO print certificate

Dear Experts
Could you please help in this matter.
Is there a way to provide option for printing certificate to the Learner once he passes the final test.
Is there a way where HR admin can print certificates from the SAP backend for the candidates who have passed the exam with score.
Thanks in Advance
Selva

Hi,
1.Launch Captivate.
2.Go to Window->Widget.
3.Search for Certificate widget.
4.Insert the certificate widget on the slide after the quiz slides.
5.On the first slide insert a TEB.
6.Follow the instructions written on the Widget->Parameters.
Let me knw if this works.
-Sikandar

Revoked Issuing CA Certificate still showing as valid

Hi There.
I have an Intermediate CA (Enterprise) and an Offline root CA, both running Windows CA.
The Intermediate CA's first cert was revoked and the Root CA's CRL with the revoked cert published.
A new cert was issued to the Intermediate CA, so now I can see both:
I have cleared the CRL cache with the command:
certutil -setreg chain\ChainCacheResyncFiletime @now
on my workstation and did a check on the certificate #0. It still shows as valid.
I have checked the serial number and made sure that the serial is in the root ca's revocation list.
What am I missing?
Thank you.

Hi,
We cannot revoke root certificates since root certificates are excluded from revocation checking.
As far as I know, we should leave the former CA certificate there, since former CRL requires the old certificate for signing; even after the former CA certificate expire, it can be used for digital signature verification.
Here are some similar threads below for you:
Can you revoke a root certificate
https://social.technet.microsoft.com/Forums/windowsserver/en-US/3941e831-b477-4998-8145-445c56783436/can-you-revoke-a-root-certificate?forum=winserversecurity
How to remove an expired certificate from a RootCA
https://social.technet.microsoft.com/Forums/windowsserver/en-US/48958ec4-330e-43df-9ecf-6d23a6c05b7b/how-to-remove-an-expired-certificate-from-a-rootca?forum=winserversecurity
Clean up multiple Root Certificates from a CA
https://social.technet.microsoft.com/forums/windowsserver/en-US/c5c29079-fe41-44aa-a4ff-f8ba976a8018/clean-up-multiple-root-certificates-from-a-ca
Cleanup of Issuing CA Certificates
https://social.technet.microsoft.com/Forums/windowsserver/en-US/0b8eea11-3a9b-49e6-abe9-b09de203231a/cleanup-of-issuing-ca-certificates?forum=winserversecurity
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Issues with certificates with both Firefox and chromium

I tried everything ... I reinstalled both of them.
I canceled the profile and made new ones.
I check with all my other computer if they have issues with certificates: no problem at all.
Checked the date, is ok.
Finally I checked what is installed on the system related to the problem ..
# pacman -Q|egrep '(openssl|curl|ca-cert)'
ca-certificates 20140325-1
ca-certificates-java 20140324-3
curl 7.37.1-1
lib32-curl 7.37.1-1
lib32-openssl 1.0.1.i-1
openssl 1.0.1.i-1
python2-pyopenssl 0.14-3
or if there is an issued with a library ..
# ldd `which curl`
linux-vdso.so.1 (0x00007fffd2a48000)
libcurl.so.4 => /usr/lib/libcurl.so.4 (0x00007f8a1c4d9000)
libz.so.1 => /usr/lib/libz.so.1 (0x00007f8a1c2c3000)
libpthread.so.0 => /usr/lib/libpthread.so.0 (0x00007f8a1c0a5000)
libc.so.6 => /usr/lib/libc.so.6 (0x00007f8a1bcf7000)
libssh2.so.1 => /usr/lib/libssh2.so.1 (0x00007f8a1bace000)
libssl.so.1.0.0 => /usr/lib/libssl.so.1.0.0 (0x00007f8a1b860000)
libcrypto.so.1.0.0 => /usr/lib/libcrypto.so.1.0.0 (0x00007f8a1b44e000)
libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x00007f8a1b203000)
libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x00007f8a1af22000)
libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x00007f8a1acf0000)
libcom_err.so.2 => /usr/lib/libcom_err.so.2 (0x00007f8a1aaec000)
/lib64/ld-linux-x86-64.so.2 (0x00007f8a1c747000)
libdl.so.2 => /usr/lib/libdl.so.2 (0x00007f8a1a8e8000)
libkrb5support.so.0 => /usr/lib/libkrb5support.so.0 (0x00007f8a1a6db000)
libkeyutils.so.1 => /usr/lib/libkeyutils.so.1 (0x00007f8a1a4d7000)
libresolv.so.2 => /usr/lib/libresolv.so.2 (0x00007f8a1a2c0000)
I try to use a virtual machine on the same machine with ubuntu installed: no problem.
Any idea?
Last edited by saronno (2014-08-15 12:37:44)

# curl -v https://areaclienti187.telecomitalia.it
* Rebuilt URL to: https://areaclienti187.telecomitalia.it/
* Hostname was NOT found in DNS cache
* Trying 62.77.57.164...
* Connected to areaclienti187.telecomitalia.it (62.77.57.164) port 443 (#0)
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/ca-certificates.crt
CApath: none
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using TLSv1.0 / AES128-SHA
* Server certificate:
* subject: C=IT; ST=Italy; L=Pomezia; O=Telecomitalia; OU=ADM.AP.PM.WO; CN=areaclienti187.telecomitalia.it; emailAddress=[email protected]
* start date: 2013-10-08 10:06:37 GMT
* expire date: 2014-10-08 10:06:37 GMT
* common name: areaclienti187.telecomitalia.it (matched)
* issuer: C=IT; O=I.T. Telecom; OU=Servizi di certificazione; CN=I.T. Telecom Global CA
* SSL certificate verify ok.
With curl no problem at all.
Last edited by saronno (2014-08-15 19:10:09)

Microsoft Is Rushing to Fix Improperly Issued SSL Certificate

Microsoft Security Advisory 3046310
Microsoft is aware of an improperly issued SSL certificate for the domain “live.fi” that could be used in attempts to spoof content, perform phishing attacks, or perform man-in-the-middle attacks. It cannot be used to issue other certificates, impersonate other domains, or sign code. This issue affects all supported releases of Microsoft Windows. Microsoft is not currently aware of attacks related to this issue.
To help protect customers from potentially fraudulent use of this digital certificate, it has been revoked by the issuing CA and Microsoft is updating the Certificate Trust list (CTL) for all supported releases of Microsoft Windows to remove the trust of certificates that are causing this issue.
For more information see:
https://technet.microsoft.com/en-us/library/security/3046310
ThinkPad: T530 / X1 Gen 2 / Helix - Yoga: Tablet 2 Pro (Win) / Yoga 3 Pro
If you find a post helpful and it answers your question, please click the "Accept As Solution" button.
Lenovo Advocate ~ I am not employed by Lenovo or Microsoft. I am a volunteer.
Microsoft MVP - Consumer Security
SpywareHammer

You appear to be complaining about how Mail executes security. Turns out there is no one standard about how security is handled by Mail. 802.11x has nothing to do with that. 802.11x is simply a wireless router protocol. If you want a feature added to any Mac OS X software go to the feedback page:
http://www.apple.com/feedback/
or sign for a free Apple Developer account, and file a bug report here:
http://bugreporter.apple.com/
This is a user to user forum, and no one here can guess as to why Apple has incorporated certain features into Mail while others are not included. Please read the Terms of Use on the right more carefully. We'd have to guess Apple's programming policy to answer your questions.

Issuing Printer Certificates

Similar Messages

Maybe you are looking for