Single-Function: CS331dw, C3326dw, C3224dw, B2546dw, B2650dw, C2535dw, C2425dw, B2865dw, B2442dw, B2338dw, B2236dw, CS923de, CS921de,
CS720dte, CS720de, CS725de, CS725dte, MS421dw, MS521dn, MS621dn, CS820de, CS421dn, CS820dte, CS820dtfe, MS622de, MS911de, CS622de, CS521dn,MS826de, MS421dn, MS711dn, MS811dn, MS321dn, MS810dn, MS811dtn, MS810dtn, MS510dn, MS810n
Multifunction: CX331adwe, MC3326adwe, MC3224dwe, MC3224adwe, MB2236adwe, MB2546adwe, MB2650adwe, MC2640adwe, MC2535adwe, MB2338adw, MX321adw,
MB2236adw, CX725dhe, CX725de, CX725dthe, CX820dtfe, CX820de, MC2425adw, MB2442adwe, MX521de, MX521ade, MX522adhe, CX922de, CX921de, CX923dxe, CX923dte,CX924dte, CX924dxe, CX825dtfe, CX825dte, CX860dtfe, CX860dte, CX860de, CX825de, MX910de, MX912dxe, MX911dte, MX622ade, MX622adhe, MX826adxe, CX622ade,
CX625adhe, CX522ade, CX421adn, MX321adn, MX421ade, CX517de, MX812dtme, MX710de, MX711dhe,
MarkNet N8370 Wireless for CS720, CS725
, CX725, MarkNet N8372 802.11 a/b/g/n/ac Wireless Print Server, N8370 802.11 a/b/g/n/ac Wireless Print Server,
N8352 Wireless Print Server plus NFC, N8350 Wireless Print Server plus NFC, N8350 Wireless Print Server plus NFC, MarkNet 8352 802.11b/g/n Wireless, MarkNet N8350 802.11b/g/n Wireless Kit,MarkNet 8352 802.11b/g/n Wireless, MarkNet 8352 802.11b/g/n Wireless for CS310, CS410, CS510 Series,
MarkNet 8352 802.11b/g/n Wireless
This article describes:
The supported 802.1X/EAP (Extensible Authentication Protocol) authentication types.
Summarizes certificate installation.
Explains how to enable and configure 802.1X/EAP after installing the required certificates.
Supported EAP Types
The 25XX dot matrix printers support the following EAP types:
EAP - MD-5 (Message Digest Algorithm)
EAP - Cisco Wireless or LEAP (Lightweight Extensible Protocol)
EAP - TLS (Transport Layer Security)
EAP - TTLS (Tunneled TLS)
PEAP - Protected EAP
- EAP - MSCHAPv2
802.1X/ EAP Configurations:
(2009 - 2011 Lexmark Devices)
To install and use certificates for TLS, TTLS, and PEAP authentication:
Access the printers EWS (Embedded Web Server) by typing http://printer's_IP_address in the address bar,
using the IP address of the printer.
Click Certificate Management. Click
Configurations for 802.1X/ EAP (2009 - 2011 Lexmark Devices)
Access Printers EWS.
Click Configuration > Security > 802.1X.
Turn on 802.1X then place a checkmark next to authentication type.
Note: Deselect the authentication types that are not needed.
If using TTLS, select the proper password protocol. Click
Configurations for 802.1X/ EAP (2012 - 2019 Lexmark Devices)
Connect the printer over a wired connection.
Access the printers EWS, go to Security/Certificate Management > Certificate Authority Management.
Click New, then Upload CA (Certificate Authority) from Radius Server (must be in .pem format). After upload, you should see the CA appear as noted below.
On EWS, go to "Security / Certificate Management / Device Certificate Management".
Hit New, Fill in the fields. You should see it in the list as shown below.
Click on the link for the name of the new entry that is generated (not the default). For instance in the above picture, it is "wctestagain".
Select "Download Signing Request". This will have to be signed by the Radius Server, usually via a script.
After getting request signed by the Radius Server, go back into the Device Certificate Manager as in step 4, click on Name of entry (i.e. "wctestagain") as before, and choose "Install Signed Certificate".
Go into Wireless setup. Enter the SSID of the AP for the network with the radius server. For security select 802.1x-Radius, fill in other fields.
In Wireless Setup, for 802.1x Certificate, select the name created in step #6 (for instance "wctestagain") from pulldown.
Under wireless setup, for 802.1x entries, select only the authentication mechanism desired.
Device login name should correspond to the login name defined for the radius server, usually in the conf file on the radius server.
Likewise, device login password must correspond to the password defined in the radius server conf file (i.e. it's not the shared secret entered during cert signing necessarily). Note that some authentication mechanisms do not require a password.
After setup is complete, disconnect wired connection so it will come up wireless. Monitor radius server logs if unable to connect to network.
Still Need Help?
Have the following available when calling Lexmark Technical Support;
Printer serial number