Skip to Content Information Center
Lexmark XM9165

Lexmark XM9165

Security Prevents Firmware and Software Updates on Printers and MFPs; PKI(CAC)-equipped MFPs Will Not Update

What you will see

Files with a .

fls, .zip, .pjl, .npa and .prn file extension

that can be flashed to the printer are either ignored or queued on the HDD. No errors directly relating to the unsuccessful flashing of the file appear on the control panel.


Suggest fixes

Turn off the security feature that prevents flash files from being sent to the printer or remove the HDD* from the printer.
These instructions also apply to equivalent single-function printer models.

Early product generations: Disabling 'Restrict firmware upates' setting

For example, X85x , X64x , X78x , X94x , X4600

  1. Open the MFPs webpage. e.g., https://ipaddressofmfp.

  2. Select Configuration.

  3. Select Embedded Solutions.

  4. Select the PKI Active Directory Application.

  5. Select the Configure button.

  6. Verify Restrict firmware updates is “unchecked.”

Click here

for a screen shot of this location.

Later product generations: Setting 'Firmware update' to 'No Security'

For example, 65x enhanced SFP, X65x, X792x , X73x , X86x , X95x, MX31x, 41x, 51x, 61x, 71x, 81x, 91x, CX31x, 41x, 51x

  1. Open the MFPs webpage. e.g., https://ipaddressofmfp.

  2. Select



  3. Select Security.

  4. Select

    Security Setup


  5. Select Access Controls.

  6. Verify that Firmware Update = No Security.

Click here

or here(2) for example screen shots of this location.

Removing the HDD

* This suggestion applies to devices with HDDs that have been configured to buffer incoming jobs.

Remove the HDD, resend the flash file and then reconnect the HDD.
After reconnecting the HDD, you many witness several jobs print out and any flash files residing in the queue get processed.

What happens? If a printer hase been configured to queue (buffer) incoming jobs to the HDD, then any intervention or service error can cause a queue backlog, and this can cause the flash file to be placed behind the other jobs in the queue.


Printer firmware or application software can not be upgraded on any PKI(CAC)-equipped MFP. This is also holds true for any device in which device security is enabled and security templates are being utilized.

Still need help?

If you require additional assistance, please click your browser's back button to return to your product's support page and, locate

Get In Touch with Lexmark! for contact information.
When calling for support, you will need your printer model/machine type and serial number (SN). Please be near the products described in this article to expedite the support process and reduce call-back situations.


Was this article helpful?