Secure printing
Encrypted File Transport

Configure KMES Series 3

6min

This section describes the KMES configuration steps necessary to establish connectivity with the Excrypt Touch and mount to the SFTP or CIFS share.

Retrieve Excrypt Touch serial number

1

From the Excrypt Touch Dashboard, open the Excrypt Touch Menu, by touching the vertical black bar on the right side of the screen and swiping left.

2

In the Excrypt Touch menu, select the User Management icon in the upper-right corner.

3

In the User Management drop-down menu, select Login.

4

Log in with the default admin identities.

A message appears at the top of the screen indicating whether the authentication succeeded.

5

Open the Excrypt Touch Menu again and select the Settings icon, represented by a gear symbol.

6

Select System Information in the Settings drop-down menu.

7

In the Excrypt Touch System Information window, scroll down to the Serials section and note the HSM serial number of the device.

Enable Excrypt Touch connectivity and whitelist

1

Log in to the KMES Series 3 application interface with the default admin identities.

2

Go to Configuration > Network Options > TLS/SSL Settings.

3

Select the Connection drop-down option and select the Excrypt Touch connection pair.

4

Enable the Excrypt Touch connection pair if it is not already enabled.

5

Uncheck Use System/Host API SSL Parameters if it is checked.

6

Change the Cert Type to ECC.

7

Check the Use Futurex Certificates box.

8

Go to the Whitelist tab.

9

Check the Whitelist box, then select [ Add ].

10

In the Whitelist Remote Serial window, enter the serial number that you noted for the Excrypt Touch, then select [ OK ].

11

Select [ OK ] again in the Network Options dialog to save the configuration settings.

Add SFTP or CIFS share

After you determine which share you need, perform the following steps to add the for either SFTP or CIFS:

Add an FTP or SFTP share

1

Log in to the KMES Series 3 application interface with the default admin identities.

2

Go to Configuration > Options > Event Management > FTP Server.

3

In the FTP server field, enter the IP address of the FTP or SFTP server.

4

In the Server port field, leave the server port as the default value if using FTP. If using SFTP, set the SFTP port to 22.

5

In the User name field, enter the name of a user authorized to access the FTP or SFTP share.

6

In the Password field, enter the password for the user specified in the previous step.

7

Configure the Timeout (mins) field as needed. The default value is 15.

8

Optionally, enable and configure SFTP. Otherwise, leave the field unchecked to use FTP.

9

Select [ Apply ].

10

When notified that the FTP settings have been successfully updated, select [ OK ].

11

Select [ Send Test File ].

A message box informs you that the server has successfully sent the test file.

12

Select [ Save ] in the main Options dialog to finish.

Add a CIFS share

1

Log in to the KMES Series 3 application interface with the default admin identities.

2

Go to Configuration > Options > Event Management > CIFS Server.

3

In the CIFS server field, enter the IP address of the CIFS server.

4

In the Server port field, leave the server port set to the default value.

5

In the Server Folder field, enter the Windows name of the CIFS share.

6

In the User name field, enter the name of a user authorized to access the CIFS share.

7

In the Password field, enter the password for the user specified in the previous step.

8

Select [ Apply ].

9

When notified that the CIFS settings have been successfully updated, select [ OK ].

10

Select [ Send Test File ].

A message box informs you that the server has successfully sent the test file.

11

Select [ Save ] in the main Options window to finish.

Set global password security options

1

Log in to the KMES Series 3 application interface with the default admin identities.

2

Go to Configuration > Password Security.

3

In the Password Security window, configure as needed. There are options for Brute Force Protection, Password History, Password Expiration, Password Charset Restriction, and Session Timeout.

4

Select [ Save ].