Scan To Email - SMTP Error - 017-715 - Xerox Workcentre 7125

[freddy1525]

Labanmatte,

I was able to untick that certificate verification you showed me above and I managed to get mail flowing.

I did get another error, but after looking at the packet capture, I had to change the SMTP settings to use local auth. The SMTP configuration page is a little confusing in regard to where it's getting it's credentials from.

Thank you for your suggestions and help!

[freddy1525]

Hey Lbanmatte!

That's what I'm looking for, I'll try disabling this and give it a shot and let you know if that's the issue!

Thank you!

[labanmatte]

Hello

I had the same problem with a Xerox Workcentre 7120 with latest software 71.24.23.

Then i unchecked the box as in the picture and it works.

Best regards Mattias

[Joe Arseneau]

Call support, get to 2nd level support and supply the config sheet of the device and the traces and they may be able to help you out. Xerox doesn't do forum support, this is a peer to peer forum (I work at Xerox, but my time here is not official or paid), you have to call.

[freddy1525]

Hiya Joe,

Thanks for the reply, I've updated the firmware on the copier to that version in your link and it still gives me the same error. 

Is there a way to open a formal ticket with Xerox so that they can see the wireshark pcap dumps I have of the conversation?

Thanks,

Fred

[Joe Arseneau]

71.24.23 is the latest firmware,which is vastly newer (see here if you want to know why) than what is listed on the drivers page of Xerox.com. Install it and try again, because any firmware lower than 71.24.12 can't do SHA-2, which means it will not work for any of the big SMTP services (Gmail/Office365/GoDaddy/Yahoo etc)

[freddy1525]

Hey guys,

I'm having the same issue. We had a local exchange server which the Xerox scanned to e-mail using a local SMTP relay which didn't have any auth or encryption configured. 

We've recently migrated to Office 365 and I have been having a heck of a time getting the Xerox to scan to e-mail. I'm currently stuck with this 017-715 SSL server cert untrusted error whenever the copier attempts a STARTTLS conversation.

I have tried three different hosts, I've tried Office 365, G-Mail, and a generic LAMP apache host with q-mail as their SMTP server.

In all three instances when I attempt to get the Xerox to connect to a remote SMTP server on port 587 using SMTP auth and STARTTLS I get this 017-715 SSL server cert untrusted error.

I have updated the WorkCentre 7125 to the latest firmware on Xerox's website to no avail, the machine updated but the behaviour with SMTP authentication continues. 

I looked high and low for the NTP settings on the machine and I can't find any mention of date or time! It does however somehow have the correct time within a few seconds of our NTP server. IPV4 is the only IP stack configured on the machine.

I have packet captures, the conversation starts normally, there is an exchange to what I assume is a certificate exchange to secure the rest of the email. The Xerox answers a few times then bombs with the 017-715 error.

Could this have anything to do with root certificate authorities not being updated on the Xerox? Does a firmware update update local ceritficates and root certificate authorities as well? My only guess is that all of these SMTP servers are using newer certificate authorities and the Xerox is seeing them and claiming they're invailid because it doesn't know about them.

We do have a current Xerox maintenance agreement, how would we go about getting these packet captures into the hands of folks who can offer help? 

Any ideas would be appreciated.

[Joe Arseneau · Accepted solution]

Click on the link at the first of my first post and install that firmware by following the directions supplied.

If you won't install the firmware I provided in that link then you will need to call Xerox and provide them with a Configuration report from the printer, and a Wireshark trace of the failed scan, and possibly the machine logs and they will look into the network traffic and find exactly what has caused the fault.

And the fix will be a firmware update, and since the spar links doesn't change, the fix will be available at the link I provided in the first response, which is not the link the printer looks to when it checks for an update.

[de100671 · Accepted solution]

Maybe I misunderstand the firmware portion of your comment. Is the setting to update the firmware automatically not working? Do I need to do anything else to make the update work?

From my perspective, I agree to the fact that something must have changed outside the printer. It was working and without a change, it stopped. The only thing that would come to mind is that the printer's certificate might have expired, but I checked this and it is valid another 27 years. ;-) However, the printer's certificate is not issued by a CA, but self-signed by the printer and the message: ssl server certificate untrusted points to this. How would I get a CA signed certificate and install it in the printer to be used by the printer? Or can you rule out the certificate thing as a reason for this behaviour?

[de100671]

Maybe I misunderstand the firmware portion of your comment. Is the setting to update the firmware automatically not working? Do I need to do anything else to make the update work?

From my perspective, I agree to the fact that something must have changed outside the printer. It was working and without a change, it stopped. The only thing that would come to mind is that the printer's certificate might have expired, but I checked this and it is valid another 27 years. ;-) However, the printer's certificate is not issued by a CA, but self-signed by the printer and the message: ssl server certificate untrusted points to this. How would I get a CA signed certificate and install it in the printer to be used by the printer? Or can you rule out the certificate thing as a reason for this behaviour?