I have a Xerox WorkCentre 5955 that is configured for smart card authentication per the "Smart Card Installation and Configuration Guide". I have verified that it is using a compatible smartcard reader (SCR3310). Our user's cards have both a PIV and CAC certificate loaded to them. I do not have the ability to delete either one of those certificates. The users who are configured to logon to AD with their CAC certificate are able to logon the WC5955 and scan. The users who are configured to logon to AD with their PIV certificate are unable to logon to the WC5955 and scan, they are provided an authentication failed message.
Is there a way to configure the WC5955 to strictly use the PIV certificate instead of the CAC certificate? If not, is there a way for me to configure the WC5955 to check both the CAC and PIV certificate?
Thank you for your assistance.
I searched the documentation and I could not find that answer for you. I would recommend contacting the Customer Support Centre. You can find contact options HERE
Did you ever get this resolved? My organization is migrating to a PIV authentication in the coming weeks and we too are having this issue. Those that are still utilizing the CAC auth are able to utilize the features of the printers, while those that are testing the PIV auth cannot.
PIV wasn't supported until some recent firmware releases. Try this one for the 59XX.
I would highly suggest an Altboot over an update then import the certs and set them up from scratch
For anyone still having an issue with this, as stated below, this is resolved in a firmware update. The issue is that Xerox names its updates in a weird way. It uses the last six digits to identify the version. For instance, if your machine has 073.65.20000 and there is a firmware that is available that is 073.56.10000, the firm that is 073.56.10000 is the highest version because 610000 is higher than 520000. Not to insult anyone's intelligence but I hope that helps.