Cause
|
You cannot log in because the user name and password are incorrect.
|
Remedy
|
Confirm the user name and password. Enter the correct user name and password.
|
Cause1
|
The LAN cable is not connected.
|
Remedy
|
Connect the LAN cable.
|
Cause2
|
The primary/secondary DNS server settings in the machine are incorrect or not specified.
|
Remedy
|
Confirm the DNS server settings of the machine, and specify the correct values.
|
Cause3
|
The DNS server specified in the machine is not started, or the service has been stopped.
|
Remedy
|
Follow the procedure below to confirm the settings.
Confirm the DNS server specified on the machine, and start the server if it has not been started.
Start the "Services" management tool on the DNS server.
Confirm the status of the DNS Server. If 'Started' is not displayed under <Status>, right-click [DNS Server] → select [Start].
|
Cause4
|
Domain name resolution could not be performed with the DNS server.
|
Remedy
|
Confirm the following:
Confirm that the host record exists on the DNS server.
Confirm that the forwarding settings are correct.
|
Cause1
|
The LAN cable is not connected.
|
Remedy
|
Connect the LAN cable.
|
Cause2
|
The Active Directory server is not started.
|
Remedy
|
Start the Active Directory server.
|
Cause3
|
The KDC (Key Distribution Center) service of Active Directory is stopped.
|
Remedy
|
Follow the procedure below to confirm the settings.
Start the "Services" management tool on the Active Directory server.
Check whether the Active Directory server is operating normally.
|
Cause
|
The difference between the time set on the machine and the Active Directory server is greater than the allowed difference.
|
Remedy
|
Adjust the times of the machine and the Active Directory server so that they are within the allowed time difference.
|
Cause
|
Default settings were initialized because the port settings were changed.
|
Remedy
|
Restart the machine.
|
Cause
|
The site settings for Active Directory are incorrect.
|
Remedy
|
Check the settings for <Obtain Site Information> and <Site Access Range> in <Access Modes in Sites>.
|
Cause
|
The card ID is incorrect.
|
Remedy
|
Use a control card with an assigned ID.
|
Cause
|
The DES (Data Encryption Standard) key required for Domain Authentication has not been generated for Active Directory.
|
Remedy
|
Follow the procedure below to change the settings.
Start the Active Directory management tool, "Active Directory Users and Computers."
Right-click the user that failed to be authenticated.
Select [Reset Password] from the pop-up menu that appears.
Enter a new password in the [Reset Password] dialog box → click [OK].
|
Cause1
|
The expiration date of the authenticated user account has expired.
|
Remedy
|
Follow the procedure below to confirm the settings.
Start the Active Directory management tool, "Active Directory Users and Computers."
Right-click the user account that has expired.
Select [Properties] from the pop-up menu that appears.
Select the [Account] tab → confirm the values in [Expiration Date] in [Account Expires].
If the expiration date has passed, extend the expiration date, or set it to 'None'.
|
Cause2
|
The account of the authenticated user is disabled.
|
Remedy
|
Follow the procedure below to confirm the settings.
Start the Active Directory management tool, "Active Directory Users and Computers."
Right-click the user whose account is disabled.
Select [Properties] from the pop-up menu that appears.
Select the [Account] tab → confirm the [Disable Account] setting in [Account Options].
If you select [Disable Account], deselect it → click [OK].
|
Cause1
|
The expiration date of the password for the authenticated user account has expired.
|
Remedy
|
Follow the procedure below to confirm the settings.
Start the Active Directory management tool, "Active Directory Users and Computers."
Right-click the user whose password expired.
Select [Reset Password] from the pop-up menu that appears.
Enter a new password in the [Reset Password] dialog box → click [OK].
|
Cause2
|
The account of the authenticated user is set to 'Require Change of Password Next Login'.
|
Remedy
|
Follow the procedure below to confirm the settings.
Start the Active Directory management tool, "Active Directory Users and Computers."
Right-click the user that failed to be authenticated.
Select [Properties] from the pop-up menu that appears.
Select the [Account] tab → confirm the [Require Change of Password Next Login] setting in [Account Options].
If you select [Require Change of Password Next Login], deselect it → click [OK].
|
Cause
|
When SSO-H is set as the login service, no Department ID is specified for the SSO-H user, even when Department ID Management is set to 'On'.
|
Remedy1
|
To set Department ID Management to 'Off' and use the SSO-H login service, follow the procedures below:
Specify a login service other than SSO-H.
Set Department ID Management to 'Off' using the touch panel display. For instructions on setting Department ID Management to 'Off', see "Specifying Department ID Management."
Turn OFF the main power of the machine, wait at least 10 seconds, and then turn ON the main power again. For instructions on turning ON and OFF the main power of the machine, see "Main Power and Control Panel Power."
|
Remedy2
|
To use the SSO-H login service with Department ID Management, follow the procedures below:
Remedy 2.1: Enable the Administrator to login
Specify a login service other than SSO-H.
Set Department ID Management to 'Off' using the touch panel display. For instructions on setting Department ID Management to 'Off', see "Specifying Department ID Management."
Set the login service to SSO-H, and log in to the management application as the Local Device Authentication administrator. For instructions on logging in to SSO-H as the Local Device Authentication administrator, see "Logging in to the SSO-H Management Application."
Click [User Management] → click [Edit] for a user with administrator privileges.
Enter the Department ID, PIN, and Confirm items → click [Update]. Enter the registered System Manager ID and System PIN for the Department ID and PIN items respectively. If no System Manager ID is registered, enter a Department ID.
Set Department ID Management to 'On' using the touch panel display. For instructions on setting page limits for each Department ID, see "Specifying Department ID Management."
Turn OFF the main power of the machine, wait at least 10 seconds, and then turn ON the main power again. For instructions on turning ON and OFF the main power of the machine, see "Main Power and Control Panel Power."
Remedy 2.2: Enable a general user to login
Perform the procedures described in Remedy 2.1 to enable the Administrator to login.
Press (Settings/Registration) on the touch panel display.
Press [Management Settings] → [User Management] → [Department ID Management].
Press [Register PIN] → [Register] → enter the Department ID and PIN to be assigned to the general user, using the numeric keys → press [OK].
Press [OK].
Log in to the management application as the Local Device Authentication administrator.
Click [User Management] → click [Edit] for the user to whom you want to assign the Department ID. Enter the Department ID, PIN, and Confirm items → click [Update]. Enter the registered Department ID and PIN for the Department ID and PIN items respectively.
|
Cause
|
The Department ID Management function of the machine is set to 'On'.
|
Remedy
|
Follow the procedure below to confirm the settings.
Change the current login service to a login application other than SSO-H.
Set Department ID Management to 'Off'. For information on setting Department ID Management to 'Off', see "Department ID Management."
Turn the main power of the machine to OFF, wait 10 seconds, and then turn the power back ON. For more information on turning ON/OFF the main power of the machine, see "Main Power and Control Panel Power."
|
Cause
|
The port number specified in the '_ldap' SRV record (part of the DNS information of the domain specified as the login destination) is incorrect.
|
Remedy
|
Follow the procedure below to confirm the settings.
Start the DNS server management tool, "DNS."
Double-click [Forward Lookup Zones] → [<domain specified as the login destination>] → [_tcp], and then right-click the '_ldap' SRV record.
Select [Properties] from the pop-up menu that appears.
Select the [Service Location (SRV)] tab → confirm the value in [Port Number].
If the port number is different from the port number of the LDAP service, enter the correct port number for the LDAP service → click [OK].
|
Cause
|
Since you failed the user authentication, the login service for the failed user is temporarily stopped.
|
Remedy
|
Wait a while, and then try to log in again.
|
Cause
|
Since you have exceeded the lockout threshold, the login service for the user is temporarily stopped.
|
Remedy
|
Wait a while, and then try to log in again.
|
Cause
|
The password entered in [Current Password] is incorrect.
|
Remedy
|
Confirm the password → enter the correct password.
|