1. Support
  2. Solutions
  3. Smart Card Authentication
  4. Interactive user guide
  5. How to Extract Domain Issuing Certificate from Internet Explorer
Smart Card Authentication

Smart Card Authentication

Solution type: Device Based

Smart Card Authentication Support

Knowledge Base Solution
Smart Card Reader driver and firmware requirements
How to unblock a Gemalto Smart Card PIN
How to Test Whether LPM Badge Authentication Service Is Active
How to Extract Domain Issuing Certificate from Internet Explorer
Busy please wait message after pressing Release Station for Pharos BluePrint 4.2
An application error has occurred message after badge-in or entry of username/password authentication for Pharos BluePrint 4.2
Release Station icon is missing from the device for Pharos BluePrint 4.2
Secured jobs are unexpectedly printed with Pharos BluePrint 4.2
SCAC: Error Message, 'User cannot find KDC for requested realm'
Unable to Scan to HomeDirectory when HomeDirectory Attribute Is an IP Address
User ID Not Authorized message after logging in using PKI/SCAC
No print jobs are found in Secure Held Print jobs
badge-reader-does-not-work-when-printer-is-in-stan
Unable to launch Device Quotas authenticated with SCAC after upgrading Lexmark CX510 to EC6 Firmware
Lexmark Smart Card Authentication: Scan to Homedirectory is not working
Using caps-lock to input non-alphanumeric characters or passwords result in a login failure
Authentication Errors Due to Improper CA Certificate Installed on Multiple Product Generations
Unable to Use Alternate Login Method when Control Panel Login Is Set To SmartCard
How to Enable Audible Beeps on Popular Omnikey Card Readers
Unable to Connect to the Users Database. Please contact system Administrator message displayed after authenticating
Decrypt Integrity Check Failed Message with Smart Card Authentication Client (SCAC)
Lexmark Smart Card Authentication: Badge Reader Does Not Work When Proximity Sensor Awakens Printer or MFP
Unable to authenticate Smart Card after Windows update
Unable to Scan to HomeDirectory when Using SNF on a SCAC-Enabled MFP
Checking the latest Lexmark printer firmware
Logs Gzip Compressed File Support and Collection Explained
Capturing the Device Description (DEVD) and Output Queue (OUTQ) settings in AS/400
Creating and exporting a Spool File from AS/400 to a Windows PC
Capturing an IPDS Trace in AS400 / OS400 Environments
Printing to file or creating a print output file
Accessibility Resources for Lexmark Products
Performing a network trace
Printers are not communicating with the Cloud Fleet Management
Obtaining the Menu Settings page (MSP)
Audio feedback still audible when 'Button Feedback' setting is turned off
How to Locate the Serial Number, TLI, Config ID, and Machine Type on a Lexmark CS310, CS410, CS510, CX310, CX410, and CX510
Exporting or importing the Virtual Configuration Center (VCC) 'Bundle.ZIP' configuration file
Exporting and importing user-defined configuration settings
How to upgrade new Embedded Solutions Framework (eSF) applications for Lexmark Print Management (LPM-SaaS and LPM-Serverless)
Colors are too dark or black shading is covering partial or entire page
'Supply notification settings' alert failures: VCC name changes in EC4 (.P416) and backwards EC firmware compatibility
Capturing a spool or job file in Linux
Capturing a spool or job file in Macintosh OS
Missing color plane or very light color (one color) on printed pages
Color missing or very light print output exhibited on all colors on pages printed
Downloading the latest Lexmark printer firmware
Updating the Lexmark printer firmware
Knowledge base
Knowledge Base Solution

How to Extract Domain Issuing Certificate from Internet Explorer

How to Extract Domain Issuing Certificate from Internet Explorer

Issue description

This guide applies to customers encountering "
Domain Controller Issuing Certificate has not been installed
" errors when using smartcard. In order for the device to validate that the Domain Controller is authorized to provide validation, the issuing Intermediate Authority Certificate of the Domain Controller needs to be loaded first.
If you do not have this certificate, it can be extracted from
Internet Explorer
. The certificate needed by the device must be in
Base64
 format although the extension type of the file itself is irrelevant.
Affected Products:
Solutions: Smart Common Access Card (SCAC), Public Key Infrastructure (PKI)

Steps to Extract/Export Certificates from Internet Explorer

  1. To extract certificates, go to
    Internet Options
    ,
    Content Tab
    , and click
    Certificates
    .
  2. Select
    Intermediate Certificate Authority Tab
    .
  3. Highlight the desired certificate and select
    Export
    .
  4. Following the wizard, ensure to export the certificate in
    Base64
    format.
If the certificate is not correct, the multifunction printer will report what certificate is required during the first attempt at user authentication in the
SE logs
: see error prompt below.Contact
Lexmark Technical Support
for assistance.

Steps to Install the Certificate on a Lexmark Device

  1. Open your preferred
    web browser
     (e.g., Chrome, Firefox, Safari, Internet Explorer).
    • In the address field, enter the printer’s
      IP address
       to access its
      Embedded Web Server
      (
      EWS
      ).
  2. Click
    Settings
    ,
    Security
    ,
    Certificate Management
    , and
    Certificate Authority Management
    .
  3. Click
    New
     and then browse to the file containing the certificates to be installed on the device. Click
    Submit
    .
LEGACY ID:
HO4036

This site uses cookies for various purposes including enhancing your experience, analytics, and ads. By continuing to browse this site or by clicking "Accept and close", you agree to our use of cookies. For more information, read our Cookies page.