Specifying the Policy on Login/Logout
To protect the data in the machine, configure the machine so that login and logout are performed properly.
User authentication cannot prevent unauthorized use completely. For example, an unauthorized person can log in to the machine by guessing the password. If a user does not log out of the machine, another user can use the privileges of the previous user.
Specify the following functions to protect the machine against such risks.
User Lockout Policy
If an incorrect login password is entered several times, the User lockout function prevents further login attempts under the same login user name (Lockout).
![Illustration of the user lockout](../../security/image/dzw910.gif)
To enable a locked-out user to log in, the administrator must disable the lockout or the user must wait until the lockout period elapses.
You can specify the number of login password attempts to permit before locking out the user and the period of time until lockout is released automatically.
By default, the login password can be entered up to five times and lockout is not released automatically.
Auto Logout Timer
After you log in, the machine logs you out automatically if you do not use the control panel within a given time.
![Illustration of the auto logout timer](../../security/image/dzw911.gif)
By default, the machine logs you out automatically if you do not use the control panel for three minutes.
For details about auto logout from Web Image Monitor, see Web Image Monitor Help.
The User lockout function is enabled on all users only when Basic authentication is specified. Under Windows authentication and LDAP authentication, only the supervisor and administrator are protected by User lockout. The policy of the certification server is applied to the other users.
Specifying User Lockout
Specify the number of login password attempts to permit before locking out the user and the period of time until the lockout is released automatically on Web Image Monitor.
Log in to the machine as the administrator from Web Image Monitor.
Click [Configuration] from the [Device Management] menu.
![Web browser screen illustration](../../security/image/ebw316.gif)
Click [User Lockout Policy] in the "Security" category.
Specify the number of login password attempts to permit before locking out the user and the period of time until the lockout is automatically released.
![Web browser screen illustration](../../security/image/met3sec-en007.gif)
Lockout
Select [Active], and then specify "Number of Attempts before Lockout" from 1 to 10.
Lockout Release Timer
Select [Active] to cancel lockout after a specified time elapses, and then enter the desired value in "Lock Out User for" up to 9999 minutes (about seven days).
Click [OK] and exit the Web browser.
Releasing Password Lockout
Lockout release privileges vary depending on the type of the locked-out user.
When a general user or the supervisor is locked out: The administrator must log in and release the lockout.
When the administrator is locked out: The supervisor must log in and release the lockout.
Log in to the machine as the administrator or supervisor from Web Image Monitor.
Click [Address Book] from the [Device Management] menu.
![Web browser screen illustration](../../security/image/ebw317.gif)
Select the locked out user's account, and then click [Change] on the [Easy Input] tab.
![Web browser screen illustration](../../security/image/dzc667.gif)
Select [Inactive] on "Lockout" of "Authentication Information".
![Web browser screen illustration](../../security/image/ebw318.gif)
Click [OK] and exit the Web browser.
Specifying the Period of Time Until the Machine Logs You Out Automatically
Specify the period on [System Settings][Timer Settings].
Log in to the machine as the administrator on the control panel.
On the Home screen, press [Settings].
![Operation panel screen illustration](../../security/image/icon_homescreen_en_mts012.gif)
Press [Machine Features Settings] on the Settings screen.
![Operation panel screen illustration](../../security/image/ebw301.gif)
Press [System Settings]
[Timer Settings]
[Auto Logout Timer] to display the setting screen.
Press [On], and then press [Change] to enter the period of time until the machine logs you out automatically.
![Operation panel screen illustration](../../security/image/ebw319.gif)
You can enter from 10 to 999 seconds.
Press [OK].
After completing the configuration, press Home (
).