Xerox Xerox Secure Access Unified ID System Support & Software Installation Guide

Page of 36
Installation Overview
Xerox Secure Access Installation Guide
15
Core Authentication Server (CAS)
The Core Authentication Server (CAS) houses the database that contains all user and MFP device data. 
Every Secure Access installation requires a pre-installed database. The CAS uses the database instance 
to create an accounts database that contains all user and device information. See 
on page 18 for information about supported databases.
Device Control Engine (DCE)
The Device Control Engine (DCE) handles all communication with the MFP devices. When a user wants 
to use the copy, scan, or fax functionality on a MFP, they must first trigger the card reader. A swipe or 
proximity read initiates an access request. 
The Authentication Device forwards the login request to the DCE, which then contacts the CAS to 
verify the user account data associated with the card. 
Document Routing Engine (DRE)
The Document Routing Engine (DRE) is the print server. It’s primary function is to enable document 
flow from user workstations to MFP devices. The following describes a typical DRE workflow:
1. A user generates a print request to an MFP that is registered in the Secure Access Manager 
database.
2. If the user prints to a print queue that is using a Secure Access Manager port the DRE holds the job 
on the print server.
3. When the user logs in at the MFP the DRE searches the jobs queued for that printer (and/or pull 
group) and releases those that were submitted by the logged in user.
If a Secure Access port is not installed on the device, the print job is printed without validation. 
If you want print jobs to be held in a secure queue, you can configure Follow-You printing. To enable 
this functionality, you must configure the MFP to use a Secure Access port rather than a standard port. 
The Port Monitor integrates with the Windows printing subsystem and functions as part of the spooler 
service, allowing the Port Monitor to receive print jobs and then hold the jobs in a secure virtual queue 
until a verified user releases them to a particular MFP.
In addition, you can add the Release My Documents custom service to the MFP. This service allows 
users to access the secure print queue directly from the MFP front panel. See the Xerox Secure Access 
Administration Guide for configuration instructions.