[Error Code] Xerox WC 7120: Enabling TLS for SMTP to Google Workspace gives error 017-714

[BlikRem]

I've been trying to get 'scan to email' to work with Google Workspace on our WorkCentre 7120. The only way I've been able to get it to work is by disabling SSL/TLS/STARTTLS altogether and using smtp-relay.gmail.com port 25 after configuring our office IP in the Workspace admin console to not require encryption. Obviously in this day and age, that is not going to fly in terms of security; we can't be scanning confidential documents and then sending them unencrypted over the internet.

Whenever I try to enable SSL/TLS or STARTTLS I get the same error code: 017-714. I've checked that 'Verify Remote Server Certificate' is disabled, so this should eliminate any issues regarding root certificates which are surely outdated on this old machine. I've tried ports 465 and 587 – same result. I've checked that the time on the printer is set correctly.

I've checked using openSSL that smtp-relay.gmail.com supports STARTTLS with TLSv1.2, and found a Xerox document stating that the 7120 supports TLSv1.2 as well. Maybe this is disabled by default and I need to enable it somewhere?

At this point it's driving me up the wall because I have no way to see what's going on on the protocol level; a more detailed error message would be very helpful.

Any thoughts on how I could debug this further or any magic settings I'm missing to get my documents to gmail over TLS?

[adriansto]

Check the machine firmware and make sure the firmware is at least 71.24.12

Then click on Connectivity>PROTOCOLS>TCP/IP
Make sure the Gateway and DNS settings are correct.
Then click on Connectivity>PROTOCOLS>SMTP SERVER
Input a <IP Address> of a SERVER
Then change the port to “587”
Then change SMTP – SSL/TLS Communication to “STARTTLS”
Then change Login Credentials to “SMTP AUTH”
Then input a valid email address
Then the Password
Then Click Apply.

Then go Properties-Security-Machine Digital Certificate Management
and create a new certificate - Self-Signed Certificate-Digital Signature Algorithm = RSA/SHA-256 - Public Key Size = 2,048 Bits
- Days of Validity = 9999.
Then go Properties - Connectivity - Protocols - HTTP and check Secure HTTP (SSL).
and reboot the printer.

On the touch screen login as Administrator
Go tools - Group-Connectivity & Network Setup. On features go Security Settings - SSL/TLS Settings- and check:

1. Device Certificate-Server is installed.
2. HTTP-SSL/TLS is enabled.
3. Device Certificate - Cliend is Installed.

[BlikRem]

Thank you! The latest firmware the Xerox website lists is v71.21.21 so that's what was installed. Based on your reply I searched for noewer firmware and found that there is a v71.24.23 security release specifically with SSL/TLS fixes! It's available here: https://www.support.xerox.com/en-us/...content/115715
After I upgraded the printer to that version it immediately started working. Case closed, thanks again!