sgh
Nuance SafeCom Go HP Administrator’s Manual D60701-36 November 2013
Trademarks: Nuance, the Nuance logo, SafeCom, SafeCom Go, SafeCom P:Go, SafeCom ePay and the SafeCom logo are trademarks of Nuance Communications, Inc. or its affiliates in the United States and/or other countries. All other trademarks referred to herein are the property of their respective owners. Nuance Communications, Inc. cannot be held responsible for any technical or typographical errors and reserves the right to make changes to products and documentation without prior notification. Third Party Software: This software may contain third party software which requires notices and/or additional terms and conditions. Such required third party software notices and/or additional terms and conditions are located in the SafeCom Third Party Notice document. Patent: Nuance Communications, Inc. has received the following British patent GB 2350 713 B, US patent US 6,952,780 B2 and Europe EUR EP1 120 701. © Copyright 1995 - 2013 Nuance Communications, Inc. All rights reserved
Nuance Communications, Inc. Lautrupvang 12 DK-2750 Ballerup Denmark Phone: +45 4436 0240 E-mail:
[email protected] Web: safecom.eu
D60701-36
2
Table of contents 1
Introduction ............................................................................................9 1.1 SafeCom Go HP ............................................................................. 9 1.2 Requirements ............................................................................... 9 1.3 SafeCom Go HP products ............................................................... 15 1.4 SafeCom P:Go HP products ............................................................. 16 1.5 SafeCom ID Devices ...................................................................... 17 1.6 Supported languages .................................................................... 18 1.7 HP Universal Print Driver ............................................................... 18 1.8 Available documentation ............................................................... 20 1.9 About this manual........................................................................ 21 1.10 Document history ........................................................................ 22
2
SafeCom Go HP - Device Server ................................................................. 26 2.1 Overview ................................................................................... 26 2.2 SafeCom Go HP – Device server installation ......................................... 26 2.2.1 Installation ................................................................ 26 2.2.2 Windows Firewall - ports that must be opened ..................... 27 2.3 Configure SafeCom Device Server ..................................................... 28 2.3.1 Login to SafeCom Device Server ....................................... 28 2.3.2 Add SafeCom Server ..................................................... 28 2.3.3 Device Server config.ini ................................................. 28 2.4 Add a device to a SafeCom Device Server ........................................... 30 2.4.1 Device icons ............................................................... 30 2.4.2 Add the device via SafeCom Administrator .......................... 31 2.4.3 Add device via SafeCom Device Server ............................... 34 2.5 Configure the device on the device web page ...................................... 35 2.5.1 Set up device server address ........................................... 35 2.5.2 Set Sign in method and access control ............................... 36 2.5.3 Verify Quota Server address ............................................ 37 2.6 Configure device in SafeCom Device Server ......................................... 38 2.7 Configure device server failover ...................................................... 41 2.8 SafeCom Go HP web interface ......................................................... 42 2.8.1 Login ........................................................................ 42 2.8.2 Product- and version information web page ........................ 42 2.8.3 Configure- and log information web page ........................... 42 2.9 SafeCom Go HP - How to ............................................................... 43 2.9.1 Get the SafeCom Go HP software ..................................... 43 2.9.2 Select login method...................................................... 43 2.9.3 Enable Copy Control ..................................................... 44 2.9.4 Enable Scan to Folder ................................................... 45 2.9.5 Enable E-mail ............................................................. 46 2.9.6 Control user access rights .............................................. 47 2.9.7 Enable Client Billing and the account icon on the device ........ 47 2.9.8 Enable third party authentication ..................................... 48 2.9.9 Enable SafeCom Mobile Pull Print ..................................... 48 2.9.10 Determine the version ................................................... 49 2.9.11 Handle new MAC address (Jetdirect network card) ................ 49 2.9.12 Verify that SafeCom Go HP is loaded ................................. 49 2.9.13 Register device ........................................................... 49 2.9.14 Restore factory default ................................................. 50 2.9.15 Uninstall SafeCom Go HP ............................................... 51 2.10 HP OPS installation ...................................................................... 52 2.11 Partial Disk Clean on FutureSmart devices .......................................... 52 2.11.1 Partial Disk Clean on M525 and M575 ................................. 53 2.12 SafeCom Go HP device trace facility ................................................. 54
D60701-36
3
3
D60701-36
SafeCom Go HP ...................................................................................... 56 3.1 Overview ................................................................................... 56 3.2 SafeCom Go HP hardware installation ................................................ 56 3.2.1 SafeCom HP USB ID Kit installation ................................... 57 3.2.2 Embedded ID Device in Hardware Integration Pocket ............. 58 3.2.3 SafeCom HP FMC ID Kit installation ................................... 60 3.3 SafeCom Go HP software installation ................................................ 61 3.3.1 Software installation on FutureSmart devices ...................... 61 3.3.2 Send SafeCom Go HP (*.b49) and (*.b89) files ...................... 63 3.3.3 Control Device Sign in CM8050 MFP and CM8060 MFP.............. 64 3.3.4 Send to E-mail on CM8050 MFP and CM8060 MFP ................... 65 3.4 Deploy SafeCom Go HP on multiple devices ........................................ 65 3.4.1 Create a device configuration file .................................... 65 3.4.2 Send configuration file to devices ..................................... 66 3.4.3 Make changes to the configuration file............................... 67 3.5 SafeCom Go HP web interface ......................................................... 68 3.5.1 Login ........................................................................ 68 3.5.2 Information web page ................................................... 69 3.5.3 Configuration web page ................................................. 70 3.5.4 Register web page........................................................ 76 3.5.5 Log web page ............................................................. 77 3.6 SafeCom Go HP - How to ............................................................... 78 3.6.1 Get the SafeCom Go HP software ..................................... 78 3.6.2 Specify SafeCom Server ................................................. 78 3.6.3 Register device ........................................................... 79 3.6.4 Resend configuration .................................................... 79 3.6.5 Disable Encrypt All Web Communication ............................. 80 3.6.6 Set Password to prevent unauthorized access ...................... 80 3.6.7 Set password using HP Web Jetadmin ................................ 80 3.6.8 Disable TCP/IP(v6) ....................................................... 80 3.6.9 Verify the IP Address of the DNS Server .............................. 81 3.6.10 Check SNMP Settings ..................................................... 81 3.6.11 Select login method ...................................................... 82 3.6.12 Login with Windows without specifying the domain ............... 82 3.6.13 Login without PIN code .................................................. 82 3.6.14 Change PIN code .......................................................... 82 3.6.15 Disable Pull Print ......................................................... 83 3.6.16 Enable Copy Control ..................................................... 83 3.6.17 Enable Send to Folder ................................................... 84 3.6.18 Enable Send to Folder – with password ............................... 84 3.6.19 Enable Send to E-mail – Pre-filled From: and To: field ............ 85 3.6.20 Enable Send to E-mail – with password ............................... 86 3.6.21 Enable SafeCom Smart Scan ............................................ 86 3.6.22 Control user access rights .............................................. 87 3.6.23 Enable Client Billing and the Account icon .......................... 87 3.6.24 Enable Third party authentication .................................... 87 3.6.25 Control max length of encryption keys ............................... 88 3.6.26 Restore factory default ................................................. 89 3.6.27 Determine the version ................................................... 90 3.6.28 Handle hard disk replacement ......................................... 90 3.6.29 Handle new MAC address (Jetdirect network card) ................ 90 3.6.30 Use another server in a multi server solution ....................... 91 3.6.31 How to obtain svcErr.log from the printer ........................... 92 3.6.32 How to open the SafeCom Loader web page ........................ 93 3.6.33 HP Access Control USB proximity card reader ...................... 94 3.7 SafeCom Go HP update software ...................................................... 95 3.8 Is the SafeCom Go HP software loaded? ............................................. 96 3.9 Uninstall SafeCom Go HP ............................................................... 96 3.9.1 Uninstall SafeCom Go HP on FutureSmart devices ................. 96 3.9.2 Uninstall SafeCom Go HP on non-FutureSmart devices ............ 97
4
3.10 3.11 4
D60701-36
Make all printing through SafeCom ................................................... 97 SafeCom Go HP device trace facility ................................................. 97
Using SafeCom Go HP .............................................................................. 98 4.1 HP LaserJet M525 MFP, M575 MFP, CM4540 MFP, and M4555 MFP. HP LaserJet Enterprise 500 MFP M525, flow MFP M525, Color MFP M575, flow Color MFP M575, MFP 725, Color MFP 775, MFP 830, MFP M880 .............................. 98 4.1.1 Login ........................................................................ 98 4.1.2 Register card at device with Windows credentials ................ 100 4.1.3 Register card at device with PUK code .............................. 101 4.1.4 Pull Print - Document list .............................................. 102 4.1.5 Copy ....................................................................... 102 4.1.6 Folder ..................................................................... 102 4.1.7 E-mail ..................................................................... 103 4.1.8 Account – Select Billing Code ......................................... 103 4.1.9 Smart Scan ................................................................ 104 4.1.10 Logout ..................................................................... 105 4.1.11 Hide Document Name .................................................. 105 4.2 HP LaserJet M3035 MFP, CM3530 MFP, M4345 MFP, M4349 MFP, CM4730 MFP, M5035 MFP, M5039 MFP, CM6030 MFP, CM6040 MFP, CM6049 MFP, M9040 MFP, M9050 MFP and M9059 MFP ............................................................ 106 4.2.1 Control panel............................................................. 106 4.2.2 Login ....................................................................... 107 4.2.3 Pull Print - Document list .............................................. 111 4.2.4 Copy ....................................................................... 111 4.2.5 Folder ..................................................................... 111 4.2.6 E-mail ..................................................................... 112 4.2.7 Account – Select Billing Code ......................................... 112 4.2.8 Logout ..................................................................... 113 4.2.9 Register card at device ................................................. 113 4.2.10 Change PIN code ......................................................... 115 4.3 HP Color LaserJet CM8050 MFP and 8060MFP ...................................... 116 4.3.1 Control panel............................................................. 116 4.3.2 Login ....................................................................... 116 4.3.3 Pull Print - Document list .............................................. 119 4.3.4 Copy ....................................................................... 119 4.3.5 Folder ..................................................................... 120 4.3.6 E-mail ..................................................................... 120 4.3.7 Logout ..................................................................... 120 4.3.8 Register card at device ................................................. 121 4.4 HP Scanjet Enterprise 7000n and HP Digital Sender Flow 8500 fn1 ........... 123 4.4.1 Control panel............................................................. 123 4.4.2 Login ....................................................................... 124 4.4.3 Register card at device ................................................. 126 4.4.4 Save to Network Folder ................................................ 128 4.4.5 E-mail ..................................................................... 128 4.4.6 Account ................................................................... 129 4.4.7 Logout ..................................................................... 129 4.5 HP 9250C Digital Sender ............................................................... 130 4.5.1 Control panel............................................................. 130 4.5.2 Login ....................................................................... 130 4.5.3 Folder ..................................................................... 132 4.5.4 E-mail ..................................................................... 133 4.5.5 Account – Select Billing Code ......................................... 133 4.5.6 Logout ..................................................................... 134 4.5.7 Register card at device ................................................. 134 4.5.8 Change PIN code ......................................................... 135 4.6 HP LaserJet 4345mfp, 4730mfp, 9040mfp, 9050mfp and 9500mfp ............ 136 4.6.1 Control panel............................................................. 136 4.6.2 Login ....................................................................... 136
5
4.7
4.8
4.9
4.10
4.11
4.12
4.13
4.14
4.15
4.16
4.17
D60701-36
4.6.3 Pull Print - Document list .............................................. 139 4.6.4 Copy ....................................................................... 140 4.6.5 Folder ..................................................................... 140 4.6.6 E-mail ..................................................................... 140 4.6.7 Account – Select Billing Code ......................................... 141 4.6.8 Logout ..................................................................... 141 4.6.9 Register card at device ................................................. 142 4.6.10 Change PIN code ......................................................... 143 HP LaserJet M602, M603, M712 ....................................................... 144 4.7.1 Login ....................................................................... 144 4.7.2 Pull Print .................................................................. 144 4.7.3 Logout ..................................................................... 144 HP LaserJet M855, M806, and M750 ................................................. 145 4.8.1 Login ....................................................................... 145 4.8.2 Pull Print .................................................................. 146 4.8.3 Logout ..................................................................... 146 HP LaserJet CP5525, M551, and M601 ............................................... 147 4.9.1 Control panel............................................................. 147 4.9.2 Login ....................................................................... 147 4.9.3 Pull Print .................................................................. 147 HP LaserJet 2410, 2420 and 2430 .................................................... 148 4.10.1 Control panel............................................................. 148 4.10.2 Login ....................................................................... 148 4.10.3 Pull Print .................................................................. 148 4.10.4 Logout ..................................................................... 148 HP Color LaserJet 3000, CP3505 and 3800 ......................................... 149 4.11.1 Control panel............................................................. 149 4.11.2 Login ....................................................................... 149 4.11.3 Pull Print .................................................................. 149 4.11.4 Logout ..................................................................... 149 HP LaserJet P3005 ...................................................................... 150 4.12.1 Control panel............................................................. 150 4.12.2 Login ....................................................................... 150 4.12.3 Pull Print .................................................................. 150 4.12.4 Logout ..................................................................... 150 HP LaserJet P3015 ...................................................................... 151 4.13.1 Control panel............................................................. 151 4.13.2 Login ....................................................................... 151 4.13.3 Pull Print .................................................................. 152 4.13.4 Logout ..................................................................... 152 4.13.5 Register card at device ................................................. 152 HP Color LaserJet CP3525 ............................................................. 153 4.14.1 Control panel............................................................. 153 4.14.2 Login ....................................................................... 153 4.14.3 Pull Print .................................................................. 153 4.14.4 Logout ..................................................................... 153 HP LaserJet P4014 ...................................................................... 154 4.15.1 Control panel............................................................. 154 4.15.2 Login ....................................................................... 154 4.15.3 Pull Print .................................................................. 154 4.15.4 Logout ..................................................................... 154 HP LaserJet P4015 and P4515 ......................................................... 155 4.16.1 Control panel............................................................. 155 4.16.2 Login ....................................................................... 155 4.16.3 Pull Print .................................................................. 156 4.16.4 Logout ..................................................................... 156 4.16.5 Register card at device ................................................. 156 HP Color LaserJet CP4525 ............................................................. 157 4.17.1 Control panel............................................................. 157 4.17.2 Login ....................................................................... 157
6
4.18
4.19
4.20
4.21
4.22
4.23
4.17.3 Pull Print .................................................................. 157 4.17.4 Logout ..................................................................... 157 HP LaserJet 4240, 4250 and 4350 .................................................... 158 4.18.1 Control panel............................................................. 158 4.18.2 Login ....................................................................... 158 4.18.3 Pull Print .................................................................. 158 4.18.4 Logout ..................................................................... 158 HP Color LaserJet 4650 and 5550 .................................................... 159 4.19.1 Control panel............................................................. 159 4.19.2 Login ....................................................................... 159 4.19.3 Pull Print .................................................................. 159 4.19.4 Logout ..................................................................... 159 HP Color LaserJet 4700 ................................................................ 160 4.20.1 Control panel............................................................. 160 4.20.2 Login ....................................................................... 160 4.20.3 Pull Print .................................................................. 160 4.20.4 Logout ..................................................................... 161 HP Color LaserJet CP6015 ............................................................. 162 4.21.1 Control panel............................................................. 162 4.21.2 Login ....................................................................... 162 4.21.3 Pull Print .................................................................. 162 4.21.4 Logout ..................................................................... 163 4.21.5 Register card at device ................................................. 163 HP Sx series: HP Color MFP S970dn, S962dn, S951dn, and HP MFP S956dn ... 164 4.22.1 Login ....................................................................... 164 4.22.2 Main menu ................................................................ 165 4.22.3 Pull Print - Document list .............................................. 165 4.22.4 Copy ....................................................................... 166 4.22.5 Account – Select billing code .......................................... 166 4.22.6 Register card with PUK code .......................................... 167 4.22.7 Logout ..................................................................... 167 HP Officejet Pro series: 276 MFP, X476 MFP, X576 MFP, 251 and X551 ....... 168 4.23.1 Login ....................................................................... 168 4.23.2 Main menu ................................................................ 169 4.23.3 Pull Print - Document list .............................................. 169 4.23.4 Copy ....................................................................... 170 4.23.5 Logout ..................................................................... 170
5
Automatic installation via HP Web Jetadmin ............................................... 172 5.1 Introduction .............................................................................. 172 5.2 Pre-requisites ............................................................................ 172 5.3 Download SafeCom Go HP software ................................................. 173 5.4 Start HP Web Jetadmin ................................................................ 174 5.5 Add relevant firmware ................................................................. 175 5.6 Import files to solutions repository .................................................. 175 5.7 Create solution templates ............................................................. 177 5.7.1 Edit solution settings ................................................... 178 5.8 Create groups to automate installation ............................................. 180 5.8.1 Set up groups............................................................. 181 5.8.2 Set up subgroups ........................................................ 182 5.9 Find devices via discovery ............................................................. 183 5.10 Register device .......................................................................... 184 5.11 Uninstall SafeCom Go HP .............................................................. 184 5.12 Sample configuration files ............................................................. 185 5.12.1 hp_xml_config.txt ....................................................... 185 5.12.2 hp_ds_xml_config.txt ................................................... 186
6
Troubleshooting ................................................................................... 187 6.1 Introduction .............................................................................. 187 6.2 SafeCom Help Desk Assistant ......................................................... 187
D60701-36
7
6.3 6.4 6.5 6.6 6.7 6.8 6.9 6.10 6.11 6.12 6.13 6.14 6.15 6.16 6.17 6.18 6.19 6.20 6.21 6.22 6.23 6.24 6.25 6.26
Servlets ................................................................................... 187 SafeCom Go HP software installation ............................................... 188 SafeCom Go HP log entries dated 1 January 1970 ................................ 189 SafeCom Go HP has incorrect IP address ........................................... 189 The device does not send tracking data to the SafeCom Server ............... 189 Device Server: Configuration of devices failed .................................... 189 Device Server: Error when upgrading existing Device Server installation .... 190 Device Server: Devices are not configured against failover device server ... 191 Device Server: No HP OPS server configured on device .......................... 191 Device Server: HP OPS running on Windows Server 2003 ........................ 191 Device Server: HP OPS service fails to start during system restart ............ 191 At the Printer: Loading SafeCom ..................................................... 191 At the Printer: No Pull Print icon .................................................... 192 At the Printer: No automatic logout ................................................. 192 At the Printer: Card reading not working ........................................... 192 At the Printer: Authentication failed ................................................ 193 At the Printer: Error Printing: 194 ................................................... 193 At the Printer: Printer busy, retry later ............................................ 193 At the Printer: Printing disabled ..................................................... 194 At the Printer: Source not reachable ................................................ 194 At the Printer: OXPd Application Error Message 45.00.07 ....................... 194 At the Printer: USB Error .............................................................. 195 At the Printer: error cc = 500 ......................................................... 195 At the Printer: Log out button and timeout ........................................ 195
7
Regulatory information .......................................................................... 196
8
Index ................................................................................................. 197
D60701-36
8
1 Introduction
1
Introduction
1.1
SafeCom Go HP SafeCom Go HP is the internal solution for HP LaserJet MFPs. It integrates with the touch-screen control panel of the HP MFP and offers user authentication by code and/or card. SafeCom P:Go HP is the internal solution for HP LaserJet printers and offers user authentication by card. SafeCom Go HP works together the SafeCom G4 Server software and is designed to help companies and organizations gain control over their printing costs and document security. The SafeCom solution can be enhanced with add-on modules to build customer specific and scalable solutions.
1.2
Requirements
Any networked HP LaserJet MFP listed in Table 1, printers listed in Table 2 and Scanners listed in Table 3. HP devices can run SafeCom Go inside by installing SafeCom Go HP software on the device’s hard disk (HDD) or on the SafeCom supplied media, that is, USB key or Flash Memory Card (FMC). HP devices with FutureSmart firmware can run the SafeCom Go solution inside (FS) or via the SafeCom Device Server (DS). The HP Sx devices and HP Officejet Pro devices requires the SafeCom Device Server (DS). Please consult the DS/FS column in the tables on page 11. A SafeCom G4 Server and a SafeCom ID Device license for the device are required to use the HP Access Control USB proximity card reader (CZ208A). HP Sx series devices support only keyboard (KBD) emulating SafeCom ID Devices in addition to the HP Access Control USB proximity card reader. HP Sx devices do not support Auto-sense login method and logout by card. The web interface and behaviour is different from other HP devices. HP Officejet Pro series devices require installation of the HP server component HP OPS (OXPd Professional Services) that is distributed together with the SafeCom Device Server. Due to device limitations there is no tracking of Copy, E-mail and Scan and prints are tracked at the server only. Note: Due to limitations in the HP Officejet firmware only HP Access Control USB proximity card reader (3.6.33) and SafeCom ID Devices in Table 4 on page 17 with [R] marked USB readers are supported. Support for remaining readers, including [E] marked readers will happen with future HP firmware.
D60701-36
If users are to log in by card and the device has no Hardware Integration Pocket or external USB port it is necessary to install a SafeCom Go HP ID Kit in either an empty EIO slot or mounting together with the device’s HP Jetdirect network card (bracket is replaced using the supplied screwdriver with Torx 8 bit).
9
1 Introduction
SafeCom Device Server:
The SafeCom Device Server needs to be installed on a Windows 2008 or 2003 SP2 server with at least 1.4 GHz CPU and 2 GB RAM. The SafeCom Device Server REQUIRES Java Runtime Environment (JRE) version 1.7 or later. It can run on the same physical hardware as the SafeCom Server. If SafeCom Device Server is installed on a 64-bit operation system, a Java version 32-bit needs to be installed. JRE can be downloaded from www.java.com. A SafeCom Device Server can handle between 100 – 200 devices. This is of course subject to the use pattern, computer resources and network. Once it is installed it runs as a Service (SafeCom Device Server). Note: If you are using the Device Server on a Windows 2003 SP2 server with HP Officejet Pro devices, check the Troubleshooting section (6.12, 6.13) for known HP OPS issues.
D60701-36
10
1 Introduction
Table 1 SafeCom Go HP supported HP LaserJet MFPs and requirements HP MFP HP Color MFP S970 HP Color MFP S962 HP Color MFP S951 HP MFP S956 HP Officejet Pro 276 MFP HP Officejet Pro X476dw MFP HP Officejet Pro X576dw MFP HP LaserJet Enterprise 500 MFP M525 HP LaserJet Enterprise 500 flow MFP M525 HP LaserJet Enterprise 500 Color MFP M575 HP LaserJet Enterprise 500 flow Color MFP M575 HP LaserJet Enterprise 700 MFP M725 HP LaserJet Enterprise 700 Color MFP M775 LaserJet Enterprise 830 MFP Color LaserJet Enterprise M880 MFP HP Color LaserJet Enterprise CM4540 MFP HP LaserJet Enterprise M4555 MFP HP LaserJet M3035 MFP HP Color LaserJet CM3530 MFP HP LaserJet M4345 MFP HP LaserJet M4349 MFP HP Color LaserJet CM4730 MFP HP LaserJet M5035 MFP HP LaserJet M5039 MFP HP Color LaserJet CM6030 MFP HP Color LaserJet CM6040 MFP HP Color LaserJet CM6049 MFP HP Color LaserJet CM8050 MFP HP Color LaserJet CM8060 MFP HP LaserJet M9040 MFP HP LaserJet M9050 MFP HP LaserJet M9059 MFP HP LaserJet 4345mfp HP Color LaserJet 4730mfp HP LaserJet 9040mfp HP LaserJet 9050mfp HP Color LaserJet 9500mfp
D60701-36
Sx Sx Sx Sx Pro Pro Pro H
HP firmware H012S100 H012S100 TBD TBD xxxxxx1345xx* xxxxxx1345xx* xxxxxx1345xx*
H
2200302_ 226981 2201015_ 231305 2200670_ 229146 TBD
H
TBD
H
2251519_ 437631 TBD
H H
H
H H H F F
G G
B
2301132_3 95570 2200670_ 229136 2131305_ 192067 48.261.0 53.190.9 48.150.3 48.150.3 50.240.8 48.261.0 48.261.0 52.210.9 52.210.9 52.210.9 77.018.0 77.018.0 51.100.4 51.100.4 51.100.4 09.270.1 46.350.1 08.140.5 08.140.5 08.160.8
DS FS DS DS DS DS DS DS DS DS FS DS FS DS FS DS FS DS FS DS FS DS FS DS FS DS FS DS FS
SafeCom Go N/A N/A N/A N/A N/A N/A N/A 210xxx 310xxx 210xxx 310xxx 210xxx 310xxx 210xxx 310xxx 210xxx 310xxx 210xxx 310xxx 210xxx 310xxx 210xxx 310xxx 210xxx 310xxx 210xxx 310xxx 110xxx 140xxx 110xxx 110xxx 110xxx 110xxx 110xxx 132xxx 132xxx 132xxx 120xxx 120xxx 110xxx 110xxx 110xxx 090xxx 101xxx 090xxx 090xxx 090xxx
512 512 512 1024
Media slot USB USB USB USB USB USB USB USB
1024
USB
1536
USB
1536
USB
1536
USB
1536
USB
1536
USB
1536
USB
1280
USB
1280
USB
256 512 256 256 384 256 256 512 512 512 1024 1024 256 256 256 256 256 256 256 256
USB USB USB USB USB USB USB USB USB USB USB USB USB USB USB FMC FMC FMC FMC FMC
RAM
11
1 Introduction
* The Officejet Pro series has a 12-character firmware version, which does contain the digits 1345 in that order as characters 7-10 of the firmware version, for example, LWP1CN1345AR.
D60701-36
12
1 Introduction
Table 2 SafeCom P:Go HP supported HP LaserJet printers and requirements HP DS SafeCom Media HP printer RAM firmware FS P:Go slot HP Officejet Pro 251 Pro xxxxxx1345xx* DS N/A 512 USB xxxxxx1345xx* HP Officejet Pro X551 Pro DS N/A 512 USB HP LaserJet Enterprise 500 H 2200670_ DS 210xxx 1024 USB Color M551 229143 FS 310xxx HP LaserJet Enterprise 600 2131305_ DS 210xxx 512 USB M601 192069 FS 310xxx A,L HP LaserJet Enterprise 600 2131305_ DS 210xxx 512 USB M602 192069 FS 310xxx A,L HP LaserJet Enterprise 600 2131305_ DS 210xxx 512 USB M603 192069 FS 310xxx A,H HP LaserJet Enterprise 700 2251509_ DS 210xxx 512 USB M712 437576 FS 310xxx Color LaserJet Enterprise H 2301087_3 DS 210xxx 1024 USB M750 94634 FS 310xxx LaserJet Enterprise M806 H 2354415_3 DS 210xxx 1024 USB 89910 FS 310xxx LaserJet Enterprise M855 H 2301087_3 DS 210xxx 1024 USB 94634 FS 310xxx HP Color LaserJet Enterprise 2200670_ DS 210xxx 192 USB CP5525 229137 FS 310xxx HP Color LaserJet 3000 46.041.2 102xxx 128 USB HP LaserJet P3005 F 02.110.5 111xxx 128* USB HP LaserJet P3015 I 07.080.3 150xxx 128* USB HP Color LaserJet CP3505 03.100.3 121xxx 256 USB HP Color LaserJet CP3525 06.080.2 141xxx 512 USB HP Color LaserJet 3800 46.040.2 102xxx 256 USB HP LaserJet P4014 04.070.7 130xxx 128* USB HP LaserJet P4015 04.070.7 130xxx 128 USB HP LaserJet P4515 04.070.7 130xxx 128 USB HP Color LaserJet CP4525 07.050.1 151xxx 512 USB HP Color LaserJet CP6015 04.090.2 131xxx 512 USB HP LaserJet 2410 E 08.113.0 081xxx 128* FMC HP LaserJet 2420 E 08.113.0 081xxx 128* FMC HP LaserJet 2430 E 08.113.0 081xxx 128* FMC HP LaserJet 4240 E 08.190.2 081xxx 160* FMC HP LaserJet 4250 E 08.190.2 081xxx 160* FMC HP LaserJet 4350 E 08.190.2 081xxx 160* FMC HP Color LaserJet 4650 E 07.006.0 075xxx 384* FMC HP Color LaserJet 4700 C 46.160.4 100xxx 160 FMC HP Color LaserJet 5550 E 07.170.2 075xxx 384* FMC HP LaserJet 9040 A 08.180.1 080xxx 224* FMC HP LaserJet 9050 A 08.180.1 080xxx 224* FMC * Required total memory (RAM) if this is above standard. Example: 128* If additional solutions are installed more memory (RAM) may be required. ** Officejet Pro version contains the digits 1345, for example, LWP1CN1345AR
D60701-36
13
1 Introduction
Table 3 SafeCom Go HP supported HP Scanners HP Scanner HP Scanjet Enterprise 7000n
L
HP Digital Sender Flow 8500 fn1 (formerly HP ScanJet Enterprise 8500fn1) HP 9250C Digital Sender
H
Sx
Pro
A B C D E F G H
I
L
D60701-36
HP firmware 2131311_ 192131 2131320_ 192274 48.140.2
DS FS DS FS DS FS
SafeCom Go 220xxx 320xxx 210xxx 310xxx 110xxx
512
Media slot USB
1536
USB
256
USB
RAM
HP Sx series. Support only keyboard (KBD) emulating SafeCom ID Devices in addition to the HP Access Control USB proximity card reader. No support for Auto-sense login method and logout by card. The web interface and behaviour is different from other HP devices. HP Officejet Pro series. Require installation of the HP server component HP OPS (OXPd Professional Services) that is distributed together with the SafeCom Device Server. Due to device limitations there is no tracking of Copy, E-mail and Scan and prints are tracked at the server only. Use of ID code and/or PIN code is possible, but a press on the Down () button to get Enter () is required to signal that the complete ID code has been entered. If login by card is required on a 4730mfp you are advised to use FMC ID Kit and a serial ID device, instead of a USB ID device. On 4700 you are advised to use FMC ID Kit and a serial device, instead of a USB ID device (provided the device has a HDD). Supports numeric ID code login with SafeCom Keypad USB. Supports numeric ID code login with SafeCom Keypad Serial. As the device has no external USB port a SafeCom HP USB ID Kit must be used to connect SafeCom ID Device to one of the device’s internal USB port. SafeCom ID Devices to be used with the HP LaserJet CM8050 MFP and CM8060 MFP MUST be USB 2.0 compliant. If a SafeCom Magnetic Card Reader is used it must be the rugged DD version. Device has a hardware integration pocket that allows use of embedded mini-USB E12 ID device. For CM3530 MFP the supplied SafeCom HP USB ID Kit is required to connect external USB ID devices. For M551 the Hardware Integration Pocket is not available for the M551n. Device has a hardware integration pocket that allows use of embedded mini-USB E12 ID device. Require an additional 33 cm cable (p/n 344020). Other USB ID devices can be connected through the supplied SafeCom HP USB ID Kit. Device has a hardware integration pocket that allows use of embedded mini-USB E12 ID device. Require an additional E12 USB Cable, Female, 12 cm. (p/n 344030).
14
1 Introduction
1.3
SafeCom Go HP products Identification by ID code on: MFP M525, MFP M575, MFP M725, MFP M775, M3035 MFP, CM3530 MFP, 4345mfp, M4345 MFP, M4349 MFP, CM4540 MFP, M4555 MFP, 4730mfp, CM4730 MFP, M5035 MFP, M5039 MFP, CM6030 MFP, CM6040 MFP, CM6049 MFP, 9040mfp, M9040 MFP, 9050mfp, M9050 MFP, M9059 MFP, 9500mfp. Scanjet 7000n, Digital Sender Flow 8500 fn1 (formerly ScanJet Enterprise 8500fn1), MFP 830, MFP M880, MFP S970dn, MFP S962dn, MFP S951dn, S956dn, X576dw MFP, X476dw MFP, X476dn MFP, 276dw MFP and Digital Sender 9250C.
Identification by USB ID device on: SafeCom Go HP
M3035 MFP, CM4730 MFP, M5035 MFP, M5039 MFP, CM6030 MFP, CM6040 MFP, CM6049 MFP, M9040 MFP, M9050 MFP, M9059 MFP, MFP S970dn, MFP S962dn, MFP S951dn, S956dn, X576dw MFP, X476dw MFP, X476dn MFP, 276dw MFP. Digital Sender 9250C.
Identification by mini-USB ID device mounted in hardware integration pocket on: MFP M525, MFP M575, MFP M725, MFP M775, CM3530 MFP, CM4540 MFP, M4555 MFP. Scanjet 7000n, Digital Sender Flow 8500 fn1 (formerly ScanJet Enterprise 8500fn1), MFP 830 and MFP M880.
Order license and USB ID device separately. Identification by ID code on: CM8050 MFP, CM8060 MFP.
SafeCom Go High-end HP
Identification by USB ID device on: CM8050 MFP, CM8060 MFP.
Order license and USB ID device separately. SafeCom HP USB ID Kit
Identification by USB ID device on: CM3530 MFP, M4345 MFP, M4349 MFP.
SafeCom HP USB ID Kit: USB ID Kit (fits into EIO slot). The USB ID Kit is needed because there is no external USB port. Order license and USB ID device separately. SafeCom HP FMC ID Kit
Identification by serial ID device on: 4345mfp, 4730mfp, 9040mfp, 9050mfp, 9500mfp.
SafeCom HP FMC ID Kit: Flash Memory Card, FMC ID Kit (fits into EIO slot), a switch mode power supply (Input: 100-240V~, 50-60Hz/150mA, Output: 5V, 1.0A). Order license and serial ID device separately.
D60701-36
15
1 Introduction
1.4
SafeCom P:Go HP products Identification by ID code on: M855, M806, M750, X551dw Printer, 251dw Printer
Identification by USB ID device on:
SafeCom P:Go HP
M551, M601, M602, M603, M712, 3000 (incl. HDD), CP3505 (incl. HDD), CP3525 (incl. HDD), 3800 (incl. HDD), P4014 (incl. HDD), P4015 (incl. HDD), P4515 (incl. HDD), CP4525 (incl. HDD), CP5525, CP6015 (incl. HDD), X551dw Printer, 251dw Printer.
Identification by mini-USB ID device mounted in hardware integration pocket on: M855, M806, M750
Order license and USB ID device separately. Identification by USB ID device on: SafeCom HP USB Key
3000 (excl. HDD), P3005, P3015, CP3505 (excl. HDD), CP3525 (excl. HDD), 3800 (excl. HDD), P4014 (excl. HDD), P4015 (excl. HDD), P4515 (excl. HDD), CP4525 (excl. HDD), CP6015 (excl. HDD).
SafeCom HP USB Key: USB Key. Order license and USB ID device separately. Identification by USB ID device on: P3005, P3015.
SafeCom HP USB ID Kit
SafeCom HP USB ID Kit: USB ID Kit (fits into EIO slot). The USB ID Kit is needed because there is no external USB port. Identification by mini-USB ID device mounted in hardware integration pocket on the P3015 requires an additional 33 cm cable (p/n 344020). Order license and USB ID device separately. Identification by serial ID device on:
SafeCom HP FMC ID Kit
2410, 2420, 2430, 4240, 4250, 4350, 4650, 4700, 5550, 9040, 9050.
SafeCom HP FMC ID Kit: Flash Memory Card, FMC ID Kit (fits into EIO slot), a switch mode power supply (Input: 100-240V~, 50-60Hz/150mA, Output: 5V, 1.0A). Order license and serial ID device separately.
D60701-36
16
1 Introduction
1.5
SafeCom ID Devices Table 4 SafeCom Go HP supported SafeCom ID Devices USB
Serial
p/n 696020 694020 652420 678020 674120 674420 697420 673120 673420 671120
p/n 696010 694010 652010
654120 654420 670420 651020 658420 679120 679420
Identification Method SafeCom AWID Reader SafeCom Bar Code Reader SafeCom Casi-Rusco Reader [R] SafeCom Cotag Reader SafeCom EM Reader [E] SafeCom EM Reader [R] SafeCom Felica Reader SafeCom HID Prox Reader [E] SafeCom HID Prox Reader [R] SafeCom HID Prox Reader 37 bit (custom) SafeCom iCLASS Reader [E] SafeCom iCLASS Reader [R] SafeCom Indala Reader 26bit [R] SafeCom Indala Reader 29bit [R] SafeCom IoProx [R] SafeCom Legic Reader [E] SafeCom Legic Reader [R] SafeCom Magnetic Card Reader (Tr 1) SafeCom Magnetic Card Reader (Tr 2) SafeCom Magnetic Card Reader (Tr 3) SafeCom Magnetic Card Reader DD (Tr 1) SafeCom Magnetic Card Reader DD (Tr 2) SafeCom Magnetic Card Reader DD (Tr 3) SafeCom Mifare Reader [E] SafeCom Mifare Reader [R] SafeCom Nedap Reader [E] SafeCom MultiISO Reader [E] SafeCom NexWatch Reader [R]
Mini-USB E12 p/n
674110
674220
697310 673110
673140
671110
671140
654110
654220
670010 651010 658010 679110
679220
959010 954010 657010 692010 691020 692020 970120 970420 653020 695120 698420
970110
970220
978990 695110 698010
695220
Additional information about the ID devices is available in SafeCom G4 Administrator’s Manual D60650. Note: ID devices require unique ID Device Licenses. SafeCom ID devices come with ID device licenses, whereas ID device licenses for third party ID devices must be purchased separately. Note: HP Officejet devices have a limitation in the firmware, so at the time of writing (November 2013), only [R] marked USB readers are supported in addition to the HP Access Control USB proximity card reader (3.6.33). Support for remaining readers, including [E] marked readers will happen with future HP firmware.
D60701-36
17
1 Introduction
1.6
Supported languages Below is a list of the languages and their postfixes supported by SafeCom Device Server. Postfix None _da _de _es _fr _it _iw _ja _ko _nl _no _sv _zh _zh_tw
1.7
Language English Danish German Spanish French Italian Hebrew Japanese Korean Dutch Norwegian Swedish Chinese Chinese, Taiwan
HP Universal Print Driver HP Universal Print Driver version 5.2.5 is available for PCL5, PCL6 and PostScript at hp.com/go/universalprintdriver can be used with SafeCom Pull Print if it is installed and run in Traditional mode, where UPD forwards the print data to the SafeCom Pull Port. 1. 2. 3. 4. 5. 6.
Obtain a copy of the HP Universal Print Driver and unpack it. Double-click install.exe that came with the HP Universal Print Driver. Click Yes to accept the license agreement. Select Traditional mode and click Install. The Add Printer Wizard appears. On Windows 2008: Click Add a local printer. On Windows 2003 and 2000: Click Next. Select Local printer and clear Automatically detect and install my Plug and Play printer. Click Next. Choose Create a new port and select Standard TCP/IP Port from the dropdown list. Click Next. Note: To allow the UPD to optimize its output and reduce print files it should connect to the HP device through a Standard TCP/IP port once before it is changed to use a SafeCom Pull Port.
7. 8. 9. 10. 11.
D60701-36
The Add Standard TCP/IP Printer Port Wizard appears, click Next. Enter Printer Name or IP Address. Click Next. Click Finish. Select the HP Universal Printing variant (PCL5, PCL6 or PS) that match your needs and click Next. Enter a Printer Name and choose whether or not this printer should be your default Windows printer. Click Next. Check Share this printer… and enter Share name. Click Next.
18
1 Introduction
12.
13. 14.
On Windows 2008: Do not click Print a test page to verify the system. Click Finish. On Windows 2003 and 2000: Select No to print a test page to verify the system. Click Next. Click Finish. The UPD is now installing which may take some minutes. Please be patient. When the HP Universal Printing Installation dialog reports that the installation has completed you can click Finish.
Check the Printer properties: 1. 2. 3. 4. 5.
Right-click the printer and click Printer properties. On the Device Settings tab scroll to Installable options and change Automatic Configuration to Update Now. This will cause the UPD to contact the device and get information about its configuration. Click Apply. On the Advanced tab check Start printing after last page is spooled as this allows faster spooling. Click Apply.
Make the printer use the SafeCom Pull Port: 1. 2.
Click on the Ports tab in the Printer properties dialog. Clear Enable bidirectional support. Click Apply.
3. 4.
Click Add Port… Choose Create a new port and select SafeCom Pull Port from the dropdown list. Click Next. Enter a unique name of your choice for the port in Port Name. Click OK. The Configure SafeCom Pull Port dialog prompts you to enter the IP address or host name of the SafeCom Server and choose Use network logon as method of Authentication. Click OK.
5. 6.
Note: It is possible to configure the SafeCom Pull Port to override the HP Universal Printing driver name. 7. 8. 9.
Click OK. The SafeCom User Logon dialog appears. Enter User logon and Password of a user that has SafeCom Administrator or Technician rights. Click OK. Click Apply.
Print a test page: 1. 2.
Click on the General tab in the Printer properties dialog. Click Print Test Page to verify the system. Click Close when prompted to confirm that the test page printed correctly.
For high load systems you can minimize the wait for documents to be processed and transferred to the SafeCom server by checking Enable printer pooling on the Ports tab and add multiple identically configured SafeCom Pull Ports. In our experience 1-4 ports is sufficient and no more than 12 ports should be added.
D60701-36
19
1 Introduction
Remarks:
The installation of the UPD may take several minutes, be patient.
The print jobs produced with UPD can be quite large in size as everything is always rendered in color, even if the device does not support color. This goes for PCL5, PCL6, and PostScript. To improve performance it may be necessary to use the printer’s “normal” driver. To investigate print to file and compare the respective file sizes.
In a Microsoft Clustered Environment the UPD must be installed on the virtual server. However, if you wish the UPD to appear on the nodes that make up the cluster server it must be installed on each of these nodes.
The HP Universal Print Driver can also be used for together with the SafeCom Push Port for tracking of documents that are sent directly to the device. Note: Be aware that post tracking data is not available for HP Officejet Pro devices.
1.8
Available documentation SafeCom Smart Printing SafeCom Smart Printing Administrator’s Quick Guide D10600 How to install a SafeCom Smart Printing solution. SafeCom G4 SafeCom G4 Administrator’s Manual D60650 A comprehensive Manual that the administrator should consult to make a successful SafeCom solution. Includes information about SafeCom Tracking, SafeCom Rule Based Printing, SafeCom Client Billing, and SafeCom Pay. SafeCom Go HP SafeCom Go HP Administrator’s Manual D60701 (this manual) Manual on how to install, configure and use SafeCom Go HP. SafeCom Go HP Hardware Quick Guide D10702 Quick Guide on how to install the SafeCom Go HP hardware. SafeCom Go HP User’s Guide D20701 User's Guide on how to use SafeCom Go HP.
D60701-36
20
1 Introduction
1.9
About this manual This manual applies to Nuance SafeCom G4 Server version S82 070.520*02, Nuance SafeCom Device Server version S82 060.090*02, Nuance SafeCom Go HP version S89 nnn.050*23 and S95 nnn.050*24. This manual is organized as follows:
D60701-36
Chapter 1 Introduction lists the supplied SafeCom documentation, system requirements and describes how this manual is organized.
Chapter 2 SafeCom Go HP - Device Server describes the installation of SafeCom Go HP via the SafeCom Device Server.
Chapter 3 SafeCom Go HP describes the installation and the web interface of the internal solution for HP devices.
Chapter 4 Using SafeCom Go HP describes how to interact with the HP device’s control panel when SafeCom Go HP is installed.
Chapter 5 Automatic installation via HP Web Jetadmin describes how to install SafeCom Go HP via HP Web Jetadmin.
Chapter 6 Troubleshooting contains troubleshooting hints.
Chapter 7 Regulatory information contains regulatory information.
21
1 Introduction
1.10
Document history Revision D60701-36
Nuance SafeCom G4 Server version S82 070.520*02 Nuance SafeCom Device Server version S82 060.090*02 Nuance SafeCom Go HP version S89 nnn.050*23 and S95 nnn.050*24 Support for HP Sx series: HP Color MFP S970dn, S962dn, S951d, HP MFP S956dn added (4.22). Updated device server failover description (2.7). Support for HP Officejet Pro series: X576dw MFP, X476dw MFP, X476dn MFP, 276dw MFP, X551dw Printer, and 251dw Printer (4.23). Added information on HP OPS installation (2.2.1 and 2.10).
Revision D60701-35
Enhanced troubleshooting for when no Pull Print icon appears (6.15). Added information on Log out button behavior during timeout (6.26) Updated device type name from HP Scanjet Enterprise 8500 fn1 to HP Digital Sender Flow 8500 fn1. Added information on masking ID code on older single-function printers (3.5.3) Added information on hiding document names (4.1.11) Added support for LaserJet Enterprise 830, Color LaserJet Enterprise M880, LaserJet M855, M806, and M750 (4.1,4.8).
Revision D60701-34
Nuance SafeCom G4 Server version S82 070.510*01. Nuance SafeCom Device Server version S82 060.080*01. Nuance SafeCom Go HP version S89 nnn.050*21 and S95 nnn.050*21 Support for LaserJet Enterprise 700 MFP M725. Upload log to server (3.5.5) On devices with 110xxx and 132xxx SafeCom Go, the ID code must be max 32 characters long (3.5.3)
Revision D60701-33
Nuance SafeCom G4 Server version S82 070.500*02. Nuance SafeCom Device Server version S82 060.070*03. Nuance SafeCom Go HP version S89 nnn.050*18 and S95 nnn.050*20 Added section (3.6.33) HP Access Control USB proximity card reader
Revision D60701-32
D60701-36
Nuance SafeCom G4 Server version S82 070.500*01. Nuance SafeCom Device Server version S82 060.070*02. Nuance SafeCom Go HP version S89 nnn.050*18 and S95 nnn.050*18. Minor correction of HP model names.
22
1 Introduction
Revision D60701-31
Nuance SafeCom G4 Server version S82 070.500*01. Nuance SafeCom Device Server version S82 060.070*01. Nuance SafeCom Go HP version S89 nnn.050*16 and S95 nnn.050*17. Added description to section 6.21 on how to override disabling of print buttons. SafeCom Smart Scan is now available with Nuance SafeCom Go HP FS version S95 nnn.050*16 (3.6.21). SafeCom Go HP support for LaserJet Enterprise 500 flow MFP M525, LaserJet Enterprise 500 flow Color MFP M575. SafeCom Go HP support for LaserJet Enterprise 700 M712 and LaserJet Enterprise 700 Color MFP M775. Added info about ID device license (1.5) Added section Device Server config.ini (2.3.3) Edited section 4.9.2 Support for SafeCom Mobile Pull Print (2.9.9).
Revision D60701-30
SafeCom Device Server version S82 060.060*04, SafeCom Go HP version S89 nnn.050*14 and S95 nnn.050*14. Support for external keypad removed from USB devices.
Revision D60701-29
D60701-36
SafeCom Device Server version S82 060.060*04, SafeCom Go HP version S89 nnn.050*13 and S95 nnn.050*13. HP LaserJet 500 MFP M525, HP LaserJet Color 500 MFP M575, and ScanJet Enterprise 8500fn1 are now supported. Added UDP port 5741 to section 2.2.2 Windows Firewall - ports that must be opened corresponding to the SafeCom G4 Administrator’s Manual. Corrected section 2.12 SafeCom Go HP device trace facility, “ten” equals 10KB. Support for delegated print Support for user access rights (2.9.6 and 3.6.21) Added section 2.11.1 Partial Disk Clean on M525 and M575 Automatic setup of quota server.
23
1 Introduction
Revision D60701-28
SafeCom Device Server version S82 060.060*03, SafeCom Go HP version S89 nnn.050*09 and S95 nnn.050*11. Choice of language now follows the choice made for the device. As a consequence there is no separate SafeCom Go Language web page. English texts are used if there are no texts for the selected language. SafeCom Go HP can run inside on the following FutureSmart devices: CM4540 MFP, M4555 MFP, M551, M601, M602, M603, and Scanjet 7000n. New section to describe install (3.3.1) and uninstall (3.9.1). Updated to reflect that SafeCom HP USB Key is not required on CP5525, M551, M601, M602 and M603 (1.4). The Third party authentication section on the Configuration web page no longer features text fields for ID code, User logon and Domain (3.5.3).
Revision D60701-24
SafeCom Device Server version S82 060.050*02 and SafeCom Go HP version S89 nnn.050*03. HP LaserJet 500 Color M551 is now supported (1.2). HP LaserJet 600 M601, M602, and M603 are now supported (1.2). New process for adding a device server device in SafeCom Administrator (2.4.2). SafeCom Device Server failover (2.7). Third party authentication is now possible (2.9.8 and 3.5.3).
Revision D60701-23
SafeCom Device Server version S82 060.040*06 and SafeCom Go HP version S89 nnn.040*05. Updated to reflect the introduction of SafeCom Device Server version S82 060.040*06. The HP Scanjet 7000n is now supported. Register card with Windows credentials at the device is now supported.
Revision D60701-22
D60701-36
SafeCom Device Server version S82 060.040*05 and SafeCom Go HP version S89 nnn.040*05. The HP LaserJet M4555 MFP is now supported.
24
1 Introduction
Revision D60701-21
SafeCom Device Server version S82 060.040*04. Updated to reflect the introduction of SafeCom Go HP version S89 nnn.040*05.
Revision D60701-20
SafeCom Device Server version S82 060.040*01. Chapter 2 SafeCom Go HP - Device Server has been added. Chapter 4 has been updated to include the devices CM4540 and CP5525. Chapter 5 Automatic installation via HP Web Jetadmin has been updated.
Revision D60701-19
SafeCom Go HP version S89 nnn.040*03. Updated to reflect the introduction of SafeCom G3 Server. Client Billing via the Account icon (3.6.21, 4.2.7, 4.5.5, 4.6.7). Updated section on encryption keys (3.6.25). Troubleshooting section: At the printer: Printing disabled (6.21).
Revision D60701-18
SafeCom Go HP version S89 nnn.040*01. Support for HP LaserJet M4349 MFP, M5039 MFP, CM6049 MFP and M9059 MFP. Supports SafeCom G3 Server features: Unicode and Enhanced encryption (3.5.3).
Revision D60701-17
SafeCom Go HP version S89 nnn.030*42. Added chapter 5 Automatic installation via HP Web Jetadmin. How to access the SafeCom Loader web page (3.6.32).
Revision D60701-16
SafeCom Go HP version S89 nnn.030*41. Support for HP LaserJet P3015 (4.13) and HP Color LaserJet CP4525 (4.17). Information about DIMM-based products has been removed, as they are no longer for sale. Refer to a previous version of this manual.
Revision D60701-15
D60701-36
SafeCom Go HP version S89 nnn.030*40. Added section on HP Universal Print Driver (1.7).
25
2 SafeCom Go HP - Device Server
2
SafeCom Go HP - Device Server
2.1
Overview Make sure the SafeCom G4 Server software installation has been completed as described in for example the SafeCom Smart Printing Administrator’s Quick Guide D10600.
2.2
SafeCom Go HP – Device server installation For HP FutureSmart devices it is also possible to enable SafeCom Go HP via SafeCom Device Server. This is the devices that are marked with DS in the DS/FS column in the tables on page 11.
2.2.1
Installation Install SafeCom Device Server. 1.
Insert the SafeCom CD or download the safecom_device_server_nnn.exe file from the link supplied to you. The installation must be Run as administrator. When the installation program is launched click Next. Note: If you intend to include HP Officejet devices in the solution, then launch the installation with the parameter --installOPS to install the required HP OPS (OXPd Professional Services) safecom_device_server_nnn.exe --installOPS
2.
Choose the destination folder for the files. Click Next. The default installation folder is: C:\Program Files\ SafeCom\SafeCom Device Server On Windows 64-bit: C:\Program Files (x86)\ SafeCom\SafeCom Device Server
3. 4. 5. 6.
D60701-36
Click Next. Detecting Java version. Click Next. Review settings before copying of files starts. Click Install. Click Finish.
26
2 SafeCom Go HP - Device Server
2.2.2
Windows Firewall - ports that must be opened If Windows Firewall is enabled it may prevent the SafeCom solution from working. Disable the firewall or run the script below. 1. 2.
Browse to the SafeCom Device Server installation folder. Right-click open_firewall_safecom_device_server.cmd. The command file must be Run as administrator. In the file you can see what TCP and UDP ports will be opened.
You can also manually ensure that the port numbers below are open. SafeCom Server TCP 7500 7700
UDP 5742
Web Browser
SafeCom Device Server
TCP 8080
TCP 80 443 50003
UDP 161
TCP 80 443 7800 8080 50002 UDP 161 5741 TCP 443 7500 7627 7700 50003 UDP 5742 TCP 9100 D60701-36
TCP 443 50002
TCP 9100
Inbound on SafeCom Device Server Used to contact MFP during initial setup Used to contact MFP during operation Used when supporting SafeCom ID controller Web browser Device Inbound on SafeCom Device Server Used to register notifications Used between the SafeCom Administrator and SafeCom Go, SafeCom Device Server and SafeCom Controller. Outbound on SafeCom Device Server Used to contact MFP during operation SafeCom Server (Job Server) SOAP Interface on HP Jedi devices SafeCom Server (Job Server) Device Outbound on SafeCom Device Server SafeCom Server (Broadcast Server) Used for printing
Protocol HTTP HTTPS SafeCom HTTP HTTPS Protocol SNMP SafeCom Protocol HTTPS SafeCom HTTPS SafeCom HTTPS Protocol SafeCom Protocol RAW 27
2 SafeCom Go HP - Device Server
2.3
Configure SafeCom Device Server The SafeCom Device Server must be configured manually to reference the right SafeCom Server. This is done by adding the SafeCom Server in the SafeCom Device Server. A list of failover SafeCom Servers can be set up.
2.3.1
Login to SafeCom Device Server To log in to SafeCom Device Server: 1.
Open a web browser and enter the server address (IP address or hostname) for the device server followed by :8080/safecom in the address field. Example: http://localhost:8080/safecom Note: Use of JavaScript (Active Scripting) must be enabled.
2. 3.
2.3.2
Add SafeCom Server 1. 2.
Open a web browser and log in to the SafeCom Device Server (2.3.1). Click Device Server in the left pane.
3.
Under SafeCom Servers, click the [+] icon to add a failover SafeCom Server. Enter the server address and click OK. To add localhost as the server, leave the Address field blank and click OK. Click Save.
4. 5.
2.3.3
Enter Username (default is admin) and Password (default is nimda). Click OK. If a Limited access dialog opens, click OK.
Device Server config.ini The following settings can be set by modifying the config.ini file located in the
/equinox folder. After editing the config.ini file, the SafeCom Device Server service must be restarted in order for the changes to take effect.
D60701-36
28
2 SafeCom Go HP - Device Server
Note: DO NOT use Windows Notepad, as it will mangle line endings. WordPad, or another editor that understands Unix line endings are recommended. Editing the config.ini must be done with due diligence as it otherwise will break the runtime. Description Default Defines if configuration file is deviceserver.encryptconfig encrypted: ‘true’=enable, true 'false'=disable. Option to disable the configuration code against deviceserver.configuredevices devices. Useful mostly for true testing purposes to support simulated devices. If set to 'true' it enables the deviceserver.trace false server trace files If set to 'true' it enables the deviceserver.protocol.trace false safecom protocol trace files InetAddre Sets the address that the deviceserver.serverAddress ss.getLoc devices must refer to. alHost() Sets the location of the deviceserver.config.dir config configuration directory Defines the max size of each trace file. Defined in bytes deviceserver.trace.file.size 10MB but takes a postfix for larger units: KB, MB or GB Defines the number of old deviceserver.trace.file.count 5 trace files to keep. Allows administrator to control if devices should contact the Device Server by its IP or its host name. Setting
deviceserver.preferIP
D60701-36
NOTE: Setting this option true to false require that the DNS settings (and search domains) on the devices are set correctly, otherwise the devices will be left in a nonworking state.
29
2 SafeCom Go HP - Device Server
2.4
Add a device to a SafeCom Device Server The device can be added to the SafeCom Device Server in one of the following two ways:
2.4.1
Via the SafeCom Administrator (2.4.2). The recommended method. Works on SafeCom G3 Server version S82 070.410*05 or newer.
Via the SafeCom Device Server (2.4.3). Solutions based on SafeCom G2 must use this method.
Device icons Once the devices are added in the SafeCom Device Server, the following icons represent the status of the devices. User is logged in at the device. Device is idle, no user logged in. Wait for at least 2 minutes. If the warning signal is gone, the printer is configured. If the warning signal remains, the printer cannot be configured because, for example the SSL is not on, or another device server is trying to configure the printer. An error occurred. The printer is receiving print data. Device server cannot contact the printer.
D60701-36
30
2 SafeCom Go HP - Device Server
2.4.2
Add the device via SafeCom Administrator Before adding a device server device in SafeCom Administrator a SafeCom Device Server must be added to the Device server container in the left menu. If the device server is already added in the SafeCom Administrator, go to Add device server device below. Add device server 1. 2.
Start SafeCom Administrator. Log in to the server by double-clicking its group name listed to the left. Note: In a multi-server installation, best practice is to make sure that the device server references the slave server.
3. 4. 5.
Enter User logon (default is ADMIN) and Password (default is nimda). Right-click the Device servers container and select Add device server... Enter the IP address or hostname of the device server and if necessary a note. Click Add.
Note: To delete the device server again, right-click the device server and select Delete device server. The SafeCom Device Server is now added to SafeCom Administrator and you can add a device. Add device server device 1. 2.
3. 4.
D60701-36
Click the Devices container, right-click the content area and then Add device. The Add device wizard is now launched. From the Device server drop down menu, select the SafeCom Device Server and click Next.
Status information is retrieved from the device server. Click Next. Enter the Printer address (the device IP address or host name) and click Next.
31
2 SafeCom Go HP - Device Server
D60701-36
5. 6.
Information is then retrieved from the device. Click Next. Now select SafeCom Go HP as the type of device and click Next.
7.
Enter the username and password, as specified on the device web page and click Next.
32
2 SafeCom Go HP - Device Server
8.
The Device Properties dialog now opens. Make sure to specify on the Settings tab the device server and the properties of the device (duplex and color supported).
9.
Click Add to register the device and save it in the database. After approx. 2 minutes the device is added to the device server and available to be configured in SafeCom Device Server.
The device server device is now added and listed both under Devices and under the device server under Device servers.
D60701-36
33
2 SafeCom Go HP - Device Server
10.
2.4.3
Add device via SafeCom Device Server 1. 2. 3. 4.
D60701-36
Go to section 2.5 to continue with the configuration of the device.
Click Device Server in the left menu. Click the Add device button to launch the Add device wizard. Enter the hostname or the IP address of the device. If you want to use dynamic IP address, then enter the device hostname in the Address field. Click Next.
5.
Information is retrieved from the device to establish the type of device. Make the necessary adjustments to the Required Device properties.
6.
Click Finish and then Save and the device is now added to the SafeCom solution and will also appear in SafeCom Administrator. 34
2 SafeCom Go HP - Device Server
7. 8.
On the device settings page, make sure the settings are correct. Click Save
Note: The device is now added to the SafeCom solution, but it does not appear in the SafeCom Administrator before a user logs in at the device.
2.5
Configure the device on the device web page The device is now added to the SafeCom Device Server, but a few things must be verified manually on the web page for each device. For both MFPs and Printers: Set up device server address (2.5.1) For MFPs only: Verify the sign in method and access control (2.5.2) Verify the Quota Server Address (2.5.3)
2.5.1
Set up device server address 1. 2.
Access the SafeCom configuration page, by clicking the General tab and then SafeCom in the menu on the left. Under Configuration, verify that the server address specified in the Server Address field points to the SafeCom Device Server.
Server port 50002 is specified when using SSL (secure socket layer). Server port 8080 is specified when using unencrypted.
Note: By adding more server addresses under Configuration, it is possible to set up the server failover list for the device. This is then automatically updated on the device server web page and vice versa. 3.
D60701-36
Click Apply at the bottom of the web page.
35
2 SafeCom Go HP - Device Server
The following 5 icons represent the status of the devices: Connected: This is the device server that the device is connected to. Valid, but not connected: The device server is running but the device is connected to another device server. Testing: The server address is being tested. Invalid: The server address is not that of a SafeCom Device Server. Not responding: The device server is not responding.
2.5.2
Set Sign in method and access control 1. 2. 3. 4.
5. 6.
7. 8.
D60701-36
Open the device web page in a web browser (2.8.1). Click Sign In in the upper-right corner of the web page and enter username and password. Click the Security tab and then Access Control in the menu to the left. Under Sign In and Permission Policies, make sure that the general sign in method is set to SafeCom.
If needed, change the sign in method for each of the Control Panel Applications listed. For all applications that must be controlled by SafeCom, check the Device guest checkbox, so the yellow pad lock symbol appears. This means that login is required.
Make sure to check the SafeCom check box for each application that a SafeCom user must have access to at the device. Click Apply at the bottom of the web page.
36
2 SafeCom Go HP - Device Server
2.5.3
Verify Quota Server address 1. 2.
Click the General tab, and then Quota and Statistics Services in the menu on the left. Make sure that the name specified in the Quota Server URL field is correct - it must be the same as the SafeCom Device Server address. If necessary, correct the address manually. Tip: With SafeCom Go HP version S89 nnn.050*13 and S95 nnn.050*13 or later, the quota server is set up automatically.
3. 4.
D60701-36
Check the Connect this device to a Quota server. Click Apply at the bottom of the web page.
37
2 SafeCom Go HP - Device Server
2.6
Configure device in SafeCom Device Server The Device tab is used to configure SafeCom Go HP, which device it is connected to, how users are to be identified, etc. To save any changes you make to the configuration, click Save in the upper right corner of the web page. Note: If you click Save and then in the Device Message field see the message "Unable to configure device because: Device is configured against a different server", the device is configured to a different server. To be able to make changes to the device configuration, first click Reconfigure device which configures the device to your server, make the necessary changes, and then click Save.
D60701-36
38
2 SafeCom Go HP - Device Server
Change the settings according to the following descriptions:
Device information o Manufacturer and Description are automatically filled-in and together with Location they are also viewable in the Device properties dialog in SafeCom Administrator. o Contact and Location provides useful information in maintaining the SafeCom solution.
Network settings o Address: The IP address of the device. o RAW print port: The TCP port used to send print data. o SNMP Put Community name: This must match the SNMPGet Community Name if this is different from public. By default SNMP GetCommunity name is public.
Device settings o Administrator name: The user name with which the administrator can log in to device. o Administrator password (mandatory): The device password with which the administrator can log in to device. o Login method: This determines how users log in. Choose between: Auto-sense. Auto-sense maps to Card or Windows if an ID device is connected to the MFP and on devices it maps to Card. Otherwise it maps to ID code. Mapping changes within 10 seconds after the ID device is either connected or disconnection. If it does not change a restart of the device may be required. Card ID code Card or ID code Card or Windows: Allows the user to log in by either card or by entering their Windows username, password, and domain. Note: Identification by card requires connecting a USB ID Device (card reader). The option Card or Windows allows the user to log in by either card or by entering their Windows username, password, and domain. The SafeCom G4 server must be a member of the domain or trusted by the domain. o
o o o o
D60701-36
Default domain: Specify the domain to pre-fill the domain for users when logging into a device. If using SafeCom Mobile Pull Print the domain must be specified, as the users are not prompted for domain when logging into a device using a smart phone. If the default domain is not specified, but the users are required to use domains, they can enter the domain with their username (domain\username). Language: Specify a specific language if you want SafeCom Device Server to override the language on the device. Idle timeout: Specifies in seconds when a logged in user is automatically logged out if there's no activity. Hide domain: Check to allow the users to log in without specifying the domain. Enable post tracking: This is relevant only with SafeCom Tracking. Refer to SafeCom G4 Administrator’s ManualD60650
39
2 SafeCom Go HP - Device Server
o o
Reverse document list: Check to show the latest printed documents at the top of the document list. Mask ID code: Check to mask the ID code with asterisk (*) when entered at the device.
Note: Be aware that post tracking is not available for HP Officejet Pro devices.
D60701-36
Drivers: When Pull Printing, SafeCom compares the driver name embedded in the print job with its list of driver names. If no match is found and if Show fidelity warning is checked in the Server properties in the SafeCom Administrator, the document appears with a question mark [?] in the document list. This way the user is warned that fidelity is low and the document may print incorrectly. o Click Get All to obtain the list of drivers from the SafeCom Server, or add and delete drivers manually.
Device Properties: o 3rdPartyAuthDomain optional): Specify the string where the third party domain is specified. o 3rdPartyAuthEnable: To enable third party authentication, change the property value from False to True. o 3rdPartyAuthIDcode: Specify the string where the third party ID code is specified. Either 3rdPartyAuthIDcode or 3rdPartyAuthUserLogon must be specified. o 3rdPartyAuthUserLogon: Specify the string for where the third party user logon is specified. Either 3rdPartyAuthIDcode or 3rdPartyAuthUserLogon must be specified. o SafeComGoVersion: The SafeCom Go version used on the device.
Device applications: Lists what users are allowed to access. Uncheck the applications that do not require user authentication.
Enable logging: Select if log information should be collected.
Restore factory default: Sets all settings back to their default values, except the password.
Reconfigure device: Reference the device to the current SafeCom Device Server.
40
2 SafeCom Go HP - Device Server
2.7
Configure device server failover SafeCom Administrator allows you to group your device servers, enabling a failover solution. Device servers belonging to the same group monitor the status of the group members, and in case of a group member failing or shutting down, the rest of device server group distributes the workload of the downed device server among the rest. 1. 2. 3.
Log in to SafeCom Administrator. Open the Device Server list. Click Add device server group.
4. 5. 6.
Enter a name and optionally a description for the device server group. Click OK. Drag and drop the device servers to incorporate them into the newly created group.
Note: If device failover occurs while a user is logged in, the fallback to the “home” device server does not occur until the user logs out and the device goes into idle state; this prevents user session interrupts. Note: When a device failover or device server fallback occurs, the device may need rebooting, depending on the vendor (the device reboot is handled automatically).
D60701-36
41
2 SafeCom Go HP - Device Server
2.8
SafeCom Go HP web interface The SafeCom Go HP web interface adheres to the structure and design of the HP Embedded Web Server (EWS).
2.8.1
Login 1. 2. 3.
2.8.2
Open the device in a web browser by entering the device address in the address field. Use of JavaScript (Active Scripting) must be enabled. Click Sign In in the upper-right corner of the page and enter the username and password. Click OK.
Product- and version information web page 1. 2. 3.
Open the device in a web browser (2.8.1). Click the Information tab. Click SafeCom on the menu to open the Information web page with product name and version.
Note: This option is not available for HP Sx-series devices.
2.8.3
Configure- and log information web page 1. 2. 3. 4. 5.
Open the device in a web browser and log in (2.8.1). Click on the General tab. Click SafeCom on the menu to access the SafeCom specific page with configuration and log information. Under Configuration, it is possible to change the Server Address and the Server Port for the SafeCom Device Server (2.5). Under Log Information, choose to enable or disable the log, to Show complete log, or to Clear log.
Note: This option is not available for HP Sx-series devices.
D60701-36
42
2 SafeCom Go HP - Device Server
2.9
SafeCom Go HP - How to The following subsections contain step-by-step instructions for some of the administrator’s most common tasks.
2.9.1
Get the SafeCom Go HP software If using SafeCom G3 Server version S82 070.410*05 and SafeCom Administrator version 9.41.5.1 or higher, it is possible to download all SafeCom Go HP software using the SafeCom Administrator function Check for updates.
2.9.2
Select login method To set the method of user identification: 1. 2. 3.
Open a web browser and log in to the SafeCom Device Server (2.3.1). Click on Device server in the left-hand menu, and then click on the device. In the Login method drop down menu under SafeCom Settings, select how users must identify themselves at the device. Choose between: Auto-sense (default)1 ID code Card Card or ID code Card or windows Keypad2
Note: Identification by card requires the installation of a SafeCom ID Device (card reader) potentially SafeCom Go HP ID Kit. Identification by ID code is possible on devices with touch-screen, built-in keypad, or external SafeCom Keypad (see table in 1.2).
1
For the HP Sx series auto-sense is not available and instead the default is Card or ID Code. 2 Keypads are no longer sold and this option was only relevant on selected printer.
D60701-36
43
2 SafeCom Go HP - Device Server
2.9.3
Enable Copy Control The SafeCom solution can control access to the MFP’s copy function. For SafeCom to be able to control and track Copy and Copy color, it needs to be set up as follows:
Tracking of copy and copy color must be enabled in SafeCom Device Server. The authentication method must be set up to SafeCom on the web page for the individual device. Setup of copy color on the device's web page must correspond to the settings made on the device server.
First enable SafeCom to do tracking on copy and copy color on the Device server: 1. 2. 3. 4. 5.
Open a web browser and log in to the SafeCom Device Server (2.3.1). Click on Device server in the left-hand menu, and then click on the device. Click Device applications. Check Copy in the list of applications. To allow the user to copy in color as well, check the Copy color checkbox. Click Save.
Note: By default both Copy and Copy color are checked. Enabling access control for color copy only is NOT recommended if the SafeCom solution is also to track copies. Mono copy jobs that are produced after the user has logged in to the color copy function are tracked as long as the user remains logged in. Mono copies are obviously not tracked when there is no user logged in. Similar situations arise if Copy is checked and Copy color is cleared. Secondly, the authentication method on the web page must be set up for the copy application on the device3: 1. 2. 3. 4. 5. 6.
Open the device in a web browser and log in (2.8.1). Click the Security tab and then Access Control. Under Control Panel Application, restrict the access for all copying by clicking the Device Guest checkbox for Copy application. If you want to restrict access only for copy color then expand Copy application menu and check Device Guest for Make a color copy. Select SafeCom as the Sign In Method. Click Apply at the bottom of the web page.
Note: On the device HP CM 6040 MFP, it is possible to disable user authentication for Color copy, but leave Copy authentication enabled. But if a user has copy enabled and color copy disabled set up on the SafeCom Server, the user will only be able to make a B&W copy and Color copy is denied. This is because the settings on the SafeCom Server overwrite the settings on the device.
3
D60701-36
For HP Sx series no setup is required on the web page.
44
2 SafeCom Go HP - Device Server
Thirdly, make sure that the Main Color Settings are set up correctly on the device's web page. The settings need to match the setting on the device server. To open the Main Color Settings: 1. 2. 3.
4.
2.9.4
Open the device in a web browser and log in (2.8.1). Click the Copy/Print tab and then Restrict Color. Verify that the copy color settings under Main Color Settings are set up so they match the settings on the device server. If for example copy color is enabled in the device server, the Enable Color on the web page must be checked as well. Click Apply at the bottom of the web page.
Enable Scan to Folder For SafeCom to be able to control access and track Scan to Folder, it needs to be set up as follows:
Tracking of Scan to Folder must be enabled in SafeCom Device Server. The authentication method must be set up to SafeCom on the web page for the individual device. The save to folder application for each device must be enabled on the device's web page.
First enable SafeCom to do tracking of Scan to Folder on the Device Server: 1. 2. 3. 4. 5.
Open a web browser and log in to the SafeCom Device Server (2.3.10). Click on Device server in the menu on the left, and then click on the device. Click Device applications. Make sure that Scan To Folder is checked in the list of applications. Click Save.
Second, the authentication method on the web page must be set up for the Save to Network Folder application on the device4: 1. 2. 3. 4. 5. 6.
4
D60701-36
Open the device in a web browser and log in (2.8.1). Click the Security tab and then Access Control. Under Control Panel Application, restrict the access for the copying by clicking the Device Guest checkbox for Network Folder application. If you want to restrict access for editing the network folder path, expand Network Folder application and check Device Guest for Ability to edit network folder path. Choose SafeCom as the Sign In Method. Click Apply at the bottom of the web page.
For HP Sx series no setup is required on the web page
45
2 SafeCom Go HP - Device Server
Third, make sure that Save to Network Folder is enabled on the device's web page. 1. 2. 3. 4.
2.9.5
Open the device in a web browser and log in (2.8.1). Click the Scan/Digital Send tab and then Save to Network Folder Setup. Check the Enable Save to Network Folder checkbox and verify that the other save to network folder settings are set up according to your needs. Click Apply at the bottom of the web page.
Enable E-mail SafeCom can control access to the MFP’s Send to E-mail function. For SafeCom to be able to control access and track e-mails, it needs to be set up as follows:
Tracking of E-mail must be enabled in SafeCom Device Server. The authentication method must be set up to SafeCom on the web page for the individual device. The E-mail application for each device must be enabled on the device's web page.
First enable tracking on e-mails on the SafeCom Device server: 1. 2. 3. 4. 5.
Open a web browser and log in to the SafeCom Device Server (2.3.1). Click on Device server in the left-hand menu, and then click on the device. Click Device applications. Check E-mail in the list of applications. Click Save.
Second, the authentication method on the web page must be set up for the Send to E-mail application on the device5: 1. 2. 3. 4. 5.
5
D60701-36
Open the device in a web browser and log in (2.8.1). Click the Security tab and then Access Control. Under Control Panel Application, restrict the access for the e-mail by clicking the Device Guest checkbox for E-mail application. Choose SafeCom as the Sign In Method. Click Apply at the bottom of the web page.
For HP Sx series no setup is required on the web page
46
2 SafeCom Go HP - Device Server
Third, make sure that E-mail is enabled on the device's web page. 6. 7.
8.
Click the Scan/Digital Send tab and then E-mail Setup. Check the Enable Send to E-mail checkbox and verify that the other save to network folder settings are set up according to your needs. For example, the default from and to e-mail addresses are set up under the Address and Message Field Control pane. To set up for example the default from address to the user's e-mail address, select User's address (Sign-in required)in the From: field. Click Apply at the bottom of the web page.
Note: Be aware that the set-up of default From: and To: e-mail addresses is no longer handled by SafeCom. Now the settings are available on the device web page on the Scan/Digital Send tab under E-mail Setup.
2.9.6
Control user access rights When using SafeCom G3 server version S82 070.440*03 or newer, you can control users’ access rights to specific features via SafeCom Administrator, refer to SafeCom G4 Administrator’s Manual D60650. You can control access rights to the following features:
2.9.7
Copy Copy in color E-mail Scan Fax USB memory print USB memory scan Print all button
Enable Client Billing and the account icon on the device The Account application and icon is already installed and available on HP MFPs and scanners when the SafeCom solution is enabled via the Device Server. Note that the following two settings must be set up in the SafeCom Administrator for the billing code to become part of the tracking record.
Client Billing must be checked on the License tab in the Device properties dialog in SafeCom Administrator. Bill clients for cost must be checked on the Settings tab in the User properties dialog in SafeCom Administrator.
Note: Be aware that Client Billing is not available for HP Officejet Pro devices.
D60701-36
47
2 SafeCom Go HP - Device Server
2.9.8
Enable third party authentication To enable users to log in using a, by SafeCom, unknown authentication method: 1. 2. 3. 4.
Open a web browser and log in to the SafeCom Device Server (2.3.1). Click on Device server in the left-hand menu, and then click on the device. Click Device properties and change the property value for 3rdPartyAuthEnable to True. Enter the property values for 3rdPartyAuthIDcode, 3rdPartyAuthUserLogon, and 3rdPartyAuthDomain. The property values must be the field names where the log in information is stored. As a minimum the property values for eitherr3rdPartyAuthIDcode or the 3rdPartyAuthUserLogon must be specified.
5.
2.9.9
Click Save.
Enable SafeCom Mobile Pull Print To allow users to Pull Print documents via their smart phone, a QR code must be printed for each device. Users then scan the QR code label at the device with their phone, thus identifying themselves and declaring their presence at the specific device. For details on how to print a QR code for the device, refer to SafeCom G4 Administrator’s Manual D60650. Make sure that the default domain is configured on the device in SafeCom Device Server (2.6), as the users are not prompted for domain when logging into a device using a smart phone. If the default domain is not specified, but the users are required to use domains, they can enter the domain with their username (domain\username). For more details on how to Pull Print from a smart phone refer to SafeCom Mobile Pull Print User’s Guide D 20722.
D60701-36
48
2 SafeCom Go HP - Device Server
2.9.10 Determine the version The version of the SafeCom Device Server can be seen in SafeCom Administrator. The version of the SafeCom Go HP software can be determined from the Information web page. 1. 2. 3.
Open the device in a web browser and log in (2.8.1). Click the Information tab. Click SafeCom to view the product information (Product name, Version, Version date, and Version time). The version number is in the format: S95 nnn.xxx
Note: Not applicable to HP Color MFP S970dn, S962dn, S951d, HP MFP S956dn.
2.9.11 Handle new MAC address (Jetdirect network card) In the SafeCom database the device is recorded by its unique MAC address. The device’s MAC address changes if the Jetdirect network card is changed. On devices with Jetdirect Internal (JDI) the MAC address changes if the formatter board with the network connector is replaced. To resolve this it is recommended to delete the device from the SafeCom database and add it again. 1. 2. 3. 4.
Open SafeCom Administrator. Browse to devices and right-click the device and click Delete device. Add the device again by right-clicking Devices and selecting Add device. Go through the Add device wizard to add the device again.
2.9.12 Verify that SafeCom Go HP is loaded To establish if SafeCom Go HP software is loaded you can access the web page for the device6: 1. 2. 3.
Open the device in a web browser and log in (2.8.1). Click General. Click Solution Installer and verify under the Installed Solutions pane that SafeCom Go is installed.
2.9.13 Register device The device must be registered with the SafeCom solution in one of the following ways: 6
D60701-36
Add the device in the SafeCom Administrator using Add device. A user with Technician or Administrator rights must log in at the device. For HP Sx series this does not apply
49
2 SafeCom Go HP - Device Server
2.9.14 Restore factory default 1. 2.
Open a web browser and log in to the SafeCom Device Server (2.3.1). Click Restore factory default at the bottom of the web page.
The factory default values are: Configuration settings Device Settings SafeCom Settings Network Settings
Device Information
Drivers Device Properties
Device applications
D60701-36
Field
Default value
Model MAC Address Device Message Login Method Idle timeout Post tracking Address SNMP Get Community SNMP Put Community RAW print port Contact Location Description Manufacturer User timeout Operator Name Operator Password SafeCom Go Version Configuration Time Stamp MFP authentication, MFP authentication, MFP authentication, MFP authentication, MFP authentication, MFP authentication, Folder
E-mail Pull Print Copy Copy Color Fax Scan to
Auto-sense 60 seconds Cleared (No) Device IP address Public Private
10 Admin Date and time of configuration Checked (Yes) Checked (Yes) Checked (Yes) Checked (Yes) Checked (Yes) Checked (Yes)
50
2 SafeCom Go HP - Device Server
2.9.15 Uninstall SafeCom Go HP To uninstall the SafeCom Go HP software from the device server: 1. 2. 3. 4. 5. 6. 7. 8. 9.
D60701-36
Open a web browser and log in to the SafeCom Device Server (2.3.1). Click Device server in the menu and select the device from which the SafeCom Go solution must be uninstalled. Click the Delete icon in the top menu to uninstall. Click Save. Open the device web page and log in (2.8.1). Click the Security tab and then Access Control in the menu to the left. Check the general Device Guest checkbox to make sure that no yellow pad lock symbols appears in the list. This means that access again is granted to all applications. Verify that no Sign In Methods are set to SafeCom. Click Apply at the bottom of the web page.
51
2 SafeCom Go HP - Device Server
2.10
HP OPS installation HP OPS (OXPd Professional Services) is essentially a web server with some HPspecific functionality communicating over SSL. Since the communication is encrypted, the HP OPS CA certificate needs to be imported into any device that talks to the HP OPS. This is a hard requirement; the device does not talk to an untrusted HP OPS server. An HP OPS server must be configured on the device before Pull Print can be installed. You can install HP OPS either manually, or allow the Device Server to handle the setup of the device if certain files are provided. Changing either the HP OPS CA certificate or the HP OPS server’s IP address or host name necessitates a new setup. As the OPS bundle is a part of the Device Server installation, you need to add --installOPS as a parameter for running the Device Server installer. Note: Running the HP OPS installation requires Microsoft .NET 4.0. The installer will also ask you to specify an administrative OPS password, which will be used from that point onwards.
2.11
Partial Disk Clean on FutureSmart devices To remove the SafeCom Go solution from the device, first perform a partial disk clean. To perform a partial disk clean: 1.
Delete the device from the SafeCom Device Server where the device is added. The device must be in the idle state in order for the deletion to be performed correctly. Note: If the device is configured to another server, click the Reconfigure Device to force a reconfiguration of the device to your server.
2. 3. 4. 5. 6. 7. 8.
D60701-36
Turn off the device. When turning on the device again, enter BIOS break-in mode by pressing the orange Cancel button when all 3 LED's light up at the same time. Note that the LED's only light up together very briefly. Browse down to the Administrator option by pressing 9 twice, and select it by pressing 6. Browse down to Partial Clean by pressing 9 twice, and select it by pressing 6. Press 6 to perform the partial clean. The prompt then returns to the Administrator menu. Press 5 to go back a step in the menu. Browse to Continue and press 6. After the partial clean turn the printer off and then on again.
52
2 SafeCom Go HP - Device Server
2.11.1 Partial Disk Clean on M525 and M575 To remove the SafeCom Go solution from the device, first perform a partial disk clean. To perform a partial disk clean: 1.
Delete the device from the SafeCom Device Server where the device is added. The device must be in the idle state in order for the deletion to be performed correctly. Note: If the device is configured to another server, click the Reconfigure Device to force a reconfiguration of the device to your server.
2. 3. 4. 5. 6.
D60701-36
Turn off the device. Turn the device back on again. Tap the HP icon when it appears. When the next HP icon appears, tap it as soon as the device starts counting (for example 1/8) to enter the Administrator menu. Follow steps 5 through 8 as describedin 2.11 Partial Disk Clean on FutureSmart devices.
53
2 SafeCom Go HP - Device Server
2.12
SafeCom Go HP device trace facility Note: Use the SafeCom trace facility only if SafeCom Support instructs you to do so. Used for troubleshooting, the SafeCom trace facility is enabled through the Configuration web page: 1. 2. 3. 4.
Open the device web page and log in (2.8.1). Click the General tab, and then click SafeCom in the menu to the left. If the log is disabled, click the Enable button to the right. To save the log, click Show complete log, select the log information and copy it into a *.txt file and save it.
Alternatively, enable the trace facility through the SafeCom Device Server: 1. 2. 3.
Open the SafeCom Device Server and log in (2.3.1). Select a device in the device server pane and make sure that the checkbox Logging enabled at the bottom of the page is selected. Click Save.
In order to see the trace files generated by the Device Server: 1.
Go to the destination folder for the log files: The default installation folder is: C:\Program Files\ SafeCom\SafeCom Device Server\logs On Windows 64-bit: C:\Program Files (x86)\ SafeCom\SafeCom Device Server\logs
2.
If you need to send the log files, make sure to save and send the folder logs as a compressed/zipped folder.
You can configure the size of the trace files as well as how many are generated. 1.
Browse to the config.ini file: C:\Program Files\ SafeCom\SafeCom Device Server\equinox\config.ini On Windows 64-bit: C:\Program Files (x86)\ SafeCom\SafeCom Device Server\equinox\config.ini
D60701-36
54
2 SafeCom Go HP - Device Server
2.
Double-click the config.ini file. In the open file, scroll to the bottom and add:
deviceserver.trace.file.size – to configure file size. Size is written as a number with an optional qualifier. For example: ten is 10 bytes, ten kilobytes is 10KB, ten megabytes is 10MB, and one gigabyte is 1GB.
deviceserver.trace.file.count – to configure how many trace files are generated. Enter the number of files you want to generate as a number.
After configuring the trace files restart the SafeCom service.
D60701-36
55
3 SafeCom Go HP
3
SafeCom Go HP
3.1
Overview Make sure the SafeCom G4 Server software installation has been completed as described in SafeCom documentation, for example the SafeCom Smart Printing Administrator’s Quick Guide D10600. 1. 2.
3.2
SafeCom Go HP hardware installation (3.2) SafeCom Go HP software installation (3.3)
SafeCom Go HP hardware installation This section is only relevant if users will log in by card. Otherwise proceed to installation of the SafeCom Go HP software (3.3). Note: ID devices require unique ID Device Licenses. SafeCom ID devices come with ID device licenses, whereas ID device licenses for 3rd party ID devices must be purchased separately. If user will log in by card then install as described below:
A USB ID Device was supplied Connect the SafeCom ID Device directly to the external USB. The USB port may be covered by sticker that has to be removed first. On some devices the USB port is next to the network port. Proceed to section 3.3 on page 61.
A USB ID Kit and USB ID Device was supplied The installation of the SafeCom HP USB Key, the SafeCom HP USB ID Kit and SafeCom ID Device is covered in section 3.2.1 on page 57.
Hardware integration pocket with supplied embedded ID device This is relevant for CM3530 MFP and P3015. The installation of embedded ID device in hardware integration pocket is covered in section 3.2.2 on page 58.
An FMC ID Kit was supplied The installation of the SafeCom Go HP Flash Memory Card, the SafeCom HP FMC ID Kit, SafeCom ID Device and external power supply is covered in section 3.2.3 on page 60.
USB ID Kit
D60701-36
FMC ID Kit
56
3 SafeCom Go HP
3.2.1
SafeCom HP USB ID Kit installation For more detailed instructions refer to SafeCom Go HP Hardware Quick Guide D10702. The SafeCom HP USB installation can be simplified depending on the capabilities of the device and if a SafeCom ID Device (card reader) is required to log in users.
The device is equipped with a hard disk (incl. HDD). You may skip step 3 (SafeCom HP USB Key installation) as the SafeCom Go HP software can be loaded onto and run from the device’s hard disk.
The device has an external USB port labeled ACC. You may skip step 4 and 5 (SafeCom HP USB ID Kit installation) and connect the SafeCom ID Device directly to the device’s external USB port.
Install the SafeCom HP USB Key: 1. 2. 3.
Turn the device off and disconnect all power and interface cables. Get access to the device’s formatter board as described in the device’s manual. Insert the SafeCom HP USB Key into an available internal USB port.
Install SafeCom HP USB ID Kit (additional step 3a and 3b): 4.
5. 6.
Remove metal plate that covers empty EIO slot and slide the SafeCom HP USB ID Kit into the EIO slot. If an HP Jetdirect network card occupies an EIO slot you may replace the Jetdirect bracket with the SafeCom HP USB ID Kit bracket. Use the supplied screwdriver with Torx 8 bit. Connect the ID Kit’s USB cable to the device’s internal USB port. Reverse the procedure you used in step 2 to get access to the device’s formatter board. In other words reassemble the device.
Install SafeCom ID Device (additional step 4a): 7.
Connect the SafeCom ID Device to the external USB port or to the USB port on the SafeCom Go HP ID Kit. A label covering the USB port may have to be removed first. Note: With the exception of MFPs most HP printers do not support hot swap of USB devices and therefore the SafeCom ID Device must be present during power on.
8.
Plug in the power cord and connect all cables. Turn the device on.
Proceed to section 3.3 for the steps required to install the SafeCom Go HP software.
D60701-36
57
3 SafeCom Go HP
3.2.2
Embedded ID Device in Hardware Integration Pocket Items supplied:
One ID device without casing. One 12 cm mini-USB cable for mounting on the ID device. Four holders with self adhesive tape. One “Present card here” label (p/n 621010).
Installation: 1. 2.
3.
4a.
4b.
4c.
Turn the device off and disconnect all power and interface cables. Remove the cover from the hardware integration pocket as described in the device’s manual. Opening the cover can be done by inserting a metal blade at the center of the top edge of the cover. Take care not to scratch the cover or hurt yourself. Hold the ID device with the cable connector facing upwards and the antenna facing downwards. On the cable connector side place a holder in each of the four corner holes. MFP M525, MFP M575, MFP M725, MFP M775, CM3530 MFP, CM4540 MFP, M4555 MFP, and Digital Sender Flow 8500fn1: Connect the 12 cm mini-USB cable to the ID device and to the mini-USB connector in the lower right corner of the pocket. P3015: Disconnect the 12 cm mini-USB cable from the ID device. Connect the supplied 33 cm cable (p/n 344020) to the ID device and to the USB connector on the device’s motherboard. Pass the cable through the square hole in the hardware integration pocket. M551, M712: Connect the 12 cm mini-USB cable to the ID device and to the mini-USB connector in the lower right corner of the pocket. Note: For M551 the Hardware Integration Pocket is not available for the M551n.
4d
M602, and M603: Connect the card reader using the E12 USB Cable, Female, 12 cm cable (p/n 344030). Note: For the M601 there is no Hardware Integration Pocket.
D60701-36
4e.
Scanjet 7000n: Connect the card reader using the E12 USB Cable, Female, 12 cm cable (p/n 344030).
5.
Remove the tape from the four holders mounted on the ID device.
58
3 SafeCom Go HP
6.
Center and mount the ID device in the bottom of the pocket. The cable connector on the ID device should face left and downwards.
Figure 1 SafeCom ID device mounted in the hardware integration pocket. The shown ID device is SafeCom Mifare Reader. Other SafeCom ID devices may have the antenna layered in the print circuit board. 7. 8. 9. 10.
Plug in the power cord and connect all cables. Turn the device on. Verify that the LED on the ID device is on. Put the cover back on the hardware integration pocket (it can only fit one way). Remove the plastic from the “Present card here” and mount it centered on the cover of the hardware integration pocket.
Proceed to section 3.3 for the steps required to install the SafeCom Go HP software.
D60701-36
59
3 SafeCom Go HP
3.2.3
SafeCom HP FMC ID Kit installation For more detailed instructions refer to SafeCom Go HP Hardware Quick Guide D10702. Install the SafeCom HP Flash Memory Card: 1. 2. 3.
Turn the device off and disconnect all power and interface cables. Get access to the device’s formatter board as described in the device’s manual. Press the SafeCom HP Flash Memory Card straight into an available slot. Do NOT use the slot labeled FIRMWARE SLOT or SYSTEM CODE. If it does not go in easily, rotate it 180 degrees and try to insert it again.
Install SafeCom HP FMC ID Kit: 4.
5.
6.
Remove metal plate that covers empty EIO slot and slide the SafeCom HP FMC ID Kit into the EIO slot. If an HP Jetdirect network card occupies an EIO slot you may replace the Jetdirect bracket with the SafeCom HP FMC ID Kit bracket. Use the supplied screwdriver with Torx 8 bit. Connect the white female connector at the end of the cable to the corresponding male 8-pin connector on the SafeCom HP Flash Memory Card. It only fits in one way. Reverse the procedure you used in step 2 to get access to the device’s formatter board. In other words reassemble the device.
Install SafeCom ID Device: 7. 8.
Connect SafeCom ID Device to the serial port of the SafeCom HP ID Kit. Connect the external power supply (5V, 1.0A) to the SafeCom HP ID Kit.
9.
Plug in the power cord and connect all cables. Turn the device on.
Proceed to section 3.3 for the steps required to install the SafeCom Go HP software.
D60701-36
60
3 SafeCom Go HP
3.3
SafeCom Go HP software installation
3.3.1
On FutureSmart devices (3.3.1) On non-FutureSmart devices (3.3.2)
Software installation on FutureSmart devices Note: If the FutureSmart device ran with SafeCom Device Server make sure the SafeCom Device Server no longer references the device, and perform a partial disk clean on the FutureSmart device (1.1) before proceeding. To install SafeCom software on FutureSmart devices you need to: 1. 2. 3.
Install software via Solution Installer (step 1-7). Add device in SafeCom Administrator (step 8-14). On MFPs configure Administrator Password and HP Quota Service (step 15-24).
SafeCom Go HP for FutureSmart devices is installed via the HP Solution Installer from the device web page. 1. 2. 3. 4. 5. 6. 7.
Get and download the SafeCom Go HP *.b95 file. Make sure the device is powered on and ready. Open the device in a web browser by entering the IP address in the address field. Sign in using the device login and password. If password is not set, set it (3.6.6). Click the General tab and then Solution Installer. Under Install New Solution, click Browse to browse to the location of the SafeCom Go HP *.b95 file. Click Install.
The message "Receiving upgrade" appears on the device and when installation is completed successfully the message on the device says "Ready". 8. 9. 10. 11.
Make sure the device is powered on and ready. Start SafeCom Administrator and log in to the server. Invoke the Add device function from the A) Devices menu, B) System overview or C) SafeCom Assistant as part of step 2 Add a SafeCom Pull Printer. Enter the Device address (hostname or IP address). Click Next. Device address:
12. 13. 14.
D60701-36
Information is retrieved from the device to establish the type of device. Click Next. On the Settings tab specify the properties of the device (Duplex supported and Color supported). Click Add to register the device and save it in the database.
61
3 SafeCom Go HP
The remaining steps are only required for MFPs and not for printers. 15. 16. 17. 18.
19.
Open the device in a web browser by entering the IP address in the address field. Sign in using the device login and password. Click the General tab and then click SafeCom to open the Configuration web page (3.5.3). Under Device, make sure to specify the Administrator password for the device. The password must be the same as the one used to sign in to the printer. The Pull Print icon will not appear unless correct password is specified. Click Apply.
Connect to quota server: Tip: With SafeCom Go HP version S89 nnn.050*13 and S95 nnn.050*13 the quota server is set up automatically. 20. 21.
Click the General tab, and then Quota and Statistics Services in the left hand menu. In the Quota Server URL field enter exactly this URL: http://127.0.0.1:5744/hp/device/dk.safecom.hp.webservice.JSWebEntryPoint?quota
22. 23.
Check the Connect this device to a Quota server. Click Apply at the bottom of the web page.
SafeCom Go HP is now installed and configured in the device. You can proceed and use the SafeCom-enabled device to collect your documents.
D60701-36
62
3 SafeCom Go HP
3.3.2
Send SafeCom Go HP (*.b49) and (*.b89) files Note: On HP LaserJet CM8050 MFP and CM8060 MFP you must first disable encryption (3.6.5). 1. 2. 3. 4.
Make sure the device is powered on and ready. Start SafeCom Administrator and log in to the server. Invoke the Add device function from the A) Devices menu, B) System overview or C) SafeCom Assistant as part of step 2 Add a SafeCom Pull Printer. Enter the Device address (hostname or IP address). Click Next. Device address:
5. 6. 7. 8. 9.
Information is retrieved from the device to establish the type of device. Click Next. On the Settings tab specify the properties of the device (Duplex supported and Color supported). Click Add to register the device and save it in the database. Click Send to send the SafeCom Go HP Loader file (*.b49) to the device. If file is not present you need to get the file first (3.6.1). The Device authorization dialog appears. If no device password (3.6.6) is set the dialog will allow you to enter the device Password. Next you are asked to enter Username admin and the device Password. Password:
10. 11. 12.
Click Close when the download is completed. Click Send to send the SafeCom Go HP software file (*.b89) to the device. Click Close when the download is completed. The device restarts and after a few minutes the device’s control panel will say Ready. After another 2-7 minutes (depending on model) the control panel will say Loading SafeCom for 1-2 minutes.
Note: The HP LaserJet CM8050 MFP and CM8060 MFP require additional setup in regards to Sign In Method (3.3.3) and Send to E-mail (3.3.4). SafeCom Go HP is now installed and configured in the device. You can proceed and use the SafeCom-enabled device to collect your documents.
D60701-36
63
3 SafeCom Go HP
3.3.3
Control Device Sign in CM8050 MFP and CM8060 MFP SafeCom as Sign In Method: 1. 2. 3. 4. 5. 6. 7. 8.
Open the device’s web page. Click the Settings tab. Click Device Sign In on the menu. Click the Sign In Methods tab. Scroll to Other Available Sign In Methods at the bottom of the web page and check SafeCom. Click Apply. Select SafeCom as Default Sign In Method at the device. Click Apply.
Custom Access Control: 9. 10. 11. 12. 13. 14. 15.
Open the device’s web page. Click the Settings tab. Click Device Sign In on the menu. Click the Device Access tab. Scroll to Access Control Level for Device Functions. Check Custom Access Control and click Define Custom. Check the applications you wish SafeCom to control and remember to also check these under MFP authentication on the SafeCom Configuration web page (3.5.3). See table below. Device Sign In > Device Access > Custom Access Control Administration application Copy application Job Status Job Storage application E-mail application Fax application Network Folder application Supply Status application Document Capture application SafeCom Pull Print
16.
D60701-36
SafeCom> Configuration MFP authentication Copy E-mail Fax Folder Pull Print
If the Default Sign In Method at the device is not SafeCom then change the Default Sign In Method from Default to SafeCom for each application that is to be controlled by SafeCom.
64
3 SafeCom Go HP
3.3.4
3.4
Send to E-mail on CM8050 MFP and CM8060 MFP 1. 2. 3.
Open the Configuration web page (3.5.3). Check E-mail in MFP authentication. Click Apply.
4. 5. 6. 7. 8.
Click the Settings tab. Click Device Sign In on the menu. Click the Device Access tab. Scroll to Access Control Level for Device Functions. Check Custom Access Control and click Define Custom. Check E-mail application.
9. 10. 11. 12.
Click the Digital Sending tab. Click E-mail Setup on the menu. Select one of the Address Field Control options. Click Apply.
Deploy SafeCom Go HP on multiple devices This section covers how to deploy SafeCom Go on multiple HP devices. With SafeCom Device Utility it is possible to load SafeCom device software onto devices as part of preparing devices for a staged roll-out. It does not require SafeCom server software and databases to be running and it will not do any registration of devices.
3.4.1
Create a device configuration file The device configuration file is created with custom settings using the SafeCom tool GoBuild. To open and configure a device configuration file: 1.
Download and unzip the SafeCom GoBuild package to your local C: drive. Note: SafeCom GoBuild can be downloaded from the SafeCom website.
2. 3. 4.
Execute the gobuild.exe, and click File and Open. Select the file configuration_mfp.xml and click Open. Locate and change the appropriate lines to configure the settings as required. Note: Do not change port 7500.
5.
Save the configuration file.
To generate a compiled configuration file: 6.
D60701-36
Open the file gobuild.xml.
65
3 SafeCom Go HP
7.
Edit the placement in the tags