Home

HP Access Control Getting Started Guide

1. Click the Enable print activity log checkbox to enable a list of all jobs printed with IPM rules The Print Activity Log can be viewed in the IPM tile gt Print activity log tab Figure 4 37 Print activity log Print activity Enable print activity log Delete log after 30 day s Section4 10 IPMtab 25 26 Enter the parameters to configure the Notification Desktop Client The Notification Desktop Client is a light client application that allows notifications such as defined printing costs to be sent from the server to user desktops Figure 4 38 Notification desktop client Title O Named pipe Desktop notification client e Direct TCP port Notification 50101 Opt in Opt out 50102 Machine name The Title field displays the default title of the notification window when the window displays on client desktops If you want to change the title of the notification window type a new title in the Title field Select Named pipe or Direct TCP port as the communication method between the server and client desktops according on your network environment ES NOTE Ifthe TCP port is different than the default port select Direct TCP port ES NOTE Ifthe Opt in Opt out rule is enabled in IPM select Direct TCP port In the Machine name field type the DNS name or IP address of a user desktop to test the connection between the server and the desktop Click the Test button Use the cost per page feature to
2. Prerequisites e Agent and Secure Pull Print Express must be installed on the server e On Windows Server 2003 make sure the OPS service is started with a domain account e Make sure the Officejet Pro device administrator password matches the device administrator name and password in the Settings tile gt Device tab e Make sure the correct OPS certificate displays in the Certificate field in the Settings tile gt Device tab Follow the steps below 1 Select the device s from the device list then click Configure Figure 5 19 OfficeJet configure NPT EDESE HP Laserjet P3005 NPITOACST HP Laserjet P3010 Series HPB97BL7 a 251 ow Printer NAS TAGET ELE HE14D080 HP Officejet Pro d7 dn MFP CH2A8L7P025 MP14B09F HP Officejet Pro 55 dw Printer CM28L7H785 0 0 0 78 al 3d devicels am AAA AA stand Configura ks GE EE EE EE EE EE Re RR RR Re RR 2 Inthe Configure window select the following components e Select Pull printing to enable the Secure Pull Print Express app button e Select Authentication to enable IRM authentication e Select Authorization to enable IRM rights management 3 Click OK 5 8 1 Unregister an Officejet Pro printer If you unregister an Officejet Pro printer from the OPS server no third party applications will work To unregister an Officejet Pro printer from an OPS server follow the steps below Section 5 8 Configure components on HP Officejet Pro printers 41 42 1 Open a c
3. 7 HP Access Control HP AC Getting Started Guide O Copyright 2014 Hewlett Packard Development Company L P Microsoft Windows and Windows NT are U S registered trademarks of Microsoft Corporation July 2014 Confidential computer software Valid license from HP required for possession use or copying Consistent with FAR 12 211 and 12 212 Commercial Computer Software Computer Software Documentation and Technical Data for Commercial Items are licensed to the U S Government under vendor s standard commercial license The information contained herein is subject to change without notice The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services Nothing herein should be construed as constituting an additional warranty HP shall not be liable for technical or editorial errors or omissions contained herein Table of contents 1 ERO UE IO tira 1 A ra EE N AE EE EA EE N 2 A ew ee nd EE EA E EE S ees 4 A Ann en A 5 MAD A DASE oe EA ER EE EE EE OE 5 A e DEVICE EE EE OE OE OE ER EE EE HE RO EE 6 ENUM PAD APA EE RE LO EE RE EE ER EE OO rd 9 AUS oo 11 AS PPETI aye scene EE EE EO EE EE 15 di PP Eiiterprise HD as Ne ee N N Se EO Ee Ee n dee N Ge A A 17 Io o EE EE EO EA EE 21 AREE aE HD es n A ee Ge GR en EE n ei ee EG Dee 22 AO RES RUE CAD GE OR EE LE EE RE OE EE N IE 24 o o In 25 A o A O O In OR ET EE 28 SA aaa EE sw ce
4. installation folder C Program Files Hewlett Packard HP Access Contolera k Use the Devices tile to install Lexmark installation files in Lexmark printers In the IRM quota web service section select features you want to enable Figure 4 33 IRM quota web service IRM quesa web service LI Enable quota tor copies O Skip quota control if network failure Message CC OSE Error message Click the Enable quota for copies checkbox to allow the IRM quota web service to count user quotas for copies When a user uses the copy function at a multi function device the web service retrieves from Job Accounting the number of remaining copies allowed for the user The web service then communicates with the device to notify the user that he or she has reached his or her quota limit Click the Skip quota control if network failure checkbox to allow users to print after the server loses connection to the IRM quota web service If this feature is not enabled and there is a network failure then quotas cannot be determined and all printing stops In the Message field type a custom message to display on the front panel of the device when a user reaches his or her quota limit In the Error message field type a custom message to display on the front panel of the device when there is a communication error with the IRM quota web service Section 4 8 Agenttab 23 4 9 Print server tab 24 Figure 4 34 Print server tab Print server
5. Drag and drop items in the list to change the order In the Email section click the Process email attachment only checkbox if you want email attachments not email bodies to be processed as pull print jobs This allows users to view their email attachments as pull print jobs in their stored jobs folder Figure 4 21 Email section Email _ Process email attachments only Email jobs must use the settings and features such as color or duplex settings of a printer before they can be processed as pull print jobs Click the dropdown list to select an installed printer with the features you want to apply to email jobs The printer must be a local printer with a PCL5 PCL6 or PS print driver 29 7 IMPORTANT If the Service not started with a domain account message displays in the Email section you must restart the HP AC SPPE Mail service with a domain account To restart the service with a domain account go to Administrative Tools gt Services Right click the HP AC SPPE Mail service then click Properties Under the Log On tab select This account and enter the credentials of a domain account Click OK Restart the HP AC SPPE Mail service In the Job accounting section select the Enable tracking of purged jobs checkbox if you want to track expired pull print jobs in Job Accounting Figure 4 22 Job Accounting Job accounting x Enable tracking of purged jobs When this box is checked an XML file is created fo
6. fa Peri montor L Gout byte encoding Finit pinati e Dee Ean ype ry Pride precio O Ls Encryption Samp BEBEkNG 0O Track copies _ Track digital sending Print server qucsa wel LEDs _ Skip guara central d necwark Taiere End Ler noticia E NOTE The Print Server tab displays if the Job Accounting Print Server is installed In the Print server tracking section select the method to gather tracking data e Port monitor creates a new port monitor for printers This is the preferred method to gather tracking data o Print processor replaces the existing print processor with the Job Accounting print processor This method may not work with all printer drivers In the Print server quota web service section click to enable features of the quota web service e Click the Skip quota control if network failure checkbox to allow users to print after the server loses connection to the web service If this feature is not enabled and there is a network failure then quotas cannot be determined and all printing stops e Click the End user notification checkbox to enable notifications on client workstations of remaining user quotas In the Snmp tracking section click to enable features e Click the Track copies checkbox to enable tracking of copies at multi function printers For more information see the HP Access Control HP AC Agent Admin Guide eo Click the Track digital sending checkbox to enable tracking of digital
7. 5 7 IP range window Start 10 0 0 1 End 10 0 0 255 Clear The progress of the scan displays in the status section at the bottom and device data appears in the device list Section 5 2 Scan the network for XT devices 33 5 3 Manually add a device 1 Inthe IP field type the IP address of a device you want to add Figure 5 8 Add devices 2 Click Add 5 4 Delete a device from the device list 1 Select the device s from the device list 2 Press the Delete key Then click OK to confirm the deletion 5 5 Import Export device data To export device data to a CSV file follow the steps below 1 Goto the Devices menu and select Export to CSV 2 Browse to a save location then click Save To import a list of IP addresses host names in ASCII format follow the steps below P IMPORTANT Inthe TXT file each device IP address must be listed on a separate line 1 Go to the Devices menu and select Import ASCII file 2 Browse to the location of the TXT file then click Open To import device data from a CSV file that was exported from Web Jetadmin follow the steps below ly IMPORTANT Inthe CSV file each device must be listed on a separate line 1 Goto the Devices menu and select Import WJA file 2 Browse to the location of the exported CSV file then click Open 5 6 Organize and manage devices If you want to organize devices by groups follow the steps below 1 Right click the HPAC device group then click
8. Access Control client setup Print client to the client computer then run the Print Client setup file 2 Follow the instructions in the setup wizard When prompted enter the name or IP address of the HP AC server with IPM and or Job Accounting installed Click Next Figure 8 1 HP AC Print Client connection ig HP Access Control Print Client y aj xj HP Access Control Print Client MA HP Access Control server name fs ervernamal 62 Chapter 8 HP Access Control HP AC Print Client 4 On the Configuration screen select which components you want to configure on installed printers Select IPM to apply the IPM rules from the HP AC server to installed printers on the client Select Quota to apply quota rules from the HP AC server to installed printers on the client Click Next Figure 8 2 HP AC Print Client configuration IE HP Access Control Print Client xj Configuration GR it Select configuration After the installation is complete click Close 63
9. Add Give the new group a unique name 34 Chapter5 Devices tile Figure 5 9 Add device groups Devices Help 2 Click and drag devices from the device list to the new group name This moves the device data from the HPAC group to the new group X TIP Create multiple groups to better organize your printer environment For example create a group for single function printers named SFPs to manage the installation and configuration of only single function printers If you want to better organize the information displayed in the device list click and drag column headings to the Drag and drop columns here area Figure 5 10 Group devices Name f Serial Model HP Laserjet P3005 2 Items 10 0 0 133 NPIDGASAF LNO1POO2 9 F128 2013 12 10 0 0 191 NPITEDESE CNDIR65699 7 24 2013 122 Model HP LaserJet 600 M605 2 Items Model Canon iR ADV C5030 61 05 2 Items XX TIP Drag multiple columns to the drag and drop area for better organization Rearrange the order of the columns from left to right to change the order of information displayed Click the filter icon in any column to sort or filter device data Section 5 6 Organize and manage devices 35 Figure 5 11 Filter devices ip T Name y 10 96 140 l Sort A toZ 10 96 140 Z SortZtoA 10 0 0 28 SS 10 0 0 29 10 0 0 75 10 0 0 61 10 0 0 12 10 0 0 129 10 0 0 133 10 0 0 122 Clear filter Text filters Select All i 10 0 0 106 w 10 0 0 118 10 0
10. Change Authority 60 seconds Up to 256 characters hy Card Authentication Approved Card Front Panel Operation Authentication Approved Enable 3 On the device web page select System Settings followed by Operation Settings followed by Home Screen Settings a Select the Image tab followed by one of the Not Set links Chapter 5 Devices tile Figure 5 25 Home screen settings Y User Name Adrumstrator LogoutiL Home Screen Settings HP Color MFP S962dn Update R e Top Paga tem imaga gt Status Background Image Default Address Book Change C Document Operations User Control IT System Settings e Total Count E Default Settings List Pint Usar Paper Tray Settings e Paper Type Registration ies Printer Condition Settings eUSB Device Chock ma Operation Settings gt r Keyboard Template Not Set Setting Customize Key Setting Mat Set Not Set Not Set Hot Set Hat Set DO j GA Ai la Bab Pa h T Back to the Top on This Page Al e Home Screen Settings Update R Devce Control b Onthe Registration screen specify the name of the image you wish to associate with the Top Level MFP panel for the application The HP AC icon named icon48x44 png is located on the HP AC server in the C Program Files Hewlett Packard HP Access Control DPR folder Click Submit U Figure 5 26 Home screen registration Ap User Name Administrato
11. Control HP AC log This makes it easy to check if your HP Access Control HP AC components are up to date and view valuable information about your server such as hard drive space available Click Help gt About to view copyright information about HP Access Control HP AC Figure 7 1 Server Information tile Seras mammalian Memory 3 51 Gib 083 41 Mercal NEE Dichos C 105 39 GE 617 72 G ula NEE Drive 0 46 57 50 OES GP ovslatiel NN In the Applications section view the list of installed components and version numbers The Version column lists the versions of the components installed on your server In the Server Information section the memory and hard drive storage of the server displays Use this information to manage your storage and memory space In the Log mode section click the Activate log mode checkbox to enable the log to be created The log tracks all activity and changes within HP Access Control HP AC Click View log file to open the log 61 8 HP Access Control HP AC Print Client The HP AC Print Client can be installed on client computers to automatically configure installed printers to use IPM rules and Quota The HP AC server requires IPM and or Job Accounting to be installed The HP AC Print Client applies to all currently installed TCP IP and LPD printers on the client computer Follow the steps below 1 Copy the Print Client setup file from the server located in C Program Files Hewlett Packard HP
12. Enterprisetab 19 20 Use device IP address When enabled this checkbox allows the spooler to identify the printer via IP address instead of host name in case the host name has changed and a printer has not been reconfigured It is recommended that printers have fixed IP addresses Show local and remote jobs When enabled this checkbox allows for pull print queues from all SPP Enterprise servers to automatically display on a device front panel after authentication If this is disabled the user will need to manually select the Remote Jobs button at the front panel to view all pull print queues QR Code Enable this checkbox if you want a QR code to display on the front panel of MFPs This allows users that have the HP Mobile Release app to identify the printer for mobile pull printing Figure 4 26 Options Options Protocol TCPIP SOCK T x Enable tracking of purged jobs TCP IP API Fort 3501 TCP IP LPO Port 315 TCP IP IPP Port 631 x Use device IP address Show local and remote jobs x OR code Edit the following settings in the Email section Process email attachments only Enable this checkbox if you want email attachments not email bodies to be processed as pull print jobs This allows users to view their email attachments as pull print jobs in their stored jobs folder Printer dropdown menu This must be a pull print queue created locally on the server This must use the settings and features such a
13. LEXMARK Address 10 96 8 81 Contact Alar Hehresh Location Solutions System Network License Device Status Authentication Copy Printer Settings Information Configure License Settings o URL hip meals 3A7 Irsimc ong A N Import Expon Restore Defaults Reset Apply Links amp Index Status Click Apply to save settings Applications Order Supplies 7 Repeat this process for the Card Enroll application 5 10 3 Lexmark device security settings Configuration of the Lexmark security settings allows the AC server to control what on device applications a user has access to ES NOTE Since setting up security on a device is a lengthy process it is recommended that system administrators look into device cloning and other administration tools available from Lexmark ES NOTE If users encounter authorization problems users will have to logout and re authenticate This issue occurs only when a user authenticates and is properly authorized in one application then attempts to access another application Section 5 10 Install and configure components on Lexmark devices 53 54 e le gt Ad Py 10 11 12 13 In the Devices tile right click the Lexmark printer and select Go to printer ews On the printer admin pages select Settings Select Security then select Security Setup If you want to use Card Enroll select Active Directory to configure based on your environment An HTTPS
14. OXPd 1 6 on HP non FutureSmart LaserJet multi function printers This is to allow the HP AC Express button to display on the front panel for pull printing If OXPd 1 6 is not enabled on the device pull printing cannot be configured and a OXPd 1 6 is not enabled message displays The Enable OXPd 1 6 and reboot device menu item displays even if OXPd 1 6 is already enabled on the device Figure 5 4 QR code NPICBSOBF 31 32 5 1 Scan the network for printers To scan the network for single function printers multi function devices and XT devices the following is required e Printers and devices must be turned on and connected to the network e A device administrator user name and password must be entered in the Settings tile gt Device tab In the Devices tile go to the Devices menu and select Snmp discovery or IP range Devices Help Snmp discovery IP range Snmp discovery XT IP range XT import ASCII file Import WJA file _ Export to SV e Snmp discovery sends a broadcast over the network and discovers available devices e P range scans for devices within a selected range of IP addresses In the IP Range window enter IP addresses in the Start and End fields Then click Start to scan the network Figure 5 5 IP range Start 10 0 0 1 X TIP Toscan multiple IP ranges at once enter an IP range in the Start and End fields then click Add Add multiple IP ranges to the list Click Save to sa
15. asper Authentication and access control i Enable anonymous access and edit the authentication methods for this resource Grant or deny access to this resource using IP addresses or Internet domain names The Web Server Certificate Wizard opens Select Assign an existing certificate Click Next Figure 5 15 Assign an existing certificate me Certificate Wizard Server Certificate These are the methods for assigning a certificate to a Web site Select the method you want bo use fos the web site E Create a new certificate Assign an existing cerldicate Import a cesificate from a Key Manager backup fle E Import a certificate from a pi file Copy o Move a certificate from a remote server ste to this site Section 5 8 Configure components on HP Officejet Pro printers 39 40 5 Select the OPS server certificate and click Next Click Finish at the end Figure 5 16 Select certificate IIS Certificate Wizard Available Certificates The certificates you can use for your Web server are listed below 10 0 1 101 OPS 10 0 1 101 LA IIS 7 or newer 1 Goto Administrative Tools gt Internet Information Services IIS Manager 2 Select Default Web Site and then click Bindings 3 Select https and then click Edit Figure 5 17 Edit bindings Site Bindings Chapter 5 Devices tile 4 Select the certificate from the SSL certificate dropdown menu Click OK Figure 5 18 SSL certificate Edit Site Binding
16. connection to the EWS may be required The printer may also automatically reboot in order to join the domain Select Security Template then click Add a Security Template Enter the name AC Auth or similar Select the AC Authentication setup If you want to use authorization features select Add Authorization Select AC Authentication Click Save Template If you want to use Card Enroll you must set up the Active Directory features and add an Active Directory security template The Active Directory features may also be named Kerberos depending on the printer Click Return to Security Setup Select Access Controls Set up the App Solution 1 4 to use the AC Auth security template Set up the App Solution 5 to use the Active Directory security template See the table below to determine which printers are supported Lexmark Security Name Associated AC Lexmark Application App 1 AC Express App 5 Card Enroll 5 10 4 Using the AC Lexmark applications Prerequisites An RFIDeas RDR 80583AKU card reader must be connected to the MFP if card based authentication is used AC Authentication must be installed and configured on the device Device security settings must be properly configured At a minimum an authentication method must be selected for the application you want to use The user must have a card enrolled Users can follow the steps below to use a card reader to authenticate at the MFP front panel 1 Touch
17. do NOT have any RFIDeas card readers plugged in prior to installing the software Drivers will need to be installed and on some printers the presence of the card reader will prevent the install from completing Ef NOTE Alternatively the fls packages may be installed using an anonymous FTP connection to the printer 52 Chapter 5 Devices tile 1 Inthe Devices tile select the Lexmark printer from the device list 2 Click the Install button Please wait a few minutes for the AC Lexmark Applications solution to install To check the status of the printer go to the printer s EWS The current status of the device displays in the page header If the status is Busy or Not Ready the applications are installing 5 10 2 Configure AC Lexmark Applications ES NOTE The administration pages may vary depending on the model of the Lexmark printer Configuration of the AC Lexmark Applications solution consists of pointing the AC Authentication and the Card Enroll applications to the AC server Follow the steps below 1 Inthe Devices tile right click the Lexmark printer and select Go to printer ews 2 Onthe printer admin page select Settings 3 Select Apps or Embedded Solutions depending on the firmware version installed to view the list of installed applications 4 Select the Authentication solution 5 Select Configure 6 Update the AC Server URL with the appropriate server address Click Apply EER ETA Lexmark T656
18. on the device Chapter 5 Devices tile Pi IMPORTANT Configuration at a device occurs in order starting at the top of the Configure window list This means the FDT workflow is always configured last on a device Right click a device to display a dropdown menu of possible actions Figure 5 3 Devices dropdown menu iif JEL LUT TW M NPIB73A76 HP Color Laser Jet CM473 N AS a P LaserJet 700 M712 10 0 0 10t Update selected LaserJet flow MFP MS Go to printer EWS 10 0 0 191 NPNEDESE HP LaserJet P3005 fate HALSEN UM i ars la MEN TTI ES NOTE The dropdown menu options may vary depending on the type of device and the configured components on the device e Click Go to printer EWS to go to the device s Embedded Web Server page e Click Update selected to refresh the device data e Click Test trap to test a device with the Confirmation traps component enabled e Click Reboot device to restart an XT device e Click Reset to factory settings to remove all configurations on an XT device e Click Generate OR code to create a OR code for the printer In the QR Code window OR code data selected in the Settings tile gt SPPE tab displays Print a QR code to display on single function printers if you want users to detect the printer with the HP Mobile Release mobile app For more information about HP Mobile Release see the HP Access Control HP AC Secure Pull Print Express Admin Guide e Click Enable OXPd 1 6 and reboot device to enable
19. send jobs at multi function printers For more information see the HP Access Control HP AC Agent Admin Guide In the Encoding section click the Double byte encoding checkbox to track print jobs with job names containing double byte characters In the Encryption section click the Encryption checkbox to encrypt tracking data on the print server and when data is sent to the job accounting server Chapter 4 Settings tile 4 10 IPM tab Figure 4 35 IPM tab EM wep AA _ ee Con MH DEE Leer y orang L Siia rules d network hala O doe accounting cost center gt actos Directora Pumi CDI _ Enable print activity tog Delece log after 30 day Dick no cia Cand mie O har Jae e Dieet TCP part Mdimi S010 DoE Eed 50100 Machine teste Cx ES NOTE The IPM tab displays if Intelligent Print Management IPM is installed Click the Skip rules if network failure checkbox to allow users to print after the server loses connection to the IPM web service If this feature is not enabled and there is a network failure then rules cannot be checked and all printing stops Figure 4 36 IPM web service settings Web service Server name IP Description Status WE2008 1ech com 10 936 140 12 Ok WE2003 ech cam 10 96 140 70 Ok HPAC WS 1 suppert com 10 96 141 73 Ok k E Encrypt all web communication devices O Use server name instead of P devices
20. the configuration of OPS to use the server name or the server IP address follow the steps below 1 Close the HP Access Control HP AC configuration tool 2 Navigate to the C Program Files x86 Hewlett Packard OPS config folder and open the ops cfg file in a text editor application After host enter the server IP address or servername domain com where servername is the name of the server and domainis the name of the domain Save and close the file 3 Navigate to the C Program Files Hewlett Packard HP Access Control folder and delete the OPS certificate file 4 Go to Administrative Tools gt Services and restart the OPS service Restarting the OPS service creates a new OPS certificate using the server name or server IP address 5 Open the HP Access Control HP AC configuration tool Go to the Settings tile gt Device tab and verify that the OPS certificate file name and the OPS server field contain the server name or server IP address Section 4 4 IIStab 13 14 Click Test to test the connection to the web service The Agent license service section allows you to assign a different server to handle licensing for IRM This must be done before devices are configured Enter the IP address of the server to handle licensing for IRM By default the field is populated with the IP address of the current server After making any changes click Apply Figure 4 15 Agent license service settings Agent license service IP add
21. wa EN tate nn ese pv ie sens EN EE EEN N N 29 5 1 Scan the network for printers stories latentes addict 32 5 2 Scan the network for XT device iese de Ad AA AA Ge AA Ge AG Ge 33 5 3 Manually add a device Messi 34 5 4 Delete a device from the device list ccsasrescsvsvasinancnnanesssnasessesnsnanvsnctavasnenaseusncunta vesnasttaseencnsenaneasaessannessedaseresbaels 34 5 5 Import Export device ea ae ee GE SE EEAS Pe Ge ee das 34 5 6 Organize and Manage devices ccccececccceccccecccceccescecccceccceeceececeeceeeeeseeescssscssecsscssssssessssseeseesesessesseeeeseeeeens 34 5 7 Install and configure components on HP FutureSmart and non FutureSmart devices c000ceeeee 36 5 8 Configure components on HP Officejet Pro printers oooonnnnnnnuuununacacacanacanononononononananananananananancncnnnnncnanononons 38 5 8 1 Unregister an Officejet Pro printer oocconnnonnnnnnnnanananacananononononnnnnnannnananananancnncnnnncncnnnononos 41 5 9 Configure components on HP S900 series devices ooooocccccccncncnnnnnnnononnnnnnaaanananannononcncncncncnnnnnanananananananass 43 5 9 1 Pull printing at the device mentar riadas 49 5 10 Install and configure components on Lexmark devices occccccccnonnnnnnanananananananononananonononananananananananans 50 5 10 1 Install HP Access Control HP AC Lexmark Applications oococcccononccnccnononancconononnnnacoss 52 5 10 2 Configure AC Lexmark Applications
22. 0 119 10 0 0 120 10 0 0 171 10 0 0 208 10 0 0 191 10 0 0 122 10 0 0 125 R 10 0 0 129 A 10 0 0 133 Gl 10 0 0 136 10 0 0 119 10 0 0 106 Cancel 5 7 Install and configure components on HP FutureSmart and non FutureSmart devices Prerequisites 36 e Before installing any solution on HP devices make sure the correct PRN installation file displays in the Installation file field in the Settings tile gt Agent tab e Make sure a device administrator password is set on MFPs and matches the device administrator name and password in the Settings tile gt Device tab e Onsome Non FutureSmart MFPs make sure to right click the device row and select Enable OXPd 1 6 and reboot device before configuring the device for pull printing OXPd 1 6 allows the pull printing button to display on the front panel e Make sure the printing protocol selected in the HP AC configuration tool in the Settings tile gt SPP Express or SPP Enterprise tab is enabled on the HP device in the device EWS gt Networking tab gt Other Settings page Follow the steps below 1 Select the device s from the device list Chapter 5 Devices tile 2 10 96 140 53 10 0 0 75 10 0 0 28 10 0 0 29 10 0 0 208 10 0 0 120 10 0 0 106 10 0 0 182 10 0 0 191 10 0 0 122 10 0 0 218 10 0 0 129 afk A A am Section 5 7 Install and configure components on HP FutureSmart and non FutureSmart devices Figure 5 12 Device install N A CAPRTO2
23. 1 XM5170 MX81x XM7155 XM7163 XM7170 CX41x CX51x XC2132 To verify if the applications are already installed on the MFP follow the steps below Section 5 10 Install and configure components on Lexmark devices 51 1 Open the embedded Web server EWS for the MFP and log in with the user name and password of the device 2 Select the Settings option 3 Select Apps AC Lexmark Applications version numbers are shown in the printers list of installed applications Figure 5 32 Lexmark application Rele Lexmark T656 Address 1M 9i 10 128 Contact Name Location EOM Printer Lab Sol System Network License GER Background and idle So ry a M HEIDeas RDR 30583A4K U s saasa e English Francais Suomli Pycciam pM State License Running None Required 110 002 Running None Required stopped Running None Required Stopped Running none Required Running italiano Espanol Dansk Mark Nederlands Svenska Magyar T rk e Cocky MAX EPpy el 5 10 1 Install HP Access Control HP AC Lexmark Applications P IMPORTANT Before installing the solution on Lexmark devices make sure the correct installation folder displays in the Installation folder field in the Settings tile gt Agent tab ES NOTE Lexmark printers need to have Basic secure disabled to install software remotely You may re enable security after the install has finished ES NOTE Make sure the printers
24. 31 OR COJE RR a EE ER OE IE EE 31 O HS DR EN RO ee Ge OE EE EE a deeroassaae 32 A A RE ED eed so AE ee 33 IP range WINAOW ES OE tne N ED a EG AO Ee EE OG EE N 33 Add ICC RE EG N EE N GE N DE EE ee OE Ee NG Re 34 Add d vic groups 55 iS GE GE a Ge ee ee ee ee GN a a aaa 35 Group AEVIERE ED ES AD ES e GEE De aos 35 A ss EE EN ee De N EE EG GE OR Ee nota a ius ee ee ei ER Ee De Se Oe Ee 36 Device inStall EE EE S 37 Ek ed Reel le N EE ee AA ED cies 38 Default website POPE IES ei EE DR EE dee OE N ee DE GR GE ee ee De ee Se ee cia 39 ASSIGN an existing certificate incinn EG EG ee GE Ee ee see 39 Seletttertilicate n Ee EE EE Ge Re Ge Ee ee GE EE 40 Edit bimdinds se ed E E OE S A GE E GR Ee ee ee ee EG Ee Oe GR GR EE Re Ee Ee 40 eS eS Ge 41 AR O 41 Mia a AAN A 42 CardReader SEUA dele 44 Insert cara reader DONDER RD RS EO GR a ss 44 Eardi ader r aistratiOf se ee a EE OR GE ee ke ee Ge oe ee GE De N ee ee 45 Mn A A 46 Home Sere en setting Sita a A ac 47 Horie scieenradistatl Os EE ene ia tii Ge De 47 CU 47 Standard Application SeSe DO oa 48 Standard Application registration ccccccccccccccnncncnoncnonononnncnonononanananonanonananananannnnnnnnannnnnnnnanannncnnnncncnnannnns 48 vii Figure 5 30 Figure 5 31 Figure 5 32 Figure 5 33 Figure 5 34 Figure 5 35 Figure 5 36 Figure 5 37 Figure 5 38 Figure 6 1 Figure 7 1 Figure 8 1 Figure 8 2 vill PATI Sic sce ost a A EE EE Ge bus be aati gs easiest Ge De ede 50 Lexmark appli
25. Add alias Alias Aliases 4 8 Agent tab Figure 4 30 Agent tab Agent HF radar fle brecelbacion fris E Progr arn es Wewbett Pckang ME Access Conrad mwan MPa PPL AGE ZO 20731 Surde C insiell orm A a fia ra yan Fie He beet Pacha Rda a e are ELE GREAT 0 Ai Learn TES imac aser Erro gramo Fles Hur e Farkard HE Access LansrafiLrerart EM pueta BED MET KEES C Erubde gubuk laa otters T TOR SUECA COMO ie FE Heya a Er Be ree p Om Y Apot ES NOTE The Agent tab displays if Agent is installed In the HP installation files section make sure the correct Installation and Uninstallation PRN files display Double click the text field to browse to a different location 22 Chapter 4 Settings tile Figure 4 31 HP install files HP irartallati n les Installation fie 0 C Program Files Hewlett Packard HP Access Control Famware HPAC 5PPE Agent 20130 31 dundle install p In it ho Wa m E i A 5 a CEA a Urunstallation hie C Program FlesiMewlett Packard HP Access Controli imawan HPAL SPPE Agent Use the Devices tile to install or uninstall the SPPE Agent solution in HP printers The Lexmark installation folder section displays the default folder location of Lexmark installation files Double click in the text field to browse to a different location Figure 4 32 Lexmark install Lexmark metalation folder
26. C Ey Up to 36 characters Address for Application Ul hip TY 0 0 12 HPAppsWS Default 2 Up to 12 characters Timeout in saconds 1 60 Extended Platform Display Style Full _ Expand L Fixed Size Usa Custom icon Fila Name logotaxas gf Select File Up to 200 characters Choose File No file chosen Motice The supported file types JPEG with file extensions jpeg jpg joe and Aii GIF with file extensions ad PNG with file extensions png Back to the Top on This Page dd Submit U Cancel C To register the HPAuthWS authentication application with the MFP select Application Settings followed by External Applications Settings followed by External Accounting Application Settings a b C g Select Enable in the External Account Control dropdown Select the Set Authentication Server Server 1 checkbox Select Enable in the Server 1 dropdown Specify an Application Name Specify the Address for Application UI as http serverlP HPAuthWS Default aspx where serverlP is the IP address of the server Specify the Address for Web Service as http serverlIP HPAuthWS MFPSink asmx where serverlP is the IP address of the server Figure 5 30 External accounting application settings User Hame Adriresiraior Lageutil 7 j i i j External Accounting Application Settings HP Color MFP 5962dn Submat U UpdateiR Top Paga k Status k Addmazs Book t Document Operations Amolication Mame ei Contre P e 5 P pe
27. HP14DOB3 HP14D0BD hpe B JBOX3 001BE NPID2C53B NPI155897 NPITSF76L NPITLBAGO NPITEDESE NPM9 32F NPIGEA7BB NPI741114 Ce By ET od Ur N Model HP Laser let 500 color MFP M5 75 HP Officejet Pro 4476dn MFP HP Officejet Pro X476dn MFP HP LaserJet MFP M725 HP LaserJet color flow MFP M575 HP LaserJet flow MFP M525 HP Color LaserJet M6040 MFP HP LaserJet P3005 HP Color LaserJet P5520 Series HP LaserJet MB06 hp LaserJet 4200 eg 33 devicels Serial MAAL DA907T CN28L7PO26 CN2BL7P025 MxXICOCWOY MX4CD0950CV MX3CO940N9 JPIL7CVOOB ND1R65699 CNBNFO0039 KAXXXXXXKX KXXXXXXXKX FUIAFAFAFAS Click Install to send the installation file to the device s The HP device s may reboot during the installation process Please wait for the device s to return to the Ready state Last C 12412013 1 24 2013 1124 2013 12912013 1 24 2013 1124 2013 1124 2013 7124 2013 112812013 7 24 2013 112912013 112412013 1124 2013 37 3 Select the device s from the device list then click Configure In the Configure window select each component you want to configure on the device s Click OK Figure 5 13 Configure device 12G8Y A Configure 10 0 0 87 Select which component to enable on the selected devices O Pull printing O Tracking L authentication O Authorization O Quota o Confirmation trap Workflow files lt None gt 25 7 IMPORTANT When reconfiguring the device s pla
28. Hen Shae Get community name Set community mame Trap Level Time out ma 1000 SNMP retrasa E UDP port 12 Fitter delay eres 0 Conciarent conneciona 20 Humber of conection EY NOTE The Device tab displays if DTM Device Analysis Agent or Secure Pull Print Express is installed Figure 4 4 Device settings Adminisirator wer name Pe O L Disable device ping Certificate CA Program Files Hewlett PackaediHP Atosss Corro 10 96 141 172 cer In the Device section the device administrator user name and password is reguired for communication between the server and devices This is necessary to install and configure solutions on devices Make sure the Administrator user name and password in the Device section matches the administrator user names and passwords of all the devices you want to configure Click the Disable Device Ping checkbox to not allow pinging between devices and the server and to only perform telnet communications between devices and the server By default ping is used to detect the presence of a device IP then telnet is used to verify that the device is a printer Select this checkbox if ping is disabled in your network so that only telnet will be used The Certificate field displays the OPS certificate required to configure pull printing on HP Officejet Pro printers HP OXPd Professional Services OPS brings OXPd functionality to HP Officejet Pro devices by hosting all printer configurati
29. IDeas RDR 80581AKU card reader with hardware ID VID_O0C27 amp PID_3BFA amp REV_1040 must be connected to the MFP if card based authentication is used e The user must have a card enrolled Users can follow the steps below to use a card reader to authenticate at the MFP front panel 1 Touch the AC Express application button you would like to use Figure 5 37 Xerox welcome 2 Present your proximity card at the card reader for scanning 3 Follow the on screen prompts to authenticate 4 Follow the onscreen prompts to complete the requested action Figure 5 38 Xerox documents Test Page 1 pages Test Page 1 pages Print All TT Test Page 1 pages est Page 1 pages Chapter 5 Devices tile 5 12 Configure XT devices Prerequisites Agent and Secure Pull Print Express must be installed on the server Make sure the XT device is connected to a printer and to the network If your server has a firewall make sure TCP 2000 is open to send configuration files If your server has a firewall make sure UDP 11000 port is open for device discovery Make sure the IRM authentication method is set to Card Only Make sure the IRM Proximity Reader settings and Card settings are correct Also make sure Card ID masking is enabled ES NOTE After the card type configuration changes the XT device must be rebooted or power cycled To power cycle the XT device unplug the power cord from the device and then re plug the power co
30. Lender ral sed Es BEDE rak MAS EISER Essadl suier HP AC Secure Pull Printia Emei idy r sa Ble Ef NOTE The Email tab displays if Job Accounting Device Analysis IPM Agent or Secure Pull Print Express is installed In the POP3 IMAP section enter your company s email server information if you want to allow users to email jobs for pull printing The Secure Pull Print Express email service checks for and processes emailed jobs from users Figure 4 10 POP3 IMAP settings Cone cio Les Corral ara Paired letervad eoondel 1 ES NOTE The POP3 IMAP section displays only if Secure Pull Print Express is installed In the Connection field select POP3 or IMAP as the connection method to the email server In the Server name field type the name or address of the email server you want the Secure Pull Print Express email service to check for emailed jobs from users The Server port field displays the default server port for POP3 or IMAP The default POP3 server port is 110 The default IMAP server port is 143 Click the SSL checkbox if the email server requires a secure connection If you click the SSL checkbox the Skip SSL validation checkbox displays Click Skip SLL validation to allow the service to connect to the email server via SSL without installing a valid certificate on the server In the Login and Password fields type the login name and password for access to the email server In the Interval seconds
31. OTE Before configuring make sure the device password matches the password in the Settings tile gt Device tab Configuration of the AC Xerox Applications consists of setting up Xerox Secure Access security on your device The following steps will guide you through the process 1 Se oe i In the Devices tile select the Xerox printer from the device list Click the Configure button Then select Pull printing Click OK Please wait a few seconds for the AC Xerox Applications solution to register and display on the printer Right click on the selected printer and select Go to printer ews On the printer admin pages select Index gt Login Methods Edit the Touch UI Method to use Xerox Secure Access and set any other options to validate on the device Select Save Click on the Edit action next to Xerox Secure Access Setup Select Manually Override Settings Update the Hostname with the address of the SPPE server ac company org Update the Path to the correct path of the secure access service normally XeroxAuthWS SecureAccess asmx Section 5 11 Install and configure components on Xerox devices 58 10 Change the authentication window title and description as desired and save 11 Select Index gt User Permissions to lock the Xerox Applications to only allow logged in users This step differs greatly depending on the device and firmware version 5 11 2 Using the AC Xerox Applications Prerequisites e An RF
32. Packard HP Access Control spoolroot prtr folder This printer definition file is required to allow the print queue to receive print jobs from client printers Figure 4 25 Pull print queues settings Full print gueues Queue name 06801000 AENA 060100 5 Add Delete Edit the following settings in the Options section Protocol This defines the way SPP Enterprise will communicate with the printer The choice of protocol will depend on the destination device its capabilities and the level of control and feedback required from the device TCPIP SOCK is a direct socket protocol that provides a simple direct communication channel between SPP Enterprise and the printer engine A connection is established to TCP IP port 9100 and all data sent by SPP Enterprise is passed through directly to the printer TCPIP PJL implements a bi directional communication channel with the printer engine using the PJL Printer Job Language job management language This protocol provides the most sophisticated control of print delivery including guaranteed delivery of each page to the output hopper checkpoint restart in the event of a failure and full device status information i e page jam load paper etc The default implementation delivers one document at a time and waits for all pages to be delivered to the output tray before commencing delivery of the next document While this provides the highest level of assured delivery it can introduce a d
33. SPPE web page In the Protocol field select the way SPP Express will communicate with the printer The choice of protocol will depend on the destination device its capabilities and the level of control and feedback required from the device TCPIP 9100 is a direct protocol that provides a simple direct communication channel between SPP Express and the printer engine A connection is established to TCP IP port 9100 and all data sent by SPP Express is passed through directly to the printer TCPIP LPR provides very limited feedback from devices about the success of a print request and provides no facilities for checkpoint restart of a failed request TCPIP IPPS is a secure protocol that allows SPP Express to encrypt the data stream sent to the device In the QR code section select the printer information to encode in the QR code A user can scan a QR code with a mobile device to route stored jobs to a selected printer If any parameter is selected the QR code will display on the front panel when an MFP is configured for pull printing Figure 4 20 QR code OR code x Network name iP address Email address ES NOTE The number of devices that can be configured with QR codes is unlimited But the number of devices that can be used for pull printing is limited by the number of devices in the Secure Pull Print Express license 16 Chapter 4 Settings tile X TIP The order of printer information can be rearranged in the QR code
34. a IP Configuration P Configuration s Advanced By default a pre installed sef signed printer certificate is created to identify this printer You can change this certicate to more accurately identity the printer and lo update the lengih af tamie the certificate is valid Status Installed View Wireless 807 11 Status a wireless Setup Wizard Pvt Configuration Lenificate Authority CA Cenificate a AS Configuration s Advanced HP Wireless Direct A Cori cale Auihornty LA oertif ale 15 required for sorme authentication methods For example is Status used to verify the certificate af the e mail server and to venfy the 302 1x authentication server AirPrint Issued To issuer Expires On Certificate Type Status CH DPS 10 03 11 CN OPS 10 03 11 CA CA 2003 06 06 Advanced Settings N ertificates s olz 1 Autherdr ation A Epot e impot ew Details Remove Export im Honpaur po port SNMP Chapter 5 Devices tile 5 9 Configure components on HP S900 series devices Prerequisites Make sure PIC licenses are available on the HP AC server A PIC license is required for each device to allow for walk up authentication If you want to use a front panel QR code for pull printing with a mobile device make sure to manually generate a QR code prior to configuring the device If you will be using SPP Enterprise on an HP S900 series device make sure to go to the HP AC configuration tool gt De
35. application needs to be reinstalled Figure 4 1 Settings file menu File Database tools Import setting Export setting e Click Import setting if you want to import an XML file of previously saved settings e Click Export setting if you want to save your current settings as an XML file The Database tools menu allows you to repair or backup the database of setting information in case the server or application needs to be reinstalled Information you select and enter in the Settings tile is stored in a database e Click Compact and repair database to compact the database file e Click Backup database to save the database as an SDF file 4 1 Database tab The Database tab allows you to setup or modify the connection to the SQL Server database where job accounting reports are stored Section 4 1 Database tab 5 6 Figure 4 2 Database tab Da ld bas E e Anda ay rei latipes O 50L authentication PAGO 15 Mort aa a el T Restart sereces after anale de rr pent ES NOTE The Database tab displays if HP Access Control HP AC Job Accounting is installed The Database configuration section contains the method to connect to the SQL database instance containing job accounting data The SQL Server field displays the name and instance of the SQL Server installed If you are connecting to a SQL Server on a different server make sure the name and instance of the SQL Server is correct There are two possible
36. atrons Settings Standard Application Sattings 5 External Accounting Application Settings aj User Name Admanistrator Logout L Standard Application Settings UpdateiR Application Name LIAC Express Select AIS Clear Checked K Delete 3 Add Y Back to the Top on This Page d UpdaterR From the External Application Settings select the Add button Specify the Application Name as AC Express Specify the Address for Application UI as http serverIP HPAppsWS Default aspx where serverlP is the IP address of the server On the same page select the Use Custom Icon checkbox and then select the image you wish to associate with the Print Pulling application Figure 5 29 Standard Application registration HP Color MFP 962dn Top Paga Status Address Book t Document Operations b User Control System Settings Network Settings Application Sattings Text image Printing Network Scanner Settings 5 Document Administration Function 5 Metadata Settings Extemal Applications Settings estandard Application Settings es External Accounting Application Settings USS Driver Settings a E mail Print Settings a Satting for Print from the MFPIFTP 5 Setting for Print from the MFP SMB 48 Chapter5 Devices tile UserName Admenistrater Logout L Standard Application Registration Submitili Cancel C Standard Application Registration Application Marne A
37. atus When a component is configured on a device an X displays under the Pull Printing Tracking Authentication Authorization Quota or Trap column depending on the component that is enabled 3 Device details The device details section allows you to view more information about a device and the solution installed Click the License field to view a dropdown list of components that are enabled and licensed The Location field displays location information from a FutureSmart EWS For a non FutureSmart device or XT device type information in the Location and Comment fields hit Enter then reconfigure the device The device details may vary depending on what is installed on the device 29 30 Status bar The status bar allows you to view error messages and the status of scans or configurations Right click in the status bar and click Clear to delete the log information Tracking bar The tracking bar displays data from devices configured for Confirmation Trap or from FutureSmart devices configured for Tracking Device rows in the device list may be highlighted indicating the following Yellow indicates the Agent file is installed but not configured for tracking Grey indicates the device is a XT device For more information about XT devices see the HP AC Secure Pull Print Express Admin Guide Red indicates the solution is installed but not licensed On HP non FutureSmart devices red also indicates the solution is installed but not co
38. authentication methods to connect to the job accounting database stored in SQL Server Windows authentication or SQL authentication If SQL authentication is selected make sure the SQL credentials in the User and Password fields are correct e f Windows authentication is selected make sure the LocalSystem account checkbox in the Agent configuration section is unchecked Enter the correct Windows credentials in the Domain User and Password fields The Agent configuration section contains credential fields to allow access to the Job Accounting website When the LocalSystem account checkbox is unchecked Windows credentials must be entered in the Domain User and Password fields Click the Enable IIS anonymous authentication checkbox to assign the IIS anonymous user identity to the username entered in the Domain User field This allows only the domain user to access the Job Accounting website 4 2 Device tab The Device tab allows you to setup the device administrator password setup the OPS server select tracking options and modify the SNMP connection to devices Chapter 4 Settings tile Figure 4 3 Device tab Device Adminstrator user name ET Administrator password EN O Disable device ping Dedica Certificate Ci Program Files Hewlett Packard HF Access Contro10 96 141 17 4 08 Tracking 8 Network name CO Device name DPS server OPS server hrps 110 96 141 172 8081 L Override OPS varings User ame Password
39. cate C Program FlesHeeleir Packor HP Access Corro 10 03 10 eer e Ifyou will be using Job Accounting IPM Secure Pull Print Secure Pull Print Express Secure Pull Print Enterprise or IRM go to the Settings tile gt IIS tab gt Web service section and verify the server information Click Test to test the connection Click Apply Figure 2 5 Web service setup rar haere k ZOE ieh osm Server IP p ETE LI Encrypt al web Eeu near pioi 5 Uie server name asnead af D inevices 4 3 License tile The License tile shows your server license number Activation Keys for installed components and expiration dates of licenses Figure 3 1 License tile i iey AEFAARO i EE Ta DOT A EA Tbn pi Gee ga te rn ram MAA Cc ae Het o HF lemang Lied on e eh The pr orgie ae piu to deed reed to Fe eri aportar i HPAL Situn Pai Pret Eiza HPAL ihe EFGEFSIASFTIETFOC SON 1293 Lasratos Late WZ2 Z0 13 Epuga date Activation igy 0 10 deviisi PAT POMS ET IIA RIAD ME ACELA HPSL Agent ARAL Job amp rroenting Activation bey ISREFAOOFESTOONEBSEEST BSC ISS as 61000 Ett iey MEE yrs Dep cate LE E ete dae HEEL Dari rats iniwanan tey meen BIGUISAZAND ences Jslemned MA 6 22 2013 ES NOTE Information in the License tile may vary depending on what components of HP Access Control HP AC are installed on the server E NOTE The License tile is highlighted red on the HP Access Control HP AC home sc
40. catiOn RE Gee a Ee GE GE Ged ee 52 Lexmark welcome iS 55 CNO DE A A ic satan 55 lexmark O 55 KET OX ADP ICAU ON asa 57 PCT OW CL CO MING EE SE EA EE GE o 58 Nero GOCUIMOINES RE GE N GE decid GE GE EG mesnentnete 58 PENES AE TIIE esrtas EG A EG EE EG DE EG EI GE ED ee 60 Server nformatiorn Uli EE N GER Ge Ge Ge Ee oe eg ei ed ee RR ee ee ee 61 HP AG Prat CUeME COMMECTIOMN si N GE Ge Ge Ge De RE 62 HP AG Print Elienteoniiaira Om ie OE EE EG EE GE De GE GE DE GED EE EG 63 Introduction This guide is intended for administrators with experience using Windows servers The following chapters explain how to use the HP Access Control HP AC configuration tool and introduce you to the process of configuring HP Access Control HP AC solutions on printers To open the HP Access Control HP AC configuration tool go to Start gt All Programs gt HP Access Control then click HP AC Configuration utility The HP Access Control HP AC configuration tool consists of components organized as tiles on the home screen Figure 1 1 Home screen ma HPACSPPE J IPI Device Job Analysis ia accounting Secure Pull Print Express Intelligent Print Management Scan and analysis network devices manager a IRM o Settings Mm Devices Print server Intelligent Rights View manage applications Devices installation Print queues configuration Management Ad settings Including IIS server configuration Authenticator User List Editor and SQL server Ser
41. ce an Xin a component checkbox to resend the configuration file Place a in a component checkbox to not resend the configuration file and leave the current configuration status as is Clear a component checkbox to disable the component on the device ES NOTE Toremove the solution from Non FutureSmart device select the device from the device list then click the Remove button 5 8 Configure components on HP Officejet Pro printers See the table below for supported HP OfficeJet Pro printers and firmware Table 5 1 Supported HP OfficeJet Pro printers and firmware Supported HP OfficeJet Pro printer Minimum firmware versions HP Officejet Pro 251 EVP1CN3327DR HP Officejet Pro 276 MFP FRP1CN3327DR HP Officejet Pro X476 MFP and X576 MFP LNP1CN1327DR HP Officejet Pro X551 BZP1CN1327DR Before configuring an HP Officejet Pro printer from Windows Server 2003 using IIS 6 IIS 7 or newer the SSL certificate must be manually selected in IIS Follow the steps below IIS 6 38 Chapter5 Devices tile Go to Administrative Tools gt Internet Information Services IIS Manager Select Default Web Site and right click to open Properties In the Properties window select the Directory Security tab and then click Server Certificate Figure 5 14 Default website properties Default Web Site Properties lt lt lt lt IRA Web Site Performance ISAPIFiters Home Dwectory Documents Directory Security HTTP Headers CustomErorss
42. e user grouping information user grouping is setup in the Settings tile gt IPM tab gt User grouping section Windows credentials must be entered in the Login and Password fields Figure 4 17 IPM authentication FM sit Ferl dd ao 15 ARE Ao MALA er ej Chip Chapter 4 Settings tile IIS anonymous authentication means the IIS anonymous user identity will be assigned to the user name entered in the Login field This allows only the domain user to access the IPM web service Click Apply then click Restart IIS to clear previous user grouping cache information 4 5 SPPE tab The SPPE tab contains settings for the Secure Pull Print Express component Figure 4 18 SPPE settings SPPE Stored jobs folder EA Program Files Hewlett Packard HP Access Control spool Domain Login Password Sort list of jobs by Date submitted O Document name Pull printing Protocol TCPIP 9100 OR code Email Process email attachments only x Network name Email address Job accounting x Enable tracking of purged jobs ES NOTE The SPPE tab displays if Secure Pull Print Express is installed The Clear cache button deletes cached information linking a user s login with the user s email address When a user logs in at a device information is retrieved from Active Directory including the user s email address The user name and email address are then stored in the cache to gather the user s printed jobs and email
43. ed jobs under one user folder In the Pull Printing section change the settings of stored jobs Section 4 5 SPPEtab 15 Figure 4 19 Pull Printing settings Stored jobs folder Program Files Hewlett Packard HP Access Contral spool Domain Login Pull printing Password sort list of jobs by Date submitted O Document name Protocol TCPIP 9100 In the Job expires after fields select when you want jobs to expire This can be used to manage the amount of stored jobs on the server to reduce job storage space The default expiration time is 24 hours The Stored jobs folder field displays the default location for stored pull print jobs Double click the text field to browse to a different folder location If you want to store jobs in a different folder on the network you must have write access to the folder In the Domain Login and Password fields type the credentials that have write access to the network folder Wa IMPORTANT To pull print using a shared network folder the same service account credentials entered in the Domain Login field must be used for read write access to the network folder for the HPACSPPE application pool identity and for the Log On setting in the HP AC SPPE service Next to Sort list of jobs by select Date submitted or Document name to determine the sort setting The sort setting applies to the jobs list viewed on a mobile device at a multi function printer front panel and on the
44. efault Web site Right click HPAppsWS and select Properties In the ASP NET tab click Edit Configuration In the General tab set the UseSSL application setting to false Click OK Make the same change to the HPAuthWS web site e If you will be using SPP Enterprise make sure the device is configured for Pull Printing Follow the steps below to release stored jobs at the device 1 To login at the device present your card at the card reader or enter your PIC to authenticate 2 Touch Apps If more than one application is configured on the device tap the pull printing application Figure 5 31 Apps Usar wdiamb E BPRATER TA d 1 E E C DE y E bail P Hotwork Faldar rw amp ae i HDD Address Da ga Hr mi FE u T t 105 i File retrieve SORA tO HO Tray Settings Control gt Enlarge Language CL Job Status Display Moda Setting 06 10 PM F 3 Select documents from the document list Tap Print All to print all documents in the list Tap Print Delete to print and then delete the document from the document list Tap Print Keep to print and keep the document in the document list Y TIP Ifa user is logged in and another user presents his proximity card at the card reader the first user will be automatically logged out and the second user will be logged in ES NOTE Ifthe IRM authentication method is set to Card Code dual factor and you log out by presenting a proximity card at the card reader t
45. elay between documents caused by the printer engine winding down while the paper path is completely cleared When printing a large number of small document this delay between jobs is most noticeable TCPIP IPPS is a secure protocol that allows SPP Enterprise to encrypt the data stream sent to the device Job expires after This is the expiration time for stored jobs The default time is 24 hours After the expiration time jobs are deleted from the server Enable tracking of purged jobs When enabled this checkbox allows expired or deleted jobs to be tracked for job accounting TCP IP API Port Specifies the local TCP IP port that SPP Enterprise will open for API requests Port 5501 is the default port After making any changes make sure to click the Restart Service button to restart the HP AC SPP Enterprise service TCP IP LPD Port Specifies the local TCP IP port that SPP Enterprise will open for inbound LPD requests Port 515 is the default port If an LPD daemon is already running on the server shut down this process to enable SPP Enterprise to open port 515 After making any changes make sure to click the Restart Service button to restart the HP AC SPP Enterprise service TCP IP IPP Port Specifies the local TCP IP port that SPP Enterprise will open for inbound IPP requests Port 631 is the default port After making any changes make sure to click the Restart Service button to restart the HP AC SPP Enterprise service Section 4 6 SPP
46. erver you want to add including the IPP port number Example Servername Domain com 631 Click the Test button to test the connection to the server The Status column should display OK Then click Apply Figure 4 24 Server Information settings Server information Server URI ii Description Status N hpac w51 ctsupport comcb31 Ok wb 003 capellatech com 631 Ok wb2008 capellatech corricb37 Ok If you want to store pull print jobs in a different location other than the C drive stop the HP AC SPP Enterprise service then move the spoolroot folder and subfolders to the new local drive This cannot be a network share or mounted drive Open the bin vpsstart ini file and enter the new location on the SERVROOT line Save the file and restart the service after the folder has been moved SPP Enterprise pull print queues will allow the server to receive jobs printed from client computers When jobs are received from client computers the jobs are stored in the C Program Files Hewlett Packard HP Access Control spoolroot spool Queue folder where Queue is the name of the pull print queue Each job is stored as two files a DAT file and an INF file In the Pull Print Queues section click Add In the Queue name field type any name for the pull print queue Click Add 18 Chapter 4 Settings tile ES NOTE When a pull print queue is created from the HP AC configuration utility a printer definition file is created in the C Program Files Hewlett
47. ferent server This checkbox allows you to override previous configuration settings when the printer is configured on the current server Enter the correct User name and Password that was set up during the installation of OPS Server EX NOTE The OPS password can be changed by reinstalling OPS The opssetup exe installation file canbe found in the C Program Files Hewlett Packard HP Access Control Misc folder Click Test to test the connection to the OPS Server and make sure port 8081 is open Figure 4 7 SNMP settings Filter delay Gren 2 In the SNMP section set the Get and Set community names for communication to and from devices The Get community name allows the server to retrieve device and tracking data from a configured device The Set community name allows the server to send information to the device such as a reboot command By default Chapter 4 Settings tile the Get and Set community names are public For communication between the server and devices the Get and Set community names on the server must match the Get and Set community names on all devices ES NOTE The SNMP section displays if Job Accounting Device Analysis Agent or Secure Pull Print Express is installed on the server In the Trap level field select the type of traps you want to track with Direct Tracking Module DTM A trap is a packet of information provided by the printer that indicates basic job information and print job status e Print Conf
48. field you can change how often the Secure Pull Print Express email services checks for emails The default time is 30 seconds 10 Chapter4 Settings tile Figure 4 11 SMTP settings Postwred fender ral address Retina mai reat Emai subject HP AE Secure Pull Printing Cama pody r qa Ela The SMTP section allows you to configure emails you want to send from the server The following information can be emailed e Job Accounting reports e Results of Device Analysis scheduled scans o IPM notifications via the Email rule e Secure Pull Print Express or Secure Pull Print Enterprise notification if a user s job cannot be processed e AD User Editor information AD Group Manager information and User List Editor PINs In the Server name field type the name or address of your company email server In the Server port field type the email server port The default port is 25 Click the TLS checkbox to enable the Transport Layer Security protocol to encrypt and deliver mail securely In the Login and Password fields type the login name and password for access to the email server In the Sender email address field type the email address you want to appear in the From field of emails For Secure Pull Print Express purposes it is recommended to use the same email address that users email jobs to so that users receive notification emails from the same address they emailed In the Recipient email addresses field type email addresses t
49. g possible features Tracking Enables tracking of print jobs sent to the selected print queue The print queue tracking method can be either Port Monitor or Print Processor depending on what is selected in the Settings tile gt Print Server tab Quota Enables the enforcement of Job Accounting quotas for printing IPM Enables the implementation of IPM rules and costs Select a cost per page scheme from the dropdown list The cost per page schemes can be set in the Settings tile gt IPM tab The IPM Cost column displays the cost per page scheme assigned to the selected print queue For more information about IPM rules and costs see the HP Access Control HP AC IPM Admin Guide Add tracking PJL attributes Inserts Job Accounting PJL attributes in the data stream If an application generates a data stream that does not include the PJL header containing the user and job information the user and job name are reported as UNSPECIFIED in Job Accounting reports Pause job Automatically pauses print jobs in the print queue This feature is only possible when Port Monitor is selected for print queue tracking and the Windows service HP ACJASpool Monitor is started Chapter 6 Print server tile Server Information tile The Server Information tile displays valuable information to help you manage HP Access Control HP AC on your server This tile displays version numbers of installed components storage and memory of the server and the HP Access
50. he following message displays Authentication failed Please confirm the card Tap OK to log out 5 10 Install and configure components on Lexmark devices Before the HP Access Control HP AC applications can be used on the Lexmark MFP front panel MFP devices must have the HP Access Control HP AC Lexmark Applications solution installed and enabled This Lexmark eSF Embedded Solutions Framework solution allows HP Access Control HP AC applications to be server based giving the Lexmark MFP the ability to display the menus and communicate with the jobs folder on the HP Access Control HP AC servers without having any components residing directly on the MFP See the table below to determine which printers are supported Model eSF Version 651de X652de XS651 XS652 2 1 50 Chapter5 Devices tile X654de X656de XS654 XS656 X658de XS658 X738de X736de X734de X738dte XS734 XS736 X5738 X466dwe X466dte X466de X464de X463de X5463 XS464 XS466 T654 TS654 X860de X862de X862dte X864de X864dhe XS860 XS862 XS864 W850n W850dn WS850 T656 TS656 X746de X748de X748dte XS748 3 X C748 5748 X792de X792dte XS795 XS796 XS796 X5798 C792e C792de C792dte C792dhe CS796 X925de XS925 C925de X950de X952de X952dte X954de X954dhe XS950 XS955 C950de X548dte XS548 6500e MS610 M3150 4 X MS810 M5155 MS812 M5170 CS510 MX41x MX51x XM1145 MX61x XM3150 MX710 XM5163 MX71
51. irmation traps is the default Trap level With Print Confirmation traps selected only printed job traps are sent from the device This is used to reduce the network traffic with unwanted traps e Alltraps are to track all jobs printed copied or digitally sent Some versions of HP JetDirect require that All traps mode is selected The UDP port field is the port used by the trap service By default the trap service uses UDP port 162 If the port is used by another application or service on the same server the Job Accounting Trap service can use another port If the port is changed the Job Accounting Trap service HPACJA_SnmpTrap needs to be stopped and restarted Printers also need to be reconfigured using the new port The Filter Delay is used if JetDirect sends the same trap multiple times in a very short interval This occurs on external JetDirect 300x and 500x The delay value can be set to 50 ms for 300x and 500x For other devices the default value can remain at 0 In the Concurrent connections section set the number of network devices you want to install and configure at one time The maximum number of concurrent connections allowed is 50 Figure 4 8 Concurrent connections 4 3 Email tab The Email tab allows you to setup email server settings to send HP Access Control HP AC notifications to users and to allow users to email jobs for pull printing Section 4 3 Email tab 9 Figure 4 9 Email tab espa Pets er
52. k in the Workflow folder field to browse to the folder containing FDT workflow files A specific FDT workflow file is selected during the configuration of devices from the Devices tile Chapter 4 Settings tile Devices tile The Devices tile allows you to manage devices in your printing environment Organize devices into groups and see what is installed on each printer From the Devices tile you can easily install and configure printers for tracking quota pull printing authentication or rights managements Figure 5 1 Devices tile Drag and drop columns here senal M3C0940N9 HP LaserJet M3035 MFP CALLG12407 HP Laser let cotor flow MEP M575 MEACOSS0C HP Color Laser ket CPS520 Series CNANFODO39 hp Laserjet 9050 OOM 7 24 2013 Location 4 rig nd Commi hp Laser lat di MOE HF LaserJet p 4005 CH 01 Ep 2 79 License Job Tracking nia HP LaserJet 600 M603 HP Laser let 500 color MFP METE Canon327505 Canon A ADW C5030 61 05 HP Color Laserjet M4730 MFP 13 dewaoeis 203 12 10 58 PM 10 0714 131211 04 PM 10 0 0 186 12 11 06 PM 10 0 0154 24 2013 12 11 07 PM 10 0 0191 HP Laserjet P2005 12 11 10 PM IP range scan end 1 Device groups In the device groups section you can create groups to better organize your printer environment Right click a group name to Add Delete or Rename a group 2 Device list The device list section displays device information such as the device model IP address and configuration st
53. k the Use server name instead of IP devices checkbox for one or both of the following reasons e If the server name was entered during the installation and configuration of the OPS server See the HP Access Control HP AC Install Guide for more information about the installation of the OPS server e Ifthe web service security feature Cross Origin Resource Sharing CORS is enabled on FutureSmart devices To pull print at the device with Secure Pull Print Express make sure the server name is added to the CORS Trusted Sites list To use tracking at the device with Job Accounting make sure the server name is listed in the CORS Trusted Sites list To pull print at the device with Secure Pull Print make sure localhost is listed in the CORS Trusted Sites list Figure 4 14 CORS trusted sites Information General Scan Digital Send Troubleshooting General Security j eneral Security Web Service Security Access Control Protect Stored Data Certificate Management Enable Cross Origin Resource Sharing CORS Web Service Security Check Enable Cross Origin Resource Sharing CORS to allow resources on this product to be domains The sites listed below are trusted sites for browsing or CORS IF no sites are added to Self Test Trusted Sites l Add Other Links HF Instant Support F mame domain com Shop for Supplies l A localhost Product Support Delete All Apply ES NOTE If OPS is configured on the server and you want to change
54. n Active Directory Click the dropdown list to select an Active Directory field containing the group names you want printed in job stamps The Search DN field displays the domain your server belongs to To test the connection to Job Accounting or Active Directory type a user name in the User name field then click the Test button The name of the group the user belongs to displays in the status bar at the bottom 4 11 FDT tab In the FDT tab specify the folder containing the Fleet Deployment Tool installation folder and workflow files you want to send to devices Figure 4 41 FDT tab Flee Ceployrnent Tegl FOT inmsallati n folder CA Program Files GBS FleeDeploanen Tool Work Mica Polder CA Programa Files 085 FleeDeplovment Tool eri aes ES NOTE The FDT tab displays if the HP Fleet Deployment Tool application is installed on the server The HP Fleet Deployment Tool FDT is a standalone tool designed to install and configure your printer fleet This FDT tab utilizes the customized workflows created by the HP Fleet Deployment Tool allowing you to send firmware in printer agents or configuration files to multiple devices for a more automated deployment See the HP Fleet Deployment Tool User Guide included with the Fleet Deployment Tool application for instructions to create workflows Double click the FDT installation folder field to browse to the FleetDeploymentTool folder containing the FDTCommandLine exe file Double clic
55. nfigured correctly to push tracking data to the Job Accounting server When you click the Configure button for a selected device the Configure window displays Figure 5 2 Configure window Configure 10 0 0 133 Select which component to enable on the selected devices Pull printing _ Tracking C Authentication Authorization C Quota _ Confirmation trap Workflow fles lt None gt si 69 Cancel IC DOE Select the components you want to enable on the selected device Pull printing Enable the Secure Pull Print Express button on multi function printer front panels or enable pull printing with an XT device The number of MFP devices that can be configured with the Secure Pull Print Express button is unlimited but the number of devices that can be used for pull printing is limited by the number of devices in the Secure Pull Print Express license Tracking Enable tracking on the device When Tracking is enabled on a FutureSmart device information about the printer and print jobs displays in the status bar Authentication Enable IRM authentication on the device Authorization Enable IRM rights management on the device Quota Enable quota communication between Job Accounting and the device Confirmation trap Enable DTM traps on the device When Confirmation trap is enabled on a device information about the printer and print jobs displays in the status bar Workflow files Select an FDT workflow to apply
56. o test the connection between the email server and recipient email addresses This determines if a recipient can receive an email from the email server Click the Test button to send an email to the recipients A popup window appears to display information about the connection In the Email subject field type the subject of the notification email If Secure Pull Print Express is installed the default email subject is HP AC Secure Pull Printing In the Email body field type what you want to appear in the body of the notification email If Secure Pull Print Express is installed the default is The file 0 can t be processed where 0 represents the name of the job 4 4 11S tab The IIS tab contains IIS and web service settings Section 4 4 IIStab 11 12 Figure 4 12 IIS tab IS Web Service Server name Server name Description Status WE 008 tech com 1 Ok WE U 4 ech com L Encrypt all wet communication devices Lise server name instead of F devices Agent license see wide IP adaresg TAAE 14012 Push made Port BO ES NOTE The lS tab displays if Job Accounting Agent IPM Secure Pull Print Secure Pull Print Enterprise or Secure Pull Print Express is installed Figure 4 13 Web service settings Web service Server name Server name Description WE2Z008 lech com WB2003 tech com HPAC VS1 suppert cor X Encrypt all web communication devices Use server name instead of idevice
57. ommand prompt and run the OPSSetup bat file located in the C Program Files x86 Hewlett Packard OPS bin folder On 64 bit servers make sure you select Run as administrator when you open the command prompt 2 Fromthe available options select Unregister a device to the OPS server and follow the on screen instructions es Command Prompt Program Files Heuvlett Packard 0P55b1n 0OP5S5etup bat Please select an option from below 1 Create an instance of OPS Server 2 Create an instance of OPS Server using config file 3 Register a device to the OPS server 4 Unregister a device to the OPS server 5 Retrieve the device current OPS server details 6 Exit Setup E tttWarningt Unregistering the OPS might result in losing all the OXPd data in the fire you sure you want to unregister the OPS default MI y Enter the device IP address i A A T7 the device username to be used the device password to be used Details retrieved from the device Server URL https 180 8 3 11 80881 5 Server userName admin Unregistered successfully 3 Open the EWS of the Officejet Pro printer and go to Network gt Certificates page Select the OPS certificate then click Remove Figure 5 20 Unregister officeJet Metwork gt Certificates Certificates General Centificate Options a Melwork Summary Network Identification a Network Protocols Proxy Settings Printer Certificate Wired 802 3 Status
58. on the model of the Xerox printer 1 Open a web browser navigate to https servername XeroxAppsWS Default aspx where servername is the server address the SPPE application was installed The page should display Xerox applications are installed 2 Open the embedded Web server EWS for the MFP and log in with the user name and password of the device 3 Select Properties gt Service gt Service Registration and the list contained should display AC Express 56 Chapter5 Devices tile Figure 5 36 Xerox application Centrewore Internet Services ER va Siaha Pisia Frmi San Coneral Sahip i Brant from Security Conecte Hi agin Permissions Accounting si Tidd Arpa acom Custom Services B GH Fd aerox colore P XEROX ColorQube 8700X Aidirews Bock Properties Service Registration Service Registration Select the meres yau want to Hepisy on the machine s touch interface Ari All Ciemat AD ime Pret iiri Copy St Sri ee E mail internet laa Server Pas Haran To ge orkes Scanning scan lo Hailhon Gran Lo Home ran To USA HE Hee oj 5 7 ii m N 1a da EGET 5 11 1 Configure AC Xerox Applications ES NOTE Different models of Xerox printers may have different administration pages and these steps may not be completely accurate E NOTE HTTPS is required for communication on the web server and all printers ES N
59. ons The OPS certificate is created to establish secure communication between the server and Officejet Pro printers Section 4 2 Device tab 7 8 Figure 4 5 Tracking settings e Neteark name O Device same In the Tracking section select what device information you want to display in job accounting reports when HP FutureSmart devices are configured for tracking o Select Device name to display the device names in job accounting reports e Select Network name to display the host names of devices in job accounting reports Make sure the Get community name is entered in the SNMP section to be able to read the network host names of devices Figure 4 6 OPS server settings hepa VLA OA LI reer ride ES setings With the OPS Server you can configure HP Officejet Pro single function and multi function devices for authentication and pull printing When Agent or Secure Pull Print Express is installed on the server the OPS Server is installed and started For more information about configuring HP Officejet Pro devices see the HP Access Control HP AC Secure Pull Print Express Admin Guide In the OPS Server section make sure the OPS Server field displays the correct server name where OPS is installed Also make sure port 8081 is open for connection between the OPS Server and HP Officejet Pro devices Click the Override OPS settings if you will be configuring an Officejet Pro printer that was previously configured on a dif
60. r LogoutiL viii Home Screen Registration HP Color MFP 5962dn Submit U Cancel C Top Paga Fila Name Not Set t Status Select File Choose File Mo file chosen Up to 200 Address Book Saree Notre b Document Operations The supported file types JPEG with file extensions jpeg jpg pe and Af GIF with file extensions q PNG with file extensions png User Control i System Settings Total Count SubmitiUl CanceliC gt letan c After adding the custom image select the Item tab followed by the Apps Home Button link Scroll to the bottom of the page and select the Use Custom Image checkbox Then specify the image you added in step 4b Then select Reboot Now to reboot the device and apply the settings Figure 5 27 Custom image E Custom Links Image Operation Manual Download hd Use Custom Image Select File logodixdd gif we Back to ihe Top on This Page Submit U Cancal C Section 5 9 Configure components on HP S900 series devices 47 4 To register HP AC Express with the MFP select Application Settings followed by External Applications Settings Figure 5 28 Standard Application settings O HP Color MFP S962dn n Top Page Status Address Book Document Operations t User Control System Seitings Network Settings Appication Settings Text image Printing Metwork Scanner Settings Document Administration Function Metadata Settings External Applic
61. r Carro Address for Application UI t System Saltings ik EE 7 PE z Address for Wen Senice k Hatwak Setlings t Hetwodk Scanner Sethengs Document Administration Click Submit Then select Reboot Now to reboot the device and apply the settings 5 9 1 Pull printing at the device Prerequisites On the server open the HP AC configuration tool go to the IRM tile gt AD Configurator tab and make sure the IRM settings are correct for authentication ES NOTE If you change the IRM authentication method to Code Only you must recycle the HPACWS application pool before authenticating at the device If an error message displays on the front panel power cycle the device To use card authentication make sure a card reader is connected to the device and cards are registered to users To enroll cards to users use the Card Enrollment application from a desktop or use the Card Enrollment feature at an HP LaserJet MFP or HP OfficeJet Pro If you chose to use the TCPIP IPPS protocol in the HP AC configuration tool gt Settings tile gt SPP Express or SPP Enterprise tab make sure IPPS SLL is enabled on the device Go to the device web page gt Security Settings gt SLL Settings In the Setting of SLL section make sure IPP SLL is set to Enable Click Submit Section 5 9 Configure components on HP S900 series devices 49 e Ifthe HP AC server is using IIS 6 SSL must be disabled Go to the IIS Manager gt local computer gt Web Sites gt D
62. r each job that is purged The XML file includes information such as the purged job name the date the job was submitted and the date the job was purged The XML files are created in one of the following locations e If Job Accounting is installed on the same server as Secure Pull Print Express the XML files are created in the following folder C Program Files Hewlett Packard HP Access Control temporary DTM e If Job Accounting is installed on a different server the XML files are created in the following folder C Program Files Hewlett Packard HP Access Control temporary When purging is complete the XML files are pushed to the Job Accounting server in the Temporary DTM folder ES NOTE Ifall the user s jobs are deleted the user s stored jobs folder is automatically deleted 4 6 SPP Enterprise tab The SPP Enterprise tab contains settings for the SPP Enterprise component Section 4 6 SPP Enterprisetab 17 Figure 4 23 SPP Enterprise settings SPP Enterprise Served DEER Server UNI Descrpiion Status cisupporLcomcb3 Pull pring quaeu s Queue name 0801 DOCS ES NOTE The SPP Enterprise tab displays only if the SPP Enterprise component is installed With SPP Enterprise users can stored jobs on one server then release the same job at a different location from a printer configured on a different server In the Server Information section click an open row then enter the Fully Qualified Domain Name FQDN of a s
63. rd Follow the steps below 1 2 Select the XT device from the device list then click Configure In the Configure window select Pull printing Click OK The device reboots and then beeps five times indicating the device is configured 5 12 1 Pull print using XT card readers Prerequisites The XT device is connected to a printer and the network The XT device is configured Cards are registered to users Follow the steps below 1 Present your registered card at the XT card reader The XT device identifies the registered card authenticates the user and locates your stored jobs in the spool folder All of your stored jobs are then pulled from the spool folder printed and then deleted Collect your printed documents Section 5 12 Configure XT devices 59 60 Print server tile The Print Server tile displays all print queues installed on the server allowing you to configure print queues for tracking quota or IPM The columns may vary depending on if Job Accounting IPM or both are installed The checkboxes under the columns indicate what features are enabled for the print queue Figure 6 1 Print server tile ES NOTE The Print Server tile displays if Job Accounting or IPM is installed To configure a print queue select a print queue from the installed print queues list then click Configure In the Configure window select features to enable Click OK The Configure window displays the followin
64. re 4 8 Figure 4 9 Figure 4 10 Figure 4 11 Figure 4 12 Figure 4 13 Figure 4 14 Figure 4 15 Figure 4 16 Figure 4 17 Figure 4 18 Figure 4 19 Figure 4 20 Figure 4 21 Figure 4 22 Figure 4 23 Figure 4 24 Figure 4 25 Figure 4 26 Figure 4 27 Figure 4 28 Figure 4 29 A a o EE EE EN 1 AL AAS CS a o AA 2 PE re ISO PP A 2 MIE FN NUS SON sia N EE EE N EE OE EE OE N EE EE NN 3 Device password setup ese esse ese See see de de N Ge ie ek Ge n Ge ee ie Go Re ke We eo ie eo se ke Go Dee 3 Web SEVICE SETUD eed AR ira 3 A EE EE II OE EE 4 nn PP 5 BELE BE A a EE e o OE o o OE OE 6 A o OE EE EO E 7 o a 7 TACNA SEUS ras 8 OPS server Se NOS cart RE GE 8 SNMP SettNgS PPP PP 8 Concurrent ei E EE05 Ge ee EE eee ees 9 Su D E E E A 10 POPS IMAP settings icc lt siieeatscesussesnsuxoedassnssneussdewsnonnaeachonndnsecesnsahensidoeoesaneneessreuinanesdhoonssacusdessinavbcnondentaxenssavenests 10 A e E e E O 11 O EE EE N EN EE EE 12 Web service settings sesse e EOI A 12 A e EE N EE 13 Agent license service Set ING Sis 14 ME pe eie OE N EE E E O EE EE EE 14 IPM authieiitica li PI ee ee ee EE Ge Ge De Ee ee ee 14 SPPE SO dd ie N NE EE EE OE EE EE N EE N 15 Pull Printing settings sesse ies nd se see EG RR RR Ee Ee Geen ie ed eb oe ee in ei eg ee n so ee n De 16 Bld eed EE EE EE EE e senceastensececesenrsenents 16 SEE sie AA RE RE EE EE 17 de ea ae Ig ye AE EO EE EG N N N N N EE EE 17 SPP Enterprise Settings no RD eo e Pe o AAOS 18 Server Information set
65. reen if a component license is expired Ef NOTE The Secure Pull Print Express license resets after 24 hours This allows for users to pull print at new devices every day The ID key field contains the server license number that identifies your server for the HP Licensing Support team To receive Activation Keys for components you need to contact the HP licensing customer support center 1 Goto the HP licensing customer support center at http licensing hp com 2 Click Contact HP Licensing on the left 3 Fillin all required fields In the Your comments field make sure to include your server license number Then submit the form After your license request is processed you will receive an email containing Activation Keys Copy the component Activation Keys and paste into the Activation Key fields in the License tile Chapter 3 License tile 4 Settings tile The Settings tile allows you to view and change all the settings of installed components from one location ly IMPORTANT After making changes in the Settings tile be sure to click the corresponding Apply button to apply the settings ES NOTE Information in the Settings tile may vary depending on what components of HP Access Control HP AC are installed on the server Click the File menu to import or export setting information Information you select and enter in the Settings tile can be exported as an XML file It is recommended to export settings in case the server or
66. ress 10 96 140 12 In the Push mode section select a transfer protocol to auto upload or push IPA tracking data from configured devices to the job accounting server Figure 4 16 Push mode NOTE The Push mode section displays if Agent or the standalone Job Accounting Print Server is installed In the HTTP FTP field select one of the transfer protocols e Hypertext Transfer Protocol HTTP connections are usually terminated after a particular request has been completed If HTTP is selected Windows credentials are required in the Login and Password fields Also if IIS 7 or newer is installed on the server Basic Authentication needs to be enabled Devices require Basic Authentication to pass data via HTTP when IPA sends tracking data to the Job Accounting Print Server The default port is 80 o File Transfer Protocol FTP is best for uploading data to an internal database server If FTP is selected any credentials can be used in the Login and Password fields By default the login and password are Anonymous The default port is 21 Select the PASV checkbox to enable passive mode FTP if you want to allow data to transfer more easily through firewalls The Interval minutes field determines how often tracking data is pushed from devices to the job accounting server Click Test to test the HTTP or FTP connection The IPM authentication section contains credential fields to allow access to the IPM web service to retriev
67. s The Web service is used for the following e For multi function devices to communicate with the Job Accounting website to determine quotas for copies and digital sending jobs e Tosend IPM notifications to client desktops e Forusers to access Pull Printing jobs from a printer mobile device or web page e Forthe server to communicate with the IRM license website e For central management of printer fleets When multiple servers are entered in the Web service settings and when devices are configured in the Devices tile a dropdown list displays in the Configure window allowing you to select the server you want to configure the device to From one central server you can configure printers to be managed by a different server The Server name and Server IP fields display the name and IP address of the server containing the Quota IPM and Pull Printing web services Make sure the information is correct to allow for communication between the web service and client desktops or devices To add additional servers enter the Fully Qualified Domain Name FQDN of the additional server in the Server name column and enter the IP address of the server in the Chapter 4 Settings tile IP column Click the Test button to test the connection The Status column should display OK Then click Apply Click the Encrypt all web communication devices checkbox if you want to enable the HTTPS protocol for communications between devices and the server Clic
68. s color duplex settings of a printer before they can be processed as pull print jobs Click the dropdown list to select an installed pull print queue with the features you want to apply to email jobs The printer must be a local printer with a PCL5 PCL6 or PS print driver Figure 4 27 Email settings Process email attachments only od Service not started with a domain account Chapter 4 Settings tile Ef NOTE If the Service not started with a domain account message displays in the Email section you must restart the HP AC SPP Mail service with a domain account To restart the service with a domain account go to Administrative Tools gt Services Right click the HP AC SPP Mail service then click Properties Under the Log On tab select This account and enter the credentials of a domain account Click OK Restart the HP AC SPP Mail service 4 7 Alias tab If users do not have the same user logon on all systems aliases allow users to get their documents into the same account from all systems In the Alias tab select a user from the list then click Add ES NOTE Ablack dot next to the user s name indicates that the user has an alias Figure 4 28 Alias tab Alias Search In the Alias text field add an alias name Then click Add The alias must be unique in regards to other user aliases and user logons Any number of aliases can be entered Section 4 7 Alias tab 21 Figure 4 29 Alias window blanchew
69. sesse sesse ee ese Ee ee ee ee ee ee ee ee ee ee ee 53 5 10 3 Lexmark device security settings sesse sesse ee ee ee ee ee ee ee ede eed deed dee eed Gee Gee ee ee ee 53 5 10 4 Using the AC Lexmark applications sesse sesse ee ee ee ee ee ee deed de dee ede ee ee ee ee Gee ee ee EE ee 54 5 11 Install and configure components on Xerox devices ccccccccccncnnnonnnananananananananancncncncncncnonononononananananannos 56 5 11 1 Configure AC Xerox Applications occccccccnnnnnnnnnnnnanananinononononononononanananananananananancnnccncnanoss 57 5 11 2 Using the AC Xerox Applications cccccccccccccncncncnonnncnonononononanonananananananaananaannnannananaranncnnanns 58 5 12 COn ET dEVIERS qdo 59 5 12 1 Pull print using XT Card readers ccccccceccccceccceccceccccccscecccececcseecseecccsecsssssssssssscscssesssseeseess 59 O PrE rN is 60 A RE A AA EAA OE IET PEET EREE AAE A A 61 8 HP Access Control HP AC Print Client ccccccsccscccccccccccccccccccscccsccccccccsccccscccscccscccccccccsccesccsccccesscccsccesces 62 List of tables Table 5 1 Supported HP OfficeJet Pro printers and firmware ooocnnnnnnnnnonnnnnnnnnnnnnnnnnnnnnnnononononnnnnnncnnononononcnnnncconocononenononoss Table 5 2 Supported printers vi List of figures Figure 1 1 Figure 2 1 Figure 2 2 Figure 2 3 Figure 2 4 Figure 2 5 Figure 3 1 Figure 4 1 Figure 4 2 Figure 4 3 Figure 4 4 Figure 4 5 Figure 4 6 Figure 4 7 Figu
70. set estimated costs for different features within a print job The Desktop Notification Client uses this data to notify the end user of the cost of a print job If the Opt in Opt out action is used the user can modify the job to meet an estimated target cost Chapter 4 Settings tile Figure 4 39 Cost per page Cost per page Economode Mono Color Economode Mono Color Economode Mono Color ca un a un a ol Y 3 3 3 d d d E F O D o D 3 F F Define up to three Cost per page profiles to set different cost models for different print queues TIP Values for duplex printing should always be lower than those for simplex printing The User grouping section applies when the cost center option of the IPM job stamp rule is used When cost center is selected in the IPM job stamp rule the name of a user s cost center group is printed on all printed pages Figure 4 40 User grouping User grouping O Job accounting cost center Active Directory Search DN DC tech DC com User name Test Section 4 10 IPMtab 27 28 The cost center information is gathered from one of the following sources e Select Job accounting cost center if you want to use cost centers defined in Job Accounting For more information about defining Job Accounting cost centers see the HP Access Control HP AC Job Accounting User Guide e Select Active Directory if you want to use groups defined i
71. the AC Express application button Chapter 5 Devices tile Figure 5 33 Lexmark welcome 0718 AM O7 70 019 2 Present your proximity card at the card reader for scanning Figure 5 34 Lexmark swipe Swipe ID card 3 Follow the on screen prompts to authenticate 4 Follow the onscreen prompts to complete the requested action Figure 5 35 Lexmark select Print your documents Test Page 1 page s Section 5 10 Install and configure components on Lexmark devices 55 5 11 Install and configure components on Xerox devices Before the AC Express application can be used on the Xerox MFP front panel MFP devices must have the AC Xerox Agent installed and enabled This Xerox EIP solution allows applications to be server based giving the Xerox MFP the ability to display the menus and communicate with the jobs folder on the servers without having any components residing directly on the MFP See the table below to determine which printers are supported Table 5 2 Supported printers Model EIP Version version ColorQube 8700S 8700X 8700XF 2 0 ColorQube 8900X ColorQube 9301 9302 9303 WorkCentre 5735 5740 5745 5755 5765 5775 5790 WorkCentre 5865 5875 5890 WorkCentre 7220 7220T 7225 7225T WorkCentre 7525 7530 7535 7545 7556 WorkCentre 7830 7835 7845 7855 To verify if AC applications are already installed on the MFP follow the steps below ES NOTE The administration pages may vary depending
72. tication Approved checkbox Specify Enable in the Card ID Registration Change Authority dropdown Figure 5 24 Default settings HP Color MFP S5962dn e Top Page H Status H Address Book Document Operations User Control b User List a Organization Group List Page Limit Group List Machine Page Limit Setting A Authority Group List Favorite Operation Group List User Count o Card Area Setting a Card Type Card Reader Settings H System Sattings t Hatwork Settings Application Settings b Energy Save E mad Alert and Status Job Log t Secunty Settings e Custom Links o Operation Manual Download Default Settings Submat U Updater User Authentication Actions when the Limi of Pages for Output Jobs L A Waming when Login Fails Y Disabling of Printing by Invalid User C Automatically print stored jobs alter lagen Default Network Authentication Serer setting Wi Display Usage Status after Login Logen Name Display User Name Adminstrator Legout L Disable Job is Completed even when tha Limit of Pages is Reached Job is Stopped whan the Limi of Pages is Reached T After reaching to the page limit cancel the job and delete the job dunng recarang Nat Set Display login name include Job Status in user authentication W Automatic Logout Setting Edit Help Display of Login Screen W Automatic Login with a Card Authentication Method Setting Card ID Raaistratian
73. tings 7 i User Name Administrator Logout L Card Type Card Reader Settings HP Color MFP S962dn Submit U Update R Top Page Card Type Card Reader 999 Status vluse IC Card for Authentication Address Book Back to the Top on This Page Document Operations User Control User List a Default Settings a Organization Group List o Machine Page Limit Setting gt User Count F Submit U Update R b At the device tap Settings gt User Control gt Card Reader Device Registration Then tap Read c When prompted plug in the card reader The card reader will beep twice Tap OK The card reader Product ID and Vender ID displays on the screen Figure 5 22 Insert card reader prompt OO a AA G N M FRINTER X Settings Cancel E hd Job Status Connect a card reader Connect again after removal if it is already connected OK Cancel 44 Chapter5 Devices tile d Tap Submit to save the card reader registration Figure 5 23 Card reader registration q E i OLINE MPRINTER ES Card Reader Device Registration de ster a Card Reader Product 10 69 Vander ID 1008 a Section 5 9 Configure components on HP S900 series devices 45 46 2 To configure the device for card authentication select User Control followed by Default Settings Scroll down to the Card Setting section Select the Automatic Login with a Card checkbox Select the Card Front Panel Operation Authen
74. tings reinas 18 Pull print queues settings coccccccnnnnnnnncnnnnnnnnnnnncnononononononononononononononononnnnn ocn conan nana RE Ee ee ee 19 nn A ER A 20 Bin SLUNG N E EE N ME EE Ee N 20 PAG 1 A N NE N ON OE EE E ON DEE SN 21 o EE EE EE OE 22 Figure 4 30 Figure 4 31 Figure 4 32 Figure 4 33 Figure 4 34 Figure 4 35 Figure 4 36 Figure 4 37 Figure 4 38 Figure 4 39 Figure 4 40 Figure 4 41 Figure 5 1 Figure 5 2 Figure 5 3 Figure 5 4 Figure 5 5 Figure 5 6 Figure 5 7 Figure 5 8 Figure 5 9 Figure 5 10 Figure 5 11 Figure 5 12 Figure 5 13 Figure 5 14 Figure 5 15 Figure 5 16 Figure 5 17 Figure 5 18 Figure 5 19 Figure 5 20 Figure 5 21 Figure 5 22 Figure 5 23 Figure 5 24 Figure 5 25 Figure 5 26 Figure 5 27 Figure 5 28 Figure 5 29 FANG 2101 Gf EES EG N OE EE Ge DE ER GE ED OE RE ORT 22 EEE AA e GE EE GE N EG oe 23 leier KINGS talle N ER N ED GE Ne ee 23 IRMadotaweb serve se EO EE EE GE ds 23 Print Server ae ee ee GE GE E RE Re Ge Ee GR Ge EE AE ee 24 PMID AE GE N Ge ee N ee N Ge N NE GE GE oe 25 IPM web Service settings a o a 25 AA A de o EE GE EE ee Ge eo ee Ge ee N ee ie de GO ed 25 Notiticatiomdesktopcli nts ie Ee EG ii 26 tostper Dade ED SE EG EE Ee EE DE GO Oe GO DE GR EE EE GED 21 User groupo tia iio 27 A IG GO Re Ee EG EE ee ee ie 28 Devices RR EE EE OE EE ORE EE OE EE Ad EE 29 CONTIG HIG WING OW oe de GE N N EE dai Ge ee 30 DEVICES dropdown MENU ss EE ee Re a Ge Ee ed oe ee De OG a Se ed Ge ER
75. tion regarding your domain and administrator credentials then click the Go button For more information see the HP Access Control HP AC Job Accounting User Guide Figure 2 2 Retrieve user data Retrieve user data Hame New Query E Accounts Currencies Actis Directory Printer templates Extennalneport re MENGES cm er templates Queres in progress ses Computers Domains ous Page posi management C st cantei User opnama l 3 J ee Affected domain Netbios name SUPPORT Print organization p DNS Name support com Quota e User name Allocation l Password Complete O Group management C Computer Summary report Adminstration Extemalreport q Group Organization Primary Group e If you will be using Agent or print server to send tracking information to the Job Accounting server go to the Settings tile gt IIS tab gt Push mode section Select a transfer protocol to auto upload or push tracking data Click Test to test the connection to the Job Accounting server Click Apply 2 Chapter 2 Prerequisites Figure 2 3 Push mode setup Password lecenval rrirreneti f e Ifyou will be configuring devices go to the Settings tile gt Device tab gt Device section Enter a device password in the Administrator password field This device password must match the device passwords in all printers Click Apply Figure 2 4 Device password setup AAmiNEEIEEST r METE amin TS AAN Certifi
76. ve the IP range list Click Load to load a previously saved IP range list The progress of the scan displays in the status section at the bottom and device data appears in the device list Chapter 5 Devices tile 5 2 Scan the network for XT devices The XT device is an external device with an attached card reader that allows for pull printing at any printer or multi function device A user simply presents his or her card at the XT card reader and all of his or her stored jobs are printed at the connected printer For more information about XT see the HP Access Control HP AC Secure Pull Print Express Admin Guide To scan the network for XT devices the following is required e XT devices must be connected to a power source connected to the network and connected to a printer e Ifyour server has a firewall and you want to scan the network using Snmp discovery make sure UDP 11000 is open In the Devices tile go to the Devices menu and select Snmp discovery XT or IP range XT Figure 5 6 Devices menu Devices Help Snmp discovery IP range Snmp discovery XT IP range XT import ASCII file Import WJA file Export to CSV e Snmp discovery XT sends a broadcast over the network and discovers available XT devices o IP range XT scans for XT devices within a selected range of IP addresses In the IP Range window enter IP addresses in the Start and End fields Then click Start to scan the network Figure
77. ver License MEE IE Show memory usage and View manage licenses installed applications ES NOTE The tiles may vary depending on what HP Access Control HP AC components are installed on the server Click a tile from the HP Access Control HP AC home screen to use the component Return to the home screen at any time by clicking the back button in the top left corner This guide provides information about the License Settings Devices Print Server and Server Information tiles For more information about HP Access Control HP AC components see the individual component guides To view the individual component guides click a component tile Go to the Help menu then click Administrator Guide or User Guide 2 Prerequisites Before using HP Access Control HP AC components make sure to complete the following steps e If you will be using Job Accounting go to the Settings tile gt Database tab gt Database Configuration section and verify the SQL server connection settings Click Test to test the connection to the Job Accounting database in SQL Click Apply to apply the settings Figure 2 1 Database setup Database Cai con Ago BJL merret es ir PLA a Wed E A sl T T e Ifyou will be using Job Accounting you must scan the Active Directory domain to allow for accurate user tracking Go to the Job Accounting tile gt Administration gt Active Directory gt Retrieve User Data Enter the correct informa
78. vices tile and configure the device for Pull Printing This will create a printer definition file which is required to use SPP Enterprise For more information see the HP AC SPP Enterprise Admin Guide Open a web browser and enter the IP address of the device to go to the device s web page to configure the device The default username for the device web page is admin and the default password is admin HP S900 series devices support pull printing using SPP Express or SPP Enterprise Follow the steps below 1 To install a card reader for card authentication follow the steps below Pi IMPORTANT By default card readers are configured to read HID and Class card types If you want the card reader to read different card types update the card reader before connecting to the printer For instructions on how to configure and update the card reader see the Set Proximity Reader parameters section on pages 22 25 of the HP Access Control HP AC Agent Admin Guide Specific parts kits along with part numbers are required for Hip reader integration on the S900 devices Contact your HP service tech to have a card reader installed in your S900 series device a Select User Control followed by Card Type Card Reader Settings Select the Use IC Card for Authentication checkbox Make sure the Card Type Card Reader value is set to 200 Click Submit U Section 5 9 Configure components on HP S900 series devices 43 Figure 5 21 Card Reader set

HP Access Control Getting Started Guide

Contents

Download Pdf Manuals

Related Search

Related Contents