HP ePrint Enterprise Administration Guide Release 4.
© Copyright 2010, 2011-2015 HewlettPackard Development Company, L.P. Microsoft, Windows, Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 are U.S. registered trademarks of Microsoft Corporation in the United States and/or other countries. BlackBerry®, RIM®, Research In Motion®, SureType® and related trademarks, names and logos are the property of Research In Motion Limited and are registered and/or used in the U.S.
Table of contents 1 Introduction .................................................................................................................................................. 1 1.1 Login ................................................................................................................................................................ 1 2 Home section ..............................................................................................................................................
3.2 Import Printers ................................................................................................................................................ 9 3.2.1 Controlling batch inserts and updates with ExternalID .......................................................... 10 3.2.2 Empty versus non-existent fields ........................................................................................... 10 3.3 Export Printers .....................................................................
.1.1.2 Port number ........................................................................................................ 23 5.1.1.3 SMTP account ..................................................................................................... 23 5.1.1.4 Version ................................................................................................................ 23 5.1.1.5 Notes ................................................................................................................
7.3.2.2 User Principal Name attribute ............................................................................ 32 7.3.2.3 User Email attribute ........................................................................................... 32 7.3.2.4 Group Member attribute ..................................................................................... 32 7.3.2.5 User Locale attribute .......................................................................................... 32 7.3.3 Search rules .......
12.2.1.5 BrandName ....................................................................................................... 42 12.2.1.6 DisclaimerDisplay ............................................................................................. 43 12.2.1.7 SecureConnections ........................................................................................... 43 12.2.2 Web application Configuration (web.config) ......................................................................... 43 12.2.2.
List of figures Figure 1-1 Login screen ........................................................................................................................................................ 1 Figure 2-1 Overview Screen .................................................................................................................................................. 2 Figure 3-1 View and Manage Printers screen ..................................................................................................
Figure 12-4 Default disclaimers ......................................................................................................................................... 46 Figure 12-5 Adding messages ............................................................................................................................................
x
1 Introduction This guide provides an overview of the tasks that can be performed using the HP ePrint Enterprise Administration tool. The HP ePrint Enterprise Administration tool is accessed as follows: ● If Enhanced security was selected during installation, use https:///cloudprintadmin/ ● If Backward compatibility with low security was selected during installation, use http:/// cloudprintadmin/ 1.1 Login This is the main access point for the Administration UI.
2 Home section 2.1 Overview Screen The Overview Screen shows how HP ePrint Enterprise is performing its functions. It also contains links to other administration tasks such as adding users, printers, service settings, etc. Figure 2-1 Overview Screen The sections which follow provide a brief description of the Overview Screen components. 2.1.1 Main menu The Main menu contains options to perform maintenance tasks on system tables such as Add and View, and also includes some reports.
2.1.2 Core Services Condition The Core Services Condition panel provides an overview of the current state of HP ePrint Enterprise services. A red mark next to a service name indicates that the service is unavailable or has been suspended. Note that if any of the Core Services are suspended, print requests will fail. The following list of Windows services are mapped to the Services listed in the Core Services Condition window.
3 Manage printers 3.1 View and Manage Printers This screen shows all printers that have been added to the system. The list can be filtered by using the Search box. Searches are performed on all displayed columns. Figure 3-1 View and Manage Printers screen Click on the table row to edit a specific printer. You can point the mouse over the Address and HP ePrint Enterprise Host column to see the Fully Qualified Domain Name (FQDN). The status icon reflects the printer’s current state.
Table 3-1 Printer statuses (continued) Unavailable Printer is not ready to accept jobs. Unknown Printer status cannot be determined at this time. 3.1.1 Batch permission assignment This tool assists in assigning permissions to one or more selected printers. Permissions (or access policies) are assigned to user groups or user accounts. Current access policies are subjected to allow/deny access to a printer.
Figure 3-2 Add new printer 3.1.3.1 Name The name used to identify this printer on the system. A friendly description is recommended. Use an easily identifiable name. 3.1.3.2 Model name The model name of the printer. 3.1.3.3 External ID (edit mode only) This field is used by Import/Export routines to update printer information. The system automatically generates this identification in the form ep + printer identifier (e.g., ep1).
3.1.3.4 HP ePrint Enterprise Host The HP ePrint Enterprise host to which the job will be sent. Jobs are processed by the assigned primary or secondary instance. 3.1.3.5 Printer Account (edit mode only) This information is used by the email printing mechanism to identify the printer in the directory. The system automatically generates this information based on the PrinterAccountPrefix setting (set in the settings configuration file) + printer identifier.
3.1.3.12 Personality This field dictates the printer language (PCL or PS) to be used by the driver when sending jobs to this printer. HP recommends using either PCL5/PCL6 or PS option. 3.1.3.13 Capabilities Capabilities are based on properties added in Manage Printer Properties. All properties listed here will impact printer search results based on key words named in Properties. Alternatively, Color and Duplex properties apply print preferences for a printer.
Example: Greenland, with longitude of 51 W degrees, has a required value of -54. 3.1.4 Deleting printers Click an existing printer on the View and Manage Printers screen and then click Delete. The printer can be deleted if it no longer exists in the network. NOTE: This action cannot be reversed. A new printer cannot be added with the same external ID. The external ID for a printer is unique and cannot be assigned to any other printer.
● Off ● PIN Printing - Personal Job ● PIN Printing - Stored Job To import printers, select the file to be imported and click Proceed. The import process validates the record values, and respective success / error messages are emailed to the logged in user. Figure 3-3 Import Printers tool NOTE: Only ANSI characters with comma separated values files are supported for .csv extension. Field values with spaces should be escaped with quotes (“”). 3.2.
NOTE: The first line contains fields to assist printer import. Some fields are mandatory and must remain selected. Figure 3-4 Export Printers tool Click Download to start the Export process. If there are any errors during the export process, an error message displays in the Results panel. If the export completes successfully, the user can download/copy the exported printers. In addition to downloading the files, there is an option to receive the exported printers via email to the logged-in user.
Figure 3-5 Manage Printer Properties 3.5 Adding Secure Pull Printing Secure Pull Printing is implemented by separate solutions that accept print jobs through regular Windows queues, and release these jobs at the printer on demand. Addressing a secure pull print queue (instead of a physical printer) is just a matter of choosing the right connectivity and protocol parameters.
Figure 3-6 Secure Pull Print settings, example HP ePrint Enterprise has been tested with the commercial pull print solutions listed below. Each requires a specific Address Type in the connectivity parameters: Secure Pull Print (HP AC) ● HPACSPPE v14.0 ● Securejet Enterprise Server v7.0 NOTE: To successfully integrate HP ePrint Enterprise with Securejet, select the printer account personality as ‘Auto.’ Secure pull print (LPD/LPRng) ● Ringdale FollowMe® v6.0.4.
NOTE: Complete the following changes in Papercut MF/NG Server: ● Open the configuration file: “\providers\print\win\print-provider.conf” ● Locate the following lines in the file: #Extract from spool files coming from our enterprise system. #Look for a header that matches @PJL COMMENT SAP_USER="john.wayne" ● Add the content below the following lines: UsernameOverridePrefix=@PJL SET ePrintUsername = " UsernameOverrideSuffix=" 3.5.
3.5.1.1 Controlling PJL attribute names Each secure pull print solution may demand that user information be tagged according to its own attribute names in the PJL headers. In order to control how to identify the username and email address for a given user, three system settings are available. To access these settings, reach to %ALLUSERSPROFILE%\Application Data\Hewlett-Packard\HP CloudPrint \conf\cloudprint.settings.xml and locate RenderService.RenderService group.
Figure 3-8 Job Retention, example When Job Retention is set to Personal Job OR Stored Job, HP ePrint Enterprise associates a PIN with the user's print job, and the job gets stored on the printer memory or HDD (Hard Disk Drive). The job delivery notification received at the mobile app contains the job release code (PIN). NOTE: Personal print jobs are stored in MFPs until the device is restarted. These jobs are not printed until released by entering the PIN at MFP control panel.
4 Manage Wi-Fi Printing The Manage Wi-Fi Printing screen allows you to do the following: ● Manage Wi-Fi Bridge users ● Configure HP ePrint Enterprise Wi-Fi Bridges ● Manage Wi-Fi Bridges and printers ● Establish relation between Bridges to Groups and groups to printer accounts (printer accounts — that are already added to the system) 4.1 Add Wi-Fi Bridge user account Before adding an HP ePrint Enterprise Wi-Fi Bridge, add a Wi-Fi Bridge user account to be associated with the bridge.
4.2 View and Manage Bridges A Bridge is associated with zero or more Groups. The information contained in a Bridge is used to connect to the ePrint Enterprise server and print job(s) to printers associated with the groups. Figure 4-2 Wi-Fi Bridge configuration 4.2.1 Bridge Details 4.2.1.1 Name Enter a Bridge name. 4.2.1.2 Enabled Indicates whether or not the Bridge is enabled. Default is True. 4.2.1.
4.2.1.8 Clear Click Clear to remove existing Bridge record data, but keep User Account details. 4.3 View and manage groups Groups are associated with zero or more printers. The groups also contain information about credentials used to secure the groups. Figure 4-3 Wi-Fi group configuration 4.3.1 Group Details 4.3.1.1 Name Enter a Group name. 4.3.1.2 Enabled Indicates whether the group is active or not. Default is True. 4.3.1.
4.3.1.7 Delete Click an existing group on the list, and then click Delete. The group(s) can be deleted if it is no longer required in the network. 4.3.2 Associate Groups to Bridges The Associate Groups to Bridges screen is used to associate Groups to Bridges. It displays the available bridges and groups. Figure 4-4 Associate groups to bridges Select an existing bridge on the list, select the group to be associated, and click Update. This process will update the Group Count information in the Bridge list.
Select an existing group, select the printers to be associated, and click Update. This process will update the Printer Count information in the groups list. 4.3.3.1 Printers Associated Use the Printers Associated column to view printers associated with the groups list. For more information to associate printers to the groups, see the Adding/editing printers section of this guide. 4.3.3.
5 Manage hosts 5.1 View and Manage Hosts The View and Manage Hosts screen is used to perform updates on Hosts added to the system. You can use the Search text box to filter the list. Figure 5-1 Host search and editing screen Table 5-1 Host status descriptions 22 Status Description Ready Host is ready to accept jobs.
Table 5-1 Host status descriptions (continued) Stopped Host is not ready to accept jobs. No Service HP ePrint Enterprise is not installed on the host. You can edit a host by clicking the table row. The Host editing form will show host data that can be updated. For installing the Secondary Instances, the above mentioned deployment Security Token is vital. 5.1.1 Host details 5.1.1.1 Hostname Enter the Hostname in Fully Qualified Domain Name (FQDN) format. NOTE: The hostname must be unique. 5.1.1.
6 Managing users 6.1 View and Manage Users The View and Manage Users screen is used to perform updates on users added to the system. The user list can be filtered using the search box. Figure 6-1 User search and editing screen To edit a user, click the table row and the form will show user information. To update it, choose the Edit button. 6.1.1 User Account details 6.1.1.1 Email Account Enter a valid email address in user@domain format. 6.1.1.
Figure 6-2 Add User Account for Regular user Guest designated users become active at Active On date. Guest will be automatically disabled on Suspend On date. Guest user default active period is three months. 6.1.1.4 PIN The PIN associated with the user’s device. This information is required to trace the metrics of the print job submission from a particular mobile user. 6.1.1.5 Locale The language used to send notifications (push and email messages) to the user. 6.1.1.
6.1.1.11 Suspend On Applies only to Guest users. A Guest user is active until the Suspend On date is reached. The default date of ‘Suspend On’ is 30 days from today. The maximum value for ‘Suspend On’ is 90 days from today. 6.1.2 Deleting users Users cannot be deleted from the HP ePrint Enterprise database due to possible associations with job history. To disable from printing, designate the user as Suspended. 6.1.
Table 6-2 Optional attributes (continued) sAMAccountName sjohn NT account name localeID English (en-US) The language used to send notifications (push and email ) to user. whenToActive Date format as per the culture. Indicates when the created user becomes active. Used to define the value for Guest User. ex. 2/25/2012 whenToSuspend Date format as per the culture. ex. 2/28/2012 Indicates when the created user becomes inactive or suspended. Used to define the value for Guest User.
NOTE: It is mandatory to identify LDAP groups in enterprise directory server, users from which will be synchronized with ePrint Enterprise. If left empty, synchronization will be skipped. For effective synchronization, it is important to be aware of the user account status in enterprise directory server. As LDAP schema definition could be specific to every enterprise, ePrint Enterprise defines a plug-in to manage defining the LDAP attributes and their definitions.
7 Manage services and data 7.1 Service Settings The Service Settings screen is used to edit the HP ePrint Enterprise system configuration. It is a visual representation of the cloudprint.settings.xml file located in the %ALLUSERSPROFILE%/Application Data/ Hewlett-Packard/HP CloudPrint/conf folder. For detailed descriptions of each variable, hover mouse over the text box, or check the "description" tag inside the source XML file.
Figure 7-1 Security Realm For ePrint Enterprise User Directory, user authentication is performed against credentials stored in ePrint Enterprise DB. For Enterprise Directory Server using LDAP, user is authenticated by connecting to enterprise directory server. As the security realm is requested for change the HP ePrint Enterprise administration console displays a login dialog to validate an admin user who can log in to the new realm. Figure 7-2 Validation of Administrator user account 7.
Figure 7-3 LDAP Configuration setting 7.3.1 Server settings 7.3.1.1 Host name Fully Qualified Domain Name (FQDN) or IP address of the LDAP server. 7.3.1.2 Port Port number for connecting through LDAP; default is 389. 7.3.1.3 Using Secure Connection (SSL) Check to use Secure Socket Layer on connection to LDAP server. Section 7.
7.3.1.4 Protocol Version LDAP protocol version to use - values being LDAPv2 and LDAPv3. 7.3.1.5 Authentication Specify the Authentication method to use on an LDAP connection – values being ‘Anonymous’, ‘Basic’, , ‘Negotiate’ and ‘Digest’. Appropriate user credential details are required in the associated format depending on the authentication method described for the enterprise directory server. e.g. ldapserviceuser@mycompany.com or domain\username or cn=username, cn=Users, dc=mycompany, dc=com 7.3.1.
7.3.3.2 Additional filter Helps to refine search of root Distinguished Name; with general syntax followed being (Boolean-Operator (filter) (filter)). Boolean operators are AND (&), OR (|), and NOT (!) e.g. (& (ou=Marketing) (objectClass=*)) 7.3.3.3 Search scope Determines the depth of the LDAP lookup on the Distinguished Name – values can be Base, OneLevel, and Subtree. ● Base - Searches selected root Distinguished Name. ● OneLevel - Searches one level under the selected root Distinguished Name.
Figure 7-5 Job submission test Select the printer you want to test. Select one or more files and click Submit. Jobs can be tracked from the Overview screen using the Track jobs tool. Job rendering is always made to master even if the printer account is configured to use slave. 7.6 Manage License The Instant-On feature is provided for product evaluation. This feature allows customers to use the product for a limited period of 60 days and 51 users. (1 user is installed for administrative purposes).
7.6.1 Encrypted ID The license form displays one or more Encrypted ID(s) used to node-lock licenses alternate to using MAC ID. The Encrypted ID is a combination of server attributes including MAC ID and hard drive serial number, but is a one-way hash and irreversible. For systems with multiple network cards, equal numbers of Encrypted IDs are formed. Click Show All link to view all Encrypted IDs. It is recommended, although not mandatory, to use the first Encrypted ID to node-lock licenses.
8 Manage mobile clients 8.1 Push Configurations (Blackberry specific) Use this tool to send configurations to the HP ePrint Enterprise Blackberry clients (server URL and printing/ routing email account). This method should only be used for testing purposes. The recommended method is to send these settings as BES policies. For more information, see the HP ePrint Enterprise Server Installation Guide. Figure 8-1 Push configurations tool with port 8.1.
9 Email printing Email printing is a capability that allows submission of print jobs by simply forwarding emails to known printer addresses. This can be done from any email client capable of reaching the user’s corporate email account, so the originating email address ("From") has to be compatible with the authorized email account settings in HP ePrint Enterprise.
10 Events and Tracking 10.1 Track jobs Use Track jobs to view jobs submitted to the HP ePrint Enterprise server. Jobs can be filtered by status, user (that submitted the job), document name, or printer name. Figure 10-1 Track jobs screen 10.2 Track messages Use Track messages to view jobs processing through the system. Jobs can be filtered by status, user (that submitted the job), message subject, printer name, or message tag.
Figure 10-2 Track messages screen 10.3 Track events Use Track events to check the HP ePrint Enterprise job flow. You can filter on the module that generated the event, the event type, the user associated with the event, job ID, and message tag, and event data. Section 10.
Figure 10-3 Track events screen 40 Chapter 10 Events and Tracking
11 Reports 11.1 Metrics Report Use Metrics Report to gather statistical system usage. Three report formats are available: CSV, Text, or Screen (web). Click Generate Report to create the report. For CSV or Text formats, a screen asking to save a file will display. Figure 11-1 Metrics Report Section 11.
12 New API configuration 12.1 Introduction HP ePrint Enterprise versions 1.5 and later are able to accept jobs from any client (not only from BlackBerry smartphones) through the use of a new API. This API is installed by default in a web application named gd inside the IIS root (e.g. C:\Inetpub\wwwroot) folder.
12.2.1.6 DisclaimerDisplay Indicates if disclaimers should be displayed. 12.2.1.7 SecureConnections Indicates if client connections should use secure communication through https (see the Secure Communications section of this guide for more information). IMPORTANT: Changing any of these variables will only take effect after IIS Admin (World Wide Web Publishing) services are restarted. 12.2.2 Web application Configuration (web.
3. In Directory Information set the SecureConnections to True. Figure 12-1 Service Settings 4. Click Update. 12.3.2 HP ePrint Enterprise — Host Details 44 1. In the Main menu, under Manage Hosts, click View and Manage Hosts. 2. Click the Host name. In the Host Details section, click Edit.
3. In the Host Details section, set the port specific to HTTPS binding for the respective Master and Slave hosts. Figure 12-2 Host details 4. Click Update. 12.3.3 HP ePrint Enterprise — web.config To enable secure communications the bindingConfiguration must be changed from http to https in web.config. The default installation uses http as the current configuration: Figure 12-3 Binding configuration NOTE: File web.
Figure 12-4 Default disclaimers Disclaimer details are: ● display — a required attribute that indicates if disclaimers should be displayed: ● ALWAYS — meaning the user will see the disclaimer every time a job is submitted. ● ONCE — meaning the user can dismiss the disclaimer on future submissions. ● title and text — contains the disclaimer’s title and text to be presented to the user. ● link — used to open the web browser to present the informed URL.
