11.1 iPrint Appliance Configuration

1. Select a printer or printers, click the AirPrint drop-down menu, then click Enable Advertising.

   Only Apple certified AirPrint printers are supported for AirPrint printing. On enabling the printer for AirPrint, the printer is advertized as an AirPrint-enabled printer.

1. Select a printer or printers, click the Mobile drop-down menu, then click Enable.

   On enabling the printer for mobile, you can print to that printer from your mobile devices.

1. Select a printer or printers, click the Email drop-down menu, then click Enable.

   On enabling the printer for email, you can print to that printer by using the email printing feature.

1. Select a printer, click the Configure drop-down menu, then click Printer Email Settings.

2. Specify the values as follows:

   Account

   Email Address: Specify the full email address of the mailbox to be polled for the print jobs. When an email-based job arrives, the print job is processed to the printer. For example, print@example.com. Username: Specify the user name to be used by iPrint Appliance to log in to the email server to access the private printer email account. For example, iprint. Password: Specify the password for iPrint Appliance to log in to the email server to access the private printer email account.

   Server

   Incoming Mail Server: Specify the address of the incoming email server for the email account. For example, imap.example.com. Incoming Mail Server Port: Specify the port of the incoming email server for the email account. Outgoing Mail Server: Specify the address of the outgoing email server for the email account. For example, smtp.example.com. Outgoing Mail Server Port: Specify the port of the outgoing email server for the email account. Access Method: iPrint Appliance supports two different protocols to poll for incoming print jobs. Select POP or IMAP depending on the protocol your email server supports.

1. To view and modify the details of a printer, click the printer name.

   

2. You can modify the details as follows:

   • AirPrint Advertising: An option is available to enable or disable AirPrint advertising. This option is displayed for only Apple certified AirPrint printers. For all other printers the message will be “Not Applicable”.

   • Bonjour Service Name: Displays the name with which the printer will be advertised as AirPrint printer.

   • Address: Displays the IP address or host name of the printer.

   • Geo-location: (Optional) Geographical location of the printer.

   • Device Location: (Optional) Local location of the printer.

   • Description: (Optional) Specific description related to the printer.

   • Web upload using iPrint Portal: This option enables the QuickPrint button in the iPrint Portal. Using any web browser, the user selects a file and prints. The user no longer requires client or driver installations.

   • Visible to all users in iPrint Portal: By default, all printers are listed in iPrint Portal when a user is not logged in. If you want to hide some printers from the user who is not-logged in, then you can deselect this option.

   • Printer Status: Displays the health monitoring GUI to monitor the printer status.

   • Manage Printer: Displays the iManager GUI to manage the print environment.

   • Manage Certificates: Displays the Certificates page. The certificates are managed from this location.

   • Tags: Specify a label for the printer. Multiple printers can be grouped under same label. In the iPrint Portal, it will be easier for the users to find a specific set of printers. For example, if you specify a tag as Color Printer. In the iPrint Portal, a user can easily locate specific printers by selecting the Color Printer tag.

3. Click Save.

1. Under Configuration, click WalkUp Printers.

2. Click New.

3. Specify the name of the WalkUp (virtual) printer. This name will be exposed to the user when they install printers on their desktop or mobile devices.

4. (Optional) Specify description for the printer.

5. To enable mobile users to use this printer, select Mobile Printing.

6. By default, the Web upload using iPrint Portal option is enabled. This enables the QuickPrint feature in the iPrint Portal and user can print files using any web browser. The user no longer requires client or driver installations.

7. By default, the Visible to all users in iPrint Portal option is enabled. This option lists all the printers in iPrint Portal. If you want to hide some printers from the user who is not-logged in, then you can deselect this option.

8. From the list of printers, select the printers to group under the WalkUp printer. The jobs sent to the WalkUp printer will be put on hold and the user will have control to release those jobs to one of the grouped printer.

   You must select at least one printer.

9. Click Next.

10. Assign platform-specific drivers for the WalkUp printer.

    If Windows drivers are selected, then bi-directional communication can be set for the WalkUp printer.

    1. Specify the IP Address or host name from the pool of the printer that you have selected for WalkUp.

11. Click Finish.

    WalkUp printer object is created that includes group of printers. The jobs on hold can only be released to these printers.

1. Under Configuration, click WalkUp Printers.

2. Click the printer name.

   Displays the details of the printer and its drivers.

3. In the Printer Details tab, modify the details of the printer.

4. Click the Drivers tab, then reassign the drivers for the selected printers. You can also modify the IP address or host name for bi-di communication.

5. Click Save.

   The modified settings are applicable to all jobs sent to the selected WalkUp printer.

1. Under Configuration, click WalkUp Printers.

2. Select a printer or printers, then click Delete.

1. Under Configuration, click WalkUp Printers.

2. Select a printer or printers, click the Mobile drop-down menu, then click Enable.

1. Under Configuration, click WalkUp Printers.

2. Click Settings.

3. Modify the duration to hold a job. This change is applicable only for the jobs put on hold after the setting is modified. The existing jobs will continue to be on hold as per the earlier set duration.

1. The administrator configures the Ethernet 241 switch and card reader.

2. The card reader is attached to the printer.

3. The user prints to a WalkUp queue and job is put on hold.

4. The user swipes his/her identity card on the card reader.

5. The iPrint Appliance server validates the user credentials.

6. All the jobs in the WalkUp queue submitted by the user for that printer are printed.

1. Configure the Card (Ethernet 241) devices as per the instructions of the vendor.

2. Launch the Ethernet 241 Web portal (http://<ethernet241 device’s IP)

   1. In Server’s tab, specify the Data Server IP as the iPrint Appliance IP

   2. The Data Server URl as the iPrint Appliance’s URL (http://hostname or IP of iPrint Appliance)

   3. In the Data Server Str, specify the exact value given below:

      /iprint/users/release?csn=$1&mac=$2&luid=$3&seq=$4&ip=$5&devmac=$6&devip=$7&rdr=$8&fwver=$9

   4. Click on Update to configure the device with the iPrint Appliance details.

3. Launch the iPrint Appliance Management Console:

   1. In the Directory Servers page, select the directory server to use for Card Release.

   2. In the Server Information tab, select Use Card Release for printing jobs and provide the name of the attribute to which the value of the card is mapped. iPrint Appliance uses this attribute to authenticate the user when he/she swipes the card.

1. Under Configuration, click Renderers.

2. Click New.

3. In the Renderer Host/IP address box, specify the host name or IP address of the renderer system, then click Connect.

4. Under Options, specify a name for the renderer in the Renderer Name box.

5. Select the document formats you want the remote renderer to render.

   NOTE:The Build-in PDF renderer is selected by default. If you want to use Adobe Acrobat, you must ensure that Adobe Acrobat Pro is installed on the renderer machine before selecting the Adobe Acrobat option. Similarly, if you want to enable the remote renderer to render Microsoft Office formats, you must ensure that Microsoft Office is installed on the renderer machine before selecting the Office Support option.

6. Choose the Default Printer Driver, then click Register.

You can change a remote renderer’s name, the document rendering options, and the default printer driver using the Edit feature on the Renderers page.

1. Under Configuration, click Renderers.

2. Select a renderer which you want to edit, then click Edit.

3. Modify the details, then click Commit.

1. Under Configuration, click Renderers.

2. Select a renderer that you want to delete, then click Delete.

1. Under Configuration, click Renderers.

2. Select a renderer that you want to activate, then click Activate.

   The renderer is now in an active state.

1. On the Directory Servers Configuration page, click Add.

   or

   To modify an existing LDAP connection, click the URL of the connection in the table.

   IMPORTANT:When modifying an existing LDAP connection, do not modify the LDAP server URL. Doing so can lead to synchronized users being disabled or deleted.

2. On the New Directory Server page, specify the required information.

   

   LDAP Server URL: In order to synchronize initial user information, iPrint Appliance must access an LDAP server where your directory service is running. You must provide the hostname of the server, using a URL with the following format:

   ldap://hostname

   If the LDAP server requires a secure SSL connection, use the following format:

   ldaps://hostname

   If the LDAP server is configured with a default port number (389 for non-secure connections or 636 for secure SSL connections), the port number is not required in the URL. If the LDAP server uses a different port number, use the following format for the LDAP URL:

   ldap://hostname:port_number
   ldaps://hostname:port_number

   If the LDAP server requires a secure SSL connection, additional setup is required. You must import the root certificate for your LDAP directory into the Java KeyStore (JVM Certificates) from Directory Servers > Upload Certificate on the iPrint server, before you configure iPrint Appliance for LDAP synchronization. After importing the certificate, you must restart the iPrint Appliance.

   Alias Name for URL (Optional): You can specify an alternative name for the LDAP server instead of the IP or hostname.

   User DN (Proxy User for Synchronizing Users and Groups) To sync users into iPrint Appliance, you must provide the user name and password of a user who has sufficient rights to access the user information on the LDAP server.

   Directory Service	Required Rights
   eDirectory	[All Attribute Rights] - Compare & Read [Entry Rights] - Browse (on the container containing the users that need to be imported into iPrint)
   Active Directory	Any authenticated user can be used as the proxy user as long as there are no read restrictions in place on the Organizational Unit (OU) that contains the users. Required rights if OU read restrictions are in place: Read (on the Organizational Unit containing the users that need to be imported into iPrint) Ensure that This object & all descendant objects is selected in the Security tab under the advanced options

   In your LDAP directory tree, you must provide the fully qualified, comma-delimited user name, along with its context, in the format expected by your directory service.

   Directory Service	Format for the User Name
   eDirectory	cn=username,ou=organizational_unit,o=organization
   Active Directory	cn=username,cn=organizational_unit,dc=domain_component

   Password: Password for the User DN.

   Directory Type: The directory type that you are connecting to. Select eDirectory, Active Directory, or Other.

   Unique Attribute for User or Group: The LDAP attribute that uniquely identifies a user or group helps facilitate renaming and moving iPrint users and groups in the LDAP directory. If this attribute is not set and you rename or move a user in the LDAP source directory, iPrint Appliance assumes that the new name (or the new location of the same name) represents a new user rather than a modified user, and creates a new iPrint Appliance user.

   For example, you have an iPrint user with a given name of William Jones. If William changes his name to Bill and you make that change in the LDAP directory, iPrint Appliance creates a new user named Bill Jones.

   To ensure that iPrint Appliance modifies the existing user instead of creating a new user when the user is renamed or moved in the LDAP directory, you must specify the name of the LDAP attribute that uniquely identifies the user. For eDirectory, this value is GUID. For Active Directory, this value is objectGUID. This attribute always has a unique value that does not change when you rename or move a user in the LDAP directory. If you want to map users to a different attribute, you must ensure that the attribute that you use is a binary attribute. For example, the cn attribute cannot be used because it is not a binary attribute.

   Account Name Attribute: This setting is used for two purposes:

   • The value is used as the iPrint Appliance user name when the user is first provisioned from LDAP. The value of this attribute must be unique.

   • During iPrint Appliance login, iPrint Appliance uses this attribute to locate the user in the LDAP directory, and then tries to authenticate as that user.

   LDAP directories differ in the LDAP attribute used to identify a User object. Both eDirectory and Active Directory might use the cn (common name) attribute. A more sure alternative for Active Directory is to use the sAMAccountName attribute. Other LDAP directories might use the uid (unique ID) attribute, depending on the structure and configuration of the directory tree.

   Consult with your directory administrator in order to determine the best attribute to use. In some cases where not all users are being imported successfully, you must set up two LDAP sources pointing to the same LDAP server and have each source use a different value for the Account Name Attribute. For example, set up one LDAP source and use cn as the Account Name Attribute, and then set up a separate source to the same LDAP server and use sAMAccountName as the Account Name Attribute.

   In addition to the attributes already mentioned in this section, other LDAP attributes can be used for the Account Name Attribute, as long as the attribute is unique for each User object. For example, the mail LDAP attribute on User objects can be used to enable iPrint Appliance users to log in by using their email addresses.

   Use Card Release for printing jobs: Select this option to release WalkUp jobs by using the identity cards.

   Specify the attribute that maps the user to their identity card. When releasing the WalkUp job, iPrint Appliance maps this attribute to the one specified in the eDirectory or Active directory database and on receiving the user details, authenticates the user. On successful authentication, the jobs are released.

3. Click OK.

4. In the Add Search Context, select Users or Groups.

   

   Base DN: iPrint Appliance can find and synchronize initial user information from user or group objects located in one or more containers in the LDAP directory tree. A container under which user or group objects are located is called a base DN (distinguished name). The format you use to specify a base DN depends on your directory service.

   When you synchronize user information into iPrint Appliance from a source LDAP directory service, the entire Base DN on the source is imported into iPrint Appliance. For example, if you sync the context o=users from an LDAP source, the same o=users context is created in iPrint Appliance.

   Directory Service	Format for the User Container
   eDirectory	ou=organizational_unit,o=organization
   Active Directory	cn=organizational_unit,dc=domain_component

   Container names cannot exceed 128 characters. If the container name exceeds 128 characters, users are not provisioned.

   Filter: To import potential iPrint users, iPrint Appliance by default filters on the following LDAP directory object attributes:

   • Person

   • orgPerson

   • inetOrgPerson

   To import groups based on information in your LDAP directory, iPrint Appliance filters on the following LDAP directory object attributes:

   • group

   • groupOfNames

   • groupOfUniqueNames

   You can add attributes to the user or group filter list if necessary. You can use the following operators in the filter:

   • | OR (the default)

   • & AND

   • ! NOT

   You might find it convenient to create a group that consists of all the users that you want to set up in iPrint Appliance, regardless of where they are located in your LDAP directory. After you create the group, you can use the following filter to search for User objects that have the specified group membership attribute:

   (groupMembership=cn=group_name,ou=organizational_unit,o=organization)

   IMPORTANT:If you create a filter to search for a specific group to find users, users that are located in any sub-groups to that group are not synchronized.

   When synchronizing against Active Directory, you can create a filter that synchronizes users in sub-groups by using the following rule object identifier (OID):

   <attribute name>:<matching rule OID>:=<value> 

   Ensure that you include parentheses in your filter.

   Directory Service	Filter to search for User objects
   eDirectory	(groupMembership=cn=group_name,ou=organizational_unit,o=organization)
   Active Directory	(memberOf=cn=group_name,ou=organizational_unit,dc=domain_component)

   Search Subtree: Select whether you want iPrint Appliance to search for users or groups in containers below the base DN (that is, in subtrees).

5. Click Add. This adds the user or group.

   1. To add another user or group, click Add Search Context, then select Users or Group.

   2. Specify the Base DN and other details, then click Add.

6. Click OK to save the directory server configuration.

1. On the Directory Servers Configuration page, select the LDAP configuration that you want to delete, then click Delete.

1. On the Directory Servers Configuration page, click Synchronization.

2. Click Schedule.

   1. Select whether to run the LDAP synchronization every day, or on specific days of the week. You can also perform a sync once a day at a specified time, or multiple times each day.

   2. Click Save.

1. Click Options adjacent to Trusted CA Signed Certificate.

2. Click Generate Certificate Signing request (CSR).

3. Specify the following information:

   Common Name (CN): This is auto-populated with the appliance's hostname. If the appliance is configured with transferable DNS, the CN should match the Print Manager DNS name mentioned in Print Manager configuration file or the name specified during the initial configuration of appliance. Else the print service will be down.

   Organization (O): (Optional) Large organization name. For example, Micro Focus, Inc.

   Organizational Unit (OU): (Optional) Small organization name, such as a department or division. For example, Purchasing.

   Two-letter Country Code (C): (Optional) Two-letter country code. For example, US

   State or Province (ST): (Optional) State or province name. For example, Utah.

   City or Locality (L): (Optional) City name. For example, Provo.

   Key Size: Select the desired algorithm and key size.

4. Click Generate.

   

   This generates the CSR file. You can delete the file, if you need a new CSR.

5. To download the CSR, click Download.

   Send the CSR to a certificate authority (CA). The CA takes the CSR and generates an official certificate based on the information in the CSR. The CA then mails the new certificate and chain certificates back to you.

6. Click Upload to import the CA reply to the iPrint Appliance.

   or

   1. If you have not generated the CSR from iPrint Appliance, then to import the certificates click Trusted CA Signed Certificate > Options > Upload Certificates.

      

   2. To apply the certificate, drag and drop all the files received from the CA. Specify the Passphrase and click Upload.

      

7. Click OK to apply the certificates. The session expires due to restart of services, you must relogin to the appliance.

   

8. The Certificates tab displays the active certificate.

   

9. (Conditional) If you need to update the chain certificates for the active certificate, click Update Chain and upload the chain certificates.

10. (Conditional) If you want to apply the certificate to another iPrint appliance, click Download. The downloaded file is in .p12 format. When you upload this certificate (.p12 format) to another appliance, you must specify the passphrase as changeit.

11. (Conditional) If you delete the third party certificate, a new self-signed certificate is generated and applied to the appliance.

1. To launch the iPrint Map Designer tool, go to https://server_address/maptool.htm in Internet Explorer, where server_address is the server’s IP address or host name of the server where the iPrint Manager is running.

2. Select a map from the Background > image drop-down list.

3. Add a printer to the map:

   1. From the Printer image field, select the type of printer and icon size you want.

      Sizes range from 1 to 6, with 1 being the largest. Icons with a C indicate color printers.

   2. Click the Printer icon and drag the printer to the desired location on the map.

   3. Select a printer from the Printer list.

      Next to the Printer list field, click the Browse icon and specify the IP address or host name of the server where the Print Manager is running.

   4. From the Printer list, select the printer that you want to associate with the printer icon.

      On selection of the printer, the Printer agent and Print Manager information is populated. By default, Mouse over text displays the Printer Agent’s name.

      You can add printers from different Print Managers to the same map. Click the Browse icon adjacent to the Printer list field, specify the IP address or host name of the server where the Print Manager is running.

   5. (Optional) In the Printer Caption field, specify the title for the printer.

   6. (Optional) From the menu bar, click Edit > Font to change the base font, color, and size for text on the map.

4. Click File > Save As to save the map in an HTML format. For example, filename.html. You can upload this HTML file to a Web server and use an HTML editor to customize the page.

   IMPORTANT:Do not click Refresh or exit Internet Explorer without saving the map.

1. Create a HTML file (sample1.html) to customize iPrint for your environment.

   You can associate a printer with the printers’s IPP URL.This URL is displayed when you enable IPP for a printer.

   1. In iManager, click iPrint > Manage Printer.

   2. Browse to and select the printer you want.

   3. Click Client Support > iPrint Support.

      The printer’s URL is displayed under Current iPrint URL.

2. Copy the HTML file (sample1.html) to the var/opt/novell/iprint/htdocs folder.

3. Use the web browser to view the map https://server_address/ippdocs/sample1.html

1. Under Configuration, click License.

   The License page displays the license details of the iPrint Appliance.

1. On the License page, browse and select a valid license (.xml) file to upload.

2. Click Upload.

   IMPORTANT:If you are running multiple copies of iPrint Appliance, you must update the license for each copy of iPrint Appliance individually.