Novell iPrint Appliance 1.1 Beta Administration Guide

This guide describes how to install, configure, and customize Novell iPrint Appliance on your network.

Section 1.0, iPrint Appliance Overview

Section 2.0, What’s New or Changed in iPrint Appliance

Section 3.0, System Requirements for iPrint Appliance

Section 4.0, Installing iPrint Appliance

Section 5.0, Setting Up iPrint Appliance

Section 6.0, Remote Renderer Installation and Configuration

Section 7.0, AirPrint through iPrint

Section 8.0, Email Printing

Section 9.0, iPrint Appliance System Configuration

Section 10.0, iPrint Appliance Management

Section 11.0, Configuring MobileIron to Manage the iPrint App

Section 12.0, iPrint Appliance License Information

Section 13.0, iPrint Appliance Firewall Exceptions

Section 14.0, Monitoring iPrint Appliance Performance with Ganglia

Section 15.0, Advanced Configuration for iPrint Mobile Service (Optional)

Section 16.0, Backup and Restore iPrint Appliance

Section 17.0, Upgrading iPrint Appliance

Section 18.0, Troubleshooting iPrint Appliance

Section 19.0, Known Limitations

Section A.0, Supported Document Formats

Section B.0, Email Service Parameters

Section C.0, Traditional iPrint Client Authentication

Section D.0, Best Practices

Section E.0, Installing VMware Tools

Section F.0, iPrint Client Management with Novell iPrint Appliance

Section G.0, iPrint Appliance Support Matrix

Section H.0, iPrint Appliance Documentation Updates

Audience

This guide is intended for Novell iPrint Appliance administrators.

Feedback

We want to hear your comments and suggestions about this manual and the other documentation included with this product. Please use the User Comments feature at the bottom of each page of the online documentation.

Documentation Updates

For the most recent version of the Novell iPrint Appliance 1.0.1 Administration Guide, and other documentation for this product, visit the Novell iPrint Appliance 1.0.1 Documentation Web site.

For information about configuring and using the mobile app, see the iPrint Appliance User Guide, or the Help section of the app.

1.0 iPrint Appliance Overview

Section 1.1, Overview

Section 1.2, Differences Between iPrint Appliance 1.0.1 and 1.1

Section 1.3, Printing Methods

Section 1.4, Document Rendering

Section 1.5, Supported Document Formats

Section 1.6, Using MobileIron to Manage the iPrint App

1.1 Overview

Novell iPrint Appliance 1.1 is a virtual appliance that offers cross-platform, self-service printing for the enterprise. It allows users to print to your current printers from all your desktops, laptops, and mobile devices. Novell iPrint Appliance supports Active Directory and mobile identities. It scales to fit organizations of any size and provides a single solution to manage all of your printing across multiple office locations.

With iPrint Appliance, you can print in multiple ways:

Using Laptops or Desktops

Using the Novell iPrint App

Using AirPrint (iOS Devices Only)

Using Email

Using QR Code

After configuring iPrint Appliance, you can use the iPrint Client on desktops and laptops to print to iPrint printers. On mobile devices, you can print using the Novell iPrint app available on the App stores. The Novell iPrint app submits documents for printing using the Share functionality on Android, and the Open In functionality on iOS. To submit the print job, the app uses the IPP (Internet Printing Protocol) method. If a direct network connection to iPrint Appliance is unavailable, the app switches to email printing, and uses the email client configured on the device.

For information about configuring and using the mobile app, see the Novell iPrint 1.0.1 User Guide, or the Help section of the app.

1.2 Differences Between iPrint Appliance 1.0.1 and 1.1

iPrint Appliance 1.1

iPrint Appliance 1.0.1

Server side multi-driver configuration through the Management Console

Server side multi-driver configuration through command line

Server render configures automatically

Server renderer requires additional configuration

PDF rendering using CUPS

PDF rendering using LibreOffice

Automatic Printer Driver Updates

Manual Printer Driver Updates

Default driver for local and server rendering

No default driver

Supports printer import using CSV

No support for CSV Import

Supports patch update functionality

No support for patches

Supports configuration upload functionality

No support for configuration upload

Register remote renderer from the Management Console

No support for registering remote renderer from the Management Console

Support for change Driver Store post initial configuration

No support for changing Driver Store post initial configuration

Support for renaming printers through the Management Console

No support for renaming printers

1.3 Printing Methods

Section 1.3.1, Using Laptops or Desktops

Section 1.3.2, Using the Mobile App

Section 1.3.3, Using AirPrint (iOS Devices Only)

Section 1.3.4, Using Email

Section 1.3.5, Using QR Code

1.3.1 Using Laptops or Desktops

iPrint Appliance allows enterprise users to install printers and print documents seamlessly. Users can install printers using the iPrint URL provided by their administrator. The iPrint page displays the available printers. Users can click a printer to install the iPrint Client, download the printer’s driver, and create a printer on their workstation. Users can then print documents to the printer from any application on their desktops and laptops.

To set up iPrint Appliance for desktop and laptop printing, see the Setting Up iPrint section in the OES 11 iPrint Administration Guide.

To install the iPrint on client workstations, see the Installing and Setting Up iPrint on Client Workstations section in the OES 11 iPrint Administration Guide.

1.3.2 Using the Mobile App

The Novell iPrint app prints documents from mobile devices using the IPP (Internet Printing Protocol) method. IPP is a standard network protocol for remote printing and print management.

iPrint Appliance’s print server converts documents to a printer friendly format (PostScript), and sends them to the printer for printing.

IMPORTANT:The Novell iPrint app is available on Android, iOS, and BlackBerry platforms. To download the Novell iPrint app, search for Novell iPrint on Google’s Play Store, Apple’s App Store, or BlackBerry’s BlackBerry World.

1.3.3 Using AirPrint (iOS Devices Only)

AirPrint is a printing technology created by Apple for iOS devices. iOS devices can print to any AirPrint-enabled printer, wirelessly, using Apple’s driverless printing architecture. iPrint Appliance takes advantage of this technology, enabling non AirPrint-enabled printers to be published as AirPrint printers over the wireless network. You can seamlessly print documents and images from your iOS devices over the wireless network. iOS devices do not require a software download or driver installation. With just a few taps from any AirPrint-enabled iOS application (for example, Mail, Photos, Safari, and iBooks), you can print to an iPrint AirPrint-enabled printer.

For more information about AirPrint through iPrint, see Section 7.0, AirPrint through iPrint.

1.3.4 Using Email

iPrint Appliance accepts print jobs through email messages and attachments, using your existing enterprise email infrastructure.

There are two kinds of email printing:

Printing using the email client: You can print documents from any device capable of sending emails. You can print emails by specifying email printing commands in the subject line of the email. You can also print documents by emailing them to your printer as attachments. For more information on email printing and commands, see Section 8.0, Email Printing.

Email printing through the app: The Novell iPrint app uses Direct IPP printing by default. If Direct IPP printing fails, iPrint Appliance switches over to email printing as a fallback option. The Novell iPrint app generates an email, attaches the document to the email, and sends the email to iPrint Appliance. iPrint Appliance then issues the print request in the IPP format.

By default, email printing is disabled. To enable email printing, see Section 8.1, Enabling Email Printing.

IMPORTANT:For enhanced security, email printing to secure printers is disabled.

NOTE:It is important that iPrint Appliance has a high bandwidth connection to the mail server provided during initial configuration. An email containing large attachments can take several seconds or minutes to download, depending on the connection speed between the print server and the mail server. This can cause delays in processing the remaining emails, thereby delaying printing for subsequent documents.

1.3.5 Using QR Code

QR code is a machine-readable code which consists of a matrix of white and black squares. It is used to store URLs and other information that smart phone cameras can read.

The Novell iPrint app on iOS and Android platforms enables you to print documents and images by simply scanning the QR Code of a printer.

1.4 Document Rendering

iPrint Appliance strives to provide a client independent and driverless printing environment to mobile users. The iPrint Appliance print server performs the task of converting documents into print-ready formats, and printing the documents using an internal document renderer. iPrint Appliance also ships with a remote document renderer. For desktop-quality printing, the remote renderer is recommended.

Section 1.4.1, Internal Renderer

Section 1.4.2, Remote Renderer

1.4.1 Internal Renderer

The server renderer on iPrint Appliance 1.1 is bundled with an in-built document renderer. The renderer supports Open Office and image formats, has a multithreading feature, and provides better support for Microsoft Office formats. The server renderer converts documents to the PDF format, then converts them to the print ready format using CUPS. The server render also contains the following features:

Automatic Printer Driver Update: The automatic printer driver update feature checks the printer driver association every time a print job is completed. This ensures that the printer always uses the latest printer drivers.

Default Driver: If a printer does not have a driver associated to it, the default printer driver PostScript 3 is automatically used to print documents.

NOTE:The server renderer supports a broad range of formats, beyond the officially tested formats Writer (odt), Calc (ods), Impress (odp), and all image formats. These formats include Static HTML pages, Adobe PDF, and Microsoft Office. However, printing quality varies, depending on the document complexity. We strongly recommend that you use the remote renderer if you intend to print Microsoft Office and Adobe PDF formats.

The Renderers page on the Management Console displays the server rendering formats, and the default driver used.

1.4.2 Remote Renderer

iPrint Appliance ships with a remote document renderer. For desktop-quality printing, it is highly recommended that you install the remote renderer. You can download the remote renderer from the iPrint Appliance Management Console.

The remote renderer provides high quality rendering for Microsoft Office and PDF document formats. The renderer uses Microsoft Office and an in-built PDF renderer to render documents. If you do not want to use the in-built PDF renderer, you can also install Adobe Acrobat Pro for PDF rendering.

The remote renderer on iPrint Appliance 1.1 contains the following features:

Multi-driver support

Certificate based communication for increased security

In-built PDF renderer

Automatic printer driver updates

Management through the Management Console

The remote renderer runs on a standalone Windows 64-bit machine, and communicates with the iPrint Appliance print server for document conversion. Although it is not a mandatory requirement for iPrint Appliance, the remote renderer is strongly recommended for desktop quality printing.

The remote renderer supports document formats such as Word, Excel, PowerPoint, RTF, and PDF.

1.5 Supported Document Formats

iPrint Appliance supports the following document formats:

Open Office and LibreOffice formats (Writer, Calc, and Impress)

Microsoft Office formats (Word, Excel, PowerPoint, and RTF)

PDF

Image formats (jpg, gif, png, bmp)

Text files (txt)

Static HTML content

NOTE:Static HTML content refers to the HTML content that does not change or have dependencies on external files such as MySQL database and JavaScript.

For a comprehensive list of supported document formats, see Section A.0, Supported Document Formats.

1.6 Using MobileIron to Manage the iPrint App

iPrint Appliance 1.0.1 provides support for managing the iPrint mobile app with MobileIron when using the iPrint 1.0.2 mobile app.

When using MobileIron to manage the iPrint app, the following features are supported for both iOS and Android:

Populate the Server IP Address field for login

Populate the User ID field for login

Populate the Password field for login

For more information on configuring MobileIron, see Section 10.0, iPrint Appliance Management.

2.0 What’s New or Changed in iPrint Appliance

This section describes enhancements and changes to Novell iPrint Appliance.

Section 2.1, What’s New (iPrint Appliance 1.1 Beta)

Section 2.2, What’s New (iPrint Appliance 1.0.1 Patch 1)

2.1 What’s New (iPrint Appliance 1.1 Beta)

iPrint Appliance 1.1 provides the following enhancements and behavior changes in the iPrint Appliance 1.1 Beta release:

Simple and intuitive installation process.

Updated mobile apps include additional features like QR code printing, customizable printer display name, and the ability to add multiple print servers.

Ability to rename and refresh printers

Ability to bulk import printers through a csv file

Ability to change the Remote Driver Store port initial configuration

Ability to control the email polling interval through the Management Console

Automatic migration of iCM and ACL during the printer import process

2.2 What’s New (iPrint Appliance 1.0.1 Patch 1)

In addition to bug fixes, iPrint provides the following enhancements and behavior changes in the 1.0.1 Patch 1 release.

2.2.1 In-Built PDF Renderer

Until iPrint Appliance 1.0.1, Adobe Acrobat Pro was mandatory to render PDF documents using the remote renderer. On iPrint Appliance 1.0.1 Patch 1, the remote renderer is bundled with an in-built PDF renderer. By default, PDF documents are rendered using the in-built PDF renderer. However, you can also use Adobe Acrobat Pro for PDF rendering by installing Adobe Acrobat Pro on the Windows machine where the remote renderer is installed, and modifying the document format options from the Management Console.

3.0 System Requirements for iPrint Appliance

Section 3.1, iPrint Appliance System Requirements

Section 3.2, Remote Renderer System Requirements

Section 3.3, AirPrint through iPrint System Requirements

3.1 iPrint Appliance System Requirements

iPrint Appliance works best with the virtualization software versions listed below. However, iPrint Appliance works with any virtualization software that can run the .ovf, .vmx , or .xen file formats.

Any virtualization software listed below:

Hyper-V: Windows Server 2012 Hyper-V and Windows Server 2008 Hyper-V

Xen 4.2.2_04-0.7.5 on SLES 11 SP2 and SLES 11 SP3

VMware ESX 4.x, ESXi 4.x, ESXi 5.x or higher

A VMware vSphere client 4.x or VMware vSphere client 5.x for accessing the host server and appliance for initial configuration

VMware Workstation 9 on Windows 7 and SLES. VMware Workstation 9 is certified, however, VMware Workstation 8 works with no major issues.

Microsoft Internet Explorer 9 or 10, or the latest version of Mozilla Firefox or Google Chrome, or Safari on Mac, for configuring and managing iPrint Appliance after installation

IP address information to assign to iPrint Appliance, including:

Static IP address

Network mask

Gateway IP address

DNS host name associated with the IP address

IP address of a DNS server

4 GB RAM or higher is recommended

40 GB hard disk space is recommended

NOTE:For VMware system requirements, see Minimum system requirements for installing ESX/ESXi on the VMware support page.

3.2 Remote Renderer System Requirements

For desktop quality printing for Microsoft Office and PDF documents, you must install a remote document renderer. You must install the renderer on a Microsoft Windows 64-bit system. The minimum requirements are as follows:

Microsoft Windows 7/Windows 8/Windows 8.1/Windows 2008 R2 or Windows 2012 R2 64-bit with a dual-core processor or higher

Microsoft Office 2010

Adobe Acrobat X Pro or higher (Optional)

Microsoft .Net Framework 4

3.3 AirPrint through iPrint System Requirements

To enable AirPrint through iPrint, your network must meet the following requirements:

3.3.1 Hardware Requirements

Router or Gateway with an option to forward mDNS (Apple Bonjour) multicast advertisements on all or selected wireless VLANs

Wireless router that supports mDNS (Apple Bonjour) between wired and wireless machines

The wireless routers are expected to have the capability for IGMP snooping. IGMP snooping is required to disallow the multicast traffic on those network interfaces that are not participating in AirPrint's Bonjour multicast discovery.

The wireless network switches must not be interconnected for redundancy. This results in a Layer 2 switching loop.

3.3.2 Network Requirements

Wireless network with no interconnection

IP Multicast network (IP Multicast must be enabled on network devices such as routers and switches)

4.0 Installing iPrint Appliance

Before installing iPrint Appliance, see Section D.0, Best Practices to ensure a seamless experience with iPrint Appliance.

Section 4.1, Downloading iPrint Appliance and Configuring the Virtual Environment

Section 4.2, Installing iPrint Appliance

4.1 Downloading iPrint Appliance and Configuring the Virtual Environment

You must download the iPrint Appliance and configure the virtual environment where you plan to run the appliance. This includes configuring the system resources.

The process of downloading the iPrint Appliance and configuring the virtual environment differs, depending on which virtual environment you plan to use to run the iPrint Appliance.

Section 4.1.1, VMware Configuration

Section 4.1.2, Xen Configuration

Section 4.1.3, Hyper-V Configuration

4.1.1 VMware Configuration

Download the iPrint software (iPrint.x86_64-version.ovf.zip) to your management workstation.

You can download the software from the Novell Customer Center (NCC). Or, you can download an evaluation version of the software from the Novell Downloads page.

Extract the iPrint.x86_64-version.ovf.zip file on your management workstation so that the iPrint-version file folder appears.

In the vSphere client, click File > Deploy OVF Template.

NOTE:If the virtualization software you are using does not support ovf, you must convert the .ovf file to .vmx using the VMware OVF Tool available on the VMware Website.

Browse to and select the .ovf file in the iPrint-version file folder.

Click Next.

Click Next again.

In the Name field, rename the iPrint appliance to a name of your choice, then click Next.

Click Next to accept the default for the disk format.

Click Finish.

(Optional) Create a separate VMware hard disk for the appliance. This is the location where you will store your iPrint files.

In the vSphere client, right-click the virtual machine that you just created, and for which you want to create secondary storage, then click Edit Settings.

The Virtual Machine Properties page is displayed.

On the Hardware tab, click Add.

The Add Hardware dialog box is displayed.

Select Hard Disk, then click Next.

Select Create a new virtual disk, then click Next.

In the Disk Size field, specify the amount of hard disk space that you want to allocate. 40 GB is recommended.

Select a datastore, then click OK.

Click Next.

Click Finish.

Increase the amount of memory that VMware allocates for the iPrint appliance.

In the Virtual Machine Properties window, select Memory, then increase the setting to a suitable size for your environment. 4 GB is recommended.

Click OK to exit the Virtual Machine Properties window.

Power on the appliance (virtual machine).

Continue with Section 4.2, Installing iPrint Appliance.

4.1.2 Xen Configuration

Log in to the host server either locally or from a remote workstation.

You can use the following command to log in to the host server from a remote workstation on Linux:

ssh -X root@host_ip_address

You must use the -X in the command in order to display the GUI installation program. The steps in this section use the GUI installation program to configure the server.

Navigate to the /var/lib/xen/images directory on the host server.

Create a new directory inside the images directory where you can download the iPrint software.

The name of this directory must be the same as the name that you plan to use for your iPrint virtual appliance. For example, if you plan to name the iPrint appliance iPrint1, the name of this new directory must also be iPrint1.

Change to the directory that you just created. For example, /var/lib/xen/images/iPrint1.

Download the iPrint software (iPrint.x86_64-version.xen.tar.gz) to the current directory on the host server. For example: /var/lib/xen/images/iPrint1

You can access the software from the Novell Customer Center (NCC). Or, you can access an evaluation version of the software from this location on the Novell Downloads page.

Untar the iPrint.x86_64-version.xen.tar.gz file in the directory where you downloaded it.

You can use the following command to untar the file:

tar -Sxvzf iPrint.x86_64-version.xen.tar.gz

A iPrint-version directory is created, which contains a .raw file that you will use to run the virtual image. This process can take a few minutes.

From the host server, run the following command to launch the GUI configuration menu:

vm-install

The Create a Virtual Machine wizard is displayed.

Click Forward.

Select I have a disk or disk image with an installed operating system, then click Forward.

Leave SUSE Linux Enterprise Server 11 selected, then click Forward.

Rename the virtual machine by clicking Name of Virtual Machine, then specifying a new name in the Name field. Then click Apply. For example, iPrint1.

Configure the amount of memory and number of CPUs that Xen allocates for the iPrint appliance.

On the Summary page, click Hardware, then specify the following information:

Available Memory: Displays the amount of available memory that is available on the host server.

Initial Memory: 4 GB is the recommended minimum amount of memory.

Maximum Memory: Set this to the same value that you set for Initial Memory.

Available Processors: Displays the number of available processors on the host server.

Click Apply.

Configure the bootable disk image:

On the Summary page, click Disks.

Click Harddisk.

On the Virtual Disk page, specify the following information:

Source: Click Browse, then browse to the .raw file that you untared in Step 6.

Protocol: Select file:.

Size (GB): The default size is 40.1 GB. This cannot be changed.

Create Sparse Image File: This option is not available.

Read-Only Access: Do not select this option.

Click OK.

(Optional) Create a separate Xen hard disk. You must add a hard disk to the virtual machine before you choose this option. If you have not already added a hard disk, click Power Off Virtual Machine, modify the virtual machine settings to add a hard disk, then power on the virtual machine.

NOTE:If you do not add a hard disk to the virtual machine, then iPrint Appliance is installed on the default partition. The default partition is /sda.

On the Disks page, click Harddisk.

On the Virtual Disk page, specify the following information:

Source: This field should already contain the path to the .raw file that will be created when the virtual machine is created. If desired, you can rename the disk in the source field from disk0 to a name of your choosing.

Size (GB): Specify the amount of hard disk space that you want to allocate. 40 GB is recommended.

Click OK > Apply.

Click OK to save your changes and to create and power on the virtual machine.

IMPORTANT:Do not power on the appliance until you have created a separate Xen hard disk for the appliance, as described in Step 14.

Continue with Section 4.2, Installing iPrint Appliance.

4.1.3 Hyper-V Configuration

Log in to the host server either locally or from a remote workstation.

You can use Windows Remote Desktop to log in to the host server from a remote workstation.

Create a new directory in the location where you want each virtual machine to reside (for example, C:\Users\Public\Documents\Hyper-V\Virtual Hard Disks). In a later step, you will download the iPrint software to this directory.

As a best practice, give this directory the same name as the name that you plan to use for your iPrint virtual appliance. For example, if you plan to name the iPrint appliance iPrint1, the name of this new directory should also be iPrint1.

Download the iPrint software (iPrint.x86_64-version.vhd.zip) to the directory on the host server that you created in Step 2.

You can access the software from the Novell Customer Center (NCC). Or, you can access an evaluation version of the software from this location on the Novell Downloads page.

Extract the iPrint.x86_64-version.vhd.zip file to the directory on the host server that you created in Step 2.

Open the Hyper-V Manager.

In Hyper-V Manager, right-click the disk name in the Action Pane in the left-hand column of the Hyper-V Manager window. This is the disk where you want to create the new virtual machine. Then click New > Virtual Machine.

The New Virtual Machine Wizard is displayed.

Review the Before You Begin page, then click Next.

In the Name field, specify a name for the new virtual machine. For example, iPrint1.

Click Next.

In the Startup memory field, specify the amount of memory (in MB) to allocate to the virtual machine. 4 GB is the recommended minimum for a iPrint.

Click Next.

On the Configure Networking page, select the networking card of your choice, then click Next.

Configure the bootable disk image:

On the Connect Virtual Hard Disk page, select Use an existing virtual hard disk, then browse to the .vhd file that was in the downloaded .zip file that you extracted in Step 4.

Click Open to select the file, then click Next.

Click Finish.

(Optional) Create a separate Hyper-V hard disk for the appliance. You must add a hard disk to the virtual machine before you choose this option. If you have not already added a hard disk, click Power Off Virtual Machine, modify the virtual machine settings to add a hard disk, then power on the virtual machine.

NOTE:If you do not add a hard disk to the virtual machine, then iPrint Appliance is installed on the default partition. The default partition is /sda.

In Hyper-V Manager, right-click the disk that you just created, then click Settings.

In the Hardware section, select IDE Controller 1, select Hard Drive, then click Add.

Select Virtual hard disk, then click New.

Review the Before You Begin page, then click Next.

On the Choose Disk Format page, select VHD, then click Next.

On the Choose Disk Type page, select Fixed size, then click Next.

On the Specify Name and Location page, specify the following information, then click Next:

Name: Specify a name for the hard disk. For example, iPrintDisk2.

Location: Specify the location where you want the hard drive to be located.

On the Configure Disk page, select Create a new blank virtual hard disk, then specify a size for the hard disk. 40 GB is recommended.

Click Next.

Review the summary information, then click Finish.

Click Apply > OK.

Right-click the virtual machine, then click Start.

IMPORTANT:Do not start the appliance until you have created a separate Hyper-V hard disk for the appliance, as described in Step 15.

Right-click the virtual machine, then click Connect.

Continue with Section 4.2, Installing iPrint Appliance.

4.2 Installing iPrint Appliance

After you have downloaded the iPrint appliance, configured the virtual environment, and powered on the appliance, click the Console tab.

After the appliance starts, select your preferred keyboard layout in the Keyboard Language drop-down, then accept the license agreement by clicking Accept.

NOTE:You can change the language the license agreement is displayed in from the License Language drop-down.

The Novell iPrint Appliance Passwords and Time Zone page is displayed.

On the Novell iPrint Appliance Passwords and Time Zone page, specify the following network information:

Root password and confirmation: The root password for your iPrint appliance.

Vaadmin password and confirmation: The preferred user to use when logging in to the appliance.

NTP Server: The IP address or DNS name of the reliable external Network Time Protocol (NTP) server your OES server uses. For example, time.example.com.

For the best results, set up NTP in accordance with the VMware best practices guidelines.

Region: Your local region.

Time Zone: Your local time zone.

Click Next.

On the Novell iPrint Appliance Network Settings page, specify the following information:

Hostname: The fully qualified DNS host name associated with the appliance’s IP address. For example, myiPrint.mynetwork.example.com.

IP Address: The static IP address for the appliance. For example, 172.17.2.3.

Network Mask: The network mask associated with the appliance’s IP address. For example, 255.255.255.0.

Gateway: The IP address of the gateway on the subnet where your iPrint virtual appliance is located. For example, 172.17.2.254.

DNS Servers: The IP address of a primary DNS server for your network. For example, 172.17.1.1.

Domain Search: The domain where the iPrint Appliance is located. For example, mynetwork.example.com.

Click Next.

Select the Hard Drive.

If you created a secondary VMware hard drive for this appliance, it is automatically detected and sdb is displayed as the hard drive. If you have not created a secondary VMware hard drive, sda is chosen as the default partition.

If you have added a secondary hard drive, specify the following options:

Hard Drive: Select the hard drive you are using.

Use an existing partition: Select this option to use an existing partition.

Create a new partition: Select this option to create a new partition.

Partition size: Specify the partition size.

Filesystem type: Specify the type of file system.

Click Configure.

If you have not created a secondary hard drive, you will notice a warning message. You can change the settings by clicking Power Off Virtual Machine, or you can choose to continue the installation by clicking Continue Anyway.

The iPrint Appliance installation process begins. A message stating, “The system is ready for appliance configuration” is displayed. After the installation is complete, a URL and an IP address to access the iPrint Appliance Management Console is displayed. Using a Web browser, navigate to the Management Console URL.

NOTE:Ignore the WARNING message that is displayed in the command prompt.

The iPrint Appliance installation is now complete. You must configure iPrint Appliance before you can start printing. Continue with Section 5.0, Setting Up iPrint Appliance.

5.0 Setting Up iPrint Appliance

You can configure iPrint Appliance through the iPrint Appliance Management Console (Novell iPrint Appliance Administration).

Section 5.1, Methods of Setting Up iPrint Appliance

Section 5.2, Creating and Configuring Printers

Section 5.3, Importing Printers from an Existing OES iPrint System or iPrint Appliance

Section 5.4, Configuring QR Code Printing

Section 5.5, Line Printer Remote (LPR) Printing

Section 5.6, iPrint Appliance Configuration Complete

5.1 Methods of Setting Up iPrint Appliance

You can set up iPrint Appliance as a new copy, or you can upgrade from an earlier version.

On a Web browser, use either the DNS name or the IP Address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Ignore the security certificate warning, and continue to the iPrint Appliance Management Console. To avoid the security warning prompt every time you access the iPrint Appliance Management Console, you can add the certificate to the trusted certificates list on your browser.

Specify vaadmin or root as the user name.

Specify the password, then click Log in.

The Management Console page is displayed.

Click iPrint Appliance Configuration.

The iPrint Initial Configuration Wizard window is displayed.

Select New or Upgrade, then click Next.

Section 5.1.1, New

Section 5.1.2, Upgrade

5.1.1 New

Specify the following information:

Table 5-1 iPrint Initial Configuration Wizard

General

Authentication Realm: Specify the authentication domain. All the Windows and Mac desktop clients on your network authenticate against the Authentication Realm. On OES iPrint and Netware, the Authentication Realm was the eDirectory Tree name. When a user logs on to the workstation with Novell eDirectory credentials, the credentials are shared with the iPrint Client to provide seamless login experience to all the iPrint servers in your tree.

iPrint Appliance has its own internal user store. Therefore, independent Authentication Realms are possible. The administrator can setup each appliance to only use its internal user store, or integrate with other user sources by using the LDAP Import feature. The administrator can set the Authentication Realm independently for each iPrint Appliance, or use the same Authentication Realm on all appliances for a single-sign-on ability.

DNS for Print Manager: Specify the DNS name in the format displayed in the box. It is recommended that you do not use the DNS name of iPrint Appliance. Specify a DNS name that follows the Print Manager.

The DNS name is important for the Windows and Mac desktop clients. It allows you to move the server without interrupting the workstations. The DNS name must resolve to the IP address of the Appliance. You must validate that the DNS address is correct and functional before continuing because a wrong DNS address can result in errors. Click the Validate DNS Name button to verify the validity.

The DNS name is also known as a CNAME record. It is a DNS name tied to a service, rather than a server. If you choose to specify a CNAME record, ensure that the chosen name resolves to the IP address of iPrint Appliance.

Embedded Data Store

Administrator Username: The administrator account user name is pre-populated in the following format: cn=admin,o=iPrintAppliance. This field is not editable.

Administrator Password: Specify the password for the administrator account. Administrator password is the eDirectory administrator Password. It is used for eDirectory and iManager.

Re-type Password: Specify the password again to confirm.

Driver Store

Local: If you want to use a local Driver Store, select Local. You can manage the Local Driver Store using iManager.

Remote: If you have an existing Driver Store configured with another iPrint Appliance or OES server, you can use that Driver Store by selecting the Remote option, then specifying the DNS Name/Address, User name and Password of the server containing the Driver Store.

NOTE:Specify the credentials of the admin account of the server where the Driver Store resides.

You can share the Driver Store with all your appliances and even your existing OES environment. This allows you to upload drivers to a single source and share the drivers with all appliances on your network. The Driver Store simplifies administration effort across your enterprise.

NOTE:If you configure a Remote Driver Store, you cannot manage it through the iPrint Appliance iManager. You must manage the Remote Driver Store from the Appliance or OES where the Driver Store resides.

Click Finish.

After configuring iPrint Appliance, you must create printers. You can create printers using the Management Console. If you have an existing iPrint Appliance or OES iPrint system, you can also import printers. To create printers, see Section 5.2, Creating and Configuring Printers.

5.1.2 Upgrade

You can use the Upgrade option in two scenarios:

Upgrading iPrint Appliance from an earlier version

Importing the configuration settings from an existing copy of iPrint Appliance

When you select the Upgrade option, you are prompted to provide a configuration file iprintconfig.zip. To create a configuration file, you must export the configuration information from an existing copy of iPrint Appliance.

To create the iprintconfig.zip file form an existing copy of iPrint Appliance, see Exporting the Configuration File.

If you already have the iprintconfig.zip file, continue to Upgrading iPrint Appliance.

IMPORTANT:If you want to use an external disk to upgrade iPrint Appliance, you must add the virtual machine hard disk of the older version of iPrint Appliance to the new version, navigate to the DataStore location, then select the vmdk file of the older version of iPrint Appliance.

Exporting the Configuration File

On a Web browser, use either the DNS name or the IP Address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Ignore the security certificate warning, and continue to the iPrint Appliance Management Console.

Specify vaadmin or root as the user name.

Specify the password.

The Management Console page is displayed.

Click the iPrint Appliance Configuration icon.

Under Administration, click Export Configuration.

Specify the eDirectory administrator Password, then click Export.

NOTE:eDirectory administrator Password is the password that you use for the administrator account of iPrint Appliance when using iManager.

The iprintconfig.zip file is created. This is the backup file. The backup file contains the configuration information.

NOTE:Log files are not backed up when exporting the configuration file.

Upgrading iPrint Appliance

When upgrading to a new version of iPrint Appliance from an older version, ensure that the newly deployed version of iPrint Appliance has the same network configuration, passwords, and time zone as that of the older version of iPrint Appliance from which you exported the iprintconfig.zip configuration file.

On a Web browser, use either the DNS name or the IP Address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Ignore the security certificate warning, and continue to the iPrint Appliance Management Console.

Specify vaadmin or root as the user name.

Specify the password.

The Management Console page is displayed.

Click iPrint Appliance Configuration.

The iPrint Initial Configuration Wizard window is displayed.

Select Upgrade, then click Next.

In the File option, click Choose File, then select the configuration file exported from a previous copy of iPrint Appliance.

Specify the eDirectory Password.

NOTE:eDirectory Password is the password that you specified when exporting the configuration file from the previous copy of iPrint Appliance.

Click Finish.

After upgrading iPrint Appliance, you must copy the license file from the older version of iPrint Appliance to the newly installed version. For information on updating your license, see Section 12.0, iPrint Appliance License Information.

5.2 Creating and Configuring Printers

Before configuring the printer, you must create printers on iPrint Appliance. You can create printers by using iManager or through the Printers page of the iPrint Appliance Management Console.

Section 5.2.1, Creating Printers Using iManager

Section 5.2.2, Creating Printers Using the Management Console

Section 5.2.3, Creating Secure Printers

Section 5.2.4, Configuring Printers

5.2.1 Creating Printers Using iManager

On the iPrint Appliance Management Console page, select the iPrint Printer Configuration (iManager) tool to connect to iManager.

Log in to iManager using the eDirectory admin credentials of iPrint Appliance.

Ignore the security certificate warning, and continue to the iPrint Appliance Management Console. If you add the certificate to the trusted certificates list, the security warning is not displayed.

Click iPrint > Create Printer.

Configure the iManager security certificate. To create a printer on iPrint Appliance, you must accept the security certificate for the first time.

When you specify values in the Create Printer page for the first time, the values are ignored. To accept the security certificate, fill in the required fields with the first printer that you want to create, then click Next.

Click iPrint Certificate Manager when an error is generated.

Select the Trust the above certificate option, then click OK.

Click OK to complete the security certificate configuration.

Click iPrint > Create Printer.

Specify the Target printer details.

Printer Name: Defines the label by which the new printer is identified. You can include uppercase and lowercase letters, numbers, spaces, and underscore in the label. Do not use any other characters.

Container Name: The eDirectory container where the printer reference resides. By default, the value is “iPrintAppliance”. We do not recommend changing the default value.

Print Manager name: The name of the Print Manager that handles the incoming print jobs.

DNS name or IP address: The IP address of a printer uniquely identifies it on the network and allows other networked machines to communicate with it. A DNS name can also be applied to the printer, which can be translated into the printer's IP address.

Specify the IP address (v4) or the DNS name of the target printer.

Location: Indicates the printer's location. The value of this field is displayed when selecting a printer.

Description: Describes the printer. The value of this field is displayed when selecting a printer.

LPR Printer Name: Specify an LPR printer name. If the LPR protocol is selected, other optional parameters can also be specified. With most modern printers, the name can be set to PASSTHROUGH. With some older printers (1990's & prior), there might be a different printer name.

RAW Port Number: If the RAW protocol is selected, a port number is required. Most printers are configured, by default, to use port 9100 for RAW protocol communications.

iPrint Appliance supports printer communications using either the Line Printer Remote (LPR) or RAW protocols.

The LPR protocol is the most common printing protocol and is generally more flexible than the RAW protocol. A printer that supports the LPR protocol is sometimes referred to as a TCP/IP printer. The LPR protocol has limited error reporting capabilities, which is often limited to “Printer Error” with no details.

The RAW protocol is often the default protocol on non-Windows systems. Most printers that support the RAW protocol use port 9100. The LPR protocol can generally be substituted for the RAW protocol if the RAW protocol does not respond to a print job.

Click Next.

Specify the drivers for the printer.

iPrint Appliance supports both driver and driverless printing. For mobile device printing, drivers are not required. The selectable drivers for each operating system are available in the Novell iPrint Appliance Driver Store.

To re‐edit the printer‐specific options after the new printer has been created, click Modify. To create another printer, click Repeat Task. To continue, click OK.

NOTE:In iManager, you might see a Partition and Replicas option. This feature is not required for iPrint Appliance, so it is not supported. We recommend that you do not use it on the iPrint Appliance eDirectory.

IMPORTANT:In iManager, do not create or delete Print Manager objects. Always use the default Print Manager object.

For more information on managing your print system, including creating and deleting printers, managing Printer Agents, and creating Printer Driver Profiles using iManager, see the Managing Printers section in the OES 11 iPrint Administration Guide.

5.2.2 Creating Printers Using the Management Console

You can create printers using the Management Console by using a csv file. You must create a csv file, then import the csv file into iPrint Appliance. The csv file must contain the following fields:

#PrinterName, PrinterIP, Location, Description, Win95_98_Driver, Winnt_Driver, Win2k_Driver, Winxp_Driver, Linux_Driver, Mac_Driver, Vista32_Driver, Vista64_Driver, Win732_Driver, Win764_Driver, Win832_Driver, Win864_Driver, Enable DirectPrinting, Secure Printing, Enable Auditing, LPR/RAW, Raw Port.

On a Web browser, specify either the DNS name or the IP address. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Specify the Username and Password, then click Log in.

Click the iPrint Appliance Configuration icon.

Under Administration, click Printers.

Click the Upload CSV button in the upper-right corner of the Available Printers window.

Navigate to the location of the csv file, then click OK.

The printers listed in the csv file are imported into iPrint Appliance. The Printers page might take up to a minute to display the newly added printers.

5.2.3 Creating Secure Printers

With iPrint Appliance, you can set access controls for your print system, and also use SSL/TLS to secure your printing environment. You can mark a printer as secure printer in two ways:

When adding printers through the Upload CSV option

Using iManager

To mark a printer as a secure printer using the Upload CSV option, in the csv file, specify Yes under Secure Printing.

To mark a printer as a secure printer using iManager, see the Setting Up a Secure Printing Environment section in the OES 11 iPrint Administration Guide.

5.2.4 Configuring Printers

After creating printers, you must configure them using the iPrint Management Console.

On a Web browser, use either the DNS name or the IP Address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Ignore the security certificate warning, and continue to the iPrint Appliance Management Console. If you add the certificate to the trusted certificates list, the security warning is not displayed.

In the Novell iPrint Appliance Administration login page, enter the user name as vaadmin, enter the password that you specified for vaadmin, then click Log in.

Click the iPrint Appliance Configuration icon.

Under Administration, click Printers.

The Printers screen lists all printers created with iManager that are currently managed by iPrint Appliance. You can enable the printers for Mobile, AirPrint, and Email printing for iPrint Appliance, as well as the desktop email client.

Select the printer that you want to configure. The AirPrint, Mobile and Configure drop-down menus are activated. You can choose multiple printers at a time by holding the Ctrl key.

To configure the selected printer(s) for AirPrint, click the AirPrint drop-down menu, then click Enable Advertising.

The selected printer is now advertised by the Novell iPrint Mobile Appliance.

To configure the printers for Mobile and Email printing, click the Mobile drop-down menu, then select Enable.

The selected printer is enabled for Mobile and Email printing.

Each printer managed by iPrint Appliance can be configured for a private email account. To configure the selected printer with a private email account, select a printer, click the Configure drop-down menu, then click Private Email Settings.

Select Enable private email-based printing, then specify the Account and Server information.

Account

Email Address: Specify the full email address of the mailbox to be polled for the print jobs. When an email-based job arrives, the print job is processed to the printer. For example, iprint@example.com.

Username: Specify the user name to be used by iPrint Appliance to log in to the email server to access the private printer email account. For example, iprint.

Password: Specify the password for iPrint Appliance to log in to the email server to access the private printer email account.

Retype Password: Confirm the account password.

Server

Incoming Mail Server: Specify the address of the incoming email server for the email account. For example, imap.example.com.

Outgoing Mail Server: Specify the address of the outgoing email server for the email account. For example, smtp.example.com. Your email server must support the SMTP protocol.

Access Method: iPrint Appliance supports two different protocols to poll for incoming print jobs. Select POP or IMAP depending on the protocol your email server supports.

When configured for private email printing, iPrint Appliance becomes a client to an email server. The printer's account inbox is polled for incoming print jobs that are routed to the printer.

NOTE:Ensure that the private email account is established and functional before associating it with a printer.

Click OK.

The selected printer is now accessible for email-based printing, using the private email address.

5.3 Importing Printers from an Existing OES iPrint System or iPrint Appliance

If you have an existing OES iPrint system or iPrint Appliance, you can import printers to your current version of iPrint Appliance.

5.3.1 Prerequisites

Before starting the import process, you must ensure that all users are migrated from OES to iPrint Appliance by using LDAP Import. iPrint Client Management (iCM) settings and Access Control Lists (ACL) are automatically migrated from your OES environment to iPrint Appliance during the printer import process. Therefore, before importing printers, you must ensure that all users on OES are migrated to iPrint Appliance. For information on how to import users from an LDAP source, see Section 10.1.7, LDAP Import.

After all the users are imported, you must connect to iPrint Appliance using a secure shell or terminal.

If using Windows:

Download and install an X-server such as MobaXterm.

NOTE:It is recommended that you use MobaXterm. If you use other X-servers (for example, X-ming), you might not be able to populate the required fields on the migration tool.

Launch a Secure Shell Client, then connect to iPrint Appliance by using the IP address.

Run the command export DISPLAY=<localsystemIPaddress>:0.0.

If using Linux or Mac:

Launch the terminal, then run the command ssh -X <iPrintApplianceIPaddress>.

5.3.2 Printer Import

Launch the Migration Tool on the iPrint Appliance server by using the command miggui.

The Migration Interface is displayed.

Authenticate to the source and iPrint Appliance servers.

Select Consolidate as the migration type.

Click Add.

Select Novell iPrint, then click OK.

If you see a Do you want to configure the Novell iPrint service now? message, click Yes.

The iPrint Migration window is displayed.

Click Get Printers to select printer objects from the source Print Manager.

Configure the following parameters to proceed with the migration process:

Print Objects

Parameter

Description

Print Managers

Source Print Manager

Specify the active Print Manager on the source server. The source Print Manager can be either an NDPS manager (for NetWare 6.5) or iPrint Manager (for OES 1 and OES 2 Linux). To go directly to a context of your choice, specify the context in the search base and click Search. The objects in the specified context are displayed.

Target Print Manager

The Target Print Manager field is populated with the name of the active Print Manager running on the target server. This field is editable; you can also specify a different name for the active Print Manager. To go directly to a context of your choice, specify the context in the search base and click Search. The objects in the specified context are displayed.

Click Get Printers to select printer objects from the source Print Manager.

Click Get Printers to select printer objects from the source Print Manager.

Printer Objects

Source printers

Displays all printers of the active Print Manager available on the source server. The printers that already exist on the target server are indicated by an asterisk (*).

Select All

Selects all the printers listed in the Printer Objects dialog box.

NOTE:When you apply a new filter or modify an existing filter and click Select All, only printers that are displayed after applying the filter are selected. When you manually select all printers, the selected printers are migrated.

Filter

Specify the search pattern in the Filter field. This displays the printers in the Printer Agents list. This field is case sensitive.

Create target printer objects in

Context same as source printer context

Select this option to use the same context as the source printers on the target server.

Target context

This option is selected by default. It allows you to create source printers under a different context on the target server. This option does not maintain the context hierarchy of the source printer.

To go directly to a context of your choice, specify the context in the search base and click Search. The objects in the specified context are displayed.

Do Not Migrate Existing Target Printers

If the printer names on the source server match the printer names on the target server, the target printer properties and attributes are overwritten by the source printer properties and attributes.

The printers that already exist on the target server are represented by an asterisk (*).

Other Options

Parameter

Description

Source Driver Store

The Source Driver Store is not on the same server as the Source Print Manager

If the source Driver Store is running on a server different from the source Print Manager's server, this check box is selected.Specify the IP address or the DNS Name and the root password of the server on which the source Driver Store is located.

Migrate the following additional Source Print Brokers to the Target Driver Store

This section lists the names and IP/DNS addresses of the source Print Broker volumes that must be migrated to the target Driver Store.

Click the plus button (+) and specify the IP address or the DNS name of the Source Broker. Select the Source Broker volume from the drop-down list and click OK. The list is populated with the IP address or DNS name of the Source Broker and Broker volume name. You can add multiple Source Brokers to the list.

To remove the Source Broker from the list, select the IP address or DNS name and click the minus button (-). You can remove one Broker at a time.

Target Driver Store

Target Driver Store is remote

If the Driver Store is running on the remote server (other than the target server), the Target Driver Store is remote check box is enabled.

Specify the IP address or the DNS name of the remote server and the root password of the remote server in the corresponding entry fields.

Printer Drivers

Do not Migrate Printer Drivers and the association of the Printer Agents with the Driver

Selecting this option ensures that printer drivers and the association of Printer Agents with the drivers are not migrated.

Migrate Printer Driver if the driver is not present in the target Driver Store

Selecting this option migrates the printer drivers for the selected driver platforms from the Select Driver Platforms to Migrate list, if they are not present in the target Driver Store. This also migrates all the associations of the Printer Agents with the driver.

NOTE:The default driver platform selection is All.

Migrate all Printer Drivers. This overwrites the Printer Driver on the target Driver Store

Selecting this option overwrites the target drivers for the driver platforms you have selected from the Select Driver Platforms to Migrate list, if the driver names in the target Driver Store are the same as the source Driver Store. This also migrates all the associations of the Printer Agents with the driver.

NOTE:The default Driver Platform selection is All.

Printer Driver Profile

Migrate Printer Driver Profile

If the profiles are the same on the target server as the source server, the target profiles are overwritten.

iPrint.ini File

Migrate iPrint.ini File

If you migrate printer agents from two or more print managers, the iPrint.ini file on the target server is replaced by the iPrint.ini file of the last source server.

NOTE:After migration, if the target server's iprint.ini file is overwritten by the source server's file, and if the target server's iprint.ini file had new parameters that were erased, you can restore them by copying the parameters manually from the iprint.bak file. The iprint.bak file is a backup of the target server's iprint.ini file. After migration, the iprint.bak file is saved in the /var/opt/novell/iprint/htdocs directory.

Click Start to begin the migration process.

If you are prompted to save the project, click either Yes or No to proceed. If you save a project, the next time you want to import printers, you can use the saved file to retrieve your preferences instantly.

5.4 Configuring QR Code Printing

You can configure QR code printing for a printer by generating a QR code for the printer. Using a printer’s URI, you can use any online QR code generator tool to create a QR code.

To view a printer’s URI, follow the procedure below:

On a Web browser, use either the DNS name or the IP Address to access the IPP page of the Management Console. For example, https://10.0.0.1/ipp.

Click the info icon next to the printer for which you want to generate the QR code.

The printer’s URI is listed in the following format: ipp://<servername>/ipp/<printername>.

Copy the URI and paste it on an online QR code generator page.

Download the generated QR code, print it, then paste it on the printer to allow users to scan the QR code.

QR code generation is complete. Users can print to the printer by scanning the QR code. For information on how to print using the QR code, see Printing Documents Using QR Code and Printing Photos Using QR Code in the Novell iPrint 1.0.1 User Guide.

5.5 Line Printer Remote (LPR) Printing

Line Printer Remote (LPR) Printing is a platform-independent printing protocol. UNIX, Macintosh, and other LPR clients can print to iPrint printers through LPR.

To set up an iPrint printer to accept LPR print jobs, you must enable LPR/LPD printing for the printer. For more information, see Configuring LPR Printers in the iPrint Linux Administration Guide.

5.6 iPrint Appliance Configuration Complete

iPrint Appliance configuration is now complete. You can use the Novell iPrint app to print. The app is currently available on Android and iOS platforms. You can download the Novell iPrint app to your device from Google’s Play Store or Apple’s App Store, by searching for Novell iPrint. For information about configuring and using the mobile application, see the Novell iPrint 1.0.1 User Guide, or the Help section of the app.

Microsoft Office and PDF formats are best rendered using the remote renderer. The renderer uses Microsoft Office and Adobe Acrobat Pro applications to convert documents to print-ready formats. To install the remote renderer, continue with Section 6.0, Remote Renderer Installation and Configuration.

6.0 Remote Renderer Installation and Configuration

For desktop quality printing for Microsoft Office and PDF documents, you must install a remote document renderer on a Microsoft Windows 7/Windows 8/Windows 8.1/Windows 2008 R2, Windows 2012, or Windows 2012 R2 64-bit system with a dual-core processor or higher.

NOTE:Until iPrint Appliance 1.0.1, Adobe Acrobat Pro was mandatory to render PDF documents using the remote renderer. Starting from iPrint Appliance 1.0.1 Patch 1, the remote renderer is bundled with an in-built PDF renderer. By default, PDF documents are rendered using the in-built PDF renderer. However, you can also use Adobe Acrobat Pro for PDF rendering by installing Adobe Acrobat Pro on the Windows machine where the remote renderer is installed, and modifying the document format options from the Management Console.

Section 6.1, Prerequisites

Section 6.2, Downloading the Remote Renderer

Section 6.3, Installing the Remote Renderer

Section 6.4, Assigning Log On as a Service Rights

Section 6.5, Copying the Certificate File

Section 6.6, Configuring the Remote Renderer as a Local User

Section 6.7, Configuring the Remote Renderer as a Domain User

Section 6.8, Registering the Remote Renderer

Section 6.9, Upgrading the Remote Renderer

Section 6.10, Managing the Remote Renderer

Section 6.11, Multidriver Support

Section 6.12, Automatic Printer Driver Updates

Section 6.13, Printer Rename and Redirection

Section 6.14, Remote Renderer Commands

6.1 Prerequisites

Before installing and configuring the remote renderer, you must ensure that:

At least one printer driver is uploaded to the Driver Store for the Windows platform on which you are setting up the renderer. This is required because when you add a remote renderer from the Management Console, you must designate one driver as the default driver for the renderer.

NOTE:It is recommended that you upload a universal printer driver like HPUPD, and set that as the default driver.

Log on as a service rights are assigned to the account with which you want to set up the renderer.

The iPrint Appliance and the remote renderer must be on the same domain. The remote renderer cannot communicate with the iPrint Appliance if the systems are on different domains due to certificate validations.

6.2 Downloading the Remote Renderer

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Specify vaadmin as the user name.

Specify the password that you provided for vaadmin.

The Management Console page is displayed.

Click iPrint Appliance Configuration.

Under Administration, click Renderers.

Click the icon next to the Download remote rendering agent link in the upper-right corner of the screen, to download the renderer.

NOTE:The remote renderer installation interface is not available in Slovak, Hungarian, Netherlands Dutch, and Catalan languages.

A zip file named iPrintRendererBundle.zip is downloaded. This zip file contains a setup.exe file, iPrintRendererSetup.msi file, and a device.pfx certificate file.

6.3 Installing the Remote Renderer

After you have downloaded the software, unzip the file, then launch the setup.exe file to begin the installation.

Follow the on-screen prompts to complete the installation procedure.

6.4 Assigning Log On as a Service Rights

Before configuring the remote renderer, you must assign the Log on as a service rights to the account with which you want to set up the renderer, on the local machine.

Go to Start > Control Panel.

In the upper-right corner of the Control Panel window, click the View by drop-down menu, then select Large icons.

Go to Administrative Tools > Local Security Policy.

In the left pane, double-click Local Policies.

Click User Rights Assignment.

In the right pane, under Policy, double-click Log on as a service.

Click Add User or Group.

Specify the user name in the Enter the object names to select box, then click Check Names.

Click OK after the user is displayed.

Click OK.

Click OK, then close the Local Security Policy window.

6.5 Copying the Certificate File

A certificate file device.pfx is downloaded when you download the remote renderer. This file authenticates and secures communication between the iPrint Appliance and the remote renderer. You must copy the device.pfx file into the C:\NDPS\Renderer\certificates\ folder, before configuring the remote renderer.

6.6 Configuring the Remote Renderer as a Local User

You must configure the remote renderer with the iPrint Appliance server to start accepting rendering jobs. Before starting the configuration process, you must copy the device.pfx certificate file into the C:\NDPS\Renderer\certificates\ folder. If you want to use a third-party certificate, you must copy that certificate file into the C:\NDPS\Renderer\certificates\ folder instead of device.pfx.

Launch the command prompt in the Run as administrator mode.

Run the command iPrntRendCmd -c to configure the renderer, then follow the on-screen instructions to install the printer driver specific to your printer.

At the password prompt, do not specify any password if you are using the Novell certificate. If you are using a third-party certificate, you must specify the password provided with that certificate.

When prompted for service configuration credentials, specify the credentials of an account with Windows admin and Log on as a service rights.

After configuration and registration of the renderer, run the command iPrntRendCmd -s from the installation directory to check the iPrint Rendering Service status.

After configuring the remote renderer, you must register the renderer through the Management Console. For instructions on registering the renderer, see Section 6.8, Registering the Remote Renderer.

6.7 Configuring the Remote Renderer as a Domain User

To configure the remote renderer as a domain user, you must use a domain user account. If you do not have a domain user account, you must create one. For information on creating a domain user account, see the Create a user account article on the Microsoft support site.

After creating a Domain User account, you must assign Log on as a Service rights to the domain user. For more information, see Section 6.4, Assigning Log On as a Service Rights.

After adding the Log on as a Service rights to the Domain User account, you must configure and register the renderer with the iPrint Appliance server to start accepting rendering jobs. Before starting the configuration process, you must copy the device.pfx certificate file into the C:\NDPS\Renderer\certificates\ folder. If you want to use a third-party certificate, you must copy that certificate file into the C:\NDPS\Renderer\certificates\ folder instead of device.pfx.

Launch the command prompt in the Run as administrator mode.

Run the command iPrntRendCmd -c to configure the renderer.

At the password prompt, do not specify any password if you are using the Novell certificate. If you are using a third-party certificate, you must specify the password provided with that certificate.

When prompted for a user name, specify the user name in the following format: [domainname]\[username].

After configuration and registration of the renderer, run the command iPrntRendCmd -s from the installation directory to check the iPrint Rendering Service status.

After configuring the remote renderer, you must register the renderer through the Management Console. For instructions on registering the renderer, see Section 6.8, Registering the Remote Renderer.

6.8 Registering the Remote Renderer

After configuring the remote renderer, you must register it through the Management Console.

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Specify vaadmin as the user name.

Specify the password that you provided for vaadmin.

The Management Console page is displayed.

Click iPrint Appliance Configuration.

Under Administration, click Renderers.

Under Available Renderers, click New.

Specify the IP address of the renderer, then click Connect.

Under Renderer Name, specify a name for the renderer, then choose the document formats that you want to render.

NOTE:The PDF Formats option along with the In-built PDF renderer is selected by default. If you want to use Adobe Acrobat, you must ensure that Adobe Acrobat Pro is installed on the renderer machine before selecting the Adobe Acrobat option. Similarly, if you want to enable the remote renderer to render Microsoft Office formats, you must ensure that Microsoft Office is installed on the renderer machine before selecting the Office Formats option.

Choose the Default Printer Driver, then click Register.

Once you click the Register button, a success message is displayed but the remote renderer is still configuring. The configuration time depends on the number of unique drivers associated with mobile enabled printers. During that period, the renderer is in the Configuring state. After the configuration is complete, the renderer changes to Active state. When the status of the remote renderer displays Active, it means that the registration is successful. Refresh the page after a couple of minutes to check the status.

6.9 Upgrading the Remote Renderer

Starting with iPrint Appliance 1.1, you can upgrade the remote renderer to future releases. When you upgrade to a newer version of the remote renderer, re-registration is not required.

To upgrade the remote renderer from iPrint Appliance 1.1 to a higher version:

Download and install the remote renderer.

Copy the device.pfx file into the C:\NDPS\Renderer\certificates\ folder.

Run the command iPrntRendCmd -c to configure the renderer, then follow the on-screen instructions to install the printer driver specific to your printer.

At the password prompt, do not specify any password if you are using the Novell certificate. If you are using a third-party certificate, you must specify the password provided with that certificate.

When prompted for service configuration credentials, specify the credentials of an account with Windows admin and Log on as a service rights.

To upgrade the remote renderer from iPrint appliance 1.0.1 to a higher version, you must follow the same procedure provided above for upgrading from iPrint Appliance 1.1. After upgrading, you must register the renderer with iPrint Appliance. For instructions on how to register the renderer with iPrint Appliance, see Section 6.8, Registering the Remote Renderer.

6.10 Managing the Remote Renderer

Starting with iPrint Appliance 1.1, you can manage the remote renderer through the Management Console. To access the remote renderer page on the Management Console:

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Specify vaadmin as the user name.

Specify the password that you provided for vaadmin.

The Management Console page is displayed.

Click iPrint Appliance Configuration.

Under Administration, click Renderers.

On the Renderers page, you can perform the following actions:

Section 6.10.1, Add a Renderer

Section 6.10.2, Edit a Renderer

Section 6.10.3, Delete a Renderer

Section 6.10.4, Activate or Deactivate a Renderer

6.10.1 Add a Renderer

On the Renderers page, click New.

In the Renderer Host/IP address box, specify the hostname or IP address of the renderer system, then click Connect.

Under Options, specify a name for the renderer in the Renderer Name box.

Select the document formats you want the remote renderer to render.

NOTE:The PDF Formats option along with the In-built PDF renderer is selected by default. If you want to use Adobe Acrobat, you must ensure that Adobe Acrobat Pro is installed on the renderer machine before selecting the Adobe Acrobat option. Similarly, if you want to enable the remote renderer to render Microsoft Office formats, you must ensure that Microsoft Office is installed on the renderer machine before selecting the Office Formats option.

Choose the Default Printer Driver, then click Register.

6.10.2 Edit a Renderer

You can change a remote renderer’s name, the document rendering options, and the default printer driver using the Edit feature on the Renderers page.

On the Renderers page, select a renderer which you want to edit, then click Edit.

Change the rendering options, then click Commit.

6.10.3 Delete a Renderer

On the Renderers page, select a renderer which you want to delete, then click Delete.

Deleting a renderer unregisters the renderer from iPrint Appliance.

6.10.4 Activate or Deactivate a Renderer

On the Renderers page, select a renderer which you want to activate or deactivate, then click Activate/De-Activate.

If the renderer is in Active state, it is deactivated. If the renderer is in Inactive state, it is activated.

Deactivating a renderer does not unregister the renderer from iPrint Appliance.

6.11 Multidriver Support

On iPrint Appliance 1.1, you can configure the remote renderer to use multiple drivers for different mobile enabled printer agents. The remote renderer installs the unique drivers associated with various mobile enabled printer agents, on the renderer machine. During the rendering of jobs, the correct printer driver is selected based on the printer agent to which the job is being submitted for rendering.If a printer agent does not have any driver associated for the renderer platform, the remote renderer uses the default driver is used for rendering the jobs sent to those printer agents. You can select a default driver when adding a remote renderer from the Management Console. The Management Console also provides an option to change the default drivers.

For information on how to upload printers to the Driver Store, see the Managing Printer Drivers section in the OES 11 iPrint Administration Guide.

6.12 Automatic Printer Driver Updates

The remote renderer on iPrint Appliance 1.1 contains an Automatic Driver Update feature. When a printer driver is updated on the Drive Store, or if the association of a particular printer agent is changed, the driver is automatically updated on the remote renderer. The remote renderer also automatically updates printer driver association changes.

The driver update and driver association changes take effect after one print job has been issued.

6.13 Printer Rename and Redirection

If a printer is renamed or redirected through the Management Console, the remote renderer automatically updates its configuration to associate the correct printer drivers with the printer.

When you redirect a printer, the printer driver associated with the destination printer is used for rendering.

6.14 Remote Renderer Commands

Starting with iPrint Appliance 1.1, the management of remote renderer is supported from the Management Console. You can use the command line interface for the following operations:

Command

Description

-h

Shows the various available commands with their syntax.

-v

Shows the current version of the remote renderer.

-c

Configures the remote renderer service with the certificate, and installs the printer drivers. When prompted for service configuration credentials, specify the credentials of an account with Windows admin and Log on as a service rights.

-u

Un-registers the remote renderer from the iPrint Appliance server. After un-registration, the remote renderer stops accepting jobs from the iPrint Appliance server for conversion. The iPrint Rendering service is running, but does not receive rendering jobs from the iPrint Appliance server.

-t

Tests the conversion locally.

-s

Displays the status of iPrint Windows Rendering service.

-l

Starts the iPrint Windows Rendering service. After registration, the rendering service starts automatically.

-q

Stops the iPrint Windows Rendering service.

-ls

Lists the iPrint Appliance registered with the remote renderer.

7.0 AirPrint through iPrint

AirPrint is a framework that facilitates driverless printing. The framework was invented by Apple Inc. iOS applications (apps) that implement AirPrint technology allow users to send print jobs to AirPrint enabled printers. With iPrint Appliance, you can “AirPrint enable” any iPrint printer.

This section describes the benefits and key features of AirPrint through iPrint:

Section 7.1, iOS Wireless Printer Discovery

Section 7.2, Multicast DNS

Section 7.3, AirPrint through iPrint

Section 7.4, Benefits

Section 7.5, Supported iOS Devices

Section 7.6, AirPrint Deployment Considerations in iPrint Appliance

Section 7.7, AirPrint Deployment Scenario in iPrint

Section 7.8, Enabling AirPrint through iPrint

Section 7.9, Disabling AirPrint through iPrint

Section 7.10, AirPrint Errors and Symptoms

7.1 iOS Wireless Printer Discovery

iOS devices have an inherent service discovery mechanism called Bonjour. Bonjour has the wireless service identifying capability known as mDNS (multicast DNS). iPrint uses the Linux Avahi daemon service to advertise iPrint printers to the iOS devices on a wireless network.

7.2 Multicast DNS

Domain Name Service provides translation from a Web address (starting with www) to the Internet Protocol (IP) addresses. mDNS (Multicast DNS protocol) is a method of network neighborhood resource discovery. mDNS forwards the DNS message to many endpoints on a network. Each device connected to an mDNS enabled network sends out a message detailing its name, function, and capabilities. On the receiving device, the information is stored so that it can route requests when an application requests a service, such as printing.

mDNS is useful in wireless networks. By monitoring mDNS advertisements, clients can learn the location of the service, then connect to it in the same way as any other service. mDNS transforms the manual process of configuring IP addresses and port numbers that provides a zero configuration experience where a user references the service using human-friendly types and names.

7.3 AirPrint through iPrint

When iOS devices such as iPhone, iPad, and iPod touch connect to the wireless network, they are automatically assigned an IP address. This opens an opportunity to exploit the IP network service for printer discovery, and submit the print job. iOS devices convert Microsoft Office files, images, and Web pages into PDF; construct an IPP print request; and send the print request to the AirPrint enabled IPP printer. The AirPrint enabled IPP printer renders the PDF or image file into a printer-specific language such as post script. The printer consumes this data and the document is printed. This is called AirPrint.

Many printers are not compatible with AirPrint. iPrint hides the printer’s capabilities, and advertises the printer as an AirPrint enabled printer. This allows iPrint to extend the enterprise print service into the wireless network to exploit the iOS devices’ inherent print capability, and provides additional advantages to consume iPrint features.

7.4 Benefits

AirPrint through iPrint offers significant benefits over other printing models:

Any iPrint printer can be enabled for AirPrint regardless of the printer’s inherent AirPrint support.

AirPrint enabled printers are also listed in the iOS device.

AirPrint enabled printers can make use of the iPrint server’s features.

7.5 Supported iOS Devices

Supported iOS devices include iPhone, iPad, and iPod touch with iOS 5 and above.

NOTE:Secure printing to iPrint printers through AirPrint is supported only on iOS 6.x. It is not supported on iOS 5.x.

7.6 AirPrint Deployment Considerations in iPrint Appliance

The mDNS protocol operates on service announcements and queries, which allow devices to advertise specific applications, such as printing services. Each query or advertisement is sent to an mDNS multicast address for delivery to all clients on the subnet. Apple's Bonjour protocol relies on Multicast DNS (mDNS) operating at UDP port 5353. iOS devices listen for services on these reserved group addresses:

IPv4 Group address - 224.0.0.251

The addresses used by the mDNS protocol are link-local multicast addresses and are valid on the link local domain. Hence, routers might have to be enabled, in order to forward the multicast advertisement to various subnetworks.

7.7 AirPrint Deployment Scenario in iPrint

The deployment scenarios are confined to the wireless-based LAN network because iOS devices can only communicate over the wireless medium for the printer discovery and print services. The deployment scenario varies based on how wireless is configured in the organization. The preferred scenario is to deploy iPrint’s AirPrint mDNS services led by the router, which has the ability to route the mDNS packets (link local Bonjour advertisement) into the various wireless sub networks in the organization. See Figure 7-1.

7.7.1 Intra VLAN Configuration

Wireless routers span across multiple wired networks, and have hot spots on every network. The mDNS service advertises printers on the wireless network, and the iOS device builds a list of available print services by listening to these advertisements. AirPrint client's users can select a target printer from the received list of advertised printers.

Figure 7-1 Logical Network Segment Configuration

In this configuration, the mDNS advertisement is instantly injected into the network. In the above configuration, printer 'A' is visible to VLAN 100 wireless users, and printer 'B' is visible to VLAN200 wireless users. The printers are not visible across the VLANs.

7.8 Enabling AirPrint through iPrint

To enable AirPrint through iPrint:

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Specify the user name and password, then click Log in.

Click iPrint Appliance Configuration.

Under Administration, click Printers.

Select a printer for which you want to enable AirPrint.

The AirPrint and Mobile drop‐down menus are activated.

Click the AirPrint drop-down menu, then click Enable Advertising.

iPrint AirPrint is now enabled on the iPrint printer. You can print to an iPrint AirPrint enabled printer from any iOS device.

7.9 Disabling AirPrint through iPrint

To disable AirPrint through iPrint:

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Specify the user name and password, then click Log in.

Click iPrint Appliance Configuration.

Under Administration, click Printers.

Select a printer for which you want to disable AirPrint.

The AirPrint and Mobile drop‐down menus are activated.

Click the AirPrint drop-down menu, then click Disable Advertising.

IMPORTANT:If a printer is shut down or redirected to another printer, you must disable AirPrint advertising. This ensures that users do not receive errors when trying to print to non-functional printers.

7.10 AirPrint Errors and Symptoms

When using AirPrint, users might receive a few error messages, or notice symptoms that might indicate issues with the printer or the network. The errors and symptoms are listed below, along with the possible cause.

Table 7-1 AirPrint Error and Symptoms

Error/Symptom

Possible Cause

The printer is paused

iPrint output printer queue paused.

Check the printer for errors

Network communication failed between iPrint Appliance and printer, or iPrint printer is shut down.

The printer is offline

iPrint Appliance is not reachable.

iOS 5.x: An error occurred printing this document

iOS 6.x: The printer is no longer available

iPrint printer is deleted from PSM but still published as AirPrint printer on the network.

The printer is no longer available

iPrint printer is shut down.

The printer job is continuously under processing

Printer is redirected or not working.

Points to note:

If the printer's input queue is paused, jobs are queued at the device print queue. To view the print queue on iOS devices, double-tap the Home button, then select the Print Centre app.

For photo printing, paper types such as 4x6 and LETTER are available only on iOS 6.0 and above. When printing images on iOS 6.x, the paper type is displayed by default.

The duplex option is displayed on the job submission page by default on iOS 5.x. This behavior is different from iOS 6.x and above. On iOS 6.x, the duplex option is displayed dynamically by querying the printer for duplex availability status.

AirPrint might display messages regarding the status of the printer such as empty input tray or printer jam, based on the status message from the printer's console. If the printer is in READY state without any warning/error messages, AirPrint does not display any printer error messages to the user.

Before enabling AirPrint, ensure that the iPrint Appliance DNS name is resolvable by the iOS device.

If a printer is not functioning, disable advertising on that printer to ensure that the printer is not displayed as an AirPrint printer, and users do not try printing to those printers.

The remote renderer must be configured with iPrint Appliance to ensure that documents render correctly when printing using AirPrint.

8.0 Email Printing

iPrint Appliance contains an email printing feature. Using email printing, you can print documents from any device capable of sending emails. You can print emails by specifying email printing commands in the subject line of the email. You can also print documents by emailing them to your printer as attachments.

When you enable email printing, the email address you provide becomes the global print email address. You can also configure a printer for private email printing by providing a specific email address to each printer.

NOTE:To enable private email printing, you must first enable the email printing feature.

The difference between global email printing and private email printing is:

Global Email Printing: When you enable email printing, you are prompted to specify an email address. This email address is the global print email address. When configured for email printing, iPrint Appliance becomes a client to an email server. The global email account inbox is polled for incoming print jobs, which are then routed to the intended printer.

Private Email Printing: With private email printing, you can assign a specific email address to each printer. When a user sends an email printing request, the print job is sent directly to the printer. Users do not need to specify any print commands in the subject line of the email.

Email printing is not enabled by default. You can enable email printing through the Management Console. You must create a unique email address for iPrint Appliance to receive and process print requests.

IMPORTANT:If you enable auditing for email print jobs, the email address of the user is logged in the iPrint audit logs. If the same email address is populated for the user object in the LDAP source, then the user FDN is logged instead of email address. This is important if you are using an accounting software to ensure that jobs are tracked or accounted correctly.

WARNING:You must create an exclusive email account to be used for iPrint Appliance. If you provide an existing email address (for example, your official email address), the iPrint Appliance mobile server immediately starts processing all existing emails in the inbox, replies to every mail with a response, then deletes all the received emails.

Section 8.1, Enabling Email Printing

Section 8.2, Email Printing Commands

8.1 Enabling Email Printing

On a Web browser, use either the DNS name or the IP address of iPrint Appliance to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Specify the user name and password, then click Log in.

Click iPrint Appliance Configuration.

Under Administration, click Mobile Configuration.

Choose Enable email-based printing.

This email address is the global print email address.

Specify the following information:

Email address: Specify the full email address that is used to queue global print jobs. The global email address must be unique for each copy of iPrint Appliance that you deploy.

WARNING:You must create an exclusive email account to be used for iPrint Appliance. If you provide an existing email address (for example, your official email address), the iPrint Appliance mobile server immediately starts processing all existing emails in the inbox, replies to every mail with a response, then deletes all the received emails.

Account Username: Specify the user name for iPrint Appliance to log in to the email server to access the global email account. Account Username must be the user name of the email address that you specified in the Email address field.

Account Password: Specify the password for iPrint Appliance to log in to the email server to access the global email account.

Re-type Password: Specify the password again to confirm.

Incoming Mail Server: Specify the address of the incoming email server for the email account. For example, imap.example.com.

Incoming Server Type: iPrint Appliance supports IMAP and POP for incoming print jobs. Select the protocol that your email server supports.

Outgoing (SMTP) Mail Server: Specify the address of the outgoing email server for the email account. For example, smtp.example.com.

Enable Mail-body Printing: With email-based printing, attachments are always printed. This option allows the email message body to also be printed.

Click Save.

IMPORTANT:When using email printing, the print command in the subject line might trigger spam filters. To avoid this issue, configure your email system to allow print-specific emails. Include the approved print users in the spam filter of your email system to prevent unwanted print requests.

8.1.1 Enabling Private Email Printing

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the iPrint Appliance Configuration icon.

Under Administration, click Printers.

Select a printer, click the Configure drop-down menu, then click Private Email Settings.

Specify the following information, then click OK.

Account

Email Address: Specify the full email address of the mailbox to be polled for the print jobs. When an email-based job arrives, the print job is processed to the printer. For example, print@example.com.

Username: Specify the user name to be used by iPrint Appliance to log in to the email server to access the private printer email account. For example, iprint.

Password: Specify the password for iPrint Appliance to log in to the email server to access the private printer email account.

Retype Password: Confirm the account password.

Server

Incoming Mail Server: Specify the address of the incoming email server for the email account. For example, imap.example.com.

Outgoing Mail Server: Specify the address of the outgoing email server for the email account. For example, smtp.example.com.

Access Method: iPrint Appliance supports two different protocols to poll for incoming print jobs. Select POP or IMAP depending on the protocol that your email server supports.

8.2 Email Printing Commands

You can print the body of the email and the attachments by using a few simple print commands in the subject line of your email.

Section 8.2.1, Basic Print Commands

Section 8.2.2, Additional Print Commands

8.2.1 Basic Print Commands

help

Provides information on email printing commands.

list printers

To get the names of the available printers, send an email to the iPrint server address (for example, iprint@novell.com) with the subject line list printers.

print printer=<printer_name>

Prints your email and its attachments to the specified printer. For example, print printer=hp#Test Mail.

If you print to a specific printer by using the printer’s email address, the print printer command is ignored.

hold printer=<printer_name>

Queues your email along with its attachments and sends you the job ID as acknowledgement.

resume

Resumes the printing of a job that you put on hold. There are two ways to print a job on hold:

Send an email with subject resume followed by the job ID. For example, resume 10

Send an email with the original subject line prefixed with resume. For example, resume#Test Mail

cancel

Cancels a job that you put on hold. There are two ways to cancel a job on hold:

Send an email with subject cancel followed by the job ID. For example, cancel 10

Send an email with the original subject line prefixed with cancel. For example, cancel#Test Mail

status

Displays the status of a job. There are two ways to check the status of a job:

Send an email with subject status followed by the job ID. For example, status 10

Send an email with the original subject line prefixed with status. For example, status#Test Mail

move

Moves a job to a new printer. There are two ways to move a job to a new printer:

Send an email with subject move, the job ID, and the name of the new printer. For example, move 10 printer=<PrinterName>

Send an email with the original subject line prefixed with move, the name of the new printer, and #. For example, move printer=<PrinterName>#Test Mail

list jobs

Lists the details of the held jobs.

default printer

Displays the default printer.

default printer=<PrinterName>

Sets a particular printer as your default printer. After you set the default printer, you do not need to include the printer name while printing to the default printer. You only need to use the print command followed by the email subject. For example, print#Test Mail.

NOTE:If a printer name contains spaces, enclose the printer name within double (") or single (') quotes. For example, print printer='HP PRINTER'.

NOTE: To separate the email subject from the command, use #. For example, print printer=hp#Test Mail.

8.2.2 Additional Print Commands

In addition to the basic print commands listed above, you can use these commands to refine your printing:

portrait [portrait=yes/portrait=y (or) portrait=no/portrait=n]

Prints your email content in portrait orientation. For example, print printer=hp portrait=y#Test Mail

landscape [landscape=yes/landscape=y (or) landscape=no/landscape=n]

Prints your email content in landscape orientation. For example, print printer=hp landscape=y#Test Mail

color [color=yes/color=y (or) color=no/color=n]

Prints your email content in color. For example, print printer=hp landscape=y color=y#Test Mail.

pages

Prints a given range of pages in your email. For example, the command print printer=hp landscape=y color=y pages=1-3#Test Mail prints pages 1, 2, and 3.

copies

Prints the specified number of copies of your email and its attachments. For example, the command print printer=hp landscape=y color=y pages=1-3 copies=5#Test Mail prints 5 copies of pages 1, 2, and 3.

duplex [duplex=yes/duplex=y (or) duplex=no/duplex=n]

Prints your email and its attachments on both sides of the printing paper. For example, the command print printer=hp landscape=y color=y pages=1-3 copies=5 duplex=y#TestMail prints 5 copies of pages 1, 2, and 3 in duplex mode.

media

Prints your email and its attachments with the specified paper type. The default paper type is “LETTER.” You can change the default paper type by using the iPrint Appliance Management Console. The other available print paper types are A3, A4, and other common paper types. For example, the command print printer=hp landscape=y color=y pages=1-3 copies=5 duplex=y media=A3#Test Mail prints 5 copies of pages 1, 2, and 3 in duplex mode, on an A3 size paper.

mailbody [mailbody=yes/mailbody=y (or) mailbody=no/mailbody=n]

Prints either your email and its attachments or only the attachments from your email without the email body. For example, using the command print printer=hp landscape=y color=y mailbody=n#Test Mail prints only the email attachments in landscape mode.

NOTE:If you do not specify any of the additional commands, your print job is carried out according to the default preferences set by your administrator.

IMPORTANT:When printing to a specific printer using the printer’s private email address, you do not need to specify the printer’s name in the command. You can also leave the subject line empty. Printing is carried out according to the default print options set by the administrator.

However, you must specify the print command in the following scenarios:

The administrator changes the subject_optional_for_printer_specific_emails to False in the iPrint Appliance Server Configuration file located at /etc/opt/novell/iprintmobile/conf/iprintmobile.conf.

If you want to customize the print options, you must specify the print command, along with the required print options. For example, print landscape=y color=y pages=1-3 copies=5 duplex=y media=A3#Test Mail.

9.0 iPrint Appliance System Configuration

The Novell iPrint Appliance Management Console allows you to administer iPrint Appliance, and to change configuration settings, such as administrative passwords, network settings, and certificate settings.

To access the Appliance System Configuration page:

On a Web browser, specify either the DNS name or the IP address. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Specify the Username and Password, then click Log in.

Click the Appliance System Configuration icon.

The Appliance System Configuration page displays the following options:

Section 9.1, Administrative Passwords

Section 9.2, Network

Section 9.3, Time

Section 9.4, Digital Certificates

Section 9.5, Ganglia Configuration

Section 9.6, System Services

Section 9.7, Firewall

Section 9.8, Support

Section 9.9, Field Patch

Section 9.10, Storage

Section 9.11, Modifying Logging Options

Section 9.12, Shutting Down and Restarting iPrint Appliance

Section 9.13, Signing Out of iPrint Appliance

9.1 Administrative Passwords

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the Appliance System Configuration icon.

Click Administrative Passwords.

Specify new passwords for the root and vaadmin administrators.

If you are changing the root password, you must first specify the current root password.

(Optional) Select or deselect Allow root access to SSH. When this option is selected, the root user is able to SSH to the appliance. If this option is not selected, only the vaadmin user can SSH to the appliance.

Click OK.

IMPORTANT:To change the eDirectory admin password, launch the terminal and run the script iprint_edir_change_passwd.sh.

9.2 Network

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the Appliance System Configuration icon.

Click Network.

Change the IP and DNS configuration settings for your Novell appliance.

IMPORTANT:Do not change any settings on the Network page. iPrint Appliance 1.0.1 does not support network settings changes after the initial iPrint Appliance configuration.

Click Save.

9.3 Time

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the Appliance System Configuration icon.

Click Time.

Change the time configuration options as necessary:

NTP Server: Specify the NTP server that you want to use for time synchronization.

Region: Select the region where your Novell Appliance is located.

Time Zone: Select the time zone where your Novell Appliance is located.

Click Save.

9.4 Digital Certificates

The Novell Appliance ships with a self-signed digital certificate. Instead of using this self-signed certificate, you should use a trusted server certificate that is signed by a trusted certificate authority (CA) such as VeriSign or Equifax.

The certificate works for both the Novell Appliance and the iPrint software (ports 9443 and 8443). You do not need to update your certificate when you update the iPrint Appliance software.

Complete the following sections to change the digital certificate for your Novell Appliance. You can use the digital certificate tool to create your own certificate and then have it signed by a CA, or you can use an existing certificate and key pair if you have one that you want to use.

Section 9.4.1, Getting Your Certificate Officially Signed

Section 9.4.2, Using an Existing Certificate and Key Pair

Section 9.4.3, Activating the Certificate

Section 9.4.4, Managing Certificates

9.4.1 Getting Your Certificate Officially Signed

On the Digital Certificates page, select the certificate that you just created, then click File > Certificate Requests > Generate CSR.

Complete the process of emailing your digital certificate to a certificate authority (CA), such as Verisign.

The CA takes your Certificate Signing Request (CSR) and generates an official certificate based on the information in the CSR. The CA then mails the new certificate and certificate chain back to you.

After you have received the official certificate and certificate chain from the CA:

Revisit the Digital Certificates page by clicking Digital Certificates from the Novell Appliance.

Click File > Import > Trusted Certificate. Browse and select the trusted certificate chain that you received from the CA, then click OK.

Select the self-signed certificate, then click File > Certification Request > Import CA Reply.

Browse to and upload the official certificate to be used to update the certificate information.

On the Digital Certificates page, the name in the Issuer column for your certificate changes to the name of the CA that stamped your certificate.

Activate the certificate, as described in Section 9.4.3, Activating the Certificate.

9.4.2 Using an Existing Certificate and Key Pair

When you use an existing certificate and key pair, use a .P12 key pair format.

Go to the Digital Certificates page by clicking Digital Certificates from the Novell Appliance.

On the Digital Certificates page, in the Key Store drop-down menu, select JVM Certificates.

Click File > Import > Trusted Certificate. Browse and select your existing certificate, then click OK.

Click File > Import > Trusted Certificate. Browse and select your existing certificate chain for the certificate that you selected in Step 3, then click OK.

Click File > Import > Key Pair, then browse to and select your .P12 key pair file, specify your password if needed, then click OK.

Continue with Section 9.4.3, Activating the Certificate.

9.4.3 Activating the Certificate

On the Digital Certificates page, in the Key Store drop-down menu, select Web Application Certificates.

Select the certificate that you want to make active, click Set as Active, then click Yes.

Verify that the certificate and the certificate chain were created correctly by selecting the certificate, then clicking View Info.

NOTE:When you activate a certificate, the Set as Active button might still be enabled for that certificate. You can ignore it, as it does not affect the certificate activation.

9.4.4 Managing Certificates

All certificates that are included with the IBM Java package that is bundled with the version of SLES that iPrint Appliance ships with, are installed when you install iPrint Appliance.

You can use the Digital Certificates tool on the iPrint Appliance to remove certificates that are not used by your organization, if you are concerned about keeping them.

Also, you can use the Digital Certificates tool on the iPrint Appliance to maintain the certificate store by removing certificates that have expired and then installing new certificates as needed, according to your organization’s security policies.

To access the Digital Certificates tool:

Click Digital Certificates from the Novell Appliance.

iPrint Appliance uses only the certificates that relate to LDAP and SMTP. In the Key Store drop-down menu, under Web Application Certificates, a self-signed certificate is displayed. This certificate is required for iPrint Appliance, and must not be deleted.

In the Key Store drop-down menu, under JVM Certificates, you can delete all the certificates except the edir_root_ca certificate, and any other LDAP or SMTP certificates that you might have imported.

9.5 Ganglia Configuration

Ganglia is a scalable, distributed monitoring system that allows you to gather important information about your iPrint Appliance system.

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the Appliance System Configuration icon.

Click Ganglia Configuration.

As necessary, change the following Ganglia configuration options:

Enable the Web interface to run on this machine: Select this option to allow the Ganglia Web Interface to run on the same machine as iPrint Appliance.

Enable Ganglia Monitoring: Select this option to enable Ganglia to monitor iPrint Appliance.

Multicast Mode: Select this option to send monitoring information to multiple destinations.

Unicast Mode: Select this option to send monitoring information to a single destination.

Publish to: Specify the URL where Ganglia sends monitoring information when it is running in Unicast mode.

Click Save.

For more information about how to use Ganglia monitoring with iPrint Appliance, see Section 14.0, Monitoring iPrint Appliance Performance with Ganglia.

9.6 System Services

This section describes the actions you can perform on the system services.

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the Appliance System Configuration icon.

Click System Services.

You can perform the following actions:

Section 9.6.1, Starting, Stopping, or Restarting System Services

Section 9.6.2, Setting System Services to Automatic or Manual

Section 9.6.3, Downloading Log Files for System Services

9.6.1 Starting, Stopping, or Restarting System Services

Select the service that you want to start, stop, or restart.

Click Action, then click Start, Stop, or Restart.

Click Close to exit System Services.

9.6.2 Setting System Services to Automatic or Manual

Select the service that you want to make automatic or manual.

Click Action, then click Set as Automatic, or Set as Manual.

9.6.3 Downloading Log Files for System Services

The Log Files section is not available on iPrint Appliance. However, you can view the log files on the server at the following locations.

Novell iPrint Mobile and iManager: /var/opt/novell/tomcat6/logs/catalina.out

Novell iPrint Mobile log: /var/opt/novell/log/iprintmobile/iprintmobile0.log

Management Console: /var/opt/novell/jetty8/logs/jetty.stderrout.out

Export Backup Log: /var/opt/novell/log/iprintmobile/backup.log

Upgrade Restore log: /var/opt/novell/log/iprintmobile/restore.log

Print Manager: /var/opt/novell/log/iprint/ipsmd.log

Driver Store: /var/opt/novell/log/iprint/idsd.log

eDirectory: /var/opt/novell/eDirectory/log/ndsd.log

Apache: /var/log/apache2/error_log

Avahi: /var/log/messages

9.7 Firewall

You can view your current firewall configuration directly from the iPrint Appliance:

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the Appliance System Configuration icon.

Click Firewall.

Port numbers are listed with the current status of each port number. This page is for informational purposes and is not editable.

For more information about port numbers in iPrint Appliance, see Section 13.0, iPrint Appliance Firewall Exceptions.

9.8 Support

You can upload configuration files to Novell Support via FTP, or to download the configuration files so that you can send them by an alternative method.

Log in to the iPrint Appliance at https://server_url:9443, then click Appliance Configuration.

Click Support.

Select Automatically send the configuration to Novell using FTP to automatically send your iPrint Appliance system’s configuration information to Novell Support via FTP.

or

Select Download and save the configuration file locally, then send it to Novell manually to download your iPrint Appliance system’s configuration information to your management workstation. You can then send the information to Novell Support using a method of your choice.

Click OK to complete the process.

9.9 Field Patch

You can manage field test patches for the iPrint Appliance from the Field Patch page. You can install new patches, view currently installed patches, and uninstall patches.

Log in to iPrint Appliance at https://server_url:9443, then click Appliance Configuration.

Click Field Test Patch.

(Optional) Install a new patch:

Before you can install a patch, you first need to download it from the Novell Support web site to your management workstation.

From the Field Test Patch page on the Novell appliance, click Browse.

Browse to and select the patch that you downloaded in Step 3.a.

Click Install Selected Patch.

(Optional) Uninstall a patch:

In the Patch Name column of the provided table, select the patch that you want to uninstall.

Click Uninstall Latest Patch.

9.10 Storage

If you have created partitions for /vastorage and /var, iPrint Appliance provides native tools to allow you to expand the storage space for the /vastorage and /var partitions.

Log in to iPrint Appliance at https://server_url:9443, then click the Appliance Configuration.

Click Storage.

Use the tools provided by your virtualization platform vendor to expand the virtual disks that contain the partitions your are expanding.

In the provided table, select the partitions to be expanded.

Click Expand partitions.

Appliance services are stopped, the selected partitions are expanded to the size of their respective disks, and appliance services are restarted.

Reboot the appliance so the operating system can detect the disks that have been expanded.

9.11 Modifying Logging Options

iPrint Appliance system events are logged in the /var directory. Since the /var directory can fill up with log files and cause the boot partition to grow, it is recommended that /var be located either on a separate hard disk on the appliance, or on a remote NFS directory.

To move the /var directory to a dedicated disk or to a remote NFS directory:

Log in to iPrint Appliance at https://server_url:9443, then click Appliance Configuration.

Click Logging.

Specify the hard disk information for the /var directory:

Select disk: Select the hard disk where you want to place /var.

File system type: Specify the type of file system.

Click OK.

9.12 Shutting Down and Restarting iPrint Appliance

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the Appliance System Configuration icon.

Click Reboot or Shutdown.

9.13 Signing Out of iPrint Appliance

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Specify the Username and Password, then click Log in.

In the upper-right corner of the page, next to the user name, click Logout.

NOTE:On the Appliance System Configuration and iPrint Appliance Configuration pages of iPrint Appliance, you can see the user name displayed along with the Home and Logout links. The Home link directs you to the iPrint Appliance main page, and the Logout link allows you to sign out of iPrint Appliance.

10.0 iPrint Appliance Management

The Novell iPrint Appliance Management Console allows you to add and manage printers, check the printer status, create printer maps, and monitor iPrint Appliance.

To access the Management Console, on a Web browser, specify either the DNS name or the IP address. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

The iPrint Appliance Management Console page displays the following options:

Section 10.1, iPrint Appliance Configuration

Section 10.2, iPrint Printer Configuration (iManager)

Section 10.3, iPrint Printer Status

Section 10.4, iPrint Printer Import / Migration

Section 10.5, iPrint Map Creation

Section 10.6, Ganglia

10.1 iPrint Appliance Configuration

The iPrint Appliance Configuration page displays the following options:

Section 10.1.1, Mobile Configuration

Section 10.1.2, Driver Store Configuration

Section 10.1.3, Printers

Section 10.1.4, Renderers

Section 10.1.5, Services

Section 10.1.6, Export Configuration

Section 10.1.7, LDAP Import

Section 10.1.8, License

10.1.1 Mobile Configuration

On the Mobile configuration page, you can configure Email printing, Printer Defaults, and Renderer Options.

Email Configuration

iPrint Appliance can be configured to accept print jobs through email messages and attachments. When configured for email printing, iPrint Appliance becomes a client to an email server. Email account inbox(es) are polled for incoming print jobs, which are routed to the intended printer. Email accounts must be created and functional prior to their association with Novell iPrint Appliance.

Enable email-based printing: Select this option to enable email printing. A global email address can be assigned for all printers. The global email address feature requires access to an email account such as GroupWise, Exchange, Lotus Notes, or Gmail.

The following fields are used by iPrint Appliance to describe and access the global email account:

Email address: Specify the full email address for global print jobs. iPrint Appliance polls the inbox of this email address looking for print jobs. When an email-based job arrives, the subject line is parsed to determine the printer to which the job is sent. For example, print@example.com.

Account Username: Specify the user name for iPrint Appliance to log in to the email server to access the global email account. For example, iprint.

Account Password: Specify the password for iPrint Appliance to log in to the email server to access the global email account.

Re-type Password: Confirm the account password.

Incoming Mail Server: Specify the address of the incoming mail server for the email account. For example, imap.example.com.

Incoming Server Type: iPrint Appliance supports POP and IMAP protocols to poll for incoming print jobs. Select POP or IMAP depending on the protocol that your email server supports.

Outgoing (SMTP) Mail Server: Specify the address of the outgoing mail server for the email account. For example, smtp.example.com. iPrint Appliance uses the SMTP protocol to send email back to users who submit email-based print jobs to report their job status. In order to support iPrint Appliance, the email server you select must support the SMTP protocol.

Enable Mail-body Printing: With email-based printing, attachments are always printed. This option allows the email message body to also be printed. It is enabled by default.

Polling Interval: Configures the interval (in milliseconds) at which emails are fetched from mail servers.

NOTE:Each instance of iPrint Mobile service must be configured with a unique email address, which cannot be shared with other instances of mobile service. Similarly, an email address used for a particular printer (per printer email configuration) cannot be shared for any other printer or mobile service.

Printer Defaults

Printer features managed by iPrint Appliance can be enabled and disabled. The fields in this section are the default values for newly added printers. As each printer is added, these values can be modified.

Paper Size: Select Letter or A4.

Orientation: Select between Landscape or Portrait printing orientation.

Enable Duplex Printing: Duplex printing allows automatic printing of a sheet of paper on both sides. Print devices without this capability can only print on a single side of paper (simplex printing).

Enable Color Printing: Color (or Colour) printing prints the documents in color, as opposed to monochrome (black and white) printing.

Renderer Options

Print jobs arrive from iPrint clients in a variety of file formats. By default, these files are rendered to a format that can be printed (by the target printer) using the server renderer. However, there are several file formats that are not perfectly rendered by the server renderer. For more precise rendering, you must install and configure one or more remote renderers on a Windows 64-bit machine.

External renderers connect to iPrint Appliance and poll the un-rendered print jobs queue for files that the external renderer can more expertly render. The rendered jobs are then returned to iPrint Appliance for printing.

For the external renderer to connect to iPrint Appliance, an Authentication Key is required. If the external renderer's Authentication Key matches the Authentication Key specified in this field, the external renderer is granted access to poll the un-rendered print jobs.

The Authentication Key can be a combination of a string of characters. The key is used to authorize an external document renderer with iPrint Appliance.

10.1.2 Driver Store Configuration

Starting with iPrint Appliance 1.1, you can change the Drive Store post the initial configuration. The Driver Store Configuration page contains the following options:

Enable local driver store: Select this option to use the Driver Store located on the local machine

Enable remote driver store: Select this option to change the location of the Remote Driver Store. Specify the DNS Name/Address, Username, and the Password of the new Remote Driver Store, then click Save.

10.1.3 Printers

The Printers page lists all printers currently managed by iPrint Appliance (created using iManager). You can enable a printer for AirPrint, Email printing, and IPP printing. Select a printer, click the AirPrint or Mobile drop-down menu, then click Enable.

You can also assign a specific email address to each printer by clicking the Configure drop-down menu, then clicking Private Email Settings. When configured for private email printing, iPrint Appliance becomes a client to an email server. You must provide the following information to enable a private email address for the printer:

Account

Email Address: Specify the full email address of the mailbox to be polled for the print jobs. When an email-based job arrives, the print job is processed to the printer. For example, print@example.com.

Username: Specify the user name to be used by iPrint Appliance to log in to the email server to access the private printer email account. For example, iprint.

Password: Specify the password for iPrint Appliance to log in to the email server to access the private printer email account.

Retype Password: Confirm the account password.

Server

Incoming Mail Server: Specify the address of the incoming email server for the email account. For example, imap.example.com.

Outgoing Mail Server: Specify the address of the outgoing email server for the email account. For example, smtp.example.com.

Access Method: iPrint Appliance supports two different protocols to poll for incoming print jobs. Select POP or IMAP depending on the protocol your email server supports.

NOTE:An email address used for a particular printer (per-printer email configuration) cannot be shared for any other printer or mobile service.

IMPORTANT:If you configure a printer for private email printing and then disable the printer for Mobile printing, the private email configuration settings are deleted. If you want to enable private email printing in future, you must specify the information manually.

Printer Rename and Printer Refresh

You can rename a printer from the Printers page. Select a printer you want to rename, click the Configure menu, then click Rename Printer.

To refresh the printers list, click the Refresh button in the upper right of the Available Printers window.

Bulk Printer Import

You can bulk import printers into iPrint Appliance through a csv file. You must create a csv file, then import the csv file into iPrint Appliance by clicking the Upload CSV button in the upper-right corner of the Available Printers window.

The csv file must contain the following fields:

#PrinterName, PrinterIP, Location, Description, Win95_98_Driver, Winnt_Driver, Win2k_Driver, Winxp_Driver, Linux_Driver, Mac_Driver, Vista32_Driver, Vista64_Driver, Win732_Driver, Win764_Driver, Win832_Driver, Win864_Driver, Enable DirectPrinting, Secure Printing, Enable Auditing, LPR/RAW, Raw Port.

For secure printing, auditing and direct printing, the fields must be populated with the options Yes or No.

10.1.4 Renderers

The Renderers page allows you to download the remote renderer. The page also displays all document renderers registered with iPrint Appliance, and allows you to add, delete, and activate/deactivate a renderer.

10.1.5 Services

The Services page displays the system services that are required for iPrint Appliance. To enable or disable a service, select a service on the page, click the Action drop-down menu, then click Start, Stop, or Restart.

You can set the Startup Type of the services to Automatic or Manual by clicking the Options drop-down menu, then clicking Set as Automatic or Set as Manual.

To refresh the information on the page, click Refresh List.

10.1.6 Export Configuration

The Export Configuration page allows you to create a backup of the iPrint Appliance configuration. The configuration information is exported to the iprintconfig.zip file. This file can be used when upgrading iPrint Appliance or installing a new copy.

NOTE:Log files are not backed up when exporting the configuration file. If you want to back up files and folders that are not backed up by default, you must add the path of those files manually into the additionalBackupList file located at /etc/opt/novell/iprintmobile/conf/additionalBackupList/.

On iPrint Appliance 1.0, the permissions for files/directories added to the additionalBackupList file are not retained during backup. You must manually assign the owners and permissions for these files and directories on the target machine after upgrade.

To export the configuration, provide the eDirectory administrator Password, then click Export. When upgrading to a new iPrint Appliance, you must use the eDirectory administrator password. The eDirectory administrator is usually the admin user cn=admin,o=iPrintappliance.

Any configuration change in iPrint Appliance takes at least 20 minutes to get updated to the configuration file. If you export the iPrint Appliance configuration file within 20 minutes of modifying the configuration settings, and then import the configuration file into another copy of iPrint Appliance, the changes are not captured. In this case, you might not be able to view the updated information in the iPrint Appliance. We recommend that you wait at least 20 minutes after the last configuration change before you export the configuration file.

For information on upgrading iPrint Appliance, see Section 5.1.2, Upgrade.

10.1.7 LDAP Import

To create an iPrint Appliance user account, you can synchronize initial user information from your network directory service (NetIQ eDirectory or Microsoft Active Directory service) after you have installed the iPrint Appliance software. Over time, you can continue to synchronize user information from the LDAP directory to your iPrint Appliance.

When you synchronize user information into iPrint Appliance from a source LDAP directory service, the entire Base DN on the source is imported into iPrint Appliance. For example, if you sync the context o=users from an LDAP source, the same o=users context is created in iPrint Appliance.

IMPORTANT:

iPrint Appliance performs one-way synchronization from the LDAP directory. If you change user information in iPrint Appliance, the changes are not synchronized back to your LDAP directory. It is recommended that you do not change synced LDAP user information on iPrint Appliance.

iPrint Appliance does not support multi-value attributes. If your LDAP directory contains multi-value attributes, iPrint Appliance recognizes only the first attribute. For example, if your LDAP directory contains multiple email addresses for a given user, only the first email address is synchronized to iPrint Appliance.

LDAP import does not sync user passwords to iPrint Appliance. Authentication requests from the mobile app are redirected to the defined LDAP source. If a user password is changed on the LDAP source, you do not need to update the same password on iPrint Appliance.

The LDAP source IP or DNS name must be always active for iPrint Appliance to authenticate users.

You can configure multiple LDAP connections. To create a new LDAP connection, click Add a New LDAP Source on the LDAP Import page.

For information on importing certificates into iPrint Appliance when using LDAP, see the knowledge base article: How to enable SSL to Teaming LDAP Synchronization and Authentication.

Each connection requires the following configuration information:

LDAP Server URL

User DN (Proxy User for Synchronizing Users and Groups)

LDAP Attribute to Identify a User or Group

LDAP Attribute for iPrint Appliance User Name

User and Group Object Locations

LDAP Synchronization

LDAP Server URL

In order to synchronize initial user information, iPrint Appliance must access an LDAP server where your directory service is running. You must provide the hostname of the server, using a URL with the following format:

ldap://hostname

If the LDAP server requires a secure SSL connection, use the following format:

ldaps://hostname

If the LDAP server is configured with a default port number (389 for non-secure connections or 636 for secure SSL connections), the port number is not required in the URL. If the LDAP server uses a different port number, use the following format for the LDAP URL:

ldap://hostname:port_number
ldaps://hostname:port_number

If the LDAP server requires a secure SSL connection, additional setup is required. You must import the root certificate for your LDAP directory into the Java KeyStore (JVM Certificates) from Management Tools > Appliance System Configuration > Digital Certificates on the iPrint server, before you configure iPrint Appliance for LDAP synchronization.

User DN (Proxy User for Synchronizing Users and Groups)

To sync users into iPrint Appliance, you must provide the user name and password of a user who has sufficient rights to access the user information on the LDAP server.

In your LDAP directory tree, you must provide the fully qualified, comma-delimited user name, along with its context, in the format expected by your directory service.

Directory Service

Format for the User Name

eDirectory

cn=username,ou=organizational_unit,o=organization

Active Directory

cn=username,cn=organizational_unit,dc=domain_component

LDAP Attribute to Identify a User or Group

The LDAP attribute that uniquely identifies a user or group helps facilitate renaming and moving iPrint users and groups in the LDAP directory. If this attribute is not set and you rename or move a user in the LDAP source directory, iPrint Appliance assumes that the new name (or the new location of the same name) represents a new user rather than a modified user, and creates a new iPrint Appliance user.

For example, you have an iPrint user with a given name of William Jones. If William changes his name to Bill and you make that change in the LDAP directory, iPrint Appliance creates a new user named Bill Jones.

To ensure that iPrint Appliance modifies the existing user instead of creating a new user when the user is renamed or moved in the LDAP directory, you must specify the name of the LDAP attribute that uniquely identifies the user. For eDirectory, this value is GUID. For Active Directory, this value is objectGUID. This attribute always has a unique value that does not change when you rename or move a user in the LDAP directory. If you want to map users to a different attribute, you must ensure that the attribute that you use is a binary attribute. For example, the cn attribute cannot be used because it is not a binary attribute.

LDAP Attribute for iPrint Appliance User Name

The setting LDAP Attribute Used for iPrint Appliance User Name is used for two purposes:

The value is used as the iPrint Appliance user name when the user is first provisioned from LDAP. The value of this attribute must be unique.

During iPrint Appliance login, iPrint Appliance uses this attribute to locate the user in the LDAP directory, and then tries to authenticate as that user.

LDAP directories differ in the LDAP attribute used to identify a User object. Both eDirectory and Active Directory might use the cn (common name) attribute. A more sure alternative for Active Directory is to use the sAMAccountName attribute. Other LDAP directories might use the uid (unique ID) attribute, depending on the structure and configuration of the directory tree.

Consult with your directory administrator in order to determine the best attribute to use. In some cases where not all users are being imported successfully, you must set up two LDAP sources pointing to the same LDAP server and have each source use a different value for the LDAP Attribute Used for iPrint Name. For example, set up one LDAP source and use cn as the LDAP Attribute Used for iPrint Name, and then set up a separate source to the same LDAP server and use sAMAccountName as the LDAP Attribute Used for iPrint Name.

In addition to the attributes already mentioned in this section, other LDAP attributes can be used for the LDAP Attribute Used for iPrint Name, as long as the attribute is unique for each User object. For example, the mail LDAP attribute on User objects can be used to enable iPrint Appliance users to log in by using their email addresses.

User and Group Object Locations

iPrint Appliance can find and synchronize initial user information from User objects located in one or more containers in the LDAP directory tree. A container under which User objects are located is called a base DN (distinguished name). The format you use to specify a base DN depends on your directory service.

Directory Service

Format for the User Container

eDirectory

ou=organizational_unit,o=organization

Active Directory

cn=organizational_unit,dc=domain_component

To identify potential iPrint users, iPrint Appliance by default filters on the following LDAP directory object attributes:

Person

orgPerson

inetOrgPerson

If you want to create iPrint groups based on information in your LDAP directory, iPrint Appliance filters on the following LDAP directory object attributes:

group

groupOfNames

groupOfUniqueNames

You can add attributes to the user or group filter list if necessary. You can use the following operators in the filter:

| OR (the default)

& AND

! NOT

You can choose whether you want iPrint Appliance to search for users (and optionally, groups) in containers below the base DN (that is, in subtrees).

You can create a group that consists of all the users that you want to set up in iPrint Appliance, regardless of where they are located in your LDAP directory. After you create the group, you can use the following filter to search for User objects that have the specified group membership attribute:

(groupMembership=cn=group_name,ou=organizational_unit,o=organization)

IMPORTANT:Ensure that you include parentheses in your filter.

LDAP Synchronization

Synchronization options apply to all LDAP configurations.

You can perform LDAP synchronization every day, or on specific days of the week. You can also perform a sync once a day at a specified time, or multiple times each day. The smallest time interval you can set is .25 hours (every 15 minutes).

To synchronize users and groups immediately, select Run Immediately.

NOTE:If you want to delete users that are synced from a particular LDAP source, you must delete the LDAP source connection then run an LDAP sync. When you delete an LDAP source, the users and groups from that context are deleted while the context itself is retained.

10.1.8 License

For information on iPrint Appliance Licensing, see Section 12.0, iPrint Appliance License Information.

Usage Information

On the License page, you can view the usage details of iPrint Appliance. The Usage Information box below the Current License Information box provides information about the number of printers configured, the number of mobile enabled printers, and the number of mobile print users in the last 180 days.

10.2 iPrint Printer Configuration (iManager)

iManager is a tool that allows you to manage your print environment. You can create printers, printer drivers, profiles, and users. You can also manage workstations.

For more information about managing your print system using iManager, see the Managing Your Print System section in the OES 11 iPrint Administration Guide.

10.3 iPrint Printer Status

The iPrint Printer Status tools provides a global view of your print system. The tool displays the current status of Printer Agents, and lets you configure settings and generate reports about your print system.

For more information about the iPrint Printer Status tool, see the iPrint Manager Health Monitor Administration Guide.

10.4 iPrint Printer Import / Migration

The iPrint Printer Import link provides information on how to migrate printers from an existing OES iPrint system or iPrint Appliance.

10.5 iPrint Map Creation

You can use the iPrint Map Designer to create a map displaying the location of printers. Users can identify and install the printers that are nearest to their location.

For more information about creating a map, see Setting Up Location-Based Printing in the iPrint Linux Administration Guide.

10.6 Ganglia

Ganglia is a scalable, distributed monitoring system that allows you to gather important metric data about the performance of your iPrint Appliance. The default metrics that you can monitor are processor, disk, load, memory, network, and process.

For information about how to configure Ganglia for your environment, including changing from multicast mode to unicast mode, see Section 9.5, Ganglia Configuration.

11.0 Configuring MobileIron to Manage the iPrint App

The Novell iPrint 1.0.1 mobile app on Android supports MobileIron 5.9. The Novell iPrint 1.0.3 app on iOS platforms supports MobileIron 5.10.

Section 11.1, Supported Features

Section 11.2, Adding the iPrint App to MobileIron

Section 11.3, Pre-Populating Fields for iPrint Login

Section 11.4, Distributing the iPrint App to Devices

11.1 Supported Features

When using MobileIron to manage the iPrint app, the following features are supported on both iOS and Android:

Populate the Server IP Address field for login

Populate the User ID field for login

Populate the Password field for login

11.2 Adding the iPrint App to MobileIron

Section 11.2.1, Adding the Android iPrint App

Section 11.2.2, Adding the iOS iPrint App

11.2.1 Adding the Android iPrint App

To add the Android iPrint app to MobileIron, upload the .apk file and then apply the Android label to the application:

Download the .apk file for the iPrint mobile app from the Novell downloads site.

Upload the file to MobileIron:

In the MobileIron Admin Portal, click the Apps tab.

On the App Distribution Library tab, in the Select Platform drop-down list, select the platform for the app that you want to add. For example, if you are uploading the iPrint mobile app for Android, select Android.

Click Add App.

The Add App Wizard is displayed.

Click Next, then specify the following information:

Distribution Type: Select In-house App.

Silently Install: If your device supports a silent install, select Yes. If the device does not support a silent install or if you are unsure, select No.

App Upload: Browse to and select the .apk file that you downloaded.

Click Next, then specify the following information:

App Name: Novell iPrint is already specified for you. This cannot be changed.

Display Version: The version is already specified for you. This cannot be changed.

Code Version: The version is already specified for you. This cannot be changed.

Description: Specify a short description for the app.

Override URL: For information about this feature, see the blue information icon next to this field.

Featured: Select whether you want to feature this app.

Category: Select the category that most closely matches the app. You can add a new category as described in the dialog box.

Click Next, then click Browse to upload any screen shots that you have for the app.

The mandatory image size is displayed in the dialog box.

Click Finish to close the Add App Wizard.

Apply the Android label to your application:

From the App Distribution Library tab on the Apps tab, select the Novell iPrint app that you just created, then click Actions > Apply To Label.

The Apply To Label dialog box is displayed.

Select the Android label, then click Apply > OK.

11.2.2 Adding the iOS iPrint App

To add the iOS iPrint app to MobileIron, import it from the Apple Appstore and then apply the iOS label to the application:

Import the app from the Apple Appstore:

In the MobileIron Admin Portal, click the Apps tab.

On the App Distribution Library tab, in the Select Platform drop-down list, select iOS.

Click App Store Import.

The App Store Search dialog box is displayed.

In the App Name field, type Novell iPrint.

In the App Store field, select the country appropriate to your location.

Click Search.

Click Import next to the Novell iPrint app, then click OK after it is imported.

Close the App Store Search dialog box.

From the App Distribution Library tab on the Apps tab, click the Edit icon next to the Novell iPrint app that you just imported.

The Edit App for iOS dialog box is displayed.

Make any desired changes to the app details and icon, then click Save.

Apply the iOS label to your application:

From the App Distribution Library tab on the Apps tab, select the Novell iPrint app that you just created, then click Actions > Apply To Label.

The Apply To Label dialog box is displayed.

Select the iOS label, then click Apply > OK.

11.3 Pre-Populating Fields for iPrint Login

You can pre-populate the fields on the iPrint login screen for users in your system by configuring the iPrint key-value pairs in MobileIron. You can pre-populate the server URL and user ID fields for both the iOS and Android apps. For the Android app, you can also pre-populate the user password field.

You accomplish this within MobileIron by modifying the app configuration for Android, and creating a new app configuration for iOS.

Section 11.3.1, Creating the iOS iPrint App Configuration for MobileIron

Section 11.3.2, Key-Value Pairs

Section 11.3.3, Modifying the Android iPrint App Configuration for MobileIron

11.3.1 Creating the iOS iPrint App Configuration for MobileIron

In the MobileIron Admin Portal, click the Policies & Configs tab.

On the Configuration tab, click Add New > AppConnect > Configuration.

The New AppConnect App Configuration dialog box is displayed.

Specify the following information:

Name: Provide a name for the configuration, such as iPrint iOS Configuration.

Description: (Optional) Provide a description for the configuration.

Application: Specify the iPrint iOS bundle ID, which is com.novell.print.

In the App-specific Configurations section, click the Plus icon to add a new field to the key-value pair table; you can then specify the key-value pair to be included in the configuration.

The key-value pairs that you can add are shown in Table 11-1, iPrint Key-Value Pairs. Key-value pairs that you add to the table represent the information that will be pre-populated for iPrint login.

Click Save.

11.3.2 Key-Value Pairs

Table 11-1 iPrint Key-Value Pairs

Key

Value

server

Specify the URL of your iPrint site. For example, iprint.acme.com.

user

Specify $USERID$ for MobileIron to automatically populate the app with the users’ MobileIron user ID.

Alternatively, you can specify an individual user’s user ID.

password

Specify $PASSWORD$ for MobileIron to automatically populate the app with the user’s MobileIron password.

Alternatively, you can specify an individual user’s password.

11.3.3 Modifying the Android iPrint App Configuration for MobileIron

In the MobileIron Admin Portal, click the Policies & Configs tab.

On the Configuration tab, in the Name column, click the name of the iPrint configuration for the iPrint app that you uploaded, as described in Adding the Android iPrint App.

Click Edit.

The Modify AppConnect App Configuration dialog is displayed.

Specify the following information:

Name: Provide a name for the configuration, or keep the default.

Description: (Optional) Provide a description for the configuration, or keep the default.

Application: Select Novell iPrint from the drop-down list.

In the App-specific Configurations section, keep or remove the key-value pairs that are shown in Table 11-1, iPrint Key-Value Pairs. Key-value pairs that remain in the table represent the information that will be pre-populated for iPrint login.

Click Save.

11.4 Distributing the iPrint App to Devices

You must distribute the iPrint app to devices in your organization via MobileIron if this is the first time your organization is using MobileIron with iPrint, or any time a new device enters the organization.

Some users might have independently download the iPrint app from the app store before their device is managed by MobileIron. Even in this scenario, you must push the app to their device via MobileIron. (These devices will lose any cached or downloaded files within the iPrint app after their device becomes managed and the iPrint app is pushed to their device.)

12.0 iPrint Appliance License Information

On the License page of iPrint Appliance, you can view information about your current iPrint Appliance license.

iPrint ships with a 60-day evaluation license. You must update this license to a full product license.

You can obtain a new valid license key from the Novell Customer Center (NCC).

Section 12.1, Accessing the License Page

Section 12.2, Updating the iPrint Appliance License

12.1 Accessing the License Page

You can access the License page of iPrint Appliance by using the Management Console.

On a Web browser, specify either the DNS name or the IP address of iPrint Appliance. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Log in using admin or root credentials.

Click the iPrint Appliance Configuration icon.

Under Administration, click License.

On the License page, the Current License Information section displays information about your current iPrint license, including the date it was issued and the number of days from the issue date that the license is valid.

12.2 Updating the iPrint Appliance License

To update your iPrint Appliance license:

On the License page, in the Current License Information section, next to Upload new license file, click Choose File.

Browse to and select a valid license-key.xml file.

Click Upload.

IMPORTANT:If you are running multiple copies of iPrint Appliance, you must update the license for each copy of iPrint Appliance individually.

After copying the license file, iPrint Appliance is updated. Restarting services is not required.

13.0 iPrint Appliance Firewall Exceptions

If you have a firewall, you must allow the port numbers listed below to ensure that you have a seamless experience with iPrint Appliance.

Section 13.1, Inbound Connections to iPrint Appliance

Section 13.2, Outbound Connections from iPrint Appliance

13.1 Inbound Connections to iPrint Appliance

To allow printing access to your end users from a public network, you must allow the following ports:

80 - HTTP

443 - HTTPS

631 - IPP

To allow iPrint Appliance access to your administrators, you must allow the following ports:

80 - HTTP

443 - HTTPS

636 - LDAPS

389 - LDAP

524 - NCP

631 - IPP

9443 - Management Console

515 - LPR

22 - SSH

5353 - mDNS/UDP (AirPrint)

8080, 8081, 8443, 8444, and 8649 (Ganglia Configuration)

13.2 Outbound Connections from iPrint Appliance

iPrint Appliance uses the following ports to access external applications:

636 and 389 - For LDAP Import and user authentication to the configured LDAP sources

80, 524, 443, 631, 636, and 389 - To access the source server for printer migration

5353 - To access the wireless network to advertise AirPrint printers

161, 515, and 9100 - To access printers

14.0 Monitoring iPrint Appliance Performance with Ganglia

Ganglia is a scalable, distributed monitoring system that allows you to gather important metric data about the performance of your iPrint Appliance. The default metrics that you can monitor are processor, disk, load, memory, network, and process.

Ganglia is not enabled by default. To monitor iPrint Appliance using Ganglia, you must enable Ganglia Configuration in the Appliance System Configuration page of the iPrint Appliance Management Console. For information in how to enable Ganglia Configuration, see Section 9.5, Ganglia Configuration.

To view Ganglia monitoring of your iPrint Appliance system:

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the Ganglia icon.

An overview of all the nodes in the cluster, including information such as processor utilization, memory, load, and so forth is displayed.

In the Grid-Node drop-down list, select a node that you want to monitor.

or

Scroll to the bottom of the page and click a node to get server information for your iPrint Appliance.

For information about how to configure Ganglia for your environment, including changing from multicast mode to unicast mode, see Section 9.5, Ganglia Configuration.

15.0 Advanced Configuration for iPrint Mobile Service (Optional)

In addition to the Management Console, there are a few additional parameters that can be configured to fine-tune the iPrint Mobile service, based on your network and printing requirements. The iPrint Appliance Server Configuration file, located at /etc/opt/novell/iprintmobile/conf/iprintmobile.conf, allows you to customize the iPrint Mobile service per your requirements.

You must configure the iprintmobile.conf file manually. When assigning a value to any parameter, ensure that you uncomment the line, in order for the changes to take effect. After configuring the file, you must restart the iPrint Mobile service through the Management Console.

The iPrint Appliance Server Configuration file contains the following information:

NOTE:The advanced configuration is optional. For most environments, the configuration does not require modifications.

Table 15-1 iPrint Appliance Server Configuration File Contents

Parameter

Default Value

Function

office_port

8100

Office background instance listens to this port number.

home_directory

/var/opt/novell/iprintmobile

A directory on the file system that is used to store the data. This folder contains the service metadata and temporary job data.

conversion_wait_time

60

Duration of time (in seconds) that the job submission threads wait for the job conversion threads.

db_backup_interval

10000

Duration (in milliseconds) after which the database is backed up on the disk.

is_test_setup

false

Set this flag if the server is being set up for testing and no dedicated email address is available. Print job requests are read-only from the Cabinet folder.

job_submission_thread_timeout

60

Duration of time for which an excess idle thread waits before terminating.

delete_completed_job_data

true

Deletes the converted email print job data stored at /var/opt/novell/iprintmobile/jobs/. Set the value to false to retain the converted job data for email print jobs.

The /var/opt/novell/iprintmobile/jobs/ folder does not maintain the IPP job data. IPP job data includes job data from the Novell iPrint app and Airprint. The job data for apps and AirPrint are stored in the PA spool directory of the Print Manager.

WARNING:If you set the value to false, you must ensure that you delete the print job data regularly to free up disc space. If the disk space gets full, then email print jobs are not processed.

fallback_to_local_converter

false

If the Windows renderer fails, you can run the job through a local converter.

num_email_receiver_threads

0

Configure this parameter to the maximum number of threads to be used for processing multiple mailboxes. By default (when set to 0), the number of threads to email addresses ratio is 1:5 (1 thread per 5 email addresses).

use_global_address_for_notifications

false

By default, notifications are sent from the printer-specific email address. Change the value to 'true' if you want to send notifications to users using the global email address.

renderer_time_out

30000

Duration (in milliseconds) after which a registered renderer times out and moves to an inactive state.

verify_certificates

false

Disable certificate validation.

renderingOnlyServiceEnabled

true

RenderOnly Configuration

backendRenderingPollingInterval

500

Backend Rendering Polling Interval (in milliseconds)

email_polling_interval

30000

Configures the interval (in milliseconds) at which emails are fetched from mail servers.

subject_optional_for_printer_specific_emails

true

Stops printing emails without the correct iPrint email print command. By default this value is 'true.' Emails forwarded to the printer-specific email address, with or without a subject line, are printed.

email_reconnect_interval

30

If the email server is unavailable, iPrint Appliance tries to reconnect to the email server after the specified duration (in seconds).

16.0 Backup and Restore iPrint Appliance

You can back up the configuration file of iPrint Appliance to protect against system or hard drive crashes. You can also use the backup to transfer the configuration to another iPrint Appliance, or to quickly restore iPrint Appliance.

16.1 Backup iPrint Appliance

You can back up iPrint Appliance through the Management Console.

On a Web browser, use either the DNS name or the IP Address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Ignore the security certificate warning, and continue to the iPrint Appliance Management Console.

Specify vaadmin or root as the user name.

Specify the password.

The Management Console page is displayed.

Click iPrint Appliance Configuration.

Under Administration, click Export Configuration.

Specify the eDirectory administrator Password, then click Export.

The iprintconfig.zip file is created. This is the backup file. The backup file contains the configuration information.

IMPORTANT:On iPrint Appliance 1.0, the license file is not automatically backed up. To backup the license file, you must add the absolute path of the license file manually into the additionalBackupList file located at /etc/opt/novell/iprintmobile/conf/additionalBackupList/. For example, if your license file name is license.xml, you must add the path /opt/novell/filr/apache-tomcat/webapps/ssf/WEB-INF/license/license.xml to the additionalBackupList file.

On iPrint Appliance 1.0, the permissions for files/directories added to the additionalBackupList file are not retained during backup. You must manually assign the owners and permissions for these files and directories on the target machine after upgrade.

16.2 Restore iPrint Appliance

If you want to restore iPrint Appliance, you must reinstall iPrint Appliance, and then follow the procedure below. To reinstall iPrint Appliance, see Section 4.0, Installing iPrint Appliance.

IMPORTANT:When restoring iPrint Appliance, you must ensure that the newly deployed version of iPrint Appliance has the same network configuration, passwords, and time zone as that of the older version of iPrint Appliance from which you exported the iprintconfig.zip configuration file.

On a web browser, use either the DNS name or the IP Address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

NOTE:Ignore the security certificate warning, and continue to the iPrint Appliance Management Console.

Specify vaadmin or root as the user name.

Specify the password.

The Management Console page is displayed.

Click iPrint Appliance Configuration.

The iPrint Initial Configuration Wizard window is displayed.

Select Upgrade, then click Next.

In the File option, click Choose File, then select the configuration file exported from a previous copy of iPrint Appliance.

Specify the eDirectory Password that you provided when exporting the configuration file from the previous copy of iPrint Appliance.

Click Finish.

17.0 Upgrading iPrint Appliance

You can upgrade to the latest version of iPrint Appliance from an earlier version, and quickly retrieve all your configuration settings. To upgrade iPrint Appliance, you must:

Export the configuration file from your existing version of iPrint Appliance.

Install the new version of iPrint Appliance.

Import the configuration file to the new version of iPrint Appliance.

IMPORTANT:When upgrading to a new version of iPrint Appliance from an older version, you must ensure that the newly deployed version of iPrint Appliance has the same network configuration, passwords, and time zone as that of the older version of iPrint Appliance from which you exported the iprintconfig.zip configuration file.

Section 17.1, Export the Configuration File

Section 17.2, Install the New Version of iPrint Appliance

Section 17.3, Import the Configuration File

17.1 Export the Configuration File

On a Web browser, use either the DNS name or the IP Address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Ignore the security certificate warning, and continue to the iPrint Appliance Management Console.

Specify vaadmin or root as the user name.

Specify the password.

The Management Console page is displayed.

Click iPrint Appliance Configuration.

Under Administration, click Export Configuration.

Specify the eDirectory administrator Password, then click Export.

The iprintconfig.zip file is created. The iprintconfig.zip file contains the configuration information.

IMPORTANT:The license file on iPrint Appliance 1.0 is not automatically backed up. To backup the license file, you must add the absolute path of the license file manually into the additionalBackupList file located at /etc/opt/novell/iprintmobile/conf/additionalBackupList/. For example, if your license file name is license.xml, you must add the path /opt/novell/filr/apache-tomcat/webapps/ssf/WEB-INF/license/license.xml to the additionalBackupList file.

On iPrint Appliance 1.0, the permissions for files/directories added to the additionalBackupList file are not retained during backup. You must manually assign the owners and permissions for these files and directories on the target machine after upgrade.

17.2 Install the New Version of iPrint Appliance

After exporting the configuration file, install the new version of iPrint Appliance. For information on installing iPrint Appliance, see Section 4.0, Installing iPrint Appliance.

17.3 Import the Configuration File

On a web browser, use either the DNS name or the IP Address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

NOTE:Ignore the security certificate warning, and continue to the iPrint Appliance Management Console.

Specify vaadmin or root as the user name.

Specify the password.

The Management Console page is displayed.

Click iPrint Appliance Configuration.

The iPrint Initial Configuration Wizard window is displayed.

Select Upgrade, then click Next.

In the File option, click Choose File, then select the configuration file exported from a previous copy of iPrint Appliance.

Specify the eDirectory Password that you provided when exporting the configuration file from the previous copy of iPrint Appliance.

Click Finish.

The iPrint Appliance upgrade process is now complete.

18.0 Troubleshooting iPrint Appliance

You might encounter the following issues when using iPrint Appliance.

NOTE:The iPrint Appliance print server maintains log files to help with debugging the server's activity. The log files are located at the following locations:

Novell iPrint Mobile and iManager: /var/opt/novell/tomcat6/logs/catalina.out

Novell iPrint Mobile log: /var/opt/novell/log/iprintmobile/iprintmobile0.log

Management Console: /var/opt/novell/jetty8/logs/jetty.stderrout.out

Export Backup Log: /var/opt/novell/log/iprintmobile/backup.log

Upgrade Restore log: /var/opt/novell/log/iprintmobile/restore.log

Print Manager: /var/opt/novell/log/iprint/ipsmd.log

Driver Store: /var/opt/novell/log/iprint/idsd.log

eDirectory: /var/opt/novell/eDirectory/log/ndsd.log

Apache: /var/log/apache2/error_log

Avahi: /var/log/messages

Section 18.1, iPrint Mobile Service Fails to Connect

Section 18.2, Unable to Import All Users from the Active Directory Source Using LDAP Sync

Section 18.3, iPrint Windows Rendering Service Hangs

Section 18.4, iPrint Rendering Service Registration to the Appliance Server Fails

Section 18.5, iPrint Renderer Status Is Inactive after Exporting or Upgrading iPrint Appliance

Section 18.6, Printer Prints Junk Characters

Section 18.7, Secure Printer Continues Printing after Changing the User Password (Local Appliance eDirectory Users Only)

Section 18.8, Remote Renderer Fails to Start Because of Login Failure

Section 18.9, AirPrint Printers Are Listed Twice During Printer Discovery

Section 18.10, AirPrint Printers Are Not Listed

Section 18.11, Print Job Submitted Using AirPrint Shows Processing Continuously

Section 18.12, Processor Utilization Increases When 10,000 Users Are Imported from an External LDAP Source

Section 18.13, iPrint Appliance Migration Target Server SSL Authentication Fails

Section 18.14, RPC Error When Enabling Printers for Mobile Printing

Section 18.15, iPrntRendCmd Stops Responding During Configuration or Other Command Line Operations

Section 18.16, Unable to Configure Email Printing When SSL Is Enabled for IMAP in GroupWise

Section 18.17, Upgrade Progress Bar Continues Processing

Section 18.18, iPrint Rendering Service Fails to Start If the Windows User Account Password Changes or Expires

Section 18.19, DataStore Creation Fails

Section 18.20, Garbage Characters Printed When Printing from Gmail on Internet Explorer

Section 18.21, “Canceled by Operator” Messages in the Audit Logs

Section 18.22, Unable to Create CUPS Printer Name with a Space Character

Section 18.23, Upgrading iPrint Appliance 1.0 Does Not Automatically Export the License File

Section 18.24, Unable to Remove Inactive Renderer Entries from the Management Console

Section 18.25, Upgrade Option Missing for Remote Renderer

Section 18.26, LDAP Import Fails to Import Administrator User from Active Directory Environments

Section 18.27, Disk Space Gets Filled Up During Continuous Job Submission

Section 18.28, Adobe Acrobat 11 Pro Hangs While Rendering PDF Files

Section 18.29, Unable to Backup iPrint Appliance 1.0

Section 18.30, Active Directory Administrator Users Unable to Perform Administrative Tasks Post LDAP Import

Section 18.31, Server Logs Indicate Failures in Local or Remote Renderer

18.1 iPrint Mobile Service Fails to Connect

The iPrint Mobile service might fail to connect if the Apache server has connectivity issues with Tomcat, which is hosting the iPrint Mobile service.

To resolve this issue, restart the Apache service from the iPrint Appliance Management Console:

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the iPrint Appliance Configuration icon.

Click Services.

Select Apache server for Novell for iPrint.

Click the Action drop-down menu, then click Restart.

18.2 Unable to Import All Users from the Active Directory Source Using LDAP Sync

You might not be able to import all users from the Active Directory source using LDAP sync. By default, in Active Directory, LDAP search returns only 1,000 objects. This issue is caused by a default setting in Active Directory that limits LDAP searches to 1,000 results.

To work around this issue, you can use the Ntdsutil.exe tool to modify the MaxPageSize value to expand or limit the search, depending on the size of the Active Directory tree.

For more information, see the Microsoft support article on How to view and set LDAP policy in Active Directory by using Ntdsutil.exe.

18.3 iPrint Windows Rendering Service Hangs

The iPrint Windows Rendering Service might hang with the service status “Stopping.”

This issue is caused when the remote renderer fails to restart when using the configuration or registration commands.

To workaround this issue:

Launch the Windows Task Manager.

Click the Processes tab.

Check the Show processes from all users box.

Right-click iPrint Rendering Service.exe, then click End Process.

Start the remote rendering service by using the iprntrendcmd -l command or through the window services panel.

18.4 iPrint Rendering Service Registration to the Appliance Server Fails

The iPrint Rendering Service registration to the Appliance server might fail if the Apache server has connectivity issues.

To resolve this issue, restart the Apache service from the iPrint Appliance Management Console:

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the iPrint Appliance Configuration icon.

Under Administration, click Services.

Select Apache server for Novell for iPrint.

The Action and Options drop‐down menus are activated.

Click the Action drop-down menu, then click Restart.

18.5 iPrint Renderer Status Is Inactive after Exporting or Upgrading iPrint Appliance

When you upgrade or export iPrint Appliance, the remote renderer status might be “Inactive.” To work around this issue, you must reconfigure the remote renderer with the device.pfx certificate file. For more information, see Section 6.6, Configuring the Remote Renderer as a Local User.

18.6 Printer Prints Junk Characters

When trying to print a document, the printer might print only junk characters and not the actual content. This can be caused by an incompatible printer driver.

To work around this issue, use the drivers that are compatible with your printer.

18.7 Secure Printer Continues Printing after Changing the User Password (Local Appliance eDirectory Users Only)

When users change their passwords, secure printers might continue printing with the old password for up to 10 minutes. This is because of caching inside the iPrint LDAP authentication module, and affects only the users created inside the local eDirectory tree on iPrint Appliance.

To fix this issue, add the parameters LDAPDNCacheTTL and LDAPDNCacheEntries to the iprint_g.conf file, located at /etc/opt/novell/iprint/httpd/conf/iprint_g.conf as shown below:

To change the caching time to 30 seconds:

<IFModule mod_authnz_ldapdn.c> LDAPDNCacheTTL 30 </IfModule>

To disable caching:

<IFModule mod_authnz_ldapdn.c> LDAPDNCacheEntries -1 </IfModule>

After updating the iprint_g.conf file, launch the terminal window, and then restart the Apache service using the iPrint Appliance Management Console:

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the iPrint Appliance Configuration icon.

Under Administration, click Services.

Select Apache server for Novell for iPrint.

The Action and Options drop‐down menus are activated.

Click the Action drop-down menu, then click Restart.

18.8 Remote Renderer Fails to Start Because of Login Failure

The remote rendering service might not start if the credentials provided are incorrect, or if the user account does not have the Log on as a service rights.

To resolve this issue, you must assign the Log on as a service rights to the user account with which you want to set up the renderer, on the local machine:

Go to Start > Control Panel > Administrative Tools > Local Security Policy.

In the left pane, double-click Local Policies.

Click User Rights Assignment.

In the right pane, under Policy, double-click Log on as a service.

Click Add User or Group.

Add the user account to the list, then click OK.

Click OK, then close the Local Security Policy window.

18.9 AirPrint Printers Are Listed Twice During Printer Discovery

iPrint AirPrint uses the same advertising medium (mDNS) as that of Apple’s AirPrint. Therefore, an AirPrint printer is listed twice during printer discovery.

To resolve this issue, disable the advertisement from iPrint Appliance.

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the iPrint Appliance Configuration icon.

Under Administration, click Printers.

Select the printer for which you want to disable advertising. You can select multiple printers by holding the Ctrl key on your keyboard, then selecting the printers.

Click the AirPrint drop-down menu, then select Disable Advertising.

18.10 AirPrint Printers Are Not Listed

When trying to print, you might not be able to see any AirPrint printers listed.

To resolve this issue, try disabling and re-enabling the wireless connection on the iOS device. If you are still unable to view the printers, restart the Avahi service on the AirPrint server through the iPrint Appliance Management Console:

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the iPrint Appliance Configuration icon.

Under Administration, click Services.

Select Avahi.

The Action and Options drop‐down menus are activated.

Click the Action drop-down menu, then click Restart.

18.11 Print Job Submitted Using AirPrint Shows Processing Continuously

On iOS devices, when you submit a print job, the Print Center continuously shows that the job is processing. This issue occurs when a printer to which you are trying to print is redirected or not working.

To resolve this issue on a redirected printer, disable advertising on a redirected printer so that the printer is not displayed as an AirPrint printer. Advertise the target printer instead.

To resolve this issue on a printer that is not working, disable advertising and fix the printer before enabling advertising on the printer.

On a web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the iPrint Appliance Configuration icon.

Under Administration, click Printers.

Select the printer for which you want to disable advertising. You can select multiple printers by holding the Ctrl key on your keyboard, then selecting the printers.

Click the AirPrint drop-down menu, then select Disable Advertising.

Fix the printer.

Click the AirPrint drop-down menu, then select Enable Advertising.

18.12 Processor Utilization Increases When 10,000 Users Are Imported from an External LDAP Source

When syncing users from an external LDAP source, the processor utilization increases if you try to import 10,000 users.

The reason for this behavior is that the User Sync is scheduled to run every 8 minutes, by default. Therefore, each time the User Sync is started, which is every 8 minutes, the processor utilization increases to around 50%, and remains in that state for up to 5 minutes. The utilization might further increase if you import over 10,000 users.

To workaround this issue, you can change the sync interval by editing the crontab file.

Launch the crontab file located at /etc/crontab.

Browse to the line where the sync interval is set to 8 minutes.

# run iprint migrate every 8 minutes

*/8 * * * * root /usr/bin/python /opt/novell/iprintmobile/python/migrate/migrateUsers.pyc >> /var/log/ipmigrate.log 2>&1

Change the time to the desired time interval.

For information on scheduling time intervals for cron jobs, see the article about Cron on Wikipedia.

18.13 iPrint Appliance Migration Target Server SSL Authentication Fails

iPrint Appliance Migration target server SSL authentication might periodically fail.

To work around this issue, close the miggui application and launch it again.

18.14 RPC Error When Enabling Printers for Mobile Printing

When enabling printers for Mobile printing using the iPrint Appliance Management Console, you might encounter an RPC error.

To work around this issue, you can log out and log in to the iPrint Appliance Management Console if the browser session is open for a long time, or you can refresh the Printers page. If you are still seeing the RPC error, restart the Print Manager service, and then try to enable the printer for mobile printing.

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the iPrint Appliance Configuration icon.

Under Administration, click Services.

Select Print Manager.

The Action and Options drop‐down menus are activated.

Click the Action drop-down menu, then click Restart.

18.15 iPrntRendCmd Stops Responding During Configuration or Other Command Line Operations

When configuring or modifying the remote renderer, the iprntrendcmd command might stop responding.

To work around this issue, close the command prompt that is currently open, launch a new command prompt window, and then try the iprntrendcmd command again.

18.16 Unable to Configure Email Printing When SSL Is Enabled for IMAP in GroupWise

If SSL is enabled for IMAP in GroupWise, you might be unable to configure email printing using the iPrint Appliance Management Console.

To work around this issue, you must manually import the GroupWise certificate into iPrint Appliance using the Management Console.

On a Web browser, use either the DNS name or the IP address to access the Management Console. For example, https://10.0.0.1:9443 or https://iprint.example.com:9443.

Click the Appliance System Configuration icon.

Click Digital Certificates.

In the Key Store drop-down menu, select JVM Certificates.

Go to File > Import > Trusted Certificate.

Browse and select the GroupWise certificate, specify an Alias name, then click OK.

Click Close.

Click Reboot to reboot iPrint Appliance.

After iPrint Appliance reboots, configure email printing from the iPrint Appliance Management Console.

18.17 Upgrade Progress Bar Continues Processing

When upgrading iPrint appliance using the iPrint Appliance Management Console, the progress bar continues processing. This issue is caused by the automatic update feature of the Web browser.

To work around this issue, close all open browser sessions, relaunch the browser, then wait for the browser update to complete before upgrading iPrint Appliance.

18.18 iPrint Rendering Service Fails to Start If the Windows User Account Password Changes or Expires

The iPrint Rendering Service might not work if the password of the user account associated with the service changes or expires.

To work around this issue, you must update the new password for the iPrint Rendering Service on the Services utility.

Click Start > Run.

Specify services.msc, then click OK.

Right-click iPrint Rendering Service, then click Properties.

Click the Log On tab.

Under This account, update the new password, then click Apply.

Click OK.

Right-click iPrint Rendering Service, then click Start or Restart to start the service.

18.19 DataStore Creation Fails

When trying to create a DataStore, you might see a message: Failed to parse the XML file: XML document structures must start and end within the same entity.

To work around this issue, run the configuration script located at /opt/novell/iprintmobile/bin/config.sh.

If you are still seeing the error, you must reinstall iPrint Appliance.

18.20 Garbage Characters Printed When Printing from Gmail on Internet Explorer

If you are using Gmail on Internet Explorer and you try to print an email, you might see garbage characters in place of line breaks. This is caused by a character encoding issue.

To work around this issue, you must change the default text encoding to UTF-8 in your Gmail settings.

Launch Internet Explorer, then go to www.gmail.com.

Sign in to Gmail with your user name and password.

Click the settings icon in the upper-right corner of the screen, then select Settings.

Under General settings, in the Outgoing message encoding section, select Use Unicode (UTF-8) encoding for outgoing messages.

Click Save Changes.

18.21 “Canceled by Operator” Messages in the Audit Logs

In the audit log files, you might see the following message:

Canceled by operator

This issue occurs if the files are not rendering correctly.

To work around this issue, ensure that the rendering service is active, and that the renderer is configured correctly.

18.22 Unable to Create CUPS Printer Name with a Space Character

When using the iprintmobile_config_driver command, you must specify the CUPS printer name to associate the driver to a printer agent. When trying to create a CUPS printer, you might not be able to add a space character in the name of the printer. If you try to add a space character, the following message is displayed: Invalid command. This is a known limitation of the CUPS printer queue names.

To work around this issue, you must specify CUPS printer names without any space characters.

18.23 Upgrading iPrint Appliance 1.0 Does Not Automatically Export the License File

When upgrading iPrint Appliance 1.0 to a higher version, the license file does not get automatically exported to the new version.

This issue is caused because the license file is not automatically backed up in iPrint Appliance 1.0.

To work around this issue, you must manually copy the license file from the license folder of iPrint Appliance 1.0 to the license folder of iPrint Appliance 1.0.1. The license file for both versions of iPrint Appliance is located at /opt/novell/filr/apache-tomcat/webapps/ssf/WEB-INF/license/.

18.24 Unable to Remove Inactive Renderer Entries from the Management Console

On the iPrint Appliance Management Console, the inactive render entries might not automatically get deleted after uninstalling the renderer.

To work around this issue, follow the procedure below.

Stop the Novell iPrint Mobile service through the Management Console.

For information on stopping or starting a service, see Section 9.6.1, Starting, Stopping, or Restarting System Services.

Launch the terminal.

Run the command iprintmobile_config_renderer -l to get a list of renderers and their IDs.

Run the command iprintmobile_config_renderer -r <rendererID> to remove the inactive renderer.

Start the Novell iPrint Mobile service through the Management Console.

18.25 Upgrade Option Missing for Remote Renderer

The remote renderer on iPrint Appliance does not provide an upgrade option.

This is a known limitation of the remote renderer in iPrint Appliance 1.0.1 and earlier versions. Starting with iPrint Appliance 1.1, you can upgrade the remote renderer. For more information, see Section 6.9, Upgrading the Remote Renderer.

To work around this issue in iPrint Appliance 1.0.1 and earlier versions, you must download and install the new version of the remote renderer. Installing the new version of the remote renderer automatically uninstalls the older version.

After installing the new version, you must configure and register the renderer. For more information on installing, configuring and registering the renderer, see Section 6.0, Remote Renderer Installation and Configuration.

18.26 LDAP Import Fails to Import Administrator User from Active Directory Environments

When importing users from Active Directory environments, LDAP import fails to import the administrator user account.

The Active Directory administrator user is not required for iPrint Appliance. iPrint Appliance contains an in-built administrator account. The admin account of iPrint Appliance manages all users imported from Active Directory.

18.27 Disk Space Gets Filled Up During Continuous Job Submission

When handling a large number of print requests, the remote renderer might not be able automatically delete the converted job data, and the disk space allocated for the remote renderer might fill up.

To work around this issue, you must manually delete the stored jobs.

Launch the command prompt.

Stop the iPrint Rendering Service manually using the command iPrntRendCmd -q.

Delete the files in the jobs folder located at C:\ndbs\renderer\jobs.

Start the iPrint Rendering Service using the command iPrntRendCmd -l.

18.28 Adobe Acrobat 11 Pro Hangs While Rendering PDF Files

When rendering PDF files using Adobe Acrobat 11 Pro, Adobe Acrobat might stop responding and not complete the rendering process.

To work around this issue, kill Adobe Acrobat from Windows Task Manager, then try again.

18.29 Unable to Backup iPrint Appliance 1.0

When using iPrint Appliance 1.0, you may not be able to create a backup if you have a Driver Store in excess of 6 GB. This is caused due to lack of disk space in the virtual machine.

To workaround this issue, you must add an additional hard disk to your virtual machine, then backup iPrint Appliance 1.0. If your Drive Store is 10 GB in size, then you must add an additional 20 GB of hard disk space. The hard disk space must be twice the size of the resdir folder.

Power off the iPrint Appliance 1.0 VM.

In the vSphere client, right-click the iPrint Appliance 1.0, then click Edit Settings.

Click Add.

Select Hard Disk, then click Next.

Select Create a new virtual disk., then click Next.

Specify the Disk Size, then click Next.

Click Next on the Advanced Options screen.

Click Finish.

Power on the iPrint Appliance 1.0 VM.

Create a partition using the fdisk command.

Run the command fdisk /dev/<disk name>.

When prompted for a command, specify n, then tap the Enter key.

For partition, specify p, then choose the default option.

When prompted for a command, specify w.

Create a file system using the command mkfs.ext3 /dev/<disk name>.

Stop the jetty service.

Mount the /tmp folder to the newly added hard disk using the command mount /dev/<disk name> /tmp/.

Start the jetty service.

After completing the procedure mentioned above, try backing up iPrint Appliance 1.0.

18.30 Active Directory Administrator Users Unable to Perform Administrative Tasks Post LDAP Import

Admin users migrated to iPrint Appliance through LDAP Import cannot perform administrative tasks such as managing iManager. This is because the LDAP Import feature imports only the user names but not the passwords. iManager fails to authenticate AD users with no passwords.

18.31 Server Logs Indicate Failures in Local or Remote Renderer

On iPrint Appliance 1.1, when you enable printers for mobile printing, background tasks like driver download, installation, and configuration are performed. The print jobs might use the default driver configured on the local and remote renderers, even though the printers are immediately enabled for mobile printing. If the default driver is not compatible with the printer, it can lead to poor quality printing. To confirm if there are any failures with printer configuration at either the local or remote renderer(s), check the mobile server logs for any related errors.

If you see errors in mobile server logs that indicate failures at the local or remote renderer(s), follow the procedure below to resolve them:

Disable the printer for mobile printing to avoid users printing to it.

Ensure that the Print Manager is running.

Ensure that the Driver Store is running.

Ensure that the driver is present in the Driver Store for the renderer platform, and is associated with the printer.

Install the printer from the IPP page for the platform on which the renderer configuration failed. This procedure displays an error about the cause of the issue.

Enable the printer for mobile printing after fixing the error.

19.0 Known Limitations

You might encounter the following limitations when using iPrint Appliance.

Section 19.1, General Limitations

Section 19.2, AirPrint Through iPrint Limitations

19.1 General Limitations

The license file on iPrint Appliance 1.0 is not automatically backed up. To backup the license file, you must add the absolute path of the license file manually into the additionalBackupList file located at /etc/opt/novell/iprintmobile/conf/additionalBackupList/. For example, if your license file name is license.xml, you must add the path /opt/novell/filr/apache-tomcat/webapps/ssf/WEB-INF/license/license.xml to the additionalBackupList file.

NOTE:On iPrint Appliance 1.0, the permissions for files/directories added to the additionalBackupList file are not retained during backup. You must manually assign the owners and permissions for these files and directories on the target machine after upgrade.

When exporting the iPrint configuration file, iPrint Appliance does not export all csv files. iPrint Appliance exports only the audit.csv which is the default audit file. If you want iPrint Appliance to export additional csv files, you must add the path of those csv files manually into the additionalBackupList file located at /etc/opt/novell/iprintmobile/conf/additionalBackupList/.

When using email printing commands, the status, move, resume, and cancel commands might not execute when used with the job name. If the commands do not execute with job names, use job id instead.

Email printing to secure printers is disabled. This is to enhance the security of your print system.

When you upgrade or export iPrint Appliance, the remote renderer status might be “Inactive.” To resolve this issue, you must unregister and re-register the remote renderer.

If you have configured a remote Driver Store, you cannot manage it through the iManager of iPrint Appliance.

If you want to create a local user or a local group account in iPrint Appliance, ensure that you create the user or group account outside of the synced user’s context. This is because when you sync from an LDAP source to iPrint Appliance, the user and group entries are imported into the MySQL database of iPrint Appliance. By default, iPrint Appliance runs a sync to the MySQL database every 8 minutes. If the local user or group account is not found in the MySQL database, the account is automatically deleted during the next sync.

Any configuration change in iPrint Appliance takes at least 20 minutes to get updated to the configuration file. If you export the iPrint Appliance configuration file within 20 minutes of modifying the configuration settings, and then import the configuration file into another copy of iPrint Appliance, the changes are not captured. In this case, you might not be able view the updated information in the iPrint Appliance. It is recommended that you wait at least 20 minutes after the last configuration change before you export the configuration file.

The Novell iPrint app does not allow imported users to log in with the full user context.

The remote renderer installation interface is not available in Slovak, Hungarian, Netherlands Dutch, or Catalan languages.

When trying to print an image through the Gmail app on Android devices, you might see the message “Novell iPrint could not receive the document/image in a file format,” and the image might not print.

When trying to unregister a renderer through the command line, you must provide the IP address of the renderer. You cannot unregister a renderer using the hostname.

Before installing or uninstalling Adobe Acrobat X Pro on the Windows machine, you must stop the remote rendering service using the command iprntrendcmd -q. If you do not stop the remote rendering service, you might see a message that Microsoft Office applications are running, and you might not be able to proceed with installation or uninstallation.

If a user account synced from an LDAP source to iPrint Appliance is renamed at the source, the user authentication fails. The user account is imported as a new object. Novell plans to address this issue in a future release.

During LDAP import, empty groups are not imported.

iPrint Appliance Migration target server SSL authentication might sometimes fail. To work around this issue, close the miggui application and launch it again.

If you install the remote renderer on a non-English version of Windows 7, conversion of Microsoft Excel files might fail.

You might find warning logs in the /var/opt/novell/log/iprintmobile/iprintmobile0.log file. These logs are created if the file conversion takes more than two seconds. You can ignore this warning as there is no functionality loss.

19.2 AirPrint Through iPrint Limitations

Users submitting AirPrint jobs to non-secure printers are logged as Guest users in the iPrint server audit log. This is because non-secure printers do not require user credentials to print.

If a user is not authorized to use a secure printer, the printer does not print because of an authentication failure. The iOS device does not display any message to indicate the authentication failure.

Users might be prompted for credentials for non-secure AirPrint printers.

Secure printing to AirPrint printers is supported only iOS 6.x. It is not supported on iOS 5.x and iOS 7.x.

“The printer is no longer available” message is displayed even if the printer is working fine.

If you print to a secure AirPrint printer by providing your credentials, the credentials are stored, and you are not prompted for the credentials when you print to that printer in the future. This is the default behavior of AirPrint.

Whenever a user prints to a secure printer, an "invalid request-URI" message is displayed in the Apache error logs.

A.0 Supported Document Formats

The following document formats have been tested and are known to work well with iPrint Appliance printing.

Formats supported by the server renderer:

ODT

ODP

ODG

ODS

JPG

BMP

TIF

GIF

PNG

TXT

HTML (Static)

Formats supported by the remote renderer:

Microsoft Word Formats:

DOC

DOCX

RTF

Microsoft Excel Formats:

XLS

XLSX

Microsoft PowerPoint Formats:

PPT

PPTX

PDF

B.0 Email Service Parameters

Section B.1, Incoming Mail Server Parameters

Section B.2, Outgoing Mail Server Parameters

B.1 Incoming Mail Server Parameters

iPrint Appliance uses POP3 and IMAP protocols to access email servers to poll for email-based print jobs. The default POP3 and IMAP protocol ports are listed below:

Protocol

Path

IMAP

143

IMAP (Secure/IMAP4-SSL)

585

IMAP4 over SSL

993

POP3

110

POP3 (Secure)

995

The table below shows some examples of several incoming public mail servers.

This information has been retrieved from the proper email provider support pages. This is not an exhaustive list. Please refer to your email provider for additional information and compatibility.

Mail Server

Protocol

Address

Port

Notes

1&1

POP3

pop.1and1.com

995

IMAP4

imap.1and1.com

143

AT&T

POP3

pop.att.yahoo.com

995

SSL-enabled

AOL Mail

IMAP

imap.aol.com

143

Comcast

POP3

mail.comcast.net

110

Google Gmail

POP3

pop.gmail.com

995

SSL-enabled

IMAP

993

SSL-enabled

Hotmail

POP3

pop3.live.com

995

Secure Password Authentication (SPA)

Mac

POP3

mail.mac.com

143

IMAP4

mail.mac.com

143

Netscape IMS

POP3

pop.3.isp.netscape.com

110

Verizon

POP3

pop.verizon.net

110

995

SSL-enabled

Yahoo!

POP3

pop.mail.yahoo.com

465

995

SSL-enabled

SSL-enabled

Yahoo! Plus

POP3

plus.pop.mail.yahoo.com

995

SSL-enabled

B.2 Outgoing Mail Server Parameters

The iPrint Appliance uses SMTP protocols to send email back to users who submit email-based print jobs in order to report their job status. The default SMTP protocol ports are listed below:

Protocol

Port

SMTP

25

SSMTP (Secure SMTP)

465

This information has been retrieved from the proper email provider support pages. This is not an exhaustive list. Please refer to your email provider for additional information and compatibility.

Mail Server

Protocol

Address

Port

Notes

1&1

SMTP

smtp.1and1.com

587

AT&T

SMTP

smtp.att.yahoo.com

Requires authentication

AOL Mail

SMTP

smtp.aol.com

587

Comcast

SMTP

smtp.comcast.net

110

Google Gmail

SMTP

smtp.gmail.com

465

587

SSL-enabled

TLS-enabled

Hotmail

SMTP

smtp.live.com

587

TLS-enabled

Mac

SMTP

smtp.mac.com

Netscape IMS

SMTP

smtp.isp.netscape.com

25

SSL-enabled

Verizon

SMTP

smtp.verizon.net

587

SSL-enabled

Yahoo!

SMTP

smtp.mail.yahoo.com

995

SSL-enabled

Yahoo! Plus

SMTP

smtp.mail.yahoo.com

465

SSL-enabled

C.0 Traditional iPrint Client Authentication

Desktop and laptop workstations based on the Windows or Mac OS can install a traditional iPrint client to facilitate printing to printers managed by iPrint Appliance, as well as those managed by traditional Novell Open Enterprise Server (OES) iPrint servers.

Printers managed by iPrint Appliance, as well as those managed by traditional OES print servers, can be configured as “Public” or “Secure.” When a traditional iPrint client attempts to send a print job to a “secure” printer, iPrint Appliance (or OES iPrint server) requires the traditional iPrint client to authenticate. This authentication is performed either through a single sign-on experience or manually.

Manual Authentication: Manual authentication is invoked when the single sign-on experience fails. When manual authentication is required, the iPrint client presents a login dialog where users can supply their iPrint credentials (user name and password).

Single Sign-on Experience: The iPrint authentication single sign-on experience is associated with a base client OS authentication into an authentication realm, such as when a Windows client logs in to an Active Directory domain. When the login is successful, Windows passes three data fields (associated with the successful login) to the iPrint client running on the workstation. This includes the authentication realm, the user name, and the password. The iPrint client caches this information in anticipation of using it to facilitate a single sign-on experience when authenticating with iPrint servers (including the OES iPrint server and iPrint Appliance).

When a traditional iPrint client attempts to send a print job to a secure iPrint managed printer, the iPrint server (including the OES iPrint server and iPrint Appliance) sends an authentication challenge back to the iPrint client. This challenge request includes a string that specifies an authentication realm. If the authentication challenge indicates an iPrint authentication realm that matches the realm cached by the iPrint client, the associated (cached) user name and password are used to respond to the iPrint server's authentication challenge.

If the appliance-specified authentication realm does not match the authentication realm cached by the iPrint client, or if the associated user name and password fail the authentication challenge, then the iPrint client reverts to manual authentication.

The iPrint Appliance administrator can set the iPrint authentication realm (string) of the appliance. This authentication realm is sent to traditional iPrint client workstations with authentication challenges.

The iPrint authentication realm field is a string of characters. Traditionally, it is composed of uppercase letters, numbers, underscore, and dash characters. When setting this value on iPrint Appliance, consider the following:

Mobile clients that implement printing with AirPrint, IPP printing (via the mobile client), or email based printing do not require association with an iPrint authentication realm. If the iPrint Appliance only services mobile clients, the value specified for the iPrint authentication realm is irrelevant. In this case, we suggest that the iPrint authentication realm value be set to a short string that is unique to the installation instance, such as a company name, followed by a unique internal instance identifier. For example:

MYCOMPANY_IPRINT_VA_001

For traditional Windows Active Directory or iPrint clients to take advantage of the single sign-on experience, the following conditions must be met:

Clients must be associated with a specific Active Directory realm.

The client’s Active Directory credentials (realm, user name, and password) must match their iPrint Appliance credentials.

The client must have the iPrint Appliance address set as the primary PSM address, using the command iprntcmd -S <iPrintAppliance IP Address>.

In order to support traditional Windows Active Directory (fixed) iPrint clients, the iPrint Appliance administrator should set the iPrint authentication realm field to match the Active Directory realm.

The realm string used by workstations that authenticate using the (OES) Novell Client is the associated eDirectory tree name.

In situations where Novell OES iPrint products have been implemented before installing an iPrint Appliance, an iPrint authentication realm might have already been established for legacy iPrint clients. The iPrint Appliance administrator can use the previously established iPrint authentication realm, and also the same user names and passwords for iPrint Appliance. When configured clients migrate between iPrint environments, the single sign-on experience continues (uninterrupted) in both the OES iPrint environment, and in the iPrint Appliance environment.

C.1 Password Caching

When users change their passwords, secure printers might continue printing with the old password for up to 10 minutes. This is caused by caching inside the iPrint LDAP authentication module, and affects only the users created inside the local eDirectory tree on iPrint Appliance.

To resolve this issue, see Section 18.7, Secure Printer Continues Printing after Changing the User Password (Local Appliance eDirectory Users Only).

D.0 Best Practices

iPrint Appliance strives to provide a seamless printing experience. Following the practices listed below can ensure a highly efficient and highly available print system.

Spam Filters: When using email printing, the print command in the subject line might trigger spam filters. To avoid this issue, configure your email system to allow print-specific emails. Include the approved print users in the spam filter of your email system to prevent unwanted print requests.

Email Polling Interval: By default, the iPrint Appliance server polls the mail server for new email every 30 seconds. If you rely heavily on email printing, you must reduce the polling interval for faster response. However, you must ensure that your mail server is not overloaded by the frequent polling.

DNS Configuration: We strongly recommend that you use a DNS resolvable host name for iPrint Appliance. This host name is used by client devices when printing, and can cause failures if it is not resolvable.

Time Sync: It is recommended that you sync the Virtual Machine host and the guest Virtual Machine time to the same source.

Connectivity between iPrint Appliance and External Renderer: We recommend that you have a high-speed connection between iPrint Appliance and the external renderer.

Connectivity between iPrint Appliance and Mail Server: If you rely heavily on email printing, we recommend that you have a high-speed communication link between iPrint Appliance and the mail server, in order to speed up the printing of email jobs.

Virus Scanner: We recommend that you use a virus scanner on the remote renderer.

Applications on Windows Renderer: For best performance, do not run any other applications on the Windows renderer machine.

Importing Users from Active Directory Source Using LDAP Sync: You might not be able to import all users from the Active Directory source using LDAP sync. By default, only 1,000 users are returned from Active Directory. This is caused by a default setting in Active Directory that limits LDAP searches to 1,000 results. For more information, see the Microsoft support article: How to view and set LDAP policy in Active Directory by using Ntdsutil.exe.

Partitions and Replicas Option in iManager: In iManager, you might see the Partition and Replicas option. This feature is not required for iPrint Appliance. Therefore, it is not supported. We recommend that you not use it on the iPrint Appliance eDirectory.

Creating Local Users and Groups in iPrint Appliance: If you want to create a local user or a local group account in iPrint Appliance, ensure that you create the user or group account outside the synced user’s context. This is because when you sync from an LDAP source to iPrint Appliance, the user and group entries are imported into the MySQL database of iPrint Appliance. By default, iPrint Appliance runs a sync to the MySQL database every 8 minutes. If the local user or group account is not found in the MySQL database, the account is automatically deleted during the next sync.

Remote Renderer Fails When Proxy is Enabled: If proxy is enabled on the Windows machine that is running the remote renderer, the renderer might fail to process print jobs. To workaround this issue, you must disable proxy.

Remote Renderer Fails to Register and Reports a 407 Error: When trying to register the remote renderer, the registration may fail, and you may receive a 407 error. To work around this issue, add the certificate to the trusted certificates list.

D.1 Best Practices for Mobile Printing

On iPrint Appliance 1.1, when you enable a printer for mobile printing, the server performs additional background tasks such as driver download, installation, and configuration. Though the printer is immediately enabled for mobile printing, the print jobs might go through the default driver configured for local and remote renderer(s). If the default driver is not compatible with the printer then it can lead to poor quality printing. It is recommended that you test the printer by issuing test prints to ensure that newly enabled printer is configured correctly.

Check the mobile server logs for any related errors to ensure that there are no failures with the printer configuration at the local or remote renderer(s). If you notice errors in the mobile server logs indicating a failure at the local or remote renderer(s), try following steps to resolve the issues.

Disable the printer for mobile printing to avoid users printing to it.

Ensure that the print manager is running.

Ensure that the Driver Store is running.

Ensure that the driver is present in the Driver Store for the renderer platform, and is associated with the printer.

Try installing the printer from the IPP page for the corresponding platform on which renderer configuration failed. This shows the exact error indicating the underlying problem.

Enable the printer for mobile printing after fixing the error.

E.0 Installing VMware Tools

VMware tools is a collection of utilities that helps improve the performance of the virtual machine. To install VMware tools for iPrint Appliance, download the latest version of VMware Tools from the VMware website to the /tmp directory, then follow the procedure below.

Log into the ESX server using the vSphere client.

Right-click the iPrint Appliance VM, select the Guest option, then click Install/Upgrade VMware Tools.

Click OK on the pop-up message.

In the Console tab of the iPrint Appliance VM, log in using the root user credentials.

Create a folder named cdrom under the /mnt directory.

Navigate to the root directory, then mount the cdrom folder using the command mount /dev/cdrom /mnt/cdrom.

Navigate to the /tmp directory.

Untar the VMware Tools tar file.

For example, tar zxf /mnt/cdrom/VMwareTools-5.0.0-<xxxx>.tar.gz. xxxx is the build/revision number of the VMware Workstation.

Navigate to the vmware-tools-distrib folder.

Install VMware Tools using the command ./vmware-install.pl.

Choose the default settings for installation. When prompted, tap the Enter key for all the options.

Select the appropriate resolution, then proceed with the installation.

Verify that the VMware Tools daemon is running by using the command /etc/init.d/vmware-tools status.

F.0 iPrint Client Management with Novell iPrint Appliance

iPrint Client Management (iCM) enables you to designate printers to be installed on a workstation when a user logs in to the workstation. iCM also allows you to control the iPrint Client configuration, making it easier to configure the iPrint Client without visiting each workstation. When the user logs in to the workstation, the iPrint Client settings that you designate are configured on the user’s workstation.

For more information on iCM, see the Using iPrint Client Management section in the iPrint Linux Administration Guide.

F.1 iCM in OES Environment

Traditionally iCM was used in the following methods:

F.1.1 iCM with Novell Client

In OES iPrint, when a user logs in to the corporate eDirectory using the Novell Client, the iCM settings are pushed to the user’s machine.

F.1.2 iCM without Novell Client

In iPrint Appliance, users cannot login directly using the Novell Client. This is because iPrint Appliance syncs only user names from the corporate eDirectory, but not the passwords. For iCM to work with iPrint Appliance, you can use one of the following methods:

Novell Client users continue to login to the existing corporate eDirectory instead of iPrint Appliance. This way, the existing OES server is used for desktop printing, and the iCM settings are available only in the source eDirectory.

Limitation: In this method, the iCM settings are fetched only from the source eDirectory. Any iCM setting changes made on iPrint Appliance are not applied.

Use iCM without Novell Client. In this method, the local Windows/AD credentials must match the eDirectory credentials. This method is suitable for an AD environment where users are synced from AD to the local eDirectory so that the credentials are automatically matched. For more information, see Section F.2, iCM with iPrint Appliance.

Limitation: In this method, the iCM setting are fetched only from iPrint Appliance. iCM setting changes made on the existing corporate eDirectory must be manually added on iPrint Appliance.

NOTE:During migration from OES iPrint, iCM settings are not migrated to iPrint Appliance. Novell plans to fix this in a future iPrint Appliance release.

F.2 iCM with iPrint Appliance

iPrint Appliance does not support traditional iCM with the Novell Client. iPrint Appliance supports iCM using Windows Local/AD credentials.

Depending on your environment, you can deploy iCM in the following ways:

F.2.1 Apply iCM Settings from the Original Tree

In this configuration, iCM settings are applied from the original tree if iCM is not migrated from OES, and OES iPrint is still used for desktop printing and iCM. You can use this configuration with or without the Novell Client.

The limitation of using this configuration is that the iCM settings are fetched only from the source eDirectory. Any iCM changes made locally on iPrint Appliance are not applied.

F.2.2 Apply iCM Settings from iPrint Appliance eDirectory

In this configuration, iPrint Appliance is used for desktop printing, and iCM settings are created on the appliance only.

With Novell Client: With iPrint Appliance, users cannot login directly using the Novell Client because iPrint Appliance syncs only user names from the corporate eDirectory, but not the passwords. Therefore, iCM cannot be used with Novell Client. iCM can be used against the source eDirectory server.

Without Novell Client: To fetch iCM settings from iPrint Appliance, you can use iCM without the Novell Client. In order for iPrint clients to use the Windows Local/AD credentials for iCM, the following conditions must be met:

You must set the iPrint Appliance address set as the primary PSM address on the client by using the command iprntcmd -S <iPrintAppliance IP Address>.

The client’s Active Directory user name must match their iPrint Appliance credentials. If you import users from Active Directory to iPrint Appliance, the credentials are automatically matched.

In order for iCM to work with imported users and groups, you must enable browse/read rights and inheritance for iCM for the following attributes, using iManager:

iPrintPrinterIPPURI

iPrintiCMClientFlags

iPrintiCMClientProxyURI

iPrintiCMClientTrayURI

iPrintiCMPrinterFlags

iPrintiCMPrinterList

iPrintiCMTrustedSiteList

Group Membership

IMPORTANT:For the user accounts imported from OES, iCM settings are not migrated. You must reassign the iCM settings on iPrint Appliance for the OES user accounts.

To configure the iCM attributes:

On a Web browser, use either the DNS name or the IP Address to access iManager. For example, https://10.0.0.1/nps or https://iprint.example.com/nps.

Specify admin as the user name.

Specify the password, then click Login.

In the left pane, under Roles and Tasks, click Rights.

Click Modify Trustees.

Under Object name, click the search icon, then choose the entire tree.

Click OK.

Click the Assigned Rights link next to the Public domain.

Click the Add Property button in the upper right of the table.

In the Add Property pop-up window, select Show all properties in schema.

In the Property name box, select the attributes listed above, then click OK.

Select the Inherit check box next to the attributes you added.

Click Done.

For more information on using Windows Local/AD credentials for iCM, see the Configuring iCM for Windows / Active Directory (AD) environments without Novell Client section in the iPrint Linux Administration Guide.

G.0 iPrint Appliance Support Matrix

This section provides information on the following.

Section G.1, Mobile Server Support

Section G.2, Mobile Operating System Support

Section G.3, Directory Services Support

Section G.4, Management Console Support

Section G.5, Remote Renderer - Supported Operating Systems

Section G.6, Remote Renderer - Supported Software Versions

Section G.7, iPrint Appliance Server and Client Support

Section G.8, Clients for Email Printing

G.1 Mobile Server Support

Table G-1 Moblie Server Support

Features

Version

Driver

Default Generic PS driver

PCL driver

NOTE:The PS driver has been tested and is known to work well. However, PCL drivers also work with iPrint Appliance.

Email

Novell GroupWise 2012

Microsoft Exchange 2010

IBM Domino server 9

Gmail

G.2 Mobile Operating System Support

Table G-2 Mobile Operating System Support for Apps

Type

Version

iOS

iOS 5.x

iOS 6.x

iOS 7.x

Android

Android 2.3.x Gingerbread

Android 4.0.x Ice Cream Sandwich

Android 4.1.x/4.2.x Jelly Bean

G.3 Directory Services Support

Table G-3 Directory Services Support

LDAP Directory Service

Version

eDirectory

8.8.x

8.7.x

Active Directory

AD configured on Windows 2008 R2 Enterprise Edition

AD Configured on Windows 2003 SP1 Enterprise Edition

G.4 Management Console Support

Table G-4 Management Console Support

Access

Version

Browser

IE 10

IE 9

Firefox 21 or higher

Chrome 26 or higher

Safari 6 or higher

iOS 6.x tablet with default browsers

Android 4.x tablet with default browsers

G.5 Remote Renderer - Supported Operating Systems

Table G-5 Remote Renderer Support

Support

Version

Operating System

Windows 7 SP2 64-bit Enterprise

Windows 7 SP2 64-bit Ultimate

Windows 7 SP2 64-bit Professional

Window 8 64-bit

Windows 8.1 64-bit

Windows 2008 R2 64-bit

Windows 2012 R2 64-bit

Driver

HP UPD 5.5 PS or higher

G.6 Remote Renderer - Supported Software Versions

Table G-6 Remote Renderer Support

Support

Version

Microsoft Office

Microsoft Office 2010 64-bit Standard

Microsoft Office 2010 32-bit Standard

Adobe Acrobat

Adobe Acrobat X Pro or higher

G.7 iPrint Appliance Server and Client Support

Table G-7 iPrint Appliance Server and Client Support

Support

Version

Hypervisor

Xen

Hyper-V

ESXi 5.x

ESX 4

ESXi 4

VMware Workstation 9

Desktop iPrint Client

Windows XP

Windows Vista

Windows 7

Windows Server 2000, 2003, 2008, and 2008 R2

Windows 8

Windows 8.1

Mac 10.8

Mac 10.7

Appliance Installer

OVF

VMX

XEN

G.8 Clients for Email Printing

GroupWise 2012 client

Microsoft Outlook 2010

IBM Lotus Notes 9

iOS 5/6 default mail client

Mail clients on Android 2.3 or higher

Windows Mobile 7.5

Blackberry 7.1

Windows 8 Pro default mail client on tablet

Gmail

H.0 iPrint Appliance Documentation Updates

This document allows you to quickly see the most recent changes throughout the Novell iPrint Appliance documentation.

H.1 iPrint Appliance Administration Guide

This section summarizes the changes made to the guide since the initial release of Novell iPrint Appliance 1.0.

Section H.1.1, April 2014

Section H.1.2, February 2014

H.1.1 April 2014

Location

Update

Section 1.2, Differences Between iPrint Appliance 1.0.1 and 1.1

Added a table showing the differences between iPrint Appliance 1.0.1 and 1.1.

Section 4.0, Installing iPrint Appliance

Updated the installation section for iPrint Appliance 1.1.

Section 11.0, Configuring MobileIron to Manage the iPrint App

Added a new section on managing the iPrint app with MobileIron.

Section 1.0, iPrint Appliance Overview

Updated the Document Rendering section with information about the in-built PDF renderer and remote renderer.

Section 5.0, Setting Up iPrint Appliance

Updated the Importing Printers section with information about automatic iCM and ACL migration.

Section 10.0, iPrint Appliance Management

Updated the iPrint Appliance configuration section with information about the newly added options in the Management Console.

H.1.2 February 2014

Location

Update

Section 6.0, Remote Renderer Installation and Configuration

Updated the Remote Renderer chapter to include information about the in-built PDF renderer for iPrint Appliance 1.0.1 Patch 1.

I.0 Legal Notices

Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the Novell International Trade Services Web page for more information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export approvals.

Copyright © 2014 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher.

Novell, Inc.

1800 South Novell Place

Provo, UT 84606

U.S.A.

www.novell.com

Online Documentation: To access the latest online documentation for this and other Novell products, see the Novell Documentation Web page.

Novell Trademarks

For Novell trademarks, see the Novell Trademark and Service Mark list.

Third-Party Materials

All third-party trademarks are the property of their respective owners.