PrinterOn Print Delivery Station Admin Guide

Transcription

1 PrinterOn Print Delivery Station Admin Guide Version 2.6 Doc Rev 2.6EH

2 Table of Contents 1. Print Delivery Station (PDS) Overview Print Delivery Hub Print Delivery Station Queue Monitor Remote Queue Monitor Requirements System Requirements Printer Requirements Service Requirements Network Requirements Software Requirements Print Delivery Station Reference Print Delivery Station Console Import Settings Tab Printers Tab Edit Printer Dialog Advanced Listener Communication Tab Local Listener Remote Listener Add or Edit Remote Listener dialog box Advanced Print Processing Tab Print Processing Advanced Job Handling Advanced Security Tab Licensing Data Encryption GUI Password Advanced Logging Tab Local Print Logging Property Management System Notification Debug Logging Advanced Users tab Advanced SSL tab Local Listener (On this Machine) Remote Queue Monitor SSL Certificate Keystore Advanced Proxy Tab Advanced PrintValet tab Ethernet PrintValet Serial/USB Connection PrintValet Printer Associations Advanced QoS Tab Managing Print Jobs Print Delivery Station Admin Guide 2

3 4.1. Reprinting documents Using the Remote Queue Monitor (Privacy Release web pages) Using the local Queue Monitor The status of Print Jobs Uninstalling Print Delivery Station Appendix A: Encryption process Appendix B: Obtaining an SSL Certificate Generate Private/Public Keypair Generate Certificate Signing Request Submit Certificate Signing Request to Certificate Authority and receive Signed Certificate Import Signed Certificate into Keystore Configure PDS to Use Keystore and SSL Test SSL Communications Trademarks and Servicemarks Copyright Notice Print Delivery Station Admin Guide 3

4 1. Print Delivery Station (PDS) Overview The Print Delivery Station has two components; Print Delivery Hub (PDH) and Print Delivery Station (PDS) Print Delivery Hub The Print Delivery Hub creates an Internet Printing Protocol (IPP) interface for your printer and provides a secure means of transferring print jobs through your firewall. The Print Delivery Hub is hosted by PrinterOn in all our cloud solutions. It may be necessary to host a PDH within your organization when using our on-premise solutions Print Delivery Station Print Delivery Station collects print jobs from the Hub and releases them to your printers. This software is installed within your organization. Data is pulled securely through your firewall; there is no need to open any inbound ports. Documents are held in the PDS until they are released by the Administrator or user from the web page interface or PrintValet keypad Queue Monitor Print Delivery Station's Queue Monitor is an interface for managing print requests. Print jobs collected by the PDS are listed in the Queue Monitor. The standard Queue Monitor is designed to be used by printer administrators. Depending on printer and Queue Monitor configuration, administrators may monitor and/or manage (print/pause/delete) current and completed print jobs for all of the printers attached to the PDS Remote Queue Monitor The Remote Queue Monitor is a web (HTML) version of the Queue Monitor and may be used in a variety of scenarios. A typical example is environments where printers are available to the public; the Remote Queue Monitor can be made available as a secure release mechanism. The Remote Queue Monitor presents a simple interface for entering user information to retrieve print jobs for release. By allowing users to release their own print jobs, this setup provides a level of privacy for users concerned with printing in public locations. Print Delivery Station Admin Guide 4

5 2. Requirements Outlined here are requirements for the successful deployment of a Print Delivery Station. These requirements apply to both the cloud and on-premise solutions System Requirements Windows XP SP 3 or later 1 gigahertz (GHz) or faster 32-bit (x86) or 64-bit (x64) processor 100 MB of available hard drive space 1 gigabyte (GB) RAM 2.2. Printer Requirements Local or network access to the printer Administration credentials for access to networked printers Recommended: PCL or PostScript supported printers Supported but not recommended: host-based printers 2.3. Service Requirements An active PrinterOn subscription PrinterOn username/ address and password 2.4. Network Requirements Outbound communication over port 80, 631 and 443 Continuous internet access 2.5. Software Requirements Java Runtime Environment (JRE) NOTE: If this is not currently installed, the PDS install wizard will prompt to have it installed at that time. Print Delivery Station Admin Guide 5

6 3. Print Delivery Station Reference This section describes all the configuration options available within the PDS software. In most cases, the default settings do not need to be changed Print Delivery Station Console The PDS Console allows you to start or stop the PDS service, open the PDS Settings window or Queue Monitor. The Console also displays the PDS version information and Serial Number. Start: When selected, PDS requests print jobs from the PDH. If the Local Listener is enabled, PDS also accepts requests from PrintWhere when installed locally. For details on enabling the Local Listener, see page 11 of this guide. Stop: When selected, PDS does not request print jobs. Settings: Opens the PDS Settings window to modify configuration of the software. Monitor: Opens the Queue Monitor for administrator access to print jobs. Help: View the online help for the PDS Console. Print Delivery Station Admin Guide 6

7 3.2. Import Settings Tab The Import Settings tab allows you to import your customization file and reset the software to default. Import Customization File: Click to import or reimport your Customization file. The file is obtained, based on your PrinterOn username/ and password, from the PrinterOn database. Reset to Defaults: Restore the software and serial number to their defaults. If you would like to change the service attached to a copy of Print Delivery Station, you must first click Reset to Defaults and then Import the new Customization file. Print Delivery Station Admin Guide 7

8 3.3. Printers Tab The Printers tab allows you to edit the destination of each PrinterOn ID. To send print jobs to the correct printer, PDS requires the PrinterOn ID and the Local Name for each printer. PrinterOn ID: Displays the name of the printer as provided by the Customization file. NOTE: This is also the beginning of the address for your PrinterOn service. All addresses are in this format; [PrinterOn Local Name: Defines the local name or network path for the printer. You must configure the Local Name in order for PDS to communicate with your printers. Print Delivery Station Admin Guide 8

9 If you are unsure what to enter in the Local Name field, refer to the following table. If your printer is: Local Name: Examples Connected directly to the PDS computer RAW/TCP Connected via a network or print spooler Click the Browse button (...) next to the field and select the correct printer from the returned list. TIP: Hold the Shift key while pressing Browse and uncheck Network Shared Printers to faster results. The format followed by the IP address and optionally, the port. Click the Browse button (...) next to the field and select the correct printer from the returned list. Alternately, you can enter the share name manually. HP Laserjet 4000 Series raw:// :9100 tcp:// :9100 \\server\sharename \\ \sharename IPP The URL followed by /ipp/port. ipp:// /ipp/port1 LRS The LRS VPSX server as well as port and queue name. lrsq://servername-ip:port/queue lrsq:// :6612/my_docs NOTE: When using an LRS queue, the LRS Queue Data Transmission Application should be installed on the same machine that is hosting PDS. Add: Add a new PrinterOn ID to this PDS. Opens the Add Printer dialog box where you can enter details on the PrinterOn ID, Local Name, Privacy Mode and Reprints. NOTE: The PrinterOn ID must already exist in our database. You cannot create new printers for your service using this function. Edit: Open the Edit Printer dialog box to edit details on the Local Name, Privacy Mode and Reprints. Delete: Delete the selected printer from this PDS. Test Page: Send a test print to the selected printer s queue. A message will display if the test was successful or unsuccessful. This is just to ensure you have the correct queue selected, if an appropriate driver is not chosen on our website, you may experience an error when releasing a job submitted through the service. PrinterOn.net: Opens the Administrator login page at printeron.com. Print Delivery Station Admin Guide 9

10 Edit Printer Dialog Privacy Mode: Defines how the print jobs are handled upon delivery to the PDS. None: Print jobs are released to the destination queue immediately. The Print Mode must be set to Automatic. For more details on Print Mode, see page 16 of this guide. General Delivery: Print jobs will only be released when using the Remote Queue Monitor or the PrintValet keypad. Members Only: Only users with a PrinterOn Membership can release print jobs. Operators Only: Only users listed as Operators can release print jobs. Anonymity Level: Defines what information is reported from PDS to the reporting server. Please note that PrinterOn does not store and maintain any personal or sensitive information. Information reported when printing includes details such as results of a print job and some job metrics including page counts and formats. NOTE: This option is only available for PrinterOn Enterprise installations. Optional: PDS will use the Anonymity Level configured for the printer using the administration dashboard, no overriding rules will be applied. Anonymous: Job name and job owner name is suppressed Minimal: Job details including page count, job size Anonymous + Minimal: Combines options from both Anonymous and Minimal Enable Reprints: Allow users or computer administrators to reprint documents. Useful if the printer is out of paper or jammed. Maximum Reprints: Defines the maximum number of times a print job can be released. Reprint Interval: Specify the timeframe available for the user to reprint a document. Print Delivery Station Admin Guide 10

11 3.4. Advanced Listener Communication Tab The Listener Comm tab allows you to configure communications between PDS and the Print Delivery Hub. PDS queries the PDH and collects new print jobs. Communication always originates from the PDS and the PDH only responds to requests from PDS. There is no requirement to open inbound ports on your firewall. If the Local Listener and Remote Listener are both enabled, ensure the communication ports are unique for both. Print Delivery Station Admin Guide 11

12 Local Listener The Local Listener allows PDS to accept print jobs from PrinterOn s Windows print driver, PrintWhere. It is enabled by default, but is rarely used. Additional configuration of your printer listing on our website is required to receive only local print requests. Enable: When checked, the Local Listener will accept print requests from PrintWhere. Default IPP Port: Whenever possible, the default IPP printing port of 631 should be used. Additional Port 1 and 2: To use a port other than 631 for local requests, you can enable and configure these ports. PDS must accept print request data over this new port. Print request data has the attribute of Application/IPP MIME type data (HTTP content type). If you enable additional ports other than 631 or 80, you must specify that with additional configuration of your printer listing on our website. Enable Focus API on These Ports: When checked, this allows PDS to integrate using API commands. This feature is intended for use with other PrinterOn solutions Remote Listener This section outlines the communication settings between PDS and PDH. Automatically Poll for New Jobs: When enabled, PDS checks PDH for new print jobs based on the Communication Interval. Communication Interval: This setting displays how often PDS checks PDH manually for new print jobs. The default is 10. List of Remote Listeners: Displays configured Remote Listeners. The Remote Listener allows for communication between PDS and PDH. Add: Add a new Remote Listener and configure its settings. Edit: Edit the settings for the selected Remote Listener. Delete: Delete the selected Remote Listener. Not recommended unless instructed to by a PrinterOn representative. Print Delivery Station Admin Guide 12

13 Add or Edit Remote Listener dialog box Remote Listener (Outside Firewall) Enable: When checked, this Remote Listener is used. Listener Communication Port: The port used for communication from PDS to PDH. This can be adjusted; however, it must be in line with the ports PDH is listening on. NOTE: If using PrinterOn s hosted PDH, the ports allowed are 80, 443 & 631. PrinterOn highly recommends using SSL on port 443 when possible. If this port is changed to 80 or 631, your firewall must allow requests from PDS to the internet using 80 or 631. You must also deselect the Use SSL checkbox here. Use Default: When checked, the Remote Listener uses default port 443 for communication with PDH. Use SSL: Enable SSL on this port. Listener IP Address/Listener DNS Name: Identifies PDH server information. Test: Verify communication with the Remote Listener over the selected port. Password: Verifies communication with the Hub based on authentication on the server. Print Delivery Station Admin Guide 13

14 Network Gateway Authentication When enabled, PDS will use these credentials to perform an HTTP Basic authentication process, prior to entering the network where PDH resides. This authentication occurs between PDS and a Reverse Proxy server. Username: This username would be provided by the network administrator in order to connect to a Reverse Proxy server. Password: This password would be provided by the network administrator in order to connect to a Reverse Proxy server. Check Jobs Service When enabled, PDS will check the Hub based on the Communication Interval for print jobs over the port specified. These checks are non-ssl transactions that use low CPU power and bandwidth. Check Jobs Service Port: The port used when PDS checks PDH for print jobs. Use Default: When checked, the Check Job function uses default port 631 for communication with PDH. Test: Verify communication with the Check Jobs service over the selected port. Client (Push) Notification When enabled, PDS will open a connection to the PDH and listen for print jobs based on the Interval set. This interval refers to the amount of time the connection will remain open between PDS and PDH. PrinterOn recommends 60 seconds as many networks will not allow a steady network connection for extended periods of time. The connection will be reestablished every 60 seconds by default. Print Delivery Station Admin Guide 14

15 3.5. Advanced Print Processing Tab This tab specifies where print data is stored before being sent to the printer, how long PDS holds onto print jobs and how PDS handles failed requests Print Processing Spool Print Job Data Locally: When enabled, print job data is downloaded from PDH and stored on the local machine. Print Spooling Directory: Specifies where PDS stores print data before it is sent to the printer. Change the path by clicking the Browse button ( ). Maintain Job History: States how long PDS should maintain a print job for release. Print Delivery Station Admin Guide 15

16 Print Mode: Determines how PDS handles jobs. Automatic: This is the default Print Mode. Printers set with a Privacy Mode of None will release prints as soon as the job arrives in PDS. For printers with any other Privacy mode, print jobs are held until the user or an administrator releases it via the PrintValet keypad or Remote Queue Monitor. Manual: When this mode is selected, all print jobs, regardless of Privacy Mode selected, will be held until the user or an administrator releases it via the PrintValet or Remote Queue Monitor. Enforce Job Size Limit: When enabled, PDS will restrict the permitted size of a print job. Job Size Limit: Specifies the maximum permitted size of a print job. Job size refers to the job data file size upon delivery to PDS, not the original document s size. This size changes after being rendered, compressed and encrypted. The maximum size you can select is 512 MB. If a print job exceeds the entered size on the PDH, PDS will delete the job without downloading it. Reject Duplicate Jobs: When enabled, PDS rejects jobs with the same PrinterOn Transaction ID as a job previously downloaded. Each print job is assigned a unique PrinterOn Transaction ID. Accept Jobs from PrintWhere Only: When enabled, PDS will not accept jobs submitted by , web upload or any other submission format other than the PrintWhere client Advanced Job Handling Enable Failed Job Retry: When enabled, PDS will resend print jobs that have previously failed. Retry Failed Job Attempts: Defines how many times PDS will retry printing a job. Retry Failed Job Interval: Defines the time between retries. Enable Failed Job Purge: When enabled, PDS deletes print jobs that fail. Purge Failed Job Interval: Defines the length of time before PDS deletes a failed print job. Enable Abandoned Job Purge: When enabled, PDS will permanently delete jobs that are downloaded by PDS. Purge Abandoned Job Interval: Defines the length of time PDS will hold print job data before purging. The time starts when the print job is downloaded to PDS. Print Delivery Station Admin Guide 16

17 3.6. Advanced Security Tab Licensing The PDS Serial Number is displayed here. The Serial Number is included with the configuration file so you are not required to manually enter this information. Print Delivery Station Admin Guide 17

18 Data Encryption PDS uses asymmetric (public key) encryption. With asymmetric encryption, a pair of keys is created; a public key is posted to the PrinterOn web site, while a private key remains with PDS. In order to send an encrypted job, you will need access to the public key. Use Data Encryption: PDS can be set to accept encrypted data: Always: PDS will only accept encrypted print data. Optionally: This is the default selection. PDS will accept any print data regardless of encryption type. Never: PDS will not accept encrypted data RSA KeyPair: Displays the date the KeyPair was created. Create: By default, a KeyPair is created when the customization file is imported. If necessary, you can create a new key by clicking the Create button. When you click Create, the Random Data Collection window opens. In the window, press keys arbitrarily and move and click your mouse. When the collection bar reaches 100%, the window closes and your RSA KeyPair creation date will be updated to the current time. Delete: Removes the current keys GUI Password Require GUI Password: When enabled, PDS will prompt for a password in order to stop or start the PDS service as well as when accessing the Settings or Queue Monitor windows. NOTE: There is no way to retrieve your password if you forget it. To reset, you will need to uninstall and reinstall PDS. Print Delivery Station Admin Guide 18

19 3.7. Advanced Logging Tab Local Print Logging This section is for specifying a location for a 3 rd party integration s log files. They record print jobs being released to a printer. Another application would read these XML logs and process them. Print Delivery Station Admin Guide 19

20 Property Management System Notification This section is used to integrate PDS with 3 rd part software for Property Management Systems. When enabled, this Blind Job Notice allows PDS to send a print log to the specified URL via HTTP(S) POST to notify the Property Management System of user activity Debug Logging Enable debug logs for troubleshooting printing problems. You can view the logs in a text editor such as Notepad. Level: You can choose from 6 log writing levels depending on your monitoring. OFF: no logs maintained SEVERE: only critical system messages (e.g. License expired) WARNING: serious issues that will interfere with normal operations. (e.g. Directory/drive missing) INFO: detailed information that includes normal operations (e.g. Print job received) CONFIG: log files include user and administrator actions (e.g. A print job was released) FINE: extra detailed information regarding normal operations and actions that are automatically retried (e.g. Timeout) Output Directory: Defines the location of log storage. To change, enter a complete path or browse using the button. Maximum File Size: Defines the maximum file size for an individual log file. Total Size Limit: Specifies the total size allowed for all logs. When this limit is met, the oldest log file will be purged. Print Delivery Station Admin Guide 20

21 3.8. Advanced Users tab The Users tab shows Operators and Administrators who have access to manage any print jobs sent to this PDS. Add: Click to add a new Operator or administrator. The Add User dialog box will display and allow you to create a User ID, password and select a Class. Currently, the two classes provide the same privileges. Edit: Select a user and click Edit to change the User ID, password or class. Delete: Select a user and click Delete to remove. Print Delivery Station Admin Guide 21

22 3.9. Advanced SSL tab The SSL tab is used to configure SSL communications Local Listener (On this Machine) This section is for setting PDS to use SSL with PrintWhere. You must also complete the SSL Certificate Keystore section. Enable SSL Default Port: When enabled, communication over port 631 uses SSL. Enable SSL Additional Port 1 & 2: When enabled, communication over either additional ports uses SSL. Print Delivery Station Admin Guide 22

23 Remote Queue Monitor This section is for enabling SSL for the Remote Queue Monitor s web pages. You must also complete the SSL Certificate Keystore section. Enable SSL: When selected, the Privacy Release pages use SSL. Port: Specify the port to use for SSL access to the Privacy Release pages SSL Certificate Keystore Specifies your SSL Certificate information. These fields are available only when SSL is enabled in either the Local Listener section or Remote Queue Monitor section of this tab. Create: Click to create an SSL Certificate based on the Private/Public Keypair method provided by Sun Microsystems keytool. The generated certificate is not signed by a Certificate Authority but an unsigned certificate still allows for the use of SSL. Web browsers may prompt the user to accept or reject the certificate; both Internet Explorer and Firefox allow for the permanent importing of an unsigned certificate. NOTE: You must create a folder to store the keystore in. Enter a name for the folder in the Keystore File field and the full path will be populated for you. Keystore File: Enter the file path for the keystore s location or by clicking the Browse button ( ). If you created your own certificate, the file path where it was stored is displayed here. Keystore Passphrase: The keystore password used when generating the keystore file. Key Name: The key alias used to store the Certificate in the keystore file. Key Passphrase: The key password used when storing the Certificate in the keystore file. Print Delivery Station Admin Guide 23

24 3.10. Advanced Proxy Tab The Proxy tab allows you to configure PDS to work in network situations where all traffic must pass through an HTTP Proxy. If there is no proxy server on your network, the default settings will be ignored. Enable HTTP Proxy: When selected, PDS will use the settings required for your proxy. Use Web Proxy Automatic Discovery: Allows you to attempt discovery of proxy configuration information on your local network. When chosen, click Discover Now to search the network. If a proxy is found, PDS displays the proxy URL. Authenticating proxies are not supported with automatic discovery. Use Manual Configuration: When chosen, makes the configuration fields available. Proxy Address: Defines your proxy s address. Proxy Port: Defines your proxy s port. User Name and Password: Specifies the user name and password for a proxy that requires authentication. Test Proxy: Click to test your configuration. Print Delivery Station Admin Guide 24

25 3.11. Advanced PrintValet tab For more information about the PrintValet keypad, see the PrintValet Guide available online. Delete: Click to delete an existing PrintValet configuration. Add: Click to add a PrintValet to your PDS software. Edit: Click to edit an existing PrintValet configuration. Enable: Use the PrintValet to release jobs. Default Language: The default language display for the PrintValet. Print Delivery Station Admin Guide 25

26 Ethernet PrintValet If you are using a Network PrintValet select Ethernet Connection. Enter the IP address (and port if not using the default port 41) of the Network PrintValet that will be used to release jobs for the printers associated with this PDS Serial/USB Connection This is the COM port that your PrintValet is using. In general, you should select the highest number available. To confirm you have selected the correct COM port, your PrintValet should read Print Release Press OK. Rescan: Update the COM port listings if any changes were made, i.e. adding PrintValet drivers PrintValet Printer Associations It is possible to configure different printers to different Network PrintValets when more than one printer is assigned to the PDS. Click the Edit button to the right of the Printer Association box Select the Select Printers radio button Enable the PrinterOn IDs that you would like this Network PrintValet to release jobs for Click OK to exit the Edit Printer Associate dialog box Print Delivery Station Admin Guide 26

27 3.12. Advanced QoS Tab The QoS tab allows you to configure PDS to work with PrinterOn s Release Agent Status Monitoring service. When enabled, PDS will report its health state to the PrinterOn Cloud Directory. This information can be used to determine if the PDS software is currently active and running. When enabled the PrinterOn Administration Portal can be used to create notifications to administrators, if the PDS does not report its health within a designated interval. When enabled PDS will send periodic requests to NOTE: The QoS feature reports the status of the PDS software, not individual printers. Enable: Use the QoS reporting. Update Interval: Indicates the how often the PDS software will contact PrinterOn to specify its health status. Print Delivery Station Admin Guide 27

28 4. Managing Print Jobs The PDS Remote Queue Monitor s Privacy Release web pages allow users and operators to release documents. This provides privacy for the user and prevents unwanted print jobs from printing. Administrators can use the PDS Queue Monitor to manage print jobs and to monitor printer usage Reprinting documents Depending on how a printer is configured in Print Delivery Station, it may be possible for users and/or operators to reprint a document. If this feature has been enabled, you will have the opportunity to print the document again while a job's status is "Printed" (and has not changed to Done ). A document can only be reprinted if the Release Code or user s address has been provided. Note that there is a limit to the number of reprints allowed, and that there is a designated time limit on sending reprints. For details about enabling reprints, see page 10 of this guide Using the Remote Queue Monitor (Privacy Release web pages) The Remote Queue Monitor is a web (HTML) interface for managing print jobs and privately releasing print jobs. The pages will display current and completed print jobs, and may be used to manually print and delete print jobs. Your Customization file modifies the web pages to reflect the branding of the associated PrinterOn Service. For details on importing Customization files, see page 7 of this guide. To use the Remote Queue Monitor: 1. Open the Privacy Release web pages in a browser. You can use: o the IP address of the machine running PDS, followed by 8181 (the default Remote Queue Monitor port) - eg. o o the DNS name of the machine running PDS, followed by eg. localhost, followed by eg. NOTE: this only applies if you are accessing the Remote Queue Monitor from the machine running PDS. 2. To access a print job, a user can enter the Privacy Release Code for the print job and then click Find. The Privacy Release Code may be the code or address used when printing. In a typical public printing environment, the Remote Queue Monitor is made accessible on a computer near the destination printers. For ease of use, we recommend making the Remote Queue the default web page for the computer s browser, or making it available from a link on the desktop. There are also options for logging in as a PrinterOn Member or Operator/Administrator. Print Delivery Station Admin Guide 28

29 4.3. Using the local Queue Monitor The Queue Monitor lists current and completed print jobs. If the Print Mode is set to Manual, all print jobs are held and must be manually sent to printers. If a printer s Privacy Mode is set to anything other than None, the print jobs for that printer will be held. To use the Queue Monitor: 1. From the PDS console, click Monitor. The Queue Monitor opens. 2. To sort print jobs, click the column title you want to sort by. 3. To change the Print Mode, select Automatic or Manual from the Print Mode list. For more information about Print Modes, see page 16 of this guide. 4. If Manual Mode is selected you may select a print job then click Print or Delete The status of Print Jobs This table explains the Status messages you may see in the Queue Monitor. Status Data Missing Deleted Done Download Pending Downloading New Partially Downloaded Pending Printed Printing Purged Ready Waiting Definition Data file for the request cannot be found by PDS Data file for the request has been deleted Print job has been printed and is no longer available to reprint PDS has queried PDH and is retrieving details about pending documents Data file for the request is being downloaded from PDH Print job is being held pending release Data file for the request was partially downloaded from PDH and was interrupted Paused must be printed in Manual mode Printing completed job can still be reprinted Being sent to a printer or queue Data has been deleted by PDS based on the Failed Job purge setting in PDS Ready to be printed Requested printer is unavailable or busy will change to Ready status when printer is available Print Delivery Station Admin Guide 29

30 5. Uninstalling Print Delivery Station To uninstall PDS, enter your Programs list from Windows Control Panel. Find and select Print Delivery Station, then click Remove. Follow the instructions to completely remove PDS. You may be required to restart your computer to complete the uninstall process. 6. Appendix A: Encryption process Print Delivery Station can be set to use RSA asymmetric (public key) and AES symmetric encryption to secure print jobs in a two-phase process. First, an asymmetric KeyPair is created in the Station Settings window. The public key is posted to the PrinterOn web site, while the private key remains secure in PDS. PDS uses the private key to decrypt the data. When transmitting an encrypted document, the print client first determines that the printer supports encryption and obtains the public key for the printer. Then, the print client generates a random symmetric encryption key for the AES algorithm and uses the symmetric key to encrypt the print data. Then the print client encrypts the symmetric key with the asymmetric (public) key and transmits both the encrypted print data and encrypted symmetric key to PDS. PDS uses the private key to decrypt the encrypted symmetric key, and then uses the decrypted symmetric key to decrypt the encrypted print data. This two-phase process is necessary because asymmetric encryption is, while very secure, inefficient. Symmetric encryption is much more efficient, especially for large jobs like print data streams. This two-phase encryption scheme provides two desirable features: strong encryption security and efficiency of processing. 7. Appendix B: Obtaining an SSL Certificate These instructions outline the steps required for generating an SSL Certificate and getting it signed by a Certificate Authority. This method uses Sun Microsystems keytool. This tool is part of the Java Runtime Environment (JRE), which is included with your download of PDS. To obtain and install an SSL Certificate, you must: 1. Generate a Private/Public Keypair 2. Generate a Certificate Signing Request 3. Submit a Certificate Signing Request to Certificate Authority and receive Signed Certificate 4. Import the Signed Certificate into Keystore 5. Configure PDS to use Keystore and SSL 6. Test SSL Communications Print Delivery Station Admin Guide 30

31 7.1. Generate Private/Public Keypair For details on generating a Private/Public Keypair, view this helpful article from Verisign. Notes: o o All keytool commands consist of a single line You may require quotation marks around long path names o You can also generate this keypair using the Create button in the PDS Advanced Settings > SSL tab Generate Certificate Signing Request For details on generating a CSR, view this helpful article from Verisign Submit Certificate Signing Request to Certificate Authority and receive Signed Certificate The precise steps to follow for this Step vary by Certificate Authority (CA). First, you must choose a CA. Companies such as Verisign, Thawte and RSA Security provide this service. Most CAs charge a fee for this service, depending on the nature of the Certificate being signed, the validity period, and other factors. Example steps for using Verisign to generate a Test Certificate: 1. On the Verisign web site, sign up for a Test Certificate. 2. When prompted to, paste a copy of the text from the Certificate Signing Request file (certreq.crq) into the provided text entry box on one of the web pages. 3. Submit the request. Verisign processes the request and returns a text file via . The file represents the Signed Certificate. Note that the process to obtain a real Certificate will vary from obtaining a Test Certificate Import Signed Certificate into Keystore For details on importing a certificate into a Keystore, view this helpful article from Apache Tomcat Configure PDS to Use Keystore and SSL Enable SSL communication in PDS via the SSL tab. For details, see page 22 of this guide. Note that SSL can be enabled on zero, one, two or three IPP ports, as desired. If SSL is active for a particular port, all communication using that port must use SSL. Activation is done on a port-by-port basis Test SSL Communications After installation the certificate in PDS, you can verify SSL communications in your browser. To test your SSL certificate: 1. From an SSL-capable browser, open the Remote Queue Monitor. 2. If the web address changes from to your SSL certificate is active. Print Delivery Station Admin Guide 31

32 Trademarks and Servicemarks PrinterOn, PrintAnywhere, Print Simply Anywhere, PrintWhere, PRINTSPOTS, the PrinterOn Logo, the PrinterOn Symbol, PrintConnect and PrintValet are trademarks and/or registered trademarks of PrinterOn. Other trademarks are the property of their respective owners. Copyright Notice Copyright 2014 by PrinterOn Inc. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopy, recording, or otherwise, without the prior written permission of PrinterOn Inc. Disclaimer: PrinterOn Inc. makes no warranty with respect to the adequacy of this documentation, programs, or hardware, which it describes for any particular purpose, or with respect to the adequacy to produce any particular result. In no event shall PrinterOn Inc. be held liable for special, direct, indirect, or consequential damages, losses, costs, charges, claims, demands, or claim for lost profits, fees, or expenses of any nature or kind. Print Delivery Station Admin Guide 32