Version 1.0. October KYOCERA Document Solutions America, Inc. Software Solutions Group KYOCERA Document Solutions America, Inc.

Transcription

1 KYOCERA CentraQ

2 Version 1.0 October 2014 KYOCERA Document Solutions America, Inc. Software Solutions Group 2014 KYOCERA Document Solutions America, Inc.

3 Trademarks Microsoft, MS-DOS and Windows are registered trademarks of Microsoft Corporation of either the United States or other countries. Windows XP, Windows Vista, Windows 7, Windows 8 and Windows RT are trademarks of Microsoft Corporation. Microsoft SQL Server, SharePoint and Microsoft Internet Explorer are trademarks of the Microsoft Corporation in the U.S. and other countries. Adobe Acrobat and Adobe Reader are trademarks of Adobe Systems, Incorporated. Other company names and product names in this Operation Guide may be the trademarks or registered trademarks of their respective owners. and are not mentioned in each case in this guide.

4 Table of Contents 1. CentraQ Software This Guide Feature comparison chart Components System Requirements Supported Environments Licensing System Overview Print Management Installation Files Required MFP Setup Installing CentraQ Setting up Proximity Card Reader (USB connected) Configuration Print Server KX Driver Configuration HyPAS Application Operation Authenticating at MFP panel with Access Lock Releasing Print Jobs Support Appendix 1: RFIDeas Network Card Reader Setup (RDR-6081AKE) Appendix 2: RFIDeas Ethernet 241 Setup (PCBA-241)... 33

5 1. CentraQ 1.1 Software KYOCERA CentraQ is an application that provides secure printing capability across KYOCERA printers and MFPs. This software ensures end-user s confidential documents are printed only when they are physically at the printer or MFP. It also provides the convenience of retrieving documents at any of the configured printers or MFPs, saving time spent waiting for a device to become available. In addition, it prevents wasted print outs by allowing users to selectively print only the documents they need and automatically deleting print jobs that are never released. 1.2 This Guide This document describes the components, functions, installation requirements and setup steps required to deploy CentraQ effectively. 1.3 Feature comparison chart CentraQ CentraQ Pro Secure Printing Print, Copy, Scan and Fax usage tracking Reporting usage data 5

6 1.4 Components KYOCERA MFP/Printer Supported KYOCERA MFP or Printer must be connected to the network and configured with a network IP address. Devices must be licensed before they can be used for CentraQ. CentraQ HyPAS Application installed on HyPAS enabled MFPs allow end-users to authenticate prior to using the MFP and access secured jobs on the touchscreen panel Print Server Windows Print Server hosting print queues configured with KYOCERA KX Driver and shared for endusers to print. CentraQ application software is installed on the print server. It consists of following components: o Port Monitor module, running within the Print Spooler process, spools print jobs. o CentraQ service, running in the background, provides CentraQ services. o Settings utility for licensing, configuring authentication and system configuration options. o Report Viewer for creating detailed usage reports Active Directory Server CentraQ relies on Microsoft Active Directory for user authentication and access authorization Client PC Windows Client PCs: End-user workstations or laptops connected to printers shared on the print server Card Reader USB connected card reader (supported only on HyPAS enabled MFPs) allows end-users to use their HID cards to quickly access secured jobs. These readers require MFP license. Ethernet connected card readers (configured to be used with supported MFPs and Printers) allows end-users to use their HID cards to quickly access secured jobs QR Code Scanner Network connected smartphone equipped with a QR code scanner application can be used to quickly view and release secured jobs on any supported MFP or Printer. 6

7 1.5 System Requirements Print Server Supported Operating Systems Windows Server 2008 (32 and 64bit) Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 Hardware Requirements 2 GHz or faster processor. An i5 processor with at least 2 cores is recommended. 2GB of RAM. 4 GB RAM is recommended. 5 GB of available hard disk space. Supported Driver KX Driver 6.0 and 6.1 Printer language: PCL-XL *Only PCL-XL is supported by CentraQ Active Directory Supported Active Directory Servers Microsoft Exchange Server Microsoft Active Directory Server Supported Protocols LDAP V3 is used to communicate with directory servers such as Microsoft Active Directory Print Client SSL/TLS support is available to encrypt communication between MFP and directory server. Note: SSL/TLS must be enabled on the directory server for this feature to work properly. Supported Operating Systems Windows XP (32 bit Only) Windows Vista (32 and 64bit) Windows 7 (32 and 64bit) Windows 8 (32 and 64bit) Windows 8.1 7

8 Windows Server 2008 (32 and 64bit) Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 Hardware Requirements 1 GHz or faster processor 512 MB of RAM 500 MB of available hard drive space Supported MFP Models HyPAS-Enabled MFPs Color MFPs B&W MFPs TASKalfa/CS 7551ci TASKalfa/CS 7550ci TASKalfa/CS 6551ci TASKalfa/CS 6550ci TASKalfa/CS 5551ci TASKalfa/CS 5550ci TASKalfa/CS 4551ci TASKalfa/CS 4550ci TASKalfa/CS 3551ci TASKalfa/CS 3550ci TASKalfa/CS 3051ci TASKalfa/CS 3050ci TASKalfa/CS 2550ci TASKalfa/CS 552ci TASKalfa/CS 500ci TASKalfa/CS 400ci TASKalfa/CS 300ci TASKalfa/CS 250ci TASKalfa/CS 8001i TASKalfa/CS 8000i TASKalfa/CS 6501i TASKalfa/CS 6500i TASKalfa/CS 5501i TASKalfa/CS 5500i TASKalfa/CS 4501i TASKalfa/CS 4500i TASKalfa/CS 3501i TASKalfa/CS 3500i TASKalfa/CS 520i TASKalfa/CS 420i TASKalfa/CS 300i HyPAS-Capable Multifunctional Printers* Color Multifunctional Printers B&W Multifunctional Printers FS-C2626MFP FS-C2526MFP FS-C8520MFP FS-3640MFP FS-3540MFP FS-6525MFP 8

9 FS-C8525MFP FS-6530MFP ECOSYS Color Multifunctional Printers ECOSYS B&W Multifunctional Printers ECOSYS M6526cidn ECOSYS M6026cidn ECOSYS M3560idn ECOSYS M3550idn ECOSYS M3540idn ECOSYS M3040idn * KYOCERA Multifunctional Printers require a compatible CF-card to be installed prior to installing applications. This installation should be carried out by an authorized dealer technician. Printers and other MFPs For a full list of supported printers and MFPs, please refer to KX Driver s supported models list. 1.6 Supported Environments Not all Windows Environments are supported and depending on a variety of factors, KYOCERA CentraQ may not be the ideal choice. Please read the following limitations and considerations carefully before deciding to implement KYOCERA CentraQ. Windows Client Server environment are supported with the following exclusions: Mac or Linux workstations or laptops are not supported. Terminal services, Citrix environments are not supported. Fiery or other 3 rd party imaging software/servers are not supported. Print queues using drivers other than KX Driver 6 or 6.1 are not supported. Cluster servers are not supported. KYOCERA CentraQ is intended for Small and Medium scale environments: KYOCERA CentraQ is restricted to 200 devices per Print Server. Print volumes greater than 1 job every 5 seconds would result in decreased system performance. KYOCERA CentraQ requires bi-directional communication between Server and Printer or MFP, therefore following limitations apply: Deployment over a WAN is not supported. A network where a Network Address Translation (NAT) separates server from devices is not supported. The software cannot function in networks where communications over ports used by KYOCERA CentraQ are blocked. System performance depends on a variety of factors including, but not limited to: Print Server hardware performance factors 9

10 o CPU speed and number of cores. o Available RAM and hard drive space. Network environment performance o Networking hardware such as Switches and Routers. o Available network bandwidth may be affected by network traffic generated by applications running on the network. KYOCERA CentraQ is not suitable for High-latency or low-bandwidth network. Tools such as traceroute or SNMP tools can be used to measure network s QoS (Quality of Service). Please utilize the trial feature of the software to ensure its suitability in a particular environment. 1.7 Licensing CentraQ requires the purchase of a software license from an authorized KYOCERA or Copystar dealership. Each Printer or MFP must be licensed prior to being used with the CentraQ application. Device licenses are available through authorized KYOCERA dealers in 1, 4, 10, and 40 packs. Each device license creates a new slot in the applications licensed devices section where a new MFP serial number could be entered. Device licenses are against the device serial number. Licenses once associated to a device cannot be re-used for another device. Licenses can be copied to multiple print servers. Licenses cannot be revoked. Trial period: When the software is first installed, it starts a 90-day trial period during which up to 5 devices can be used for CentraQ. This is intended to allow customers to try the application before purchase. Is should not be used in a production environment. 10

11 2. System Overview 2.1 Print Management Print jobs originate from Applications running on the client PC (end-users laptop or workstation). Each print job is processed by the KX Driver running either on the Print Server or on the client PC. The driver s output (raw print data) is captured by the CentraQ Port Monitor and spooled in %ProgramData%\Kyocera\Spool folder Secure Printing Spooled jobs remain in the folder till they are released by the end user or deleted automatically after a certain number of days (by default 3 days) Releasing Print Jobs Spooled jobs can be release at any printer or MFP licensed by the server. Only supported print properties will be applied. On HyPAS enabled models, print jobs can be released by: Entering PIN number on the panel Login to Access Lock and user s Job List will show up Swiping HID card at card reader attached to MFP via USB Swiping HID card at associated Ethernet-connected card reader Scanning QR code using a network connected mobile device on MFP On printers and MFPs that do not support HyPAS, print Jobs can be released by: Swiping HID card at associated Ethernet-connected card reader Scanning QR code using a network connected mobile device on MFP The following tables summarize the available options. Device Class PIN Entry Card Swipe (USB) Card Swipe (Network) Authentication with Access Lock HyPAS Enabled MFP Non-HyPAS MFP and Printer QR code scanned with smartphone 11

12 3. Installation Installation of CentraQ consists of following applications. 3.1 Files Required CentraQ.pkg CentraQ Setup.exe PcProx Utility to setup Ethernet card readers o These utilities can be obtained from RFIDeas 3.2 MFP Setup Note: Authorized KYOCERA or Copystar Service Technician required to perform these steps. 1. Ensure that the MFP is updated to the latest available firmware level. 2. MFP must be connected to a network port and link lights must be active. 3. MFP must have at least one empty application slot (under System Menu > Applications). Note: If installing this application on a HyPAS-capable MFP, follow instructions in Section 3.3. If installing this application on a HyPAS-enabled MFP, follow instructions in 3.4 (refer to Section 1.4, for a complete list of supported devices) Installation on HyPAS-Capable MFPs 1. Copy CentraQ.pkg file to the root of a clean USB flash drive. 2. At the MFP control panel, open System Menu/Counter >Favorites/ Application. 3. Log in as Administrator when prompted. The default login name is Admin and the default password is Admin (Note: Enter capital A when entering Admin as both login name and password fields are case-sensitive). 4. Press Application button. 12

13 5. Press Menu button. 6. Press Add button. 7. Insert USB flash drive into the MFP. 8. A list showing the application will appear. 9. Select CentraQ and press Install. 10. After installation, press End to return to the Applications screen. 13

14 11. Select CentraQ and press Menu. 12. Press Activate. The MFP will prompt for confirmation and press Yes. 14

15 13. After CentraQ is activated successfully, it can be executed from the main Application screen (opened by pressing the Application key on the control panel). 15

16 3.2.2 Installation on HyPAS-Enabled MFPs 1. Copy CentraQ.pkg files to the root of a clean USB flash drive. 2. At the MFP control panel, open System Menu > Applications. 3. Log in as Administrator when prompted. The default login name is Admin and the default password is Admin (Note: Enter capital A when entering Admin as both login name and password fields are case-sensitive). 4. Press the Add button. 5. Insert USB flash drive into the MFP. 6. A list showing the application will appear. 7. Select CentraQ and press Install. 8. After installation, press Close to return to the Application screen. 16

17 9. Select CentraQ and press Activate. MFP will prompt for a confirmation. 10. Press Yes. 11. Check the status. 17

18 12. After CentraQ is activated successfully, it can be executed from the main Application screen (opened by pressing the Application key on the control panel). 18

19 3.3 Installing CentraQ Launch the KYOCERA CentraQ Print Server Setup.exe file to begin installation. Step 1. Prompt to install Microsoft.NET 4.5 which is a pre-requisite for CentraQ if not installed. Step 2. Accept License Agreement Step 4. Click Finish after install is completed. Optionally, select the Launch Settings checkbox to open the Setting utility. * Uninstalling CentraQ will remove the CentraQ port monitor. All printers setup to use CentraQ Port must be reconfigured. 3.4 Setting up Proximity Card Reader (USB connected) To utilize USB-connected card readers for authentication, Card Authentication Kit must be purchased from KYOCERA for each MFP. The kit includes a card reader and software license to activate the card reader. Please contact your KYOCERA dealer to obtain pricing, availability and compatibility information. To activate Card Authentication Kit (B): 1. Open System Menu System Optional Function 2. Select Card Authentication Kit (B) and press the Activate button 3. If you have an activation code, enter it using the keypad, otherwise press the Trial button to start a trial period. Card Authentication Kit (B) can be used in trial mode. Two 30-day trial periods will be available. 19

20 For information on compatibility with various card types, please contact your KYOCERA dealer. 20

21 4. Configuration 4.1 Print Server To begin configuring CentraQ on the Print Server, launch the CentraQ Settings utility from Start menu > All Programs > KYOCERA > CentraQ > CentraQ Settings Network Ports To modify communication ports used by CentraQ, open the Settings tab. 1. MFP communication port is used for communication between MFPs, smartphones and CentraQ server. Default port number is 443. This default may conflict with other web servers such as IIS and can be changed by editing the value in this setting. 2. Card Reader port is used for communication between network connected card readers and CentraQ server. When ports are changes, the CentraQ service must be restarted for changes to take effect. When the Save button is clicked, the settings application will automatically restart the CentraQ service License Management To manage licenses installed in the system, open the Licensing tab in the settings utility. 21

22 To add a new license to the system, enter the license code and click the Add button. Multiple licenses can be imported and exported in one step using the Import from File and Export to File options. Each license will allow either 1, 4, 10 or 40 devices to be used with CentraQ. Installing a license will add the corresponding number of slots for devices in the Licensed Devices slots. To activate a license (associating a device to the slot), enter the device serial number in the slot and click the Activate button. Note: Activation is an irreversible process. Once a device is activated on a slot, the slot cannot be used for another device. To easily find a device s serial number, enter its IP address and click the Get Serial No button. Once the serial number is retrieved, click the Assign button to enter it in the next available free slot. To assign multiple serial numbers in one step, copy the list of serial numbers to clipboard and then paste it into the list by pressing Ctrl + V Secure Printing Automatic job deletion Secure Print jobs are spooled till they are release from the MFP front panel. CentraQ can be programmed to remove them automatically after a certain number of days. To configure the duration of the auto delete feature, open the Settings tab and edit the value in the field labeled Automatically delete secured jobs after days. Device Mapping Device Mapping allows the administrator to map an Ethernet card reader to a printer. 1. Select Device Mapping 22

23 2. Enter the Ethernet card reader s IP and Printer IP Address. 3. Configure Ethernet card reader by referring to Appendix 1 or Appendix Click save. Print QR Codes 1. Select Print QR Codes 2. Enter the Printer Address 3. Click Print and print the QR Codes 4. Stick QR code on correct machine. Note: *IP addresses will be lost after closing the application. Export this list for later use. 4.2 KX Driver Configuration Print Server Driver Settings To ensure correct operation, the following settings on the KX Driver must be enabled. 23

24 Under Driver Properties, Advanced tab, select the option Print directly to printer as shown below. Port settings Open Ports tab, select CentraQ Port as shown below. Printer Sharing Print queues must be shared on the network to enable end-users to send print jobs. Open the Sharing tab in the driver properties window. Enable sharing by selecting the Share this printer checkbox and entering a Share name. 24

25 Select the Render print jobs on client computer checkbox as shown. Provide additional drivers to support other workstation platforms (such as x86 or x64). Secure Print Queues If a print queue is required to be dedicated for secure printing, Private Print needs to be enabled under the Job tab as shown. This need to be enabled both in driver Printing Preferences and Printing Defaults End User workstations End-user workstations connect to shared print queues using Windows File and Printer Sharing function. Using Windows Explorer, navigate to the printer share. Double-click on the printer to download the queue and driver to the workstation. Printers can be installed remotely on end user workstations using log on scripts. Configuring Secure Print PIN 25

26 End users can enable Secure Printing function on demand, from within the Printer Properties dialog, opened from the application s document printing interface. Alternately, users can enable secure printing as a default function by enabling Private Print in their printer preferences. 4.3 HyPAS Application Configure IP Address and Port Number 1. Open the Application screen by pressing the Application key on the MFP control panel. 2. Press the CentraQ button. 3. Application will prompt for authentication. Please login as an Administrator. The default administrator account on TASKalfa MFP is: Username: Admin Password: Admin Note: the uppercase A 4. After authentication succeeds, the CentraQ configuration screen will appear. 5. In the configuration screen, enter the CentraQ Connector s IP address and port number (default value for port is 443), then press OK button register the settings. When the data is submitted, the device will attempt to connect to the CentraQ server. If it is successful, it would display the CentraQ menus. Otherwise, it will show a communication error and allow user to edit settings again. Note: Please ensure CentraQ server is installed and running prior to this step Setting up CentraQ as a default MFP screen By setting up the Secure Print page as a default MFP screen, users can easily access to the Secure Print menu on the panel. 1. Open System Menu. 2. Select Common Settings > Default Screen. 3. Select Secure Print and press Done Access Lock or higher Setup CentraQ integrates with Access Lock Installation of Access Lock will let the logged in user bypass the pin entry screen and use their user name to find a job on the spool. To setup, simply install Access Lock or higher on the HyPAS enabled MFP. 26

27 5. Operation 5.1 Authenticating at MFP panel with Access Lock *Access Lock or higher is required There are multiple ways for an end-user to authenticate into the MFP in order to release print jobs Username and password One way for an end-user to authenticate at the MFP is by typing in their Active Directory Username and Password using the software keyboard. Once the end-user has successfully logged in, a list of print jobs belonging to them will be displayed. If no print jobs are available for the current user, CentraQ will prompt the user for a PIN number so they may search for jobs by PIN Card swipe A user may login to the MFP with the simplicity of an HID card swipe if a card reader is installed and licensed. The HID card is tied directly to the user s Active Directory account. 5.2 Releasing Print Jobs This section describes the multiple ways in which a user may release print jobs. Print Jobs that are stored on the server are tied to the user who printed them and/or the private print PIN entered at the time of printing. An end-user must be able to provide these credentials in order to release the job from the server. Note: *PIN number should be unique to the user. Please avoid from using common numbers like 1234, 1111 to secure print job from the others. The user also has the option to manage their job list at the MFP. The panel offers the ability to print and keep, print and delete, or just delete the job from the server CentraQ with Access Lock *Access Lock or higher is required 27

28 1. Login via Access Lock 2. Open CentraQ application 3. View list of secure jobs printed by the user. 4. Select file to Print, Delete, or Release PIN entry 1. Login to CentraQ on MFP Panel 2. Enter PIN 3. Select file to Print, Delete, or Release USB Card Reader 1. Open CentraQ application 2. Swipe HID Card 3. Select file to Print, Delete, or Release Ethernet Card Reader 1. Swipe HID Card 2. All print jobs belonging to the pin will be printed Scanning QR code 1. Launch QR reader application on smart phone or tablet 2. Scan QR code 3. Enter PIN 4. Select file to Print, Delete, or Release 28

29 6. Support For CentraQ Support: Contact your authorized KYOCERA or Copystar Dealer. For a listing of authorized KYOCERA Dealers: For a listing of authorized Copystar Dealers: or Contact KYOCERA Technical Support Phone Monday - Friday 9 am - 6 pm EST Web CentraQ, HyPAS, TASKalfa and TCO Tracker are trademarks of the KYOCERA Companies. Other company names in this guide may be trademarks of their respective owners KYOCERA Document Solutions America, Inc. All rights reserved. 29

30 Appendix 1: RFIDeas Network Card Reader Setup (RDR-6081AKE) Open Lantronix DeviceInstaller software by clicking on Start All Programs Lantronix Device Installer. This utility will discover card readers connected to the network and display them in a tree-view as shown above. Select the device and click Assign IP button on the toolbar. This would bring up the Assign IP Address wizard. Follow the instructions in the wizard to configure DHCP or static IP address for the card reader. After the device has been assigned a valid IP address, check values for Default Gateway and Subnet mask to ensure correctness. Open the card reader s web page in Internet Explorer by entering the devices IP address. 30

31 Click on the Configure link on the left of the page and when prompted for username and password, simply click OK, leaving the fields blank. Configure each setting on the web page as shown below. In each page, after making the changes, click the OK button at the bottom. After all pages are configured, click the Apply Settings link to save changes and restart the card reader. Network Setting 31

32 Server Setting Channel 1: Serial Settings 32

33 Appendix 2: RFIDeas Ethernet 241 Setup (PCBA-241) Tools Required 1. Discover241.exe from RFIDeas 2. Telnet client Steps 1. Find device using RFIDeas Discover241.exe utility 2. Take note of the device s IP 3. Telnet into device. 4. Set init_serv_addr and data_serv_addr to the CentraQ server IP by using the following commands a. set init_serv_addr <insert server IP> b. set data_serv_addr <insert server IP> 5. Set data_str and init_str by using the following commands a. set data_str $1 b. set init_str $1 6. Set data_port and init_port by using the following commands a. Set data_port <CentraQ Port> b. Set init_port <CentraQ Port> 7. Reboot device using the reboot command 33

34 34