uniflow Embedded Applet for Xerox V1.1 Installation Manual

Transcription

1 uniflow Embedded Applet for Xerox V1.1 Installation Manual

2

3 Versioning Document Versioning Version Date Author(s) Reviewer(s) Jul-2014 Business I.T. Systems Ltd Sebastian Husnik, Marja Pals, Thomas Lemmer Oct Aug Feb-2016 Business I.T. Systems Ltd Sebastian Husnik Claudia Kleinekemper Sebastian Husnik, Marja Pals, Paul Sluzek, Thomas Lemmer Thomas Lemmer Thomas Lemmer Nov-2016 Felix Schlick Paul Sluzek Document Name uniflow Embedded Applet for Xerox - Installation Manual Knowledgebase File Name Technologies Concerned Short Summary Document Changes MOMKB-435 ( uniflow Embedded Applet for Xerox V1.1 - Installation Manual - V2.5.pdf uniflow, Xerox, Embedded Applet Interface Describes the installation of the uniflow Embedded Applet for Xerox. The embedded applet and software documentation has been created by Business I.T. Systems Ltd. Version Topic(s) Changes 2.0 All Imported to Author-it, Added device specific descriptions with screenshots, added general configuration steps WorkCentre 5790 (on page 80) Installation of the Applet on the Device (on page 84) Using the Applet (on page 94) Uninstallation of the Applet (on page 97) Xerox Extensible Interface Platform (EIP) (on page 1) Added configuration instructions for WC 5790 device. Updated Screenshots. Some restructuring. New topic added. 2.3 Configuration in uniflow (on page 18) Updated topic to mention new configuration wizard. 2.4 Installation Requirements (on page 2) Updated. 2.5 Compatibility / Device Requirements Remote Operation (on page 100) Updated device list. Added Remote Operation chapter

4

5 Disclaimer This software is provided by the copyright holders and contributors "AS IS" and any express or implied warranties, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall the copyright owner or contributors be liable for any direct, indirect, incidental, special, exemplary, or consequential damages (Including, but not limited to, procurement of substitute goods or services, loss of use, data, or profits, or business interruption) However caused and on any theory of liability, whether in contract, strict liability, or tort (including negligence or otherwise) arising in any way out of the use of this software, even if advised of the possibility of such damage. All rights reserved. No parts of this work may be reproduced in any form or by any means - graphic, electronic, or mechanical, including photocopying, recording, taping, or information storage and retrieval systems without the written permission of the publisher. Company and product names mentioned herein are registered or unregistered trademarks of their respective companies. Mention of third-party products is for information purposes only and constitutes neither an endorsement nor a recommendation. Business I.T. Systems Ltd assumes no responsibility with regard to the performance or use of these products. Also, Business I.T. Systems Ltd makes no claim to these trademarks. Any use of trademarks, logo, service marks, trade names, and product names is prohibited without the written permission of the respective owners. Business I.T. Systems Ltd

6 Symbols Text Styles This style is used for text that is displayed on screen. This style is used for text the user has to type in. This style is used for hyperlinks to web pages, internal links to other pages in this manual. This style is used for code examples: XML code, variables or regular expressions. Pictograms Important Note: Information that is crucial for the correct functioning of the uniflow software. Further Information: Pointer to additional manuals, installation manuals, white papers or the NT-ware Knowledgebase. Region Specific Feature: Indicator for uniflow features that are not available worldwide. External Link: Link to an external web page. Settings: Detailed explanation of configuration settings or operational procedures. Compass: Path to the menu or configuration page in the software. Screenshots and Diagrams This manual contains screenshots of the software, diagrams explaining relations and pictures of products. Even though all visuals are up-to-date at the time of writing, they are subject to change. Language and Translations This document has originally been written in English language. Translations of this document are based on the English original. About this Document This document is delivered as part of the device / the software from NT-ware. Please read this document before using the device / the software and keep this document or the link to an online version of this document for future reference. Please make sure that all persons operating the device / the software are

7 familiar with this document. Please observe all instructions given in this document. Installation, configuration and maintenance must only be performed by sufficiently qualified personnel. Failure to comply with this document may void the warranty. Copyright and Contact NT-WARE Systemprogrammierungs-GmbH. Should you come across any relevant errors or have any suggestions please contact or use the Send feedback here button of the uniflow Online Help.

8

9 Contents Contents 1 Introduction Xerox Extensible Interface Platform (EIP) Xerox System Structure Installation Requirements Compatibility / Device Requirements Installation - Xerox Client Device Independent Configuration Steps WorkCentre 6400S Preparing the Device for the Applet Enabling SSL on the Device Installation of the Applet on the Device Configuration in uniflow Device Lock Configuration Enabling the DeviceLock in uniflow Configuring Authentication Methods Reversing the DeviceLock Configuration WorkCentre Preparing the Device for the Applet Enabling SSL on the Device Installation of the Applet on the Device Configuration in uniflow Device Lock Configuration Enabling the DeviceLock in uniflow Configuring Authentication Methods Reversing the DeviceLock Configuration WorkCentre 53xx/71xx Series Preparing the Device for the Applet Enabling SSL on the Device Installation of the Applet on the Device Configuration in uniflow Device Lock Configuration I

10 Contents Enabling the DeviceLock in uniflow Configuring Authentication Methods Reversing the DeviceLock Configuration WorkCentre 59xx / 7220 series Preparing the Device for the Applet Enabling SSL on the Device Installation of the Applet on the Device Configuration in uniflow Device Lock Configuration Enabling the DeviceLock in uniflow Configuring Authentication Methods Reversing the DeviceLock Configuration WorkCentre 75xx Series Preparing the Device for the Applet Enabling SSL on the Device Installation of the Applet on the Device Configuration in uniflow Device Lock Configuration Enabling the DeviceLock in uniflow Configuring Authentication Methods Reversing the DeviceLock Configuration WorkCentre Preparing the Device for the Applet Enabling SSL on the Device Installation of the Applet on the Device Configuration in uniflow Device Lock Configuration Enabling the DeviceLock in uniflow Configuring Authentication Methods Reversing the DeviceLock Configuration Using the Applet Uninstallation of the Applet Trouble Shooting Log File Network Communication Ports II

11 Contents 16.3 Remote Operation Index III

12

13 1 Introduction The uniflow Embedded Applet for Xerox is an applet designed for use on Xerox multifunction print devices. uniflow Embedded Applet for Xerox affords greater oversight of device usage for business customers who are environmentally aware and cost conscious, allowing control and reduced wastage of paper, toner and energy, in the day to day operation of their Xerox devices. No longer will piles of unwanted copies or print-jobs end up in the recycling bin when users either forget the requested print, or decide it is no longer required once it has been added to the print queue. With the uniflow Embedded Applet for Xerox users log into the native application running on the Xerox device and are presented with a list of their print jobs stored on a central server. From here they are able to release print jobs, print and keep them for later, or simply delete them from the queue. Built-in tracking features can be utilized to monitor the jobs released, which can be tracked by paper size, color and number of printed duplex or single sides. If required, jobs can be assigned prices, calculated in dependence on pages, sides, size and color, which can be presented to the user as they are choosing print jobs to be released from the queue. Sophisticated usage tracking features, prevention of unauthorized copies/prints and a smooth intuitive user interface make the uniflow Embedded Applet for Xerox the definite choice for managing Xerox multifunction devices. Please be aware that the firmware of your device determines which version of the uniflow Embedded Applet for Xerox can be used on your device. See chapter Compatibility / Device Requirements (on page 4). 2 Xerox Extensible Interface Platform (EIP) Xerox Extensible Interface Platform (EIP) is a software platform inside many Xerox MFPs allowing independent software vendors and developers the creation of customized document management applications that are accessible right from the MFP's touch screen. EIP is based on web standards as for example HTML, CSS, XML and Javscript. In addition, it also uses HTTPS and SSL. EIP provides Application Programming Interfaces (APIs) allowing access to services, advanced copy customization, cost control, print, scan, security, device management and presentation services. 1

14 Thanks to EIP the uniflow Embedded Applet for Xerox can be installed and used on Xerox devices. 3 Xerox System Structure The configuration needs the Xerox Client Presentation Service to be installed and running in order to enable the communication between uniflow and the uniflow Embedded Applet for Xerox on the device. The Xerox Client service can best be described as a connector or middleware software installed additionally on either the uniflow server or an RPS. The application needs a Windows IIS to work. The Xerox Client software is also used to install and register the application via the Registration website. The uniflow Embedded Applet for Xerox will not work unless it has been registered on the MFP by means of this Registration Tool. One Xerox Client can communicate with one or several devices. Depending on print infrastructure it is also possible to install additional Xerox Clients on several servers or RPSs, thereby minimizing data transfer and optimizing performance. This can be configured within the EAI settings in uniflow. 4 Installation Requirements Minimum Hardware Requirements Processor: 1.6 GHz+ processor RAM: 512 MB+ 2

15 NIC: 100/1000 BaseT Minimum Software Requirements Microsoft Windows Server 2003 Internet Explorer 6 or higher Internet Information Services (IIS) 6 or higher ASP.NET needs to be added and enabled in IIS The Xerox Client has to be installed on a Windows server accessible by the Xerox devices to be managed. IIS Requirements The IIS has to be configured properly to ensure correct operation of the software. Below, you can find recommendations sorted by operating system. Windows Server 2003 Make sure that in the Internet Information Services (IIS) Manager the following Web Service Extensions are set to Allowed: Active Server Pages All Unknown ISAPI Extensions Server Side Includes Windows Server 2008/2012 Proceed as follows to prepare the IIS: 1. In Windows Server 2008: Open the Server Manager and select Roles from the menu. In Windows Server 2012: Open Manage, then Add Roles and Features. 2. Go to the Web Server (IIS) role and open the Role Services section. 3

16 a. Click Add Role Services to open the Select Role Services window. b. In the Select Role Services window, configure the following: Under Web Server: Under Common HTTP features: Select HTTP Redirection (all other options are usually installed by default). Note that Web-DAV-Publishing is only required in case you want to use the uniflow server as target in a Scan-to-WebDAV environment. Under Application Development: Select all features except CGI which is not required. Under Health and Diagnostics: Ensure HTTP Logging is selected (this option is usually installed by default). Ensure Request Monitor is selected (this option is usually installed by default). Security: Select Basic Authentication. Select Windows Authentication. Ensure Request Filtering is selected (this option is usually installed by default). Performance: Ensure Static Content Compression is selected (this option is usually installed by default). Under Management Tools: Ensure IIS Management Console is selected (this option is usually installed by default). Ensure IIS Management Scripts and Tools is selected. Ensure IIS 6 Management Compatibility is selected with all of its sub-options (these options are usually installed by default). Click Next to continue (this option is grayed out if you made no changes). c. In the Confirm Installation Selections window, click Install. d. In the Installation Progress window, wait for the installation to finish. When Installation completed appears beside the Web Server (IIS) role, click Close to finish the installation. 5 Compatibility / Device Requirements The following printers are supported by the uniflow Embedded Applet for Xerox V1.x Please note that the uniflow Embedded Applet for Xerox V1.2 only supports firmware versions beginning with version 073.xxx or higher. These fimware versions include the EIP V2.0 or higher which is required for the applet. With older firmware versions with EIP V1.5 you can only use the uniflow Embedded Applet for Xerox V1.1. 4

17 Check your device for the installed firmware version in order to determine which applet can be used. Device List ColorQube 92xx/93xx ColorQube 87xx/89xx WorkCentre 3655X WorkCentre 53xx WorkCentre 57xx WorkCentre 58xx WorkCentre 5945/5955 WorkCentre 6400 WorkCentre 6655 WorkCentre 71xx WorkCentre 7220/7225 WorkCentre 73xx WorkCentre 74xx WorkCentre 75xx WorkCentre 76xx WorkCentre 77xx WorkCentre 78xx WorkCentre 7970 Xerox D95/D110/D125/D136 Xerox 4112/4127 Xerox Color 550/560 Phaser 3635 MFP It is recommended that your device is upgraded to the latest firmware available from, uniflow Compatibility uniflow V5.1.2 or higher 5

18 6 Installation - Xerox Client You can download the uniflow Embedded Applet for Xerox installation file from the uniflow Server Configuration under Server Configuration > Connections > Agents/Terminals > EAI > Resources. Refer to the uniflow User Manual ( for more information. 1. Double click the Xerox Client executable. Run the file on a dedicated computer. This can be the uniflow server or a separate server. It is important that this computer runs a web service, i.e. the IIS. 2. Installation Wizard will start to prepare install. 3. Click Next to continue. 4. Install Microsoft.Net Framework 2.0/WSE 3.0 runtime, if not already installed. 6

19 5. Click Next to proceed. 6. Please wait for the installation of Microsoft components to complete. 7. Select the setup installation folder, we recommend to use the default. 8. Click Next once chosen. 7

20 9. Click Next to go ahead with the configuration 10. Please wait for the progress indicator to complete. 11. Click Finish to complete. For further information on configuration in uniflow, see the uniflow manual, here ( and here ( 8

21 7 Device Independent Configuration Steps The uniflow Embedded Applet for Xerox is supported by numerous Xerox devices of different series (see Compatibility / Device Requirements). In this manual, detailed configuration steps are described for a limited selection of devices / device series. Configuration steps of Xerox device series not described in this manual might differ slightly in menu structure and terminology. The following general configuration steps have to be carried out on every device in order to successfully run the uniflow Embedded Applet for Xerox: Without Device Lock 1. Make sure the security certificate on the device is enabled. In most standard configurations this should already be the case. 2. Make sure the SSL/HTTPS communication is enabled. In most standard configurations this should already be the case. 3. Enable the Extensible Server Browser. Otherwise, no websites on the device UI will be possible. With Device Lock If you want to use the device look feature, the following additional steps have to be configured: 1. Make sure that the Services Pathways are locked. 2. As Touch UI method (or local login method) Xerox Secure Access Unified ID System needs to be enabled. Only then other login methods (like the uniflow Embedded Applet for Xerox) can be used. You can have a look at the detailed descriptions and screenshots of the devices described below, as they will help you find the correct settings even if your device is not described here. 8 WorkCentre 6400S 9

22 8.1 Preparing the Device for the Applet 1. Locate and open Internet Explorer. 2. Enter the IP address of the Xerox device you wish to install the applet on into the address bar located at the top of the Internet Explorer window and press Enter. In case the authentication window does not pop up, please ensure to disable the Enhanced Protected Mode in Internet Explorer. If the web interface opens immediately, please make sure to login as administrator by clicking on Login in the upper right corner of the web page. 3. Enter an administrator user name and password (default username: admin, password: 1111, otherwise please refer to the device manual) and click OK. 4. Once you have successfully logged in, the web interface of the device will open on the Status page of the device. 10

23 5. Navigate to Properties > Security > Machine Digital Certificate Management. If under the tab Machine Digital Certificate no certificate is displayed, please select Create New Certificate. 6. In the next screen select Self Signed Certificate and click Continue. 7. Fill in the required data and click Apply. 8. If successful, on the Machine Digital Certificate Management page the certificate is displayed under Machine Digital Certificate. 9. Navigate to Properties > General Setup > Extensible Service Setup. 10. Under Browser Settings, make sure Enable the Extensible Service Browser is checked. Confirm by clicking Apply. 11

24 11. Under Setup (Required), make sure Extensible Services Registration is Configured. If not, press the Settings... button next to it. 12. A list of Web Services is displayed. Click on Enable All and then on Save on the bottom of the page. 12

25 13. If configured correctly, Configured will be displayed in the Extensible Service Setup > Setup (Required) field. 14. Once complete, log out and proceed with the next step to install the applet on the device. 8.2 Enabling SSL on the Device 1. Open the configuration page of the Xerox device by entering the IP address of the device into the address bar of your Internet Explorer. 2. Go to Properties > Connectivity > Protocols > HTTP. 13

26 3. Ensure that Secure HTTP (SSL) is Enabled on port Installation of the Applet on the Device 1. Click on the shortcut named Xerox Application Registration Tool that was created on your desktop during installation of the Xerox client. 2. The Xerox Application Registration Tool will open in your browser. Alternatively, you can enter the following URL into the address bar of your browser: ADDRESS OF THE XEROX CLIENT>:2506/Install/Install.aspx. The IP address is the IP of the computer or server where the Xerox Client has been installed. 14

27 3. Enter the DNS or IP address and the administrator User Name and Password of the device. 4. Leave every checkbox at their defaults (all checked). 5. Click Connect. 15

28 6. If the connection is successful, the URL and API version fields are populated. 7. By clicking List, a list of already configured applications is displayed. 8. Clicking Create New in the Xerox Application Registration Tool will bring you to the below screen. Enter the following application details. The Registration name, the Service Url and the Vendor are 16

29 o o o o o o mandatory fields. The options under Service Capabilities can be left at their defaults. Registration name (mandatory): The name that is displayed in the list of installed applications. Service Url (mandatory): The URL to access the Xerox Client. ( ADDRESS OF THE XEROX CLIENT>:2506/StartupScreen.aspx) Description Url: The URL of the XML file which contains the name of the application that will be displayed on the Xerox device ( ADDRESS OF THE XEROX CLIENT>:2506/description.xml). You can find this XML file in the Xerox client installation folder and edit it to change the displayed name of the application. This field can be left empty. Small Icon Url: The URL of the image that will be displayed on the device as the icon for the installed application. Corresponding image files have to be put in the Xerox client installation folder. This field can be left empty. Large Icon Url: The URL of the image that will be displayed on the device as the icon for the installed application. Corresponding image files have to be put in the Xerox client installation folder. This field can be left empty. Vendor (mandatory): Here you can enter a manufacturer s/dealer s name. If the registration tool shows the option First Generation Browser, leave it unchecked. 17

30 If you have already saved a configuration file in XML format, you can upload this XML file using the field Load from XML. Simply browse for the file, select it and click Load. 9. Once you have entered the configuration settings, click Create. 10. The following message box pops up. You have to perform the settings mentioned in this message, if you are using the Device Lock functionality. Please refer to chapter Device Lock Configuration for detailed information in this regard. 11. After you have configured an application, it will appear in the Application Name list. 12. You can use the Set as Default button to set the selected application as the default application on the device. 8.4 Configuration in uniflow Before you can use the uniflow Embedded Applet for Xerox, you have to configure the printer the applet has been installed on in uniflow. To do so, go to uniflow Server Configuration > Printer / Scanner > Wizards, choose Secure Print - Multi-Vendor Output Printer and follow the on-screen instructions. 18

31 For uniflow versions lower than V5.4, you have to configure the printer manually. For more information on how to do so, please refer to Advanced Configuration > Embedded Applets > Xerox in the uniflow User Manual: uniflow V5.2 ( uniflow V5.3 ( 8.5 Device Lock Configuration To allow for a secure job release on the device the device has to be locked for unauthenticated access. Only after authentication at the device with the authentication method(s) specified on the Xerox device and in uniflow Server Configuration > Connections > Agents/Terminals > EAI > General Configuration, users can access and release their print jobs. To achieve the device lock follow the steps described in the following Enabling the DeviceLock in uniflow 1. Enable the DeviceLock flag in uniflow Server Configuration > Connections > Agents/Terminals > EAI > General Configuration. Important: When DeviceLock has been configured on the uniflow server, the Xerox device will apply the device lock automatically by changing the logon method on the device from Local authentication to XSA (Xerox Secure Access) After enabling the DeviceLock in uniflow, please reboot the device! In case you disable the DeviceLock in uniflow, you have to manually reset some device settings. For more information in this regard refer to chapter Reversing the DeviceLock Configuration. 2. Once the above configuration is done, please perform the configuration of the Authentication Methods on the Xerox device Configuring Authentication Methods To enable the User Name / Password and PIN authentication methods, Xerox Secure Access needs to be configured as the authentication system for the device UI. 1. Go to Properties > Security > Access Rights > Setup. 19

32 2. Under Current Configuration, click Edit Methods Under Device User Interface Authentication, select Xerox Secure Access. 4. Click Save. 5. You are returned to the Authentication Configuration page. Find Device User Interface Authentication in the list below and click on Edit... 20

33 6. Scroll down and click on Manually Override Settings. 7. Under Server Communication, check IPv4 Address and enter the IP address of the computer the Xerox Client was installed on and the port Under Path, enter /AuthServer.asmx 9. Under Device Log In Methods, make sure Xerox Secure Access Device + alternate on-screen authentication method is checked. 10. Click Save. Locking the Service Paths 1. Navigate to Properties > Security > Access Rights > Tools & Feature Access. 2. Under Services Pathway, select Locked. 21

34 3. Click Apply. Restart the device to apply these settings Reversing the DeviceLock Configuration If the Device Lock Configuration is not used anymore, it is of utmost importance to perform the following steps. Otherwise, the DeviceLock on the Xerox device will still be active. Make sure to disable DeviceLock for the corresponding machine in uniflow as well. Disable Xerox Secure Access 1. Go to Properties > Security > Access Rights > Setup. 2. Under Current Configuration, click Edit Methods Under Device User Interface Authentication, select Locally on the Device (Internal Database). 4. Click Save. Unlock Service Pathway 1. Navigate to Properties > Security > Access Rights > Tools & Feature Access. 2. Under Services Pathway, select Unlocked. 3. Click Apply. 22

35 Restart the device to apply these settings. 23

36 9 WorkCentre Preparing the Device for the Applet 1. Locate and open Internet Explorer. 2. Enter the IP address of the Xerox device you wish to install the applet on into the address bar located at the top of the Internet Explorer window and press Enter. In case the authentication window does not pop up, please ensure to disable the Enhanced Protected Mode in Internet Explorer. If the web interface opens immediately, please make sure to login as administrator by clicking on Login in the upper right corner of the web page. 3. Enter an administrator user name and password (default username: admin, password: 1111, otherwise please refer to the device manual) and click OK. 4. Once you have successfully logged in, the web interface of the device will open on the Status page of the device. 24

37 5. Navigate to Properties > Security > Certificates > Security Certificates. If no certificate is displayed under the tab Xerox Device Certificate, please click on Create New Xerox Device Certificate. 6. In the next screen select Self Signed Certificate and click Continue. 7. Fill in the required data and click Finish. 8. If successful, on the Machine Digital Certificate Management page the certificate is displayed under Machine Digital Certificate. 9. Navigate to Properties > General Setup > Extensible Service Setup. 10. Under Browser Settings, make sure Enable the Extensible Service Browser is checked. Confirm by clicking Apply. 25

38 11. Under Setup (Required), make sure Extensible Services Registration is Configured. If not, press the Edit... button next to it. 12. A list of Web Services is displayed. Click on Enable All and then on Save on the bottom of the page. 13. If configured correctly, Configured will be displayed in the Extensible Service Setup > Setup (Required) field. 14. Once complete, log out and proceed with the next step to install the applet on the device. 9.2 Enabling SSL on the Device 1. Open the configuration page of the Xerox device by entering the IP address of the device into the address bar of your Internet Explorer. 2. Go to Properties > Connectivity > Setup > HTTP. 26

39 3. Ensure that Force Traffic over SSL is set to Yes on port Installation of the Applet on the Device 1. Click on the shortcut named Xerox Application Registration Tool that was created on your desktop during installation of the Xerox client. 2. The Xerox Application Registration Tool will open in your browser. Alternatively, you can enter the following URL into the address bar of your browser: ADDRESS OF THE XEROX CLIENT>:2506/Install/Install.aspx. The IP address is the IP of the computer or server where the Xerox Client has been installed. 27

40 3. Enter the DNS or IP address and the administrator User Name and Password of the device. 4. Leave every checkbox at their defaults (all checked). 5. Click Connect. 28

41 6. If the connection is successful, the URL and API version fields are populated. 7. By clicking List, a list of already configured applications is displayed. 8. Clicking Create New in the Xerox Application Registration Tool will bring you to the below screen. Enter the following application details. The Registration name, the Service Url and the Vendor are 29

42 o o o o o o mandatory fields. The options under Service Capabilities can be left at their defaults. Registration name (mandatory): The name that is displayed in the list of installed applications. Service Url (mandatory): The URL to access the Xerox Client. ( ADDRESS OF THE XEROX CLIENT>:2506/StartupScreen.aspx) Description Url: The URL of the XML file which contains the name of the application that will be displayed on the Xerox device ( ADDRESS OF THE XEROX CLIENT>:2506/description.xml). You can find this XML file in the Xerox client installation folder and edit it to change the displayed name of the application. This field can be left empty. Small Icon Url: The URL of the image that will be displayed on the device as the icon for the installed application. Corresponding image files have to be put in the Xerox client installation folder. This field can be left empty. Large Icon Url: The URL of the image that will be displayed on the device as the icon for the installed application. Corresponding image files have to be put in the Xerox client installation folder. This field can be left empty. Vendor (mandatory): Here you can enter a manufacturer s/dealer s name. If the registration tool shows the option First Generation Browser, leave it unchecked. 30

43 If you have already saved a configuration file in XML format, you can upload this XML file using the field Load from XML. Simply browse for the file, select it and click Load. 9. Once you have entered the configuration settings, click Create. 10. The following message box pops up. You have to perform the settings mentioned in this message, if you are using the Device Lock functionality. Please refer to chapter Device Lock Configuration for detailed information in this regard. 11. After you have configured an application, it will appear in the Application Name list. 12. You can use the Set as Default button to set the selected application as the default application on the device. For diagnostic purposes, the following links and tools can be helpful to collect information: For the Xerox Client: Client Service - IP>:2506/StartupScreen.aspx Client Service - IP>:2507/AuthServer.asmx live.sysinternals.com/tcpview.exe Ports: 2506 and LISTENING For the Applet on the Device: HTTP - IP> Client Service - IP>:2506/Install/Install.aspx Configuration Report Information on Registration Tool page 31

44 9.4 Configuration in uniflow Before you can use the uniflow Embedded Applet for Xerox, you have to configure the printer the applet has been installed on in uniflow. To do so, go to uniflow Server Configuration > Printer / Scanner > Wizards, choose Secure Print - Multi-Vendor Output Printer and follow the on-screen instructions. For uniflow versions lower than V5.4, you have to configure the printer manually. For more information on how to do so, please refer to Advanced Configuration > Embedded Applets > Xerox in the uniflow User Manual: uniflow V5.2 ( uniflow V5.3 ( 9.5 Device Lock Configuration To allow for a secure job release on the device the device has to be locked for unauthenticated access. Only after authentication at the device with the authentication method(s) specified on the Xerox device and in uniflow Server Configuration > Connections > Agents/Terminals > EAI > General Configuration, users can access and release their print jobs. To achieve the device lock follow the steps described in the following Enabling the DeviceLock in uniflow 1. Enable the DeviceLock flag in uniflow Server Configuration > Connections > Agents/Terminals > EAI > General Configuration. Important: When DeviceLock has been configured on the uniflow server, the Xerox device will apply the device lock automatically by changing the logon method on the device from Local authentication to XSA (Xerox Secure Access) After enabling the DeviceLock in uniflow, please reboot the device! In case you disable the DeviceLock in uniflow, you have to manually reset some device settings. For more information in this regard refer to chapter Reversing the DeviceLock Configuration. 2. Once the above configuration is done, please perform the configuration of the Authentication Methods on the Xerox device. 32

45 9.5.2 Configuring Authentication Methods To enable the User Name / Password and PIN authentication methods, Xerox Secure Access needs to be configured as the authentication system for the device UI. 1. Go to Properties > Login / Permissions / Accounting > Login Methods. 2. Under Touch and Web User Interface click Edit Under Touch UI Method, select Xerox Secure Access - Unified ID System. 4. Click Save. 5. You are returned to the Authentication Configuration page. Find Xerox Secure Access Setup in the list below and click on Edit... 33

46 6. Scroll down and click on Manually Override Settings. 7. Under Server Communication, check IPv4 Address and enter the IP address of the computer the Xerox Client was installed on and the port Under Path, enter /AuthServer.asmx 9. Under Device Log In Methods, make sure Xerox Secure Access Device + alternate on-screen authentication method is checked. 10. Click Save. Locking the Service Paths 1. Navigate to Properties > Login / Permissions / Accounting > User Permissions. 2. Under User Permission Roles, click Edit Under Non-Logged-In User, click Edit Select Services & Tools and check Custom. 5. Under Services Pathway, select Not Allowed. 34

47 6. Click Apply. Restart the device to apply these settings Reversing the DeviceLock Configuration If the Device Lock Configuration is not used anymore, it is of utmost importance to perform the following steps. Otherwise, the DeviceLock on the Xerox device will still be active. Make sure to disable DeviceLock for the corresponding machine in uniflow as well. Disable Xerox Secure Access 1. Go to Properties > Login / Permissions / Accounting > Login Methods. 2. Under Touch and Web User Interface click Edit Under Touch UI Method, select User Name / Password - Validate on the Device. 4. Click Save. Unlock Service Pathway 1. Navigate to Properties > Login / Permissions / Accounting > User Permissions. 2. Under User Permission Roles, click Edit Under Non-Logged-In User, click Edit Select Services & Tools and check Custom. 35

48 5. Under Services Pathway, select Allowed. 6. Click Apply. Restart the device to apply these settings. 36

49 10 WorkCentre 53xx/71xx Series 10.1 Preparing the Device for the Applet 1. Locate and open Internet Explorer. 2. Enter the IP address of the Xerox device you wish to install the applet on into the address bar. 3. Enter an administrator user name and password (default username: admin, password: 1111, otherwise please refer to the device manual) and click OK. In case the Authentication Window is not popping up, please ensure to disable the Enhanced Protected Mode in Internet Explorer. 37

50 4. Once you have successfully logged in, the web interface of the device will open on the Status page of the device. 5. Navigate to Properties > Security > Machine Digital Certificate Management. If there is no SSL certificate, please select Create New Certificate. 38

51 6. Select Self-Signed Certificate and click Continue. 7. The required data to be entered varies on the different machine models. Enter the required data and click Apply. 8. If successful, a confirmation will be shown. Afterwards, the Configuration Overview page is displayed. 39

52 9. Go to Properties > General Setup > Extensible Service Setup. 10. Under Browser Settings make sure, Enable the Extensible Service Browser is checked. 11. Under Setup (Required) make sure, Extensible Services Registration is Configured. If not, click the Edit... button. 12. If any disabled markers are shown, please check the relevant checkbox(es) and then click Apply. 40

53 13. If configured correctly, Configured will be displayed in the Extensible Services Registration field. 14. Once complete, log out and proceed with the next step to install the applet on the device Enabling SSL on the Device 1. Open the configuration page of the Xerox device by entering the IP address of the device into the address bar of your Internet Explorer. 2. Go to Properties > Security > SSL/TLS. 3. Ensure that Secure HTTP (SSL) is enabled on port Installation of the Applet on the Device 1. Click on the shortcut named Xerox Application Registration Tool that was created on your desktop during installation of the Xerox client. 2. The Xerox Application Registration Tool will open in your browser. Alternatively, you can enter the following URL into the address bar of your browser: ADDRESS OF THE XEROX CLIENT>:2506/Install/Install.aspx. The IP address is the IP of the computer or server where the Xerox Client has been installed. 41

54 3. Enter the DNS or IP address and the administrator User Name and Password of the device. 4. Leave every checkbox at their defaults (all checked). 5. Click Connect. 42

55 6. If the connection is successful, the URL and API version fields are populated. 7. By clicking List, a list of already configured applications is displayed. 8. Clicking Create New in the Xerox Application Registration Tool will bring you to the below screen. Enter the following application details. The Registration name, the Service Url and the Vendor are 43

56 o o o o o o mandatory fields. The options under Service Capabilities can be left at their defaults. Registration name (mandatory): The name that is displayed in the list of installed applications. Service Url (mandatory): The URL to access the Xerox Client. ( ADDRESS OF THE XEROX CLIENT>:2506/StartupScreen.aspx) Description Url: The URL of the XML file which contains the name of the application that will be displayed on the Xerox device ( ADDRESS OF THE XEROX CLIENT>:2506/description.xml). You can find this XML file in the Xerox client installation folder and edit it to change the displayed name of the application. This field can be left empty. Small Icon Url: The URL of the image that will be displayed on the device as the icon for the installed application. Corresponding image files have to be put in the Xerox client installation folder. This field can be left empty. Large Icon Url: The URL of the image that will be displayed on the device as the icon for the installed application. Corresponding image files have to be put in the Xerox client installation folder. This field can be left empty. Vendor (mandatory): Here you can enter a manufacturer s/dealer s name. If the registration tool shows the option First Generation Browser, leave it unchecked. 44

57 If you have already saved a configuration file in XML format, you can upload this XML file using the field Load from XML. Simply browse for the file, select it and click Load. 9. Once you have entered the configuration settings, click Create. 10. The following message box pops up. You have to perform the settings mentioned in this message, if you are using the Device Lock functionality. Please refer to chapter Device Lock Configuration for detailed information in this regard. 11. After you have configured an application, it will appear in the Application Name list. 12. You can use the Set as Default button to set the selected application as the default application on the device Configuration in uniflow Before you can use the uniflow Embedded Applet for Xerox, you have to configure the printer the applet has been installed on in uniflow. To do so, go to uniflow Server Configuration > Printer / Scanner > Wizards, choose Secure Print - Multi-Vendor Output Printer and follow the on-screen instructions. 45

58 For uniflow versions lower than V5.4, you have to configure the printer manually. For more information on how to do so, please refer to Advanced Configuration > Embedded Applets > Xerox in the uniflow User Manual: uniflow V5.2 ( uniflow V5.3 ( Device Lock Configuration To allow for a secure job release on the device the device has to be locked for unauthenticated access. Only after authentication at the device with the authentication method(s) specified on the Xerox device and in uniflow Server Configuration > Connections > Agents/Terminals > EAI > General Configuration, users can access and release their print jobs. To achieve the device lock follow the steps described in the following Enabling the DeviceLock in uniflow 1. Enable the DeviceLock flag in uniflow Server Configuration > Connections > Agents/Terminals > EAI > General Configuration. Important: When DeviceLock has been configured on the uniflow server, the Xerox device will apply the device lock automatically by changing the logon method on the device from Local authentication to XSA (Xerox Secure Access) After enabling the DeviceLock in uniflow, please reboot the device! In case you disable the DeviceLock in uniflow, you have to manually reset some device settings. For more information in this regard refer to chapter Reversing the DeviceLock Configuration. 2. Once the above configuration is done, please perform the configuration of the Authentication Methods on the Xerox device Configuring Authentication Methods To enable the User Name / Password and PIN authentication methods, Xerox Secure Access needs to be configured as the authentication system for the device UI. 1. Go to Properties > Security > Authentication Configuration. 46

59 2. Under Login Type select Xerox Secure Access. 3. Go to Properties > Security > Remote Authentication Servers > Xerox Secure Access Settings. 4. Activate the Enabled checkbox for Local Login and then click Apply. Locking the Service Paths 1. Go to Properties > Security > Authentication Configuration. 47

60 2. Then, click Next. 3. Select Locked from the select box for Services Pathway. 4. Then, click Apply. Restart the device to apply these settings. 48

61 Reversing the DeviceLock Configuration If the Device Lock Configuration is not used anymore, it is of utmost importance to perform the following steps. Otherwise, the DeviceLock on the Xerox device will still be active. Make sure to disable DeviceLock for the corresponding machine in uniflow as well. Disable Xerox Secure Access 1. Navigate to Properties > Security > Remote Authentication Servers > Xerox Secure Access Settings. 2. Change Login Type to Local Device Authentication. 3. Select the Disable checkbox for Local Login and then click Apply. Unlock Service Pathway 1. Go to Properties > Security > Authentication Configuration. 2. Then, click on Next. 3. Select Unlocked from the checkbox for Service Pathway. 4. Then, click Apply. Restart the device to apply these settings. 49

62 11 WorkCentre 59xx / 7220 series 11.1 Preparing the Device for the Applet 1. Locate and open Internet Explorer. 2. Enter the IP address of the Xerox device you wish to install the applet on into the address bar located at the top of the Internet Explorer window and press Enter. In case the authentication window does not pop up, please ensure to disable the Enhanced Protected Mode in Internet Explorer. If the web interface opens immediately, please make sure to login as administrator by clicking on Login in the upper right corner of the web page. 3. Enter an administrator user name and password (default username: admin, password: 1111, otherwise please refer to the device manual) and click OK. 50

63 4. Once you have successfully logged in, the web interface of the device will open on the Status page of the device. 5. Navigate to Properties > Security > Certificates > Security Certificates. If under the tab Xerox Device Certificate no certificate is displayed, please select Create New Xerox Device Certificate. 6. Confirm the pop-up with OK. 51

64 7. Fill in the required data and select Finish. 8. If successful, the Security Certificates page is displayed again and the certificate is displayed under the tab Xerox Device Certificate. 9. Navigate to Properties > General Setup > Extensible Service Setup. 10. Under Browser Settings, make sure Enable the Extensible Service Browser is checked. Confirm by clicking Apply. 11. Under Setup (Required), make sure Extensible Services Registration is Configured. If not, press the Edit... button next to it. 52

65 12. A list of Web Services is displayed. Click on the check box under Enable for Extensible Service Registration and then on Save on the bottom of the page. 13. If configured correctly, Configured will be displayed in the Extensible Services Registration field. 14. Once complete, log out and proceed with the next step to install the applet on the device. 53

66 11.2 Enabling SSL on the Device 1. Open the configuration page of the Xerox device by entering the IP address of the device into the address bar of your Internet Explorer. 2. Go to Properties > Connectivity > Setup. 3. Find HTTP in the list and click on Edit... on the far right of it. 4. Ensure that Force Traffic over SSL is set to Yes (All HTTP requests will be switched to HTTPS) on port

67 11.3 Installation of the Applet on the Device 1. Click on the shortcut named Xerox Application Registration Tool that was created on your desktop during installation of the Xerox client. 2. The Xerox Application Registration Tool will open in your browser. Alternatively, you can enter the following URL into the address bar of your browser: ADDRESS OF THE XEROX CLIENT>:2506/Install/Install.aspx. The IP address is the IP of the computer or server where the Xerox Client has been installed. 3. Enter the DNS or IP address and the administrator User Name and Password of the device. 4. Leave every checkbox at their defaults (all checked). 55

68 5. Click Connect. 6. If the connection is successful, the URL and API version fields are populated. 56

69 7. By clicking List, a list of already configured applications is displayed. 8. Clicking Create New in the Xerox Application Registration Tool will bring you to the below screen. Enter the following application details. The Registration name, the Service Url and the Vendor are mandatory fields. The options under Service Capabilities can be left at their defaults. o Registration name (mandatory): The name that is displayed in the list of installed applications. o Service Url (mandatory): The URL to access the Xerox Client. ( ADDRESS OF THE XEROX CLIENT>:2506/StartupScreen.aspx) o Description Url: The URL of the XML file which contains the name of the application that will be displayed on the Xerox device ( ADDRESS OF THE XEROX CLIENT>:2506/description.xml). You can find this XML file in the Xerox client installation folder and edit it to change the displayed name of the application. This field can be left empty. o Small Icon Url: The URL of the image that will be displayed on the device as the icon for the installed application. Corresponding image files have to be put in the Xerox client installation folder. This field can be left empty. o Large Icon Url: The URL of the image that will be displayed on the device as the icon for the installed application. Corresponding image files have to be put in the Xerox client installation folder. This field can be left empty. 57

70 o Vendor (mandatory): Here you can enter a manufacturer s/dealer s name. If the registration tool shows the option First Generation Browser, leave it unchecked. If you have already saved a configuration file in XML format, you can upload this XML file using the field Load from XML. Simply browse for the file, select it and click Load. 9. Once you have entered the configuration settings, click Create. 10. The following message box pops up. You have to perform the settings mentioned in this message, if you are using the Device Lock functionality. Please refer to chapter Device Lock Configuration for detailed information in this regard. 58

71 11. After you have configured an application, it will appear in the Application Name list. 12. You can use the Set as Default button to set the selected application as the default application on the device Configuration in uniflow Before you can use the uniflow Embedded Applet for Xerox, you have to configure the printer the applet has been installed on in uniflow. To do so, go to uniflow Server Configuration > Printer / Scanner > Wizards, choose Secure Print - Multi-Vendor Output Printer and follow the on-screen instructions. For uniflow versions lower than V5.4, you have to configure the printer manually. For more information on how to do so, please refer to Advanced Configuration > Embedded Applets > Xerox in the uniflow User Manual: uniflow V5.2 ( uniflow V5.3 ( 59

72 11.5 Device Lock Configuration To allow for a secure job release on the device the device has to be locked for unauthenticated access. Only after authentication at the device with the authentication method(s) specified on the Xerox device and in uniflow Server Configuration > Connections > Agents/Terminals > EAI > General Configuration, users can access and release their print jobs. To achieve the device lock follow the steps described in the following Enabling the DeviceLock in uniflow 1. Enable the DeviceLock flag in uniflow Server Configuration > Connections > Agents/Terminals > EAI > General Configuration. Important: When DeviceLock has been configured on the uniflow server, the Xerox device will apply the device lock automatically by changing the logon method on the device from Local authentication to XSA (Xerox Secure Access) After enabling the DeviceLock in uniflow, please reboot the device! In case you disable the DeviceLock in uniflow, you have to manually reset some device settings. For more information in this regard refer to chapter Reversing the DeviceLock Configuration. 2. Once the above configuration is done, please perform the configuration of the Authentication Methods on the Xerox device Configuring Authentication Methods To enable the User Name / Password and PIN authentication methods, Xerox Secure Access needs to be configured as the authentication system for the device UI. 1. Go to Properties > Login / Permissions / Accounting > Login Methods. 60

73 2. Under Touch and Web User Interfaces, click the yellow edit button. 3. Under Touch UI Method, select Xerox Secure Access Unified ID System. 4. Click Save. 5. You are returned to the Login Methods page. Find Xerox Secure Access Setup in the list below and click on Edit... 61

74 6. Scroll down and click on Manually Override Settings. 7. Under Server Communication, check IPv4 Address and enter the IP address of the computer the Xerox Client was installed on and the port Under Path, enter /AuthServer.asmx 9. Under Device Log In Methods, make sure Xerox Secure Access Device + alternate on-screen authentication method is checked. 10. Click Save. 62

75 Locking the Service Paths 1. Navigate to Properties > Login / Permissions / Accounting > User Permissions. 2. Find User Permissions Roles in the list and click on Edit... next to it. 3. Under Non-Logged-In User, click on Edit Click on Services & Tools. 5. Under Services Pathway, select Not Allowed. 63

76 6. Click Apply. Restart the device to apply these settings Reversing the DeviceLock Configuration If the Device Lock Configuration is not used anymore, it is of utmost importance to perform the following steps. Otherwise, the DeviceLock on the Xerox device will still be active. Make sure to disable DeviceLock for the corresponding machine in uniflow as well. Disable Local Login 1. Go to Properties > Login / Permissions / Accounting > Login Methods. 2. Under Touch and Web User Interfaces, click the yellow edit button. 3. Under Touch UI Method, select User Name / Password - Validate on the Device. 4. Click Save. Unlock Service Pathway 1. Navigate to Properties > Login / Permissions / Accounting > User Permissions. 2. Find User Permissions Roles in the list and click on Edit... next to it. 3. Under Non-Logged-In User, click on Edit... 64

77 4. Click on Services & Tools. 5. Under Services Pathway, select Allowed. 6. Click Apply. Restart the device to apply these settings. 65

78 12 WorkCentre 75xx Series 12.1 Preparing the Device for the Applet 1. Locate and open Internet Explorer. 2. Enter the IP address of the Xerox device you wish to install the applet on into the address bar located at the top of the Internet Explorer window and press Enter. In case the authentication window does not pop up, please ensure to disable the Enhanced Protected Mode in Internet Explorer. If the web interface opens immediately, please make sure to login as administrator by clicking on Login in the upper right corner of the web page. 3. Enter an administrator user name and password (default username: admin, password: 1111, otherwise please refer to the device manual) and click OK. 66

79 4. Once you have successfully logged in, the web interface of the device will open on the Status page of the device. 5. Navigate to Properties > Security > Certificates > Security Certificates. If under the tab Xerox Device Certificate no certificate is displayed, please select Create New Xerox Device Certificate. 6. Confirm the pop-up with OK. 67

80 7. Fill in the required data and select Finish. 8. If successful, the Security Certificates page is displayed again and the certificate is displayed under the tab Xerox Device Certificate. 9. Navigate to Properties > General Setup > Extensible Service Setup 10. Under Browser Settings, make sure Enable the Extensible Service Browser is checked. Confirm by clicking Apply. 11. Under Setup (Required), make sure Extensible Services Registration is Configured. If not, press the Edit... button next to it. 68

81 12. A list of Web Services is displayed. Click on Enable All and then on Save on the bottom of the page. 13. If configured correctly, Configured will be displayed in the Extensible Services Registration field. 14. Once complete, log out and proceed with the next step to install the applet on the device. 69

82 12.2 Enabling SSL on the Device 1. Open the configuration page of the Xerox device by entering the IP address of the device into the address bar of your Internet Explorer. 2. Go to Properties > Connectivity > Protocols > HTTP. 3. Ensure that Secure HTTPS is Enabled on port Installation of the Applet on the Device 1. Click on the shortcut named Xerox Application Registration Tool that was created on your desktop during installation of the Xerox client. 2. The Xerox Application Registration Tool will open in your browser. Alternatively, you can enter the following URL into the address bar of your browser: ADDRESS OF THE XEROX CLIENT>:2506/Install/Install.aspx. The IP address is the IP of the computer or server where the Xerox Client has been installed. 70

83 3. Enter the DNS or IP address and the administrator User Name and Password of the device. 4. Leave every checkbox at their defaults (all checked). 5. Click Connect. 71

84 6. If the connection is successful, the URL and API version fields are populated. 7. By clicking List, a list of already configured applications is displayed. 8. Clicking Create New in the Xerox Application Registration Tool will bring you to the below screen. Enter the following application details. The Registration name, the Service Url and the Vendor are 72

85 o o o o o o mandatory fields. The options under Service Capabilities can be left at their defaults. Registration name (mandatory): The name that is displayed in the list of installed applications. Service Url (mandatory): The URL to access the Xerox Client. ( ADDRESS OF THE XEROX CLIENT>:2506/StartupScreen.aspx) Description Url: The URL of the XML file which contains the name of the application that will be displayed on the Xerox device ( ADDRESS OF THE XEROX CLIENT>:2506/description.xml). You can find this XML file in the Xerox client installation folder and edit it to change the displayed name of the application. This field can be left empty. Small Icon Url: The URL of the image that will be displayed on the device as the icon for the installed application. Corresponding image files have to be put in the Xerox client installation folder. This field can be left empty. Large Icon Url: The URL of the image that will be displayed on the device as the icon for the installed application. Corresponding image files have to be put in the Xerox client installation folder. This field can be left empty. Vendor (mandatory): Here you can enter a manufacturer s/dealer s name. If the registration tool shows the option First Generation Browser, leave it unchecked. 73

86 If you have already saved a configuration file in XML format, you can upload this XML file using the field Load from XML. Simply browse for the file, select it and click Load. 9. Once you have entered the configuration settings, click Create. 10. The following message box pops up. You have to perform the settings mentioned in this message, if you are using the Device Lock functionality. Please refer to chapter Device Lock Configuration for detailed information in this regard. 11. After you have configured an application, it will appear in the Application Name list. 12. You can use the Set as Default button to set the selected application as the default application on the device Configuration in uniflow Before you can use the uniflow Embedded Applet for Xerox, you have to configure the printer the applet has been installed on in uniflow. To do so, go to uniflow Server Configuration > Printer / Scanner > Wizards, choose Secure Print - Multi-Vendor Output Printer and follow the on-screen instructions. 74

87 For uniflow versions lower than V5.4, you have to configure the printer manually. For more information on how to do so, please refer to Advanced Configuration > Embedded Applets > Xerox in the uniflow User Manual: uniflow V5.2 ( uniflow V5.3 ( Device Lock Configuration To allow for a secure job release on the device the device has to be locked for unauthenticated access. Only after authentication at the device with the authentication method(s) specified on the Xerox device and in uniflow Server Configuration > Connections > Agents/Terminals > EAI > General Configuration, users can access and release their print jobs. To achieve the device lock follow the steps described in the following Enabling the DeviceLock in uniflow 1. Enable the DeviceLock flag in uniflow Server Configuration > Connections > Agents/Terminals > EAI > General Configuration. Important: When DeviceLock has been configured on the uniflow server, the Xerox device will apply the device lock automatically by changing the logon method on the device from Local authentication to XSA (Xerox Secure Access) After enabling the DeviceLock in uniflow, please reboot the device! In case you disable the DeviceLock in uniflow, you have to manually reset some device settings. For more information in this regard refer to chapter Reversing the DeviceLock Configuration. 2. Once the above configuration is done, please perform the configuration of the Authentication Methods on the Xerox device Configuring Authentication Methods To enable the User Name / Password and PIN authentication methods, Xerox Secure Access needs to be configured as the authentication system for the device UI. 1. Go to Properties > Security > Authentication > Setup. 75

88 2. Under Authentication, Authorization, and Personalization, click Edit Under Authentication method on the machine's touch interface (Touch UI), select Xerox Secure Access Unified ID System. 4. Click Save. 5. You are returned to the Xerox Access Setup page. Find Xerox Secure Access Setup in the list below and click on Edit... 76

89 6. Scroll down and click on Manually Override Settings. 7. Under Server Communication, check IPv4 Address and enter the IP address of the computer the Xerox Client was installed on and the port Under Path, enter /AuthServer.asmx 9. Under Device Log In Methods, make sure Xerox Secure Access Device + alternate on-screen authentication method is checked. 10. Click Save. 77

90 Locking the Service Paths 1. Navigate to Properties > Security > Authentication > Tools & Feature Access. 2. Under Services Pathway, select Locked. 3. Click Apply. Restart the device to apply these settings Reversing the DeviceLock Configuration If the Device Lock Configuration is not used anymore, it is of utmost importance to perform the following steps. Otherwise, the DeviceLock on the Xerox device will still be active. Make sure to disable DeviceLock for the corresponding machine in uniflow as well. Disable Xerox Secure Access 1. Go to Properties > Security > Authentication > Setup. 2. Under Authentication, Authorization, and Personalization, click Edit Under Authentication method on the machine's touch interface (Touch UI), select User Name / Password Validated Locally on the Xerox Machine. 4. Click Save. 78

91 Unlock Service Pathway 1. Navigate to Properties > Security > Authentication > Tools & Feature Access. 2. Under Services Pathway, select Unlocked. 3. Click Apply. Restart the device to apply these settings. 79

92 13 WorkCentre Preparing the Device for the Applet 1. Locate and open Internet Explorer. 2. Enter the IP address of the Xerox device you wish to install the applet on into the address bar located at the top of the Internet Explorer window and press Enter. In case the authentication window does not pop up, please ensure to disable the Enhanced Protected Mode in Internet Explorer. If the web interface opens immediately, please make sure to login as administrator by clicking on Login in the upper right corner of the web page. 3. Enter an administrator user name and password (default username: admin, password: 1111, otherwise please refer to the device manual) and click OK. 80

93 4. Once you have successfully logged in, the web interface of the device will open on the Status page of the device. 5. Navigate to Properties > Security > Certificates > Security Certificates. If under the tab Xerox Device Certificate no certificate is displayed, please select Create New Xerox Device Certificate. 6. Confirm the pop-up with OK. 81

94 7. Fill in the required data and select Finish. 8. If successful, the Security Certificates page is displayed again and the certificate is displayed under the tab Xerox Device Certificate. 9. Navigate to Properties > General Setup > Custom Service Setup. 10. Under Browser Settings, make sure Enable the Custom Services Browser is checked. Confirm by clicking Apply. 11. Under Enable Custom Services, make sure Display Custom Services Selection Button at the local user interface is checked. Confirm by clicking Apply. 12. Under Setup (Required), make sure Custom Service Registration is Configured. If not, press the Edit... button next to it. 82

95 13. A list of Web Services is displayed. Click on Enable All and then on Save on the bottom of the page. 14. If configured correctly, Configured will be displayed in the Custom Service Registration field. 15. Once complete, log out and proceed with the next step to install the applet on the device. 83

96 13.2 Enabling SSL on the Device 1. Open the configuration page of the Xerox device by entering the IP address of the device into the address bar of your Internet Explorer. 2. Go to Properties > Connectivity > Protocols > HTTP. 3. Ensure that Secure HTTP (SSL) is Enabled on port Installation of the Applet on the Device 1. Click on the shortcut named Xerox Application Registration Tool that was created on your desktop during installation of the Xerox client. 2. The Xerox Application Registration Tool will open in your browser. Alternatively, you can enter the following URL into the address bar of your browser: ADDRESS OF THE XEROX CLIENT>:2506/Install/Install.aspx. The IP address is the IP of the computer or server where the Xerox Client has been installed. 84

97 3. Enter the DNS or IP address and the administrator User Name and Password of the device. 4. Leave every checkbox at their defaults (all checked). 5. Click Connect. 85

98 6. If the connection is successful, the URL and API version fields are populated. 7. By clicking List, a list of already configured applications is displayed. 8. Clicking Create New in the Xerox Application Registration Tool will bring you to the below screen. Enter the following application details. The Registration name, the Service Url and the Vendor are 86

99 o o o o o o mandatory fields. The options under Service Capabilities can be left at their defaults. Registration name (mandatory): The name that is displayed in the list of installed applications. Service Url (mandatory): The URL to access the Xerox Client. ( ADDRESS OF THE XEROX CLIENT>:2506/StartupScreen.aspx) Description Url: The URL of the XML file which contains the name of the application that will be displayed on the Xerox device ( ADDRESS OF THE XEROX CLIENT>:2506/description.xml). You can find this XML file in the Xerox client installation folder and edit it to change the displayed name of the application. This field can be left empty. Small Icon Url: The URL of the image that will be displayed on the device as the icon for the installed application. Corresponding image files have to be put in the Xerox client installation folder. This field can be left empty. Large Icon Url: The URL of the image that will be displayed on the device as the icon for the installed application. Corresponding image files have to be put in the Xerox client installation folder. This field can be left empty. Vendor (mandatory): Here you can enter a manufacturer s/dealer s name. If the registration tool shows the option First Generation Browser, leave it unchecked. 87

100 If you have already saved a configuration file in XML format, you can upload this XML file using the field Load from XML. Simply browse for the file, select it and click Load. 9. Once you have entered the configuration settings, click Create. 10. The following message box pops up. You have to perform the settings mentioned in this message, if you are using the Device Lock functionality. Please refer to chapter Device Lock Configuration for detailed information in this regard. 11. After you have configured an application, it will appear in the Application Name list. 12. You can use the Set as Default button to set the selected application as the default application on the device Configuration in uniflow Before you can use the uniflow Embedded Applet for Xerox, you have to configure the printer the applet has been installed on in uniflow. To do so, go to uniflow Server Configuration > Printer / Scanner > Wizards, choose Secure Print - Multi-Vendor Output Printer and follow the on-screen instructions. 88

101 For uniflow versions lower than V5.4, you have to configure the printer manually. For more information on how to do so, please refer to Advanced Configuration > Embedded Applets > Xerox in the uniflow User Manual: uniflow V5.2 ( uniflow V5.3 ( Device Lock Configuration To allow for a secure job release on the device the device has to be locked for unauthenticated access. Only after authentication at the device with the authentication method(s) specified on the Xerox device and in uniflow Server Configuration > Connections > Agents/Terminals > EAI > General Configuration, users can access and release their print jobs. To achieve the device lock follow the steps described in the following Enabling the DeviceLock in uniflow 1. Enable the DeviceLock flag in uniflow Server Configuration > Connections > Agents/Terminals > EAI > General Configuration. Important: When DeviceLock has been configured on the uniflow server, the Xerox device will apply the device lock automatically by changing the logon method on the device from Local authentication to XSA (Xerox Secure Access) After enabling the DeviceLock in uniflow, please reboot the device! In case you disable the DeviceLock in uniflow, you have to manually reset some device settings. For more information in this regard refer to chapter Reversing the DeviceLock Configuration. 2. Once the above configuration is done, please perform the configuration of the Authentication Methods on the Xerox device Configuring Authentication Methods To enable the User Name / Password and PIN authentication methods, Xerox Secure Access needs to be configured as the authentication system for the device UI. 1. Go to Properties > Security > Authentication > Setup. 89

102 2. Under Authentication, Authorization, and Personalization, click Edit Under Authentication method on the machine's touch interface (Touch UI), select Xerox Secure Access Unified ID System. 4. Click Save. 5. You are returned to the Xerox Access Setup page. Find Xerox Secure Access Setup in the list below and click on Edit... 90

103 6. Click on Manually Configure. 7. Under Server Communication, check IPv4 Address and enter the IP address of the computer the Xerox Client was installed on and the port Under Path, enter /AuthServer.asmx. 9. Under Device Log In Methods, make sure Xerox Secure Access Device + alternate on-screen authentication method is checked. 10. Click Save. Locking the Service Paths 1. Navigate to Properties > Security > Authentication > Tools & Feature Access. 2. Under Services Pathway, select Locked. 3. Click Apply. 91

104 Restart the device to apply these settings Reversing the DeviceLock Configuration If the Device Lock Configuration is not used anymore, it is of utmost importance to perform the following steps. Otherwise, the DeviceLock on the Xerox device will still be active. Make sure to disable DeviceLock for the corresponding machine in uniflow as well. Disable Xerox Secure Access 1. Go to Properties > Security > Authentication > Setup. 2. Under Authentication, Authorization, and Personalization, click Edit Under Authentication method on the machine's touch interface (Touch UI), select User Name / Password Validated Locally on the Xerox Machine. 4. Click Save. Unlock Service Pathway 1. Navigate to Properties > Security > Authentication > Tools & Feature Access. 92

105 2. Under Services Pathway, select Unlocked. 3. Click Apply. Restart the device to apply these settings. 93

106 14 Using the Applet With the application running, you will now be able to use the software once you have logged in. You can log in by using a device card or pin code. All device features except power save will remain locked until you have logged in. If using a card, simply swipe the card against a device s card reader. Provided your credentials are accepted, the Secure Queue screen will be displayed (see 3.). 1. If you do not have card access, please log in with a PIN Code by touching the PIN Code button. If you have device lock enabled, the screen is different than the one shown below. In this case, you have to hit the Alternate Login button and enter you credentials in the following screen. 2. Having touched the PIN Code button, enter your PIN Code via the device s number pad. Alternatively, you can tap use the virtual keyboard of the device. This keyboard opens when you tap in the PIN Code field. Once you have entered the PIN, touch Login. If you have entered a wrong PIN code, press C on the device s number pad to delete the PIN code. 94

107 Once the login has been successful, you will see the Secure Queue screen. Here you can perform the main application functions. 3. Once the login has been successful, you will see the Secure Queue screen. Here you can perform the main application functions. o Print + Keep: Output from device and retain job in queue. o Print + Delete: Output from device and delete job from queue. o Delete: Delete job from queue. o Refresh: Refreshes view of print queue and returns to top of list. o Select All: Selects entire queue. 95

108 4. Multiple jobs from multiple pages can be selected at one time by simply selecting them on screen. Once a selection has been made, you can use the function buttons. 5. Touching Delete with a minimum of one job being selected will trigger a confirmation screen. Simply press OK to confirm that you wish to delete the selected jobs from the queue. To unselect and therewith prevent a job from being deleted, touch the job. If you touch OK only the selected jobs will be deleted. Touching Cancel will guide you back to the Secure Queue. 6. Touching Select All will select all jobs in the queue. You can unselect all jobs by touching Clear Fields. Alternatively, you can select Select All and then unselect individual jobs that you do not wish to be printed. 96

109 7. Finally, touch Logout to get back to the login screen. 15 Uninstallation of the Applet 1. Locate and open Internet Explorer. 2. Enter the following URL into the address bar: ADDRESS OF THE XEROX CLIENT>:2506/Install/Install.aspx The IP address is the IP of the computer or server where the Xerox Client has been installed. 97

110 3. The Xerox Application Registration Tool will open. 4. Enter the DNS or IP address and the administrator User Name and Password of the device. Then, click Connect. 98

111 5. If the connection is successful, the URL and API version fields are populated. 6. By clicking List, a list of already configured applications is displayed. 7. Select the application you wish to uninstall from the application list and click Delete. 99

112 16 Trouble Shooting There are no known issues. However, should you encounter a problem, uninstall the application completely, restart the machine and re-install the application using the instructions above as a guideline. If problems persist, then contact your distributor. How can I check which version of the uniflow Embedded Applet for Xerox is currently installed? There is no way of checking the version of the applet currently installed on the device. However, you can check the version of the installed Xerox Client. To check the currently installed version of the Xerox Client, do the following: 1. On the system, where the client is installed, navigate to Control Panel > Programs and Features and find Xerox Client in the list of installed programs. 2. The version of the client is displayed in the Version tab Log File The current version does not support log file based support Network Communication Ports Software Network Communication Ports: 2506 and 2507 (SSL). All communication between uniflow server, Xerox Client software and Xerox device takes place via port Authentication messages (when the DeviceLock is on) between Xerox Client software and Xerox device take place via port Remote Operation The Xerox device touch screen can be operated remotely within a web browser using Java technology. A recent version of Java has to be present on the computer. 1. Open the web interface of the device in your browser. 100

113 2. Browse to the tab Support and open Remote Control Panel. 3. Click on Open Remote Control Panel. 4. In the new window enter the administrator credentials and click on Login. 5. When the connection is established, the touchscreen interface of the device is shon in a new window and you can use the mouse to control the device remotely. 101