PaperCut Lexmark Embedded Manual

Transcription

1 PaperCut Lexmark Embedded Manual Cntents 1 Versin histry Overview Cnsistency Integratin Rate f develpment Vendr Neutral Security Installatin Requirements Supprted mdels Setup Prcedure PaperCut Settings Chsing Embedded Applicatin Versin Installing the Embedded Applicatin Setting Lgin Timeut Setting Lgut Timeut Disabling Held Jbs Security Lck-Dwn Additinal Netwrk Security (ptinal) Upgrading t a newer versin Pst-install testing Test Preparatin Scenari 1: Standard cpying Scenari 2: Cpying with accunt selectin Scenari 3: Print release Scenari 4: Scanning Cnfiguratin Device Functin Scan Center Netwrk flders using user credentials Netwrk flder using a service accunt... 21

2 5.3 Authenticatin Methds Shared Accunt Selectin Custmizing Text and Messages Tracking Jbs frm Nn-Standard Applicatins Autmatic Sign-On t Applicatins Cnfiguring Applicatin Access Cntrls with PaperCut Security Templates (LeSF 4.4 and earlier devices) Allwing multiple applicatins using PaperCut Security Templates access t user data (LeSF 4.4 and earlier devices) Cnfiguring Applicatin Access thrugh the PaperCut MF Applicatin Server (LeSF 5.0+ devices) Advanced Cnfiguratin Cnfig Editr Custmizing the Header Lgs and Clrs Custmized Lgs Custm Header Clr Cnfiguring Swipe Card Readers Card Number Needs N Cnversin Regular Expressin Filters Card Number Frmat Cnverters Standard Cnverters Using custm JavaScript Other advanced ntes Blck the release f jbs t a device in errr Knwn Limitatins and Security Knwn Limitatins Security cncerns FAQ & Trubleshting A. Appendix: Supprted Authenticatin Card Readers B. Appendix: Screenshts fr User Infrmatin Sheets Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 2 f 44

3 1 Versin histry PaperCut MF versin Date Details May Requirements; Security Lck-Dwn; 5.2 Scan Center; 5.3 Authenticatin Methds; 6.1 Cnfig Editr April Setting Lgut Timeut; 6.1 Cnfig Editr Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 3 f 44

4 2 Overview This manual cvers the Lexmark embedded MFD setup. Fr general PaperCut MF dcumentatin, please see the PaperCut MF manual. Nte: Lexmark and LeSF are Trademarks f Lexmark, USA. PaperCut is slely respnsible fr the cntents f this publicatin and the perfrmance f PaperCut's prducts. This manual prvides an verview f the installatin, cnfiguratin and peratin f PaperCut s embedded sftware MFD (Multi-Functin Device) slutins. Tday s MFDs are smarter they have tuch screens and ffer the ability t run applicatins directly n the device. The gal f PaperCut Sftware s embedded MFD slutin is t leverage these smart devices and t prvide walk-up cpier users with the same set f rich applicatin features prvided in the print cntrl area. These include: Secure functin access via user authenticatin (including integratin with single sign-n envirnments) Mnitring and cntrl f phtcpying, scanning, faxing and USB printing (silent tracking, qutas, charging, allcatin and lgging) Allcatin f cpying, scanning and faxing t accunts/departments/cst-centers/prjects Ability t lcate shared accunts via select-frm-list, keywrd search r manual cde/pin entry Release jbs frm a hld/release queue (Secure & Find Me Printing) Grup based access cntrl: Limit access t clr cpying r t the device as a whle t selected user grups. Highlights f the embedded slutin include: 2.1 Cnsistency The embedded slutins are develped in-huse by the PaperCut Sftware develpment team. This ensures that the cpier interface is cnsistent with the wrkstatin print interface, meaning users nly have t learn ne system. 2.2 Integratin PaperCut is a single integrated slutin where print, internet and cpier cntrl are all managed in the ne system. Users have a single accunt and administratrs have the same level f reprting and administratin fr all services. The embedded slutin interacts with the PaperCut server using a Service Oriented Architecture (SOA) and web services based prtcls. 2.3 Rate f develpment PaperCut is develped under a release-ften plicy where new features are made available t users as sn as they are cmplete. Unlike hardware based slutins, new versins can be delivered t users regularly as sftware updates. 2.4 Vendr Neutral PaperCut remains true t its vendr neutral stance. All embedded slutins are equal and supprt all server perating systems including Windws, Linux, Mac and Nvell. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 4 f 44

5 2.5 Security A large percentage f PaperCut s user base is in educatin envirnments where security is imprtant. All embedded slutins are develped with security in mind. Where security bjectives cannt be satisfied, any deficiencies are fully disclsed. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 5 f 44

6 3 Installatin This sectin cvers the installatin f the PaperCut embedded applicatin fr cmpatible Lexmark devices. The embedded applicatin will allw the cntrl, lgging and mnitring f walk-up ff-theglass cpier usage and may serve as a release statin fr netwrk prints (fr infrmatin n just tracking netwrk printing see the PaperCut user manual). 3.1 Requirements Ensure that the fllwing pints are checked ff befre getting started: The latest versin f PaperCut MF is installed and running n the netwrk. Fr mre infrmatin, see the PaperCut MF manual. Nte: The minimum cmpatible versin is r later. Ensure that yur Lexmark device supprts LeSF versin 1.2 r later. Check the device lists in All devices are certified with latest available firmware and hard disk sizes. Have available the netwrk name and IP address f the system running PaperCut (e.g. the print server). Make sure the netwrk (firewalls, ruters etc.) allws TCP cnnectins n prts 9191, 9192 and 9193 frm the device t the PaperCut server. Ensure that the Lexmark MFD is cnnected t the netwrk Supprted mdels Integratin is supprted fr cmpatible Lexmark devices. Fr a list f supprted mdels, see Please check with yur lcal Lexmark supplier that yur devices are running an up t date firmware versin. 3.2 Setup Prcedure PaperCut Settings 1. Lg in t the PaperCut administratin interface using a web brwser (e.g. ). 2. Navigate t Optins -> Advanced and ensure the ptin Enable external hardware integratin is enabled. 3. Press Apply Chsing Embedded Applicatin Versin PaperCut ffers tw versins f the Lexmark Embedded applicatin, targeted at different versins f the Lexmark embedded services framewrk (LeSF). Yu must install the versin f the applicatin suited t yur Lexmark device. The fllwing applicatins are available: papercut-les12.fls fr LeSF versin 1.2 devices Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 6 f 44

7 papercut-les21.fls fr LeSF versin 2.1+ The files are lcated under yur PaperCut installatin directry n the server, in the subdirectry [app-path]/prviders/hardware/lexmark Installing the Embedded Applicatin Web installatin prvides a cnvenient way t install the embedded applicatin. It can be dne remtely n multiple devices using just a web brwser. T install the applicatin, perfrm the fllwing steps: 1. Turn n the Lexmark device. 2. On a cmputer, pen yur web brwser 3. Enter the URL f the Lexmark device. E.g On devices up t LeSF 4.4: a. Select the Settings menu ptin frm the left (als called Cnfiguratin n lder devices). b. Select Embedded Slutins. On newer devices this is called Device Slutins instead. Sme devices have Apps Management. c. If yur slutin page is called Device Slutins, select Slutins (esf) n it. D nt select Additinal Slutins. 5. On LeSF 5+ devices: a. Select the Apps menu ptin frm the left. 6. Click the Install / install an app / Install a New App buttn. 7. Click Brwse ; then select the apprpriate applicatin FLS file. 8. Click Start Install / Install. (On Pre-LeSF5 devices) A cnfirmatin message will appear. 9. Click Return t return t the Embedded Slutins list. The list shuld nw shw an item labeled PaperCut with State indicated as Running. 10. Click the PaperCut item. 11. Click Cnfigure. 12. Enter a unique device name (such as Lexmark 1 r Library Cpier ) that will later appear in PaperCut MF s list f devices. Yu can use the placehlder %SERIALNUMBER% at any place in the device name t have the device substitute its serial number int the device name. This autmatically makes the device name unique and is useful fr autmated deplyments e.g. via Lexmark s VSC. 13. Enter the PaperCut server s hstname r IP address under Server Hstname. Yu may need t use the IP address if DNS is nt able t reslve the server name crrectly. 14. Leave all ther settings at their defaults and click Apply. The device will attempt t cnnect t the PaperCut server. Once successful, yu may need t accept the server's SSL certificate. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 7 f 44

8 Check that the SHA-1 fingerprint matches the server's certificate. Yu can als see the certificate details by hvering ver the Fingerprint questin mark (?) icn. See the Trubleshting SSL sectin f the PaperCut MF manual fr details n viewing server certificates. 15. Press the 'Accept' buttn t permanently accept the server certificate. The device will attempt t cnnect t the server with the accepted certificate. 16. Once cnnected, the PaperCut lgin screen will display n the device. 17. The Lexmark device is displayed in the PaperCut Admin web interface under the Devices tab with the name yu prvided in the steps abve. It will be created using the cst settings f the [Template Printer] n the Printers tab. 18. The embedded applicatin is nw successfully installed. T use the phtcpier, the users must lgin t the applicatin, and any cpying they perfrm will be lgged in PaperCut Setting Lgin Timeut When cnfigured, the native device s Screen Timeut supersedes PaperCut inactivity timeut (See the cnfig key ext-device.inactivity-timeut-secs in Cnfig Editr). The lcatin f the native device s Screen Timeut setting is different fr every platfrm. On Gen 5 devices (Andrid), it can be fund in: Settings > Device > Preferences > Screen Timeut. On Gen4 devices (Nn-andrid), it can be fund in: Settings > General Settings > Timeuts > Screen Timeut. While n Andrid devices, the user is lgged ut f the device entirely, n nn-andrid devices, the user is nly exited frm the current screen and returned t the hme screen (like the PaperCut inactivity timeut). Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 8 f 44

9 3.2.5 Setting Lgut Timeut After lgging int the device, the device shws the Hme screen, which presents the available functins, such as, cpying, scanning, and faxing. This screen is als displayed after the cmpletin f each functin. Nte: By default, all nn-andrid Lexmark devices, and Andrid devices with firmware TE363 r abve, return t the lgin screen after a timeut f 5 secnds, requiring the user t g thrugh the lgin prcedure again. Andrid devices with firmware prir t TE363 may nt return t the Hme screen. We recmmend setting this timeut t 10 secnds, respecting the fllwing cnsideratins: On ne hand, the timeut shuld be lng enugh t prvide the user with time t cntemplate whether t cntinue using the device and which functin t select. On the ther hand, the timeut shuld be shrt enugh t prevent tailgating, i.e. after a user walks away frm the device anther user shuld nt be able t walk up t it and cntinue using it with the previus user s lgin credentials. T set the timeut t a different value n an LeSF versin 1.2 device: 1. Access the Lexmark web admin interface under 2. On the left-hand menu bar, select Cnfiguratin. 3. Select Security. 4. Under Aut Lg ut delay, enter a new value, such as, 10 ; then click Submit. T set the timeut t a different value n an LeSF versin 2.1+ device: 1. Access the Lexmark web admin interface under 2. Select Settings n the left-hand menu bar. 3. Select General Settings under Default Settings. 4. Select Timeuts. 5. Change Screen Timeut t an apprpriate value and click Submit. This is the amunt f time t wait befre returning frm PaperCut t the device Hme screen. 6. On the left-hand menu bar, select Settings 7. Select Security under Other Settings. 8. Select Miscellaneus Security Settings. 9. Select Lgin Restrictins. 10. Change the Panel Lgin Timeut t an apprpriate versin and click Submit. This is the amunt f time t wait befre returning frm the device Hme screen t the PaperCut lgin screen Disabling Held Jbs Lexmark devices prvide a functinality called Held Jbs that verlaps with PaperCut s hld/release queues. Yu shuld deactivate Held Jbs in rder t avid cnfusin with PaperCut MF s print release functins. LeSF 1.2 devices: 1. Access the Lexmark web admin interface under Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 9 f 44

10 2. Select Cnfiguratin n the left-hand menu bar. 3. Select Security. 4. Select Functin Access. 5. Fr Held Jb Access, select Disable. 6. Click Submit. LeSF devices: 1. Access the Lexmark web admin interface under 2. On the left-hand menu bar, select Settings. 3. Select General Settings. 4. Select Hme Screen Custmizatin. 5. Clear Search Held Jbs and Held Jbs. 6. Click Submit. LeSF 5.0+ devices: 1. Access the Lexmark web admin interface under 2. On the left-hand menu bar, select Settings. 3. Select Device. 4. Select Visible Hme Screen Icns. 5. Clear Jb Queue and Held Jbs. 6. Click Save Security Lck-Dwn In rder t prevent unauthrized users frm mdifying essential device settings, such as disabling cpy accunting, a simple security cnfiguratin is recmmended. LeSF 1.2 devices: 1. On the left-hand menu bar, select Cnfiguratin. 2. Select Security. 3. Select Create/Change Passwrd. 4. Select Create Advanced Passwrd. 5. Enter yur desired admin passwrd; then click Submit. This will prevent all menus and settings frm being accessed. 6. T disable any ther features such as FTP, , r Fax a. Select Cnfiguratin. b. Select Functin Access. c. Set all ptins t Functin Disabled except: Cpy Access set t N Authenticatin Required Prfile Access set t N Authenticatin Required This will deny users access t any functins ther than cpying and print release. Yu can revisit this setup later and re-enable ther functins, such as r fax. If yu are uncertain f hw t set a particular feature yu shuld deny access by setting it t N Authenticatin Required, "Require user ID", r "Requires User ID and Passwrd". d. Click Submit. LeSF devices: Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 10 f 44

11 1. Access the Lexmark web admin interface under 2. On the left-hand menu bar, select Settings. 3. Under Other Settings, select Security. 4. Select Edit Security Setups. 5. Select Passwrd. 6. Select Add a Passwrd. 7. In Setup Name, enter Admin enter the same passwrd twice. 8. Click the Admin Passwrd checkbx. 9. Click Submit. 10. Select Return t Edit Security Setups. 11. Select Security Templates. 12. Select Add a Security Template. 13. In Security Template Name, enter Admin. 14. Frm the Authenticatin Setup, chse Admin. 15. Click Save Template. 16. Click Return t Edit Security Setups. 17. Select Access Cntrls. 18. Set all ptins t Admin, r if Admin is nt available, t Disabled except: Operatr Panel Lck set t Disabled Cpy Functin set t N Security Use Prfiles set t N Security This will deny users access t any functins ther than cpying and print release. Yu can revisit this setup later and re-enable ther functins, such as r fax. If yu are uncertain f hw t set a particular feature yu shuld deny access by setting it t Admin r Disabled. 19. Click Submit. LeSF 5.0+ devices: 1. Access the Lexmark web admin interface under 2. On the left-hand menu bar, select Settings > Security. 3. Under Lcal Accunts, click Add User. 4. In Name and User Name, enter Admin. 5. Enter the same passwrd twice. 6. Click the Admin checkbx. 7. Click Save. 8. On the Security menu screen, cnfirm that Additinal Lgin Methds lists a single entry titled PaperCut Authenticatin. 9. On the Default Brwser Lgin ( Change ) link, click Change. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 11 f 44

12 10. Fr Cntrl Panel, select PaperCut Authenticatin. 11. Fr Brwser, select User Name/Passwrd. 12. Click Save. 13. On the Security menu screen, under Public, click Manage Permissins. 14. Clear all checkbxes. 15. Click Save. 16. If yu were nt lgged in as an admin, yu will need t lgin nw, as the previus step remved administrative access fr guests. a. On the screen s tp-right crner, click Lg In. b. In Lgin Methd, select User Name/Passwrd. c. Enter the admin user name and passwrd (created n step 3). d. Click Lg In. 17. The default security prfile lcks access t all but a default set f device functins. Yu can enable additinal functins by cnfiguring the ext-device.lexmark.apprved-actins advanced cnfig key. See Cnfig Editr Additinal Netwrk Security (ptinal) The MFP cmmunicates with the PaperCut server ver the netwrk (e.g. t authenticate users r release print jbs). T prvide an additinal level f security, PaperCut may be cnfigured t nly allw device cnnectins frm a restricted range f netwrk addresses. This ensures that nly apprved devices are cnnected t the PaperCut server. By default, PaperCut will allw device cnnectins frm any netwrk address. T restrict this t a subset f IP addresses r subnets: 1. Lgn t the PaperCut administratin web interface at 2. G t the Optins Advanced tab and find the Security sectin. 3. In the Allwed device IP addresses field enter a cmma-separated list f device IP addresses r subnets (in the frmat <ip-address>/<subnet-mask>). 4. Press the Apply buttn. 5. Test the devices t ensure they can cntinue t cntact the PaperCut server. 3.3 Upgrading t a newer versin The prcedure fr upgrading an existing embedded applicatin t a newer versin is similar t the initial installatin (see sectin 3.2). Please nte that nly the device-level installatin needs t be perfrmed, and yu shuldn't have t perfrm any additinal cnfiguratin within the PaperCut administratr interface. After upgrading, it's wrth quickly checking the Embedded Applicatin's versin number nw matches the expected value. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 12 f 44

13 4 Pst-install testing After cmpleting installatin and basic cnfiguratin it is recmmended t perfrm sme testing f the cmmn usage scenaris. This imprtant fr tw reasns: T ensure that the embedded applicatin is wrking as expected. T familiarize yurself with the features and functinality f PaperCut and the embedded applicatin. This sectin utlines three test scenaris that are applicable fr mst rganizatins. Please cmplete all the test scenaris relevant fr yur site. 4.1 Test Preparatin T cmplete these tests, it is recmmended yu use tw test users s that each can be cnfigured differently. These users are: testusersimple is used t perfrm basic cpier mnitring and cntrl and t perfrm print release tests. testuseradvanced is used t perfrm cpier mnitring and cntrl with the accunt selectin enabled (i.e. t charge cpying t accunts/departments/cst-centers/etc). T setup these users in PaperCut: 1. Create the testusersimple and testuseradvanced users in yur Active Directry r LDAP directry. 2. Lgin t the PaperCut s admin web interface 3. G t the Optins->User/Grup sync page and press Synchrnize Nw. 4. Once the sync is cmplete, the users will be added t PaperCut. The next step is t cnfigure the users. T cnfigure testusersimple : 1. In PaperCut, select the Users tab 2. Select the testusersimple user. 3. Set the user s balance t $50.00 and verify the accunt is set t Restricted. 4. Verify that this user is set t Autmatically charge t persnal accunt in the Accunt selectin ptins. 5. Press the OK buttn t save. T cnfigure testuseradvanced : Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 13 f 44

14 1. In PaperCut, select the Users tab 2. Select the testuseradvanced user. 3. Change the Accunt Selectin ptin t Standard accunt selectin ppup and enable all f the accunt selectin ptins. 4. Press the OK buttn t save. 4.2 Scenari 1: Standard cpying Standard cpying invlves mnitring/charging printing t a user s persnal accunt. This is the methd mst cmmnly used fr student printing r basic staff mnitring. Users can als be cnfigured fr unrestricted printing, which is cmmnly used fr staff/emplyee use. At the phtcpier device: 1. At the Lgin screen, press Start. 2. Enter the testusersimple username and passwrd. 3. The device will shw the hme screen with a chice f functins including Cpy. 4. Press the Cpy buttn and perfrm a cpy as nrmal. 5. Once cmpleted cpying the device will return t the hme screen. 6. Press the Lgut buttn. Back in the PaperCut applicatin verify that the cpier activity was recrded and that the user s accunt was deducted. 1. Lg in t PaperCut. 2. Select the device frm the Devices tab. 3. Select the Jb Lg tab. This will list all recent cpying activity n the cpier. The cpying just perfrmed as the test user shuld be listed. Verify the details f the cpy jb that was just perfrmed. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 14 f 44

15 4. Click n the user s name in the user clumn t view the user s accunt details 5. Select the Jb Lg tab t display all print/cpy activity fr the user. 6. Select the Transactin Histry tab and verify that the cst f the phtcpying was deducted frm the user s accunt. 4.3 Scenari 2: Cpying with accunt selectin Cpying can be allcated t shared accunts that represent departments, prjects r cst centers. This is cmmnly used by staff in academic rganizatins t allcate printing t departments. Firstly, sme test accunts shuld be created: 1. Lg int PaperCut, select the Accunts tab. 2. Select the Create a new accunt actin link n the left. 3. Enter an accunt name Test Accunt Press Apply. 5. Select the Security tab and allw all users t access that accunt by adding the [All Users] grup. 6. Press OK. 7. Repeat the prcess t create anther few accunts. At the phtcpier device: 1. At the Lgin screen, press Start. 2. Enter the testuseradvanced username and passwrd. 3. The device will shw the hme screen with a chice f functins including Cpy. 4. Press the Cpy buttn. The screen will display the accunt selectin ptins. Select the accunt t allcate cpying t. E.g. Test Accunt Perfrm cpying as nrmal. Once cmpleted cpying the device will return t the hme screen. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 15 f 44

16 6. Press the Lgut buttn. Back in the PaperCut applicatin verify that the cpier activity was recrded and the user s accunt deducted. 1. Lg in t PaperCut 2. Select the device frm the Devices tab 3. Select the Jb Lg tab. This will list all recent cpying activity n the cpier. The cpying just perfrmed as the test user shuld be listed. 4. Verify the details f the jb (i.e. that the jb was charged t the selected accunt). 5. In the lg details, click n the Charged T accunt name t view the accunt s details. 6. Selecting the Jb Lg tab will display all print/cpy activity fr the accunt, and will shw the test phtcpying that was perfrmed. 4.4 Scenari 3: Print release The embedded applicatin may als be used fr print release. Fr a full descriptin f PaperCut hld/release queues and release statins, please read the PaperCut manual. Skip this scenari if hld/release queues will nt be used at yur site. T perfrm print release testing a hld/release queue must be enabled: 1. In PaperCut, select the Printers tab. 2. Select the print queue (i.e. nt the device ) fr the Lexmark MFD that will be used fr testing. 3. Enable the Hld/release queue ptin. 4. Press OK/Apply t save the changes. All printing t this queue will nw be held until released by a user. The phtcpier device must als be enabled as a Print Release Statin : 1. In the PaperCut Admin web interface, select the Devices tab. 2. Select the Lexmark MFD s device. 3. Under Device functins tick Enable release statin. 4. Select the print queue that was enabled fr hld/release abve. The Lexmark device will allw jbs n the selected queues t be released. 5. Press OK t save. 6. Lgin t a cmputer wrkstatin as testusersimple. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 16 f 44

17 7. Print a few jbs t the print queue that was cnfigured abve. The jbs will be held in the hld/release queue. 8. Cnfirm that the jbs are held, by checking that the jbs are listed in the Printers->Jbs Pending Release page f the PaperCut administratin interface. 9. Cnfirm that the username is testusersimple. At the phtcpier device: 1. At the Lgin screen, press Start. 2. Enter the testusersimple username and passwrd. 3. The device will shw the hme screen with a chice f functins including Print Release. 4. Press the Print Release buttn. 5. The list f held print jbs is displayed. 6. Select the jb t release by pressing the arrw next t the jb. 7. Cnfirm the release f the print jb by pressing the Print Jb buttn. 8. The jb will then print. 9. Try cancelling a jb by selecting it and then selecting the Cancel Jb buttn. 10. The jb will be cancelled, and will nt print. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 17 f 44

18 4.5 Scenari 4: Scanning Lexmark devices can als scan dcuments and send them by r t an FTP flder. If a phne line is attached, they can send faxes. Yu can enable the tracking f scans and faxes. Users can be prevented frm scanning r faxing when they are ut f credit. T enable tracking f scans and faxes: 1. In the PaperCut Admin web interface, select the Devices tab. 2. Select the MFD device. 3. Under Device functin tick Track & cntrl scanning and Track & cntrl faxing. 4. Select the charging type advanced in each case and set sme numbers fr page csts and threshlds. The cst after the threshld shuld be lwer than the standard cst as it represents a vlume discunt. As an example, the screen sht belw shws that the first page f a scan is charged at $0.10 and any subsequent page at $0.05 where as the price fr faxing is $0.50 fr the first page and $0.20 fr every page after that. At the device, lg in as testusersimple prceed t d faxing and scanning as usual. Bth Scan-t- and Scan-t-FTP are supprted. Please cnsult yur device manual fr details f these peratins. Back in the PaperCut administratr web interface, the jb lg fr the device will shw the scan and fax jbs with their respective destinatins: Nte n sending t multiple destinatins: When scanning t multiple destinatins such as multiple addresses r multiple FTP flders, the whle scan jb is nly charged nce. When sending a fax t multiple phne numbers, each fax sent will be charged separately as a separate fax jb. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 18 f 44

19 Nte n pint-f-charging fr faxes: Fax jbs are scanned and then stred by the device fr later (asynchrnus) faxing. While fax jbs are pending, the red Cancel Jbs buttn will display n the device s hme screen and can be pressed t inspect the pending jbs and cancel them individually. On LeSF 2.1+ devices, charging f faxes is delayed until sending ver the telephne line has succeeded. This has the benefit that cancelled fax jbs will nt be charged. While restricted users accunt balance is checked fr sufficient credit during the scan prcess f a fax jb, users may in sme cases be able t deplete their credit befre the fax has cmpleted sending and as such the delayed charging f faxes may result in users verrunning their accunt balance. On LeSF 1.2 devices, users are charged at cmpletin f the scan prcess f a fax jb and will nt be reimbursed shuld the fax jb subsequently fail t transmit because f a manual cancellatin, a busy/faulty telephne number r any ther reasn. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 19 f 44

20 5 Cnfiguratin After cmpleting the Installatin sectin and registering the device with PaperCut, it will have been cnfigured with default settings that are suitable fr mst envirnments. This sectin cvers hw t change the default settings. All f the fllwing settings are available via the device s Summary tab in the PaperCut administratin interface. 5.1 Device Functin The device functin setting defines which functins will be available n the device and hw it will be used. Nt all functin settings are supprted n all devices. Each device functin is discussed in the fllwing table. Device Functin Descriptin Track & cntrl cpying The device will track walk-up ff-the-glass cpying. Enable release statin The device will act as a print release statin. 5.2 Scan Center Using Scan Center, users can send scan jbs t any f the fllwing based n the authenticatin methd selected: Netwrk flders using user credentials Netwrk flder using a service accunt Netwrk flders using user credentials This is applicable if the authenticatin methd is Username and passwrd. Fr mre infrmatin, see 5.3 Authenticatin Methds. T send scan jbs t a netwrk flder using user credentials: 1. Set the cnfig key ext-device.lexmark.app-sign-n t esf.ssa_main.s2afac. Fr mre infrmatin, see 6.1 Cnfig Editr. 2. In Scan Center s Authenticatin Optins area, select Use MFP authenticatin credentials t create a netwrk flder destinatin. 3. Either specify the flder address %hmedir% t send scan jbs t users hme directry netwrk path that is cnfigured while creating and cnfiguring users in PaperCut MF Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 20 f 44

21 (Users > User List > User Details > Hme directry), r, specify netwrk s rt directry path under which all hme flders reside, and in Scan Center s Create Netwrk Flder page, check the Advanced ptin Start in User Name Flder Netwrk flder using a service accunt This is applicable if the authenticatin methd selected is Identity number r Swipe card. Fr mre infrmatin, see 5.3 Authenticatin Methds. T send scan jbs t a netwrk flder using a service accunt: 1. In Scan Center s Authenticatin Optins area, select Use static user name and passwrd t create a netwrk flder destinatin. 2. Prvide all the necessary details (username, passwrd) f the service accunt. 3. Either specify the flder address %hmedir% t send scan jbs t users hme directry netwrk path that is cnfigured while creating and cnfiguring users in PaperCut MF (Users > User List > User Details > Hme directry), r, specify netwrk s rt directry path under which all hme flders reside, and in Scan Center s Create Netwrk Flder page, check the Advanced ptin Start in User Name Flder. 5.3 Authenticatin Methds PaperCut MF prvides yu with several authenticatin methds t authenticate users when lgging in t PaperCut MF n the device. T access the available authenticatin methds n the PaperCut MF Admin web interface: 1. Lg in t the PaperCut MF Admin web interface. 2. Navigate t Devices. 3. Select the device. The available authenticate methds are in the Device Details page s External Device Settings area: Nte: Yu may use any ne r a cmbinatin f all the available authenticatin methds, including the guest and annymus access authenticatin methds. The available authenticatin methds are: Authenticatin Descriptin Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 21 f 44

22 Methd Username and passwrd This is the default authenticatin methd. With this methd, users use their dmain/netwrk username and passwrd. Identity number With this methd, users use their ID number. Fr mre infrmatin, see the PaperCut MF manual. Require PIN: With this methd, users use their id number and the PIN assciated with the id number. Nte: Users can use an id number with r withut a pre-set and assciated PIN. If using an id number withut a pre-set and assciated PIN, users are prmpted t set a valid PIN t assciate with the id number. Swipe card With this methd, users use their registered swipe card (e.g. magnetic strip, smart card, RFID). Fr mre infrmatin, see the PaperCut MF manual. Nte: If yu select this methd, then see 6.3 Cnfiguring Swipe Card Readers. Require PIN: With this methd, users use their registered swipe card and the PIN assciated with the card. Nte: Users can use a swipe card with r withut a pre-set and assciated PIN. If using a swipe card withut a pre-set and assciated PIN, users are prmpted t set a valid PIN t assciate with the swipe card. Enable self-assciatin with existing user accunts: With this methd, users can use a registered swipe card r a new, unregistered swipe card. If using new, unregistered swipe cards, users are prmpted t cmplete card self-assciatin using their username and passwrd (i.e. assciating a new unregistered card with a relevant, valid user accunt). After card self-assciatin is cmpleted, subsequent use f the registered swipe card des nt require users t enter their credentials. Allw guest/annymus access With this methd, yu may chse t activate guest r annymus access, enabling users t be authenticated as guest r annymus users, as per the user specified in the Inherit settings frm user field. Inherit settings frm user: Enter the username f the PaperCut MF user s prfile that is used while authenticating users as guest r annymus users n the device. Guest access - Selecting the Allw guest/annymus access Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 22 f 44

23 authenticatin methd and als selecting ne r mre f the ther authenticatin methds (Username and passwrd, Identity number, Swipe card), activates Guest access. With this methd: A Guest buttn, which may be custmized, is displayed n the PaperCut MF Lgin screen n the device, tgether with the ther authenticatin methds selected. Nte: Yu may use the cnfig key extdevice.lexmark.guest-access.label t custmize the text f the Guest buttn that appears n the PaperCut MF Lgin screen. Fr mre infrmatin, see 6.1 Cnfig Editr. A user clicking this Guest buttn is authenticated as a guest user, as per the user specified in the Inherit settings frm user field. This guest user is shwn the PaperCut MF Accunt Cnfirmatin screen nly if the user prfile f the user specified in the Inherit settings frm user field is entitled with the ptin f accunt selectin, irrespective f the External Device Settings > Device Optins > Shw accunt cnfirmatin checkbx setting. Guest users are autmatically permitted t access all device functins that are specified in the cnfig keys ext-device.lexmark.apprved-actins and extdevice.lexmark.app-sign-n. Hwever, yu may custmize this further t restrict which f the device functins guest users are permitted t access n the device. Fr mre infrmatin, see 6.1 Cnfig Editr. Annymus access - Only selecting the Allw guest/annymus access authenticatin methd withut selecting any ther authenticatin methd, activates Annymus access. With this methd: A user is authenticated as an annymus user, as per the user specified in the Inherit settings frm user field. This annymus user can view held print jbs belnging t all users. 5.4 Shared Accunt Selectin Shared accunt selectin ptins at the MFD mirrr the ptins presented in the PaperCut client print ppup. The ptins available include: Select frm a list f shared accunts Search fr shared accunts by keywrd Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 23 f 44

24 Select accunt using PIN/Cde The ptins available t each user, as well as accunt security access, will mirrr the same ptins available when the user prints. Select frm list and/r Select using PIN/Cde are cntrlled at the user level via the User Details page. The Security tab n each accunt cntrls accunt security /access. Nte: The search ptin will nly appear if the accunt list is lng. Shrt lists f nly a few accunts will nt list a search ptin. 5.5 Custmizing Text and Messages PaperCut allws sme text that appears in the device t be custmized. The custm text might include instructins r terminlgy that is mre apprpriate fr the site. An example f text that is custmizable is the Welcme text that displays befre the user lgs in t the device. The text can be custmized by editing the device cnfiguratin frm the PaperCut administratin interface. Fr mre details, see the fllwing Advanced Cnfiguratin sectin. 5.6 Tracking Jbs frm Nn-Standard Applicatins Jbs frm nn-standard applicatins are tracked in PaperCut differently t thse frm standard applicatins such as Cpy, , etc. Nn-standard applicatins are thse that: cme preinstalled with sme devices, such as Frms and Favrites, Scan t Netwrk r Scan Center can be installed as esf applicatins such as Ec Cpy, r can be accessed via the Prfiles buttn n the hme screen r thrugh the Held Jbs menu. If autmatically charge t persnal accunt r autmatically charge t single shared accunt are cnfigured fr a PaperCut user, nn-standard applicatin usage will be autmatically charged t the user s persnal accunt r pre-defined shared accunt, respectively. Fr any ther accunt selectin ptin, the default is t charge jbs frm nn-standard applicatins t the user s persnal accunt. Jbs frm nn-standard applicatins are nt subject t credit limits f restricted persnal r shared accunts, i.e. users can verrun credit limits by prducing jbs thrugh nn-standard applicatins. In envirnments where enfrcing credit limits is desired, it is recmmended t disable nn-standard applicatins by remving them frm the hme screen, via the device s web cnfiguratin. Charging can be cnfigured t display an accunt selectin dialg and charge nn-standard applicatin jbs t the selected accunt instead. Tw ptins are available fr nn-standard applicatin accunt selectin, each with different limitatins: Accunt Selectin frm Hme Screen can be shwn when the user selects presses the nnstandard applicatin at the hme screen. This is similar t accunt selectin when pressing the buttns fr the standard applicatins, but with the fllwing limitatins: The nn-standard applicatin needs an Access Cntrl in the Security menu f the device s web cnfiguratin. Accunt selectin will nly be shwn nce during the sessin fr the selected applicatin and all ther nn-standard applicatins. This means that subsequent re- Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 24 f 44

25 selectin f the applicatin frm the hme screen will nt result in the accunt selectin being shwn again, nr wuld selecting anther nn-standard applicatin. As a cnsequence, all jbs frm nn-standard applicatins will be charged t the selected accunt until lgut. Autmatic Sign-On t Applicatins (see sectin 5.7) cannt be activated at the same time. T enable Accunt Selectin frm Hme Screen, cnfigure the access cntrl fr each nnstandard applicatin with a PaperCut security template (see sectin 5.8). Make sure t cnfigure a different security template (e.g. PaperCut 1, PaperCut 2, etc.) fr each applicatin. Accunt Selectin at Lgin can be shwn after the user has successfully entered their credentials r swiped their card, with the fllwing limitatins: The accunt selected during at lgin will be used t charge all jbs during the sessin and n further accunt selectin will be shwn until lgut. This applies t standard as well as nn-standard applicatins. If print release is enabled, a print release screen will be shwn as part f the wrkflw befre the accunt selectin. This is t prevent accunt selectin just t release print jbs, hwever at least ne additinal screen press is required t transitin frm print release t accunt selectin. T enable Accunt Selectin at Lgin, set the advanced cnfiguratin prperty extdevice.lexmark.lgin.accunt-selectin t Y (see sectin 6.1). 5.7 Autmatic Sign-On t Applicatins Cpier applicatins like Scan t Netwrk and Frms and Favrites require the user t sign-n t the applicatin using a username and passwrd, even while successfully lgged int PaperCut MF. The applicatin uses this secnd set f credentials t authrize against a netwrk share t depsit scanned dcuments (Scan t Netwrk) r retrieve dcuments t print (Frms and Favrites). Other 3 rd party applicatins (e.g. dcument wrkflw applicatins) require nly the username f the authenticated user t direct scanned dcuments t the crrect destinatin. Yu can cnfigure PaperCut MF t autmatically pass the user s PaperCut MF credentials t the applicatin requiring sign-n, subject t the fllwing limitatins: PaperCut MF can nly pass credentials t ne applicatin. E.g. if bth Scan t Netwrk and Frms and Favrites are present n the cpier, ne f them has t be selected fr autmatic sign-n. All ther applicatins require manual sign-n as befre. In case the applicatin needs bth username and passwrd fr its functinality, the user has t lg in with a username and passwrd. If the applicatin needs nly the username, any lgin methd will wrk. Applicatin sign-n is incmpatible with Accunt Selectin frm the Hme Screen fr nnstandard applicatins (see in sectin 5.6). If accunt selectin fr nn-standard applicatins is required with applicatin sign-n, yu must enable Accunt Selectin at Lgin. T enable autmatic sign-n t an applicatin: (Only n LeSF 4.4 and earlier devices): Cnfigure the applicatin s access cntrl with a PaperCut MF security template (see sectin 5.8). Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 25 f 44

26 (All LeSF versins): Change the advanced cnfiguratin prperty ext-device.lexmark.appsign-n frm OFF t the apprpriate access cntrl identifier: Applicatin Access Cntrl Identifier Scan t Netwrk esf.scantnet.scantnetwrkfac Frms and Favrites esf.ezfrms.ezfrmsfac Scan Center esf.ssa_main.s2afac Fr access cntrl identifiers f ther applicatins, cntact yur reseller r Authrized Slutin Center. Yu can find their cntact infrmatin in yur PaperCut Admin interface n the Abut page. Sme applicatins can be cnfigured t use the all-purpse numeric access cntrls Slutin 1 t Slutin 10. In this case the access cntrl identifier is the number 54 plus the slutin number added, e.g. fr Slutin 5 the identifier is Cnfiguring Applicatin Access Cntrls with PaperCut Security Templates (LeSF 4.4 and earlier devices) Accunt selectin fr nn-standard applicatins (see sectin 5.6) and applicatin sign-n (sectin 5.7) might require cnfiguring the access cntrl fr ne r mre device applicatins with a PaperCut MF security template. Hwever, this des nt apply t LeSF 1.2 devices. 1. Access the device s web interface at 2. Navigate t Settings > Security > Security Setup. 3. Under Advanced Security Setup, click Security Template in Step Click Add a Security Template. 5. In Security Template Name, enter PaperCut Frm the Authenticatin Setup drp-dwn list, chse PaperCut Authenticatin Mdule Click the Add Authrizatin buttn and wait fr the page t reappear. 8. Frm the Authrizatin Setup drp-dwn list, chse PaperCut Authenticatin Mdule Click Save Template. 10. Click Return t Security Setup t return t the main security screen. 11. Click Access Cntrls in Step Find the applicatin yu wuld like t cnfigure an access cntrl fr in the list. If the list is presented as a list f small yellw flders, it can mst likely be fund in the Device Slutins flder. Depending n the device applicatin and its cnfiguratin, the crrespnding access cntrl might be ne f the generic Slutin 1 t Slutin 10 access cntrls. 13. Frm the crrespnding drp-dwn list, chse PaperCut Click Submit. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 26 f 44

27 Repeat this prcess fr every device applicatin that yu wuld like t cnfigure an access cntrl fr as per instructins frm the previus sectins, increasing the number fr the security template every time. E.g. fr the secnd applicatin, create a security template named PaperCut 2 with PaperCut Authenticatin Mdule 2, then PaperCut 3 with PaperCut Authenticatin Mdule 3 etc. A maximum f 5 security templates can be created this way and assigned t a maximum f 5 access cntrls. Nte: This des nt apply t LeSF 1.2 devices Allwing multiple applicatins using PaperCut Security Templates access t user data (LeSF 4.4 and earlier devices) By default, user authenticatin and authrizatin n LeSF 4.4 and earlier devices is handled slely by PaperCut, withut the MFD s security subsystem taking part in that prcess (an exceptin t this rule is Autmatic Sign-On t a specific applicatin, cvered in sectin 5.7). There are cases where the MFD s security subsystem needs t be aware f the user that is currently lgged in. One such use-case wuld be an rganizatin that deplys multiple Lexmark Slutin Cmpser wrkflws, each wrkflw custmizing its actins accrding t the current username. PaperCut can be cnfigured in such envirnments t authenticate the user with the MFD s security subsystem as well, making this infrmatin available t any 3 rd -party apps that query the MFD fr this infrmatin. T enable, set the advanced cnfiguratin prperty ext-device.lexmark.lgin.perfrm-auth t Y. 5.9 Cnfiguring Applicatin Access thrugh the PaperCut MF Applicatin Server (LeSF 5.0+ devices) Starting with esf framewrk 5.0 devices, authrizing users t access the varius built-in menus and functins, as well as accessing third-party applicatins installed n the device is dne by PaperCut MF. The list f enabled access cntrls is cnfigurable thrugh the ext-device.lexmark.apprvedactins advanced device cnfig key. See Cnfig Editr. 6 Advanced Cnfiguratin 6.1 Cnfig Editr The cmmn cnfiguratin ptins fr a device in PaperCut are available n the device s Summary tab, and are discussed in mre detail in the Cnfiguratin sectin. This sectin cvers the mre advanced r less cmmn cnfiguratin ptins which are available via the Advanced Cnfig tab in the devices details screen. Cnfig name Descriptin ext-device-msg.welcme The text displayed n the welcme screen. This text can be used t prvide specific infrmatin abut lgging in t the device. Use \n t create a new line. Default: DEFAULT (uses the default applicatin Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 27 f 44

28 text). ext-device-msg.card-assciatin Message t display when users are requested t assciate their swipe card with an existing user accunt. See chapter 5.2 fr details. Specify DEFAULT fr the default text. ext-device.self-assciatin-allwedcard-regex Specify a regular expressin that limits which card numbers are accepted fr assciating swipe cards with user accunts. See chapter 5.2 fr details. Cntact yur reseller r Authrized Slutin Center fr help with regular expressins. Yu can find their cntact infrmatin in yur PaperCut Admin interface n the Abut page. Defaults t.* (dtstar) which includes all card numbers. Select whether user self-assciatin shuld ccupy the primary r secndary card number. It verrides the glbal setting unless the keywrd "GLOBAL" is specified. This is useful when there is a mix f different nn-cnfigurable card readers that read different numbers frm an ID card. Set t "Y" t use the secndary card number, "N" t use the primary card number. Default: "GLOBAL" t defer t the glbal cnfiguratin ptin. ext-device.card-self-assciatin.usesecndary-card-number ext-device.blck-release-nerrr.snmp-errr-list Defines the errr types that will blck the release f jbs frm the MFD Print Release. Valid values: DEFAULT includes npaper, dropen, jammed,ffline, inputtraymissing, utputtraymissing, markersupplymissing, utputfull A cmma-separated list f errr types. Valid errr types include lwpaper, npaper, lwtner, ntner, dropen, jammed, ffline, servicerequested, inputtraymissing, utputtraymissing, markersupplymissing, utputnearfull, utputfull, inputtrayempty, verduepreventmaint Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 28 f 44

29 ext-device.lexmark.hld-cpies If set t Y, will perfrm cpies by scanning all pages first and then starting printing. If set t N printing starts after the first page has been scanned. This ptin is ignred n devices withut a hard disk where printing will always start after the first page. Set t DEFAULT r Y fr strict zer stp at the cst f lnger wait fr first cpied page t be printed. Set t N fr faster printing f the first cpied page. ext-device.lexmark.header.clr See Custmizing the Header Lgs and Clrs. ext-device.lexmark.header.textclr See Custmizing the Header Lgs and Clrs. Set t yes t shw a warning message when users are releasing dcuments while the device is still busy printing r cpying. (Only n LeSF v2.1.) When abve ptin is enabled then jbs that have been paused (paper jam, ut f paper) fr this time are cnsidered nt t be keeping the printer busy. ext-device.lexmark.release.shw-cst Set t N t hide the cst f the jbs in print release. Default: Y ext-device-msg.busy-n-release Message t display when abve ptin is enabled. Specify DEFAULT fr the default text. ext-device.card-n-regex See Regular Expressin Filters. If set t Y and the field f the user lgged nt the Lexmark device has been ppulated in PaperCut, will set this address as the Frm field in the scan-t- functin. Depending n device mdel and firmware, Track and Cntrl Scanning may have t be enabled. ext-device.lexmark.release.shwbusy ext-device.lexmark.release.shwbusy.jb-timeut extdevice.lexmark. .persnalizedsender ext- device.lexmark. .persnalized- If set t Y, Track and Cntrl Scanning is enabled and the field f the user lgged nt Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 29 f 44

30 destinatin the Lexmark device has been ppulated in PaperCut, will set this address as the T field in the scan-t- functin. If set t Y users cannt change the T field in the scan-t- functin. Only use this in cnjunctin with setting persnalized-destinatin t Y : Users will nly be able t send t themselves. Default: Y. If set t N the message cnfirming the accunt selectin will be skipped resulting in a mre fluent wrkflw. In particular, if accunt selectin is pre-set fr all users t their persnal r a single shared accunt and the accunt is unrestricted the cnfirmatin message is f limited value and shuld be skipped. ext-device.lexmark. .lckeddestinatin ext-device.lexmark.shw-accuntcnfirmatin ext-device.lexmark.shw-startprmpt Default: Y. If set t N the initial prmpt that asks the user t press a buttn t start lgging in will be skipped and the device immediately displays the username r ID number entry prmpt. N nly wrks when username r ID number lgin is enabled as a single chice (nt in cmbinatin). ext-device.lexmark.lgin.app-nly Default: N. If set t Y the device will shw the hme screen with the functin icns withut requiring lgin. Lgin will nly be required fr functins that are being tracked and print release. LeSF devices nly. Default: N. If set t Y the device will authenticate the user with the MFD s security subsystem at lgin time, making the username available fr installed 3 rd party apps such as Lexmark Slutin Cmpser wrkflws. LeSF 2.1+ devices nly. Default: N. If set t Y, will display accunt selectin and/r print release during the lgin prcess. See sectin 5.6 fr details. ext-device.lexmark.lgin. perfrmauth ext-device.lexmark.lgin.accuntselectin ext-device.lexmark.lgut.displayicn LeSF 5.0+ devices nly. Default: Y. If set t N, the Lgut icn that PaperCut adds t the device s hme screen will be remved. Users are Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 30 f 44

31 still able t lg-ut by clicking their username n the tp-right crner f the device s hme screen. ext-device.lexmark.app-sign-n LeSF 2.1+ devices nly. Default: OFF. Enter an applicatins access cntrl identifier here fr autmatically signing n t that applicatin n with PaperCut credentials. See sectin 5.7 fr details. Nte: Custmizing this cnfig key fr LeSF 5.0+ devices, results in being included in the cnfig key ext-device.lexmark.apprved-actins, autmatically permitting access fr all users, including guest users. Hwever, if ne f the values f the cnfig key ext-device.lexmark.apprved-actins is "guest_" fllwed by a valid value, then guest users are nt permitted t access any device functins specified in this key. LeSF 2.1+ devices nly. The maximum Print Release dcument name length. Sme device firmwares are ver-cnservative with the available screen space available fr dcument names. This setting allws yu t verride this behavir. Please nte: Dcument names will be wrapped t display the maximum length specified. This can result in dcument names verlapping if yu have specified a large maximum length. extdevice.lexmark.release.dcumentname.max ext-device.lexmark.apprvedactins LeSF 5.0+ devices: Custmize which f the device functins, users are permitted t access n the device. Default: 20 (Grayscale printing frm USB drives) 21 (Clr printing frm USB drives) 22 (Scanning t a USB drive) 67 (Access address bk) 84 (Search address bk) Values: any ne r a cmma-separated cmbinatin f the fllwing device functins: 8 (Supplies menu) 10 (Paper Menu) 12 (Reprts menu) 14 (Settings menu) 18 (Manage shrtcuts) Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 31 f 44

32 Nte: 16 (Netwrk prts menu) 20 (Grayscale printing frm USB drives) 21 (Clr printing frm USB drives) 22 (Scanning t a USB drive) 27 (Cpy) 30 ( functin) 32 (Fax Print) 33 (FTP functin) 34 (Held Jbs) 35 (Prfiles) 36 (Shrtcuts functin) 37 (Bkmarks) 67 (Access address bk) 76 (Cancel jbs) 79 (Secure IPP printing) 83 (Device menu) 84 (Search address bk) 85 (Grayscale print permissins) esf.ssa_main.s2afac (3rd party app: Scan Center applicatin) esf.ezfrms.ezfrmsfac (3rd party app: Frms and Favrites) esf.cardcpy.cardcpyfac (3 rd party app: Card Cpy) Any f the abve character strings, truncated and suffixed with "*" (Device functins that begin with truncated versins f their character strings fllwed by "*" are accessible t all users. Fr example, "esf*" allws users t access all device functins that begin with the character string "esf".) Any f the abve values prefixed with "guest_" (Device functins that begin with guest_ are the nly device functins that are accessible t guest users. Fr example, "guest_27" allws guest users t nly access device functin 27, cpying.) This is nly applicable t LeSF 5.0+ devices. The abve list includes bth user and administrative device functins. It is Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 32 f 44

33 recmmended that user access is permitted nly fr user device functins and nt administrative device functins. The abve list may nt be an exhaustive list f all device functins, device capabilities, and thirdparty applicatins that may be available n the device. Fr a cmplete list, cntact yur reseller r Authrized Slutin Center. User access, including guest user access, is als autmatically permitted fr any device functin specified in the cnfig key extdevice.lexmark.app-sign-n, except if ne f the abve values cntains the prefix "guest_" fllwed by a valid value. ext-device.inactivity-timeut-secs Defines hw lng t allw a user between key presses befre they are autmatically lgged ut. Default: 60 Nte device s screen timeut verrides this setting. See Setting Lgin Timeut. ext-device.lexmark.paper-size.default LeSF 1.2 devices nly. Default A4 / LETTER depending n cuntry. Paper size that will be recrded fr a cpy jb when Aut Size Match paper size is selected. ext-device.lexmark.guest-access.label Custmize the text f the Guest buttn that appears n the PaperCut MF Lgin screen. This is a device-specific cnfig key. Values: Any text, DEFAULT Default: DEFAULT (Guest) Nte: This is applicable nly if guest access is activated (the Allw guest/annymus access authenticatin methd is selected and at least any ne ther authenticatin methd is als selected). Fr mre infrmatin see, 5.3 Authenticatin Methds. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 33 f 44

34 6.2 Custmizing the Header Lgs and Clrs The embedded applicatin has a header at the tp f all screens. This header defaults t the PaperCut lg and green clr. The header can be custmized t match yur rganizatin s clr scheme and lgs Custmized Lgs The embedded applicatin header has a header lg (as shwn belw). Yu can replace this lg with yur rganizatin s lg. This shws the lg utlined in red. The image must be saved as a GIF file with the fllwing filename and size: Icn lg: icn-lg.gif 312 x 64 pixels These images shuld be saved n the PaperCut applicatin server in the PaperCut applicatin directry under the subdirectry server\custm\web\device\lexmark. Create the subdirectry if necessary. The embedded applicatin will fetch the images frm the server t display them n the device screen. Minr deviatins frm the recmmended hrizntal pixel size are pssible fr the text lg (wider r narrwer). Verify the crrect layut n the device screen after prducing the image. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 34 f 44

35 6.2.2 Custm Header Clr The header clrs are defined in the Advanced Cnfig in the devices details screen, see chapter 6.1. The ptins t change are: ext-device.lexmark.header.clr the backgrund clr (type DEFAULT fr the default setting f dark green) ext-device.lexmark.header.textclr the text clr (type DEFAULT fr the default setting f white) The clrs are specified using the hexadecimal web/html ntatin (#RRGGBB) where RR is the red cmpnent, GG is the green cmpnent and BB is the blue cmpnent. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 35 f 44

36 6.3 Cnfiguring Swipe Card Readers Swipe cards cntain numbers used t identify users accrding t the card number cnfigured in the User Details screen under Card/Identity number. Sme readers reprt infrmatin in additin t the number encded n the card, such as checksums. PaperCut can treat these cases in three ways: Card Number Needs N Cnversin A typical case is the checksum being reprted after the card number, separated by an equals sign, such as in =8. PaperCut can handle this case by default; it will extract the number befre the equal sign as the card number: Regular Expressin Filters Fr sme cases, a regular expressin may be required that will filter the card number frm the cmplete string f characters reprted by the card reader. Dcumentatin n regular expressins can be fund n the Internet, e.g. at The regular expressin must be fashined s that the card number is returned as the first match grup. Usually ne regular expressin will be used fr all the devices managed by PaperCut; this must be entered in the Cnfig editr (advanced) which yu will find n the Optins tab under Actins. The key is called ext-device.card-n-regex. The glbal setting hwever can be verridden n a per-device basis: The key extdevice.card-n-regex can als be fund n the Advanced Cnfig tab in the device details screen. This setting will verride the glbal setting unless the keywrd GLOBAL is specified. PaperCut develpers will gladly assist in prducing a regular expressin when supplied with a few sample utputs frm yur card reader. Cntact yur reseller r Authrized Slutin Center fr help with regular expressins. Yu can find their cntact infrmatin in yur PaperCut Admin interface n the Abut page. If yu wuld like t write yur wn regular expressins, here are sme examples: Use the first 10 characters (any character): (.{10}) Use the first 19 digits: (\d{19}) Extract the digits frm between the tw = characters in =292929=1221 : \d*=(\d*)=\d* Card Number Frmat Cnverters In additin t extracting parts f the card numbers using regular expressins, cnverting numbers frm ne frmat t anther is a cmmn requirement. Fr example, a card reader may reprt in hexadecimal frmat, while the number stred in the surce (e.g. Active Directry) is in a decimal frmat. PaperCut includes a number f inbuilt cnverters t assist here. Nte: Many card readers are cnfigurable - the number frmat can be changed at the hardware level via utility r cnfiguratin tls. PaperCut s sftware-level cnverters are there t supprt card readers that dn t ffer this level f cnfiguratin, r where a glbal sftware-level cnversin is a better chice. Fr example, it may be quicker t d the cnversin in PaperCut rather than manually reprgram 100+ readers! Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 36 f 44

37 Like regexes, the cnvertrs may be defined n either a glbal (all devices) r n a per-device basis. T set glbally: 1. Optins -> Actins -> Cnfig Editr. 2. Search fr ext-device.card-n-cnverter. 3. Enter the name f the required cnverter (see table belw) and click Update. T set at the device level: 1. Devices -> [select device] -> Advanced Cnfig Editr. 2. Search fr ext-device.card-n-cnverter. 3. Enter the name f the required cnverter (see table belw) and click Update Standard Cnverters Cnvertr hex2dec dec2hex ascii-enc Descriptin Cnvert a hexadecimal (base 16) encded card number t decimal frmat. Hexadecimal numbers usually cntain 0-9 and A-F. This will cnvert 946EBD28 t Cnvert a decimal encded card number t hexadecimal frmat. This will cnvert t 946EBD28. Unpack an ASCII encded card number string. E.g. given the number , the ASCII cde 39 is cnverted t 9, 34 -> 4, 45 -> E, with the entire number resulting in 946EBD28. javascript:<path> Advanced: Define a custm cnversin functin in JavaScript (see belw) It is pssible t chain r pipeline cnverters by delimiting with a pipe ( ). Fr example, asciienc hex2dec will first unpack the encded ASCII number then cnvert it t a decimal. Tip: Nt sure which cnverter t use? Often trial and errr is a gd apprach. After presenting a card, the number will appear in an applicatin lgger message with cnversins applied (assuming the card is unknwn t the system). Try different cnverters and inspect the resulting numbers in the applicatin lg Using custm JavaScript If the inbuilt cnverter functins are unable t meet the requirements, it is pssible t define yur wn functin using JavaScript. This is an advanced exercise and it is expected that any implementer be familiar with prgramming and JavaScript. T implement yur wn cnverter: 1. Create a file text file [install-path]/server/custm/card.js 2. Define a single JavaScript functin in this file called cnvert It shuld accept and return a single string. Here is a trivial example: functin cnvert(cardnumber) { return cardnumber.substring(3,10).tlwercase(); } Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 37 f 44

38 3. Enter a cnverter in the frm: javascript:custm/card.js Tip: Check the file [install-path]/server/lg/server.lg when testing. Any scripting errrs will be displayed as warning messages in the lg. Tip: A JavaScript script may als be included in the pipeline. Fr example ascii-enc hex2dec javascript:custm/card.js Other advanced ntes If bth a regular expressin and a cnverter are defined, the regular expressin is applied first. This means a regular expressin can be used t clean up the input (e.g. remve checksum r delimiters) befre passing t a cnverter. In sme special situatins a custm JavaScript implementatin may nt be enugh. Fr example, there may be a requirement t use a 3rd party system t decrypt the number. PaperCut includes an advanced plugin architecture that the PaperCut Sftware develpment team uses t implement these advanced cnverters. Cntact yur reseller r Authrized Slutin Center t discuss develpment ptins and csts. Yu can find their cntact infrmatin in yur PaperCut Admin interface n the Abut page. 6.4 Blck the release f jbs t a device in errr If yu enable the Blck the release f jbs when this device is in errr check bx in the Admin web interface fr a device, yu shuld als hide the warning message displayed when users are releasing dcuments while the device is still busy printing r cpying. This will minimize user cnfusin, as the message suggests that the user can frce the release f jbs, hwever, if the Blck the release f jbs when this device is in errr check bx is enabled, they cannt release the jb until the errr is fixed. T hide this message: 1. In the PaperCut MF Admin web interface, click Devices. 2. Select a device. 3. Click Advanced Cnfig. 4. Search fr ext-device.lexmark.release.shw-busy. 5. Change the value t N. Nte: This cnfig key is available fr devices supprting LeSF v2.1 nly. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 38 f 44

39 7 Knwn Limitatins and Security 7.1 Knwn Limitatins On all devices: When using the Aut Match paper size setting, Custmer Jb mde, separatr sheets r bklet printing, the cst f a jb cannt be estimated accurately prir t printing. Fr restricted users, this may result in the jb starting t print and getting stpped befre it is cmplete. It may als result in an accunt verdraft f a few pages. The fllwing limitatins exist n Lexmark LeSF 5+ devices: Sme Lexmark devices ship with an ptinal applicatin called Scan Center. This applicatin allws a dcument t be scanned nce and then autmatically rutes the image t ne r mre selectable destinatins such as , cpier, fax etc. Sme scan jbs generated thrugh Lexmark s Scan Center as well as ther third party applicatins (such as Shrtcuts), cannt be tracked by PaperCut MF, nr can PaperCut MF prevent a user with insufficient balance frm perfrming such jbs. These jbs include faxing using a fax server, scan t using Scan Center, scan t ftp using Scan Center. If this pses a cncern, yu can disable sme Scan Center cnnectrs (fr example, disable 'Scan Center - Printer' t prevent standard cpy jbs thrugh Scan Center), r remve the Scan Center app altgether. The fllwing limitatins exist n Lexmark LeSF 3.1 devices: Depending n firmware, cpy jbs with an utput paper size selectin f Aut Size Match may nt perfm zer-stp crrectly when the utput paper size is nt Letter (US/Canada) r A4 (ther cuntries). Inquire with Lexmark r yur reseller r Authrized Slutin Center abut whether yur devices firmware supprts Aut Size Match crrectly. Yu can find their cntact infrmatin in yur PaperCut Admin interface n the Abut page. If nt supprted, this means that Fr cpy jbs with utput paper sizes with a cst lwer than the cst f A4/Letter the cpy jb may be denied with a reasn f insufficient credit even when sufficient credit is available. Fr cpy jbs with utput paper sizes with a cst higher than the cst f A4/Letter the cpy jb may result in an accunt verrun. The fllwing limitatins exist n Lexmark LeSF 2.1 devices: N limitatins r issues are knwn at this time. The fllwing limitatins exist n Lexmark LeSF 1.2 devices: Duplex cpies may at times nt be charged crrectly in mixed duplex/simplex cpy jbs such as cpy jbs invlving multiple cpies f a range f pages where ranges f duplex pages are interspersed with the ccasinal simplex page. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 39 f 44

40 Cpy jbs with an utput paper size selectin f Aut Size Match are nt recrded crrectly with respect t the utput paper size used. The paper size recrded will be the cnfiguratin value ext-device.lexmark.paper-size.default (see sectin 5.1) irrespective f the actual paper size used. 7.2 Security cncerns It is imprtant that the administratrs take care t prevent users frm bypassing the system and directly accessing the cpier. Likewise, it is als imprtant that administratrs knw hw t bypass/disable the system if direct cpier access is required say t change advanced system settings. Administratins shuld take the fllwing precautins: The cpier s admin passwrd (see chapter 3.2.7) always be kept secure. The pwer and netwrk cable shuld be securely cnnected. The system is designed t be rbust and recrd cpier usage if the pwer is lst during cpying, but it is pssible t start cpying befre the embedded applicatin starts after restarting the cpier. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 40 f 44

41 8 FAQ & Trubleshting What is the IP address f my PaperCut Server? Use perating system cmmand-line tls such as ipcnfig r ifcnfig t determine this. The embedded applicatin shws Device Setup: Cnnecting t server? This indicates that the embedded applicatin is unable t cnnect t the PaperCut server ver the netwrk. The embedded applicatin will cntinually try t cnnect t the server (trying bth the server name and IP), s if there is a temprary netwrk utage then it will start wrking nce the cnnectin is available again. Cmmn causes f this prblem are: The PaperCut applicatin server is nt running. There are firewalls r netwrk ruting cnfiguratin that is stpping the netwrk cnnectin frm being established. Check firewalls n the PaperCut server r with yur netwrk administratr. There is a netwrk utage that is stpping the cnnectin being established. Try accessing the web interface n the Lexmark t check that a netwrk cnnectin can be established. The PaperCut server name r IP was nt set crrectly. I see an errr n the Lexmark LCD screen? This may indicate a cnfiguratin issue, r maybe a sftware bug. Re-check yur settings and restart the MFD (i.e. pwer-ff and pwer-n the cpier). If prblems cntinue, cntact yur reseller r Authrized Slutin Center. Yu can find their cntact infrmatin in yur PaperCut Admin interface n the Abut page. I have thusands f accunts representing my clients. Will the system handle this? Yes. We have designed the system t handle thusands f Shared Accunts. Users with many accunts will als be presented with sme pwer ptins t help them find accunts including keywrds based search. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 41 f 44

42 A. Appendix: Supprted Authenticatin Card Readers The PaperCut embedded slutin fr Lexmark devices currently supprts the fllwing card reader manufacturers: MagTek (USB) RFIdeas (USB), tested n RDR-67081AKU but may supprt thers Elatec, ACID and Weltrend OmniKey CardMan 5427, 5321, 5121 and 5125 USB OmniKey readers need a driver that needs t be installed as a separate embedded applicatin alngside PaperCut It is being prvided as an *.fls file with a file name such as mnikeydriver fls Please cntact yur Lexmark supplier fr the OmniKey driver PaperCut has been tested with the OmniKey driver versin Other keybard emulating USB card readers may wrk, but shuld be tested prir t deplyment. Supprting Card Reader authenticatin is as easy as: 1. Cnnecting a supprted card reader t the device via the USB prt (Nte: On sme devices this is hidden under a sticker n the side panel). 2. Enabling Swipe card as an Authenticatin methd under the device s cnfiguratin in PaperCut s web interface. 3. Ensure the card number, as read by the reader, is laded int the Card Number field in the PaperCut database (r cnsider using user self-assciatin). NOTE: Sme Lexmark devices d nt supprt any frm f cnnected card reader. Unfrtunately, Lexmark were unable t prvide us with a definitive list. Devices knwn nt t supprt card readers include thse in the XX410 series (e.g. MX410de/MX410/CX410). It is recmmended yu check with Lexmark t cnfirm supprt fr card readers n yur device. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 42 f 44

43 B. Appendix: Screenshts fr User Infrmatin Sheets Many rganizatins aim t prvide detailed step-by-step instructins t their users t guide them thrugh cpier use. In additin t the screenshts in the previus sectins f the manual, screenshts in this sectin are prvided t be cpied int user infrmatin sheets. Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 43 f 44

44 Cpyright PaperCut Sftware Internatinal Pty. Ltd., All Rights Reserved. 44 f 44