Configuring Hybrid Print Release

Installing Lexmark Hybrid Print Release

Note: Before you begin, make sure that Lexmark Print Management version 2.7 or later is installed.
  1. From Lexmark Management Console, click the Solutions tab.

  2. From the Solutions section, click All Solutions.

  3. Click Install/Upgrade.

  4. Browse to the Hybrid Print Release application.

  5. Click Upload.

Configuring Hybrid client registration

Configuring Lexmark Print Management Client

  1. From your computer, navigate to the C:\ProgramData\LPMC folder.

  2. Using a text editor, open the configuration.xml file.

  3. If necessary, set LoggingEnabled to true.

  4. From the ServerSettings section, set ServerIP to the IP address of the LPM server.

  5. If the LPM server is configured with SSL, then do the following:

    • From the ServerSettings section, set ServerPort to either 443 or 9780.

    • From the ServerSettings section, set ServerSSL to either true or false.

  6. From the IDPServerSettings section, set ServerIP to the IP address of the LPM server, and then add /idm.

  7. From the IDPServerSettings section, set ServerPort to 443.

Configuring the Card Authentication application

  1. From the Embedded Web Server, navigate to the configuration page for the application.

  2. From the User Authentication section, set Card Validation to Identity Service.

  3. From the Identity Service Settings section, set the identity service provider address to https://serverIP/idm, where serverIP is the IP address of the LPM server.

  4. If the LPM server is configured with SSL, then set the badge service provider address to either of the following:

    • https://serverIP/lpm

    • https://serverIP:9780/lpm

    Where serverIP is the IP address of the LPM server.

  5. Set Client ID to esf-cardauth-app.

    Note: You can update the client ID.
  6. Set Client Secret with the value from <install-Dir>\Lexmark\Solutions\apps\idm\WEB-INF\classes\idm-production-config.properties file, where <install-Dir> is the installation folder of LDD.

    Note: You can update the client secret.
  7. Set Card Registration to Identity Service.

  8. Set Manual Login to Identity Service.

  9. Click Save.

Configuring the Print Release application

  1. From the Embedded Web Server, navigate to the configuration page for the application.

  2. From the Serverless Web Server Settings section, set Server Address to https://serverIP/lpm/api/2.0, where serverIP is the IP address of the LPM server.

  3. Set the SSL port number to 9443.

  4. Set the HTTP port number to 9780.

  5. Set the security mode to Auto.

  6. Click Save.

Configuring eSF applications settings for Print Release

Understanding the CardAuth configuration data for e-Task 5 printers

User authentication settings

Setting

Description

Card Validation

Determines how cards are validated.

Required value

Identity Service

Card Registration

The login method for registering using cards.

Required value

Identity Service

Note: Selecting Disabled restricts all users from registering their badge at the specific printer.

Manual Login

The login method for logging in manually.

Required value

Identity Service

Note: Selecting Disabled restricts all users from logging in without a badge.


Identity Service settings

Setting

Description

Identity Service Provider Address

The URL of the identity service provider. Use the following format for its value:

  • http://IPaddress:9780/idm

  • http://IPaddress/idm

Where IPaddress is the IP address of the identity service provider.

Badge Service Provider Address

The URL of the badge service provider. Use the following format for its value:

  • http://IPaddress:9780/lpm

  • http://IPaddress/lpm

Where IPaddress is the IP address of the badge service provider.

Client ID

The client credentials from the identity service provider used with the client secret.

Required value

esf-cardauth-app

Client Secret

The client credentials from the identity service provider used with the client ID.

Set Client Secret with the value from <install-Dir>\Lexmark\Solutions\apps\idm\WEB-INF\classes\idm-production-config.properties file, where <install-Dir> is the installation folder of LDD.

To increase security, update the client secret. Make sure that the values match the entries set in the idm-production-config.properties file.


Understanding the BadgeAuth configuration data for e-Task 4 and e-Task 3 printers

Note: To make sure that print jobs appear in the print queue, type the user ID in lowercase when registering a user.
User authentication settings

Setting

Description

Card Validation

Determines how cards are validated.

Required value

Identity Service

Card Registration Access Control

Determines the access control that is used for card registration.

Required value

Identity Service

Note: Selecting None restricts all users from registering their badge at the specific printer.

To configure access controls, do the following:

  1. From the Embedded Web Server, click Settings or Configuration.

  2. Depending on your printer model, do either of the following:

    • Click Security > Security Setup > Access Controls.

    • Click Security > Edit Security Setups > Access Controls.

  3. Click Device Apps or Device Solutions, and then set functions to the appropriate LDAP building block and security template.

  4. Click Submit.

For more information on configuring access controls, see the Card Authentication Administrator’s Guide.

Manual Login Access Control

Determines the access control that is used for manual login. The access control configuration for this method is the same as Card Registration Access Control.

Required value

Identity Service

Note: Selecting None restricts all users from logging in without a badge.

Session Access Control

Determines the access control that is used for a user’s session data. Another printer function, such as Copy, may be set to the same access control, and then get the user information. Select the solution or application number that corresponds to the BadgeAuth or CardAuth security template that is defined when creating an access control.

Required value

Identity Service


Identity Service settings

Setting

Description

Identity Service Provider Address

The URL of the identity service provider. Use the following format for its value:

  • http://IPaddress:9780/idm

  • http://IPaddress/idm

Where IPaddress is the IP address of the identity service provider.

Badge Service Provider Address

The URL of the badge service provider. Use the following format for its value:

  • http://IPaddress:9780/lpm

  • http://IPaddress/lpm

Where IPaddress is the IP address of the badge service provider.

Client ID

The client credentials from the identity service provider used with the client secret.

Required value

esf-cardauth-app

Client Secret

The client credentials from the identity service provider used with the client ID.

Set Client Secret with the value from <install-Dir>\Lexmark\Solutions\apps\idm\WEB-INF\classes\idm-production-config.properties file, where <install-Dir> is the installation folder of LDD.

To increase security, update the client secret. Make sure that the values match the entries set in the idm-production-config.properties file.


Understanding the LexDas configuration data for e-Task 4 and e-Task 3 printers

Web Server settings

Setting

Description

Web Server

Lets the application communicate with Lexmark Print Management Client via Lexmark Print Management as an Active Directory.

Required value

Enabled

Server Address

The URL of the web server. Use the following format for its value:

  • http://IPaddress:9780/lpm/api/2.0

  • http://IPaddress/lpm/api/2.0

Where IPaddress is the IP address of the web server.

Security Mode

Handles the used HTTP connections.

Required value

Auto

SSL Port

The SSL port number used by the server.

Required value

9443

HTTP Port

The HTTP port number used by the server.

Required value

9780


Understanding the PrintRelease configuration data for e-Task 5 printers

Serverless Web Server settings

Setting

Description

Serverless (Web)

Lets the application communicate with Lexmark Print Management Client via Lexmark Print Management as an Active Directory.

Required value

Enabled

Server Address

The URL of the web server. Use the following format for its value:

  • http://IPaddress:9780/lpm/api/2.0

  • http://IPaddress/lpm/api/2.0

Where IPaddress is the IP address of the web server.

SSL Port

The SSL port number used by the server.

Required value

9443

HTTP Port

The HTTP port number used by the server.

Required value

9780

Security Mode

Handles the used HTTP connections.

Required value

Auto


Customizing the home screen for a Hybrid environment

  1. From Lexmark Management Console, click the Device Groups tab.

  2. From the Device Groups section, select Serverless Print Release.

  3. From the Tasks section, select Home Screen.

  4. Click the tab for each device class that you want to customize.

  5. Select Use this home screen as part of the device groups policy.

  6. In the Action menu, select App Reservation.

  7. In the Profile menu, select either of the following:

    • For e-Task 5 printers, select printRelease.

    • For e-Task 4 and e-Task 3 printers, select LPRP4.

  8. Click Apply.

    Note: Make sure to click Apply on each tab to apply the settings.