HP - CPA 1.0

Follow these steps to install the first-generation Control Panel Application (CPA) on HP printers.

Installation Requirements

Ensure all of the universal requirements are completed and functional prior to CPA setup. In addition, HP has an optional setup step.

  • (Optional) Self-signed Certificate. Follow the steps below if you want to use a self-signed certificate.

HP Self-Signed Certificate

Generate the Certification Authority

  1. Create a directory (IISCertificate) under your home folder.
  2. Create a 2048-bit key to be used when creating your CA.

    Copy Code
    openssl genrsa -des3 -out ca.key 2048

    Terminal window showing the prompt to enter the ca.key passphrase.

  3. You will be asked to supply a pass phrase for ca.key. The pass phrase will be requested whenever you use the CA certificate so make sure you remember it. This will create a file called “ca.key” that contains your certificate authority private key.

  4. Create the CA certificate request.

    Copy Code
    openssl req -new -x509 -days 4000 -key ca.key -out ca.cer

    Terminal window showing the prompt for the passphrase.

    1. When you are asked to enter a pass phrase, make sure you enter the pass phrase used in step 2. The output CA certificate will be generated in “ca.cer”.

Upload the Certificate

  1. Log in to the Admin Console.
  2. Navigate to Tools then Settings then General.
  3. In the CPA 1.0 section, select Upload Certificate.
  4. Select Choose File.
  5. Navigate to the CA file, select it and select Open.
  6. Select Upload.
  7. Select Save

Control Panel Application 1 section showing the Upload Certificate button.

The certificate is updated automatically on deployed printers, and is sent automatically with newly installed printers.

Generate a Server Certificate

  1. Create a 2048-bit key to be used when creating the server certificate.

    Copy Code
    openssl genrsa -des3 -out server.key 2048

    Terminal window showing the prompt to enter the passphrase for the server.key.

    You will be asked to supply a pass phrase. The pass phrase will be requested whenever you use this certificate so make sure you remember it. This will create a file called “server.key,” containing your server private key.

  2. Create the server certificate request.

    Copy Code
    openssl req -extensions ssl_server -new -key server.key -extensions usr_cert -out server.csr

    Terminal window with the returned server FQDN highlighted in red.

    1. When you are asked to enter a pass phrase for “server.key,” make sure you enter the pass phrase used in step 1, which creates the server certificate request “server.csr.”
    2. The “Common Name” has to match the Fully Qualified Domain Name (FQDN) of the Web server.” A quick way to get this info is by executing the following command: “nslookup <WebServer_IP_address>.”
  3. Sign the certificate signing request (csr) with the self-created certificate authority (CA) that you made earlier by running the following command:

    Copy Code
    openssl x509 -req -startdate -days 365 -in server.csr -CA ca.cer -CAkey ca.key -extensions usr_cert -out server.crt -CAcreateserial

    By using the “-startdate” parameter, you are signing the certificate against the current date/time. Make sure that your environment has the correct date/time and time zone setup. If an error comes back for fopen:No such file or directory:bss_file.c:398:fopen('ca.srl', 'r'), then add -CAcreateserial to the command.

    1. When you are asked to enter a pass phrase for “ca.key,” make sure you enter the pass phrase used in step 1. This will create the server certificate “server.crt.”
  4. Generate a .PFX file / PKCS#12 certificate

    Copy Code
    openssl pkcs12 -export -in server.crt -inkey server.key -certfile ca.cer -name <FQDN> -out serverCert.pfx

    Ensure you replace <FQDN> with your Vasion Print (formerly PrinterLogic) FQDN, used in step 2.

    1. When you are asked to enter a pass phrase for “server.key,” make sure you enter the pass phrase used in step 1. This will create the “serverCert.pfx” file. You will then be asked to supply an export password that to use when uploading the certificate in the printer's web portal.
  5. Upload the PFX file into the printer's web portal.

    The printer's web portal is accessed by browsing to the printer's IP address.

    1. In the printer's web portal, navigate to the Security tab.
    2. Select Certificate Management.
    3. In the Install Identity Certificate section, select Import Identity Certificate with Private Key.
    4. Upload the serverCert.pfx file using the export password you created.
    5. Select Install.
    6. Once the upload is complete, you will be able to scroll down and see the FQDN listed under the Issued To field.

Installation Steps

If the Version field does not appear in the interface, the manufacturer does not support CPA 1.0. You will need to follow the appropriate CPA 2.0 topic.

These are the steps to install the CPA on a single printer using the printer object's Apps tab. Reference CPA Manager to install the CPA on multiple printers at once.

  1. In the Admin Console tree structure, select a printer.
  2. Select the Apps tab.
  3. In the Manufacturer field, select the desired manufacturer.
  4. In the Version field, select CPA 1.0.
  5. Select Save
  6. Select Install Application on Printer.
  7. The CPA Installer downloads and generates a modal requesting the credentials for the printer web interface.
  8. Enter the credentials and select Install.

CPA v1 CPA Installer pop-up showing the Printer name and IP Address, along with fields to enter the username and password, and the Install button at the bottom to start the installation.

Copy/Scan Tracking

Copy/Scan Tracking uses SNMP to track and report the number of copies and scans on a supported multi-function printer. The Print Job Records report report provides details on the number of scans and copies on the selected printer for auditing and reporting purposes.

The Service Client drop-down field and Install Copy/Scan Tracking on printer setting on the printer object's Apps tab are separate from the CPA v1 installation. Reference the Copy/Scan Tracking topic for prerequisites and steps.

Printer object's Apps tab showing the CPA v1 installation fields and buttons, with the Service Client drop-down and Install copy/scan tracking on printer checkbox.

Uninstall the CPA

  1. Navigate to the printer's Apps tab.
  2. Select the Uninstall Application from Printer button.
  3. The CPA Installer / Uninstaller downloads and generates a modal requesting the credentials for the printer web interface.

  4. Enter the credentials and select Uninstall.

The CPA is uninstalled when the process completes.

CPA v1 CPA Installer pop-up showing the Printer name, IP address, fields for the username and password, and the Uninstall button at the bottom.