Fujifilm - CPA 2.0

Complete the prerequisites and follow the steps below to install the second-generation Control Panel Application (CPA) on Fujifilm printers.

Prerequisites

  • General
  • Ports
  • Authentication / Card Readers
  • Certificates

Printer Support: For a list of the known supported Fujifilm printers, see our Vasion Print CPA page.

  • A machine running Windows OS must be used to install the CPA.
  • It is highly recommended that your printer be running the latest firmware version as some settings may only be available in the latest version.
  • Create a Service Client ensuring that on the Printer Apps tab, that Printer Apps is enabled and that the HTTPS certificate matches the hostname.
  • Ensure that the PrinterLogicServicePrinterApp.exe service is running on your Service Client machine.
  • If your Service Client is using Windows OS, ensure Visual C++ Redistributable for Visual Studio 2015 (32-bit/64-bit) or newer is installed on the Service Client.
    • Both the x86 and x64 redistributable packages must be installed. These packages can be found in the Microsoft Download Center.
  • All devices, to include Service Client, printers, etc., must be allowed to reach Domain Name System (DNS) server and resolve names.
  • Ensure TCP Port 31988 and 443 are open in all firewalls such as the Service Client machine, routers, etc.
  • If using Pull Printing, create a pull printer.
  • If using Secure Release, configure a Secure Release Printer.

Set Print Authentication
  1. Enter Service Mode. (If you are unfamiliar with how to enter service mode, contact your Fujifilm representative or PrinterLogic SaaS Support).
  2. Press Diagnostics.
  3. Press 131 DC NVM Read/Write.
  4. Set the following NVM setting:
    1. Chain Link 701-436 to 0.

The following ports are used with Fujifilm devices. See the note following the list for more specific information:

  • TCP 443
  • TCP 9100
  • TCP 31988

CPA installation and uninstallation occur from the Service Client object to the printer over TCP 31988.

CPA operation requires two main communication paths:

  • From the printer to the Service Client object over TCP 31988
  • From the printer to the PrinterLogic SaaS instance (cpa-api.app.printercloud.com, adjusted to your region) over TCP 443.

Everyday printing communication occurs from the workstation to the printer over TCP 9100.

Card Reader Support: — Fujifilm ICCR-B Card reader.

Configure your Identity Provider (IdP) properly. (LDAP Domain / IdP)

Configure With Card Reader

If you're using a card reader these steps are required. If you're not using a card reader then continue to the next prerequisite.

  1. Enter Service Mode. (If you are unfamiliar with how to enter service mode, contact your Fujifilm representative or PrinterLogic SaaS Support).
  2. Press Diagnostics.
  3. Press 131 DC NVM Read/Write.
  4. Set the following NVM setting:
    1. Chain Link 700-040 to 1.
    2. Chain Link 700-257 to 2.
    3. Chain Link 700-885 to 1.
  5. Reboot the device.
  6. Log on the device as Administrator. Default login:
    1. Username - 11111.
    2. Password - x-admin.
  7. On the landing page, select the Plug-Ins option.

    Plug-Ins Option as seen on the Fujifilm device landing page.

  8. Select the IC Card Reader B Web Setup Plug in (or similarly named plug-in).

    Depending on the printer model, this plug-in may be named differently.

  9. On the configuration page, select the card reader technology you are using. In the image example, MIFARE has been selected.

    Multiple technologies can be selected.

    Card Selection page showing the MIFARE list option which is selected.

  10. Select Apply.
  11. Select the Edit (pencil) icon for the selection(s) you made.

  12. Configure the settings according to your requirements.

    Customize window showing the different options and the Apply button is visible in the lower right.

  13. Select Apply.

Configure Without Card Reader

These steps are required for configurations not using a card reader. If you've already configured the card reader settings previous, continue to the next prerequisite.

  1. Enter Service Mode. (If you are unfamiliar with how to enter service mode, contact your Fujifilm representative or PrinterLogic SaaS Support).
  2. Select Diagnostics.
  3. Select 131 DC NVM Read/Write.
  4. Set the following NVM setting:
    1. Chain Link 700-040 to 0.
    2. Chain Link 700-257 to 0.
    3. Chain Link 700-885 to 0.
  5. Reboot the device.

If using self-signed certificates, ensure root Certificate Authority (CA) is installed and registered on the printer(s).

Sometimes, customers may find it necessary to deploy multiple print queues for the same printer to configure different print profile settings. This approach allows for greater control over printing costs by enforcing specific printer settings for individual users or groups. However, this practice can lead to an issue when using the CPA. For example, one queue may be built and deployed to specific users, allowing them to print in color, and the other may be built and deployed to particular users using black-and-white print settings only. They do this to control spending by enforcing printer settings to specific end users or groups. Since the installation of the CPA gets done using a selected print queue from the Tree Structure, you would need to choose one of the queues to install to. If the CPA is installed on the color printing enabled queue, when someone prints to the black and white queue, they will not see their print job listed on the printer. Therefore, it is crucial to consider this behavior when deploying multiple print queues with distinct settings.

Configure Authentication Options

The authentication options on the TCP / IP printer object determine what is presented to an end-user when accessing the CPA at the printer. The default settings are beneficial if you are using the same authentication options for all printers. The printer-specific options allow you to control these options further for each printer. The default options selected control what is available for you as the administrator to enable on the individual printer.

Default Settings

It's important to note that default authentication settings vary depending on the chosen identity provider. The LDAP settings differ from configuring settings for an IdP such as Okta or Entra ID (Azure AD).

LDAP CPA Settings

Configure Settings Using LDAP

  1. Open your Admin Console and navigate to Tools then Settings then General.

  2. In the Identity Provider Settings section, ensure that LDAP is selected and that your LDAP credentials are configured correctly.

    Identity Provider Settings section of the Admin Console's General tab with the LDAP option selected.

  3. Scroll down to the CPA Specific Settings section and select the options that you want available to set on the Printer Apps tab.

    General tab's CPA Specific Settings section showing the different authentication methods that can be selected/enabled.

    Although this section generally shows settings, not all options may be available for all printer manufacturers and models. The Apps tab of the printer object will display the supported options for a specific manufacturer.

  4. Configure the settings that correspond with the authentication options selected.

    1. Pin Settings: You can set PINs to store in either the PrinterLogic SaaS or Active Directory databases. Depending on your selection, additional fields may appear to identify where to place the UserID Attribute. If you choose Active Directory, you must also provide the field name containing the PIN attribute.

      If the Database option is selected, the end-user must set the PIN within the Self-service Portal. To do so, open the Self-service Portal, select Menu then Authentication then Manage PIN.

    2. Badge Settings: You can store badges in the PrinterLogic SaaS database or your Active Directory database. If Active Directory is selected, you also need to provide the field name that contains the badge ID attribute for badge authentication on the CPA.

      When opting for the Database option, badge registration is mandatory. Administrators can manage badges individually through the badge management screen or in bulk by CSV. End-users also can set up their badge within the Self-service Portal. The end-user does this by opening the Self-service Portal, selecting Menu then Authentication then Manage Badge. If the end-user knows their badge number, they can directly enter it. If the badge number is unknown, they can obtain a registration code on the screen, scan their badge, and enter the provided code for successful registration.

  5. Scroll down to the CPA section.

  6. (Optional) If you use the same Username and Password to access the printer's web interface on all printers, you can set a default Username and Password.

    General tab's Control Panel Application section with the username and password fields for default authentication to the printer highlighted.

    The credentials used MUST have administrative rights for the printer you are installing the CPA on.

  7. (Optional) Enable SSO. These settings allow you to lock down the printer so that users must authenticate themselves first before getting access to the printer's control panel.

    General tab's Control Panel Application section showing the Default Single sign-on enable/disable setting.

    • When enabled, additional SSO options display on the printer object's App tab, and when adding printers to the CPA Manager. Those options include:
      • SSO Provider mode will display the PrinterLogic SaaS screen on the printer until the user authenticates.
      • SSO Listener mode runs behind the scenes and listens for when another application acting as the SSO provider authenticates a user and will pass that user info to the CPA.
  8. Scroll back to the top and select Save.

IdP CPA Settings

Configure Settings for an IdP

  1. Open your Admin Console and select Tools then Settings then General.

  2. In the Identity Provider Settings section, ensure that IdP is selected and that the credentials are configured correctly for your IdP.

    General tab's Identity Provider Settings section with the IdP option on the left enabled.

  3. Scroll down to the CPA Specific Settings section.

    General Tab's CPA specific settings section showing the IdP authentication methods, self-registration options, and badge management options.

    Although this section generally shows settings, not all options may be available for all printer manufacturers and models. The Apps tab of the printer object will display the supported options for a specific manufacturer.

  4. Select the options you want available on the Printer Apps tab. 

    Badge and PIN are the only supported authentication methods when using the Control Panel Application (CPA) with an IdP.

    1. Enable PIN Authentication - If this option is enabled, there are two options:

      1. If ONLY Enable PIN Authentication is selected, the PIN gets stored in the IdP database. In this case, mapping to a PIN attribute gets completed within the IdPs admin console.

      2. If both Enable PIN Authentication and the sub-option Enable self registration of PIN for IdPs are enabled, the PIN is stored in the PrinterLogic SaaS database and the end-user must set the PIN in the Self-service Portal. This is done by opening the Self-service Portal, clicking Menu, selecting Authentication, and selecting Manage PIN.

        If you Enable self registration of PIN for IdPs, AND have a PIN attribute mapped in the IdP admin console, this will create conflicts. To mitigate this, you should only configure one option or the other.

    2. Enable Badge Scan Authentication - If this is enabled, there are two options:

      1. If ONLY Enable Badge Scan Authentication is selected, the badge number and associated user ID get stored in the IdP database. In this case, mapping to a badge attribute and user ID attribute is completed within the IdPs admin console.

      2. If both Enable Badge Scan Authentication and the sub-option of Enable managing of badges in PrinterLogic SaaS instead of in IdP is enabled the badge number is managed in the PrinterLogic SaaS database. In this case, the administrator must register each badge on the badge management page or in bulk by CSV. It can also be configured by the end-user within the Self-service Portal. Reference Badge Self Registration Options for steps.

        If you Enable managing of badges in PrinterLogic instead of in IdP, any badge mapping that has been configured in the IdP admin console is ignored by PrinterLogic SaaS.

  5. Scroll down to the CPA section.

  6. (Optional) If you use the same Username and Password to access the printer's web interface on all printers, you can set a default Username and Password.

    General tab's Control Panel Application section with the username and password fields for default authentication to the printer highlighted.

    The credentials used MUST have administrative rights for the printer you are installing the CPA on.

  7. (Optional) Enable SSO. These settings allow you to lock down the printer so a user must authenticate who they are first, before getting access to the printers control panel.

    General tab's Control Panel Application section showing the Default Single sign-on enable/disable setting.

    • When enabled, additional SSO options display on the printer object's Apps tab, and when adding printers to the CPA Manager. Those options include:
      • SSO Provider mode, which will display the PrinterLogic SaaS screen on the printer until the user authenticates.
      • SSO Listener mode, which runs the CPA behind the scenes and listens for when another application acting as the SSO provider authenticates a user and will pass that user info to the CPA.
  8. Scroll back to the top and select Save.

Install the CPA

These steps are to install the CPA on a single printer using the printer object's Apps tab. To install the CPA on multiple printers in bulk, reference CPA Manager for steps.

  1. In the Admin Console Tree Structure, select the printer to install the CPA on.
  2. Select the Apps tab.

  3. In the Manufacturer field, select the printer manufacturer.

    Printer object's Apps tab with the Manufacturer drop-down expanded to show the manufacturers that support the control panel application.

    4. Not all manufacturers support Gen 1 and Gen 2 versions of the CPA. If a manufacturer does not support the Gen 1 version, the Version field will not appear in the interface. Instead, the Admin Console automatically selects the Gen 2 CPA to install.

  4. Select the Service Client you want to use to install the CPA on the printer.
  5. In the Install Embedded Application section, select the Secure Release option.
  6. Check the boxes for any additional apps you wish to install.
    1. Copy/Scan Tracking
    2. QR Code Options

Authentication Options

The subsequent steps outline the settings you may be presented with based on your selected default CPA settings. Only the options you have chosen in the default settings will be visible. Nevertheless, it's important to note that authentication features may vary depending on the printer manufacturer.

  1. Select whether you want to use default admin settings or printer-specific settings to install the application.

    Credentials to use when installing application on this printer section of the Apps tab showing the bubbles where you select to use the default credentials or printer specific credentials.

    The credentials used MUST have administrative rights for the printer you are installing the CPA on.

    1. Make the desired printer-specific CPA selections for end-user sign in and authentication. These options are:

      • Credentials to use when installing PrinterLogic SaaS applications on this printer. You can either set credentials per printer or use a default set of credentials that you can configure in Tools then Settings then General in the CPA section.
      • Single Sign On (SSO). This allows you to lock down the printer, so a user must authenticate who they are first, before getting access to the printers control panel.
        • SSO Provider mode will display the PrinterLogic SaaS screen on the printer until the user authenticates.
        • SSO Listener mode runs behind the scene and listens for when another application acting as the SSO provider authenticates a user and will pass that user info to our CPA.

      • CPA Authentication. Allows setting various authentication methods depending on the printers capabilities. These could be a User ID with PIN Authentication, Badge Scan, or Badge Scan with a PIN.

        Badge and PIN are the only supported authentication methods when using the Control Panel Application (CPA) with an IdP.

        • With Require Pin (beta) enabled, end-users get prompted to enter their PIN after scanning a badge. This feature is incompatible if the CPA gets installed with an SSO option enabled.

      CPA authentication section of the printer object's Apps tab with the Single Sign-on options, and the authentication options for user ID with pin and enable badge scan authentication showing.

      The Extended Debug option located at the bottom of the Printer Apps screen, along with its associated settings, serves troubleshooting purposes and is not necessary for the installation of the CPA.

  2. Select Save to start the installation.

    During the installation process, it is normal for the printer to undergo multiple reboots. Rebooting is an expected behavior as part of the installation procedure.

Uninstall the CPA

  1. Open the Apps tab for the printer you want to uninstall the CPA from.

  2. Un-check the features you want to uninstall from the printer.

    An image of the available features to select to uninstall from the printer

  3. Select Save.