Offline Secure Release Printing

With Offline Secure Release Print (OSRP) users can release a print job from a virtual pull print queue even after the device that sent the print job has shut down, entered sleep mode (low power), hibernate mode (no power), or logged out of a virtual session.

When a user holds a job, the Service Client receives a copy and keeps it in a virtual print queue. When the user goes to release the job, and Virtual Appliance detects the workstation Client is offline, the Service Client releases the copy to the printer.

Requirements

  • At least one Service Client running on Windows.
  • The OSRP Service Client must reach the printers over the network. Additional Service Clients may be required if printers are on different networks.
  • OpenSSL must be installed on the Service Client.
  • Configure your identity provider (IdP / LDAP Domain).
  • Configure Direct Secure Release. See Direct Secure Release for steps.

Port Information

The Service Client machine requires at least one of the following ports, depending on the services you are running.

  • TCP 31989 — OSRP service.
  • TCP 31988 — PrinterApps service (CPA).
  • TCP 31990 — Simple Badge service.

Install OpenSSL

OpenSSL performs the encryption of held print jobs. Install OpenSSL on the Windows Service Client device(s) running the OSRP service.

Install Win32 OpenSSL v3.2.2 .exe on the Windows Service Client device.

  1. On the Service Client device, navigate to https://slproweb.com/products/Win32OpenSSL.html.
  2. Select and download the EXE link.
  3. Run the downloaded file and proceed through the installation process.
  4. Add OpenSSL to the PATH variable.
    1. Select Start and type Path.
    2. Select Edit the system environment variables.
    3. Under the Advanced tab, select the Environment Variables button.
    4. Under the System Variables section, select Path then select Edit.
    5. Select Edit in the new pop-up box.
    6. Double-click the next available empty line and enter the path to the OpenSSL bin folder. For example, C:\Program Files (x86)\OpenSSL-Win32\bin.
  5. After the OpenSSL installation, reboot the machine.

Configure OSRP

1. Enable OSRP Settings & Filtering

Use the steps below to enable OSRP in an environment with Direct Secure Release already configured.

  1. In the Admin Console, navigate to the Pull Printing section on Tools then Settings then Printing.
  2. Select Enable Offline Secure Release Printing.

  3. Optional: Configure OSRP so only designated groups / objects can use this feature.

    1. Under the enable OSRP setting, select Show Filter.

      Show filter option in the secure release printing section.

    2. Select the Add button for options.
    3. Select the desired object type and use the modal to select the appropriate object.
  4. Select Save

Secure Release section showing the offline secure release setting and the filter to add objects.

2. Enable OSRP Service

Enable the OSRP service on the Service Client(s). The OSRP Service Client must be able to reach printers over the network. Printers on different networks require another Service Client to reach them.

  1. In the Admin Console tree view, select a Service Client.
  2. Select the Offline Printing tab.

  3. Select Enable Offline Printing.

  4. Select Save
  5. Access the physical device designated as the Service Client.
  6. Use the system tray icon or start menu to "Refresh Configurations".
  7. Open Task Manager and select the Details tab.
  8. In the Search field type "printer" to locate the Client processes.
  9. Verify the following services.
    1. Client services (PrinterInstallerClient.exe, PrinterInstallerClientInterface.exe, PrinterInstallerClientLauncher.exe).
    2. PrinterLogicServiceManager.exe.
    3. PrinterLogicServiceOfflinePrint.exe.
    4. Other enabled services on the Service Client.

Task Manager showing the Vasion services running and the offline secure release service running.

Define Service Client on IP Address Range

Use the following steps to define the Service Client that users within an IP Address Range utilize when printing through OSRP. This is an optional configuration that is extremely helpful in large environments. With an OSRP Service Client selected on the IP Address Range object, when a user from within the range prints, the copy of the print job goes to that specific Service Client.

For steps on creating an IP Address Range, see IP Address Range Objects.

  1. In the Admin Console, select the desired IP Address Range object.

  2. On the General tab, use the Preferred service client dropdown to select the Service Client.

    Preferred Service Client dropdown on the IP Address Range object.

  3. Select Save