Celiveo Enterprise 8.0.1 Administrators Guide

CELIVEO® ENTERPRISE
PROTECTED BY:
US PATENT 6,889,252
SINGAPORE PATENT 104066
AUSTRALIAN PATENT 2002350998
ADMINISTRATOR ’S GUIDE
VERSION 8.0.116.0627
THIRD EDITION
©2016 Jetmobile Pte Ltd
PIN Code, Smart Card, Swipe Card, Proximity Badge Authentication
Print Job Encryption
Pull Printing & Controlled Delivery
Serverless Pull Printing
Copyright Information
©2011 ‐ 2016 Jetmobile Pte Ltd. All rights reserved.
Parts under license from JetCAPS International Business Strategy SAS
Parts of Imprivata OneSign® are from ©Imprivata Inc.
Protected by US. patent number 6,889,252
Protected by Singapore patent number 104066
Protected by Australian Patent number: 2002350998
Other Patents pending
Reproduction, adaptation, or translation without prior written permission is prohibited except as allowed under
the copyright laws. The information contained herein is subject to change without notice.
The only warranties for Jetmobile products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an additional
warranty. Jetmobile shall not be liable for technical or editorial errors or omissions contained herein.
Device and printer interfaces uses technology developed by Jetmobile Pte Ltd and technology under licensed from
Fuji Xerox, Hewlett‐Packard, Konica Minolta and Ricoh. Jetmobile Pte Ltd and our licensors control all intellectual
property and copyrights in this product.
Trademark Credits:
Celiveo is a registered trademark of Jetmobile Pte Ltd.
SecureJet is a registered trademark of Jetmobile SAS.
OneSign® and Imprivata® are registered trademarks of Imprivata, Inc.
All other marks are the property of their respective owners.
Revision 02/2016
Table of Contents
Celiveo® Enterprise i
Table of Contents
Copyright Information....................................................................................... i
Preface .............................................................................................................. i
About this Guide .......................................................................................................... i
Who should read this Guide ......................................................................................... i
About the other Guides................................................................................................ i
Terms and Acronyms....................................................................................................ii
Special Text Icons ........................................................................................................iii
Chapter 1. Introduction .................................................................................... 1
About Celiveo Enterprise............................................................................................. 1
Usage Scenarios .......................................................................................................... 2
Chapter 2. Architecture Overview .................................................................... 4
Print Job Retention ..................................................................................................... 4
Push Printing ...................................................................................................................... 4
Server‐based Pull Printing ........................................................................................... 4
Serverless Pull Printing................................................................................................ 5
Benefits of Serverless Pull Printing .................................................................................... 5
Print Job Encryption .................................................................................................... 5
Sample configurations of encryption ................................................................................. 6
Direct Printing to device with Celiveo Plug‐in Installed on Client Machine ................................6
Server‐Based Printing with Celiveo Plug‐in installed on the Client Machine .............................. 7
Server‐Based Printing with Celiveo Plug‐in installed on the Print Server ................................... 7
Server‐Based Pull Printing with Celiveo Driver Plug‐in installed on the Client machine and
Celiveo installed on the Print Server .......................................................................................... 8
Server‐Based Pull Printing with Celiveo installed on the Print Server ........................................ 8
Serverless pull printing with Celiveo installed on the print server ............................................. 9
Chapter 3. Setting up Celiveo Hardware ......................................................... 10
About Celiveo Hardware ........................................................................................... 10
Prerequisites ............................................................................................................. 10
Connecting Celiveo Smart Appliance to devices......................................................... 11
Setting up Celiveo Smart Appliance on Devices ..............................................................12
Configuring Network Settings...........................................................................................13
Configuring Fixed IP Network Settings Using USB Flash Drive ................................................. 13
Configuring DHCP IP Network Settings Using USB Flash Drive ................................................ 13
Retrieve logs through USB ................................................................................................14
Enable log retrieval through USB ............................................................................................. 14
Reproduce issue and retrieve the log ....................................................................................... 14
Disable log retrieval through USB............................................................................................. 15
Updating OS Image using USB Flash Drive (Celiveo Smart Appliance 8.1 only)................16
Restoring Celiveo Embedded Solution on Celiveo Smart Appliance 8.0 and 8.1 .............16
LED Behaviour of Celiveo Smart Appliance 8.0 and 8.1 .............................................. 17
LED Behavior for CSA 8.1 .................................................................................................17
LED Behavior for CSA 8.0 ..................................................................................................18
©2016 Jetmobile Pte Ltd Celiveo Enterprise 8.0.116.0627 Administrator’s Guide
Table of Contents
Celiveo® Enterprise ii
Chapter 4. Setting up Celiveo Authentication Hardware ................................. 19
About Celiveo Authentication Hardware ................................................................... 19
Setting up Celiveo Authentication Hardware ............................................................. 19
Plugging in through Celiveo Hardware ............................................................................19
Plugging in Celiveo Authentication Hardware to a Device ..............................................20
Connecting Celiveo Authentication Hardware (External) through USB Port ............................ 20
Connecting Celiveo Authentication Hardware (Embedded) using Hardware Integration
Pocket (HIP) .............................................................................................................................. 21
Configuring Devices for Configuring Authentication Hardware .................................. 21
Chapter 5. Installing Celiveo Server Modules .................................................. 22
File Downloads from Celiveo Knowledgebase (KB) .................................................... 22
Prerequisites for Client Machines and Servers............................................................23
Installation using Celiveo Products Installer ...............................................................24
Installation Procedure ......................................................................................................25
Creating Pull Printer Queues ...........................................................................................36
Maintenance of Modules using Celiveo Products Installer ......................................... 38
Adding or Removing Celiveo Modules .............................................................................38
Repairing/Re‐installing Celiveo Modules .........................................................................38
Uninstalling Celiveo Modules ..........................................................................................39
Installing Celiveo Modules Manually ......................................................................... 39
Installing Celiveo Server Services using Command Prompt .............................................39
Installing Celiveo (CSS) Backend Service using Command Prompt ..................................39
Manually Installing Celiveo Web Admin Software ...........................................................40
Installing Celiveo Web Admin Software on Windows 2003 ..................................................... 40
Installing Celiveo Web Admin Software on Windows 2008 ..................................................... 42
Enabling Integrated Windows Authentication on Windows 2003 ........................................... 44
Enabling Windows Authentication on Windows 2008 ............................................................. 45
Uninstalling Celiveo Modules Manually..................................................................... 45
Uninstalling Celiveo Solutions using Command Prompt ..................................................46
Uninstalling Celiveo Server Services using Command Prompt ........................................46
Uninstalling Celiveo (CSS) Backend Service using Command Prompt ...................................... 46
Uninstalling Celiveo Solutions through Control Panel .....................................................47
Uninstalling Celiveo Web Admin Software through Control Panel .......................................... 47
Uninstalling Celiveo Server Services through Control Panel ..................................................... 48
Uninstalling Celiveo Print‐SMP Driver Plug‐In through Control Panel ..................................... 48
Uninstalling Celiveo Print Manage through Control Panel ...................................................... 48
Uninstalling Celiveo Track‐GreenSaver Admin through Control Panel .................................... 48
Uninstalling Celiveo Track‐GreenSaver Report through Control Panel .................................... 49
Uninstalling Celiveo Imprivata OneSign through Control Panel .............................................. 49
Chapter 6. Installing Serverless Pull Printing and Track‐PM ............................ 50
Configuring Print Queue (PrintQueue.ini) File............................................................ 50
Installing Serverless Pull Printing and Track‐PM on Windows Operating System ....... 51
Prerequisites to Install Serverless Pull Printing and Track‐PM ........................................51
Encrypting SecurejetDPI‐API.ini Configuration File .................................................................. 52
Importing SDPP.reg from Server to Client ................................................................................ 53
Downloading and Saving Serverless Pull Printing Configuration (SDPP.reg.sjpscfg) ............... 53
Database Connection Optimization for Serverless Pull Printing Clients ................................... 54
Installing Serverless Pull Printing and Track‐PM ..............................................................55
Table of Contents
Celiveo® Enterprise iii
Un‐installation Utility ............................................................................................................... 56
Installing only Serverless Pull Printing Client ...................................................................57
Installing only Track‐PM ...................................................................................................58
Installing Serverless Pull Printing and Track‐PM using Command Prompt (Silent
Installation)............................................................................................................... 58
Installing Track‐PM ..........................................................................................................58
Uninstalling Track‐PM.......................................................................................................59
Uninstalling Serverless Pull Printing ................................................................................59
Deleting Serverless Pull Printing Shortcuts ......................................................................60
Creating Print Queue .......................................................................................................61
Chapter 7. Quick Configuration of Celiveo Solution ........................................ 62
Configuring Celiveo Solution using Quick Configuration ............................................ 62
Adding a Device to the Quick Group.................................................................................63
Selecting Authentication Type .........................................................................................63
Setting up User Directory Profile .....................................................................................64
Adding Celiveo Server Services ........................................................................................64
Selecting Device Activity...................................................................................................65
Adding Celiveo Embedded Solution .................................................................................65
Synchronizing a Device ....................................................................................................65
Uninstalling Celiveo Solution Using Celiveo Web Admin Software ..................................66
Chapter 8. Configuring Celiveo Web Admin .................................................... 67
Introduction .............................................................................................................. 67
Celiveo Web Admin Features .................................................................................... 67
Understanding Celiveo Web Admin Software Interface ..............................................69
Quick Configuration .................................................................................................. 70
Viewing QuickGroup ........................................................................................................70
Configuring Printer Settings of a QuickGroup ..................................................................71
Adding Devices to QuickGroup ................................................................................................. 71
Removing Selected Devices ...................................................................................................... 72
Synchronizing Devices............................................................................................................... 73
Removing Devices Forcibly ....................................................................................................... 73
Printer List ........................................................................................................................73
Authentication ..................................................................................................................74
Configuring Authentication Type Setting ................................................................................. 74
Configuring User Directory Profile Settings .............................................................................. 75
Configuring Celiveo Server Services Settings ............................................................................ 75
Configuring Activity Setting ..................................................................................................... 76
Configuring Secure Print ..................................................................................................76
Configuring Tracking ........................................................................................................76
Configuring Group Settings ..............................................................................................76
Changing Language Settings ................................................................................................... 77
Migrating QuickGroup to Advance Configuration Section ....................................................... 77
Advance Configuration .............................................................................................. 77
Embedded Solution Viewer ....................................................................................... 78
Viewing Celiveo Embedded Solution ...............................................................................78
Adding Celiveo Embedded Solution .................................................................................78
Deleting Celiveo Embedded Solution ..............................................................................79
Saving Celiveo Embedded Solution ..................................................................................79
Table of Contents
Celiveo® Enterprise iv
Printer Management ................................................................................................. 79

All Printers List .................................................................................................................79
Viewing a List of All Devices ..................................................................................................... 80
Adding Devices to All Printers List ............................................................................................ 81
Enabling/Disabling Printer Logs ............................................................................................... 82
Deleting Devices from All Printers List ..................................................................................... 83
Moving a Device from One Group to Another (Modifying) ...................................................... 83
Ungrouped Printer List .....................................................................................................83
All Groups List ..................................................................................................................84
Viewing a List of All Device Groups .......................................................................................... 84
Creating Device Group ............................................................................................................. 85
Editing or Modifying Device Group .......................................................................................... 86
Deleting Device Group ............................................................................................................. 86
Setting Password for Device Groups ........................................................................................ 86
Synchronizing Device Groups With Group Configuration ......................................................... 87
Configuring Device Groups ..............................................................................................87
Configuring Authentication for Device Groups ........................................................................ 88
Configuring Billing for Device Groups ...................................................................................... 93
Configuring Secure Print for Device Groups ............................................................................. 94
Configuring Tracking for Device Groups .................................................................................. 99
Configuring Email Encryption for Device Groups ....................................................................103
Configuring Device Group Settings .................................................................................104
Viewing Details of Device Groups ..........................................................................................104
Renaming Device Groups .......................................................................................................104
Changing Group Language ....................................................................................................105
Configuring Network Time Protocol Server for Device Group ...............................................105
Linking Devices to Groups ......................................................................................................106
Configuring Device Groups for Print Jobs ...............................................................................107
Removing Devices from the Group .........................................................................................107
Synchronizing Devices with a Device Group ...........................................................................108
Server Management................................................................................................ 109
All Server List .................................................................................................................109
Viewing Details of All Server List ............................................................................................110
Adding Celiveo Server Services to All Servers List ...................................................................110
Deleting Servers from All Servers List .....................................................................................112
Modifying Servers in All Server List ........................................................................................112
All Server Groups List .....................................................................................................113
Viewing Server Groups in All Server Groups List ....................................................................114
Creating Server Groups ..................................................................................................114
Deleting Server Groups ..........................................................................................................115
Configuring Server Groups .....................................................................................................115
Synchronizing Servers in Server Groups .................................................................................118
Synchronizing Server Groups ..................................................................................................118
Manage Profiles ...................................................................................................... 119
Offline Authentication Lists ...........................................................................................120
Viewing Details of Offline Authentication Lists .............................................................120
Creating Offline Authentication Lists .....................................................................................121
Deleting Offline Authentication Lists .....................................................................................122
Configuring Offline Authentication Lists ................................................................................123
Setting User Rights for Offline Authentication List ................................................................126
Configuring Failover to Offline Authentication List ................................................................127
Configuring Directory Synchronization and Notification ...............................................127
Configuring Billing Lists ..................................................................................................129
Viewing Details of Billing Lists ...............................................................................................130
Creating Billing Lists ...............................................................................................................130
Table of Contents
Celiveo® Enterprise v
Deleting a Billing List ..............................................................................................................131
Configuring Billing Lists ..........................................................................................................131
Viewing Detailed Information of Billing List ...........................................................................132
Configuring User Directory Profiles ................................................................................133
Viewing Details of User Directory Profiles .............................................................................133
Creating User Directory Profiles .............................................................................................133
Deleting User Directory Profiles .............................................................................................134
Duplicating User Directory Profiles ........................................................................................134
Configuring User Directory Profiles ........................................................................................134
Smart Card Profiles ........................................................................................................142
Viewing Smart Card Profile ....................................................................................................143
Deleting Smart Card Profiles ..................................................................................................144
Duplicating Smart Card Profiles .............................................................................................144
Configuring Smart Card Profiles .............................................................................................144
Authentication Profiles ..................................................................................................148
Viewing Authentication Profile ..............................................................................................148
Creating Authentication Profile .............................................................................................149
Deleting Authentication Profiles ............................................................................................149
Duplicating Authentication Profiles .......................................................................................149
Configuring Authentication Profiles .......................................................................................149
SQL Server Profiles .........................................................................................................155
Viewing SQL Server Profile .....................................................................................................156
Creating SQL Server Profiles ...................................................................................................156
Deleting SQL Server Profiles ...................................................................................................156
Duplicating SQL Server Profiles ..............................................................................................157
Configuring SQL Server Profiles ..............................................................................................157
Setting up SQL Database ........................................................................................................157
Configuring SAP System Profiles ....................................................................................158
Global Settings ........................................................................................................ 159
Schedulers ......................................................................................................................159
Configuring Offline Authentication Scheduler .......................................................................159
Configuring Stale CSS Record Cleanup Scheduler ...................................................................162
Device‐Specific Settings .................................................................................................163
Configuring Ricoh Settings .....................................................................................................163
Configuring HP FutureSmart Settings ....................................................................................164
Configuring SNMP Settings ............................................................................................164
Notification ....................................................................................................................167
Configuring Offline Authentication Notification ....................................................................167
Configuring Auto Un‐Enrollment Notification.........................................................................169
Configuring Auto Sync Enrollment Notification .....................................................................170
Configuring Tracking Notification ..........................................................................................170
Configuring Event Logger Notification ...................................................................................170
Configuring Dual Factor Authentication for Devices .....................................................170
Configuring Dual Factor Authentication for Device Groups ..........................................171
Configuring SMTP Settings .............................................................................................171
Celiveo Encryption Keys .................................................................................................172
AES Encryption with User Certificate .....................................................................................172
AES Encryption with PKI Technology ......................................................................................172
Creating Corporate Keys ........................................................................................................173
Deleting Corporate Keys ........................................................................................................173
Viewing Corporate Keys List ...................................................................................................173
Viewing Celiveo Corporate Key Details ...................................................................................174
License Management ............................................................................................... 175
Requesting Licenses .......................................................................................................175
How the License System Works .....................................................................................176
Table of Contents
Celiveo® Enterprise vi
Uploading License Files ..................................................................................................176
Deleting License Files .....................................................................................................177
Viewing License Details ..................................................................................................177
Viewing Embedded License Details ........................................................................................177
Viewing TGS License Details ...................................................................................................179
Removing All License Tokens..........................................................................................180
Configuring Embedded License .....................................................................................180
Chapter 9. Configuring Celiveo Server Services ..............................................181
Configuring Celiveo Authentication Gateway .......................................................... 181
Direct User Directory Authentication ............................................................................181
Configuring User Directory Authentication.............................................................................182
User Directory Profile Failover ...............................................................................................182
Indirect User Directory Authentication .........................................................................182
Multiple Database Support ....................................................................................................183
Failover Capability .................................................................................................................183
Configuring Celiveo Server Services Authentication Gateway Settings .................................183
Configuring Directory Server Authentication .........................................................................187
Configuring Celiveo Server Services for Multiple Domain ........................................ 187
Configuring Celiveo User Rights............................................................................... 188
Activating the User Right Feature ..................................................................................188
Configuring User Rights using Directory Server .....................................................................188
Configuring User Rights using .CSV File .................................................................................190
Defining User Rights Keys in .CSV file .....................................................................................190
Configuring Tracking................................................................................................ 191
Configuring User Enrollment ................................................................................... 191
Enrollment Prerequisites ...............................................................................................192
File Enrollment ...............................................................................................................192
Enrollment with Roaming ...............................................................................................194
Enrollment in Active Directory .......................................................................................194
Defining the Enrollment Mode ......................................................................................194
Configuring File Enrollment ....................................................................................................194
Configuring Enrollment with Roaming ...................................................................................195
Configuring Enrollment in Active Directory ............................................................................196
Managing Enrolled Users ...............................................................................................196
Prerequisites ..........................................................................................................................196
Browsing User List ..................................................................................................................196
Selecting Users .......................................................................................................................197
Editing Users ..........................................................................................................................197
Deleting Users ........................................................................................................................197
Configuring Aliases ‐ Single Sign‐On......................................................................... 197
Alias Single Sign‐On Overview .......................................................................................197
Configuring the Alias Single Sign‐On Feature ........................................................................198
Configuring Value to Search Replacement Settings ...............................................................198
Configuring Celiveo Pull Print Service ...................................................................... 198
Configuring Celiveo Job Retention .................................................................................198
Configuring Quota Notification.......................................................................................202
Advanced Options ..................................................................................................................203
Configuring Print Job Purge ...........................................................................................205
Configuring Celiveo Job Purge to Generate Expired Job Log Files .................................205
In Windows Server 2003 ........................................................................................................206
In Windows Server 2008 R2 ...................................................................................................206
Table of Contents
Celiveo® Enterprise vii
Configuring Roaming Pull Printing .................................................................................208
Prerequisites for Roaming Printing .........................................................................................209
Configuring Roaming .............................................................................................................209
Testing the SQL Database Connection ...................................................................................210
Creating Job Tickets Database ...............................................................................................210
Synchronizing the Roaming Database ...................................................................................211
Roaming Database Sync Interval Seconds .............................................................................211
Configuring Unencrypted Secure Printing ................................................................ 211
Unencrypted Secure Printing for ERPs ...........................................................................211
Unencrypted Secure Printing for SAP R/3 ......................................................................212
Modifying the Device Type ............................................................................................212
Replacing the Job Header Sequence ..............................................................................212
Replacing the Job Trailer Sequence ...............................................................................213
Activating the Device Type ............................................................................................213
Configuring Encrypted Secure Printing..................................................................... 213
AES Encryption with PKI Technology .............................................................................214
DES Encryption .......................................................................................................................214
Raw Printing ...........................................................................................................................214
Deploying and Configuring Serverless Pull Printing.................................................. 215
Serverless Pull Printing Overview ..................................................................................215
Installing Central Celiveo Server Services ......................................................................216
Configuring Celiveo Server Services ...............................................................................216
Saving Celiveo Server Services Configuration ................................................................216
Installing Client Side Serverless Pull Printing Service .....................................................218
Prerequisites ..........................................................................................................................218
Configuring Client‐Side Serverless Pull Printing Service ................................................218
Automating the Serverless Pull Print Queue during Installation ............................................218
Configuring Serverless Pull Printing IP Tracking .............................................................219
Modifying the SPPConfig.xml File on Serverless Pull Printing Client ......................................219
Configuring DB Gateway Services...........................................................................................221
Configuring Stale CSS Record Cleanup Scheduler ...................................................................221
Configuring Cache Settings for Serverless Pull Printing ............................................ 221
Configuring Printer Port Pooling.............................................................................. 222
Configuring Scheduler ............................................................................................. 222
Auto Un‐enrollment .......................................................................................................222
Configuring Auto Un‐enrollment ............................................................................................222
Configuring Scheduler ............................................................................................................223
Auto Sync Enrollment ....................................................................................................224
Configuring Auto Sync Enrollment .........................................................................................225
Configuring Track‐Print‐ID ....................................................................................... 225
Enabling License for Track‐Print‐ID in Celiveo Web Admin ...........................................225
Enabling Celiveo Pull Print Queue Stamping .................................................................226
Configuring Celiveo Pull Print Queue Stamping .............................................................227
Limitations .....................................................................................................................228
Chapter 10. Configuring Celiveo Track‐GreenSaver ........................................229
Configuring Celiveo Track‐GreenSaver Service......................................................... 230
Deleting Celiveo Track‐GreenSaver Service‐Specific Users ....................................... 232
Configuring Advanced Track‐GreenSaver Settings Options ...................................... 232
Configuring Advanced Track‐GreenSaver Settings ........................................................232
Table of Contents
Celiveo® Enterprise viii
To configure Advanced Celiveo Track‐GreenSaver settings: ..................................................232
Setting up Paper Sizes ....................................................................................................233
Configuring Custom Database Fields ..............................................................................235
Configuring Active Directory Settings ............................................................................235
Configuring Printer Setting ....................................................................................... 236
Setting Default Cost Profile ............................................................................................236
Setting Pull Print Cost Profile .........................................................................................238
Setting Cost Profile ........................................................................................................238
Configuring Rule Based Printing .............................................................................. 238
Configuring Printing Rules for User Groups and Organizational Units ..........................239
Configuring Printer Restrictions .....................................................................................240
Configuring Restriction Actions .....................................................................................241
Configuring Quota ..........................................................................................................243
Configuring Applied Group/OU Settings ........................................................................246
Chapter 11. Configuring Celiveo Track‐GreenSaver Reports ...........................248
Accessing Celiveo Track‐GreenSaver Reports........................................................... 248
Celiveo Track‐GreenSaver Reports Page Layout....................................................... 249
Viewing Celiveo Track‐GreenSaver Reports ............................................................. 250
Tracking Deleted or Expired Jobs............................................................................. 252
Report Types ........................................................................................................... 252
Reports by Summary ......................................................................................................252
Reports by Details...........................................................................................................253
Report Categories ................................................................................................... 253
Chapter 12. Configuring Celiveo Print Manage ...............................................255
Introduction ............................................................................................................ 255
Administrator Benefits ...................................................................................................255
User Benefits ..................................................................................................................255
Prerequisites for Installing Celiveo Print Manage ..........................................................255
Administrator Access ............................................................................................... 256
Logging into Administration ...........................................................................................256
Configuration Tabs (Celiveo Print Manage Application).................................................258
Active Directory ......................................................................................................................258
PIN Generation .......................................................................................................................259
Celiveo Server .........................................................................................................................259
Admin Password ....................................................................................................................259
User Interface .........................................................................................................................260
SMTP Server ...........................................................................................................................260
Enabling Windows Authentication for User Access ................................................... 261
Creating an SSL Certificate .............................................................................................261
Linking SSL Certificate to Celiveo Print Manage ............................................................262
Windows Login ...............................................................................................................262
Configuration Tool .........................................................................................................263
Accessing Celiveo Print Manage Software from Different Machine .............................263
Customizing Celiveo Print Manage Website ..................................................................264
Chapter 13. Configuring Celiveo Print‐SMP Driver Plug‐In ..............................265
Celiveo Print‐SMP Driver Plug‐In Installation Prerequisites...................................... 265
Table of Contents
Celiveo® Enterprise ix
Installing Celiveo Print‐SMP Driver Plug‐In .............................................................. 265

Deploying Celiveo Print‐SMP Driver Plug‐In on Remote ystems ................................ 266
Connecting to Device Shared on Celiveo Server Services ..............................................267
Securing Windows Device Port on a Local System ........................................................267
Defining Print Queue ..............................................................................................................267
Securing Device ......................................................................................................................268
Installing the Driver Plug‐In on Windows Clients with Netware Print Server ................268
Installing Print Server .............................................................................................................269
Installing Client ......................................................................................................................269
Configuring Celiveo Print‐SMP Driver Plug‐In........................................................... 270
Deactivating the Celiveo Print‐SMP Driver Plug‐In ................................................... 274
Printing through Celiveo Server Services ................................................................. 274
Printing through Novell Print Servers ............................................................................274
Printing from Unix system through Windows Print Server ............................................274
Configuring the Secure Print Job Parameters............................................................ 275
Sending Secure Print Jobs to the Device ........................................................................275
Printing for User under Windows ..................................................................................277
Sending Documents to Other Users in Windows Machines ...........................................278
Sending Documents to a Department in Windows Systems .........................................278
Releasing Celiveo Print Jobs .................................................................................... 279
Releasing Print Jobs on Multi‐function Printers ............................................................279
Releasing the Print Job on Single‐Function Printers ......................................................279
Chapter 14. Troubleshooting .........................................................................280
Information Messages............................................................................................. 280
Error Messages........................................................................................................ 280
Single‐Function Printer Error Messages ........................................................................280
Multi‐Function Printer Error Messages ..........................................................................281
Connectivity Issues .................................................................................................................282
Enrollment‐related Issues .......................................................................................................284
Other Messages .....................................................................................................................285
Card Reader Error Messages ..................................................................................................285
Troubleshooting for Celiveo Installer Installation ..................................................... 288
Troubleshooting for Serverless Pull Printing and Track‐PM...................................... 288
Installation Troubleshooting ..........................................................................................288
Operation Troubleshooting ...........................................................................................288
Troubleshooting for Celiveo Track‐GreenSaver Error Messages ............................... 289
Chapter 15. Special Notes ..............................................................................293
Enabling Celiveo Logs Retrieval ............................................................................... 293
Enabling Web Admin Logs and Printer Logs Using Web Admin ....................................293
Enabling Web Admin Logs .....................................................................................................293
Enabling Printer Logs ..............................................................................................................294
Enabling Celiveo Server Services Logs ...........................................................................295
Enabling HTTPS Communication between Celiveo Web Admin and Device.............. 295
HTTPS Setup ...................................................................................................................295
Denying Incoming and Outgoing Transactions from Server on Port 80 ........................296
Setting up Admin Software for HTTPS Communication .................................................296
Setting up Device for HTTPS Communication.................................................................297
Table of Contents
Celiveo® Enterprise x
Adding Firewall Exceptions...................................................................................... 297
Allowing Connections to SQL Server by TCP Port ..........................................................297
Adding Firewall Exception By Application (SQL Server)..................................................298
Granting Read/Write Access to Temp Folder ........................................................... 298
Chapter 16. Migration Support ......................................................................300
Overview................................................................................................................. 300
Order of Migration .................................................................................................. 300
Migrating Celiveo Server Services............................................................................ 300
Migrating Celiveo Web Admin Software ................................................................. 301
Uninstalling and Saving Securejet Web Admin Configuration .......................................301
Installing the 8.0.x Celiveo Web Admin Software ..........................................................302
Migrating Celiveo Embedded Solution on the Device ...................................................302
Testing Successful Migration to the 8.0.x Version (Optional) ........................................303
Migrating Celiveo Track‐GreenSaver........................................................................ 304
Migrating Celiveo Track‐GreenSaver Database .............................................................304
Chapter 17. Cluster Environment Set‐up ........................................................305
Cluster Environment Overview................................................................................ 305
Prerequisites for Cluster Environment Setup .......................................................... 305
Installing and Configuring Celiveo Solution in Cluster .............................................. 306
Configuring High Available Print Server Resource in the Cluster ...................................306
Installing and Configuring Celiveo Server Services in the Cluster ..................................309
Installing and Configuring Celiveo Server Services on the Cluster Nodes ...............................309
Adding Celiveo Server Services to Celiveo Web Admin Software ...........................................310
Upgrading Celiveo Server Services in Cluster Environment ....................................................310
Configuring and Hosting a Shared Printer Device in the Cluster ...................................310
Installing and Configuring Track‐GreenSaver in the Cluster ..........................................312
Installing Track‐GreenSaver on the Cluster Nodes .................................................................312
Creating the Track‐GreenSaver Resource ..............................................................................314
Configuring the Cluster Service within Track‐GreenSaver Service .........................................319
Appendix A ‐ Ports and Communication .........................................................321
Celiveo ‐ All Ports Summary .................................................................................... 322
Appendix B ‐ Card Reader Specifications ........................................................328
Celiveo Card Reader Specifications.......................................................................... 328
Celiveo Multicard Reader Type A Specifications ...........................................................328
Celiveo Multicard Reader Type B Specifications ............................................................329
Appendix C ‐ Track‐GreenSaver Database Backup...........................................331
Introduction ............................................................................................................ 331
Backing up an MS SQL/MSDE database with the Microsoft SQL Server Management
Studio Express......................................................................................................... 331
Creating the Backup .......................................................................................................331
Backing up an MS SQL/MSDE Database Files Manually............................................. 335
Creating the Backup Manually: ......................................................................................335
Appendix D ‐ Consolidated Celiveo Web Admin Activity & Device Features
Mapping ........................................................................................................337
Table of Contents
Celiveo® Enterprise xi
End User License Agreement ......................................................................... 339
User Notification ........................................................................................... 342
Declaration of Conformity ............................................................................. 370
Index..............................................................................................................373
Preface
Celiveo® Enterprise i
Preface
1 About this Guide
This document is the Celiveo® Enterprise 8.0.1 Administrator’s Guide. It provides complete information
on installing and administering Celiveo Enterprise.
2 Who should read this Guide
This manual is intended for the system administrators who are responsible for configuring and managing
the printing environment.
3 About the other Guides
The Celiveo Enterprise User‘s Guide provides detailed device‐specific instructions on using the Celiveo
Enterprise product. Find more information on the Celiveo solution, you can also refer to the following
guides. Download the latest version from https://www2.celiveo.com/kb/files/:
Celiveo Enterprise Administrator's Guide
Celiveo Enterprise Quick Configuration Guide
Celiveo Enterprise Advance Configuration Guide
Celiveo Enterprise Device Administrator's Guide
Glossary
Celiveo® Enterprise ii
Glossary
1 Terms and Acronyms
There might be instances in the document of the term “SecureJet” being used instead of “Celiveo”.
This is part of our ongoing branding effort and will be taken care of in future.
This section lists the standard terminology used in Celiveo.
Acronym Full Form Definition

Celiveo Server
CSS The central authentication and print server.
Services
An access control method to a server in a public network. It
contains a list of subscribers with their digital certificate status.
Includes the list of revoked certificates, reason for revocation, date
Certificate of certificate issue, who issued them. The server allows or denies
CRL
Revocation List access based on the CRL entry for the particular user.
Source: http://searchsecurity.techtarget.com/definition/
Certificate‐Revocation‐List
Comma Separated
CSV This file stores tabular data in plain‐text form.
Values
Dynamic Host
A networking protocol to automatically distribute IP address to
DHCP Communication
computers from a server
Protocol
Media Access Provides address and access for communication among terminals
MAC
Control and network nodes
Transmission
TCP‐IP Control Protocol‐ The core protocol of the Internet protocol suite.
Internet Protocol
Local Area A computer network within a limited area, such as, a small office
LAN
Network building.
Simple Network
A protocol to manage devices on IP networks, usually supported by
SNMP Management
devices, such as, printers, routers, switches, and so on.
Protocol
Embedded Web
EWS Web portal to access a HP printing device.
Service
Glossary
Celiveo® Enterprise iii
2 Special Text Icons
This section lists the icons used in the document to indicate special text, such as notes, tips, important
information, caution and warning.
Icon Meaning When Is It Used

Provides additional information related to the text.
Note
Can be both helpful and noteworthy.
Provides hints and pointers to help the user accomplish a task.
Tip
Tips are discretionary.
Provides important information related to the task.
Important
Also highlights limitations and prerequisites.
Provides information where caution is to be exercised.
Caution
Helps avoid potential complications.
Provides information that is critical to successfully accomplish a task.
Warning
Helps avoid undesirable consequences.
Introduction
Celiveo® Enterprise 1
1. Introduction
This chapter provides information on the Celiveo Enterprise features and usage scenarios.
1 About Celiveo Enterprise
Celiveo Enterprise is a suite of software solutions providing secure printing, authentication and tracking
functionalities designed to help mitigate security and compliance risks, prevent fraud, protect data
privacy, and enhance fleet management.
The Celiveo Enterprise product is available with two licensing options:
Celiveo Enterprise
Celiveo Enterprise Premium
This guide covers the following Celiveo Enterprise modules:
Celiveo Authentication
This module supports enhanced print security through authentication and authorization. It supports
authentication options ranging from PIN code login to card‐based capabilities.
Celiveo Secure Printing
This module helps to reduce paper waste by allowing print jobs to be encrypted and stored on the device
(push printing), until the user is ready to retrieve and print.
Celiveo Pull Printing
This module helps to increase productivity and ease printing by providing print mobility for enterprise‐
class companies, through storage of print jobs on the server, roaming printing, and single sign‐on.
Celiveo Track‐PM
This module is installed on the client machine. It tracks and monitors the user’s secure printing activities
on the machine. This module also enforces printing rules and printing cost balance quota defined in
Celiveo Track‐GreenSaver. It provides pop‐up notification when a printing rule is violated, or when the
cost balance quota is insufficient.
Celiveo Track‐EM
This module is installed on the printing devices. It tracks and monitors the activities of the Celiveo‐
enabled devices. It also collects data on usage information which can be used for generating reports.
Celiveo Track‐GreenSaver
Celiveo Track‐GreenSaver tracks user activities, such as, print, copy and scan on the devices using the
Celiveo Track‐EM module. Celiveo Track‐GreenSaver allows functions such as: rule‐based printing, billing,
quota, and pre‐payment, and setting of job restrictions for individual users, or groups of users, devices, or
organizational units.
Celiveo Track‐GreenSaver generates reports to identify the performance and usage of the devices of
individual users or groups. It displays daily print reports, and also calculates the cost of printing.
Introduction
The figure below illustrates the Celiveo network architecture diagram.
2 Usage Scenarios
The following examples show the sequence of events for four fictional Celiveo scenarios.
Example 1 – Secure Scan to E‐mail
An administrative assistant needs to scan and email a contract to a client.
Walks up to a multifunction device, and authenticates using an authorized proximity badge.
Loads the contract in the document loader, and touches the E‐MAIL button. The system
automatically fills in the name and e‐mail address (of the authenticated person) as the sender of
the e‐mail.
Enters the recipient e‐mail address and touches OK.
The scanned contract is sent to the client immediately.
Touches the SIGN OUT button to sign out of the system.
Example 2 – Secure Printing and Retrieval of Documents
It is Tuesday morning. An engineer arrives at work knowing that there are a series of documents to create
and print that day.
At 9:00 A.M., writes a letter and prints it to Celiveo Shared Print queue.
At 9:45 A.M., modifies a technical specification, and prints it to Celiveo Shared Print queue.
At 11:00 A.M., writes the latest meeting report and prints it to Celiveo Shared Print queue. All three
of the documents are stored in a secure manner on the Celiveo server.
Introduction
At noon, leaves for lunch, and comes back at 1:00 P.M. Walks up to the first available device and
authenticates using an authorized badge.
All the print jobs that are printed since morning will be available for release, and the printed
documents are retrieved .
Logs out of the Celiveo system and goes back to desk to resume work.
Example 3 – Secure Printing for a Department Recipient
A hospital is organized with pools of nurses. The hospital software is configured to print documents
for a nurse pool instead of individual nurses, because individual nurses may not be available to
retrieve a specific patient’s document when needed. The patient’s documents are encrypted for
HIPPA compliance and securely stored on the Celiveo server.
A nurse belonging to a particular pool of nurses authenticates on an available printer or a multi‐
function device using an authorized badge.
A nurse requests printout of a document. If one nurse is too busy to release a document, another
nurse from the same pool can collect a document that was previously assigned to the pool of
nurses.
The document is printed. After the document is decrypted and printed, the stored print job is
deleted, so it is not processed twice.
Example 4 – Secure Printing for a Remote Third Party
A corporate attorney in London sends a confidential contract to be printed by the Chief Legal
Officer in New York.
The London attorney enters a billing code for the print job, allocating the cost of the print job to
Client A.
The print job is encrypted and stored on a server in Europe.
The Chief Legal Officer in New York goes to the local multi‐function device and authenticates. The
device displays the pending print jobs, and the officer sees the print job sent by the London
corporate attorney.
The Chief Legal Officer requests the release of the print job and retrieves the confidential contract,
decrypted and printed in New York.
Architecture Overview
2. Architecture Overview
Celiveo provides the following independent features to protect your print job information:
Print Job Retention
Server‐based Pull Printing
Serverless Pull Printing
Print Job Encryption
1 Print Job Retention
Print job retention and controlled release ensures that the printed documents reach the hands of the
authorized personnel only.
Celiveo provides three ways to perform print job retention:
Push Printing
Server‐based Pull Printing
Serverless Pull Printing
1.1 Push Printing
In Push Printing, jobs are sent to the device for authentication and release. Push Printing is convenient as
it makes a powerful serverless secure printing solution. On the other hand, the limited hard disk drive
capacity on a device can be an issue as compared to that of a server, if large jobs are to be retained. The
print jobs can also be released only from the device where they are stored.
Push Printing is supported on HP devices with a hard disk drive, and a minimum disk space of 30GB.
The Push Printing feature is not supported on CM8050 and CM8060 multi‐function printers.
Printers must have storage media (HDD, USB stick) with 50MB free, and an active TCP‐IP LAN
connection.
2 Server‐based Pull Printing
Server‐based Pull Printing occurs when a print job is stored on a designated server until a user
authenticates at a Celiveo‐enabled device, and pulls the selected job from the server to the printer.
Retention on print servers require more configuration, but is more scalable.
The Server‐based Pull Printing architecture involves the central print server for user authentication, job
listing, and release. Print jobs are retained on the hard disk drive of Celiveo Server Services for later
release from any Celiveo‐enabled printing device upon user authentication.
The storage capacity is configurable and a user or a department can be allocated up to 100 print
jobs or 25 MB, depending upon the capacity of the hard disk drive on the server.
3 Serverless Pull Printing
In Serverless Pull Printing, a print job is stored on the client machine until a user authenticates at a
Celiveo‐enabled device, and pulls the selected job from the client machine to the printer. Serverless Pull
Printing reduces the load on the central Print Server (central Celiveo Server Services) by moving all the
job‐processing activities from the server machine to the client machine, and by caching the client
machine details on device storage media (hard disk, USB, Compact Flash). With this implementation, the
user is not entirely dependent on the Celiveo Server Services for authentication, or for print job listing.
Serverless Pull Printing makes use of the authentication cache and the Pull Printing directory cache on the
device. The central Celiveo Server Services acts as the authentication and printing server for the first user
session. In the subsequent user sessions, the Serverless Pull Printing architecture uses the Authentication
cache as a failover mechanism to authenticate users (if the central Celiveo Server Services or the Direct
LDAP/AD server is down), and the Pull Printing Directory cache is used as the primary mechanism for
retrieval of the print job from the last used client machine.
The authentication cache stores the user details after the first successful authentication through Celiveo
Server Services or through the Direct LDAP/AD profile. The device looks up user details from the
authentication cache for user authentication, if Secure Server Services or the Direct LDAP/AD server is
down in the subsequent user sessions.
After the first session, the print job is retrieved using the IP address of the client machine, that is stored in
the Pull Printing Directory cache. The print jobs are retrieved from the client machines running the
Serverless Pull Printing client software.
The authentication cache and the Pull Printing Directory cache options can be enabled from the
Celiveo Web Admin Software.
3.1 Benefits of Serverless Pull Printing
Serverless Pull Printing reduces the load on Celiveo Server Services (CSS) by diverting the job processing
load on to the client machines, providing a seamless printing experience:
The user can be authenticated on the device even when Celiveo Server Services goes down.
The user can print jobs, even if the database server that stores print job details is unavailable.
The user can be authenticated on the device and can print jobs, even when both Celiveo Server
Services and the database server are down.
4 Print Job Encryption
Print job encryption ensures that no one sees or alters the print job data. The following encryption actions
are available:
Job encryption only
Control of job release only
Job encryption and control of job release
4.1 Sample configurations of encryption
Jobs must be processed by the Celiveo plug‐in, and need to be accepted by Celiveo. The Celiveo plug‐in
can be installed either on the client PCs, or on the print server.
4.1.1 Direct Printing to device with Celiveo Plug‐in Installed on Client Machine
Jobs are encrypted from the client machine to the device.
Jobs are retained on the hard disk drive of the printing device for release upon authentication.
4.1.2 Server‐Based Printing with Celiveo Plug‐in installed on the Client Machine
 Jobs are encrypted all the way from the client machines to the device through the print server.
4.1.3 Server‐Based Printing with Celiveo Plug‐in installed on the Print Server
Jobs are encrypted from the server print queue to the device.
4.1.4 Server‐Based Pull Printing with Celiveo Driver Plug‐in installed on the
Client machine and Celiveo installed on the Print Server
Jobs are encrypted all the way from the client machines to the device.
Jobs are retained on the print server for release from any Celiveo‐enabled device upon
authentication.
4.1.5 Server‐Based Pull Printing with Celiveo installed on the Print Server
Jobs are encrypted from the server print queue to the device.
Jobs are retained on the print server for release from any Celiveo‐enabled device upon
authentication.
4.1.6 Serverless pull printing with Celiveo installed on the print server
Jobs are encrypted at the Serverless Pull Print client machine.
Jobs are retained at the Serverless Pull Print client machine.
Setting up Celiveo Hardware
3. Setting up Celiveo Hardware
This chapter introduces the Celiveo Smart Appliance setup and the instructions to connect it to the
devices.
1 About Celiveo Hardware
Celiveo Hardware is a general reference to hardware that is required to deploy the Celiveo solution
comprising of:
Celiveo Smart Appliance
Celiveo Authentication Hardware
Celiveo card reader (Proximity card, Smartcard, Swipe card)
Celiveo external keypad
Depending on the device model, the Celiveo Authentication Hardware may be attached to the Celiveo
Smart Appliance or directly to the multifunction device, to provide authentication and secure printing.
Celiveo supports the following user authentication methods:
Card‐based (Proximity card/Smart card/Swipe card)
PIN code
User credentials
Dual factor
Smart card is not supported on Toshiba devices. Only Toshiba certified card readers are supported
on Toshiba devices. Celiveo is also compatible with other certified Toshiba readers. For further
assistance, please contact a Toshiba technician.
2 Prerequisites
For Celiveo Smart Appliance:
Fixed IP or DHCP‐reserved IPv4
MAC address (as printed on Celiveo Smart Appliance)
For devices connected with Celiveo Smart Appliance:
Active TCP‐IP 100BT LAN connection
Active Simple Network Management Protocol (SNMP) v1/v2
A device with either fixed IP or DHCP‐reserved IP address
Device specific settings before Celiveo solution installation.
For specific device settings, see the respective device settings administrator’s guides.
3 Connecting Celiveo Smart Appliance to devices
This is an overview of the connectors on the Celive Smart Appliance (CSA).
Celiveo Smart Appliance 8.0
Celiveo Smart Appliance 8.1
The connectors and their usage are explained in the following table:
Name Connectors 8.0 Connectors 8.1 Description
I/O Port NA For extended features.
Connect the Celiveo Authentication
Hardware to the USB port (For Celiveo
Smart Appliance 8.0, you can use either port).
USB Ports
For Toshiba and HP FutureSmart devices
The Celiveo authentication hardware is
connected directly to the device.
Connect the Celiveo Smart Appliance is
Power
connected to the the power supply, turn
Switch
it on.
Touch‐
NA For extended features.
screen Port
Name Connectors 8.0 Connectors 8.1 Description
Connect a network cable from the
Network
network port on the Celiveo Smart
Port
Appliance port to the local network.
Connect a network cable from the printer
Printer
port on the Celiveo Smart Appliance to the
Port
port on the device.
Connect the power to the wall outlet.
Power Make sure to connect both printer and
Supply network cables.
3.1 Setting up Celiveo Smart Appliance on Devices
For device prerequisites to configure Celiveo Smart Appliance, see the respective device administrator’s
guides.
1. Connect a network cable from the CSA to the MFP/MFD. See the table above for details.
2. Connect the Celiveo Authentication Hardware (card reader) to the USB port on the CSA.
3. Switch on the CSA.
4. Switch on the device.
5. On the CSA, the indicator beside or on the power switch lights up.
6. Wait till the device boots up.
3.2 Configuring Network Settings
By default, Celiveo Smart Appliance comes in DHCP mode. The user can opt for fixed IP network settings.
NTP server setup is optional. Based on the requirement, the details can be configured.
3.2.1 Configuring Fixed IP Network Settings Using USB Flash Drive
To configure fixed IP network settings:
1. Create a configuration file with the below entries. Save the file as ipsetup.conf file:
FIP=x.x.x.x (Fixed IP)
MASK=x.x.x.x (Subnet mask)
GATEWAY=x.x.x.x (Gateway provided by the Internet Service Provider)
PRI_DNS= x.x.x.x (Primary DNS server IP)
SEC_DNS= x.x.x.x (Secondary DNS server IP)
NTP_SERVER= x.x.x.x (IP or hostname)
Do not include any spaces in the configuration entries or the configuration file will not work.
The values should be separated by space
SEARCH_DOMAIN=<values>
2. Format the USB flash drive to FAT32.
3. Copy the ipsetup.conf file to the USB flash drive.
4. Switch off the Celiveo Smart Appliance (CSA).
5. Connect the USB flash drive with the ipsetup.conf file to the CSA.
6. Switch on the Celiveo Smart Appliance. The configuration is automatically installed on the CSA.
7. Once the configuration completes, the LED on the CSA changes to a steady green display.
8. Remove the USB flash drive.
3.2.2 Configuring DHCP IP Network Settings Using USB Flash Drive
To configure DHCP IP network settings:
1. Create a configuration file with the entry below. Save the file as ipsetup.conf file.
DHCPIP
NTP_SERVER= x.x.x.x (IP or hostname)
(DHCPIP will be acquired automatically).
Do not to include any spaces in the configuration entries or the configuration file will not
work.
2. Follow the steps 2‐7 mentioned in Configuring Fixed IP Network Settings Using USB Flash Drive
section.
3.3 Retrieve logs through USB
3.3.1 Enable log retrieval through USB
Use the following method only if Celiveo Web Admin is unable to reach the Celiveo Smart
Appliance (CSA). Do not include any spaces in the configuration entries.
Disable the logs retrieval after you have collected the required logs. This ensures that the
CSA will not continue to allocate resources to collect the logs.
Make sure either ipsetup.conf or support.conf files are present in the USB flash drive at any
one point in time if both files are placed, support.conf takes the priority.
1. Format a USB flash drive to FAT32.
2. On the USB flash drive, create a configuration file and enter the following
LOGLEVEL=4
3. Save the file as support.conf file.
5. Connect the USB flash drive with the support.conf file to the CSA.
6. Switch on the CSA. The configuration file is copied to the CSA and log retrieval is enabled.
7. Once the LED on the CSA switches to a steady green light, it is now safe to remove the USB flash
drive.
3.3.2 Reproduce issue and retrieve the log
After enabling logs retrieval, proceed to reproduce the issue.
2. On the USB flash drive, create a configuration file and enter the following:
GETLOGS=1
3. Save the file as support.conf.
6. Switch on the CSA. The CSA will copy all logs in a compressed folder to the USB flash drive.
(Folder filename: <CSA hostname>.tar.tgz).
drive.
3.3.3 Disable log retrieval through USB
Disable the process after you have collected the logs.
2. On the USB flash drive, create a configuration file and enter the following:
LOGLEVEL=0
3. Save the file as support.conf.
6. Switch on the CSA.
drive. It is now safe to remove the USB flash drive.
Once the Celiveo Hardware setup is complete, more configuration needs to be performed on the Celiveo
Web Admin. For the Celiveo Web Admin Software settings, see the chapter Configuring Celiveo Web
Admin.
When Celiveo Smart Appliance is switched between the devices, the device that is connected to
the Celiveo Smart Appliance needs to be removed from Celiveo Web Admin. The device needs to
re‐added and synchronized with the newly connected Celiveo Smart Appliance.
3.4 Updating OS Image using USB Flash Drive (Celiveo Smart
Appliance 8.1 only)
.
This process takes about 25 minutes.
Do not include any spaces in the configuration entries or the configuration file will not work.
The file should be present in USB flash drive in the root directory.
1. Format the USB flash drive to FAT32.
2. Copy the new OS image file to the root directory of the USB.
4. Connect the USB flash drive to the CSA.
5. Switch on the CSA. The update begins automatically.
6. Once the update completes, the LED indicator on the CSA changes to a steady green light.
7. Remove the USB flash drive.
3.5 Restoring Celiveo Embedded Solution on Celiveo Smart Appliance
8.0 and 8.1
In case the installed Celiveo embedded solution becomes corrupted, Celiveo Smart Appliance can be
restored to the factory default Celiveo embedded solution.
To restore to the default Celiveo Embedded Solution:
On Celiveo Smart Appliance, press the RESET button (highlighted in the figure below), and hold it for more
than 20 seconds, and release it. During the restoration, there is a long beep sound followed by the red
LED flashes.
In case of Celiveo Smart Appliance 8.0 press and hold the RESET button for more than 20 seconds.
During the restoration, the orange LED flashes.
It is recommended to use a thin paper clip to press the RESET button.

Once the update is complete, the default Celiveo embedded solution is restored, and Celiveo Smart
Appliance restarts. The device that is connected to the Celiveo Smart Appliance needs to be removed
from Celiveo Web Admin, and the device needs to re‐added and synched with the updated Celiveo Smart
Appliance.
4 LED Behaviour of Celiveo Smart Appliance 8.0 and 8.1
The Celiveo Smart Appliance is connected directly to the device using a crossover Ethernet cable. It
produces beep (in case of Celiveo 8.1) and flash activities to inform various status as described in the
following table:
4.1 LED Behavior for CSA 8.1
State LED behavior/ Beep activity
OS LED behavior Uboot phase: Steady green LED
Kernel phase: Continuous green LED blinking (500ms on / 500ms
off)
Initiation phase: Continuous green LED blinking (2s on / 2s off)
Flashing/re‐flashing/restoring: Alternating, blinking red and
green LED
Error during the process: Continuous, blinking red LED (1s on / 1s
off / 3s on / 1s off)
Power on without network Continuous green LED blinking followed by continuous red blinking
with beeps.
Power on with network Continuous Green LED blinking followed by Red blinking and stable
Green LED once the network is established.
Celiveo ready state Steady Green LED
Factory reset response Red LED flashing with a long beep
Restore Celiveo Embedded Solu‐ Alternate red and green LED flashing. Stable Green LED once the
tion Celiveo Embedded Solution is restored
Synchronization in progress Green LED blinking followed by stable Green LED flashing
Synchronization while the Continuous, long flashing red LED followed by flashing green LED and
Celiveo solution is deployed then steady green LED
4.2 LED Behavior for CSA 8.0
State Celiveo Smart Appliance 8.0
Power on without network Orange LED followed Red LED flashing
Power on with network Orange LED followed by Green LED blinking. Stable Green LED once
the network is established
Celiveo ready state Stable Green LED
Factory reset response Orange LED flashing
Restore Celiveo Embedded Solu‐ Orange LED flashing followed by alternate Green and Orange LED
tion blinking. Stable Green LED once the Celiveo Embedded Solution is
restored
Synchronization in progress Green LED blinking followed by stable Green LED flashing
Synchronization while the Celi‐ Alternate Green and Orange LED blinking followed by stable Green
veo solution is deployed LED flashing
Setting up Celiveo Authentication Hardware
4. Setting up Celiveo Authentication
Hardware
This chapter provides information on setting up Celiveo authentication hardware as card readers on
devices.
1 About Celiveo Authentication Hardware
Celiveo Authentication hardware refers to card readers that provide the functionality to authenticate
users on the device. The Celiveo solution supports the following types of card readers for user
authentication:
Proximity card reader
Smart card reader
Swipe card reader
Multi‐Level Authentication (MLA) is also supported. for example, the user can use both a proximity card (a
commodity card) and a smart card (a high‐security card) for authentication.
For up‐to‐date information on supported devices, visit https://www.celiveo.com
2 Setting up Celiveo Authentication Hardware
Celiveo Authentication Hardware, as card readers, can be plugged into the devices in two ways:
Through Celiveo Hardware
Direct plug‐in, specifically on Toshiba and HP FutureSmart Devices
2.1 Plugging in through Celiveo Hardware
Celiveo Hardware is connected to the device using a crossover fast Ethernet cable, and the Celiveo
authentication hardware (external card reader) is inserted into the USB slot of Celiveo hardware.
Name Connectors Description

Connect the Celiveo Authentication
Hardware to either one of the USB ports
USB Ports available on Celiveo Hardware.
Note that only one Celiveo authentication
hardware can be used at a time.
For hardware installation, refer to the chapter Setting up Celiveo Hardware.
2.2 Plugging in Celiveo Authentication Hardware to a Device
The Celiveo authentication hardware can be connected to a device in the following ways:
As an external card reader using USB port (for Toshiba devices)
As an embedded card reader using HIP cover (for HP futuresmart devices)
If the device does not support two USB ports, you can use a USB hub to connect both the smart
card reader and proximity card reader.
Before you start the device, connect the Celiveo Authentication Hardware to the device. The
device will not recognize the reader if the authentication hardware is plugged in after the device is
switched on.
2.2.1 Connecting Celiveo Authentication Hardware (External) through USB Port
The Celiveo authentication hardware (external) can be connected to a device in the following ways:
A double‐sided adhesive label, applied to the back of the Celiveo Authentication Hardware, to affix
it on the device case
Two adhesive cable brackets are provided to route the reader cable from the back to the front of
the devices
To apply the adhesive labels to the readers:
Affix the adhesive label on either side of the authentication hardware. However, do not affix the adhesive
label over the bar code at the back of the authentication hardware as that information is necessary for
technical support.
To connect the Celiveo Authentication Hardware:
1. Switch off the device, and detach its power cable.
2. Locate the USB slots connector.
3. Plug the USB reader into the USB port of the device.
4. Plug in the device to the power cable, and switch it on.
For Ricoh devices, ensure that the USB port is enabled by the Ricoh engineer.
2.2.2 Connecting Celiveo Authentication Hardware (Embedded) using Hardware
Integration Pocket (HIP)
HP devices, such as HP FutureSmart devices support embedded authentication hardware. The Celiveo‐
embedded authentication hardware is connected to the device in the HIP (Hardware Integration Pocket)
To connect the Celiveo embedded authentication hardware to a HP Futuresmart device:
1. Switch off the device, and detach its power cable.
2. Remove the HIP Cover
3. Locate the mini‐USB slot connector.
4. Attach the mini‐USB Reader to the HIP cover.
5. Plug the mini‐USB Reader into the mini‐USB plug.
6. Mount the HIP cover with the mini‐USB reader onto the device.
7. Plug in the device and switch it on.
3 Configuring Devices for Configuring Authentication
Hardware
For information on configuring device specific settings for Celiveo Authentication Hardware, see the
respective Device Specific Administrator’s Guide.
Installing Celiveo Server Modules
5. Installing Celiveo Server Modules
The Celiveo Product Installer allows the installation of Celiveo Server modules by enabling the
administrator to install multiple Celiveo modules and prerequisites using a single installer.
The following Celiveo modules are installed using the Celiveo Products Installer:
Celiveo Web Admin Software
Celiveo Authentication Gateway
Celiveo Pull Printing Service
Celiveo Print Manage
Celiveo Connector for Imprivata OneSign
®
Celiveo Track‐GreenSaver
1 File Downloads from Celiveo Knowledgebase (KB)
The Celiveo Product Installer is available in two bundle types:
Celiveo.Enterprise.x86.[8.0.116.MMDD].zip (32‐bit)
Celiveo.Enterprise.x64.[8.0.116.MMDD].zip (64‐bit)
This bundle contains both the prerequisites and the Celiveo Enterprise modules. This bundle installs any
missing prerequisite (except SQL Express for TGS) and proceeds with the installation of Celiveo Enterprise
modules.
2 Prerequisites for Client Machines and Servers
This section provides the list of hardware and software prerequisites for devices and servers installed
using Celiveo Products Installer.
There are ports that need to be added to the firewall exemption list before installing the Celiveo
solution. For more information, refer to theAAppendix A ‐ Ports and Communications .
Celiveo Web Admin SPP

PC & Server System CSS 3 Print Manage 4 Driver Plug‐In 6
Enterprise 1 Server 2 Client 5
Minimum Hardware Prerequisites
4GB RAM √ √ √ √ √ √
4GB Free HDD √ √ √7 √ √7 √
Software Prerequisites
Windows 2012, Windows 2012 R28 √ √ √ √
Windows Server 2008 R2 (32 & 64 bit) √ √ √ √ √ √
Windows 7, Windows 8 √ √
9 √ √ √ √ √
.NET Framework 3.5
.NET Framework 2.0 √ √ √ √
Internet Information Services (IIS) Manager
6.0, 7.0, or 8.0
√ √10 √ √ 10
ASP.NET 2.0.50727 √ √ √
SQL Server Compact Edition 3.5 SP2 √ √ √
Microsoft Visual C++ 2008 Redistributable √ √ √ √ √ √
Microsoft Visual C++ 2005 Redistributable √ √ √ √ √
1. Servers running Celiveo Enterprise Solution deployed using the Celiveo Products Installer
2. Administration PC running Celiveo Web Admin Software only
3. Servers running Celiveo Server Services only
4. Servers running Celiveo Print Manage only
5. Client PCs running the Celiveo Server Services and Celiveo Track‐PM (Serverless Pull Printing architecture)
6. PC running Celiveo Driver Plug‐In
7. Enough HDD capacity or access to a network storage appliance needed to store the user’s print jobs
8. Since Windows 2012 is shipped with .NET Framework 4.5 only, .NET Framework 3.5 needs to be enabled from the
Server Components Manager and downloaded from the Microsoft site, else installed from the Windows disc.
9. SAfter installing .NET Framework 3.5, the Reporting Service of Celiveo Track‐GreenSaver service (SQL Server Reporting
Services PMP) may need to be started manually if the default SQL Express 2005 instance is used for Celiveo Track‐
GreenSaver Reports.
10.For Windows 2008 server, IIS Manager 6.0 and 7.0 both have to be installed
3 Installation using Celiveo Products Installer
The Celiveo Products Installer provides a simplified option to install all the Celiveo modules, as listed
below:
Celiveo Web Admin Software: Celiveo Web Admin Software is a centralized management console
that allows configuration and administration of Celiveo Enterprise. Celiveo Web Admin simplifies
licensing of the solution, and allows management of the user list, server list and the device list .
Authentication modes can also be defined in Celiveo Web Admin Software.
Celiveo Authentication Gateway: Celiveo Authentication Gateway is a module of Celiveo Server
Services which enables authentication and enrollment services. The Authentication Gateway can
be configured to use user directory, or offline authentication list, as a source for user information.
Celiveo Pull Printing Service: Celiveo Pull Printing Service is a module of Celiveo Server Services
which enables the user to store a print job on the server, and securely release the job, whenever
required, from any Celiveo solution‐ enabled device in the network. Celiveo Pull Printing Service
also notifies the user when the jobs are restricted, or deleted, from the server.
Celiveo Print Manage: Celiveo Print Manage is a web‐based application that allows the users to
manage PIN code (that is, to generate new PIN code, and reset the existing PIN code), and manage
jobs (that is, to view their pending jobs list, mark them for future release, and/or delete them).
Celiveo Print Manage enables the user to generate PIN code from a user page, or a mobile device.
Celiveo Connector for Imprivata OneSign®: Celiveo Connector for Imprivata OneSign integrates
the Single Sign‐On (SSO) feature with Celiveo Enterprise. Celiveo Connector for Imprivata OneSign.
This connector automates username and password entry for authenticated users, simplifying
application login and logout.
For more information on Imprivata OneSign® Single Sign‐On, visit the following link:
http://www.imprivata.com/products‐and‐solutions/single‐sign‐on/onesign‐single‐sign‐on
Celiveo Track‐GreenSaver : Celiveo Track‐GreenSaver tracks all device activities (print, copy, scan,
and so on) of the user on multi‐function printers using the Celiveo Track‐EM module. Celiveo
Track‐GreenSaver allows enforcing Rule‐based printing, Billing, Quota, and Pre‐payment. This
module also allows setting job restrictions for individual user or group of users, devices, or
organization units. Celiveo Track‐GreenSaver Reports is useful in generating various reports
(printing and printer‐related) that can be used to identify the actual performance and usage of all
the devices by every user group. It also displays a daily print report, and calculates the cost of
printing.
See the chapter 16.Migration Support if you are migrating from an older version to a newer version
of Celiveo Enterprise.
3.1 Installation Procedure
The administrator or user with administrative privileges can choose to install all or only the required
Celiveo modules using Celiveo Products Installer.
To install Celiveo modules (with default settings):
1. In the appropriate installation folder, double‐click the Setup.exe installer file (32‐bit or 64‐bit).
The End User License Agreement window appears.
2. Click the check box to agree to the terms and conditions in EULA, and click NEXT.
The Celiveo Products Installer window appears.
3. Select the check boxes corresponding to the module(s) to be installed. By default, all the modules
are selected, as shown in the figure above.
If Celiveo Pull Printing Service is selected, the Celiveo Job Purge service is also installed and
added into the Windows Task Scheduler list.
Depending on the installation of products, different tabs will be enabled in the Celiveo Server
Services profile page in Celiveo Web Admin Software:
If Celiveo Authentication Gateway is installed, then the Authentication Gateway tab is
enabled.
If Celiveo Pull Printing Services is installed, then the Job Retention tab is enabled.
If both Celiveo Authentication Gateway and Celiveo Pull Printing Services are installed, then
both the Authentication Gateway and the Job Retention tabs are enabled.
For more information, see the section 7.5Configuring Device Group Settings in the chapter
8.Configuring Celiveo Web Admin.
Celiveo Authentication Gateway is a prerequisite for installing the Celiveo Connector for
Imprivata OneSign®. Thus, to install Celiveo Connector for Imprivata OneSign, ensure that
the Celiveo Authentication Gateway option is also selected.
4. Select whether the installed products can be accessed by Everyone or Just me. The default setting
is Everyone.
5. In the Features install path text box, enter the path for installation, and click NEXT.
The default installation path for all the 64 bit product components such as Celiveo Server Services
is C:\Program Files\Celiveo.
The default path for all the 32 bit product components (Celiveo Web Admin, Celiveo Web Admin
Services, Track‐GreenSaver and Celiveo Print Manage is C:\Program Files (x86)\Celiveo.
If the Celiveo Authentication Gateway or the Celiveo Pull Printing Services installation option had
been selected in the Celiveo Installation window, the Celiveo Server Services Configuration
window appears, as shown in the figure below.
The table below explains the Celiveo Server Services Configuration parameters.
Fields Description
The default TCP port number is 22000. In the text box, the user can enter any
number between 1 and 65535. The installer validates the port availability. If
TCP PORT
the entered TCP port number is not available (or in use), an error message
appears.
The default Backend port number is 65211. In the text box, the user can enter
any number between 1 and 65535. The installer validates the port availability.
BACKEND PORT
If the Backend port number entered is not available (or is in use), an error
message appears.
6. Click NEXT to continue with the installation, else click PREVIOUS to go back to the Products window.
If the Celiveo Print Manage option had been selected in the Celiveo Products Installer window, the
Celiveo Print Manage Software Configuration window appears, as shown in the figure below.
The table below explains the Celiveo Print Manage Software Configuration parameters.
Fields Description
Enter a name for the Celiveo Print Manage Web site.
WEB SITE
The default Web site name is PrintManage.
Enter the name of the virtual directory.
VIRTUAL DIRECTORY
The default virtual directory name is PrintManage.
Fields Description
Enter the name of the application pool.
APPLICATION POOL
The default application pool name is CeliveoAppPool.
In the text box, enter any number between 8000 and 9000 directly, or using
scroll arrows.
HTTP PORT The installer validates the port availability, as the system does not
allow the same port on a single machine for two different applications.
If the entered HTTP port is not available (or already in use), an error
message appears.
SSL PORT scroll arrows. The installer validates the port availability. If the entered SSL port
is not available (or already in use), an error message appears.
7. Click NEXT to continue with the installation.
The Celiveo Web Admin Software Configuration window appears, as shown in the figure below:
The table below explains the Celiveo Web Admin Software Configuration parameters.
Fields Description
Enter a name for the Celiveo Web Admin Web site.
WEB SITE
The default Web site name is WebAdmin.
Enter the name of the virtual directory.
VIRTUAL DIRECTORY
The default virtual directory name is WebAdmin.
Enter the name of the application pool.
APPLICATION POOL
The default application pool name is CeliveoAppPool.
scroll arrows.
HTTP PORT The installer validates the port availability, as the system does not
allow the same port on a single machine for two different applica‐
tions. If the entered HTTP port is not available (or already in use), an
error message appears.
SSL PORT scroll arrows. The installer validates the port availability. If the entered SSL port
is not available (or already in use), an error message appears.
Make sure to exempt HTTP Port and the SSL Port from the firewall after the Celiveo solution instal‐
lation.
8. Click NEXT to continue with the installation.
A list of prerequisites appears for the selected products. If a prerequisite is checked, that indicates
it is already installed, as shown in the figure below.
On Windows 2003, the installer will halt if IIS6 is not installed.
9. Click INSTALL to install the selected products, and click OK.
The default cursor icon changes into an hourglass cursor until the completion of the process.
The following products are installed in an interactive mode:
Prerequisites
Celiveo Web Admin Software
Celiveo Authentication Gateway
Celiveo Pull Printing Services
Celiveo Print Manage
Celiveo Connector for Imprivata OneSign
®
During installation of Celiveo components, if any prerequisite is missing, or if the Prerequisites
folder is not present in the installer directory, an error message appears. Download and extract the
prerequisite folder from https://www2.celiveo.com/kb/files/ and save it into the Celiveo Products
Installer directory folder.
A green tick mark appears for each of the installed prerequisites, otherwise a red cross mark
appears.
During installation of each product or prerequisite, a progress bar appears with the installation
status message.
For example, “.NET Framework 3.5 is being installed...”
After installing the products and the prerequisites above, the installer starts installing Celiveo
Track‐GreenSaver.
10. Click NEXT.
The Celiveo Track‐GreenSaver Setup window appears.
11. Click NEXT.
The Celiveo Track‐GreenSaver Setup ‐ File Location and License Terms window appears.
The default installation path for Track‐GreenSaver is C:\Program Files\Celiveo\Track‐GreenSaver\.
12. Click BROWSE to change the installation location.
13. Select the I agree to the License terms and conditions check box.
The NEXT button is enabled.
14. Click NEXT.
The Celiveo Track‐GreenSaver Setup ‐ Installation Type window appears.
The following table describes the various modes in which Celiveo Track‐GreenSaver can be
installed.
Installation Mode Description
Primary Installation Select this option to install all primary features for the first installation.
Select this option to install Track‐GreenSaver on secondary servers that share
Additional Print Server
printers to track and control.
Select this option to install end user print client and tracking features for
Workstation
locally attached printers or direct network printing.
15. Select Primary Installation and click NEXT.
The Celiveo Track‐GreenSaver Setup ‐ Database Location window appears.
16. Select the appropriate database option from the database location window, and click NEXT.
Depending upon the type of Celiveo Track‐GreenSaver license purchased , you can choose to
connect to existing SQL Instance or install SQL Express edition which is packaged with the
product installer.
SQL Server Express 2005 is not compatible with Windows Server 2012.
While installing on Windows Server 2012:
Select an existing instance of SQL Server 2008 R2, that has been installed prior to the
Celiveo Product Installer.
Provide the URL of SQL reporting service when prompted.
For more information on how to configure Microsoft SQL Reporting Services, see
http://msdn.microsoft.com/en‐IN/library/ms159624(v=sql.100).aspx.
The Celiveo Track‐GreenSaver Setup ‐ Service Logon window appears.
17. Enter the login credentials for an account with Read, Write and DB Owner permissions on the SQL
server. Then, click NEXT.
Ensure to enter the information in Domain\User format in the Service Account text box.
The Celiveo Track‐GreenSaver Setup ‐ Existing Database window appears if an existing database is
detected by the installer.
18. Perform one of the following actions:
Overwrite Database: select this option to delete and overwrite an existing database. A new
database is created and print history and settings of existing database are deleted.
Use Existing: select this option to use an existing database and upgrade if necessary. A new
database is not created.
19. Click NEXT.
The Celiveo Track‐GreenSaver Setup ‐ Ready to Install window appears
20. Click INSTALL.
The Completing the Track‐GreenSaver Setup Wizard window appears.
21. Click FINISH.
The following message appears.
22. Click YES to restart the system. This allows the installation settings to take effect.
It is highly recommended to restart the system after the installation. The Celiveo Track‐
GreenSaver module may not work as expected until system restart.
The system restarts and the following window appears.
23. Click FINISH to exit the Celiveo Products Installer.
3.2 Creating Pull Printer Queues
After installing the Celiveo modules, it is required to create pull printer queues for receiving print jobs
from the client PCs and servers. The input print queue is configured to use the exclusive port monitor.
The Celiveo Pull Printing option appears in the Printer Ports list from where the Celiveo default queue
can be choosen.
To create a pull printer queue:
1. On the server where Celiveo Pull Printing Service is installed, go to START > CONTROL PANEL > PRINTERS
AND FAXES.
2. Go to the FILE menu, and select Server Properties.
3. Go to the PORTS tab, and select Add Port. The Printer Ports window appears, as shown in the figure
below:
4. Click NEW PORT...
The Celiveo Pull Printing popup appears, as shown in the figure below.
5. Enter a port name, and choose a temporary spool file directory (with enough free space).
6. Click OK and CLOSE.
7. Right‐click a printer, and select Properties.
8. In the PORTS tab of the printer's properties window, choose the previously created port.
9. Click OK.
10. Re‐open the printer's properties window.
The window now has a new tab named Celiveo Pull Printing from where the settings for secure print
jobs can be defined.
4 Maintenance of Modules using Celiveo Products Installer
Using the Celiveo Products Installer, an existing Celiveo module can be removed, or repaired, or re‐
installed.
To install or remove or repair or re‐install the Celiveo solution:
Click the Setup.exe file in the appropriate installation folder (32‐bit or‐64 bit).
The following three options are displayed:
Add or Remove Features: Select this option to add or remove Celiveo Modules.
Repair/Re‐install: Select this option to repair or re‐install the selected Celiveo Modules.
Uninstall Celiveo Products Installer: Select this option to uninstall all the Celiveo Modules installed
on the machine.
4.1 Adding or Removing Celiveo Modules
To add or remove Celiveo modules:
1. In the Celiveo Products Installer window, select the Add or Remove Features option, and click
NEXT.
The page displays the list of modules that are already installed on the machine.
The green check mark indicates that the module is already installed. Upon deselecting the installed
modules check box, those installed modules are marked for uninstallation.
Example 1: To remove existing modules from the machine, deselect the check box(es) for the
module(s) that are already installed (as indicated by the green check mark).
Example 2: To install a new module, select the check box for the feature that is not installed.
2. Click NEXT. This removes the products that are marked for uninstallation in the installer window,
and installs the selected products.
4.2 Repairing/Re‐installing Celiveo Modules
To repair or reinstall Celiveo modules:
1. In the Celiveo Products Installer window, select the Repair/Re‐install option, and click NEXT.
2. Select the module(s) that are to be repaired/re‐installed, and click NEXT.
A progress bar appears with the repair status message for the selected module(s).
4.3 Uninstalling Celiveo Modules
To uninstall Celiveo modules, in the Celiveo Products Installer window, select the Uninstall Celiveo
Products Installer option, and click NEXT.
A message appears prompting to remove the Celiveo module from the system.
A progress bar appears with the uninstallation status message for the selected modules.
5 Installing Celiveo Modules Manually
In case of failure to install a Celiveo module using the Celiveo installer, troubleshoot by installing the
desired Celiveo module manually using Command Prompt.
Only Celiveo Server Services and its component Celiveo (CSS) Backend Service can be installed man‐
ually using Command Prompt.
The manual installations of the following Celiveo (CSS) Backend Service modules are explained in the
sections below:
5.1Installing Celiveo Server Services using Command Prompt
5.2Installing Celiveo (CSS) Backend Service using Command Prompt
5.3Manually Installing Celiveo Web Admin Software
5.1 Installing Celiveo Server Services using Command Prompt
Celiveo Server Services can be manually registered into Microsoft Services (services.msc) list using
Command Prompt.
To manually register Celiveo Server Services into Microsoft Services:
1. Go to Start > Run, and type “cmd” to open Command Prompt.
2. Type the following command:
C:\Program Files\Celiveo\Celiveo Server Services\"SJ Print‐PS Server.exe"/Service
The Celiveo Server Services installation begins, and completes within a few minutes, and the
Celiveo Server Services entry is added into the Microsoft Services (services.msc) list.
5.2 Installing Celiveo (CSS) Backend Service using Command Prompt
Celiveo (CSS) Backend Service can be manually registered into the Microsoft Services (services.msc) list
using Command Prompt.
To manually register Celiveo (CSS) Backend Service:
2. Type the following command to access the Microsoft .NET Framework v2.0.50727 folder:
CD WINDOWS\Microsoft.NET\Framework\v2.0.50727
3. Type the following command at the C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727 prompt:
installUtil/i “C:\Program Files\Jetmobile\Celiveo Server
Services\Jetmobile.PrintServer.WindowsService.exe
The Celiveo (CSS) Backend Service installation begins, and completes within a few minutes, and the
Celiveo (CSS) Backend Service entry is added into the Microsoft Services (services.msc) list.
5.3 Manually Installing Celiveo Web Admin Software
Celiveo Web Admin Software is a web‐based central administration software that allows you to deploy,
configure, license and monitor the solution on a fleet of devices.
You must have administrator rights on the server to install the software.
See the section 2Prerequisites for Client Machines and Servers for the complete list of prerequisites
before installing Celiveo Web Admin Software.
The section below describes the installation of Celiveo Web Admin Software on Windows Server 2003
and Windows Server 2008.
5.3.1 Installing Celiveo Web Admin Software on Windows 2003
To manually install Celiveo Web Admin Software on Windows Server 2003:
Step 1: Install .NET Framework 3.5
For Windows Server 2003, .NET Framework 3.5 needs to be downloaded and installed.
Step 2: Install C++ Libraries (2005 and 2008)
1. Install the C++ libraries.
2. For the installation, follow the on‐screen instructions.
Step 3: Create a New Web Site
1. Install Internet Information Services (IIS) Manager, if it is not already installed (using the ADD/
REMOVE WINDOWS COMPONENTS option).
2. After installing IIS Manager, go to Start > Run, and type “inetmgr” to open IIS Manager.
3. Right‐click WEB SITES, and select NEW > WEB SITE from the pop‐up menu.
4. To create a new web site, follow the on‐screen instructions below:
a. Assign a name to the web site, for example, Celiveo.
b. Enter a TCP port and SSL port that are different than those used by the Default Web Site, or
stop the Default Web Site.
c. Set the website directory (by default, C:\inetpub\wwwroot)
d. Set the website access permission.
The Read permission is sufficient.
5. Go back to IIS Manager, right‐click the previously created web site, and select PROPERTIES from the
pop‐up menu.
6. In the Properties window, go to the ASP.NET tab, and change the ASP.NET version to
2.0.50727.
7. Go to the Directory Security tab, and select the INTEGRATED WINDOWS AUTHENTICATION option to edit
the anonymous access and authentication control.
Step 4: Install the appropriate Framework extension (that is, 32‐bit or 64‐bit extension)
Installing the 32‐bit Framework Extension
2. Type the following command to install the version of ASP.NET 2.0, and to install the script maps at
the IIS root:
%SYSTEMROOT%\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
-i
3. In IIS Manager, click the WEB SERVICE EXTENSIONS folder.
4. Select the ASP.NET WEB service extension version as 2.0.50727, and click ALLOW.
 Installing the 64‐bit Framework Extension
2. To disable the 32‐bit mode, enter the following command:
cscript %SYSTEMDRIVE%\inetpub\adminscripts\adsutil.vbs SET W3SVC/
AppPools/Enable32bitAppOnWin64 0
3. To install ASP.NET 2.0, and to install the script maps at the IIS root folder, type the following
command:
%SYSTEMROOT%\Microsoft.NET\Framework64\v2.0.50727\aspnet_regiis.ex
e -i
Step 5: Install SQL Server Compact Edition 3.5 SP1
For the 32‐bit system, the 32‐bit version of SQL Server Compact Edition version has to be installed .
For the 64‐bit system, both the 32‐bit and the 64‐bit versions of SQL Server Compact Edition have to be
installed.
Step 6: Celiveo Web Admin Software Installation
1. Download the Celiveo software package from https://www2.celiveo.com/kb/
2. Install Celiveo Web Admin Software.
3. Click the Celiveo.msi installer file to launch the installation.
4. Click NEXT, and select the previously created web site in the Site drop‐down list.
5. In the next window, select the CELIVEO MANAGE ALL CERTIFICATES option.
6. Enter the port for the SSL binding in the text box, and click NEXT.
7. After the Celiveo Web Admin Software installation is complete, click CLOSE, and restart IIS, or the
server.
It is not recommended to install the Celiveo Web Admin Software on the Default Web Site, but if
you do so anyway, ensure that both the parent node and the Celiveo site have the same configura‐
tion. Any modifications made will require restarting IIS or your server machine. Once Celiveo is
installed, it is recommended that you do not modify the Celiveo node of IIS.
5.3.2 Installing Celiveo Web Admin Software on Windows 2008
To manually install Celiveo Web Admin Software on Windows 2008:
Step 1: Install .NET Framework 3.5
In Windows 2008 (Service Pack 1), .NET Framework 3.5 SP1 is supported with the operating system.
In Windows 2008, since .NET Framework 3.0 is supported with the operating system, .NET Framework 3.5
SP1 has to be downloaded and installed.
Step 2: Install C++ Libraries (on Windows 2005 and 2008)
See the section Installing on Windows Server 2003 above.
Step 3: Configure and add roles to IIS Installation
1. Install Internet Information Services (IIS) Manager, if it is not already installed (using the ADD/
REMOVE WINDOWS COMPONENTS option).
2. For IIS 7.0 the IIS 6.0 Management Compatibility Components option has to be activated.
To activate IIS 6.0 Management Compatibility Components:
a. Click START > ADMINISTRATIVE TOOLS > SERVER MANAGER to open the Server Manager.
b. In the left‐navigation panel, click to expand ROLES.
c. Right‐click WEB SERVER (IIS), and select ADD ROLE SERVICES.
d. In the ROLE SERVICES panel, scroll down to IIS 6 MANAGEMENT COMPATIBILITY.
e. Click the check box for IIS 6 MANAGEMENT COMPATIBILITY.
The check boxes of all the elements contained in this category are automatically selected.
f. Click NEXT at the bottom of the window, and then click INSTALL.
g. Click CLOSE to exit the ADD ROLE SERVICES wizard.
3. Adding Windows Authentication Roles Service:
a. Open Server Manager >Roles > Web Server (IIS).
b. Right‐click Web Server (IIS), and select Add Role Services.
c. Under the Security component, select the Basic Authentication and the Windows
Authentication check boxes.
d. (Optional) Configure the other security settings.
Step 4: Create a New Web Site
1. In IIS Manager, right‐click SITES, and select ADD WEB SITE from the pop‐up menu.
2. Enter the site name, physical path in the dialog box.
3. Enter a different TCP port and SSL port than those used by the Default Web Site or stop the Default
Web Site.
4. To add additional security to the website:
a. Click Connect as.
b. Enter the name of the specific user, and click SET.
c. Enter the username and password for the Service Account.
Step 5: Install SQL Server Compact Edition 3.5 SP1
See the Installing on Windows Server 2003 section above.
Step 6: Install the appropriate Framework extension (that is, 32‐bit or 64‐bit extension)
Installing the 32‐bit Framework Extension
2. Type the following command to install the version of ASP.NET 2.0, and to install the script maps at
the IIS root:
%SYSTEMROOT%\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
-i
 Installing the 64‐bit Framework Extension
2. Enter the following command to disable the 32‐bit mode:
cscript %SYSTEMDRIVE%\inetpub\adminscripts\adsutil.vbs SET W3SVC/
AppPools/Enable32bitAppOnWin64 0
3. Type the following command to install ASP.NET 2.0, and to install the script maps at the IIS root:
%SYSTEMROOT%\Microsoft.NET\Framework64\v2.0.50727\aspnet_regiis.ex
e -i
Step 7: Celiveo Web Admin Software Installation
See the section Installing on Windows Server 2003.
Troubleshooting while installing Celiveo Web Admin Software:
Unable to load the ‘sqlceme35.dll’ DLL file: the specified module could not be found
Ensure that Microsoft SQL Compact Edition is successfully installed.
It is recommended to install both the 32‐bit and the 64‐bit versions of Microsoft SQL Compact
Edition on a 64‐bit machine.
HTTP Error 401.0 ‐ Unauthorized
Invalid credentials in the webpage.
When adding website, make sure that the valid credentials are set.
HTTP Error 401.1 ‐ Unauthorized: Access is denied due to invalid credentials
Give full rights to Everyone in Celiveo folder under inetpub.
Add the network service and the Internet guest account.
HTTP Error 500.19 ‐ Internal Server Error
Indicates that ASP is not registered.
To solve the issue, open Command Prompt, and run the appropriate ASP‐enabling command.
For more information, see Step 6: Install the appropriate .NET Framework extension (that is,
32‐bit or 64‐bit extension).
5.3.3 Enabling Integrated Windows Authentication on Windows 2003
To enable Integrated Windows Authentication on Windows 2003:
1. Go to Start > Run, and type “inetmgr” to open IIS Manager.
2. Click WEBSITE (CELIVEO) > DIRECTORY SECURITY > EDIT.
The Authentication Methods window opens, as shown in the figure below:
3. Click the Integrated WIndows Authentication check box to enable user authentication to access
the website through Windows authentication.
5.3.4 Enabling Windows Authentication on Windows 2008
To enable Windows Authentication on Windows 2008:
2. In the Connections navigation panel tree, under Sites, click the CELIVEO site.
The Celiveo Home screen is displayed.
3. In the IIS section, double‐click the Authentication icon.
The Authentication window appears.
4. If Windows Authentication status shows as “Disabled”, click the Enable link on the right navigation
pane to enable user authentication to access the Celiveo website through Windows
authentication.
5. If Anonymous Authentication status shows as “Disabled”, click the Enable link on the right
navigation pane to enable anonymous users to access the Celiveo website.
6 Uninstalling Celiveo Modules Manually
In case of failure to uninstall a Celiveo module using the Celiveo installer, you can troubleshoot by
uninstalling a Celiveo module manually using Command Prompt or through the Control Panel, as
described in the following sections:
6.1Uninstalling Celiveo Solutions using Command Prompt
6.2Uninstalling Celiveo Server Services using Command Prompt
6.3Uninstalling Celiveo Solutions through Control Panel
Only Celiveo Server Services and its component Celiveo (CSS) Backend Service can be uninstalled
manually using Command Prompt.
6.1 Uninstalling Celiveo Solutions using Command Prompt
This section covers the manual uninstallations of the following Celiveo modules using Command Prompt
in a Windows system:
Celiveo Server Services
Celiveo (CSS) Backend Service
6.2 Uninstalling Celiveo Server Services using Command Prompt
Celiveo Server Services can be manually removed from the Microsoft Services (services.msc) list using
Command Prompt.
To manually remove Celiveo Server Services:
1. Go to Start > Run, and type “cmd” to open Command Prompt
2. Type the following command:
"SJ Print-PS Server.exe" /Unregserver
The Celiveo Server Services uninstallation begins, and completes within a few minutes, and the
Celiveo Server Services entry is removed from the Microsoft Services (services.msc) list.
6.2.1 Uninstalling Celiveo (CSS) Backend Service using Command Prompt
Celiveo (CSS) Backend Service can be manually removed from the Microsoft Services list (services.msc)
using Command Prompt.
To manually remove Celiveo (CSS) Backend Service:
1. Go to Start > Run, and type “cmd” to open Command Prompt
2. Type the following command to access the Microsoft.NET Framework v2.0.50727 folder:
CD WINDOWS\Microsoft.NET\Framework\v2.0.50727
3. In the Command Prompt window, type the following command at the
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727 prompt:
Default path:
installUtil/u “C:\Program Files\Celiveo\Celiveo Server
Default path:
installUtil/u “<custom Celiveo Server Services installation
directory>\Celiveo\Celiveo Server
The Celiveo (CSS) Backend Service uninstallation begins, and completes within a few minutes, and
the Celiveo (CSS) Backend Service entry is removed from the Microsoft Services (services.msc) list.
6.3 Uninstalling Celiveo Solutions through Control Panel
This section covers the manual uninstallations of the following Celiveo modules:
Celiveo Web Admin Software
Celiveo Server Services
Celiveo Print‐SMP Driver Plug‐In
Celiveo Print Manage
Celiveo Track‐GreenSaver Admin
Celiveo Track‐GreenSaver Report
®
Celiveo Imprivata OneSign
6.3.1 Uninstalling Celiveo Web Admin Software through Control Panel
To uninstall Celiveo Web Admin Software from Control Panel:
1. Go to Start > Control Panel > Add or Remove Programs, right‐click Celiveo Web Admin Software,
and select Remove. A window appears, prompting to save your configuration.
2. Click YES to save your existing Celiveo Web Admin Software configuration, else click NO. A browser
window appears.
3. Browse to the location where you want to save the Celiveo Web Admin configuration files, and
click SAVE.
The cas.sdf file and the log files are saved in the chosen location, and the Celiveo Web Admin
Software uninstallation process is complete.
The Celiveo Web Admin Software website needs to be deleted now from IIS Manager:
5. Stop the Internet Information Services.
6. Click to expand the Internet Information Services node, and delete the Celiveo node (the Website
folder).
7. Restart Internet Information Services (IIS).
6.3.2 Uninstalling Celiveo Server Services through Control Panel
To uninstall Celiveo Server Services:
1. Open the Celiveo Server Services Configuration utility.
2. In the Job Server tab, click the SAVE CONFIGURATION button.
3. Enter a name for the file, and browse to the location where you wish to save the file, and click SAVE.
If you do not want to save the Celiveo Server Services configuration, skip step 1 (a to d).
4. Go to Start > Control Panel > Add or Remove Programs.
5. Select Celiveo Server Services, and click REMOVE.
The Celiveo Server Services uninstallation wizard starts, and removes Celiveo Server Services from
the system in a few minutes.
6.3.3 Uninstalling Celiveo Print‐SMP Driver Plug‐In through Control Panel
To uninstall Celiveo Print‐SMP Driver Plug‐in:
2. Select Celiveo Driver Plug‐In, and click REMOVE.
The Celiveo Driver Plug‐In uninstallation wizard starts, and removes Celiveo Driver Plug‐In from the
system in a few minutes.
6.3.4 Uninstalling Celiveo Print Manage through Control Panel
To uninstall Celiveo Print Manage:
2. Select Celiveo Print Manage, and click REMOVE.
The Print Manage uninstallation wizard starts, and removes Print Manage from the system in a few
minutes.
6.3.5 Uninstalling Celiveo Track‐GreenSaver Admin through Control Panel
To uninstall Celiveo Track‐GreenSaver Admin:
2. Select Celiveo Track‐GreenSaver, and click REMOVE.
The Celiveo Track‐GreenSaver Admin uninstallation wizard starts, and removes Celiveo Track‐
GreenSaver Admin from the system in a few minutes.
6.3.6 Uninstalling Celiveo Track‐GreenSaver Report through Control Panel
To uninstall Celiveo Track‐GreenSaver Reports:
2. Select Celiveo Track‐GreenSaver Reports, and click REMOVE.
The Celiveo Track‐GreenSaver Admin uninstallation wizard starts, and removes Celiveo Track‐
GreenSaver Admin from the system in a few minutes.
6.3.7 Uninstalling Celiveo Imprivata OneSign through Control Panel
To uninstall Celiveo Imprivata OneSign:
2. Select Celiveo Imprivata OneSign, and click REMOVE.
The Celiveo Imprivata OneSign uninstallation wizard starts, and removes Celiveo Imprivata
OneSign from the system in a few minutes.
Installing Serverless Pull Printing and Track‐PM
6. Installing Serverless Pull Printing and
Track‐PM
The Serverless Pull Printing client runs on user machines in the Serverless Pull Printing environment,
processes and responds to the print commands sent by the Celiveo solution running inside the printing
device.
The Serverless Pull Printing (SPP) and Track‐PM service can be installed using the Launcher.exe installer
file available in the package.
Before you install the Serverless Pull Printing and Track‐PM service, edit the setMSIArguments.ini file and
the PrintQueue.ini file with the relevant entries. Refer to the section below for details.
Celiveo Product Installer is capable of following actions:
Automatically detect the existing Serverless Pull Printing setup on the machine ‐ Serverless Pull
Printing installation, uninstallation, and an automatic new installation.
Silent installation of Track‐PM
User‐defined installation of Print Queue
1 Configuring Print Queue (PrintQueue.ini) File
Before you run Launcher.exe file, configure the PrintQueue.ini file.This file contains the following details
about the printer driver and the print queue that need to provided before running the Launcher.exe file.
Lines starting with the "#" (hash) symbol are comments.
ISCREATE_PRINT_QUEUE
Type “true” to create the Print Queue, otherwise type “false”.
DRIVER_INF_PATH
Specify the path to the printer driver inf file.
For example: .\pcl6‐x64‐5.4.0.11744\hpcu118u.inf).
Both absolute and relative paths to Launcher.exe would work.
DRIVER_NAME
Type the exact generic printer driver name that is listed in the printer driver inf file.
For example: HP Universal Printing PCL 6.
PRINTER_NAME
Specify the device name with which the printer will be created in Printers & Faxes folder of the client
machine.
The device name can be any common name.
JobExpirationTime
Specify the Celiveo job expiration time (in minutes). The maximum possible value is 2880 minutes (48
Days).
For the color print queue, use the 5.4.0.11744 HP UPD PS Driver. The PS driver renders the print
queue in color by default, and requires no further configuration.
2 Installing Serverless Pull Printing and Track‐PM on
Windows Operating System
Once the print queue file is configured with the relevant information, follow the steps mentioned below
to initiate the installation.
2.1 Prerequisites to Install Serverless Pull Printing and Track‐PM
Before you install and run the Serverless Pull Printing and Track‐PM service, make sure these settings are
configured:
User Permissions and Rights: Set the permissions and rights required to install the Serverless Pull
Printing and Track‐PM service.
Celiveo Web Admin configuration for Serverless Pull Printing and track‐PM (for more information
on configuration, see the chapter Configuring Celiveo Web Admin).
These are the rights to install Track‐PM:
Windows permissions: Local Administrator rights on the workstation
User Rights: Rights for the "Service User" Windows account to run Track‐PM
SQL database rights: DB_Datareader, DB_Datawriter
The "Service User" is the Windows Services account name defined in the setMSIArguments.ini file whose
permissions and database rights are used by Windows to run the Track‐PM service.
If the Track‐PM service does not have Local Administrator rights on the workstation but has only 'Read‐
Write' rights to the SQL database, then the Track‐PM service will not start, and will not track local
printing.
Once installed, the end‐user does not require administrator rights, and the Track‐PM service runs
irrespective of the rights assigned to the end‐user.
Windows Administrator rights are required for the following reasons:
1. Access to Spool Directory:
Since this directory is located in the System32 folder, and the users do not have the 'Read' access
to parse the spool files.
2. Access to the OpenPrinter API, and the other Windows APIs:
To pause, delete, or resume jobs from all the sources where the PRINTER_ACCESS_ADMINISTER
flag is used when calling the OpenPrinter API, and to receive notification for the same.
Ports to be Exempted : If the Windows Firewall is turned on, the following three ports should be
exempted at the server machine:
1443 ‐ Microsoft SQL Server port
1434 (UDP) ‐ Microsoft SQL Monitor port
49240 ‐ TCP port
The following tasks need to be completed before installing Serverless Pull Printing and Track‐PM.
Encrypting SecurejetDPI‐API.ini Configuration File
Importing SDPP.reg from Server to Client
Downloading and Saving Serverless Pull Printing Configuration (SDPP.reg.sjpscfg)
Database Connection Optimization for Serverless Pull Printing Clients (optional)
2.1.1 Encrypting SecurejetDPI‐API.ini Configuration File
SecurejetDPI‐API.ini file is a configuration file related to multi‐level authentication settings. This file is
located in the Plug‐in directory of the Driver Plug‐in installation folder.
Ensure that this file is encrypted before utilizing the pull print queue.
ConfigurationEncryptor.exe tool can be used to encrypt the SecurejetDPI‐API.ini file.
The ConfigurationEncryptor.exe tool is located in the same directory where executable files of SPP and
Driver Plug‐in are located.
The first field in the SecurejetDPI‐API.ini file is ENABLE_MULTILEVEL_AUTHENTICATION. If
the value for this field is set to FALSE, by default only Classified jobs are released to print. To
release Secret jobs, set the value to TRUE.
For example: ENABLE_MULTILEVEL_AUTHENTICATION=TRUE.
2.1.2 Importing SDPP.reg from Server to Client
To import SDPP.reg registry file from server to client:
1. Import the SDPP.reg configuration file to Registry Editor by typing the following command in the
Command Prompt:
REGEDIT /s "path to SDPP.reg"
2. Restart Celiveo Server Services.
3. Stop the Celiveo Server Services and Celiveo (CSS) Backend Service by typing the following
command in the Command Prompt:
Net Stop "Celiveo Server Services"
Net Stop "Celiveo (CSS) Backend Service"
4. Start the Celiveo Server Services and Celiveo (CSS) Backend Service by typing the following
command in the Command Prompt:
Net start "Celiveo Server Services"
Net start "Celiveo (CSS) Backend Service"
2.1.3 Downloading and Saving Serverless Pull Printing Configuration
(SDPP.reg.sjpscfg)
Serverless Pull Printing is configured in Celiveo Web Admin Software and the configuraiton file is
downloaded using Celiveo Web Admin Software. For more information on Serverless Pull Printing
configuration, see the section Deploying and Configuring Serverless Pull Printing in the chapter
Configuring Celiveo Server Services.
To download the Serverless Pull Printing configuration:
1. In the MAIN MENU, click ADVANCE CONFIGURATION > SERVER MANAGEMENT > ALL SERVER GROUPS LIST.
The ALL SERVER GROUPS LIST page appears.
2. Click the required server group to download the Serverless Pull Printing configuration.
The server group details are displayed under the Server List tab.
3. Click the GENERAL SETTINGS tab.
The configuration file created must be saved with the name “SDPP.reg.sjpscfg”.
4. Click the DOWNLOAD SPP CONFIGURATION button.
5. When prompted, click SAVE to save the Serveless Pull Printing configuration.
6. Save the configuration file with the name “SDPP.reg.sjpscfg”.
The file extension is default.
The settings have to be re‐exported, in case there are any changes in the Celiveo Server Ser‐
vices settings.
2.1.4 Database Connection Optimization for Serverless Pull Printing Clients
Before you install Serverless Pull Printing and TrackPM, configure the following settings for all the
Serverless Pull Printing clients:
1. Modify DBConnectionString by appending Pooling=false to its content.
This will limit the number of DB connections by killing the unused connections.
2. Create a DWORD registry key at registry setting path (HKEY_LOCAL_MACHINE > SOFTWARE >
JETMOBILE > SECUREJET> PRINT SERVER > SETTINGS) with key name: CollectJobMetrics and set
its value to 1.
2.2 Installing Serverless Pull Printing and Track‐PM
To install the Serverless Pull Printing and Track‐PM service:
1. Replace the existing SDPP.reg.sjpscfg file in the appropriate Serverless Pull Printing installation
package with the file created using Celiveo Server Services Configuration utility.
For more information, see the section Downloading and Saving Serverless Pull Printing
Configuration (SDPP.reg.sjpscfg).
2. Go to the Serverless Pull Printing and Track‐PM package folder to locate the setMSIArguments.ini
file.
3. Open the setMSIArguments.ini file with a text editor tool.
4. Type the SQL server name within the quotes where the Print Manager Plus database is hosted:
SQLSERVER="" //
. For example:
SQLSERVER="w2k3-User\PMP”
Microsoft Access database is not supported.
5. Type the user name of the Windows network administrator:
SERVICE_USER="" //
Within the quotes, type the login user name of the Windows network administrator who has local
administrative rights to the target workstations in the Windows network, and Read and Write
access on the SQL Database.
For example: SERVICE_USER="MainOffice\PMPAdminService"
Enter the login user name in the following format: Domain\User.
For example: MainOffice\PMPAdminService
6. Use the PasswordEncryptor.exe tool to encrypt the network password of the service user.
The PasswordEncryptor.exe tool is located in the Serverless Pull Printing Track‐PM Integrated
Installer directory.
..\Serverless Pull Printing Track‐PM Integrated Installer > Password Encryptor > PasswordEn‐
cryptor.exe
7. Enter the encrypted password of the service user within quotes for logging into Windows Service.
SERVICE_PASSWORD="" //
For example: SERVICE_PASSWORD="8B8566BFA6CAC20D5A019444506F9535"
8. Type the following entry:
DISABLE_STORE_JOB_HISTORY="" //
This is an optional entry.
Set the value as 1 (represents TRUE) or 0 (represents FALSE).
When set to “True” (1), the print queue will be monitored for printing restrictions and cost
balance. However, no history will be stored in the database.
For example: DISABLE_STORE_JOB_HISTORY="1"
Ensure that all the entries are within double quotes ("").
9. Save and close the setMSIArguments.ini file.
10. Go to the folder where the printer driver files are located, and place the printer driver files in the
folders corresponding to the processor architecture of the printer.
Download the printer driver files from the device‐specific website.
11. Encrypt the SecurejetDPI‐API.ini file using the ConfigurationEncryptor.exe tool.
For more information, see the section Encrypting SecurejetDPI‐API.ini Configuration File.
12. Double‐click Launcher.exe to start the Serverless Pull Printing and Track‐PM installation process.
The Serverless Pull Printing and Track‐PM service will be installed within a few minutes.
The Serverless Pull Printing and Track‐PM installer can also be run from a remote machine using
Command Prompt utility.
For DB connection optimization setting, see the section Database Connection Optimization for
Serverless Pull Printing Clients.
2.2.1 Un‐installation Utility
The Un‐installation utility uninstalls Celiveo's Client Components. It is an Uninstaller for Serverless Pull
Printing, Track‐PM, print queues and Region Switch and uninstalls these components even if they are in a
corrupt state.
By default, the utility is located in the “UninstallUtility” folder in the SPP‐TrackPM IntegratedInstaller
8.0.015.MMDD\ SPP‐TrackPM directory.
The UninstallUtility folder contains the following:
UninstallUitlity.exe: the executable file.
UninstallUitlity.exe.config: the configuration file.
There are four configurable parameters in the app settings section:
StartTimeout: The time (in seconds) before the service was started or stopped.
By default, the value is set to 60 seconds.
LogFolderLocation: Location path of the Log folder. This can also be passed as an exe parameter.
For example, UninstallUtility.exe ‐l "C:\Logs".
RegistryBackupLocation: Location path of the Registry Backup folder.
<registries>: Sections to add the custom registries that need to be deleted.
The complete path should be added as value for a new key, for every registry that has to be
deleted
Only Local Machine or Users registry keys can be deleted.
Instllation logs are generated and placed in the Log Folder to be utilized by Launcher.exe.
For example, the Log file name can be:
SJ_ClientComponenets_Uninstall_<HostName>< DateTime>.txt.
On running Launcher.exe, the Un‐installation Utility (UninstallUtility.exe) is executed only if
UninstallUtility directory is available in the SPP‐TrackPM IntegratedInstaller 8.0.015.MMDD\
SPP‐TrackPM directory.
To avoid the utility from running, remove the UninstallUtility directory.
2.3 Installing only Serverless Pull Printing Client
If required, only the Serverless Pull Printing Client service can be installed without Track‐PM.
From the package folder (as shown in the figure below), remove the TrackPM folder.
Or, you can also remove the setMSArguments.ini file.
After removing the TrackPM folder, when the Launcher.exe file is executed, only the Serverless Pull
Printing client service (without Celiveo Track‐PM) will be installed.
2.4 Installing only Track‐PM
If required, only the Track‐PM service can be installed, without Serverless Pull Printing client.
From the package folder (as shown in the figure above), remove the installer folder.
After removing the installer folder, when the Launcher.exe is executed, only the Track‐PM service will be
installed.
3 Installing Serverless Pull Printing and Track‐PM using
Command Prompt (Silent Installation)
Serverless Pull Printing and Track‐PM can be installed and uninstalled manually using the Command
Prompt.
3.1 Installing Track‐PM
To install Track‐PM:
1. Install Track‐PM by typing the following command in Command Prompt:
Msiexec /I "path to msi" /qn /l*v "path to log file"
2. Start Track‐PM service by typing the following command in Command Prompt:
Net start "TrackPM"
3.2 Uninstalling Track‐PM
If Track‐PM is installed, follow the steps below to uninstall Track‐PM:
1. Stop Track‐PM service by typing the following command in Command Prompt:
Net stop "TrackPM"
2. Uninstall Track‐PM using its GUID by typing the following command in Command Prompt:
Msiexec /x "ProductGUID" /qn /l*v "path to log file"
3.3 Uninstalling Serverless Pull Printing
If Serverless Pull Printing is installed on the system, follow the steps below, or skip to Step 4 below
(Installing Serverless Pull Printing).
1. Stop Celiveo Server Services by typing the following command in Command Prompt:
2. Stop Celiveo (CSS) Backend Service by typing the following command in Command Prompt:
3. Stop Spooler Service by typing the following command in Command Prompt:
Net Stop "Spooler"
4. Uninstall Serverless Pull Printing using its GUID by typing the following command in Command
Prompt:
Msiexec /x "ProductGUID" /qn /l*v "path to log file"
ProductGUID is a unique key created by a product installed in the system. This GUID can be
found in the following registry path:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
5. Go to this path, and check the display name for every GUID, and find "Celiveo Server Services”, and
its corresponding GUID.
Do not proceed further unless Serverless Pull Printing is uninstalled successfully.
a. Verify that Celiveo Server Services and Celiveo (CSS) Backend Service are not present in
Microsoft Services (services.msc) by typing the following commands in Command Prompt:
sc query "Celiveo Server Services">>"path to log file"
sc query "Celiveo (CSS) Backend Service">> "Path to log file"
b. Verify that the Msiexec return code is zero. Any return code other than zero signifies an
unsuccessful Serverless Pull Printing installation.
If uninstalled, double‐click to run the CSS_Repair.exe file, and attempt to uninstall Serverless
Pull Printing again.
Do not proceed further until the Msiexec return code is zero. If using CSS_Repair.exe does
not uninstall Serverless Pull Printing, then Serverless Pull Printing has to be uninstalled man‐
ually.
6. Install Serverless Pull Printing by typing the following command:
Msiexec /I "path to msi" /qn /l*v "path to log file"
Make sure that the spooler service is started after the Serverless Pull Printing installation.
7. Copy the SPPConfig.xml file from the installer package to another Installdir path of Celiveo Server
Services.
The default installation directory path is:
C:\\Program Files\\Jetmobile\\Celiveo Server Services
8. Go the default installation directory path by typing the following command in Command Prompt:
xcopy /y "source location" "destination location" >>"path to log
file"
9. Go to the SSSConfig folder in the installer package, and find the SSSConfig.exe executable file.
10. Enable messaging by typing the following command in Command Prompt:
"path to SSSConfig.exe" EnableMessaging Enable
This step is applicable only when Track‐PM is installed.
3.4 Deleting Serverless Pull Printing Shortcuts
Go to Start > Run, and type “cmd” to open Command Prompt.
To delete the Celiveo Server Services shortcut from the START menu, type the following command:
del /S /Q startMenuPath+ \\Celiveo Server Services

Configuration.lnk
Example:
del /S /Q "C:\ProgramData\Microsoft\Windows\start
menu\program\Jetmobile\Celiveo Server Services Configuration.lnk"
To delete the Enrollment Manager shortcut from the Start menu, type the following command:
del /S /Q startMenuPath+ \\Enrollment Manager.lnk

Example:
del /S /Q "C:\ProgramData\Microsoft\Windows\start
menu\program\Jetmobile\Enrollment Manager.lnk"
To delete the Celiveo Server Services shortcut icon from the desktop, type the following command:
del /S /Q desktoppath+ \\CSS Configuration.lnk

Example:
del /S /Q "C:\Users\Public\Desktop\CSS Configuration.lnk"
3.5 Creating Print Queue
To create Print Queue:
1. In Command Prompt, type the following command:
"path to PrintQueueCreator.exe" -id -inf "path to inf file" -dn
"Printer driver name" -prn "PrinterName" -jobExp
"JobExpirationTimeInMinutes"
2. Restart the following services.
3. Stop the Celiveo Server Services and Celiveo (CSS) Backend Service by typing the following
command in Command Prompt:
4. Start the Celiveo Server Services and Celiveo (CSS) Backend Service by typing the following
command in Command Prompt:
Net start "Celiveo Server Services"
Net start "Celiveo (CSS) Backend Service"
5. Go to Microsoft Services (services.msc) to verify that the Celiveo Server Services and Celiveo (CSS)
Backend Service have started.
Quick Configuration of Celiveo Solution
7. Quick Configuration of Celiveo Solution
This chapter exlains how a user can configure Celiveo solution using quick configuration feature of
Celiveo Web Admin. The Quick Configuration section enables you to quickly add, configure and
synchronize a device through a printer group(s). It allows configuring a group (QuickGroup) with
pre‐defined settings for Authentication, Secure Print and Tracking. For more information on Quick
Configuration features, see the Quick Configuration section of Configuring Celiveo Web Admin chapter.
The Celiveo Products Installer simplifies the installation of Celiveo server modules by enabling the
administrator to install multiple Celiveo modules and the prerequisites for the modules using a single
installer.
See the chapter Installing Celiveo Server Modules for the prerequisites and the installation of the
Celiveo solution.
1 Configuring Celiveo Solution using Quick Configuration
This section explains the steps involved in adding, configuring and synchronizing a device through
QuickGroup.
The steps include:
Adding a Device to the Quick Group
Selecting Authentication Type
Setting up User Directory Profile
Adding Celiveo Server Services
Selecting Device Activity
Adding Celiveo Embedded Solution
Synchronizing a Device
The Celiveo Embedded Solution needs to be added using the Embedded Solution Viewer
section of Web Admin before synchronization of device takes place.
Uninstalling Celiveo Solution Using Celiveo Web Admin Software
The steps are to be followed in the order as explained in this section.
1.1 Adding a Device to the Quick Group
To add a device to the printer list:
1. Click on the Celiveo Web Admin icon on the desktop.
The Celiveo Web Admin page opens. The Celiveo Web Admin page is divided into three sections:
Main Menu, Information Page and Related Actions.
2. In the Celiveo Web Admin Main Menu, click QUICK CONFIGURATION > QUICKGROUP.
3. In the Related Actions section, click PRINTER > ADD PRINTER > BY NAME.
An option to add device by host name appears.
4. In the Hostname text box, enter the device host name.
5. Enter the username and the password to login to the device.
6. Select the Add even if offline check box, if the device needs to be added, even if it is not connected
to the network.
7. Click ADD.
A new device gets added and the Succeeded message is displayed.
8. Click CLOSE.
Ensure to enter the login id and password of the EWS page specific to the devices.
If a Konica Minolta device is added, ensure to add Open API login id and password along with EWS
credentials.
1.2 Selecting Authentication Type
Quick configuration section supports the following authentication module:
PIN
Badge
To select authentication type:
1. In the Celiveo Web Admin Main menu, click QUICK CONFIGURATION > QUICKGROUP.
2. Click the Authentication tab and select the required authentication module (PIN or Badge).
If PIN module is selected, the Print Manage URL is displayed. There is an option to edit the
Celiveo Print Manage path .
If Badge module is selected, the Enrollment option is displayed. Only file enrollment is
supported.
When Badge authentication is selected, the Dual Factor option is enabled.
3. Click APPLY.
1.3 Setting up User Directory Profile
To set up a user directory profile:
2. Click the Authentication tab and go the User Directory Profile section.
3. In the Hostname text box, enter the hostname of the Active Directory machine.
Fields Description
Host name Enter the host name where the Active Directory is installed.
Domain Enter the Active Directory domain name
Enter dc=<domain name>, dc=com
Search base
(for example: dc=celiveo,dc=com)
Host port The default port is 389 for the simple authentication method.
Enter the valid login and password that is used to login to the Active
Login and Password
Directory machine.
Click TEST CONNECTION to check the connection with the Active
Test Connection
Directory.
Select the check box, if the dual factor authentication needs to be
Dual Factor
enabled.
4. Click APPLY to save and apply the details entered.
1.4 Adding Celiveo Server Services
The Pull Printing jobs are retrieved through the Celiveo Server Services server configured in the
Authentication tab. The same Celiveo Server Services can used to track the print jobs and the
device activities.
To add a Celiveo Server Services:
1. In the Celiveo Web Admin menu, click QUICK CONFIGURATION > QUICKGROUP.
2. Click Authentication tab and go the Celiveo Server Services section.
3. In the Hostname text box, enter the hostname of the machine where Celiveo Server Services is
installed.
4. Click TEST CONNECTION to verify the Celiveo Server Services hostname.
1.5 Selecting Device Activity
To select a device activity:
2. Click the Authentication tab and go the Activity section.
3. Select the appropriate options available.
QuickGroup offers a set of predefined activities. By default, ENROLL ME and MY PRINT JOBS are
selected, and cannot be changed.
4. Click APPLY to configure the selected activities with the Celiveo solution.
1.6 Adding Celiveo Embedded Solution
To add a Celiveo Embedded Solution:
1. In the Main Menu, click ADVANCE CONFIGURATION > EMBEDDED SOLUTION VIEWER. The Celiveo
Embedded Solution Viewer page appears.
2. In the Related Actions section, click ADD. The Upload Embedded Solution File pop‐up appears.
3. Click BROWSE and go to the folder path where the Celiveo Embedded Solutions are saved.
4. Select the appropriate Celiveo Embedded Solution file and click UPLOAD FILE. The selected Celiveo
Embedded Solution file is added.
1.7 Synchronizing a Device
To synchronize a device:
2. Select the devices to be synchronized and in the Related Actions section, click SYNCHRONIZATION.
A confirmation message appears to synchronize the selected devices.
3. Click YES to confirm the synchronization and click CLOSE.
Once the device is configured and synchronized with Celiveo Embedded Solution, user can use the
Celiveo enabled activities on the devices. For more information on using Celiveo solution on devices, see
the Celiveo Enterprise Device User’s Guide.
1.8 Uninstalling Celiveo Solution Using Celiveo Web Admin Software
Celiveo solution can be uninstalled or removed from a device, when the device is removed from the
QuickGroup. Once the Celiveo solution that is installed on the device is removed, the device gets
rebooted.
To uninstall Celiveo solution from a device:
A list of devices is displayed in the Printer List tab.
2. Select a desired device to be removed from the list of devices.
3. In the Related Actions section, click REMOVE SELECTED PRINTERS.
A confirmation message to delete the selected printers appears.
4. Click REMOVE to remove the selected device(s) or uninstall along with Celiveo solution.
For more advanced features and functionality, the QuickGroup has to be migrated and maintained
in the section Advance Configuration. See the section Advance Configuration in the chapter
Configuring Celiveo Web Admin for more information.
Configuring Celiveo Web Admin
8. Configuring Celiveo Web Admin
1 Introduction
Celiveo Web Admin provides an interface for the Celiveo Enterprise solution for secure printing through
user authentication, management of print jobs, and tracking activities.
Authentication includes features, such as, individual user rights, dual factor authentication and direct or
indirect authentication against user lists inside the devices against one or more Active Directory or User
Directory servers or Celiveo Server Services.
This release of Celiveo Web Admin Software comes with the integrated functionality of Celiveo Track‐
GreenSaver (TGS) and Celiveo Server Services (CSS) to control access to printing devices in your
organization, thereby reducing and securing their usage.
Verify that the Celiveo Web Admin ports are added as exceptions if the Windows firewall is
enabled.
Ensure that Internet Explorer or Mozilla Firefox is installed as they are the only supported browsers
for Celiveo Enterprise Web Admin. Google Chrome is not supported.
The latest Track‐GreenSaver requires a primary service or secondary service to be installed along
with Celiveo Web Admin to be able to control and support Track‐GreenSaver.
2 Celiveo Web Admin Features
Celiveo Web Admin Software offers the following features:
QUICK GROUP CONFIGURATION: Allows you to quickly add and configure device groups with pre‐
defined settings, and to synchronize the devices. For more information, see the section Quick
Configuration.
EMBEDDED SOLUTION VIEWER: Displays the list of device solutions and details. For more information,
see the section Embedded Solution Viewer.
PRINTER MANAGEMENT: Allows you to add devices, to link them to the device groups, to configure,
monitor and manage the device groups. For more information, see the section Printer
Management.
SERVER MANAGEMENT: Allows you to add the Celiveo Server Services server to All Server Groups List,
create server groups to manage group settings, and link the servers to the Server Groups list, and
to configure them accordingly. For more information, see the section Server Management.
MANAGE PROFILES: Allows you to configure and manage the following types of profiles: offline
authentication profiles, sync with directory and notify, billing lists, user directory profiles, smart
card profiles, authentication profiles, SQL server profiles, SAP system profiles. These profiles can
be applied to the printer groups through the Printer Management section. For more information,
see the section Manage Profiles.
GLOBAL SETTINGS: Allows you to configure schedulers, user notifications and device‐specific settings,
such as, for HP and Ricoh printers. For more information, see the section Global Settings.
TGS MANAGEMENT: Allows you to configure and manage the settings of the Celiveo Track‐GreenSaver
software. For more information, see the chapter Configuring Celiveo Track‐GreenSaver.
PRINTER SETTING: Allows you to configure printer settings, such as, page cost parameters. For more
information, see the section Configuring Printer Setting.
RULE BASED PRINTING: Allows you to configure printing rules and regulations for selected levels/
groups of users. For more information, see the section Configuring Rule Based Printing.
CELIVEO PRINT MANAGE: Allows you to add, delete or modify Print Manage Server. For more
information, see the Celiveo Print Manage Administrators and User Guides.
CELIVEO TRACK‐GREENSAVER REPORTS CENTRE: Allows you to add, delete or modify Celiveo Track‐
GreenSaver Reports. For more information, see the chapter Configuring Celiveo Track‐GreenSaver
Reports.
LICENSE MANAGEMENT: Allows you to add new licenses and delete existing licenses related to
different products or features. For more information, see the section License Management.
All these features are accessible from the Main Menu list of topics in the left navigation panel in Celiveo
Web Admin Software.
3 Understanding Celiveo Web Admin Software Interface
The Celiveo Web Admin Software interface is divided into three main sections:
MAIN MENU: The Main Menu section at the left side of the window contains the list of features
offered by Celiveo Web Admin Software. You can view the contents of the Main Menu by clicking
the plus (+) or minus (‐) signs to expand or collapse the menu list. After a device or profile is added,
it is displayed as a node under the relevant menu item.
To view the content related to a particular menu item, click the desired menu item.
The related content is displayed in the CELIVEO WEB ADMIN section, that is the main content area.
The Main Menu is highlighted in the figure above.
CELIVEO WEB ADMIN: The Celiveo Web Admin section at the center of the window displays the
contents of the particular menu item that you click in the Main Menu.
The contents refer to the configuration field settings where you can enter the relevant values. The
Celiveo Web Admin section is highlighted in the figure above.
RELATED ACTIONS: The Related Actions section at the right side of the window displays the available
actions for the item(s) selected in the Celiveo Web Admin section or the Main Menu section, for
example, Creating/Deleting Profiles.
4 Quick Configuration
The Quick Configuration section enables you to quickly add, configure and synchronize a device through a
printer group(s). It allows configuring a group with pre‐defined settings for Authentication, Secure Print
and Tracking.
You can configure only one group at a time, and once you migrate the QuickGroup to the section
Advance Configuration, you are allowed to configure another QuickGroup.
By default, a QuickGroup is available with the Authentication, Secure Print and Tracking functionalities,
and you can perform the related configuration accordingly.
The QuickGroup is a pre‐defined group under the Quick Configuration menu with the ability to use the
following features:
1. Authentication Module
Using the Front Panel (PIN)
Using the Proximity card (Badge)
2. Authentication Method
Indirect authentication through Celiveo Server Services
3. Enrollment
Enrollment using Active Directory
4. Enrollment Type
Self‐enrollment through File, if the Proximity card is selected
Enrollment through the Print Manage application, if PIN is selected
5. Dual Factor support
6. Secure Pull Printing through Celiveo Server Services
7. Centralized Tracking through Celiveo Server Services
Support for user quota and tracking
For any other (advanced) feature and configuration, the QuickGroup needs to be migrated and
maintained from the Advance Configuration settings section.
4.1 Viewing QuickGroup
To view a QuickGroup:
In the Main Menu of Celiveo Web Admin Software, click QUICK CONFIGURATION > QUICKGROUP. The
QuickGroup details appear with the following tabs, as shown in the figure below.
Printer List
Authentication
Secure Print
Tracking
Further settings, such as, Printer settings and QuickGroup settings can be done in the Related Actions
section.
4.2 Configuring Printer Settings of a QuickGroup
The following actions are available to manage device settings as shown in the figure below:
Adding Devices to QuickGroup
Removing Selected Devices
Synchronizing Devices
Removing Devices Forcibly
4.2.1 Adding Devices to QuickGroup
In QuickGroup, a list of devices can be added directly to the group.
To add devices to the QuickGroup:
1. In the Main Menu, click QUICK CONFIGURATION > QUICKGROUP. The QuickGroup details appear.
2. In the Related Actions section, under Printer, click the desired option to add the printer. The
printer can be added By Name or the CSV option.
By Name:
a. Click ADD > BY NAME and in the Hostname field, enter the device host name.
b. Enter the device login and password (such as, the username and password used for the device
configuration web page).
In case a Konica Minolta device is added, ensure to add Open API login id and password
along with EWS credentials.
c. Select the check box Add Even If Offline, if you want to add the device, even if it is not
connected to the network.
In this case, Celiveo attempts to resolve the IP of the device immediately.
If this check box is not checked, the operation to resolve the IP fails, if the device is offline.
d. Click ADD to add the printer.
First ensure that the printer added to QuickGroup does not already exist in the All Printers
List in the Advance Configuration section.
Create By CSV:
a. Click ADD > CREATE BY CSV, and browse to the CSV file, and select the file to be added.
b. Click UPLOAD FILE. The CSV file gets uploaded with the device details.
For more information on how to add a device using the Create By CSV option, see the Advance
Configuration section.
4.2.2 Removing Selected Devices
One or more devices can be removed from the QuickGroup.
To remove selected devices from QuickGroup:
1. In the Main Menu, click QUICK CONFIGURATION > QUICKGROUP. The list of devices appears under the
Printer List tab.
2. Select the check box next to the printer that you want to remove from the QuickGroup list.
3. In the Related Actions section, under Printer, click REMOVE SELECTED PRINTER. A list of all the selected
devices appears.
4. Click REMOVE to confirm. A success message appears.
5. Click CLOSE.
When a device is removed from the QuickGroup Printer list, the Celiveo solution that is installed on
the device is also removed, and the device is rebooted.
4.2.3 Synchronizing Devices
To synchronize a device:
Printer List tab.
2. Select the check box next to the printer that you want to synchronize in the QuickGroup list.
3. In the Related Actions section, under Printer, click SYNCHRONIZATION. A list of all the devices that are
selected appears to confirm the synchronization.
4. Click YES to confirm. A success message appears.
5. Click CLOSE.
4.2.4 Removing Devices Forcibly
To remove selected devices forcibly from QuickGroup:
Printer List tab.
2. Select the check box next to the device that you want to delete from the QuickGroup list.
3. In the Related Actions section, under Printer, click REMOVE PRINTER FORCIBLY. A list of all the devices
that are selected appears to confirm the forcible removal of device.
4. Click REMOVE to confirm. A success message appears.
5. Click CLOSE.
When you remove a printer forcibly from the QuickGroup printer list, only the selected printer is
removed, but the Celiveo solution remains on the device. The device is not rebooted.
4.3 Printer List
The Printer List tab displays a list of all the printers added to the QuickGroup. You can view the details for
all the printers managed by the QuickGroup of Celiveo Web Admin Software.
To view the printer list:
In the Main Menu, click QUICK CONFIGURATION > QUICKGROUP. The list of devices appears under the Printer
List tab.
For more information on the items listed in the Celiveo Web Admin Software section, see the table under
Viewing a List of All Devices in the section Advance Configuration.
Devices can be sorted in the list in an ascending or a descending order by clicking the column titles.
4.4 Authentication
In the Authentication tab, you can perform the following configuration settings, as shown in the figure
below:
Configuring Authentication Type Setting
Configuring User Directory Profile Settings
Configuring Celiveo Server Services Settings
Configuring Activity Setting
4.4.1 Configuring Authentication Type Setting
The authentication type can be set as either PIN or Badge.
The Dual Factor feature is available for Badge authentication only.
In Quick Configuration, only the File Enrollment option is available. For any other advanced
settings, migrate the QuickGroup to the Advance Configuration section, and configure accordingly.
There is an option to edit the Celiveo Print Manage path. The Print Manage URL is displayed only when
PIN is selected as the authentication type. For Badge Authentication type, enrollment through Print
Manage is not applicable. The Celiveo Web Admin Software creates a default entry for the Print Manage
application, and the Print Manage URL is displayed in the Quick Configuration section.
1. Click EDIT next to the Print Manage path.
2. Update the URL, as required, and click APPLY.
Through the Print Manage application, you can generate or reset your own PIN.
For more information on the Print Manage application, see the Celiveo Print Manage Administrator’s
Guide.
To access the default Print Manage path displayed on the Authentication tab, install the Print
Manage solution, and edit the link manually to provide the correct path.
4.4.2 Configuring User Directory Profile Settings
User Directory Profile can be configured by entering the Active Directory profile parameters, as described
in the table below:
Field Name Description
HOST NAME Enter the hostname where the Active Directory is installed.
Enter the Active Directory parent domain name.
DOMAIN
Example: Celiveo
Enter the search base for the Active Directory domain of the user of the Active
SEARCH BASE Directory.
Example: dc=Celiveo,dc=com
HOST PORT The default port is 389 for the simple authentication method.
LOGIN ID Enter the login ID to access the Active Directory.
PASSWORD Enter password to access the Active Directory.
Click TEST CONNECTION to verify that the parameters entered are valid.
Select the Dual Factor check box to enable the dual factor functionality for the selected activities.
4.4.3 Configuring Celiveo Server Services Settings
Quick Configuration allows you to configure only one Celiveo Server Services for authentication.
To configure Celiveo Server Services:
1. In the CSS (Celiveo Server Services) section, under the Host name, enter the host name or IP of the
machine where the Celiveo Server Services is installed; else enter the local host name if you are
using Celiveo Server Services that is installed on the local machine.
2. Click TEST CONNECTION to verify that the Celiveo Server Services IP entered is valid.
For any other advanced settings, migrate the QuickGroup to the Advance Configuration section,
and configure accordingly.
4.4.4 Configuring Activity Setting
The Activity section lists all the device‐related settings that can be configured with the Celiveo solution.
QuickGroup offers a set of predefined activities. Select the appropriate options available, and click APPLY
to configure the selected activities with the Celiveo solution.
By default, Enroll Me and My Print Jobs are selected, and cannot be changed.
4.5 Configuring Secure Print
You can configure the QuickGroup with the Secure Pull Print option to print a job through Celiveo Server
Services. The Pull Printing jobs are retrieved through the Celiveo Server Services server configured in the
Authentication tab. The same Celiveo Server Services server is used to track the print jobs.
For any other advanced settings, migrate the QuickGroup to the Advance Configuration section,
and configure accordingly.
4.6 Configuring Tracking
Devices can have tracking configured to monitor printing and device activities. In the Quick Configuration
section, the Tracking tab displays the Celiveo Server Services that is selected in the Authentication tab
which is common for Secure Printing and Tracking.
If you want to configure the advanced options of Tracking, migrate the QuickGroup to the Advance
Configuration section, and configure accordingly.
4.7 Configuring Group Settings
The following actions are available to manage group settings, as shown in the figure below:
Changing Language Settings
Migrating QuickGroup to Advance Configuration Section
4.7.1 Changing Language Settings
You can change and assign a language to the QuickGroup, as required. The language change is reflected
only on the devices.
English is the default language.
For more information on changing the language settings, see the Advance Configuration section.
4.7.2 Migrating QuickGroup to Advance Configuration Section
Only one QuickGroup can be configured at a time. For advanced features and functionality, the
QuickGroup has to be migrated and maintained in the Advance Configuration section. To configure a
new QuickGroup, you have to rename and migrate the existing QuickGroup to the Advance
Configuration section of the Main Menu.
To migrate a QuickGroup to the Advance Configuration section:
1. In the Main Menu, click QUICK CONFIGURATION > QUICKGROUP. The QuickGroup details appear.
2. In the Related Actions section, click MIGRATE QUICK GROUP TO ADVANCE CONFIGURATION SECTION. An
option to migrate QuickGroup to the Advance Configuration section appears.
3. In the Group Name text box, enter a name for the group and click OK. The existing QuickGroup and
its details (including the new group name) is moved to the Advance Configuration section under
All Groups List.
This action will reset all the settings, and clear off all the details of the QuickGroup under the Quick
Configuration section, and you are redirected to the QuickGroup section.
When you fill the entries in the Authentication tab of the QuickGroup and click APPLY, the respective
default Active Directory profile, Celiveo Server Services profile, Celiveo Server Services group and
authentication profile are created as per the details entered.
Once you migrate a QuickGroup with a new name to the Advance Configuration section, the profiles are
created with a default auto‐generated name with the new group name as prefix name.
The Active Directory profile, Celiveo Server Services profile, Celiveo Server Services server group and
authentication profile that are used in the Quick Group section are not seen in the left navigation panel
of the Advance Configuration section until the QuickGroup is migrated into the Advance Configuration
section. The details are displayed on the left‐hand navigation panel, once the QuickGroup is migrated.
5 Advance Configuration
The Advance Configuration section enables you to add, manage, configure, synchronize devices and
servers through groups. It allows you to create various profiles and manage their settings. And also allows
you to configure printer groups, and server groups with various settings for Authentication, Secure Print
and Tracking, and to send notifications. This section provides a detailed explanation on the configuration
and management of devices and device groups.
All the Celiveo Web Admin features except the Quick Configuration, are managed in the Advance
Configuration section. For more information on Celiveo Web Admin features, see the Celiveo Web Admin
Features section.
6 Embedded Solution Viewer
The embedded solution viewer allows:
Viewing Celiveo Embedded Solution
Adding Celiveo Embedded Solution
Deleting Celiveo Embedded Solution
Saving Celiveo Embedded Solution
Deleting the Embedded Device Solution does not delete or remove the installed solution from the
device.
6.1 Viewing Celiveo Embedded Solution
To view the Celiveo Embedded Solution:
In the Main Menu, click ADVANCE CONFIGURATION > EMBEDDED SOLUTION VIEWER.
The Celiveo Embedded Solutions Viewer page appears, displaying the device model, the list of the
selected Celiveo Embedded Solutions, Embedded Solution type and the status as shown in the figure
below.
6.2 Adding Celiveo Embedded Solution
To add a Celiveo Embedded Solution:
1. In the Main Menu, click ADVANCE CONFIGURATION > EMBEDDED SOLUTION VIEWER. The Celiveo
Embedded Solutions Viewer page appears.
2. In the Related Actions section, click add. The Upload Embedded Solution File pop‐up appears.
3. Click BROWSE and go to the folder path where the Celiveo Embedded Solutions are saved.
4. Select the appropriate Celiveo Embedded Solution file and click UPLOAD FILE. The selected Celiveo
Embedded Solution file is added.
6.3 Deleting Celiveo Embedded Solution
To delete a Celiveo Embedded Solution:
1. In the Main Menu, click ADVANCE CONFIGURATION > EMBEDDED SOLUTION VIEWER. The Celiveo Embedded
Solutions Viewer page appears.
2. Select the device solution code to delete.
3. In the Related Actions section, click DELETE. A confirmation message appears to delete the selected
Celiveo Embedded Solution.
4. Click OK to confirm, then click CLOSE.
6.4 Saving Celiveo Embedded Solution
To save a Celiveo Embedded Solution:
1. In the Main Menu, click ADVANCE CONFIGURATION > EMBEDDED SOLUTION VIEWER. The Celiveo Embedded
Solutions Viewer page appears.
2. Select the device solution code to save.
3. In the Related Actions section, click SAVE EMBEDDED SOLUTION SELECTION.
A confirmation message appears to save the selected Celiveo Embedded Solution. The Celiveo
Embedded Solution code is saved at the following location:
<Web Admin installation directory>\WebAdmin\App_Data\EmbeddedSolution
4. Click OK to save the device solution and click CLOSE.
7 Printer Management
This section explains how to monitor and manage devices, such as printers and multi‐function printers. It
contains the following sub‐sections:
All Printers List
Ungrouped Printer List
All Groups List
7.1 All Printers List
The following actions are available to add and manage the printing devices in All Printers List:
Viewing a List of All Devices
Adding Devices to All Printers List
 By Name
 Create by CSV
Enabling/Disabling Printer Logs
Deleting Devices from All Printers List
Moving a Device from One Group to Another (Modifying)
7.1.1 Viewing a List of All Devices
To view the information of all the devices managed by the Celiveo Web Admin Software:
1. In the Main Menu, click ADVANCE CONFIGURATION > PRINTER MANAGEMENT > ALL PRINTERS LIST.
The All Printers List is displayed, as shown in the figure below.
The table below explains each of the items listed in the Celiveo Web Admin Software section.
Column Heading Description
HOSTNAME Displays the host name of the device.
IP Displays the IP address of the device (resolved dynamically).
DEVICE MODEL Displays the model number of the device.
Displays the name of the group to which the printer belongs.
GROUP NAME
None designates a printer that does not belong to any group.
Displays the synchronization status for the selected device. The status is
displayed upon hovering the cursor on the icon.
‐ OK; synchronized
‐ Pending synchronization
‐ Awaiting response from the device/multi‐function printer
SYNC. STATUS
‐ Synchronizing
‐ Synchronization is successful but there is an issue in deploying Celiveo
Server Services settings.
‐ Error
‐ Refresh ‐ Celiveo Web Admin is requesting a new device status
Displays the license status for the selected device. License expiry information is
displayed upon hovering the cursor on the icon.
‐ Indicates the module is licensed
‐ Indicates the module using a trial license
LICENSE TYPE ‐ Indicates the module is not licensed
‐ Indicates that some of the licenses are expired
Celiveo Web Admin Tracking License does not include the Celiveo Track‐
GreenSaver Tracking module. For more information on Celiveo Track‐
GreenSaver license, see the section Viewing TGS License Details.
The devices can be sorted in the list in an ascending or a descending order by clicking the column titles.
The user has an option to define the time or disable the auto‐refresh functionality on the All Printers List
page. It can be defined for reachable printer or unreachable printers by editing the two keys in the
web.config file of Web Admin.
The default path for Web.config:
C:\Program Files (x86)\Celiveo\WebAdmin\Web.config
or
<Web Admin installation directory>\WebAdmin\Web.config
Define the auto‐refresh time in minutes, else enter "‐1" to disable auto‐refresh.
To disable auto‐refresh:
Open the web.config file of Web Admin and define the value as "-1".
<add key="printerListRefreshInterval" value="-1" />
<add key="printerListRefreshIntervalForUnreachablePrinter" value="-1" /
>
7.1.2 Adding Devices to All Printers List
To add devices to All Printers List:
2. In the Related Actions section, under Add, click the desired option to add the device:
 By Name
a. Click ADD > BY NAME.
b. In the Hostname field, enter the host name of the device.
c. Enter the device login and password (the username and password used for the printer
configuration web page).
The first password is the SMS (Service Management Service) password. If this password is
changed, you will not be able to sync the printer, or uninstall the solution.
In case a Konica Minolta device is added, ensure to add Open API login id and password
along with EWS credentials.
d. Click the Add Even If Offline check box, if you want to add the device even if it is not connected
to the network, as otherwise the system will immediately attempt to resolve the IP, and the
operation will fail, if the device is off.
In case of Celiveo Hardware enabled devices, this option is not applicable.
e. Click Add to add the device by hostname.
 Create by CSV
a. Click ADD > CREATE BY CSV.
b. Browse to the CSV file and select the file to be added.
c. Click UPLOAD FILE.
All the devices must have logins and passwords configured for the printer configuration web page
to function under the Celiveo solution.
7.1.3 Enabling/Disabling Printer Logs
The printer logs function is not applicable on Ricoh and HP FutureSmart devices.
This function is for troubleshooting purpose. Enabling the printer logs generates the logs in the device,
which can be useful for troubleshooting purposes. These logs record all the debug messages sent from or
received by the device.
To enable or disable printer logs:
The All Printers List appears with the list the of devices added.
2. Under All Printers List, select the check box next to the device or printer whose logging needs to
be be enabled or disabled.
3. In the Related Actions section, click ENABLE PRINTER LOGS.
A confirmation message is displayed to confirm the enable printer logs.
4. Click OK to enable the printer logs.
By default, the printer logs are disabled. To disable the printer logs, follow the steps above with the
option Disable Printer Logs.
7.1.4 Deleting Devices from All Printers List
To delete devices from All Printers List:
The All Printers List page appears with the list of available devices.
2. Click the check box(es) next to the device(s) to be deleted.
3. In the Related Actions section, click DELETE.
4. A list of all the selected devices is displayed.
5. To delete the selected devices, click OK to confirm.
Before deleting the device under All Printers List, make sur the devices are not linked to any device
groups. If a device is linked to a device group, remove it from the group before you delete it from
the All Printers List.
7.1.5 Moving a Device from One Group to Another (Modifying)
A device can be moved from one group to another by modifying the group settings of a device in All
Printers List.
To change the group of a device in All Printers List:
The All Printers List appears with the list the of devices added.
2. Click the click box(es) next to the name of the device(s) to be moved from one group to another.
3. In the Related Actions section, click MODIFY.
4. From the Group drop‐down list, select a new group and enter the device login and password, and
click OK. The selected device(s) is moved to the selected group.
7.2 Ungrouped Printer List
In this section, you can view a list of all the devices that are not linked to any device group which are not
synchronized with the Celiveo settings.
To view the ungrouped printer list:
In the Main Menu, click PRINTER MANAGEMENT > UNGROUPED PRINTERS LIST.
For more information on ungrouped printers, see the Viewing a List of All Devices section.
The following actions are available in the Related Actions section to manage the devices in the
Ungrouped Printer List:
Adding Devices to Ungrouped Printer List
 By Name
 Create by CSV
Deleting Devices from Ungrouped Printer List
Modifying Devices in the Ungrouped Printer List
These actions are the same as the ones available for the All Printers List. For more information, see the
section All Printers List.
7.3 All Groups List
Select a device group to view and edit its parameters, such as authentication settings, secure printing,
billing configuration and so forth.
Under All Groups List, the device group can be managed in the following ways:
Viewing a List of All Device Groups
Creating Device Group
 By Name
 By Copy
Deleting Device Group
Setting Password for Device Groups
Synchronizing Device Groups With Group Configuration
Configuring Device Groups
Configuring Device Group Settings
7.3.1 Viewing a List of All Device Groups
Celiveo Web Admin Software allows you to organize devices into groups, for example, a group of devices
with similar setups.
To view a list of All Device Groups:
1. In the Main Menu, click ADVANCE CONFIGURATION > PRINTER MANAGEMENT > ALL GROUPS LIST.
The All Groups List page with a list of grouped printers is displayed.
The table below explains the items for the grouped devices.
Displays the sequence number of the device group. Click Sequence Number to
SEQUENCE NUMBER toggle the list from descending to ascending order by the device sequence
number.
Displays the name of the printer group. Click Name to toggle the list from
NAME
descending to ascending order by device group name.
PRINTERS COUNT Displays the total number of devices in this group.
Displays the synchronization status of the device whether Celiveo Web Admin is
synchronized with the added printer or not.
STATUS
For more information on the synchronization status, see the section Viewing a List
of All Devices.
The devices and their details can be sorted in the list in an ascending or a descending order by
clicking the column headings.
7.3.2 Creating Device Group
Devices can be grouped and added to All Groups List based on criteria, such as, authentication, secure
print, tracking, Single Sign‐on, and so forth.
To add a new device group to All Groups List:
2. In the Related Actions section, click the desired option to create a printer group:
By Name
A device group can be created by name.
a. Click CREATE > BY NAME. In the Group Name text box, enter the device group name.
b. From the language drop‐down list, select the required language for the device group.
c. In the Profile List section, from the drop‐down list, select the appropriate criteria and click the
plus mark (+) to select the corresponding the functions that need to be enabled and
configured.
Click minus mark (-) next to the feature, to remove the corresponding functions.
‐E‐mail Encryption
‐Track‐Print ID
‐Single Sign‐On
‐Electronic Medical Record
‐Celiveo Print‐ERP
‐Billing
‐Authentication
‐Secure Print
‐Tracking
d. Click ADD. Or, click CANCEL to cancel the operation.
By Copy
A device group can be created by copying device group settings from another device group, and
modifying the parameters that differ.
a. Click CREATE > BY COPY. From the drop‐down list, select the required device group to copy and
click ADD.
It is recommended to have separate groups for the single‐function printers and the multi‐function
printers, because the multi‐function printer configuration controls the functions that do not exist
on single‐function printers (such as, the ‘Send to e‐mail’ feature).
7.3.3 Editing or Modifying Device Group
Group language and group features can be edited.
To edit a device group:
1. In the Main Menu, click ADVANCE CONFIGURATION > PRINTERS MANAGEMENT > ALL GROUPS LIST.
The All Groups List is displayed with the list of device groups.
2. Select the check box(es) next to the device group(s) that needs to be edited.
3. In the Related Actions section, click EDIT.
The options appear to edit the group language and the features.
4. From the drop‐down list, select the appropriate language.
5. In the Profile List section, the existing features can be removed by clicking the minus mark (‐).
The new features can be added by selecting appropriate ones from the drop‐down list and clicking
the plus mark (+).
6. Click SAVE to save the changes made.
7.3.4 Deleting Device Group
To delete a device group from the All Groups List:
1. In the Main Menu, click ADVANCE CONFIGURATION > PRINTERS MANAGEMENT > ALL GROUPS LIST.
2. Select the check box(es) next to the device group(s) that you want to delete.
A list of all the selected printer groups is displayed.
4. Click YES to confirm.
Ensure that all the devices are removed before deleting the device group.
7.3.5 Setting Password for Device Groups
This option helps to set a password that is applicable across devices in a device group.
By using this option, the EWS (Embedded Web Services) password will be set for all the devices of the
selected group.
To set a group password:
1. In the Main Menu, click PRINTERS MANAGEMENT > ALL GROUPS LIST. The All Groups List is displayed with
the list of device groups.
2. Select the check box(es) next to the device group(s) for which you want to set a password.
3. In the Related Actions section, click SET PASSWORD.
4. When prompted, enter the required password at the Set Group Password option.
5. In the Password text box, enter the password and click YES.
A group password is set for all the devices in the selected device group.
7.3.6 Synchronizing Device Groups With Group Configuration
The configuration of each group can be deployed to the devices of the same group. During
synchronization, all the device groups configuration can be sent to the device(s) and to Celiveo Server
Services, based on the authentication profile selection.
To synchronize device groups with the group configuration:
1. In the Main Menu, click PRINTERS MANAGEMENT > ALL GROUPS LIST.
2. Select the check box(es) next to the device group(s) that you want to synchronize, and click
SYNCHRONIZATION.
The devices on which the Celiveo Embedded Solution is not yet installed will be loaded first with the
software. Celiveo is installed and configured on the devices. The icon to the right of the device
information in the sync status column indicates the synchronization status.
Celiveo Web Admin Software takes the Celiveo Embedded Solution files from the following
directory of its website: App_Data\EmbeddedSolution.
Copy and decompress all updates and new versions of Celiveo into that directory
7.4 Configuring Device Groups
A device group can be chosen to view and edit the features that are enabled for a device group, available
as separate tabs.
The following actions are available as separate tabs on the device group page to manage the device group
within the All Groups List:
Configuring Authentication for Device Groups
Configuring Billing for Device Groups
Configuring Secure Print for Device Groups
Configuring Tracking for Device Groups
Configuring Email Encryption for Device Groups
For detailed information on the different actions available for editing device parameters, see the Adding
Devices to All Printers List section.
7.4.1 Configuring Authentication for Device Groups
Authentication parameters can be configured for a device group using the Authentication tab available
under the device group. The following sections are available under the Authentication tab:
Authentication Profiles: To configure authentication profiles with the card reader settings and the
authentication process for user authentication, and card PIN extraction.
Dual Factor Settings: To configure an additional level of authentication after badge authentication.
Authentication and User Right Settings: To configure the agent securing the device activity, and to
enable user rights.
Device Account Lockout Settings: To configure the number of failed user authentication attempts
and the duration of the activity lock period.
Centralized Logging: To configure Celiveo logging service by enabling centralized logging.
E‐mail Settings: To configure e‐mail notification upon successful authentication.
To configure authentication parameters for a device group:
2. Click the device group for which the authentication parameters are to be configured.
The Device Group List page appears, displaying the list of devices under the selected group.
3. Click the AUTHENTICATION tab.
The Authentication page appears.
4. Configure the device authentication parameters, as described in the table below.
Parameter Description
Authentication Profiles
From the drop‐down list, select the authentication profile that has reader settings and the
authentication process settings configured.
Dual Factor Settings
Select one of the following options from the drop‐down list.
Off
On
ACTIVATE DUAL FACTOR
Multi‐function printer only
For more information, see the section Configuring Dual Factor Authentication
for Device Groups.
GLOBAL DUAL FACTOR Click to view or set the Dual Factor Password Length and Password Type (See
SETTINGS the section Configuring Dual Factor Authentication for Devices for the settings).
Authentication and User Rights Settings
Click this check box to enable user rights for any of the following default user‐
defined activities, as explained in the next row.
For more information on user rights, see the section Configuring Celiveo User
Rights.
The User Rights feature works only with Celiveo authentication agents .
An incorrect behavior with non‐Celiveo authentication agents might
display.
ENABLE USER RIGHTS
The User Rights feature enables the administrator to allow or deny access to
the device functions on multi‐function printers and single‐function printers.
During synchronization, the Celiveo Web Admin sends the user access right
information to the device. Depending on the user’s rights, the user may or may
not access the selected application.
For example, the Celiveo user right settings will not work if “HP” is set as the
LDAP authentication agent, since the Celiveo solution has no control over the
HP LDAP authentication agent.
Also , see the section Configuring Celiveo User Rights in the chapter Configuring
Celiveo Server Services.
ACTIVITY
Select the authentication method for each activity:
Copy
Color Copy
Send to E‐mail
Send to Fax
Send to Folder
Job Storage
Create Stored Job
Digital Sending Service (DSS) Secondary E‐mail
Digital Sending Service (DSS) Workflow
Enroll Me
My Print Jobs
Color Print
Print Secret Document
The default system‐defined user activities listed above cannot be deleted. Hence, the Delete
option is disabled for these default activities.
To enable Panel lock in Ricoh devices, ensure that the following five activities ‐ Copy, Send to email,
Send to Fax, Send to Folder and Job Storage ‐ are locked with Celiveo as the authenticating agent.
For the detailed steps, see the Celiveo Device Administrator’s Guide ‐ Ricoh.
To apply an authenticating agent for each activity, select the appropriate
authenticating agent from the drop‐down list, as shown in the figure below.
ACTIVITY ‐ AGENT Configure the functions that require the users to successfully sign in before use.
Each function may require a different sign‐in method (that is, AGENT).
The activities correspond to the list of activities that can be found on the
printer configuration web page. For more information, see the Celiveo
Enterprise User’s Guide.
Celiveo cannot be used with the SIGN IN AT WALK UP function in the multi‐
function printers.
The Celiveo‐specific device dashboard buttons (Pull Confidential
Document and Pull Secret Document) do not appear if None is assigned
from the Agent drop‐down list for the respective activities.
The administrator can add a new activity to apply the user rights.
To add a new activity with the solution on the device:
1. Enter the activity name.
2. Enter the GUID for the activity.
This GUID is provided by the embedded solution company, and must be 32‐bit hexadecimal
in the following format:
Eight‐four‐four‐four‐twelve characters
8a31ba88‐ed0d‐51d9‐93a3‐00386e2bb999
3. Enter the User Right key. The User Right Key has to be a lower‐case alphabet, and cannot be
repeated.
If a User Right key is already used for another activity, the same key cannot be used for
a new activity.
The User Rights feature in Celiveo Web Admin will allow Celiveo solution to have a
control on the selected activity.
Ensure that Celiveo Secure Printing is selected as the authenticating agent from the
drop‐down list.
4. Click ADD to add the user‐defined activity to the list of activities.
The user‐defined user activities can be deleted by the user. The DELETE option is thus
enabled for the user‐defined activities.
For more information, see Configuring Celiveo User Rights.
Click ADVANCED to display the advanced features below:
ADVANCED Device Account Lockout Settings
Centralized Logging
Device Account Lockout Settings
Enter the maximum number of failed authentication attempts after which the
LOCK COUNT
device gets locked for a period of set time period.
After the set number of failed user authentication, the selected activity gets
locked for a specified period of time.
LOCK DELAY Enter the time period in seconds. During this time, the selected activities will be
locked for the device.
Centralized Logging
ENABLE CENTRALIZED Select this check box to enable Celiveo logging service. For more information
LOGGING on Centralized Logging, see the section Configuring Centralized Logging.
Email Settings
Upon valid authentication, Celiveo can automatically populate the e‐mail fields
with the following user information:
Name of sender (e‐mail address, full name) ‐ from field
Name of recipient ‐ To field
Name of carbon copy recipient ‐ CC field
Name of blind carbon copy recipient ‐ BCC field
From the drop‐down list, select the appropriate option to define values for the
following fields:
The FROM field can be predefined to appear blank, use the default multi‐
function printer settings, or contain the authenticated user's e‐mail address.
FIELD ‐ SET TO You can define the To, CC, and BCC fields, if the fields are empty or populated
with the authenticated user’s information.
You can also prevent the user from changing the information by clicking the
prevent changes check boxes.
To use this function in the device, you must configure the default from the
address field in the section E‐mail Settings under the Digital Sending tab
of the printer configuration web page.
For Ricoh devices: The Celiveo Authentication will not populate the e‐mail fields
with the user information automatically. They have to be entered manually. The
auto‐complete functionality for the CC & BCC fields is not supported on the
Ricoh devices.
APPLY Click APPLY to save changes.
7.4.1.1 Configuring Centralized Logging
The Centralized Logging feature enables logging of the defined set of events on the centralized server
where the Celiveo solution is installed. By enabling Centralized logging, the event logging information can
be retrieved from Celiveo Web Admin Software, Celiveo Server Services and the device. The event
logging information can be tracked on a server machine where Celiveo Web Admin Software is installed.
These messages are logged into Windows Event Viewer for specific transactions of the Embedded Device
Solution, Celiveo Server Services and Celiveo Web Admin Software.
Celiveo logging service is a Windows service installed on the same machine along with Celiveo Web
Admin Software. The Celiveo logging service uses the same protocol as Celiveo Server Services and the
Embedded Device Solution for communication. Celiveo logging service can be configured from Celiveo
Web Admin Software by enabling the Centralized logging feature.
By default, Centralized logging is enabled for Celiveo Web Admin Software, and cannot be disabled.
However, the Centralized Logging feature can be enabled or disabled for Celiveo Server Services
and the devices through Celiveo Web Admin Software.
During synchronization, the Centralized Logging setting is sent to the device and Celiveo Server Services.
The device uses the existing configuration to send the following Event logs:
1. Authentication violation logs
Incorrect login ID details along with the number of attempts
2. User activities logs from the device
Successful user authentication details
Successful user enrollment details
Successful user un‐enrollment details
Successful user re‐enrollment details – two messages are displayed for un‐enrollment and
re‐enrollment
3. Administrative activities logs
Successful auto‐unenrollment and failure message for the user on Celiveo Server Services
Log message for device synchronization triggered on Celiveo Web Admin server (automatic or
manual) with device, group and type of synchronization details
Log message for Celiveo Server Services synchronization triggered on Celiveo Web Admin
server (automatic or manual) with Celiveo Server Services, group and the type of
synchronization details
Log message for Local ID synchronization triggered on Celiveo Web Admin server (automatic
or manual) with the local ID list and device details
To enable centralized logging:
A list of all device groups appears.
2. Click the device group for which to enable Centralized Logging.
3. Go to the Authentication tab, and click ADVANCED.
4. Under the section Centralized Logging, select the Enable Centralized Logging check box. Click
APPLY.
The Celiveo logging service for Celiveo Server Services and the devices is enabled.
7.4.2 Configuring Billing for Device Groups
The Billing List option is available for HP and Ricoh devices only.
On multi‐function printers, the users can enter a billing code as an option during authentication to a
client, a department or a project. The billing parameters activates the billing functionality and associates
a billing list to a group. For more information on Billing List, see the section Configuring Billing for Device
Groups under Manage Profiles.
Using Celiveo Web Admin Software, you can enable billing and billing validation by selecting the
configured billing list.
To configure the billing parameters for a device group:
2. Click the device group for which you want to configure billing.
The Printer Group List page appears, displaying the list of grouped printers.
3. Click the BILLING tab. The Billing page appears for the device group, as shown in the figure below.
The table below provides an explanation of the fields:
ENABLE BILLING Select this check box to enable billing code validation during authentication.
ENABLE BILLING Once the Enable Billing option is selected, the option Enable Billing Validation is
VALIDATION activated. Select this option to allow billing validation.
BILLING LIST From the drop‐down list, select the configured billing list.
7.4.3 Configuring Secure Print for Device Groups
In the Secure Print section, the secondary (failover) servers can be configured and assigned a Secure Print
Corporate Private Key to device groups to secure the print jobs through encryption. Also, the print jobs
can be enabled without confirmation, and with an instant release of jobs on the multi‐function printers
using proximity badges.
To configure Secure Print parameters for a device group:
2. Click the printer group for which you want to configure the secure print parameters.
3. In the Printer Group List page, click the SECURE PRINT tab.
The Secure Print Settings page appears, as shown in the figure below.
4. Configure the Secure Print parameters, as described in the table below.
5. Click APPLY to save changes.
To save the changes, the Celiveo Server Services should have already been configured in Celiveo
Web Admin Software.
Ensure that all the print jobs go through Celiveo Pull Printing or through Celiveo Track‐
GreenSaver.
Celiveo Pull Printing
From the drop‐down list, select the Celiveo Server Services profile, as configured, to retrieve the print
jobs for printing. If you want to configure the secondary (failover) server, from the drop‐down list, select
the secondary Celiveo Server Services profile.
This drop‐down list is populated with the Celiveo Server Services Management List profiles, only if
they have been configured.
Select the appropriate operation mode from the Domain Mode drop‐down list. The avialable options are:
 Single Domain
Multi Domain.
Secure Print Corporate Private Key
Select the desired Secure Print encryption corporate key from the drop‐down list.
This is the private key associated with this configuration, securely stored on every
device.
SECURE PRINT
CORPORATE PRIVATE KEY
Multilevel Authentication Settings
CLASSIFIED JOB MENU Enter the desired name of the button on the device dashboard that the user
TITLE intends to use to pull confidential jobs.
CLASSIFIED JOB MENU Enter a brief description about the name entered in the Classified Job Menu Title
DESCRIPTION text box.
Enter the desired name of the button on the device dashboard that the user
SECRET JOB MENU TITLE
intends to use to pull secret jobs.
SECRET JOB MENU Enter a brief description about the name entered in the Secret Job Menu Title text
DESCRIPTION box.
Secure Print Jobs Release
(Proximity badges on multi‐function printers only)
When this option is enabled, the Celiveo proximity card reader permanently scans
for badges. When a badge is within range, all the user jobs are released after
clicking OK on the front panel.
Enabling the Instant Release and Print without Confirmation options allows
instantaneous release of print jobs upon badge reading without any front panel
INSTANT RELEASE interaction.
This setting works only with Celiveo Server Services installed.
This setting becomes active only after a multi‐function printer reboot.
To de‐activate the Instant Release option, the check box has to be de‐
selected and the multi‐function printer rebooted. (The rebooting is by
default, and will happen automatically whenever there is any change in
the group settings in Celiveo Web Admin).
This setting cannot be used with enrollment.
 Instant Release is available only on HP and Ricoh devices.
On devices, if this option is not checked, the device requests print job release
confirmation and the reader beeps until the user confirms the job release using
the printer front panel.
If there are no pending jobs, the user will authenticate his/her badge and no
message is displayed on the device informing the user that there are no jobs in the
queue.
On single‐function printers: When this option is checked, jobs are released and
PRINT WITHOUT
printed when the user authenticates ‐ confirmation is not required.
CONFIRMATION
For most cases, it is recommended to activate this option. With the option off, no
printing can take place until the user validates or cancels the job release using the
front panel (there is no time‐out).
On multi‐function printers: If this option is checked, all the jobs are released when
the user presses the MY PRINT JOBS button (after being authenticated, the job list is
displayed). This option saves time as users do not need to select jobs to release in
a list. (Available on HP devices only).
Incoming Print Jobs Configuration
Celiveo can stop some types of jobs from being processed in order to help enforce security policies.
Select the check boxes next to a job type to filter it.
ANONYMOUS PRINT These jobs do not contain the user information in the PJL header, thus preventing
JOBS audit and accounting.
These jobs contain the user information in the PJL header.
NON‐ANONYMOUS
PRINT JOBS
The Celiveo Driver Plug‐In and HP printer drivers released after February 2002
generate this information.
SECURE PRINT NON‐
These jobs are processed by Celiveo but are not encrypted.
ENCRYPTED JOBS
SECURE PRINT
These jobs have been processed by Celiveo and are encrypted.
ENCRYPTED JOBS
My Print Jobs Button Order
The following My Print Jobs buttons can be organized in a specific order.
Button Name:
Select All/Unselect All
Print
Options
Force B/W Printing
Job Info
Delete
Refresh
MY PRINT JOBS buttons can be displayed or hidden as per the requirement. By default, all the buttons are
displayed. To hide specific buttons, click the corresponding check‐boxes under Hide.
There is an option to organize the the buttons in a specific order, Click the upward or downward arrow
keys to edit the order.
This drop‐down list is populated with the Celiveo Server Services Management List profiles, only if they
have been configured.
Click this check‐box to hide the copies text box on the job listing screen on the
HIDE COPIES device.
By default this option is unchecked and it displays the Copies text box.
Click this check‐box to hide the Sorting button on the job listing screen on the
HIDE PRINT JOB SORT device.
By default this option is unchecked and it displays the SORTING button.
Click this check‐box to hide the the confirmation messages displayed for the below
functions of the device:
Print
Force B/W Printing
HIDE CONFIRMATION
Delete
SCREENS
Once the above functions are completed, user is redirected to the job listing
screen on the device.
By default this option is unchecked and all the confirmation messages are
displayed.
ADVANCED Click to display the Pull Printing Directory Cache section.
Pull Printing Directory Cache
Enable this option if you want to enable the Pull Printing Directory cache.
If Pull Printing Directory cache is enabled, after the first successful retrieval of
print job list from the Celiveo Server Services, the print job details, such as, the
host name or IP address of the Serverless Pull Printing client machine from which
the user had printed the maximum number of jobs in the last session, is inserted
into the Pull Printing Directory cache on the storage media (hard disk, USB, CF) in
the device.
The next time, when the user attempts to print and extract the print jobs, the Pull
Printing Directory cache in the device uses the host name or the IP address to
connect to the Serverless Pull Printing client machine with the maximum number
ENABLE CACHE of print jobs by the user in the last session.
If Authentication cache is not enabled, then the default cleanup time interval for
Pull Printing Directory cache is 30 days.
In HP legacy devices, the cache storage limit is 300 records; and there is no
deactivation after 30 days, while cleanup is performed after 30 days (on reboot).
All the print job details is encrypted (using TEA encryption) and stored in the pull
printing directory cache, except the user credentials.
The Pull Printing Directory cache feature will not work, if the Print Without
Confirmation feature is enabled for the HP legacy devices.
APPLY Click APPLY to save the configuration settings for Secure Print parameters.
7.4.4 Configuring Tracking for Device Groups
Tracking can be configured for device groups so that the device usage can be monitored.
To configure the Tracking parameters for a device group:
2. Click the name of the device group for which tracking is to be configured.
The Printer Group List page appears, showing the list of grouped devices.
3. In the Printer Group List page, click the TRACKING tab. The Tracking page appears.
4. Click ADVANCED to view the section Data Transfer Configuration, as shown in the figure below.
5. Configure the Tracking parameters, as described in the table below:
CELIVEO TRACKING Displays the Celiveo Pull Print servers, as selected in the Secure Print
CONFIGURATION tab.
Select this check box if the tracking server and secure print server are
SAME AS SECURE PRINT SERVERS
the same.
Select this option to display FTP tracking fields.
ENABLE CSS CENTRALIZED
TRACKING
The Tracking fields in Celiveo Web Admin are configured only if
Celiveo Track‐GreenSaver is installed on a different machine.
Once you enable the CSS Centralized Tracking check box option, the
Push Mode drop‐down changes to Protocol.
From the drop‐down list, select one of the following protocols:
PROTOCOL
FTP
HTTP
HTTPs ‐ this option is mainly used for mobile application
Enter the recurring interval (in minutes) in which the tracking files
RUN EVERY
should be transferred to the server.
SERVER ADDRESS Enter the server address.
SERVER PORT Enter the server port.
USER NAME Enter the user name used to connect to the server.
PASSWORD Enter the password used to connect to the server.
CONFIRM PASSWORD Re‐enter the password to confirm.
Enter the path to the directory where the tracking files should be
DIRECTORY
stored.
FTP MODE Select whether the FTP mode is Active or Passive.
Enter the path of the folder where the tracking files should be stored
TRACKING FILE FOLDER
before sending to the directory of the server.
Data Transfer Configuration
Select this check box to enable encryption.
If the Encryption option is enabled, then the device sends the tracking
ENABLE ENCRYPTION data files using the TEA‐encryption format to prevent other users
from accessing data sent midway from the device to Celiveo Server
Services, otherwise not.
Enter the number of tracking data files that you want to club together
before sending to Celiveo Server Services, if available, within the time
EVENTS PER TRANSFER interval defined under the “Max Wait Time” field. The range of events
per transfer is from 1 to 10.
By default, the value of events per transfer is 1.
Enter the time interval (in minutes) for which the device waits for the
total number of tracking data files to reach the value equal to the
“events per transfer”.
If the value of the total number of tracking data files does not reach
the value equal to the “events per transfer”, then after the “maximum
wait time” timeout, the device sends the collected tracking data files
to Celiveo Server Services.
MAX WAIT TIME
For example, if the max tracking event = 5, and max wait time= 2, it
means that the device will wait for two minutes for the five tracking
data files. If the device gets five tracking data files in two minutes,
then it will club them, and send the clubbed tracking data files to
Celiveo Server Services. If the device does not get five tracking data
files, then the device sends the available tracking data files to Celiveo
Server Services.
This value can be set in the range of 0 to 5 minutes. By default, the
value of the maximum wait time is 0.
APPLY Click APPLY to save the changes.
Click to configure Tracking Scheduler. For more information on the
ADVANCED
tracking settings, see the Tracking Scheduler section.
On Ricoh devices, if the server‐side tracking is enabled for the device the ‘Billing Code’ functionality
will not work.The ‘Cancel Job’ functionality will not work. For example, if a user cancels a 5‐page job
right before the third page, then the generated log file will not give the correct information, as it is
generated from the server and not from the embedded device solution.
7.4.5 Configuring Email Encryption for Device Groups
Email encryption allows configuration of email settings to notify the user of any failure of an event, such
as, authentication, enrollment, un‐enrollment, re‐enrollment and release or failure jobs, and so on. To
configure email encryption, the SMTP server settings has to be provided along with the user name and
the password of the user.
To configure Email Encryption parameters for a device group:
2. Click the device group for which to configure the Email Encryption settings.
3. In the Printer Group List page, click the EMAIL ENCRYPTION tab.
The Email Encryption page appears, as shown in the figure below.
4. Configure the EMAIL ENCRYPTION settings described in the table below.
SMTP SERVER IP ADDRESS Enter the IP address of the SMTP server from where the email is sent.
SMTP SERVER TCP/IP
Enter the SMTP server’s TCP or IP port from where the email is sent.
PORT
Enter the time period after which the connection is closed with the SMTP
SMTP SERVER TIMEOUT
server and the email is not sent.
AUTHENTICATION
Click the check box if you want to enable the authentication option.
REQUIRED
USER NAME Enter the user name credential to login to the SMTP server.
PASSWORD Enter the password to login to the SMTP server.
7.5 Configuring Device Group Settings
Manage device group settings within the All Groups List with these options:
Viewing Details of Device Groups
Renaming Device Groups
Changing Group Language
Linking Devices to Groups
Configuring Device Groups for Print Jobs
Removing Devices from the Group
Synchronizing Devices with a Device Group
7.5.1 Viewing Details of Device Groups
The devices can be organized into groups. For example, a group of devices in the same location, or with
similar setups.
To view details of device groups:
1. In the Main Menu, click ADVANCE CONFIGURATION > PRINTER MANAGEMENT > ALL GROUPS LIST. The All
Groups List page appears.
2. Click the device group whose details are to be viewed, either in the Main Menu or in the Celiveo
Web Admin section.
The device group page appears in the PRINTER LIST tab by default, as shown in the figure below.
To view the device group parameters and its description, see the section Viewing a List of All Devices.
7.5.2 Renaming Device Groups
To rename a device group:
1. In the Main Menu section, click ADVANCE CONFIGURATION > PRINTER MANAGEMENT > ALL GROUPS LIST, and
click the device group to be renamed.
The Modify a group pane displays.
3. Enter the new name in the New name text box, and click SAVE. The selected device group displays
the new name.
Make sure that the device group’s name is unique, and there should not be any other group with
the same device group name.
7.5.3 Changing Group Language
To change the language for a group of devices:
1. In the Main Menu section, click ADVANCE CONFIGURATION > PRINTER MANAGEMENT > ALL GROUPS LIST.
2. Click the name of the device group whose language is to be changed.
The Modify a group pane is displayed.
4. From the Change the language of the group drop‐down menu, select the language.
5. Click SAVE.
The language setting is changed for the selected device group.
The language is changed only in the device, and not in the Celiveo Web Admin Software settings.
7.5.4 Configuring Network Time Protocol Server for Device Group
Network Time Protocol (NTP) is an Internet protocol used to synchronize various components of a
network (computers/printers) to a specific time reference; for example, an internet time server.
It provides accuracy up to less than a millisecond on local area networks and up to a few milliseconds on
wide area networks. Celiveo solution enables users to configure and synchronize devices with any
selected NTP Server of choice.
To configure the NTP Server for a group of devices:
2. Click the name of the device group whose language is to be changed.
The Modify a group pane displays.
4. In the Device Related Configurations section, do the following:
a. Enter the primary domain name server IP of the device in the Primary DNS text box.
b. Enter the secondary domain name server IP of the device in the Secondary DNS text box.
c. Enter the name of the network time protocol server in the NTP Server Name text box.
d. Select an appropraite time zone for the device from the Time Zone drop‐down list.
5. Click SAVE.
The NTP Server configuration can also be performed using a USB stick from Celiveo Hardware. For
more information, refer to Configuring Fixed IP Network Settings Using USB Flash Drive and Config‐
uring DHCP IP Network Settings Using USB Flash Drive sections in Setting up Celiveo Hardware chap‐
ter.
7.5.5 Linking Devices to Groups
To link devices to a group:
2. Click the device group to which devices are to be linked.
3. In the Related Actions section, click LINK PRINTERS TO THIS GROUP.
A list of ungrouped devices appears in the Related Actions section.
A device cannot be within two groups.
4. Select the devices to add, and click YES. To select multiple devices, press the Ctrl key while clicking
each device in the list. The selected devices are added to the selected device group.
It is recommended to have separate groups for single‐function printers and multi‐function printers,
as configurations created for multi‐function printers control functions that do not exist on single‐
function printers (such, as the ‘Send to E‐mail’ feature).
The Printer List tab page can display upto a 100 devices by default.
7.5.6 Configuring Device Groups for Print Jobs
It is possible to configure the devices in the group to allow only one user’s job to be processed at a time.
Thus, while a user is printing or copying, another user can only authenticate to scan documents (and not
to print or copy). It is also possible to set a connection timeout for each printer, that is, the time interval
within which you want the printer to connect to the authentication and print server, that is, Celiveo
Server Services.
To configure device groups to process only one user’s job at a time:
click the device group to which the configuration is to be applied to print only one user’s job at a
time.
2. Click the check boxes next to the device groups to which to apply the configuration to print only
one user’s job at a time.
3. In the Related Actions section, click OPTIONS. The Common Options appear for the group.
4. Click the AUTHENTICATE ONLY WHEN IDLE check box, and click SAVE.
5. In the Connection Timeout text box, enter the value to configure the time period within which the
device communicates with the configured instance of Celiveo Server Services.
As a failover mechanism, once the configured timeout limit to connect to Celiveo Server Ser‐
vices is reached, the device will try to connect to the next available server.
6. Click SAVE to save the configuration.
In case of HP legacy devices, this mechanism works only for authentication failover.
7.5.7 Removing Devices from the Group
To remove devices from the group:
click the device group from which you want to remove device(s).
A list of devices appears for the selected group.
2. Click the check box next to the device(s) to be removed, and click REMOVE SELECTED PRINTERS.
3. To remove a device forcibly, click the check box next to the device.
4. Click REMOVE PRINTER FORCIBLY.
5. Click REMOVE to delete the selected devices from the group.
Removing a device from a group will also remove the Celiveo solution from the device.
Removing a device forcibly from a group will not remove the Celiveo solution from the device, but
only de‐link the device from the group.
7.5.8 Synchronizing Devices with a Device Group
To synchronize a device within a device group:
A list of all device groups is displayed.
2. Click the device groups with which the devices are to be synchronized.
3. Check the check box(es) next to the device(s) to be synchronized, and click SYNCHRONIZATION.
The selected devices are synchronized with the group configuration.
7.5.8.1 Sending Reader and Tracking Settings
Every authentication profile has a specific reader type settings as well as authentication process settings.
The reader types are swipe card, proximity card, smart card and PIN (enter the PIN manually on the front
panel of the device). The authentication process can be Offline Authentication or User Directory ID
Profiles (direct authentication method), or Celiveo Server Services (indirect authentication method). See
the Configuring Authentication Profiles section for more information.
If Smart Card is selected as a reader type, then the Local Smart Card is the option available for the
Authentication Process, and hence, the reader settings details are not sent to Celiveo Server Ser‐
vices.
Using Celiveo Web Admin Software, the authentication and tracking settings can be configured and
synchronized. During synchronization, the reader settings along with the tracking settings are sent to the
device. For more information, see the Synchronizing Device Groups With Group Configuration section.
Configure the authentication profile with the reader and the authentication process settings, and the
same profile is selected in the AUTHENTICATION tab of Printer Groups List. During synchronization, the
setting details are sent to the device.
In case of indirect authentication method, the setting details are sent to the Celiveo Server Services as
well. If you are unable to send the reader and tracking settings to Celiveo Server Services due to some
issues during synchronization, then a caution notification is displayed with the appropriate tool tip
message for the failure of synchronization. When a user authenticates on a synchronized device, the user
details are retrieved.
Tracking can be configured in a device group so that the user activities can be monitored. Using Celiveo
Web Admin Software, the tracking settings can be configured by providing the IP and/or the details of the
machine where Celiveo Server Services and Celiveo Track‐GreenSaver solutions are installed.
Go to the SECURE PRINT tab of the Printer Groups List, and select the IP of the Celiveo Server Services
server. The same IP can be used for tracking as well. When activities are performed on the device, the
tracking data is sent to Celiveo Server Services, and in turn, is sent to Celiveo Track‐GreenSaver, and the
activities are tracked, as both the solutions are installed on the same machine.
If Celiveo Track‐GreenSaver is installed on a different machine, enable the Enable CSS Centralized
Tracking to configure the settings.
To enable CSS Centralized Tracking:
1. Go to the Tracking tab of Printer Groups List.
2. Select the Enable CSS Centralized Tracking check box and provide the necessary details.
3. To apply and save the changes, click APPLY.
Once the tracking settings are configured, the settings details are sent to the device during
synchronization.
If a common Celiveo Server Services server is used for different tracking settings across multiple
device groups list, then during synchronization, the tracking settings of the last device group over‐
rides the rest of the tracking settings.
8 Server Management
The Celiveo Server Services settings can be configured from the Server Management section for remote
monitoring and management.
This feature allows Celiveo Server Services servers to be added to All Server List, create server groups to
manage the group settings, link the servers to the server groups list, and to configure the settings
accordingly.
The configuration settings of Celiveo Server Services for authentication, pull printing, enrollment and
roaming, and the logging features can be managed from this section.
The tabs are displayed according to the type of server group features.
The Server Management section contains the following sub‐sections:
All Server List
 Ungrouped Server List
All Server Groups List
Legacy Group
8.1 All Server List
The All Server List displays the list of grouped servers and ungrouped servers and their details.
Manage the servers in the All Servers List with these options:
Viewing Details of All Server List
Adding Celiveo Server Services to All Servers List
Deleting Servers from All Servers List
Modifying Servers in All Server List
8.1.1 Viewing Details of All Server List
The details of all the Celiveo Server Services servers, and their synchronization status can be viewed in
the All Server List page.
To view details of All Server List:
1. In the Main Menu, click ADVANCE CONFIGURATION > SERVER MANAGEMENT > ALL SERVER LIST. The list of
servers appears.
The table below explains the All Server List parameters.
CELIVEO SERVER
Displays the host name or the IP address of the Celiveo Server Services server.
SERVICES
VERSION Displays the embedded solution version of Celiveo Server Services.
Displays the name of the group where the Celiveo Server Services is linked.
GROUP NAME
If a server is not linked to any specific group, then the group name is displayed
as None, and is displayed under Ungrouped Server List.
Displays the synchronization status of Celiveo Server Services with Celiveo Web
Admin Software.
‐ OK; synchronized
‐ Pending synchronization
SYNC STATUS ‐ Awaiting response from the printer/multi‐function printer
‐ Error; synchronization failed
‐ Partially synchronized; a few servers of a specific group are synchronized and
the rest are not synchronized)
‐ Refresh ‐ Celiveo Web Admin is requesting a new device status
The servers in the list can be sorted in an ascending or a descending order by clicking the column
titles.
8.1.2 Adding Celiveo Server Services to All Servers List
Celiveo Server Services servers can be directly added to All Servers List. The servers are listed under the
Ungrouped Server List until linked to a specific group. Once a server is linked to a specific group, it is no
longer displayed in the Ungrouped Printer List, but appears under the specific server group list.
To add Celiveo Server Services server to All Servers list:
1. In the Main Menu, click ADVANCE CONFIGURATION > SERVER MANAGEMENT > ALL SERVER LIST. The All
Server List page appears.
A Celiveo Server Services server can be added by Hostname or the Create by CSV option.
By Hostname:
The table below explains the server details to add a Celiveo Server Services server:
HOSTNAME Enter the host name or the IP address of the Celiveo Server Services server.
Enter the Celiveo Server Services server port value.
PORT
By default, the port value is 22000.
Select this check box if you are adding a Celiveo Server Services below 7.1 version.
LEGACY CSS The server is directly added under Legacy Group (non‐editable group).
For more information, see the All Server Groups List section.
Displays the Backend server port number used for tracking data.
By default, the port value is 65211.
If the user changes the Backend port in Celiveo Server Services, then the
new port entry should be updated in this field in Celiveo Web Admin, and re‐
BACKEND PORT
synchronized with the device, else tracking would fail because the conflict in
port values would result in failure of transfer of the tracking data to the
server.
Similarly, ensure that any change in Backend port value in Celiveo Web Admin is
updated in Celiveo Server Services.
Click to test the connection to Celiveo Server Services, with the hostname and the
port that you have entered.
CONNECTION
This does not check the connectivity at the Backend port.
a. In the Related Actions section, click ADD > HOSTNAME, and in the Hostname text box, enter the
IP address or the name of the host server where Celiveo Server Services is installed.
b. In the TCP Port, Backend Port and DB Gateway Port text boxes, enter the appropriate port
numbers.
By default, TCP Port is 22000, Backend Port is 65211, and DB Gateway Port is 65212.
c. Click CONNECTION. If a connection is established with the Celiveo Server Services server, a
success message appears.
d. Click OK to add the server. A success message appears. Click CLOSE to return to the main
window of the Related Actions section.
Celiveo Server Services cannot be added successfully if the respective services are not run‐
ning on the specified ports.
If a particular Celiveo Server Services server already exists in QuickGroup, the same Celiveo
Server Services server cannot be added to the All Server List. The required server has to be
migrated from QuickGroup to Advance Configuration section first.
Create By CSV:
a. In the Related Actions section, click ADD > CREATE BY CSV.
The Upload the Server List browsing window pops up.
b. Browse to the CSV file path, and click the file to be added.
c. Click UPLOAD FILE. The CSV file is uploaded with the Celiveo Server Services server details, and
the Celiveo Server Services entry is added to the Main Menu, and in the Celiveo Web Admin
Software section.
A sample CSV format and path is shown below:
<Web Admin installation directory>\WebAdmin\Import_examples
8.1.3 Deleting Servers from All Servers List
To remove a selected server from All Servers List:
1. In the Main Menu section, click ADVANCE CONFIGURATION > SERVER MANAGEMENT > ALL SERVER LIST. The
All Server List page appears with a list of Celiveo Server Services servers.
2. Click the check box(es) next to the server(s) you want to delete from the All Server List.
3. In the Related Actions section, click DELETE. A message appears, prompting for deletion of the
selected Celiveo Server Services profile(s).
4. Click OK to delete. A success message appears.
5. Click CLOSE.
You can remove only ungrouped servers from the All Server List. To remove a server that is linked
to a specific group, first ungroup the server by removing it from a specific group, and then delete it
from the ungrouped server list.
8.1.4 Modifying Servers in All Server List
The Modify option in All Server List allows the following actions in the All Servers List:
Assigning a group to an ungrouped server
Removing a server from a specific group (hence the removed server is displayed under an
ungrouped list)
Moving a server from one group to another group
Updating and validating the Service Ports
To modify a server:
1. In the Main Menu, click ADVANCE CONFIGURATION > SERVER MANAGEMENT > ALL SERVER LIST.
The All Server List page appears with a list of Celiveo Server Services servers.
2. Select the check box next to the server that you want to modify in the All Server List.
3. In the Related Actions section, under Celiveo Server Services, click MODIFY. An option to modify the
selected server is displayed.
4. From the Server Group drop‐down list, select the required action (as mentioned above).
5. In the TCP Port, Backend Port and DB Gateway Port text boxes enter the appropriate port numbers
as required.
6. Click OK. A success message appears.
7. Click CLOSE.
You also have an option to validate the availability of the SAP Web Service Port. The SAP users can
manually provide the Web Service port, and click Connection SAP to test the connection.
8.2 All Server Groups List
The All Server Groups List displays the list of all the server groups. This section enables you to create a
server group of a type such as Authentication Gateway or Pull Printing, or both.
The new release of Celiveo Web Admin Software has the ability to manage Celiveo Server Services of
version 8.0 and below. For Celiveo Server Services of 8.0 version, administrator can manage all settings
from Celiveo Web Admin interface. Celiveo Server Services below 8.0 version, is managed as a legacy
profile under Legacy Group and all the settings need to be updated in the Celiveo Server Services user
interface.
The Legacy Group is auto created, non‐editable group managing all Celiveo Server Services below 8.0
version. You can only view the IP address or hostname, version of the Celiveo Server Services and
Synchronization status.
The Celiveo Server Services that are part of Legacy Server Group can be linked to the device groups as per
standard functionality, and maintained from the older version of the Celiveo Server Services user
interface.
To view the Legacy Group:
In the Main Menu, click ADVANCE CONFIGURATION > SERVER MANAGEMENT > ALL SERVER GROUPS LIST > LEGACY
GROUP.
The list of legacy servers is displayed.
The All Server Groups List section enables you to select a server group to view the group details in the
Server List tab and edit its configuration, such as, general settings, authentication gateway settings, job
retention, enrollment and roaming, logs, and SAP profile, and so on.
The following actions are available to manage the servers in the All Server Groups List:
Viewing Groups under All Server Groups List
Creating Server Groups
Deleting Server Groups
Synchronizing Servers listed in a Group
Configuring Server Groups
You can view the details of all the server groups managed by Celiveo Web Admin Software, and their sync
status.
To view All Server Groups List:
In the Main Menu, click ADVANCE CONFIGURATION > SERVER MANAGEMENT > ALL SERVER GROUPS LIST. The list of
server groups appears.
The table below explains the All Server Groups List columns.
NAME Enter the name of the Celiveo Server Services group.
SERVER COUNT Displays the number of Celiveo Server Services linked or added to the specific group.
Displays the synchronization status summary of the Celiveo Server Services group
‐ All the Celiveo Server Services in the server group are synchronized
‐ All the Celiveo Server Services in the server group are not yet synchronized
STATUS
‐ All Celiveo Server Services in the server group have failed to synchronize
‐ Partially synchronized; a few servers of a specific group are synchronized and the
rest are not synchronized
8.2.1 Viewing Server Groups in All Server Groups List
To view a server group under All Server Groups List:
1. In the Main Menu, click ADVANCE CONFIGURATION > SERVER MANAGEMENT > ALL SERVER GROUPS LIST. The
list of server groups appears.
2. Click the required server group that you want to view. The specific details appear for the server
group under the Server List tab.
See the table under Viewing Details of All Server List for the explanation of the items listed in the Server
List tab of the selected server group.
All Server Groups List can be listed in an ascending or a descending order by clicking the column
titles.
8.3 Creating Server Groups
A Server Group type can be determined based on the features, such as, Authentication Gateway and Pull
Printing. You can create a group with either one or both the features. The tabs are displayed based on the
type of server group features. If only the Authentication Gateway type is selected, then the Job Retention
tab is not displayed, and if only the Pull Printing type is selected, then the Authentication Gateway tab is
not displayed.
To add a server group:
All Server Groups List details appear.
2. In the Related Actions section, under Server Group, click the required option to add a server
group. A server group can be added by name or by copy option.
By Name:
a. In the Related Actions section, in the Group Name text box, enter a name for the server group.
b. Select the required feature, either Authentication Gateway or Pull Printing or both.
c. Click ADD to add the new server group. A success message appears.
d. Click CLOSE.
By Copy:
A new server group can be created by copying the existing server group with its parameters.
1. Click Add > By Name, and in the Group Name text box, enter a name for the server group.
2. From the drop‐down list, select the server group to copy, and click ADD.
A success message appears.
3. Click CLOSE.
8.3.1 Deleting Server Groups
To delete a server group from All Server Groups List:
1. In the Main Menu, click ADVANCE CONFIGURATION > SERVER MANAGEMENT > ALL SERVER GROUPS LIST.
The All Server Groups List appears.
2. Click the check box(es) next to the server group(s) that you want to delete from All Server Groups
List.
3. In the Related Actions section, under Server Group, click DELETE.
A message appears with the list of the selected server groups to prompt for deletion.
4. Click OK to delete the server group.
5. Click CLOSE.
You can remove a server group only when it is not linked to any Celiveo Server Services. If any
server is linked to the server group, then the following error message is displayed: "Failed. The
existing group is not empty, remove the existing servers from group."
First remove all the existing server(s) from the group, then delete the empty server group.
8.3.2 Configuring Server Groups
The following actions are available to manage a specific server group in the All Server Groups List:
Linking Servers to a Group
Removing Servers from Server Groups
Configuring Celiveo Server Services Groups
Synchronizing Servers in Server Groups
8.3.2.1 Linking Servers to a Group
To link a server to a server group:
2. Click the specific server group that needs to be linked with the available server (ungrouped server).
3. In the Related Actions section, under Server Group, click LINK SERVER TO THIS GROUP.
A list of all the ungrouped servers appears.
If an ungrouped server is not available, then add a new server under All Server List, and link
the same to the required group.
4. Select the server to be linked, and click OK.
5. Click CLOSE.
8.3.2.2 Removing Servers from Server Groups
To remove a server from a server group:
2. Click the server group from which you want to remove the server.
3. Click the check box next to the server(s) that you want to remove from that particular server
group.
4. In the Related Actions section, under Server Group, click REMOVE SELECTED SERVERS.
A message appears prompting for the removal of the selected servers.
5. Click REMOVE.
6. Click CLOSE.
Even if a server entry is removed from a specific group, the server settings remain applicable on
A server cannot be removed if it is linked to any profile. First remove the server from the profile,
and then remove it from the specific group.
8.3.2.3 Configuring Celiveo Server Services Groups
You can configure the following settings for the Celiveo Server Services server:
General Settings
Authentication Gateway Settings
Job Retention Settings
Enrollment and Roaming Settings
Logs
SAP Profile Parameters
For detailed information on configuring Celiveo Server Services server groups, see the Configuring Celiveo
Server Services Settings section.
8.3.2.4 Configuring Celiveo Server Services Server General Settings
To configure the Celiveo Server Services Server Group General Settings:
The All Server Groups List displays.
2. Click the IP address or the host name of the Celiveo Server Services server group to configure the
general settings.
The server group details are displayed under the SERVER LIST tab.
3. Click the GENERAL SETTINGS tab.
The General Settings tab displays.
4. Select the AUTHENTICATION GATEWAY, Pull Printing and IPv6 Enable options.
5. Click APPLY to save the settings.
6. Click DOWNLOAD SPP CONFIGURATION if Serverless Pull Printing configuration file to be downloaded.
For more information on downloading Serverless Pull Printing configuration, see the Downloading
and Saving Serverless Pull Printing Configuration (SDPP.reg.sjpscfg) section of Installing Serverless
Pull Printing and Track‐PM chapter.
7. Click APPLY to save the changes.
Modification applied message displays.
8. Click RESTART SERVER if you want to restart Celiveo Server Services to get the latest settings.
If a server group is created with only Authentication Gateway feature, and during the configuration, if the
Pull Printing feature is required, then the feature can be enabled in the General Settings tab and vice‐
versa for Pull Printing feature.
8.3.3 Synchronizing Servers in Server Groups
To synchronize a selected server with a server group:
2. Click the specific server group in which the server needs to be synchronized.
The server group details are displayed under the SERVER LIST tab.
3. Select the check box next to the server that you want to synchronize in that particular server
group.
Ensure that the server group is saved with the required configuration.
4. In the Related Actions section, under Server Group, click SYNCHRONIZATION. A list of all the selected
servers is displayed to confirm the synchronization of the servers.
5. Click YES to confirm. A success message appears.
6. Click CLOSE. The Synchronization OK status is displayed under Sync Status.
If the synchronization fails, go to the server group and configure it with the required settings.
8.3.4 Synchronizing Server Groups
To synchronize a server:
2. Select the check box next to the server group that you want to synchronize.
Ensure that the server group is saved with the required configuration.
3. In the Related Actions section, click SYNCHRONIZATION.
A list of all the server groups that are selected appears to confirm the synchronization.
5. Click CLOSE.
If the synchronization fails, go to the server group and configure it with the required settings.
9 Manage Profiles
The Manage Profiles section allows you to consult, configure, and manage the following different list
types and methods:
Offline Authentication ‐ allows you to add lists of authorized users and ID codes (that is, PIN codes,
badge numbers) and manage (add, view, edit, delete) users for offline authentication. This option
is available for HP devices only.
Sync with Directory & Notify ‐ allows you to import the list from selected user directory profile
and send some specific notification..
Billing list ‐ allows you to add lists of billing codes. Users can enter a billing code at copy, fax, e‐
mail, or print time to allocate the cost of action to a project or a client. This option is available for
HP devices only.
User Directory Profiles ‐ allows you to manage (add, view, edit, delete) user directory profiles and
thus connect to the different active directories.
Smart Card Profiles ‐ allows you to manage (add, view, edit, delete) profiles for smart card users.
This option is available for HP devices only.
Authentication Profiles ‐ allows you to create and configure authentication profiles to manage
different authentication mechanisms.
SQL Server Profiles ‐ allows you to configure different databases for roaming printing and
database enrollment.
SAP System Profiles ‐ allows you to manage (add, view, edit, delete) profiles for SAP system users.
Celiveo Corporate Keys ‐ allows you set the corporate keys
Celiveo can validate the user ID using three different methods, each having its benefits:
1. Offline Authentication list stored on each printer/multi‐function printer (available for HP devices
only)
2. User ID information in AD/LDAP, direct lookup
3. User ID information in AD/LDAP, indirect lookup
The list of users and PIN codes is a CSV file that can be defined in different ways:
using the Celiveo Web Admin Software (each entry in the list is created individually).
using a Microsoft Excel™ spreadsheet, or a spreadsheet generated using another software that can
generate a CSV file (software not supplied with Celiveo), and uploading it into the Celiveo Web
Admin Software.
using the User Directory profile, import function in Celiveo Web Admin Software.
9.1 Offline Authentication Lists
The following actions are available to manage the Offline Authentication lists:
Viewing Details of Offline Authentication Lists
Creating Offline Authentication Lists
Deleting Offline Authentication Lists
Configuring Offline Authentication Lists
Setting User Rights for Offline Authentication List
Configuring Failover to Offline Authentication List
9.2 Viewing Details of Offline Authentication Lists
To view the details of Offline Authentication Lists:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > OFFLINE AUTHENTICATION.
The Offline Authentication page appears.
The table below explains the Offline Authentication columns.
NAME Displays the name of the Offline Authentication List.
LIST NUMBER Displays the number of entries in each list.
Displays the status of the Offline Authentication List (whether the list is
STATUS updated or not), and the status of the schedulers running. The synchronized
status is represented by a green tick mark.
GROUPS Displays the total number of device groups associated with this list.
9.2.1 Creating Offline Authentication Lists
To create an offline authentication list:
The Offline Authentication screen appears.
2. In the Related Actions section, click CREATE.
3. In the Create a New ID List Name text box that appears, enter the new list name and click OK.
The new ID list entry is added to the Offline Authentication column.
Once the list is created, you can select the desired list to import data into it, or manually you can
add the users.
9.2.1.1 Creating CSV List Manually
If you want to create offline authentication lists manually, a sample file is provided with the Celiveo Web
Admin Software. Administrators can also build custom applications to interface the file with the assisted
data entry or database extract scripts.
The CSV file must comply with the following structure; data between “quotes” must be entered, as it
appears below.
The list must include minimum two users.
Data fields are separated by a semicolon ';' All the information fields are mandatory.
Cell Description
A‐1 Cell “VERSION”
B‐1 Cell ID list version number. This string is alphanumeric with a maximum of 10 characters.
C‐1 Cell “Sept08”
A‐2 Cell “MAXWRONGPIN”
Maximum number of authorized consecutive wrong ID entries. This is a numeric value
B‐2 Cell
between 1 and 9.
A3 Cell “WRONGPINDELAY”
Printer authentication lockout time after the maximum number of wrong IDs has been
B3 Cell
reached, in seconds.
A4 Cell “USERTIMEOUT”
B4 Cell Set this parameter to 30.
A5 Cell “LOCKOUTTIME”
Maximum delay in seconds to show/enter an authentication on multi‐function printers
B5 Cell before the automatic cancellation of the process. This setting is used when the badge
reader authentication is invoked by pressing a multi‐function printer function button.
A6 Cell “MAXWRONGADMINPIN”
The maximum number of authorized consecutive wrong authentication for remote update.
B6 Cell
This is a numeric value between 1 and 9.
Cell Description
A7 Cell “ADMINLOCKOUTTIME”
Printer configuration update lockout time in minutes after the maximum number of wrong
B7 Cell
admin PIN codes has been reached during remote update attempts.
User information starts on line 8 and column C
.
Column C ID (PIN code or badge number). Numeric from 1 to 19 digits
Column Domain\LoginName. Alphanumeric from 1 to 41 characters. If the domain name is omitted
D the \ must also be omitted.
Column E User department. Alphanumeric from 1 to 30 characters or UNKNOWN for no department.
User e‐mail address for automatic user information update notification (up to 180
Column F
characters), or UNKNOWN for no e‐mail address.
Column
Date at which the user was added to the list (format=YYYYMMDD).
G
Column User full name (up to 30 characters). If the name is omitted, the system will use the login
H name as user name.
Column I Home Directory (upto 128 characters).
Column J Dual Factor Password.
User rights details.
If the column is empty, then it represents all the user rights are allowed and each activity is
represented with alphabets. As per the alphabets given in the column, each activity is
Column K determined.
Letter defining Authorized/Denied functions:
Upper Case: Authorized; Lower Case: Denied
Do not use columns L to Z for other personal information as future versions may use them. The Celiveo
Web Admin Software cannot open invalid files.
In the line following the last entry of the list, column A must contain "ENDOFLIST"
Once the file has been created, it must be saved in CSV format (File > Save as, then save‐as‐type .csv)
with the semi‐colon as delimiter for the Celiveo Web Admin Software to load it on the devices.
9.2.2 Deleting Offline Authentication Lists
To delete an Offline Authentication list:
The Offline Authentication page appears, displaying the offline authentication lists.
2. Click the Offline Authentication list from which you want to delete the entries.
The contents of the selected Offline Authentication list are displayed.
3. Click the check boxes next to the lists that you want to delete.
A message appears prompting confirmation to delete the selected entries.
5. Click OK to confirm the deletion.
Make sure that the Offline Authentication list profile is not in use while deleting the list.
9.2.3 Configuring Offline Authentication Lists
The following actions are available to configure Offline Authentication lists:
Renaming Offline Authentication Lists
Exporting Offline Authentication Lists in CSV Format
Notifying Users of Offline Authentication Lists
Creating Offline Authentication Lists
Creating Offline Authentication List Entries by Name
Creating Offline Authentication List Entries from CSV Files (Importing)
Creating Offline Authentication List Entries by Autogenerating PIN List
9.2.3.1 Renaming Offline Authentication Lists
To rename an Offline Authentication List:
The Offline Authentication screen appears, displaying the Offline Authentication lists.
2. Click the Offline Authentication list entry you want to rename.
3. In the Related Actions, click RENAME.
4. Enter the new name in the Rename an ID list New Name text box that appears.
5. Click OK to confirm the new name of the selected list entry.
9.2.3.2 Exporting Offline Authentication Lists in CSV Format
To export an Offline Authentication list in CSV format:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > OFFLINE AUTHENTICATION LIST.
The Offline Authentication page appears, displaying the Offline Authentication lists.
2. Click the Offline Authentication list entry that you want to export as a file in the CSV (comma
separated value) format.
3. Click EXPORT AS CSV.
4. Choose whether to open or save the CSV file. If you choose to save, select the location in which you
wish to save the file.
9.2.3.3 Notifying Users of Offline Authentication Lists
To use this option, you first have to configure the SYNC WITH DIRECTORY & NOTIFY parameters.
The Notify Users option allows you to list the recipient mail IDs for mail messages containing the
identifiers. The Notify Users option allows you to define who should receive an e‐mail containing the
identifiers. This can be All Users if the list is new, or Users Since…, if you only want to notify recently
added users to the list, or Only Users Below if you want to notify specific users only (for example, the
users who have forgotten their PIN code, and have thus requested a new notification).
To notify users of offline authentication lists:
The Offline Authentication page appears, displaying the offline authentication lists.
2. Click the offline authentication list that you want to notify to the users.
3. Click NOTIFY USERS.
4. Select either ALL USERS, or NEW USERS (and select the date from which the users were added), or
create a list of users to be notified, and click OK to confirm.
9.2.3.4 Creating Offline Authentication List Entries by Name
To add entries to an ID list:
2. Click the Offline Authentication list to which you want to add the entries.
The contents of the selected Offline Authentication list is displayed.
3. In the Related Actions section, click CREATE > BY NAME.
4. Enter the appropriate data in the relevant fields, and click ADD.
The below table explains the Offline Authentication list entry fields. Only the login field is
mandatory.

NAME Enter the name of the ID list entry.
Enter the ID must be a numeric value, from 1 to 999999999 (1 to 9 digits).
‘0’ can also be a numeric value. And the length of the password must be
ID CODE
between 4-9 digits.
For Celiveo PIN code authentication, the ID represents the PIN code. For the
Celiveo Proximity reader, it represents the badge number.
DOMAIN Enter the user domain.
LOGIN (required) Enter the user login.
DEPARTMENT Enter the user department.
E‐MAIL Enter the user e‐mail.
DUAL FACTOR Enter the dual factor password.
Select check boxes next to the user right settings options such as Send to email,
send to fax, job storage, color copy and color print, etc.
USER RIGHT SETTINGS
For more information, see the Setting User Rights for Offline Authentication List
section.
ADD Click ADD to add the new ID List entry.
9.2.3.5 Creating Offline Authentication List Entries from CSV Files (Importing)
To import the offline authentication list entries from a CSV file:
2. Click the Offline Authentication list name to which you want to import the entries from a CSV file.
The Offline Authentication page appears.
3. In the Related Actions section, click CREATE BY CSV.
The Upload ID List Entries browsing window appears.
4. Browse to the location of the CSV file, and click UPLOAD FILE.
9.2.3.6 Creating Offline Authentication List Entries by Autogenerating PIN List
To use this option, you have to first configure the directory synchronization parameters. For more
information, see the Configuring Directory Synchronization and Notification section.
Badge numbers and user information can be automatically extracted from the User Directory.
PIN code and user information can be automatically generated for the users or extracted from the User
Directory (for example, the employee number can be used as PIN code).
If the ID field is blank, then the Celiveo Web Admin Software will extract the authentication data from the
User Directory server. If the ID value is defined, then the Celiveo Web Admin Software will extract the
authentication data from the User Directory server, and use the ID value to generate a PIN (Unique ID
code). Once the file has been created, it must be saved in the CSV format (File > Save as, and then,
choose save‐as‐type.csv) with the semi‐colon as delimiter for the Celiveo Web Admin Software to load it
on to the devices. For more information, see the Viewing Details of Offline Authentication Lists section.
To import user information from User Directory into an ID list:
2. Click the name of the ID list for which you want to generate a PIN list.
3. In the Related Actions section, click AUTOGENERATE PIN LIST.
This system allows you to add users to printers, multi‐function printers, or Digital Senders without having
to change the ID code of the existing users.
9.2.4 Setting User Rights for Offline Authentication List
Administrator can allow or deny access to the device functions on MFP and SFP for the users listed in the
Offline Authentication List.
During synchronization, Celiveo Web Admin will send the Offline Authentication containing the users
access right information, to the device.
Depending on the user’s rights, the user may or may not get an access to the selected options.
The following user rights are available for a user in the Offline Authentication list:
Send to E‐mail
Send to Fax
Job Storage
Color Copy
Copy
Color Print
Print Secret Document
To set user rights for offline authentication list:
2. Click the name of the Offline Authentication list for which you want to configure the user rights.
The contents of the selected Offline Authentication list is displayed.
3. Click the name of the entry for which you want to configure user rights.
By default, all the user right check boxes are selected (that is, a user can access all the device
functions).
4. Keep the User Rights check boxes checked to allow those device functions to the user or uncheck
them to deny.
5. Click OK to confirm.
9.2.5 Configuring Failover to Offline Authentication List
To configure failover to Offline Authentication list:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > OFFLINE AUTHENTICATION LIST, and
create an empty Offline Authentication List.
For more information on creating a Offline Authentication List, see the Creating Offline
Authentication List Entries by Name section.
2. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > AUTHENTICATION PROFILES, and
select the authentication profile for which you want to configure failover to Offline Authentication
list.
3. Go to Authentication Process section, and from the drop‐down list, select either Celiveo Server
Services or User Directory ID Profile as primary authentication.
4. For Failover to Offline authentication, from the drop‐down list, select Offline Authentication as
the failover authentication profile, and then select the newly created Offline Authentication List.
5. Select the Failover to Offline Authentication List check box to enable the option of failover to
Offline Authentication List.
7. Configure the Offline Authentication List Sync scheduler to import/update the user details in
Offline Authentication List. For more information on the Offline Authentication list sync scheduler,
see the Configuring Offline Authentication Scheduler section.
When the Offline Authentication List Sync runs, all the users are imported from the Primary
Authentication profile into the configured Offline Authentication List. The device is also automatically
synchronized with the updated user list. Thus, each time when the scheduler runs, the Offline
Authentication List is overwritten with the user details from the primary authentication profile.
The Offline Authentication List Sync status displays the icon (the scheduler is updating the Offline
authentication list). It changes to the icon once the scheduler has successfully updated the Offline
Authentication list, and the user can authenticate on the device.
9.3 Configuring Directory Synchronization and Notification
The users can be automatically notified of their ID code (PIN code, badge number) by Celiveo Web Admin
Software.
It is recommended to validate the User Directory parameters using a third‐party User Directory browser.
To configure directory synchronization and notification:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > SYNC WITH DIRECTORY & NOTIFY.
The User Notification Parameters and PIN List Autogeneration Parameters fields are displayed, as
shown in the figure below.
See the Configuring SMTP Settings section to configure the settings. These parameters will be
automatically populated, if the SMTP settings are already configured.
The following table explains the user notification fields.
User Notification Parameters
SMTP Connection Parameters
The SMTP information is required to send e‐mails from the software. Ask your network administrator
for all the required information.
SMTP SERVER IP ADDRESS Enter the IP address of the SMTP server. For example, 192.168.0.199
SMTP SERVER TCP/IP PORT Enter the Port of the SMTP server. For example, 25
ACCOUNT NAME Enter the authorized login ID on SMTP server. For example, johnsmith
PASSWORD Enter the password associated to the login. For example, 4rk9812rwn
Click this check box to use the Account Name and Password for identification
USER NAME
on the SMTP server. Leave the check box unchecked, to connect anonymously.
USE SSL Click this check box to use SSL.
Email Settings
Enter the e‐mail address of the sender (usually the administrator e‐mail
FROM
address).
SUBJECT Enter the subject of the e‐mail
Enter the e‐mail text to be sent to all users notifying them of their PIN codes.
Variables are available for customizing:
%u will be replaced by the user name
MESSAGE
%c will be replaced by the user PIN code
The e‐mail text cannot exceed 900 characters.
PIN List Autogeneration Parameters
Configure these fields to access the User Directory directory and its data.
User Directory Settings
From the drop‐down list, select the User Directory profile to be used to
USER DIRECTORY PROFILE
generate PIN Lists.
Enter the protocol version that will be used to perform the User Directory
USER DIRECTORY VERSION
connection. The version can be either 2 or 3.
Enter the filter string that allows you to specify a subset of data items, thus
FILTER limiting the search scope. The standard User Directory search syntax must be
used.
Enter the filter string that allows you to limit a search to specific departments.
Multiple department names can be entered (up to 2500 characters),
separated by semi‐colons (;). The directory filter is not linked to the User
DEPARTMENT FILTER Directory filter, and can replace it for department extractions.
Department names cannot include semi‐colons (;) because they are
used as separators.
Authentication Type
This section is used to define the credential information to access the User Directory database.
ANONYMOUS Click the anonymous check box if no login is required.
ID SIZE Enter the number of digits that the PIN code must contain (from 4 to 9).
2. Once all the settings have been defined, click APPLY to save the parameters.
9.4 Configuring Billing Lists
On multi‐function printers, the users can enter a billing code as an option during authentication to
allocate the cost of the action to a client, or a department, or a project. The billing parameters allow you
to activate the billing allocation functionality and to associate a billing list to a group.
By default, any alphanumeric text can be entered, but it is also possible to validate the billing code
against a predefined list of up to 1 million numeric codes. Such validated billing codes can have a value
from 1 to 9999999999 (10 digits).
The list of billing codes is a CSV file that can be defined using a Microsoft Excel™ spreadsheet or any other
software capable of generating a CSV file (software not supplied with Celiveo).
A sample file is provided with the Celiveo Web Admin Software. Administrators can build custom
applications to interface the file with assisted data entry or database lookup using Excel Visual Basic
script programming.
The CSV file must comply with the following structure:
Billing code followed by a comma ','
Billing code information starts at line 1 and column A
Column A: Billing code, only numeric value using numbers 1 through 9, maximum 10 digits.
There is no special command to end the list of billing codes, for example:
12345678
1234
99999999
The following actions are available to manage a specific billing list:
Viewing Details of Billing Lists
Creating Billing Lists
Deleting a Billing List
Configuring Billing Lists
9.4.1 Viewing Details of Billing Lists
To view the details of billing lists:
In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > BILLING LIST.
The Billing List screen appears.
The following table describes each of the items displayed in the Celiveo Web Admin Software section.
NAME Displays the name of the billing list.
LIST NUMBER Displays the number of billing codes in each list.
GROUP NUMBER Displays the total number of groups associated with this list.
9.4.2 Creating Billing Lists
To create a billing list:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > BILLING LIST.
The Billing List page appears.
3. In the Name text box, enter a name for the new billing list, and click OK.
The new billing entry is added to the Main Menu and the Celiveo Web Admin Software section.
9.4.3 Deleting a Billing List
To delete a billing list:
1. In the Main Menu, click MANAGE PROFILES > BILLING LIST.
The billing lists are displayed
2. Click the check boxes next to the billing lists that you want to delete.
A list of all the billing lists selected for deletion appears.
4. Click YES to confirm the deletion.
9.4.4 Configuring Billing Lists
A billing list can be configured by adding specific details.
The following actions are available to manage a specific billing list:
Adding Billing Codes by Name (CREATE > BY NAME)
Adding Billing Codes from CSV (CREATE > BY CSV)
Deleting Billing Codes from Billing List (> DELETE)
Renaming Billing Lists ( > RENAME)
9.4.4.1 Adding Billing Codes by Name
To add billing codes by name to a billing list:
2. Click the billing list name to which to add the billing codes.
The Celiveo Web Admin Software section displays the detailed information for the billing list.
3. In the Related Actions section, click CREATE BY NAME.
4. In the Code text box, enter the billing code details, and click ADD.
9.4.4.2 Adding Billing Codes from CSV
To add billing codes from a CSV file to a billing list:
1. In the Main Menu section, click ADVANCE CONFIGURATION > MANAGE PROFILES > BILLING LIST.
A list of all the billing lists is displayed.
2. Click the billing list to which you want to import the data of the CSV file.
3. In the Related Actions section, click CREATE BY CSV.
4. Browse to the location of the CSV file, and click UPLOAD FILE.
9.4.4.3 Deleting Billing Codes from Billing List
To delete billing codes from a billing list:
1. In the Main Menu section, click ADVANCE CONFIGURATION > MANAGE PROFILES > BILLING LIST.
2. Click the billing list from which you want to delete the billing codes.
The Celiveo Web Admin Software section displays the details of the selected billing list.
3. Click the check boxes next to the billing codes you want to delete.
9.4.4.4 Renaming Billing Lists
To rename a billing list:
1. In the Main Menu section, click MANAGE PROFILES > BILLING LIST.
2. Click the billing list that you want to rename.
3. In the Related Actions section, click RENAME.
4. Enter the new name for the billing list, and click RENAME.
9.4.5 Viewing Detailed Information of Billing List
To view detailed information of a billing list:
2. Click the billing list you want to view.
The Celiveo Web Admin Software section displays the detailed information for the selected billing
list.
The following table describes each item displayed in the Celiveo Web Admin Software section.
Users can enter a billing code at copy, fax, e‐mail or print time to a project or
a client.
CODE By default the billing code can be any numeric value from 1 to 9 digits, but HP
Access Control Celiveo can also control the entry against a list of authorized
billing codes.
USED IN GROUPS Displays the groups associated to the list.
9.5 Configuring User Directory Profiles
User Directory contains an entry for each of a user's files. Each entry points to where the corresponding
file is stored on its storage device. Using Celiveo, Celiveo Web Admin Software can create a User
Directory profile associated with Active Directory details.
The following actions are available to manage the User Directory profiles:
Viewing Details of User Directory Profiles
Creating User Directory Profiles
Deleting User Directory Profiles
Duplicating User Directory Profiles
Configuring User Directory Profiles
9.5.1 Viewing Details of User Directory Profiles
To create a User Directory profile:
In the Main Menu section, click ADVANCE CONFIGURATION > MANAGE PROFILES > USER DIRECTORY PROFILES.
The Celiveo Web Admin Software section displays the User Directory Profiles page.
The following table describes each of the items displayed in the Celiveo Web Admin Software section.
NAME Displays the name of the User Directory profile
DOMAIN Displays the user domain.
HOSTNAME Displays the IP address or hostname of the Active Directory
HOST PORT Displays the default port as per the authentication method selected.
SSL Displays if SSL is selected or not
GROUPS Displays the group associated with.
9.5.2 Creating User Directory Profiles
To create a User Directory profile:
1. In the Main Menu section, click ADVANCE CONFIGURATION > MANAGE PROFILES > USER DIRECTORY PROFILES.
The User Directory Profiles page is displayed.
3. In the Create a New User Directory Profile text box, enter the new User Directory profile name,
and click OK.
The new User Directory Profile is added to the Main Menu, and in the Celiveo Web Admin
Software section.
9.5.3 Deleting User Directory Profiles
To delete a User Directory profile:
1. In the Main Menu section, click ADVANCE CONFIGURATION > MANAGE PROFILES > USER DIRECTORY PROFILES.
2. Check the check boxes next to the User Directory profiles to be deleted or, if you want to delete all
the User Directory profiles, check the check box at the top to select all.
A list of all the selected User Directory profiles appears.
Make sure that the selected User Directory profile is not in use before deleting the User Directory
profile.
9.5.4 Duplicating User Directory Profiles
The duplicate options allows you to create a duplicate of a profile with a new name.
All the parameters in the duplicate profile will be same as that of the original. You can modify the
parameter values of the duplicate profile.
To duplicate a User Directory Profile:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > USER DIRECTORY PROFILES.
2. Click the User Directory profile to be duplicated.
3. In the Related Actions section, click DUPLICATE.
4. In the Name text box, enter the new User Directory profile name , and click OK to create a duplicate
profile.
5. Click the duplicated User Directory profile, as displayed in the Main Menu.
6. Configure the User Directory profile validation parameters as desired (for more information, see
the Configuring User Directory Profiles section).
7. Click APPLY to apply the changes.
9.5.5 Configuring User Directory Profiles
While configuring User Directory profile, make sure to use pre‐Windows 2000 domain name (if this
is different from domain name).
To configure a User Directory profile:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > USER DIRECTORY PROFILES.
The User Directory Profiles page appears.
2. Select the User Directory Profile to be configured. Configure the settings and save the changes.
The following table describes the User Directory Connection Parameters and profile items for
configuration:
Select the appropriate authentication method from the AUTHENTICATION
METHOD drop‐down list. The following options are available:
Simple (default)
Over SSL
AUTHENTICATION METHOD Kerberos ‐ For more information on Kerberos authentication method,
see the Configuring Kerberos Authentication section.
The Kerberos authentication method is applicable only for HP
FutureSmart devices.
Enter the domain name of the user. For more information, see the Getting
DOMAIN
the Domain Information section.
Default port is 389 for Simple Authentication method and Kerberos
HOST PORT authentication methods, but changes to 636 for Over SSL authentication
method.
Select Active Directory or User Directoryv2 or User Directoryv3 as
PROTOCOL
required.
HOSTNAME Enter the IP of the host where the Active Directory is installed.
LOGIN Enter Login ID to access the Active Directory information.
PASSWORD Enter password to access the Active Directory information.
9.5.5.1 Configuring Kerberos Authentication
In the User Directory Connection Parameters section, from the Authentication Method drop‐down list,
select Kerberos as shown in the below figure.
The following table describes the Kerberos Authentication Parameters for configuration:
Select the Kerberos authentication method from the AUTHENTICATION
AUTHENTICATION METHOD
METHOD drop‐down list.
This check box is displayed when Kerberos authentication method is
selected.
USE DOMAIN TO RESOLVE
HOSTNAME
Select this check box to autmatically resolve the hostname using the
domain information. The Hostname and KDC Hostname fields disappear
when this check box is selected.
Enter the domain name of the user. For more information, see the Getting
DOMAIN
the Domain Information section.
HOST PORT Default port is 389 for Kerberos authentication method.
PROTOCOL Select Active Directory (AD) or LDAPv2 or LDAPv3 as required.
Enter the hostname or IP of the host where Active Directory is installed.
HOSTNAME
Multiple Active Directory hostnames can be added. The hostnames can be
organized in a specific order. Click upwards or downwards arrow keys to
edit the order as required.
LOGIN Enter Login ID to access Active Directory information.
PASSWORD Enter password to access Active Directory information.
KDC Configuration
Click this check box if the same LDAP profile needs to be used. When this
USE SAME AS LDAP check box is selected, the KDC domain and hostname fields are
disappeared.
Enter the Kerberos Domain Controller domain. This field is available only
KDC DOMAIN
when Kerberos is selected as Authentication method.
Enter the Kerberos Domain Controller hostname. This field is avialbele only
when Kerberos is selected as Authentication method.
KDC HOSTNAME Multiple Kerberos Domain Controller hostnames can be added. The KDC
hostnames can be organized in a specific order. Click upwards or
downwards arrow keys to edit the order as required.
9.5.5.2 Configuring Active Directory Field Names
By default, all fields are mapped with different Active Directory fields. These values can be changed, if
required.
The default values and the field descriptions are given in the table below.
Default value is postOfficeBox.
ID CODE FIELD NAME
Optionally, enter the field name where the user ID can be stored in Active
Directory or User Directory with the Direct User Directory or Active Directory
enrollment.
Default value is department.
DEPARTMENT FIELD NAME
Active Directory field where the user department information is stored.
Default value is displayName.
FULL NAME FIELD NAME
Active Directory field where the user full name information is stored.
Default value is sAMAccountName.
ENROLLMENT ID FIELD NAME This field is searched in the Active Directory to match the user login name
and get their information during enrollment.
Default value is description.
DUAL FACTOR FIELD NAME
Active Directory field where the Dual Factor password is stored.
TRACKING LOGIN FIELD Default value is sAMAccountName.
Default value is sAMAccountName.
LOGIN FIELD NAME
The Active Directory field where the user login information is stored.
Default value is mail.
E‐MAIL FIELD NAME
The Active Directory field where user e‐mail information is stored.
Default value is homeDirectory.
HOME DIRECTORY FIELD NAME
The Active Directory field where the user information is stored.
Default value is domain.
DOMAIN FIELD NAME
The Active Directory field where the user domain is stored.
This is the time of last authentication by the user. The feature is important
for auto‐unenrollment, which means, the exact time is calculated before the
user is automatically un‐enrolled.
The Last Activity Time data is stored in the file if the user is enrolled locally.
In the Microsoft SQL Server Database, if the user is enrolled with roaming,
LAST ACTIVITY TIME FIELD
and in the Active Directory, the last Activity time will be given a field name
NAME
under Authentication Settings in the Directory and Servers Management in
The administrator can enter the field name for the Last Activity
Time.
The default value is 1.
9.5.5.3 Configuring Search Parameters
Search Parameters are required to search the Active Directory details. Enter the search base parameters,
as shown in the figure below:
The table below explains the Search Parameters items for configuration:
Enter the search base for the domain of the user.
SEARCH BASE
Example: dc=Celiveo,dc=com
Enter the time in seconds till which Celiveo Web Admin Software tries to
TIMEOUT connect to Active Directory or User Directory server.
Default value is 15 seconds.
9.5.5.4 Customizing Domain Field Names in Celiveo Server Services
We will use an example where DOMAIN is configured as follows:
dc=Celiveo,dc=marketing,dc=com
For tracking purposes, or if you need to report only partial information, the DOMAIN FIELD NAME can be
configured as <domain_hr(1)>, where <domain_hr(1)> will only return the content of the first
dc field, that is, Celiveo.
The number inside the parentheses specifies which dc field will be returned.
Any of the dc fields can be returned. For example, setting the DOMAIN FIELD NAME to
<Domain_hr(1,3)> returns the first and the third dc fields from the domain name. Following the
above example, this gives the following output: Celiveo.com
9.5.5.5 Setting the Domain Field Name to a Constant Value
If you need to retrieve a completely different value from the actual domain value,
<Domain_hr(1,3)> can be replaced by <domain_const(XXXX)>, where XXXX is the value that
will be returned. For example, if we set the domain field name to <Domain_const(Texas)>, it will
then return Texas.
9.5.5.6 Alias Single Sign‐On Retrieval Settings
Click ADVANCED to get the Alias Single Sign‐On Retrieval settings and Value to search replacement settings
sections.
The Alias Single Sign‐On Retrieval parameters are explained in the figure and table below:
Parameter Description/Instructions
Enter the sought incoming job login in this field, using the supplied
SEARCH THE VALUE IN FIELD
search filter.
Enter the search filter ‐ see the Syntax of Search Filters section for
USING SEARCH FILTER
instructions on the search filter syntax.
Enter the name of the field whose content will replace the found
REPLACE IT WITH THE VALUE IN FIELD
value.
9.5.5.7 Configuring Value to Search Replacement Settings
The following Search replacement settings need to be configured for searching across chained databases.
This action is available for both authentication and Alias Single Sign‐ On Retrieval purposes.
The figure and table below provides a detailed description of each parameter:
SEARCH THE VALUE IN FIELD Enter the incoming information (job owner or user ID) in this field.
Select a source conversion mechanism from the drop‐down list.
USING SOURCE CONVERSION If necessary (for IDs only ‐ optional badge number), it can be
converted using this method.
Enter the search filter. For more information, see the Syntax of
ON SEARCH FILTER
Search Filters section.
IF FOUND, REPLACE IT WITH THE Enter a value in this field which will replace the searched for value, if
VALUE IN FIELD a record matches the search data.
Select a User Directory profile from the drop‐down list, where the
AND TRANSMIT IT TO PROFILE
found value is transmitted.
Click CONNECTION to check the connection with the User Directory
CONNECTION
server.
This text box displays the group list where the User Directory profile
USED IN GROUPS
is used.
APPLY Click APPLY to save all the entries.
TEST ENROLLMENT Click TEST ENROLLMENT to validate the enrollment settings.
TEST AUTHENTICATION Click TEST AUTHENTICATION to validate the authentication settings.
After entering all the values and testing them, click APPLY to save and validate the settings. Make sure that
you save the profile to save the settings.
9.5.5.8 Syntax of Search Filters
Search filters should be written using the LDAP syntax. Two variables are available to perform the search
in the user records. The default search filter is as follows:
(&(<src_field_name>=<src_value>)(objectCategory=user))
Upon execution, the <src_field_name> value is replaced by the name of the field in which the
search must be done and the <src_value> is replaced by the value used as the search criteria.
For example, if the value 1234 is entered in the field customID, the dynamically generated filter would
be:
"(&(customID=1234)(objectCategory=user))"
This filter can be modified to fit custom needs, as long as it contains both <src_field_name> and
<src_value> variables.
If the search filter field is left blank, the default search filter will be used:
(&(<src_field_name>=<src_value>)(objectCategory=user))
9.5.5.9 Searching across Chained Databases
It is possible to find a record using the user ID, then use data contained in a field of this retrieved record
to look for another record in the same or another database.
This action is available for both authentication and alias single sign‐on retrieval purposes, and these
database searches can be daisy‐chained.
This daisy‐chain search action is used, for example, when there are multiple databases, one which
handles the badge numbers or PIN codes and links them to a global ID, and other databases that hold
information linked to global IDs.
Connection to an AD server might take some time, so it is strongly advised to make the number of
AD servers involved in this action as small as possible.
9.6 Smart Card Profiles
Smart Card Authentication is currently available for HP multifunction printers and digital scanners
only.
Celiveo provides contact smart card authentication capabilities. Contact smart cards are different from
the contactless smart cards. While contactless smart cards are mainly proximity badges with advanced
communication encryption and secure storage sectors, contact smart cards consist of microchips
embedded in a small plastic card with golden or silver contacts on the surface. Such smart cards have
advanced computing and encryption capabilities, being able to run software in the proprietary operating
system, in Java, or even .NET.
All smart cards are different and communication protocol is proprietary, defined by the operating
system, or the applet loaded and called on the smart card. You must verify the compatibility of Celiveo
Smart Card Authentication with both the smart card hardware platform, and the operating system, or
applet loaded on the smart card platform by the smart card middleware.
Celiveo Smart Card Authentication supports the following PKI smart card platforms with most
middleware. Contact Celiveo Support to confirm the support of your PKI Smart Card:
Gemalto Cryptoflex and GPK
JCOP
Siemens CardOS M4
Micardo
Oberthur
OpenPGP
FineID
US DOD CAC/PIV
Setec Setcos
Giesecke & Devrient STARCOS and SECCOS
TCOS based NetKey E4
SignTrust
Smartkey
AKIS
Celiveo Smart Card Authentication is a middleware used to authenticate users with smart cards. It runs
directly on the device.
If validation is needed, the Certificate Revocation List CRL (.crl) and Certificate Authority CA (.ca)
files have to be pre‐loaded on the multi‐function printers using Celiveo Web Admin Software. This
reduces traffic and allows a large CRL to be used and updated, as required by the administrator.
The user selects an activity on the device that requires smart card authentication (for example,
email).
The user inserts his/her smart card in the smart card reader located on the device.
The device keyboard is used to enter the card PIN code (numeric or alphanumeric).
The first authentication certificate is extracted from the smart card public container.
The PKI proof of ownership of the certificate verification is performed on the card.
It can be deactivated, if needed.
Implementation is based on customer requirement.
The certificate signature is verified using the CA file. This can be deactivated, if needed.
The content of the SubjectAlternativeName extension of the X509 certificate is used directly or
indirectly:
Directly: It is used for the e‐mail address. The user name is the text preceding the @
character.
Indirectly: It is supplied to the Celiveo Server Services Server authentication service that uses
it to perform a lookup against one or more LDAP/SLDAP/AD servers. The user information (full
name, login name, e‐mail address, domain, department, home directory) is returned by the
authentication service, and used by multi‐function printer applications, such as e‐mail
sending, secure printing, scan to folder, etc.
The CA certificate must be in DER format (and not Base64) to function with Celiveo.
Smart Card Authentication is not supported on Toshiba Devices. Only Toshiba certified readers are
supported.
The following actions are available to manage the Smart Card profiles:
Viewing Smart Card Profile
Creating Smart Card Profile
Deleting Smart Card Profiles
Duplicating Smart Card Profiles
Configuring Smart Card Profiles
9.6.1 Viewing Smart Card Profile
To view a smart card profile:
In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > SMART CARD PROFILE. The Smart Card
Profile page appears.
The following table describes Smart Card Profile parameters displayed in the Celiveo Web Admin
Software section.
Creating Smart Card Profile
NAME Displays the name of the Smart Card profile.
GROUPS Displays the group associated with.
To create a Smart Card profile:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > SMART CARD PROFILE.
The Smart Card Profile page appears.
3. In the Name text box, enter a profile name for the Smart Card, and click OK.
The new Smart Card Profile is added to the column in the Celiveo Web Admin Software section,
and to the Main Menu.
9.6.2 Deleting Smart Card Profiles
To delete a Smart Card profile:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > SMART CARD PROFILES.
The Smart Card Profile page appears with the available profiles.
2. Select the check boxes next to the Smart Card profiles you want to delete or, if you want to delete
all the smart card profiles, select the top check box to select all the profiles.
3. In the Related Actions section, click DELETE. A list of all the selected Smart Card profiles appears.
4. Click OK to delete.
9.6.3 Duplicating Smart Card Profiles
To duplicate a Smart Card Profile:
The Smart Card Profile page is displayed with the available profiles.
2. Click the Smart Card profile you want to duplicate.
4. In the Name text box, enter a name for the new smart card profile, and click OK.
Once the profile is created, you can configure the profile accordingly.
9.6.4 Configuring Smart Card Profiles
To configure a smart card profile:
The Smart Card Profiles page displays.
2. Click the name of the smart card profile to be configured.
The smart card profile configuration page is displayed.
The table below explains the Smart Card Profile parameters:
Displays the Smart Card profile name.
NAME
If you wish to rename it, enter a new name.
USE CA FOR
Select this check box if CA has to be used to validate the Smart Card.
VALIDATION
Gives the name of the CA file used.
To upload a CA file, click the import file link, and browse to the desired file.
A CA file must always be loaded.
CA
The CA certificate must be in DER format (and not Base64) to function with
Celiveo.
USE CRL FOR
Select this check box if CRL has to be used to validate the Smart Card.
VALIDATION
Gives the name of the CRL file used.
CRL To upload a CRL file, click the IMPORT FILE link, and browse to the desired file.
A CRL file must only be loaded if the USE CA/CRL FOR VALIDATION option was checked.
1. Select Use Smartcard from the Lookup Process drop‐
down list to use smart card as the authentication gateway.
The ID Conversion drop‐down list displays. Select from the
following options.
Use Smartcard
2. Select from the following options:
EMAIL
Use Extract Domain From User Principal
1. Select Use CSS from the Lookup Process drop‐down list to
use Celiveo Server Services as the authentication gateway.
A drop‐down list with all available Celiveo Server Services
displays.
LOOKUP PROCESS Use CSS
2. Select the Celiveo Server Services which has to be used for
authentication.
1. Select Use User Directory from the Lookup Process drop‐
down list to use a user directory profile as the
authentication gateway.
A drop‐down list with all available user directory profiles
displays.
Use User
Directory
2. Select the user directory profile which has to be used for
authentication.
The following options can be mapped to the lookup process for a smart card.
Domain field name
Login field name
SMARTCARD LOOKUP
E‐mail field name
FIELD NAMES
Full name field name
Department field name
Home directory field name
VERIFY THE PIN CODE This option is currently unavailable.
PARSE THE X509
CERTIFICATE FOR This option is currently unavailable.
FIELD(S)
PERFORM "PROOF OF
Check this option to verify that the certificate used belongs to the smart card
POSSESSION"
used.
CHALLENGE
READ THE CERTIFICATE This option is currently unavailable.
VALIDATE EXPIRATION
DATE FOR SMART Select this check box to enable the validation of expiration date for smart card.
CARD
If the smart card PIN length is less than 8 characters, selecting this option pads
pin padding
the PIN length to 8 using 0xFF.
USED IN GROUPS This text box displays the group list where the Smart Card profile is used.
3. Configure the Smart Card profile validation parameters as described in the table above.
4. Click APPLY to save the changes.
9.7 Authentication Profiles
This feature allows configuration of authentication profile with the card reader settings and
authentication process used for user authentication, card extraction, and management of different
authentication mechanisms.
The following actions are available to manage the Authentication profiles:
Viewing Authentication Profile
Creating Authentication Profile
Deleting Authentication Profiles
Duplicating Authentication Profiles
Configuring Authentication Profiles
9.7.1 Viewing Authentication Profile
To view an Authentication profile:
In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > AUTHENTICATION PROFILE. The
Authentication Profiles page appears.
The following table explains the authentication profile parameters.
NAME Displays the name of the Authentication profile.
GROUPS Displays the group with which the profile is associated.
9.7.2 Creating Authentication Profile
To create an Authentication profile:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > AUTHENTICATION PROFILE.
The Authentication Profiles page appears.
3. In the Name text box, enter a profile name for the Authentication Profile and click OK.
The new Authentication Profile is added to the column in the Celiveo Web Admin Software section
and to the Main Menu.
9.7.3 Deleting Authentication Profiles
To delete an Authentication profile:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > AUTHENTICATION PROFILE. The
Authentication Profiles page appears.
2. Select the check boxes next to the Authentication profiles you want to delete or, if you want to
delete all the Authentication profiles, select the top check box to select all the profiles.
3. In the Related Actions section, click DELETE. A list of all the selected Authentication profiles
appears.
Before you delete any Authentication profile, make sure it is not in use.
9.7.4 Duplicating Authentication Profiles
To duplicate an authentication profile:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > AUTHENTICATION PROFILE.
The Authentication Profiles page appears.
2. Click the Authentication profile to be duplicated.
4. Enter the new Authentication profile name in the text box, and click OK. Once the profile is created,
configure the profile accordingly.
9.7.5 Configuring Authentication Profiles
To configure an Authentication profile:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > AUTHENTICATION PROFILES.
The Authentication Profiles page appears. The figure below displays the Identification Behavior
section.
The table below explains the Identification Behavior section parameters:
Identification Behavior
Select the reader type from the drop‐down list.
Keypad Internal (PIN): PIN code identification through the Celiveo Server
Services (acting as a gateway).
Swipe track 1: Swipe card readers
PX HID 26bits Corp: Proximity readers
PX HID 37bits Cn Corp: Proximity readers
PX Custom: Proximity readers
READER TYPE
PX EM‐Marin: Proximity readers
PX HITAG: Proximity readers
PX LEGIC: Proximity readers
PX MIFARE: Proximity readers
Swipe Track: Swipe card readers
PKI Smart card: Smart card readers
Keypad External (PIN): Supports all reader types such as proximity, smart
cards, and swipe cards.
The identification behavior fields differ, as per the reader type selected.
Smart card authentication is available on HP multi‐function printers only.
(for HID Prox badges only)
HID SITE CODE ALLOWED This code uses the site code to discriminate badges. Select 0 (zero) to disable
discrimination.
Enter the extraction mask.
The mask allows the extraction of a smaller value from a badge value.
It can consist of 1 and X. 1 keeps the digit, X drops it.
EXTRACTION MASK Enter the extraction mask to apply to the badge number string.
Leading 0s are ignored in the string, that is, 00140167 is considered as
140167.
(for HID Prox badges only, using the PX‐Custom format)
Enter the first and last bit numbers for the site code followed by the first and
last bit numbers for the badge number.
This allows for the extraction of a range of bits from a badge. The mask is a D
CUSTOM EXTRACTION
followed by a 12‐digit string Daaabbbcccddd where:
aaa is the first bit number for the badge site code
bbb is the last bit number for the badge site code
ccc is the first bit number for the badge number
ddd is the last bit number for the badge number
Enter a maximum time (in seconds) to authenticate during interactive
SESSION TIMEOUT
authentication (authentication request on the front panel).
Select this check box if the facility code needs to be included.
INCLUDE FACILITY CODE
This option is applicable for AUO HID cards only.
This option allows a user to log in by manually entering their badge number or
ALLOW MANUAL network credentials using the touch screen printer panel.
AUTHENTICATION FROM
PANEL User cannot enter badge number manually, on SFP devices without front
panel and USB support.
If this option is activated, the user ID appears on the printer/MFP window
DISPLAY ID
when the user authenticates.
From the drop‐down list, select the appropriate option to convert the data to
ID CONVERSION
the digital format.
2. Click the Authentication profile to be configured.
3. Configure the Authentication profile validation parameters as described in the table above.
The figure below shows the Authentication Process section.
The table below explains the Authentication Process section parameters:
Select the primary authentication method, that is, OFFLINE AUTHENTICATION LIST,
CELIVEO SERVER SERVICES, USER DIRECTORY ID PROFILES, OR LOCAL SMART CARD.
On the Authentication Process, select the service the device will use to
authenticate users.
Click APPLY at the bottom of the window in order to configure one or more
alternate authentication methods (the fields appear only once APPLY has been
clicked).
When more than one authentication methods are configured, an additional
field (Rank) appears on the right allowing you to modify the failover order.
You can combine:
5 Celiveo Server Services profiles with one Offline Authentication
AUTHENTICATION
PROCESS 5 User Directory ID profiles with one Offline Authentication
5 Celiveo Server Services with five User Directory Credentials Lookups
5 User Directory ID Lookups with five User Directory Credentials Lookups
1 Local Smart Card with one User Directory Credential Lookup
Only one Offline Authentication can be combined with other Authentica‐
tion methods. No other authentication method can be added after add‐
ing an Offline Authentication.
It is not possible to configure alternate (that is, failover) authentication for
single function printers.
Smart card authentication is available for HP devices only.
This check box becomes editable when offline authentication list is selected as
FAILOVER TO OFFLINE secondary authentication process.
AUTHENTICATION Deselecting this option deactivates the offline authentication list alternate
authentication method.
This check box becomes editable when the first User Directory credentials
alternate authentication method is configured.
Deselecting this option deactivates the User Directory ID profile alternate
FAILOVER TO USER
authentication method(s). This allows you to save the configuration for future
DIRECTORY
use even though you choose not to use it currently.
LOGIN & PASSWORD
It is not possible to configure alternate (failover) authentication for single‐
function printers.
If you set this option, after a user succeeds in the first authentication
procedure, the system stores the user's ID information in the RAM. The next
time, this user identifies himself/herself on the device, the system will search
the cache directly instead of searching the User Directory database for the user
information. There can be up to 200 users in the circular cache list.
Stored information:
user login name
user department
user email address
ENABLE AUTHENTICATION user domain
CACHE user full name
user rights
home directory
SPP hostname
port number to the print server
user password
PIN
Dual factor password
Time of last login
This text field is enabled only if you select the Enable Authentication Cache
check box.
USER INACTIVITY CLEAN
Enter the time period (in hours) of inactivity after which the Authentication
INTERVAL
cache will be cleaned up. Upon rebooting the device, the outdated records in
the cache will be deleted.
Enable this option for self enrollment.
ENABLE SELF‐
ENROLLMENT
For more information, see the Configuring User Enrollment section in the
Configuring Celiveo Server Services chapter.
ALLOW A NEGATIVE
BALANCE ON USER Select this option to allow users with negative balance to print jobs.
ACCOUNTS
ADVANCED Click to display the Single Domain Mode field.
By default, the check box is checked for a single‐domain mode.
Click to deselect the check box, if you want to activate the multiple domain
SINGLE DOMAIN MODE mode. Multiple domains can be configured for any device in the printer group.
For more information, see the Configuring Celiveo Server Services for Multiple
Domain section in the chapter Configuring Celiveo Server Services.
SYNC ALL USED IN
This text box displays the group list where the Authentication profile is used.
GROUPS
APPLY Click to save changes.
For Celiveo Authentication with a badge reader, check the manufacturing label for the list of badge types
that can be read, and make sure this type matches your corporate badges or the badges supplied with
Celiveo.
When Celiveo starts, it automatically checks which authentication hardware is connected to the device:
swipe card reader, keypad, proximity badge, and so on.
For Proximity badges, Celiveo detects which model is connected: HID, Mifare, Hitag, Legic, EM‐Marin, and
so on. The following settings can be configured:
Mask applied on the raw badge number (by default, the mask will be 111111111 applied to the
right, to give a 9‐digit user ID)
HID Prox 125KHz badge model (there are various HID Prox badge models)
HID Prox badge site code: The HID Site Code Allowed field can only be different from 0 if the badge has a
site code to be used for authentication.
Select CELIVEO SERVER SERVICES as the first Authentication Process, and USER DIRECTORY LOGIN AND PASSWORD
PROFILE for alternate authentication.
Select the Enable self‐enrollment check box to enroll the user, and to create a User Directory profile in
Celiveo Web Admin Software. For more information on creating User Directory profiles, see the Creating
User Directory Profiles section.
If a common Celiveo Server Services is used across multiple authentication profiles, then the reader
settings of all the authentication profiles must be same. If there is a mismatch in the reader settings, then
the following error message appears:
“Reader setting not matched with other profile”
9.8 SQL Server Profiles
An SQL Server profile is required to configure the print jobs submitted from an SQL Server, and can also
be used for enrolling a user. Since Celiveo Enterprise collects details from an SQL server to provide status
feedback for the SQL print jobs, an SQL Server Profile has to be created for each SQL server configuration.
The following actions are available to manage SQL server profiles:
Viewing SQL Server Profile
Creating SQL Server Profiles
Deleting SQL Server Profiles
Duplicating SQL Server Profiles
Configuring SQL Server Profiles
9.8.1 Viewing SQL Server Profile
To view a SQL Server profile:
In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > SQL SERVER PROFILE. The SQL Server
Profiles page appears.
The table below explains the SQL Server Profiles parameters.
NAME Displays the name of the SQL Server profile.
SQL SERVER INSTANCE NAME Displays the SQL Server instance name selected during the configuration.
9.8.2 Creating SQL Server Profiles
To create an SQL Server Profile:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > SQL SERVER PROFILE.
3. Enter the new SQL Server profile name in the empty field, and click OK.
The new SQL Server Profile entry is displayed in the Main Menu and in the Celiveo Web Admin Software
area.
Once the profile is created, the SQL server connection validation method has be configured.
9.8.3 Deleting SQL Server Profiles
To delete an SQL Server Profile:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > SQL SERVER PROFILES.
2. Select the check boxes next to the SQL Server profiles to be deleted or, to delete all the SQL Server
Card profiles, select the top check box to select all.
A list of all the selected SQL Server profiles appears.
Make sure that the SQL profile is not in use before deleting.
9.8.4 Duplicating SQL Server Profiles
To duplicate a SQL Server Profile:
The SQL Server Profiles page appears.
2. Click the SQL Server profile to be duplicated.
4. Enter the new SQL Server profile name in the text box, and click OK.
5. Once the profile is created, configure it accordingly.
9.8.5 Configuring SQL Server Profiles
To configure SQL Server Profile:
2. Click the SQL Server profile to be configured.
3. Configure the SQL Server profile validation parameters.
The table below explains the SQL Server profile parameters:
SQL SERVER INSTANCE NAME Select an SQL server from the drop‐down list.
USERNAME Enter the username of the selected SQL server.
PASSWORD Enter the password of the selected SQL server.
Select this option to connect to the SQL server using the same
USE WINDOWS AUTHENTICATION
username and password to login using Windows authentication.
DATABASE From this drop‐down list, select a database.
TEST CONNECTION Click to check connection with the database.
Click to set up the SQL database. For more information, see the Setting
ADVANCED
up SQL Database section below.
APPLY Click APPLY to apply and save the changes.
9.8.6 Setting up SQL Database
The SQL database can be set up by providing the user credentials and connection string.
To set up SQL database:
2. Click the SQL Server profile for which SQL database is to be set up.
3. In the selected SQL profile, click ADVANCED.
4. In the User name text box, enter the database username.
5. In the Password text box, enter the database password.
6. In the Connection String text box, enter the connection information.
For example:
Provider=SQLOLEDB;Data
Source= <192.168.8.3>;address=<192.168.8.3,1433>
Replace <192.168.8.3> with the IP address of the machine where the SQL server is installed.
If required, change the default SQL TCP port number (1433).
7. To test the connection, click TEST CONNECTION. A pop‐up message appears indicating that the
connection is successful.
8. Click APPLY to save the setup.
SQL communications can be secured by enabling SSL encryption for an instance of SQL
server. This can be done by:
1. Installing a certificate on a computer that is running Microsoft SQL Server (using Microsoft
Management Console)
2. Enabling SSL Encryption at the server, or for specific clients.
For more information about securing SQL communications with SSL encryption, refer to
http://support2.microsoft.com/kb/316898.
9.9 Configuring SAP System Profiles
An SAP System Profile is required to configure the print jobs submitted from an SAP system. Since Celiveo
Print‐ERP for SAP collects details from an SAP system to provide status feedback for the SAP jobs, an SAP
System Profile has to be created for each SAP print configuration.
Celiveo Print‐ERP for SAP supports both the SAP Application Server and Message Server configura‐
tions.
The following actions are available to manage the SAP System profiles:
Viewing SAP System Profiles
Creating SAP System Profiles
Deleting SAP System Profiles
Configuring SAP System Profiles
For more information on creating, configuring and managing SAP System Profiles, see the Celiveo Print‐
ERP for SAP Admin Guide.
10 Global Settings
Global settings consist of schedulers, device‐specific settings, notification, dual factor, SMTP settings,
corporate encryption keys and event logger settings.
10.1 Schedulers
The following schedulers can be configured in Celiveo Web Admin Software, as described in the following
sections:
Configuring Offline Authentication Scheduler
Configuring Stale CSS Record Cleanup Scheduler
10.1.1Configuring Offline Authentication Scheduler
The Offline Authentication List in the device can be auto‐synchronized with Active Directory using Celiveo
Web Admin Software.
Ensure that Offline Authentication List is synchronized with the Active Directory. For more informa‐
tion on synchronizing the Active Directory, see the Configuring Directory Synchronization and Noti‐
fication section.
1. In the Main Menu, click GLOBAL SETTINGS > SCHEDULERS > OFFLINE AUTHENTICATION.
The Offline Authentication page displays.
2. Enter the required details as given in the table below.
If the default port number of the Web Admin is changed, ensure to click APPLY for the sched‐
uler to work, as configured.
Parameters Description
Scheduler Configuration
DESCRIPTION Enter a brief description for the Scheduler.
START TIME From the drop‐down list, select the synchronization start time.
To define the intervals of synchronization, from the drop‐down list select
REPEAT EVERY either hourly or minute‐wise, and enter the number of hours/minutes (0‐
23 for hours and 0‐1439 for minutes, in numerals only).
Click to view the ADVANCED option such as Scheduler Type.
ADVANCED
See the Advanced Features for Schedulers section for this feature.
SCHEDULER TYPE For more information, see the Advanced Features for Schedulers table.
SELECT OFFLINE Select the Offline Authentication List(s) that are to be configured for the
AUTHENTICATION LIST Offline Authentication List Sync.
3. Click APPLY to save the configuration settings.
10.1.1.1Advanced Features for Schedulers
The table below explains the parameters for the advanced features for schedulers.
Scheduler Type
From the drop‐down list, select the scheduler type (Daily, Weekly or Monthly).
For each selection, additional fields have to be configured.
Daily: After selecting Daily from the list, enter the number of days. In the image below, “10” is
entered as the number of Day(s). This indicates that synchronization will take place every 10 days
from the start time, which is in 24‐hour format.
Weekly: If Weekly is selected, select the number and day of the week. In the image below, for the
values configured; synchronization will occur every second week on Monday and Tuesday. The
administrator can select any or all days of the week.
 Monthly: If Monthly is selected, two options are available:
Select either the first option to specify the particular day of a month, else select the second
option to specify the number and day of the week.
In the image below, First and Monday are selected from the drop‐down lists. For the values
configured, synchronization will occur in the first Monday of every month.
10.1.2Configuring Stale CSS Record Cleanup Scheduler
1. In the Main Menu, click ADVANCE CONFIGURATION > GLOBAL SETTINGS > SCHEDULERS > STALE CSS RECORD
CLEANUP.
The Stale CSS record cleanup page displays.
2. Configure the scheduler settings, and click APPLY to save the settings.
The table below describes the Scheduler Parameters:
Scheduler Configuration
SCHEDULER NAME This is a non‐editable field with a default name.
DESCRIPTION Enter a brief description for the Scheduler.
START TIME
HH Enter the synchronization start time. This time must be in the 24‐hour format.
MM Enter the synchronization start time in minutes.
To define the intervals of synchronization, select from the drop‐down list whether it
should be hourly or minute‐wise.
REPEAT EVERY
In the Repeat Every text box, enter the number of hours/minutes (0‐23 for hours
and 0‐1439 for minutes, in numerals only).
SCHEDULER TYPE See the Advanced Features for Schedulers table.
Database Configuration
SERVER NAME Enter the IP or hostname of Database server.
USER NAME Enter the username to login to the Database server.
PASSWORD Enter the password to login to the Database server.
CONNECTION Click CONNECTION to test the Database configuration.
The scheduler runs to remove the IP address entries of the Serverless Pull Printing clients that have not
been updated for a certain period from the database.
In order for the scheduler to work properly over a firewall via TCP/IP, the firewall must be config‐
ured to allow SQL Server to receive incoming connections. For more information on how to config‐
ure the firewall, refer to Adding Firewall Exceptions section in Special Notes chapter.
10.2 Device‐Specific Settings
Device‐specific settings are available for Ricoh and HP FutureSmart devices. In Ricoh devices, the
administrator can lock the printer panel through Celiveo Web Admin. This setting will deny access to any
printer function unless authenticated.
10.2.1Configuring Ricoh Settings
In Ricoh devices, the administrator can lock the printer panel through the Celiveo Web Admin. This
setting will deny access to any printer function, unless authenticated.
To configure Ricoh settings:
1. In the Main Menu, click GLOBAL SETTINGS > DEVICE SPECIFIC SETTINGS.
The Device Specific Settings page is displayed.
2. Click RICOH SETTINGS.
The Ricoh Settings page appears. The following information is displayed on the main screen, as
shown in the figure below:
“use SNMP to retrieve additional information” is disabled as a default setting.
In the disabled (unchecked) status, Celiveo Web Admin generates a tracking data file per page, that
is, if a job consists of three pages, then three Tracking data files are generated.
Celiveo Track‐GreenSaver may not generate accurate reports under this condition.
3. Click the USE SNMP TO RETRIEVE ADDITIONAL INFORMATION check box to generate one Tracking data file
for all the pages in a job. This enables Celiveo Track‐GreenSaver to generate accurate reports.
4. Enter a time‐out for MFP functions such as Copy, Scan, Document Server and Fax functions in the
Timeout for MFP functions text box. These functions take some time to process, and by the time it
is processed, the authentication time‐out set previously while configuring authentication
parameters may log the user out.
Ensure that the timeout value set for the multi‐function printer functions is more than the
authentication timeout.
10.2.2Configuring HP FutureSmart Settings
10.2.2.1Critical Client
In HP FutureSmart devices, the tracking data is stored in the allotted buffer of the hard disk. This tracking
data is sent to Celiveo Track‐GreenSaver for generating reports. If, for any reason the tracking data is not
sent or cannot be sent, the data remains in the device hard disk and consumes the allotted hard disk
space.
Enabling/disabling the Critical Client option will have the following result:
If the Critical Client option is enabled, then:
If the allocated hard disk space is full, then the user will be prevented from accessing any device
function.
If the Critical Client option is disabled:, then:
In this case, the new tracking data file will replace the older tracking data file in the device hard
disk.
10.3 Configuring SNMP Settings
SNMP (Simple Network Management Protocol) is a standard network management protocol (based on
TCP/IP) to monitor and map network availability, performance, and error rates when a device is added in
Celiveo Web Admin.
After the device is contacted, the system description, system type, device serial number, and device
model name is fetched using the SNMP protocol to identify the different device types.
The Authentication and Privacy protocols in SNMP v3 provide a higher level of encryption security than
SNMP v1/v2 that use community strings for security.
SNMP v3 security standards include prevention of unauthorized access, data corruption, and data
disclosure.
SNMP settings have to be configured in the Printer EWS page first.
To implement the SNMP v3 protocol for the devices added in Celiveo Web Admin Software:
1. Click Global Settings > SNMP settings in the Main Menu.
The SNMP Settings page opens.
2. Configure the SNMP Settings as described in the table below.
SNMP V1/V2
Select this check box to enable the SNMP v1/v2 settings.
ENABLE SNMP V1/V2
This option is enabled by default, and pre‐filled with default
values. To disable the option, deselect the check box.
Enter the community name string of the device type that is required
during communication between Celiveo Web Admin and the device.
The request messages are accepted only if the community string in
COMMUNITY NAME the message matches the community name of the device specified
in the Printer EWS page.
For example, HP devices use community name as "Public" and Ricoh
devices use community name as "Ricoh Public".
SNMP V3
Select this check box to enable the SNMP v3 settings.
ENABLE SNMP V3
To disable the option, deselect the check box.
Enter the user name required during authentication while
contacting the device.
USERNAME
Only one user name can be specified for all the devices.
Enter the context name of the device type that is required for
communication from Celiveo Web Admin to a device, using the
SNMP protocol.
The request messages from Celiveo Web Admin are accepted by the
CONTEXT NAME device only if the context name string in the message matches the
context name of the device type specified in the Printer EWS page.
For example, for HP devices, the context name is "JetDirect", and
for Ricoh, a general context name may be specified, as supported by
the Ricoh devices.
Select one of the following authentication protocol options from
the drop‐down list:
1. No Authentication Protocol
2. HMAC‐MD5 — a message digest algorithm
AUTHENTICATION PROTOCOL
3. HMAC‐SHA — an optional alternative algorithm
The authentication protocol is used for proper authentication by
ensuring the identity of the users, and the correct and appropriate
encryption mechanism for security purposes.
Enter an alphanumeric password of 8 to 12 characters that is
AUTHENTICATION PASSWORD
required for the authentication mechanism.
Select one of the following privacy protocol options from the drop‐
down list:
1. No Privacy Protocol
2. Data Encryption Standard (DES) mode of encryption
3. Advanced Encryption Standard (AES) mode of encryption
PRIVACY PROTOCOL DES encryption is a part of the SNMP v3 standard.
However, DES encryption is not supported for Celiveo job stor‐
age and communication.
Privacy allows for encryption of SNMP v3 messages to ensure
confidentiality of data. It is a secondary security constraint for
SNMP v3 to ensure privacy of the request for the proper channeling
of a response.
Enter an alphanumeric password of 8 to 12 characters that is
PRIVACY PASSWORD
required for the data privacy mechanism.
3. Click apply to APPLY the configured SNMP settings.
Select either SNMP v1/v2, or SNMP v3 as a protocol to contact the device.
If both the options are selected, SNMP v3 is taken as priority with failover to SNMP v1/v2.
Both the Authentication and the Privacy settings are optional. However, to configure the Privacy
protocol, the Authentication protocol must be configured first.
SNMP v3 settings need to be configured on both Celiveo Web Admin Software and the Printer EWS page
for effective implementation.
For more information on configuring SNMP settings on your device, refer to your device‐specific vendor
manual.
10.4 Notification
Notification e‐mails can be automatically sent to the users for the following:
Offline Authentication
Auto Un‐Enrollment
Auto Sync Enrollment
Tracking
Event Logger
To configure Notification settings:
1. In the Main Menu, click ADVANCE CONFIGURATION > GLOBAL SETTINGS > NOTIFICATION.
The Notification page displays.
2. Click the type of service for which you want to configure the notification settings.
The Administrator and Users notification settings are same for all notifications.
10.4.1Configuring Offline Authentication Notification
A notification mail is sent to the administrator whenever there is an update in the Offline Authentication
List.
To configure the scheduler, see the Configuring Offline Authentication Scheduler section.
In the Main Menu, click ADVANCE CONFIGURATION > GLOBAL SETTINGS > NOTIFICATION > OFFLINE AUTHENTICATION.
The Offline Authentication page displays.
Select this check box to enable notifications to the Admin when the Offline
NOTIFY ADMINISTRATOR Authentication Synchronization process fails.
E‐mail content can be customized, as described below this table.
ADMIN EMAIL‐ID Enter the e‐mail ID.
EMAIL SUBJECT Enter the e‐mail subject.
MESSAGE Enter the e‐mail content.
Click to view the SMTP Settings parameters.
SMTP SETTINGS
To configure these settings, see the Configuring SMTP Settings section.
APPLY Click APPLY to save all modifications.
10.4.2Configuring Auto Un‐Enrollment Notification
A notification mail will be sent to the administrator and the users, whenever the users are un‐enrolled.
See the Auto Un‐Enrollment Notification figure below:
The table below explains the auto un‐enrollment notification parameters:
Field Description
NOTIFY ADMINISTRATOR See the Configuring Offline Authentication Notification section for the settings.
1. Select this to enable notifications to the User when he/she is un‐
enrolled.
NOTIFY USERS 2. Enter a subject for the e‐mail.
3. Write the content.
E‐mail content can be customized, as described below this table.
The following variables can be used to customize the e‐mail content.
{1} to indicate the time limit.
{3} to indicate the name of the user.
Example:
Hello {3}
You have crossed System inactivityTime {1}
You are automatically un‐enrolled by the system.
10.4.3Configuring Auto Sync Enrollment Notification
Notification mail is sent to the Administrator and users , when new users are enrolled.
10.4.4Configuring Tracking Notification
A notification mail is triggered whenever the Tracking scheduler runs.
10.4.5Configuring Event Logger Notification
A notification mail is triggered whenever the Event Logger scheduler runs.
10.5 Configuring Dual Factor Authentication for Devices
The Dual Factor authentication feature enhances the security for proximity and swipe cards on HP
devices, and for proximity cards on Ricoh devices.
Proximity custom cards do not work for user authentication, if the user who is enrolled with the Dual
Factor feature, taps "My Print Job" first on the device UI such that the device prompts for "manual ID"
and "failover login & password".
Furthermore, only one authentication method is possible at a time: either proactive authentication
through Proximity card swipe, else manual ID authentication by tapping "My Print Jobs" to enter the
username and password. In Dual Factor authentication, for example, after swiping the card, if the "My
Print Jobs" is tapped, you will be prompted to enter the manual ID in the given field.
Celiveo requires a password from the user after badge authentication. The password can be numeric or
alphanumeric.
The Password Policy for Dual Factor Authentication can be configured through Celiveo Web Admin.
To configure Dual Factor Authentication for devices:
1. In the Main Menu, click GLOBAL SETTINGS > DUAL FACTOR.
The Dual Factor page displays.
2. In the Password Length text boxes, enter the Minimum and Maximum password length for Dual
Factor Authentication.
The maximum Dual Factor password length allowed is 19 characters. If the Password length
is not defined in the Dual Factor settings, an error message is displayed while applying the
Dual Factor Settings to groups.
3. Select the Password Type from the drop‐down list.
Alphanumeric password can be used on multi‐function printers only. On HP legacy, Konica Minolta,
Toshiba and Xerox devices, the dual factor feature is available only upon authentication and for
specific activity.
On single‐function printers, there is no Dual Factor password check after manual identification by
entering user credentials. Therefore, a user who is enrolled with the Dual Factor feature, is not
prompted for the card password upon entering his/her username and password manually in the
"My Print Jobs" menu on the device UI.
10.6 Configuring Dual Factor Authentication for Device Groups
To configure Dual Factor Authentication settings for device groups:
2. Click the name of the group for which Dual Factor authentication is to be configured.
3. Click the AUTHENTICATION tab.
The Authentication tab is available only if the checkbox for Authentication is selected while
creating a new device group. See the Configuring Authentication for Device Groups section.
4. In the Dual Factor Settings section, select the On/Off/MFPOnly option from the drop‐down list,
and click APPLY.
The Password prompt will appear on “MFP only”, if the Dual Factor option is enabled. The
default setting for Dual Factor Password is set to OFF.
If the Password Length is not defined in Global Settings, then upon clicking APPLY, an error message
appears.
10.7 Configuring SMTP Settings
To access the SMTP page:
1. In the Main Menu, click ADVANCE CONFIGURATION > GLOBAL SETTINGS > SMTP SETTINGS.
2. Enter data in the SMTP settings fields, as described in the table below:
SMTP SERVER IP ADDRESS Enter the IP address of the SMTP server.
SMTP SERVER TCP/IP PORT Enter the Port of the SMTP server, for example, 25.
ACCOUNT NAME Enter the authorized login ID on SMTP server, for example, johnsmith.
PASSWORD Enter the password associated to the login, for example, 4rk9812rwn.
USE SSL Click this checkbox to use SSL.
SEND TEST MAIL Click to send a test e‐mail.
3. Click APPLY to save the parameters.
10.8 Celiveo Encryption Keys
10.8.1AES Encryption with User Certificate
Celiveo can secure print jobs by encrypting the data using user certificate stored in Active Directory
Certificate store. The print job is encrypted using the public key stored in the user certificate.
For this option to be enabled, user in the Active Directory must have a user certificate installed. This
option is only available when AES Encryption is selected from the Encryption settings drop‐down list and
Encrypt key with User Certificate check box is selected.
For more information, refer to Configuring Celiveo Print‐SMP Driver Plug‐In section in Configuring Celiveo
Print‐SMP Driver Plug‐In chapter.
AES encryption with user certificate only works when the user is authenticated with a smart card on
the device.
10.8.2AES Encryption with PKI Technology
Celiveo can secure the print jobs content by encrypting the data and job ownership information.
A random AES 128‐bit key is generated for every single print job. The AES algorithm is a symmetric block
cipher that is used to encrypt and decrypt the document. It is split into two keys: a private key and a
public key (corporate key). The public key is used to encrypt the document and the private key is used to
decrypt it.
The public key will be distributed to all the users who might use AES encryption for their jobs. The
distribution is done by the system administrator (as a .reg file or e‐mail) for integration in the Celiveo
Print‐SMP Driver Plug‐in or configured by the system administrator in the Celiveo Server Services tab of
the Pull Printing Print queue.
The private key will be sent by the system to all the devices. When a user sends a job to print, the job is
first encrypted using the public key. When the user requests the release of this secure print job, the print
job is decrypted using the private key.
The corporate encryption keys can be generated, and managed in Celiveo Web Admin Software. Once
the key pair has been created, the private key is loaded securely on all the devices by the Celiveo Web
Admin Software.
The following actions are available to manage the Celiveo encryption keys:
Creating Corporate Keys
Deleting Corporate Keys
Viewing Corporate Keys List
Viewing Celiveo Corporate Key Details
10.8.3Creating Corporate Keys
To add a new Celiveo corporate encryption key to the list:
1. In the Main Menu, click ADVANCE CONFIGURATION > GLOBAL SETTINGS > CORPORATE ENCRYPTION KEYS.
3. In the Name text box, enter the new Celiveo corporate key, and click OK.
10.8.4Deleting Corporate Keys
To delete one or more Celiveo corporate encryption keys from the list:
The Celiveo Web Admin Software section displays a list of all the Celiveo corporate keys.
2. Click the check box(es) next to the corporate key(s) that needs to be deleted.
A list of all the selected corporate keys appears.
10.8.5Viewing Corporate Keys List
To view Celiveo corporate keys lists (for copying):
A list of Celiveo corporate keys appears.
2. Click the check box(es) next to the corporate key(s) to be viewed.
3. In the Related Actions section, click VIEW KEY .The corporate key details can be viewed in the
Related Actions section.
10.8.6Viewing Celiveo Corporate Key Details
To view details of the Celiveo corporate keys:
In the Main Menu, click ADVANCE CONFIGURATION > GLOBAL SETTINGS > CORPORATE ENCRYPTION KEYS.
The table below provides a description of the Corporate Key List fields.
NAME Displays the name of the corporate key.
GROUPS Displays the total number of printer groups associated with this key.
11 License Management
This section provides an overview of the available and the used license tokens, and how to upload and
delete license files on devices.
License Management is an integrated feature within the Celiveo Web Admin Software from where you
can add, configure and manage the licenses. The License Management module can be accessed from the
License Management link in the Main Menu.
The following license types are available in the License Management section:
Embedded License
TGS License
After synchronization, the devices (single‐function printers and multi‐function printers) can run the
Celiveo solution for seven days with trial license tokens for Authentication, Secure Print, Tracking,
Print‐ERP, EMR, SSO, and Track Print‐ID features. After this evaluation period, a new license has to
be purchased, and the device has to be re‐synchronized. Trial license tokens will be sent to a device
only when a valid license does not exist in Celiveo Web Admin Software..
11.1 Requesting Licenses
To obtain a Celiveo license file, provide the VAR (Value Added Reseller) with the following information:
The server name on which the Celiveo modules will be installed.
Your company name.
The device model, quantity and brand for which authentication and secure printing license tokens
are required. The license keys are specific to the device vendor. For example, a license key issued
for an HP device can be used on an HP device only. This licensing condition is valid for Ricoh
devices also.
The type of license required, for example, for Authentication, Secure Printing, EMR, and SSO.
The following types of license are available:
Trial license ‐ Trial licenses are available for all the Celiveo modules with a set expiration date.
Celiveo Enterprise
Celiveo Enterprise Premium
To access Smart Card authentication, Kerberos and Multi‐Level Authentication (MLA) and related
features, the Celiveo Enterprise Premium license is required. Contact Jetmobile support for the license.
License tokens are available for the following modules. Each of these licenses is identified by a license
module identifier, as indicated in brackets for the listed license modules below:
Authentication (C) ‐ This license token is for the authentication feature.
Secure Print (S) ‐ This license token is for the secure printing feature of print jobs.
A valid Secure Print license should be present to avail the licenses of any other module.
Tracking (T) ‐ This license token is for the print job tracking feature.
Print‐ERP (P) ‐ This license token is for the SAP printing modules.
EMR (E) ‐ The Electronic Medical Report license token is for the healthcare printing modules.
SSO (O) ‐ This license token is for the Single Sign‐On authentication mechanism
Track Print‐ID (I) ‐ This license token is for the print job ID tracking feature
There is no license token for the email encryption feature. The Authentication, Secure Print, and
Tracking license tokens have the same expiration date, while the Print‐ERP, EMR, SSO, and Track
Print‐ID tokens can have individual expiration dates. If a few tokens expire, the license partially
expires. The license fully expires when all the tokens expire.
In a Trial license, the expiration of all the tokens is on the same date.
11.2 How the License System Works
Based on the modules selected in the Printer Group page in Celiveo Web Admin Software, license tokens
are automatically allocated to the devices (both single‐function printers and multi‐function printers),
once the devices are synchronized with Celiveo Web Admin Software.
Similarly, license tokens are allocated to Celiveo Box V7 and Celiveo Smart Appliance (CSA) upon
synchronization with Celiveo Web Admin Software.
Once uploaded, Celiveo Track‐GreenSaver licenses are applied automatically to the Celiveo Track‐
GreenSaver service added in Celiveo Web Admin Software.
In case, a Celiveo Track‐GreenSaver license is not automatically applied while uploading the TGS
license, then the Celiveo Track‐GreenSaver license can also be uploaded manually using the APPLY
TGS LICENSE link on the TGS Service Management page.
After license allocation for the selected modules, the device processes each token and checks for its
status. If a device has valid license tokens for the listed printed modules, then upon synchronization,
Celiveo Web Admin Software shows the license status on the Printer Group and the License
Management screen. License status is also displayed on the “About” window of the device UI.
Print jobs will not be released for the modules whose token is not available or valid. For example, only if
the device has a Print‐ERP token, it can display and print the jobs printed from SAP.
If a device is moved from one group to another, the license tokens are credited back, if the selected
modules are different in the new group. The license file will be removed from the device if the new
group does not have the same modules. It is a prerequisite that the device should be connected to
the network, otherwise Celiveo Web Admin Software would not be able to credit the token back.
11.3 Uploading License Files
License files can be uploaded on the device for the different printing modules and for the Celiveo Track‐
GreenSaver component from Celiveo Web Admin Software.
To upload a license file:
1. In the Main Menu, click LICENSE MANAGEMENT.
The LICENSE MANAGEMENT page appears.
2. In the Related Actions section, click UPLOAD LICENSE FILE.
A browsing popup window opens.
3. Browse to the location of the license XML file, and click UPLOAD FILE.
If the license file is successfully uploaded, the license file entry details appear under the Embedded
License columns in the Celiveo Web Admin section.
The number of license tokens per module appears accordingly in the Total Tokens and the Used Tokens
columns.
For a successful embedded license upload, the machine hostname signature in the license file
needs to be the same as that on the Server where the license is being applied.
Upon uploading, the Celiveo Track‐GreenSaver license tokens are automatically applied to the Celiveo
Track‐GreenSaver service selected in the TGS Management > Service Management window, and the
license file entry details appear under the TGS License columns in the Celiveo Web Admin Software
section.
11.4 Deleting License Files
License files can be deleted, as required, from Celiveo Web Admin for the different printing modules, and
for the Celiveo Track‐GreenSaver component.
To delete a license file:
1. In the Main Menu, click LICENSE MANAGEMENT > EMBEDDED LICENSE.
The Embedded License page appears.
2. Click the check box(es) next to the license files that you want to delete.
A confirmation message appears, prompting for deletion of the license file.
4. Click YES to confirm deletion.
11.5 Viewing License Details
Details can be viewed for two types of license files, as covered in the following sections:
Viewing Embedded License Details
Viewing TGS License Details
11.5.1Viewing Embedded License Details
To view details of the embedded license files:
The Embedded License page displays, showing the uploaded Celiveo Enterprise license files.
The table below explains the Embedded License fields.
FILE NAME Displays the name of the uploaded Celiveo Enterprise license file.
LICENSE TYPE Displays the type of license.
LIC ID Displays the unique ID of the uploaded license.
AUTHENTICATION Displays the number of license tokens for the Authentication feature.
Displays the number of license tokens for the Secure Print feature. For more
SECURE PRINT information on Secure Print, see the Configuring Secure Print for Device Groups
section.
Displays the number of license tokens for the Tracking feature.
TRACKING
For more information on Secure Print, see the Configuring Secure Print section.
Displays the status of the license regarding its validity and integrity.
Validity ‐ whether the license is active or expired.
STATUS Integrity ‐ whether the license file is intact or manipulated.
A green tick mark denotes that the license is valid, and a red cross denotes that
the license is invalid.
Displays the type of license required, for example, for Authentication, Secure
LICENCE TYPE
Print, Tracking, EMR, SSO, and Track Print‐ID.
TOTAL TOKENS Displays the total number of license tokens that are available for each module.
Displays the number of license tokens whose validity has expired, or those
USED TOKENS
which have already been consumed on the relevant devices.
2. To view the details of the license file, under the File Name column, click the name of the Celiveo
Enterprise license file whose details you want to see.
The License Details screen appears, as shown in the figure below.
3. To view further details of a license token, as applied to a particular device, click the DETAILS link
corresponding to the host name or IP of the device.
A popup window appears, as shown in the figure below.
11.5.2Viewing TGS License Details
To view details of the TGS license files:
1. In the Main Menu, click LICENSE MANAGEMENT > TGS LICENSE.
The TGS License page appears, showing the uploaded Celiveo Enterprise license files.
2. To view the details of the uploaded license file, under the File Name column, click the name of the
Celiveo Track‐GreenSaver license file whose details you want to see.
The License Details screen appears, displaying details, such as, the name of the file, the host name
of the device to which the Celiveo Track‐GreenSaver license is applied, the expiration date of the
license, and the type of Celiveo Track‐GreenSaver license.
For more information, see the Viewing Embedded License Details section.
3. To view further details of a license token, as applied to a particular device, click the DETAILS link
corresponding to the host name or IP of the device.
11.6 Removing All License Tokens
All the license tokens can be removed at once from Celiveo Web Admin Software.
Removing license tokens from Celiveo Web Admin Software results in the removal of license tokens
from the devices also.
To remove all the license tokens from all the devices:
2. In the Related Actions section, click REMOVE ALL LICENSE TOKEN. A prompt message appears.
3. Click YES to confirm removal of all the tokens from all the devices, devices, else click NO.
11.7 Configuring Embedded License
1. In the Main Menu, click LICENSE MANAGEMENT.
The License Management page displays.
2. In the Related Actions section, click UPLOAD LICENSE FILE.
The Upload license file popup window displays.
3. Click BROWSE to locate the licnese file in the file system.
4. Click UPLOAD FILE to upload tokens to all the devices.
5. Click the embedded license token to view its details.
Configuring Celiveo Server Services
9. Configuring Celiveo Server Services
Celiveo Server Services acts as a gateway for authentication and secure printing. Celiveo Pull Jobs are
stored in Celiveo Server Services and can be accessed from the device as required. Celiveo Server settings
and configuration for enrollment, authentication, secure printing, and tracking, etc can be performed
using Celiveo Web Admin Software.
1 Configuring Celiveo Authentication Gateway
1.1 Direct User Directory Authentication
Celiveo authentication on multi‐function printers can directly validate a PIN code or swipecard or
proximity badge number against one or more User Directory servers and retrieve user information.
The complete retrieval of the user login name, department, e‐mail address, and full name is carried out
directly by the Celiveo Embedded Solution inside the printer or multi‐function printer.
If HP CM8050 or CM8060 Color MFPs, or single‐function printers are used, you need to use the Indirect
User Directory Authentication procedure described in the next sections as Direct User Directory lookup is
not available for them.
When direct authentication is activated, there is no need to load the user list on every multi‐function
printer. On the other hand, authentication will not be possible if communication with the User Directory
server is not permanently available and fast (in case of cable, router, switch, or server failure).
1.1.1 Configuring User Directory Authentication
The procedure for configuring User Directory authentication is described in the Configuring User
Directory Profile Settings section in the chapter Configuring Celiveo Web Admin.
1.1.1.1 Configuring Alternate Authentication for Multi‐function Printers
If users forget their badge, Celiveo offers two optional alternate authentication methods that can be used
on multi‐function printers:
Badge number: Users type their badge number instead of using their badge or card.
Network credentials: Users enter their User Directory login and password credentials instead of
using their badge or card.
To invoke alternate authentication:
Press the function button (for example, COPY) instead of authenticating with your card. A window
appears, requesting an alternate ID.
Alternate authentication is activated and configured with the Authentication parameters in
the Celiveo Web Admin Software. For more information, see the Configuring Alternate
Authentication for Multi‐function Printers section.
On HP CM8050 and CM8060 Color MFPs, the Alternate Authentication method is offered by the
multi‐function printer itself, and not by HP Access Control Celiveo.
Users press the desired function button (for example, COPY), and the CM8050 or CM8060 Color MFP
displays a screen requesting the badge. This screen includes an ADVANCED button that users can
press in order to use another authorized authentication method for that function.
1.1.2 User Directory Profile Failover
When multiple User Directory profiles are defined, the profiles are used one after the other in a failover
mode. This makes it possible to look for a user in multiple directories.
1.2 Indirect User Directory Authentication
With the Directory Server authentication service, the Celiveo Authentication modules installed on the
devices supply the Celiveo Server Services server authentication service with a user ID and, in return,
receive all the user information, extracted from User Directories.
The complete retrieval of the user login name, department, e‐mail address, and full name is carried out
through the server hosting Celiveo Server Services.
When indirect authentication is activated, there is no need to load the user list on every printer/multi‐
function printer. On the other hand, authentication will not be possible if communication with Celiveo
Server Services is not available (in case of cable, router, switch or server failure).
1.2.1 Multiple Database Support
In some environments, multiple User Directory databases are used to store the badge number and the
user information. Celiveo features a highly flexible system that can collect data from multiple databases,
using common information to retrieve the correct record.
1.2.2 Failover Capability
Up to five Celiveo Server Services addresses can be entered in Celiveo Web Admin Software. If the first
address does not respond after a time‐out, the second address is used, and so on. This makes it possible
to set up multiple Celiveo Server Services for authentication, and to have a complete failover capability, if
a server does not respond in a timely manner.
Support for Multiple User Logins (the Alias Single Sign‐on System)
In a corporate IT environment, a user usually has more than one login: one for Windows, one for the
mainframe, one for the Unix system, one for the ERP, and so on. This means that print jobs from these
various systems come with different login names even though the job owner is one person with one ID
(badge, PIN code, etc.). Furthermore, each piece of login and user information might be in a system‐
specific User Directory database.
Celiveo Server Services makes it possible to define an alias search in multiple User Directory databases
using common information, such as, the employee number, to find the appropriate user record in these
different database systems. As a result, all the print jobs pertaining to a single user, independently of the
login used, are allocated to a single (main) login. The user can then authenticate his/her print jobs using a
single ID.
1.2.3 Configuring Celiveo Server Services Authentication Gateway Settings
Using Celiveo Web Admin Software, create an All Server Groups List with Authentication Gateway feature
to display the Authentication Gateway settings.
To configure the Authentication Gateway settings:
The All Server Groups List page displays.
2. Click the name of the server group to be configured.
3. Select the AUTHENTICATION GATEWAY tab on the server group page.
The table below explains the authentication gateway parameters:
Select the authentiction method from the first drop‐down list.
The available options are:
Directory Server: Select this authentication method to receive all the
user information, extracted from Active Directory or User Directory. If
this method is selected, the list of all the profiles created under User
Directory profile is displayed in the second drop‐down list.
Select the desired user directory profile to be used from the
second drop‐down list.
Offline Authentication: Select this authentication method to get the
lists of authorized users and ID codes (such as, PIN codes, badge
numbers, etc.) for local authentication created using CSV. If this
method is selected, the list of all the profiles created under Offline
authentication profile is displayed in the second drop‐down list..
second drop‐down list. The path for the .CSV file is displayed in the
AUTHENTICATION METHOD Configuration Options text box.
OneSign: Select this authentication method for Single SignOn
authentication.
second drop‐down list.
If this method is selected, then the OneSign profile is displayed
and the Configuration Options text box becomes editable. In the
text box, enter the connection URL and the parameters. Example:
‐The connection URL format is as below:
‐https://<Imprivata OneSign IP address>;7840fb8f‐
1c62‐4db2‐a71c‐03645334751d;hex=yes;rev=no where
7840fb8f‐1c62‐4db2‐a71c‐03645334751d is the product
code for Imprivata OneSign version 4.7 and 4.8 Future 2.
This command line can be modified based on the OneSign settings.
4. Select/enter the appropriate details in the respective fields and click APPLY.
A Modification applied message displays. The selected user directory profile is listed as the
Directory Server.
Celiveo Authentication Gateway supports three databases for authentication.
Directory Server
CSV Local List
Single Sign‐On ‐ currently OneSign is supported.
For more information on OneSign, see Celiveo Connector for Imprivata OneSign Admin Guide.
1.2.4 Configuring Directory Server Authentication
For more information on creating and configuring User Directory Profile, see the Viewing Details of User
Directory Profiles, Creating User Directory Profiles, and The following table describes the Kerberos
Authentication Parameters for configuration: sections in the chapter Configuring Celiveo Web Admin.
1.2.4.1 Getting the Domain Information
For tracking purposes or in order to allow the maximum flexibility for the Active Directory domain name,
you have to configure the Domain Field Name parameter available in User Directory Profiles in Celiveo
Web Admin.
To configure the Domain Field Name parameter, see the Configuring Search Parameters section in the
chapter Configuring Celiveo Web Admin.
1.2.4.2 Configuring CSV Local List Authentication
Celiveo Authentication Gateway can use a CSV file as database of user information for offline
authentication. For more information on the CSV file format, see the Creating CSV List Manually section in
the chapter Configuring Celiveo Web Admin.
CSV Local List Authentication does not support Enrollment. The CSV file must contain at least 2
users. All the information fields are mandatory for every user.
1.2.4.3 Configuring Authentication Gateway to use the CSV file
In Celiveo Web Admin Software, under Offline Authentication profile, create ID List Entry using Create by
CSV. For more information, see Creating Offline Authentication List Entries from CSV Files (Importing)
section in the chapter Configuring Celiveo Web Admin.
To configure Authentication Gateway to use the CSV file (Offline Authentication), see the Configuring
Celiveo Server Services Authentication Gateway Settings section in this chapter.
2 Configuring Celiveo Server Services for Multiple Domain
The multiple domains feature allows a user to choose a desired domain for enrollment.
Since the domain name and login name combination is always unique, multiple domains help to avoid
possible name conflicts for different users for enrollment in Celiveo Server Services.
To configure the Celiveo Server Services settings for multiple domains:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > AUTHENTICATION PROFILES.
The Celiveo Web Admin Software section displays the Authentication Profiles window.
2. Click the Authentication profile for which you want to configure multiple domains.
3. In the selected authentication profile, click ADVANCED to display the Single Domain Mode option. By
default, the check box is selected for the single‐domain mode.
4. Deselect the check box to activate the multiple domain mode.
In a multiple domain setup, the "ConnectionRetries" registry key value should be set to 10 or more
(it is 5 by default), so that all the jobs are printed successfully, especially for slow‐printing printers.
3 Configuring Celiveo User Rights
The User Rights feature enables the administrator to allow or deny access to the device functions on
multi‐function printers and single‐function printers.
During authentication, Celiveo Server Services sends the user’s access right information to the device
authentication manager. Depending on the user’s rights, the user may or may not get an access to the
selected application.
The User Rights feature works with Celiveo authentication agents only, and might display incorrect
behavior with non‐Celiveo authentication agents.
User Rights can be configured using the Directory Server, or the .csv file.
3.1 Activating the User Right Feature
See the Authentication and User Rights Settings section of the table under the Configuring Authentication
for Device Groups section in the chapter Configuring Celiveo Web Admin.
By default, the feature is disabled, and can be enabled, as per requirement.
3.1.1 Configuring User Rights using Directory Server
The User Directory configuration is retrieved from the profile selected in the Authentication settings of
the printer group under the Printer Management section in Celiveo Web Admin Software.
Celiveo Server Services connects with User Directory to get the user details matching the ID that is passed
on by the Celiveo Authentication modules installed on printers. For more information, see the
Configuring User Directory Profile Settings section in the chapter Configuring Celiveo Web Admin.
User Rights are validated using the User Directory filter rights specified in the Authentication and User
Rights settings of the All Printer Groups List.
For more information on User Directory filters, see the Setting up User Directory Filter Rights section.
To configure user rights using Directory Server:
1. In the Main Menu, click ADVANCED CONFIGURATION > PRINTER MANAGEMENT > ALL GROUPS LIST.
The All Server Groups List page appears.
2. Click the specific group for which the user rights is to be set. The printer group details appear.
3. Go to the AUTHENTICATION tab, and select the Enable User Rights check box, as shown in the figure
below.
4. Click APPLY to enable the User Rights.
5. From the drop‐down list, select the Celiveo Agent for the required activity.
6. Click EDIT USER RIGHTS for the specified activity agent, and select the required User Directory and the
type of users (User, Group or Department).
All the rights defined for that user are displayed.
7. Click DENY or ALLOW for the user access, and click OK.
8. Click the Test User Rights hyperlink, and in the Test User Rights pop‐up, enter the user ID and
select the Active Directory profile, and click OK to test the user rights.
9. Click APPLY to save settings.
3.1.1.1 Setting up User Directory Filter Rights
After enabling and setting the user rights, the user rights can be validated using User Directory filters.
To set the user directory filters:
1. Click EDIT USER RIGHTS for the specified Activity and the selected Celiveo agent.
The Edit User Rights pop‐up appears.
2. In the Edit User Rights pop‐up, from the drop‐down list, select Filter, and enter the User Directory
filter information.
A sample of User Directory filter format is shown below:
a. (&(<login_field_name>=<login_value>)((objectCategory=user))
b. (&(<login_field_name>=<login_value>)(objectCategory=user)(descripti =emailallowednot))
3. Replace the Login_field_name with the Login field, as defined in the authentication parameters
and the login_value with the value retrieved for the Login field.
For more information on LDAP queries, visit the link below:
http://technet.microsoft.com/en‐us/library/aa996205%28EXCHG.65%29.aspx
3.1.2 Configuring User Rights using .CSV File
Ensure that the appropriate user rights activities are selected in the User Right Settings section.
For more information on creating and configuring user rights for offline authentication profile, see the
Creating Offline Authentication List Entries by Name section under User Right Settings in the chapter
Configuring Celiveo Web Admin.
3.1.3 Defining User Rights Keys in .CSV file
The table below contains the keys to be used in the .CSV file to define user rights.
A user can be assigned multiple keys to access the device functions.
For more information on creating a CSV file, see the Configuring Authentication Gateway to use the CSV
file section.
The lowercase letters indicate that the device function will be denied while the uppercase letters indicate
that the device function will be allowed (see the example below this table).
User Rights keys Function Applicable for device

All color jobs denied (forced for single‐function printers and multi‐
c
printed in B&W) function printers
b black & white copy denied multi‐function printers only
k color copy denied multi‐function printers only
f fax denied multi‐function printers only
e E‐mail denied multi‐function printers only
s Scan to folder denied multi‐function printers only
o Omtool denied multi‐function printers only
x Kofax denied multi‐function printers only
a Autostore denied multi‐function printers only
The device functions for which User Rights values are not specified in the .CSV file will be allowed by
default.
Example 1: For the letters: ckFE defined in the .CSV file; Color Jobs(c), Color Copy(k) will be denied and
Fax(F), E‐mail(E) will be allowed. All the other functions are allowed.
Example 2: To deny FAX to a user ‐ Enter f in the last column of .CSV file.
Example 3: To allow FAX but deny e‐mail‐ Enter Fe in the last column of .CSV file.
4 Configuring Tracking
The Tracking fields in Celiveo Server Services are configured only if Celiveo Track‐GreenSaver is installed
on a different machine.
See the Configuring Tracking for Device Groups section for more information.
This requires the path of the Celiveo Track‐GreenSaver tracking folder to communicate with Celiveo
Server Services.
5 Configuring User Enrollment
On multi‐function printers, the Enrollment functionality allows the users to directly enroll their proximity
badge or the swipe card IDs through Celiveo authentication on the device. This feature is not available on
single‐function printers due to the lack of the embedded User Directory/Kerberos pre‐authentication
capability.
Indirect live authentication must be configured with the ENROLLMENT ID FIELD NAME defined in the
Celiveo Web Admin Software to perform enrollment. See the Indirect User Directory Authentication
section for further information on how to configure authentication.
5.1 Enrollment Prerequisites
Enrollment is performed after the user pre‐authenticates. The pre‐authentication is not performed by
Celiveo, but by one of the multi‐function printer’s built‐in authentication agents, typically Kerberos or
User Directory.
1. Authentication must be configured. (For more information, see the multi‐function printer product
manual).
2. Verify that authentication works as expected before applying it to enrollment pre‐authentication.
3. In Celiveo Web Admin Software, set the ENROLL ME function in the AUTHENTICATION tab
(authentication and user right settings) of the Group Configuration page.
4. Click APPLY to apply the change.
The pre‐authentication will be called when the user presses ENROLL ME on the front panel of the multi‐
function printer. After a user is pre‐authenticated, he/she is requested to show his/her badge. The user
information obtained from the pre‐authentication is merged with the user ID read from the badge, and
this information is stored either in the Microsoft SQL Server or on the server Hard Disk Drive, or the user
ID is added to the Active Directory or User Directory user record.
Enrollment Process on Devices
1. The user presses the ENROLLMENT button on the front panel of the multi‐function printer.
2. This calls the authentication method linked to the user enrollment agent (typically LDAP or
Kerberos).
3. The user enters his/her user credentials to identify him/herself.
4. If a badge is already enrolled for the user, then an option is given by the enrollment system to un‐
enroll or re‐enrol the badge.
5. The enrollment system of the multi‐function printer contacts the Celiveo Server Services and
performs a user information lookup for the user based on the profile defined in the AUTHENTICATION
GATEWAY option of the Celiveo Web Admin Software.
6. If the user information is found, the enrollment system requests to show the users badge to the
badge reader. Once the badge ID is read, it is stored together with the user information in a secure
place.
Celiveo Server Services offers three options related to the secure storage of the ID and user enrollment
information. Only one enrollment behavior can be active at a given time. As each system has its own
particular benefits, use the one that is needed.
5.2 File Enrollment
Immediate and easy, does not require any database setup. IDs are stored on the server HDD in a
proprietary format. They are encrypted as a TEA (Tiny Encryption Algorithm) for security purposes.
Enrollment data is available to only those devices that authenticate through that particular Celiveo
Server Services instance.
After enrollment, the user will be able to authenticate on the device, only if Celiveo Server Services
is up and running.
This enrollment is usable for a maximum of 5000 enrolled users.
5.3 Enrollment with Roaming
User information is stored in a local or remote Microsoft SQL Server or MSDE database.
Enrollment data is accessible by multiple Celiveo Server Services authentication gateways, and
thus by all the printing devices.
The database can be backed up, browsed, and edited by standard Microsoft SQL Server tools.
5.4 Enrollment in Active Directory
This allows for the standardization of all the user‐related authorizations and credentials on User
Directory.
Enrollment data is accessible by multiple Celiveo Server Services authentication gateways and thus
by all the printing devices.
This enrollment mode requires a test connection login/password that has write access to the field
where the ID is written.
For the above three enrollment processes, the user ID numbers are stored directly in the User
Directory record (in the Enrollment ID Field Name configured in the User Directory Profile settings
in Celiveo Web Admin Software).
5.5 Defining the Enrollment Mode
The Enrollment & Roaming tab in Celiveo Web Admin Software enables you to select the Enrollment type
such as File, Roaming and Active Directory to store the secure data for further authentication.
It is recommended to configure database enrollment settings for the user from the Enrollment tab
only.
5.5.1 Configuring File Enrollment
Enrollment is done once locally on the server HDD; no database is used to store user information.
To configure file enrollment:
1. In the Main Menu, click advance configuration > server management > all server groups list. The
All Server Groups List page appears.
2. Click the required server group to configure file enrollment, and go to the Enrollment & Roaming
tab.
3. In the Enrollment section, from the Enrollment type drop‐down list, select File and click APPLY.
See the Indirect User Directory Authentication section that describes how to configure the Active
Directory/User Directory settings defined in the Authentication Settings window.
Enrollment with storage of user IDs on the Server Hard Disk Drive is now configured.
The information saved in the Server hard disk drive can be updated by scheduling Auto Un‐enrollment.
This helps in case of any change in the user’s profile information at any later stage.
For an advanced configuration of user enrollment, see the Configuring Auto Un‐enrollment and the
Configuring Auto Sync Enrollment sections.
5.5.2 Configuring Enrollment with Roaming
Enrollment with roaming uses a Microsoft SQL Server database to store the user ID information. Selecting
this option enables the device printer to access more than one Print Server. The SQL Server must accept
SQL authentications, not just Windows authentications.
It is recommended to configure database enrollment settings for the user from the Enrollment tab,
and not from the Roam Printing tab.
User un‐enrollment and re‐enrollment will not work, if the database enrollment is done from the
Roam Printing tab.
To configure enrollment with roaming:
2. Click the server group for which the enrollment with roaming is to be configured, and click the
Enrollment & Roaming tab.
3. In the Enrollment section, from the Enrollment type drop‐down list, select Roaming, and click
APPLY.
For more information on configuring SQL server settings, see the Configuring SQL Server Pro‐
files section in the chapter Configuring Celiveo Web Admin.
Make sure that the selected SQL profile is created with the appropriate database credentials.
4. From the SQL Server Profiles drop‐down list, select the SQL profile, and click APPLY.
5. Once the SQL server is linked in the Enrollment and Roaming section, synchronize the Celiveo
Server Services with a SQL profile. For more information on synchronizing a server group, see the
Synchronizing Servers in Server Groups section in the chapter Configuring Celiveo Web Admin.
6. After a successful synchronization of Celiveo Server Services with the SQL profile, click Create
Database to create a SQL server database.
The Pull Printing database must be created first before creating the Enrollment database,
otherwise user un‐enrollment would fail.
a. If there is an existing database, the following prompt is displayed:
Creating the database will erase the existing one, do you want to proceed?
b. Click YES to proceed with the creation of the new database.
c. Upon the creation of the new database, the following message is displayed:
Database creation has succeeded! Click OK.
d. Enrollment with storage of user IDs in an Microsoft SQL Server database is now configured.
7. The information saved in the Server hard disk drive can be updated by scheduling auto‐enrollment.
For more information, see the Configuring Auto Un‐enrollment section. This helps in case of any
change in the user’s profile information at any later stage.
For an advanced configuration of user enrollment, see the Configuring Auto Un‐enrollment and the
Configuring Auto Sync Enrollment sections.
5.5.3 Configuring Enrollment in Active Directory
Enrollment in Active Directory stores user IDs directly in the Active Directory.
2. Click the server group to configure the enrollment in Active Directory, and go to the Enrollment &
Roaming tab.
3. In the Enrollment section, from the Enrollment type drop‐down list, select Active Directory, and
click APPLY.
See the Indirect User Directory Authentication section that describes how to configure the User
Directory settings defined in the Authentication Settings window.
5.6 Managing Enrolled Users
The Celiveo Enrollment Manager allows you to select, edit, and delete users from the enrollment
database. It can be used only for local enrollment and enrollment with roaming (it does not function with
enrollment in Active Directory).
This management is performed by the Celiveo Enrollment Manager software, which is installed at the
same time as Celiveo Server Services.
5.6.1 Prerequisites
The user must have administrative rights on the PC or server where the Enrollment Manager is
installed.
The Celiveo Server Services enrollment (Defining the Enrollment Mode) must have been correctly
installed, configured and tested.
5.6.2 Browsing User List
The screen displays the list of all the users who are enrolled on Celiveo.
At the top of the screen, there are two fields:
SEARCH FOR: Enter the string to look for in the list. The search is not case sensitive. For local
enrollment, enter the full name or login. For enrollment with roaming, use the * as a wildcard. For
example, smi* will find smith and *hn will find John.
IN: Select the field where the string is to be found and click the button provided to launch the
search.
SEARCH: Click SEARCH to launch the user search. The screen displays the list of users matching the
search query.
When the standard enrollment is set (that is, when no enrollment with roaming, or with the Active
Directory), you can search for only the user information in the ID and LOGIN fields, and you must
enter the exact string ‐‐ the wild card character * cannot be used. As a result, only one user can be
searched for at a time in the list. For advanced search capabilities, it is recommended to activate
the ENROLLMENT WITH ROAMING capability.
5.6.3 Selecting Users
Each user record is preceded by a check box. Select the check box to select an individual user, or click
SELECT ALL to select all users displayed in the list.
5.6.4 Editing Users
User records can be edited. Only one record can be selected at a time for modification. Upon clicking
MODIFY, a new window appears in which the user records can be edited.
ID The badge number for the user.
LOGIN The login name for the user.
DOMAIN The domain name for the user.
DEPARTMENT The department name for the user.
E‐MAIL The e‐mail address of the user.
FULL NAME The full name of the user.
HOME DIRECTORY The Windows home directory for the user.
DOUBLE FACTOR/DUAL FACTOR This is the Dual factor password.
Click VALIDATE to save the changes, else click CANCEL to cancel the changes.
5.6.5 Deleting Users
User records can be can deleted from the enrollment database. Deleted users will have to re‐enroll to
gain access to devices.
Select one or more users in the list, and click DELETE. After confirmation, these users are deleted
permanently from the enrollment database.
6 Configuring Aliases ‐ Single Sign‐On
6.1 Alias Single Sign‐On Overview
In Celiveo Secure Pull Printing, Active Directory and/or User Directory can be used to retrieve a user's
single sign‐on credentials. The goal of this action is to allocate all the jobs of a user to a single sign‐on,
even if that user has multiple IDs/logins.
To perform an alias retrieval, the program extracts the user login from the information related to the job,
searches for a match within the Active Directory, and changes it to the corresponding Active Directory
data (which should be unique).
6.1.1 Configuring the Alias Single Sign‐On Feature
To configure the Alias Single Sign‐On feature, see the Alias Single Sign‐On Retrieval Settings section in the
Alias Single Sign‐On Retrieval settings can be configured to retrieve an alias for the job recipient value
during Celiveo job processing. The job owner name is searched for in the Active Directory field entered in
the SEARCH THE VALUE IN FIELD..., using the entry of the second field USING THE SEARCH FILTER as a search filter.
If a record is found, the field value of that record is returned (named in the third parameter).
The user login fields used in the alias function must not contain the value: UNKNOWN
6.1.2 Configuring Value to Search Replacement Settings
The Value to Search Replacement Settings need to be configured for searching across chained
databases. This action is available for both authentication and alias single sign‐on retrieval purposes.
For configuring value to search replacement settings, see the Configuring Value to Search Replacement
Settings section in the chapter Configuring Celiveo Web Admin.
7 Configuring Celiveo Pull Print Service
7.1 Configuring Celiveo Job Retention
Celiveo Server Services retains print jobs in the local storage server, or in a remote storage server. The
Job Retention parameters can be set to define where and how these files are stored, and to manage
notifications for job storage and quota.
If a power failure occurs, the pending print jobs stored on the print server will be deleted.
To configure Job Retention settings:
The All Server Groups List page appears.
2. Click the server group to configure its job retention settings. The server group details are displayed
under the Server List tab.
3. Click the Job Retention tab.
The Job Retention tab displays.
The table below explains the Job Retention parameters:
From the drop‐down list, select Local Storage or Remote Storage,
JOB RETENTION depending on whether you want to retain print jobs in the local
directory, or in a remote directory on the server.
Enter the directory location in which the user jobs are to be stored.
For example: C:\Program Files\Celiveo\Celiveo Print Server\Jobs
The storage location can either be a local or remote, provided that the
user has read/write access permissions on the shared remote folder.
Since the print jobs are owned by users, ensure that the directory is
PATH accessible by all users.
For remote storage, the machine with the remote directory should be
in the same domain as that of Celiveo Server Services.
Enter the remote directory location in the path fields using the server
name or IP address, in the following format, for example:
\\server1\shareduser\jobs
RETRY COUNT In case of remote storage, enter the number of retry count.
RETRY INTERVAL In case of remote storage, enter the number of retry interval.
In case of remote storage, enter the domain name of the machine
DOMAIN
where the print jobs are to be stored.
In case of remote storage, enter the user name and password of the
USER NAME & PASSWORD
machine where the print jobs are to be stored.
STORAGE FOLDER PATH Path to the jobs folder location,. e.g. \\server\\shareduser\jobs
USER NAME Enter Domain/User name of the machine where the remote storage
folder is located.
PASSWORD Enter Password of the remote storage folder path
Enter the maximum authorized storage capacity per user and/or the
department in MB to store jobs. By default, the value is set to 500 MB.
DISK QUOTA PER USER /
DEPARTMENT (MB) Beware that color printing can result in very large jobs (some‐
times greater than 1GB) depending on the application and the
printer driver used.
Enter the maximum number of simultaneously stored jobs for each
user and department.
JOBS QUOTA PER USER /
DEPARTMENT (JOBS)
Up to 150 print jobs can be stored simultaneously for a single
user or department.
Enter the directory location where the jobs are to be stored on a
TEMPORARY FOLDER STORAGE PATH
temporary basis.
RUN TEMP FILE CLEANUP SCHEDULER
Set the required time to run the Temp File Cleanup Scheduler.
AT
ENABLE SECRET JOB NAME Enable this option to provide a secret replacement name for jobs in the
REPLACEMENT Job Name for Reports text box.
Click this check box to enable notification, in case of failure in job
storage.
Click this check box to enable and configure the job storage failure
notification settings, and enter the details in the Job Storage Failure
ENABLE JOB STORAGE FAILURE
Notification box that pops up.
NOTIFICATION 1. Click the settings symbol next to the check box to configure the
job storage failure notification setting. Job Storage failure
notification pop‐up appears.
2. Enter the details such as Notification Type, From, Subject and
Message in the pop‐up box, and click OK.
By default, the Enable Quota Notification check box is checked to
enable the quota notification system to send different types of warning
ENABLE QUOTA NOTIFICATION e‐mails to users. Notification includes automatic e‐mail sending when
users approach, reach, or exceed their print job quotas).
For more information, see the Configuring Quota Notification section.
Select this option to enhance job metadata security.
Selecting the Secure Job Metadata check box enables securing the job
metadata.
SECURE JOB METADATA This feature enhances security for database and file system.
FIPS license needs to be uploaded to enable the feature .
This feature will enable sending an e‐mail notification to the end
user for any job submission failure. For example: if the copy from the
ENABLE FAILURE NOTIFICATION temp folder to Job folder fails, an e‐mail notification is sent to the
user informing that the job has been deleted.
Select the check box to activate this feature.
Select the checkbox to force print jobs whose job name contains a
FORCE B/W PRINTING IF JOB NAME
defined term, to print in black and white. Enter the term in the text
CONTAINS
box.
(Available only if FORCE B/W PRINTING IF JOB NAME CONTAINS is
enabled)
OVERRIDE B/W PRINTING IF JOB
Select the checkbox to supersede the preceding rule of force print in
NAME CONTAINS
black and white. Enter the term in the text box. Jobs whose job
name contain the term defined here can be printed in colour.
7.2 Configuring Quota Notification
The quota notification system can be fine‐tuned to send different types of warning e‐mails to users.
By default, the Quota Notification check box is enabled in Celiveo Web Admin Software, under the Job
Retention tab settings. The settings can be defined for the notifications to be sent to the user through e‐
mail notification.
The notification can be sent for the job quota and availability of the disk quota space.
There are three types of quota notifications:
Approaching quota notification ‐ This warning e‐mail is sent when a user is about to reach the
defined printing quota.
Reached quota notification ‐ This warning e‐mail is sent when a user has reached the defined
printing quota.
Exceeded quota notification ‐ This warning e‐mail is sent when a user has exceeded the defined
printing quota.
To configure the notification thresholds:
2. Click the server group for which you want to configure the quota notification settings. The server
group details are displayed under the Server List tab.
3. Go to the Job Retention tab, and click the Settings symbol next to the Enable Quota Notification
check box to define the Quota notification settings. The Quota Notification section appears as
shown in the figure below.
4. Under NOTIFICATION SETTINGS:
a. Select the number of jobs before the print job quota is reached that will serve as the trigger for
the notification. For example, if you enter 5 and the job quota is 50, the user will receive an
approaching quota notification after the 45th print job.
b. Select the number of megabytes before the disk space quota is reached that will serve as the
trigger for the notification. For example, if you enter ‘5’ and the disk space quota is 100, the
user will receive an approaching quota notification after the disk space reaches 95MB.
The two notification thresholds can be combined so that a user receives the quota notification
e‐mail when the first of these thresholds is reached.
7.2.1 Advanced Options
The ADVANCED OPTIONS link in the Quota Notification section allows you to configure the logs linked to the
quota notification system.
INTERNAL NOTIFICATION TCP PORT Enter the TCP port used for the internal quota notification system.
Defines the trace level (that is, the amount of information written in
the log files according to the degrees of importance).
From the drop‐down list, select the required option:
None
TRACE LEVEL
Error
Warning
Verbose
Extra verbose
TRACE PATH Enter the path where the log files are to be stored.
Configure the E‐MAIL SETTINGS explained in the table below:
FROM E‐mail address of the sender (usually the administrator e‐mail address)
APPROACHING QUOTA Subject of the e‐mail sent when a user is approaching the quota. Variables are
E‐MAIL SUBJECT available for customizing, as explained below this table.
REACHED QUOTA E‐MAIL Subject of the e‐mail sent when a user has reached the quota. Variables are
SUBJECT available for customizing, as explained below this table.
EXCEEDED QUOTA E‐MAIL Subject of the e‐mail sent when a user has exceeded the quota. Variables are
SUBJECT available for customizing, as explained below this table.
APPROACHING QUOTA The e‐mail text sent to users notifying them that they are approaching the
E‐MAIL CONTENT quota. Variables are available for customizing, as explained below this table.
REACHED QUOTA E‐MAIL The e‐mail text sent to users notifying them that they have reached their
CONTENT quota. Variables are available for customizing as explained below this table.
EXCEEDED QUOTA E‐MAIL The e‐mail text sent to users notifying them that they have exceeded their
CONTENT quota. Variables are available for customizing, as explained below this table.
The following variables can be used in some of the fields mentioned above. The available variables are
the following:
{0} to indicate:
the number of remaining jobs or disk space before reaching the quota limit. This value must be
above 0 and followed by jobs or MB.
the number of jobs or disk space above the limit. This value must be above 0 and followed by
jobs or MB.
{1} to indicate the limit. This value must be followed by jobs or MB.
{2} to indicate the name of the job.
{3} to indicate the name of the user.
At the bottom of the Quota Notification window, there is a Reset Email setting to default value
hyperlink to reset the current values to the default value. Click this option as required.
7.3 Configuring Print Job Purge
With Celiveo Job Purge component installed, print jobs are purged from the server at regular intervals.
The expiration frequency is, by default, set to hourly.
To modify the purge frequency:
1. Click Start > Control Panel > Administrative Tools > Task Scheduler.
The Task Scheduler window appears.
2. Double‐click Job Purge in the Active Tasks list and select Properties from the Actions pane on the
right hand side.
The Job Purge Properties window appears with the General tab selected by default.
3. Select the Triggers tab and click Edit after selecting the already existing trigger from the list of
triggers.e Edit Trigger window appears.
4. Configure the frequency settings, as required.
7.4 Configuring Celiveo Job Purge to Generate Expired Job Log Files
Expired Job Logs are log files (in .txt format) that collect information about the expired print jobs that
have been deleted by Celiveo Job Purge.
Celiveo Job Purge can be configured to generate the expired job log files whenever it runs as per its
scheduled setting in Windows Task Scheduler.
7.4.1 In Windows Server 2003
To configure Celiveo Job Purge to generate expired job log files in Windows 2003:
1. Go to Start > Programs > Accessories > System Tools > Scheduled Tasks.
The Scheduled Tasks folder window opens, showing a list of scheduled tasks.
In case, you want to run Celiveo Job Purge manually, then in the server machine, go to
C:\Program Files\Celiveo\Celiveo Server Services, and double‐click sjps_job_purge.exe
2. Right‐click Job Purge, and select Properties.
The Job Purge properties window opens under the default Task tab.
3. In the Run text box (highlighted in the figure below), enter the following command:
"C:\Program Files\Celiveo\Celiveo Server
Services\sjps_job_purge.exe"\0
To disable the expired job logs, remove \0 at the end of the argument.
4. Click Apply and OK.
After this configuration, a purge.log file will be generated in the C:\Program Files\Celiveo\Celiveo
Server Services folder path, whenever Celiveo Job Purge runs.
7.4.2 In Windows Server 2008 R2
To configure Celiveo Job Purge to generate expired job log files in Windows Server 2008 R2:
1. Click Start > Control Panel > Administrative Tools > Task Scheduler.
The Task Scheduler window appears.
2. Double‐click Job Purge in the Active Tasks list and select Properties from the Actions pane on the
right hand side.
The Job Purge Properties window appears with the General tab selected by default.
3. Select the Actions tab.
The Actions tab appears.
4. Click Edit after selecting the existing action from the list of actions.
The Edit Action window appears.
5. In the Add Arguments text box, enter the following command:
"C:\Program Files\Jetmobile\Celiveo Server
Services\sjps_job_purge.exe"\0
To disable the expired job logs, remove \0 at the end of the argument.
6. Click OK.
A message window appears prompting to confirm the new argument.
7. Click OK.
After this configuration, a purge.log file will be generated in the C:\Program Files\Celiveo\Celiveo Server
Services folder path, whenever Celiveo Job Purge runs.
In version 7.0.5, SecureJet Server Services (known as Celiveo Server Services or CSS for 8.0 and
higher versions), the default path of the logs cannot be changed.
7.5 Configuring Roaming Pull Printing
The Celiveo roaming printing functionality allows for the release of documents stored on any Celiveo
Server Services on the Intranet from a device equipped with Celiveo Secure Pull Printing.
This functionality offers many powerful workflow capabilities, such as:
A user in China prints a document for his colleague in New York.
The job is securely stored on the server closest to the user in China.
The American recipient reaches a multi‐function printer in New York and authenticates.
The document sent to print by his Chinese colleague is listed.
The American recipient requests the job release.
The document is sent directly from a server in China to a multi‐function printer in New York.
The Celiveo Server Services architecture uses print job tickets stored on a shared Microsoft SQL Server
database (software not provided with Celiveo), These tickets include information only about print
jobs—the print job data remains on the servers where the print jobs are stored. The devices get the list of
print jobs from their contact print server. This list includes local jobs as well as all the tickets stored on the
shared database for that user.
Local print job storage print queues can appear on client PCs based on the IP address of the PC, this policy
is defined in the Active Directory. A roaming user can then always have a local print pull printing queue
defined on his laptop. This architecture makes it possible to always use local print job storage, ensuring
that no useless communication takes place between the servers and the multi‐function printers.
7.5.1 Prerequisites for Roaming Printing
Roaming printing requires a database on one server (this server does not need to have Celiveo Server
Services installed). The server should be:
a functional Microsoft SQL Server 2000 or newer (with SQL or mixed Windows/SQL
authentication),
or
an MSDE database (SP3A with SQL or mixed Windows/SQL authentication), and administrator
access.
with
SQL/MSDE network configuration: TCP (default port 1433)
If the connection is not possible with the database server, MDAC 2.8 needs to be installed on each server
equipped with Celiveo Server Services.
The firewall of every gateway and every server equipped with Celiveo Server Services network
connection should be set up to accept communication through the MS SQL server port (1433 by default).
Before starting, check that the Celiveo Server Services can ping the SQL database server.
The Celiveo Solution supports only SQL mixed mode authentication.
7.5.2 Configuring Roaming
To configure Roaming:
1. In Celiveo Web Admin Software, from the Main Menu, add a Celiveo Server Services Profile and
link it to a server group.
2. Click the required Celiveo Server Services group, and go to the Enrollment & Roaming tab.
3. In the Roaming section, click the Activate distributed architecture support check box to enable
roaming.
4. From the SQL Server drop‐down list, select the SQL Profile, and click APPLY.
For more information on creating SQL server and configuration, see the SQL Server Profiles section in the
The table below provides an explanation of the Roam Printing fields.
USER NAME Enter the user name of the selected SQL server.
PASSWORD Enter the password of the selected SQL server.
Replace the default string after Data Source= with the IP address of the
database server.
CONNECTION
For example:
Provider=SQLOLEDB;Data Source=192.168.0.1
ACTIVATE DISTRIBUTED
Click this check box to activate the Roaming Printing.
ARCHITECTURE SUPPORT
7.5.3 Testing the SQL Database Connection
To test the SQL database server connection:
1. In the Main Menu, click ADVANCE CONFIGURATION > MANAGE PROFILES > SQL SERVER PROFILES. The SQL
Server Profiles page appears.
2. Click the SQL Server profile you want to test the database connection.
Make sure that the SQL Server profile is configured with the validated parameters.
3. Click TEST CONNECTION to test the connection to the database. If it succeeds, the following message
appears:
“Connection to the database server has succeeded.”
Otherwise, an error message appears. Make sure to enter the valid information.
If the following message appears:
“This SQL server does not exist or access is denied”
it means that a firewall (on the database server, on a gateway, or on the Celiveo Server Ser‐
vices) may be blocking the SQL communication.
7.5.4 Creating Job Tickets Database
You must create the database on the MS SQL or MSDE server. This operation must be performed only
once from Celiveo Web Admin Software.
Once the SQL server is configured with the appropriate settings, and linked in the Enrollment and
Roaming section, synchronize the Celiveo Server Services with the SQL profile.
For synchronization of server groups, see the Synchronizing Servers in Server Groups section in the
1. After a successful synchronization of Celiveo Server Services with the SQL profile, click CREATE
DATABASE to create the SQL server database.
If the database already exists, a confirmation message prompt appears before the new database
replaces the existing one:
“Creating the database will erase Delete existing table the existing one, do you want to proceed?”
2. Click YES to proceed with the creation of the new database.
Upon the creation of the new database, a success message is displayed.
3. Click OK.
7.5.5 Synchronizing the Roaming Database
Celiveo Server Services will still work if the roaming database communication fails, but the roaming
capability will be disabled, and only local jobs are displayed.
If the roaming database goes offline and print jobs are received by one of the related Celiveo Server
Services, the roaming database server is not notified.
The administrator can then re‐synchronize the database in Celiveo Web Admin Software.
To synchronize the roaming database:
2. Select the server group that you want to synchronize.
3. Go to the Enrollment and Roaming tab, and in the Roaming section, click ADVANCED.
4. Click Sync all servers to re‐synchronize the database.
The database will query all the servers for their current jobs, and get updated.
7.5.6 Roaming Database Sync Interval Seconds
This feature will automatize the synchronization process.
To set the roaming database sync interval:
2. Select the server group that you want to synchronize.
3. Go to the Enrollment and Roaming tab, and go to the Roaming section.
4. In the Roaming Database Sync Interval (seconds) text box, enter the number of seconds to define
the interval between each synchronization process..
8 Configuring Unencrypted Secure Printing
Celiveo Pull Printing can secure the release of unencrypted jobs sent directly to a Celiveo‐enabled printer
or to Celiveo Server Services. These jobs are controlled and tracked as Celiveo non‐encrypted jobs. Note
that the jobs themselves are not encrypted, but their release is made secure as only the recipient can
release them.
8.1 Unencrypted Secure Printing for ERPs
Unencrypted Secure Print Files Format
Job data must start with <Esc>%-12345X@PJL<LF> followed by header lines as in the sample
below. <Esc> is ASCII 27 decimal, 1B hexadecimal
Data in bold is sample text that should be changed to the real values.
Text in italics is information about the data and should not be included in the header.
Dates have the following format: yyyymmddhhmmss00
Actual print spool data starts after @PJL EOSJ<LF>.
Spool data must end with the following sequence:
<Esc><Esc><Esc>E<Esc>%-12345X
This open format secures the delivery of print jobs generated, for example, by DOS, Unix, AS/400 (SCS),
or Mainframe (SCS) applications.
8.2 Unencrypted Secure Printing for SAP R/3
Celiveo Pull Printing can secure the release of unencrypted SAPScript and SmartForms print jobs sent
directly to a Celiveo‐enabled printer or to Celiveo Server Services. These jobs are controlled and tracked
as Celiveo non‐encrypted jobs. Note that the jobs themselves are not encrypted, but their release is
made secure such that only the recipient can release them.
ABAP List printing is not supported as its header cannot be modified.
8.3 Modifying the Device Type
The device type has to be modified to interface R/3 and Celiveo. See the R/3 manuals to find out how to
modify a device type.
8.4 Replacing the Job Header Sequence
The existing job header must be replaced in the device type with the sequences listed below. Note that
all the lines shown should be appended one after the other without any carriage returns between them.
(Carriage returns were inserted in the listing below only for the purpose of improved readability.)
\e%-12345X@PJL\r\n@PJL ENTER LANGUAGE=SJLLIGHT\r\n
@PJL SCOMMAND=STORE\r\n
@PJL USERNAME=$(USER)\r\n
@PJL SJOB NAME=$(DSN)$(SUFFIX1)$(SUFFIX2)\r\n

@PJL SJOB ID=$(SPOOLID)\r\n
@PJL SJOB DATE=$(LAUNCHED_UTC)\r\n
@PJL SJOB EXPIRYDATE=2015030110300000\r\n
@PJL EOSJ\r\n
@PJL ENTER LANGUAGE=PCL\r\n\eE
8.5 Replacing the Job Trailer Sequence
The following sequences must be used to replace the existing job trailer in the device type.
\eE\eE\eE\e%-12345X
8.6 Activating the Device Type
Once the device type is saved, activate it in the production environment and use it to produce
documents. To verify that the modification is active, print to a PCL5 file and verify its header/footer.
9 Configuring Encrypted Secure Printing
Celiveo can secure the print jobs content by encrypting the data and job ownership information.
The Celiveo Driver Plug‐In software (in case of Push Printing) is installed where the encryption is required:
on the server or on the Windows systems.
9.1 AES Encryption with PKI Technology
For more information on Celiveo Corporate Encryption Keys, see the Celiveo Encryption Keys in the
9.1.1 DES Encryption
This encryption technology is based on the widely used DES symmetrical encryption. A random key is generated
for every single job and used to encrypt the document. The key is encrypted and injected in the print job. The
printer decrypts the key using decryption patterns and then decrypts the print job using the decrypted key.
9.1.2 Raw Printing
When this option is selected, no encryption is applied, and the document is printed as it is ‐ no job
header/trailer is added.
This allows for fast printing. This option must be selected when using the Celiveo Box.
10 Deploying and Configuring Serverless Pull Printing
10.1 Serverless Pull Printing Overview
The Serverless Pull Printing approach helps to reduce the load on the central Celiveo Server Services (CSS)
by moving all the job‐rendering activities from the server machine on to the client machines, and the
caches stored on the device.
In this approach, user authentication is done by the central Celiveo Server Services, but if the central
Celiveo Server Services is down, authentication is done by the authentication cache as a failover
mechanism.
The job retrieval for the printing process is done by the central Celiveo Server Services, in the first user
session. However, in the subsequent user sessions, the Pull Printing Directory cache stored on the device
takes care of the job retrieval process. The jobs are released from the Serverless Pull Printing client
running on client desktop machines.
The Authentication cache can be enabled in the Authentication profile under the Authentication Process
section, and the Pull Printing Directory cache can be enabled in the Secure Printing tab of the All Groups
List in the Celiveo Web Admin Software.
For more information, see the ENABLE AUTHENTICATION CACHE and the Pull Printing Directory Cache sections
in the chapter Configuring Celiveo Web Admin.
If the Authentication cache is enabled, then after the first successful authentication through Celiveo
Server Services or User Directory server, the details of the logged‐in user is accordingly inserted into the
Authentication cache on the storage media (hard disk, USB, CF) in the device.
The next time, when the user identifies on the device while Secure Server Services or User Directory
server is down, the user is authenticated by looking up in the Authentication cache stored on the device.
If the Pull Printing Directory cache is enabled, then after the first successful retrieval of the print job list
from the Celiveo Server Services, the print job details, such as, the host name or IP address of the
Serverless Pull Printing client machine from which the user had printed the maximum number of jobs in
the last session, is accordingly inserted into the Pull Printing Directory cache on the storage media (hard
disk, USB, CF) in the device.
The next time, when the user attempts to print, then to extract the print jobs, the Pull Printing Directory
cache in the device uses the host name or the IP address to connect to the Serverless Pull Printing client
machine with the maximum number of print jobs by the user in the last session.
Ensure that the workstation/laptop of the user is turned on so that the device can pull the print
jobs from the workstation/laptop.
10.2 Installing Central Celiveo Server Services
The central Celiveo Server Services can be installed through the Celiveo Products Installer.
Ensure that Authentication Gateway and Pull Printing Services features are selected during the
installation process. For more information on the Celiveo Server Services installation process, see the
chapter Installing Celiveo Server Modules.
10.3 Configuring Celiveo Server Services
To enable Serverless Pull Printing, the roaming print functionality should be enabled on the Celiveo
Server Services. See the Configuring Roaming Pull PrintingConfiguring Celiveo Job Purge to Generate
Expired Job Log Files section for more details on configuring Roaming Printing.
10.4 Saving Celiveo Server Services Configuration
The Celiveo Server Services settings can be saved using the Celiveo Server Services Configuration utility
(setting configuration can not be saved in Celiveo Web Admin Software).
1. In the Celiveo Server Services, under the Job Server tab, click SAVE CONFIGURATION, as shown in the
figure below.
The configuration file created must be saved with the name SDPP.reg.sjpscfg. The file extension is
appended by default.
Replace the existing SDPP.reg.sjpscfg file in the Serverless Pull Printing installation package with the new
file created by clicking Save Configuration.
The settings have to be re‐exported, in case, there are any changes in the Celiveo Server Services
settings.
Serverless Pull Printing is configured by the SDPP.reg.sjpscfg file while installing the solution by launching
the Microsoft Installer (.msi) file provided with the package.
The Serverless Pull Print parameters are installed along with the solution to enable Serverless Pull
Printing supporting multiple servers.
This configures the Serverless Pull Print clients, along with the in‐built option to enable the
authentication cache and the pull printing directory cache through Celiveo Web Admin, without having to
depend on the central Secure Server Services instances, and assists in configuring all the roaming
parameters and other relevant properties.
10.5 Installing Client Side Serverless Pull Printing Service
10.5.1Prerequisites
Windows XP, Vista, 7, Server 2003 or 2008 ‐ (64‐bit)
1GB of RAM
Enough HDD capacity to store user’s print jobs
.NET Framework 3.5
Microsoft Visual C++ 2005 Redistributable
You can install the client‐side Serverless Pull Printing service using the setup.exe installer file available
with the package.
To install client‐side Serverless Pull Printing Service:
1. Ensure that the required prerequisites are installed on the client machine.
2. Update the SDPP.reg.sjpscfg file in the installation folder of the package with the saved
configuration.
The SDPP.reg.sjpscfg file contains all the configuration settings.
3. Double‐click the Setup.exe installer file to install the Serverless Pull Printing service on the client‐
machine.
The installation can also be launched from the command line by typing the following two
commands: “‐p” and "installDirLocationForSPP".
For example: setup.exe ‐p "installDirLocationForSPP"
Pull Print Service installation on the client side is performed through the silent mode.
Pull Print Service along with Job Purge will be installed on the client machine.
The client‐side print server can be deployed through remote scripts.
10.6 Configuring Client‐Side Serverless Pull Printing Service
Serverless Pull Printing service (client) takes its configuration information from the central Celiveo Server
Services at startup. Whenever there is an update to the configuration of the central Celiveo Server
Services, all the Serverless Pull Printing service clients will be notified to update their configuration
settings.
10.6.1Automating the Serverless Pull Print Queue during Installation
The Printer_Creation_SJ.bat file that is shipped with the installer can be used for automating the
Serverless Pull Print queue creation.
The default script created by Printer_Creation_SJ.bat is "TempUser_201" and; will install the “HP Color
LaserJet 4550 PS" driver on the system.
As an administrator, you can modify the following:
1. Queue Name
2. Driver Name
To automate Serverless Pull Print Queue during installation:
1. Right‐click the Printer_Creation_SJ.bat file, and click Edit to open the file in the text editor.
2. Replace “Tempuser_printer201” with the queue name of your choice, or with “Celiveo Pull
Printing”.
3. Replace “HP Color LaserJet 4550 PS” with the driver name of the printer being used.
4. Save and close the file.
Quota and Rule‐based printing are supported on the Serverless Pull Printing client using Track‐
PM.
The job folder of a user on the same client machine is visible to the other users.
If the client machine is down, the jobs can be listed but not printed.
10.7 Configuring Serverless Pull Printing IP Tracking
The Serverless Pull Printing IP Tracking feature provides a reliable way for Celiveo Server Services to
resolve a Serverless Pull Printing client hostname into IP address, regardless of the DNS system being
used. This allows a Serverless Pull Printing clients to switch between different networks (for example,
computers with wired or wireless connections).
To configure Serverless Pull Printing IP Tracking, ensure that Celiveo 8.0 Celiveo Server Services and 8.0
Serverless Pull Printing client are installed on your system.
Then follow the steps below:
Modifying the SPPConfig.xml File on Serverless Pull Printing Client
Configuring DB Gateway Services
Configuring Stale CSS Record Cleanup Scheduler, as explained in the chapter Configuring Celiveo
Web Admin.
10.7.1Modifying the SPPConfig.xml File on Serverless Pull Printing Client
The SPPConfig.xml file is available with the Serverless Pull Printing installer. Please make the following
changes in the file:
<root>
<DBGateways>
<DBGateway>
<ServerName></ServerName>
<ServerPort></ServerPort>
<RetryInterval></RetryInterval>
<NumberOfRetry></NumberOfRetry>
</DBGateway>
<DBGateway>
<ServerName></ServerName>
<ServerPort></ServerPort>
<RetryInterval></RetryInterval>
<NumberOfRetry></NumberOfRetry>
</DBGateway>
<DBGatewaySelectionMethod></DBGatewaySelectionMethod>
<IpDetectionBy></IpDetectionBy>
</DBGateways>
</root>
The table below provides the description of the entries:
Fields Values
ServerName Enter the hostname or IP address of the DB Gateway server.
ServerPort Enter the DB Gateway server port. The default value is 65212.
Enter the time interval (in seconds) after which the Serverless
RetryInterval
Pull Printing client tries to connect to DB Gateway services.
Enter the number of times the Serverless Pull Printing client will
NumberOfRetry
try to connect to DB Gateway Services.
Enter the DB Gateway server selection method.
Default ‐ When no value is entered, the first available DB entry is
used, otherwise, it fails over to the next available DB in the order,
DBGatewaySelectionMethod if unable to connect.
Random ‐ If you enter the value as “random”, a DB entry is
randomly selected, otherwise it fails over to the Default logic, if
unable to connect.
Fields Values
Enter the server IP detection method.
Server ‐ When no value is entered, then DB Gateway server is
IpDetectionBy used by default for IP detection.
Client ‐ If the value entered is “client”, then Serverless Pull
Printing client is used for IP detection.
10.7.2Configuring DB Gateway Services
The DB Gateway services can be set along with the TCP port and the Backend port while adding and
modifying Celiveo Server Services using Celiveo Web Admin Software.
For more information on adding Celiveo Server Services and its settings, see the Adding Celiveo Server
Services to All Servers List section in the chapter Configuring Celiveo Web Admin.
By default, the DB gateway service is enabled in Celiveo Web Admin Software. Use Celiveo Server
Services Configuration utility to disable it.
To disable DB Gateway services:
1. Launch Celiveo Server Services, and go to the Job Server tab.
2. In the Job Server tab , uncheck the Enable DB Gateway Services checkbox.
3. Click Apply, and OK to disable DB Gateway Services, and to save the settings.
10.7.3Configuring Stale CSS Record Cleanup Scheduler
For more details on configuring and removing stale IP addresses from the database, see the Configuring
Stale CSS Record Cleanup Scheduler section in the chapter Configuring Celiveo Web Admin.
Ensure that the EnableSqlGateway registry entry is removed from the SDPP.sjpscfg.reg file before
including this entry in the Celiveo Pull Printing client installer file. This is required to ensure that DB
Gateway Service is not installed on client machines while installing Celiveo Pull Printing.
11 Configuring Cache Settings for Serverless Pull Printing
The Celiveo Enterprise solution allows Serverless Pull Printing such that the printing device can
authenticate, list jobs and print without contacting Celiveo Server Services.
This can be achieved by configuring the Cache settings as described below.
There are two types of cache:
Authentication Cache: used for authenticating users when the Authentication server is down.
Pull Printing Directory Cache: used for retrieving print jobs using the details of the cached
Serverless Pull Printing client to reduce the load on the Celiveo Server Services.
The caches are built when a user is using the system for the first time.
The caches are disabled by default. You can enable the caches from Celiveo Web Admin Software.
For more information, see the ENABLE AUTHENTICATION CACHE and the Pull Printing Directory Cache sections
The number of records that a cache can hold depends on the capacity of the storage media (hard disk,
USB, CF) of the device. In case of HP legacy devices, the cache storage limit is 300 records; and there is no
deactivation after 30 days, while the cleanup is performed after 30 days (on reboot).
The Serverless Pull Printing instance that has the maximum number of jobs will be cached in the
device.
The user credential records are encrypted before being stored in the cache.
12 Configuring Printer Port Pooling
Printer port pooling allows Celiveo Server Services to handle a large number of jobs flowing to one
unique print queue. It is mandatory to define multiple ports, else a bottleneck effect on incoming jobs
may occur, with jobs being delayed for release due to other large pending jobs.
In the Ports tab of the print queue, activate the ENABLE PRINTER POOLING option. You can then activate
multiple ports for this queue, where incoming print jobs will be dispatched, as they come in. In theory,
there is no limit to the number of ports.
When using Windows Server 2003 and Outlook 2007, the cumulative size of all the port names for
a single queue cannot exceed 210 characters.
13 Configuring Scheduler
13.1 Auto Un‐enrollment
This feature can be configured in the Celiveo Web Admin Software to automatically unenroll user(s) who
have been inactive for a fixed time period.
Auto‐Unenrollment will deactivate the user ID, Password and Login. Once unenrolled, the users have to
re‐enroll to use Celiveo Server Services.
13.1.1Configuring Auto Un‐enrollment
To configure Auto Un‐enrollment:
2. Click the server group for which you want to configure the Auto Unenrollment settings. The server
group details are displayed under the Server List tab.
3. Click the Enrollment & Roaming tab to open the Enrollment page.
4. In the Enrollment section, click ADVANCED to display the Auto Un‐enrollment check box.
5. Click the Auto Un‐enrollment check box to activate the Auto Un‐enrollment feature.
6. Enter the number of days in the Inactivity Period text box for the time period of inactivity after
which auto‐unenrollment will occur, for example, 60 days.
7. Click CONFIGURE. The Configure Scheduler page opens.
The auto‐unenrollment feature will modify the enrolled users details as below:
For Enrollment using file, the user ID, Password and Login will be deactivated in the file.
For Enrollment with Roaming, the user ID, Password and Login will be deactivated in the
Microsoft SQL Server database.
For Enrollment to Active Directory, the user ID, Password and Login will be deactivated in the
Active Directory.
13.1.2Configuring Scheduler
The table below explains the Scheduler parameters.
Field Description
START TIME From the drop‐down list, select the synchronization start time.
The Repeat Every field will schedule the synchronization according to the
REPEAT EVERY selection of hours/minutes using the drop‐down list, and this will apply to all
the selections, that is, Daily, Weekly or Monthly.
ADVANCED Click to view the Advanced option, such as, Scheduler Type.
The Scheduler Type field will further configure the scheduler to define the
periodicity of synchronization. that is, whether Daily/Weekly or Monthly, as
selected from the drop‐down list.
If the Daily option is selected
If the Daily option is selected, the number of days has to be specified for the
periodic synchronization to take place.
The figure above illustrates that the synchronization will take place every fifth
day, and will repeat every one hour. In case, the synchronization has to be
scheduled only once a day, then select 24 hours. The first synchronization will
SCHEDULER TYPE
be at the time specified in the Start Time box.
If the Weekly option is selected
If the Weekly option is selected, enter the number of Week(s) to define the
periodicity of synchronization.
Similarly, select the day of the week to specify the day of synchronization.
Field Description
If the Monthly option is selected
If the Monthly option is selected as , then two options are available:
Select a particular day of the month on which the synchronization should run.
OR
Select from the drop‐down list(s) the number order of a week in the month,
and the day.
13.2 Auto Sync Enrollment
This feature allows automatic updation of user profile information from Active Directory for Enrollment
(file) and Enrollment with Roaming.
The Auto Sync Enrollment option is present under the Enrollment tab
13.2.1Configuring Auto Sync Enrollment
To configure auto‐sync enrollment:
1. Ensure that enrollment is configured.
3. Click the server group for which to configure the Auto Sync Enrollment settings.
4. Click the Enrollment & Roaming tab to access the Enrollment screen.
5. In the Enrollment section, click ADVANCED to display the Auto Sync Enrollment check box.
6. Click the Auto Sync Enrollment check box to synchronize enrollment automatically.
7. Click CONFIGURE. The Configure Scheduler page appears.
For more information on configuring schedulers, see the Configuring Scheduler section.
After the scheduler is configured, the scheduler sends an e‐mail every time the user information is
auto‐synchronized.
14 Configuring Track‐Print‐ID
The Track‐Print‐ID is a feature that enables stamping of some information on the pages printed through
Celiveo. Track‐Print‐ID stamping license option is enabled in Celiveo Web Admin and during
synchronization the device group details along with server details are sent to the device. The Track‐Print‐
ID is configured in Celiveo pull print queue and the details are documented either on the first page or all
pages so that they can be identified.
Track‐Print‐ID will work only with PCL 5 driver and Raw printing settings.
14.1 Enabling License for Track‐Print‐ID in Celiveo Web Admin
Upload the Track‐Print‐ID license using Celiveo Web Admin software. To upload a license, see the
sections Requesting Licenses and Uploading License Files. Once the required license is uploaded, create a
device a group with Track‐Print‐ID option enabled and synchronize the device group details with Celiveo
Server Services. The device group configuration setting is sent to the device. To create a device group
with Track‐Print‐ID feature, see the Creating Device Group section for more information.
While creating a device group, the Authentication criteria from the Profile drop‐down list needs to
be enabled first, to enable the Track Print‐ID options.
14.2 Enabling Celiveo Pull Print Queue Stamping
To enable Celiveo Pull Print Queue stamping Track‐Print‐ID:
1. Go to START > DEVICE AND PRINTER LIST.
2. In the Device and Printers list, right‐click on the Celiveo pull‐print queue and click PRINTER
PROPERTIES.
The pull‐print queue properties window opens.
3. Click the CELIVEO PULL PRINTING tab and in the Encryption settings section, from the drop‐down
menu, select Raw printing.
4. In the Track‐Print ID section, select the Enable Track‐Print‐ID check box.
The Configure button is enabled as shown in the below figure.
14.3 Configuring Celiveo Pull Print Queue Stamping
To configure Celiveo Pull Print Queue Stamping for Track print‐ID:
1. In the Track Print‐ID section, click CONFIGURE to configure the track print‐ID settings.
2. From the Stamping drop‐down lists, select the required options from each drop‐down menu in the
order required.
As the required Stamping options are selected, a sample line is shown in the Sample Stamping Text
box in the order from 1‐9 separated by a minus (‐) symbol.
If there are less than nine entries, then leave the drop‐down menu as NONE.
3. Select the Force BW check box, if the print jobs to be in black and white.
By default, the Force BW is disabled.
4. Select Stamp each page check box, if the print jobs stamping details selected need to appear on
each page.
5. In the Font section, from the Position drop‐down menu, select the position of the stamping text
where it needs to be placed.
6. From the Font Size drop‐down menu, select the appropriate font size of the text.
The font size value varies from 1‐12.
7. Set the required value in the X and Y drop‐down lists.
The movement in the position of Track Print ID details will be visible only after changing the
values of X and Y by at least 100 units if the print driver used has a maximum resolution of
600 dpi.
8. Click APPLY and OK to apply and save the Track Print‐ID configuration.
14.4 Limitations
1. Only PCL5 printer driver is supported.
2. Stamping is applied only on Raw printer settings not for No encryption and AES encryption
settings.
Configuring Celiveo Track‐GreenSaver
10. Configuring Celiveo Track‐GreenSaver
This section describes how to configure and manage Celiveo Track‐GreenSaver (TGS).
The Celiveo Track‐GreenSaver software tracks user activities, such as, printing, copying, and scanning on
Print Queues and on Celiveo‐enabled devices. Celiveo Track‐GreenSaver implements rule‐based printing,
cost profiles, print quota, and billing.
The Celiveo Track‐GreenSaver service is managed through the Celiveo Web Admin Software. The
following Track‐GreenSaver settings can be configured:
Track‐GreenSaver Service settings: The Track‐GreenSaver services can be started or stopped, and
the status is displayed in the Microsoft Services list (services.msc). For more information, see the
section Configuring Celiveo Track‐GreenSaver Service.
Paper Size settings: The desired paper sizes can be set and applied for print jobs. For more
information, see the section Setting up Paper Sizes.
Cost Profile settings: The print cost profile criteria can be set and applied to print jobs for specific
printer models. For more information, see the section Configuring Printer Setting.
Printing Rules and Restrictions: The printing rules and restrictions, as applied, are sent as custom
email notification, in case of violation of any rule or restriction. For more information, see the
section Configuring Rule Based Printing.
Print Quota settings: The print quota can be set and applied to users, user groups, and
organizational units. For more information, see the section Configuring Quota.
Applied Group/OU settings: Settings as configured for an individual user can be applied to an
entire group or organizational unit. For more information, see the section Configuring Applied
Group/OU Settings.
Track‐GreenSaver users: Furthermore, the Track‐GreenSaver‐specific users can be deleted from
the User Management section. For more information, see the section Deleting Celiveo Track‐
GreenSaver Service‐Specific Users.
Custom Database settings: Custom database fields can be configured with the user data retrieved
from the Track‐GreenSaver databases. For more information, see the section Configuring Custom
Database Fields.
©2016 Jetmobile Pte Ltd Celiveo Enterprise 8.0.116.0627 Administrators Guide
Celiveo Track‐GreenSaver (TGS) can be accessed from the TGS Management link in the Main Menu of
Celiveo Web Admin Software shown below.
The following actions are available in the TGS Management section:
Configuring Celiveo Track‐GreenSaver Service
Deleting Celiveo Track‐GreenSaver Service‐Specific Users
Configuring Advanced Track‐GreenSaver Settings Options
To view Track‐GreenSaver reports in another language, go to the options settings of the web
browser and set the preferred language.
1 Configuring Celiveo Track‐GreenSaver Service
The Celiveo Track‐GreenSaver service runs in the background of the server where it is installed, tracks the
print jobs, and logs them to the configured Celiveo Track‐GreenSaver database.
Celiveo Track‐GreenSaver also sends out e‐mail notification to the user when a job is restricted, using the
SMTP server settings configured in the Celiveo Web Admin Directory Synchronization and Notification
page. For more information, see sections Configuring Directory Synchronization and Notification and
Configuring Celiveo Authentication Gateway.
To configure Celiveo Track‐GreenSaver Service:
1. In the Main Menu, click ADVANCE CONFIGURATION > TGS MANAGEMENT > SERVICE MANAGEMENT. The
Service Management page appears.
The table below explains the Service Management parameters:
Displays a list of all the Celiveo Server Services servers that have the Celiveo
TGS SERVER
Track‐GreenSaver Administrator installed and running.
Displays the machine on which Celiveo Track‐GreenSaver Administrator is
TYPE
installed, that is, Server.
Displays the name of the database which Celiveo Track‐GreenSaver is
DATABASE NAME
connected.
Displays the status of Celiveo Track‐Green Saver Services whether it is
SERVICE STATUS running or not. If the service status is not known, this column shows the
status as “unknown”.
LICENSE STATUS Displays the status of the Track‐GreenSaver license, whether valid or expired.
Click the EDIT icon if you want to edit the settings for a selected Celiveo
Track‐GreenSaver after clicking the corresponding check box.
The Edit TGS Service Settings popup appears for the selected Celiveo Track‐
GreenSaver.
The Local Server fields are not editable. Click the REMOTE SERVER radio button
to enable the fields for editing, as shown in the figure below.
• Server Name ‐ Enter a new server name, if required.
• Domain ‐ (Optional) Enter a new domain name, if required.
The Domain Name usually remains the same.
EDIT SETTINGS • Service Name ‐ (Optional) Enter a new service name, if required.
The Service Name usually remains the same.
• User name ‐ Enter a new user name.
• Password ‐ Enter a new password.
Click APPLY to apply the new settings. A confirmation message appears,
“Modification Applied”.
Click CONNECTION to test the connection with the new Celiveo Track‐
GreenSaver service settings.
If the connection succeeds, a success message appears, else the following
error message appears, “Connection failed, invalid username or password”.
The following actions are available in the Related Actions section to manage the Celiveo Track‐
GreenSaver Service:
Starting Service ‐ To start the Celiveo Track‐GreenSaver services, click START.
A message appears, prompting to start the service. Click OK to confirm.
Stopping Service ‐ To stop the Celiveo Track‐GreenSaver services, click STOP.
A message appears, prompting to stop the service. Click OK to confirm.
Restarting Service ‐ To restart the Celiveo Track‐GreenSaver services, click RESTART.
A message appears, prompting to restart the service. Click OK to confirm.
Applying License ‐ To apply a license to the Celiveo Track‐GreenSaver feature, click APPLY LICENSE. A
message appears, prompting to apply the license. Click OK to confirm.
A success message appears. In case, there is an issue with the license, such as, an invalid or a
expired license, an error message appears.
For more information, see the Viewing TGS License Details section in the Configuring Celiveo Web Admin
chapter.
2 Deleting Celiveo Track‐GreenSaver Service‐Specific Users
The Celiveo Track‐GreenSaver users can be deleted from this section.
To delete Celiveo Track‐GreenSaver Service‐specific users:
1. In the Main Menu, click ADVANCE CONFIGURATION > TGS MANAGEMENT > USER MANAGEMENT.
The User Management page appears. A list of available users added from the User Directory
Profiles section is displayed.
For more information, see the Configuring User Directory Profiles section in the chapter
Configuring Celiveo Web Admin.
2. Click the check box(es) corresponding to the users that you want to delete.
4. When prompted, click OK to confirm deletion.
3 Configuring Advanced Track‐GreenSaver Settings Options
The following Advanced Setting actions are available for Celiveo Track‐GreenSaver:
Configuring Advanced Track‐GreenSaver Settings
Setting up Paper Sizes
Configuring Custom Database Fields
Configuring Active Directory Settings
3.1 Configuring Advanced Track‐GreenSaver Settings
The following functions can be configured from the Advanced Settings section of TGS Management:
User Quota Update Refresh Timer
Negative Balance on User Accounts
Document Title Masking for Confidentiality
3.1.1 To configure Advanced Celiveo Track‐GreenSaver settings:
1. In the Main Menu, click ADVANCE CONFIGURATION > TGS MANAGEMENT > ADVANCED SETTINGS OPTIONS >
ADVANCED SETTINGS. The Advanced Settings page appears, as shown in the figure below.
The table below explains the Advanced Settings section:
Select YES or NO depending on whether you want to allow the user to print
even after the user’s balance is finished, and goes into negative. The user
ALLOW A NEGATIVE BALANCE quota can be either reset or updated according to the option selected in the
ON USER ACCOUNTS Set Quota page.
For more information, see the How to Update table row in the Configuring
Quota section.
Click the MASK DOCUMENT TITLES check box, if you do not want to show the title
CONFIDENTIALITY
of the document to be printed.
2. Click APPLY to apply the new settings. The “Modification Applied” message appears to confirm the
new advanced settings.
3. (Optional) To revert to the default settings, click RESET DEFAULT SETTINGS.
3.2 Setting up Paper Sizes
The desired paper size, and cost settings for black & white and color printouts can be assigned to the
predefined paper types from the Paper Sizes section.
To set up paper size:
PAPER SIZES. The Paper Sizes page appears, as shown in the figure below.
PAPER TYPE Displays the predefined type of paper for which the setting is applicable.
SIZE Displays the size of paper for each paper type.
GRAYSCALE COST Displays the cost for a black & white printout for each paper type.
COLOR COST Displays the cost for a color printout for each paper type.
Click the EDIT link corresponding to the paper type for which you want to edit
EDIT
the paper size settings.
Click the DELETE link corresponding to the paper type entry that you want to
DELETE
delete from the Paper Sizes section.
2. To add a globally applicable page size, click ADD GLOBAL PAGE SIZE.
The Set Page Size Cost popup appears, as shown in the figure below.
3. In the Set Page Size Cost popup, enter the desired values in the appropriate fields: Page Size
Settings, Height and Width (in inches), Grayscale Cost per Page, and Color Cost per Page (in the
desired currency), and click APPLY.A new paper size entry is added in the Paper Sizes page.
3.3 Configuring Custom Database Fields
Active Directory LDAP fields in Celiveo Track‐GreenSaver can be custommapped with the user data, for
example, the email ID field, retrieved from the Track‐GreenSaver database.
To configure custom database fields:
CUSTOM DATABASE FIELDS.
The Custom Database Fields page appears.
2. In the Custom User Fields section, from the Database Field to Populate drop‐down list, select the
appropriate field of the Track‐GreenSaver database from where to map the user data to the Active
Directory LDAP fields.
The database fields in the drop‐down list are populated from the configured Track‐Green‐
Saver databases available in Celiveo Web Admin. For more information, see the Configuring
User Directory Profiles section.
3. In the AD LDAP Field Name text box, enter the name of the Active Directory field from where you
want to retrieve user data for the Celiveo Track‐Green‐Saver database field.
4. Click APPLY to apply the custom database settings.
3.4 Configuring Active Directory Settings
ACTIVE DIRECTORY SETTINGS. The Active Directory Settings page appears.
2. In the Nested Groups and Organization Units section, select the Traverse Nested Groups/OU
When Applying Group Membership check box, if you want to access the nested user sub‐groups
or organizational units inside the configured Active Directory when you apply group memberships.
3. Click APPLY to apply the Active Directory settings.
4 Configuring Printer Setting
This section describes how to configure and manage printer settings. Printer Settings can be accessed
from the Printer Settings link in the Main Menu of Celiveo Web Admin Software, as shown in the figure
below.
The following cost profile setting actions are available through the Printer Setting feature:
Setting Default Cost Profile
Setting Pull Print Cost Profile
Setting Cost Profile
As an administrator, you can configure profiles with printing cost settings. These profile settings can be
applied on a printer‐to‐printer basis, for example, a specific cost profile can be set for a specific printer
model type.
4.1 Setting Default Cost Profile
Default print cost profiles with details, such as, page size and per page printout cost, can be set and
applied to specific printer models for common print jobs.
Default cost profiles are applicable to all the printers, if there is no specifically defined cost profile for
specific printers.
To set a default cost profile:
1. In the Main Menu, click ADVANCE CONFIGURATION > PRINTER SETTING > DEFAULT COST PROFILE. The Default
Cost Profile page appears.
2. To add global paper size, and customized paper size, click ADD PAGE TYPE.
The Global Paper Sizes and the Customize Paper Sizes sections appear, as shown in the figure
below.
3. In the Default Cost Profile section, click the COST PER PAGE radio button, and enter the cost that you
want to set for the black & white printouts in the BLACK & WHITE COST text box, and/or for the color
printouts in the COLOR COST text box, as applicable.
Alternatively, click the ADVANCED radio button to override the global page settings, and to
customize the print job settings, as per the required criteria of page size, color, and duplex.
4. (Optional) Enter the discount percentage that you want to offer on the printing cost of each page if
the print job is duplex.
5. In the Global Paper Sizes section, click ADD PAGE TYPE to add the page cost settings for the print
jobs. The Set Page Size Cost popup appears.
6. Enter the cost for a black & white printout, and the cost for a color printout in the given text boxes,
and click APPLY to apply the default cost settings.
A “Modification Applied” confirmation message appears, else an error message appears.
A cost profile entry is added to the Global Paper Sizes and the Customize Paper Sizes sections.
The Global Paper Sizes entry can be edited by clicking EDIT, and deleted by clicking DELETE, while the
Customize Paper Sizes entry can only be edited.
4.2 Setting Pull Print Cost Profile
You can set pull print cost profiles for the print jobs that are stored on the server.
To set pull print cost profile:
1. In the main menu, click ADVANCE CONFIGURATION > PRINTER SETTING > PULL PRINT COST PROFILE. The Pull
Print Cost Profile page appears.
2. In the BLACK & WHITE COST text box, enter the cost that you want to set for the black & white
printouts, and/or for the Color printouts in the COLOR text box, as applicable.
3. Click APPLY to apply the pull print cost settings.
4.3 Setting Cost Profile
You can create profiles with the cost details for the different types of printouts.
To create a cost profile:
1. In the MAIN MENU, click ADVANCE CONFIGURATION > PRINTER SETTING > COST PROFILE.
The Cost Profile page appears with the list of the available cost profiles, if any.
The following actions are available in the Related Actions section to manage cost profiles:
Create Cost Profile
Delete Cost Profile
2. To create a cost profile, click CREATE in the Related Actions section. The Create Profile popup
appears.
3. Enter the printer name, the cost value for a Black & White printout, and the cost value for a Color
printout in the appropriate fields, and click APPLY.
The new cost profile entry is added under the Cost Profile column, and in the Main Menu.
In the example as shown in the figure above, a cost profile entry is seen with the following details:
B&W Cost ‐ 0.05, Color Cost ‐ 0.1.
4. To delete a cost profile entry, click the check box corresponding to the cost profile that you want to
delete, and click DELETE in the Related Actions section.
The selected cost profile entry is removed from the Cost Profile section.
5 Configuring Rule Based Printing
This section describes how to configure and manage printing usage by different types of users as
regulated by the rules configured by the administrator. You can access the Rule Based Printing feature
from the Rule Based Printing link in the Main Menu of Celiveo Web Admin Software, as shown in the
figure below.
The following features can be configured under Rule Based Printing:
Printing Rules
Restriction Actions
Quota
Applied Group/OU
Rule Based Printing allows you to set printing rules, restrictions, and quotas for three types or levels of
users configured in Celiveo Track‐GreenSaver:
Users ‐ refers to all the users identified by Celiveo Track‐GreenSaver. Celiveo Track‐GreenSaver
can be configured to show users from one or more additional domains. It allows the administrator
to set restrictions on a ‘per user’ basis, view an individual user’s printer usage, and to view and
assign account balance to individual users.
User Group Defaults ‐ refers to the list of all the user groups. It allows the administrator to activate
tracking per user group, set quotas or restrictions on an entire Active Directory Group, and adjust
default user settings, for example, for a team or a department within an organization.
Organization Units (OUs) ‐ refers to a list of organizational units. It allows the administrator to set
quotas or restrictions on an organizational unit (OU), for example, for all the staff in an
organization.
5.1 Configuring Printing Rules for User Groups and Organizational
Units
Printing rules can be applied to individual users, user groups, and organizational units to regulate the
printing jobs by them, based on the criteria defined by you in Celiveo Track‐GreenSaver.
To configure printing rules:
1. In the Main Menu, click ADVANCE CONFIGURATION > RULE BASED PRINTING > PRINTING RULES. The Printing
Rules page appears under the default User Group/OU Restriction tab.
2. From the drop‐down list, select either USER DIRECTORY OR OFFLINE AUTHENTICATION, depending on
whether you want to apply the printing rules on a user list retrieved from the user directory list
(LDAP) or the offline authentication list configured in Celiveo Web Admin.
3. From the second drop‐down list, select the available user directory list or the offline authentication
list available in Celiveo Web Admin Software.
For more information on configuring user directory and offline authentication lists, see the
Configuring User Directory Profiles and the Offline Authentication Lists sections in Configuring
Celiveo Web Admin chapter respectively.
4. Select either of the radio buttons: USER, GROUP, or OU, depending on the user level which you want
to apply the printing rules.
5. Additionally, to narrow down your search for specific users, user groups, or organizational units,
accordingly type the name, and click SEARCH. The search result list of the users, or the user groups,
or the organizational units matching your search criteria, appears.
A maximum of hundred users can be displayed on a page. To see the next page, click the for‐
ward arrow link. To apply printing rules to the selected users in a page, click APPLY before
moving on to the next page for selecting users and applying printing rules.
6. Click the check boxes corresponding to the user, user group, or the organizational unit which you
want to apply the printing rules.
7. Click EDIT PRINTING RULES.
The list of printer rules is displayed.
5.2 Configuring Printer Restrictions
Printing rules can be also applied to individual printers to regulate the printing jobs by them, based on
the criteria defined by you in Celiveo Track‐GreenSaver.
To configure printer restrictions:
1. In the Main Menu, click ADVANCE CONFIGURATION > RULE BASED PRINTING > PRINTING RULES. The Printing
Rules page appears under the default User Group/OU Restriction tab.
2. Click the PRINTER RESTRICTION tab. The Printer Restriction list appears, as shown in the figure below.
3. Click the check boxes corresponding to the printing restrictions that you want to apply, and click
OK. For more information on printing restrictions, see the Configuring Restriction Actions section
below.
4. If you want to edit the existing printing restrictions for a user, user group, or organizational unit,
click EDIT DENY LIST. Reset the rules by checking/unchecking the check box corresponding to the
printing rules, as required.
5. Click APPLY to apply the printing rules to the selected user, user group, or organizational unit.
5.3 Configuring Restriction Actions
The Restriction Actions feature allow you to configure the custom notification email messages in case of
violation of any printing rule. Restriction actions can be set directly on a printer or a group of printers.
Default settings can be turned on for new users, and/or printers added to the Active Directory. An
example of a restriction action: a print job that has been restricted from printing can be set to be
automatically deleted by Celiveo Track‐GreenSaver.
If Celiveo Track‐PM is installed, then in case of breach of a printing rule, popup messages are displayed in
the status bar notification area.
To set printing restriction actions:
1. In the Main Menu, click ADVANCE CONFIGURATION > RULE BASED PRINTING > RESTRICTION ACTIONS. The
Restriction Actions page appears, displaying the list of restrictions, as shown in the figure below.
2. Click SHOW ALL to view the description of all the restriction actions.
The table below describes the printing restriction actions:
Apply Restrictions
Allows the administrator to set a limit for the number of pages that can be
PAGE COUNT EXCEEDED printed in a single job.
Example: Not more than 10 pages can be printed in a single print job.
Allows the administrator to set the number of copies that a user can print
COPIES EXCEEDED
per job. Printing will be restricted after a defined number of pages.
Allows the administrator to restrict a job from printing if the print is
duplex/not duplex. (The ‘duplex’ property is set while selecting the
printer for printing a job).
DUPLEX RESTRICTIONS
In some circumstances, the print jobs may be in duplex, but the
printer may support one‐side page printing only. In such cases,
select DENY, as a one‐side page print cannot be duplex.
Allows the administrator to permita print job if the user's account balance
ACCOUNT BALANCE is finished, in case, soft quota is enabled, but sends an account balance
notification to the user.
Allows the administrator to set a balance amount for the user’s account
LOW BALANCE WARNING
below which a warning will be issued to the user.
Allows the administrator to define a cost amount per job. If the user
JOB COST RESTRICTIONS attempts to print a job whose cost exceeds the allowed amount, that
particular print job will be restricted.
Allows the administrator to define the spool file size. Users will be
restricted from printing jobs of spool file size greater than the values
FILE SIZE EXCEEDED specified.
Example: A job that spools a file that is larger than, say, 20 KB, will be
restricted.
Allows the administrator to restrict a print job, based on the title of the
TITLE RESTRICTION document. The document whose title matches the strings will be
restricted from printing.
COLOR RESTRICTIONS Allows the administrator to restrict color job printing.
B&W RESTRICTIONS Allows the administrator to restrict Black&White print jobs.
Allows the administrator to select the day and the time period to disallow
printing jobs.
DAY AND TIME RESTRICTIONS
Example: Print jobs could be restricted on Saturday and Sunday between 10
A.M. to 6 P.M.
Allows the administrator to set one of the following options when a print
job is submitted by a user who does not have a Celiveo Track‐GreenSaver
account:
PPRINT SECURITY
• Delete the Print Job
• Allow the Print Job
• Allow the Print Job and Apply the Default User Settings
COLOR LIST Allows the administrator to restrict color printing for a list of files.
3. Click APPLY to apply the printing restriction actions.
5.4 Configuring Quota
Print quota, as regulated by account balance, can be applied to individual users, user groups, and
organizational units, on the printers. Some key features of the account balance‐based print quota setting
include:
Automatic balance deduction, as per page cost, depending on factors, such as, black & white or
color prints, page size, duplex prints, and so on
Negative balance setting to enable printing even when the account balance is finished
To set up quota:
1. In the Main Menu, click ADVANCE CONFIGURATION > RULE BASED PRINTING > SET QUOTA.
2. From the drop‐down list, select either User Directory or Offline Authentication. Depending on
whether you want to apply the print quota on a user list retrieved from the user directory list
(LDAP) or an offline authentication list available in Celiveo Web Admin Software.
3. From the second drop‐down list, select the required user directory or offline authentication user
profile available in Celiveo Web Admin Software.
For more information on configuring user directory profiles and offline authentication profiles, see
the Configuring User Directory Profiles and the Offline Authentication Lists sections respectively.
4. Depending on the user level to apply the print quota, select one of the three radio buttons: User,
Group, or OU.
5. To refine your search for a specific user, user group or an organizational unit, type the name and
click SEARCH. The search result list of the users, or the user groups, or the organizational units
matching your search criteria appears.
6. Click the check box corresponding to the user, user group, or organizational unit to apply the print
quota.
7. Click EDIT ACCOUNT BALANCE.
The Edit Account Balance fields are displayed, as shown in the figure below.
The table below describes the printing restriction actions:
Select the UNLIMITED PRINTING or the LIMIT BY ACCOUNT BALANCE radio button,
depending on whether you want to allow printing without the limitation
of account balance, else a print quota limited by the user’s account
UNLIMITED PRINTING, LIMIT BY balance.
ACCOUNT BALANCE
In either case, if the account balance reaches zero, printing will be
restricted.
If you select LIMIT BY ACCOUNT BALANCE, enter the existing primary account
ACCOUNT BALANCE
balance of the user.
If you select LIMIT BY ACCOUNT BALANCE, enter the secondary account
SECONDARY (PAID) BALANCE
balance that is updated upon extra payment by the user.
Update Account Schedule
SCHEDULE UPDATES TO PRIMARY Click this check box if you want updates on the primary balance ofthe
BALANCE user.
From this drop‐down list, select the method based on which you want to
update the user balance:
• Increase Balance By: This option increases the existing balance by an
HOW TO UPDATE
amount entered by you in the given text box
• Reset Balance To: This option resets the balance to an amount
entered by you in the given text box
From this drop‐down list, select the frequency at which you want to
update the user balance:
• Daily ‐ This updates the existing balance of the user on a daily basis.
From the second drop‐down list, select the frequency of days at
which you want to update the user balance.
WHEN TO UPDATE • Weekly ‐ This updates the existing balance of the user on a weekly
basis in the given text box. From the second drop‐down list, select
the frequency of days at which you want to update the user balance.
• Monthly ‐ This updates the existing balance of the user on a monthly
basis in the given text box. From the second drop‐down list, select
the frequency of days at which you want to update the user balance.
From the drop‐down list, enter the fixed time at which you want to
AT WHAT TIME OF DAY
update the user account balance.
8. Click APPLY to apply the printing account balance quota settings for the user, user group, or
organizational unit.
If you want to edit an existing print quota account balance of a user, user group, or organizational
unit, click EDIT ACCOUNT BALANCE, and reapply the print quota settings.
However, if multiple users, user groups or organizational units are selected, including the users for
whom the print quota account balance had been set, the Edit Account Balance fields display as only
empty because multiple screens are not available to display print quota account balance settings
for multiple users.
Upon applying the account balance with multiple users selected, the print quota is uniformly
applied to all the selected users, user groups, or organizational units.
5.5 Configuring Applied Group/OU Settings
A selected user’s settings can be applied to an entire user group, and organizational unit.
Users ‐ refers to all the users identified by Celiveo Track‐GreenSaver. Celiveo Track‐GreenSaver
can be configured to show users from one or more additional domains. It allows the administrator
to set restrictions on a ‘per user’ basis, view an individual user’s printer usage, and to view and
assign account balance to individual users.
User Group Defaults ‐ refers to the list of all the user groups. It allows the administrator to activate
tracking per user group, set quotas, or restrictions on an entire Active Directory Group, and adjust
default user settings, for example, for a team or a department within an organization.
Organization Units (OUs) ‐ refers to a list of organizational units. It allows the administrator to set
quotas or restrictions on an organizational unit (OU), for example, for all the staff in an
organization.
To configure applied group/organization unit settings:
1. In the Main Menu, go to ADVANCE CONFIGURATION > RULE BASED PRINTING > SET APPLIED GROUP/OU. The
Set Applied Group/OU page appears.
2. From the drop‐down list, select either User Directory or Offline Authentication, depending on
whether you want to retrieve user group profiles or organizational units from the user directory list
(LDAP), or an offline authentication list available in Celiveo Web Admin.
3. From the second drop‐down list, depending on the selection in the first drop‐down list, select the
required user directory user, or the offline authentication user, as available in Celiveo Web Admin
Software.
For more information on configuring user directory and offline authentication lists, see the
Configuring User Directory Profiles and the Offline Authentication Lists sections in Configuring
Celiveo Web Admin chapter respectively.
4. To refine your search for a specific user, enter the characters of the name and click SEARCH.
The search result list of the users matching your search criteria, appears.
5. Click the check box(es) corresponding to the user(s) whose settings you want to apply to groups or
organizational units, then click EDIT GROUP/OU.
The list of users appears with the predefined settings.
6. In the Group/OU list box, select the user group(s) or organizational unit(s) to apply the selected
user’s settings.
7. To apply the selected user’s quota and restrictions to the selected user group, or organizational
unit, click the RESET THIS USER'S QUOTA AND RESTRICTIONS TO THE SELECTED GROUP/OU check box.
Select this option very carefully because it deletes all the existing account balance of the
selected user group, or the organizational unit.
8. Click APPLY to apply the selected user settings to the selected user group(s), and organizational
unit(s).
To edit an existing applied setting for a user group, or organizational unit, click EDIT GROUP/OU, then
reapply the user settings.
However, if multiple users are selected, including the users from whom the settings had been
applied, the Edit Group/OU list displays as un‐selected because multiple screens are not available
to display the applied user group or organizational unit settings for multiple users.
Upon selecting the group or the organizational units with multiple users, the settings of all the
selected users are applied uniformly to the user groups, or the organizational units.
Configuring Celiveo Track‐GreenSaver Reports
11. Configuring Celiveo Track‐GreenSaver
Reports
Celiveo Track‐GreenSaver Reports is a tool to assess device usage, providing graphical view of parameters
such as the number of print jobs, the total number of pages printed, color jobs, black & white jobs, print
job cost, average cost per day, print job cost savings details, the number of users, the number of print
servers, the number of print queues, the time of the last print job, print job status, whether deleted or
expired, and so on.
Celiveo Track‐GreenSaver Reports also display specialized reports, such as, the top printers in the order
of the number of pages printed per printer, and the top users in the order of the number of pages printed
by each user.
1 Accessing Celiveo Track‐GreenSaver Reports
To access Celiveo Track‐GreenSaver Reports:
1. Launch Celiveo Track‐GreenSaver Reports from Start > Programs > Celiveo > Track‐GreenSaver
>TGS Reports.
Or, click the TGS Reports icon on the desktop.
2. Enter a valid username and password in the text boxes.
3. Select a domain from the Log on to drop‐down list.
4. Click LOGIN.
The first‐time login to the Celiveo Track‐GreenSaver Reports Center page may take a few minutes,
while it gets set up for its first use.
2 Celiveo Track‐GreenSaver Reports Page Layout
The basic layout of the Celiveo Track‐GreenSaver Reports Center page is shown below. On the right side
of the page, a summary of the recent printing behavior is displayed, such as, the printers that were used
the most, the users who printed the most, the total number of pages printed, and the total amount of
money saved. Effective Environmental Impact section displays savings in terms of wood, electricity, and
emissions using Celiveo Track‐GreenSaver Reports.
To display the various categories of reports that can be generated, on the navigation menu, click Reports.
3 Viewing Celiveo Track‐GreenSaver Reports
To view Celiveo Track‐GreenSaver Reports:
1. Click Reports on the navigation menu of the Celiveo Track‐GreenSaver Reports Center page. The
reports page appears displaying the various categories of reports that can be generated.
2. Click a report tab on the left‐hand side of the page to display the reports available in that category,
grouped into folders by subheadings.
3. Click a report to open it in a new window.
There is an expected difference between EWS page count and Track‐GreenSaver page count. The
page count on EWS shows that the printed pages are normalized against the A4 page size.
For example:
one legal print = 1.3 ‘A4’ prints
one 11X17 print = 2 ‘A4’ prints
one A3 print = 2 ‘A4’ prints
one B4 print = 1.5 ‘A4’ prints
4 Tracking Deleted or Expired Jobs
Celiveo Track‐GreenSaver keeps track of all the secure print jobs that were deleted by the user, or
expired, or auto‐deleted by the Job Purge settings.
Celiveo Track‐GreenSaver generates reports for print jobs that are manually deleted, expired, and auto‐
deleted.
The reports also show the deletion method, whether manual deletion by the user, or auto‐deletion using
Job Purge settings.
The expiry period for print job(s) is defined in the Control Panel of the device.
5 Report Types
Every report group has two types of reports, Summary and Detailed.
5.1 Reports by Summary
This type of report provides the summary of the selected category.
5.2 Reports by Details
This report type provides detailed information to the next level within the report itself.
6 Report Categories
These are the various report categories available in Report Center.
Report Category Description
User Reports Generates reports per user
Generates reports as per groups – defined in the Active Directory and/or
User Group Reports
custom defined groups in TGS
Department Reports Generates reports as per departments –defined in the Active Directory
Organizational Unit Generates reports as per Organizational Units – defined in the Active Directory
Generates reports as per Workstation hostnames from which the prints are
Workstation Reports
issues. This is applicable for only print queue based tracking
Generates reports as per server. This is useful for a multi‐server setup where in
there are more than one TGS administrator instance installed in the
Server Reports
environment. A standard Report center setup would have only one server
report
Printer Reports Generates reports as per printer IP address or print queue based
Printer Group Reports Generates reports as per printer groups ‐ defined on All Groups List page.
Generates reports based on bandwidth for different categories. The reports
Bandwidth Reports are subcategorized per Printer, Printer Group, Server, Size, User, User Group
and Workstation
Graphs Generates graphs for various options of reports mentioned under this category
Report Category Description
Generates graphs of the jobs which were denied printing due to restriction
Savings Reports defined at the server level. This is only applicable in an environment where
printing restrictions are set.
Administration Generates administrative reports for configuration, last use, user credits
Reports (applicable only when Cost Quota is set).
Generates environmental impact reports based on savings in terms of wood,
Environmental Reports
electricity, and emissions.
My Printing Generates specific reports for the logged in user
Configuring Celiveo Print Manage
12. Configuring Celiveo Print Manage
Celiveo Print Manage is a web‐based application designed for Celiveo Enterprise. Celiveo Print Manage
simplifies job and PIN code management for the end‐user. The application enables user to generate PIN
code from user page or mobile device. It also allows a user access to the jobs folder, where jobs can be
viewed and deleted.
This chapter provides complete information for installing, configuring, and troubleshooting Celiveo Print
Manage software.
Make sure that the Everyone rights is given to the Temp folder in C:\Windows or the device does
not synchronize. The following error message is displayed, “Failed To Retrieve Model.”
1 Introduction
This section provides an overview of the benefits and prereqisites of Celiveo Print Manage.
1.1 Administrator Benefits
The administrator no longer has to assign PIN codes individually.
The PIN code can be randomly generated, or emailed to the user without Administrator’s help.
1.2 User Benefits
The user can generate PIN code from the desktop web browser, smartphone, or tablet.
The user can access and manage job folder without having to go to an MFP/MFD.
The user no longer has to wait to be assigned a PIN code by the Administrator.
1.3 Prerequisites for Installing Celiveo Print Manage
Celiveo Print Manage requires the following:
Celiveo Enterprise 8.0
Internet Information Services (IIS) Manager 6.0 or 7.0
ASP.NET 2.0 (2.0. 50727)
Windows Server 2003 or 2008 ‐ (32bit or 64bit)
If Celiveo Enterprise has been installed using the Celiveo Product Installer bundle, the prerequisites
will be installed automatically.
2 Administrator Access
Administrator Access in Celiveo Print Manage application gives the ability to configure the application.
Celiveo Print Manage must be installed in order to access the application. For more information on
adding the Celiveo Print Manage feature, see the chapter Installing Celiveo Server Modules.
2.1 Logging into Administration
To gain administrator access to the Celiveo Print Manage application:
1. Open up a web browser, and type in the following URL:
http://<hostname>:[port]/<virtual directory name>/login.aspx?admin=
Example: http://192.168.0.166:8791/printmanage/login.aspx?admin=
printmanage is the default virtual directory used during the installation of Celiveo Print
Manage.
The print manage port information can be found in IIS. Open IIS Manager, and look under
sites for the Celiveo Print Manage icon as shown in the following figure.
2. Enter the server administrator credentials. These are the same credentials used to install Celiveo
Enterprise.
The Celiveo Print Manage web portal is displayed.
3. In the Celiveo Print Manage portal page, enter the default credentials as follows:
Login: Admin
Password: 1111
Once connected, the Administration section appears.
The
The user name is case sensitive. The password can be reset in the tool.
2.2 Configuration Tabs (Celiveo Print Manage Application)
The Celiveo Print Manage application contains the following configuration tabs:
2.2.1 Active Directory
The Active Directory tab contains Active directory settings that Celiveo Print Manage uses to
authenticate the user against Active Directory when Single Sign‐On is not available.
The following table provides the description of the Active Directory fields and configuration:
Fields Description
To enable alias lookup, click the checkbox. This
Alias Lookup allows a user to be authenticated by alias, and
helps eliminate user lookup errors.
Allow access for Active Directory lookup.
Active Directory Binding Credentials
Enter the Active Directory login credentials.
Enter the server credentials.
Active Directory Domain/Server Matching Example: For the search base, enter
dc=printmanage, dc=com.
Enter the original attribute used for authentication
User Login AD Attribute
lookup.
Enter the alias attribute found in the Active
Replace with AD Attribute
Directory.
After entering the Active Directory information,
Apply
click APPLY.
2.2.2 PIN Generation
PIN code length can be set in the PIN Generation tab. The pin code can be 4‐9 digits.
Before setting the PIN code length, configuration of extraction mask and position of the most significant
bit in Celiveo Web Admin Software has to be done.
To configure the extraction mask:
1. In the Main Menu of Celiveo Web Admin Software, click ADVANCE CONFIGURAITON > MANAGE PROFILES >
AUTHENTICATION PROFILE. The Authentication Profiles page appears.
2. From the Reader Type drop‐down menu, select PX Custom.
3. In the Extraction Mask field, enter 17 ones (1’s).
4. In the Custom Extraction field, enter the last bit numbers as 63.
5. Click APPLY to save changes.
Once the extraction mask is configured, set the PIN code length in PIN Generation tab. In the PIN Code
Length text box, enter the required pin code length and click APPLY.
2.2.3 Celiveo Server
In the Celiveo Server tab, specify the server IP address and port to be used by Celiveo Print Manage for
authenticating users, Listing Pending jobs, and generating new PIN numbers. Enter the Celiveo Server IP
and its port number and click APPLY.
2.2.4 Admin Password
The default password to the Celiveo Print Manage web portal can be changed under this tab.
Minimum length of the password is six characters. It must include a capitalized letter, a number,
and a special character (@#$%_). Example: aA25@Z
2.2.5 User Interface
User Interface tab helps the administrator to configure the features that are to be available for end user
using Celiveo Print Manage.
Configuring User Interface for Mobile UI:
Display PIN Generation on mobile device – Click the checkbox to allow user PIN to display on a
mobile device.
URL for User Access page from mobile is in the below format:
http://<hostname>:[port]/<virtual directory name>/mp.aspx
Example: http://Server1:80/printmanage/mp.aspx
Configuring User Interface for User Web page UI:
Display PIN Generation on user page – Click the checkbox to allow user PIN to display on the
user’s web browser.
Enable Job list display on user page – Click the Enable checkbox to allow job list to display on the
user’s web browser.
URL for User Access page from browser is in the below format:
http://<hostname>:[port]/<virtual directory name>/main.aspx
Example: http://Server1:80/printmanage/main.aspx
2.2.6 SMTP Server
Following settings can be performed from the SMTP Server tab:
Enable Email notification: Generated PIN code is sent to user’s email address.
SMTP server: Address of email exchange server.
User credential: Credentials of a specific user
Login: User login
Password: User password
Use SSL: Check if using SSL certificate
Server port: Port of Email exchange server
Sender email address: full email address of user
3 Enabling Windows Authentication for User Access
Using Celiveo Print Manage Software, users can generate or re‐generate the PIN using Windows
authentication. To enable Windows authentication, an SSL Certificate must be created and linked to
Celiveo Print Manage.
3.1 Creating an SSL Certificate
To create an SSL Certificate:
1. Navigate Internet Information Services (IIS) Manager home page.
2. On the IIS home page,on the left hand side of the window, click the server hostname.
The server hostname home page appears.
3. On the server hostname homepage, double‐click SERVER CERTIFICATES.
The Server Certificates page appears.
4. Under the Actions section, click CREATE SELF‐SIGNED CERTIFICATE.
The Create Self‐Signed Certificate – Specify Friendly Name section appears.
5. Enter the SSL certificate name (for example, “demo”) and click OK.
The new certificate (“demo”) appears under certificate list.
6. Under the Connections section on the left hand side of the window, click the Default Web Site link.
The Default Web Site Home page appears.
7. Under the Actions section on the right hand side of the window, click BINDINGS link. The Site
Bindings pop‐up appears.
8. If https is not in the type list, then click ADD.
The Add Site Binding pop‐up appears.
9. From the Type drop‐down list, select https and enter the necessary port number.
10. From the SSL certificate drop‐down list, select the <SSL certificate> (“demo”) and click OK to
create SSL certificate and enable the windows authentication.
3.2 Linking SSL Certificate to Celiveo Print Manage
To link SSL certificate to Celiveo Print Manage:
1. Go to IIS MANAGER > SERVER > SITES > PRINT MANAGE. The Print Manage home page appears.
2. In the Print Manage home page, under IIS section, click and open SSL SETTINGS.
3. In the SSL Settings section, select the Require SSL check‐box and select the appropriate Client
Certificate radio button.
4. Click APPLY to link the SSL certificate to Celiveo Print Manage as shown in the following figure.
3.3 Windows Login
1. Change the URL by adding port number as it does not have port number.
2. Click CONTINUE TO THIS WEBSITE. The Pending Jobs page is displayed.
Example: http://Server1:4433/printmanage/lmain.aspx
3. Enter the Windows login credentials and click AUTHENTICATE.
3.4 Configuration Tool
Configuration tool is a standalone configuration.exe tool provided in the Celiveo Print Manage install
directory. This tool allows specifying account credentials and provides write access for the mobile print UI
on the CSS jobs folder to store pending release jobs list.
Path and local account access information need to be added in configuration.exe for releasing jobs. The
default location is: <PrintManage installation directory>\PrintManage\configuration.exe.
If path and local account access information is not added, the following error message is displayed
while releasing the jobs:
“Unable to read configuration. Please contact Admin”
3.5 Accessing Celiveo Print Manage Software from Different
Machine
Adjust the following settings when accessing Celiveo Print Manage application installed on a different
machine.
To add an IP:
Open Internet Explorer > Tools > Internet Option > Security > Local Intranet and add the ID:
When accessing Celiveo Print Manage on a different machine, ensure that the machine is in the
same domain where Celiveo Print Manage is installed.
When logged into a machine which is in the same domain list, user credentials are not needed.
Celiveo Print Manage installed on a same machine can be accessed by providing the system IP
instead of local host.
3.6 Customizing Celiveo Print Manage Website
The Celiveo Print Manage user can be customized for business logos and graphics. This can be done by
replacing the branding.png file in the image directory ( PrintManage installation
directory \PrintManage\image) with the desired business logo. Locate the branding.png file in the
image directory, and replace it with the chosen logo. Ensure to rename the logo, branging.png. The
images below explain the image dimensions and the output on the web browser.
Configuring Celiveo Print‐SMP Driver Plug‐In
13. Configuring Celiveo Print‐SMP Driver Plug‐
In
Celiveo Print‐SMP Driver Plug‐In manages secure print jobs and print queues. This includes print job
retention and print job encryption.
1 Celiveo Print‐SMP Driver Plug‐In Installation Prerequisites
Prerequisites to install Celiveo Print‐SMP Driver Plug‐In:
Administrator rights on the machine to install the Celiveo Print‐SMP Driver Plug‐In
Celiveo Print‐SMP Driver Plug‐In works only with LPR or TCP/IP or local port.
For a complete list of prerequisites, see the section Prerequisites for Client Machines and Servers in the
2 Installing Celiveo Print‐SMP Driver Plug‐In
Celiveo Print‐SMP Driver Plug‐In can be installed using the installer file available in the installation
bundle, or it can be downloaded from the Celiveo Web Knowledge Base repository at
http://www.celiveo.com/kb
The Celiveo Print‐SMP Driver Plug‐In installer can be copied and run from a network drive.
To install Celiveo Print‐SMP Driver Plug‐In:
1. Double‐click the Print‐SMP Driver Plug‐in Install.exe file or the Print‐SMP Driver Plug‐in Install.msi
file.
The Celiveo Print‐SMP Driver Plug‐In installation procedure starts.
2. Click YES to accept the license terms. Or, click NO to cancel.
Celiveo Print‐SMP Driver Plug‐In is installed, and a confirmation window is displayed.
3 Deploying Celiveo Print‐SMP Driver Plug‐In on Remote
Systems
Network administrators can deploy Celiveo Print‐SMP Driver Plug‐In on remote systems using the .msi
file and the .reg file. The deployment and remote execution must be performed by a third‐party
software, such as, Microsoft Systems Management Server. For more information, visit
http://technet.microsoft.com/en‐us/systemcenter/bb545936.aspx.
A freshly installed system is needed to create a master configuration with no prior Celiveo installation on
it.
To deploy Celiveo Print‐SMP Driver Plug‐In on a remote system:
1. Add device(s) with the same name(s) that the users have on their systems for the secure devices.
2. Install Celiveo Print‐SMP Driver Plug‐In. For more information, see the Installing Celiveo Print‐SMP
Driver Plug‐In section above.
3. Configure Celiveo Print‐SMP Driver Plug‐In, as required, to secure print jobs on devices. For more
information, see the Configuring Celiveo Print‐SMP Driver Plug‐In section.
4. In the Run text box, type “regedit” to open the Registry Editor, and go to the following registry
branch:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\Celiveo Print‐SMP
Port monitor
5. Save the registry branch in a .reg file. This contains the port list and settings of Celiveo Print‐SMP
Driver Plug‐In.
6. Go to the registry branch of the printer:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Printers
7. Save the registry branch in a .reg file. This contains the list of devices secured by Celiveo Print‐SMP
Driver Plug‐In.
The software deployment system can be used to:
create the same device(s) with the same name(s) on remote systems
stop the spooler (In the Start > Run text box, type “net stop spooler”)
import the .reg registry file of the device into the registry branch of the remote system
copy, run and configure the following files on the system:
run the Celiveo Print‐SMP.msi file ‐ to be executed with the /quiet parameter and
administrator rights
configure the plug‐in setting .reg file with the device to be imported into the registry of the
remote system
start the spooler (In the Start > Run text box, type “net start spooler”)
To remotely deactivate Celiveo Print‐SMP Driver Plug‐In on a device, use the software deployment
system to:
Stop the spooler (In the Start > Run text box, type “net stop spooler”).
Change the value of the PORT registry key in the printer definition containing the port used by the
device. The Celiveo Print‐SMP Driver port names start with "lcl_" followed by the original port
name, for example, lcl_IP_156.29.78.41
Change the PORT key to the original device port name, that is, remove the lcl_ prefix, for example,
IP_156.29.78.41
Start the spooler (In the Start > Run text box, type “net start spooler”).
3.1 Connecting to Device Shared on Celiveo Server Services
If Celiveo Print‐SMP Driver Plug‐In secures the device directly on Celiveo Server Services, no other
component is required for secure printing.
To connect to a device shared on Celiveo Server Services:
1. Using a web browser, connect to the Celiveo Server Services server.
2. Right‐click on the shared device, and select Connect.
3.2 Securing Windows Device Port on a Local System
This case applies to only those situations where Celiveo Print‐SMP Driver Plug‐In is not installed on a
Celiveo Server Services printer queue.
This involves the following two steps:
Defining Print Queue
Securing Device
3.2.1 Defining Print Queue
If a print queue has already been defined to address the secure device, skip this section and go to
the next section Securing Device below.
To define a print queue:
1. Click START > SETTINGS > PRINTERS > ADD PRINTER.
(On Windows 2003 Server, click START > CONTROL PANEL > PRINTERS AND FAXES > ADD PRINTER).
The secured driver should be on the local machine, otherwise unsecured data can pass between
the system and Celiveo Server Services hosting the drivers.
It is possible to install Celiveo Print‐SMP Driver Plug‐In on the Celiveo Server Services server
machine, but the data from the print jobs will not be encrypted from the systems to Celiveo Server
Services. Also, there will not be any pop‐up window on the client PCs for setting the different
printing options.
2. Click CREATE NEW PORT or ADD PORT.
3. In the list, click the connection linking the computer to the shared device on the server. If the link is
a queue name, select Local Port, and enter the queue name in the following format:
\\serverName\queueName
4. Click NEXT.
5. Enter the connection information in the next window.
6. Select the device driver to install.
Celiveo works with any device language. PCL5 and PCL‐XL drivers are recommended for the compactness
of their output, which results in faster decryption.
It is recommended to add ‐Celiveo at the end of the device name, so that it is easy to identify.
3.2.2 Securing Device
Print jobs on devices can be secured by activating Celiveo Print‐SMP Driver Plug‐In.
To secure a device:
1. Click START > SETTINGS > PRINTERS.
(On Windows 2003 Server, click START > CONTROL PANEL > PRINTERS AND FAXES). The list of devices
available on the system appears.
2. Right‐click the device, and select PROPERTIES. The device properties window appears, displaying the
Celiveo Print‐SMP Driver Plug‐In tab, along with the other standard tabs.
3. Click the Celiveo Print‐SMP Driver Plug‐In tab. The Celiveo Print‐SMP Driver Plug‐In fields appear.
4. Click the ACTIVATE PRINT‐SMP DRIVER PLUG‐IN check box, and click APPLY to activate the tab options. The
port linked to the device automatically changes to a virtual port.
5. Configure the following settings:
Encryption parameters can be used with HP devices only.
Print‐time pop‐up window option
Option to hide the pop‐up window at print time
Use of default values
For information on configuring these settings, see the Configuring Celiveo Print‐SMP Driver Plug‐In
section.
3.3 Installing the Driver Plug‐In on Windows Clients with Netware
Print Server
Celiveo Pull Printing can be used in a Novell Netware network. In this case, print jobs must be secured on
the client system, flowing through the Netware print server, and stored on the hard drive of the device. If
the Novell print server redirects jobs to a Windows print server using LPR/LPD, Celiveo Server Services
can also be used to provide pull printing services.
3.3.1 Installing Print Server
The device is installed as an NDPS (Novell Distributed Print Services) printer agent with Novell LPR, and
prints using LPR on the network printer.
The printer agent must be configured so that it enables LPR print jobs.
The figure below displays the NDPS Printer Settings window.
3.3.2 Installing Client
The device must be installed as a local printer using the standard TCP/IP protocol.
The IP address is the address of the Print Server. The LPR queue is the printer agent object. A NDPS‐client
component is not required.
The device port configuration: Standard TCP/IP (in the figure above, novellServer is the print server
name). Celiveo Print‐SMP Driver Plug‐In is installed on the client with settings similar to that of direct IP
printing.
4 Configuring Celiveo Print‐SMP Driver Plug‐In
Celiveo Print‐SMP Driver Plug‐In can be configured for the following settings:
Encryption parameters (available for HP devices only)
Print‐time pop‐up window option
Option to hide the pop‐up window at print time
Use of default values
In Windows 7, User Account Control Settings should be lowered during the configuration process.
After the configuration is complete, they can be restored to their original settings.
To configure Celiveo Print‐SMP Driver Plug‐In:
1. Click START > SETTINGS > PRINTERS.
(On Windows 2003 Server, click START > CONTROL PANEL > PRINTERS AND FAXES).
The list of devices available on the system appears.
2. Right‐click on the device on which Celiveo Print‐SMP Driver Plug‐In has to configured, and select
PROPERTIES.
The Properties window of the device appears.
3. Click the Celiveo Print‐SMP Driver Plug‐In tab.
The Celiveo Print‐SMP Driver Plug‐In tab displays.
The table below explains the configuration options of this tab.

ACTIVATE PRINT‐SMP DRIVER PLUG‐ If the device is equipped with Celiveo Print‐SMP Driver Plug‐in, select
IN ACTIVATE PRINT‐SMP DRIVER this check box and click APPLY. The port linked to the device
PLUG‐IN automatically changes to a virtual port.
Jobs can be encrypted on their way to the device, and decrypted only
at print time. Select either one of the two options:
If None is selected, the job will not be encrypted.
ENCRYPTION SETTINGS AES: AES is a sophisticated encryption scheme using the AES (Advanced
Encryption Standard) 128.bit algorithm combined with RSA PKI
encryption public/private keys. The private key is securely injected to
the devices. The public key must be copied into the Corporate Key field
of this tab. The public key cannot decrypt the print job.
Select this option to encrypt the secret job key with User Certificate
available in the Active Directory Certificate Store.
ENCRYPT KEY WITH USER
CERTIFICATE
This option is only available when AES Encryption is selected from
the Encryption settings drop‐down list.
Recipient Settings
If this option is selected, the pop‐up window will request the login
name of the end‐user for the secure job.
ASK FOR USER RECIPIENT This option must be disabled if Celiveo Print‐SMP Driver Plug‐In is
installed on Celiveo Server Services with the shared network
printers.
Enter the name of the specific user for whom all the print jobs going to
DEFAULT USER RECIPIENT this device can be secured by default. For example, a secretary could
have a print queue that secures print jobs for her manager.
If this option is selected, a pop‐up window will request the name of the
department for the secure print job.
ASK FOR DEPARTMENT RECIPIENT
This option must be disabled if Celiveo Print‐SMP Driver Plug‐In is
installed on Celiveo Server Services with shared network devices.
Enter the name of the specific department for which the print jobs are
going to this device can be secured by default. For example, a
document can be sent to a pool of nurses, and any nurse in the pool
can release and print the document. After printing, the print job is
DEFAULT DEPARTMENT RECIPIENT
deleted.
This option can be used with HP devices only.
If this option is selected, the recipient name will be requested twice for
confirmation. This option is useful in highly sensitive environments.
From the drop‐down list, select either one of the three options:
• No
• Optional
CONFIRM RECIPIENT NAME
• Mandatory
If this option is selected, there is no prompt for confirmation of the
REMEMBER RECIPIENTS
name of the recipients the next time a secure print job is given.
If this option is selected, a pop‐up window prompts whether to retain
the job or not. For more information, see the row below).
ASK ABOUT RETENTION
This option is useful in push printing mode, when print jobs are sent
directly to the target device. From the drop‐down list, select any one of
the following options:
• Yes ‐ Print jobs will be stored on the hard disk of the device until
the owner authenticates and requests the job release. This should
DEFAULT RETENTION MODE be the setting in pull printing mode.
• No ‐ Print jobs will be printed immediately (after being decrypted,
if necessary).
Push printing is available for HP devices only.
If this option is selected, a pop‐up window will prompt for the billing
code for every print job, and will refuse empty entries.
ASK FOR BILLING CODE
installed on the Celiveo Server Services server machine with
shared network devices.
If this option is selected, a pop‐up window will prompt for the time
ASK FOR EXPIRATION TIME
period for the expiration for secure print jobs.
From the drop‐down lists, select the number of hour or days to set the
DEFAULT EXPIRATION TIME
default expiration time interval for secure print jobs.
At the time of printing, the Celiveo Print‐SMP Driver Plug‐In window will not pop up, if all the
Ask... check boxes are unchecked. This configuration is ideal if no user interaction is
required, and Celiveo Print‐SMP Driver Plug‐In is installed on the Celiveo Server Services
server machine.
4. Click APPLY, and OK in the Properties window of the device to apply the settings.
Celiveo Print‐SMP Driver Plug‐In configuration is now complete.
5 Deactivating the Celiveo Print‐SMP Driver Plug‐In
Deactivate the Celiveo Print‐SMP Driver Plug‐In to stop securing the print jobs.
1. Right‐click on the device.
2. Select Properties to open the Celiveo Print‐SMP Driver Plug‐In window.
3. Click to deselect the Activate Celiveo Plug‐in option, then click APPLY.
6 Printing through Celiveo Server Services
6.1 Printing through Novell Print Servers
After a user prints a job:
the print job is generated as PCL/PS by the driver, and then, in the case of HP devices, it is
encrypted by the Celiveo Print‐SMP Driver Plug‐In
the print job is sent to the Novell print server using LPR through TCP/IP
the print job is then sent to the device or Celiveo Server Services (with an LPR/LPD print queue)
using LPR
the device receives the print job, and following authentication, decrypts and prints it; or the
Celiveo Server Services receives the print job, and stores it
6.2 Printing from Unix system through Windows Print Server
When printing from a Unix system through a Windows print server, set the
LpdPrinterPassThrough parameter to 1 in the registry.
For more information, visit http://support.microsoft.com/kb/168457/en‐us
This option prevents the Windows driver from altering the data coming from the Unix spooler.
7 Configuring the Secure Print Job Parameters
The Celiveo system can be configured to offer additional options to the user when printing a secure
document.
To configure additional options for the user, see the following sections below
Sending Secure Print Jobs to the Device
Printing for User under Windows
Sending Documents to Other Users in Windows Machines
Sending Documents to a Department in Windows Systems
7.1 Sending Secure Print Jobs to the Device
To print a secure print job:
1. From the application, click PRINT to print the document, configure the printing job options and click
OK.
2. If all the secure printing parameters have been automatically set, proceed to retrieval of the print
jobs.
3. If additional secure printing options are set for the user, the Celiveo Driver Plug‐In pop‐up window
appears, as shown in the figure below:
The table below explains the Secure Print Job parameters:
Select this option to cancel the authentication procedure for the print job.
This option is useful if the printer is located right next to the user, therefore
PRINT WITHOUT RETENTION making authentication unnecessary to assure security when releasing print
jobs. Another possible scenario is if users forget their badge at home and do
not have access to an alternate authentication procedure.
ALLOCATION CODE Enter a billing code for the job. This billing code is assigned to the print job in
(may be required) order to charge a client or project with the cost of the action.
EXPIRATION DATE
This option determines how long the system will keep the unclaimed print job
(required ‐ ranges from before deleting it.
1 hour to 48 days)
Specify the recipient for the print job (user or department):
User
To assign the print job to a specific user:
• Click the radio button next to USER.
• Type in or select from the drop‐down list the login name of the user who
will release the print job.
• If prompted, retype the user name in the CONFIRM RECIPIENT field.
Depending on how the system is configured, leaving the user field blank may
be allowed. The system then automatically inserts the Windows login user
name in the USER field.
RECIPIENT If someone else is selected as the print job recipient, the logged in user
(required) is responsible for notifying them that they have a secure print job pend‐
ing.
Department
Note: This option can only be used with HP devices.
If a print job is assigned to a department, any user who belongs to this
department will be able to release the print job. For security purposes,
documents are erased from the server or printer HDD once they are released
by one of the department users.
To assign a print job to a specific department:
• Click the radio button next to DEPARTMENT.
• Type in or select from the drop‐down list the department name.
• If prompted, retype the department name in the CONFIRM RECIPIENT field.
4. Configure the secure print job parameters in the pop‐up window, and click OK to send the print job
to the device.
7.2 Printing for User under Windows
When printing from Windows, by default, the user login name appears in the USER recipient field (unless
another user was specified in the Celiveo Print‐SMP Driver Plug‐In tab of the Properties window of the
device).
Click OK to secure the document.
If users always assign print jobs to themselves (and never to other people), then they may even dis‐
able the CELIVEO SECURE PRINTING PLUG‐IN pop‐up window. Printing will be as simple as clicking the
PRINT icon of the application. Celiveo Print‐SMP Driver Plug‐In can then be installed locally on a PC
or on a remote server.
7.3 Sending Documents to Other Users in Windows Machines
Celiveo Print‐SMP Driver Plug‐In should be installed locally to allow typing in a recipient login name in the
Celiveo Secure Printing Plug‐in pop‐up window. If the Celiveo Print‐SMP Driver Plug‐In is on a network
device, the pop‐up window appears on the server, and not on the client. This is because the server
spooler runs as a system, and not with user credentials.
The Celiveo Secure Printing Plug‐in window retains the last 20 entries, unless the Remember Recipients
option is disabled in the Celiveo Print‐SMP Driver Plug‐In tab of the Properties window of the device.
A document can be sent to another user by forcing all the print jobs of a queue to be secure for that
specific user. In the Windows device properties Celiveo Print‐SMP Driver Plug‐In tab, enter the recipient
login name in the Default User Recipient field. For more information, see the DEFAULT USER RECIPIENT row in
the table in the Configuring Celiveo Print‐SMP Driver Plug‐In section.
After this procedure, Celiveo Print‐SMP Driver Plug‐In can be installed on the Celiveo Server Ser‐
vices server machine, and multiple queues can be set up, each securing print jobs for the specified
user.
7.4 Sending Documents to a Department in Windows Systems
Celiveo Print‐SMP Driver Plug‐In should be installed locally to type in a department recipient name in the
Celiveo Secure Printing Plug‐in pop‐up window. If Celiveo Print‐SMP Driver Plug‐In is on a network
device, the popup window appears on the server, and not on the client. This is because the server spooler
runs as a system, and not with user credentials.
Celiveo Secure Printing Plug‐in window retains the last 20 entries, unless the No History option is
selected in the Celiveo Driver Plug‐in tab.
A document can be sent to a department by forcing all the print jobs of a queue to be secure for that
specific department. In the Windows device properties Celiveo Print‐SMP Driver Plug‐In tab, enter the
department login name in the Default Department Recipient field. Celiveo Print‐SMP Driver Plug‐In can
then be installed on Celiveo Server Services (CSS), and multiple queues can be set up, each securing jobs
for a specific department. For more information, see the DEFAULT DEPARTMENT RECIPIENT row in the table in
the Configuring Celiveo Print‐SMP Driver Plug‐In section.
Department jobs are currently supported on multi‐function printers only, as single‐function print‐
ers currently do not provide a user interface to selected user jobs, or department jobs.
8 Releasing Celiveo Print Jobs
Print jobs are retained securely by Celiveo on the device hard disk or on the remote Celiveo Server
Services until they are released or deleted upon expiration. The procedure for releasing print jobs for
multi‐function printers is slightly different than for single‐function printers. See the the Celiveo
Enterprise User Guide for more information.
8.1 Releasing Print Jobs on Multi‐function Printers
User authentication is needed to release a secure print job. This authentication is done directly on the
multi‐function printer from where the print job will be released. For more information, see the section
Configuring Celiveo Authentication Gateway in the chapter Configuring Celiveo Server Services .
To release print jobs on multi‐function printers:
1. Ensure the printer is loaded with paper.
2. Use PIN code or badge for user authentication. When username appears at the top of the screen,
tap MY PRINT JOBS on the front panel of the printer touch screen.
The system will authenticate the ID, and then display the print job list.
The following actions appear: SELECT ALL, JOB INFO, PRINT, DELETE, and BACK.
3. After using the printer, log out of the system.
For more information on the steps above, see the Celiveo Enterprise User Guide.
8.2 Releasing the Print Job on Single‐Function Printers
To release a secure print job, user authentication is needed on the printer from where the job has to be
released. Upon authentication, the pending print jobs will be immediately decrypted and printed.
For detailed instructions, see the Celiveo Enterprise User Guide.
If the device does not have the option Release Without Confirmation activated, the card reader
will flash, and the printer will be in the pause mode, as long as the user does not acknowledge the
status.
Department jobs can be released on HP multi‐function printers only.
Troubleshooting
14. Troubleshooting
The Celiveo‐enabled devices display the information and/or error messages to help in using the Celiveo
software. These messages appear in the language setting chosen in the device.
1 Information Messages
The following section describes the information messages that appear on the device UI while operating
the device. These messages are seen on HP Legacy devices, and/or HP FutureSmart devices, and/or Ricoh
devices.
Building Job List... Contacting Celiveo Server

Celiveo is in the process of retrieving the user jobs or the department
N/A
jobs from the Celiveo Server Services server hosting your account.
Releasing X Jobs
Celiveo is in the process of releasing ’X’ number of print jobs from a
N/A
device.
ID update in progress. Try Again Later
A file enrollment authentication list of user IDs is being uploaded to Wait for the offline list to finish
the device. uploading
2 Error Messages
The following section explains the Celiveo error messages that appear on the device UI while operating
the device. These messages are seen on HP Legacy devices, and/or HP FutureSmart devices, and/or Ricoh
devices. This section also includes troubleshooting tips and instructions for the error messages.
Before contacting Celiveo Support, note down the error message code wherever displayed (within
brackets) for reference.
2.1 Single‐Function Printer Error Messages
Message displayed/ Cause Solution
Check the Celiveo Server Services IP address.
Check the Celiveo Server Services port number.
Check the Celiveo Server Services service status.
[B13] Celiveo: Invalid
Celiveo Server Check the response time of the server. If the response
time is less than 20 seconds, an error message appears.
Check the compatibility between the version of the device
and that of Celiveo Server Services.
Troubleshooting
2.2 Multi‐Function Printer Error Messages
[B4]Celiveo: ID update failed, Check the Celiveo Server Services IP address.
please contact Administrator Check the Celiveo Server Services port number.
[B5]Celiveo: BILLING update Check the Celiveo Server Services service status.
failed, please contact Admin
Check the response time of the server. If the response time is less than 20 seconds, an error message
appears.
[C1] No Hard Disk. Contact Admin.

[C15] Celiveo system error
(sync). Please Reboot.
Try the procedure again or delete the print job.
[C16] Celiveo print request
failed.
Celiveo could not release the stored print job.
[C17] Celiveo: Hard disk The disk might require reformatting or the disk
operation failed. might be defective.
A hard disk read/write operation failed.
During the product installation, this mes‐
sage can be ignored.
Troubleshooting
2.2.1 Connectivity Issues
[C23] Celiveo: IP connection Check if the LAN connection is active at the device,
failed. routers and firewalls. Check if the internal
Celiveo could not establish an IP connection. configuration page of the device can be accessed.
[C24]Your Server Does Not
Respond. Check the network, routers, firewalls and the status
of HP Access Control Secure Printing Server and
The Celiveo Server Services server hosting the Celiveo Server Services.
print jobs did not answer requests.
[C25]No response from server.
The Celiveo Pull Printing server hosting the print Check the status of the network, routers, firewalls
jobs did not answer any requests from the and Celiveo Server Services.
device.
[C28]Celiveo: Read error from
server. Check the network, routers, firewalls and the version
Celiveo Server Services received corrupted data of Celiveo Server Services
from the server.
[C30]Invalid Celiveo server. Check the network, routers, firewalls and the Celiveo
The Celiveo Server Services server hosting the Server Services version and status.
print jobs did not answer any requests or had Check the Celiveo Server Services IP address.
sent incorrect data. Check the Celiveo Server Services port number.
Check the firewall status (see Appendix A Ports
and Communication).
Check the Celiveo Server Services service status.
Check the response time of the server. If it is less
than 20 seconds, the error message above will be
displayed.
Check the compatibility between the device and
the Celiveo Server Services version.
[C31]Celiveo: Write error from
server. Check the network, routers, firewalls and the Celiveo
The Celiveo Server Services server hosting the Server Services version and status.
print jobs received incorrect data.
[D14]The server is unreachable. Check the network, routers, firewalls and the Celiveo
The Celiveo Server Services server did not Server Services. Check the connection with the
respond to the authentication request from the device and the server. If the connection is broken,
device. It may be because the Celiveo Server ensure that the settings (server IP and port number)
was unable to find the user details. are correct and ensure that the connection to the
server is restored.
Troubleshooting
[D15]The server is unreachable.

Check the network, routers, firewalls and the Celiveo
The Celiveo Server Services server hosting the Server Services status. Check the connection with
print jobs did not answer requests. It may be the device and the server. If the connection is
because the Celiveo Server hosting the print jobs broken, ensure that the settings (server IP and port
is not available. This message is displayed when number) are correct and ensure that the connection
there is a failure to receive print jobs on the to the server is restored.
device.
[D14] or [D15] The server is
unreachable. Increase the device inactivity timeout. Check the DB
This error is displayed mainly due to default gateway timeout and reduce the server response
device socket timeout which is lesser than server timeout.
response
[26]Failed to contact host. Check the network, routers, firewalls and the Celiveo
The Celiveo Server Services server hosting the Server Services status. Check the connection with
print jobs did not any answer requests from the the device and the server. If the connection is
device. broken, ensure that the settings (server IP and port
number) are correct and ensure that the connection
to the server is restored.
[D29] Sorry, there was an error Check the connection with the device and the
during the login process. Please server. If the connection is broken, ensure that the
authenticate again. settings (server IP and port number) are correct and
The authentication server could not authenticate ensure that the connection to the server is restored.
the user. This could be due to a failure to connect Try to login the user again with the correct
to the server, or authentication agent, or an credentials. Also, verify the settings in Celiveo Web
invalid user credentials was submitted. Admin Software.
Verify the Celiveo Server IP addresses and port,
firewalls, antivirus and compatibility between the
versions of Celiveo Server Services and the Celiveo
Authentication agent.
Check the Celiveo Server Services IP address.
[G11] Invalid Celiveo Print
Server. Check the Celiveo Server Services port number.
Identification process between a Celiveo Server Check the Celiveo Server Services service status.
and Celiveo authentication failed. Check the response time of the server. If the
response time is less than 20 seconds, the error
message will be displayed.
Check the compatibility between the device and the
Celiveo Server Services version.
[H17] Failed to contact host. Check the network, routers, firewalls and the Celiveo
The device failed to contact the Authentication Server Services status. Check the connection with
Gateway or Celiveo Pull Printing server to the device and the server. If the connection is
authenticate a user, or to print a job respec‐ broken, ensure that the settings (server IP and port
tively. number) are correct, and ensure that the connection
to the server is restored.
Troubleshooting
2.2.2 Enrollment‐related Issues
[H7]Pre-Enrollment failed. Please
contact Administrator.
Check the connection between the device and the
The user could not be validated against the Authentication server that hosts the user database,
enrolled user details in the user database, user user directory or file enrollment authentication user
directory or file enrollment authentication user files. Check if the card is already enrolled in the user
files on the Authentication server. It could be database, user directory or file enrollment
because the card is already enrolled in the user authentication user files.
database, user directory or file enrollment
authentication user files.
[H8]Unenrollment failed. Please If the connection is broken, ensure that the settings
contact Administrator. (server IP and port number) are correct. Also ensure
An enrolled user could not be unenrolled from that the connection to the server is restored, and
the user database, user directory, or file that the database services are available. Check the
enrollment authentication user files on the user enrollment settings in the Enrollment &
authentication server. This could be due to the Roaming tab in Celiveo Web Admin Software.
following reasons:
The device connection to the server failed
while unenrolling the user.
The database from where the user is to be
unenrolled is not available on the server.
[C100]Enrollment failed.
A user could not be enrolled into the user
database, user directory or file enrollment If the connection is broken, ensure that the settings
authentication user files on the authentication (server IP and port number) are correct. Also ensure
server. This could be due to the following that the connection to the server is restored, and
reasons: that the database services are available. Also, check
The device connection to the server failed the user enrollment settings in the Enrollment &
while unenrolling the user. Roaming tab in Celiveo Web Admin.
The database where the user is to be enrolled
is not available on the server.
Troubleshooting
2.2.3 Other Messages
[B11]Corrupted user list. Contact
Admin.
Reload the users list to the device.
The list of users and user IDs on the device is
corrupted.
[C1]No Hard Disk. Contact Admin.
Contact the device vendor.
There is no hard disk in the device.
[C2]No ID List. Contact Admin. Use the Celiveo Web Admin Software to send a valid
The device has not been initialized with the users list to the device, or link to enrolment or to live LDAP
list. validation.
[C4]Corrupted ID list. Contact
Admin. Check to ensure that there are no unsupported
special characters in the local ID list, then
The user ID list is corrupted, as there could be resynchronize the device.
unsupported special characters in the local ID list.
[C5]Corrupted BLG list. Contact
Admin. Check to ensure that there are no unsupported
special characters in the local ID list, then
The billing list is corrupted, as there could be resynchronize the device.
unsupported special characters in the billing list.
Check the network, routers, firewalls and the Celiveo
[C19]Celiveo failed to post AUTH Server Services status. Check the connection
request. between the device and the server. If the connection
The device failed to send authentication request is broken, ensure that the settings (server IP and
to Celiveo Server Services. port number) are correct, and ensure that the
connection to the server is restored.
[C42]Celiveo: Please use Celiveo
DIMM. Please contact the administrator or the Celiveo
The device does not have a valid hardware Support team.
license for Celiveo.
[C26]Celiveo: Out of memory.
Please reboot. Reboot the device and notify support if this happens
again.
The system ran out of memory.
[C58]Synch error, please reboot.
The device failed to synchronize with Celiveo Please reboot the device.
Web Admin Software.
Troubleshooting
2.2.4 Card Reader Error Messages
Check the configuration:
[C65]ID error (Invalid badge).
Check the reader settings.
The badge is not compatible with the
Check the ID validity. Check the Active Directory
authentication parameters.
field containing the ID
[C66]ID error (Transmission
failure). Re‐authenticate or contact the Celiveo Support team
Data received from the badge reader is if the problem occurs again.
corrupted.
[G3]Celiveo Failed to upgrade
reader settings. Re‐generate the Smart Card configuration, then
The Smart Card reader could not get its reboot the device.
parameters from the device.
[G4]Celiveo media error.
Check the Smart Card reader connection to the
The Smart Card reader is either defective or is not device or please contact administrator.
connected.
[G6]Celiveo ADK error.
Please contact the administrator or the Celiveo
An unknown error that occurs internally in the Support .
device.
[G12]Celiveo Invalid Card
The Smart Card is not sending thedata to Celiveo Check the Active Directory lookup for Smart Card
Server Services. This may be due to the Smart user profiles.
Card holder is not a valid user in the user
database.
[G19]Celiveo Initialization
failed!
Check if the reader is switched on.
The device could not communicate with the
Smart Card reader.
[G23]Celiveo LDAP ERROR
CONFIGURATION Verify that the LDAP profile settings are correct.
The configured LDAP profile setting is incorrect.
[G24]Celiveo LDAP ERROR DATA Verify that the LDAP profile configuration is correct.
The data retrieved from the LDAP profile is If the problem persists, please contact Celiveo
incorrect or corrupted. Support.
[G25] Celiveo LDAP ERROR
Connection Check the LDAP Smart Card configuration settings.
The LDAP connection is not working.
Troubleshooting
[G29] Celiveo Invalid login and/

or password
Check your network credentials.
The login/password entered for the alternate
authentication is incorrect.
[G30] Celiveo Failed to get user
information Check the LDAP Smart Card configuration.
The Smart Card LDAP configuration is incorrect.
[H9] Failed to change your Card
Password. Please contact Ensure that the user is adhering to the card
Administrator. password policy. Ensure that the Dual Factor settings
are correctly configured in Celiveo Web Admin
The card password could not be successfully Software.
updated in Celiveo Server Services.
No Reader Detected, shutdown the
printer and plug a reader. Please wait for 5‐10 minutes for the error message
This is expected behavior while the Celiveo to disapppear and the solution to be loaded.
solution is being loaded.
3 Troubleshooting for Celiveo Installer Installation
This section provides troubleshooting information for users who are unable to add devices connected to
the Celiveo Hardware.
Unable to add a device connected to the Celiveo Hardware
Celiveo Web Admin is installed directly without using Make sure to install all or specified Celiveo
Celiveo Product Installer, the necessary IIS settings is server modules using the Celiveo Product
not configured properly. Installer.
4 Troubleshooting for Serverless Pull Printing and Track‐PM
This section provides troubleshooting information for users who face issues with the Serverless Pull
Printing client on the Mac operating system.
4.1 Installation Troubleshooting
Unable to install Serverless Pull Printing client
No administrator rights Login using the root user credentials.
Troubleshooting
4.2 Operation Troubleshooting
Unable to list a print job.
Verify the network settings using the Celiveo
utility that can be accessed by clicking the
Network issue Celiveo icon in the $/Applications directory.
If the settings are correct, try connecting to
the network again.
The IP Tracking feature is required to operate
the Serverless Pull Printing Client on the Mac
machines.
IP Tracking feature is off Check that the IP Tracking feature is turned
on in the main Celiveo Server machine.
Then, check the Serverless Pull
PrintingConfig.xml file entries.
5 Troubleshooting for Celiveo Track‐GreenSaver Error
Messages
Error:
“You do not have permission to view this directory or page.”
“HTTP Error 401.2 - Unauthorized
You are not authorized to view this page due to invalid authentication
headers.”
When the user account specified to run the web portal Update the Web Portal's Application Pool and
is no longer valid, or its password has been changed. Directory account username or password
within IIS on the primary installation.
Refer to the section below to udpate the
username and password witin IIS.
Troubleshooting
To update the username and password:
1. Go to START > ADMINISTRATIVE TOOLS and open the 'Internet Information Services (IIS) Manager' on
the primary installation.
2. In the Internet Information Services (IIS) Manager, from the left hand navigation, click APPLICATION
POOLS and select TGS as shown below.
3. Right‐click on TGS and select ADVANCED SETTINGS.
The Advanced Settings pop‐up appears.
4. Locate the setting labeled IDENTITY under Process Model. Update the username and password,
then click OK.
Ensure it is an account with Administrative rights to the Primary Server and full control of the
Print Manager Plus database.
Troubleshooting
Troubleshooting
5. In the Internet Information Services (IIS) Manager, from the left hand navigation, go to SITES > TGS >
TGSWEB and select AUTHENTICATION as shown.
6. Right‐click on AUTHENTICATION and select OPEN FEATURE.
The Authentication window opens.
Troubleshooting
7. On the Authenticaton window, edit the item named Anonymous Authentication. Edit the specific
user with the same details provided in Step 4 and click OK.
The user should be able to browse the web portal as expected with valid credentials.
Special Notes
15. Special Notes
This chapter covers the following sections:
Enabling Celiveo Logs Retrieval
Enabling HTTPS Communication between Celiveo Web Admin and Device
Adding Firewall Exceptions
Granting Read/Write Access to Temp Folder
1 Enabling Celiveo Logs Retrieval
Logs can be enabled in the Celiveo Enterprise solution to log events for troubleshooting purposes:
This sections covers the following sections:
Enabling Web Admin Logs and Printer Logs Using Web Admin
Enabling Celiveo Server Services Logs
1.1 Enabling Web Admin Logs and Printer Logs Using Web Admin
Enabling the logging feature in Celiveo Web Admin helps in detecting a problem, and/or diagnosing if a
simple solution is available to solve a problem. The debug logs record the flow of information and other
parameters related to the Embedded Solution that may be useful in troubleshooting purposes.
Furthermore, an error message appears in the Celiveo Web Admin interface when there is a problem.
Logs should be enabled only for troubleshooting propose as they might have an impact on overall
performance.
1.1.1 Enabling Web Admin Logs
As a general setting, by default the log level is set to 1. However, the log level is set to 4 to enhance the
logging functionality so that the maximum number of logs can be generated for the events. The log level
is set for the following two configuration files:
web.config file
To set log level to 4 in the configuration files:
1. Go to the following locations and open the respective files.
For Web Admin configuration (web.config) file: <Web Admin installation directory>\WebAdmin
2. In the "Trace_maxLevel" entry, change the default value to “4”.
The logging option needs to be activated in Celiveo Web Admin Software for each device.
Special Notes
1.1.2 Enabling Printer Logs
1. Click ALL PRINTER LIST in Celiveo Web Admin.
A list of devices appears.
2. Select the device(s) for which the logs are to be enabled.
3. In the Related Actions section click ENABLE LOGS.
4. Click OK.
A confirmation message appears in the Related Actions section.
5. Click OK.
The status of Logs column is updated as shown in the figure below if the logs are successfully
enabled.
The table below describes the various device logs status icons on Celiveo Web Admin.
Status Icon Description
Device logs are disabled.
Device logs are enabled.
Download of device logs is in progress.
Download of device logs is successful.
Error encountered while downloading device logs. Device log download is unsuccessful.
Special Notes
Use the DISABLE LOGS and DOWNLOAD LOGS options in the Related Actions section of the All Printers List
page to disable and download device logs respectively.
DOWNLOAD LOGS option is supported only for HP FutureSmart and CSA‐based devices. Some logs
might be encrypted. Please contact Support for further assistance.
Device logs can be configured and collected using a USB device from Celiveo Hardware as well. For
more information, refer to Retrieve logs through USB section in Setting up Celiveo Hardware chap‐
ter.
1.2 Enabling Celiveo Server Services Logs
Activating the logging feature in Celiveo Server Services helps in detecting a problem, and/or diagnosing
if a simple solution is available to solve a problem. The communication log is encrypted, and logs the
communication between the device and Celiveo Server Services.
The log tabs in the Celiveo Server Services Configuration application are:
Configuration utility log
Job processing DLL log
Service log
CRL log for Celiveo Auth‐SC (Smart Cards)
To enable Celiveo Server Services Logs:
In Celiveo Web Admin Main Menu, go to the CSS page Server Management, and click the Logs tab.
If, after activating the logging functionality and analyzing the logs, you cannot find a solution
to a problem, contact Celiveo Technical Support for help in diagnosing and solving the
problem.
2 Enabling HTTPS Communication between Celiveo Web
Admin and Device
This section provides information about the communication between Celiveo Web Admin and device.
2.1 HTTPS Setup
As a default setting, Celiveo Web Admin Software communicates with the device on HTTP port 80.
Set up firewall rule to deny any incoming and outgoing transaction through Port 80 on the server
that hosts Celiveo Web Admin Software.
See the section Denying Incoming and Outgoing Transactions from Server on Port 80 for a detailed
setup.
Set up the Celiveo Web Admin website to interact only on HTTPS requests.
See the section Setting up Admin Software for HTTPS Communication for a detailed setup.
Set up the device to listen only to HTTPS requests.
Special Notes
See the Setting up Device for HTTPS Communication section below for a detailed setup procedure.
2.2 Denying Incoming and Outgoing Transactions from Server on
Port 80
On the machine where Celiveo Web Admin Software is installed, turn on the Windows Firewall option. If
Celiveo Server Services is on the same machine as Celiveo Web Admin Software, then you have to allow
Port 22000 and 9100.
This can be done by adding the ports in the Exception tab of Windows Firewall).
2.3 Setting up Admin Software for HTTPS Communication
To set up Celiveo Web Admin Software for HTTPS communication:
1. Invoke IIS Manager from Administrative Tools.
2. Go to Web Sites.
3. Right‐click Default Web Site, and select Properties.
4. Go to Directory Security.
5. Click Server Certificates under the Secure Communications section. You can use an existing
certificate or create a new certificate by following the on‐screen instructions.
6. After creating a certificate, or opting for an existing certificate, under Secure Communications,
click Edit.
7. Click the Require Secure Channel (SSL) check box.
8. Click OK.
9. In the Default Web Site Properties window, click Website. Ensure that 443 is mentioned in the SSL
Port text box.
10. Click Apply.
11. Right‐click on Default Web Site and choose Stop.
12. Right‐click on Default Web Site and choose Start.
Celiveo Web Admin Software should listen on HTTPS 443. To cross‐check if the setup is correct, try
to access the website using the following URLs:
http://<IP ADDRESS>/Celiveo/ > Should NOT be accessible;
https://<IP ADDRESS>:443/Celiveo/ > Should be accessible
Verify that the Celiveo Web Admin ports are added as exceptions if Windows Firewall is
enabled.
Special Notes
2.4 Setting up Device for HTTPS Communication
To set up a device for HTTPS communication:
1. Login to device EWS with administrator credentials.
2. Go to Networking > Mgmt Protocols.
3. Check the Encrypt All Web Communication (not including IPP) option.
The device is enabled to listen to HTTPS 443. However, on the device, the HTTP requests would be
redirected to HTTPS.
To ensure that the device listens ONLY on HTTPS 443, you may have to put it behind a fire‐
wall, and disable calls coming in from Port 80.
After this setup, Celiveo Web Admin Software will communicate to the devices on HTTPS Port 443
only, and the devices will listen on HTTPS Port 443 only.
3 Adding Firewall Exceptions
The Stale CSS Record Cleanup Scheduler runs to remove the IP address entries of the Serverless Pull
Printing clients that have not been updated for a certain period from the SQL Server database.
However, if firewall is on and SQL Server is being accessed externally via TCP/IP, the firewall must be
configured to allow SQL Server to receive incoming connections.
3.1 Allowing Connections to SQL Server by TCP Port
1. Click Start > Control Panel > Windows Firewall.
The Windows Firewall window appears.
2. Select the link Allow a program through Windows Firewall.
The Windows Firewall Settings window appears with the Exceptions tab selected by default.
3. Click Add port....
The Add a Port dialog box appears.
4. Enter SQL Server in the Name text box.
5. Enter 1433 in the Port Number text box.
6. Select the TCP option as the protocol.
7. Click OK and close all dialog boxes.
If anything other than standard TCP/IP is being used to access SQL Server, other ports need to be
enabled. To allow RPC over Named Pipes instead of TCP, port 445 needs to be opened following the
above instructions.
Special Notes
3.2 Adding Firewall Exception By Application (SQL Server)
1. Click Start > Control Panel > Windows Firewall.
The Windows Firewall window appears.
2. Select the link Allow a program through Windows Firewall.
The Windows Firewall Settings window appears with the Exceptions tab selected by default.
3. Click Add program....
The Add a Program dialog box appears.
4. Click Browse and look for the path C:\Program Files\Microsoft SQL Server\MSSQL\Binn.
The exact path to the Binn folder may vary. In the example above, the path for an installation
of SQL Server 2000 has been provided. If multiple instances of SQL Server are present, each
one will be present in a directory labeled C:\Program Files\Microsoft SQL Server\MSSQL.x\,
where x is the number of the instance. Each instance must be enabled individually.
5. Select the application Sqlservr.exe.
6. Click OK and close all dialog boxes.
4 Granting Read/Write Access to Temp Folder
To upgrade Celiveo Embedded Solution, Network Service and IUSR must have read/write access to the
C:\Windows\TEMP folder.
To grant Network Service read/write access to the Temp folder:
1. Go to location C:\Windows.
2. Locate and right‐click the Temp folder.
3. Select Properties from the context menu.
The Temp Properties window appears with the General tab selected by default.
4. Select the Security tab and click Edit.
The Permissions for Temp window appears.
5. Click Add.
The Select Users or Groups dialog box appears.
6. Type network service in the Enter the object names to select text box and click Check
Names.
The system searches the AD for the network service name and NETWORK SERVICE appears in the
Enter the object names to select text box.
7. Click OK.
The Permissions for Temp window appears.
8. Select NETWORK SERVICE from the Group or user names list.
Special Notes
9. Select the Allow check box next to Full Control in the Permissions column.
10. Click Apply.
11. Click OK to make the changes effective.
Follow the above instructions replacing network service with IUSR to grant IUSR read/

write access to the Temp folder.
Migration Support
16. Migration Support
1 Overview
This chapter explains the migration and upgrade process of the Celiveo modules from previous versions
such as 6.4.1, 7.0, 7.0.1, 7.0.2, 7.0.4, 7.0.5, and 7.0.6.
The configuration settings need to be saved first before you migrate and upgrade the Celiveo solutions.
The upgrade of the Celiveo solution is described in the migration procedure below.
2 Order of Migration
Migrate the Celiveo solutions in the following order:
1. Celiveo Server Services
2. Celiveo Web Admin Software and Celiveo Embedded Solution
3. Celiveo Track‐GreenSaver
Celiveo Track‐GreenSaver migration is not applicable for the 6.4.1 version.
It is possible to have a mix of devices with multiple versions of Securejet Embedded Solutions.
However, the devices running on earlier versions of the Celiveo solution will not have the new
features.
3 Migrating Celiveo Server Services
The migration from an earlier version to the 8.0.x version can be of two types:
1. Configuring Celiveo Server Services from the 8.0.x Celiveo Web Admin Software.
For more information on configuring Celiveo Server Services, see the section Server Management
2. Configuring Celiveo Server Services as legacy settings migrated from the earlier Celiveo Server
Services profiles. In this case, Celiveo Server Services needs to be invoked from the installation
directory.
If Enrollment with Roaming and Roaming Database is enabled in the earlier version of Celiveo Server
Services, database migration is managed automatically in the later version.
In a roaming setup, Celiveo Server Services with the earlier versions can be migrated one by one as the
8.0.x. Celiveo Server Services version is backward‐compatible with the Securejet Solution versions 6.4.1,
7.0, 7.0.1, 7.0.2, 7.0.5, and 7.0.6, along with the device solutions.
To migrate Celiveo Server Services:
1. Launch the Celiveo Server Services.
Migration Support
2. Under the Job Server tab, click SAVE CONFIGURATION. A browser window appears.
For 7.1 version onwards, launch Celiveo Server Services from the installer folder to save the
existing configuration.
3. Enter a name for the configuration file, and click SAVE to save the configuration file in the desired
location. The configuration is saved in a file with a .reg.sjpscfg extension.
4. Install the new Celiveo Server Services using Celiveo Installer.
5. Click LOAD CONFIGURATION in the Job Server tab to load the .reg.sjpscfg configuration file that is
saved in step 2 above. If Enrollment with Roaming is enabled and an old database is detected, a
confirmation dialog appears, prompting for enrollment database migration.
For 7.1 version onwards, launch Celiveo Server Services from the installer folder to load the
configuration.
6. Click YES to migrate the database.
If Roaming Printing is enabled and an old database is detected, a confirmation dialog message
prompting for Roaming database migration is displayed.
7. Click YES to migrate the database.
After a successful migration, re‐launch Celiveo Server Services.
Celiveo Server Services profiles can be auto‐generated and auto‐saved in the CSS > Legacy Group
page. It is managed at the group level in Celiveo Web Admin Software.
4 Migrating Celiveo Web Admin Software
Celiveo Web Admin Software can be migrated from versions 6.4.1 onwards to the 8.0.x version.
Migrating Celiveo Web Admin Software involves the following order of steps:
1. Uninstalling and Saving Securejet Web Admin Configuration
2. Installing the 8.0.x Celiveo Web Admin Software
3. Migrating Celiveo Embedded Solution on the Device
4. Testing Successful Migration to the 8.0.x Version (Optional)
4.1 Uninstalling and Saving Securejet Web Admin Configuration
Before migrating, save the configuration settings of the Securejet Web Admin software.
1. Double‐click the Celiveo Installer setup.exe file of the Celiveo Web Admin Software.
2. Click UNINSTALL to uninstall the Celiveo Web Admin Software.
Since the 6.4.1 Securejet solution does not have a generic installer, uninstall the Web Admin
software from CONTROL PANEL > PROGRAMS AND FEATURES.
While uninstalling Web Admin software, a pop‐up window appears, prompting to save the
configuration.
Migration Support
The Save pop‐up window may be partially hidden behind the main installer window.
3. Click YES. A browser window appears to save the Web Admin configuration file in the desired
location.
4. Browse to the location, enter a name for the file.
5. Click SAVE to save the configuration file.
6. Click OK. Web Admin will be uninstalled from the machine, and the configuration will be saved.
4.2 Installing the 8.0.x Celiveo Web Admin Software
Using the 8.0.x Celiveo Product Installer, install the Celiveo Web Admin Software 8.0.x version.
While installing Celiveo Web Admin Software, a pop‐up window appears, prompting to load the saved
configuration.
1. Click YES to load the configuration of the earlier Web Admin software.
A browser window appears to load the previously saved configuration file from the required
location.
2. Browse to the folder location where the configuration file of the earlier Web Admin version was
saved (in Step 3 in the section above)
3. Click OPEN to load the Celiveo Web Admin Software configuration file.
The 8.0.x Celiveo Web Admin Software is now installed with the configuration settings loaded from
the earlier version.
Ensure that Windows Firewall is turned OFF on your PC. Or, include the Celiveo Web Admin Soft‐
ware port in the Firewall block list. For more information, see the Celiveo ‐ All Ports Summary table
in Appendix A ‐ Ports and Communication.
4.3 Migrating Celiveo Embedded Solution on the Device
After installing the 8.0.x Celiveo Web Admin Software, it has to be synchronized with the device installed
with the Celiveo Embedded Solution. If required, the Embedded Solutions can be migrated to version
8.0.x. Before migrating the Celiveo Embedded Solution on the device, ensure that the device is already
synchronized with an earlier version of the Celiveo Embedded Solution.
A newer version of Celiveo Web Admin Software can support a older version of Celiveo Embedded
Solution. However, an older version of the Celiveo Web Admin Software cannot support a newer
version of Celiveo Embedded Solution.
1. Go to CELIVEO WEB ADMIN > ADVANCE CONFIGURATION in EMBEDDED SOLUTION V IEWER section.
2. Browse to the location of latest Celiveo Embedded Solution and add it.
The earlier version of the Celiveo Embedded Solution is replaced with the 8.0.x version.
Migration Support
3. In Celiveo Web Admin Software, go PRINTER GROUP and synchronize the devices to update them
with the 8.0.x Celiveo Embedded Solution. For more information, see the Synchronizing Device
Groups With Group Configuration section in the chapter Configuring Celiveo Web Admin.
4. In Celiveo Web Admin Software, see the synchronization status and the solution version installed
on the device. A green check mark indicates that the synchronization of Celiveo Web Admin
Software with the selected devices was successful.
The device displays the following messages:
“Chosen personalities not available”
followed by
“Disk operation failed”
Do not click OK, or reboot the machine until the device completes installation, and reboots
automatically. The printer may reboot twice during this process.
If the upgrade fails, perform a Disk Init or a disk clean operation on the device. Proceed with a fresh
installation. For more information, see the section Installation using Celiveo Products Installer in the
For successful upgrade of Celiveo Embedded Solution, NETWORK SERVICE and IUSR must have
read/write permission on the C:\Windows\TEMP folder. For more information on how to grant
read/write permission to the Temp folder, refer to the section Granting Read/Write Access to Temp
Folder in the chapter Special Notes.
4.4 Testing Successful Migration to the 8.0.x Version (Optional)
To check whether Celiveo Web Admin Software is successfully migrated to the 8.0.x version:
1. Give a pull print job for an enrolled user.
2. Go to the device, and authenticate with the credentials of the enrolled user.
3. Press the Print button on the device to print the jobs.
A successful print job confirms that the migration of Celiveo Web Admin Software and the Celiveo
Embedded Solution to the 8.0.x version was successful.
On HP FutureSmart devices, if OXPd is activated, the device will reboot twice during the
synchronization process.
To use the Celiveo Track‐EM feature, ensure that a new group is created with the Tracking
function enabled. For more information, see the sections Creating Device Group and the
Configuring Tracking for Device Groups in the chapter Configuring Celiveo Web Admin.
Ensure that the appropriate license tokes are available to use the Celiveo Track‐EM feature.
For HP LaserJet CM6040 MFP and CP4525 devices, if migration is unsuccessful, remove the
existing Celiveo solution from the devices using the option Remove Selected Printers in
Celiveo Web Admin Software. Add the devices and resynchronize with the 8.0.x Celiveo
solution.
Migration Support
5 Migrating Celiveo Track‐GreenSaver
Celiveo Track‐GreenSaver Admin and Reports can be installed using the default SQL Express database
provided with the product. These steps may not apply to setups where a remote database or shared
database is being used. In such cases, consult your database administrator on the best practice for
moving your database. Once the Celiveo Track‐GreenSaver database is migrated, the Celiveo Track‐
GreenSaver reports can be generated accordingly.
5.1 Migrating Celiveo Track‐GreenSaver Database
The Celiveo Track‐GreenSaver database should be compatible with the new version of Celiveo Track‐
GreenSaver. Before migrating the database, ensure that you have the current installation version of
Celiveo Track‐GreenSaver by going to HELP > ABOUT CELIVEO TRACK‐GREENSAVER.
To migrate Celiveo Track‐GreenSaver database:
1. In the Celiveo Track‐GreenSaver Admin window, click on the TGS icon. On the drop‐down menu,
click Migration from TGS7.
The Product Migration window appears.
2. Select either AUTO DETECT MY DATABASE or MANUALLY SPECIFY MY DATABSE and click CONTINUE.
If MANUALLY SPECIFY MY DATABASE is selected:
From the SQL Server drop‐down list, select the appropriate SQL server instance.
From the next Database drop‐down list, select PRINTMANAGER.
The Product Migration window displays the Import compatibility details and the time to import
the Database.
3. Click CONTINUE.
4. Select the required import settings.
5. Select STOP AND DISABLE ALL TRACK‐GREENSAVER 7 SERVICES.
6. Select STOP, RUN IMPORT AND RESTART TRACK‐GREENSAVER 8 SERVICES and click START. It would take few
minutes to stop and start the Celiveo Track‐GreenSaver services.
7. After the Celiveo Track‐GreenSaver is successfully migrated, click FINISH.
Cluster Environment Set‐up
17. Cluster Environment Set‐up
1 Cluster Environment Overview
A hardware cluster may be active‐passive where some redundant servers are reserved for failover duty,
and do not run any applications on their own. It can also be active‐active, where all the servers in the
cluster run their own applications, but also reserve resources to allow them to perform failover duty for
each other.
Celiveo Server Services is compatible with active‐passive cluster environments.
The implementation and management of the cluster under Windows Server 2008 is totally different
from the 2012 server. The current procedure is for cluster on a Windows Server 2008 only.
2 Prerequisites for Cluster Environment Setup
This section provides the list of hardware and software prerequisites for the installation of Celiveo
Enterprise in a cluster environment.
The information and examples are based on a 2‐node active‐passive cluster. The following assumptions
have been made for this setup process:
The cluster is up and running properly without any critical errors or warnings in the event viewer.
The shared storage disks and print spooler resource are present on the cluster and running
properly. If not, the system administrator must create it.
The user has administrator rights on the server to install Celiveo Enterprise components.
It is recommended that you always work on the passive node. Celiveo Server Services will restart
the spooler during the installation process, which can affect the cluster failover.
Before you install and configure Track‐GreenSaver within a failover cluster, review the following
prerequisites.
1. Configured High Available “Print Server” Resource:
a. Before you install Track‐GreenSaver and add it as a clustered application, a print server
resource must be created and made available online.
b. The printer is hosted on Cluster Resource.
2. Supported SQL Server: Track‐GreenSaver database must be created using one of the two options.
a. Remote SQL Instance: An instance of Microsoft SQL Server (version 2005 or later) that is
running on a server separate from any of the nodes used within the cluster.
b. Local Clustered Instance: A local instance of Microsoft SQL Server (version 2005 or later) that is
setup within the failover cluster.
The default local SQL Express database option is not supported when used with a failover cluster. It
will not function properly.
3 Installing and Configuring Celiveo Solution in Cluster
To install and configure Celiveo solution in a cluster environment, verify which node is active and which is
passive. Connect to the passive node.
To install and configure Celiveo solution in cluster environment complete the following tasks in this
order:
1. Configuring High Available Print Server Resource in the Cluster
2. Installing and Configuring Celiveo Server Services in the Cluster
3. Configuring and Hosting a Shared Printer Device in the Cluster
4. Installing and Configuring Track‐GreenSaver in the Cluster
3.1 Configuring High Available Print Server Resource in the Cluster
Licensing:
Track‐GreenSaver requires a full Server License per physical node. This key also has to be specially
enbled for use with Microsoft Cluster Services.
If you are uncertain as to whether or not your license key supports cluster environment, and
licensed for the number of physical nodes you are using, please contact support before continuing.
To configure a High Available Print Server resource in the Cluster:
1. Start the Node1 machine.
2. Click Start > All Programs > Failover Cluster Manager.
The Failover Cluster Manager window appears.
3. On the left‐hand pane, right‐click on Services and applications.
4. From the context menu, select Configure a Service or Application…
The High Availability Wizard ‐ Before You Begin window appears.
5. Click Next.
The High Availability Wizard ‐ Select Service or Application window appears.
6. From the List, select Print Server and click Next.
The High Availability Wizard ‐ Client Access Point window appears.
7. Enter an access point name in the Name text box.
The access point name is the name given to identify the Print Server service in the cluster
environment.
8. In the Address text box, enter an IP address.
This IP address is used by the Print Server service to communicate within the cluster environment.
9. Click Next.
The High Availability Wizard ‐ Select Storage window appears.
10. Selecting a shared storage disk from the list and click Next.
The selected shared storage disk is used to store print jobs in the cluster environment.
The High Availability Wizard ‐ Confirmation window appears.
11. Click Next.
The High Availability Wizard ‐ Configure High Availability window appears followed by the High
Availability Wizard ‐ Summary window.
12. Click Finish.
The Print Server resource is configured and it can be viewed in the Failover Cluster Manager
window.
The IP address added in step 8 has to be used as the shared port to access the Print Server resource.
Ensure the Print Manager Plus service on both nodes is set to manual startup.
3.2 Installing and Configuring Celiveo Server Services in the Cluster
This section describes the installation and configuration of Celiveo Server Services on the nodes within
the cluster environment.
3.2.1 Installing and Configuring Celiveo Server Services on the Cluster Nodes
1. Run the Celiveo Server Services install setup on cluster node 1 machine and follow through the
installation. Ensure not to use the shared storage disk as the installation folder.
2. Open the Celiveo Server Services Configuration utility and apply the following modifications.
a. In the Job Server tab, click Load configuration… to load Celiveo Server Services parameters
from an existing SDPP.reg.sjpscfg file.
In case of fresh installation, SDPP.reg.sjpscfg file does not exist. In this case, Celiveo Server
Services Configuration Utility is used to configure Celiveo Server Services parameters.
b. In the Job Retention tab, change the Storage Folder Path to a new path, pointing to the shared
storage cluster disk. Print jobs will be stored on the cluster disk, and will be available to the
active node even after a failover.
c. All the other parameters which do not relate to the cluster environment and can be configured
as desired.
Repeat the process of installation and configuration of Celiveo Server Services on cluster node 2 machine.
The SDPP.reg.sjpscfg file from node 1 machine can be used to load the Celiveo Server Services
parameters in node 2 machine.
3.2.2 Adding Celiveo Server Services to Celiveo Web Admin Software
To add Celiveo Server Services to Celiveo Web Admin Software:
1. Launch Celiveo Web Admin Software.
2. Click MAIN MENU > CELIVEO WEB ADMIN > LIST MANAGEMENT > CELIVEO SERVER SERVICES MANAGEMENT LIST.
The Celiveo Server Services Management List page appears.
3. In the Related Actions section, click Create.
The Add Celiveo Server Services option appears.
4. In the Hostname text box, enter the IP address of the shared port.
Ensure to use the same IP address used to configure the High Available “Print Server”
resource.
5. Click OK.
3.2.3 Upgrading Celiveo Server Services in Cluster Environment
The procedure to upgrade the Celiveo Server Services is to first uninstall the old version, then install the
new one.
1. Bring the Celiveo Server Services resource offline. As the service name changes, it is possible that
due to a problem, failover occurs during the upgrade procedure.
2. Use ADD OR REMOVE FEATURES option of the Celiveo Products Installer to remove the Celiveo Server
Services module.
3.3 Configuring and Hosting a Shared Printer Device in the Cluster
To host a shared printer resource:
1. Start the cluster node 1 machine.
2. Click Start > All Programs > Devices and Printers and click Add a Printer from the Devices and
Printers window.
The Add Printer window appears.
3. Click Add a local printer.
The Choose a printer port window appears.
4. Select Create a new port and choose Celiveo Pull Printing from the Type of port drop‐down list.
The Celiveo Pull Printing option is available only after Celiveo Server Services are installed
and configured.
5. Click Next.
The Celiveo Pull Printing dialog box appears.
6. In the Enter Port name text box, enter a name for the print queue/shared printer resource and
click OK.
The Install the printer driver window appears.
7. Select the device manufacturer from the Manufacturer list.
The Printers list is updated with the available drivers for the selected device manufacturer.Click
Next after selecting the device driver from the Printers list.
8. Enter a name for the shared printer device in the Printer name text box.
9. Click Next.
The Installing a printer window appears followed by the Printer Sharing window.
10. Select the Share this printer so that others on your network can find and use it option.
11. In the respective Share Name, Location, and Comment text boxes, enter a name, location, and
comment for the shared device.
12. Click Next.
You’ve successfully added printer window appears.
13. If the shared device has to be marked as the default printer, select the device and Set as the
default printer check box.
14. Click Finish.
The shared device is successfully installed.
Repeat the process of configuring and hosting a shared printer device in the cluster on the cluster node 2
machine.
Ensure that the details of the shared device are the same for both node 1 and node 2.
3.4 Installing and Configuring Track‐GreenSaver in the Cluster
Track‐GreenSaver fully supports running on a Failover Cluster using Microsoft Cluster Services (MSCS). It
enables tracking of virtual queues hosted within a standard Cluster Group using a standard Print Spooler
resource.
3.4.1 Installing Track‐GreenSaver on the Cluster Nodes
Track‐GreenSaver needs to be installed on each of the cluster nodes once all of the prerequisites are met.
3.4.1.1 Installing on the First Node
Step 1: Accept License and Specify Enterprise License:
1. From the Track‐GreenSaver installation directory, double‐click Setup.exe to start the installation.
2. In the License Agreement window, accept the license agreement.
3. Specify an Enterprise License by selecting a proper License XML file.
Specifying an Enterprise License by selecting a proper License XML file is required in order to
select the supported database models.
Step 2: Specify Full Setup:
Ensure to perform a full setup of Track‐GreenSaver on both the cluster nodes.
Step 3: Select the Database Type:
When prompted to select the database type, select an existing instance of SQL Database.
Specify the Servername and Instance that will host the Track‐GreenSaver database.
Step 4: Specify the SQL Instance:
Enter the SQL instance name that will host the database.
The SQL instance must be accessible from all cluster nodes.
Step 5: Specify the Service Logon:
Ensure that the Track‐GreenSaver Tracking service account runs under a service logon with the following
three privileges:
1. Local administrative privileges
2. Administrative rights to all clustered print queues
3. Read/write access to the database created during the Track‐GreenSaver installation
This database is typically named [PrintManager].
3.4.1.2 Installing on the Second Node
Step 1: Accept License and Specify Enterprise License:
1. From the Track‐GreenSaver installation directory, double‐click Setup.exe to start the installation.
2. In the License Agreement window, accept the license agreement.
3. Select a proper License XML file and specify an Enterprise License.
Specifying an Enterprise License by selecting a proper License XML file is required in order to
select the supported database models.
Step 2: Specify Full Setup:
Ensure to perform a Full Setup of Track‐GreenSaver on both the cluster nodes.
Step 3: Select the Database Type:
When prompted to select the database type, select an existing instance of SQL Database.
Specify the Servername and Instance that will host the Track‐GreenSaver database.
Step 4: Specify the SQL Instance:
1. Enter the SQL instance name used for installation on the first node.
The same SQL server/instance must be used on all nodes.
2. Select Yes to connect to an existing database when prompted to confirm that an existing database
has been detected.
Step 5: Specify the Service Logon:
Ensure that the Track‐GreenSaver Tracking service account runs under a service logon with the following
three privileges:
1. Local administrative privileges
2. Administrative rights to all clustered print queues
3. Read/write access to the database created during the Track‐GreenSaver installation
This database is typically named [PrintManager].
3.4.2 Creating the Track‐GreenSaver Resource
Once Track‐GreenSaver has been installed on all physical nodes, it must be added as a Generic Service
resource to the print cluster group. This is not done automatically by Print Manager Plus and needs to be
configured using Windows Services and the Cluster Administrator.
3.4.2.1 Configuring Services on Each Physical Node
To configure services on all physical cluster nodes:
1. On the first cluster node, click Start > Control Panel > Administrative Tools > Services.
The Services window appears.
2. Right‐click on the Print Manager Plus service in the Services window.
3. From the context menu, select Properties.
The Print Manager Plus Properties window appears.
4. To stop the service, go to GENERAL > SERVICE STATUS and click STOP.
5. From the Startup type drop‐down list, select Manual.
6. On the second cluster node, repeat steps 1 through 4.
3.4.2.2 Adding the Print Manager Plus Generic Resource and Bringing it Online
To add Print Manager Plus as a generic resource Failover Cluster Manager:
1. On the first cluster node, open Failover Cluster Manager.
2. Select the print server group that has to be tracked by Track‐GreenSaver.
3. Select the print server, then click Add a resource > 4 ‐ Generic Service on the right‐hand task pane.
The New Resource Wizard ‐ Select Service window appears.
4. Select Print Manager Plus from the list of services and click NEXT.
The New Resource Wizard ‐ Confirmation window appears.
5. Confirm No Startup Parameters. Complete the wizard by clicking Next through to the end of the
wizard.
Print Manager Plus is added as a Generic Service and displays in the Failover Cluster Manager
window.
6. Select the newly created service (Print Manager Plus) from the Failover Cluster Manager window,
right‐click and select Properties from the context menu.
The Print Manager Plus Properties window appears.
7. Select the Dependencies tab and insert Print Spooler as a required resource from the Resource
drop‐down list.
8. Click Apply and select General tab.
9. Select Use Network Name for computer name checkbox.
10. Click Apply and then click OK.
This step fails if Apply is not clicked as mentioned in Step 8.
11. Right‐click after selecting the Print Manager Plus service from the Failover Cluster Manager
window and select Bring this resource online from the context menu.
The Print Manager Plus service is online now.
3.4.3 Configuring the Cluster Service within Track‐GreenSaver Service
The final step, is to ensure that the Clustered Print Server is visible, and to enable cluster tracking on it.
Doing this sets special tracking flags to help ensure cluster queues are always tracked, and tracked
properly.
To configure the cluster service within Track‐GreenSaver Service:
1. Open Track‐GreenSaver Administrator and select Print Servers tab.
2. Select the server name that matches the clustered Print Server resource and click Enable Cluster
Support from the left‐hand pane.
The Cluster Enabled column now displays Yes for the clustered Print Server.
3. Stop and restart the clustered Print Manger Plus service by taking it offline, and then back online
from the Failover Cluster Manager window.
3.4.3.1 Managing Clustered Track‐GreenSaver Services
The tracking services installed on each physical node should be left set to Manual, and never
started or stopped from within Services or within Track‐GreenSaver.
It is best to start and stop tracking by bringing the resource online/offline.
3.4.3.2 Viewing Service Status on the Print Servers Tab
The state of the tracking resource can be viewed from the Print Servers tab of Track‐GreenSaver
Administrator. The name of the cluster Print Server is listed under the Server Name column. The state
(Running/Stopped) is displayed under the Status column of the Print Servers tab. In addition, the
currently Active node is displayed as Running. The backup nodes are displayed as Stopped, and come
online in the event of a failover.
Ports and Communication
Appendix A ‐ Ports and Communication
Celiveo uses ports to establish communication with network entities, including the devices, Celiveo
Server Services, and so on such as the following:
Purpose Steps to Test
Install a device using its IP address on Windows operating system,
Installation of Celiveo on Devices
and print a test page.
Configuration of Celiveo on Use telnet <device IP> 9400. A line with @PJL should appear on the
Devices screen.
Direct User ID Lookup against Replace the device with a client machine, and use LDAP test software
AD/LDAP such as Softerra LDAPbrowser to test the settings and access.
Authentication Gateway through Replace device with a client machine, and use telnet <server IP>
the Device 22000. Multiple lines of text should appear.
ID Lookup against AD/LDAP from
Use LDAP test software such as Softerra LDAP browser.
Celiveo Server Services
Install a device using its IP address on Windows operating system,
and print a test page.
Push Printing, Storage of Print
Jobs on Device Hard Disk Drive
Push printing is available for HP printing devices only.
Pull Printing Communication
Replace the device with a client machine, and use telnet <server IP>
Protocol with (Job List, Action
22000. Multiple lines of text should appear.
Requests)
Roaming Pull Printing with In case of an issue with the Windows firewall, visit:
Information Storage on Microsoft http://support.microsoft.com/kb/287932
SQL Server http://support.microsoft.com/kb/914277
Print Job Release from Celiveo In Windows operating system, install a device using its IP address,
Server Services to Device and print a test page.
The table below provides a comprehensive list of all the ports used by Celiveo solutions, and describes
the ports and applications used for communication between the Celiveo components that consist of the
Celiveo Server Services, Web Admin Server, Active Directory, Database (SQL) server, the device, and the
PC/laptop/workstation.
1 Celiveo ‐ All Ports Summary
Application name/ Destination Prot

Origin Destination Comments
service, exe file Port ocol
Used when Celiveo
Track‐GreenSaver is
installed on a remote
Celiveo Celiveo Track‐
machine and Celiveo
Server GreenSaver FTP protocol 21 TCP
Server Services is
Services Server
configured to use FTP
for tracking data
transfer.
Used for sending
deleted/expired job
Serverless Celiveo Track‐
tracking data to the
Pull Printing GreenSaver FTP protocol 21 TCP
central Celiveo Track‐
Client Server
GreenSaver through the
FTP service.
Celiveo
External openssh 22 SSH SSH
Hardware
Printer Celiveo Celiveo Hardware
25 SMTP SMTP email gateway
device Hardware email gateway
Celiveo Resolve Hostname to IP
DNS DNS Service 53 TCP
Hardware address
SQL Server The default port is 80,
Celiveo
Reporting but the port varies
Track‐ SQL Server Reporting
80 TCP according to where the
GreenSaver Service Service
SQL Server Reporting
Reports
Service is installed.
Celiveo Web
Admin Celiveo Celiveo Hardware
80 HTTP HTTP Web Server
Software/ Hardware Web Server
Printer
Celiveo
Printer EWS Page 80 HTTP Embedded Web Server
Hardware
Celiveo Update Date Time from
NTP NTP Server 123 UDP
Hardware NTP Server
Celiveo Web
Celiveo
Admin SNMP 161 SNMP SNMP
Hardware
Software
Celiveo
Printer SNMPD 161 SNMP Collecting tracking data
Hardware

Celiveo
Printer SNMP Trap 162 SNMP SNMP Trap
Hardware
Celiveo Web
Printing Used for detection of
Admin SNMP Protocol 161, 162 UDP
Device the device type.
Software
Celiveo OpenLDAP proxy
Printer 389 LDAP OpenLDAP Proxy
Hardware server
Celiveo
LDAP AD/OpenLDAP Server 389 LDAP Direct AD authentication
Hardware
Used for Direct LDAP
Printing Active communication from the
lsaas.exe 389 or 636* TCP
Device Directory device. Port 636 is used
for SSL communication.
Celiveo Web Used for Local ID list
Active
Admin lsaas.exe 389 or 636* TCP generation from the
Directory
Software Active Directory.
Celiveo Used if Celiveo Server
Active
Server lsaas.exe 389, 636* TCP Services is used for
Directory
Services authentication.
Celiveo
Used for querying users/
Track‐ Active
lsaas.exe 389 or 636* TCP groups from the Active
GreenSaver Directory
Directory.
Server
Serverless
Active Used when applying the
Pull Printing lsaas.exe 389 or 636* TCP
Directory Aliasing function.
Client
Used for querying users/
Active
Track‐PM
Directory
lsaas.exe 389 or 636* TCP groups from the Active
Directory.
Celiveo Web
Admin Celiveo Celiveo Hardware
443 HTTPS HTTPS Web Server
Software/ Hardware Web Server
Printer
Celiveo Embedded secure Web
Printer Secure EWS Page 443 HTTPS
Hardware Server

Used when Celiveo
Track‐GreenSaver is
installed on a remote
Celiveo Celiveo Track‐
machine, and Celiveo
Server GreenSaver HTTPS protocol 443 TCP
Server Services is
Services Server
configured to use HTTPS
for tracking data
transfer.
Used for sending
deleted/expired job
Serverless Celiveo Track‐
tracking data to the
Pull Printing GreenSaver HTTPS protocol 443 TCP
central Celiveo Track‐
Client Server
GreenSaver through the
HTTPS service.
Celiveo
Track‐ HP DesignJet Used for downloading
HTTPS/HTTP 443 or 80 TCP
GreenSaver printers tracking data.
Server
Used for accessing the
Track‐PM SQL Server SQL Server 1433 TCP database for Rules and
Tracking.
The OXPd platform on
the HP printing device
uses these ports to
download the Celiveo
Embedded Solution to
the HP FutureSmart
devices. HP Legacy
devices use these ports
to contact Celiveo Web
Admin Software after
Celiveo Web
Printing the Celiveo Embedded
Admin w3wp.exe 1443, 8082 TCP
Device Solution is installed on
Software
the device (for the first
sync only). If SSL is
configured on the
Celiveo Web Admin
server, then only Port
1443 is used. Port 8082
and 1443 may change,
depending on the IIS
website where Celiveo
Web Admin is installed.

Celiveo
sqlservr.exe, Used for accessing
Track‐ 1433, 1434
SQL Server sqlagent.exe, TCP database for Rules and
GreenSaver (UDP), 49240
sqlbrowser.exe Tracking.
Server
Printing Serverless Pull Used for job list/print/
SJ Print‐PS Server.exe 22000 TCP
Device Printing Client delete requests.
Celiveo Celiveo Server Celiveo Server Services Celiveo Server Services
22000 TCP
Hardware Services Service pull print service
Celiveo Web
Celiveo Server Used for sending
Admin SJ Print‐PS Server.exe 22000 TCP
Services request for Local ID List.
Software
Celiveo Used for forwarding
Serverless Pull
Server SJ Print‐PS Server.exe 22000 TCP print/delete requests
Printing Client
Services from the device.
Port 22000 is used for all
Printing Celiveo Server SJ Print‐PS Server.exe general communication,
22000 TCP
Device Services (22000) except tracking data
transfer.
Celiveo Print Celiveo_Print_ERP_for Used for communication
3200, 3300,
ERP for SAP _SAP_Unified_Print_Q between Celiveo
SAP server 3600, 3900, TCP
Unified Print ueue_<x64/x86>‐ Enterprise and the SAP
8000, 21212
Queue <version>.exe system
Jetmobile.PrintServer.
Printing Celiveo Server Port 65211 is used for
WindowsService.exe 65211 TCP
Device Services tracking data transfer.
(65211)
https://[PRINTER_IP]/ Used for sending Celiveo
Celiveo Web
Printing hp/device/ 80, 443, 9100, Embedded Solution and
Admin TCP
Device jetmobile.cfg_deploy 9400 printer configuration
Software
ment (9400) files.
Printer/
Celiveo Web Celiveo
OXPd Server 8081 HTTP OXPd Server
Admin Hardware
Software
Celiveo_Print_ERP_for
Celiveo Print Celiveo Print
_SAP_BC‐ Used for communication
ERP for SAP ERP for SAP
XOM_Connector_<Wi 8443 HTTPS between SAP system
BC‐XOM Unified Print
n or Linux>‐ and Celiveo Enterprise
Connector Queue
version>.exe

Celiveo
Server
Print data stream/
Services/ Celiveo Celiveo Hardware IO Raw
9100 Celiveo Embedded
Celiveo Web Hardware filter Data
Solution updates
Admin
Software
Celiveo Raw
Printer Raw Data 9100 Print jobs
Hardware Data
Celiveo
Printing Network printer print Used for sending print
Server 9100 TCP
Device jobs job data.
Services
Celiveo sqlservr.exe,
1433, 1434 TCP/ Used for access to the
Server SQL Server sqlagent.exe,
(UDP), 49240 UDP roaming database.
Services sqlbrowser.exe
SQL Server sqlservr.exe, Used for communication
1433, 1434 TCP/
Reporting SQL Server sqlagent.exe, from the Report Server
(UDP), 49240 UDP
Service sqlbrowser.exe to the SQL Server.
Serverless sqlservr.exe,
1433, 1434 Used for accessing
Pull Printing SQL Server sqlagent.exe, TCP
(UDP), 49240 Roaming Database.
Client sqlbrowser.exe
Serverless Used for sending print
Printing Network printer print
Pull Printing 9100 TCP job to the device for
Device jobs
Client printing.
Celiveo Track‐ Used for viewing reports
Client Celiveo Track‐
GreenSaver 48110 TCP from the client machine
Browser GreenSaver Report
Reports in the network.
Serverless Jetmobile.PrintServer. Used as a part of the
Celiveo Server
Pull Printing WindowDbGateWaySe 65212 TCP new IP resolution for
Services
Client rvice.exe Serverless Pull Printing.
Celiveo
Used for getting the
Track‐ RPC Dynamic
Track‐PM SCManager (SC) TCP status of the Track‐PM
GreenSaver Ports
service.
Server
Celiveo Web Celiveo Web Admin
Celiveo
Admin Add printer response Dynamic TCP Software port part of
Hardware
Software URL
Celiveo Web Admin Celiveo Web Admin
Celiveo Event Log Software to send
Software event log
Hardware Service Dynamic TCP
receiver
*. If SSL is enabled, Port 636 is used, otherwise Port 389 is used.
Ensure that Port 8081 is added to the firewall exemption list by the network administrator. OPS
registration fails if this is not done.
Card Reader Specifications
Appendix B ‐ Card Reader Specifications
This section describes the Celiveo Card reader specifications.
For a list of technical prerequisites for using SecureJet, including the hardware and software
requirements, see the Celiveo Enterprise 8.0 Release Notes and device specific administrator settings
guides.
As support for new devices is constantly evolving, for the up‐to‐date list of the supported printers, multi‐
function printers, and digital senders, visit https://www.celiveo.com and https://www.celiveo.com/
solutions/celiveo‐enterprise/celiveo‐enterprise‐authentication.
1 Celiveo Card Reader Specifications
The list of card readers (Celiveo Multicard Reader Type A & B) supported by Celiveo solutions and their
specifications are given the following sections.
1.1 Celiveo Multicard Reader Type A Specifications
The following table provides the detailed Celiveo multicard reader type A specifications:
Mifare
HID
EM‐ Casi Nex HID DesFire,
Card Reader Type Indala HiTag Pro Keri Legic
Marin Rusco Watch iCLASS ISO1569,
x
ISO14443A
Frequency
125 Khz       
13.56 Mhz   
Celiveo Multicard Reader Type A USB General Specifications
Supply Voltage @25ºC
Recommended USB Operating Voltage 4.35‐5.25 VDC
Operating and Storage Environments
Operating Temperature Range: ‐20ºC to +70ºC
Storage Temperature Range: ‐30ºC to +80ºC
Relative Humidity, non‐condensing @25ºC: 95%
Reader Interface Connection: USB Type‐A standard
USB 1.0, 1.0a, 1.1 Compliant
Interface
Visual Tri Color (LED) ‐ Red, Green & Amber
Audible Frequency: 2800 Hz
Mechanical
Dimension 53mm x 83mm x 12mm
Weight 120 gms
Color Gray (RAL 7016)
Electrical Specifications
Current Drain (mA @5VDC)
Typical Max
Average
Stand by Current 1.5 mA 2.5 mA
Configured Current 45 mA 95 mA
Typical Read Height
25.4 mm Typical; Up to 76.2 mm Dependent on Proximity Card type and Environmental Conditions
Certifications
FCC USA
ICES Canada
CE European Union
C‐Tick Australia & New Zealand
RoHS European Union
1.2 Celiveo Multicard Reader Type B Specifications
The following table provides the detailed Celiveo multicard reader type B specifications:
iCLASS MIFARE 1K/4K
Card Reader Indala Casi DESFire 0.6 ISO 14443 A
HID Prox SE Ultralight/C
Type Prox Rusco EV1 15693
Seos Plus
Frequency
125 Khz   
13.56 Mhz    
Celiveo Multicard Reader Type B USB General Specifications
Supply Voltage @25ºC
Recommended USB Operating Voltage 4.35‐5.00 VDC
Operating and Storage Environments
Operating Temperature: 0° ‐ 50° C (32° ‐ 122° F)
Operating Humidity: 10‐90% Relative Humidity
Storage Temperature: 20° ‐ 65° C (‐4° ‐ 149° F)
Reader Interface Connection: USB Type‐B standard
USB 1.1, 2.0 Compliant
Interface
Visual Status indicators: Dual color LED ‐ Embedded Green=ready, Red=busy. External ‐ White=Ready,
Blue=Busy
Audible Frequency: 2800 Hz
Mechanical
Dimensions 66 mm x 55 mm x 9 mm
Weight Approx. 14 gms
Color Black
Electrical Specifications
Current Drain (mA @5VDC)
Typical Read Height
25.4 mm Typical; Up to 76.2 mm Dependent on Proximity Card type and Environmental Conditions
FCC USA
ICES Canada
CE European Union
UL USA
WEEE European Union
RoHS European Union
(REACH)
Track‐GreenSaver Database Backup
Appendix C ‐ Track‐GreenSaver Database
Backup
This chapter specifies the method of database backup for Celiveo Track‐GreenSaver.
1 Introduction
This section provides basic examples and details to assist in backing up the Celiveo Track‐GreenSaver
database. The process for backing up SQL Databases can vary depending on the version of SQL being
used, and how the setup was done. The database may not be on the print server if a SQL Server within
the network is being used.
DISCLAIMER:
Jetmobile Pte Ltd, Software Shelf International Inc, and its staff are not responsible for the proper
and safe backup of your database. This document provides recommendations and guidelines to
assist a qualified Technician or Database Administrator in the backup procedure.
2 Backing up an MS SQL/MSDE database with the Microsoft
SQL Server Management Studio Express
For a successful database backup, ensure that the appropriate SQL Server and Instance name is
selected. For more information on determining the SQL Server and Instance names, see the section
Configuring Celiveo Track‐GreenSaver Service in Configuring Celiveo Track‐GreenSaver chapter.
Once it is verified that an MS SQL or MSDE database is used, proceed to create a backup of that database.
Creating a backup file is usually done using the SQL Management Studio from Microsoft. Microsoft
provides a free version called the SQL Management Studio Express. The SQL Management Studio
Express can be obtained from http://www.microsoft.com/downloads.
The following section demonstrates a sample process of backing up the database.
2.1 Creating the Backup
1. Open the SQL Management Studio Express.
SQL Management Studio is in Start menu under Microsoft SQL Server 200X depending on
which version is installed.
2. Connect to the SQL Instance.
3. Enter the instance name in the Server name field and click Connect.
PERMISSIONS:
By default, it recommended to use Windows Authentication. This requires the user running
the management studio to be an Administrator of that server, or have been otherwise
granted database permissions.
4. Once connected to the SQL Instance, browse to the Celiveo Track‐GreenSaver Databases folder.
Locate the database named PrintManager.
5. Right‐click on the PrintManager database and select Tasks > Backup. A dialog with backup
options appears.
6. Leave all the default settings and click OK. The backup is is created..
This may take several minutes.
The image below provides a reference to some of the basic options.
ADVANCED OPTIONS:
A variety of advanced options are available, but are beyond the scope of this example. For
advanced backup options, please consult Microsoft SQL Server Documentation or a qualified
Database Administrator.
3 Backing up an MS SQL/MSDE Database Files Manually
As an alternative to backing up MS SQL/MSDE databases using the SQL Management Studio, one can also
backup the PrintManager.mdf and PrintManager_Log.LDF files manually.
3.1 Creating the Backup Manually:
Login to the server that is hosting the Celiveo Track‐GreenSaver database and perform the following
steps.
1. Go to Administrative Tools > Services and locate the service named Print Manager Plus and stop
it.
2. Stop the SQL Service hosting the database. The name of the service running the SQL Service may
vary. Typically, for installations of Celiveo Track‐GreenSaver, it is SQL Server (PMP). If it is difficult
to determine the SQL Service running the database, consult the Database Administrator.
3. Locate the Database Files: Celiveo Track‐GreenSaver has two database files. They are
PrintManager.mdf and PrintManager_Log.ldf. These are typically stored at one of the following
locations:
SQL 2005/2008 Express & Standard Editions:
Default Location: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Data
SQL 2000/MSDE Editions:
Default Location: C:\Program Files\Microsoft SQL Server\MSSQL\Data
If Celiveo Track‐GreenSaver or SQL has been installed multiple times using multiple data‐
bases, make sure the current database is backed up. All locations and instances of Print‐
Manager.mdf and PrintManager_log.ldf should be located and backed up on the server to
ensure a safe backup.
It is recommended to use the Microsoft SQL Server Management Studio Express to perform
a backup as described in the previous section
4. Once the files have been located, it is recommended to copy them to another directory for backup.
Off server backups are always recommended in case of total server failure.
Make sure that only a copy is made and that the original database files are not removed
from their original location.
5. Start the SQL Server service.
6. Once the SQL Server service is up and running, start the Print Manager Plus service.
Other print servers running Celiveo Track‐GreenSaver may be adversely affected by bringing the
Database Offline and Online for backup.
It is recommended that all other servers running the Print Manager Plus service have their Print
Manager Plus service restarted, or that the machine itself has restarted.
Appendix D ‐ Consolidated Celiveo Web Admin Activity & Device
Features Mapping
Celiveo solution provides options to control many device features from Celiveo Web Admin.
Activities Web Admin Future Smart HP Legacy Ricoh Toshiba Konica Minolta OfficeJet Pro

Copy Copy Copy Copy Copy Copie Copy Copy
Color Copy Color Copy Color Copy Color Copy NA Copie Copy Copy
Send to Email Send to Email Email Email Email Scan to Email Scan to E‐mail, Scan to Email
Save to User Box
Send to Fax Send to Fax Fax Fax NA Fax Fax Fax
Send to Folder Send to Folder Save to Send to Network NA SMB send Scan to network
Network Folder Folder folder, Scan To
FTP send
Consolidated Celiveo Web Admin Activity & Device Features
Computer
WebDAV send
Scan server
Celiveo Enterprise 8.0.116.0627 Administrator’s Guide
sending
Job Storage Job Storage, Save to device Job Storage NA Scan to File
Create Stored memory
Job Storage, Save to USB NA NA Scan to USB Scan to USB
Create Stored stick
Job Storage Retrieve from NA NA
Device Memory
Job Storage Retrieve from NA NA
USB
Job Storage, Save to NA NA NA
Mapping 337
Create Stored Network Folder
Activities Web Admin Future Smart HP Legacy Ricoh Toshiba Konica Minolta OfficeJet Pro

Digital Sending Digital sending NA Digital sending NA NA NA NA
Service (DSS) service (DSS) service (DSS)
Secondary Email Email Email
Omtool Omtool Custom Activi‐ Custom NA NA NA NA
ties Activities
Printer vendor NA NA NA NA Scan to WS Scan NA
specific custom eFilingAccess
activiites NA NA NA NA Scan to TWAIN Scan NA
WSScanPush
Consolidated Celiveo Web Admin Activity & Device Features
Celiveo Enterprise 8.0.116.0627 Administrator’s Guide
Mapping 338
End User License Agreement
PLEASE READ CAREFULLY BEFORE USING THIS SOFTWARE PRODUCT: This End‐User License
Agreement ("EULA") is a contract between (a) you (either an individual or the entity you represent)
and (b) Jetmobile Pte Ltd ("CELIVEO") that governs your use of the software product ("Software").
This EULA does not apply if there is a separate license agreement between you and CELIVEO or its
suppliers for the Software, including a license agreement in online documentation. The term
"Software" may include (i) associated media, (ii) a user guide and other printed materials, and (iii)
"online" or electronic documentation (collectively "User Documentation").
RIGHTS IN THE SOFTWARE ARE OFFERED ONLY ON THE CONDITION THAT YOU AGREE TO ALL TERMS
AND CONDITIONS OF THIS EULA. BY INSTALLING, COPYING, DOWNLOADING, OR OTHERWISE USING
THE SOFTWARE, YOU AGREE TO BE BOUND BY THIS EULA. IF YOU DO NOT ACCEPT THIS EULA, DO NOT
INSTALL, DOWNLOAD, OR OTHERWISE USE THE SOFTWARE. IF YOU PURCHASED THE SOFTWARE BUT
DO NOT AGREE TO THIS EULA, PLEASE RETURN THE SOFTWARE TO YOUR PLACE OF PURCHASE
WITHIN FOURTEEN DAYS FOR A REFUND OF THE PURCHASE PRICE; IF THE SOFTWARE IS INSTALLED
ON OR MADE AVAILABLE WITH ANOTHER CELIVEO PRODUCT, YOU MAY RETURN THE ENTIRE
UNUSED PRODUCT.
1. THIRD PARTY SOFTWARE. The Software may include, in addition to CELIVEO proprietary software ("CELIVEO
Software"), software under licenses from third parties ("Third Party Software" and "Third Party License"). Any
Third Party Software is licensed to you subject to the terms and conditions of the corresponding Third Party
License indicated in the documentation. If the Third Party Licenses include licenses that provide for the
availability of source code (such as the GNU Limited General Public License) and the corresponding source code
is not included with the Software, then check the knowledge pages of CELIVEO's website (www.celiveo.com) to
learn how to obtain such source code.
2. LICENSE RIGHTS. You will have the following rights provided you comply with all terms and conditions of this
EULA:
a.Use. CELIVEO grants you a license to Use one copy of the CELIVEO Software. "Use" means installing, copying,
storing, loading, executing, displaying, or otherwise using the CELIVEO Software. You may not modify the
CELIVEO Software or disable any licensing or control feature of the CELIVEO Software. If this Software is
provided by CELIVEO for Use with a specific model of imaging or printing product (for example, if the Software
is a printer driver, firmware, or add‐on), the CELIVEO Software may only be used with such product and model.
Additional restrictions on Use may appear in the User Documentation. You may not separate component parts
of the CELIVEO Software for Use. You do not have the right to distribute the CELIVEO Software.
b.Copying. Your right to copy means you may make archival or back‐up copies of the CELIVEO Software,
provided each copy contains all the original CELIVEO Software's proprietary notices and is used only for back‐up
purposes.
3. UPGRADES. To Use CELIVEO Software provided by CELIVEO as an upgrade, update, or supplement (collectively
"Upgrade"), you must first be licensed for the original CELIVEO Software identified by CELIVEO as eligible for
the Upgrade, then have a valid support and maintenance contract from CELIVEO. To the extent the Upgrade
supersedes the original CELIVEO Software, you may no longer use such CELIVEO Software. This EULA applies to
each Upgrade unless CELIVEO provides other terms with the Upgrade. In case of a conflict between this EULA
and such other terms, the other terms will prevail.
4. TRANSFER.
a.Third Party Transfer. The initial owner of the CELIVEO Software may perform a one‐time transfer of the
CELIVEO Software to another end user within the world region where the original purchase happened: North
America, Latin America, Europe, Middle East/Africa, Australia/New Zealand or Asia. This transfer may happen if
and only if the solution has not been used before that transfer as it is authorized exclusively to allow resellers
to transfer license rights easily.
b.Any transfer will include all component parts, media, User Documentation, this EULA, and if applicable, the
Certificate of Authenticity. The transfer may not be an indirect transfer, such as a consignment. Prior to the
transfer, the end user receiving the transferred Software will agree to this EULA. Upon transfer of the CELIVEO
Software, your license is automatically terminated.
c.Restrictions. You may not rent, lease or lend the CELIVEO Software or Use the CELIVEO Software for
commercial timesharing or bureau use.
You may not sublicense, assign or otherwise transfer the CELIVEO Software except as expressly provided in this
EULA.
5. PROPRIETARY RIGHTS. All intellectual property rights in the Software and User Documentation are owned by
CELIVEO or its suppliers and are protected by law, including applicable copyright, trade secret, patent, and
trademark laws. You will not remove any product identification, copyright notice, or proprietary restriction
from the Software.
6. LIMITATION ON REVERSE ENGINEERING. You may not reverse engineer, decompile, or disassemble the
CELIVEO Software, except and only to the extent that the right to do so is allowed under applicable law.
7. CONSENT TO USE OF DATA. CELIVEO and its affiliates may collect and use technical information you provide in
relation to (i) your Use of the Software, or (ii) the provision of support services related to the Software.
All such information will be subject to CELIVEO's privacy policy.
CELIVEO will not use such information in a form that personally identifies you except to the extent necessary to
enhance your Use or provide support services.
8. LIMITED WARRANTY. To the original purchaser, CELIVEO warrants the Software part loaded on the product and
provided separately for ninety (90) days from the date the Product is delivered. If during this period a defect in
the Software should occur, after written confirmation by CELIVEO or its distributor of the defective status, you
may return the product with a copy of your receipt or other proof of payment to an authorized CELIVEO
distributor, and CELIVEO will replace the Software without charge. Your sole and exclusive remedy in the event
of a defect is expressly limited to a repair or replacement of the part as provided above.CELIVEO warrants all
Celiveo hardware components to be free from defects, and will‐at this option‐repair or replace any hardware
part of the product should it fail within one year from the first date of shipment. This warranty is limited to
defects in workmanship or materials, and does not cover customer damage, abuse or unauthorized
modification. If the hardware parts of the product fails or does not perform as warranted, your sole recourse
shall be repair or replacement as described above.
CELIVEO does not warrant that the functions contained in this Product will meet your requirements that the
Product operation will be uninterrupted or error free or that breach of security will never occur, or that the
CELIVEO Software or hardware does not infringe any third party rights.
Information contained in the user manual is subject to change without notice and does not represent a
commitment on the part of CELIVEO.
FOR PRODUCTS DELIVERED IN AUSTRALIA: Our goods come with guarantees that cannot be excluded under the
Australian Consumer Law. You are entitled to a replacement or refund for a major failure and for compensation
for any other reasonably foreseeable loss or damage. You are also entitled to have the goods repaired or
replaced if the goods fail to be of acceptable quality and the failure does not amount to a major failure.
9. LIMITATION OF LIABILITY. Notwithstanding any damages that you might incur, the entire liability of CELIVEO
and its suppliers under this EULA and your exclusive remedy under this EULA will be limited to the greater of
the amount actually paid by you for the Product divided by the numbers of years it has been used by you or
US$5.00. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL CELIVEO OR ANYONE
ELSE WHO HAS BEEN INVOLVED DIRECTLY OR INDIRECTLY IN THE CREATION, PRODUCTION OR DELIVERY OF
THIS PRODUCT BE LIABLE TO YOU FOR ANY DAMAGES INCURRED BY THE USE OF THIS PRODUCT.
THESE DAMAGES INCLUDE, BUT ARE NOT LIMITED TO, THE FOLLOWING:
LOST PROFITS, LOST SAVINGS OR OTHER INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE
OR INABILITY TO USE THIS PRODUCT, OR FOR ANY CLAIM BY ANY OTHER PARTY. THE ENTIRE RISK AS TO THE
RESULTS AND PERFORMANCE OF THE PRODUCT AND MANUAL IS ASSUMED BY YOU. THE SOLE AND EXCLUSIVE
LIABILITY OF CELIVEO, REGARDLESS OF THE FORM OF ACTION, WILL NOT EXCEED THE PAYMENTS MADE FOR
THIS LICENSE. ANY REMEDIES SPECIFIED IN THIS LICENSE AGREEMENT ARE EXCLUSIVE. Some states or other
jurisdictions do not allow the exclusion or limitation of incidental or consequential damages, so the above
limitation or exclusion may not apply to you.
CELIVEO products are not suitable for use in life‐support applications, biological hazard applications, nuclear
control applications, or radioactive areas. You understand and agree that none of CELIVEO products or
components, software or hardware, are intended for applications that provide life support or any critical
function necessary for the support of protection of life, property or business interests.
10. U.S. GOVERNMENT CUSTOMERS. If you are a U.S. Government entity, then consistent with FAR 12.211 and
FAR 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for
Commercial Items are licensed under the applicable CELIVEO commercial license agreement.
11. COMPLIANCE WITH EXPORT LAWS. You acknowledge that the licensed Software, Hardware and related
Documentation delivered to you under this Agreement are subject to Singapore and European Union export
control laws and regulations, and may also be subject to the jurisdiction in which it was obtained, if outside of
Singapore or the European Union. You agree to comply with all applicable export control laws, rules and
regulations applicable to the Software, Hardware and Documentation. You specifically agree that You will not
export, re‐export, or transfer the Software, Hardware or Documentation, in whole or in part, to any country,
person, or entity subject to Singapore or European Union export restrictions. You will not, without government
authorization, export, re‐export or transfer the Software, Hardware or Documentation (i) to any country to
which Singapore or the European Union has embargoed or restricted the export of goods or services, or to any
national of any such country, wherever located, who intends to transmit or transport the products back to such
country; (ii) to any end‐user whom You know or have reason to know, will utilize them in the design,
development, production or use of nuclear, chemical or biological materials, facilities, or weapons.
12. RESERVATION OF RIGHTS. CELIVEO and its suppliers reserve all rights not expressly granted to you in this
EULA.
13. Celiveo is not licensed for Commercial Use under the End User License Agreement. Unless you obtain a
Commercial License from CELIVEO you may not redistribute Celiveo to third parties, bundle the software in
products intended for resale, or use Celiveo to generate revenue by providing third party management,
support or consulting services related to printers, printer supplies or other devices.
14. This agreement shall be constructed, interpreted and governed by the laws of Singapore. You agree that this
is the complete and exclusive statement of this agreement which supersedes any prior agreement or other
communication between us on this subject.
©2011 ‐ 2016 Jetmobile Pte Ltd
Revision 02/2016
User Notification
User Notification
This product includes software developed by open source software used with the following license permissions:
OPENLDAP PUBLIC LICENSE
Version 2.8, 17 August 2003
Redistribution and use of this software and associated documentation ("Software"), with or without modification, are
permitted provided that the following conditions are met:
1. Redistributions in source form must retain copyright statements and notices,
2. Redistributions in binary form must reproduce applicable copyright statements and notices, this list of conditions, and the
following disclaimer in the documentation and/or other materials provided with the distribution, and
3. Redistributions must contain a verbatim copy of this document.
The OpenLDAP Foundation may revise this license from time to time. Each revision is distinguished by a version number. You
may use this Software under terms of this license revision or under the terms of any subsequent revision of the license.
THIS SOFTWARE IS PROVIDED BY THE OPENLDAP FOUNDATION AND ITS CONTRIBUTORS "AS IS" AND ANY EXPRESSED OR
IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OPENLDAP FOUNDATION, ITS CONTRIBUTORS, OR THE
AUTHOR(S) OR OWNER(S) OF THE SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
The names of the authors and copyright holders must not be used in advertising or otherwise to promote the sale, use or other
dealing in this Software without specific, written prior permission. Title to copyright in this Software shall at all times remain
with copyright holders.
OpenLDAP is a registered trademark of the OpenLDAP Foundation.
Copyright 1999‐2003 The OpenLDAP Foundation, Redwood City, California, USA. All Rights Reserved. Permission to copy and
distribute verbatim copies of this document is granted.
NETPLUGD
Copyright 2003 Key Research, Inc.
“netplugd” is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License,
version 2, as published by the Free Software Foundation. You are forbidden from redistributing or modifying it under the terms
of any other license, including other versions of the GNU General Public License.
“netplugd” is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty
of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
LINUX KERNEL
Linux Kernel license is covered under GNU GENERAL PUBLIC LICENSE
GNU GENERAL PUBLIC LICENSE
Version 2, June 1991
Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
51 Franklin Street, Fifth Floor, Boston, MA 02110‐1301 USA
Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.
Preamble
The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General
Public License is intended to guarantee your freedom to share and change free software‐‐to make sure the software is free for
all its users. This General Public License applies to most of the Free Software Foundation's software and to any other program
User Notification
whose authors commit to using it. (Some other Free Software Foundation software is covered by the GNU Lesser General
Public License instead.) You can apply it to your programs, too.
When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make
sure that you have the freedom to distribute copies of free software (and charge for this service if you wish), that you receive
source code or can get it if you want it, that you can change the software or use pieces of it in new free programs; and that you
know you can do these things.
To protect your rights, we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the
rights. These restrictions translate to certain responsibilities for you if you distribute copies of the software, or if you modify it.
For example, if you distribute copies of such a program, whether gratis or for a fee, you must give the recipients all the rights
that you have. You must make sure that they, too, receive or can get the source code. And you must show them these terms
so they know their rights.
We protect your rights with two steps: (1) copyright the software, and (2) offer you this license which gives you legal
permission to copy, distribute and/or modify the software.
Also, for each author's protection and ours, we want to make certain that everyone understands that there is no warranty for
this free software. If the software is modified by someone else and passed on, we want its recipients to know that what they
have is not the original, so that any problems introduced by others will not reflect on the original authors' reputations.
Finally, any free program is threatened constantly by software patents. We wish to avoid the danger that redistributors of a
free program will individually obtain patent licenses, in effect making the program proprietary. To prevent this, we have made
it clear that any patent must be licensed for everyone's free use or not licensed at all.
The precise terms and conditions for copying, distribution and modification follow.
GNU GENERAL PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be
distributed under the terms of this General Public License. The "Program", below, refers to any such program or work, and
a "work based on the Program" means either the Program or any derivative work under copyright law: that is to say, a work
containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language.
(Hereinafter, translation is included without limitation in the term "modification".) Each licensee is addressed as "you".
Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The
act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a
work based on the Program (independent of having been made by running the Program). Whether that is true depends on
what the Program does.
1. You may copy and distribute verbatim copies of the Program's source code as you receive it, in any medium, provided that
you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep
intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the
Program a copy of this License along with the Program.
You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in
exchange for a fee.
2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and
copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these
conditions:
a. You must cause the modified files to carry prominent notices stating that you changed the files and the date of any
change.
b. You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program
or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License.
c. If the modified program normally reads commands interactively when run, you must cause it, when started running for
such interactive use in the most ordinary way, to print or display an announcement including an appropriate copyright
notice and a notice that there is no warranty (or else, saying that you provide a warranty) and that users may redistribute
the program under these conditions, and telling the user how to view a copy of this License. (Exception: if the Program
User Notification
itself is interactive but does not normally print such an announcement, your work based on the Program is not required to
print an announcement.)
These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the
Program, and can be reasonably considered independent and separate works in themselves, then this License, and its
terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same
sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this
License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of
who wrote it.
Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the
intent is to exercise the right to control the distribution of derivative or collective works based on the Program.
In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the
Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License.
3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under
the terms of Sections 1 and 2 above provided that you also do one of the following:
a. Accompany it with the complete corresponding machine‐readable source code, which must be distributed under the
terms of Sections 1 and 2 above on a medium customarily used for software interchange; or,
b. Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your
cost of physically performing source distribution, a complete machine‐readable copy of the corresponding source code, to
be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or,
c. Accompany it with the information you received as to the offer to distribute corresponding source code. (This alternative
is allowed only for noncommercial distribution and only if you received the program in object code or executable form
with such an offer, in accord with Subsection b above.)
The source code for a work means the preferred form of the work for making modifications to it. For an executable work,
complete source code means all the source code for all modules it contains, plus any associated interface definition files,
plus the scripts used to control compilation and installation of the executable. However, as a special exception, the source
code distributed need not include anything that is normally distributed (in either source or binary form) with the major
components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component
itself accompanies the executable.
If distribution of executable or object code is made by offering access to copy from a designated place, then offering
equivalent access to copy the source code from the same place counts as distribution of the source code, even though third
parties are not compelled to copy the source along with the object code.
4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any
attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your
rights under this License. However, parties who have received copies, or rights, from you under this License will not have
their licenses terminated so long as such parties remain in full compliance.
5. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to
modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this
License. Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your
acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or
works based on it.
6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license
from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not
impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing
compliance by third parties to this License.
7. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent
issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of
this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy
simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not
distribute the Program at all. For example, if a patent license would not permit royalty‐free redistribution of the Program
by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this
License would be to refrain entirely from distribution of the Program.
User Notification
If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is
intended to apply and the section as a whole is intended to apply in other circumstances.
It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity
of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system,
which is implemented by public license practices. Many people have made generous contributions to the wide range of
software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to
decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice.
This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License.
8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces,
the original copyright holder who places the Program under this License may add an explicit geographical distribution
limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such
case, this License incorporates the limitation as if written in the body of this License.
9. The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time.
Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or
concerns.
Each version is given a distinguishing version number. If the Program specifies a version number of this License which
applies to it and "any later version", you have the option of following the terms and conditions either of that version or of
any later version published by the Free Software Foundation. If the Program does not specify a version number of this
License, you may choose any version ever published by the Free Software Foundation.
10. If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write
to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free
Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving
the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally.
NO WARRANTY
11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT
PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR
OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE
PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY
OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR
DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR
INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED
INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY
OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
END OF TERMS AND CONDITIONS
OPENSC, LIBUSB, CCID and GEMALTO .NET PKCS11
These open source are covered under GNU Lesser General Public License
GNU LESSER GENERAL PUBLIC LICENSE
Version 2.1, February 1999
Copyright (C) 1991, 1999 Free Software Foundation, Inc.
59 Temple Place, Suite 330, Boston, MA 02111‐1307 USA
Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.
[This is the first released version of the Lesser GPL. It also counts as the successor of the GNU Library Public License, version 2,
hence the version number 2.1.]
User Notification
Preamble
The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General
Public Licenses are intended to guarantee your freedom to share and change free software‐‐to make sure the software is free
for all its users.
This license, the Lesser General Public License, applies to some specially designated software packages‐‐typically libraries‐‐of
the Free Software Foundation and other authors who decide to use it. You can use it too, but we suggest you first think
carefully about whether this license or the ordinary General Public License is the better strategy to use in any particular case,
based on the explanations below.
When we speak of free software, we are referring to freedom of use, not price. Our General Public Licenses are designed to
make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish); that you
receive source code or can get it if you want it; that you can change the software and use pieces of it in new free programs; and
that you are informed that you can do these things.
To protect your rights, we need to make restrictions that forbid distributors to deny you these rights or to ask you to surrender
these rights. These restrictions translate to certain responsibilities for you if you distribute copies of the library or if you
modify it.
For example, if you distribute copies of the library, whether gratis or for a fee, you must give the recipients all the rights that
we gave you. You must make sure that they, too, receive or can get the source code. If you link other code with the library,
you must provide complete object files to the recipients, so that they can relink them with the library after making changes to
the library and recompiling it. And you must show them these terms so they know their rights.
We protect your rights with a two‐step method: (1) we copyright the library, and (2) we offer you this license, which gives you
legal permission to copy, distribute and/or modify the library.
To protect each distributor, we want to make it very clear that there is no warranty for the free library. Also, if the library is
modified by someone else and passed on, the recipients should know that what they have is not the original version, so that
the original author's reputation will not be affected by problems that might be introduced by others.
Finally, software patents pose a constant threat to the existence of any free program. We wish to make sure that a company
cannot effectively restrict the users of a free program by obtaining a restrictive license from a patent holder. Therefore, we
insist that any patent license obtained for a version of the library must be consistent with the full freedom of use specified in
this license.
Most GNU software, including some libraries, is covered by the ordinary GNU General Public License. This license, the GNU
Lesser General Public License, applies to certain designated libraries, and is quite different from the ordinary General Public
License. We use this license for certain libraries in order to permit linking those libraries into non‐free programs.
When a program is linked with a library, whether statically or using a shared library, the combination of the two is legally
speaking a combined work, a derivative of the original library. The ordinary General Public License therefore permits such
linking only if the entire combination fits its criteria of freedom. The Lesser General Public License permits more lax criteria for
linking other code with the library.
We call this license the "Lesser" General Public License because it does Less to protect the user's freedom than the ordinary
General Public License. It also provides other free software developers Less of an advantage over competing non‐free
programs. These disadvantages are the reason we use the ordinary General Public License for many libraries. However, the
Lesser license provides advantages in certain special circumstances.
For example, on rare occasions, there may be a special need to encourage the widest possible use of a certain library, so that it
becomes a de‐facto standard. To achieve this, non‐free programs must be allowed to use the library. A more frequent case is
that a free library does the same job as widely used non‐free libraries. In this case, there is little to gain by limiting the free
library to free software only, so we use the Lesser General Public License.
In other cases, permission to use a particular library in non‐free programs enables a greater number of people to use a large
body of free software. For example, permission to use the GNU C Library in non‐free programs enables many more people to
use the whole GNU operating system, as well as its variant, the GNU/Linux operating system. Although the Lesser General
Public License is Less protective of the users' freedom, it does ensure that the user of a program that is linked with the Library
has the freedom and the wherewithal to run that program using a modified version of the Library.
The precise terms and conditions for copying, distribution and modification follow. Pay close attention to the difference
between a "work based on the library" and a "work that uses the library". The former contains code derived from the library,
whereas the latter must be combined with the library in order to run.
User Notification
GNU LESSER GENERAL PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
1. This License Agreement applies to any software library or other program which contains a notice placed by the copyright
holder or other authorized party saying it may be distributed under the terms of this Lesser General Public License (also
called "this License"). Each licensee is addressed as "you".
A "library" means a collection of software functions and/or data prepared so as to be conveniently linked with application
programs (which use some of those functions and data) to form executables.
The "Library", below, refers to any such software library or work which has been distributed under these terms. A "work
based on the Library" means either the Library or any derivative work under copyright law: that is to say, a work containing
the Library or a portion of it, either verbatim or with modifications and/or translated straightforwardly into another
language. (Hereinafter, translation is included without limitation in the term "modification".)
"Source code" for a work means the preferred form of the work for making modifications to it. For a library, complete
source code means all the source code for all modules it contains, plus any associated interface definition files, plus the
scripts used to control compilation and installation of the library.
Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The
act of running a program using the Library is not restricted, and output from such a program is covered only if its contents
constitute a work based on the Library (independent of the use of the Library in a tool for writing it). Whether that is true
depends on what the Library does and what the program that uses the Library does.
1. You may copy and distribute verbatim copies of the Library's complete source code as you receive it, in any medium,
provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of
warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and distribute a copy of
this License along with the Library.
You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in
exchange for a fee.
2. You may modify your copy or copies of the Library or any portion of it, thus forming a work based on the Library, and copy
and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these
conditions:
a. The modified work must itself be a software library.
b. You must cause the files modified to carry prominent notices stating that you changed the files and the date of any
change.
c. You must cause the whole of the work to be licensed at no charge to all third parties under the terms of this License.
d. If a facility in the modified Library refers to a function or a table of data to be supplied by an application program that
uses the facility, other than as an argument passed when the facility is invoked, then you must make a good faith
effort to ensure that, in the event an application does not supply such function or table, the facility still operates, and
performs whatever part of its purpose remains meaningful.
(For example, a function in a library to compute square roots has a purpose that is entirely well‐defined independent of
the application. Therefore, Subsection 2d requires that any application‐supplied function or table used by this function
must be optional: if the application does not supply it, the square root function must still compute square roots.)
These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the
Library, and can be reasonably considered independent and separate works in themselves, then this License, and its terms,
do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as
part of a whole which is a work based on the Library, the distribution of the whole must be on the terms of this License,
whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote
it.
Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the
intent is to exercise the right to control the distribution of derivative or collective works based on the Library.
In addition, mere aggregation of another work not based on the Library with the Library (or with a work based on the
Library) on a volume of a storage or distribution medium does not bring the other work under the scope of this License.
3. You may opt to apply the terms of the ordinary GNU General Public License instead of this License to a given copy of the
Library. To do this, you must alter all the notices that refer to this License, so that they refer to the ordinary GNU General
Public License, version 2, instead of to this License. (If a newer version than version 2 of the ordinary GNU General Public
User Notification
License has appeared, then you can specify that version instead if you wish.) Do not make any other change in these
notices.
Once this change is made in a given copy, it is irreversible for that copy, so the ordinary GNU General Public License applies
to all subsequent copies and derivative works made from that copy.
This option is useful when you wish to copy part of the code of the Library into a program that is not a library.
4. You may copy and distribute the Library (or a portion or derivative of it, under Section 2) in object code or executable form
under the terms of Sections 1 and 2 above provided that you accompany it with the complete corresponding machine‐
readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used
for software interchange.
If distribution of object code is made by offering access to copy from a designated place, then offering equivalent access to
copy the source code from the same place satisfies the requirement to distribute the source code, even though third parties
are not compelled to copy the source along with the object code.
5. A program that contains no derivative of any portion of the Library, but is designed to work with the Library by being
compiled or linked with it, is called a "work that uses the Library". Such a work, in isolation, is not a derivative work of the
Library, and therefore falls outside the scope of this License.
However, linking a "work that uses the Library" with the Library creates an executable that is a derivative of the Library
(because it contains portions of the Library), rather than a "work that uses the library". The executable is therefore covered
by this License. Section 6 states terms for distribution of such executables.
When a "work that uses the Library" uses material from a header file that is part of the Library, the object code for the work
may be a derivative work of the Library even though the source code is not. Whether this is true is especially significant if
the work can be linked without the Library, or if the work is itself a library. The threshold for this to be true is not precisely
defined by law.
If such an object file uses only numerical parameters, data structure layouts and accessors, and small macros and small
inline functions (ten lines or less in length), then the use of the object file is unrestricted, regardless of whether it is legally a
derivative work. (Executables containing this object code plus portions of the Library will still fall under Section 6.)
Otherwise, if the work is a derivative of the Library, you may distribute the object code for the work under the terms of
Section 6. Any executables containing that work also fall under Section 6, whether or not they are linked directly with the
Library itself.
6. As an exception to the Sections above, you may also combine or link a "work that uses the Library" with the Library to
produce a work containing portions of the Library, and distribute that work under terms of your choice, provided that the
terms permit modification of the work for the customer's own use and reverse engineering for debugging such
modifications.
You must give prominent notice with each copy of the work that the Library is used in it and that the Library and its use are
covered by this License. You must supply a copy of this License. If the work during execution displays copyright notices, you
must include the copyright notice for the Library among them, as well as a reference directing the user to the copy of this
License. Also, you must do one of these things:
a. Accompany the work with the complete corresponding machine‐readable source code for the Library including whatever
changes were used in the work (which must be distributed under Sections 1 and 2 above); and, if the work is an
executable linked with the Library, with the complete machine‐readable "work that uses the Library", as object code
and/or source code, so that the user can modify the Library and then relink to produce a modified executable
containing the modified Library. (It is understood that the user who changes the contents of definitions files in the
Library will not necessarily be able to recompile the application to use the modified definitions.).
b. Use a suitable shared library mechanism for linking with the Library. A suitable mechanism is one that (1) uses at run
time a copy of the library already present on the user's computer system, rather than copying library functions into the
executable, and (2) will operate properly with a modified version of the library, if the user installs one, as long as the
modified version is interface‐compatible with the version that the work was made with.
c. Accompany the work with a written offer, valid for at least three years, to give the same user the materials specified in
Subsection 6a, above, for a charge no more than the cost of performing this distribution.
d. If distribution of the work is made by offering access to copy from a designated place, offer equivalent access to copy the
above specified materials from the same place.
e. Verify that the user has already received a copy of these materials or that you have already sent this user a copy.
User Notification
For an executable, the required form of the "work that uses the Library" must include any data and utility programs needed
for reproducing the executable from it. However, as a special exception, the materials to be distributed need not include
anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so
on) of the operating system on which the executable runs, unless that component itself accompanies the executable.
It may happen that this requirement contradicts the license restrictions of other proprietary libraries that do not normally
accompany the operating system. Such a contradiction means you cannot use both them and the Library together in an
executable that you distribute.
7. You may place library facilities that are a work based on the Library side‐by‐side in a single library together with other library
facilities not covered by this License, and distribute such a combined library, provided that the separate distribution of the
work based on the Library and of the other library facilities is otherwise permitted, and provided that you do these two
things:
a. Accompany the combined library with a copy of the same work based on the Library, uncombined with any other library
facilities. This must be distributed under the terms of the Sections above.
b. Give prominent notice with the combined library of the fact that part of it is a work based on the Library, and explaining
where to find the accompanying uncombined form of the same work.
8. You may not copy, modify, sublicense, link with, or distribute the Library except as expressly provided under this License.
Any attempt otherwise to copy, modify, sublicense, link with, or distribute the Library is void, and will automatically
terminate your rights under this License. However, parties who have received copies, or rights, from you under this License
will not have their licenses terminated so long as such parties remain in full compliance.
9. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to
modify or distribute the Library or its derivative works. These actions are prohibited by law if you do not accept this License.
Therefore, by modifying or distributing the Library (or any work based on the Library), you indicate your acceptance of this
License to do so, and all its terms and conditions for copying, distributing or modifying the Library or works based on it.
10. Each time you redistribute the Library (or any work based on the Library), the recipient automatically receives a license
from the original licensor to copy, distribute, link with or modify the Library subject to these terms and conditions. You may
not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for
enforcing compliance by third parties with this License.
11. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent
issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of
this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy
simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not
distribute the Library at all. For example, if a patent license would not permit royalty‐free redistribution of the Library by all
those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License
would be to refrain entirely from distribution of the Library.
If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is
intended to apply, and the section as a whole is intended to apply in other circumstances.
It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity
of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system
which is implemented by public license practices. Many people have made generous contributions to the wide range of
software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to
decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice.
This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License.
12. If the distribution and/or use of the Library is restricted in certain countries either by patents or by copyrighted interfaces,
the original copyright holder who places the Library under this License may add an explicit geographical distribution
limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such
case, this License incorporates the limitation as if written in the body of this License.
13. The Free Software Foundation may publish revised and/or new versions of the Lesser General Public License from time to
time.Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or
concerns.
Each version is given a distinguishing version number. If the Library specifies a version number of this License which applies
to it and "any later version", you have the option of following the terms and conditions either of that version or of any later
User Notification
version published by the Free Software Foundation. If the Library does not specify a license version number, you may
choose any version ever published by the Free Software Foundation.
14. If you wish to incorporate parts of the Library into other free programs whose distribution conditions are incompatible
with these, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation,
write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two
goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software
generally.
NO WARRANTY
15. BECAUSE THE LIBRARY IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE LIBRARY, TO THE EXTENT
PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR
OTHER PARTIES PROVIDE THE LIBRARY "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE LIBRARY IS WITH YOU. SHOULD THE LIBRARY
PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
16. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY
OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE LIBRARY AS PERMITTED ABOVE, BE LIABLE TO YOU FOR
DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR
INABILITY TO USE THE LIBRARY (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE
OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE LIBRARY TO OPERATE WITH ANY OTHER
SOFTWARE), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
END OF TERMS AND CONDITIONS
DROPBEAR LICENSE
Dropbear contains a number of components from different sources, hence there are a few licenses and authors involved. All
licenses are fairlynon‐restrictive.
The majority of code is written by Matt Johnston, under the license below.
Portions of the client‐mode work are (c) 2004 Mihnea Stoenescu, under the same license:
Copyright (c) 2002‐2008 Matt Johnston.
Portions copyright (c) 2004 Mihnea Stoenescu.
All rights reserved.
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation
files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify,
merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED
TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT
SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE
OR OTHER DEALINGS IN THE SOFTWARE.
LibTomCrypt and LibTomMath are written by Tom St Denis, and are Public Domain.
sshpty.c is taken from OpenSSH 3.5p1,
Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland. All rights reserved
"As far as I am concerned, the code I have written for this software can be used freely for any purpose. Any derived versions of
this software must be clearly marked as such, and if the derived work is incompatible with the protocol description in the RFC
file, it must be called by a name other than "ssh" or "Secure Shell".
User Notification
loginrec.c, loginrec.h, atomicio.h, atomicio.c, and strlcat() (included in util.c) are from OpenSSH 3.6.1p2, and are licensed under
the 2 point BSD license.
loginrec is written primarily by Andre Lucas, atomicio.c by Theo de Raadt.
strlcat() is (c) Todd C. Miller.
Import code in keyimport.c is modified from PuTTY's import.c, licensed as follows:
PuTTY is copyright 1997‐2003 Simon Tatham.
Portions copyright Robert de Bath, Joris van Rantwijk, Delian Delchev, Andreas Schultz, Jeroen Massar, Wez Furlong, Nicolas
Barry, Justin Bradford, and CORE SDI S.A.
SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF
CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
DEALINGS IN THE SOFTWARE.
LIBXML2 LICENSE
Except where otherwise noted in the source code (e.g. the files hash.c, list.c and the trio files, which are covered by a similar
license but with different Copyright notices) all the files are:
Copyright (C) 1998‐2003 Daniel Veillard. All Rights Reserved.
SHALL THE DANIEL VEILLARD BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF
CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
DEALINGS IN THE SOFTWARE.
Except as contained in this notice, the name of Daniel Veillard shall not be used in advertising or otherwise to promote the
sale, use or other dealings in this Software without prior written authorization from him.
NET‐SNMP LICENSE
Various copyrights apply to this package, listed in various separate parts below. Please make sure that you read all the parts.
Part 1: CMU/UCD copyright notice: (BSD like)
Copyright 1989, 1991, 1992 by Carnegie Mellon University
Derivative Work ‐ 1996, 1998‐2000
Copyright 1996, 1998‐2000 The Regents of the University of California.
All Rights Reserved
Permission to use, copy, modify and distribute this software and its documentation for any purpose and without fee is hereby
granted, provided that the above copyright notice appears in all copies and that both that copyright notice and this permission
notice appear in supporting documentation, and that the name of CMU and The Regents of the University of California not be
used in advertising or publicity pertaining to distribution of the software without specific written permission.
User Notification
CMU AND THE REGENTS OF THE UNIVERSITY OF CALIFORNIA DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL CMU OR THE REGENTS OF
THE UNIVERSITY OF CALIFORNIA BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
WHATSOEVER RESULTING FROM THE LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
Part 2: Networks Associates Technology, Inc copyright notice (BSD)
Copyright (c) 2001‐2003, Networks Associates Technology, Inc. All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following
conditions are met:
1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following
disclaimer in the documentation and/or other materials provided with the distribution.
3. Neither the name of the Networks Associates Technology, Inc nor the names of its contributors may be used to endorse or
promote products derived from this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS `ÀS IS'' AND ANY EXPRESS OR IMPLIED
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR
ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.
Part 3: Cambridge Broadband Ltd. copyright notice (BSD)
Portions of this code are copyright (c) 2001‐2003, Cambridge Broadband Ltd. All rights reserved.
conditions are met:
3. The name of Cambridge Broadband Ltd. may not be used to endorse or promote products derived from this software
without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDER `ÀS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING,
BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY
WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Part 4: Sun Microsystems, Inc. copyright notice (BSD)
Copyright © 2003 Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, California 95054, U.S.A. All rights reserved.
Use is subject to license terms below.
This distribution may include materials developed by third parties.
Sun, Sun Microsystems, the Sun logo and Solaris are trademarks or registered trademarks of Sun Microsystems, Inc. in the U.S.
and other countries. Redistribution and use in source and binary forms, with or without modification, are permitted provided
that the following conditions are met:
User Notification
3. Neither the name of the Sun Microsystems, Inc. nor the names of its contributors may be used to endorse or promote
products derived from this software without specific prior written permission.
Part 5: Sparta, Inc copyright notice (BSD)
Copyright (c) 2003‐2009, Sparta, Inc. All rights reserved.
conditions are met:
3. Neither the name of Sparta, Inc nor the names of its contributors may be used to endorse or promote products derived
from this software without specific prior written permission.
Part 6: Cisco/BUPTNIC copyright notice (BSD)
Copyright (c) 2004, Cisco, Inc and Information Network. Center of Beijing University of Posts and Telecommunications. All
rights reserved.
conditions are met:
3. Neither the name of Cisco, Inc, Beijing University of Posts and Telecommunications, nor the names of their contributors
may be used to endorse or promote products derived from this software without specific prior written permission.
ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
TO,PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
Part 7: Fabasoft R&D Software GmbH & Co KG copyright notice (BSD)
Copyright (c) Fabasoft R&D Software GmbH & Co KG, 2003. oss@fabasoft.com Author: Bernhard Penz
conditions are met:
User Notification
3. The name of Fabasoft R&D Software GmbH & Co KG or any of its subsidiaries, brand or product names may not be used to
endorse or promote products derived from this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDER `ÀS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING,
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
Part 8: Apple Inc. copyright notice (BSD)
Copyright (c) 2007 Apple Inc. All rights reserved.
conditions are met:
3. Neither the name of Apple Inc. ("Apple") nor the names of its contributors may be used to endorse or promote products
derived from this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY APPLE AND ITS CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Part 9: ScienceLogic, LLC copyright notice (BSD)
Copyright (c) 2009, ScienceLogic, LLC. All rights reserved.
conditions are met:
3. Neither the name of ScienceLogic, LLC nor the names of its contributors may be used to endorse or promote products
derived from this software without specific prior written permission.
NTP LICENSE
The following copyright notice applies to all files collectively called the Network Time Protocol Version 4 Distribution. Unless
specifically declared otherwise in an individual file, this notice applies as if the text was explicitly included in the file.
User Notification
Copyright (c) University of Delaware 1992‐2011
Permission to use, copy, modify, and distribute this software and its documentation for any purpose with or without fee is
hereby granted, provided that the above copyright notice appears in all copies and that both the copyright notice and this
permission notice appear in supporting documentation, and that the name University of Delaware not be used in advertising
or publicity pertaining to distribution of the software without specific, written prior permission. The University of Delaware
makes no representations about the suitability this software for any purpose. It is provided "as is" without express or implied
warranty.
CyrusSASL License
CMU libsasl, Tim Martin, Rob Earhart, & Rob Siemborski.
Copyright (c) 1998‐2003 Carnegie Mellon University. All rights reserved.
conditions are met:
3. The name "Carnegie Mellon University" must not be used to endorse or promote products derived from this software
without prior written permission. For permission or any other legal details, please contact:
Office of Technology Transfer
Carnegie Mellon University
5000 Forbes Avenue
Pittsburgh, PA 15213‐3890
(412) 268‐4387, fax: (412) 268‐7395,
tech‐transfer@andrew.cmu.edu
4. Redistributions of any form whatsoever must retain the following acknowledgment:
"This product includes software developed by Computing Services at Carnegie Mellon University (http://www.cmu.edu/
computing/)."
CARNEGIE MELLON UNIVERSITY DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO EVENT SHALL CARNEGIE MELLON UNIVERSITY BE LIABLE FOR ANY
SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
SQLITE LICENSE
SQLite is in the Public Domain. All of the code and documentation in SQLite has been dedicated to the public domain by the
authors. All code authors, and representatives of the companies they work for, have signed affidavits dedicating their
contributions to the public domain and originals of those signed affidavits are stored in a firesafe at the main offices of Hwaci.
Anyone is free to copy, modify, publish, use, compile, sell, or distribute the original SQLite code, either in source code form or
as a compiled binary, for any purpose, commercial or non‐commercial, and by any means.
The previous paragraph applies to the deliverable code and documentation in SQLite ‐ those parts of the SQLite library that you
actually bundle and ship with a larger application. Some scripts used as part of the build process (for example the "configure"
scripts generated by autoconf) might fall under other open‐source licenses. Nothing from these build scripts ever reaches the
final deliverable SQLite library, however, and so the licenses associated with those scripts should not be a factor in assessing
your rights to copy and use the SQLite library.
All of the deliverable code in SQLite has been written from scratch. No code has been taken from other projects or from the
open internet. Every line of code can be traced back to its original author, and all of those authors have public domain
dedications on file. So the SQLite code base is clean and is uncontaminated with licensed code from other projects.
Obtaining an Explicit License To Use SQLite
User Notification
Even though SQLite is in the public domain and does not require a license, some users want to obtain a license anyway. Some
reasons for obtaining a license include:
You are using SQLite in a jurisdiction that does not recognize the public domain.
 You are using SQLite in a jurisdiction that does not recognize the right of an author to dedicate their work to the public
domain.
You want to hold a tangible legal document as evidence that you have the legal right to use and distribute SQLite.
If you feel like you really have to purchase a license for SQLite, Hwaci, the company that employs the architect and principal
developers of SQLite, will sell you one.
Contributed Code
In order to keep SQLite completely free and unencumbered by copyright, all new contributors to the SQLite code base are
asked to dedicate their contributions to the public domain. If you want to send a patch or enhancement for possible inclusion
in the SQLite source tree, please accompany the patch with the following statement:
The author or authors of this code dedicate any and all copyright interest in this code to the public domain. We make this
dedication for the benefit of the public at large and to the detriment of our heirs and successors.
We intend this dedication to be an overt act of relinquishment in perpetuity of all present and future rights to this code under
copyright law.
We are not able to accept patches or changes to SQLite that are not accompanied by a statement such as the above. In
addition, if you make changes or enhancements as an employee, then a simple statement such as the above is insufficient. You
must also send by surface mail a copyright release signed by a company officer. A signed original of the copyright release
should be mailed to:
Hwaci
6200 Maple Cove Lane
Charlotte, NC 28269
USA
PCSC LICENSE
Copyright (c) 1999‐2003 David Corcoran <corcoran@linuxnet.com>
Copyright (c) 2001‐2011 Ludovic Rousseau <ludovic.rousseau@free.fr>
conditions are met:
3. The name of the author may not be used to endorse or promote products derived from this software without specific prior
written permission.
Changes to this license can be made only by the copyright author with explicit written consent.
THIS SOFTWARE IS PROVIDED BY THE AUTHOR `ÀS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
OSSP‐UUID LICENSE
Copyright (c) 2004‐2008 Ralf S. Engelschall <rse@engelschall.com>
Copyright (c) 2004‐2008 The OSSP Project <http://www.ossp.org/>
User Notification
This file is part of OSSP uuid, a library for the generation of UUIDs which can found at
http://www.ossp.org/pkg/lib/uuid/
Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided
that the above copyright notice and this permission notice appear in all copies.
THIS SOFTWARE IS PROVIDED `ÀS IS'' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT
SHALL THE AUTHORS AND COPYRIGHT HOLDERS AND THEIR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
INCIDENTAL, PECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
PROTBUF LICENSE
Copyright 2008, Google Inc.
conditions are met:
3. Neither the name of Google Inc. nor the names of its contributors may be used to endorse or promote products derived
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED
PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY
DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
Code generated by the Protocol Buffer compiler is owned by the owner of the input file used when generating it. This code is
not standalone and requires a support library to be linked with it. This support library is itself covered by the above license.
CTEMPLATE LICENSE
Copyright (c) 2005, Google Inc.
conditions are met:
3. Neither the name of Google Inc. nor the names of its contributors may be used to endorse or promote products derived
User Notification
OPENSSL LICENSE
License Issues
The OpenSSL toolkit stays under a dual license, i.e. both the conditions of the OpenSSL License and the original SSLeay license
apply to the toolkit.
See below for the actual license texts. Actually both licenses are BSD‐style Open Source licenses. In case of any license issues
related to OpenSSL please contact openssl‐core@openssl.org.
Copyright © 1998‐2008 The OpenSSL Project. All rights reserved.
conditions are met:
1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions, and the following
3. All advertising materials mentioning features or use of this software must display the following acknowledgment:
"This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/
)
4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to endorse or promote products derived from this
software without prior written permission. For written permission, please contact opensslcore@openssl.org.
5. Products derived from this software may not be called "OpenSSL" nor may "OpenSSL" appear in their names without prior
written permission of the OpenSSL Project.
6. Redistributions of any form whatsoever must retain the following acknowledgment:
"This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/
)”.
THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT "AS IS"' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING,
DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).
This product includes software written by Tim Hudson (tjh@cryptsoft.com).
Original SSLeay License
Copyright © 1995‐1998 Eric Young (eay@cryptsoft.com).
This package is an SSL implementation written by Eric Young (eay@cryptsoft.com).
The implementation was written so as to conform with Netscapes SSL.
This library is free for commercial and non‐commercial use as long as the following conditions are adhered to. The following
conditions apply to all code found in this distribution, be it the RC4, RSA, lhash, DES, etc., code; not just the SSL code. The SSL
documentation included with this distribution is covered by the same copyright terms except that the holder is Tim Hudson
(tjh@cryptsoft.com).
Copyright remains Eric Young's, and as such any Copyright notices in the code are not to be removed. If this package is used in
a product, Eric Young should be given attribution as the author of the parts of the library used. This can be in the form of a
textual message at program startup or in documentation (online or textual) provided with the package.
User Notification
conditions are met:
1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer.
3. All advertising materials mentioning features or use of this software must display the following acknowledgement:
"This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)".
The word `cryptographic' can be left out if the routines from the library being used are not cryptography‐related.
4. If you include any Windows specific code (or a derivative thereof) from the apps directory (application code) you must
include an acknowledgement:
"This product includes software written by Tim Hudson (tjh@cryptsoft.com)".
THIS SOFTWARE IS PROVIDED BY ERIC YOUNG "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
The license and distribution terms for any publicly available version or derivative of this code cannot be changed. i.e. this code
cannot simply be copied and put under another distribution license [including the GNU Public License].
KERBEROS LICENSE
Copyright (C) 1985‐2011 by the Massachusetts Institute of Technology.
Export of software employing encryption from the United States of America may require a specific license from the United
States Government. It is the responsibility of any person or organization contemplating export to obtain such a license before
exporting.
WITHIN THAT CONSTRAINT, permission to use, copy, modify, and distribute this software and its documentation for any
purpose and without fee is hereby granted, provided that the above copyright notice appear in all copies and that both that
copyright notice and this permission notice appear in supporting documentation, and that the name of M.I.T. not be used in
advertising or publicity pertaining to distribution of the software without specific, written prior permission. Furthermore if you
modify this software you must label your software as modified software and not distribute it in such a fashion that it might be
confused with the original MIT software. M.I.T. makes no representations about the suitability of this software for any
purpose. It is provided "as is" without express or implied warranty.
Individual source code files are copyright MIT, Cygnus Support, Novell, OpenVision Technologies, Oracle, Red Hat, Sun
Microsystems, FundsXpress, and others. Project Athena, Athena, Athena MUSE, Discuss, Hesiod, Kerberos, Moira, and Zephyr
are trademarks of the Massachusetts Institute of Technology (MIT). No commercial use of these trademarks may be made
without prior written permission of MIT.
"Commercial use" means use of a name in a product or other for‐profit manner. It does NOT prevent a commercial firm from
referring to the MIT trademarks in order to convey information (although in doing so, recognition of their trademark status
should be given).
The following copyright and permission notice applies to the OpenVision Kerberos Administration system located in `kadmin/
create', `kadmin/dbutil', `kadmin/passwd', `kadmin/server', `lib/kadm5', and portions of `lib/rpc':
Copyright, OpenVision Technologies, Inc., 1993‐1996, All Rights Reserved
WARNING: Retrieving the OpenVision Kerberos Administration system source code, as described below, indicates your
acceptance of the following terms. If you do not agree to the following terms, do not retrieve the OpenVision Kerberos
administration system.
You may freely use and distribute the Source Code and Object Code compiled from it, with or without modification, but this
Source Code is provided to you "AS IS" EXCLUSIVE OF ANY WARRANTY, INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES
User Notification
OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, OR ANY OTHER WARRANTY, WHETHER EXPRESS OR IMPLIED.
IN NO EVENT WILL OPENVISION HAVE ANY LIABILITY FOR ANY LOST PROFITS, LOSS OF DATA OR COSTS OF PROCUREMENT OF
SUBSTITUTE GOODS OR SERVICES, OR FOR ANY SPECIAL, INDIRECT, OR CONSEQUENTIAL DAMAGES ARISING OUT OF THIS
AGREEMENT, INCLUDING, WITHOUT LIMITATION, THOSE RESULTING FROM THE USE OF THE SOURCE CODE, OR THE FAILURE
OF THE SOURCE CODE TO PERFORM, OR FOR ANY OTHER REASON.
OpenVision retains all copyrights in the donated Source Code. OpenVision also retains copyright to derivative works of the
Source Code, whether created by OpenVision or by a third party. The OpenVision copyright notice must be preserved if
derivative works are made based on the donated Source Code.
OpenVision Technologies, Inc. has donated this Kerberos Administration system to MIT for inclusion in the standard Kerberos 5
distribution. This donation underscores our commitment to continuing Kerberos technology development and our gratitude
for the valuable work which has been performed by MIT and the Kerberos community.
Portions contributed by Matt Crawford `<crawdad@fnal.gov>' were work performed at Fermi National Accelerator Laboratory,
which is operated by Universities Research Association, Inc., under contract DE‐AC02‐76CHO3000 with the U.S. Department of
Energy.
Portions of `src/lib/crypto' have the following copyright:
Copyright (C) 1998 by the FundsXpress, INC.
Export of this software from the United States of America may require a specific license from the United States Government. It
is the responsibility of any person or organization contemplating export to obtain such a license before exporting.
copyright notice and this permission notice appear in supporting documentation, and that the name of FundsXpress. not be
used in advertising or publicity pertaining to distribution of the software without specific, written prior permission.
FundsXpress makes no representations about the suitability of this software for any purpose. It is provided "as is" without
express or implied warranty.
THIS SOFTWARE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT
LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
The implementation of the Yarrow pseudo‐random number generator in `src/lib/crypto/krb/prng/yarrow' has the following
copyright:
Copyright 2000 by Zero‐Knowledge Systems, Inc.
Permission to use, copy, modify, distribute, and sell this software and its documentation for any purpose is hereby granted
without fee, provided that the above copyright notice appear in all copies and that both that copyright notice and this
permission notice appear in supporting documentation, and that the name of Zero Knowledge Systems, Inc. not be used in
advertising or publicity pertaining to distribution of the software without specific, written prior permission. Zero‐Knowledge
Systems, Inc. makes no representations about the suitability of this software for any purpose. It is provided "as is" without
express or implied warranty. ZERO‐KNOWLEDGE SYSTEMS, INC. DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS
SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO EVENT SHALL ZERO‐
KNOWLEDGE SYSTEMS, INC. BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
OTHER TORTUOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
The implementation of the AES encryption algorithm in `src/lib/crypto/builtin/aes' has the following copyright:
Copyright (C) 2001, Dr Brian Gladman `<brg@gladman.uk.net>', Worcester, UK.
LICENSE TERMS
The free distribution and use of this software in both source and binary form is allowed (with or without changes) provided
that:
User Notification
1. Distributions of this source code include the above copyright notice, this list of conditions and the following disclaimer;
2. Distributions in binary form include the above copyright notice, this list of conditions and the following disclaimer in the
documentation and/or other associated materials;
3. The copyright holder's name is not used to endorse products built using this software without specific written permission.
DISCLAIMER
This software is provided 'as is' with no explcit or implied warranties in respect of any properties, including, but not limited to,
correctness and fitness for purpose.
Portions contributed by Red Hat, including the pre‐authentication plug‐in framework and the NSS crypto implementation,
contain the following copyright:
Copyright (C) 2006 Red Hat, Inc.
Portions copyright (C) 2006 Massachusetts Institute of Technology
All Rights Reserved.
conditions are met:
3. Neither the name of Red Hat, Inc., nor the names of its contributors may be used to endorse or promote products derived
The implementations of GSSAPI mechglue in GSSAPI‐SPNEGO in `src/lib/gssapi', including the following files:
lib/gssapi/generic/gssapi_err_generic.et
lib/gssapi/mechglue/g_accept_sec_context.c
lib/gssapi/mechglue/g_acquire_cred.c
lib/gssapi/mechglue/g_canon_name.c
lib/gssapi/mechglue/g_compare_name.c
lib/gssapi/mechglue/g_context_time.c
lib/gssapi/mechglue/g_delete_sec_context.c
lib/gssapi/mechglue/g_dsp_name.c
lib/gssapi/mechglue/g_dsp_status.c
lib/gssapi/mechglue/g_dup_name.c
lib/gssapi/mechglue/g_exp_sec_context.c
lib/gssapi/mechglue/g_export_name.c
lib/gssapi/mechglue/g_glue.c
lib/gssapi/mechglue/g_imp_name.c
lib/gssapi/mechglue/g_imp_sec_context.c
User Notification
lib/gssapi/mechglue/g_init_sec_context.c
lib/gssapi/mechglue/g_initialize.c
lib/gssapi/mechglue/g_inquire_context.c
lib/gssapi/mechglue/g_inquire_cred.c
lib/gssapi/mechglue/g_inquire_names.c
lib/gssapi/mechglue/g_process_context.c
lib/gssapi/mechglue/g_rel_buffer.c
lib/gssapi/mechglue/g_rel_cred.c
lib/gssapi/mechglue/g_rel_name.c
lib/gssapi/mechglue/g_rel_oid_set.c
lib/gssapi/mechglue/g_seal.c
lib/gssapi/mechglue/g_sign.c
lib/gssapi/mechglue/g_store_cred.c
lib/gssapi/mechglue/g_unseal.c
lib/gssapi/mechglue/g_userok.c
lib/gssapi/mechglue/g_utils.c
lib/gssapi/mechglue/g_verify.c
lib/gssapi/mechglue/gssd_pname_to_uid.c
lib/gssapi/mechglue/mglueP.h
lib/gssapi/mechglue/oid_ops.c
lib/gssapi/spnego/gssapiP_spnego.h
lib/gssapi/spnego/spnego_mech.c
and the initial implementation of incremental propagation, including the following new or changed files:
include/iprop_hdr.h
kadmin/server/ipropd_svc.c
lib/kdb/iprop.x
lib/kdb/kdb_convert.c
lib/kdb/kdb_log.c
lib/kdb/kdb_log.h
lib/krb5/error_tables/kdb5_err.et
slave/kpropd_rpc.c
slave/kproplog.c
are subject to the following license:
Copyright (C) 2004 Sun Microsystems, Inc.
User Notification
Kerberos V5 includes documentation and software developed at the University of California at Berkeley, which includes this
copyright notice:
Copyright (C) 1983 Regents of the University of California.
conditions are met:
3. Neither the name of the University nor the names of its contributors may be used to endorse or promote products derived
THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
Portions contributed by Novell, Inc., including the LDAP database backend, are subject to the following license:
Copyright (C) 2004‐2005, Novell, Inc.
conditions are met:
3. The copyright holder's name is not used to endorse or promote products derived from this software without specific prior
written permission.
Portions funded by Sandia National Laboratory and developed by the University of Michigan's Center for Information
Technology Integration, including the PKINIT implementation, are subject to the following license:
COPYRIGHT (C) 2006‐2007
THE REGENTS OF THE UNIVERSITY OF MICHIGAN
ALL RIGHTS RESERVED
Permission is granted to use, copy, create derivative works and redistribute this software and such derivative works for any
purpose, so long as the name of The University of Michigan is not used in any advertising or publicity pertaining to the use of
distribution of this software without specific, written prior authorization. If the above copyright notice or any other
identification of the University of Michigan is included in any copy of any portion of this software, then the disclaimer below
must also be included.
THIS SOFTWARE IS PROVIDED AS IS, WITHOUT REPRESENTATION FROM THE UNIVERSITY OF MICHIGAN AS TO ITS FITNESS FOR
ANY PURPOSE, AND WITHOUT WARRANTY BY THE UNIVERSITY OF MICHIGAN OF ANY KIND, EITHER EXPRESS OR IMPLIED,
User Notification
INCLUDING WITHOUT LIMITATION THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE. THE REGENTS OF THE UNIVERSITY OF MICHIGAN SHALL NOT BE LIABLE FOR ANY DAMAGES, INCLUDING SPECIAL,
INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WITH RESPECT TO ANY CLAIM ARISING OUT OF OR IN CONNECTION
WITH THE USE OF THE SOFTWARE, EVEN IF IT HAS BEEN OR IS HEREAFTER ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
The pkcs11.h file included in the PKINIT code has the following license:
Copyright 2006 g10 Code GmbH Copyright 2006 Andreas Jellinghaus
This file is free software; as a special exception the author gives unlimited permission to copy and/or distribute it, with or
without modifications, as long as this notice is preserved. This file is distributed in the hope that it will be useful, but WITHOUT
ANY WARRANTY, to the extent permitted by law; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
Portions contributed by Apple Inc. are subject to the following license:
Copyright 2004‐2008 Apple Inc. All Rights Reserved.
copyright notice and this permission notice appear in supporting documentation, and that the name of Apple Inc. not be used
in advertising or publicity pertaining to distribution of the software without specific, written prior permission. Apple Inc.
makes no representations about the suitability of this software for any purpose. It is provided "as is" without express or
implied warranty.
THIS SOFTWARE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT
LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
The implementations of UTF‐8 string handling in src/util/support and src/lib/krb5/unicode are subject to the following
copyright and permission notice:
Marked test programs in src/lib/krb5/krb have the following copyright:
Copyright (C) 2006 Kungliga Tekniska Högskolan
(Royal Institute of Technology, Stockholm, Sweden).
conditions are met:
3. Neither the name of KTH nor the names of its contributors may be used to endorse or promote products derived from this
software without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY KTH AND ITS CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL KTH OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
Portions of the RPC implementation in src/lib/rpc and src/include/gssrpc have the following copyright and permission notice:
Copyright (C) 2010, Oracle America, Inc.
conditionsare met:
User Notification
3. Neither the name of the "Oracle America, Inc." nor the names of its contributors may be used to endorse or promote
PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY
Copyright (C) 2006,2007,2009 NTT (Nippon Telegraph and Telephone Corporation).
conditions are met:
1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer as
the first lines of this file unmodified.
THIS SOFTWARE IS PROVIDED BY NTT "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT
SHALL NTT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Copyright 2000 by Carnegie Mellon University
All Rights Reserved
Permission to use, copy, modify, and distribute this software and its documentation for any purpose and without fee is hereby
granted, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission
notice appear in supporting documentation, and that the name of Carnegie Mellon University not be used in advertising or
publicity pertaining to distribution of the software without specific, written prior permission.
CARNEGIE MELLON UNIVERSITY DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO EVENT SHALL CARNEGIE MELLON UNIVERSITY BE LIABLE FOR ANY
SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
Copyright (C) 2002 Naval Research Laboratory (NRL/CCS)
Permission to use, copy, modify and distribute this software and its documentation is hereby granted, provided that both the
copyright notice and this permission notice appear in all copies of the software, derivative works or modified versions, and any
portions thereof.
NRL ALLOWS FREE USE OF THIS SOFTWARE IN ITS "AS IS" CONDITION AND DISCLAIMS ANY LIABILITY OF ANY KIND FOR ANY
DAMAGES WHATSOEVER RESULTING FROM THE USE OF THIS SOFTWARE.
Portions extracted from Internet RFCs have the following copyright notice:
Copyright (C) The Internet Society (2006).
This document is subject to the rights, licenses and restrictions contained in BCP 78, and except as set forth therein, the
authors retain all their rights.
User Notification
This document and the information contained herein are provided on an "AS IS" basis and THE CONTRIBUTOR, THE
ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET ENGINEERING
TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE
USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR
FITNESS FOR A PARTICULAR PURPOSE.
Copyright (C) 1991, 1992, 1994 by Cygnus Support.
Permission to use, copy, modify, and distribute this software and its documentation for any purpose and without fee is hereby
granted, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission
notice appear in supporting documentation. Cygnus Support makes no representations about the suitability of this software
for any purpose. It is provided "as is" without express or implied warranty.
Copyright (C) 2006 Secure Endpoints Inc.
Portions of the implementation of the Fortuna‐like PRNG are subject to the following notice:
Copyright (C) 2005 Marko Kreen
conditions are met:
THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"AND ANY EXPRESS OR IMPLIED WARRANTIES,
PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
SUBSTITUTE GOODS OR SERVICES; LOSS OFUSE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
Copyright (C) 1994 by the University of Southern California
EXPORT OF THIS SOFTWARE from the United States of America may require a specific license from the United States
Government.It is the responsibility of any person or organization contemplating export to obtain such a license before
exporting.
WITHIN THAT CONSTRAINT, permission to copy, modify, and distribute this software and its documentation in source and
binary forms is hereby granted, provided that any documentation or other materials related to such distribution or use
acknowledge that the software was developed by the University of Southern California.
DISCLAIMER OF WARRANTY. THIS SOFTWARE IS PROVIDED "AS IS". The University of Southern California MAKES NO
REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED. By way of example, but not limitation, the University of Southern
California MAKES NO REPRESENTATIONS OR WARRANTIES OF MERCHANTABILITY OR FITNESS FOR ANY PARTICULAR PURPOSE.
The University of Southern California shall not be held liable for any liability nor for any direct, indirect, or consequential
damages with respect to any claim by the user or distributor of the ksu software.
Copyright (C) 1995
The President and Fellows of Harvard University
User Notification
This code is derived from software contributed to Harvard by Jeremy Rassen.
conditions are met:
This product includes software developed by the University of California, Berkeley and its contributors.
THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
Copyright (C) 2008 by the Massachusetts Institute of Technology.
Copyright 1995 by Richard P. Basch. All Rights Reserved.
Copyright 1995 by Lehman Brothers, Inc. All Rights Reserved.
copyright notice and this permission notice appear in supporting documentation, and that the name of Richard P. Basch,
Lehman Brothers and M.I.T. not be used in advertising or publicity pertaining to distribution of the software without specific,
written prior permission. Richard P. Basch, Lehman Brothers and M.I.T. make no representations about the suitability of this
software for any purpose. It is provided "as is" without express or implied warranty.
The following notice applies to `src/lib/krb5/krb/strptime.c':
Copyright (C) 1997, 1998 The NetBSD Foundation, Inc.
This code was contributed to The NetBSD Foundation by Klaus Klein.
conditions are met:
This product includes software developed by the NetBSD Foundation, Inc. and its contributors.
4. Neither the name of The NetBSD Foundation nor the names of its contributors may be used to endorse or promote
THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED
PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS BE LIABLE FOR ANY
User Notification
The following notice applies to Unicode library files in `src/lib/krb5/unicode':
Copyright 1997, 1998, 1999 Computing Research Labs, New Mexico State University
SHALL THE COMPUTING RESEARCH LAB OR NEW MEXICO STATE UNIVERSITY BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH
THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
The following notice applies to `src/util/support/strlcpy.c':
Copyright (C) 1998 Todd C. Miller <Todd.Miller@courtesan.com>
THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE
INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF
USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
The following notice applies to `src/util/profile/argv_parse.c' and `src/util/profile/argv_parse.h':
Copyright 1999 by Theodore Ts'o.
THE SOFTWARE IS PROVIDED "AS IS" AND THEODORE TS'O (THE AUTHOR) DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS
SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE
LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING
FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
The following notice applies to SWIG‐generated code in `src/util/profile/profile_tcl.c':
Copyright (C) 1999‐2000, The University of Chicago
This file may be freely redistributed without license or fee provided this copyright message remains intact.
The following notice applies to portiions of `src/lib/rpc' and `src/include/gssrpc':
Copyright (C) 2000 The Regents of the University of Michigan. All rights reserved.
Copyright (C) 2000 Dug Song <dugsong@UMICH.EDU>. All rights reserved, all wrongs reversed.
conditions are met:
THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT
SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
User Notification
Implementations of the MD4 algorithm are subject to the following notice:
Copyright (C) 1990, RSA Data Security, Inc. All rights reserved.
License to copy and use this software is granted provided that it is identified as the "RSA Data Security, Inc. MD4 Message
Digest Algorithm" in all material mentioning or referencing this software or this function.
License is also granted to make and use derivative works provided that such works are identified as "derived from the RSA Data
Security, Inc. MD4 Message Digest Algorithm" in all material entioning or referencing the derived work.
RSA Data Security, Inc. makes no representations concerning either the merchantability of this software or the suitability of
this software for any particular purpose. It is provided "as is" without express or implied warranty of any kind.
These notices must be retained in any copies of any part of this documentation and/or software.
Implementations of the MD5 algorithm are subject to the following notice:
Copyright (C) 1990, RSA Data Security, Inc. All rights reserved.
License to copy and use this software is granted provided that it is identified as the "RSA Data Security, Inc. MD5 Message‐
Digest Algorithm" in all material mentioning or referencing this software or this function.
License is also granted to make and use derivative works provided that such works are identified as "derived from the RSA Data
Security, Inc. MD5 Message‐Digest Algorithm" in all material mentioning or referencing the derived work.
The following notice applies to `src/lib/crypto/crypto_tests/t_mddriver.c':
Copyright (C) 1990‐2, RSA Data Security, Inc. Created 1990. All rights reserved.
Portions of `src/lib/krb5' are subject to the following notice:
Copyright (C) 1994 CyberSAFE Corporation.
Copyright 1990,1991,2007,2008 by the Massachusetts Institute of Technology.
All Rights Reserved.
copyright notice and this permission notice appear in supporting documentation, and that the name of M.I.T. not be used in
advertising or publicity pertaining to distribution of the software without specific, written prior permission. Furthermore if you
modify this software you must label your software as modified software and not distribute it in such a fashion that it might be
confused with the original M.I.T. software. Neither M.I.T., the Open Computing Security Group, nor CyberSAFE Corporation
make any representations about the suitability of this software for any purpose. It is provided "as is" without express or
implied warranty.
Declaration of Conformity
We,
Jetmobile Pte Ltd
541 Orchard Road
Liat Towers #09‐01
238881 Singapore.
declare under our sole responsibility that the products
1. Celiveo Auth‐PX reader for HID Prox badges
2. Celiveo Auth‐PX reader for Hitag 1 badges
3. Celiveo Auth‐PX reader for EM‐Marin badges
4. Celiveo Auth‐PX reader for Indala badges
5. Celiveo Auth‐PX reader for Casi Rusco badges
6. Celiveo Auth‐PX reader for NexWatch badges
to which this declaration relates, are in conformity with the following standards and/or other normative
documents.
FCC Part 15 Section 209
We hereby declare that the above named product is in conformity with the essential requirements and other
relevant provisions of Telecommunication Directive (Dz. U.2000, nr 73 pos. 852).
The technical documentation relevant to the above equipment will be held at:
Jetmobile Pte Ltd
541 Orchard Road
238881 Singapore.
Jean‐François d'Estalenx
(Name)
(Signature)
Managing Director October 10, 2008
(Title) (Date)
We,
Jetmobile Pte Ltd
541 Orchard Road
238881 Singapore.
declare under our sole responsibility that the products
1. Celiveo Auth‐PX reader for Mifare/ISO15693&14443A/B
2. Celiveo Auth‐PX reader for Legic badges
3. Celiveo Auth‐PX reader for HID iClass badges
to which this declaration relates, are in conformity with the following standards and/or other normative
documents.
FCC Part 15 Section 209+ 225
We hereby declare that the above named product is in conformity with the essential requirements and other
relevant provisions of Telecommunication Directive (Dz. U.2000, nr 73 pos. 852).
The technical documentation relevant to the above equipment will be held at:
Jetmobile Pte Ltd
541 Orchard Road
238881 Singapore.
Jean‐François d'Estalenx
(Name)
(Signature)
Managing Director October 10, 2008
(Title) (Date)
Celiveo Auth‐PX reader for Mifare/ISO15693&14443A/B
FCC WARNING STATEMENT
This equipment has been tested and found to comply with the limits for Class B digital device, pursuant to Part 15
of FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the
equipment is operated in a residential environment. This equipment generates, uses, and can radiate radio fre‐
quency energy and, if not installed and used in accordance with the instruction manual, may cause harmful inter‐
ference to radio communications. However, there is no guarantee that interference will not occur in a particular
installation.
FCC COMPLIANCE STATEMENT
This device complies with Part 15 of the FCC Rules. Operation of this device is subject to the following two condi‐
tions: (1) This device may not cause harmful interference; and (2) this device must accept any interference re‐
ceived, including interference that may cause undesired operation.
CANADIAN DOC STATEMENT
This digital apparatus does not exceed the Class B limits for radio noise for digital apparatus set out in the Radio
Interference Regulations of the Canadian Department of Communications.
Le présent appareil numérique n'émet pas de bruits radioélectriques dépassant les limites applicables aux appar‐
eils numériques de las classe B prescrites dans le Réglement sur le brouillage radioélectrique édicté par les
ministère des Communications du Canada.
CE STANDARDS
Testing for compliance to CE requirements was performed by an independent laboratory. The unit under test was
found compliant to Class B.
The above symbol on the product indicates that the product should not be disposed of with the household waste.
The product may only be disposed of at a designated collection point. For further information on the available col‐
lection points of waste and electronic equipment, please contact your local government office or the retailer where
you purchased this product.
Index
A | B | C | D | E | F | G | H | I | J | K | L | M | N |O | P | Q | R | S | T | U | V | W | X | Y | Z
Deleting .................................131, 132
Index Renaming .......................................132
Viewing Details ...............................130
Viewing Detailed Information ...............133
A
About Celiveo Enterprise ............................1
C
Active Directory
Configuring Field Names ......................136 Card Reader
Specifications ......................................339
Activity
Celiveo Multicard Type A ...........327, 328
Selecting for Quick Group ......................63
Celiveo Multicard Type B ...........328, 329
Advance Configuration .............................77
Troubleshooting Error Messages ..........286
AES Chained Databases
Encryption with PKI Technology ...........171
Search ................................................140
AES Encryption with PKI Technology ......213
Cluster Environment ...............................302
Alias Single Sign‐On Retrieval settings ....138
Communication ......................................333
Aliases .....................................................196
Configuring Activity Settings .....................74
All Server List Configuring Aliases ‐ Single Sign‐On .......196
Viewing Details ...................................110
Configuring Authentication Parameters .123
Authenticate only when idle ..................107
Configuring Cache Settings for Serverless
Authentication ...................................... 1, 74
Pull Printing .............................................219
Authentication Type Setting ...................75
Configuring Activity Settings ...... 73, 74, 86 Configuring Encrypted Secure Printing ...212
Dual Factor .........................................169 Configuring Print Job Purge ....................202
Offline Authentication Lists ..................119 Configuring Quota Notification ...............199
Profiles ...............................................148 Configuring Celiveo Authentication
Authentication for Device Groups Gateway ..................................................181
Dual Factor Configuration ....................170 Direct User Directory Authentication ....181
Authentication for Devices Indirect User Directory Authentication ..182
Dual Factor Configuration ....................169 Configuring Celiveo Print Manage ...........256
Authentication Profiles ...........................147 Configuring Celiveo Print‐SMP Driver
Configuring ................................. 149, 148 Plug‐In .....................................................267
Deleting ..............................................148 Configuring CSS Settings ...........................73
Viewing ..............................................147 Configuring Unencrypted Secure Printing 210
Auto Sync Enrollment Configuring User Directory Profile Settings 73
Configuring Notification .......................169 Corporate Keys
Auto Sync Enrollment Notification .........169 Creating ..............................................172
Auto Un‐Enrollment Deleting ..............................................172
Configuring Notification .......................168 Viewing ......................................172, 173
Auto Un‐Enrollment Notification ............168 Creating Print Queue ................................59
B D
Billing Declaration of Conformity ......................392
Configuring Billing for Device Groups ......91 Deploying and Configuring Serverless
Billing List Information Summary ...........130 Pull Printing .............................................213
Billing Lists Device
Configuration .............................. 129, 131 Enabling HTTPS Communication between
Adding Billing Codes by Name .... 131, 132 Celiveo Web Admin and Device .............291
Index
Setting up for HTTPS Communication ...292 Enrollment with roaming ........................192
Device Groups Error Messages .......................................281
Configuring Settings ............................102 Multi‐Function Printer .........................282
Changing Group Language ........ 103, 105 Card Reader Errors ...................286, 282
Linking Devices to Gruops ..................104 Enrollment Issues .............................285
Removing Devices .................... 105, 102 Other Messages ..............................285
Synchronizing Devices .......................106 Single‐Function Printer ........................281
Viewing Details ...............................102 EULA ........................................................348
Moving a device from one group to Event Logger
another ................................................80 Configuring Notification .......................169
Device Specific Settings ..........................161 Event Logger Notification .......................169
HP FutureSmart ..................................162
Ricoh ..................................................161
Devices ......................................................68 F
Adding ..................................................69 Failover Capability ..................................183
Removing Devices Forcibly .....................70 File Downloads from Knowledgebase ......18
Synchronizing Devices ...........................70 Files
Directory Synchronization and Notification SDPP.reg ................................... 53, 52, 50
Configuration ......................................127 Embedded Solution
Dual Factor Restoring Celiveo Embedded Solution on
Configuring Authentication for Device Celiveo Hardware ..................................14
Groups ....................................... 170, 169
G
E Global Settings ........................................157
Email Configuring SMTP ................................171
Encryption Device Specific
Configuring Email Encryption for Device HP ................................................162
Groups ...............................100 Ricoh ......................161, 169, 170, 169
Embedded Solution Viewer ................ 76, 77 Notification .........................................166
embedded solution viewer .......................65 Configuring Offline Authentication
enable self enrollment ............................153 Notification ........................166
Enabling HTTPS Communication between Schedulers ..........................................157
Offline Authentication ......................158
Web Admin and Device ..........................291
Stale CSS Record Ceanup ...................160
Enabling Printer Logs using Web Admin .289 global settings ...........................................65
Enabling Celiveo Logs ..............................289
Groups
Enabling/Disabling Printer Logs ................80 Configuring Group Settings ....................75
Encrypting CeliveoDPI‐API.ini ....................52 Chaning Language Settings ..................75
Encryption Migrating QuickGroup to Advance
AES Encryption with PKI Technology .....171 Configuration Section .............75
Encryption Keys
Corporate Keys ........................... 172, 173
H
End User License Agreement ..................348
Enrolled User Management ....................194 HP FutureSmart
Configuring HP FutureSmart Settings ....162
Enrollment Ciritcal Client ..................................162
Troubleshooting Issues ........................285
HTTPS
Enrollment in Active Directory ...............192 Denying Income and Outgoing
Enrollment Process .................................191 Transactions from Server on Port .... 80, 292
Index
Enabling Communication between Web Removing All License Tokens ........179, 174
Admin and Device ...............................291 Uploading License Files ........................175
Setting up Admin Software for Viewing Details ...................................176
Communication ..................................292 Embedded License ............................176
HTTPS Setup ...........................................291 TGS License .....................................179
license management .................................66
list management .....................................118
I Logs ...........................................................80
Importing SDPP.reg from Server to Client 53 Enabling Printer Logs using Web
Information Messages ............................281 Admin ..........................................289, 80
.ini Printer Logs
CeliveoDPI‐API ................................ 52, 50 Configuring Centralized Logging ...........90
Installing only Serverless Pull Printing
Client .........................................................56 M
Installing only Track‐PM ...........................57
Manage Profiles ......................................118
Installing Celiveo Server Modules .............20
manage profiles ........................................65
Adding/Removing Using Celiveo Products
Installer ................................................39 Management
Maintenance Using Celiveo Products License ...............................................173
Installer ................................................38 Printer ..........................................78, 118
Prerequisites .........................................19 Server .................................................107
Using Celiveo Products Installer .............20 Migrating Celiveo Track‐GreenSaver Admin
Installing Serverless Pull Printing and and Reports .............................................300
Track‐PM ............................................ 50, 55 Migrating Celiveo Track‐GreenSaver
Installation on Windows OS ...................51 Reports ...................................................300
Prerequisites .........................................51 Migrating Celiveo Web Admin Software .297
Silent Installation using Commad Prompt 57 Migration
Order .................................................296
Celiveo Server Services ........................296
J Testing Successful Migration ................299
Job Purge Migration Support ..................................296
Configuration .............................. 202, 203 Multiple Database Support .....................183
Job Retention
Configuration ......................................197
N
Notification .............................................166
K Configuring Auto Sync Enrollment
KB ..............................................................18 Notification ......... 169, 168, 169, 166, 169
Knowledgebase ........................................18 Quota .................................................199
L O
Language Offline Authentication
Changing Group Language ............. 103, 75 Configuring Notification .......................166
License ....................................................173 Scheduler Configuration ......................158
License Management .............................173 Offline Authentication Lists ....................119
Configuring Embedded License ............180 Configuring .........................................122
Deleting License Files ..........................176 Creating List Entries by Autogenerating
How LIcenses System Works ................175 PIN List .............. 125, 124, 125
Index
Exporting in CSV Format ....................123 proximity badges ......................................95
Failover .........................................126 public key ................................................172
Notifying Users ...............................123
Pull Printer Queues
Renaming ......................................123
Setting User Rights ...........................126
Creation ...............................................36
User Rights .....................................126 Pull Printing .................................................1
..........................................................120 Roaming Configuration ........................207
Deleting ..............................................122 Server‐Based .......................................4, 5
Manually Creating CSV List ...................120 Push Printing ...............................................4
Viewing Details ...................................119
Q
P Queue
PKI Technology Configuring Print Queue ........................50
AES Encryption ............................ 171, 213 Queues
Ports .......................................................333 Pull Printer Queues ...............................36
Summary ............................................334 Quick Configuration ..................................67
Ports and Communication ......................333 Authentication ......................................71
Prerequisites Authentication Type Setting .................72
Client Machines and Servers ..................19 Configuring Group Settings ........ 75, 68, 74
Print Job Purge .......................................202 Printer List ............................................71
Celiveo Solution ....................................61
Print Job Retention .....................................4
Viewing QuickGroup ..............................68
Print Jobs
Quick Group ..............................................61
Configuring Device Groups ...................105
Adding a Device ....................................61
Printer Logs ...............................................80
Selecting Authentication Type .... 63, 62, 64
Printer Management ................................78 quick group configuration .........................65
All Groups List .......................................82
Creating Device Group ........................83
QuickGroup
Deleting Device Group ........................84 Migrating QuickGroup to Advance
Editing/Modifying Device Group ...........84 Configuration Section ............................75
Setting Password for Device Groups ......85 Quota Notification
Viewing List of All Device Groups ..........82 Configuration ......................................199
............................................................78
Add Devices ......................................79
Deleting Devices ................................80 R
Enabling/Disabling Printer Logs ............80 Replacing the Job Header Sequence .......211
Moving (modifying) Device withing Groups 81 Replacing the Job Trailer Sequence ........211
Viewing List of All Devices ...................78 Ricoh
Configuring Authentication for Device Configuring Ricoh Settings ...................161
Groups .................................................86 rule based printing ....................................66
Configuring Centralized Logging 90 ,102, 86
Configuring Billing ......... 91, 100, 92, 98
Ungrouped Printer List ..........................81 S
printer management ................................65 SAP System Profiles
printer setting ...........................................66 Configuring .........................................157
private key ..............................................172 Schedulers
Profiles Offline Authentication .........................158
Authentication ....................................147 Advanced Features ...........................159
SAP System ......................... 157, 141, 154 Stale CSS Record Cleanup Configuration 160
User Directory .....................................133
Index
Searching Chained Databases .................140 Creating Pull Printer Queues ..................36
Secure Print Installation Prerequisites .................19, 20
Configuring Secure Print .................. 74, 92 Maintenance Using Celiveo Products
Secure Printing ...........................................1 Installer ................................................38
Configuring Unencrypted .....................212 Celiveo Server Services
Unencrypted Configuration ..................210 Adding CSS to All Servers List ...............108
Celiveo Authentication ................................1 Configuration for Multiple Domain .............
Celiveo Authentication Hardware ........................................... 186, 181, 137
About ...................................................15 Migration ............................................296
Setting up .............................................15 Setting Constant Value for Domain Field
Celiveo Components Name .........................................138, 160
Celiveo Authentication Gateway ............20 Celiveo Solution
Celiveo Embedded Solution .......................76 Quick Configuration ...............................61
Deleting ................................................77 Uninstallation using Celiveo Web Admin
Saving ..................................................77 Software ...............................................64
Viewing ................................................76 Celiveo Track‐GreenSaver
Adding ............................................77 Reports Migration ...............................300
Celiveo Enterprise Celiveo Track‐GreenSaver Admin
About .....................................................1 Migration ............................................300
Celiveo Embedded Solution .......................14 Celiveo Track‐GreenSaver Administrator
Celiveo Hardware Adding Database .................................227
Connecting to Devices ...........................11 Configuring Active Directory Settings ...230,
Prerequisites .........................................10 245, 233, 239, 234, 238, 243, 240, 237, 228
Restoring Celiveo Embedded Solution ....14 Deleting Service‐Specific Users .............230
Setting up on Devices ............................12 Setting Default Cost Profile .. 235, 236, 232
Celiveo Print Manage ................................20 Celiveo Track‐GreenSaver Reports
Accessig from Different Machine Accessing Reports ............... 248, 253, 252
........................................... 264, 257, 256 Configuration ..............................248, 250
Configuration .......256, 259, 264, 261, 265 Migration ............................................300
Enabling Windows Authentication for Page Layout ........................................249
User Access ........................................261 Report Categories ........................254, 252
Linking SSL Certificate .................. 263, 257 Security ..............................................251
Prerequisites for Installation ................256 Tracking Deleted/Expired Jobs ..............252
User Benefits ......................................256 Viewing Reports ..................................249
Windows Login ...................................264 Celiveo Track‐PM .........................................1
Celiveo Print‐SMP Driver Plug‐In Celiveo Web Admin
Configuration ...................... 267, 272, 276 Enabling HTTPS Communication ...........291
Deactivating on a Printer ............. 276, 267 Migration ............................................297
Installation .........................................267 Setting up for HTTPS Communication ....292
Printing through CSS ...........................276 Celiveo Web Admin Software
Securing Windows Device Port on a Local Uninstalling Celiveo Solution ..................64
System ...............................................269 Server Management ...............................107
Celiveo Pull Printing .....................................1 All Server Groups List ...........................111
Service Configuration ..........................197 Configuring Server Groups .................114
Celiveo Secure Printing ................................1 Deleting Server Groups .....................113
Linking Servers ................................114
Celiveo Server Modules
Removing Servers ............................114
Adding Removing Using Celiveo Products Synchronizing Server Groups ..............117
Installer ................................................39 Viewing Server Groups ......................112
Index
..........................................................107 Prerequisites for Managing Enrolled Users 194
Adding CSS .....................................108 Roaming Pull Printing ..........................207
Deleting Servers ..............................110 Celiveo User Rights .............. 187, 195, 183
Modifying Servers ............................110 Tracking ..............................................190
Viewing Details ...............................108 User Enrollment ..................................190
Creating Server Groups ........................113 Synchronization
server management .................................65 Device in Quick Group ...........................64
Serverless Pull Printing Synchronizing
Configuring Cache Settings ..................219 Sending Reader and Tracking Settings ...106
Deploying and Configuring ...................213
Installation ..........................50, 55, 51, 56
Saving SPP Configuration ................. 53, 57 T
Setting Cost Profile .................................236 Testing Successful Migration ..................299
Settings TGS
Configuring SMTP ................................171 Administrator ........................................20
Global ................................................157 Reports .................................................20
sign in at walk up ......................................88 TGS management .....................................65
Single Sign‐On .........................................196 Tokens
Smart Card Profiles .................................141 Removing All License Tokens ................179
Configuring .........................................143 trace path ...............................................201
Deleting ..............................................143 Tracking
Viewing ..............................................142 Configuration .................. 190, 169, 74, 98
SMTP Settings .........................................171 Tracking Notification ...............................169
Special Notes ..........................................289 Track‐PM .....................................................1
SPP ............................................................20 Installation ................................ 50, 55, 51
Deleting SPP Shortcuts ..........................59 Silent Installation using Command Prompt 57
Installation ..........................50, 55, 51, 56 Troubleshooting ......................................281
Service Configuration .................... 197, 57 Card Reader ................................286, 282
Uninstalling Serverless Pull Printing ........58 Enrollment Issues ........................285, 281
SQL Server Profiles .................................154 Information Messages .........................281
Configuring .........................................155
Deleting ..............................................155
Setting up SQL Database ......................156
U
Viewing ..............................................154 User Certificate
CSS Configuration AES Encryption ....................................171
Activating User Rights Feature .............187 User Directory Profile
Browsing User List ...............................194 Setting up for Quick Group .....................62
Configuring Enrollment with Roaming ........ User Directory Profile Failover ................182
................................... 193, 192, 189, 187 User Directory Profiles
Defining Enrollment Mode ......................... Configuration ..............................133, 135
............................192, 189, 195, 181, 186 Active Directory Field Names ......136, 138
CSV Local List ..................................186 Chained Databases ..................140, 137
Getting Domain Information ..............186 Search Parameters .................................
Using CSV File .................................186 ..................... 137, 138, 140, 138, 134
Editing Users ............................... 195, 191 Deleting ..............................................134
Failover Capability ...............................183 Viewing Details ...................................133
Indirect User Directory Authentication .182 User Enrollment
Managing Enrolled Users ............. 194, 183 Configuration ......................................190
Defining Mode ....................................192
Index
Prerequisites .......................................191
User Notification ....................................351
CeliB2 License ..................... 375, 373, 365
Dropbear License ................................351
Kerberos License .................................379
Libusb License ............................. 374, 361
NET‐SNMP License ...................... 361, 364
OpenSC License ................... 367, 366, 373
Protobuf License .................................373
SQLite License .....................................374
The OpenLDAP Public License ...... 351, 375
Zlib License .........................................365

Celiveo Enterprise 8.0.1 Administrators Guide

Caricato da

Informazioni sul documento

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

Celiveo Enterprise 8.0.1 Administrators Guide

Caricato da

Copyright:

Formati disponibili

CELIVEO® ENTERPRISE

Printer Management ................................................................................................. 79

Installing Celiveo Print‐SMP Driver Plug‐In .............................................................. 265

Acronym Full Form Definition

Icon Meaning When Is It Used

Name Connectors 8.0 Connectors 8.1 Description

Name Connectors 8.0 Connectors 8.1 Description

Name Connectors Description

Celiveo Web Admin SPP

del /S /Q startMenuPath+ \\Celiveo Server Services

del /S /Q startMenuPath+ \\Enrollment Manager.lnk

del /S /Q desktoppath+ \\CSS Configuration.lnk

CONNECTION Click CONNECTION to test the Database configuration.

User Rights keys Function Applicable for device

STORAGE FOLDER PATH Path to the jobs folder location,. e.g. \\server\\shareduser\jobs

PASSWORD Enter Password of the remote storage folder path

@PJL SJOB NAME=$(DSN)$(SUFFIX1)$(SUFFIX2)\r\n

Building Job List... Contacting Celiveo Server

[C1] No Hard Disk. Contact Admin.

[D15]The server is unreachable.

[G29] Celiveo Invalid login and/

Follow the above instructions replacing network service with IUSR to grant IUSR read/

Application name/ Destination Prot

Application name/ Destination Prot

Application name/ Destination Prot

Application name/ Destination Prot

Application name/ Destination Prot

Activities Web Admin Future Smart HP Legacy Ricoh Toshiba Konica Minolta OfficeJet Pro

Activities Web Admin Future Smart HP Legacy Ricoh Toshiba Konica Minolta OfficeJet Pro

Potrebbero piacerti anche