Document 1964157.1 https://support.oracle.com/epmos/faces/DocumentDisplay?_adf.ctrl-s...

Copyright (c) 2019, Oracle. All rights reserved. Oracle Confidential.

Setup Instructions for Printing from Oracle Cloud (Doc ID 1964157.1)

In this Document

Goal
Solution
Setup on-site printer that meets Oracle Cloud requirements
Configure printer in BI Publisher
Troubleshooting
Frequently Asked Questions (FAQs)
References

APPLIES TO:

Oracle Fusion Payables Cloud Service - Version 11.1.9.2.0 and later

Oracle Fusion Receivables Cloud Service - Version 11.1.9.2.0 and later
Oracle Fusion Payments Cloud Service - Version 11.1.9.2.0 and later
Information in this document applies to any platform.

GOAL

The purpose of this document is to assist Fusion Applications customers with printing directly from the cloud to a on-premise printer.

SOLUTION

Setup of cloud based printer requires the following steps to be completed:

Setup on-site printer that meets Oracle Cloud requirements

When setting up on-site printer, please note that the printer must meet the following prerequisites.

Printer must support printing over the internet. There can be two options for this:

a) Printer is IPP enabled i.e. it natively supports printing over the internet.

b) In case if the printer doesn't support printing over the internet which can be the case for older printers then you need to
setup a print server at your location. Example of such IPP printer server can be CUPS (Common Unix Printing System) and
Windows IPP Print Server. For information on setting up CUPS or Windows IPP print servers and how to connect network
printers to them, refer to the CUPS or Windows IPP software vendor documentation

Note: It is strongly recommended that a print server (CUPS or Windows) be used instead of connecting directly to the
printer. This will remove the uncertainity of whether a specific printer is IPP enabled or not whether it can accept and
process cloud based print request. Print server also facilitates for easier debugging due to availability of server level logs.

Note: CUPS here refers to setting up CUPS print server on customer premise as gateway to printer. We use the CUPS print
server URL to configure that printer in BI. It does not refer to setting up CUPS server in BI which is de-supported from
Release 9 (see Doc ID 2089912.1).

The print server must present a valid SSL certificate signed by a trusted CA (Certificate Authority) such as Go Daddy, Verisign
etc. Please ensure you are using only those certificates, which are supported by Fusion. Please refer to Doc ID 2406398.1 for
additional details and list of supported CA certificates. Self-signed SSL certificates are NOT supported.

Please ensure that your printer or print server is configured to present complete certificate chain including the intermediate
certificate. Please refer to your vendor documentation for details on how to configure this.

On-site printer should be accessible from the Oracle Public Cloud via the internet over a secure connection. If your network
uses Internet Protocol (IP)-whitelisting as part of its security scheme, you must ensure that the IP # range for your Oracle
Public Cloud data center will be accepted (i.e. whitelisted) by your network for https connection. Below are the external IP #
ranges that will be seen by your network for each Oracle Public Cloud datacenter.

1 of 4 10/18/19, 9:07 AM
Document 1964157.1 https://support.oracle.com/epmos/faces/DocumentDisplay?_adf.ctrl-s...

Printer should be setup with authentication option enabled.

Printer should be using either Basic or Digest authentication schemes. NTLM is currently not supported. Note: For Windows
print server, NTLM is default authentication mode. Please make sure to switch to Basic or Digest. If you make any changes,
make sure to bounce the print server/default web site.

Printer URL should be based on fully qualified domain name (FQDN) for which SSL certificates were issued. Wild card ssl
certificates (such as *.oracle.com) are supported.

Note: Even when using VPN connection, printer setup should be performed as per instructions in this document. Only
difference for sending print request through VPN tunnel is at network. All printer traffic from Fusion Cloud to printer will be
routed through VPN tunnel.

Following depicts high level architecture for cloud printing from Fusion Applications

Configure printer in BI Publisher

Follow the steps below to register the printer in Fusion BI Publisher. Before registering the printer in BI Publisher, please ensure
that you can access the printer from internet using the printer URL

2 of 4 10/18/19, 9:07 AM
Document 1964157.1 https://support.oracle.com/epmos/faces/DocumentDisplay?_adf.ctrl-s...

1. Log into 'BI Publisher' application with a user with ‘BI Administrator’ Role. URL to access BI Publisher looks like this
https://machine.domain.com/xmlpserver
2. Click on the ‘Administration’ link on the top-right corner of the UI.
3. Click on ‘Printer’ link under ‘Delivery’.
4. Click on ‘Add Server’ to setup a new printer
5. Enter the following required fields to setup the printer and click Apply

Server Name - Enter a unique name. Example: FinancePrinter

URI - Enter the Uniform Resource Identifier for the printer. Example: ipp://finance.printer.com/printers/.printer1

Note: Printer URI should be entered using ipp:// NOT https://. Spaces in the URI can cause issues. Avoid spaces or fill
them with the HTML encoding for a space. ie. ~20

Note: Printer URI should be based on hostname.domain. URI based on IP address should be avoided unless the SSL
certificates were issued to IP address as CN

Username – Username for client authentication to access the print server

Password – Password for client authentication to access the print server.

Authentication Type – Select ‘Basic’ or ‘Digest’ based on the type of client authentication enabled on the print server. NTLM is
not supported

Troubleshooting

Refer to Troubleshooting Guide For Cloud Printer (Doc ID 2140116.1) for common issues during printer setup and testing

Frequently Asked Questions (FAQs)

When will the functionality to print directly from the ERP Cloud be available?

Answer: This functionality is currently available for Fusion Applications Release 9 and above

Is there an alternative means of printing reports, documents, etc.?

Answer: Yes. Typically, an ESS job, for example, invoice print, checks, statements, etc. will generate a report. These reports can be
downloaded to the end users local machine and printed.

What is the standard Protocol for printing directly from the Oracle ERP Cloud?

Answer: IPP over HTTPS on port default port 443

Does direct printing from the Oracle ERP Cloud require an SSL certificate from a Certification Authority?

Answer: Yes, the print server must present a valid SSL certificate signed by a trusted certificate authority such as Go Daddy and this
certificate should be part of Oracle supported certificate list. Please refer to Doc ID 2406398.1 for list of Oracle supported CA certificates.

Can a self signed SSL certificate be used, rather than a certificate from a Certification Authority?

Answer: No. Self signed certificates are not supported.

Can the print server be the printer itself, or, must a print server be, for example, a CUPS (Common Unix Printing System)
server?

Answer: The IPP print server can be the printer itself. Newer printers already have built in IPP over HTTPS support. Consult the printer’s user
guide for specific setup requirements and availability.

If the printer does not natively support IPP over HTTPS, then a CUPS server (or print server that supports IPP over HTTPS) can be used. For

3 of 4 10/18/19, 9:07 AM
Document 1964157.1 https://support.oracle.com/epmos/faces/DocumentDisplay?_adf.ctrl-s...

CUPS (or similar) based setup, ERP Cloud BI Publisher will connect to the print server, and then the print server would connect to the printer.
All required setups will need to be completed and tested by Cloud customers.

Is it mandatory to use SSL and client authentication?

Answer: Yes. For cloud customers, those are enforced by default and should not be modified by the customer.

How to test that my printer is working?

Answer: You can run any report program (e.g., Payables Invoice Register) and redirect the print output to the newly setup printer. If the job
completes successfully and the printer receives the print request then the setup is good.

For IPP connection, is TLS 1.2 supported?

Answer: Java supports TLS 1.2 from version. Starting Fusion Applications Release 12, TLS 1.2 is supported.

Can we use client side certificate instead of username/password for cloud printer authentocation?

Answer: No. Supported authentication methods are basic or digest both of which use username/password.

Are there any troubleshooting tips in case the print request doesn’t go through?

Answer: Please refer to Troubleshooting Guide For Cloud Printer (Doc ID 2140116.1).

In case you are still unable to receive the print requests on the print server from Oracle cloud , please log an SR to engage Oracle Support in
debugging any setup issues on Oracle cloud. When logging the SR, please provide the following details:

1. If your certificate is signed by intermediate CA, ensure that the intermediate certificate is installed on your print server and presented
during SSL handshake.

2. Screen shot of print server setup in BI Publisher

3. Complete printer URL

REFERENCES

NOTE:2406398.1 - SSL Certificates Import for Check Printing on Remote Printer

NOTE:2140116.1 - Troubleshooting Guide For Cloud Printer
NOTE:1368940.1 - How to Identify the Correct Trusted Root Certificate Authority Certificate(s) for a User Certificate?
NOTE:2121015.1 - SRDC - Data Collection Request for Fusion Payments - Cloud Printing
NOTE:551270.1 - Linux OS Service 'cups'
NOTE:2120300.1 - How To Install End Point URL SSL Certificates In Default Fusion Truststore
NOTE:1903739.1 - IP Whitelist for Web Service Calls Initiated by Oracle Cloud Applications

NOTE:2056914.1 - Cloud Virtual Private Network Provisioning / Cloud VPN Provisioning

Didn't find what you are looking for?

4 of 4 10/18/19, 9:07 AM