PrinterOn Print Delivery Station Admin Guide · PDF filePrint Delivery Station Admin Guide | 4 1. Print Delivery Station (PDS) Overview The Print Delivery Station has two components;

PrinterOn Print Delivery Station Admin Guide

Version 2.6 Doc Rev 2.6EH

Print Delivery Station Admin Guide | 2

Table of Contents

1. Print Delivery Station (PDS) Overview ............................................................................................................4

1.1. Print Delivery Hub ........................................................................................................................................4

1.2. Print Delivery Station ....................................................................................................................................4

1.2.1. Queue Monitor ......................................................................................................................................4

1.2.2. Remote Queue Monitor .........................................................................................................................4

2. Requirements ....................................................................................................................................................5

2.1. System Requirements ..................................................................................................................................5

2.2. Printer Requirements ...................................................................................................................................5

2.3. Service Requirements ..................................................................................................................................5

2.4. Network Requirements .................................................................................................................................5

2.5. Software Requirements ................................................................................................................................5

3. Print Delivery Station Reference .....................................................................................................................6

3.1. Print Delivery Station Console .....................................................................................................................6

3.2. Import Settings Tab ......................................................................................................................................7

3.3. Printers Tab ..................................................................................................................................................8

3.3.1. Edit Printer Dialog .............................................................................................................................. 10

3.4. Advanced – Listener Communication Tab ................................................................................................ 11

3.4.1. Local Listener ..................................................................................................................................... 12

3.4.2. Remote Listener ................................................................................................................................. 12

3.4.3. Add or Edit Remote Listener dialog box ............................................................................................ 13

3.5. Advanced – Print Processing Tab ............................................................................................................. 15

3.5.1. Print Processing ................................................................................................................................. 15

3.5.2. Advanced Job Handling ..................................................................................................................... 16

3.6. Advanced – Security Tab .......................................................................................................................... 17

3.6.1. Licensing ............................................................................................................................................ 17

3.6.2. Data Encryption ................................................................................................................................. 18

3.6.3. GUI Password .................................................................................................................................... 18

3.7. Advanced – Logging Tab .......................................................................................................................... 19

3.7.1. Local Print Logging ............................................................................................................................ 19

3.7.2. Property Management System Notification ....................................................................................... 20

3.7.3. Debug Logging ................................................................................................................................... 20

3.8. Advanced – Users tab ............................................................................................................................... 21

3.9. Advanced – SSL tab ................................................................................................................................. 22

3.9.1. Local Listener (On this Machine) ....................................................................................................... 22

3.9.2. Remote Queue Monitor ...................................................................................................................... 23

3.9.3. SSL Certificate Keystore .................................................................................................................... 23

3.10. Advanced – Proxy Tab .............................................................................................................................. 24

3.11. Advanced – PrintValet tab ......................................................................................................................... 25

3.11.1. Ethernet PrintValet ............................................................................................................................. 26

3.11.2. Serial/USB Connection ...................................................................................................................... 26

3.11.3. PrintValet Printer Associations .......................................................................................................... 26

3.12. Advanced – QoS Tab ................................................................................................................................ 27

4. Managing Print Jobs ...................................................................................................................................... 28


4.1. Reprinting documents ............................................................................................................................... 28

4.2. Using the Remote Queue Monitor (Privacy Release web pages) ............................................................ 28

4.3. Using the local Queue Monitor .................................................................................................................. 29

4.4. The status of Print Jobs ............................................................................................................................ 29

5. Uninstalling Print Delivery Station ............................................................................................................... 30

6. Appendix A: Encryption process ................................................................................................................. 30

7. Appendix B: Obtaining an SSL Certificate .................................................................................................. 30

7.1. Generate Private/Public Keypair ............................................................................................................... 31

Generate Certificate Signing Request ................................................................................................................. 31

7.2. Submit Certificate Signing Request to Certificate Authority and receive Signed Certificate .................... 31

7.3. Import Signed Certificate into Keystore .................................................................................................... 31

7.4. Configure PDS to Use Keystore and SSL ................................................................................................. 31

7.5. Test SSL Communications ........................................................................................................................ 31

Trademarks and Servicemarks ............................................................................................................................ 32

Copyright Notice .................................................................................................................................................... 32


1. Print Delivery Station (PDS) Overview

The Print Delivery Station has two components; Print Delivery Hub (PDH) and Print Delivery Station (PDS).

1.1. Print Delivery Hub

The Print Delivery Hub creates an Internet Printing Protocol (IPP) interface for your printer and provides a secure

means of transferring print jobs through your firewall. The Print Delivery Hub is hosted by PrinterOn in all our

cloud solutions. It may be necessary to host a PDH within your organization when using our on-premise

solutions.

1.2. Print Delivery Station

Print Delivery Station collects print jobs from the Hub and releases them to your printers. This software is

installed within your organization. Data is pulled securely through your firewall; there is no need to open any

inbound ports. Documents are held in the PDS until they are released by the Administrator or user from the web

page interface or PrintValet keypad.

1.2.1. Queue Monitor

Print Delivery Station's Queue Monitor is an interface for managing print requests. Print jobs collected by the

PDS are listed in the Queue Monitor. The standard Queue Monitor is designed to be used by printer

administrators. Depending on printer and Queue Monitor configuration, administrators may monitor and/or

manage (print/pause/delete) current and completed print jobs for all of the printers attached to the PDS.

1.2.2. Remote Queue Monitor

The Remote Queue Monitor is a web (HTML) version of the Queue Monitor and may be used in a variety of

scenarios. A typical example is environments where printers are available to the public; the Remote Queue

Monitor can be made available as a secure release mechanism. The Remote Queue Monitor presents a simple

interface for entering user information to retrieve print jobs for release. By allowing users to release their own print

jobs, this setup provides a level of privacy for users concerned with printing in public locations.


2. Requirements

Outlined here are requirements for the successful deployment of a Print Delivery Station. These requirements

apply to both the cloud and on-premise solutions.

2.1. System Requirements

Windows XP SP 3 or later

1 gigahertz (GHz) or faster 32-bit (x86) or 64-bit (x64) processor

100 MB of available hard drive space

1 gigabyte (GB) RAM

2.2. Printer Requirements

Local or network access to the printer

Administration credentials for access to networked printers

Recommended: PCL or PostScript supported printers

Supported but not recommended: host-based printers

2.3. Service Requirements

An active PrinterOn subscription

PrinterOn username/email address and password

2.4. Network Requirements

Outbound communication over port 80, 631 and 443

Continuous internet access

2.5. Software Requirements

Java Runtime Environment (JRE) NOTE: If this is not currently installed, the PDS install

wizard will prompt to have it installed at that time.


3. Print Delivery Station Reference

This section describes all the configuration options available within the PDS software. In most cases, the default

settings do not need to be changed.

3.1. Print Delivery Station Console

The PDS Console allows you to start or stop the PDS service, open the PDS Settings window or Queue Monitor.

The Console also displays the PDS version information and Serial Number.

Start: When selected, PDS requests print jobs from the PDH. If the Local Listener is enabled, PDS also accepts

requests from PrintWhere when installed locally. For details on enabling the Local Listener, see page 11 of this

guide.

Stop: When selected, PDS does not request print jobs.

Settings: Opens the PDS Settings window to modify configuration of the software.

Monitor: Opens the Queue Monitor for administrator access to print jobs.

Help: View the online help for the PDS Console.


3.2. Import Settings Tab

The Import Settings tab allows you to import your customization file and reset the software to default.

Import Customization File: Click to import or reimport your Customization file. The file is obtained, based on

your PrinterOn username/email and password, from the PrinterOn database.

Reset to Defaults: Restore the software and serial number to their defaults.

If you would like to change the service attached to a copy of Print Delivery Station, you must first click Reset to

Defaults and then Import the new Customization file.


3.3. Printers Tab

The Printers tab allows you to edit the destination of each PrinterOn ID. To send print jobs to the correct printer,

PDS requires the PrinterOn ID and the Local Name for each printer.

PrinterOn ID: Displays the name of the printer as provided by the Customization file.

NOTE: This is also the beginning of the email address for your PrinterOn service. All email addresses are in this

format; [PrinterOn ID]@printspots.com.

Local Name: Defines the local name or network path for the printer. You must configure the Local Name in

order for PDS to communicate with your printers.


If you are unsure what to enter in the Local Name field, refer to the following table.

If your printer is: Local Name: Examples

Connected directly to the PDS

computer

Click the Browse button (...) next to

the field and select the correct

printer from the returned list.

TIP: Hold the Shift key while

pressing Browse and uncheck

Network Shared Printers to faster

results.

HP Laserjet 4000 Series

RAW/TCP The format followed by the IP

address and optionally, the port.

raw://172.16.1.1:9100

tcp://172.16.1.1:9100

Connected via a network or

print spooler

Click the Browse button (...) next to

the field and select the correct

printer from the returned list.

Alternately, you can enter the share

name manually.

\\server\sharename

\\192.168.1.2\sharename

IPP The URL followed by /ipp/port. ipp://172.16.1.1/ipp/port1

http://172.16.1.1/ipp/port1

LRS The LRS VPSX server as well as

port and queue name.

lrsq://serverName-IP:port/queue

lrsq://192.168.3.2:6612/my_docs

NOTE: When using an LRS queue, the LRS Queue Data Transmission Application should be installed on the

same machine that is hosting PDS.

Add: Add a new PrinterOn ID to this PDS. Opens the Add Printer dialog box where you can enter details on the

PrinterOn ID, Local Name, Privacy Mode and Reprints. NOTE: The PrinterOn ID must already exist in our

database. You cannot create new printers for your service using this function.

Edit: Open the Edit Printer dialog box to edit details on the Local Name, Privacy Mode and Reprints.

Delete: Delete the selected printer from this PDS.

Test Page: Send a test print to the selected printer’s queue. A message will display if the test was successful or

unsuccessful. This is just to ensure you have the correct queue selected, if an appropriate driver is not chosen on

our website, you may experience an error when releasing a job submitted through the service.

PrinterOn.net: Opens the Administrator login page at printeron.com.


3.3.1. Edit Printer Dialog

Privacy Mode: Defines how the print jobs are handled upon delivery to the PDS.

None: Print jobs are released to the destination queue immediately. The Print Mode must be set to

Automatic. For more details on Print Mode, see page 16 of this guide.

General Delivery: Print jobs will only be released when using the Remote Queue Monitor or the

PrintValet keypad.

Members Only: Only users with a PrinterOn Membership can release print jobs.

Operators Only: Only users listed as Operators can release print jobs.

Anonymity Level: Defines what information is reported from PDS to the reporting server. Please note that

PrinterOn does not store and maintain any personal or sensitive information. Information reported when

printing includes details such as results of a print job and some job metrics including page counts and

formats. NOTE: This option is only available for PrinterOn Enterprise installations.

Optional: PDS will use the Anonymity Level configured for the printer using the administration

dashboard, no overriding rules will be applied.

Anonymous: Job name and job owner name is suppressed

Minimal: Job details including page count, job size

Anonymous + Minimal: Combines options from both Anonymous and Minimal

Enable Reprints: Allow users or computer administrators to reprint documents. Useful if the printer is out of

paper or jammed.

Maximum Reprints: Defines the maximum number of times a print job can be released.

Reprint Interval: Specify the timeframe available for the user to reprint a document.


3.4. Advanced – Listener Communication Tab

The Listener Comm tab allows you to configure communications between PDS and the Print Delivery Hub.

PDS queries the PDH and collects new print jobs. Communication always originates from the PDS and the PDH

only responds to requests from PDS. There is no requirement to open inbound ports on your firewall.

If the Local Listener and Remote Listener are both enabled, ensure the communication ports are unique for both.


3.4.1. Local Listener

The Local Listener allows PDS to accept print jobs from PrinterOn’s Windows print driver, PrintWhere. It is

enabled by default, but is rarely used. Additional configuration of your printer listing on our website is required to

receive only local print requests.

Enable: When checked, the Local Listener will accept print requests from PrintWhere.

Default IPP Port: Whenever possible, the default IPP printing port of 631 should be used.

Additional Port 1 and 2: To use a port other than 631 for local requests, you can enable and configure these

ports. PDS must accept print request data over this new port. Print request data has the attribute of

Application/IPP MIME type data (HTTP content type).

If you enable additional ports other than 631 or 80, you must specify that with additional configuration of your

printer listing on our website.

Enable Focus API on These Ports: When checked, this allows PDS to integrate using API commands. This

feature is intended for use with other PrinterOn solutions.

3.4.2. Remote Listener

This section outlines the communication settings between PDS and PDH.

Automatically Poll for New Jobs: When enabled, PDS checks PDH for new print jobs based on the

Communication Interval.

Communication Interval: This setting displays how often PDS checks PDH manually for new print jobs. The

default is 10.

List of Remote Listeners: Displays configured Remote Listeners. The Remote Listener allows for

communication between PDS and PDH.

Add: Add a new Remote Listener and configure its settings.

Edit: Edit the settings for the selected Remote Listener.

Delete: Delete the selected Remote Listener. Not recommended unless instructed to by a PrinterOn

representative.


3.4.3. Add or Edit Remote Listener dialog box

Remote Listener (Outside Firewall)

Enable: When checked, this Remote Listener is used.

Listener Communication Port: The port used for communication from PDS to PDH. This can be adjusted;

however, it must be in line with the ports PDH is listening on. NOTE: If using PrinterOn’s hosted PDH, the ports

allowed are 80, 443 & 631.

PrinterOn highly recommends using SSL on port 443 when possible. If this port is changed to 80 or 631, your

firewall must allow requests from PDS to the internet using 80 or 631. You must also deselect the Use SSL

checkbox here.

Use Default: When checked, the Remote Listener uses default port 443 for communication with PDH.

Use SSL: Enable SSL on this port.

Listener IP Address/Listener DNS Name: Identifies PDH server information.

Test: Verify communication with the Remote Listener over the selected port.

Password: Verifies communication with the Hub based on authentication on the server.


Network Gateway Authentication

When enabled, PDS will use these credentials to perform an HTTP Basic authentication process, prior to entering

the network where PDH resides. This authentication occurs between PDS and a Reverse Proxy server.

Username: This username would be provided by the network administrator in order to connect to a Reverse

Proxy server.

Password: This password would be provided by the network administrator in order to connect to a Reverse

Proxy server.

Check Jobs Service

When enabled, PDS will check the Hub based on the Communication Interval for print jobs over the port

specified. These checks are non-SSL transactions that use low CPU power and bandwidth.

Check Jobs Service Port: The port used when PDS checks PDH for print jobs.

Use Default: When checked, the Check Job function uses default port 631 for communication with PDH.

Test: Verify communication with the Check Jobs service over the selected port.

Client (Push) Notification

When enabled, PDS will open a connection to the PDH and listen for print jobs based on the Interval set. This

interval refers to the amount of time the connection will remain open between PDS and PDH. PrinterOn

recommends 60 seconds as many networks will not allow a steady network connection for extended periods of

time. The connection will be reestablished every 60 seconds by default.


3.5. Advanced – Print Processing Tab

This tab specifies where print data is stored before being sent to the printer, how long PDS holds onto print jobs

and how PDS handles failed requests.

3.5.1. Print Processing

Spool Print Job Data Locally: When enabled, print job data is downloaded from PDH and stored on the local

machine.

Print Spooling Directory: Specifies where PDS stores print data before it is sent to the printer. Change the

path by clicking the Browse button (…).

Maintain Job History: States how long PDS should maintain a print job for release.


Print Mode: Determines how PDS handles jobs.

Automatic: This is the default Print Mode. Printers set with a Privacy Mode of None will release prints

as soon as the job arrives in PDS. For printers with any other Privacy mode, print jobs are held until the

user or an administrator releases it via the PrintValet keypad or Remote Queue Monitor.

Manual: When this mode is selected, all print jobs, regardless of Privacy Mode selected, will be held until

the user or an administrator releases it via the PrintValet or Remote Queue Monitor.

Enforce Job Size Limit: When enabled, PDS will restrict the permitted size of a print job.

Job Size Limit: Specifies the maximum permitted size of a print job. Job size refers to the job data file size upon

delivery to PDS, not the original document’s size. This size changes after being rendered, compressed and

encrypted. The maximum size you can select is 512 MB. If a print job exceeds the entered size on the PDH,

PDS will delete the job without downloading it.

Reject Duplicate Jobs: When enabled, PDS rejects jobs with the same PrinterOn Transaction ID as a job

previously downloaded. Each print job is assigned a unique PrinterOn Transaction ID.

Accept Jobs from PrintWhere Only: When enabled, PDS will not accept jobs submitted by email, web upload

or any other submission format other than the PrintWhere client.

3.5.2. Advanced Job Handling

Enable Failed Job Retry: When enabled, PDS will resend print jobs that have previously failed.

Retry Failed Job Attempts: Defines how many times PDS will retry printing a job.

Retry Failed Job Interval: Defines the time between retries.

Enable Failed Job Purge: When enabled, PDS deletes print jobs that fail.

Purge Failed Job Interval: Defines the length of time before PDS deletes a failed print job.

Enable Abandoned Job Purge: When enabled, PDS will permanently delete jobs that are downloaded by PDS.

Purge Abandoned Job Interval: Defines the length of time PDS will hold print job data before purging. The

time starts when the print job is downloaded to PDS.


3.6. Advanced – Security Tab

3.6.1. Licensing

The PDS Serial Number is displayed here. The Serial Number is included with the configuration file so you are

not required to manually enter this information.


3.6.2. Data Encryption

PDS uses asymmetric (public key) encryption. With asymmetric encryption, a pair of keys is created; a public key

is posted to the PrinterOn web site, while a private key remains with PDS. In order to send an encrypted job, you

will need access to the public key.

Use Data Encryption: PDS can be set to accept encrypted data:

Always: PDS will only accept encrypted print data.

Optionally: This is the default selection. PDS will accept any print data regardless of encryption type.

Never: PDS will not accept encrypted data

RSA KeyPair: Displays the date the KeyPair was created.

Create: By default, a KeyPair is created when the customization file is imported. If necessary, you can create a

new key by clicking the Create button. When you click Create, the Random Data Collection window opens. In

the window, press keys arbitrarily and move and click your mouse. When the collection bar reaches 100%, the

window closes and your RSA KeyPair creation date will be updated to the current time.

Delete: Removes the current keys.

3.6.3. GUI Password

Require GUI Password: When enabled, PDS will prompt for a password in order to stop or start the PDS

service as well as when accessing the Settings or Queue Monitor windows. NOTE: There is no way to retrieve

your password if you forget it. To reset, you will need to uninstall and reinstall PDS.


3.7. Advanced – Logging Tab

3.7.1. Local Print Logging

This section is for specifying a location for a 3rd party integration’s log files. They record print jobs being released

to a printer. Another application would read these XML logs and process them.


3.7.2. Property Management System Notification

This section is used to integrate PDS with 3rd part software for Property Management Systems. When enabled,

this “Blind Job Notice” allows PDS to send a print log to the specified URL via HTTP(S) POST to notify the

Property Management System of user activity.

3.7.3. Debug Logging

Enable debug logs for troubleshooting printing problems. You can view the logs in a text editor such as Notepad.

Level: You can choose from 6 log writing levels depending on your monitoring.

OFF: no logs maintained

SEVERE: only critical system messages (e.g. License expired)

WARNING: serious issues that will interfere with normal operations. (e.g. Directory/drive missing)

INFO: detailed information that includes normal operations (e.g. Print job received)

CONFIG: log files include user and administrator actions (e.g. A print job was released)

FINE: extra detailed information regarding normal operations and actions that are automatically retried

(e.g. Timeout)

Output Directory: Defines the location of log storage. To change, enter a complete path or browse using the

“…” button.

Maximum File Size: Defines the maximum file size for an individual log file.

Total Size Limit: Specifies the total size allowed for all logs. When this limit is met, the oldest log file will be

purged.


3.8. Advanced – Users tab

The Users tab shows Operators and Administrators who have access to manage any print jobs sent to this PDS.

Add: Click to add a new Operator or administrator. The Add User dialog box will display and allow you to create

a User ID, password and select a Class. Currently, the two classes provide the same privileges.

Edit: Select a user and click Edit to change the User ID, password or class.

Delete: Select a user and click Delete to remove.


3.9. Advanced – SSL tab

The SSL tab is used to configure SSL communications.

3.9.1. Local Listener (On this Machine)

This section is for setting PDS to use SSL with PrintWhere. You must also complete the SSL Certificate Keystore

section.

Enable SSL – Default Port: When enabled, communication over port 631 uses SSL.

Enable SSL – Additional Port 1 & 2: When enabled, communication over either additional ports uses SSL.


3.9.2. Remote Queue Monitor

This section is for enabling SSL for the Remote Queue Monitor’s web pages. You must also complete the SSL

Certificate Keystore section.

Enable SSL: When selected, the Privacy Release pages use SSL.

Port: Specify the port to use for SSL access to the Privacy Release pages.

3.9.3. SSL Certificate Keystore

Specifies your SSL Certificate information. These fields are available only when SSL is enabled in either the

Local Listener section or Remote Queue Monitor section of this tab.

Create: Click to create an SSL Certificate based on the Private/Public Keypair method provided by Sun

Microsystems’ keytool. The generated certificate is not signed by a Certificate Authority but an unsigned

certificate still allows for the use of SSL. Web browsers may prompt the user to accept or reject the certificate;

both Internet Explorer and Firefox allow for the permanent importing of an unsigned certificate. NOTE: You must

create a folder to store the keystore in. Enter a name for the folder in the Keystore File field and the full path will

be populated for you.

Keystore File: Enter the file path for the keystore’s location or by clicking the Browse button (…). If you created

your own certificate, the file path where it was stored is displayed here.

Keystore Passphrase: The keystore password used when generating the keystore file.

Key Name: The key alias used to store the Certificate in the keystore file.

Key Passphrase: The key password used when storing the Certificate in the keystore file.


3.10. Advanced – Proxy Tab

The Proxy tab allows you to configure PDS to work in network situations where all traffic must pass through an

HTTP Proxy. If there is no proxy server on your network, the default settings will be ignored.

Enable HTTP Proxy: When selected, PDS will use the settings required for your proxy.

Use Web Proxy Automatic Discovery: Allows you to attempt discovery of proxy configuration information on

your local network. When chosen, click Discover Now to search the network. If a proxy is found, PDS displays

the proxy URL. Authenticating proxies are not supported with automatic discovery.

Use Manual Configuration: When chosen, makes the configuration fields available.

Proxy Address: Defines your proxy’s address.

Proxy Port: Defines your proxy’s port.

User Name and Password: Specifies the user name and password for a proxy that requires authentication.

Test Proxy: Click to test your configuration.


3.11. Advanced – PrintValet tab

For more information about the PrintValet keypad, see the PrintValet Guide available online.

Delete: Click to delete an existing PrintValet configuration.

Add: Click to add a PrintValet to your PDS software.

Edit: Click to edit an existing PrintValet configuration.

Enable: Use the PrintValet to release jobs.

Default Language: The default language display for the PrintValet.

http://www.printeron.com/images/docs/PrintValetGuide.pdf


3.11.1. Ethernet PrintValet

If you are using a Network PrintValet select Ethernet Connection. Enter the IP address (and port if not using the

default port 41) of the Network PrintValet that will be used to release jobs for the printers associated with this

PDS.

3.11.2. Serial/USB Connection

This is the COM port that your PrintValet is using. In general, you should select the highest number available. To

confirm you have selected the correct COM port, your PrintValet should read “Print Release Press OK”.

Rescan: Update the COM port listings if any changes were made, i.e. adding PrintValet drivers.

3.11.3. PrintValet Printer Associations

It is possible to configure different printers to different Network PrintValets when more than one printer is

assigned to the PDS.

Click the Edit button to the right of the Printer Association box

Select the Select Printers radio button

Enable the PrinterOn IDs that you would like this Network PrintValet to release jobs for

Click OK to exit the Edit Printer Associate dialog box


3.12. Advanced – QoS Tab

The QoS tab allows you to configure PDS to work with PrinterOn’s Release Agent Status Monitoring service.

When enabled, PDS will report its health state to the PrinterOn Cloud Directory. This information can be used to

determine if the PDS software is currently active and running. When enabled the PrinterOn Administration Portal

can be used to create notifications to administrators, if the PDS does not report its health within a designated

interval.

When enabled PDS will send periodic requests to https://www.printeron.com

NOTE: The QoS feature reports the status of the PDS software, not individual printers.

Enable: Use the QoS reporting.

Update Interval: Indicates the how often the PDS software will contact PrinterOn to specify its health status.


4. Managing Print Jobs

The PDS Remote Queue Monitor’s Privacy Release web pages allow users and operators to release documents. This provides privacy for the user and prevents unwanted print jobs from printing. Administrators can use the PDS Queue Monitor to manage print jobs and to monitor printer usage.

4.1. Reprinting documents

Depending on how a printer is configured in Print Delivery Station, it may be possible for users and/or operators to reprint a document.

If this feature has been enabled, you will have the opportunity to print the document again while a job's status is "Printed" (and has not changed to “Done”). A document can only be reprinted if the Release Code or user’s email address has been provided. Note that there is a limit to the number of reprints allowed, and that there is a designated time limit on sending reprints.

For details about enabling reprints, see page 10 of this guide.

4.2. Using the Remote Queue Monitor (Privacy Release web pages)

The Remote Queue Monitor is a web (HTML) interface for managing print jobs and privately releasing print jobs. The pages will display current and completed print jobs, and may be used to manually print and delete print jobs.

Your Customization file modifies the web pages to reflect the branding of the associated PrinterOn Service. For details on importing Customization files, see page 7 of this guide.

To use the Remote Queue Monitor:

1. Open the Privacy Release web pages in a browser. You can use: o the IP address of the machine running PDS, followed by 8181 (the default Remote Queue Monitor port) -

eg. http://127.0.0.1:8181

o the DNS name of the machine running PDS, followed by 8181 - eg. http://test.comp:8181

o localhost, followed by 8181 - eg. http://localhost:8181 NOTE: this only applies if you are accessing the Remote Queue Monitor from the machine running PDS.

2. To access a print job, a user can enter the Privacy Release Code for the print job and then click Find. The Privacy Release Code may be the code or email address used when printing.

In a typical public printing environment, the Remote Queue Monitor is made accessible on a computer near the destination printers. For ease of use, we recommend making the Remote Queue the default web page for the computer’s browser, or making it available from a link on the desktop.

There are also options for logging in as a PrinterOn Member or Operator/Administrator.


4.3. Using the local Queue Monitor

The Queue Monitor lists current and completed print jobs. If the Print Mode is set to Manual, all print jobs are held and must be manually sent to printers. If a printer’s Privacy Mode is set to anything other than “None”, the print jobs for that printer will be held.

To use the Queue Monitor:

1. From the PDS console, click Monitor. The Queue Monitor opens. 2. To sort print jobs, click the column title you want to sort by. 3. To change the Print Mode, select Automatic or Manual from the Print Mode list. For more information about

Print Modes, see page 16 of this guide. 4. If Manual Mode is selected you may select a print job then click Print or Delete.

4.4. The status of Print Jobs

This table explains the Status messages you may see in the Queue Monitor.

Status Definition

Data Missing Data file for the request cannot be found by PDS

Deleted Data file for the request has been deleted

Done Print job has been printed and is no longer available to reprint

Download Pending PDS has queried PDH and is retrieving details about pending documents

Downloading Data file for the request is being downloaded from PDH

New Print job is being held pending release

Partially Downloaded Data file for the request was partially downloaded from PDH and was

interrupted

Pending Paused – must be printed in Manual mode

Printed Printing completed – job can still be reprinted

Printing Being sent to a printer or queue

Purged Data has been deleted by PDS – based on the Failed Job purge setting in PDS

Ready Ready to be printed

Waiting Requested printer is unavailable or busy – will change to Ready status when

printer is available


5. Uninstalling Print Delivery Station

To uninstall PDS, enter your Programs list from Windows Control Panel. Find and select Print Delivery Station,

then click Remove. Follow the instructions to completely remove PDS. You may be required to restart your

computer to complete the uninstall process.

6. Appendix A: Encryption process

Print Delivery Station can be set to use RSA asymmetric (public key) and AES symmetric encryption to secure print jobs in a two-phase process. First, an asymmetric KeyPair is created in the Station Settings window. The public key is posted to the PrinterOn web site, while the private key remains secure in PDS. PDS uses the private key to decrypt the data.

When transmitting an encrypted document, the print client first determines that the printer supports encryption and obtains the public key for the printer. Then, the print client generates a random symmetric encryption key for the AES algorithm and uses the symmetric key to encrypt the print data. Then the print client encrypts the symmetric key with the asymmetric (public) key and transmits both the encrypted print data and encrypted symmetric key to PDS.

PDS uses the private key to decrypt the encrypted symmetric key, and then uses the decrypted symmetric key to decrypt the encrypted print data.

This two-phase process is necessary because asymmetric encryption is, while very secure, inefficient. Symmetric

encryption is much more efficient, especially for large jobs like print data streams. This two-phase encryption

scheme provides two desirable features: strong encryption security and efficiency of processing.

7. Appendix B: Obtaining an SSL Certificate

These instructions outline the steps required for generating an SSL Certificate and getting it signed by a Certificate Authority.

This method uses Sun Microsystems’ keytool. This tool is part of the Java Runtime Environment (JRE), which is included with your download of PDS.

To obtain and install an SSL Certificate, you must:

1. Generate a Private/Public Keypair 2. Generate a Certificate Signing Request 3. Submit a Certificate Signing Request to Certificate Authority and receive Signed Certificate 4. Import the Signed Certificate into Keystore 5. Configure PDS to use Keystore and SSL 6. Test SSL Communications


7.1. Generate Private/Public Keypair

For details on generating a Private/Public Keypair, view this helpful article from Verisign.

Notes:

o All keytool commands consist of a single line

o You may require quotation marks around long path names

o You can also generate this keypair using the Create button in the PDS Advanced Settings > SSL tab

Generate Certificate Signing Request For details on generating a CSR, view this helpful article from Verisign.

7.2. Submit Certificate Signing Request to Certificate Authority and receive Signed

Certificate

The precise steps to follow for this Step vary by Certificate Authority (CA). First, you must choose a CA. Companies such as Verisign, Thawte and RSA Security provide this service.

Most CAs charge a fee for this service, depending on the nature of the Certificate being signed, the validity period, and other factors.

Example steps for using Verisign to generate a Test Certificate:

1. On the Verisign web site, www.verisign.com, sign up for a Test Certificate.

2. When prompted to, paste a copy of the text from the Certificate Signing Request file (certreq.crq) into the provided text entry box on one of the web pages.

3. Submit the request.

Verisign processes the request and returns a text file via email. The file represents the Signed Certificate.

Note that the process to obtain a real Certificate will vary from obtaining a Test Certificate.

7.3. Import Signed Certificate into Keystore

For details on importing a certificate into a Keystore, view this helpful article from Apache Tomcat.

7.4. Configure PDS to Use Keystore and SSL

Enable SSL communication in PDS via the SSL tab. For details, see page 22 of this guide.

Note that SSL can be enabled on zero, one, two or three IPP ports, as desired. If SSL is active for a particular

port, all communication using that port must use SSL. Activation is done on a port-by-port basis.

7.5. Test SSL Communications

After installation the certificate in PDS, you can verify SSL communications in your browser.

To test your SSL certificate:

1. From an SSL-capable browser, open the Remote Queue Monitor.

2. If the web address changes from http:// to https://, your SSL certificate is active.

https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&actp=CROSSLINK&id=AR227

https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&actp=CROSSLINK&id=AR227

http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html#Importing_the_Certificate


Trademarks and Servicemarks

PrinterOn®, PrintAnywhere®, Print Simply Anywhere®, PrintWhere®, PRINTSPOTS®, the PrinterOn Logo, the

PrinterOn Symbol, PrintConnect™ and PrintValet™ are trademarks and/or registered trademarks of PrinterOn.

Other trademarks are the property of their respective owners.

Copyright Notice

© Copyright 2014 by PrinterOn Inc.

All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in

any form or by any means, electronic, mechanical, photocopy, recording, or otherwise, without the prior written

permission of PrinterOn Inc.

Disclaimer:

PrinterOn Inc. makes no warranty with respect to the adequacy of this documentation, programs, or hardware,

which it describes for any particular purpose, or with respect to the adequacy to produce any particular result. In

no event shall PrinterOn Inc. be held liable for special, direct, indirect, or consequential damages, losses, costs,

charges, claims, demands, or claim for lost profits, fees, or expenses of any nature or kind.