Canon Integrated Printer Readiness

CANON READINESS GUIDE

This document covers the printer pre-requisites to deploy Sentry Print Services to a Canon integrated printer. The list of supported Canon integrated printer models can be found on the Pharos website:  https://www.pharos.com/partners/canon/#supported-devices

Enable User Authentication (Required)

Set Admin Credentials

1. Open https://[device] in a web browser and log in using the default password.

2. Select Settings/Registration'

3. Scroll to the Management Settings section on the left panel and select User Management.

4. Select Authentication Management -> Basic Settings (in the Preferences section).

5. Click on the "Edit" button in the far-right corner.

6. Check the "Use the user authentication function"'.

7. Apply changes and update the password as needed and restart the device.

Verify that the “User Authentication” service is installed and running on the canon device

Open https://[device]  >> Service Management service >> Enhanced System Application Management>> User Authentication.

“User Authentication” service must be enabled, and the admin credentials set on the device before deploying Sentry Print Services to it.

Configure TCP/IP and DNS(Required)

1. Select Settings/Registration -> Preferences-> Network Settings-> IPv4 Settings

2. Select and enter the appropriate network information including DNS.

3. Click the OK button.

   

Configure Date & Time (Required)

Correct dates and times are necessary when securing the device against Beacon, particularly if using “Active Directory” or “OpenID” authentication types. This ensures that the user can successfully authenticate and either print secured jobs or perform other device functions.

1. Select Settings/Registration -> Preferences->Timer/Energy Settings -> Date/Time Settings.

2. Go to the Time Zone Settings section and select the local time zone from the dropdown.

3. Click the OK button. (You will need to restart the device for the settings to be effective).

   

Configure TLS settings(Required)

1. Select Settings/Registration.

2. Under Management Settings Select License/Other > MEAP Settings.

3. Check the Use TLS setting and Click OK.

   

Configure USB Settings

To make sure that all supported card types work we need to set the following:

1. Select Settings/Registration -> Preferences : External Interface -> USB Settings.

2. Check all 4 USB settings as shown below

   

Validate SNMP Settings (for device discovery only)

Make sure SNMP settings are enabled and the Device Scout has the appropriate configuration

1. Select Settings/Registration -> Preferences: Network Settings > SNMP Settings

   

IPP settings

1. Select Settings/Registration -> Preferences: Network Settings -> IPP Print Settings

2. Check the Use IPP and Allow When Using TLS settings.

3. Click OK.

   

Optional Settings

Auto-reset timer

Setting the auto-reset timer will fire a logout event after the specified amount of inactivity.

1. Select Settings/Registration -> Preferences: Timer -> Energy -> Power Save Settings.

2. Set the appropriate timer settings.

3. Choose the Function After Auto Reset as Initial Function.

4. Click OK.

Configuring Remote Panel

As a convenience when configuring or testing the printer, it may be desirable to enable the Canon device's Remote Panel feature.

1. Select Settings/Registration.

2. Under Management Settings Select License/Other-> Remote Operation Settings.

3. Check the Use Remote Operation setting and Click OK.

Proximity Card readers

Canon devices support a specific set of proximity card readers based on their USB driver. For many models, this driver is preinstalled, but others may require driver installation. This driver may be downloaded for your specific model(s) from the Canon Support website and installed using their procedure. All card readers must be configured* for “keystroking” or “keyboard emulation” mode to work with Sentry Print.

Note: The device needs to be rebooted once the card reader is unplugged and plugged back in.

* Independent configuration on a card reader may be required.

Configure Web Proxy (If required)

In some networks, access to web services (even local instances) may require a web proxy. A web proxy is an intermediate service that intercepts HTTP requests by the client and processes them on their behalf. Proxies are typically used to secure intranets and limit the traffic sent to the Internet.

If the printer is using a web proxy for internet access, please make sure that the proxy allows access to the internal address for the Site service.

Note: Pharos does not need a web proxy to be set up, this is an optional setting.

1. Navigate to Settings/Registration-> Preferences : Network Settings -> Proxy Settings.

2. Enter the web proxy name, port, and user credentials. The printer must have Internet access to communicate with the Beacon Cloud API endpoints.

3. Enter the Device Scout FQDN into the exception list when using the Local Connector.

4. Click the Apply button.

Enable disable Debug logs (If required)

This setting can be used for debugging issues on the printer while using the Secure print app.

Secure Print app must be installed to enable the debug logs. It will appear on the portal as shown below:

1. Click on the image to see the Configuration settings modal:

   

2. Select Debug Mode: ON

3. Click Apply and see the success modal pop up.

4. Click Back to go back to the Portal.

How to obtain the A1 license for Canon SE50(Required):

Canon SE50 requires a license for both applications separately.

1. Pharos Sentry SE50 Login.

2. Pharos Sentry SE50 MEAP App.

How to obtain the license for Pharos Sentry SE50 Login application:

1. Go to License Management System: http://www.canon.com/meap

   

2. Enter the License Access Number(LAN) for the Login application based on the region you are in and Click Next. You will find the LAN number in this file : PharosSE50Login. This file can be found in one of the following locations depending on your installation:

   Pharos Cloud (Device Scout) - C:\Program Files (x86)\PharosSystems\Sentry Print Service\canon-installer\LAN\<Region>.

   Uniprint - C:\Program Files (x86)\Pharos\Site Service\canon-installer\LAN\<Region>.

   

   Make sure the information above is accurate and click Apply to Issue a License

3. Download the sample CSV file and enter the list of Serial numbers you want to generate licenses for.

   1. The downloaded sample csv has text explaining how to enter the serial numbers. You do not need any of that text or a header. Simply, delete the entire text in the sample CSV and add the serial numbers.(You could also create your own csv without any headers)

4. Select Batch Register Several Device Serial Numbers Using a File (.csv) and upload the csv and click Next.

   

5. Verify the information below is accurate and click License File Issuance:

   

6. Download the license file as shown on the page below

   

7. Rename the license file to(exactly as shown): Pharos Sentry SE50 Login Service.lic.

How to obtain the license for Pharos Sentry SE50 Meap application

1. Click on Continue to Apply to Issue a License (To Top Page). It will take you back to the License Management System:

2. Enter the License Access Number(LAN) for the Meap application based on the region you are in and Click Next. You will find the LAN number in this file : PharosSE50MEAPApp in the following location: C:\Program Files (x86)\PharosSystems\Sentry Print Service\canon-installer\LAN\<Region>.

   

   Make sure the information above is accurate and click
   Apply to Issue a License

3. Download the sample CSV file and enter the list of Serial numbers you want to generate licenses for.

   1. The downloaded sample csv has text explaining how to enter the serial numbers. You do not need any of that text or a header. Simply, delete the entire text in the sample CSV and add the serial numbers.(You could also create your own csv without any headers)

4. Select Batch Register Several Device Serial Numbers Using a File (.csv) and upload the CSV and click Next.

   

5. Verify the information below is accurate and click License File Issuance:

6. Download the license file as shown on the page below:

   

7. Rename the license file to (exactly as shown): Pharos Sentry SE50 MEAP Applet.lic .

8. Copy both the license files to the following location: C:\Program Files (x86)\PharosSystems\Sentry Print Service\canon-installer.

How to Manually Install the Login Application(NOT required)

Note: This is not a required step. You only need to do this in case the securing process fails to install the login app automatically. The UI will display an error message that the login application could not be installed and to follow the steps outlined in the readiness document.

1. Access the Canon Printer by using Remote IP http://<printer_ip_address>/ (Example: http://192.168.0.72/)

2. Log in with admin credentials.

3. Click on "Enhanced System Application Management” present in the left side pane, under System Management.

   

4. Then under "Install Enhanced System Application/License" select "Enhanced System Application File Path" and browse the Login application jar file from C:\Program Files (x86)\PharosSystems\Sentry Print Service\canon-installer.

5. Select "License File Path" and browse the Login application license file specific to the region under C:\Program Files (x86)\PharosSystems\Sentry Print Service\canon-installer\LAN.

   

6. Click on the "Install" button.

   

7. Click on “Yes” to complete the installation.

Restart the Printer using the following steps to complete the installation process:

Click on the "To Portal" link present in the top right corner.