Lexmark iMFP fails to connect to the Blueprint EDI Service.

Problem:

The Lexmark iMFP running the Lexmark eDas software is unable to connect to the Blueprint EDI Service using SSL.

Resolution:

The SSL connection was failing due to a problem with the allowed Cipher Suites on the Windows Server. Configure the server to allow the cipher suites that the device was presenting.

Update the Windows Cipher Suites order to contain the below Cipher Suites at the top of the list.

Cipher Suites (8 suites)
Cipher Suite: TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a)
Cipher Suite: TLS_RSA_WITH_DES_CBC_SHA (0x0009)
Cipher Suite: TLS_RSA_EXPORT_WITH_DES40_CBC_SHA (0x0008)
Cipher Suite: TLS_RSA_WITH_NULL_SHA (0x0002)
Cipher Suite: TLS_RSA_WITH_NULL_MD5 (0x0001)
Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA (0x002f)
Cipher Suite: TLS_RSA_WITH_RC4_128_SHA (0x0005)
Cipher Suite: TLS_RSA_WITH_RC4_128_MD5 (0x0004)

To configure the SSL Cipher Suite Order Group Policy setting, follow these steps:

1. At a command prompt, enter gpedit.msc, and then press Enter. The Local Group Policy Editor is displayed.

2. Go to Computer Configuration > Administrative Templates > Network > SSL Configuration Settings.

3. Under SSL Configuration Settings, select SSL Cipher Suite Order.

4. In the SSL Cipher Suite Order pane, scroll to the bottom.

5. Follow the instructions that are labeled How to modify this setting.

Notes

• You have to restart the computer after you change this setting for the changes to take effect.

• The list of cipher suites is limited to 1,023 characters.

*It has also been seen that the device itself had the base version of firmware on it. Updating the firmware of the to the latest version resolved the issue*