Pharos Cloud 4.4 Release Notes - February 2026

This release represents the latest version of Pharos Cloud. This update includes several important new features including:

Pharos Sentry Print Service Hotfix (Local Connector Only)

Version: 2602.403.2922

Release Date: February 2026

Improved Handling of Large Scan Jobs on Secured Ricoh Devices

Fixed an issue where large scan jobs on secured Ricoh MFDs could cause the  Secure Print application to crash. The  maximum supported scan size is 100 MB, and users will now receive a clear message when this limit is exceeded.

Note: Printers must be re‑secured to apply this hotfix.

Secure Release Updates

Enhanced Passcode Management

Pharos Cloud 4.4 introduces advanced administrative options for managing user passcodes in Secure > Settings > Passcode Settings.

New Alphabetic Passcode Option

Administrators now have the option to require passcodes consisting only of lowercase letters with the new Alphabetic setting, in addition to the existing Numeric (default) and Alphanumeric options.

Notes: 

• Existing customer configurations (e.g., Numeric or Alphanumeric) remain unaffected.

• The new Alphabetic option does not override or interfere with previously selected Character Complexity options.

Configurable Passcode Expiration

Administrators can now configure expiration policies for passcodes. By default, passcodes are set to Never Expire for both new and existing customers. Previously, a user’s passcodes did not have an expiration period.

The Secure > Settings > Passcode Settings section of the web console now includes the following configurable expiration options:

• Never Expires - This is the default option for all customers.

• Expires in 15 Minutes - Passcodes become invalid 15 minutes after creation. A 15‑minute passcode is intended for single‑use, short‑term access. It expires quickly and is meant to be used once and then forgotten, reducing the risk of reuse or impersonation associated with long‑lived passcodes. This option is best suited for customers who require temporary access only.

• Expires in X Days - Passcodes expire after a specified number of days, configurable between 1 and 365 days.

Passcode Notifications

Users receive alerts when a passcode is about to expire and when it has expired, with the option to reset via the User Portal, Print Scout, or the Secure Release mobile app.

Improved Passcode Experience in the User Portal

Passcodes in the User Portal are now easier to read with larger fonts, increased letter spacing, and visual grouping. A Copy to Clipboard option has also been added for quick access.

Passcode Email Security Enhancement

To improve credential security and meet compliance standards, passcodes no longer appear in plain text in email notifications. Users will now receive an email alert indicating that a passcode has been generated or updated.

Important Note: Users must now store their passcodes themselves, as these are no longer sent by email. Passcodes can be reset through the User Portal, mobile app, or Print Scout if needed.

Updates to the Device Profiles tab

The Secure > Device Profiles tab in the web console has been updated with these changes:

• New More Device Functions Button setting

• Added Guest Print option

• Added Offline Print option

• New supported paper sizes for Secure Scan

New “More Device Functions Button” setting

A new setting called More Device Function Button has been added to the User Experience drop-down in Secure > Device Profiles tab. This setting controls whether a user can access the printer's native home screen and apps, such as copy, scan, fax, or other non‑Pharos‑controlled functions.

Administrators can choose from three options:

• Enabled – Users can select the More Device Functions button on the secure printer and access the device home screen and native apps.

• Disabled – Users are blocked from accessing the More Device Functions and blocked from using all native device functions

• Disabled Over Account Limit – Users are blocked from More Device Functions only when their active account is over its soft limit.

The image below displays the “More Device Functions” button on the secure printer, which users may select as needed.

When the More Device Functions is disabled, the More Device Functions button on the secure printer becomes greyed out and unusable.

Notes:

• The Disabled Over Account Limit option is available only if Accounts are licensed and configured.

• The Disabled and Disabled Over Account Limit settings are not available for KM, Xerox, or Canon devices.

• This feature is exclusively available with Pharos Sentry Print Site Service 2602.403.2921 and above.

Added Guest Print to Device Profiles

Admins can now enable or disable Guest Print for individual devices or groups of devices via Device Profiles.

Guest Print is centrally controlled through Secure > Settings > Guest Print setting. When Guest Print is enabled globally, administrators can configure it at the device level through the Secure > Device Profiles tab. If Guest Print is disabled globally, the option is hidden from all device profiles and cannot be enabled on individual devices. This update allows granular device-level control when Guest Print is turned on globally.

If guest printing is disabled in the device profile, guest users cannot log in to the secure printer and will see a clear message: “Guest Printing is not permitted on this device.”

Notes:

• Existing customers will retain their current global Guest Print settings after the update.

• This feature is exclusively available with Pharos Sentry Print Site Service 2602.403.2921 and above.

Added Offline Print Configuration to Device Profiles

Offline Print is managed globally under Secure > Settings. When enabled globally, Offline Print also appears in the Secure Release section under Device Profiles.

• When Offline Print is enabled globally, administrators can turn Offline Print ON or OFF for each individual printer via its assigned Device Profile, allowing granular control over which devices support offline operation.

• When Offline Print is disabled globally, the option is removed from all Device Profiles and cannot be configured at the device level.

Note: Existing customers will retain their current global Offline Print settings after the update.

New Supported Paper Sizes for Secure Scan

Device Profiles now support two new scan paper sizes, A4 Landscape and Letter Landscape.

These options are available in the Scan section of the Secure > Device Profile settings, allowing administrators to configure secure printers to accept and process scans in landscape orientation for both A4 and Letter formats. This enhancement provides greater flexibility for environments that frequently scan wide‑format documents or forms that are better suited to landscape layout.

Enterprise Updates

User Management Improvements

This section describes the latest improvements to user management in the Pharos Web Console, aimed at making user administration easier and ensuring that only authorized users can access Pharos Cloud services.

Activate or Deactivate Accounts

Administrators can now change a user’s account status directly from the Users > User Management screen in Pharos Cloud. For users whose source is either Manual or System, the previously read-only Active field is now editable in the User Properties panel. Set Active to “No” to deactivate a user or set it to “Yes” to activate them.

• Users remain active unless manually changed by an administrator.

• Deactivated users lose access immediately across all Pharos Cloud interfaces.

• User status changes made in the external identity provider will be automatically reflected during SCIM synchronization.

Restricting Inactive Users

Pharos Cloud now enforces restrictions on inactive user accounts making sure that only users marked as ‘Active’ in the User Management screen are permitted to access Pharos Cloud features.

Users whose status is set to Inactive (e.g. “Active” = “No” in the User Management screen) are now blocked from logging in across all Pharos Cloud interfaces, including Print Scout, Mobile App, User Portal, and Chrome extension.

Note: This restriction applies exclusively to users who have not been imported via SCIM. Accounts managed through SCIM remain subject to the policies of their respective external identity providers.

New View active only filter in User Management

A new “View active only” toggle has been added to Users > User Management to help administrators quickly focus on users who are currently active in the system.

• When enabled, the user grid displays active users only, hiding any inactive users.

• When disabled, the grid shows all users, including both Active and Inactive accounts.

This filter makes it easier to review and manage your currently active user population, align with licensing views, and reduce noise from historical or deactivated accounts.

Decode Card Data Updates

New Revert to Defaults button

The new Revert to Defaults button in the Decode Card Data section lets administrators quickly reset all card decoding settings to their original values, making setup and troubleshooting easier.

Card Decoding Form Behaviour Update

Updated the card decoding utility so specific fields are automatically enabled or disabled based on related checkbox selections, preventing invalid or inconsistent configurations.

Refreshed License screen

The Account Settings > License tab in the web console now presents licensing details more clearly and accurately. The update improves administrative visibility and makes it easier to view user and device entitlements as they change.

New Auto- Provision Setting

A new Auto‑Provision toggle is now available under Account Settings > Settings. This tenant‑level option allows administrators to control whether users are automatically created (just‑in‑time provisioned) when signing in via OpenID or SAML. Previously, this behavior was always enabled and could not be turned off. With this update, administrators can now disable self‑registration during authentication.

• When Auto‑Provision is enabled, Pharos Cloud automatically creates a user the first time they sign in through a supported identity provider (OpenID or SAML), regardless of the access point used—such as the mobile app, User Portal, Chrome extension, secure printers, or Print Scout. This behavior is consistent with earlier versions of Pharos Cloud and supports seamless, on‑demand user creation.

• When Auto‑Provision is disabled, users cannot self‑register during authentication. In this case, users must be added manually or provisioned through SCIM.

Notes:

• This setting only affects auto‑provisioning via OpenID and SAML; it does not block Internal Authentication user creation, or Active Directory–based auth flows.

• Auto‑Provision is enabled by default for all customers, so unless an admin disables it, Pharos Cloud will continue to create new users automatically on their first OpenID/SAML sign-in.

Admin SSO for web console with SCIM Group Mapping

Pharos Cloud 4.4 adds a new way to control who can sign in to the Pharos Cloud web console as an administrator, using your organization’s identity provider (IdP) groups and SCIM. This feature lets organizations manage admin web console access centrally from their IdP instead of creating and maintaining local admin accounts in Pharos Cloud.

Key Capabilities

• SCIM Integration - Synchronize users and groups from your IdP (e.g., Microsoft Entra ID) into Pharos Cloud.

• Group Role Mapping - Assign Pharos roles to imported IdP groups via a new “Group Mapping” tab in the UI.

• SSO Experience - Users authenticate via the external IdP and are granted access based on their group membership.

• Role-Based Access Control - Permissions are managed through group-to-role assignments.

This feature introduces:

• A new Group Mapping section under the Users tab has been added. This allows administrators to assign SCIM‑synced IdP groups to specific Pharos Cloud web console admin roles. For example, admins can link an Entra ID group to the IT Administrator role.

• The Account Settings > Settings page now includes an “Enable SSO Sign-in for System Users” option. When turned on and configured, Pharos Cloud system users (administrators) sign in to the web console using your organization’s SSO and their accounts are managed via SCIM. Admins authenticate with your external identity provider instead of Pharos managed passwords.

• A dedicated Admin SSO Friendly URL in the Account Settings > Settings tab of the form:
  https://www.beacon.pharos.com/SSO/<Friendly name>

When Admin SSO is set up, admins signing in through mapped IdP groups become SCIM Managed System Users, indicated by "Yes" in the SCIM Managed column.

Note: Group Mapping applies to Pharos Cloud web console admin roles only. It does not control end-user print access, printer/device permissions, print policies, or quotas.

For more information on how to configure new SCIM-based SSO for administrators, refer to the Configuring the New SSO (SCIM‑Based) for Administrators document.

External Card Integration Update - Added support for OAuth Bearer Token

Pharos Cloud now offers OAuth 2.0 bearer tokens as an optional authentication method, providing stronger security for customers with advanced requirements. Previously, authentication was limited to HTTP signatures. With this update, the web console supports OAuth 2.0 bearer token authentication for external identity assertion and includes four new configuration fields under Analysis > API > External Card Integration:

• Client ID

• Client Secret

• Client Scopes

• Token Endpoint

Client Application Updates

The Analysis > API page has been updated to use applications for API access management. Administrators can now create application APIs, choose which Pharos Cloud API each application can call, and assign a permission level (Full Access or Read only). Each application receives its own client credentials and can be revoked independently. This provides clearer, more granular control over API access for external integrations.

Administrators can now create applications in the Analysis > API > Client Application section in the web console.

When creating a new API client, users can choose which API they want to connect to from a list of available APIs. Examples include:

• Billing Accounts API - Manage and retrieve billing-related information.

• SCIM v2.0 API - Automate user provisioning and identity management.

• Document Management API (also called Secure Documents API) - Enables Blueprint and other external systems to securely submit, list, and release print jobs stored in Pharos Cloud using token‑based authentication.

Note: Other APIs may also be available, depending on your organization’s configuration.

After selecting the desired API, users can specify the level of access for the API client:

• Full Access - Grants comprehensive permissions for all supported operations within the selected API.

• Read Only - Restricts the client to viewing or retrieving data without the ability to modify or delete resources.

Integration Capabilities

New Secure Documents API

A new Secure Documents API is now available in the Analysis > API screen. It provides a secure, REST-based way for external systems to submit, store, and manage print documents in Pharos Cloud. This cloud hosted API is a key component for migrating Blueprint Enterprise environments to Pharos Cloud, allowing Blueprint to securely list and release print jobs stored in Pharos Cloud using token-based authentication.

Features and format support

• The Secure Documents API supports the following formats:

  • PDF

  • Postscript

  • PCL

  • PCLXL

  • Octet stream

• Enables native integration with enterprise systems such as SAP, Epic, etc.

• Print Analytics now calculates exact page counts for non-PDF jobs using server-side analysis of PCL and PostScript streams.

New Device Scout API

Pharos Cloud now includes a Device Scout API that lets administrators manage Device Scouts and their discovery settings programmatically. Using this API, organizations can list Device Scouts, retrieve detailed information, update scan ranges and discovery tasks, and centrally manage SNMP v3 settings across all scouts.

To use the Device Scout API in Pharos Cloud, go to Analysis > API > Client Application. Admins can set up a new application, choose Device Scout API, and receive a card with a link to the Swagger/OpenAPI docs. These docs outline all endpoints and explain request and response formats. Once admins have the credentials, they can use them to authenticate scripts or integrations that connect to the API.

New Print Scout API

Pharos Cloud now includes a Print Scout API that lets administrators manage Print Scouts and their configuration through a public API. Admins can list and filter Print Scouts, retrieve detailed information, archive or unarchive scouts, and manage both common settings and print server–specific settings via automation.

To access the Print Scout API within Pharos Cloud, go to Analysis > API > Client Application. Administrators can create a new application by selecting Print Scout API, which will generate an associated card. This card includes a link to the Swagger/OpenAPI documentation, providing comprehensive information on available endpoints, filters, and request/response formats. The generated credentials can then be used to authenticate your scripts or integrations when making API calls.

Print Scout Updates

This section covers new features, significant enhancements, and bugfixes in Windows Print Scout 8.2.1.100 and Mac Print Scout 2.30.1.100. It also includes 8.1.x hotfixes released after Pharos Cloud 4.3.

Windows and Mac Scout Changes

Enhanced Language Support for Print Scout

To better support our global customer base and expand adoption, Print Scout now includes multi-language support for all customer-facing texts. This enhancement ensures that notifications, error messages, and UI prompts are available in the following languages:

• French

• Italian

• Japanese

• German

• Spanish

• Swedish

• Chinese

• Portuguese (Portugal)

• Portuguese (Brazil)

• Dutch

• Norwegian

• English

This provides better experience for global users. Users see Print Scout messages in their local language instead of English-only text.

Passcode Expiry Notification in Print Scout

Print Scout now proactively notifies users when their passcode is about to expire or has already expired, so they can reset it and avoid losing access.

Advance Warnings

Starting 7 days before expiry, users will see one warning message per day. The notification message shows the number of days remaining (e.g., “Your passcode will expire in 6 days. Please reset it now to avoid losing access.”).

When one day is left before the passcode expires, Print Scout shows the notification “Your passcode will expire today. Please reset it now to avoid losing access.”

Notes:

• No notifications will be shown if the passcode is set to expire in more than seven days.

• If the passcode has expired for more than 30 days, Print Scout will consider it inactive, requiring the user to create a new passcode.

Expired Passcode Alerts
If a user’s passcode has expired, Print Scout shows the message ''Your passcode has expired. Click on the Reset button to generate a new passcode'“

Note: When a passcode is configured to expire in 15 minutes, users do not receive advance warning notifications. Once the passcode expires, however, users receive a daily expiry notification prompting them to reset it. Because the expiration window is very short, any newly reset passcode will expire again almost immediately, which may result in users continuing to receive daily expiry notifications unless the expiration period is increased.

Conditions That Trigger Passcode Expiry Notifications

The advanced warning and expired messages appear under the following conditions:

• Once per day (every 24 hours)

• On user logon (sign‑out/sign‑in events; not unlocking the screen)

• When the Pharos Print app launches, which occurs only when Print Scout is first installed or when the user fully quits and relaunches the app from the Start menu.

Reset Passcode

Print Scout now lets users reset their passcodes directly from the expiry notification in the Pharos Print desktop app. Just click the Reset button to start authentication and receive your new passcode. Remember to save your passcode. Alternatively, passcodes can be reset via the user portal, the Print Scout desktop app menu, and the mobile app.

Note: To receive passcode expiry notifications, users must install the latest Print Scout (8.2 or later) or Mac Print Scout (v2.30 or later). If Print Scout is not installed, users can still be notified of expired passcodes via the User Portal or the Secure Release mobile app.

Ability to Collect Logs for Scouts

Pharos Cloud 4.4 introduces an easier way to collect logs from both Print Scout and Device Scout interfaces. This feature streamlines the process of collecting diagnostic logs for troubleshooting and support, making it simple for administrators to send all necessary logs to IT or support teams.

This feature gives Pharos Support and customer admins a self-service way to gather detailed diagnostics from Print Scouts without needing direct access to the workstation or print server.

A new Collect Logs button is available on the Discover > Print Scout and Discover > Device Scout tabs of the web console. This action allows administrators to initiate a log collection request from selected Scouts. Administrators can select one or more Print Scouts or Device Scouts in the grid and submit a single log collection request for all of them at once.

The administrator is then prompted to enter an email address to receive the logs.

Pharos Cloud creates a log collection request for each selected Scout and begins gathering the logs.

When the logs are ready, the administrator will receive an email which includes a download link for the log bundle and a password to decrypt the logs.

The download link remains valid for a limited time (e.g., 7 days). After this period, the link expires and cannot be used.

The Collect Log Status option displays the progress of a log collection request started via the Collect Logs button for a Print Scout or a Device Scout.

• The status is “Collecting” while logs are being gathered.

• After the log-download email is sent, the status changes to “Emailed”. This process may take up to 24 hours.

Note: The Collect Logs feature is available only for scouts with a status of OK, Reboot Required, or Needs Attention. It is not available for uninstalled or unregistered scouts. For uninstalled or unregistered scouts, the Collect Logs button is disabled. A scout must also be actively communicating with the system, as shown in the Health Updated column, to receive a log collection request.

Limitation:

• Linux Print Scout does not support collecting logs.

Windows-Specific Changes

Display Architecture Type for Print Scout Installations

Pharos Cloud now displays whether a Print Scout is running on Intel x64 or ARM64 architecture directly in the Pharos Cloud web console. Previously, admins could not easily determine the system architecture from the hostname or device list.  IT teams can now deploy appropriate drivers and software, streamline troubleshooting, and better manage mixed Intel and ARM workstation environments.

The Operating System Column in the Discover > Print Scout tab now includes Arm64 or x64 including the build number.

Update Print Scout with HP Universal Print Driver 7.9

The Windows Print Scout installer has been updated to bundle the latest HP Universal Print Driver (UPD) version 7.9, replacing the previous version 7.7. This update ensures compatibility with the most current HP printing technology, enhances stability, and addresses known issues from prior versions.

Pharos IPP Driver Update

Print Scout 8.2.x introduces a standardized driver selection strategy based on Windows version:

• Windows 10 and Windows 11 (23H2 or older) - Uses the Pharos IPP driver.

• Windows 11 (24H2 or newer) and Windows ARM - Uses the Microsoft IPP driver with the Print Support App (PSA).

macOS Specific Changes

Toshiba Bypass Tray Support

Mac Print Scout now supports the Toshiba bypass tray in macOS print workflows. Users can select the Bypass Tray directly from the macOS print dialog (Paper Feed section), and jobs will be routed correctly to the bypass / multipurpose tray via CUPS PPD integration.  This extends the bypass tray support previously introduced for Windows (Print Scout 8.1.14.100 with Microsoft IPP Class Driver and PSA) to the macOS environment.

Bugfix

Fixed an issue where Mac Print Scout showed an incorrect page count in the Pharos Print app when using the Toshiba e‑STUDIO3505AC driver with duplex printing. Page counts now display correctly starting in Mac Print Scout 2.30.

Print Scout 8.1.x Post Release Hotfixes (included in 8.2)

This release includes all bugfixes from the various 8.1.x patch versions. These fixes, originally shipped in separate updates (each with its own version number) are now part of Print Scout 8.2.x

8.1.123.100 – November 2025

Installer Update

To improve enterprise readiness, Print Scout now prevents installation when required configuration files InstallConfig.ini, Setup.ini, or CustomerSecret.dat are missing. This safeguard helps avoid misconfigured or unintended deployments. If these files are not included in the deployment package, the installer displays a warning message to the administrator and halts the installation process.

8.1.14.100 – September 2025

Policy Print Update

This update enhances how Print Scout manages and applies print policies. It also includes detailed policy logging for better visibility and easier troubleshooting.

Support for Bypass Tray with Microsoft IPP Class Driver and PSA (Windows Only)

This hotfix introduces full support for the Bypass Tray (also known as Multipurpose Tray) when printing via the Microsoft IPP Class Driver. Users can now select the Bypass Tray in the print dialog, and the correct IPP job attributes are sent to the printer to ensure accurate media routing.

Notes:

• This functionality is only available when using Print Support App (PSA), which is supported on Windows 11 version 24H2 or later.

• Earlier versions of Windows or environments without PSA will not expose or support Bypass Tray selection.

The following image shows the availability of the Bypass Tray as a selectable input source within the printer’s Printing Preferences dialog.

Print Scout Known Issue

After uninstalling macOS Print Scout, a small black dot may remain in the menu bar. This is only a visual issue. You can remove it by right‑clicking the icon and selecting Quit. Reinstalling the Print Scout will  restore the icon.

Secure Release Mobile App Updates

Reset Passcode on Mobile App

Users can now reset their passcode directly within the Secure Release Mobile app, providing greater flexibility and convenience for managing access to print jobs.

Passcode expiry notification on mobile app

Users will now be notified of expired passcodes directly in the Secure Release Mobile app, in addition to alerts in the user portal and Print Scout.

Pharos Sentry Print Service Updates

This section outlines significant improvements to the Pharos Sentry Print Service, enhancing reliability, streamlining administrative processes, and optimizing the overall print experience. Additionally, it details resolve issues and bug fixes.

DDU captures IPP details for Direct printers

The Device Discovery and Deployment Utility (DDU) now collects IPP Support and Discovered IPP URL for discovered devices. These details are shown in the Direct > Direct Printers grid for all customers with a Direct Print license.

Notes:

• Available in DDU 2.1.1 or later.

• Applies to both new and existing Direct Print customers.

Device Profiles Updates

In Pharos Cloud 4.4, the Sentry Print Service has been enhanced to align with the latest Device Profiles changes. This includes support for the following features:

• Guest Print

• More Device Functions

• Added new paper sizes for Secure Scan

See the New Options in Device Profiles section under Secure Release Updates of this document for more details on these updates.

Clear message for expired passcodes on secure printers

In Pharos Cloud 4.4, the Sentry Print Service now distinguishes between an invalid passcode and an expired passcode when users sign in at a secure printer. If a user enters a passcode that is correct but no longer valid, the device now shows a clear, specific message:

“Your passcode has expired. Please reset your passcode and sign in again”. 

New Supported Models for Canon

This release introduces support for additional models from Lexmark and Canon, enhancing the range of compatible devices for enterprise printing environments.

• imageRUNNER DX 4935

• imageRUNNER DX 6855

• imageRUNNER DX C359

• imageRUNNER DX C3930

• imageRUNNER DX 48xx

• imageRUNNER DX C48xx

• imageRUNNER DX 49xx

• imageRUNNER DX C49xx

• CX635

• imageCLASS X MF1333C/C1333iF/i

• imageForce 6100

Note: This release does not include Canon certification for the APJ region. Customers in this region should not upgrade to this version of the Sentry Print service.

New Supported Models for Lexmark

This release introduces support for additional Lexmark models, expanding compatibility in enterprise printing environments.

• CX950g

• CX950se

• CX951g

• XC9525

• CX951se

Note: Lexmark devices running FW3 or FW4 firmware are no longer supported

Support “Select All” Button on Small Screen devices

A new Select All button was added for small‑screen devices to keep the experience consistent with larger‑screen devices.

Sentry Print Bugfixes

• Scan to OneDrive jobs failing on HP devices - Fixed an issue where large scans from HP devices failed to appear in OneDrive if users were logged out during processing. The HP client now keeps sessions active until uploads finish, ensuring documents reliably show up in OneDrive.

• Registration issue on specific KM devices - Fixed a registration issue on Konica Minolta bizhub C3300i/C3301i devices where customizing the Secure Print app button caused Sentry Print to partially register and become unusable. Now, registration either completes without custom changes or fully reverts to the previous state.

Pharos Cloud 4.4. Component Release Versions

This release includes the following software components and release versions.

*Note: Secure Release mobile apps and the Chrome extension are published after the Cloud Services are updated.