Ricoh Integrated Printer Readiness

This document covers the printer pre-requisites to deploy Sentry Print Services to a Ricoh integrated printer. The list of supported Ricoh integrated printer models can be found on the Pharos website:  https://www.pharos.com/partners/ricoh/#supported-devices

Further, the Ricoh device must be at a minimum firmware version to run the integrated software. The Ricoh WIM (Web Image Monitor; the printer's remote management interface) can be used to quickly determine versions.

NOTES

1. The “System/Copy” version is found under the “Firmware Version” section.

2. The “M2a_System” version is found under the “Application Version” section.

3. If the device is running a lower version, the device will need to be updated to the latest available version of firmware.

Remove Extended Applications

While this procedure is considered optional for most situations, it is highly recommended for printers that have been previous managed under alternate MPS solutions.  The procedure will remove any 3rd party software and custom configuration settings, returning the printer to a known good, clean state.

1. Select Device Management > Configuration.

2. Select Extended Feature Settings > Uninstall.

3. Select any application(s) and choose to Uninstall.

Update Device Firmware

While not required, it is good to ensure that the device’s firmware is at the most current version. Updated firmware can enable advanced security features (like TLS 1.2) or normalize previous issues in software that will ensure correct operations going forward.

Ricoh firmware is not publicly downloadable. Contact your Ricoh Service Representative to schedule a service call for firmware updates. On many models, the ability to configure a device for automatic firmware updates exists. This requires a connection to the Internet by the device and may not be allowed in many organizations.

Configure TCP/IP

Setting the IP Address

The device can be set up for either manual or automatic (DHCP) IP addressing.

1. Select Device Management > Configuration.

2. Select Network > IPv4.

3. Set “DHCP” to be either Active or Inactive.

4. If DHCP is Inactive, configure the “IPv4 Address”, “Subnet Mask”, and “Default Gateway Address” values. NOTE: When configured for DHCP, the value in parentheses next to those fields is the DHCP-supplied value.

5. Click the “OK” button to save the changes.

NOTE: If you use DHCP, either reserve the IP address configuration for the device or enable Device Scout for more aggressive discovery intervals to ensure that the correct IP address is available for the device in Beacon.

Setting Up DNS

Once it is secured, the Lexmark device talks to the Beacon components by fully-qualified DNS name. This means that the device must be configured properly for DNS.

1. Select Device Management > Configuration.

2. Select Network > IPv4.

3. Scroll to “Details” and locate the “DNS Server” section.

4. Select either “Auto-Obtain” or “Specify” for the DNS Server property.

5. Validate the DNS Server(s) specified by DHCP, or specify the IP address(es) of the DNS server(s) for the network.

6. Click the “OK” button to save the changes.

Configure Date and Time

Correct dates and times are necessary when securing the device against Beacon, particularly if using “Active Directory” or “OpenID” authentication types. This ensures that the user can successfully authenticate and either print secured jobs or perform other device functions.

1. Select Device Management > Configuration.

2. Select Device Settings > Date/Time.

3. Configure the Date and the Time. If desired, a NTP server can be specified as well. The NTP server “ time.nist.gov” is publicly-available.

4. Set the Time Zone as a GMT offset.

5. Configure “Daylight Saving Time” as applicable.

6. Click “OK” to save the changes.

Configure the Web Proxy

In some networks, access to web services (even local instances) may require a web proxy. A web proxy is an intermediate service that intercepts HTTP requests by the client and processes them on their behalf. Proxies are typically used to secure intranets and limit the traffic sent to the Internet.

Ricoh devices with the Smart Operations Panel must have proxy settings defined in the Android panel itself. To find Proxy settings in the Smart Operation Panel, go to: User Tools > Screen Features > Proxy Settings and configure there.

Configuring TLS Settings

The device communicates with the Beacon components over HTTPS. HTTPS transmissions are controlled by ciphers. Ciphers are protocols that both encrypt and decrypt the communications between nodes on the network. Over time, some ciphers (and versions) have become vulnerable to hacking and so are no longer used. It is important that your devices are configured for the highest cipher available on the server (and, in converse, that the server be configured to accept the cipher supported by the device).

1. Select Device Management > Configuration.

2. Select Security > SSL/TLS.

3. Enable the highest TLS version available on the device, disabling the others.

4. Click the “OK” button to save the changes.

Configuring Network Setting

Configure this setting to make sure the Network settings are read only for non-admin users.

1. Select  Device Management > Configuration >  Administrator Authentication Management.

2. Check if the Network Administrator Authentication is ON.

3. Select Interface setting for Available Settings for Network Administrator.

4. Click OK to save the changes.

Installing and Configuring Card Readers for Ricoh Smart Operations Panel Devices

When deploying Sentry SE50 to Ricoh, a manual process is required on the IM series devices sot that they can accept the appropriate input from a card reader. This is outlined below.

1. Tap "User Tools" on the home screen.
   On some models and firmware versions, this is labeled "Settings."

   

2. Tap "Machine Features."

   

3. Tap "Login."

   

4. Login as an administrator.

5. Tap "Exit."

   

6. Tap "Screen Features."

   

7. Scroll all the way down and tap "Screen Device Settings."

   

8. Tap "External Interface Software Settings."

   

9. Change "Select IC Card Reader" to "Proximity Card Reader."

   

10. Tap "Not Set" under Proximity Card Reader Software Settings.

    

11. Ensure that the value for "External Interface" has the correct card reader information displayed (the values here are an example only). Choose "Do not Use" under Software to Use and ensure that "Authentication" is Active (checked). Tap the "OK" button. This step requires that the card reader be attached to the printer.

    

12. Restart the device.