Sentry Print March 2020 Release Notes

This update introduces new Sentry Print capabilities that provide an unprecedented level of ease, flexibility, and ROI. You now have the option to eliminate all print infrastructure and related IT tasks. You can also leverage OpenID for Single Sign-on, take advantage of driverless secure printing, and apply the latest encryption standards to protect your data.

Support for Internet-only networks

Secure Print now supports internet-only environments (sometimes referred to as zero-trust networks). This means you can fully eliminate your print infrastructure; there are no print servers, print drivers or queues to manage—ever.

Serverless Secure Printing

You no longer have to spend your time managing secure printing operations for your organization. Now you can quickly deploy secure pull printing technology without any servers in your environment. Sentry Print secures your devices and your document output workflows. Take full advantage of the benefits that Infrastructure-as-a-Service provides: automatic scaling, simple deployment, and no software to manage.

Single Sign-on via OpenID Connect

Sentry Print can now tie into OpenID Connect services (e.g. Microsoft Azure AD, Google, PingFederate) for companies that need to secure their print environment without a local Active Directory server. Employees can now authenticate at their workstation with the company's selected authentication provider.

See more information on this topic here: Configuring Secure Release Cloud Connector .

Note: Initial support provided for Microsoft Azure AD, Google, and Ping Federate.

Batch Card Import

IT administrators can now batch register user authentication cards via CSV upload. Simply enter the user card numbers and corresponding emails and employees can start printing securely with their pre-registered cards. No extra steps are required.

Disable User Card Registration

For centralized control, administrators can also choose to disable self-registration. This adds an extra layer of security; it ensures full control over the cards being registered in the environment. With this option, users attempting to register their card at a printer will see a simple message informing them of the appropriate action to take.

Driverless Secure printing

Sentry Print now support driverless secure printing via IPP Everywhere (IPP/E). Mac users who have taken advantage of AirPrint are familiar with driverless printing: you can print directly from an app using the Print command built into the operating system.

IPP/E printers offer high-quality output and finishing options without the need to download and install vendor-specific drivers or configure print queues.

Note: IPP Everywhere is supported on Linux and Mac clients only. Support for Windows, iOS, and Android is coming soon.

New Authenticated Providers screen

The User Authentication Providers screen replaces the User Registration screen in previous versions. The new User Authentication Providers screen allows organizations to select how users register to Sentry Print. Sentry Print supports three authentication providers for user registration.

• Email Authentication – Print users register their email address with a PIN code from the Pharos Sentry Setup Guide.

• Active Directory – This option is suitable for organizations that use Windows Active Directory (AD) for managing users. The Print Scout uses the user’s workstation ID to establish the identity of the user. This option does not require user registration.

• OpenID Connect – This option uses token-based OpenID Connect technology to verify print user identity. This option is suitable for organizations with an existing supported OpenID Connect Identity Provider (e.g., Azure AD, Google) and has well-governed and well-known badges for user access and identity.

Cloud Connector Logging

Organizations with Sentry PrintCloud Connector configuration can download log files from the web UI to help troubleshoot secure printer related issues. A new Advanced screen has been added to the Secure Print tab to enable you to download Cloud Connector related log files.

Leverages Current Security Standards

Sentry Print and its corresponding mobile app now use the latest encryption standards, AES-256 (for data at rest) and TLS v1.2 using SHA-256 (for data in transit).

Secure Printers by IP Address

At some customer sites, DNS lookup for printers is not supported. This can make the securing of printers challenging. Now, Sentry Print will first attempt to secure devices by host name and then by IP address if host name is unsuccessful.

Software Component Versions

This release includes the following software components and release versions.