Pharos Cloud 4.3 Release Notes - September 2025

This release represents the latest version of Pharos Cloud. This update includes several important new features and improvements including:

Enterprise Updates

• Added option to disable web upload in User Portal

• Lock Secure Release and Direct Print Settings

• Device Profiles Updates

• Card Decoding for HP Universal and HP LEGIC Readers

• New Secure Documents API

Print Scout Updates

• New Windows MSI Installer

• Print Driver Updates

• Secure Release and Direct Print: Support for HP Universal Print Driver 7.7.0

• Secure Release : Support for Print Support App (PSA)

• Direct Print: Support for the following features:

  • Windows Protected Print (WPP) mode

  • Windows on Arm devices

  • Print Support App (PSA)

• Disable Application Tracking from web console

• Support migration from Blueprint Enterprise

The Print Scout Updates section of this document also includes a “Print Scout Limitations and Known Issues” section.

Sentry Print Service Updates

• Added “Device Scout” column to Secure Printers screen

• Added support for new Xerox and Lexmark Devices

• Preserve Secure Print Trust Root Certificate on uninstall of Sentry Print Service

• Improved Sentry Print feedback for Scout Release Failures

Enterprise Updates

• Added option to disable web upload in User Portal

• Lock Secure Release and Direct Print Settings

• Device Profiles Updates

• Card Decoding for HP Universal and HP LEGIC Readers

• New Secure Documents API

Added option to disable web upload in User Portal

Pharos Cloud 4.3 adds a new Allow Job Upload setting in the User Portal Settings. Admins can now choose if users can upload print jobs through the User Portal. Previously, enabling the User Portal allowed users to upload jobs and access cloud storage even if cloud storage was disabled.

• When Allow Job Upload is ON, users can upload documents for printing through the User Portal. The Upload button is visible and functional.

• When Allow Job Upload is OFF, uploading print jobs via the User Portal is not available. The Upload button is hidden from the User Portal.

The option to disable web upload is useful for organizations with strict data security or compliance requirements. It allows organizations to restrict document uploads while still providing access to other portal features.

Note: If you’re an existing customer with the User Portal for End-Users setting turned ON, web upload will be toggled to ON automatically. If the User Portal for End-Users is OFF, or you’re a new customer, web upload will be initially toggled to OFF.

Lock Secure Release and Direct Print Settings

Administrators can now lock both Secure > Settings and Direct > Settings pages to prevent unauthorized or accidental changes.

By default, the Settings pages are unlocked. To lock or unlock these pages, a Site Service Key is required. This ensures that configuration changes are securely managed and limited to authorized personnel.

When these pages are locked, only System Administrators have permission to edit the Settings page while other users are limited to read-only access.

Note: This feature applies to sites with Direct Print and Secure Release licenses.

Device Profiles Updates

The following settings have been migrated to the Device Profiles tab from the Secure > Settings > Secure Release Settings tab of the Pharos Cloud web console. This allows administrators to configure the following settings for each print device instead of a single global setting for all devices.

Proximity Card

The Proximity Card section allows administrators to assign a proximity card reader to Device Profiles.

Lock Device Functions (HP Only)

The setting previously known as “Require authentication for all device functions” has been renamed to Lock Device Functions and moved to the Secure Release section of the Device Profiles tab.

• When enabled, all device functions (print, copy, fax, scan) require users to authenticate.

• When disabled, authentication is required only for the Secure Release application. Users can use other device functions without having to authenticate.

Note: This setting applies to HP devices only.

Card Decoding for HP Universal and HP LEGIC Readers

Pharos Cloud 4.3 now allows administrators to set card decoding parameters for HP Universal and HP LEGIC card readers. This ensures the system will read badge data the same way on all devices, avoiding manual setup per printer and reducing errors with different card types.

Selecting HP Universal Card Reader or HP LEGIC in the Card Reader menu displays the supported card types, letting administrators choose a card type from a list of predefined options.

A new Decode Card Data section is now available on the Secure > Settings screen, enabling administrators to set how HP Universal and HP LEGIC card readers interpret proximity card data.

The Card Type section allows administrators to select the card types used in the organization.

The Card Data Format section defines how the bitstream read from the selected card type is decoded into usable fields such as Facility Code (FAC), Card ID, Parity Bits, etc. Default values are provided but administrators can fully customize these settings to match the organization’s card encoding standards.

Note:

• The Decode Card Data section is only visible when HP Universal Card Reader or HP LEGIC Card Reader is selected in the Proximity Card section of the Device Profiles tab.

• After editing the decode settings, it is not necessary to restart the Sentry Print Service or the device. However, if users registered their cards before the settings were changed, they will need to register again. This is because the card ID changes when the decode settings are updated, and the old IDs will no longer work.

New Secure Documents API Card

Pharos Cloud 4.3 introduces a new Secure Documents API Card in the Analysis > API tab of the Pharos Cloud web console. For organizations migrating to Pharos Cloud from Pharos’  on-premises print management solution, Blueprint, this API allows Blueprint to list, delete, and release print jobs stored in Pharos Cloud using token-based authentication.

Administrators can download a JSON configuration file containing the necessary credentials, Client ID, Secret, and API URL and upload it into the Blueprint Administrator. For more information, refer to the Blueprint 6.0 New Features Guide.

Print Scout Updates

The Print Scout component (v8.1.12.100) of Pharos Cloud has been updated with the following new features:

• New Windows MSI Installer

• Print Driver Updates

• Secure Release and Direct Print: Support for HP Universal Print Driver 7.7.0

• Secure Release: Support for Print Support App (PSA)

• Direct Print: Support for the following features:

  • Windows on Arm devices

  • Windows Protected Print (WPP)

  • Print Support App (PSA)

• Disable application tracking from the Pharos web console

• Support migration from Blueprint Enterprise

New MSI Installer

The latest Print Scout (v 8.1) introduces a new MSI installer, replacing the older EXE format. This change is designed to streamline enterprise deployments.

• Simplifies mass deployment and supports silent installation, making it ideal for enterprise use.

• Supports centralized deployment tools like SCCM or Group Policy

• Fully compatible with Windows 11 and ARM64 devices, future-proofing deployments

• MSI packages are digitally signed, support encrypted logging, and align with Windows Protected Print (WPP) standards.

• Simplifies uninstallation. Uninstalling Print Scout is now simpler, with options to use Windows Settings, Control Panel, or the command line.

• Can upgrade existing EXE based installations.

Important Notes:

• Reboot machines after Print Scout Upgrade

Upgrading Print Scout requires a system restart. The reboot ensures that all components are properly refreshed and fully functional after the upgrade. Skipping the restart may result in incomplete updates or limited functionality.

• “Files in Use” Prompt

During a Print Scout v8.1 upgrade, you may see a “Files in Use” prompt if some applications are still running. To continue, click Ignore or close the applications and select Retry. Either option allows the upgrade to finish successfully. This prompt is normal and does not affect the Print Scout client’s performance.

Note: This prompt appears only during non-silent upgrades (e.g., manual or interactive installations). Silent deployments do not display this message.

• Duplicate Entries After Upgrade

After upgrading from Blueprint Print Scout to the new Print Scout (Cloud MSI), two entries may appear in Programs and Features:

• Blueprint Print Scout Installer

• Print Scout

This is expected and does not affect functionality. The Blueprint entry can be ignored or manually removed without impacting the new installation.

Print Driver Updates

Print Scout 8.1 introduces consistent driver behavior across Windows platforms, simplifying deployment and improving compatibility with Windows Protected Print (WPP). Beginning with Print Scout 8.1, the Microsoft IPP Class Driver is installed and used by default on Windows 11 machines regardless of WPP status.

Driver Defaults by Operating System

• Windows 11 and Windows on Arm devices: Uses the Microsoft IPP Class Driver by default, whether WPP is on or off.

• Windows 10: Defaults to the Pharos IPP Class Driver but can be updated to use a manufacturer-provided driver via the Print Scout Configuration Tool.

In Print Scout 8.0 on Windows Intel-based devices, the default driver used for secure print queues depended on the status of the Windows Protected Print (WPP). If WPP was enabled, the Microsoft IPP Class Driver was used. If WPP was not enabled, the queue defaulted to the Pharos IPP Class Driver.

Secure Release and Direct Print: Support for HP Universal Print Driver 7.7.0

Print Scout 8.1 adds support for the latest HP Universal Print Driver 7.7.0 (released in May 2025) for both Secure Release and Direct Print. This ensures compatibility with new HP devices, improves printing performance, and introduces updated features and enhanced security.

• Organizations using HP print drivers for their secure queue will have the HP Universal Print Driver 7.7.0 assigned to the secure queue.

• For Direct Print, version 7.7.0 of the driver will be listed from the pre-loaded manufacturer drivers for Windows.

Secure Release:  Support for Print Support App (PSA)

Pharos Cloud 4.2 introduced support for Windows on Arm devices as well as Windows Protected Print (WPP) mode on Windows 11. These enhancements enabled users to securely release print jobs via the Microsoft IPP Class driver.

Print Scout v8.1, released as part of Pharos Cloud 4.3 now integrates with the Print Support App (PSA) to enhance the printing experience. This integration allows users to access advanced printing options such as tray selection, duplex printing, and other finishing preferences that are not available when using the default Microsoft IPP Class Driver. These capabilities are comparable to those provided by the Pharos IPP Class Driver.

Notes:

• PSA is only supported on Windows 11 version 24H2 or later. To enable PSA features, we recommend installing Print Scout on devices running Windows 11 24H2 or newer.

• If the Print Support App (PSA) is uninstalled, Print Scout only offers basic print options. Logging in reinstalls the PSA, restoring all features and updates.

The PSA provides the following printing preferences in the Microsoft IPP Class driver similar to the Pharos IPP Class Driver, except for Watermark, which will be supported in a future release.

• Paper size

• Color Options

• Orientation

• Duplex Printing

• Page Range

• Tray Selection

• Paper handling

• Finishing Options such as Staple, Bind, and Punch

Direct Print: Added support for WPP, Windows on Arm devices, and Print Support App (PSA)

Pharos Cloud 4.3 expands support for Windows Protected Print (WPP) and Windows on Arm devices by introducing support for Direct Print, building on the Secure Release and Print Analytics support first delivered in Pharos Cloud 4.2.

With the latest Print Scout (v8.1), direct IP printing is supported from Arm-based devices and WPP-enabled environments using the Microsoft IPP Class Driver. Additionally, integration with the Print Support App (PSA) enhances the Direct Print experience by adding advanced print options such as tray selection, duplex, etc.

Note: Known Behavior for Direct Print -  Printer Queue Visibility in Mixed Windows Arm and Intel Environments

In mixed-platform setups for Direct Print, Windows Intel workstations may show both manufacturer and IPP printer queues. This is expected behavior and does not affect functionality. Windows on Arm devices correctly show only the IPP queue, while Intel devices show both queues, which can lead to confusion.

To ensure consistent behavior, Pharos recommends using IPP queues for both Windows Arm and Intel platforms. This prevents dual queue visibility on Intel devices.

Disable application tracking from web console

Application Tracking is a feature that identifies which application (e.g., Outlook, Word) a user printed from. This information is used in reporting to better understand print behavior across an organization.

The Print Scout Configuration in the Discover > Print Scout > Configure has been updated with a new setting called Enable application tracking.

• When enabled, Print Scout captures and records the source application information. For example, a document printed from Notepad shows "Microsoft Notepad" in the Explorer view of the Print Dashboard. If the Print Scout cannot determine the application, it shows "Unknown".

• When disabled, Print Scout disables Application Tracking (through injecting into the applications) but does not disable application mapping(associates print jobs with application names without injection).  This means that while the application injection is disabled, some print jobs may still show an application name because application mapping remains active. Application Tracking via injection can sometimes lead to application crashes or slow printing, so disabling the feature may be necessary in such cases.

Note: From this release going forward, the Application Tracking setting is disabled by default. This does not apply to customers who have previously enabled or disabled this setting.

Support migration from Pharos Blueprint Enterprise

Pharos Cloud 4.3 now supports migration from Blueprint Enterprise, making it easier for organizations to transition to the cloud. Administrators can move print workflows and user configurations from Blueprint to Pharos Cloud while maintaining secure and reliable printing. This release streamlines the migration process and helps ensure continuity during the transition.

During the upgrade to Print Scout 8.1, the installer automatically removes IPP and serverless queues but retains Blueprint secure queues by default. If you also want to remove the legacy Blueprint queues, you can use the  installer argument REMOVE_BP_QUEUES=yes.

Print Scout Limitations and Known Issues

• Print Scout 8.1 does not support Tenant Location Switcher

  Print Scout 8.1 does not support the Tenant Location Switcher for MSI installations. If you are using a multi-tenant setup, Pharos strongly advises against installing or upgrading to Print Scout 8.1.

• Watermark feature is not supported on Microsoft IPP Class Driver

  The watermark feature is not supported on Microsoft IPP Class Driver. It's only supported on Pharos IPP Class Driver which is typically installed on Windows 10.

• Direct Print: Default Printer Not Updated When Using “Set Default” in Print Scout

  Clicking “Set Default” for a direct queue in Print Scout does not reliably set it as the default printer. This may occur even when “Let Windows manage my default printer” is disabled. As a result, the chosen queue may not be used as the default when printing.

• Uninstalling with KEEP_SETTINGS doesn't retain proxy information

  Uninstalling Print Scout using the KEEP_SETTINGS=yes property removes proxy settings from the registry key. After reinstalling, the Configuration Tool does not restore these settings. Use InstallConfig.ini during reinstall to retain proxy settings.

• IPP Driver installation may fail on Windows 10 workstations

  During silent MSI deployment of Print Scout, the IPP driver may intermittently fail to install on Windows 10 machines. As a result, the secure queue uses a non‑IPP driver instead of the expected Pharos IPP Class driver.

  Rebooting the workstations restores the Pharos IPP Class Driver.

Sentry Print Service Updates

• Added Device Scout column to Secure Printers screen

• Added Support for new Xerox and Lexmark Devices

• Preserve Secure Print Trust Root Certificate on uninstall of Sentry Print Service

• Improve Sentry Print feedback for Scout Release Failures

Added “Device Scout” column to the Secure Printers screen

Admins can now identify which Device Scout is installed by matching Device Scout IDs to names. Previously, only the Device Scout ID was shown on the Secure Printers grid, requiring steps to locate the corresponding name in the Discover tab. A new Device Scout Name column has been added directly to the Secure Printers screen, improving the process for administrators.

Added Support for new Xerox and Lexmark Devices

This release adds support for new Xerox and Lexmark devices, allowing them to be secured with Pharos Cloud.

Note: Pharos Cloud 4.3 is the final release that supports Lexmark FW 3 and 4 devices. Future releases will no longer support these devices.

Preserve Secure Print Trust Root Certificate on uninstall of Sentry Print Service

Sentry Print now retains the Secure Print Trust Root certificate during uninstallation. Previously, uninstalling Sentry Print deleted the certificate, breaking trust with existing secure printers.

This update adds a safeguard that retains the Secure Print Trust Root Certificate during uninstallation. This helps maintain secure print configurations and avoids the need to re-secure devices after uninstalling.

Improve Sentry Print feedback for Scout Release Failures

For organizations configured for Print Scout Release (Push Print), if a user's workstation is unavailable, job release may fail on the Secure Release printer. In such cases, an informative error message "Print job(s) failed to release due to unavailable services" will now be displayed on the printer interface. This provides users with clear feedback on the failure. Previously, job releases would fail without notifying users and the only indication was that no document was printed. 

Component Release Versions

This release includes the following software components and release versions.

*Note: Secure Release mobile apps and the Chrome extension are published after the Cloud Services are updated.