Configuring Konica Minolta OpenAPI Zeus/Minerva for YSoft SafeQ Embedded Terminal
This manual is applicable also for Develop, Olivetti and Aurora devices.
Requirements:
Correct firmware is installed on MFP (for more details see HCL - Konica Minolta)
MFP is OpenAPI 3.5 - 4.0 compatible if embedded accounting / application shortcuts / web browser terminal functionality is required.
Models that support OpenAPI 3.5 - 4.0 may need HDD and/or additional memory installed (for more details see HCL - Konica Minolta)
At Glance:
Disable all other authentications (User Account Track, ID & Print, key counter, Vender2 cable etc.)
Add domain DNS suffix in Network settings - Default DNS domain name (in case a host name for ORS is used)
Install loadable driver (if authentication by CARD is required)
Configure USB card reader settings (if authentication by CARD is required)
Configure and enable SSL
Open your Web browser and enter the MFP's IP address. The MFP Web interface,"PageScope®," opens.
On the PageScope Web Connection Login screen, select Administrator; then click Login. (If you are automatically logged in as a guest, log out and then log in again using the administrator account).
NOTE: The PageScope Web interface varies according to the specific MFP.
Enter the Administrator password for the MFP; then click OK.
NOTE: The default password is 1234567812345678.Select the Security tab ; then select Device Certificate Setting; Continue with selecting New registration.
NOTE: If the device already has a factory default settings certificate, delete it first and then create a new one.
Select Create and install a self-signed Certificate and click OK.
Enter information for the SSL certificate; then click OK.
NOTE: The information you enter does not have to be valid (for example, the Admin E-mail Address does not have to be valid), except the Validity Period, recommend is 3650 days. The Mode using SSL/TLS setting applies only to PageScope Web Connection; you can set it to None without affecting OpenAPI's SSL capabilities.
We recommend select some RSA based Encryption Key Type (e.g. RSA-2048_SHA-256).
When the message "Certificate has been successfully created" appears, click OK.
Log out of PageScope® Web Connection. If a message appears saying that it is necessary to reboot, reboot the MFP.
NOTE: If the MFP does not request a reboot, you must log out of the Web interface before continuing the terminal installation.
Disable the "Certificate Verification Settings" option
Log in to the MFP's Web interface as administrator
Select Security (see page).
From the menu, select Certificate Verification Settings.
For the Certificate Verification Settings option, select Off and save settings with OK
NOTE: If you don't turn off Certificate Verification, the warning message will be displayed only once after the reboot your MFD.
It is required to change
Certificate Verification Level Settings, otherwise the embedded terminal cannot be installed in most cases.
It is also recommended to turn off validation of certificate period. This prevents a situation when user authenticates with invalid credentials (invalid card, invalid PIN) and it takes 1 minute to display the information about invalid credentials.
Log in to the MFP's Web interface as administrator.
Navigate to Network > OpenAPI setting.
Under Certificate Verification Level Settings configure Client Certificates to Do not request.
In the same place set Validity Period to Do not confirm.
Enable the "OpenAPI" option
Enable OpenAPI function on at the MFP panel as follows:
Make sure the MFP is idle — not copying, printing, scanning, or otherwise busy.
Open the Utility menu.
Touch Administrator Settings.
Enter the Administrator password for the MFP; then touch OK.
Note: The default password is 1234567812345678
Touch System Connection.
Touch option OpenAPI Settings.
NOTE: If SSL and port number options appear, continue to chapter Konica Minolta - Configure SSL via MFP panel
Touch Access Setting; then set it to Allow.
Configure SSL for OpenAPI and TCP Socket communication
NOTE: The following settings can also be done on the MFP panel. This might be necessary if OpenAPI was disabled manually (for example if Terminal Professional was used before on the MFP).
See the Konica Minolta - Configure SSL via MFP panel article for details on the manual procedure.
No published version of this page to display.
Configure region
For Develop, only Europe region and Others2 region are supported. To change setting of a region of your device, please see the Develop - Configure region page.
Configure User Authentication and Account Track
No published version of this page to display.
Install loadable driver
This operation should be done by authorized Konica Minolta technician. Please see the Konica Minolta - Install loadable driver article for details regarding this process.
Configure USB card reader settings
Follow these steps to implement authentication via USB card reader. If a card reader will not be used,skip this step..
Configuration on Zeus/Minerva models
Enter the Service Mode menu on MFP.
NOTE: For instructions on opening Service Mode and for your specific MFP, see Service manual available on InfoHub or contact your Konica Minolta distributor.
Enter the Billing Setting menu.
NOTE: For instructions on opening the Billing Setting menu, see Service manual available on InfoHub or contact your Konica Minolta distributor.
Touch Management Function Choice.
Touch Authentication Device 2.
Touch Card.
On the ID Card Type screen, touch CARD (to specify the USB reader). Then touch End.
Turn OFF the main power switch for at least 10 seconds.
Connect USB card reader.
Turn ON main power switch.
Configuration on ZeusS, ZeusS BK, Heslios, MinervaS BK, Poseidon models
On Billing Setting menu select Authentication Device2 menu
On Billing Setting/Authentication Device2 menu tap Authentication Device2
Tap Card (to specify the USB reader). Then tap END.
Turn OFF the main power switch for at least 10 seconds.
Connect USB card reader.
Turn ON main power switch.