Configuring OKI for YSoft SafeQ Embedded Terminal
Auto-installation of YSoft SafeQ Embedded Terminal requires a MFP firmware version supporting SDK 2.4 or higher.
Authentication
Enabling property internalLdapAllowNonsecureProtocol allows sending user credentials (entered on Oki device) unencrypted which could be misused by an attacker for unauthorized access. Use it only when there is no other option.
Certificates
After the first installation of YSoft SafeQ Terminal Embedded, it is necessary to upload a CA certificate to the device to make sure that communication with Terminal Server is trusted.
If you do not mind security issues you can use safeqds.cer certificate from the installation package.
In the case of updating to MU53 and higher, it is necessary to repeat this procedure. The reason is that the certificate was updated.
How to with certificates
You can follow the document below to select a certificate on Terminal Server:
Allowing Direct printing
If you want to use direct printing, it is necessary to allow printing for unauthenticated jobs. Navigate to Administration -> Security -> Authentication. You need to configure the section User Authentication Setting.
Configure option Authentication failed print job/Raw Print Job to Print.
As a consequence, any print performed directly to the printer would be printed with this setting. To prevent unwanted prints, setup IP filtering ( Administration -> Setup -> Network -> Filtering).
Allowing Card readers
If you do not see the configuration for Card authentication, turn off the device and follow these steps:
Connect the USB card reader
Enter the service menu
On the next screen, enter 3500 and press green start-button
Now enter 90001 and press OK
Now enter 9398 and press green start-button again
Enter eBMUserCard and restart the printer
The LDAP server will be automatically configured with the next installation of YSoft SafeQ Embedded Terminal for OKI
Time Configuration
Time settings have to be configured for proper accounting of jobs and assignment of billing codes to these jobs.
Go to Administration > General and configure Daylight Saving Time Settings to comply with configuration of your server, where Terminal Server is running
Daylight Saving Time is not working correctly on devices with older versions of firmware (older than O290HD0W2101 ). This can cause problems with assignment of the Billing Codes and the time of the performed jobs. To check version of your firmware, go to Administration > General > Version.
Next, there are two options possible, based on the availability of SNTP (time) server in your network:
If SNTP is available, set all necessary details in section SNTP Service and set your timezone
If SNTP is not available, in section Date & Time set timezone, date and time to the time of the Terminal Server. Also disable SNTP server.
WARNING: Be sure to set the time as precisely as possible (in means of seconds) to avoid errors in assigning billing codes to scan jobs and copy jobs. It is better for the MFP to have the clock set slightly forward, than backward.
Display the SafeQ application screen after a successful log in
To improve the experience with SafeQ Embedded application in OKI, we recommend to do following steps to display the SafeQ application as initial screen after successful log in.
Enter the service menu
Press 9955 to change the Extension label to "SafeQ" and click OK to save.
Press 9132 and insert value 99.
Accounting configuration
If you are planning to install accounting feature, you need to delete old job logs before installing the embedded terminal.
Go to Administration > Logs > Export Logs and click on all the buttons that are highlighted below. Optionally, the logs can be exported by using the Create New File buttons.
Configuring WNLB Server Failover
Limitations
When most of WNLB Cluster members are offline for about 24 hours, there is a possibility that user will not be able to enter YSoft SafeQ application. If the problem occurs, restart Terminal Server service on all nodes or wait for an hour.
Follow Configuring WNLB Server Failover steps.
Set property forceInternalLdapServerIp (expert view) to WNLB virtual IP address.
Install or reinstall YSoft SafeQ Embedded Terminal for each OKI device
C onfiguring HTTP and HTTPS ports
The MFP uses port numbers 40629 and 40630 for HTTP and HTTPS communication.
If you are planning to use different port numbers, you have to change values of configuration properties openPlatformHttpPort and openPlatformHttpsPort and change port numbers on MFP web.
Set property openPlatformHttpPort (expert view) for HTTP communication .
Set property openPlatformHttpsPort (expert view) for HTTPS communication .
Go to Administration > Setup> ODCA and change values of ports. Then click on Save button.
