1. HP Access Control Secure Pull Print Enterprise
HP AC Secure Pull Print Enterprise Module
Rev
HP Access Control Secure Pull Print Enterprise
Date:
Instructor:

2. Module overview Table of Contents Agenda (60 Min): Goal:
Chapter 1:Secure Pull Print Enterprise 3
Chapter 2: Client printing with Secure Pull Print Enterprise 9
Chapter 3: Remote printing and centralized device management 13
Chapter 4: Resources and next steps 25
Course Summary 32
Agenda (60 Min):
Chapter 1: HP AC Secure Pull Print Enterprise
Chapter 2: Client printing with Secure Pull Print Enterprise
Chapter 3: Remote printing and centralized device management
Chapter 4: Resources and next steps
Course Summary
Goal:
Review HP Access Control Enterprise and the new enterprise feature set.
Describe best practices for installing, configuring and using HP Secure Pull Print Enterprise
Identify resources for presales related HP Access control questions
Demo guide (90 Min):
Installing HP AC Enterprise
Configuring a Secure Pull Print Enterprise queue
Connecting clients to a Secure Pull Print Enterprise queue via Windows built in wizard
Connecting clients to a Secure Pull Print Enterprise queue via command line tools
Remote Printing configuration
Device management

3. Chapter 1: Secure Pull Print Enterprise (SPP Enterprise)
Secure Pull Print Enterprise v
Student Guide
Chapter 1: Secure Pull Print Enterprise (SPP Enterprise)
Copyright ©2014 HP corporate presentation. All rights reserved.

4. Secure Pull Print Enterprise spooler
Secure Pull Print Enterprise v
Student Guide
Secure Pull Print Enterprise spooler
Comparison to Secure Pull Print Express
HP AC Express (Secure Pull Print Express)
HP AC Enterprise (Secure Pull Print Enterprise)
Print Job Spooler
Windows
VPSX (LRS)
Client to Spooler protocol
Server Message Block (SMB)
Internet Printing Protocol (IPP)
Line Printer Remote (LPR)
Client sharing model
Shared print driver from the HP AC Server (MS Point and Print)
Shared IPP/ LPR queue from the HP AC Server
Target client OS
Windows clients only
Any IPP / LRP connected client.
Benefits over Secure Pull Print Express
Higher level of possible client connections
Increased efficiency handling concurrent client print connections
More effective at handling higher print volumes
Increased number of desktop print connections per server
No Microsoft dependency or change impact
Copyright ©2014 HP corporate presentation. All rights reserved.

5. Enterprise feature comparison
Secure Pull Print Enterprise v
Student Guide
Enterprise feature comparison
HP AC Express (Secure Pull Print Express)
HP AC Enterprise (Secure Pull Print Enterprise)
Print server scalability
No built in scalability.
Multiple integrated print server deployments possible along with MS clustering support for high availability.
Print roaming
Independent server installations can share the same network UNC path for stored print.
Fully integrated into the design, users can release their print jobs from ANY HP AC Enterprise server on the domain.
Centralized server administration
Ability to manage multiple servers and their devices centrally. Print management is decentralized.
Allows for the ability to manage multiple print servers and devices from a centralized administration console.
HP AC Express (Secure Pull Print Express)
No built in scalability. If capacity exceed limits of the software and or the hardware an entirely new server would have to be deployed and managed independently of the first.
Independent server installations can share the same network UNC path for stored print jobs giving HP AC Express some roaming capabilities, at the cost of managing duplicate server installations. Requires all servers to have access to the same local file share.
Ability to manage multiple servers and their devices centrally. Print management is decentralized.
HP AC Enterprise (Secure Pull Print Enterprise)
Multiple integrated print server deployments possible along with MS clustering support for high availability. Solution can grow to meet printing needs due to increased volume and or user geography as needed.
Fully integrated into the design, users can release their print jobs from ANY HP AC Enterprise server on the domain. Users are even shown which of their jobs are local and or remote to device they are standing at (MFPs only). Requires all servers to be on the same local network (aka WAN if offices are geographically separated from each other).
Allows for the ability to manage multiple print servers and devices from a centralized administration console.
Copyright ©2014 HP corporate presentation. All rights reserved.

6. Secure Pull Print Enterprise queue configuration
Secure Pull Print Enterprise v
Student Guide
Secure Pull Print Enterprise queue configuration
Settings tile / SPP Enterprise area:
Create a queue, don’t share a driver.
Multiple queues can easily be created and then deleted for delegate printing situations
Confirm client printing ports.
TCP/IP LPD Port 515 (Line Printer Daemon default port)
TCP/IP IPP Port 631 (Internet Printing Protocol default port)
TCP/IP API Port 5501(The port used by the admin console to communicate to the SPP Enterprise spooler)
Click Apply, you are done.
Additional Port information:
TCP/IP API Port
Specifies the local TCP/IP port that SPP Enterprise will open for API requests. Port 5501 is the default port and is used when a printer is configured or un-configured for pull printing to inform the spooler service that a printer definition has been added or removed.
TCP/IP LPD Port
Specifies the local TCP/IP port that SPP Enterprise will open for inbound LPD requests. Port 515 is the default port.
TCP/IP IPP Port
Specifies the local TCP/IP port that SPP Enterprise will open for inbound IPP requests. Port 631 is the default port.
Copyright ©2014 HP corporate presentation. All rights reserved.

7. Secure Pull Print Enterprise queue job release
Secure Pull Print Enterprise v
Student Guide
Secure Pull Print Enterprise queue job release
Releasing print jobs to the device from the SSP Enterprise queue
TCPIP/SOCK:
Standard TCP/IP port 9100 direct printing release method (default).
TCPIP/PJL:
Bi-directional communication for guaranteed job delivery.
Selecting this option may cause delays between print jobs.
TCPIP/IPPS:
Secure protocol that allows Secure Pull Print Enterprise to encrypt the data stream.
TCPIP/SOCK
Standard TCP/IP port 9100 direct printing release method (default). Device is checked for ready status only prior to release of the print job.
TCPIP/PJL
Bi-directional communication for guaranteed job delivery. Complete print checking process for pre, during and post printing. This ensures the printer is in a stable condition prior to release of the job from the print queue. Errors such as paper jam, toner out, etc will prompt the user to resolve before Secure Pull Print Enterprise releases the job for print. If an error occurs during printing the job is held until the fault condition has been resolved at the device. Selecting this option may cause delays between print jobs and reduce the total amount of volume the HP AC Enterprise server can handle.
TCPIP/IPPS
Secure protocol that allows Secure Pull Print Enterprise to encrypt the data stream from the server to the print device.
Copyright ©2014 HP corporate presentation. All rights reserved.

8. Other Enterprise spooler / queue considerations
Secure Pull Print Enterprise v
Student Guide
Other Enterprise spooler / queue considerations
HP ePrint Enterprise
Problem: Current queue structure does not interface with PJL (windows based process)
Solution: Install a driver on the HP AC Enterprise server and attach it to the Secure Pull Print Enterprise Port. Share this driver and use it’s shared properties in HP ePrint Enterprise.
Print into the HP AC Enterprise queue without LPR or IPP
Problem: Client cannot use IPP or LPR to print (aka SAP)
Solution: Install a driver on the HP AC Enterprise server and attach it to the Secure Pull Print Enterprise Port. Share this driver and have the client connect via standard windows process.
Warning: If you print via this “bridged” method you effectively disable the enterprise queue’s ability to accept thousand's of incoming print requests at once (window’s spooler becomes the constraint).
Copyright ©2014 HP corporate presentation. All rights reserved.

9. Chapter 2: Client printing with Secure Pull Print Enterprise
Secure Pull Print Enterprise v
Student Guide
Chapter 2: Client printing with Secure Pull Print Enterprise
Copyright ©2014 HP corporate presentation. All rights reserved.

10. Secure Pull Print Enterprise v.14.3.1
Student Guide
Connecting clients
Situation:
We no longer share out drivers, but instead, share out LPR and or IPP queues.
Result:
Clients have local drivers.
The customer’s challenge:
Deploying drivers en mass to many clients at once preconfigured.
Your answer:
Windows-based GUI wizard and/or command line processes
Situation:
We no longer share out drivers from the HP AC server to clients, but instead, share out LPR and or IPP queues.
Result:
Clients have local drivers installed and connected either by LPR or IPP directly into the HP AC queues.
The challenge:
Deploying drivers en mass to many clients at once preconfigured to print into the HP AC print queues.
The solution:
Windows-based GUI wizard and or command line processes
Copyright ©2014 HP corporate presentation. All rights reserved.

11. Connecting clients via Windows wizards
Secure Pull Print Enterprise v
Student Guide
Connecting clients via Windows wizards
Time consuming, but easy to get started with..
Connect a client via IPP
Make sure Windows Component- Internet Printing Client is installed.
Add a network, wireless or Bluetooth printer
Printer was not listed
Share printer by name
Select driver, finish the install.
Connect a client by LPR
Add port via server properties
Port IP address Is the HP AC server IP
After timeout select Custom Settings.
Select LPR
Specify queue name
Add a local network printers
Select port from above
Select driver, finish the install
Copyright ©2014 HP corporate presentation. All rights reserved.

12. Connecting clients via command line
Secure Pull Print Enterprise v
Student Guide
Connecting clients via command line
Fast, but takes bit of testing to refine…
Command line for IPP (Example)
One step (Creates port and driver):
rundll32 printui.dll,PrintUIEntry /b "SPP Enterprise_IPP" /n "Pull Print" /if /f C:\drivers\hpcu155b.inf /r " pac" /m "HP Universal Printing PCL 5" /u /w
Command line for LPR (Example)
Two steps (create port /create driver):
cscript C:\Windows\System32\Printing_Admin_Scripts \en-US\prnport.vbs -a -r HPAC_Server_address_here -h HPAC_Server_address_here -o lpr -q ENT -n 515
rundll32 printui.dll,PrintUIEntry /b "SPP Enterprise_LPR" /n "Pull Print" /if /f C:\drivers\PCL6\hpcu155b.inf /r "port_created_in_step_one" /m "HP Universal Printing PCL 5" /u /w
Prnport.vbs:
Printuil.dll: 12
Copyright ©2014 HP corporate presentation. All rights reserved.

13. Chapter 3: Remote printing and centralized device management
Secure Pull Print Enterprise v
Student Guide
Chapter 3: Remote printing and centralized device management
Copyright ©2014 HP corporate presentation. All rights reserved.

14. Secure Pull Print Enterprise: Remote Printing
Secure Pull Print Enterprise v
Student Guide
Secure Pull Print Enterprise: Remote Printing
What is it
Remote printing enables end users to move between different Secure Pull Print Enterprise servers to access their jobs.
Who would benefit from this?
Remote printing is especially helpful for customer’s that have multiple locations and devices.
How does it work
An authenticated user at the device informs all remote HP AC Enterprise servers that they are “present”. A global list of jobs (both local and remote) are shown to the user on the device’s front panel.
What is it
Remote printing enables end users to move between different Secure Pull Print Enterprise servers to access their jobs, regardless of what server they printed to initially, and print.
Who would benefit from this?
Remote printing is especially helpful for customer’s that have multiple locations and or have a need for users to retrieve print jobs throughout their organization seamlessly.
How does it work
An authenticated user at the device queries all remote HP AC Enterprise servers that they are “present”. A global list of jobs (both local and remote) are shown to the user on the device’s front panel. If the user selects a print job from a remote server, then that remote server sends the print job directly to the device, at which the user is standing, completing the remote printing process.
Copyright ©2014 HP corporate presentation. All rights reserved.

15. Remote Printing architecture
Secure Pull Print Enterprise v
Student Guide
Remote Printing architecture
Few points of consideration for remote printing:
Remote Printing is only supported for Secure Pull Print Enterprise
Pull print jobs can be released from single- function or multifunction printers.
Each server in the Remote Printing environment must list all servers that are participating in Remote Printing
Each server in the Remote Printing environment should be configured to share the same authentication source (LDAP or Database).
Participating servers must have an active LAN/WAN connection at all times.
Copyright ©2014 HP corporate presentation. All rights reserved.

16. Configuring Remote Printing
Secure Pull Print Enterprise v
Student Guide
Configuring Remote Printing
Step 1: Link HP AC Enterprise servers together
Link servers together via the Settings tile / SPP Enterprise area
Server URL
Specify Fully Qualified Domain Name (FQDN) of the additional server(s) participating in remote printing. Example HPACENT1.LAB.COM:631
This must be done on all servers, effectively netting them together like a web.
Server 1
Local print jobs
Server3
Server2
Creates a common area for all servers to view each other's print jobs
Copyright ©2014 HP corporate presentation. All rights reserved.

17. Configuring Remote Printing
Secure Pull Print Enterprise v
Student Guide
Configuring Remote Printing
Step 2: Configure a common authentication method
Set a common authentication method for all servers, either LDAP or shared SQL:
LDAP
Configured through IRM tile, allows all servers to use the same MS Active Directory (AD) attributes(s) for either PIC or Card bits.
Requires write permission AD enabled account specified into the IRM tile area.
Requires up to three different attributes specified in the IRM tile area for storage use.
Shared SQL
Leverages the Database option setting in the IRM tile along with a utility to centralize all servers into one centralized SQL server.
Located in C:\Program Files\Hewlett-Packard\HP Access Control\client setup, AD-Authenticator database creation.exe
Select SQL Server specific settings for the SQL server. Must be performed on all HP AC Enterprise servers.
Copyright ©2014 HP corporate presentation. All rights reserved.

18. Configuring Remote Printing
Secure Pull Print Enterprise v
Student Guide
Configuring Remote Printing
Step 3: Import printer definition files between participating servers
Performed via the Devices tile and Devices dropdown area:
Required for servers to know how to print to device configured by other servers.
Must be performed between all server.
Server 1
Local devices
Server3
Server2
Creates a means for each server to know how to print into other server’s print devices
Best practice for accomplishing this task is covered in the centralized device management section of this training.
Copyright ©2014 HP corporate presentation. All rights reserved.

19. Remote Printing at the device
Secure Pull Print Enterprise v
Student Guide
Remote Printing at the device
Two ways to access your remote jobs:
(Based on how the SPP Enterprise setting Show local and remote jobs button is configured.)
Default (Unchecked).
Checked
Copyright ©2014 HP corporate presentation. All rights reserved.

20. Remote Printing: other topics
Secure Pull Print Enterprise v
Student Guide
Remote Printing: other topics
Single function devices and Remote Printing
Requires either the HP Common Card reader or Capella XT Box attached to the device*.
HP Officejet Pro series devices and Remote Printing
Requires that Show local and remote jobs is checked to work correctly with Remote Printing.
* Authenticate first time with proximity card– prints all local jobs. Second Authenticate with same proximity card – as there are no local jobs the remote jobs will now all print.
Copyright ©2014 HP corporate presentation. All rights reserved.

21. Centralized device management
Secure Pull Print Enterprise v
Student Guide
Centralized device management
What is it
Allows for a customer with multiple server installations to manage devices from one central location.
Who would benefit from this?
Customers that have multiple locations and or have a need to expand into multiple HP AC server installations.
How does it work
HP AC servers are linked, through an IIS connection, that allows for a central server to act on behalf of the other servers it is linked with.
What is it
Allows for a customer with multiple server installations to manage devices from one central location. This feature applies to both HP AC Express and HP AC Enterprise installations.
Who would benefit from this?
Centralized device management is especially helpful for customer’s that have multiple locations and or have a need to expand into multiple HP AC server installations.
How does it work
An HP AC server is linked, through an IIS connection, that allows for it to act on behalf of the other servers it’s linked with. This makes it possible to configure and assign devices across multiple server from a single centralized location.
Copyright ©2014 HP corporate presentation. All rights reserved.

22. Centralized device management
Secure Pull Print Enterprise v
Student Guide
Centralized device management
Server 1 Building One
Server 2 Building Two
Server 3 Corporate
Configuration flow:
Servers are deployed
A server is selected to be the “Master” and linked to the other servers via IIS configuration
Devices are discovered by the “Master” server
From Master server devices are configured to their home servers with HP AC functionality
Devices use their home servers for authentication and pull print storage
MFP
MFP
Device Master
Server 4 Marketing
Copyright ©2014 HP corporate presentation. All rights reserved.

23. Configuring and using centralized device management
Secure Pull Print Enterprise v
Student Guide
Configuring and using centralized device management
Via the Settings tile IIS area:
Enter address of the other servers.
Select Encrypt (if necessary)
Devices area:
Create device groups, drag and drop device into their relevant groups
Configuration of devices:
Select the correct home server for configuration
Via the Settings tile IIS area:
Under the Server name area enter the FQDN and IP address of the other servers.
Selecting Encrypt all web communication encrypts the configuration traffic between the servers.
Devices area:
Create device groups based on server location and or naming schema(recommended)
Drag and drop device into their relevant groups
Configuration of devices:
From the relevant device group select the correct home server for configuration
Copyright ©2014 HP corporate presentation. All rights reserved.

24. Importing printer definition files (remote printing)
Secure Pull Print Enterprise v
Student Guide
Importing printer definition files (remote printing)
Child server
Child server
Child server
With centralized device management in place:
From the child server, select import printer definition, select the device master server.
Repeat this step for all child servers.
Server 1 Building One
Server 2 Building Two
Server 3 Corporate
Server 4 Marketing
Device Master
Copyright ©2014 HP corporate presentation. All rights reserved.

25. Chapter 4: Resources and Next Steps
Secure Pull Print Enterprise v
Student Guide
Chapter 4: Resources and Next Steps
Copyright ©2014 HP corporate presentation. All rights reserved.

26. Secure Pull Print Enterprise v.14.3.1
Student Guide
Module resources
Official PDF guides (Admin, Getting started, etc.):
Official HPAC 14.0 release software bits:
30 day trail period, consult HP solutions team for NFR
HP MPS VAR Portal overview:
Sales and Presales tools
Solution Briefs, Battle cards, sales tools, On demand training videos etc.
HPAC Enterprise features demo guide:
Copyright ©2014 HP corporate presentation. All rights reserved.

27. Secure Pull Print Enterprise v.14.3.1
Student Guide
Module demo guide
Designed to guide you through experiencing this module’s content via hands-on tasks:
Tasks covered in this demo guide:
Installing HP AC Enterprise
Configuring a Secure Pull Print Enterprise queue
Connecting clients to a Secure Pull Print Enterprise queue via Windows built in wizard
Connecting clients to a Secure Pull Print Enterprise queue via command line tools
Remote Printing configuration
Device management
Guide link:
Copyright ©2014 HP corporate presentation. All rights reserved.

28. HP Value Printing Pre Sales Support
Secure Pull Print Enterprise v
Student Guide
HP Value Printing Pre Sales Support
When to engage support:
Sales Support
Technical Support
General help understanding our solutions.
Technical support or internal lab setup help.
Trouble shooting and support during POC.
Configuration support.
List prices (for Reseller pricing, contact your distributor directly)
Demo/NFR licences
Sales tools / configurators
System intergrator involvement / Professional services offerring
Phone support (Monday to Friday between 8am and 5pm CET) - Please choose option 3 after calling the following number:
toll free — Belgium, Denmark, Estonia, Finland, France, Germany, Hungary, Ireland, Israel, Italy, Luxembourg, Netherlands, Norway, Poland, Portugal, Slovakia, Spain, Sweden, UK
toll free — Czech Republic
toll free — South Africa
toll — All others
Copyright ©2014 HP corporate presentation. All rights reserved.

29. Solutions Pre-Sales Support and Services
Secure Pull Print Enterprise v
Student Guide
Solutions Pre-Sales Support and Services
Pre-Sales support
Solution Demos
Proof of Concept validation
Solutions and related printing hardware
Solutions Competency Center (AMS)
HP InfoCenter (EMEA)
toll free
toll free — Czech Republic
toll free — South Africa
toll — All others
Phone support (Monday to Friday between 8am and 5pm CET) - Please choose option 3 after calling the following number:
toll free — Belgium, Denmark, Estonia, Finland, France, Germany, Hungary, Ireland, Israel, Italy, Luxembourg, Netherlands, Norway, Poland, Portugal, Slovakia, Spain, Sweden, UK
toll free — Czech Republic
toll free — South Africa
toll — All others
Copyright ©2014 HP corporate presentation. All rights reserved.

30. Secure Pull Print Enterprise v.14.3.1
Student Guide
Module summary
Today you have accomplished the following:
Reviewed HP Access Control Enterprise and the new enterprise feature set.
Described best practices for installing, configuring and using HP Secure Pull Print Enterprise
Identified resources for presales related HP Access control questions
Copyright ©2014 HP corporate presentation. All rights reserved.

31. Secure Pull Print Enterprise v.14.3.1
Student Guide
Q & A
Copyright ©2014 HP corporate presentation. All rights reserved.