HP Access Control Secure Pull Print Enterprise HP AC Secure Pull Print Enterprise Module   Rev. 14.3.1 HP Access Control Secure Pull Print Enterprise Date: Instructor:

Module overview Table of Contents Agenda (60 Min): Goal: Chapter 1:Secure Pull Print Enterprise 3 Chapter 2: Client printing with Secure Pull Print Enterprise 9 Chapter 3: Remote printing and centralized device management 13 Chapter 4: Resources and next steps 25 Course Summary 32 Agenda (60 Min): Chapter 1: HP AC Secure Pull Print Enterprise Chapter 2: Client printing with Secure Pull Print Enterprise Chapter 3: Remote printing and centralized device management Chapter 4: Resources and next steps Course Summary Goal: Review HP Access Control Enterprise and the new enterprise feature set. Describe best practices for installing, configuring and using HP Secure Pull Print Enterprise Identify resources for presales related HP Access control questions Demo guide (90 Min): Installing HP AC Enterprise Configuring a Secure Pull Print Enterprise queue Connecting clients to a Secure Pull Print Enterprise queue via Windows built in wizard Connecting clients to a Secure Pull Print Enterprise queue via command line tools Remote Printing configuration Device management

Chapter 1: Secure Pull Print Enterprise (SPP Enterprise) Secure Pull Print Enterprise v.14.3.1 Student Guide Chapter 1: Secure Pull Print Enterprise (SPP Enterprise) Copyright ©2014 HP corporate presentation. All rights reserved.

Secure Pull Print Enterprise spooler Secure Pull Print Enterprise v.14.3.1 Student Guide Secure Pull Print Enterprise spooler Comparison to Secure Pull Print Express   HP AC Express (Secure Pull Print Express) HP AC Enterprise (Secure Pull Print Enterprise) Print Job Spooler Windows VPSX (LRS) Client to Spooler protocol Server Message Block (SMB) Internet Printing Protocol (IPP) Line Printer Remote (LPR) Client sharing model Shared print driver from the HP AC Server (MS Point and Print) Shared IPP/ LPR queue from the HP AC Server Target client OS Windows clients only Any IPP / LRP connected client. Benefits over Secure Pull Print Express Higher level of possible client connections Increased efficiency handling concurrent client print connections More effective at handling higher print volumes Increased number of desktop print connections per server No Microsoft dependency or change impact Copyright ©2014 HP corporate presentation. All rights reserved.

Enterprise feature comparison Secure Pull Print Enterprise v.14.3.1 Student Guide Enterprise feature comparison   HP AC Express (Secure Pull Print Express) HP AC Enterprise (Secure Pull Print Enterprise) Print server scalability No built in scalability. Multiple integrated print server deployments possible along with MS clustering support for high availability. Print roaming Independent server installations can share the same network UNC path for stored print. Fully integrated into the design, users can release their print jobs from ANY HP AC Enterprise server on the domain. Centralized server administration Ability to manage multiple servers and their devices centrally. Print management is decentralized. Allows for the ability to manage multiple print servers and devices from a centralized administration console. HP AC Express (Secure Pull Print Express) No built in scalability. If capacity exceed limits of the software and or the hardware an entirely new server would have to be deployed and managed independently of the first. Independent server installations can share the same network UNC path for stored print jobs giving HP AC Express some roaming capabilities, at the cost of managing duplicate server installations. Requires all servers to have access to the same local file share. Ability to manage multiple servers and their devices centrally. Print management is decentralized. HP AC Enterprise (Secure Pull Print Enterprise) Multiple integrated print server deployments possible along with MS clustering support for high availability. Solution can grow to meet printing needs due to increased volume and or user geography as needed. Fully integrated into the design, users can release their print jobs from ANY HP AC Enterprise server on the domain. Users are even shown which of their jobs are local and or remote to device they are standing at (MFPs only). Requires all servers to be on the same local network (aka WAN if offices are geographically separated from each other). Allows for the ability to manage multiple print servers and devices from a centralized administration console. Copyright ©2014 HP corporate presentation. All rights reserved.

Secure Pull Print Enterprise queue configuration Secure Pull Print Enterprise v.14.3.1 Student Guide Secure Pull Print Enterprise queue configuration Settings tile / SPP Enterprise area: Create a queue, don’t share a driver. Multiple queues can easily be created and then deleted for delegate printing situations Confirm client printing ports. TCP/IP LPD Port 515 (Line Printer Daemon default port) TCP/IP IPP Port 631 (Internet Printing Protocol default port) TCP/IP API Port 5501(The port used by the admin console to communicate to the SPP Enterprise spooler) Click Apply, you are done. Additional Port information: TCP/IP API Port Specifies the local TCP/IP port that SPP Enterprise will open for API requests. Port 5501 is the default port and is used when a printer is configured or un-configured for pull printing to inform the spooler service that a printer definition has been added or removed. TCP/IP LPD Port Specifies the local TCP/IP port that SPP Enterprise will open for inbound LPD requests. Port 515 is the default port. TCP/IP IPP Port Specifies the local TCP/IP port that SPP Enterprise will open for inbound IPP requests. Port 631 is the default port. Copyright ©2014 HP corporate presentation. All rights reserved.

Secure Pull Print Enterprise queue job release Secure Pull Print Enterprise v.14.3.1 Student Guide Secure Pull Print Enterprise queue job release Releasing print jobs to the device from the SSP Enterprise queue TCPIP/SOCK: Standard TCP/IP port 9100 direct printing release method (default). TCPIP/PJL: Bi-directional communication for guaranteed job delivery. Selecting this option may cause delays between print jobs. TCPIP/IPPS: Secure protocol that allows Secure Pull Print Enterprise to encrypt the data stream. TCPIP/SOCK Standard TCP/IP port 9100 direct printing release method (default). Device is checked for ready status only prior to release of the print job. TCPIP/PJL Bi-directional communication for guaranteed job delivery. Complete print checking process for pre, during and post printing. This ensures the printer is in a stable condition prior to release of the job from the print queue. Errors such as paper jam, toner out, etc will prompt the user to resolve before Secure Pull Print Enterprise releases the job for print. If an error occurs during printing the job is held until the fault condition has been resolved at the device. Selecting this option may cause delays between print jobs and reduce the total amount of volume the HP AC Enterprise server can handle. TCPIP/IPPS Secure protocol that allows Secure Pull Print Enterprise to encrypt the data stream from the server to the print device. Copyright ©2014 HP corporate presentation. All rights reserved.

Other Enterprise spooler / queue considerations Secure Pull Print Enterprise v.14.3.1 Student Guide Other Enterprise spooler / queue considerations HP ePrint Enterprise Problem: Current queue structure does not interface with PJL (windows based process) Solution: Install a driver on the HP AC Enterprise server and attach it to the Secure Pull Print Enterprise Port. Share this driver and use it’s shared properties in HP ePrint Enterprise. Print into the HP AC Enterprise queue without LPR or IPP Problem: Client cannot use IPP or LPR to print (aka SAP) Solution: Install a driver on the HP AC Enterprise server and attach it to the Secure Pull Print Enterprise Port. Share this driver and have the client connect via standard windows process. Warning: If you print via this “bridged” method you effectively disable the enterprise queue’s ability to accept thousand's of incoming print requests at once (window’s spooler becomes the constraint). Copyright ©2014 HP corporate presentation. All rights reserved.

Chapter 2: Client printing with Secure Pull Print Enterprise Secure Pull Print Enterprise v.14.3.1 Student Guide Chapter 2: Client printing with Secure Pull Print Enterprise Copyright ©2014 HP corporate presentation. All rights reserved.

Secure Pull Print Enterprise v.14.3.1 Student Guide Connecting clients Situation: We no longer share out drivers, but instead, share out LPR and or IPP queues. Result: Clients have local drivers. The customer’s challenge: Deploying drivers en mass to many clients at once preconfigured. Your answer: Windows-based GUI wizard and/or command line processes Situation: We no longer share out drivers from the HP AC server to clients, but instead, share out LPR and or IPP queues. Result: Clients have local drivers installed and connected either by LPR or IPP directly into the HP AC queues. The challenge: Deploying drivers en mass to many clients at once preconfigured to print into the HP AC print queues. The solution: Windows-based GUI wizard and or command line processes Copyright ©2014 HP corporate presentation. All rights reserved.

Connecting clients via Windows wizards Secure Pull Print Enterprise v.14.3.1 Student Guide Connecting clients via Windows wizards Time consuming, but easy to get started with.. Connect a client via IPP Make sure Windows Component- Internet Printing Client is installed. Add a network, wireless or Bluetooth printer Printer was not listed Share printer by name http://Servername:631/Queuename Select driver, finish the install. Connect a client by LPR Add port via server properties Port IP address Is the HP AC server IP After timeout select Custom Settings. Select LPR Specify queue name Add a local network printers Select port from above Select driver, finish the install Copyright ©2014 HP corporate presentation. All rights reserved.

Connecting clients via command line Secure Pull Print Enterprise v.14.3.1 Student Guide Connecting clients via command line Fast, but takes bit of testing to refine… Command line for IPP (Example) One step (Creates port and driver): rundll32 printui.dll,PrintUIEntry /b "SPP Enterprise_IPP" /n "Pull Print" /if /f C:\drivers\hpcu155b.inf /r "http://yourserver_IPorFQDN_addresshere:631/h pac" /m "HP Universal Printing PCL 5" /u /w Command line for LPR (Example) Two steps (create port /create driver): cscript C:\Windows\System32\Printing_Admin_Scripts \en-US\prnport.vbs -a -r HPAC_Server_address_here -h HPAC_Server_address_here -o lpr -q ENT -n 515 rundll32 printui.dll,PrintUIEntry /b "SPP Enterprise_LPR" /n "Pull Print" /if /f C:\drivers\PCL6\hpcu155b.inf /r "port_created_in_step_one" /m "HP Universal Printing PCL 5" /u /w Prnport.vbs: http://technet.microsoft.com/en-us/library/cc754352.aspx Printuil.dll: http://technet.microsoft.com/en-us/library/ee624057.aspx 12 Copyright ©2014 HP corporate presentation. All rights reserved.

Chapter 3: Remote printing and centralized device management Secure Pull Print Enterprise v.14.3.1 Student Guide Chapter 3: Remote printing and centralized device management Copyright ©2014 HP corporate presentation. All rights reserved.

Secure Pull Print Enterprise: Remote Printing Secure Pull Print Enterprise v.14.3.1 Student Guide Secure Pull Print Enterprise: Remote Printing What is it Remote printing enables end users to move between different Secure Pull Print Enterprise servers to access their jobs. Who would benefit from this? Remote printing is especially helpful for customer’s that have multiple locations and devices. How does it work An authenticated user at the device informs all remote HP AC Enterprise servers that they are “present”. A global list of jobs (both local and remote) are shown to the user on the device’s front panel. What is it Remote printing enables end users to move between different Secure Pull Print Enterprise servers to access their jobs, regardless of what server they printed to initially, and print. Who would benefit from this? Remote printing is especially helpful for customer’s that have multiple locations and or have a need for users to retrieve print jobs throughout their organization seamlessly. How does it work An authenticated user at the device queries all remote HP AC Enterprise servers that they are “present”. A global list of jobs (both local and remote) are shown to the user on the device’s front panel. If the user selects a print job from a remote server, then that remote server sends the print job directly to the device, at which the user is standing, completing the remote printing process. Copyright ©2014 HP corporate presentation. All rights reserved.

Remote Printing architecture Secure Pull Print Enterprise v.14.3.1 Student Guide Remote Printing architecture Few points of consideration for remote printing: Remote Printing is only supported for Secure Pull Print Enterprise Pull print jobs can be released from single- function or multifunction printers. Each server in the Remote Printing environment must list all servers that are participating in Remote Printing Each server in the Remote Printing environment should be configured to share the same authentication source (LDAP or Database). Participating servers must have an active LAN/WAN connection at all times. Copyright ©2014 HP corporate presentation. All rights reserved.

Configuring Remote Printing Secure Pull Print Enterprise v.14.3.1 Student Guide Configuring Remote Printing Step 1: Link HP AC Enterprise servers together Link servers together via the Settings tile / SPP Enterprise area Server URL Specify Fully Qualified Domain Name (FQDN) of the additional server(s) participating in remote printing. Example HPACENT1.LAB.COM:631 This must be done on all servers, effectively netting them together like a web. Server 1 Local print jobs Server3 Server2 Creates a common area for all servers to view each other's print jobs Copyright ©2014 HP corporate presentation. All rights reserved.

Configuring Remote Printing Secure Pull Print Enterprise v.14.3.1 Student Guide Configuring Remote Printing Step 2: Configure a common authentication method Set a common authentication method for all servers, either LDAP or shared SQL: LDAP Configured through IRM tile, allows all servers to use the same MS Active Directory (AD) attributes(s) for either PIC or Card bits. Requires write permission AD enabled account specified into the IRM tile area. Requires up to three different attributes specified in the IRM tile area for storage use. Shared SQL Leverages the Database option setting in the IRM tile along with a utility to centralize all servers into one centralized SQL server. Located in C:\Program Files\Hewlett-Packard\HP Access Control\client setup, AD-Authenticator database creation.exe Select SQL Server specific settings for the SQL server. Must be performed on all HP AC Enterprise servers. Copyright ©2014 HP corporate presentation. All rights reserved.

Configuring Remote Printing Secure Pull Print Enterprise v.14.3.1 Student Guide Configuring Remote Printing Step 3: Import printer definition files between participating servers Performed via the Devices tile and Devices dropdown area: Required for servers to know how to print to device configured by other servers. Must be performed between all server. Server 1 Local devices Server3 Server2 Creates a means for each server to know how to print into other server’s print devices Best practice for accomplishing this task is covered in the centralized device management section of this training. Copyright ©2014 HP corporate presentation. All rights reserved.

Remote Printing at the device Secure Pull Print Enterprise v.14.3.1 Student Guide Remote Printing at the device Two ways to access your remote jobs: (Based on how the SPP Enterprise setting Show local and remote jobs button is configured.) Default (Unchecked). Checked Copyright ©2014 HP corporate presentation. All rights reserved.

Remote Printing: other topics Secure Pull Print Enterprise v.14.3.1 Student Guide Remote Printing: other topics Single function devices and Remote Printing Requires either the HP Common Card reader or Capella XT Box attached to the device*. HP Officejet Pro series devices and Remote Printing Requires that Show local and remote jobs is checked to work correctly with Remote Printing. * Authenticate first time with proximity card– prints all local jobs. Second Authenticate with same proximity card – as there are no local jobs the remote jobs will now all print. Copyright ©2014 HP corporate presentation. All rights reserved.

Centralized device management Secure Pull Print Enterprise v.14.3.1 Student Guide Centralized device management What is it Allows for a customer with multiple server installations to manage devices from one central location. Who would benefit from this? Customers that have multiple locations and or have a need to expand into multiple HP AC server installations. How does it work HP AC servers are linked, through an IIS connection, that allows for a central server to act on behalf of the other servers it is linked with. What is it Allows for a customer with multiple server installations to manage devices from one central location. This feature applies to both HP AC Express and HP AC Enterprise installations. Who would benefit from this? Centralized device management is especially helpful for customer’s that have multiple locations and or have a need to expand into multiple HP AC server installations. How does it work An HP AC server is linked, through an IIS connection, that allows for it to act on behalf of the other servers it’s linked with. This makes it possible to configure and assign devices across multiple server from a single centralized location. Copyright ©2014 HP corporate presentation. All rights reserved.

Centralized device management Secure Pull Print Enterprise v.14.3.1 Student Guide Centralized device management Server 1 Building One Server 2 Building Two Server 3 Corporate Configuration flow: Servers are deployed A server is selected to be the “Master” and linked to the other servers via IIS configuration Devices are discovered by the “Master” server From Master server devices are configured to their home servers with HP AC functionality Devices use their home servers for authentication and pull print storage MFP MFP Device Master Server 4 Marketing Copyright ©2014 HP corporate presentation. All rights reserved.

Configuring and using centralized device management Secure Pull Print Enterprise v.14.3.1 Student Guide Configuring and using centralized device management Via the Settings tile IIS area: Enter address of the other servers. Select Encrypt (if necessary) Devices area: Create device groups, drag and drop device into their relevant groups Configuration of devices: Select the correct home server for configuration Via the Settings tile IIS area: Under the Server name area enter the FQDN and IP address of the other servers. Selecting Encrypt all web communication encrypts the configuration traffic between the servers. Devices area: Create device groups based on server location and or naming schema(recommended) Drag and drop device into their relevant groups Configuration of devices: From the relevant device group select the correct home server for configuration Copyright ©2014 HP corporate presentation. All rights reserved.

Importing printer definition files (remote printing) Secure Pull Print Enterprise v.14.3.1 Student Guide Importing printer definition files (remote printing) Child server Child server Child server With centralized device management in place: From the child server, select import printer definition, select the device master server. Repeat this step for all child servers. Server 1 Building One Server 2 Building Two Server 3 Corporate Server 4 Marketing Device Master Copyright ©2014 HP corporate presentation. All rights reserved.

Chapter 4: Resources and Next Steps Secure Pull Print Enterprise v.14.3.1 Student Guide Chapter 4: Resources and Next Steps Copyright ©2014 HP corporate presentation. All rights reserved.

Secure Pull Print Enterprise v.14.3.1 Student Guide Module resources Official PDF guides (Admin, Getting started, etc.): https://cms.hpflowcm.com/pd/AqIxvCNaQXA Official HPAC 14.0 release software bits: https://cms.hpflowcm.com/pd/4WVkEz6KPrc 30 day trail period, consult HP solutions team for NFR HP MPS VAR Portal overview: www.hpmpsvarportal.com Sales and Presales tools Solution Briefs, Battle cards, sales tools, On demand training videos etc. HPAC Enterprise features demo guide: https://cms.hpflowcm.com/pd/1O6MFGtPcCO Copyright ©2014 HP corporate presentation. All rights reserved.

Secure Pull Print Enterprise v.14.3.1 Student Guide Module demo guide Designed to guide you through experiencing this module’s content via hands-on tasks: Tasks covered in this demo guide: Installing HP AC Enterprise Configuring a Secure Pull Print Enterprise queue Connecting clients to a Secure Pull Print Enterprise queue via Windows built in wizard Connecting clients to a Secure Pull Print Enterprise queue via command line tools Remote Printing configuration Device management Guide link: https://cms.hpflowcm.com/pd/1O6MFGtPcCO Copyright ©2014 HP corporate presentation. All rights reserved.

HP Value Printing Pre Sales Support Secure Pull Print Enterprise v.14.3.1 Student Guide HP Value Printing Pre Sales Support When to engage support: Sales Support Technical Support General help understanding our solutions. Technical support or internal lab setup help. Trouble shooting and support during POC. Configuration support. List prices (for Reseller pricing, contact your distributor directly) Demo/NFR licences Sales tools / configurators System intergrator involvement / Professional services offerring Phone support (Monday to Friday between 8am and 5pm CET) - Please choose option 3 after calling the following number: 00800 7031 7031 toll free — Belgium, Denmark, Estonia, Finland, France, Germany, Hungary, Ireland, Israel, Italy, Luxembourg, Netherlands, Norway, Poland, Portugal, Slovakia, Spain, Sweden, UK 02-61108860 toll free — Czech Republic 09800 7031 7031 toll free — South Africa +44 20 30 276 872 toll — All others Copyright ©2014 HP corporate presentation. All rights reserved.

Solutions Pre-Sales Support and Services Secure Pull Print Enterprise v.14.3.1 Student Guide Solutions Pre-Sales Support and Services Pre-Sales support Solution Demos Proof of Concept validation Solutions and related printing hardware Solutions Competency Center (AMS) Email partnerpresalessupport@hp.com 1-855-622-2934 HP InfoCenter (EMEA) Email value.printing.presales@hp.com 00800 7031 7031 toll free 02-61108860 toll free — Czech Republic 09800 7031 7031 toll free — South Africa +44 20 30 276 872 toll — All others Phone support (Monday to Friday between 8am and 5pm CET) - Please choose option 3 after calling the following number: 00800 7031 7031 toll free — Belgium, Denmark, Estonia, Finland, France, Germany, Hungary, Ireland, Israel, Italy, Luxembourg, Netherlands, Norway, Poland, Portugal, Slovakia, Spain, Sweden, UK 02-61108860 toll free — Czech Republic 09800 7031 7031 toll free — South Africa +44 20 30 276 872 toll — All others Copyright ©2014 HP corporate presentation. All rights reserved.

Secure Pull Print Enterprise v.14.3.1 Student Guide Module summary Today you have accomplished the following: Reviewed HP Access Control Enterprise and the new enterprise feature set. Described best practices for installing, configuring and using HP Secure Pull Print Enterprise Identified resources for presales related HP Access control questions Copyright ©2014 HP corporate presentation. All rights reserved.

Secure Pull Print Enterprise v.14.3.1 Student Guide Q & A Copyright ©2014 HP corporate presentation. All rights reserved.