epson print admin · epson print admin: solution overview provides a summary of epson print admin....

Epson Print Admin

System Installation Guide

NPD5974-00 EN

About this Guide

The content of this documentThis guide describes the procedures necessary to prepare for operation from the installation of the Epson PrintAdmin.

❏ What you need to set up

❏ Check device information

❏ System installation

❏ System configuration

❏ Operational check

❏ Check before practical usage of the system

Following manuals are available.

❏ Epson Print Admin: Solution OverviewProvides a summary of Epson Print Admin.

❏ Epson Print Admin: Installation Quick GuideExplains the procedure for installing this system.

❏ Epson Open Platform: Hardware Setup GuideExplains how to set up Epson Open Platform on multi-function devices (multi-function devices).

❏ Epson Print Admin: Administrator’s GuideExplains system settings for Epson Print Admin.

❏ Epson Print Admin: User’s GuideExplains how standard users can use Epson Print Admin.

Using this Guide

Marks and Symbols

!Caution:

Instructions that must be followed carefully to avoid bodily injury.

cImportant:

Instructions that must be observed to avoid damage to your equipment.

Note:Provides complementary and reference information.


About this Guide

2

Related Information

& Links to related sections.

Screenshots Used in This Guide❏ Screenshots used in this guide are currently under development. They may differ from the release version.

❏ Setting items may vary depending on products and setting conditions.

Operating System References

Windows

In this manual, terms such as “Windows 10”, “Windows 8.1”, “Windows 8”, “Windows 7”, “Windows Vista”,“Windows Server 2016”, “Windows Server 2012 R2”, “Windows Server 2012”, “Windows Server 2008 R2”, “WindowsServer 2008” refer to the following operating systems. Additionally, “Windows” is used to refer to all versions.

❏ Microsoft® Windows® 10 operating system

❏ Microsoft® Windows® 8.1 operating system



❏ Microsoft® Windows Vista® operating system

❏ Microsoft® Windows Server® 2016 operating system

❏ Microsoft® Windows Server® 2012 R2 operating system


❏ Microsoft® Windows Server® 2008 R2 operating system


Mac OS

In this manual, “Mac OS” is used to refer to “macOS Sierra”, “OS X El Capitan”, “OS X Yosemite”, “OS XMavericks”, and “OS X Mountain Lion”, “Mac OS X v10.7.x”, and “Mac OS X v10.6.8”.


About this Guide

3

Contents

About this GuideThe content of this document. . . . . . . . . . . . . . . . . . 2Using this Guide. . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Marks and Symbols. . . . . . . . . . . . . . . . . . . . . . . 2Screenshots Used in This Guide. . . . . . . . . . . . . . 3Operating System References. . . . . . . . . . . . . . . . 3

Setting UpSetup procedure. . . . . . . . . . . . . . . . . . . . . . . . . . . .6What you need to set up. . . . . . . . . . . . . . . . . . . . . .7

1. Prepare device and check informationRelated Hardware. . . . . . . . . . . . . . . . . . . . . . . . . . 8

Epson Print Admin Server. . . . . . . . . . . . . . . . . . 8Multi-function device. . . . . . . . . . . . . . . . . . . . .10Client computer. . . . . . . . . . . . . . . . . . . . . . . . .11

Installer and license. . . . . . . . . . . . . . . . . . . . . . . . 12Checking Registration Information. . . . . . . . . . . . .12

System Configuration. . . . . . . . . . . . . . . . . . . . .12Multi-function device. . . . . . . . . . . . . . . . . . . . .13Authentication device and the authenticationcard. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14Groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14User. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

2. Operational Check of the Installation EnvironmentCheck essential software. . . . . . . . . . . . . . . . . . . . .15Ports to be used. . . . . . . . . . . . . . . . . . . . . . . . . . . 15Check connection. . . . . . . . . . . . . . . . . . . . . . . . . 17

Multi-function device. . . . . . . . . . . . . . . . . . . . .17Server, client computer. . . . . . . . . . . . . . . . . . . .18

3. Installing the SystemRunning the installer. . . . . . . . . . . . . . . . . . . . . . . 19Pre-installation. . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Creating Server certificate and Binding settings. . 22Installing Epson Print Admin. . . . . . . . . . . . . . . . . 24

4. Setting the system and registering informationLogin. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28Initial configuration menu. . . . . . . . . . . . . . . . . . . 29Setting Each Item. . . . . . . . . . . . . . . . . . . . . . . . . .29

Basic settings. . . . . . . . . . . . . . . . . . . . . . . . . . . 29SMTP Server Settings. . . . . . . . . . . . . . . . . . . . .30LDAP server settings. . . . . . . . . . . . . . . . . . . . . 32Registering a Multi-function Device. . . . . . . . . . 34

5. Operational checkPrinter driver installation. . . . . . . . . . . . . . . . . . . . 37Register to an authentication card. . . . . . . . . . . . . . 38Print check. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

6. Check Before Practical Use of the SystemInstalling the printer driver. . . . . . . . . . . . . . . . . . .41

Installing on the client computer. . . . . . . . . . . . .41Installing on the print server. . . . . . . . . . . . . . . .42Distribute by using Active Directory ServerGroup Policy and so on. . . . . . . . . . . . . . . . . . . 44Distributing Files. . . . . . . . . . . . . . . . . . . . . . . . 46Distribute in EpsonNet SetupManager. . . . . . . . 47

Registering a License. . . . . . . . . . . . . . . . . . . . . . . 47Registering Multi-function Devices. . . . . . . . . . . . .48

Creating a provisional printer registration forthe CSV file. . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

High security settings. . . . . . . . . . . . . . . . . . . . . . .51Set the print environment and rules. . . . . . . . . . . . 51

Rules/Policy Settings. . . . . . . . . . . . . . . . . . . . . 51Editing an unassigned user. . . . . . . . . . . . . . . . . 52Setting Cost. . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

User Registration. . . . . . . . . . . . . . . . . . . . . . . . . . 54User account registration. . . . . . . . . . . . . . . . . . 54Synchronizing with an LDAP Server. . . . . . . . . . 55

Uninstalling and UpdatingUninstalling. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .57Updating the System. . . . . . . . . . . . . . . . . . . . . . . 59

Solving ProblemsAdministrator pages and user pages do not appear. .60


Contents

4

Card Authentication is too Slow. . . . . . . . . . . . . . . 60For Servers Without an Internet Connection. . . . 60For Servers with an Internet Connection. . . . . . . 63

Repair Installation. . . . . . . . . . . . . . . . . . . . . . . . . 63What to do if the Epson Print Admin servergoes down. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

Setting the Authentication Server Error Mode. . . 65Setting each Function. . . . . . . . . . . . . . . . . . . . .67

Error menu. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69HTTP communication error. . . . . . . . . . . . . . . .69Certificate error. . . . . . . . . . . . . . . . . . . . . . . . . 70Other network errors. . . . . . . . . . . . . . . . . . . . . 73

Panel Messages. . . . . . . . . . . . . . . . . . . . . . . . . . . 75

AppendixHigh security settings. . . . . . . . . . . . . . . . . . . . . . .77

Applying a profile of security configuration. . . . . 77Setting an administrator account and lockingthe panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79Importing and changing settings in thesettings file. . . . . . . . . . . . . . . . . . . . . . . . . . . . 80Setting security for the communication path. . . . 81Operational check. . . . . . . . . . . . . . . . . . . . . . . 83

Customization example of a high security setting. . .83When you want to prohibit printing from aclient computer and allow scanning and faxing. . 83When you want to print directly from aspecific client computer. . . . . . . . . . . . . . . . . . . 84When you want to scan directly from aspecific client computer. . . . . . . . . . . . . . . . . . . 84When you want to receive fax in a specificclient computer. . . . . . . . . . . . . . . . . . . . . . . . . 85When you permit IPP/IPPS print from aclient computer. . . . . . . . . . . . . . . . . . . . . . . . . 86When you permit Document Capture Proand Document Capture Pro Server. . . . . . . . . . . 86When you want to permit a connection froma smart device. . . . . . . . . . . . . . . . . . . . . . . . . . 87When you want to enable/disable the specificprotocols. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87When you want to release Wi-Fi direct panellock. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89When you want to enable/disable the PC - faxtransmission function. . . . . . . . . . . . . . . . . . . . 89

Sample Driver Distribution for Group Policies. . . . .89Installation settings for a distributed driver. . . . . 89Uninstalling distributed drivers. . . . . . . . . . . . . .92

Trademarks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93Caution. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94


Contents

5

Setting Up

Setup procedureFollow the procedures below to set up this system.

Procedure Operations ApproximateWork Time

(mins.)

1 Preparing to Install ❏ Checking hardware and software requirements for theEpson Print Admin server computer.

❏ Checking hardware requirements and the OSenvironment for the client computer.

❏ Checking requirements for the multi-function device,,the authentication device and authentication card.

❏ Acquiring the installer

❏ Checking the license

❏ Checking and recording server settings and registrationinformation. *

60

2 Operational check of theinstallation environment

❏ Check the components

❏ Check the firewall and port

❏ Check the device, database, and client computerconnections

10

3 System installation Installing and configuring the system and componentsusing an installer.

When installing an SQL server.

30

Installing and configuring the system and componentsusing an installer.

When using an existing SQL Server

5

4 Setting the system and registeringinformation

❏ Setting each server

❏ Register or provisionally register the devices necessaryfor system building

10

5 Operational check ❏ Driver installation

❏ Register to an authentication card

❏ Print test

10

6 Check before practical use of thesystem

❏ Setting the license

❏ Register all devices

❏ High security settings and operational checks

❏ Set the print environment and rules

❏ User registration

❏ Notification email settings

60


Setting Up

6

* Record collected information on the “Setup Information Collection Sheet” (Excel file). Complete the items necessary forsetting up for a smooth setup experience.

What you need to set upThe setting requires the following.

Items Description

1 Multi-function device A multi-function device on which Epson Open Platform has been activated.

See the "Hardware setup guide" for details on activating and using Epson OpenPlatform.

You can also set up a system by registering a printer temporarily by using a CSVfile.

2 Authentication device and theauthentication card (optional)

This is not necessary if user authentication does not require an authenticationdevice.

Authentication device and card that can connect to the multi-function deviceover a USB connection.

3 Computer for Epson PrintAdmin

A computer on which Epson Print Admin is installed.

4 Database server You can use an existing SQL server. You can also build a new system in the EpsonPrint Admin server.

5 SMTP server For sending email notifications.

6 Computer for administrator A computer for managing Epson Print Admin. This allows you to access the Webpage for the Epson Print Admin server. It is also used as a single user’s computer.

7 Epson Print Admin installer,license key

The installer and license key for Epson Print Admin. The method of acquiringthese items differs depending on your dealer.

Contact your dealer for more information.

8 Setup Information CollectionSheet

An Excel file for collecting system setup information for the Epson Print AdminSystem account, individual server settings, and so on.

Related Information

& “Epson Print Admin Server” on page 8


Setting Up

7

1. Prepare device and check informationCheck the preparations necessary to build an authentication system for Epson Print Admin, such as the device,usage conditions, and setting information.

Related Hardware

Epson Print Admin ServerThe following shows the system requirements for the server being installed as the main system and the necessarycomponents.

Hardware

Minimum system requirements

❏ CPU: 2.0 GHz or faster processor

❏ RAM: 2 GB or more

❏ Hard disk free space: 50 GB or more (Except for database capacity)

❏ Display: 1024 x 768 or higher

!Caution:

❏ You cannot install this system on a server that is being used to control domains (such as the Windows SmallBusiness Server or the Active Directory server).

❏ This system does not support a Multihomed computer environment. In this situation, address resolution may notbe completed for the system.

Note:Make sure the system configuration matches the current environment, such as the network communication speed, number ofmulti-function devices, number of users, and so on.

Operating system

The server must be running one of the following.

OS Service packs Edition

Windows Server 2008 (32bit/64bit) Service Pack 2 or later Standard / Enterprise / Datacenter

Windows Server 2008 R2 Service Pack 1 or later Standard / Enterprise / Datacenter

Windows Server 2012 - Essentials / Standard / Datacenter

Windows Server 2012 R2 - Essentials / Standard / Datacenter


Windows 7 Service Pack 1 or later Professional / Enterprise / Ultimate


1. Prepare device and check information

8

OS Service packs Edition

Windows 10 - Pro / Education / Enterprise

!Caution:

Notes for installing Epson Print Admin on Windows 7 or Windows 10

❏ Authenticating or printing may take some time.

❏ Due to a restriction in Windows, you cannot use the Notifier on 10 or more computers at the same time. Printingspeed may slow down when using the Notifier.

❏ If Epson Print Admin is installed on a computer running Windows 10, and you cannot open the administrator'spage or the user's page in Edge, try using Internet Explorer.

Operation in a virtual environment

This is also available under the following virtual environments, but performance may be degraded.

❏ Hyper-V: Versions in conjunction with a running OS

❏ VMWare: vSphere Ver.4.1, 5.5, 6.0

Required components, software

❏ Runtime: .NET Framework 4.5 or laterInstalled by default on Windows Server 2012 or later.

Web server

The followings IIS (Microsoft Internet Information Services) versions are supported within this system.

OS Version

Windows Server 2008 7.0

Windows Server 2008 R2 / Windows 7 7.5

Windows Server 2012 8.0

Windows Server 2012 R2 8.5

Windows Server 2016 / Windows 10 10.0

Database server

The following database servers are supported.

Microsoft SQL Server 2014 Express *

Microsoft SQL Server 2008

Microsoft SQL Server 2008 R2





9



* Included in the package in this system.

SMTP server

The following shows the security methods compatible with the SMTP server.

Security Settings

Authentication method No authentication, SMTP authentication, and POP before SMTP

Encryption No encryption, StartTLS, and SSL/TLS

Compatible directory services

Available with other servers that manage users or drivers.

Service name Version

Active Directory Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, WindowsServer 2012 R2, Windows Server 2016

OpenLDAP Ver.2.3, Ver.2.4

Print server

Runs on a computer with the same OS requirements as the Windows client computer.

Multi-function device

Compatible with Epson Open Platform

Compatible with Epson Open Platform.

See the "Epson Open Platform Hardware Setup Guide" for information on compatibility checks and setupmethods.

Before installing the system, you need to complete initial setup for the multi-function device you want to connect,such as ink charging, language settings, and so on.

Platform Version

Epson Open Platform 1.0, 1.1

Authentication device and authentication card

You can check information on authentication devices and authentication cards for which operations have alreadybeen confirmed on the following Web site.

https://openplatform.epson.biz/download/op/



10


Client computerThis computer accesses the system’s administrator page and user page, and installs the driver and the client tool forprinting.

Supported operating systems

❏ Windows

Operating system Service packs Edition

Windows Server 2008 (32bit/64bit) Service Pack 2 or later Standard / Enterprise / Datacenter

Windows Server 2008 R2 Service Pack 1 or later Standard / Enterprise / Datacenter


Windows Server 2012 R2 - Essentials / Standard / Datacenter


Windows Vista Service Pack 2 or later

Requires working on .NET Framework3.5 or 4.5 or later

Business / Enterprise

Windows 7 - Professional / Enterprise

Windows 8.1 - Professional / Enterprise

Windows 10 - Pro / Education / Enterprise

❏ Mac OS

Operating system Version

Mac OS 10.8.5 or later

Compatible browsers

Note:You need to enable cookies and JavaScript in the browser.

Browser Version

Internet Explorer 9 or later

Microsoft Edge Ver.20 or later

Google Chrome Ver.40 or later

Mozilla Firefox 37 or later

Safari 5.x or later (excluding Windows version)



11

Installer and licenseThe method of acquiring the installer and license key for this system differs depending on your dealer. Contactyour dealer for more information.

Checking Registration InformationBefore setting up this system, check the account, the connected mail server, and the license information, and enterthe information on the "Setup Information Collection Sheet". A to E below correspond to the number on the"Setup information sheet".

System ConfigurationAsk your respective server administrators about setting items for the server and the acquisition of email addresses.

A-1 - Epson Print Admin Sever Log in account

This is the configuration information of this system server (this system). The account information is used duringservice execution and registration of this system.

Related Information

& “3. Installing the System” on page 19

A-2 - SQL Server Setting Information

This is used to access the database. This is unnecessary if you are installing the SQL server during setup.

Related Information

& “Pre-installation” on page 19

A-3 - Epson Print Admin System account Information

This is the administrator account information for this system. This is necessary to access the administrator menuduring setup.

Related Information


A-4 - SMTP Server Setting Information

This system and multi-function device use this to send emails.



12

Related Information

& “SMTP Server Settings” on page 30

A-5 - Printer driver Setting Information

This is used to download the Epson Print Admin driver.

Related Information


A-6 - LDAP Server Setting Information

This system uses this to acquire user information from the LDAP server. This is not necessary if you are notconnecting to an LDAP server.

Related Information

& “LDAP server settings” on page 32

A-7 - Print Server Setting Information

This is used for the user to access the print queue. This is not necessary if you are not using a print server.

Print servers cannot be used from the Mac OS client.

Related Information

& “Installing on the print server” on page 42

A-8 - Epson Print Admin Software License Information

This is used to register the authentication system as a product version.

Related Information

& “Registering a License” on page 47

Multi-function device

B-1 - Device Information

This is multi-function device information used with this system.

Related Information

& “Registering a Multi-function Device” on page 34



13

Authentication device and the authentication card

C-1 - Card Reader Information

This is the authentication device (card reader) information used in the authentication system. The authenticationdevice should support the type of card used for the authentication card information.

Related Information

& “Register to an authentication card” on page 38

C-2 - Card Information

This is the authentication card information used in the authentication system.

Related Information

& “Register to an authentication card” on page 38

Groups

D-1 - Group Information

This is the group information for users of the system. Users that are managed by linking to an LDAP server do notneed to be entered.

Related Information

& “Editing an unassigned user” on page 52

User

E-1 - User Information

This is the user account information for users of the system. Users that are managed by linking to an LDAP serverdo not need to be entered.

Related Information

& “User Registration” on page 54



14

2. Operational Check of the InstallationEnvironment

Check essential softwareFor Windows Server 2008 and Windows Server 2008 R2, make sure that .NET Framework 4.5 or later is installedon the server. You need to log in as an administrator.

Note:❏ .NET Framework 4.5 is installed as standard on Windows Server 2012 or later.

❏ If .NET Framework 4.5 or later is not installed, an error screen appears during Epson Print Admin installation.

1. Navigate to Control Panel, Programs and then click Programs and Features.

2. Check the list of programs.

If "Microsoft .NET Framework" 4.5 or later is displayed, .NET Framework 4.5 or later is installed.

If it is not installed, download from the following Microsoft Web site.

http://www.microsoft.com/en-gb/download/details.aspx?id=30653 (English)

http://www.microsoft.com/ja-jp/download/details.aspx?id=30653 (Japanese)

Ports to be used

Sender

(Client)

Target (Server) Protocol Port Usage

Client Computer

(Browser)

Epson PrintAdminServer

HTTP (TCP)

HTTPS (TCP)

80*1

443*1*3

User, Administration menu

Client Computer

(Printer driver)

Print Server

Epson PrintAdmin Server

HTTP (TCP)

HTTPS (TCP)

80*1

443*1*3

Print data submit


2. Operational Check of the Installation Environment

15

http://www.microsoft.com/en-gb/download/details.aspx?id=30653

http://www.microsoft.com/ja-jp/download/details.aspx?id=30653

Sender

(Client)

Target (Server) Protocol Port Usage

Client Computer

(Notifier)


HTTP (TCP)

HTTPS (TCP)

80*1

443*1*3

Balance display, Rule-based print inquiry


Printer LPR (TCP) 515 LPR print


Printer HTTPS (TCP) 443 Authentication, usage history acquisition, userestriction setting


Printer SNMP (UDP) 161 Device discovery, Device informationacquisition

Printer Epson PrintAdmin Server

HTTPS (TCP) 443*2 Device panel display


SQL Server SQL (TCP)

SQL (UDP)

1433

1434

SQL server connection


LDAP Server LDAP (TCP)

LDAP (TCP)

389*4

636*3*4

User information acquisition


SMTP Server SMTP (TCP)

SMTP (TCP)

25*5

465*3*5

Email transmission


POP Server POP (TCP)

POP (TCP)

110*5

995*3*5

POP before SMTP connection

Printer FTP Server FTP (TCP) 20 File transmission*6

Printer FTP Server FTP (TCP) 21 File transmission*6

Printer File Server SMB (TCP) 445 File transmission*6

Printer File Server NetBIOS (UDP) 137 File transmission*6



Printer SMTP Server SMTP (TCP) 25 Email transmission*6

Printer SMTP Server SMTP SSL/TLS(TCP)

465 Email transmission*6

Printer SMTP Server SMTP STARTTLS(TCP)

587 Email transmission*6

Printer POP Server POP3 (TCP) 110 POP before SMTP connection*6

Printer LDAP Server LDAP (TCP) 389 User information acquisition (when usingcontacts of the printer body.)

Printer KDC Server Kerberos (TCP) 88 User authentication of sending mail

User authentication of user informationacquisition*7



16

*1 The default port number. The actual port number is set to the user for the URL of the authentication system.

*2 The default port number. The actual port number is set to the control panel for the URL configuration of the authenticationsystem.

*3 The port number when using encryption.

*4 The default port number. If you want to change the port number, set the number that is used by the LDAP serverconfiguration of the authentication system.

*5 The default port number. If you want to change the port number, set the number that is used by the SMTP serverconfiguration of the authentication system.

*6 If you are using the printer’s Scan to Email function , Scan to My Email(Scan and Send to Me), or Scan Presets to scandocuments, the printer sends scanned data by accessing the destination server directly.

*7 When using the printer’s contacts and file transmission for scanned documents in Scan Presets.

Check connectionMake sure the system, multi-function device, and client computer are all connected correctly.

Multi-function deviceCheck the connection between the computer and the multi-function device by trying to display the Web Configpage.

1. Run Internet Explorer on the server.

2. Enter the IP address for the multi-function device as shown below, and then press Enter.

http://192.168.111.222 (If the IP address is 192.168.111.222)

Note:When you access the administrator login page in SSL communication (https), the message “There is a problem with thiswebsite’s security certificate” may be displayed. (The screen capture is an example of Internet Explorer. The actual screendisplayed depends on the browser you are using.)

This happens when the browser attempts an SSL encrypted communication when the Web site is using a self-signedcertificate. Click “Continue browsing of this site (not recommended)”. To avoid displaying this warning, use a certificateissued by a trusted certification authority.

3. If the Web Config menu is displayed, confirmation is complete. Close Web Config.



17

Server, client computerCheck that the server on which Epson Print Admin is installed can communicate with the other servers and clientcomputers. The following example uses the ping command.

Check the connection here when you are using an existing SQL Server for the database.

❏ a: Epson Print Admin server

❏ b: SQL server

❏ c: SMTP server

❏ d: Client computer

1. Select Command Prompt from Accessories on the start menu.

2. Enter the following in the command line, and then press Enter.

ping 192.168.111.111 (If the IP address of the computer you want to check is 192.168.111.111)

3. If the following is displayed, confirmation is complete. Close the Command Prompt.

Ping statistics for 192.168.111.111:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Round-trip time: (ms):

Minimum = 0ms, Maximum = 0ms, Average = 0ms



18

3. Installing the SystemInstall components and this system.

Running the installerWhen this system is installed for the first time, the initial setup installs and configures the components.

This step is skipped when restoring the installation.

!Caution:

❏ Before starting the installation, close all anti-virus programs and running applications. If any applications arerunning, it may not be correctly installed.

❏ If SSL 3.0 IIS support is enabled, it is disabled when the program is installed and the computer needs to berestarted. If you do not want to restart after installation, disable SSL 3.0 IIS support before you start theinstallation.

1. Log in to the server which you set up using the user name and the password decided by the A-1 - Epson PrintAdmin Sever Log in account

Check A-1 - Epson Print Admin Sever Log in account with the “Setup information collection sheet”.

2. Run the installer.

For Windows Server 2008 (x86): PrintAdmin_Setup_SQLx86_Vxxx.exe

Otherwise: PrintAdmin_Setup_SQLx64_Vxxx.exe

(Where "xxx" is the software version number.)

The Pre-installation menu is displayed when installing for the first time. Go to the next section.

If you are restoring an installation, go to the installation section for Epson Print Admin.

Related Information

& “Installing Epson Print Admin” on page 24

Pre-installation1. Specify the database you want to use, and then click Next.

❏ Install SQL Server 2014 Express:Select this if you want to build a database by installing SQL Server 2014 Express.


3. Installing the System

19

❏ Use existing SQL server:Select this if you want to use an existing SQL server.

Note:SQL Server 2014 Express is a new installation and database construction takes about 15 to 20 minutes.

2. Go to the steps indicated below according to the database that you selected in step 1.

❏ Install SQL Server 2014 Express:Go to step 3.

❏ Use existing SQL server:Configure the following, and them click Next. Perform an access test to the database server.

Specify the SQL server instance touse

Specify the database by either entering it directly or by selecting usingBrowse.

Use the SQL Server that waspreviously installed in the EpsonPrint Admin

Select this if you want to use an SQL server that was previously installed in theEpson Print Admin.

Previously used login ID and the password are used.

Use SQL Server supplied by thecustomer

Select this if you want to use an existing SQL server. You need the login ID andpassword for the server.



20

When the results are displayed, click OK to select the SQL Server you want to use.

3. Click Next.

Installation and component setup starts. You cannot cancel this operation.

❏ For Windows Server 2008, the IIS manager starts automatically. Go to step 4.

❏ For Windows Sever 2008 R2 or later, go to step 5.

Note:The following setup is performed here.

❏ Installation of SQL Server 2014 Express (when Install SQL Server 2014 Express is selected)

❏ Enable message queue (MSMQ) (Windows function)

❏ Enable Microsoft Internet Information Services (IIS) (Windows function)

❏ Create and bind self-signing certificate (Excluding Windows Server 2008)

4. Create and bind the server certificate according to the “Creating Server certificate and Binding settings”.

If the create and bind self-signing certificate setup is not complete, you cannot proceed to the main systeminstallation.



21

Note:You can open the IIS manager from the following.

Control Panel > System and Security > Administrator Tools > Internet Information Services (IIS)Manager

5. When the completion screen for pre-setup is displayed, click Close.

Proceed to the installation of the Epson Print Admin.

Related Information

& “Epson Print Admin Server” on page 8& “Creating Server certificate and Binding settings” on page 22& “Installing Epson Print Admin” on page 24

Creating Server certificate and Binding settingsFor Windows Server 2008, configure the following settings.



22

1. Double-click the server certificate.

2. Click Create Self-Signed Certificate from the Actions menu.

3. Enter a friendly name for the certificate in Specify a friendly name for the certificate in the Create Self-Signed Certificate menu, and then click OK.

If you do not have a certificate, enter “Epson Print Admin”.



23

4. Select the web site for which you want to enable SSL, and then click Bindings from Actions.

The Site Bindings menu is displayed.

5. Click Add.

6. Select https from the Type menu.

7. Select the created SSL certificate, and then click OK.

8. Close the IIS Manager.

Installing Epson Print AdminWhen restoring, the installer starts from this procedure.



24

Note:The following settings and installation are performed here.

❏ Copying system files

❏ Access right setting of files and folders

❏ Setting of config files according to the installation environment

❏ Registration to registry

❏ Registration of Web application

❏ Registration of Windows services

❏ Registration of short cut

❏ Registration of MSMQ

❏ Creating a database

❏ Setting a firewall

❏ Disabling SSL3.0 of IIS

1. Click Next.

2. Check the software license agreement, select I accept the terms in the License Agreement, and then clickNext.

3. Click Next.

You can change the installation destination by clicking &Change.



25

4. Specify the URL for the Web site for the Administrator page and the User page, and then click Next.

5. Enter the Administrator ID, Password, and Email Address decided in A-3 - Epson Print Admin Systemaccount Information, and then click Next.

❏ System ID:Enter the user ID between 1 and 256 characters.You can use alphanumeric, symbol, space and additional Latin characters. (ISO-8859-1 characters exceptfor control characters, 0x7f to 0xbf, 0xd7, and 0xf7.) See the following table for details.

❏ Password:Enter the password between 1 and 128 characters.You can use alphanumeric, symbol, space and additional Latin characters. See the following table fordetails.

Available characters

SP* ! " # $ % & ' ( ) * + , - . /

0 1 2 3 4 5 6 7 8 9 : ; < = > ?

@ A B C D E F G H I J K L M N O

P Q R S T U V W X Y Z [ \ ] ^ _

` a b c d e f g h i j k l m n o

p q r s t u v w x y z { | } ~

À Á Â Ã Ä Å Æ Ç È É Ê Ë Ì Í Î Ï

Ð Ñ Ò Ó Ô Õ Ö Ç Ø Ù Ú Û Ü Ý Þ ß

à á â ã ä å æ ç è é ê ë ì í î ï

ð ñ ò ó ô õ ö ø ù ú û ü ý þ ÿ

* Space character

The administrator account created here is registered as the built-in user.



26

6. Click Install.

Installation starts.

7. Click Close to close the menu.

If you are prompted to restart, restart the server.



27

4. Setting the system and registeringinformationMake the initial settings for the server and systems that communicate with this system from the administrator’sclient computer.

Note:You can also perform initial configuration on the server on which Epson Print Admin is installed. In that case,“administrator’s client computer” should read “server on which you have installed Epson Print Admin.”

LoginLogin as the system administrator of the system, and make settings for each item.

1. Access the Web site you set while installing the Epson Print Admin from a browser on the administrator’sclient computer.

http://<Web site URL that is set to IIS>/PrintAdminWeb/

Note:When using the server on which you installed Epson Print Admin, select Start menu > Epson Software > Epson PrintAdmin.

2. Enter the ID and password for A-3 - Epson Print Admin System account Information set when installingthis system, and then select (Local) as the domain.

Note:If you want to change the display language, select the language you want from the language menu.

When you access this system at first, language of the contents is displayed with browser's language. If you wantto change display language, select language from language menu.

3. Click Log in.

When you login, the initial configuration menu is displayed automatically.


4. Setting the system and registering information

28

!Caution:

Do not use your browser’s navigation buttons, such as Back or Forward, otherwise Epson Print Admin maynot operate correctly.

Related Information

& “Installing Epson Print Admin” on page 24

Initial configuration menuSet the system and users related to the system. If you have not completed the setup, you cannot proceed to theoperation check.

Note:Depending on the item, you can skip the settings by pressing the skip button.

You can set the following items.

❏ Basic settings

❏ SMTP server settings

❏ LDAP server settings

❏ Device Registration

Setting Each Item

Basic settingsSet items related to the printer driver and how the device can be used.

1. Click Basic Settings on the initial configuration menu.



29

2. Set each item.

See the following to make settings. You can change these settings after the initial setup is complete.

Items Description

Printer driver Print queue name: Enter any printer name. The name you enter here is used as themulti-function device name. When you install the printer driver, a printer icon with thisname is displayed in Control Panel > Devices and Printers.

Set as default printer (Windows): Select this to set Epson Print Admin as the defaultprinter when the user installs the printer driver.

Quota management Sets the method to restrict usage of functions for users, such as printing and scanning.

None: Does not apply any limits.

Credit Limit: The amount the function can be used is limited by the credit possessedby the user.

Page Quota: The amount the function can be used is limited by setting the number ofpages that the user can use.

Cost Settings Select the target to set the cost.

Set cost per device: Applies the cost set for each printer. The same cost setting appliesto any user who uses the same printer.

Set cost per group of users: Applies the cost set for each group. The same cost settingis applied to any printer used from the same group.

OK Registers the settings to the system.

3. Click OK.

You are returned to the system configuration menu.

SMTP Server SettingsYou need to make settings for the email sending server to send email to administrators and users from the system.



30

1. Click SMTP Server on the initial configuration menu.

2. Set each item.

See the following to make settings.

Items Description

Server address Enter the IP address or the host name of the SMTP server within 255 characters.

Port Number Enter the port number for the SMTP server (outgoing email server) with a numberbetween 0 and 65535. The default number is 25.

Secure Connection Select the encryption method for the SMTP server from None, SSL/TLS, orSTARTTLS.



31

Items Description

Authentication Method Select the authentication type for the SMTP Server. Setting content varies dependingon the selected items.

SMTP Auth

❏ Account:

The login ID for SMTP authentication. Enter within 255 characters.

❏ Password:

The password for SMTP authentication. Select to enter a password. Enter within255 characters.

POP before SMTP

❏ Server address:

Enter the IP address or host name for the email receiving server (POP 3 server)within 255 characters.

❏ Port Number:

Enter the port number of the incoming email server with a number between 0and 65535. The default number is 110.

❏ Account:

The login ID for POP before SMTP authentication. Enter within 255 characters.

❏ Password:

The password for POP before SMTP authentication. Select to enter a password.Enter within 255 characters.

Email sender address Set the email address used as the email sent from the system within 255 characters.

Email recipient address Enter the recipient email address for test transmissions.

The default value is the email address of the administrator account that is currentlylogged in.

Send test email Sends an email to the target address.


3. Click Send test email.

Sends an email to the target address.

4. Click OK.


LDAP server settingsSet when using an LDAP server.

You can register users that are managed by an LDAP server as Epson Print Admin users.

1. Click LDAP server settings on the initial configuration menu.



32

2. Set each item.


Items Description

LDAP connection Set whether or not to link to an LDAP server.

LDAP server type Select the type of LDAP server from Active Directory and OpenLDAP.

Server address Enter the host name or IP address of the LDAP server within 255 characters.

Port Number Enter the port number of the LDAP server with a number between 0 and 65535.

The default value is 389. If you use the Global Catalog for the Active Directory,specify 3268 as the port number.

Secure Connection Select the encryption method for the LDAP server from None, SSL/TLS, orSTARTTLS.

Authentication protocol Select the authentication protocol from PLAIN, DIGEST-MD5, or GSSAPI (KerberosV5).

Base DN Enter the identifier of the search base of the directory service.

Example: DC = ldap, DC = xxx, DC = com

Anonymous access Select whether or not to search using anonymous authentication.

Administrator DN Enter the identifier of the LDAP server administrator.

Example: CN = myldap, OU = mySercice, DC = ldap, DC = xxx, DC = com

Administrator password Enter the administrator password used during the search.

Select this to enter a password.



33

Items Description

LDAP Synchronization Set the interval to synchronize user information on the LDAP server with this system.

You cannot change settings that do not synchronize automatically from theconfiguration menu by default. To change these settings, you need to set themagain after setting all the configuration items on the configuration menu.

Test connection Check the connection test to the LDAP server.


3. Click Test connection.

A connection and search test to the LDAP server is performed, and then the result is displayed.

4. Click OK.

If the connection test fails, check the following items, and then try again.

❏ The LDAP server is working normally.

❏ The entered values are correct.

5. Configure Search Condition List and Group and User Attributes if necessary.

Note:You can associate search condition, and the attributes of this system and the attributes of the LDAP server. Refer to theAdministrator’s Guide for detail of the LDAP server settings.

"Administrator’s Guide" - "Management Settings" - "System administration" - "LDAP server".

6. Click OK.

7. Click OK on the confirmation screen.

Registering a Multi-function DeviceRegister a multi-function device to the system. Only register one at first to check system operations.

Note:When you pre-register printers by using a CSV file, you can register the printers after setting up the system.

1. Click Add device on the initial configuration menu.



34

2. Select IP Address from Search Parameters.

3. Enter the IP address of the multi-function device you want to register.

4. Click Next.

The system searches for multi-function device that are connected to the network using the selected searchmethod, and displays the search results.

5. Select the device you want to register, and then click Next.

If you have set an administrator password on the multi-function device, enter the password.

6. Click OK.




35

7. Click Finish on the initial configuration menu.

The administrator’s dashboard is displayed.

Related Information

& “Registering Multi-function Devices” on page 48



36

5. Operational checkCheck that the user can log in with an authentication card, and print on this system.

Note:You can also check operations for the server on which Epson Print Admin is installed. In that case, “administrator’s clientcomputer” should read “server on which you have installed Epson Print Admin.”

Printer driver installationInstall the printer driver dedicated to this system.

1. Click to display the account menu.

Login using the account in A-3 - Epson Print Admin System account Information if you are not alreadylogged in.

2. Select User.

The administrator menu switches to the user menu.

3. Select Driver/Client Tool Download on the menu.

The Driver/Client Tool Download menu is displayed.


5. Operational check

37

4. Click from the Windows version Driver.

Note:The items displayed in the software download menu vary depending on the operating system on which the browser isrunning.

5. Follow the on-screen instructions to install the printer driver.

A queue is created and settings such as the print port are made.

Note:The message “Could not verify the msi publisher” may be displayed depending on the browser settings. Click Run tocontinue the installation.

6. Open Control Panel > Devices and Printers, and check that the icon for the Authentication system servername of A-1 - Epson Print Admin Sever Log in account has been created.

This screen capture is an example of a print queue with the name Epson Print Admin.

Related Information

& “Basic settings” on page 29

Register to an authentication cardRegister the authentication card, and check the operations for the card reader.

!Caution:

For the authentication device connected to the multi-function device, use the product with the same model numberas the authentication device that was used to authenticate the card. If the authentication device is different, youmay not be able to log in.

Note:When the multi-function device is in power-saving mode, it may take some time to recognize the authentication card. Pleaseyour authentication card again.



38

1. Hold the authentication card over the card reader.

The unregistered card settings menu is displayed on the multi-function device’s control panel.

2. Click Yes.

The screen for entering the user ID and password is displayed.

3. Enter the ID and password of A-3 - Epson Print Admin System account Information in the control panel ofthe multi-function device, and then select (Local) from the domain.

4. Press Register.

Authentication is performed, and the registration completion menu is displayed.

5. Hold the authentication card over the authentication device connected to the multi-function device again.

Login to the multi-function device.

6. Check that the ID for A-3 - Epson Print Admin System account Information is displayed on the multi-function device’s control panel.

Print checkCheck that you can print from the client computer.

1. From a client computer, print a document from any application, such as Notepad or WordPad by selecting theprint queue in A-5 - Printer driver Setting Information.

2. Hold the authentication card over the authentication device that is connected to the multi-function device tolog in.

3. Make sure that the print job in step 1 is registered in the Print Jobslist menu in the multi-function device.



39

4. Press Print by selecting the print job.

Make sure that you can print.



40

6. Check Before Practical Use of theSystemMake the settings necessary for practical use. Make these settings from the administrator’s client computer.

Note:You can also make settings on the server on which Epson Print Admin is installed. In that case, "administrator's clientcomputer" should read "server on which you have installed Epson Print Admin."

Installing the printer driverInstall the printer driver for Epson Print Admin. The installation method varies depending on the system’sconfiguration.

❏ Install on the client computer

❏ Install on the print server

❏ Distribute by using Active Directory Server Group Policy and so on

❏ Distribute in EpsonNet SetupManager

Note:The print job from the driver is added using the following ID and domain.

❏ Driver that was installed on the client computer (Download from the user page)The following ID and domain is added by the server that manages the user.

❏ For users who are managed only in the Epson Print Admin Server:User ID and (Local) domain that is logged in to the user page

❏ For users that are managed by linking to an LDAP server:ID and the LDAP server domain of the account that is logged in to the client computerOr, the user ID and (Local) domain that is logged in to the user page.

❏ Driver that was installed on the print serverThe following ID is added by using authentication when connecting to a driver on the print server from the clientcomputer.

❏ If the menu to log in to the print server is displayed:ID of the account that is logged in to the print server

❏ If the menu to log in to the print server is not displayed:ID of the account that is logged in to the client computer

❏ Driver that was distributed from the serverThe ID of the account that was logged in to the client computer is added. The domain is not added, or the ID and (Local)domain specified when installing the driver are added.

Installing on the client computerIn systems that do not build a print server, you can install the driver for the client.


6. Check Before Practical Use of the System

41

Related Information

& “Printer driver installation” on page 37

Installing on the print serverIf you are connecting the printer to a print server to share a print queue, make sure you install the printer driver forthe print server.

!Caution:

Only Windows supports connections that use the print servers.


❏ b: Print server

❏ c: Multi-function device


1. Login to the server as an administrator from the administrator’s client computer.



42

2. Select System Settings > Driver/Client Tool Download from the menu.

The driver/client tools download menu is displayed.

3. Click in Driver(For the print server) in the Multiple Languages row to download the driver.

Copy the downloaded file to removable media, a network folder, and so on, so that it can be accessed from theprint server.

4. Login to the print server using the administrator account.

5. Follow the on-screen instructions to install the printer driver that you downloaded.



43

6. Open Control Panel > Devices and Printers, and then make sure that the icon for “Epson Print Admin servername” from A-1 - Epson Print Admin Sever Log in account has been created.

7. Right-click the icon, and then select Printer Properties.

8. Select Share this printer on the Sharing tab.

9. Click OK.

Distribute by using Active Directory Server Group Policy and so onYou can install the appropriate printer driver by distributing to a client computer automatically by using a GroupPolicy in Active Directory server.


❏ b: Driver distribution server

❏ c: Multi-function device


Use the driver for the client computer to distribute the printer driver. Follow the steps below to acquire the file.




44

2. Select System Settings - Driver/Client Tool Download from the menu.

3. Select Windows or All from the pull-down menu.

4. Click in Driver(For client) in the English row for the Windows version.

The drivers for distribution are downloaded.



45

Distributing FilesUse a file for users when distributing the printer driver to users as a file. It enables the users to select a user ID usedby the printer driver.


2. Select System Settings - Driver/Client Tool Download from the menu.

3. Select Windows or All from the pull-down menu.

4. Select User ID used by printer driver.

Logon ID for computer: Set the login ID used by the user to login to the computer.

User ID settings when installing: Specify the user ID for Epson Print Admin that users use when they installthe driver or client tool.



46

5. Click in Driver(For client) in the Multiple Languages row for the Windows version.

The drivers for distribution are downloaded.

Distribute in EpsonNet SetupManagerEpsonNet SetupManager is software that creates packages, such as printer drivers and scanner drivers. When youdistribute and run packages on client computers, you can automatically install the drivers and set the printingports. See the Epson Web site for more details.

When you click in the row for the Windows version of Driver Epson Print Admin Notifier(ForEpsonNet SetupManager) in the Multiple Languages row, you can download a file that includes the driver andthe Epson Print Admin Notifier at the same time.

Registering a LicenseYou need a license key to increase the number of multi-function devices.

1. From the administrator’s client computer, login by entering the ID and password set in A-3 - Epson PrintAdmin System account Information during installation.

2. Click System Settings > License Registration

3. Enter the License key, and then click Next.

4. Check the message, and then click Register.



47

5. Check that the license information on the dashboard has been updated.

Registering Multi-function DevicesSearch for and register all multi-function devices to be deployed.

1. Select Devices > Device List from the menu.


2. Click Add.

The Device search menu is displayed.



48

3. Specify an IP address or a range of IP addresses by selecting a search method for the multi-function devicefrom IP AddressNetwork Address, and Range of IP Address.


You can set up to five search conditions for each method.

Discovery method Description

IP Address Searches for the multi-function device using the specified IP address in unicast.

Specify the IP address directly.

Network Address Searches for the multi-function device using the specified network address inbroadcast.

Enter the network address and subnet mask to be searched.

Range of IP Address Searches for the multi-function device using the specified IP address range inunicast.

Enter the start and end addresses of the IP address range to be searched.

Note:You can only search for Epson Open Platform compatible multi-function devices that have been activated.

4. Click Next.

The multi-function device search begins, and the search results are displayed.

5. Select the multi-function device you want to register from the search results, and then click Next.

The multi-function device registration results are displayed.



49

If an administrator password has been set on the multi-function device to be registered, enter the password inthe password field.

6. Click OK.

You are returned to the Device List menu.

If you cannot find the multi-function device you want, try searching by selecting a different search method instep 3.

Creating a provisional printer registration for the CSV fileYou can temporarily register the printer by importing printer information from a CSV file. Describe in thefollowing format. Create a CSV file to import using spreadsheet software or a text editor, according to the followingformat.

Items Max. No. ofCharacters

Description

Device Name 64 Enter the multi-function device name that you want to update.

Location 40 Enter the location to be updated.

Description 256 Enter the remarks to be updated.

IP Address 15 Enter the IP address (IPv4) to be updated.

MAC Address 12 This value is invalid for temporary registrations. Leave this blank.

Flag for temporaryregistration

1 This is a flag for provisional registration. “1” means temporaryprinter registration.

The following shows the file specifications.

❏ File format: CSV



50

❏ Character code: UTF-8

❏ Upper size limit: 10 MB

❏ Delimiter: comma or semicolon (Delimiter that is set in System Settings > Basic Settings > Server > Delimiterof CSV Data.)

❏ Text qualifier: double quotes

❏ Line feed code: CRLF

❏ Line format: Device name, Location, Description, IP address, MAC address

Note:❏ Items other than the printer name, IP address, and flag are optional. The item is not updated if you leave it blank.

❏ Lines starting with # are comments.

Example

“WF-C869R (XXXX0000XX)”, “London office 1F”, “shared printer next to lobby”, “192.0.2.172”, “”, “1”

❏ Printer name: WF-C869R (XXXX0000XX)

❏ Location: London office 1F

❏ Remarks: the lobby next to the shared printer

❏ IP address: 192.0.2.172

❏ MAC address: none

High security settingsYou can enhance the multi-function device’s security by using the multi-function device’s own security features.

Set to limit operations that do not pass through the Epson Print Admin server. This setting is optional.

Related Information

& “High security settings” on page 77

Set the print environment and rulesYou can assign usage restrictions to users for printing, scanning, usage costs for a certain period, and so on. Thissection explains how to create rules that need to be set before starting operation.

Rules/Policy SettingsYou can set the rules/policies to be applied on a per-user or per-group basis. Rules/policies that are registered hereare applied when they are enabled in the user or group settings.

You can set the following rules/policies.

❏ Scan PresetsRegister to read settings and the output destination for the scanner.



51

❏ Rule-based PrintingRegister rules such as color settings or two-sided printing settings.

❏ Allowed TimesRegister the periods the user can use the multi-function device.

❏ Credit RechargesRegister the period and amount to recharge credit.

❏ Billing codeRegister a billing code that classifies costs.

See the following for details on each setting.

“Epson Print Admin Administrator’s Guide” > “Setting by function”

1. Select each setting menu from Rules/Policies on the function menu.

If you are not logged in to the administrator page, log in with an account from A-3 - Epson Print AdminSystem account Information.

2. Click Add.

3. Set each item, and then click OK.

Editing an unassigned userBy default, unassigned users are registered to a group. When you set editing limits and rules to Unassigned users,the settings are copied and applied to the group.

When you make settings before synchronizing, they are also applied to groups that are managed by linking to anLDAP server.

1. Select Groups on the menu.


2. Click Unassigned users from Group in the Group list.



52

3. Set each item.

See the following for information on setting each tab.

“Epson Print Admin Administrator’s Guide” - “Setting by function” - “Group”

4. Click OK.

5. Click OK on the completion menu.

Setting CostYou can register the costs of using functions, paper sizes, job types, and so on, for each device or each group. Editthe Default cost registered in advance and apply it to groups or devices.

If you want to make individual settings for each multi-function device, register the cost and apply it to the multi-function device. See the following for more details.

“Epson Print Admin Administrator’s Guide” - “Setting by function” - “Cost”

Editing the default costs

1. Select Rules/Policies > Cost Settings on the menu.


2. Click the Default cost from Name in the Cost settings list.



53

3. Select Setup type, and then set each item.

See the following for details on each item.

“Epson Print Admin Administrator’s Guide” - “Setting by function” - “Charging”

4. Click OK.

User RegistrationRegister users to the system before starting operations.

You can register users directly by using this system, or register accounts managed by an LDAP server.

User account registrationRegister users directly to this system.

If you have a lot of users, you can register in bulk by using a CSV file. See the following for details.

“Epson Print Admin Administrator’s Guide” - “Management setting” - “User Management” - “Registering users”

1. Select Users on the menu.


2. Click Add.



54

3. Set each item.

See the following for details on each item.

“Epson Print Admin Administrator’s Guide” - “Management setting” - “User Management”

4. Click OK.

Synchronizing with an LDAP ServerIf you want to register a user account managed by an LDAP server, synchronize the LDAP server with this system’sserver.

1. Select System Settings > LDAP Server from the menu.

Login using the account in A-3 - Epson Print Admin System account Information if you are not already loggedin.



55

2. Select the Sync. tab, and then click Execute.

Synchronization starts, and the synchronization results are displayed.

3. Click OK.



56

Uninstalling and Updating

UninstallingMake sure you backup your data and settings before uninstalling.

See the following for details.

“Epson Print Admin Administrator’s Guide” - “Daily management” - “Backup”

Note:❏ The following software and components are not uninstalled.

❏ .NET Framework 4.5 or later

❏ SQL Server

❏ For the following software and components, only the files and data used by this system are deleted.

❏ Message queue (MSMQ)

❏ Microsoft Internet Information Services (IIS)

1. Log in to the server which you set up using the user name and the password decided by the A-1 - Epson PrintAdmin Sever Log in account.

2. Click Control Panel > Uninstall a program, and then open Programs and Features.

3. Select Epson Print Admin, and then click Uninstall/Change.

4. Follow the on-screen instructions.



57

5. Click Remove.

6. Select whether or not to delete the system logs and system backup, and then click Next.

7. Select whether or not to delete the database, and then click Next.



58

8. Click Next.

Uninstallation starts.

!Caution:

If files to be deleted are being used during uninstallation, the following menu is displayed. Close the software,and then click Retry.

9. Click Close.

Updating the SystemThe product is updated to improve functions, increase quality, and so on. To update, follow the instructionsprovided by the updated version.



59

Solving Problems

Administrator pages and user pages do not appearCheck the following.

❏ Cookies are enabled in your browser.

❏ JavaScript is enabled in your browser.

❏ If “A system error has occurred.” is displayed, make sure the service is running normally.

Card Authentication is too SlowIf the card authentication is too slow, configure following settings according to the internet connectionenvironment of Epson Print Admin server.

For Servers Without an Internet ConnectionIf your Epson Print Admin server is not connected to the Internet, make settings so that the certificate is notobtained.

1. Enter mmc into the Start menu > Search programs and files to run the Microsoft Management Consol.

2. Select File > Add/Remove Snap-in.


Solving Problems

60

3. Select Group Policy Object Editor, and then click Add.

The Select Group Policy Object screen is displayed.

4. Click Finish.

5. Click OK.


Solving Problems

61

6. Select Public Key Policies.

7. Double-click Certificate Path Validation Settings in Object Type.

The Certificate Path Validation Settings Properties screen is displayed.

8. Select the Network Retrieval tab, and then make the following settings.

Select Define these policy settings

Clear Automatically update certificates in the Microsoft Root Certificate Program


Solving Problems

62

Clear Allow issuer certificate (AIA) retrieval during path validation

9. Click OK.

For Servers with an Internet ConnectionIf your Epson Print Admin server can connect to the Internet, make proxy settings for the LocalSystem authorityuser.

1. Right-click Start > All Programs > Accessories > Command Prompt, and then select Run as administrator.

2. Enter the following command to stop using a proxy.

bitsadmin /util /setieproxy localsystem NO_PROXY

3. Enter the following command according to the proxy settings.

Using the automatic configuration script:

bitsadmin /util /setieproxy localsystem AUTOSCRIPT [URL of the automatic configuration script]

Using the list for an explicit proxy:

bitsadmin /util /setieproxy localsystem MANUAL_PROXY [proxy configuration]

Repair InstallationIf the system does not start-up, or operations become unstable, and so on, you may be able to fix the problem byperforming a repair installation. The repair installation overwrites system files while leaving settings andregistration information untouched.

1. Log in to the server which you set up using the user name and the password decided by the A-1 - Epson PrintAdmin Sever Log in account.

2. Click Control Panel > Uninstall a program, and then open Programs and Features.


Solving Problems

63

3. SelectEpson Print Admin , and then click Uninstall/Change.

4. Follow the on-screen instructions.

5. Click Repair.

6. Click Repair.

7. Click Close.

8. Reboot the computer if necessary.

What to do if the Epson Print Admin server goes downcontrol panel using the printer driver.

The following occurs when the server goes down.

❏ Printer drivers:A print error occurs and the print job is automatically deleted.


Solving Problems

64

❏ Notifier:Connecting is displayed in the pop-up on the task tray icon.

❏ multi-function device control panel:Network Error Browser Timeout is displayed.

If the authentication system goes down, you can operate the control panel and print from the printer driver byperforming the following steps.

A. Create an emergency account

B. Release the high-security settings.

C. Install the printer driver and set authentication information in the printer driver.

You can set these settings manually. You can also control the emergency account and high security settings usingthe Authentication Server Error Mode.

Setting the Authentication Server Error ModeYou can set the following items under the Authentication Server Error Mode.

A. Create an emergency account.

B. Release the high-security settings (disable IPsec/IP filtering and enable WSD).

Note:This setting may not be displayed depending on the multi-function printer. To display this setting, update the printer'sfirmware, and then enable Epson Open Platform.

Setting Operations when the Authentication Server is Down

You can set operations for the Authentication Server Error Mode

1. On a computer, open your web browser, and then open the Web config by entering "http://<epson-device-IP>".

2. Select Epson Open Platform Settings > Authentication Server Error Mode Settings (or Epson OpenPlatform tab > Authentication Server Error Mode Settings).

3. Click Edit on the Settings for Authentication Server Error Mode screen.


Solving Problems

65

4. See the following to change settings.

Items Description

Access ControlSettings

Disable the access control feature Disable the settings in Access Control Settings >Basic.

Specify to allow all users to access all functionswhen the authentication server goes down.

Allow RAW(Custom Port) Printing You can specify whether or not to allow processingfor print jobs and scan jobs. If Disable the accesscontrol feature is selected, this value is disabled.

Register the user for theauthentication server error mode

You can specify the login account for the multi-function printer in Access Control Settings > UserSettings (or Product Security tab) > AccessControl Settings > User Settings.

Specify to allow specific users to use specificfunctions when the authentication server goesdown.

❏ Number: Select the number to register anaccount. If you specify the registered number,the original account is replaced by this accountwhen the Authentication Server Error Mode isenabled. When the Authentication Server ErrorMode is disabled, the account is replaced withthe original.

❏ User Name: Enter a display name on the listbetween 1 and 14 characters in ASCII(0x20-0x7E).

❏ Password: Enter between 0 and 20 characters inASCII (0x20-0x7E).

❏ Select the check box to enable or disable eachfunction.: Checked functions are allowed for use.

CommunicationSettings

Disable IPsec/IP Filtering Disable Network Security Settings (or NetworkSecurity tab) > IPsec/IP Filtering.

Enable WSD Enable WSD printing and WSD scanning.

5. Click Next.

The confirmation screen is displayed.

6. Click OK.

The settings are saved.

If you allow specific users only to print when the authentication server goes down, set the authenticationinformation in the printer driver.

Note:If you want to back up the settings, select Authentication Server Error Mode Settings in Export and Import SettingValue > Export (or Device Management tab) > Export and Import Setting Value > Export to export the settings.

Related Information

& “C. Setting Authentication Information in the Printer Driver” on page 68


Solving Problems

66

Enabling Operation Settings when the Authentication Server is Down

If the authentication server goes down, you can apply setting items.

1. Select Enable from Authentication Server Error Mode in Epson Open Platform Settings > AuthenticationServer Error Mode Settings (or Epson Open Platform tab > Authentication Server Error Mode Settings).

2. Click Next.


3. Click OK.

The Authentication Server Error Mode is applied, and the multi-function printer is available.

Disabling Operation Settings when the Authentication Server is Down

The Authentication Server Error Mode is disabled, and the settings are returned to their previous status.

1. Select Enable from Authentication Server Error Mode in Epson Open Platform Settings > AuthenticationServer Error Mode Settings (or Epson Open Platform tab > Authentication Server Error Mode Settings).

2. Click Next.


3. Click OK.

The Authentication Server Error Mode is disabled, and the settings are returned to their previous status.

Setting each FunctionPerform the following to access Web Config from the client computer by entering the multi-function device's IPaddress in a browser.

❏ To use a standalone function, perform "A. Create an emergency account in use restriction setting".

❏ In addition to the above, if you want to scan or receive a fax from the client computer, perform "B. Release thehigh-security setting."

A. Create an emergency account with usage restriction settings.

The Epson Print Admin server account has been registered as user number 1 in the user restriction settings. Whenassigning clients other than the server, use numbers 2 to 10.

The following explains how to set up a user that can copied to the number 2 user as an example.

1. Navigate to Access Control Settings > User Settings, and then click Add for number 2.

Navigate to the input page.

2. Enter the User Name and Password, select Copy in the enable/disable functions check box.

If you want to allow other functions, select the appropriate check box.

3. Click Apply.


Solving Problems

67

B. Release the high-security settings.

Perform any of the following.

❏ Apply a configuration profile for emergencies

❏ Disable IPsec/IP filtering

❏ Add an IP filtering policy

Applying a configuration profile for emergencies

Apply a profile for emergencies that disables high-security settings.

1. Output all settings to a file using the export function from the Web Config.

You can return settings to normal by importing the saved setting profile.

2. You can obtain a configuration profile for emergencies from the web site.


3. Using the import function in the Web Config, apply the configuration profile that you obtained.

Note:The configuration profile for emergencies performs the following settings.

❏ Disables IPsec/IP filtering settings

❏ Enables PC-FAX transmission functions

❏ Unlocks Wi-Fi Direct panel operations

❏ Enables network scanner (AirPrint) functions

❏ Enables WSD functions

Disabling IPsec/IP Filtering

1. Navigate to Network Security Settings > IPsec/IP Filtering > Basic in the Web Config.

2. Set IPsec/IP Filtering to Disable.

3. Click Next.

4. Click OK.

5. Results are reflected when you restart the network.

Adding an IP filtering policy

You can set a policy to allow operations from a particular client in a separate policy.

C. Setting Authentication Information in the Printer Driver

In emergency situations such as when the Epson Print Admin server goes down, you can set authenticationinformation to the printer driver. You can print from the specified printer driver. Create an account to be used for


Solving Problems

68


emergencies by using Access Control Settings or Authentication Server Error Mode Settings in the multi-functiondevice before setting up.

The following is an example for Windows.

1. Install the printer driver you want to use.

2. For Windows, navigate to Control Panel > Hardware and Sound > Devices and Printers, and then right-clickthe printer icon.

3. Select Printing Preferences from the menu.

4. Click the Printer and Option Information icon on the Maintenance tab.

5. Select Save Access Control settings in the Access Control, and then click Settings.

6. Enter a User Name and Password for the emergency account, and then click OK.

Related Information

& “Setting Operations when the Authentication Server is Down” on page 65& “A. Create an emergency account with usage restriction settings.” on page 67

Error menuWhen the multi-function device cannot display the web page that is sent from the Epson Print Admin server, anerror is displayed on the control panel.

Press Reload button to redisplay the web page.

HTTP communication errorWhen an HTTP communication error occurs, an HTTP status code, an explanation, and an error code aredisplayed.

The HTTP status codes and explanations are displayed according to the RFC2616 standards. For moreinformation, see the following Web site.

http://www.w3.org/Protocols/rfc2616/rfc2616-sec6.html

When an HTTP communication error and other network errors occur at the same time, the HTTPcommunication error is given higher priority.


Solving Problems

69

http://www.w3.org/Protocols/rfc2616/rfc2616-sec6.html

Certificate errorWhen an error related to electronic certificate signing occurs, a Certification Error, an explanation, and an errorcode are displayed.

Code Explanation Meaning Solution

ec-1 Unable To Get IssuerCertificate

Cannot acquire the issuer certificate. Make sure that the correct certificatehas been imported to the multi-function device.

ec-2 Unable To DecryptCertificate Signature

Cannot decrypt the signature for thecertificate.

Make sure that the correct certificatehas been imported to the multi-function device.

ec-3 Unable To Decode IssuerPublic Key

Cannot decode the public key for theissuer.

Make sure that the correct certificatehas been imported to the multi-function device.

ec-5 Certificate Not Yet Valid The certificate is not valid yet. ❏ Check that the Date and Timesettings are correct for the multi-function device.

❏ Check the expiration date of thecertificate for Epson Print Admin.

❏ Make sure that the correctcertificate has been imported tothe multi-function device.

ec-6 Certificate Expired The certificate has expired. ❏ Check that the Date and Timesettings are correct for the multi-function device.

❏ Check the expiration date of thecertificate for Epson Print Admin.


ec-7 Invalid Not Before Field The notBefore field in the certificate isin an invalid format.


❏ Make sure that the certificate forEpson Print Admin is correct.


Solving Problems

70


ec-8 Invalid Not After Field The notAfter field in the certificate is inan invalid format.



ec-9 Self-Signed Certificate The certificate is self-signed. ❏ If you are using a self-signedcertificate in the Epson PrintAdmin, make sure that you havedisabled certificate validation in theWeb Config.

❏ Set a certificate signed by acertificate authority that isimported to the multi-functiondevice in Epson Print Admin.

❏ Check if Certificate Validation onBrowser is Disabled in the WebConfigEpson Open PlatformSettings (or Epson Open Platformtab) > Authentication System >Basic.

ec-10 Self-Signed Certificate InChain

The self-signed certificate is includedin a certificate chain.

❏ If you are using a self-signedcertificate in the Epson PrintAdmin, make sure that you havedisabled certificate validation in theWeb Config.

❏ Set a certificate signed by acertificate authority that isimported to the multi-functiondevice in Epson Print Admin.

ec-11 Unable To Get LocalIssuer Certificate

Cannot acquire the root certificate. ❏ Make sure that the correctcertificate has been imported tothe multi-function device.


ec-12 Unable To Verify FirstCertificate

Cannot verify the first certificate. ❏ Make sure that the correctcertificate has been imported tothe multi-function device.


ec-13 Certificate Revoked The certificate has been revoked. ❏ Make sure that the correctcertificate has been imported tothe multi-function device.


ec-14 Invalid CA Certificate The CA certificate is invalid. ❏ Make sure that the correctcertificate has been imported tothe multi-function device.



Solving Problems

71


ec-15 Path Length Exceeded The maximum hierarchy for the lengthof the certificate chain has beenexceeded.



ec-16 Invalid Purpose Cannot use the certificate for thespecified purpose.



ec-17 Certificate Untrusted The certificate is not trusted. ❏ Make sure that the correctcertificate has been imported tothe multi-function device.


ec-18 Certificate Rejected The certificate has been rejected. ❏ Make sure that the correctcertificate has been imported tothe multi-function device.


ec-19 Subject Issuer Mismatch The subject name does not match withthe current issuer name for thecertificate.



ec-20 Authority Issuer SerialNumber Mismatch

The serial number for the certificationauthority does not match.



ec-21 No Peer Certificate The certificate is not valid. ❏ Make sure that the correctcertificate has been imported tothe multi-function device.


ec-22 Host Name Mismatch The host names do not match. Make sure that the certificate for EpsonPrint Admin is correct.

Refer to the “System Administrator’s Guide” of multi-function device for the import of the certificate.



Solving Problems

72


Other network errorsWhen an HTTP communication error and an error other than a CA certificate error occurs, the Network Error,an explanation, and an error code are displayed.


ec-1 Connection Refused The remote server refused theconnection.

❏ Make sure that the addresses arecorrect in Web ConfigEpson OpenPlatform Settings (or Epson OpenPlatform tab) > AuthenticationSystem > Basic > Web Page URLBefore Login and Web Page URLAfter Login.

❏ Make sure that Epson Print Adminis running correctly.

❏ Check the server firewall settings ofthe server on which Epson PrintAdmin is installed, such as Port 80to be used in the Epson PrintAdmin (http) / 443 (https) ispermitted.

ec-2 Remote Host Closed The remote server closed theconnection before a reply could beprocessed and completed.

Make sure that Epson Print Admin isrunning correctly.

ec-3 Host Not Found The remote host name is invalid. ❏ Make sure that the addresses arecorrect in Web ConfigEpson OpenPlatform Settings (or Epson OpenPlatform tab) > AuthenticationSystem > Basic > Web Page URLBefore Login and Web Page URLAfter Login.

❏ Make sure that the multi-functiondevice is connected to the network.

❏ Make sure that the DNS for themulti-function device settings arecorrect.


Solving Problems

73


ec-4 Timeout The connection to the remote serverwas lost due to a timeout.



❏ Check the server firewall settings ofthe server on which Epson PrintAdmin is installed, such as Port 80to be used in the Epson PrintAdmin (http) / 443 (https) ispermitted.

ec-5 Operation Canceled The connection to the remote serverwas disconnected and the operationhas been canceled.

Make sure that Epson Print Admin isrunning correctly.

ec-6 SSL Handshake Failed The SSL/TLS handshake failed, and acoded channel could not beestablished.

Make sure that the addresses arecorrect in Web ConfigEpson OpenPlatform Settings (or Epson OpenPlatform tab) > AuthenticationSystem > Basic > Web Page URLBefore Login and Web Page URLAfter Login.

ec-201 Content Access Denied Access to remote content has beendenied.

(This is the equivalent to a 401 HTTPcommunication error.)


❏ Make sure the server settings thatare installed on Epson Print Adminare correct.

ec-203 Content Not Found Remote content was not found on theserver.

(This is the equivalent to a 404 HTTPcommunication error.)




Solving Problems

74


ec-204 Authentication Required The remote server authenticationneeded to provide content did notaccept the credentials submitted.




ec-99 Unknown Network An unknown network error has beendetected.

❏ Check the current IP and the IP ofthe multi-function device that wasregistered to Epson Print Admin areidentical.

❏ Check the network status.

ec-299 Unknown Content An unknown remote content error hasbeen detected.




ec-399 Protocol Failure An error in the network protocol hasoccurred.



ec-999 Browser Timeout The browser determined that atimeout has occurred after a specifiedamount of time (30 seconds).


❏ Make sure that the multi-functiondevice is connected to the network.

If other errors occurs, restart the Epson Print Admin server and the multi-function device.

Panel MessagesAs well as errors displayed on the Web page, you may receive the following messages.


Solving Problems

75

Message Cause Solution

The card is not registered in the sys-tem. Please contact your administrator.

Authentication card is not registered.

(If it is not checked in System Settings> Basic Settings > Allow users to reg-ister authentication cards in Admin-istrator page)

Register the authentication card of theuser in Users > User List > Basic In-formation from the administrator’spage.

The device is unavailable. Valid printer has not been set for theuser.

Set a valid printer in Users > User List> Devices or the group of the relevantuser from the administrator’s page.

Usage permission for this function hasnot been set.

Effective functions have not been setfor the user.

Set a valid function in Users > UserList > Functions or the group of therelevant user from the administrator’spage.

Operations are restricted at this time. Effective time zone for the users notbeen set.

Set a valid available time zone in Users> User List > Allowed Times or thegroup of the relevant user from the ad-ministrator’s page.

Cannot use Epson Print Admin. Pleasecontact your administrator.

Printer is set to Disabled. Set the printer to Enable in Devices >Device List from the administrator’spage.

This device is not managed by the Ep-son Print Admin.

Printer has been un-registered. ❏ Print using a registered printer.

❏ Register the printer.

The print speed may decrease due tothe high load in Epson Print Admin.

20 or more print jobs have been sentto the printer at the same time.

Wait until other printers have finishedprinting.

A temporary card has been registered.You cannot register any more cards.

The deadline for the temporary cardhas not expired.

❏ Erase the temporary card ID.

❏ Wait until the temporary carddeadline has expired.

An error has occurred in the EpsonPrint Admin server. Contact the admin-istrator.

Failed to read and write server data-base connection or database.

If the server does not recover from theerror, restore the database.

A communication error has occurredwith the device. Please contact youradministrator.

Communication token does notmatch.

Check the printer error in Dashboardfrom the administrator’s page, and fol-low the instructions in the solution.


Solving Problems

76

Appendix

High security settingsBy using the multi-function device’s security features, you can prohibit the use of a multi-function device that doesnot pass through the authentication server. If this is not set, it can lead to unauthorized use of the multi-functiondevices because it is possible to print and scan by connecting the computer to the multi-function devices directly,and fax and copy by using the control panel. See the manual for the multi-function device for details on thesecurity features.

Applying a profile of security configurationA profile of security configuration is necessary to apply security settings. The profile contains security levels. Youcan customize this to suit your environment based on how close the level of the profile is to your security andusage environment.

To acquire a profile of security configuration see the following Web site.


Overview of profile of security configuration

The profile of security configuration disables functions and communication of multi-function devices with thefollowing settings.

Level Overview Functions toDisable in Protocol

Settings

Functions toDisable in Wi-Fi

DirectConfiguration

Communications toDisable in IPsec/IPFiltering Settings

6 Encrypt communicationbetween multi-functiondevices and theauthentication server byIPsec to preventinterception ofcommunication.

❏ Only the followingprocesses through theauthentication serverare allowed.

❏ Printing

❏ Scanning

❏ Sending andreceiving faxes

❏ Use of Wi-Fi Direct fromsmart devices isprohibited.

❏ PC-FAX sending

❏ AirPrint scanning

❏ WSD (printing,scanning)

❏ Wi-Fi Direct PanelSettings

(Restricted by IP sec)

❏ PC-FAX receiving

❏ Network scanning

❏ LPR printing

❏ Port9100 printing

❏ AirPrint printing(IPP/IPPS)

❏ FTP printing


Appendix

77



Settings


DirectConfiguration


5

(Recommended)

❏ Only the followingprocesses through theauthentication serverare allowed.

❏ Printing

❏ Scanning



❏ PC-FAX sending






❏ LPR printing

❏ Port9100 printing


❏ FTP printing

4 ❏ Allow the followingprocesses from theclient computer toLevel 5 restrictions.

❏ Printing


❏ PC-FAX sending








❏ Printing

❏ Scanning


❏ PC-FAX sending ❏ Wi-Fi Direct PanelSettings




❏ Printing

❏ Scanning



- ❏ Wi-Fi Direct PanelSettings

-


Appendix

78


Settings


DirectConfiguration


for emergency This is used when youwant to disable the high-security settings profilewhen the authenticationserver fails, and so on.

❏ Releases restrictions setin the profile.

❏ Allow processes fromother client PCs.

Enable the following.



❏ PC-FAX sending

Releases the Wi-FiDirect panel controllimit.

Disable IPsec / IPfiltering

Level 1 locks the control panel and prohibits setting changes by setting an administrator password. A profile is notused.

Setting an administrator account and locking the panelSet an administrator password so that the user cannot change settings for a device. This also prohibits operationsfrom the Epson device’s control panel, such as faxing and copying.

If you have already set an administrator password, skip steps 2 and 3.

1. On a computer, open your web browser, and then open the Web config by entering “http://<epson-device-IP>”.

2. Select Administrator Settings > Change Administrator Password, Administrator Settings > ChangeAdministrator Authentication Information, or Product Security tab > Change AdministratorAuthentication Information according to the multi-function device.

3. Enter Current password, New password, and Confirm New Password, and then click OK.

4. Click System Settings > Control Panel or Device Management tab > Control Panel.


Appendix

79

5. Set Panel Lock to ON, and then click OK.

Importing and changing settings in the settings fileImport the profile of security configuration, and then change the settings to suit the environment.

1. From the Web Config in the advanced menu, select Export and Import Setting Value > Import or DeviceManagement tab Export and Import Setting Value > Import.

2. Specify the profile of security configuration that you acquired, and then click Next.

3. Select All in the category that you want to import, and then click Next.

4. Click OK.


Appendix

80

Setting security for the communication pathWhen this is set using a profile of security configuration, a continuous restriction is applied to the communicationroute.

1. From the Web Config in the advanced menu, select Network Security Settings > IPsec/IP Filtering > Basic orProduct Security tab > IPsec/IP Filtering > Basic.

2. Select the 1 tab for an individual policy.

3. Select Enable this Group Policy, and then perform the following operations.

Local Address(Printer): IP address for the Epson device that is set.

Remote Address(Host): IP address or FQDN for the system server.


Appendix

81

4. For Level 6, set IPsec encryption. For other levels, proceed to "Customize by usage environment" in thismanual.

Make sure that the Authentication Method is set to Pre-Shared Key, and set any pre-shared keys.

5. Click Next.

6. Click OK on the confirmation screen.

7. Set Pre-Shared Key on the Epson Print Admin server.

See the next section for details.

Setting IPsec pre-shared key

Set a pre-shared key for IPsec on the Epson Print Admin server to allow IPsec communication to the Epson device.

1. Open Control Panel > System and Security > Windows Firewall > Advanced settings on the primary servercomputer.

2. Click Windows Firewall Properties.

3. Navigate to IPsec Settings tab > IPsec defaults, and then Click Customize.

4. Select Advanced Settings as the Authentication method, and then click Customize.

5. Click Add in First Authentication.

6. Select Pre-Shared Key, enter the pre-shared key that you set in the Epson device in step 4.

7. Click OK to close each screen.

Customizing by use scene

Customize it according to the environment that uses the setting applied with a set profile. See the following aboutthe example of setting customization.


Appendix

82

Related Information

& “High security settings” on page 77

Operational checkPerform a test operation whether the restriction of the print, copy, scan, and fax that you set work as they are set.

If the printer and the server can not connect, check the "Setting security for the communication path."

Refer to the following when you want to release a high-security settings, in case that a problem occurs in EpsonPrint Admin server or you want to rework settings.

Related Information

& “Setting security for the communication path” on page 81& “What to do if the Epson Print Admin server goes down” on page 64

Test cases to check the restriction of printing that does not pass through theEpson Print Admin server:

1. Install the drivers for the multi-function device to the client computer.

2. Print any document on the printer driver.

3. Navigate Control Panel > Hardware and Sound > Devices and Printers, right-click on the multi-functiondevice icon.

4. Click See what’s printing.

5. Make sure if a print job of the document you printed remains in the displayed menu.

When a print job is left, restriction is functioning.

6. Delete the print job, close the menu.

Customization example of a high security settingYou can customize the security settings according to the environment that uses the setting applied with a profile.Use the Web Config.

When you want to prohibit printing from a client computer andallow scanning and faxingLocation: Network Security Settings > IPsec/IP Filtering > Basic or Network Security tab > IPsec/IP Filtering >Basic


Appendix

83

Setting Overview SettingProfiles to

Import

Settings

Import a level 5 setting profile,clear the setting items for scanningand faxing from the prohibitedrules.

Level 5 Clear the following in Service Name from Group Policy 10.

IPP/IPPS*

Network Scan

CIFS (Local)

* IPP/IPPS and clear the check if you want to use IPP Faxout from Mac OS. If you clear, IPP/IPPS printing is allowed.

When you want to print directly from a specific client computerLocation: Network Security Settings > IPsec/IP Filtering > Basic or Network Security tab > IPsec/IP Filtering >Basic


Import

Settings

Set the IPsec filtering rules for theclient computer to allow vacantindividual policies by importing aLevel 5 setting profile.

Level 5 Set the following in Group Policy 2.

Access Control: Permit Access

Local Address(Printer): IP address of the printer

Remote Address(Host): IP address of the client computer

Method of Choosing Port: Service Name

Service Name: Check RAW (Port9100)

For others, select the item to allow the service.

LPR printing: LPR

FTP printing: FTP Data (Local), FTP Control (Local)

IPP/IPPS printing: IPP/IPPS

Set the IPsec rules for the clientcomputer to allow vacantindividual policies by importing aLevel 6 setting profile.


Access Control: IPsec


Remote Address(Host): IP address of the authentication server


Service Name: Check RAW (Port9100)

Authentication Method: Pre-Shared Key

Pre-Shared Key: Any

Security Protocol: ESP

When you want to scan directly from a specific client computerLocation: Network Security Settings > IPsec/IP Filtering > Basic or Network Security tab > IPsec/IP Filtering >Basic


Appendix

84


Import

Settings







Service Name: Check the Network Scan









Pre-Shared Key: Any


When you want to receive fax in a specific client computerLocation: Network Security Settings > IPsec/IP Filtering > Basic or Network Security tab > IPsec/IP Filtering >Basic


Import

Settings







Service Name: Check the CIFS (Local)


Appendix

85


Import

Settings







Service Name: Check the CIFS (Local)


Pre-Shared Key: Any


When you permit IPP/IPPS print from a client computerLocation: Network Security Settings > IPsec/IP Filtering > Basic or Network Security tab > IPsec/IP Filtering >Basic


Import

Settings

Clear the settings for the IPP/IPPSprinting items from the prohibitedrules by importing a Level 3-6setting profile.

Level 3-6 Clear IPP/IPPS from Service Name in Group Policy 10.

If you clear the IPP/IPPS, restrictions for the IPP Faxout functionare released.

When you permit Document Capture Pro and Document CapturePro ServerLocation: Network Security Settings > IPsec/IP Filtering > Basic or Network Security tab > IPsec/IP Filtering >Basic


Appendix

86


Import

Settings

Set the IPsec filtering and IPsecrules for the client computer toallow vacant individual policies byimporting a Level 4-6 settingprofile.

Level 4, 5 Set the following in Group Policy 2.













Pre-Shared Key: Any


If you are using the Document Capture Pro Server, we recommend installing on the same computer as the EpsonPrint Admin server, since setting changes are not required.

When you want to permit a connection from a smart deviceLocation: Network Security Settings > IPsec/IP Filtering > Basic or Network Security tab > IPsec/IP Filtering >Basic


Import

Settings

Import a Level 5 setting profile, andthen set the pass rules to individualvacant policies.

Level 5 (1) Log in as a system administrator from the control panel of thedevice.

(2) Enable simple AP mode.

(3) Navigate in the Web Config, Network Security Settings >IPsec/IP Filtering > Basic. Set the following in Group Policy 2.

Local Address(Printer): Any addresses

Remote Address(Host): Enter “192.168.10.1/24”*

* The range of IP addresses

When you want to enable/disable the specific protocolsSet the function for each protocol to enable/disable by changing the items in the available services.


Appendix

87

Setting Location Function Contents

Services > Protocol or NetworkSecurity tab > Protocol

Enable WSD Switch between enable/disable for WSD printing andWSD scanning.

The default setting for multi-function device isenabled.

Disabled in setting profiles with Level 4 or highersecurity.

Allow LPR Port Printing Switch between enable/disable for LPR printing.


This does not change in the setting profile.

Allow RAW (Port9100)Printing

Switch between enable/disable for RAW printing.



Enable IPP Switch between enable/disable for IPP/IPPS printing.



Enable FTP Server Switch between enable/disable for FTP printing.

The default setting for multi-function device isdisabled.


Services > MS Network > UseMicrosoft network sharing orNetwork Security tab > MSNetwork > Use Microsoftnetwork sharing

Use Microsoft networksharing

Switch between enable/disable for Microsoft Network(network folder sharing and scan to folder function).

The default setting for multi-function device isenabled. This does not change in the setting profile. Ifyou disable it, because the client function is disabled,you cannot use the scan to folder feature. You can useIP filtering to use the scan to folder function whilelimiting folder sharing.

Services > Network Scan >Network Scan > Enable scanningor Network Security tab >Network Scan > Network Scan >Enable scanning

Switch between enable/disable scanning fromEPSON Scan

Switch between enable/disable scanning from EPSONScan.



Services > Network Scan >AirPrint > Enable scanning orNetwork Security tab > NetworkScan > AirPrint > Enablescanning

Switch between enable/disable AirPrint scan (eSCL)

Switch between enable/disable AirPrint scan (eSCL).




Appendix

88

When you want to release Wi-Fi direct panel lockSwitch between enable/disable Wi-Fi Direct settings from the control panel. Setting location and menus varydepending on the model.


Services > Wi-Fi Direct >Connect to the Wi-Fi Directdevices only

Prohibit Wi-Fi Direct Settingfrom the Panel

Switch between enable/disable Wi-Fi Directsettings from the panel.

The default setting for multi-function device isdisabled (not prohibited).

Enabled (prohibited) in setting profiles with Level 2 orhigher security.

Network Settings > Services >Wi-Fi Direct > Enable Wi-FiDirect function or NetworkSecurity tab > Wi-Fi Direct >Enable Wi-Fi Direct function

Enable the Wi-Fi DirectFunction

Switch between enable/disable Wi-Fi Directsettings from the panel.

The default setting for multi-function device isenabled (not prohibited).

Disabled (prohibited) in setting profiles with Level 2or higher security.

When you want to enable/disable the PC - fax transmission functionChange the PC-FAX transmission settings to enable/disable the PC-FAX transmission function.


Fax Settings > Send Settings >PC to FAX Function or Fax tab >Send Settings > PC to FAXFunction

Enable PC-FAX transmissionfunction

Switch between enable/disable the PC-FAXtransmission function.

The default setting for multi-function device is Use.


Sample Driver Distribution for Group PoliciesThis section explains sample driver distributions for group policies for the active directory. You need to install theActive Directory domain in advance to use this setting.

This section uses Windows Server 2012 as an example.

Installation settings for a distributed driverThe following section explains how to install a distributed driver on each client computer.

!Caution:

The Epson Print Admin printer driver and the Epson Print Admin Notifier must be distributed to each clientcomputer.


Appendix

89

1. Click Start > Administrative Tools > Group Policy Management.

2. Right-click in the domain name or organization unit (OU) to which the computer that you want to distributethe driver belongs to, and then select Create a GPO in this domain, and Link it here.

3. Enter any GPO name in Name, and then click OK.

4. Right-click the GPO you created, and then select Edit.


Appendix

90

5. Right-Click Software Installation in Computer Configuration > Policy > Software Installation, and thenselect Create New.

6. Select the driver that you want to install in client computers, and then click Open.

Download the Driver (For client) in the English row for the Windows version in System Settings > Driver/Client Tool Download on the administrator page.

7. Select Advanced, and then click OK.


Appendix

91

8. Select the Extract tab, and then select the “Uninstall the applications when they fall out of the scope ofmanagement.” check box.

9. Click Advanced.

10. Select “Ignore language when deploying this package” check box, and then click OK.

11. Click OK to close the settings window.

Related Information

& “Distribute by using Active Directory Server Group Policy and so on” on page 44

Uninstalling distributed driversTo uninstall a distributed driver, remove the link for GPO and OU.


Appendix

92

1. Right-click the GPO for the distributed driver you want to uninstall, and then select Link Enabled.

2. Make sure that Link Enabled is changed to No.

Trademarks❏ EPSON and EXCEED YOUR VISION are registered trademarks of the Seiko Epson Corporation.

❏ Microsoft, Windows, Windows Server, and Windows Vista are registered trademarks of the MicrosoftCorporation in the US and other countries.

❏ macOS, Mac OS, OS X, and Safari are trademarks of Apple Inc., registered in the U.S. and other countries.

❏ Other product names may be trademarks or registered trademarks of their respective owners.

© Seiko Epson Corporation 2018


Appendix

93

Caution❏ Unauthorized reproduction of a part or all of this guide is strictly prohibited.

❏ The contents of this guide are subject to change without prior notice.

❏ Contact our company if you have any questions, find a mistake, encounter a missing description, and so on inthe contents of this guide.

❏ Regardless of the previous point, we will under no conditions be liable for any damages or losses resulting fromthe operation of this product.

❏ We will under no conditions be liable for any damages or losses resulting from operation of this product in anyway other than described in this manual, inappropriate use of this product, or modifications performed by athird party other than our company or our suppliers.


Appendix

94

epson print admin · epson print admin: solution overview provides a summary of epson print admin....

Documents