Security Considerations. With the printer driver encryption setting, the passwords used for Authentication, Account Track and Secure Print will be encrypted before they are embedded in the print data. This does not secure the print data itself and it is still be possible to capture and read the print data (e.g. using a network sniffer). For secure transport, it is recommended to use a secure printing protocol (IPP over SSL) or secure the whole communication with the printer by using IPsec. Printing with SafeQ may require different user name to be send with the print data, other than the Linux systems user name. Required settings: Output Method ⮚ Output Method = SafeQ ⮚ SafeQ User [text of 1 to 30 characters] PSES requires a different authentication method. Required settings: User Authentication ⮚ User Authentication = PSES ⮚ User Name ⮚ Password … for applications that do not support custom input fields in their printer driver dialog. The filter contains additional code to read from a settings file named KMdrv.txt which is located in the user’s home folder. It is expected that the home folder name matches the username which is transferred to CUPS. To enable this function the filter (▇▇▇▇▇▇▇▇▇▇.▇▇) needs to be modified. Following lines need to be changed and verified: # my $usesettingsfile=1; # my $homefolderspath="/home"; Within the settings file following settings can be defined: • OutputMethod • SecurePrintID • SecurePrintPassword • BoxNumber • BoxFileName • SafeQUser • AccountTrack ▪ DepartmentCode ▪ AccountPassword • Authentication ▪ AuthenticationUsername ▪ AuthenticationPassword • Printer Driver Encryption ▪ EncryptionPassphrase The settings file is an ASCII text file, which contains lines for each setting in the format: option=value For example: to enable Secure Print, with Secure Print ID=secid and password=pass the settings file has to contain these lines. OutputMethod=Secure SecurePrintID=secid SecurePrintPassword=pass Or alternative the output method can be selected in the print dialog, and then only the SecurePrintID and SecurePrintPassword are required to be defined in the file. A sample settings file KMdrv.txt listing all possible parameters is included in this driver package. After modifying the filter file, it might be necessary to restart the CUPS demon (See “Restart the CUPS server”). Modify the PPD file for each printer and add the required value as additional parameter. Depending on the syntax, the additional parameters will be shown different in the printer dialog. The PPD files for the installed printers are located by default in the folder /etc/cups/PPD *KMSecID [SecurePrint ID]/[Displayed Text]: " " This will show the [Displayed Text] in the print dialog, but will use [SecurePrint ID] as value for the filter. This syntax can be used if the real value should be hidden in the print dialog, e.g. for setting passwords in PPD file. *KMSecID [SecurePrint ID]: " " This will use the [SecurePrint ID] for display in the print dialog and as value for the filter. With this syntax, the used value is also the text displayed in the print dialog. Following sample code shows the additional added parameters (lines in red colour) for individual Secure Print ID and password: *% ================================== *% Secure Print ID *% ================================== *OpenUI *KMSecID/Secure Print ID: PickOne *OrderDependency: 10 AnySetup *KMSecID *DefaultKMSecID: None *KMSecID None: " " *KMSecID secid/private: " " *CloseUI: *KMSecID *% Custom PostScript KMSecID option *CustomKMSecID True: " " *ParamCustomKMSecID Username: 1 string 1 16 *% ================================== *% Secure Print password *% ================================== *OpenUI *KMSecPass/Secure Print Password: PickOne *OrderDependency: 10 AnySetup *KMSecPass *DefaultKMSecPass: None *KMSecPass None: " " *KMSecPass pass/private: " " *CloseUI: *KMSecPass *% Custom PostScript KMSecPass option *CustomKMSecPass True: " " *ParamCustomKMSecPass Password: 1 password 1 8 After modifying the PPD, it might be necessary to restart the CUPS demon (See “Restart the CUPS server”). Added parameter: *KMSecID secid/private: " " *KMSecID secid: " " In both cases “secid” will be the value used as SecurePrint ID, but the displayed text is different. Setting will be applied to printers using this driver Setting is only available for to modified printer PPD needs to be modified for each printer. Individual settings for each user. Changes made in the PPD are available for all users. Selections in the print dialog have no influence on the settings defined in the setting file. The customer can select among the different parameters/values defined in the PPD. Easy to handle, each user can modify the settings file and define its own values. Some Linux distributions or CUPS versions do not support reading from a file. So this workaround cannot be used. This workaround only works in local environment not in client-print server environment. For normal user it is difficult to make the changes in the PPD, also root credentials are required for the change. Konica Minolta: - KMbeu423ux.ppd bizhub 423 series (223/283/423/283) - KMbeu652ux.ppd bizhub 652 series (652/602/552/502) - KMbeu554eux.ppd bizhub 554e series (554e/454e/364e/284e/224e) - KMbeu754ux.ppd bizhub 754 series (754/654/754e/654e) - KMbeu958ux.ppd bizhub 958 series (367/287/227/958/808/758/558/458/368/308/658e/558e/458e/368e/308e) - KMbeuC360ux.ppd bizhub C360 series (C220/C280/C360) - KMbeuC652ux.ppd bizhub C652 series (C652/C602/C552/C502) - KMbeuC364ux.ppd bizhub C364 series (C224/C284/C364/C224e/C284e/C364e) - KMbeuC554ux.ppd bizhub C554 series (C554/C454/C554e/C454e) - KMbeu750iux.ppd; bizhub 750iSeries (750i/650i/550i/450i/360i/300i/306i/266i/246i/226i/4750i/4050i/4700i) - KMbeuC754ux.ppd bizhub C754 series (C754/C654/C754e/C654e) - KMbeuC658ux.ppd bizhub C658 series (C658/C558/C458/C368/C308/C258/C287/C227) (1) - KMbeuC368ux.ppd bizhub C368 series (C368/C308/C258/C287/C227) (1) - KMbeuC759ux.ppd bizhub C759 series (C759/C659/C658/C558/C458/C368/C308/C358/C258/C287/C227/ C3851/C3851FS/C3351) - KMbeuC360iux.ppd bizhub C360i series (C360i/C300i/C250i/C4050i/C3350i/C4000i/C3300i/C3320i) (2) - KMbeuC650iux.ppd bizhub C650i series (C650i/C550i/C450i/C360i/C300i/C250i/C4050i/C3350i/C4000i/ C3300i/C3320i) (2) - KMbeuC750iux.ppd bizhub C750i series (C750i/C650i/C550i/C450i/C360i/C300i/C250i/C4050i/C3350i/C4000i/ - KmbeuC3851ux.ppd bizhub C3851 series (C3351/C3851/C8351FS) (1) - KMbeu4750ux.ppd bizhub 4750 series (4050/4750) - KMbeu4752ux.ppd bizhub 4752 series (4752/4052) - KMbeu5020iux.ppd bizhub 5020i series (5020i/5000i/4020i/4000i) - KMbeuWPHux.ppd Workplace Hub WPH - KMbeuC35ux.ppd bizhub C35 (only with special firmware)
Appears in 1 contract
Sources: Linux Cups Driver User Guide
Security Considerations. With the printer driver encryption setting, the passwords used for Authentication, Account Track and Secure Print will be encrypted before they are embedded in the print data. This does not secure the print data itself and it is still be possible to capture and read the print data (e.g. using a network sniffer). For secure transport, it is recommended to use a secure printing protocol (IPP over SSL) or secure the whole communication with the printer by using IPsec. Printing with SafeQ may require different user name to be send with the print data, other than the Linux systems user name. Required settings: Output Method ⮚ Output Method = SafeQ ⮚ SafeQ User [text of 1 to 30 characters] PSES requires a different authentication method. Required settings: User Authentication ⮚ User Authentication = PSES ⮚ User Name ⮚ Password … for applications that do not support custom input fields in their printer driver dialog. The filter contains additional code to read from a settings file named KMdrv.txt which is located in the user’s home folder. It is expected that the home folder name matches the username which is transferred to CUPS. To enable this function the filter (▇▇▇▇▇▇▇▇▇▇.▇▇) needs to be modified. Following lines need to be changed and verified: # my $usesettingsfile=1; # my $homefolderspath="/home"; Within the settings file following settings can be defined: • OutputMethod • SecurePrintID • SecurePrintPassword • BoxNumber • BoxFileName • SafeQUser • AccountTrack ▪ DepartmentCode ▪ AccountPassword • Authentication ▪ AuthenticationUsername ▪ AuthenticationPassword • Printer Driver Encryption ▪ EncryptionPassphrase The settings file is an ASCII text file, which contains lines for each setting in the format: option=value For example: to enable Secure Print, with Secure Print ID=secid and password=pass the settings file has to contain these lines. OutputMethod=Secure SecurePrintID=secid SecurePrintPassword=pass Or alternative the output method can be selected in the print dialog, and then only the SecurePrintID and SecurePrintPassword are required to be defined in the file. A sample settings file KMdrv.txt listing all possible parameters is included in this driver package. After modifying the filter file, it might be necessary to restart the CUPS demon (See “Restart the CUPS server”). Modify the PPD file for each printer and add the required value as additional parameter. Depending on the syntax, the additional parameters will be shown different in the printer dialog. The PPD files for the installed printers are located by default in the folder /etc/cups/PPD *KMSecID [SecurePrint ID]/[Displayed Text]: " " This will show the [Displayed Text] in the print dialog, but will use [SecurePrint ID] as value for the filter. This syntax can be used if the real value should be hidden in the print dialog, e.g. for setting passwords in PPD file. *KMSecID [SecurePrint ID]: " " This will use the [SecurePrint ID] for display in the print dialog and as value for the filter. With this syntax, the used value is also the text displayed in the print dialog. Following sample code shows the additional added parameters (lines in red colour) for individual Secure Print ID and password: *% ================================== *% Secure Print ID *% ================================== *OpenUI *KMSecID/Secure Print ID: PickOne *OrderDependency: 10 AnySetup *KMSecID *DefaultKMSecID: None *KMSecID None: " " *KMSecID secid/private: " " *CloseUI: *KMSecID *% Custom PostScript KMSecID option *CustomKMSecID True: " " *ParamCustomKMSecID Username: 1 string 1 16 *% ================================== *% Secure Print password *% ================================== *OpenUI *KMSecPass/Secure Print Password: PickOne *OrderDependency: 10 AnySetup *KMSecPass *DefaultKMSecPass: None *KMSecPass None: " " *KMSecPass pass/private: " " *CloseUI: *KMSecPass *% Custom PostScript KMSecPass option *CustomKMSecPass True: " " *ParamCustomKMSecPass Password: 1 password 1 8 After modifying the PPD, it might be necessary to restart the CUPS demon (See “Restart the CUPS server”). Added parameter: *KMSecID secid/private: " " *KMSecID secid: " " In both cases “secid” will be the value used as SecurePrint ID, but the displayed text is different. Setting will be applied to printers using this driver Setting is only available for to modified printer PPD needs to be modified for each printer. Individual settings for each user. Changes made in the PPD are available for all users. Selections in the print dialog have no influence on the settings defined in the setting file. The customer can select among the different parameters/values defined in the PPD. Easy to handle, each user can modify the settings file and define its own values. Some Linux distributions or CUPS versions do not support reading from a file. So this workaround cannot be used. This workaround only works in local environment not in client-print server environment. For normal user it is difficult to make the changes in the PPD, also root credentials are required for the change. Konica Minolta: - KMbeu423ux.ppd bizhub 423 series (223/283/423/283) - KMbeu652ux.ppd bizhub 652 series (652/602/552/502) - KMbeu554eux.ppd bizhub 554e series (554e/454e/364e/284e/224e) - KMbeu754ux.ppd bizhub 754 series (754/654/754e/654e) - KMbeu958ux.ppd bizhub 958 series (367/287/227/958/808/758/558/458/368/308/658e/558e/458e/368e/308e) - KMbeuC360ux.ppd bizhub C360 series (C220/C280/C360) - KMbeuC652ux.ppd bizhub C652 series (C652/C602/C552/C502) - KMbeuC364ux.ppd bizhub C364 series (C224/C284/C364/C224e/C284e/C364e) - KMbeuC554ux.ppd bizhub C554 series (C554/C454/C554e/C454e) - KMbeu750iux.ppd; bizhub 750iSeries (750i/650i/550i/450i/360i/300i/306i/266i/246i/226i/4750i/4050i/4700i) - KMbeuC754ux.ppd bizhub C754 series (C754/C654/C754e/C654e) - KMbeuC658ux.ppd bizhub C658 series (C658/C558/C458/C368/C308/C258/C287/C227) (1) - KMbeuC368ux.ppd bizhub C368 series (C368/C308/C258/C287/C227) (1) - KMbeuC759ux.ppd bizhub C759 series (C759/C659/C658/C558/C458/C368/C308/C358/C258/C287/C227/ C3851/C3851FS/C3351) - KMbeuC360iux.ppd bizhub C360i series (C360i/C300i/C250i/C4050i/C3350i/C4000i/C3300i/C3320i) (2) - KMbeuC650iux.ppd bizhub C650i series (C650i/C550i/C450i/C360i/C300i/C250i/C4050i/C3350i/C4000i/ C3300i/C3320i) (2) - KMbeuC750iux.ppd KMbeuC3850ux.ppd bizhub C750i C3850 series (C750iC3350/C650i/C550i/C450i/C360i/C300i/C250i/C4050i/C3350i/C4000i/ C3850) - KmbeuC3851ux.ppd bizhub C3851 series (C3351/C3851/C8351FS) (1) - KMbeu4750ux.ppd bizhub 4750 series (4050/4750) - KMbeu4752ux.ppd bizhub 4752 series (4752/4052) - KMbeu5020iux.ppd bizhub 5020i series (5020i/5000i/4020i/4000i) - KMbeuWPHux.ppd Workplace Hub WPH - KMbeuC35ux.ppd bizhub C35 (only with special firmware)
Appears in 1 contract
Sources: User Guide
Security Considerations. With the printer driver encryption setting, the passwords used for Authentication, Account Track and Secure Print will be encrypted before they are embedded in the print data. This does not secure the print data itself and it is still be possible to capture and read the print data (e.g. using a network sniffer). For secure transport, it is recommended to use a secure printing protocol (IPP over SSL) or secure the whole communication with the printer by using IPsec. Printing with SafeQ may require different user name to be send with the print data, other than the Linux systems user name. Required settings: Output Method ⮚ Output Method = SafeQ ⮚ SafeQ User [text of 1 to 30 characters] PSES requires a different authentication method. Required settings: User Authentication ⮚ User Authentication = PSES ⮚ User Name ⮚ Password … for applications that do not support custom input fields in their printer driver dialog. The filter contains additional code to read from a settings file named KMdrv.txt which is located in the user’s home folder. It is expected that the home folder name matches the username which is transferred to CUPS. To enable this function the filter (▇▇▇▇▇▇▇▇▇▇.▇▇) needs to be modified. Following lines need to be changed and verified: # my $usesettingsfile=1; # my $homefolderspath="/home"; Within the settings file following settings can be defined: • OutputMethod • SecurePrintID • SecurePrintPassword • BoxNumber • BoxFileName • SafeQUser • AccountTrack ▪ DepartmentCode ▪ AccountPassword • Authentication ▪ AuthenticationUsername ▪ AuthenticationPassword • Printer Driver Encryption ▪ EncryptionPassphrase The settings file is an ASCII text file, which contains lines for each setting in the format: option=value For example: to enable Secure Print, with Secure Print ID=secid and password=pass the settings file has to contain these lines. OutputMethod=Secure SecurePrintID=secid SecurePrintPassword=pass Or alternative the output method can be selected in the print dialog, and then only the SecurePrintID and SecurePrintPassword are required to be defined in the file. A sample settings file KMdrv.txt listing all possible parameters is included in this driver package. After modifying the filter file, it might be necessary to restart the CUPS demon (See “Restart the CUPS server”). Modify the PPD file for each printer and add the required value as additional parameter. Depending on the syntax, the additional parameters will be shown different in the printer dialog. The PPD files for the installed printers are located by default in the folder /etc/cups/PPD *KMSecID [SecurePrint ID]/[Displayed Text]: " " This will show the [Displayed Text] in the print dialog, but will use [SecurePrint ID] as value for the filter. This syntax can be used if the real value should be hidden in the print dialog, e.g. for setting passwords in PPD file. *KMSecID [SecurePrint ID]: " " This will use the [SecurePrint ID] for display in the print dialog and as value for the filter. With this syntax, the used value is also the text displayed in the print dialog. Following sample code shows the additional added parameters (lines in red colour) for individual Secure Print ID and password: *% ================================== *% Secure Print ID *% ================================== *OpenUI *KMSecID/Secure Print ID: PickOne *OrderDependency: 10 AnySetup *KMSecID *DefaultKMSecID: None *KMSecID None: " " *KMSecID secid/private: " " *CloseUI: *KMSecID *% Custom PostScript KMSecID option *CustomKMSecID True: " " *ParamCustomKMSecID Username: 1 string 1 16 *% ================================== *% Secure Print password *% ================================== *OpenUI *KMSecPass/Secure Print Password: PickOne *OrderDependency: 10 AnySetup *KMSecPass *DefaultKMSecPass: None *KMSecPass None: " " *KMSecPass pass/private: " " *CloseUI: *KMSecPass *% Custom PostScript KMSecPass option *CustomKMSecPass True: " " *ParamCustomKMSecPass Password: 1 password 1 8 After modifying the PPD, it might be necessary to restart the CUPS demon (See “Restart the CUPS server”). Added parameter: *KMSecID secid/private: " " *KMSecID secid: " " In both cases “secid” will be the value used as SecurePrint ID, but the displayed text is different. Setting will be applied to printers using this driver Setting is only available for to modified printer PPD needs to be modified for each printer. Individual settings for each user. Changes made in the PPD are available for all users. Selections in the print dialog have no influence on the settings defined in the setting file. The customer can select among the different parameters/values defined in the PPD. Easy to handle, each user can modify the settings file and define its own values. Some Linux distributions or CUPS versions do not support reading from a file. So this workaround cannot be used. This workaround only works in local environment not in client-print server environment. For normal user it is difficult to make the changes in the PPD, also root credentials are required for the change. Konica Minolta: - KMbeu423ux.ppd bizhub 423 series (223/283/423/283) - KMbeu652ux.ppd bizhub 652 series (652/602/552/502) - KMbeu554eux.ppd bizhub 554e series (554e/454e/364e/284e/224e) - KMbeu754ux.ppd bizhub 754 series (754/654/754e/654e) - KMbeu958ux.ppd bizhub 958 series (367/287/227/958/808/758/558/458/368/308/658e/558e/458e/368e/308e) - KMbeuC360ux.ppd bizhub C360 series (C220/C280/C360) - KMbeuC652ux.ppd bizhub C652 series (C652/C602/C552/C502) - KMbeuC364ux.ppd bizhub C364 series (C224/C284/C364/C224e/C284e/C364e) - KMbeuC554ux.ppd bizhub C554 series (C554/C454/C554e/C454e) - KMbeu750iux.ppd; bizhub 750iSeries (750i/650i/550i/450i/360i/300i/306i/266i/246i/226i/4750i/4050i/4700i) - KMbeuC754ux.ppd bizhub C754 series (C754/C654/C754e/C654e) - KMbeuC658ux.ppd bizhub C658 series (C658/C558/C458/C368/C308/C258/C287/C227) (1) - KMbeuC368ux.ppd bizhub C368 series (C368/C308/C258/C287/C227) (1) - KMbeuC759ux.ppd bizhub C759 series (C759/C659/C658/C558/C458/C368/C308/C358/C258/C287/C227/ C3851/C3851FS/C3351) - KMbeuC360iux.ppd bizhub C360i series (C360i/C300i/C250i/C4050i/C3350i/C4000i/C3300i/C3320i) (2) - KMbeuC650iux.ppd bizhub C650i series (C650i/C550i/C450i/C360i/C300i/C250i/C4050i/C3350i/C4000i/ C3300i/C3320i) (2) - KMbeuC750iux.ppd bizhub C750i series (C750i/C650i/C550i/C450i/C360i/C300i/C250i/C287i/C257i/C227i/C286i/ C266i/C226i/C4050i/C3350i/C4000i/ C4000i/C3300i/C3320i) - KMbeuC3850ux.ppd bizhub C3850 series (C3350/C3850) - KmbeuC3851ux.ppd bizhub C3851 series (C3351/C3851/C8351FS) (1) - KMbeu4750ux.ppd bizhub 4750 series (4050/4750) - KMbeu4752ux.ppd bizhub 4752 series (4752/4052) - KMbeu5020iux.ppd bizhub 5020i series (5020i/5000i/4020i/4000i) - KMbeuWPHux.ppd Workplace Hub WPH - KMbeuC35ux.ppd bizhub C35 (only with special firmware)
Appears in 1 contract
Sources: User Guide