Enable IPPS (Internet Printing Protocol in HTTPS)?

Requirements #

• Genius Server installation
• for IPPS printing to a device, trustStore with a CA certificate used to sign the device certificates
• for IPPS Server, keyStore with a server sertificate

Objective #

• enable Genius Server to receive print jobs via IPPS
• enable Genius Server to send print jobs to a device via IPPS

Solution #

• configure keyStore for IPPS in printing section, currently not managed by the general certificate menu
• enable IPPS server
• verify that CA certificate used to sign the device certificates is stored in general trustStore
• switch one test device from lpr to IPPS
• switch default printing protocol to IPPS

Example #

IPPS Server #

• right click Genius CDDS Server Tools and start as administrator
• access configuration and switch to advanced mode
• access printing, IPPS Server
• configure the keyStore, password and Keystore cert alias
  In most cases the target configuration should be similar to the keyStore setup described in this FAQ
• Save changes and restart Genius Server service
• create a IPPS connection and send a test print job to Genius Server
  (add printer, select a shared printer by name)
  note: on some clients the windows feature ipp print client has to be installed to perform this test
• login on admin web and access, admin, Print management, Job management, pull-printing to confirm if the job was successfully received

IPPS printing #

• right click Genius CDDS Server Tools and start as administrator
• access MyModule, device, Spooling
• the print strategy will save the default print strategy to a device type on creation of the device in the Genius Server database. Typically this is done on the autodetection or first login (default lpr)
• IPP spooling, in this section the ipp and ipps url suffixes can be altered. These suffixes are stored in the device type on device creation.
  The suffixes will be added to the printer hostname when a spooling attempt to a device is made
• To send a job via IPPS to a device the Genius Server will act as SSL client and needs to trust the SSL Server (the device)
• if no general trustStore configuration has been done Ipps ignore certificate can be used for initial testing
• in a production environment it is recommended to import the CA certificate used to sign the device certificates in the trustStore of Genius Server, see this FAQ.
• restart Genius Server sevice after configuration changes have been made
• before changing the overall print strategy, a test device should be switched for testing purposes
• access admin web, Device management, devices
• open the test device and edit the device details
• set print protocol to ipps
  
• print a job to pull-printing, login on the device and try to print it
• if devices are device types already existed at the time of the IPPS migration, it is necessary to change
  • the global print protocol as mentioned above
  • the print protocol already assigned to previously detected device-type
    this can be done in admin web, device management, asset, device type
  • after this change a new device should show “IPPS (inherted)”

You can also find more information on this point in our product documentation.