Canon CPA 2.0
Last Updated: April 07, 2026
Complete the requirements, and follow the steps below to install the second-generation Control Panel Application (CPA) on a Canon printer. For a list of supported devices, refer to Supported Printers for Printer Apps.
Installation Requirements
Complete all universal requirements, and ensure functionality prior to CPA setup. Canon also requires the following:
- Canon has authorized the installation of the Vasion Print CPA on its devices in the US & LATAM, EMEA, Australia & NZ, and South Asia and India regions. The installation fails when attempted in other regions, including China and Japan.
- Have the Canon Multifunctional Embedded Application Platform (MEAP) web access software on the printer. The Web Connection Kit includes this software and is available from any authorized Canon dealer.
- Have the Auth JAR file, Web JAR file, and license file. You can email canonlicensefile@printerlogic.com for these files. Provide the following:
- Model and serial number of the printer for the installation.
- The printer's geographical location, such as EMEA, APAC, etc.
- To install Simplified Scanning features on Canon devices, use the following:
- Printer Apps v25.0.2457 or later, which you can confirm in the PrinterLogicServiceManager log.
- MEAP Auth JAR v1.1.103 or later, which you can confirm after installing the license file by going to the Enhanced System Application Management section in the printer's web interface and finding the version next to PrinterLogic Auth.
- PrinterLogic MEAP v1.2.16 or later, which you can confirm in the MEAP Application Management section in the printer's web interface after you install the app.
- Ensure that the Canon printer is in production mode, which is usually the default, so that the JAR files work correctly.
- Turn on Transport Layer Security (TLS) 1.2 on the multifunction printer (MFP).
- If you use a USB badge reader to release print jobs, some Canon models require you to turn on the Use MEAP Driver for USB Input Device option in the USB Settings section.
- When updating authentication settings, including single sign-on (SSO), you must restart the printer for the settings to take effect.
Additional Port Information
CPA installation and uninstallation occur between the Service Client and the printer over TCP ports 8000 and 8443.
CPA operation requires two main communication paths:
- From the printer to the Service Client object over TCP 31988.
- From the printer to the Vasion Print instance, cpp-ui.app.printercloud.com and cpa-api.app.printercloud.com adjusted for your region, over TCP 443.
Everyday print communication occurs from the device to the printer over TCP 9100 or TCP 515 for Line Printer Remote (LPR) queues.
By default Certificate Revocation List (CRL) checks occur over TCP 80 from the Service Client. The installation might fail if the CRL check cannot complete over port 80.
Certificates
You must download and install the Vasion Print Certificate Authority (CA) on the printer. The following steps guide you through that process.
Download and Install the CA
Download the Certificate
In the Admin Console, complete the following steps:
- From the tree structure, select the Canon printer on which you want to install the CPA.
- Select the Apps tab.
- Scroll down to the Certificates section, and select Download certificate for CA. Note the location in which you save the certificate for later.
Install the Certificate
Go to the admin screen on the printer, and complete the following steps:
The placement of the configuration options outlined here might vary depending on the printer.
- From the right-side navigation near the top, select Settings/Registration.
- From the Management Settings section in the left-side navigation, select Security Settings.
- In the Security Settings, select Encryption/Key Settings.
- Above the list of installed Secure Sockets Layer (SSL) certificates, select Edit, and then select Register CA certificate.
- Select Install.
- Select Choose File.
- Navigate to the certificate that you downloaded from the Admin Console, and select Open.
- Ensure that the file's name appears beside the Choose File button, and select Start Installation.
- After the CA certificate uploads and installs, the printer should return to the Register CA Certificate screen.
- Select the printerlogic-ca-cert.pem certificate from the list, and then select the Register button.
- Go to Settings/Registration
Security Settings
Encryption/Key Settings
CA Certificate Settings to confirm that the certificate appears in the list.
General Authentication Options
The authentication options on the TCP / IP printer determine what the CPA shows to the end user. If you use the same authentication options for all printers, you can use the default settings. If you want to set specific methods by printer, you can choose which printer-specific options you want available for setup on individual printers.
Default Settings
Note that default authentication settings vary, depending on the identity provider (IdP). Lightweight Directory Access Protocol (LDAP) settings differ from settings available for an IdP, such as Okta and Entra ID (Azure AD).
In the Admin Console, go to Tools
Settings
General, and scroll down to the Identity Provider Settings. Follow the appropriate steps below for your provider.
LDAP
Follow these steps:
-
In the Identity Provider Settings section, select LDAP, and ensure that you correctly configured your LDAP credentials.
-
Scroll down to the CPA Specific Settings section, and select the options that you want available on the Apps and Printer Apps tabs.
Note that some options shown here might be unavailable. The Apps and Printer Apps tabs show manufacturer-supported options.
- To set PIN settings, do the following:
- Set PINs to store in either the Vasion Print database or the Active Directory.
- Depending on your selection, enter the field names for the following:
- The field name containing UserID.
The field name containing PIN.
If you select the Database option, the end user must set their PIN in the Self-service Portal. For more details refer to PIN Self-Registration.
- To set badge settings, do the following:
- Set badges to store in either the Vasion Print database or the Active Directory.
For Active Directory provide the field name that contains the badge ID attribute.
If you select the Database option, badge registration becomes mandatory. You can individually manage badges on the Badge Management page, or you can Import Badges into Vasion Print. The end user can set up their badge in the Self-service Portal. For more details refer to Badge Self-Registration.
- (Optional) Scroll down to the Control Panel Application section.
You can set a default username and password to access the printer's web interface on all printers that have the CPA installed.
The credentials must have admin rights to the printer.
- In the Default Single Sign On settings section, select one of the following options:
- Enabled: This option is the default and requires the user to authenticate to access the printer's control panel.
- Disabled: The user needs to authenticate only when they select the PrinterLogic app on the device's control panel.
- Select Save.
IdP
Follow these steps:
-
In the Identity Provider Settings section, select IdP, and ensure that you correctly configured your IdP credentials.
-
Scroll down to the CPA Specific Settings section.
Note that some options shown here might be unavailable. The Apps and Printer Apps tabs show manufacturer-supported options.
-
Select the options that you want available on the Apps and Printer Apps tabs.
If you use an IdP, the Control Panel Application (CPA) supports only badge and PIN authentication.
-
Enable PIN Authentication: Select this option to turn on PIN authentication at the printer level. The IdP database stores the PINs, and you map PIN attributes in the IdP's portal. If you do not use your IdP to manage PINs, you can select the following option:
-
Enable self registration of PIN for IdPs: Select this option to let the end user register their PIN using the Self-service Portal. The Vasion Print database stores the PIN. For more details refer to PIN Self-Registration.
Do not select Enable self registration of PIN for IdPs if you have a PIN attribute mapped through your IdP.
-
-
Enable Badge Scan Authentication: Select this option to turn on badge authentication at the printer level. The IdP database stores the badge numbers and associated user IDs. You map to badge and user ID attributes in the IdP's portal. If you do not use your IdP to manage badges, you can select the following option:
-
Enable managing of badges in PrinterLogic instead of in IdP: Select this option to manage badge numbers in the Vasion Print database. You can register each badge on the Badge Management page, or you can Import Badges into Vasion Print. The end user can also register their badge in the Self-service Portal. For more details refer to Badge Self-Registration.
If you select Enable managing of badges in PrinterLogic instead of in IdP, Vasion Print ignores any badge mapping configured in the IdP portal.
-
-
- (Optional) Scroll down to the Control Panel Application section.
You can set a default username and password to access the printer's web interface on all printers that have the CPA installed.
The credentials must have admin rights to the printer.
- In the Default Single Sign On settings section, select one of the following options:
- Enabled: This option is the default and requires the user to authenticate to access the printer's control panel.
- Disabled: The user needs to authenticate only when they select the PrinterLogic app on the device's control panel.
- Select Save.
Configure the Printer's Web Interface Portal
You need the locations of the JAR and license files that you obtained for the next steps.
Log in to the printer's web interface by opening a browser and entering the printer's IP address in the address bar.
Install the Web JAR File
Follow these steps:
-
From the right-side navigation in Management Tools, select Service Management Service.
- Select Install MEAP Application from the left-side navigation.
- Select the Choose File button for the Application File Path field.
- Locate the PrinterLogic Web JAR file, and then select Open.
- Select the Choose File button for the License File Path field.
- Locate the license file for the current printer's serial number, and then select Open.
- For the Operation to Perform field, select Install and Start.
- Select the Install button.
Install the Auth JAR File
Follow these steps:
-
From the right-side navigation in Management Tools, select Service Management Service.
-
Select Enhanced System Application Management from the left-side navigation.
-
In the Install Enhanced System Application/License section, select the Choose File button for the Enhanced System Application File Path field.
- Locate the PrinterLogic Auth JAR file, and then select Open.
-
Select the Choose File button for the License File Path field.
- Locate the license for the current printer's serial number, and then select Open.
- For the Operation to Perform field, select Install and Start or Enable.
- Select the Install button.
- Select Yes.
- Select To Portal link at the top.
- On the Portal page, select Settings/Registration from the right-side navigation.
- Select Restart Device from the left-side navigation.
Install the CPA
These steps are for installing the CPA on a single printer using the printer's Apps tab. To install the CPA on multiple printers at once, refer to CPA Manager.
Follow these steps:
- From the Admin Console tree structure, select the printer on which you want to install the CPA.
- Select the Apps tab.
-
From the Manufacturer menu, select the printer manufacturer.
- Select the Service Client that you want to use to install the CPA.
- In the Install Embedded Application section, select the Secure Release option.
- Select the checkboxes for any additional apps that you want to install:
Installation Credentials
In the section about credentials, select one of the following:
- Use default printer administration credentials: Select this option to use the default username and password to access the printer's web interface for all printers. Refer to the IdP section above for more details.
-
Use printer-specific administration credentials: Select this option to use the admin credentials set on each printer.
The credentials must have admin rights to the printer.
CPA Authentication Options
The options below appear depending on what you select in the IdP settings. Note that authentication features vary depending on the printer manufacturer.
If you use an IdP, the Control Panel Application (CPA) supports only badge and PIN authentication.
The following can appear:
- Single Sign On: Use this section to lock the printer so that the end user must authenticate before accessing the device's control panel. Select from the following options:
- Disabled: The device does not require authentication.
- Enabled as a Provider: The device shows the default Vasion Print CPA screen, which requires the user to authenticate.
- Enabled as a Listener: The CPA runs in the background. When the user authenticates using another device app, they can select the PrinterLogic option from the device's control panel.
- Don't Modify Printer Permissions: This option is for only Xerox printers. When you install the CPA, other apps on the home screen are available, which is helpful for certain features, such as guest login. When you uninstall the CPA, the authentication method and user permissions to access other apps on the printer do not change.
-
In the CPA Authentication section, you can select from the following:
- Enable Username/Password Authentication: This option requires the user to enter their username and password.
- Enable User ID with PIN Authentication: This option requires the user to enter their user ID and PIN.
-
Enable Badge Scan Authentication: This option requires the user to scan their badge, card, or dongle.
The first time a user scans their badge, they are prompted for their network credentials.
-
Require PIN (beta): This option requires the user to enter their PIN after scanning a badge.
This feature is incompatible if you turn on SSO.
-
- Enable extended debug: (Optional) If you turn on this setting, the following become available:
- Certificates: Use this link to download the Vasion Print CA.
- PrinterLogic Control Panel Application manual install URL.
Select Save to start the installation.
During the installation process, it is expected behavior for the printer to restart multiple times.
Do the following if installation fails:
- Note the error message, and check the Printer Apps logs. For more details refer to Vasion Print Log File Locations.
- Review and adjust your configuration to ensure that it meets all requirements.
- Select the Try Again button to restart the installation.
Uninstall the CPA
Follow these steps:
- In the Admin Console, select the Apps tab for the printer from which you want to remove the CPA.
- Deselect the options in the Install Embedded Application section.
- Select Save.
-
After the uninstallation completes, log in to the printer's web interface, and select Service Management Service from the right-side navigation.
- Select MEAP Application Management from the left-side navigation.
- Select Stop for the PrinterLogic app.
-
Select the PrinterLogic link.
-
In the License Information section, select License Management.
-
In the Disable License File section, select Disable, and confirm that you want to turn off the license.
-
Select the Delete button, and confirm that you want to remove the license file.
-
Navigate back to the MEAP Application Management section.
-
Next to the PrinterLogic app, select Uninstall, and confirm that you want to uninstall the app.
- From the left-side navigation in System Management, select Enhanced System Application Management.
-
In the Login Service section, expand the User Authentication line item.
-
For the PrinterLogic Auth line item, select Uninstall.
-
Select the To Portal link at the top.
- On the Portal page, select Settings/Registration from the right-side navigation.
- Select Restart Device from the left-side navigation.
After the device restarts, all references of Vasion Print CPA are removed from the printer.
Troubleshooting Help
Is an Identity Provider Configured?
The CPA requires the use of an IdP. This can be LDAP or another IdP such as Entra ID (Azure AD), Okta, etc.
Check the Default Printer Admin Credentials
Are the default printer admin credentials correct?CPA installations can fail if the admin username and password are incorrect. You can resolve this issue by modifying the credentials used for CPA installation. With the Modify option in the CPA Manager, update the credentials for multiple printers as long as they are the same brand. Often, the default admin name and password are the same multiple manufacturers.
Is There a Self-signed Certificate?
At a minimum, the printer requires a self-signed certificate. If an Amazon Root CA 1 certificate is not installed, follow this link to see the steps to obtain the certificate so you can manually install it on the printer.
Is There a Time Difference Between the Service Client and the Printer?
If a certificate did not authorize, it could be because a printer is in a different time zone than the Service Client hosting the Printer Apps. When the Service Client pushes out the CPA application with the certificate, due to the time difference, the certificate may be expired.
You can reach the info page to check the timezone in two ways:
- Log in to the CPA, then tap on the PrinterLogic logo at the top.
- Install the CPA with Extended Debug mode enabled, then tap on the PrinterLogic logo at the top (without the need to log in first).
Check the Network Settings
- Verify that the IP address assigned to the printer is accurate within the Admin Console.
- Ensure that you can successfully ping the printer from the Service Client machine.
Are You Using a Universal Print Driver?
Sometimes printer-specific drivers can cause installation issues for the CPA. Use a universal print driver to ensure a smooth and successful installation.
This is a generic communication error. A few things to check are:
- The Service Client is not listening over port 31988. Update the configuration to allow listening over port 31988.
- The printer does not trust the Vasion Print certificate. Register or upload a new certificate.
Fuji Xerox Specific
In the printer settings, configure the Domain Name within the DNS Configuration settings to see if it resolves.
The CPA requires a Service Client to install apps to the printer. Check that the Service Client machine is not shut down or in an error state.
On the machine, open the Task Manager and select the details tab. In the Search field, type "printer" to locate the Client processes.
If neither the PrinterLogicServiceManager.exe or PrinterLogicServicePrinterApp.exe processes are running on the Service Client device, verify the Client installation and / or check the Service Client was installed properly.
Verify the Client Installation
Verify the Client is installed, authorized and pointing to the correct instance. A quick test is to click the system tray icon to open the Self-service Portal. If it opens to the correct URL, you can sign in, and see / install printers from the portal, then the client is authorized.
If you're prompted for an authorization code in the Self-service Portal, see Device Authorization for steps on how to create one.
If the Self-service Portal opens to an incorrect URL, you'll need to set the home URL. See Update the Home URL.
Verify the Service Client Configuration
Navigate to C:\Program Files (x86)\Printer Properties Pro\Printer Installer Client\ServiceHost. and check the following:
If the Service Host folder is not created, check the machine's hostname or IP address and compare with what you entered for the Service Client in the Admin Console.
If the folder is created, check the config folder in it. A token.json file is saved here when the Service Client is authorized.
If the folder is created, but the token.json file is not there, you need to reauthorize the Service Client, see Reauthorization Steps. Please note that the Service Client authorization is different from the Client authorization.
By default, the Visual C++ Redistributable for Visual Studio 2015 (32-bit/64-bit) or newer is typically already installed. However, both the x86 and x64 redistributable packages must be installed on the Service Client to generate the items required for a successful installation. Without the packages, the Service Client cannot initiate the app service. You can find these packages in the Microsoft Download Center.
The CPA requires an email address associated with each IdP user, which it uses as the username when logging in. This scenario occurs when an email address has not been associated with the user within the IdP.
You can find the log file on the Service Client machine at the following path:
Windows:
C:\Program Files (x86)\Printer Properties Pro\Printer Installer Client\ServiceClientLogs\PrinterLogicServicePrinterApp.log
Mac/Linux:
/opt/printerinstallerclient/log/printerlogicserviceprinterapp.log
If the installation fails with an InvalidSolutionsKeyError, update the printer's region in the firmware settings.
The CPA can show text in the following languages. For more details refer to Supported Languages.
- Dutch: 0413.
- English: 0409.
- French: 040C.
- German: 0407.
- Italian: 0410.
- Japanese: 0411.
- Polish: 0415.
- Portuguese: 0416.
- Simplified Chinese: 0404.
- Spanish: 040A.
- Swedish: 0409.
- Thai: 041E.
- Turkish: 041F.


















