Epson CPA 2.0

Last Updated: September 22, 2026

Complete the requirements, and follow the steps below to install the second-generation Control Panel Application (CPA) on an Epson printer. For a list of supported devices, refer to Supported Printers for Printer Apps.

Installation Requirements

Complete all Universal Requirements, and ensure functionality prior to CPA setup. Epson also requires the following:

  • Activate the Epson Open Platform.

Epson devices allow only one embedded app to run at a time.

Additional Port Information

CPA installation and uninstallation occur between the Service Agent and the printer over TCP port 443.

CPA operation requires two main communication paths:

Everyday print communication occurs from the device to the printer over TCP 9100 or TCP 515 for Line Printer Remote (LPR) queues.

By default Certificate Revocation List (CRL) checks occur over TCP 80 from the Service Agent. The installation might fail if the CRL check cannot complete over port 80.

Single Sign-On (SSO)

With SSO Enabled as a Provider, the application icon will not appear on the Home page. To use the Vasion CPA, users must select the Home key to access the application.

Activate the Epson Open Platform

Follow the steps below to activate the Epson Open Platform:

  1. In your preferred browser, go to https://openplatform.epson.biz/license-op/inputInformation.html.
  2. In the Serial Number section, select one of the following:

    • Enter manually: Enter one serial number in the field.

    • Read from text file: Upload serial numbers in bulk, using a text file.

      Epson Open Platform showing Serial Number section.

  3. In the Introduction destination information section, select the country and region.
    1. From the Main use for application dropdown menu, select Other.

    2. Enter "PrinterLogic" in the text field, and then select Next.

      Epson Open Platform showing "Introduction destination information" section.

  4. Confirm that the information is correct, and then select Issue.
  5. Copy the product key, or select Export CSV if you uploaded serial numbers in bulk.
  6. Access the printer's web interface using the device's sign in credentials.
  7. Select the Epson Open Platform tab.
  8. In the Epson Open Platform Version field, select version 1.1.

  9. Enter the product key in the Product Key or License Key field.

    Web interface portal showing Epson Open Platform tab.

  10. Select Save.

General Authentication Options

The authentication options on the TCP / IP printer determine what the CPA shows to the end user. If you use the same authentication options for all printers, you can use the default settings. If you want to set specific methods by printer, you can choose which printer-specific options you want available for setup on individual printers.

Default Settings

Note that default authentication settings vary depending on the identity provider (IdP). Lightweight Directory Access Protocol (LDAP) settings differ from settings available for a cloud IdP, such as Okta and Entra ID (Azure AD).

For provider-specific attribute mapping, refer to LDAP Badge & PIN Attributes, Entra ID (Azure AD) Badge & PIN Attributes, Okta Badge & PIN Attributes, or Google Badge & PIN Attributes.

Cloud IdPs like Entra ID and Okta support badge and PIN authentication. The username and password option is not available.

In the Admin Console, go to Tools then Settings then General, and scroll down to the Identity Provider Settings. Follow the appropriate steps below for your provider.

  • Username & Password
  • User ID & PIN
  • Badge Scan

Users sign in with their network credentials or the same credentials they use to sign in to the device. This method requires no additional setup beyond your LDAP Identity Sync configuration since it uses the credentials already defined there.

To verify this LDAP option:

  1. In the Identity Provider Settings section, select LDAP.

    Admin Console showing General settings and Identity Provider Settings section.

  2. Scroll down to the CPA Specific Settings section and turn on Enable Username/Password Authentication.

    CPA settings showing the different authentication options.

  3. Select Save in the upper-right corner.

CPA Login screen showing "Scan Badge" icon and fields for user sign-in.

PIN authentication requires the end user to enter a User ID and PIN at the CPA.

Follow these steps:

  1. In the Identity Provider Settings section, select LDAP.

    Admin Console showing General settings and Identity Provider Settings section.

  2. In the CPA Specific Settings section, select Enable PIN Authentication with UserID.

    CPA settings showing the different authentication options.

  3. Select the PIN storage option:
    1. Database: Enter The field name containing UserID.
    2. Active Directory: Enter The field name containing UserID and The field name containing PIN.
  4. Select Save in the upper-right corner.

If you select the Database option, users set their PIN in the Self-service Portal. For more details refer to PIN Self-Registration.

Follow these steps:

  1. In the Identity Provider Settings section, select IdP.

    Identity Provider Settings section with the IdP option selected.

  2. In the Control Panel Application (CPA) Authentication section, select Enable PIN Authentication.

    CPA Authentication setting section with options.

  3. If you do not use your IdP to map and manage PINs, select Enable self registration of PIN for IdPs.
  4. Select Save in the upper-right corner.

Do not select Enable self registration of PIN for IdPs if you already have a PIN attribute mapped through your IdP.

If you select the Enable self registration of PIN for IdPs option, users set their PIN in the Self-service Portal. For more details refer to PIN Self-Registration.

CPA Login screen showing "Scan Badge" option and fields for PIN sign-in.

Badge scan authentication requires the end user to scan a badge, card, or dongle at the CPA. For LDAP, the first time users scan their badge, the CPA prompts them for their network credentials.

Follow these steps:

  1. In the Identity Provider Settings section, select LDAP.

    Admin Console showing General settings and Identity Provider Settings section.

  2. Scroll down to the CPA Specific Settings section, and select Enable Badge Scan Authentication.

    CPA settings showing the different authentication options.

  3. Select whether to store badges in the Database or pull them from Active Directory. For AD, provide the field name that contains the badge ID attribute.
  4. Select Save in the upper-right corner.

If you select the Database option, badge registration becomes mandatory.

Register badges in one of the following ways:

Follow these steps:

  1. In the Identity Provider Settings section, select IdP.

    Identity Provider Settings section with the IdP option selected.

  2. In the Control Panel Application (CPA) Authentication section, select Enable Badge Scan Authentication.

    CPA Authentication setting section with options.

  3. If you do not use your IdP to map and manage badges, select Enable managing of badges in PrinterLogic instead of in IdP.
  4. Select Save in the upper-right corner.

Do not select Enable managing of badges in PrinterLogic instead of in IdP if you already have a badge attribute mapped through your IdP.

If you select the Enable managing of badges in PrinterLogic instead of in IdP option, users set their badge in the Self-service Portal. For more details refer to Badge Self-Registration.

CPA Login screen showing "Scan Badge" option and fields for PIN sign-in.

Global Install Credentials, Security, & Single Sign-On (SSO)

Go to the Control Panel Application section on Tools then Settings then General to set global installation credentials if the username and password to access the printer's UI are the same. Adjust credentials per printer on the Apps tab or through the CPA Manager.

The Control Panel Application section also includes the global settings for SSO and the Enable higher security setting. Most of the CPA 2.0 apps support SSO with an IdP. With SSO, you can choose Provider or Listener mode.

Review the following information:

  • In Provider mode you can lock the printer so that a user must authenticate before they can access the printer's control panel.
  • In Listener mode PrinterLogic listens for when another app acting as the SSO provider authenticates a user and passes that user information to the CPA. The user can then select PrinterLogic on the control panel.
  • To review and understand the Enable higher security options and impact, refer to Transport Layer Security (TLS) Settings.

To set global installation credentials or turn on SSO or higher security:

  1. Go to the Control Panel Application section.

  2. Use the Username and Password fields to set the global installation credentials.

    The credentials must have admin rights to the printer.

  3. Turn SSO on or off using the Enabled and Disabled options.

    Admin Console showing General settings and Control Panel Application section.

  4. Turn on higher security using the Enable higher security checkbox.
  5. Select Save in the upper-right corner.

Install the CPA

These steps are for installing the CPA on a single printer using the printer's Apps tab. To install the CPA on multiple printers at once, refer to CPA Manager.

Follow these steps:

  1. From the Admin Console tree structure, select the printer on which you want to install the CPA.
  2. Select the Apps tab.

  3. From the Manufacturer menu, select the printer manufacturer.

  4. Select the Service Agent that you want to use to install the CPA.
  5. In the Install Embedded Application section, select the Secure Release option.
  6. Select the checkboxes for any additional apps that you want to install:
    1. Copy / Scan Tracking.
    2. QR Code Display.
    3. Scan to Storage.
    4. Scan to Email.
    5. Scan to Workflow.

Admin Console showing printer object's Apps tab and expanded Manufacturer menu.

Installation Credentials

If your printers do not share the default username and password, defined on Tools then Settings then General in the Control Panel Application section, follow these steps to set printer-specific credentials:

  1. Go to the Apps tab, Credentials to use when installing PrinterLogic applications on this printer section.
  2. Select Use printer-specific administration credentials.
  3. Enter the admin username and password for that printer.

Admin Console showing printer object's Apps tab and section about credentials.

The credentials must have admin rights to the printer.

CPA Authentication Options

The options below appear depending on what you select in the CPA Authentication settings. Note that authentication features vary depending on the printer manufacturer.

The CPA supports only badge and PIN authentication for cloud IdPs.

For SSO, select from the following options:

  • Disabled: Normal CPA authentication without SSO.
  • Enabled as a Provider: Users authenticate through the CPA screen before accessing apps.
  • Enabled as a Listener: Users authenticate through another SSO provider and the CPA listens in the background and accepts the authorization.

For CPA Authentication, select from one of the options you turned on in the General Authentication Options.

The Extended debug section is for troubleshooting and contains the following:

  • Certificates to download the PrinterLogic CA.
  • PrinterLogic Control Panel Application manual install URL.

Admin Console showing printer object's Apps tab and Single Sign On, CPA Authentication, and "Extended debug" sections.

Start the Installation

With your settings in place, select Save to start the installation.

If the installation fails, do the following:

  1. Note the error message, and check the Printer Apps logs. For more details refer to PrinterLogic Log File Locations.
  2. Review and adjust your configuration to verify that it meets all requirements.
  3. Select the Try Again button to restart the installation.

Admin Console showing printer object's Apps tab, error message, and Try Again button.

The installation process might trigger a device restart once complete.

Uninstall the CPA

Follow these steps:

  1. In the Admin Console, select the Apps tab for the printer from which you want to remove the CPA.

  2. Deselect the options in the Install Embedded Application section.

    Admin Console showing printer object's Apps tab and Install Embedded Application section.

  3. Select Save.

Troubleshooting Help