Fuji Xerox CPA 2.0
Last Updated: April 07, 2026
Complete the requirements, and follow the steps below to install the second-generation Control Panel Application (CPA) on a Fuji Xerox printer. For a list of supported devices, refer to Supported Printers for Printer Apps.
Installation Requirements
Complete all universal requirements, and ensure functionality prior to CPA setup. Fuji Xerox also requires the following:
- Use a device running the Windows operating system (OS) to install the CPA.
- If you are using an older supported printer, register the following software keys on the printer to activate every function:
- Authentication customizing kit.
- Solution kit, which is for only DocuCentre.
-
Have embedded web browser version 5.0 or later.
You can find the version on most printers by accessing the printer's web interface by going to App
Web Browser Setup in the Web Applications Version section. - To install the CPA, the printer must be in sleep mode.
-
If you are using an older supported printer and badging with single sign-on (SSO), you must lock the device control panel access.
Go to Permissions
Access Control Device Control Panel Access, and select Locked. - Go to APP Custom Service Settings, and turn on the Custom Service Settings option.
- If you are using an older supported printer, turn on the plug-in setting XCP will be activated after M/C reboot. You might need to log in as the key operator or admin on the control panel and access the System Administrator screen by going to Tools Common Service Settings Plug-in Settings.
- If you use SSO and Pull Print, use one of the following alternative solutions to ensure that Pull Print works correctly:
- Use a Fuji Xerox driver on the pull printer.
- On the multifunction printer (MFP), go to Permissions Access Control Print, and select Unlock.
- Configure badge authentication settings if you use a badge reader.
Additional Port Information
CPA installation and uninstallation occur between the Service Client and the printer over TCP 58501.
CPA operation requires two main communication paths:
- From the printer to the Service Client object over TCP 31988.
- From the printer to the Vasion Print instance, cpp-ui.app.printercloud.com and cpa-api.app.printercloud.com adjusted for your region, over TCP 443.
Everyday print communication occurs from the device to the printer over TCP 9100 or TCP 515 for Line Printer Remote (LPR) queues.
By default Certificate Revocation List (CRL) checks occur over TCP 80 from the Service Client. The installation might fail if the CRL check cannot complete over port 80.
Badge Reader Settings
Do the following if you use badging.
Plug-In and Smart Card Selection Settings
Activate the following:
- IC Card Reader B USB Setup Plugin.
- IC Card Reader B Web Setup Plugin.
- IC Card Reader D.
You can find these configurations by going to System Plug-in Settings.
Go to Permissions Authentication Advanced Settings, and turn on Use of Smart Card.
Set the Smart Card Selection settings:
- From the Plug-in Settings modal, select IC Card Reader B Web Setup Plugin.
- Select the badge types.
- Select Apply.
General Authentication Options
The authentication options on the TCP / IP printer determine what the CPA shows to the end user. If you use the same authentication options for all printers, you can use the default settings. If you want to set specific methods by printer, you can choose which printer-specific options you want available for setup on individual printers.
Default Settings
Note that default authentication settings vary, depending on the identity provider (IdP). Lightweight Directory Access Protocol (LDAP) settings differ from settings available for an IdP, such as Okta and Entra ID (Azure AD).
In the Admin Console, go to Tools Settings General, and scroll down to the Identity Provider Settings. Follow the appropriate steps below for your provider.
LDAP
Follow these steps:
-
In the Identity Provider Settings section, select LDAP, and ensure that you correctly configured your LDAP credentials.
-
Scroll down to the CPA Specific Settings section, and select the options that you want available on the Apps and Printer Apps tabs.
Note that some options shown here might be unavailable. The Apps and Printer Apps tabs show manufacturer-supported options.
- To set PIN settings, do the following:
- Set PINs to store in either the Vasion Print database or the Active Directory.
- Depending on your selection, enter the field names for the following:
- The field name containing UserID.
The field name containing PIN.
If you select the Database option, the end user must set their PIN in the Self-service Portal. For more details refer to PIN Self-Registration.
- To set badge settings, do the following:
- Set badges to store in either the Vasion Print database or the Active Directory.
For Active Directory provide the field name that contains the badge ID attribute.
If you select the Database option, badge registration becomes mandatory. You can individually manage badges on the Badge Management page, or you can Import Badges into Vasion Print. The end user can set up their badge in the Self-service Portal. For more details refer to Badge Self-Registration.
- (Optional) Scroll down to the Control Panel Application section.
You can set a default username and password to access the printer's web interface on all printers that have the CPA installed.
The credentials must have admin rights to the printer.
- In the Default Single Sign On settings section, select one of the following options:
- Enabled: This option is the default and requires the user to authenticate to access the printer's control panel.
- Disabled: The user needs to authenticate only when they select the PrinterLogic app on the device's control panel.
- Select Save.
IdP
Follow these steps:
-
In the Identity Provider Settings section, select IdP, and ensure that you correctly configured your IdP credentials.
-
Scroll down to the CPA Specific Settings section.
Note that some options shown here might be unavailable. The Apps and Printer Apps tabs show manufacturer-supported options.
-
Select the options that you want available on the Apps and Printer Apps tabs.
If you use an IdP, the Control Panel Application (CPA) supports only badge and PIN authentication.
-
Enable PIN Authentication: Select this option to turn on PIN authentication at the printer level. The IdP database stores the PINs, and you map PIN attributes in the IdP's portal. If you do not use your IdP to manage PINs, you can select the following option:
-
Enable self registration of PIN for IdPs: Select this option to let the end user register their PIN using the Self-service Portal. The Vasion Print database stores the PIN. For more details refer to PIN Self-Registration.
Do not select Enable self registration of PIN for IdPs if you have a PIN attribute mapped through your IdP.
-
-
Enable Badge Scan Authentication: Select this option to turn on badge authentication at the printer level. The IdP database stores the badge numbers and associated user IDs. You map to badge and user ID attributes in the IdP's portal. If you do not use your IdP to manage badges, you can select the following option:
-
Enable managing of badges in PrinterLogic instead of in IdP: Select this option to manage badge numbers in the Vasion Print database. You can register each badge on the Badge Management page, or you can Import Badges into Vasion Print. The end user can also register their badge in the Self-service Portal. For more details refer to Badge Self-Registration.
If you select Enable managing of badges in PrinterLogic instead of in IdP, Vasion Print ignores any badge mapping configured in the IdP portal.
-
-
- (Optional) Scroll down to the Control Panel Application section.
You can set a default username and password to access the printer's web interface on all printers that have the CPA installed.
The credentials must have admin rights to the printer.
- In the Default Single Sign On settings section, select one of the following options:
- Enabled: This option is the default and requires the user to authenticate to access the printer's control panel.
- Disabled: The user needs to authenticate only when they select the PrinterLogic app on the device's control panel.
- Select Save.
Install the CPA
These steps are for installing the CPA on a single printer using the printer's Apps tab. To install the CPA on multiple printers at once, refer to CPA Manager.
Follow these steps:
- From the Admin Console tree structure, select the printer on which you want to install the CPA.
- Select the Apps tab.
-
From the Manufacturer menu, select the printer manufacturer.
- Select the Service Client that you want to use to install the CPA.
-
Select the executable download link.
-
After the executable downloads, open and run the Fuji Xerox installer on a Windows OS device.
You must run this executable on a Windows device. Select More Info, and then select Run Anyway on Microsoft Defender.
-
Select PrinterLogic CPA, and then select Next.
-
Complete the Device IP Address / Hostname, Username and Password fields, and select Add.
-
Select the printer, and then select Next.
-
Select Install, and then select Next.
- Select Install.
-
After the CPA installs, select Next.
-
Select Finish.
The installation can take a few minutes, depending on network speed.
-
- Return to the Vasion Print Admin Console, and select the checkboxes for any additional apps that you want to install:
Installation Credentials
In the section about credentials, select one of the following:
- Use default printer administration credentials: Select this option to use the default username and password to access the printer's web interface for all printers. Refer to the IdP section above for more details.
-
Use printer-specific administration credentials: Select this option to use the admin credentials set on each printer.
The credentials must have admin rights to the printer.
CPA Authentication Options
The options below appear depending on what you select in the IdP settings. Note that authentication features vary depending on the printer manufacturer.
If you use an IdP, the Control Panel Application (CPA) supports only badge and PIN authentication.
The following can appear:
- Single Sign On: Use this section to lock the printer so that the end user must authenticate before accessing the device's control panel. Select from the following options:
- Disabled: The device does not require authentication.
- Enabled as a Provider: The device shows the default Vasion Print CPA screen, which requires the user to authenticate.
- Enabled as a Listener: The CPA runs in the background. When the user authenticates using another device app, they can select the PrinterLogic option from the device's control panel.
- Don't Modify Printer Permissions: This option is for only Xerox printers. When you install the CPA, other apps on the home screen are available, which is helpful for certain features, such as guest login. When you uninstall the CPA, the authentication method and user permissions to access other apps on the printer do not change.
-
In the CPA Authentication section, you can select from the following:
- Enable Username/Password Authentication: This option requires the user to enter their username and password.
- Enable User ID with PIN Authentication: This option requires the user to enter their user ID and PIN.
-
Enable Badge Scan Authentication: This option requires the user to scan their badge, card, or dongle.
The first time a user scans their badge, they are prompted for their network credentials.
-
Require PIN (beta): This option requires the user to enter their PIN after scanning a badge.
This feature is incompatible if you turn on SSO.
-
- Enable extended debug: (Optional) If you turn on this setting, the following become available:
- Certificates: Use this link to download the Vasion Print CA.
- PrinterLogic Control Panel Application manual install URL.
Select Save to start the installation.
During the installation process, it is expected behavior for the printer to restart multiple times.
Do the following if installation fails:
- Note the error message, and check the Printer Apps logs. For more details refer to Vasion Print Log File Locations.
- Review and adjust your configuration to ensure that it meets all requirements.
- Select the Try Again button to restart the installation.
Uninstall the CPA
Follow these steps:
- In the Admin Console, select the Apps tab for the printer from which you want to remove the CPA.
- Deselect the options in the Install Embedded Application section.
- Open the Fuji Xerox app that you used to install the CPA.
-
Select PrinterLogic CPA, and then select Next.
-
Complete the Device IP Address / Hostname, Username and Password fields, and select Add.
-
Select the printer, and then select Next.
-
Select Remove, and then select Next.
- Select Remove.
- Select Next.
- Select Finish.
- Return to the Vasion Print Admin Console, and select Save on the Apps tab.
Troubleshooting Help
Is an Identity Provider Configured?
The CPA requires the use of an IdP. This can be LDAP or another IdP such as Entra ID (Azure AD), Okta, etc.
Check the Default Printer Admin Credentials
Are the default printer admin credentials correct?CPA installations can fail if the admin username and password are incorrect. You can resolve this issue by modifying the credentials used for CPA installation. With the Modify option in the CPA Manager, update the credentials for multiple printers as long as they are the same brand. Often, the default admin name and password are the same multiple manufacturers.
Is There a Self-signed Certificate?
At a minimum, the printer requires a self-signed certificate. If an Amazon Root CA 1 certificate is not installed, follow this link to see the steps to obtain the certificate so you can manually install it on the printer.
Is There a Time Difference Between the Service Client and the Printer?
If a certificate did not authorize, it could be because a printer is in a different time zone than the Service Client hosting the Printer Apps. When the Service Client pushes out the CPA application with the certificate, due to the time difference, the certificate may be expired.
You can reach the info page to check the timezone in two ways:
- Log in to the CPA, then tap on the PrinterLogic logo at the top.
- Install the CPA with Extended Debug mode enabled, then tap on the PrinterLogic logo at the top (without the need to log in first).
Check the Network Settings
- Verify that the IP address assigned to the printer is accurate within the Admin Console.
- Ensure that you can successfully ping the printer from the Service Client machine.
Are You Using a Universal Print Driver?
Sometimes printer-specific drivers can cause installation issues for the CPA. Use a universal print driver to ensure a smooth and successful installation.
This is a generic communication error. A few things to check are:
- The Service Client is not listening over port 31988. Update the configuration to allow listening over port 31988.
- The printer does not trust the Vasion Print certificate. Register or upload a new certificate.
Fuji Xerox Specific
In the printer settings, configure the Domain Name within the DNS Configuration settings to see if it resolves.
The Fuji Xerox CPA requires the Customized Login option set and enabled. Normally this happens during the CPA installation. If the option is not visible on the printer, enable the Customized Login option using the printer's Service Mode.
- Log in to Service Mode from the panel on the device.
- Select Tools.
- Select Common Service Settings.
- Select Maintenance / Diagnostics.
- Select the NVM Read / Write option.
- Set the chain-link to 700-497.
- Set the New Value to 0.
- Exit Service Mode and reboot the device.
Once the device reboots:
- Log in to the printer's control panel.
- Navigate to the Login Types settings. The path to these settings may vary by model.
- Select the Customized Login option.
The CPA requires a Service Client to install apps to the printer. Check that the Service Client machine is not shut down or in an error state.
On the machine, open the Task Manager and select the details tab. In the Search field, type "printer" to locate the Client processes.
If neither the PrinterLogicServiceManager.exe or PrinterLogicServicePrinterApp.exe processes are running on the Service Client device, verify the Client installation and / or check the Service Client was installed properly.
Verify the Client Installation
Verify the Client is installed, authorized and pointing to the correct instance. A quick test is to click the system tray icon to open the Self-service Portal. If it opens to the correct URL, you can sign in, and see / install printers from the portal, then the client is authorized.
If you're prompted for an authorization code in the Self-service Portal, see Device Authorization for steps on how to create one.
If the Self-service Portal opens to an incorrect URL, you'll need to set the home URL. See Update the Home URL.
Verify the Service Client Configuration
Navigate to C:\Program Files (x86)\Printer Properties Pro\Printer Installer Client\ServiceHost. and check the following:
If the Service Host folder is not created, check the machine's hostname or IP address and compare with what you entered for the Service Client in the Admin Console.
If the folder is created, check the config folder in it. A token.json file is saved here when the Service Client is authorized.
If the folder is created, but the token.json file is not there, you need to reauthorize the Service Client, see Reauthorization Steps. Please note that the Service Client authorization is different from the Client authorization.
By default, the Visual C++ Redistributable for Visual Studio 2015 (32-bit/64-bit) or newer is typically already installed. However, both the x86 and x64 redistributable packages must be installed on the Service Client to generate the items required for a successful installation. Without the packages, the Service Client cannot initiate the app service. You can find these packages in the Microsoft Download Center.
The CPA requires an email address associated with each IdP user, which it uses as the username when logging in. This scenario occurs when an email address has not been associated with the user within the IdP.
You can find the log file on the Service Client machine at the following path:
Windows:
C:\Program Files (x86)\Printer Properties Pro\Printer Installer Client\ServiceClientLogs\PrinterLogicServicePrinterApp.log
Mac/Linux:
/opt/printerinstallerclient/log/printerlogicserviceprinterapp.log
This issue likely stems from incorrect Authentication / Accounting Type settings located at PermissionsAuthentication and AccountingAuthentication / Accounting Type. When using badging, ensure the setting is configured to Custom and restart the device.
If the installation fails with an InvalidSolutionsKeyError, update the printer's region in the firmware settings.
The CPA can show text in the following languages. For more details refer to Supported Languages.
- Dutch: 0413.
- English: 0409.
- French: 040C.
- German: 0407.
- Italian: 0410.
- Japanese: 0411.
- Polish: 0415.
- Portuguese: 0416.
- Simplified Chinese: 0404.
- Spanish: 040A.
- Swedish: 0409.
- Thai: 041E.
- Turkish: 041F.