Konica Minolta CPA 2.0

Last Updated: April 07, 2026

Complete the requirements, and follow the steps below to install the second-generation Control Panel Application (CPA) on a Konica Minolta printer. For a list of supported devices, refer to Supported Printers for Printer Apps.

Installation Requirements

Complete all universal requirements, and ensure functionality prior to CPA setup. Konica Minolta also requires the following:

  • Konica Minolta authorized the installation of the Vasion Print CPA on its devices in the North American, South American, European, and Caribbean regions. The installation fails when attempted in other regions.
  • To confirm which firmware versions Vasion Print supports, refer to the Vasion Print bEST Technology Suite.
    • To locate the local firmware version, enter admin mode, and select Maintenance then ROM Version. The firmware version is the last five digits of the MFP Controller number.
  • The printer must run a compatible function version.
    • To locate the function version, go to the printer's control panel, and go to Menu then Utility then Device Info. This screen should show the function version.
  • Confirm that the printer's regional settings are correct.
  • Ensure that the certificate has Secure Hash Algorithm (SHA)-256 encryption. Refer to the Certificates section below.
  • Configure the network and Web Distributed Authoring and Versioning (WebDAV) settings following the Network Settings section below.

Additional Port Information

CPA installation and uninstallation occur between the Service Client and the printer over TCP 50003.

CPA operation requires two main communication paths:

Communication with WebDAV from the Service Client to the Vasion Print instance over TCP 443.

Everyday print communication occurs from the device to the printer over TCP 9100 or TCP 515 for Line Printer Remote (LPR) queues.

By default Certificate Revocation List (CRL) checks occur over TCP 80 from the Service Client. The installation might fail if the CRL check cannot complete over port 80.

Additional Badge Information

The Konica Minolta CPA supports most rf IDEAS, ELATEC, YSoft, and AU-205H badge reader models. Testing included the following models: rf IDEAS RDR-80581 AKU and RDR-6381 AKO, ELATEC TWN4 MultiTech, YSoft MUS3076, and AU-205H OMNIKEY 5427 G2.

Single Sign-On (SSO)

CPA installation in SSO provider mode requires you to set the printer's Public User Access setting to Restricted.

Certificates

SHA-1 certificates are no longer supported. You need to set a certificate with SHA-256 encryption as default:

  1. Log in to the printer's web interface as an admin.
  2. Go to Security then PKI Settings then Device Certificate Settings.
  3. Select New Registration.
  4. Select Create and install a self-signed Certificate, and select OK.
  5. Complete the certificate information.
  6. From the Encryption Key Type dropdown menu, select RSA-2048_SHA-256.
  7. Select OK.
  8. In the Device Certificate list, set the new certificate as Default, and select OK.

Network Settings

Note that the Konica Minolta user interface (UI) varies across models. The information below describes the general locations in which these settings are typically found. Actual locations might vary.

You might need to restart the multifunction printer (MFP) after adjusting the settings below for them to take effect:

  1. Go to Network then WebDAV Settings then WebDAV Client Settings, and turn on WebDAV TX.
  2. Go to NetworkthenWebDAV SettingsthenWebDAV Server Settings, turn on WebDAV Settings, and set the SSL/Port Settings to use SSL and not a password.
  3. Go to Security then PKI Settings Enable SSL Version Mode Using SSL/TLS. Select Admin Mode and User Mode, and turn on TLS 1.2.
  4. Go to Network then TCP Socket Setting then Use SSL/TLS, and select SSL Only or SSL/TLS.
  5. Go to Network then Open API Settings. Select Enabled for OpenAPI and SSL Only or SSL/TLS for SSL/TLS.
  6. Go to Network then Web Browser Settings, and turn on Web browser.

If the device has a Detail Setting section in Web Browser Setting then Detail Setting, ensure that you turn on only Transport Layer Security (TLS) 1.2. Keep the other Secure Sockets Layer (SSL) and TLS version options turned off.

Multiple Queue Association

Some environments use multiple print queues for the same printer. For example, one queue might use a black-and-white driver profile, while another uses a color profile. This approach enforces printing restrictions based on the profile but can limit printing on devices with the CPA installed.

If the CPA is on a printer with a color profile, black-and-white Secure Release Print jobs sent to that printer do not appear on the CPA because they do not align with the profile attached to the printer object. The same applies to color print jobs sent to a CPA-enabled printer with a black-and-white profile attached.

Consider this behavior before installing the CPA on printers that are linked to multiple printer objects in the Admin Console.

Daylight Saving Time Considerations

On most Konica Minolta MFPs, you can configure the start and end dates for daylight saving time. Certain MFP models come with predefined dates already programmed.

Having the correct date, time, and time zone on your Konica Minolta MFP, including daylight saving time information, is crucial for accurate reporting.

On specific models, timestamps in Vasion Print reports might show incorrect hours during the transition periods at the start and end of daylight saving time. To address this issue, you can adjust the MFP's time zone by 1 hour during those particular weeks to maintain accurate timestamps during transitions.

General Authentication Options

The authentication options on the TCP / IP printer determine what the CPA shows to the end user. If you use the same authentication options for all printers, you can use the default settings. If you want to set specific methods by printer, you can choose which printer-specific options you want available for setup on individual printers.

SSO Settings

If you want to use SSO, configure the following setting on the printer:

  1. Go to User Auth/Account Track then Account Track Settings then Print Without Authentication, and select Full Color/Black.

Default Settings

Note that default authentication settings vary, depending on the identity provider (IdP). Lightweight Directory Access Protocol (LDAP) settings differ from settings available for an IdP, such as Okta and Entra ID (Azure AD).

In the Admin Console, go to Tools then Settings then General, and scroll down to the Identity Provider Settings. Follow the appropriate steps below for your provider.

LDAP

Follow these steps:

  1. In the Identity Provider Settings section, select LDAP, and ensure that you correctly configured your LDAP credentials.

    Admin Console showing General settings and Identity Provider Settings section.

  2. Scroll down to the CPA Specific Settings section, and select the options that you want available on the Apps and Printer Apps tabs.

    Admin Console showing General settings and CPA Specific Settings section.

    Note that some options shown here might be unavailable. The Apps and Printer Apps tabs show manufacturer-supported options.

  3. To set PIN settings, do the following:
    1. Set PINs to store in either the Vasion Print database or the Active Directory.
    2. Depending on your selection, enter the field names for the following:
      1. The field name containing UserID.

      2. The field name containing PIN.

        If you select the Database option, the end user must set their PIN in the Self-service Portal. For more details refer to PIN Self-Registration.

  4. To set badge settings, do the following:
    1. Set badges to store in either the Vasion Print database or the Active Directory.

    2. For Active Directory provide the field name that contains the badge ID attribute.

      If you select the Database option, badge registration becomes mandatory. You can individually manage badges on the Badge Management page, or you can Import Badges into Vasion Print. The end user can set up their badge in the Self-service Portal. For more details refer to Badge Self-Registration.

  5. (Optional) Scroll down to the Control Panel Application section.

    1. You can set a default username and password to access the printer's web interface on all printers that have the CPA installed.

      Admin Console showing General settings and Control Panel Application section.

      The credentials must have admin rights to the printer.

    2. In the Default Single Sign On settings section, select one of the following options:
      • Enabled: This option is the default and requires the user to authenticate to access the printer's control panel.
      • Disabled: The user needs to authenticate only when they select the PrinterLogic app on the device's control panel.
  6. Select Save.

IdP

Follow these steps:

  1. In the Identity Provider Settings section, select IdP, and ensure that you correctly configured your IdP credentials.

    Admin Console showing General settings and Identity Provider Settings section.

  2. Scroll down to the CPA Specific Settings section.

    Admin Console showing General settings and CPA Specific Settings section.

    Note that some options shown here might be unavailable. The Apps and Printer Apps tabs show manufacturer-supported options.

  3. Select the options that you want available on the Apps and Printer Apps tabs.

    If you use an IdP, the Control Panel Application (CPA) supports only badge and PIN authentication.

    1. Enable PIN Authentication: Select this option to turn on PIN authentication at the printer level. The IdP database stores the PINs, and you map PIN attributes in the IdP's portal. If you do not use your IdP to manage PINs, you can select the following option:

      1. Enable self registration of PIN for IdPs: Select this option to let the end user register their PIN using the Self-service Portal. The Vasion Print database stores the PIN. For more details refer to PIN Self-Registration.

        Do not select Enable self registration of PIN for IdPs if you have a PIN attribute mapped through your IdP.

    2. Enable Badge Scan Authentication: Select this option to turn on badge authentication at the printer level. The IdP database stores the badge numbers and associated user IDs. You map to badge and user ID attributes in the IdP's portal. If you do not use your IdP to manage badges, you can select the following option:

      1. Enable managing of badges in PrinterLogic instead of in IdP: Select this option to manage badge numbers in the Vasion Print database. You can register each badge on the Badge Management page, or you can Import Badges into Vasion Print. The end user can also register their badge in the Self-service Portal. For more details refer to Badge Self-Registration.

        If you select Enable managing of badges in PrinterLogic instead of in IdP, Vasion Print ignores any badge mapping configured in the IdP portal.

  4. (Optional) Scroll down to the Control Panel Application section.

    1. You can set a default username and password to access the printer's web interface on all printers that have the CPA installed.

      Admin Console showing General settings and Control Panel Application section.

      The credentials must have admin rights to the printer.

    2. In the Default Single Sign On settings section, select one of the following options:
      • Enabled: This option is the default and requires the user to authenticate to access the printer's control panel.
      • Disabled: The user needs to authenticate only when they select the PrinterLogic app on the device's control panel.
  5. Select Save.

Install the CPA

These steps are for installing the CPA on a single printer using the printer's Apps tab. To install the CPA on multiple printers at once, refer to CPA Manager.

Follow these steps:

  1. From the Admin Console tree structure, select the printer on which you want to install the CPA.
  2. Select the Apps tab.

  3. From the Manufacturer menu, select the printer manufacturer.

  4. Select the Service Client that you want to use to install the CPA.
  5. In the Install Embedded Application section, select the Secure Release option.
  6. Select the checkboxes for any additional apps that you want to install:

Admin Console showing printer object's Apps tab and expanded Manufacturer menu.

Installation Credentials

In the section about credentials, select one of the following:

  • Use default printer administration credentials: Select this option to use the default username and password to access the printer's web interface for all printers. Refer to the IdP section above for more details.

  • Use printer-specific administration credentials: Select this option to use the admin credentials set on each printer.

    The credentials must have admin rights to the printer.

Admin Console showing printer object's Apps tab and section about credentials.

CPA Authentication Options

The options below appear depending on what you select in the IdP settings. Note that authentication features vary depending on the printer manufacturer.

If you use an IdP, the Control Panel Application (CPA) supports only badge and PIN authentication.

The following can appear:

  • Single Sign On: Use this section to lock the printer so that the end user must authenticate before accessing the device's control panel. Select from the following options:

    • Disabled: The device does not require authentication.

    • Enabled as a Provider: The device shows the default Vasion PrintCPA screen, which requires the user to authenticate.

    • Enabled as a Listener: The CPA runs in the background. When the user authenticates using another device app, they can select the PrinterLogic option from the device's control panel.

  • In the CPA Authentication section, select from the following:

    • Enable Username/Password Authentication: This option requires the user to enter their username and password.
    • Enable User ID with PIN Authentication: This option requires the user to enter their user ID and PIN.

    • Enable Badge Scan Authentication: This option requires the user to scan their badge, card, or dongle.

      The first time a user scans their badge, they are prompted for their network credentials.

      Konica Minolta supports only badge scan authentication in SSO provider mode.

      • Require PIN (beta): This option requires the user to enter their PIN after scanning a badge.

        This feature is incompatible if you turn on SSO.

  • Enable extended debug: (Optional) If you turn on this setting, the following become available:

    • Certificates: Use this link to download the Vasion Print certificate for CA.
    • PrinterLogic Control Panel Application manual install URL.

Select Save to start the installation.

Admin Console showing printer object's Apps tab and Single Sign On, CPA Authentication, and "Extended debug" sections.

During the installation process, it is expected behavior for the printer to restart multiple times.

Do the following if installation fails:

  1. Note the error message, and check the Printer Apps logs. For more details refer to Vasion Print Log File Locations.
  2. Review and adjust your configuration to ensure that it meets all requirements.
  3. Select the Try Again button to restart the installation.

Admin Console showing printer object's Apps tab, error message, and Try Again button.

Uninstall the CPA

Follow these steps:

  1. In the Admin Console, select the Apps tab for the printer from which you want to remove the CPA.

  2. Deselect the options in the Install Embedded Application section.

    Admin Console showing printer object's Apps tab and Install Embedded Application section.

  3. Select Save.

Troubleshooting Help