Toshiba CPA 2.0

Last Updated: May 07, 2026

Complete the requirements, and follow the steps below to install the second-generation Control Panel Application (CPA) on a Toshiba printer. For a list of supported devices, refer to Supported Printers for Printer Apps.

Installation Requirements

Complete all universal requirements, and ensure functionality prior to CPA setup. Toshiba also requires the following:

  • Firmware version SY0W1700 or later is recommended. The installation process uses Vasion Output service application programming interfaces (APIs) that might not be included in older firmware, which can cause the installation to fail on Toshiba devices.
  • Turn on Secure Sockets Layer (SSL) or Transport Layer Security (TLS) in the printer's web interface by going to Administration then Setup then Network then HTTP. For the Enable SSL/TLS option, select Enable.
  • Set the IP Address or Hostname field on the Service Client's General tab to the fully qualified domain name (FQDN) of the Service Client host. Using an IP address in this field causes CPA functionality issues.
  • All devices, including the Service Client, printers, etc., must be allowed to reach the Domain Name System (DNS) and resolve names.

Additional Port Information

CPA installation and uninstallation occur between the Service Client and the printer over TCP ports 10443, 49629, and 49630.

CPA operation requires two main communication paths:

Everyday print communication occurs from the device to the printer over TCP 9100 or TCP 515 for Line Printer Remote (LPR) queues.

Communication for Simplified Scanning features occurs over TCP 50083 between the printer and the Service Client.

By default Certificate Revocation List (CRL) checks occur over TCP 80 from the Service Client. The installation might fail if the CRL check cannot complete over port 80.

USB Badge Reader Settings

If you use a USB badge reader, turn on the keyboard emulation.

Turn On the Keyboard Emulation

Follow these steps:

  1. Press and hold the reset and start buttons simultaneously to restart the device. Release the buttons when they light up.
  2. Enter "#1048#" as the password.
  3. Now that the device is in service mode, select 08 Settings Mode, and select the Next button.
  4. Select the Classic button at the top of the screen.
  5. Enter the value "3500." Then select the Start button.
  6. Set the value to "60001." Then select the OK button.
  7. Restart the device.

Simplified Scanning Settings

If you use Scan To features, configure the Remote Scan / WS-Scan option:

  1. Go to User Management then Role Management then Guest then Scan Function.
  2. Set the Remote Scan / WS-Scan option to Pull.
  3. Set the Guest User Profile to Available.

If you use Scan To features, you must turn on SSL or TLS in the printer's web interface:

  1. Go to Administration then Setup then Network then WSD.
  2. For the Enable SSL / TLS option, select Enable.

General Authentication Options

The authentication options on the TCP / IP printer determine what the CPA shows to the end user. If you use the same authentication options for all printers, you can use the default settings. If you want to set specific methods by printer, you can choose which printer-specific options you want available for setup on individual printers.

Default Settings

Note that default authentication settings vary, depending on the identity provider (IdP). Lightweight Directory Access Protocol (LDAP) settings differ from settings available for an IdP, such as Okta and Entra ID (Azure AD).

In the Admin Console, go to Tools then Settings then General, and scroll down to the Identity Provider Settings. Follow the appropriate steps below for your provider.

LDAP

Follow these steps:

  1. In the Identity Provider Settings section, select LDAP, and ensure that you correctly configured your LDAP credentials.

    Admin Console showing General settings and Identity Provider Settings section.

  2. Scroll down to the CPA Specific Settings section, and select the options that you want available on the Apps and Printer Apps tabs.

    Admin Console showing General settings and CPA Specific Settings section.

    Note that some options shown here might be unavailable. The Apps and Printer Apps tabs show manufacturer-supported options.

  3. To set PIN settings, do the following:
    1. Set PINs to store in either the Vasion Print database or the Active Directory.
    2. Depending on your selection, enter the field names for the following:
      1. The field name containing UserID.

      2. The field name containing PIN.

        If you select the Database option, the end user must set their PIN in the Self-service Portal. For more details refer to PIN Self-Registration.

  4. To set badge settings, do the following:
    1. Set badges to store in either the Vasion Print database or the Active Directory.

    2. For Active Directory provide the field name that contains the badge ID attribute.

      If you select the Database option, badge registration becomes mandatory. You can individually manage badges on the Badge Management page, or you can Import Badges into Vasion Print. The end user can set up their badge in the Self-service Portal. For more details refer to Badge Self-Registration.

  5. (Optional) Scroll down to the Control Panel Application section.

    1. You can set a default username and password to access the printer's web interface on all printers that have the CPA installed.

      Admin Console showing General settings and Control Panel Application section.

      The credentials must have admin rights to the printer.

    2. In the Default Single Sign On settings section, select one of the following options:
      • Enabled: This option is the default and requires the user to authenticate to access the printer's control panel.
      • Disabled: The user needs to authenticate only when they select the PrinterLogic app on the device's control panel.
  6. Select Save.

IdP

Follow these steps:

  1. In the Identity Provider Settings section, select IdP, and ensure that you correctly configured your IdP credentials.

    Admin Console showing General settings and Identity Provider Settings section.

  2. Scroll down to the CPA Specific Settings section.

    Admin Console showing General settings and CPA Specific Settings section.

    Note that some options shown here might be unavailable. The Apps and Printer Apps tabs show manufacturer-supported options.

  3. Select the options that you want available on the Apps and Printer Apps tabs.

    If you use an IdP, the Control Panel Application (CPA) supports only badge and PIN authentication.

    1. Enable PIN Authentication: Select this option to turn on PIN authentication at the printer level. The IdP database stores the PINs, and you map PIN attributes in the IdP's portal. If you do not use your IdP to manage PINs, you can select the following option:

      1. Enable self registration of PIN for IdPs: Select this option to let the end user register their PIN using the Self-service Portal. The Vasion Print database stores the PIN. For more details refer to PIN Self-Registration.

        Do not select Enable self registration of PIN for IdPs if you have a PIN attribute mapped through your IdP.

    2. Enable Badge Scan Authentication: Select this option to turn on badge authentication at the printer level. The IdP database stores the badge numbers and associated user IDs. You map to badge and user ID attributes in the IdP's portal. If you do not use your IdP to manage badges, you can select the following option:

      1. Enable managing of badges in PrinterLogic instead of in IdP: Select this option to manage badge numbers in the Vasion Print database. You can register each badge on the Badge Management page, or you can Import Badges into Vasion Print. The end user can also register their badge in the Self-service Portal. For more details refer to Badge Self-Registration.

        If you select Enable managing of badges in PrinterLogic instead of in IdP, Vasion Print ignores any badge mapping configured in the IdP portal.

  4. (Optional) Scroll down to the Control Panel Application section.

    1. You can set a default username and password to access the printer's web interface on all printers that have the CPA installed.

      Admin Console showing General settings and Control Panel Application section.

      The credentials must have admin rights to the printer.

    2. In the Default Single Sign On settings section, select one of the following options:
      • Enabled: This option is the default and requires the user to authenticate to access the printer's control panel.
      • Disabled: The user needs to authenticate only when they select the PrinterLogic app on the device's control panel.
  5. Select Save.

Install the CPA

These steps are for installing the CPA on a single printer using the printer's Apps tab. To install the CPA on multiple printers at once, refer to CPA Manager.

Follow these steps:

  1. In the Admin Console tree structure, select the Service Client that you want to run the app service.

  2. On the General tab, enter the FQDN in the IP Address or Hostname field, and then select Save.

    Using an IP address in this field causes CPA functionality and installation issues. Use only an FQDN for the Service Client.
  3. Return to the tree structure, and select the printer on which you want to install the CPA.
  4. Select the Apps tab.

  5. From the Manufacturer menu, select the printer manufacturer.

    Admin Console showing printer object's Apps tab and expanded Manufacturer menu.

  6. Select the Service Client that you want to use to install the CPA.

  7. In the Install Embedded Application section, select the Secure Release option.

    Admin Console showing printer object's Apps tab and Install Embedded Application section.

  8. Select the checkboxes for any additional apps that you want to install:

After installation the device goes to sleep as part of the deployment process. The device restarts after installation completes. The MDS settings configuration can take 5 or more minutes prior to start-up. Until the app is completely installed, error messages might appear on the screen.

Installation Credentials

In the section about credentials, select one of the following:

  • Use default printer administration credentials: Select this option to use the default username and password to access the printer's web interface for all printers. Refer to the IdP section above for more details.

  • Use printer-specific administration credentials: Select this option to use the admin credentials set on each printer.

    The credentials must have admin rights to the printer.

Admin Console showing printer object's Apps tab and section about credentials.

CPA Authentication Options

The options below appear depending on what you select in the IdP settings. Note that authentication features vary depending on the printer manufacturer.

If you use an IdP, the Control Panel Application (CPA) supports only badge and PIN authentication.

The following can appear:

  • Single Sign On: Use this section to lock the printer so that the end user must authenticate before accessing the device's control panel. Select from the following options:
    • Disabled: The device does not require authentication.
    • Enabled as a Provider: The device shows the default Vasion Print CPA screen, which requires the user to authenticate.
    • Enabled as a Listener: The CPA runs in the background. When the user authenticates using another device app, they can select the PrinterLogic option from the device's control panel.
    • Don't Modify Printer Permissions: This option is for only Xerox printers. When you install the CPA, other apps on the home screen are available, which is helpful for certain features, such as guest login. When you uninstall the CPA, the authentication method and user permissions to access other apps on the printer do not change.

  • In the CPA Authentication section, you can select from the following:

    • Enable Username/Password Authentication: This option requires the user to enter their username and password.
    • Enable User ID with PIN Authentication: This option requires the user to enter their user ID and PIN.

    • Enable Badge Scan Authentication: This option requires the user to scan their badge, card, or dongle.

      The first time a user scans their badge, they are prompted for their network credentials.

      • Require PIN (beta): This option requires the user to enter their PIN after scanning a badge.

        This feature is incompatible if you turn on SSO.

  • Enable extended debug: (Optional) If you turn on this setting, the following become available:
    • Certificates: Use this link to download the Vasion Print CA.
    • PrinterLogic Control Panel Application manual install URL.

Select Save to start the installation.

Admin Console showing printer object's Apps tab and Single Sign On, CPA Authentication, and "Extended debug" sections.

During the installation process, it is expected behavior for the printer to restart multiple times.

Do the following if installation fails:

  1. Note the error message, and check the Printer Apps logs. For more details refer to Vasion Print Log File Locations.
  2. Review and adjust your configuration to ensure that it meets all requirements.
  3. Select the Try Again button to restart the installation.

Admin Console showing printer object's Apps tab, error message, and Try Again button.

Uninstall the CPA

Follow these steps:

  1. In the Admin Console, select the Apps tab for the printer from which you want to remove the CPA.

  2. Deselect the options in the Install Embedded Application section.

    Admin Console showing printer object's Apps tab and Install Embedded Application section.

  3. Select Save.

After an uninstall the device is put to sleep as part of the process. The device will reboot after the uninstall is completed.

Troubleshooting Help