PrinterLogic authenticates users at the printer control panel through IdPs like Entra ID (Azure AD), Okta, Active Directory, and more.

Review the Supported IdPs and configure your identity provider before moving on to the next section.

• Active Directory (AD)-based IdPs (LDAP with Identity Sync and Active Directory Query eXecutor (ADQX)) support username / password, badge, and PIN authentication at the CPA.
• Cloud-based IdPs (Entra ID (Azure AD), Okta, Google Identity, etc.) support only badge and PIN authentication at the CPA.

For steps to set up attributes in your IdP, refer to Badge & PIN Management and the section's subtopics.

Confirm your users provisioned into PrinterLogic.

1. In the Admin Console, go to Tools Identity Management or Tools Identities, depending on which features are turned on.
2. Confirm that your provisioned users appear in the list.
3. Select a user and verify that the badge or PIN appears.

Users in the Identity Management table can sign in to the Self-service Portal and the Agent.

This section covers configuring a Service Agent, which installs Vasion apps and features on a printer, like Direct Secure Release, Copy / Scan Tracking, and more.

If you already have a configured Service Agent, still review the requirements and steps below before continuing to the next sections.

Device Requirements

Review the following requirements:

• Device:
  • Windows 10 or 11 and Server 2016, 2019, 2022, or 2025.
    • Visual C++ Redistributable for Visual Studio 2015-2022 package or later.
      • You must install both the x86 and x64 redistributable packages. You can download these packages from the Windows Download Center.
      • The Service Agent cannot be a Windows device using an ARM processor.
  • macOS with an Intel processor.
  • Ubuntu Long Term Support (LTS) 22.04, 24.04, or 26.04.
• Dual-core processor.
• 20 GB of available hard drive space.
• 8 GB of RAM.
• PrinterLogic Agent installed and authorized.
• The device, such as server, virtual machine, or workstation, must have network access to target printers.
• The device must remain powered on because shutting it down stops all services.

Additional CPA Requirements

The number of printers with the CPA An app installed on a compatible multifunction device (MFD) that aids in the release of held print jobs, supports authentication for secure printing, and provides simple scanning functionality. installed that a single Service Agent or Independent Service Manager (ISM) can support depends on the device's resources and operating system (OS). Windows and Linux devices that follow the CPA requirements below support around 1,000 printers. If you have a large environment with 1,000 or more printers using the CPA, consider adding an additional Service Agent or ISM.

Requirements for the CPA Printer Apps service include the following:

• The device running the Printer Apps service must be on the same network as the printers it manages.
• For every 100 printers, add an additional 2 GB of RAM to the minimum listed above.
• If your environment uses Single Sign-On (SSO), monitor RAM usage and increase the RAM as needed to handle increased memory usage during check-ins.
• On macOS and Linux, the Service Agent running the PrinterLogicServicePrinterApp.exe service must have OpenSSL 3.5 or later installed. On Windows, the Service Agent installation already includes this requirement, so no separate installation is needed. For more details refer to OpenSSL Documentation.

For more details refer to Service Agents.

You must install and authorize the Agent on the device acting as your Service Agent before you define it in the Admin Console.

If the Agent is already installed and authorized on this device, you can mark this step complete and move on.

For more details refer to Install the Agent & Web Extension.

Follow these steps to create a new Service Agent:

1. Sign in to the Admin Console.
2. Select the folder in which you want to place the Service Agent.

3. Select the New button at the top of the tree structure.

   

   1. Alternatively, you can right-click the folder and select New Service Agent.

      

4. In the Name field, give the Service Agent object an identifiable name.
5. In the IP Address or Hostname field, enter the IP address or Fully Qualified Domain Name (FQDN) The complete domain name for a specific device or host on a network, consisting of the hostname, the domain name, and the top-level domain. of the device that hosts the Service Agent.

6. Select Add Service Client.

   

The name can be anything descriptive. For hostnames, use the FQDN, for example printserver01.example.com.

With the Service Agent object created, turn on the Printer Apps service.

Follow these steps:

1. Go to the Service Agent's Printer Apps tab.

2. Select Enable Printer Apps.

   

3. Select Save.
4. Access the device designated as the Service Agent.
5. Use the system tray icon or Start menu to refresh configurations.
6. Open the Task Manager, and select the Details tab.
7. In the Search field, enter printer to locate the Agent services.
8. Confirm that the following services are running:
   1. Agent services, which include VasionClient.exe, PrinterInstallerClient.exe, PrinterInstallerClientInterface.exe, and PrinterInstallerClientLauncher.exe.
   2. PrinterLogicServiceManager.exe.
   3. PrinterLogicServicePrinterApp.exe.

Other active services on the Service Agent also appear.

The folder structure creation for the new service takes a minute. After the Agent creates the folder structure, the service begins running and you can view it in Task Manager or similar management apps.

If the service does not start or does not create the folder structure after 2 minutes, select Reauthorize on the General tab of the Service Agent object, then refresh the Agent on the Service Agent device.

Review the following requirements:

• These are universal requirements. Note that each printer manufacturer has additional requirements that you must review before installation.

• Have admin login access to the printer. Installing the app is equivalent to changing printer settings, which requires login verification.
• The printer should have the latest firmware version.

• Turn on the Printer Apps service on the Service Agent, and confirm that the PrinterLogicServicePrinterApp.exe service is running.

  For Windows Service Agents, install the Visual C++ Redistributable for Visual Studio 2015-2022 package or later. You must install both the x86 and x64 redistributable packages. You can download these packages from the Windows Download Center.

• Confirm that the HTTPS certificate matches the Service Agent device hostname or IP address. For more details refer to Service Agent Setup.
• The Service Agent running the PrinterLogicServicePrinterApp.exe service must have OpenSSL 3.5 or later. Windows and macOS should have OpenSSL by default, but you might need to manually update the version for Ubuntu.
• Turn on Simple Network Management Protocol (SNMP) status monitoring. For more details refer to SNMP Status Monitoring.
• All devices must be able to reach the Domain Name System (DNS) server and resolve names.

Identity & Authentication

• Active Directory: LDAP domain with Identity Sync configured.
• IdP: Users must have email addresses assigned. CPA authentication fails without them.

Certificates

• If you use self-signed certificates, verify that the root Certificate Authority (CA) is installed on the printer. Some manufacturers have additional certificate requirements.

Each printer manufacturer might include additional installation steps for the CPA. Keep the manufacturer topic open during the installation process.

Do not skip this step. Manufacturer-specific requirements might include additional firmware settings, certificate configurations, or printer-side setup that you must complete before the CPA can install successfully.

Review the port requirements closely in your manufacturer's documentation. There are specific ports that must be open between the Service Agent and the printer for installation and operation to succeed.

Manufacturer CPA Topics

Select the topic for your manufacturer:

• Canon CPA 2.0.
• Epson CPA 2.0.
• Fujifilm CPA 2.0.
• Fuji Xerox CPA 2.0.
• HP CPA 2.0.
• Konica Minolta CPA 2.0.
• Kyocera CPA 2.0.
• Lexmark CPA 2.0.
• Ricoh CPA 2.0.
• Sharp CPA 2.0.
• Toshiba CPA 2.0.
• Xerox CPA 2.0.

The CPA has global settings that apply to each printer. These settings include the default credentials that install the CPA, whether you use Single Sign-On (SSO), and which authentication options users have at the printer, for example, badge authentication, username / password, or User ID and PIN.

Select the appropriate section to set up or review your authentication settings before moving on to the next steps.

• Username & Password
• User ID & PIN
• Badge Scan

Users sign in with their network credentials or the same credentials they use to sign in to the device. This method requires no additional setup beyond your LDAP Identity Sync configuration since it uses the credentials already defined there.

To verify this LDAP option:

1. In the Identity Provider Settings section, select LDAP.

   

2. Scroll down to the CPA Specific Settings section and turn on Enable Username/Password Authentication.

   

3. Select Save in the upper-right corner.

PIN authentication requires the end user to enter a User ID and PIN at the CPA.

LDAP Settings

Follow these steps:

1. In the Identity Provider Settings section, select LDAP.

   

2. In the CPA Specific Settings section, select Enable PIN Authentication with UserID.

   

3. Select the PIN storage option:
   1. Database: Enter The field name containing UserID.
   2. Active Directory: Enter The field name containing UserID and The field name containing PIN.
4. Select Save in the upper-right corner.

If you select the Database option, users set their PIN in the Self-service Portal. For more details refer to PIN Self-Registration.

IdP Settings

Follow these steps:

1. In the Identity Provider Settings section, select IdP.

   

2. In the Control Panel Application (CPA) Authentication section, select Enable PIN Authentication.

   

3. If you do not use your IdP to map and manage PINs, select Enable self registration of PIN for IdPs.
4. Select Save in the upper-right corner.

Do not select Enable self registration of PIN for IdPs if you already have a PIN attribute mapped through your IdP.

If you select the Enable self registration of PIN for IdPs option, users set their PIN in the Self-service Portal. For more details refer to PIN Self-Registration.

Badge scan authentication requires the end user to scan a badge, card, or dongle at the CPA. For LDAP, the first time users scan their badge, the CPA prompts them for their network credentials.

LDAP Settings

Follow these steps:

1. In the Identity Provider Settings section, select LDAP.

   

2. Scroll down to the CPA Specific Settings section, and select Enable Badge Scan Authentication.

   

3. Select whether to store badges in the Database or pull them from Active Directory. For AD, provide the field name that contains the badge ID attribute.
4. Select Save in the upper-right corner.

If you select the Database option, badge registration becomes mandatory.

Register badges in one of the following ways:

• Manage and import badges using the PrinterLogic Badge Management page.
• Have users set up their badge in the Self-service Portal. For more details refer to Badge Self-Registration.

IdP Settings

Follow these steps:

1. In the Identity Provider Settings section, select IdP.

   

2. In the Control Panel Application (CPA) Authentication section, select Enable Badge Scan Authentication.

   

3. If you do not use your IdP to map and manage badges, select Enable managing of badges in PrinterLogic instead of in IdP.
4. Select Save in the upper-right corner.

Do not select Enable managing of badges in PrinterLogic instead of in IdP if you already have a badge attribute mapped through your IdP.

If you select the Enable managing of badges in PrinterLogic instead of in IdP option, users set their badge in the Self-service Portal. For more details refer to Badge Self-Registration.

Global Install Credentials, Security, & SSO

Go to the Control Panel Application section on Tools Settings General to set global installation credentials if the username and password to access the printer's UI are the same. Adjust credentials per printer on the Apps tab or through the CPA Manager.

The Control Panel Application section also includes the global settings for SSO and the Enable higher security setting. Most of the CPA 2.0 apps support SSO with an IdP. With SSO, you can choose Provider or Listener mode.

Review the following information:

• In Provider mode you can lock the printer so that a user must authenticate before they can access the printer's control panel.
• In Listener mode PrinterLogic listens for when another app acting as the SSO provider authenticates a user and passes that user information to the CPA. The user can then select PrinterLogic on the control panel.
• To review and understand the Enable higher security options and impact, refer to Transport Layer Security (TLS) Settings.

To set global installation credentials or turn on SSO or higher security:

1. Go to the Control Panel Application section.

2. Use the Username and Password fields to set the global installation credentials.

   The credentials must have admin rights to the printer.

3. Turn SSO on or off using the Enabled and Disabled options.

   

4. Turn on higher security using the Enable higher security checkbox.
5. Select Save in the upper-right corner.

With requirements and authentication settings complete, install the Secure Release Print CPA. This app lets users release held jobs at the device.

These steps are for installing the CPA on a single printer using the printer's Apps tab. To install the CPA on multiple printers at once, refer to CPA Manager.

Review each feature's requirements before you install it. Some features listed require additional licensing and may not appear as options.

Installation Credentials

The credentials must have admin rights to the printer.

CPA Authentication Options

The options below appear depending on what you select in the CPA Specific Settings section. Note that authentication features vary depending on the printer manufacturer.

The CPA supports only badge and PIN authentication for cloud IdPs.

The installation process might trigger a device restart once complete.

Install the App