Offline Secure Release Print (OSRP)

Last Updated: April 07, 2026

With OSRP the user can release a print job from a virtual pull print queue even if the device that sent the print job turned off, entered sleep mode due to low power, entered hibernate mode due to no power, or logged out of a virtual session.

When a user holds a job, the Service Client receives a copy and keeps it in a virtual print queue. When the user releases the job and Virtual Appliance detects that the device Client is offline, the Service Client releases the copy to the printer.

Requirements

Review the following requirements:

  • OSRP supports devices with the Windows, macOS, or Linux operating system (OS).
  • You need at least one Service Client running the OSRP service on a Windows device. For more details refer to Service Client Setup.
    • The OSRP service uses port 31989. Open this port on the Service Client device.
  • The OSRP Service Client must be able to reach the printers over the network. Additional Service Clients might be required if printers are on different networks.
  • OpenSSL must be installed on the Service Client.
  • Configure your identity provider (IdP). For more details refer to Identity Providers (IdPs).
  • Configure Direct Secure Release. For more details refer to Direct Secure Release.

Process Overview

You perform these high-level procedures:

  1. Install OpenSSL.
  2. Turn On the OSRP Settings & Filter.
  3. Turn On the OSRP Service.

1. Install OpenSSL

OpenSSL encrypts held print jobs. Install Win32 OpenSSL v3.3 on the Windows Service Client device that is running the OSRP service:

Follow these steps:

  1. On the Service Client device, go to https://slproweb.com/products/Win32OpenSSL.html.
  2. Select the EXE link to download the file.
  3. Run the downloaded file, and complete the installation process.
  4. Add OpenSSL to the Path variable.
    1. Select the Windows Start menu, and type "path."
    2. Select Edit the system environment variables.
    3. On the Advanced tab, select the Environment Variables button.
    4. In the System Variables section, select Path, and then select Edit.
    5. Select Edit in the window.
    6. Double-click the next available empty line, and enter the path to the OpenSSL bin folder. For example, C:\Program Files (x86)\OpenSSL-Win32\bin.
    7. Select OK.
  5. After you install OpenSSL, restart the device.

2. Turn On the OSRP Settings & Filter

Follow the steps below to turn on OSRP in an environment with Direct Secure Release already configured:

  1. In the Admin Console, go to Tools then Settings then Printing.
  2. In the Pull Printing section, select Enable Offline Secure Release Printing.

  3. Below Select which users/clients will use this feature, select Show Filter.

    Admin Console showing Show Filter button.

  4. Select the Add button.
  5. Select the object type, use the modal to select the object, and then select OK.
  6. Select Save.

Users and groups that you add to the filter can print using OSRP.

Admin Console showing Printing Configuration, "Default per-printer Secure Release settings," and filter.

3. Turn On the OSRP Service

Turn on the OSRP service on the Windows Service Client. The OSRP Service Client must be able to reach printers over the network. Printers on different networks require another Service Client that can reach them.

Follow these steps:

  1. Select the Service Client in the tree structure.
  2. Select the Offline Printing tab.

  3. Select Enable Offline Secure Release Printing.

  4. Select Save.
  5. Access the physical device designated as the Service Client.
  6. Use the system tray icon or Start menu to refresh configurations.
  7. Open the Task Manager, and select the Details tab.
  8. In the Search field, enter "printer" to locate the Client processes.
  9. Confirm that the following services are running:
    1. Client services, which include PrinterInstallerClient.exe, PrinterInstallerClientInterface.exe, and PrinterInstallerClientLauncher.exe.
    2. PrinterLogicServiceManager.exe.
    3. PrinterLogicServiceOfflinePrint.exe.

      Other active services on the Service Client also appear.

Task Manager showing Service Client services running.

Preferred Service Client

Follow the below steps to define the Service Client that users in an IP address range use when printing with OSRP. This configuration is optional but can be helpful in large environments. With an OSRP Service Client selected on the IP address range object, when a user who is in the range prints, the copy of the print job goes to that specific Service Client.

For steps on creating an IP address range object, refer to IP Address Range Objects.

Follow these steps:

  1. In the Admin Console, select the IP address range object.

  2. On the General tab, use the Preferred service client dropdown menu to select the Service Client.

    Admin Console showing "Preferred service client" menu.

  3. Select Save.

Troubleshooting Help