SEH primos User Manual
Hide thumbs Also See for primos:
Table of Contents

Advertisement

Quick Links

User Manual

Advertisement

Table of Contents
loading

Summary of Contents for SEH primos

  • Page 1 User Manual...
  • Page 2 Version: 1.0 Legal Notices SEH Computertechnik GmbH has endeavored to ensure that the information in this documentation is correct. If you detect any inaccuracies please inform us at the address indicated above. SEH Computertechnik GmbH will not accept any liability for any error or omission. The information in this manual is subject to change without notification.
  • Page 3: Table Of Contents

    5.6 How to Manage Drivers in primos........................25 5.7 How to Configure Advanced Print Settings....................27 5.8 How to Maintain or Test a Printer via primos ....................27 5.9 How to Encrypt Print Data Transmission ...................... 28 5.10 How to Control Who Can Print ......................... 28 5.11 How to Print from iOS Devices .........................
  • Page 4 6 Security ............................35 6.1 How to Define the Encryption Level for SSL/TLS Connections............. 35 6.2 How to Control the Access to the primos Control Center ..............36 6.3 How to Manage User Profiles (Access Control)................... 37 6.4 How to Protect primos from Cross-Site Scripting..................39 6.5 How to Control the Access to primos (TCP Port Access Control)............
  • Page 5: General Information

    General Information General Information This chapter contains information concerning the device and the documentation as well as notes about your safety. You will learn how to benefit from your primos and how to operate the device properly. • ’primos’ 2 What Information Do •...
  • Page 6: Primos

    The iOS devices are connected to this Operation network via WLAN. Print jobs are sent from iOS apps with AirPrint™ support to primos via your network. primos forwards the print job to wired or wireless printers with or without AirPrint™...
  • Page 7: Documentation

    1.2 Documentation Information about the features of your product can be found in the data sheet of your primos. Structure of the The primos documentation consists of the following documents: Documentation User Manual Detailed description of the primos configuration and administration.
  • Page 8: Support And Service

    Command lines are set in Courier font. 'Proper names' Proper names are put in inverted commas 1.3 Support And Service Contact SEH Computertechnik GmbH offers extensive support. If you have any questions, please contact our hotline. Monday – Thursday 8:00 a.m. – 4:45 p.m. Friday 8:00 a.m.
  • Page 9: Your Safety

    AirPrint™ support. Improper Use All uses of the device that do not comply with the primos functionalities described in the documentation are regarded as improper uses. It is not allowed to make modifications to the hardware and software or to try to repair the device.
  • Page 10: Find Ip Address Of Primos

    IP address. After primos has been connected to the network, it Obtain its IP receives an IP address via DHCP. If this is not the case, primos seeks a ZeroConf IP address Address? from the ZeroConf address range (169.254.0.0/16).
  • Page 11: Administration Methods

    What Is the primos can be configured and monitored via the primos Control Center. The primos primos Control Control Center is stored in primos and can be displayed by means of a browser software Center? (Internet Explorer, Firefox, Safari). Security The access to the primos Control Center is protected (37).
  • Page 12  primos has a valid IP address.  Your primos is displayed in the SEH primos App (9). 1. In the list, double-click on your primos.  Your standard browser opens and the primos Control Center is displayed. Structure of the primos Control...
  • Page 13: Administration Via Seh Primos App

    All devices found can be selected and administrated. Installation In order to use the SEH primos App, the program must be installed on a computer with a Windows or Mac OS X operating system. Different installation files are available, depending on the operating system.
  • Page 14: Network Settings

    • ’How to Configure Directory Services’ 13 3.1 How to Configure IPv4 Parameters You can define various IPv4 parameters for an ideal integration of primos into a TCP/IP network. By default, the IP address is assigned dynamically to primos via DHCP. However, you can manually assign a static IP address to primos.
  • Page 15: How To Configure Ipv6 Parameters

    User Manual Network Settings 3.2 How to Configure IPv6 Parameters You can integrate primos into an IPv6 network. What Are the IPv6 (Internet Protocol version 6) is the successor of the more common IPv4. Both Advantages of protocols are standards for the network layer of the OSI model and regulate the IPv6? addressing and routing of data packets via a network.
  • Page 16: How To Configure The Dns

    Every 'n' represents the hexadecimal value of one of the eight 16 bit elements of the address. Router Defines the IPv6 unicast address of the router. primos sends its 'Router Solicitations' (RS) to this router. Prefix length Defines the length of the subnet prefix for the IPv6 address. The value 64 is preset.
  • Page 17: How To Configure Bonjour

    3.5 How to Configure Directory Services You can embed primos into a directory service. Via the directory service user data is managed centrally and can be provided to primos. You can use this to control who can print 28. Note Settings for the Active Directory user login (37) are made independent of the settings...
  • Page 18 Active Directory by making it member of a domain.  A DNS server is configured in primos 12. Requirements  primos was entered with a type A resource record (IPv4 address of the host) on the DNS server used.  A time server is configured in primos 16.
  • Page 19 Embedding primos into an LDAP directory  A DNS server is configured in primos 12. Requirements  primos was entered with a type A resource record (IPv4 address of the host) on the DNS server used.  A time server is configured in primos 16.
  • Page 20: Device Settings

     The descriptions are saved. 4.2 How to Configure the Device Time? You can control the device time of primos via a time server (SNTP server) in the network. A time server synchronizes the time of devices within a network.
  • Page 21 Device Settings  A time server is integrated into the network. Requirements 1. Start the primos Control Center. 2. Select NETWORK – Date/Time. 3. Tick Date/Time. 4. Into the Time server box, enter the IP address or the host name of the time server (The host name can only be used if a DNS server was configured beforehand.)
  • Page 22: Print

    This chapter explains how you set up primos for printing and how you configure enhanced settings for printing. In order to print from iOS devices via primos, you have to create a print queue for the respective printer in primos. For each queue you then define numerous settings (driver, print protocol, access control and much more).
  • Page 23 Parameters Description Driver primos tries to assign correct printer drivers to the printers discovered in the network. color mark following the printer name indicates if a suitable driver was found for the respective printer: - green: a suitable driver was assigned...
  • Page 24: How To Manually Create A Queue

    Loads a printer driver onto primos and assigns it to the queue. If the pre-installed printer drivers do not suffice, you can load a suitable driver onto primos. The driver must be in 'PPD' format. For further information; see: ...
  • Page 25 Defines the printer driver. Upload driver (PPD) Loads a printer driver onto primos and assigns it to the queue. If the pre- installed printer drivers do not suffice, you can load a suitable driver onto primos. The driver must be in 'PPD' format. For further information; see:...
  • Page 26: How To Manage Queues

    User Manual Print 5.3 How to Manage Queues After you have created queues for your network printer in primos, you can edit or delete those queues.  ’Edit queue’ 22 What Do You Want to Do?  ’Delete queue’ 23 Edit queue 1.
  • Page 27: How To View The Job History

    Note A time server (16) must be configured in primos so that the date and time can be displayed correctly. If no time server is configured, the time stamp corresponds to the default time.
  • Page 28: How To Define The Printer Name That Is Displayed On The Ios Devices

    The queue name is defined individually when the queue is created (18/20) and cannot be changed afterwards. AirPrint™ The AirPrint™ identifier is a prefix that marks printers made available via primos on iOS Identifier devices. The AirPrint™ identifier is applied to all queues. It can be changed at any time. The default is 'air '.
  • Page 29: How To Manage Drivers In Primos

    In primos, a suitable printer driver must be installed and assigned to the queue. A big number of printer drivers for the most common printer models is alread installed in primos. In case that the driver required for your printer is not available, you can load and manage drivers on primos.
  • Page 30 Assign Drivers After you have loaded a driver onto primos, you can assign it to a queue. This can be done when creating a queue or later on when editing a queue. • ’How to Search for Printers in the Network’ 18 •...
  • Page 31: How To Configure Advanced Print Settings

    4. Click Download selected drivers.  The drivers are saved to your client in a compressed file. Delete driver  One or more user-defined drivers have been saved in primos 26 /26. 1. Start the primos Control Center. 2. Select PRINTING – Drivers.
  • Page 32: How To Encrypt Print Data Transmission

     The printer action is triggered. 5.9 How to Encrypt Print Data Transmission The print data is sent from the iOS device via primos to the printer. The print data stream can be divided into two ways: • Print data is sent from the iOS device to primos (By default print data is transmitted unencrypted.
  • Page 33 You can add users or user groups to the list. For a large number of users we recommend to create groups in the directory service. Groups are more easy to enter on primos than single users. Print Queues with limited access are marked with the icon on the iOS device.
  • Page 34: How To Print From Ios Devices

    Simply and flexibly print content such as documents and pictures from iOS devices (iPhone, iPad, and so on). To do so, print jobs are sent from iOS apps with AirPrint™ support to primos via your network. primos forwards the print job to the printer for printing.
  • Page 35: How To Print Across Subnets (Wide-Area Airprintâ„¢)

    AirPrint™ uses the Bonjour protocol (13) to find printers and make them available in the network. However, Bonjour is limited to local network segments. You have to set up primos in such a way that searching for and finding printers is possible across network segments. Then you can print from the entire network.
  • Page 36 2. Rightclick on Conditional Forwarders and from the context menu choose New Conditional Forwarder. The dialog New Conditional Forwarder appears. 3. In the DNS Domain box, enter the primos subdomain. 4. In the area IP addresses of the master servers enter in the field IP Address the IPv4 address of primos.
  • Page 37 The primos subdomain can be defined as search domain automatically on all iOS devices using your DHCP server. In order to do so, the primos subdomain is entered on the DHCP server as option 119. As soon as an iOS sends a request to the DHCP server, it will automatically receive the primos subdomain as search domain in the answer.
  • Page 38 User Manual Print To do this, run the command you have received from the SEH support. It has the foll- wing form: netsh dhcp server V4 scope <DHCP range> set optionvalue 119 BYTE <coded primos subdomain> Example: netsh dhcp server V4 scope 10.168.0.0 set optionvalue 119 BYTE 06 70 72 69 6d 6f 73 08 6d 79 64 6f 6d 61 69 6e 03 63 6f 6d 00 The successful execution of the command is confirmed.
  • Page 39: Security

    Depending on their cipher strength (in bit), cipher suites are grouped to form an encryption level. Which cipher suites are supported by primos, i.e. are part of an encryption level, depends on the SSL/TLS protocol used.
  • Page 40: How To Control The Access To The Primos Control Center

    Details page at SSL connection status – Details. 6.2 How to Control the Access to the primos Control Center The web access to the primos Control Center can be secured by selecting the permitted types of connection (HTTP/HTTPS).
  • Page 41: How To Manage User Profiles (Access Control)

     The setting will be saved. 6.3 How to Manage User Profiles (Access Control) The access to the primos is controlled by means of user accounts. You will need a user name and a password to get access to the program.
  • Page 42 5. Into the Active Directory suffix box, enter the suffix preceded by '@' . Example: @Domain. 6. Into the Users having access to this device box, enter the Active Directory users which are to log into the primos Control Center. 7. Enable optionally the encryption of the Active Directory connection. (Recommended) 8.
  • Page 43: How To Protect Primos From Cross-Site Scripting

    6.5 How to Control the Access to primos (TCP Port Access Control) TCP Port Access You can control the access to primos. To do so, all TCP ports on primos can be blocked. Control Network elements that are to have permission to access primos, can be defined as exceptions and excluded from locking.
  • Page 44: How To Use Certificates Correctly

    The port access control is activated until the device is restarted. 7. Check the port access and configurability of primos. Note If primos can no longer be reached using the primos Control Center, restart the device (54). 8. Clear Test mode.
  • Page 45 • Self-signed certificates have a digital signature that has been created by primos. • A requested certificate is created by a certification authority (CA) for primos on the basis of a certificate request. • CA certificates are certificates that have been issued for a certification authority (CA).
  • Page 46 Common name Is used to clearly identify the certificate. It is advisable to use the IP address or the host name of primos to allow a clear assignment of the certificate to primos. You can enter a maximum of 64 characters.
  • Page 47 As preparation for using a certificate which is issued by a certification authority for primos, a certificate request can be created in the primos. The request must be sent to the certification authority which creates an certificate on the basis of this request. The certificate must be in 'base64' format.
  • Page 48 PKCS#12 certificates are used to save private keys and their respective certificates and to protect them by means of a password. Note If a PKCS#12 or a requested certificate has already been installed in primos, you must first delete the certificate (45).  The certificate must be in 'base64' format.
  • Page 49: How To Use Authentication Methods

    Warning Do not delete the certificate (CA/self-signed/PKCS#12) if only HTTPS is defined as the permitted connection type for the web access to the primos Control Center. If the corresponding certificate is deleted, the primos Control Center can no longer be reached.
  • Page 50 1. Start the primos Control Center. 2. Select SECURITY – Authentication. 3. Select MD5 from the Authentication method list. 4. Enter the User name and Password that are used for the configuration of primos on the RADIUS server. 5. Click Save to confirm.
  • Page 51 If you want to use the EAP-TLS authentication, you must observe the instructions below in the indicated order. If this procedure is not adhered to, primos may not be addressable in the network. In this case you have to reset the configuration settings of primos (52).
  • Page 52 6. From the list Inner authentication choose the method intended to secure the com- munication in the TLS channel. 7. Enter the User name and Password that are used for the configuration of primos on the RADIUS server. 8. Install a WPA add-on. (Optional) 9.
  • Page 53 7. From the list PEAP version choose the PEAP protocol version to be used. 8. From the list PEAP label choose the PEAP label version to be used. 9. Enter the User name and Password that are used for the configuration of primos on the RADIUS server.
  • Page 54 TLS channel. 7. From the FAST provisioning box choose the provisioning mechanism for PACs. 8. Enter the User name and Password that are used for the configuration of primos on the RADIUS server. 9. Install a WPA add-on. (Optional) 10.
  • Page 55: Maintenance

    This allows you to get back to a stable configuration status at any time. Afterwards, the backup file can be loaded onto a primos. The configuration settings in the file will then be taken over by the device.
  • Page 56: How To Reset Primos To Its Default Settings (Reset)

    Note If you do a reset, the IP address of primos may change and the connection to the primos Control Center may be terminated. You must reset the configuration settings, for example, if you have changed the location of primos and thus want to use it in a different network.
  • Page 57: How To Perform An Update

    11. Turn primos on (establish the power supply).  The configuration settings are reset. 7.3 How to Perform an Update You can carry out software and firmware updates on primos in order to benefit from currently developed features. What Happens...
  • Page 58: How To Restart Primos

     The update is executed. This may take a few minutes. Afterwards primos will restart. 7.4 How to Restart primos primos will restart automatically after an update. If primos is in an undefined state it can also be rebooted manually.
  • Page 59: How To Use The Service Function

    Service file The service file is a compressed file which contains diagnostic information. In case of error, save this file to you local client and send it to the SEH Support together with your request (e.g. via email). SSH Access The Secure Shell (SSH) network protocol can be used to access primos remotely for support purposes.
  • Page 60: Appendix

    • ’IP Address’ 57 • ’Subnet Mask’ 57 Default Name The primos default name is made up of the two letters 'IC' and the device number. The device number consists of the last six numbers of its hardware address. Example: IC0001ff The default name can be found in the primos Control Center.
  • Page 61 00:c0:eb:00:01:ff respectively 00.c0.eb.00.01.ff Host name The host name is an alias for an IP address. The host name uniquely identifies primos in the network and makes it easier to remember. IP Address The IP address is a unique address for every node in your network, i.e., an IP address may appear only once in your local network.
  • Page 62: Troubleshooting

    Warnung primos is not operational in the BIOS mode. If a primos is in the BIOS mode, the device will be marked accordingly in the SEH primos App with an indicator. To switch primos from BIOS to normal mode you have to first assign a temporary IP address to primos and then load software onto it.
  • Page 63  primos is in the BIOS mode 58. The password is no longer available The access to the primos is controlled by means of user accounts. You will need a user name and a password to get access (41). If the password is no longer available, you can reset the primos configuration settings to their default settings in order to get access to the primos Control Center 57.
  • Page 64 Appendix The printer does not print. In order to print from iOS devices via primos, you have to create a print queue for the respective printer in primos. For each queue you then define numerous settings (driver, print protocol, access control and much more). Check ...
  • Page 65 Wide-Area AirPrint™ does not work Check if  the desired printer is being published via wide-Area AirPrint™ 33.  the primos subdomain is configured as search domain on the iOS devices: - ’primos Unterdomäne als Suchdomäne automatisch auf iOS-Geräten konfigurie- ren’ 37.
  • Page 66: Index

    User Manual Appendix 8.3 Index DNS (Domain Name Service) 12 DNS server 32 Documentation 3 Access control 37 Downloads 4 Active Directory® 14 Driver User login 38 Delete 25 Administration 7 Download 25 Administrator 37 Upload 25 AirPrint™ Identifier 24...
  • Page 67 Prefix 24 Requirements 2 primos 2 Reset 52 Shutdown 54 Button 52 Switching off 54 Restart 54 primos Control Center 7 Default user profile 7 Safety regulations 5 Logout 9 Search domain 31 Security 7 Secure AirPrint™ 28 Start 7...
  • Page 68 User Manual Appendix Service function SSH access 55 Service functions 55 Service file 55 Session timeout 37 Shutdown 54 SNTP 16 Software 53 SSH access 55 SSL/TLS 35 Subdomain 31 Subnet mask 10 Support 4 Switching Off 54 TCP Port Access Control 39...

Table of Contents