SafeCom G3 Administrator`s Manual

SafeCom G3 Administrator`s Manual
SafeCom G3
Administrator’s Manual
D60603-21
October 2012
Trademarks: SafeCom, SafeCom Go, SafeCom P:Go, SafeCom ePay and the
SafeCom logo are trademarks of SafeCom a/s. Company and product names
mentioned in this manual are trademarks or registered trademarks of their
respective owners. SafeCom a/s cannot be held responsible for any technical or
typographical errors and reserves the right to make changes to products and
documentation without prior notification.
Third Party Software: This software may contain third party software which
requires notices and/or additional terms and conditions. Such required third
party software notices and/or additional terms and conditions are located in
the Notice document.
Patent: SafeCom has received the following British patent GB 2350 713 B, US
patent US 6,952,780 B2 and Europe patent EUR EP1 120 701.
Feedback: If you have any feedback or ideas concerning this manual or the
SafeCom product, then please send an e-mail to [email protected]
© Copyright 1999 - 2012 SafeCom a/s
SafeCom a/s
Lautrupvang 12
DK-2750 Ballerup
Denmark
Phone: +45 4436 0240
E-mail: [email protected]
Web: safecom.eu
D60603-21
2
Table of contents
1
Introduction .......................................................................................... 13
1.1
SafeCom Smart Printing ................................................................. 13
1.2
Components overview ................................................................... 13
1.3
Database component .................................................................... 13
1.4
SafeCom components.................................................................... 14
1.5
SafeCom Pay components .............................................................. 15
1.6
SafeCom APIs ............................................................................. 15
1.7
SafeCom Service and other services .................................................. 16
1.8
Pull Printing explained .................................................................. 16
1.9
Terms and definitions ................................................................... 17
1.10
System requirements .................................................................... 22
1.10.1
Server requirements ..................................................... 22
1.10.2
Client requirements...................................................... 23
1.10.3
Printers and MFPs ........................................................ 23
1.10.4
Network ports ............................................................. 23
1.10.5
SafeCom ID Devices ...................................................... 24
1.11
Available documentation ............................................................... 25
1.12
About this manual........................................................................ 28
1.13
Document history ........................................................................ 29
2
Frequently asked questions ...................................................................... 32
2.1
What are the benefits of Pull Printing? .............................................. 32
2.2
What devices are supported? .......................................................... 33
2.3
Is Copy Control supported? ............................................................. 33
2.4
Is it possible to charge for print costs? ............................................... 33
2.5
Is it necessary to install software on the users’ computers? ..................... 33
2.6
How are users authenticated? ......................................................... 34
2.7
How are users managed? ................................................................ 34
2.8
How are users with the same name handled? ....................................... 34
2.9
How many users, printers, and documents can a server handle? ................ 34
2.10
Can access to devices be restricted? ................................................. 34
2.11
Are SafeCom solutions scalable? ...................................................... 35
2.12
How does a solution with multiple servers work? .................................. 35
2.13
Can documents be printed securely? ................................................. 36
2.14
What happens to uncollected documents? .......................................... 36
2.15
Is it always possible to print? .......................................................... 36
2.16
Can print usage be tracked without hardware? ..................................... 36
2.17
Can a Pull Printer be used for Push tracking? ....................................... 37
2.18
What happens if the SafeCom solution stops working? ............................ 37
2.19
What is the administrative overhead? ................................................ 37
2.20
What about integration with other systems? ........................................ 38
2.21
Does it pay to apply a SafeCom solution? ............................................ 38
3
Planning your SafeCom solution ................................................................. 39
3.1
Introduction ............................................................................... 39
3.2
Checklist – to help you on the way .................................................... 39
3.3
User authentication by card or ID code .............................................. 40
3.4
User creation and management ....................................................... 41
3.4.1
Import user data from other systems ................................. 41
3.4.2
Create users at first print ............................................... 42
3.4.3
Let users register their card themselves ............................. 42
3.4.4
Let users register an ID code themselves ............................ 43
3.4.5
Let administrator register cards to users ............................ 43
3.4.6
Let administrator register ID code with users ....................... 44
3.4.7
Allow users to change their PIN code ................................. 44
3.4.8
Determine user’s home server ......................................... 45
D60603-21
3
3.5
3.6
3.7
3.8
3.9
3.10
3.11
4
D60603-21
Overview of software installation ..................................................... 45
3.5.1
Server installation ........................................................ 46
3.5.2
Multiserver installation .................................................. 46
3.5.3
Disk space considerations ............................................... 46
3.5.4
Shared SafeCom Pull Printer ........................................... 47
3.5.5
Local SafeCom Pull Printer ............................................. 47
3.5.6
SafeCom printers can reference multiple servers .................. 47
3.5.7
Printer driver and document fidelity considerations .............. 48
3.5.8
High Speed Print considerations ....................................... 48
Print from other systems ............................................................... 49
3.6.1
Print from Apple Mac .................................................... 49
3.6.2
Print from UNIX ........................................................... 49
3.6.3
Print from Novell ......................................................... 49
3.6.4
Print from Host systems (mainframe) ................................ 49
Roll out considerations .................................................................. 50
3.7.1
Test solution prior to roll out .......................................... 50
3.7.2
Inform and prepare your users ......................................... 50
3.7.3
Clearly define responsibilities and procedures ..................... 50
Preemptive support and diagnostic tools ............................................ 51
3.8.1
Event log and e-mail notification ..................................... 51
3.8.2
scping ....................................................................... 52
3.8.3
SafeCom Service and processes ........................................ 52
3.8.4
TCP and UDP port numbers used by SafeCom ....................... 53
3.8.5
SafeCom SQL databases ................................................. 59
3.8.6
SafeCom database update log ......................................... 59
3.8.7
Windows registry settings ............................................... 60
Backup and restore ...................................................................... 60
3.9.1
Standby computer equipment .......................................... 60
3.9.2
SafeCom Windows registry settings ................................... 61
3.9.3
Customized SafeCom files .............................................. 62
3.9.4
Printer configurations ................................................... 62
3.9.5
SafeCom databases ...................................................... 63
3.9.6
scBackup ................................................................... 64
SafeCom server trace facility .......................................................... 65
3.10.1
Enable trace ............................................................... 65
3.10.2
Trace files ................................................................. 66
3.10.3
TELNET interface ......................................................... 67
SafeCom device trace facility ......................................................... 68
Installation............................................................................................ 69
4.1
Introduction ............................................................................... 69
4.2
The install program ...................................................................... 69
4.2.1
Server installation (Basic) .............................................. 69
4.2.2
Server installation (Advanced) ......................................... 70
4.2.3
Client installation ........................................................ 71
4.2.4
Tools installation ......................................................... 71
4.2.5
Windows Firewall – Ports that must be opened ..................... 72
4.2.6
Windows Firewall – Make SQL use fixed port ........................ 72
4.2.7
After installation security checkup ................................... 74
4.2.8
Scripts to manually create the databases ........................... 74
4.2.9
SQL collation .............................................................. 75
4.2.10
Create intermediate SQL 2008 user: safecominstall ............... 75
4.2.11
Delete intermediate SQL 2008 user: safecominstall ............... 78
4.2.12
Create intermediate SQL 2005 user: safecominstall ............... 79
4.2.13
Delete intermediate SQL 2005 user: safecominstall ............... 81
4.2.14
Do not modify SQL user: safecom ..................................... 81
4.2.15
Enable TCP/IP protocol on SQL 2008 and 2005 ..................... 82
4.2.16
Register sqldmo.dll on SQL 2008 Server .............................. 82
4.2.17
Determine physical and virtual memory on the server ............ 82
4.2.18
Store print files on an external file share ........................... 83
4
4.3
4.4
4.5
4.6
4.7
4.8
4.9
4.10
4.11
4.12
4.13
4.14
D60603-21
4.2.19
Change location of SafeCom print files .............................. 84
4.2.20
Update SafeCom software – single server ............................ 85
4.2.21
Uninstall SafeCom software ............................................ 86
4.2.22
Uninstall Microsoft SQL Server 2008 R2 Express .................... 86
SafeCom Print Client .................................................................... 87
4.3.1
Installation ................................................................ 87
4.3.2
Windows Firewall - Ports that must be opened ..................... 88
4.3.3
Print test page ............................................................ 88
4.3.4
Direct print if SafeCom server is offline ............................. 89
4.3.5
Deployment to computers .............................................. 89
4.3.6
scPrintClient.ini file ..................................................... 90
4.3.7
Trace facility .............................................................. 91
4.3.8
Command line parameters .............................................. 92
SafeCom Application Print .............................................................. 95
4.4.1
Installation ................................................................ 95
4.4.2
Deployment to computers .............................................. 96
4.4.3
Trace facility .............................................................. 96
4.4.4
Windows registry settings ............................................... 97
Upgrade from Express to Microsoft SQL Server ..................................... 97
4.5.1
Stop the SafeCom Service .............................................. 97
4.5.2
Change Windows Registry to reference SQL Server ................ 98
4.5.3
Change the dependencies on the SafeCom Service ................ 99
Multiserver installation ................................................................ 100
4.6.1
Overview .................................................................. 101
4.6.2
Set SQL Server Agent to automatic startup ......................... 101
4.6.3
Add the other servers to the master server’s group .............. 101
4.6.4
Check that the replication is working ............................... 102
4.6.5
Repair replication ....................................................... 103
4.6.6
What happens if servers or network connections are down? .... 104
4.6.7
Reinitialize the subscription........................................... 105
4.6.8
Prevent the subscription from expiring ............................. 105
Update multiserver installation ...................................................... 105
4.7.1
Pre-requisites ............................................................ 105
4.7.2
Update SafeCom software ............................................. 106
Cluster installation ..................................................................... 107
Install the SafeCom license key code ................................................ 107
4.9.1
Determine the Computer Name ...................................... 107
4.9.2
Determine the Cluster Name .......................................... 108
4.9.3
Understanding the license key code ................................. 108
4.9.4
Device license and user settings dependencies .................... 109
User rights required when adding printers ......................................... 111
Add a SafeCom Pull Printer on Windows 2008/ 2008 R2 and 2003 ............. 113
Add a SafeCom Pull Printer on client computers .................................. 114
4.12.1
Install SafeCom client .................................................. 114
4.12.2
Add a local SafeCom Pull Printer on Windows 7 ................... 115
4.12.3
Add a local SafeCom Pull Printer on Windows XP ................. 116
4.12.4
Add a local SafeCom Pull Printer on Windows Vista .............. 117
SafeCom Pull Port ....................................................................... 118
4.13.1
Enable printer pooling .................................................. 118
4.13.2
Configure the SafeCom Pull Port ..................................... 119
4.13.3
Edit servers dialog ...................................................... 121
4.13.4
SafeCom Print Authentication dialog ................................ 123
4.13.5
Customize the SafeCom Print Authentication dialog ............. 123
4.13.6
Force focus on the SafeCom Print Authentication dialog ........ 124
4.13.7
Configure Use job data logon ......................................... 125
SafeCom PopUp – scPopUp.exe ....................................................... 127
4.14.1
Setup SafeCom PopUp .................................................. 127
4.14.2
SafeCom PopUp on Mac computers .................................. 129
4.14.3
SafeCom PopUp examples ............................................. 130
4.14.4
Force SafeCom Port Monitors to use SafeCom PopUp ............. 131
5
4.15
4.16
4.17
4.18
4.19
5
D60603-21
4.14.5
Control dialog timeout ................................................. 132
Printing encrypted documents ........................................................ 132
Printing in Citrix and Windows Terminal Service environments ................ 133
Make all printing go through the SafeCom solution ............................... 133
Install a card reader on a computer ................................................. 134
Update selected SafeCom components ............................................. 134
4.19.1
Update SafeCom Administrator ....................................... 135
4.19.2
Update SafeCom Port Monitors ....................................... 135
4.19.3
Update scJobServer.exe ............................................... 135
4.19.4
Update scSecureLib.dll ................................................. 136
4.19.5
Update filtercard.dll .................................................... 136
SafeCom Administrator .......................................................................... 137
5.1
Introduction .............................................................................. 137
5.2
Install SafeCom Administrator ........................................................ 138
5.3
Log in to SafeCom Administrator ..................................................... 138
5.3.1
SafeCom Assistant ....................................................... 139
5.3.2
Change password ........................................................ 142
5.3.3
Test server................................................................ 143
5.3.4
Menus and commands .................................................. 143
5.3.5
Server group and server icons ......................................... 146
5.3.6
User icons ................................................................. 146
5.3.7
Device icons .............................................................. 146
5.3.8
Document icons .......................................................... 147
5.3.9
Other icons ............................................................... 147
5.3.10
Built-in user accounts .................................................. 147
5.4
System overview ........................................................................ 148
5.4.1
Manuals.................................................................... 148
5.4.2
Users ....................................................................... 148
5.4.3
Devices .................................................................... 149
5.4.4
Servers .................................................................... 149
5.4.5
Collect system info ...................................................... 149
5.4.6
Check for updates ....................................................... 149
5.4.7
Save-O-Meter ............................................................. 149
5.5
License .................................................................................... 150
5.6
Server group properties ................................................................ 151
5.7
Server properties ........................................................................ 152
5.7.1
Server ..................................................................... 152
5.7.2
Users ....................................................................... 154
5.7.3
Devices .................................................................... 156
5.7.4
E-mail ..................................................................... 157
5.7.5
Tracking ................................................................... 159
5.7.6
Billing ...................................................................... 160
5.7.7
Encryption ................................................................ 161
5.8
User properties .......................................................................... 163
5.8.1
Identification ............................................................. 163
5.8.2
Settings.................................................................... 165
5.8.3
ID code .................................................................... 167
5.8.4
Rights ...................................................................... 169
5.8.5
Member of ................................................................ 171
5.8.6
Aliases ..................................................................... 172
5.8.7
Delegates ................................................................. 173
5.8.8
Account ................................................................... 177
5.8.9
Billing ...................................................................... 178
5.9
Device properties ....................................................................... 179
5.9.1
Settings.................................................................... 179
5.9.2
Charging scheme ........................................................ 180
5.9.3
License .................................................................... 181
5.9.4
Statistics .................................................................. 182
5.10
Options dialog ........................................................................... 183
6
5.11
5.12
5.13
5.14
5.15
5.16
5.17
6
Manage
6.1
6.2
6.3
6.4
6.5
6.6
7
D60603-21
Manage
7.1
7.2
7.3
5.10.1
General .................................................................... 183
5.10.2
Card reader ............................................................... 184
5.10.3
Network ................................................................... 186
5.10.4
Maintenance .............................................................. 187
5.10.5
Server group info ........................................................ 188
Branches .................................................................................. 189
5.11.1
Administrator rights..................................................... 190
5.11.2
Add a branch ............................................................. 190
5.11.3
Delete a branch .......................................................... 190
5.11.4
Add a device to a branch .............................................. 191
5.11.5
Remove a device from a branch ...................................... 191
5.11.6
Computer properties.................................................... 191
5.11.7
Add a computer to SafeCom solution ................................ 192
5.11.8
Add a computer to a branch at first print .......................... 192
5.11.9
Add a computer to a branch manually .............................. 192
5.11.10
Import computers ....................................................... 192
5.11.11
Remove a computer from a branch .................................. 193
5.11.12
Delete a computer from the SafeCom solution .................... 193
Organizational units .................................................................... 193
5.12.1
Add an organizational unit ............................................. 194
5.12.2
Delete an organizational unit ......................................... 194
5.12.3
Restrict access to devices ............................................. 195
Groups..................................................................................... 196
5.13.1
Add groups manually .................................................... 196
5.13.2
Group properties dialog ................................................ 197
5.13.3
Delete groups ............................................................ 198
5.13.4
Add members to a group ............................................... 198
5.13.5
Remove users from a group ........................................... 199
5.13.6
Select rules to be used on a group ................................... 200
5.13.7
Select favorite billing codes for a group ............................ 201
5.13.8
Group print ............................................................... 202
Device Servers ........................................................................... 203
5.14.1
Add Device Server ....................................................... 204
5.14.2
Device server properties ............................................... 205
5.14.3
Delete device server .................................................... 205
Statistics .................................................................................. 206
Event log .................................................................................. 207
Export data ............................................................................... 209
5.17.1
Export users .............................................................. 209
5.17.2
Export servers ............................................................ 210
5.17.3
Export devices ........................................................... 211
5.17.4
Export billing codes ..................................................... 212
5.17.5
Export 2-level billing codes............................................ 212
servers .................................................................................... 213
Introduction .............................................................................. 213
Add a single server group .............................................................. 213
Create a multiserver group ............................................................ 214
6.3.1
Prerequisites ............................................................. 214
6.3.2
Add server ................................................................ 215
6.3.3
Troubleshooting ......................................................... 217
Remove single or multiserver group ................................................. 217
Delete a slave server from a multiserver group ................................... 218
Failover servers.......................................................................... 219
users ....................................................................................... 222
Introduction .............................................................................. 222
Default user .............................................................................. 222
Import users .............................................................................. 225
7.3.1
Overview .................................................................. 227
7
7.4
7.5
7.6
7.7
7.8
7.9
7.10
7.11
7.12
7.13
7.14
7.15
7.16
7.17
7.18
7.19
8
Manage
8.1
8.2
8.3
8.4
8.5
8.6
8.7
8.8
8.9
8.10
8.11
8.12
8.13
8.14
8.15
D60603-21
7.3.2
Server ..................................................................... 229
7.3.3
Import source ............................................................ 230
7.3.4
File source (CSV file and XML file) ................................... 231
7.3.5
Properties (Active Directory) .......................................... 232
7.3.6
Properties (Novell eDirectory) ........................................ 233
7.3.7
Properties (LDAP server) ............................................... 234
7.3.8
Configuration (CSV) ..................................................... 235
7.3.9
Configuration (XML) ..................................................... 237
7.3.10
Configuration (Active Directory)...................................... 239
7.3.11
Configuration (Novell eDirectory) .................................... 241
7.3.12
Configuration (LDAP server) ........................................... 243
7.3.13
Rules ....................................................................... 244
7.3.14
Extra ....................................................................... 246
7.3.15
Schedule .................................................................. 247
7.3.16
User import log file ..................................................... 248
7.3.17
Search filter .............................................................. 249
7.3.18
Install certificate ........................................................ 250
7.3.19
Conversion of magnetic ID codes ..................................... 250
Create users at first print ............................................................. 251
Add users manually ..................................................................... 251
Find users ................................................................................. 252
Customize the user list view .......................................................... 253
Hide ID codes ............................................................................ 253
Hide document names.................................................................. 254
Edit the properties of multiple users ................................................ 255
Delete users .............................................................................. 255
List of aliases ............................................................................ 256
7.12.1
Save aliases to file ...................................................... 256
List of ID codes .......................................................................... 257
7.13.1
Save ID codes to file .................................................... 258
Customize the format of ID codes ................................................... 258
User has lost ID card .................................................................... 260
User has forgotten ID code ............................................................ 260
User has forgotten PIN code .......................................................... 260
Delete a user’s print jobs (documents) ............................................. 260
Customize and translate e-mail messages .......................................... 261
devices .................................................................................... 265
Introduction .............................................................................. 265
Device license ........................................................................... 266
Add device ............................................................................... 267
8.3.1
Resend configuration ................................................... 269
Add a device to a SafeCom Device Server .......................................... 270
Find devices .............................................................................. 272
8.5.1
Simple search ............................................................ 272
8.5.2
Advanced search – Device licenses ................................... 273
Broadcast for devices .................................................................. 274
Customize the device list view ....................................................... 274
Edit the properties of multiple devices ............................................. 275
Delete devices ........................................................................... 276
Update software ........................................................................ 276
8.10.1
Location of device software ........................................... 278
8.10.2
Single device software update ........................................ 279
8.10.3
Multiple devices software update .................................... 280
Monitor device status .................................................................. 281
8.11.1
Look at device statistics ............................................... 283
Restart devices .......................................................................... 284
Open in web browser ................................................................... 284
Restrict users’ access to devices ..................................................... 285
DHCP server .............................................................................. 285
8
8.16
Shorten job names in document list ................................................. 286
9
SafeCom Tracking ................................................................................. 287
9.1
Introduction .............................................................................. 287
9.2
Pull print tracking ....................................................................... 287
9.3
Push print tracking ...................................................................... 288
9.3.1
Printing directly ......................................................... 288
9.3.2
Printing via a second printer .......................................... 289
9.3.3
Add a secondary printer (output service) ........................... 290
9.3.4
Add the first printer (SafeCom Push Port) .......................... 291
9.3.5
Set TCP port to another value than 9100 ........................... 294
9.3.6
Allow printing at all times ............................................. 295
9.4
SafeCom Port Configurator ............................................................ 296
9.4.1
Install SafeCom Port Configurator .................................... 296
9.4.2
Start SafeCom Port Configurator ..................................... 297
9.4.3
Add server ................................................................ 298
9.4.4
Convert to Push .......................................................... 300
9.4.5
Restore to TCP/IP ....................................................... 306
9.4.6
List and repair printers ................................................. 307
9.4.7
Read servers from file .................................................. 309
9.4.8
scPortConfigurator.ini .................................................. 309
9.4.9
Troubleshooting ......................................................... 315
9.5
Copy tracking ............................................................................ 317
9.6
Fax, Scan and E-mail tracking ........................................................ 317
9.7
Post track ................................................................................. 317
9.8
Planning your SafeCom Tracking solution .......................................... 319
9.8.1
Defining print costs via charging schemes .......................... 319
9.8.2
Track deleted jobs ...................................................... 321
9.8.3
Backup and restore ..................................................... 321
9.8.4
Using tracking data ..................................................... 321
9.9
Multiple servers: Online or offline tracking ........................................ 322
9.9.1
Configure SafeCom master server .................................... 323
9.9.2
Configure SafeCom slave servers ..................................... 324
9.10
Configuration overview ................................................................ 325
9.11
Charging schemes ....................................................................... 326
9.11.1
Add charging scheme ................................................... 326
9.11.2
Sample charging calculation .......................................... 330
9.11.3
Charging scheme properties ........................................... 330
9.11.4
Associate charging scheme with device ............................. 331
9.11.5
Default charging scheme for new devices .......................... 332
9.11.6
Delete a charging scheme ............................................. 332
9.12
Change cost control to tracking ...................................................... 333
9.13
SafeCom Reports ........................................................................ 334
9.13.1
Install SafeCom Reports ................................................ 334
9.13.2
Start SafeCom Reports ................................................. 334
9.13.3
Make a report ............................................................ 334
9.14
Work with the tracking data .......................................................... 335
9.14.1
Export tracking data .................................................... 335
9.14.2
Delete tracking data .................................................... 336
9.15
SafeCom Data Mining ................................................................... 337
9.15.1
Main tracking ............................................................. 338
9.15.2
User statistics ............................................................ 339
9.15.3
Device statistics ......................................................... 340
9.15.4
Billing statistics .......................................................... 341
9.15.5
Job list .................................................................... 342
9.15.6
Tracking record dialog ................................................. 343
9.16
Update scParser.dll ..................................................................... 346
10
SafeCom Rule Based Printing (RBP) ........................................................... 347
10.1
Introduction .............................................................................. 347
D60603-21
9
10.2
10.3
10.4
10.5
10.6
10.7
Planning your SafeCom RBP solution ................................................ 347
Creating the rules ....................................................................... 348
Select rules to be used on group ..................................................... 355
What if the rule does not work? ...................................................... 356
How to determine the application ................................................... 356
Update scRuleExecuter.dll ............................................................ 357
11
SafeCom Client Billing ........................................................................... 358
11.1
Introduction .............................................................................. 358
11.1.1
Manage billing codes .................................................... 359
11.1.2
Plan your SafeCom Client Billing solution ........................... 359
11.2
Configuration overview ................................................................ 360
11.3
Configure SafeCom Client Billing ..................................................... 361
11.4
Import billing codes .................................................................... 363
11.4.1
Billing code import log file ............................................ 371
11.5
Set up users to use billing codes ..................................................... 372
11.5.1
Add favorite billing codes for a user ................................. 374
11.5.2
Select favorite billing codes for a group ............................ 375
11.6
Edit the template for billing reminder .............................................. 376
11.7
Manage 1-level billing code ........................................................... 377
11.7.1
Add billing code ......................................................... 377
11.7.2
Find billing codes ........................................................ 378
11.7.3
Delete billing codes ..................................................... 378
11.7.4
Modify billing codes ..................................................... 378
11.8
Manage 2-level billing code ........................................................... 379
11.8.1
Add primary or secondary code ....................................... 380
11.8.2
Find primary or secondary codes ..................................... 380
11.8.3
Delete primary or secondary codes .................................. 381
11.8.4
Modify primary or secondary codes .................................. 381
11.8.5
Add billing code ......................................................... 381
11.8.6
Delete billing codes ..................................................... 382
11.8.7
Modify billing codes ..................................................... 382
11.9
Work with Tracking data ............................................................... 382
12
SafeCom Pay ....................................................................................... 383
12.1
Introduction .............................................................................. 383
12.2
Planning your SafeCom Pay solution ................................................. 383
12.2.1
Accounting policy ....................................................... 383
12.2.2
Ensure users pay ......................................................... 384
12.2.3
Cashless solution ........................................................ 384
12.3
Change cost control to pay ............................................................ 385
12.4
Credit schedule .......................................................................... 386
12.5
Cashier – How to......................................................................... 389
12.5.1
Login to SafeCom Administrator in Cashier mode ................. 389
12.5.2
Find user .................................................................. 390
12.5.3
User properties dialog .................................................. 391
12.5.4
View user transactions ................................................. 392
12.5.5
Issue a new PIN code ................................................... 392
12.5.6
Unlock user ............................................................... 393
12.5.7
Deposit credits ........................................................... 393
12.5.8
Withdraw credits ........................................................ 393
12.5.9
Set low limit .............................................................. 393
12.5.10
Free reserved credits ................................................... 393
12.5.11
Reset cash cards ......................................................... 394
12.5.12
Detect attempt to avoid paying ...................................... 394
12.5.13
Print reports .............................................................. 394
12.6
Account status ........................................................................... 395
12.7
Cash flow report ........................................................................ 396
12.8
User transactions dialog ............................................................... 397
12.9
Prevent cheating ........................................................................ 398
D60603-21
10
12.10
12.9.1
E-mail template for an unfinished job .............................. 398
12.9.2
Difference between print and copy .................................. 399
Job name pricing ........................................................................ 399
12.10.1
JobNamePricing.txt ..................................................... 400
13
SafeCom Device Utility .......................................................................... 401
13.1
Introduction .............................................................................. 401
13.2
Starting SafeCom Device Utility ...................................................... 401
13.3
Menus and commands .................................................................. 402
13.4
Populate list of devices ................................................................ 402
13.5
Working with configurations .......................................................... 403
14
Format
14.1
14.2
14.3
15
SafeCom ID Devices ............................................................................... 409
15.1
Introduction .............................................................................. 409
15.2
SafeCom AWID Reader ................................................................. 409
15.3
SafeCom Barcode Reader .............................................................. 409
15.4
SafeCom Casi-Rusco Reader ........................................................... 409
15.5
SafeCom EM Reader .................................................................... 410
15.6
SafeCom HID Prox Reader ............................................................. 410
15.7
SafeCom iCLASS Reader ................................................................ 410
15.8
SafeCom Indala Reader ................................................................ 410
15.9
SafeCom Keypad ........................................................................ 411
15.10
SafeCom Legic Reader ................................................................. 411
15.11
SafeCom Magnetic Card Reader ...................................................... 411
15.12
SafeCom Magnetic Card Reader DD .................................................. 411
15.13
SafeCom Mifare Reader ................................................................ 412
16
Troubleshooting ................................................................................... 413
16.1
SafeCom Help Desk Assistant ......................................................... 413
16.2
SafeCom Administrator: Login failed ................................................ 413
16.3
SafeCom Administrator: Unable to locate all SafeCom servers ................. 413
16.4
SafeCom Administrator: Unable to locate all SafeCom devices ................ 414
16.5
SafeCom Administrator: Users are missing ......................................... 414
16.6
SafeCom Administrator: Add user failed and Add alias failed .................. 414
16.7
SafeCom Administrator: License does not take effect ........................... 414
16.8
SafeCom Administrator: Controls in dialog are not visible ...................... 414
16.9
User is not created at first print ..................................................... 415
16.10
Device web interface: Displayed incorrectly or settings not saved ............ 415
16.11
At the printer: Out of order ........................................................... 415
16.12
At the printer: User unknown ......................................................... 415
16.13
At the printer: Login denied .......................................................... 416
16.14
At the printer: Restricted access ..................................................... 416
16.15
At the printer: Error printing document ............................................ 416
16.16
At the printer: Question mark before the document name ..................... 416
16.17
At the printer: Printer busy, retry later ............................................ 416
16.18
At the printer: Printer keeps rebooting ............................................. 416
16.19
At the printer: Copy not allowed..................................................... 417
16.20
At the printer: Login error <number> ............................................... 417
16.21
At the printer: Error printing: General Failure .................................... 417
16.22
At the printer: Card reader not working ............................................ 417
16.23
Document not printed .................................................................. 417
16.24
Some documents are missing ......................................................... 417
16.25
Document printed incorrectly ........................................................ 418
16.26
Nothing is copied ........................................................................ 418
16.27
Driver names are missing .............................................................. 418
D60603-21
of tracking data ......................................................................... 404
Introduction .............................................................................. 404
Format history ........................................................................... 404
Format .................................................................................... 405
11
16.28
16.29
16.30
16.31
16.32
16.33
16.34
16.35
16.36
16.37
16.38
Add Printer Wizard: Specified port cannot be added............................. 418
Local SafeCom Pull Printer is unable to print ...................................... 418
How to start and stop the SafeCom Service ........................................ 419
How to start and stop the Print Spooler ............................................ 419
User’s computer: Unable to connect to SafeCom server ........................ 419
User’s computer: Please contact your administrator! ............................ 419
Import users: No users imported ..................................................... 420
Import billing codes: No codes imported ........................................... 420
Multiserver installation ................................................................ 421
Restore SafeCom server ................................................................ 421
scPopUp: The publisher could not be verified ..................................... 421
17
Administrator’s installation notes ............................................................. 422
17.1
Introduction .............................................................................. 422
17.2
Servers .................................................................................... 422
17.2.1
SafeCom master server ................................................. 423
17.2.2
SQL master server ....................................................... 424
17.2.3
SafeCom slave server ................................................... 425
17.2.4
Failover servers .......................................................... 426
17.3
User authentication..................................................................... 426
17.4
Devices .................................................................................... 427
17.5
Printer drivers ........................................................................... 427
18
Disclaimer .......................................................................................... 428
19
Index ................................................................................................. 431
D60603-21
12
1 Introduction
1
Introduction
1.1
SafeCom Smart Printing
SafeCom Smart Printing solutions are intelligent solutions designed to help
companies and organizations gain control over their printing costs and
document security. SafeCom is a modular system that can be enhanced with
add-on modules to build customer specific and scalable solutions.
1.2
Components overview
1.3
Database component

D60603-21
Database. A SafeCom server depends on the availability of its database.
In most cases the provided database can be used (SQL Server 2008 R2
Express). In a solution with multiple SafeCom servers the SQL master
server must run Microsoft SQL Server 2008 or 2005.
13
1 Introduction
1.4
D60603-21
SafeCom components

SafeCom Go offers user authentication at the device and integrates with
the touch-screen control panel on selected multifunction printers (MFPs)
from Canon, Fuji Xerox, HP, Konica Minolta, Kyocera, Lexmark, Océ,
Ricoh, Samsung, Sharp and Xerox. Authentication by card is possible by
connecting a SafeCom ID Device (card reader).

SafeCom P:Go offers user authentication at single function printers and is
typically used to print all documents at login.

SafeCom Controller / SafeCom Color Front-end (combined touch-screen
and card reader) is the printer manufacture independent and external
solution that is used to support devices not supported by SafeCom
Go/SafeCom P:Go.

SafeCom Device Server is a web server based component that is used to
offer SafeCom Go functionality on selected devices from Fuji Xerox, HP,
Konica Minolta, Océ, Sharp, Xerox and other vendors. It uses SOAP and
XML to communicate with the device. No SafeCom software is installed on
the device.

SafeCom G3 is the server software that comes with a database (SQL
Server 2008 R2 Express) for storing user and tracking information. Users
are added to the database the first time they print, but they can also be
imported from for example Active Directory. It can also work with
Microsoft SQL.

SafeCom Administrator is the application that is used to configure and
administrate the SafeCom solution, including remotely updating SafeCom
software on devices.

SafeCom Reports is used to generate reports based on tracking data
collected for printer, copied and deleted documents. Use it to report cost
and environmental savings.

SafeCom Web Interface offers users self service through a web browser.
Users can delete or retain documents etc. Runs on Microsoft Internet
Information Server (IIS).

SafeCom Port Configurator is used to conveniently convert direct TCP/IP
printers on print server to Push printers and thus allow tracking of
documents sent directly to devices. The printers can be reverted back to
TCP/IP printers if required.
14
1 Introduction

SafeCom Push Port is the port monitor that tracks directly printed
documents.

SafeCom Pull Port is a port monitor that tracks and stores the user’s
documents. Documents are stored on the SafeCom server. With SafeCom
Print Client documents can optionally be stored on the hard disk drive of
the user’s computer or a print server.

SafeCom Print Client allows documents to be stored on the hard disk
drive of the computer that it is installed onto.

SafeCom Application Print is what is necessary within the SafeCom
solution to activate SafeCom Popup on end-user computers. SafeCom
Application Print is installed on a shared network print queue and
interacts with the Print Spooler, SafeCom Pull Port and SafeCom Push
Port to retrieve user print job data. Application print then uses this data
to communicate specific information back to the user about their print
job, which is displayed in SafeCom Popup. Through SafeCom Popup users
can authenticate themselves, confirm their print jobs, select the correct
billing codes and approve print jobs based on price.
Do not confuse SafeCom Application Print with SafeCom Print Client.
SafeCom Print Client allows documents to be stored locally on the hard
disk drive of the computer it is installed on. Application print enables
SafeCom Popup.
1.5
SafeCom Pay components
These components are relevant only for solutions where users have to pay for
print and copy service.
1.6

SafeCom Administrator the application that is used to add (deposit) or
subtract (withdraw) credits (money) from the user’s account.

SafeCom ePay allow users to transfer money from their bank account to
their SafeCom account via the Internet.
SafeCom APIs
In addition to being a modular solution, the SafeCom Smart Printing solution
also features a number of optional Application Programming Interfaces (APIs).
D60603-21

SafeCom Administrator API is an XML-based tool that makes it possible to
manipulate multiple users, automate tasks, and integrate your SafeCom
Smart Printing solution with other systems.

SafeCom Batch Print API is an XML-based tool used to integrate the
SafeCom solution with other systems, such as document archiving
systems.
15
1 Introduction
1.7
1.8
SafeCom Service and other services

SafeCom Service
The SafeCom Service (scSafeComService.exe) launches the required
SafeCom processes (scBroadcastServer.exe, scJobServer.exe,
scMoneyServer.exe and scTrackingServer.exe). On Windows 64-bit the
files are named *64.exe.

SafeCom Device Server
The SafeCom Device Server (scDeviceServer.exe) launches the SafeCom
Device Server.

SQL Agent
The Microsoft SQL Server Agent handles the replication from the SQL
master server to the SafeCom slave servers.

MSSQL
The Microsoft SQL Server runs the database.

Print Spooler
The Microsoft Print Spooler (spoolsv.exe) loads files to memory for later
printing.
Pull Printing explained
From the user’s point of view:
1.
2.
3.
4.
Print your documents from Windows.
Go to any SafeCom-enabled printer.
Log in by means of card and/or code.
Select the documents you wish to print and pick them up from the
printer’s output bin.
From the administrator’s point of view:
1.
SafeCom solutions require only software to be installed on a Windows
2008/2008 R2 or 2003 server; there is no need to install software on the
users’ computers. It is sufficient to add or modify a shared printer on the
server.
From the system’s point of view:
1.
2.
3.
D60603-21
The Windows print queue is using the port monitor SafeCom Pull Port to
analyze the document to determine owner and job characteristics.
The SafeCom Pull Port transfers the formatted document and the
resulting data to the SafeCom server.
When the user logs in at the printer documents are released for printing.
Documents that do not match the printer can be filtered from the list of
documents in advance (3.5.7).
16
1 Introduction
1.9
Terms and definitions
The relevance of some of the listed terms depends on the availability of
SafeCom add-on modules (license key code controlled).
Billing code
A code users can select for any job that is tracked by the SafeCom
solution.
See SafeCom Client Billing.
Charging scheme
In the charging scheme you define the cost of the different paper sizes,
use of color and duplex (double-sided print). A device can be associated
with two charging schemes: 1) Primary charging scheme, which is used
to charge users and invoice departments, and 2) Secondary charging
scheme, which is used to reflect the true costs.
Requires SafeCom Tracking or SafeCom Pay.
Delegate print
Delegate Print is relevant for an organization that needs the advantages
of SafeCom Pull Print and users who need the flexibility to entrust their
print tasks to someone else. With SafeCom Delegate Print users authorize
other SafeCom users to print or collect print jobs on their behalf and
Delegate Print.
Domain
A group of computers that are part of a network and share a common
directory database.
Driver name
In Windows the driver name appears as Model on the General tab of the
Printer properties dialog. The name is used to determine document
fidelity (3.5.7).
Dual charging scheme
See Charging scheme.
Encryption (option)
By means of encryption the SafeCom solution can prevent anyone from
reading the documents, should they be intercepted on their way to the
printer (4.15). Requires SafeCom Encryption.
Group
Either a group of SafeCom servers (Server group) or a group of users. A
user can be a member of one or more groups. Existing user grouping can
be imported from Windows and used in connection with SafeCom Rule
Based Printing.
See also: SafeCom Rule Based Printing
Group print
Documents can be printed to all members of a group. With the Print once
option the document is deleted from all members once one member has
collected it.
D60603-21
17
1 Introduction
Home server
The SafeCom server where the list of the user’s print jobs is maintained.
See also: Multiserver Support.
LDAP
Lightweight Directory Access Protocol.
License key code
The cod provided by your SafeCom solution supplier.
Master server
If the server group includes multiple SafeCom servers, then one is
appointed the role of being the master server. All system and user data
are synchronized and distributed from the SafeCom master server.
See also: Multiserver Support.
MFP
Multifunction Printer. A device that can print, scan, and copy.
Multiserver Support
Enables two or more SafeCom servers to work together. Users can roam
between locations to collect their documents at any SafeCom-enabled
printer and at any location regardless to which SafeCom server the
document was printed (2.11).
See also: Home server and Master server.
MSCS
Microsoft Cluster Service.
Organizational unit
Organizational unit (Org. unit) is an attribute that describes to which part
of the organizational tree users, devices and servers belong (5.12).
PIN code
PIN (Personal Identification Number) is a personal code consisting of four
(4) digits. To increase security users are requested to log in by means of
both the personal card (or ID code) and the PIN code. The default PIN
code is ‘1234’.
Port Configurator
See: SafeCom Port Configurator.
Port monitor
Port monitor is a component in the Windows print process that is
responsible for the communication to the physical printer. When you do a
Server installation or Client installation you also install two special port
monitors: SafeCom Pull Port and SafeCom Push Port.
PUK code
PUK (Personal Unblocking Key) is an 8-digit code that associates users
with their card (or ID code).
D60603-21
18
1 Introduction
Pull Print
The process where users log in at the printer before the submitted
documents are printed.
See also: SafeCom Pull Printer.
Push Print
The process where submitted documents are sent directly to the printer.
See also: SafeCom Push Printer.
RBP
Rule Based Printing.
Rule Based Printing
See: SafeCom Rule Based Printing.
SafeCom Administrator
The application you use to configure and administrate a SafeCom
solution.
SafeCom Administrator API (option)
An XML-based tool that makes it possible to manipulate multiple users,
automate tasks and integrate the SafeCom solution with other systems.
Available in the form of an executable and a dynamic link library (DLL).
Refer to SafeCom G3 Administrator API Reference Manual D60822.
SafeCom Batch Print API (option)
An XML-based tool used to integrate the SafeCom solution with other
systems, such as document archiving systems.
Refer to SafeCom G3 Batch Print API Reference Manual D60823.
SafeCom Broadcast Server
A server process that enables the various SafeCom applications to find
and connect to the relevant servers.
SafeCom Client
A computer, where a local SafeCom printer is installed.
SafeCom Client Billing (option)
Allows users to select billing codes with any print, copy and possibly also
fax, scan and e-mail jobs performed on MFPs. With billing codes it is
possible to get a very detailed breakdown of printer and MFP usage and
possibly recover these expenses by invoicing clients.
Requires SafeCom Tracking.
D60603-21
19
1 Introduction
SafeCom Controller
Hardware that connects directly to the Ethernet network and provides
network access for the SafeCom ID Device.
SafeCom Devices
The SafeCom Controller, SafeCom Go and other devices that support the
SafeCom protocol. Communicates with the SafeCom Job Server.
SafeCom ePay (option)
Allows users to transfer money from their bank account to their SafeCom
account via the Internet.
SafeCom Front-end
Hardware that is used to authenticate users at the printer. It is a card
reader with touch-screen (1.10.5).
SafeCom Go
SafeCom device software that integrates with the touch-screen control
panel of MFPs to offer authentication, access control and Pull Print
(1.10.3).
SafeCom ID Device
Hardware that is used to authenticate users at the printer (1.10.5).
SafeCom Job Server
A server process that stores user data, device data and print job
references in the SafeCom Job database. Configuration data is also stored
for the whole SafeCom solution.
SafeCom Mobile Print
Allows users to print via e-mail or to upload a print job to a web page,
from a mobile device, a tablet, or computer.
SafeCom Money Server
A server process that controls access to the SafeCom Money database that
stores transactions made on the users’ accounts. Requires SafeCom Pay.
SafeCom Port Configurator
A wizard-based tool for converting existing TCP/IP1 printers to SafeCom
Push printers and revert SafeCom Push printers back to their original
TCP/IP settings.
SafeCom Pull Printer (uses SafeCom Pull Port)
A printer defined in Windows that parses the printed document and
transfers the printed document and tracked data to the SafeCom server.
Subsequently the user can log in at any SafeCom-enabled printer to
collect the document.
1
A TCP/IP printer is a Windows print queue that uses the Standard TCP/IP port
monitor.
D60603-21
20
1 Introduction
SafeCom Push Printer (uses SafeCom Push Port)
A printer defined in Windows that parses the printed document, transfers
the tracked data to the SafeCom server, and forwards the printed
document either directly to the physical printer or to another Windows
print queue. Requires SafeCom Tracking or SafeCom Pay.
SafeCom Print Client
SafeCom Print Client allows documents to be stored on the hard disk drive
of the computer that it is installed onto.
SafeCom Reports (option)
SafeCom Reports enables viewing of main tracking statistics, user
statistics, device statistics, client billing statistics and job list. SafeCom
Reports includes a number of predefined and parameterized reports.
Requires SafeCom Tracking.
SafeCom Rule Based Printing (RBP) (option)
Allows print cost savings by offering management a method for enforcing
policies for printing. Rules can be applied to groups of users. Existing user
grouping can be imported from Windows.
Requires SafeCom Tracking.
SafeCom Server
The computer where the SafeCom Server software is installed.
SafeCom Tracking Server
A server process that controls access to the SafeCom Tracking database
that stores information about who printed what on which printer and at
what time. The tracking record includes information about paper size,
number of pages and possible use of color and duplex (double-sided
print). Requires SafeCom Tracking or SafeCom Pay.
SafeCom Web Interface
With SafeCom Web Interface users can use a standard web browser to see
a list of their documents on the SafeCom server. In SafeCom Pay
environments users can see their current balance and transactions made
on their SafeCom account.
Refer to SafeCom G3 Web Interface Administrator’s Manual D60604.
Server group name
A unique name used by SafeCom components to reference a group of one
or more SafeCom servers. Maximum is 19 characters.
Virtual server
Microsoft Cluster Service (MSCS) enables the creation of virtual servers.
Unlike a physical server, a virtual server is not associated with a specific
computer, and can failover from one node to another. SafeCom
configurations must reference the virtual server rather than the physical
servers. Requires SafeCom Cluster Server license.
D60603-21
21
1 Introduction
1.10
System requirements
Consider the hardware and operating systems on your server and clients before
installing SafeCom G3.
1.10.1 Server requirements






Windows 2008/2008 R2 and 2003 SP2 (both 32-bit and 64-bit).
For demo purpose it can also run on Windows 7, Windows Vista and
Windows XP SP2.
Virtualization software, such as VMware and Microsoft Virtual Server, is
supported as long as it supports the Operating System.
1.4 GHz CPU (recommended 2 GHz or faster) and 2 GB RAM or greater.
To take advantage of 4 GB or more physical memory it is necessary enable
PAE X86 (Physical Address Extension) on 32-bit Windows systems.
Refer to microsoft.com.
5 GB or more to allow database growth.
TCP/IP protocol installed and configured.
SafeCom license key code (4.9).
Database


Microsoft SQL Server 2008 R2 Express is distributed with the software and
REQUIRES Microsoft .Net Framework 3.5 SP1 and Windows Installer 4.5.
Please visit microsoft.com to download and install these prior to the
installation of SafeCom G3.
In a SafeCom multiserver installation (4.6) the SQL master server must
run Microsoft SQL Server 2008 or 2005. It must be licensed and installed
(including replication option). Microsoft SQL is quite memory intensive
and basically the more memory the better. 2 GB RAM is a good start.
Note: The above is to be considered rules of thumb in terms of the
configuration of the SafeCom servers (CPU, RAM, and disk space). The load on
the system is very difficult to predict since it depends on so many things,
including, number, size and type of documents to be printed, printer driver,
number and types of printers, number of users etc. Refer to 2.11 for
information on scalability.
Cluster

D60603-21
The SafeCom server and the SafeCom printers on Windows 2008/2008 R2
and 2003 are cluster-aware (requires a SafeCom Cluster Server license). If
one server in the failover cluster goes down another takes over. This gives
unprecedented high availability. Refer to microsoft.com for additional
information on the resulting hardware and software requirements.
22
1 Introduction
1.10.2 Client requirements





Windows 7, Windows Vista, Windows XP SP2, 2008/2008 R2, and 2003.
Clients running Citrix and Windows Terminal Service (WTS).
1 GHz CPU and 1 GB RAM or greater (minimum 2 GB RAM if 64-bit).
1 GB free disk space (or more depending on the amount of printing).
TCP/IP protocol installed and configured.
Printing via LPD/LPR from Apple Mac, UNIX, Novell and Host systems
(mainframe) is possible to a shared SafeCom Pull Printer, but may require
additional software (3.6).
1.10.3 Printers and MFPs
Printers and MFPs with a network connection2 can be Pull Print enabled with
the SafeCom Go, SafeCom P:Go, or SafeCom Controller.
SafeCom Go integrates with the touch-screen control panel of the MFPs and
offers user authentication by code and/or card. SafeCom P:Go is the internal
solution for printers and typically offers user authentication by card. Supported
printer vendors:











Canon
Fuji Xerox
HP
Konica Minolta
Kyocera
Lexmark
Océ
Ricoh
Samsung
Sharp
Xerox
SafeCom Controller offers user authentication and Pull Printing independent of
printer manufacturer. Users log in either through the attached SafeCom Color
Front-end or stand-alone SafeCom ID Device.
If pages are to be counted SafeCom Tracking is required and the print job must
be processed by a driver that support PCL5, PCL5c, PCL5e, PCL6, PCL XL or
PostScript level 2 or 3.
1.10.4 Network ports
The network must allow communication via certain network ports, including,
TCP port 7500 and 7700, and UDP port 5742. Section 3.8.4 has a complete list
and description of the TCP and UDP port numbers used by the SafeCom
solution.
2
D60603-21
Printer must support printing via TCP port 9100.
23
1 Introduction
1.10.5 SafeCom ID Devices
Pull Printing requires the user to log in at the printer. SafeCom offers a wide
and ever expanding range of ID devices (methods), including card readers with
touch-screen and stand-alone card readers.
Table 1 SafeCom Controller supported SafeCom ID Devices
Authentication Method
Windows authentication / ID code
SafeCom AWID Reader
SafeCom Barcode Reader
SafeCom Casi-Rusco Reader
SafeCom Cotag Reader
SafeCom Deister Reader
SafeCom EM Reader [E]
SafeCom EM Reader [R]
SafeCom Felica Reader
SafeCom HID Prox Reader [E]
SafeCom HID Prox Reader [R]
SafeCom HID Prox Reader 37 bit (custom)
SafeCom iCLASS Reader [E]
SafeCom iCLASS Reader [R]
SafeCom Indala Reader 26bit
SafeCom Indala Reader 29bit
SafeCom IoProx
SafeCom Legic Reader [E]
SafeCom Legic Reader [R]
SafeCom Magnetic Card Reader (Tr 1)
SafeCom Magnetic Card Reader (Tr 2)
SafeCom Magnetic Card Reader (Tr 3)
SafeCom Magnetic Card Reader DD (Tr 1)
SafeCom Magnetic Card Reader DD (Tr 2)
SafeCom Magnetic Card Reader DD (Tr 3)
SafeCom Mifare Reader [E]
SafeCom Mifare Reader [R]
SafeCom Nedap Reader
SafeCom NexWatch Reader
Card
Reader
USB
p/n
Card
Reader
Serial
p/n
696020
694020
652420
678020
696010
694010
652010
674120
674420
697420
673120
673420
671120
654120
654420
670420
651020
658420
679120
679420
674110
652040
67804x
65504x
674140
697310
673110
697440
673140
671110
654110
671140
654140
670010
651010
658010
679110
670040
651040
658040
679140
959010
954010
657010
959040
691040
657040
970110
970140
978990
698010
653040
698040
692010
691020
692020
970120
970420
653020
698420
Color
Front-end
Serial
p/n
672040
696040
Table 1 shows the supported authentication methods. The ID device is either
fitted or supplied with a 1.8 - 2.0 m cable. Additional information about the ID
devices is available in chapter 15 SafeCom ID Devices.
If your method of authentication is not in the table, then please contact
[email protected] to hear about support. You are also welcome to send cards
to SafeCom a/s so we can verify that reading is possible.
D60603-21
24
1 Introduction
1.11
Available documentation
SafeCom Smart Printing

SafeCom Smart Printing Administrator’s Quick Guide D10600
How to install a SafeCom Smart Printing solution.
SafeCom G3

SafeCom G3 Administrator’s Manual D60603 (this manual)
A comprehensive Manual that the administrator should consult to make a
successful SafeCom solution. Includes information about SafeCom
Tracking, SafeCom Rule Based Printing, SafeCom Client Billing and
SafeCom Pay.

SafeCom G3 Cluster Administrator’s Manual D60620
How to install on a cluster.

SafeCom G3 Client Billing User’s Guide D60627
How to perform typical user tasks in relation to client billing.

SafeCom G3 Delegate Print User’s Guide D60629
How to perform typical user tasks in relation to delegate printing.
SafeCom G3 Web Interface

SafeCom G3 Web Interface Administrator’s Manual D60604
How to install and customize the Web Interface and SafeCom ePay.

SafeCom G3 Web Interface User’s Guide D60628
How to use the Web Interface.
SafeCom Reports

SafeCom Reports Administrator’s Manual D60609
How to install and use SafeCom Reports.
SafeCom Controller

SafeCom Controller Administrator’s Manual D60700
Manual on how to install, configure, and use SafeCom Controller and
SafeCom Color Front-end.

SafeCom Controller User’s Guide D20700
User's Guide on how to use SafeCom Controller and SafeCom Color Frontend.
SafeCom Go Canon

SafeCom Go Canon Administrator’s Manual D60707
Manual on how to install, configure and use SafeCom Go Canon.

SafeCom Go Canon User’s Guide D20707
User's Guide on how to use SafeCom Go Canon.
SafeCom Go HP

SafeCom Go HP Administrator’s Manual D60701
Manual on how to install, configure and use SafeCom Go HP.

SafeCom Go HP Hardware Quick Guide D10702
Quick Guide on how to install the SafeCom Go HP hardware.

SafeCom Go HP User’s Guide D20701
User's Guide on how to use SafeCom Go HP.
D60603-21
25
1 Introduction
SafeCom Go Fuji Xerox

SafeCom Go Fuji Xerox Administrator’s Manual D60717
Manual on how to install, configure, and use SafeCom Go Fuji Xerox.

SafeCom Go Fuji Xerox User’s Guide D20717
User's Guide on how to use SafeCom Go Fuji Xerox.
SafeCom Go Konica Minolta

SafeCom Go Konica Minolta Administrator’s Manual D60713
Manual on how to install, configure and use SafeCom Go Konica Minolta.

SafeCom Go Konica Minolta User’s Guide D20713
User's Guide on how to use SafeCom Go Konica Minolta.
SafeCom Go Kyocera

SafeCom Go Kyocera Administrator’s Manual D60721
Manual on how to install, configure and use SafeCom Go Kyocera.

SafeCom Go Kyocera User’s Guide D20721
User's Guide on how to use SafeCom Go Kyocera.
SafeCom Go Lexmark

SafeCom Go Lexmark Administrator’s Manual D60711
Manual on how to install, configure and use SafeCom Go Lexmark.

SafeCom Go Lexmark User’s Guide D20711
User's Guide on how to use SafeCom Go Lexmark.
SafeCom Go Océ

SafeCom Go Océ Administrator’s Manual D60715
Manual on how to install, configure, and use SafeCom Go Océ.

SafeCom Go Océ User’s Guide D20715
User's Guide on how to use SafeCom Go Océ.
SafeCom Go Ricoh

SafeCom Go Ricoh Administrator’s Manual D60703
Manual on how to install, configure and use SafeCom Go Ricoh.

SafeCom Go Ricoh User’s Guide D20703
User's Guide on how to use SafeCom Go Ricoh.
SafeCom Go Samsung

SafeCom Go Samsung Administrator’s Manual D60719
Manual on how to install, configure and use SafeCom Go Samsung.

SafeCom Go Samsung User’s Guide D20719
User's Guide on how to use SafeCom Go Samsung.
SafeCom Go Sharp

SafeCom Go Sharp Administrator’s Manual D60709
Manual on how to install, configure and use SafeCom Go Sharp.

SafeCom Go Sharp User’s Guide D20709
User's Guide on how to use SafeCom Go Sharp.
D60603-21
26
1 Introduction
SafeCom Go Xerox

SafeCom Go Xerox Administrator’s Manual D60705
Manual on how to install, configure and use SafeCom Go Xerox.

SafeCom Go Xerox User’s Guide D20705
User's Guide on how to use SafeCom Go Xerox.
Other manuals

SafeCom Save-O-Meter Administrators Manual D60640
This manual describes how to install and configure the Save-O-Meter and
Save-O-Meter widget.

SafeCom Mobile Print Administrators manual D60644
This manual describes install and configure SafeCom Mobile Print as well
as how users interface with it.

SafeCom G3 Administrator API Reference Manual D60822
Describes how to use the Administrator API to add, delete and modify
users and how to export tracking data.

SafeCom G3 Batch Print API Reference Manual D60823
Describes how to integrate SafeCom with other systems, such as
document archiving systems.

SafeCom G3 Administrator DLL Programmer’s Manual D60824
Describes the SafeCom Administrator DLL, a C programmer’s interface
that can be used to automate SafeCom administration tasks and integrate
SafeCom with existing systems.

SafeCom G3 Disaster Recovery Manual D60621
Describes disaster recovery process for a SafeCom single server solution.

SafeCom G3 Enterprise Disaster Recovery Manual D60622
Describes disaster recovery process for a SafeCom multiserver solution.
D60603-21
27
1 Introduction
1.12
About this manual
This manual applies to SafeCom G3 Server version S82 070.440*04, SafeCom
Device Server S82 060.060*03, SafeCom Controller version S80 508.780*64,
SafeCom Controller 3 Port version S80 312.750*67, SafeCom Controller 1 Port
version S80 304.750*67, SafeCom Go Canon version S88 010.020*09, SafeCom Go
HP version S89 nnn.050*09, SafeCom Go Kyocera S96 010.020*01, SafeCom Go
Lexmark S93 nnn.030*07, SafeCom Go Ricoh S87 nnn.020*10 and SafeCom Go
Samsung S94 nnn.010*07.
This manual is organized as follows:
D60603-21

Chapter 1 Introduction lists the supplied SafeCom documentation,
introduces SafeCom relevant terms, system requirements, and describes
how this manual is organized.

Chapter 2 Frequently asked questions contains answers to some of the
questions frequently asked by administrators.

Chapter 3 Planning your SafeCom solution helps and guides the
administrator to a successful SafeCom solution that reduces print costs, is
easy to administrate and yields high user satisfaction.

Chapter 4 Installation covers installation scenarios, including advanced
and multiserver installation.

Chapter 5 SafeCom Administrator describes the menus and dialogs of the
administrative application, SafeCom Administrator.

Chapter 6 Manage servers describes how to manage server groups and
servers, in particular groups with multiple servers.

Chapter 7 Manage users links the SafeCom options discussed during the
planning phase in Chapter 3 with easy-to-follow step-by-step procedures.

Chapter 8 Manage devices describes how to manage devices from within
SafeCom Administrator.

Chapter 9 SafeCom Tracking describes how tracking is done, how to plan
and configure the tracking solution, define costs via charging schemes and
how to work with the tracking data.

Chapter 10 SafeCom Rule Based Printing (RBP) describes how to plan
and configure rule based printing.

Chapter 11 SafeCom Client Billing describes how to plan and configure
your billing solution, including how to import and work with billing codes.

Chapter 12 SafeCom Pay describe how to plan and configure your pay
solution, choose accounting policy, ensure users pay and use deposit and
withdraw credits from users’ accounts.
28
1 Introduction
1.13

Chapter 13 SafeCom Device Utility describes how to use SafeCom Device
Utility to load device software and configure devices.

Chapter 14 Format of tracking data describes the format of the exported
tracking data.

Chapter 15 SafeCom ID Devices contains brief description of the standalone card readers and their status signals.

Chapter 16 Troubleshooting contains hints for troubleshooting.

Chapter 17 Administrator’s installation notes contains forms that can be
used to record information about the SafeCom solution.
Document history
Revision D60603-21


Corrected section 4.4 SafeCom Application Print to describe correct
installation method.
Added tip about backing up replication configuration, 4.6.5
Revision D60603-20

Support for SafeCom PopUp on Mac computers (4.14.2)
Revision D60603-20





SafeCom G3 Server version S82 070.440*04.
Updated section 4.3.6 scPrintClient.ini file.
Updated section 10.2 Planning your SafeCom RBP solution.
Updated section 4.14.1 Setup SafeCom PopUp.
Updated sections 5.8.8 Account, 12.5.3 User properties dialog, 12.5.7
Deposit credits, and 12.5.8 Withdraw credits due to GUI change in
Account tab in User Properties dialog.
Revision D60603-19





SafeCom G3 Server version S82 070.440*03.
New sections Delegate Print (5.8.7) and User Access Rights (5.8.2).
Print authentication by card installation requirements outlined (4.13.2)
and (4.14).
Corrected cross-references in sections 7.3.5, 7.3.6 and 7.3.7 to section
7.3.17 Search filter.
Added note to section 4.3 SafeCom Print Client regarding Windows Vista.
Revision D60603-16


D60603-21
SafeCom G3 Server version S82 070.420*06.
If the connection to the SafeCom server fails, it is now possible for a user
with SafeCom Print Client installed to print (4.3).
29
1 Introduction
Revision D60603-15



SafeCom G3 Server version S82 070.420*04.
Minor changes in the Configure Pull Port dialog (4.13) and Configure Push
Port dialog (9.3.4).
SafeCom PopUp uses localization file scPopUp_lang.ini (4.14).
Revision D60603-14



SafeCom G3 Server version S82 070.420*03.
Updates to section on SafeCom Device Servers (5.14).
New process for adding a device to a SafeCom Device Server in SafeCom
Administrator (8.4).
Revision D60603-13











SafeCom G3 Server version S82 070.420*02.
Updated list of used inbound and outbound ports (3.8.4).
New section on SafeCom Print Client. Users can now submit print jobs
directly to a printer if the SafeCom server is offline (4.3.4).
New section on repair replication (4.6.5).
Updated section on Save-O-Meter (5.4.7).
E-mail template to remind users of an ID code about to expire (7.19).
Log in to SafeCom Administrator with Windows credentials (5.8.4).
New listing of SafeCom Device Servers (5.14).
Improved add server process (6.3).
Security option to hide ID codes and/or document names (7.8 and 7.9).
Customize the format of auto-generated ID codes (7.14).
Revision D60603-12





D60603-21
SafeCom G3 Server version S82 070.410*07.
Resend configuration to device (8.3.1).
In the SafeCom Administrator the devices can now be found using the MAC
address (8.5.2).
Run import of billing codes immediately (11.4).
In the SafeCom Administrator it is now possible to sort Groups
alphabetically.
30
1 Introduction
Revision D60603-11

SafeCom G3 Server version S82 070.410*05.
Revision D60603-10



SafeCom G3 Server version S82 070.410*04.
Minimum server requirements 2003 SP2 (both 32-bit and 64-bit).
Troubleshooting: Import billing codes: No codes imported (16.35).
Revision D60603-09





D60603-21
SafeCom G3 Server version S82 070.410*02.
The daily import of users (and billing codes) can now be scheduled to
occur every: 1, 2, 4, 6, 12, and 24 hours.
SafeCom Direct Print Tracker is renamed to SafeCom Print Tracker.
Updated chapter 11 SafeCom Client Billing.
Section 9.3 and 9.4 include information about the SafeCom Push Port and
the SafeCom Port Configurator.
31
2 Frequently asked questions
2
Frequently asked questions
There are no stupid questions, only stupid answers. Asking questions and
finding answers is a popular way to acquire new knowledge. In the following
subsections you will find answers to some of the questions frequently asked by
administrators.
2.1
What are the benefits of Pull Printing?

Use cost-effective workgroup devices as personal devices - without
jeopardizing document security. This means fewer devices to service,
since all the smaller personal devices can be taken out of service. With
fewer devices office space is freed up and floor plans can be designed
more freely and user friendly.

Documents follow users to their choice of device. If one device goes out
of order users can just collect their document at another SafeComenabled device.

Avoid situations where uncollected documents clutter the device‘s output
bin. Get rid of the frustration of finding that someone else took your
document or that you cannot find it in the pile of uncollected documents
that are scattered around the device. The wastebasket (or paper recycle
bin) will no longer contain uncollected documents and you can abolish the
use of banner pages to separate documents.

Depending on your printing environment users may need access to just
one shared SafeCom Pull Printer on a server in order to be able to print
on any SafeCom-enabled device (3.5.7). This gives way to a much less
complex printing environment and very little or no print queue setup on
the users’ computers.

When the users are logged in at the device they have full control and
time to load stationeries, transparencies, labels or other media that may
require manual feed.

Users who print many small documents do not need to rush to the device
every time they print. They can collect their documents when it suites
them.

The time spent at the device waiting for the documents to print is limited
because workgroup devices can output 40 or more pages per minute.
Workgroup devices will typically support double-sided print (duplex),
printing multiple pages on the same page (N-up printing) and booklet
printing. With booklet printing an 8-page document will print on 2 sheets
of paper (paper use is reduced with 75%).
In addition to these benefits you should consider the additional benefits you
can gain by installing any SafeCom add-on modules: SafeCom Tracking (9),
SafeCom Rule Based Printing (10), SafeCom Client Billing (11), and SafeCom Pay
(12).
D60603-21
32
2 Frequently asked questions
2.2
What devices are supported?
The SafeCom Go integrates with the touch-screen control panel of
Multifunction Printers (MFPs) from Canon, Fuji Xerox, HP, Konica Minolta,
Kyocera, Lexmark, Océ, Ricoh, Samsung, Sharp and Xerox.
For other networked devices the external SafeCom Controller hardware can be
connected and used and printing is via TCP port 9100 or similar. You do not
need additional network outlets since the SafeCom Controller has a built-in
extra port (RJ-45 Ports, 10/100 BASE-TX). The IP address can be assigned via
DHCP (dynamic or fixed) or manually.
The flexibility of the external SafeCom hardware enables you to change printer
vendor and continue to use your SafeCom hardware with the new devices. The
SafeCom Controller is Flash upgradeable and features a web interface for easy
maintenance and configuration.
2.3
Is Copy Control supported?
Yes, on selected Multifunction Printers (MFPs) the SafeCom solution can control
access to the copy function. The user has to log in before copying is allowed.
2.4
Is it possible to charge for print costs?
Yes, with SafeCom Tracking you can monitor print and copy usage and use the
recorded data for subsequent departmental invoicing. Tracking applies to:



Documents printed directly to the device (Push Print)3
Documents requiring user login at the device (Pull Print)
Copies made after user login at the MFP (Copy Control)
With SafeCom Pay (12), an add-on to SafeCom Tracking (9), users can be
required to pay upfront for printing and copying. With SafeCom ePay users can
revalue their account.
2.5
Is it necessary to install software on the users’
computers?
No, it is normally not necessary to install software on the users’ computers.
However, there are a few exceptions were it is necessary to install a local
SafeCom Pull Printer on users’ computers (3.5.5).
3
D60603-21
Tracking of Push Print does not require SafeCom device software or hardware.
33
2 Frequently asked questions
2.6
How are users authenticated?
Users can log in by card or ID code. Refer to 3.3. A complete list of supported
ID devices can be found in 1.10.5. There are basically two types of ID devices to
choose from:
2.7

Card Reader
All the user’s documents are printed as the user’s personal card is used.

Card Reader and touch-screen
Document security can be enhanced by requesting the user to enter a
personal PIN code when using their card. Or the user can enter an ID code
instead of using a card. Once logged in the user can print all documents
with a single touch or browse through the list of documents to print,
delete, retain, or request multiple copies of individual documents.
How are users managed?
Users can be created in advance, either manually or through a user import
wizard (7.3), or they can be created the first time they print.
2.8
How are users with the same name handled?
Users with the same name from multiple can be added to the SafeCom solution.
User logon does not have to be unique across domains. A user John Smith (JS)
within domain A is different from the user John Smith (JS) within domain B, and
different from John Smith (JS) with no domain info.
2.9
How many users, printers, and documents can
a server handle?
The bottleneck is the number of concurrent documents (print jobs) to and from
the SafeCom server. The performance of a SafeCom server is comparable to
that of a Windows print server. This means that a SafeCom server is capable of
supporting approximately as many devices as you would normally install on an
equivalent Windows print server.
2.10
Can access to devices be restricted?
Yes, it is possible to control users’ access to devices (printers and MFPs) based
on the organizational relationship between the user and device (5.12) or with
Rule Based Printing (10.1).
D60603-21
34
2 Frequently asked questions
2.11
Are SafeCom solutions scalable?
Yes, with a SafeCom Enterprise Server license it is possible to use multiple
servers to scale the SafeCom solution to match the demanding requirements of
large installations with thousands of users and hundreds of devices.
Scalability is achieved by adding the required number of SafeCom servers.
Users can roam between locations to collect their documents at any SafeComenabled device and at any location regardless of to which SafeCom server the
document was printed.
Large companies and organizations that use multiple Windows print servers to
handle printing today are likely to need SafeCom Enterprise Server license.
2.12
How does a solution with multiple servers
work?
A SafeCom multiserver solution consists
of one SafeCom master server and one or
more SafeCom slave servers.
The SafeCom master server uses the
replication capabilities of its Microsoft
SQL Server to ensure that all SafeCom
slave servers’ databases are up-to-date
at all times. The SafeCom slave servers
can use the free Microsoft SQL Server
2008 R2 Express and is not required to
run a licensed Microsoft SQL Server.
SafeCom
Server
Master
Printers
SafeCom
Server
Printers
SafeCom
Server
Printers
A user’s home server denotes the SafeCom server where the user’s print jobs
are stored. Because data about users and devices is known on all servers, only
the users and devices belonging to a particular slave server (home server) will
be affected if that server goes down.
Enterprise customers where printing is mission-critical often use Microsoft
Cluster Service (4.8) to further ensure the availability of the SafeCom servers.
SafeCom print queues can be installed on any of the SafeCom servers, but most
enterprise customers choose to install print queues on the SafeCom slave
servers only and keep the master server free from print processing tasks so it
only needs to replicate data (and collect tracking data from the slaves).
It is possible to distribute the print processing task to ordinary Windows print
servers by doing a SafeCom client installation (4.2.3) on these. However, this
will increase the network load, as Pull Print jobs will have to go onto the
network an extra time (to get transferred from the Windows print server to the
user’s home server). This may slow performance if the resulting print jobs tend
to be big in terms of file size. One cannot assume that the print job will be
small in file size, just because the original document is small. We have seen
examples where a 1Mb (2-page) PDF file grew to +500Mb. This is very printer
driver dependent.
D60603-21
35
2 Frequently asked questions
2.13
Can documents be printed securely?
Yes, with a SafeCom Encryption documents can be encrypted on the network;
from the moment the user clicks print on the computer and until the document
is collected at the device. This prevents anyone from reading the documents,
should they be intercepted on the network. Documents are always encrypted
when they stored for later printing (4.15).
Basic document security is achieved by requesting users to log in by means of
both a personal ID card (or ID code), and a PIN code when they collect their
documents at the device.
2.14
What happens to uncollected documents?
Documents remain on the SafeCom server until the user logs in at the device to
collect the documents. Documents that are not collected by users are
automatically deleted after a configurable time.
2.15
Is it always possible to print?
Like with any other computer system it cannot be guaranteed that printing will
always be possible. The SafeCom solution is depending on the stability of your
network, devices and computers, especially the hard disks. However, in some
aspects a SafeCom Pull Print solution will give you a more redundant printing
solution, because if a device fails users can just collect their documents at
another device.
In general you should apply the same measures that are taken to ensure that
Windows print servers and Windows domain controllers are up and running at
all times. Typical technologies that can be applied to reduce the risk of failure:




2.16
Hard disks use RAID or similar technology.
Microsoft Cluster Service (4.8).
Network connections are duplicated.
Backup of databases, so you can re-create the SafeCom solution in case of
computer crash (3.9).
Can print usage be tracked without hardware?
Yes, with the Push Print tracking concept in SafeCom Tracking users can print
directly to the device and still have their print usage tracked. It is not
necessary to install dedicated SafeCom hardware. The device can be networked
or locally attached to a Windows computer via a parallel, USB or SCSI port.
D60603-21
36
2 Frequently asked questions
2.17
Can a Pull Printer be used for Push tracking?
Yes, a SafeCom-enabled device can also be used to track documents that are
sent directly. In other words, users are offered the choice of Push or Pull
Printing, while maintaining total print cost management. To prevent documents
from being mixed, incoming Push Printed documents are put on hold as long as
someone is logged in at the printer or MFP.
2.18
What happens if the SafeCom solution stops
working?
In case of any problems the SafeCom solution has three methods to
communicate this to the outside:
2.19

On the user’s computer
A message appears on the user’s computer screen when trying to print via
the SafeCom solution. The message can read: “Unable to connect to
SafeCom server. Document is not printed. Please contact your
administrator!”
Refer to 16.33 to see additional messages.

At the device
An OUT OF ORDER screen is displayed on the SafeCom-enabled device
while the problem persist (16.10).

E-mail to administrator
The administrator can receive service and error (event log) messages via
e-mail (5.7.4).
What is the administrative overhead?
Under the right circumstances your SafeCom solution is capable of creating
users automatically the first time they print via the SafeCom solution. The
system can send a welcoming e-mail with instructions to new users the first
time they print. This method reduces the administrative overhead to a
minimum (3.4.2).
In Chapter 3 Planning your SafeCom solution you learn how your SafeCom
solution can become one that reduces print costs, is easy to administrate and
yields high user satisfaction. Chapter 3 features a checklist for planning your
SafeCom solution (3.2), a section on roll out considerations (3.7) and input to
the administrative procedures you need to have in place (3.7.3).
In Chapter 16 Troubleshooting is a comprehensive. You can even configure the
SafeCom solution to e-mail you service and error (event log) messages. The
most common problems reported by end-users have been compiled into an
online SafeCom Help Desk Assistant available at safecom.eu/help
D60603-21
37
2 Frequently asked questions
2.20
What about integration with other systems?
In addition to being a modular solution, the SafeCom solution also features a
number of Application Programming Interfaces (APIs). The SafeCom
Administrator API allows you to automate tasks and integrate the SafeCom
solution with other systems. It is an XML-based tool available as an executable
and DLL. The SafeCom Batch Print API can be used for integration with
document archiving systems.
SafeCom a/s is always ready to discuss customized development, if this is
required to optimize your print and copy solution. Please contact
[email protected] to hear about possibilities.
2.21
Does it pay to apply a SafeCom solution?
It is a common (and costly) mistake to compare the price of a SafeCom solution
with the purchase price of today’s devices. The purchase price of the device
constitutes only a small fraction compared to the lifetime costs of consumables
(paper, toner, and moving parts).
Calculations should be based on the amount of money saved due to reduced
print costs and administrative and organizational benefits. The investment in a
SafeCom solution will typically be returned within the first year.
D60603-21
38
3 Planning your SafeCom solution
3
Planning your SafeCom solution
3.1
Introduction
We want your SafeCom solution to be one that reduces print costs, is easy to
administrate and yields high user satisfaction. To accomplish this you need to
understand your options before you plan your SafeCom solution.
3.2
Checklist – to help you on the way
Use the checklist below to plan/design the SafeCom Smart Printing solution.
Table 2 Checklist for SafeCom Smart Printing solution
Topic
Notes
Responsibility
Name of person:
Functionality
□ Pull Print □ Tracking □ RBP
□ Client Billing
□ Pay □ ePay
Users
Number of users:
User authentication
□ Card, and type of card:
□ Import cards (conversion)
□ ID code
□ PIN code
User creation
Import users from
□ Active Directory (AD)
□ File
□ Other
□ Create users at first print
□ Create users manually
Server(s)
Enterprise server
□ Multiserver Support
□ Job Data Logon
□ Cluster Support
□ Reports
□ Web Interface
□ Mobile Print
Computer name / address:
Hardware (CPU, RAM, Disk):
Clients
□ SafeCom Print Client
D60603-21
39
3 Planning your SafeCom solution
Topic
Notes
Devices
SafeCom Go
□ Canon □ HP
□ Kyocera □ Lexmark
□ Ricoh □ Samsung
SafeCom Go/Device Server
□ Fuji Xerox □ HP
□ Konica Minolta
□ Océ □ Sharp □ Xerox
SafeCom Go/Controller
□ Sharp □ Xerox
SafeCom Controller
□ SafeCom Color Front-end
□ SafeCom ID Device
Additional topics
3.3
User authentication by card or ID code
Pull printing requires users to log in at the device. Authentication by card is a
convenient method and the obvious choice when cards are used for existing
purposes, such as building access.
There are also solutions where users authenticate themselves by entering an ID
code instead of using a card. The ID code is case sensitive and can be the user’s
phone number, employee number, student number, social security number4 or
another number that is unique for the user and easy to remember.
Authentication by ID code is possible with the SafeCom Go products that
integrate with the device’s control panel or the external SafeCom Controller in
combination with the SafeCom Color Front-end. Furthermore you can enhance
security by requesting users to enter a personal 4-digit PIN code.
If stand-alone card readers are used for authentication, card registration is
manual, see 3.4.5, or via import, see 3.4.1.
4
D60603-21
The legislation in some countries does not allow the use of social security numbers.
40
3 Planning your SafeCom solution
3.4
User creation and management
Users can be added, modified, and deleted through SafeCom Administrator.
Creating and managing users are described in the following sections.
User-related data is sorted according to the following categories.
3.4.1

Personal data
Personal data includes the user’s full name (John Smith), user logon (JS),
domain and e-mail ([email protected]). This data can normally be imported.
The user logon is a mandatory maximum of twenty (20) characters and
must be unique within a domain. User logon is normally the same as the
user’s Windows logon.

Authentication data
Authentication data includes the card number and an optional 4-digit PIN
code. If cards are already used for existing purposes, such as building
access, then it may be possible to import data from an existing database.
The card number is mandatory, case sensitive, maximum thirty-nine (39)
characters and must be unique.

Settings data
Settings data is specific to the SafeCom solution, so it is not possible to
extract and import this kind of data from other systems. However, to
make administration easier, define a default user and let new users
inherit settings data from the default user (7.2).
Import user data from other systems
To make administration easier, data can be imported from other systems
including those solutions with a large number of users.
SafeCom Administrator includes a user import wizard that can import personal
data via Windows Active Directory (AD) and Novell eDirectory (NDS eDirectory
v.8.7.3 or later). It is also possible to import both personal and authentication
data via XML and CSV (7.3).
SafeCom Administrator API (option) is an XML-based tool that makes it possible
to manipulate multiple users, automate tasks and integrate your SafeCom
solution with other systems.
D60603-21
41
3 Planning your SafeCom solution
3.4.2
Create users at first print
The SafeCom solution is capable of creating users automatically the first time
they print via the SafeCom solution. This method keeps administrative
overhead to a minimum.
How it works:
1.
2.
3.
The user clicks Print in Windows and selects a SafeCom Pull Printer.
The document is transferred to the SafeCom server. The server extracts
the user logon and finds that the user is unknown and/or a card (or ID
code) needs to be registered with the user.
If the user is unknown the server creates the user based on the default
user properties. Next it sends an e-mail to the user, explaining how to
collect the document. See the e-mail template example in section 7.19.
Prerequisites:

The user logon (JS) and the e-mail domain (safecom.eu) can be combined
to create a valid user e-mail address ([email protected]).

The user must enter the e-mailed 8-digit PUK code to register their card
or ID code.
For step-by-step instructions see 7.4.
3.4.3
Let users register their card themselves
If your SafeCom solution allows users to enter a PUK code at the device, users
can register their cards themselves.
How it works:
1.
2.
3.
4.
5.
Start SafeCom Administrator and then locate or add the user.
Provide the user with the 8-digit PUK code or let the system e-mail the
PUK code to the user (5.7.4).
The user goes to the device and uses the card. The SafeCom solution finds
that the card is not yet registered to a user. The user is asked to enter
the PUK code once (and a personal PIN code twice).
If the PUK code is wrong the registration fails and the user is asked to
enter the PUK code again.
The user can click Exit to terminate the process.
The card is registered with the user when the screen displays:
Operation succeeded. Please login again.
Prerequisites:

D60603-21
Users must be able to enter their PUK code at the device, for example by
having at least one MFP with SafeCom Go or a printer equipped with a
SafeCom Color Front-end.
42
3 Planning your SafeCom solution
3.4.4
Let users register an ID code themselves
If your SafeCom solution allows users to enter a PUK code at the device, users
can register an ID code themselves. The ID code is case sensitive.
Note: Normally the administrator handles the registration of user and ID code.
See to 3.4.6.
How it works:
1.
2.
3.
4.
5.
Start SafeCom Administrator and then locate or add the user.
Provide the user with the 8-digit PUK code or let the system e-mail the
PUK code to the user (5.7.4).
The user goes to the device to log in. The user enters a unique ID code.
The SafeCom solution finds that -the ID code is not yet registered with a
user. The user is asked to enter the PUK code once (and a personal PIN
code twice).
If the PUK code is wrong the registration fails and the user is asked to
enter the PUK code again. The user can terminate the process.
The ID code is registered with the user when the screen displays:
Operation succeeded. Please login again.
Prerequisites:

3.4.5
All devices must allow users to enter PUK codes and ID codes.
Let administrator register cards to users
How it works:
1.
2.
3.
4.
Start SafeCom Administrator and then locate or add the user.
Open the ID code tab in the User properties dialog (5.8.3).
Click Listen and use the card with the connected card reader.
If no PIN code is entered the user is assigned the default PIN code ‘1234’.
Prerequisites:



D60603-21
The computer must have a card reader installed (4.18).
Users must turn up in person to have their card read and a person with
administrator rights must be present to operate the computer.
Administrator must inform the user of their PIN code.
43
3 Planning your SafeCom solution
3.4.6
Let administrator register ID code with users
How it works:
1.
2.
3.
4.
Start SafeCom Administrator and then locate, or add the user.
Open the ID code tab in the User properties dialog (5.8.3).
Enter the ID code (case sensitive).
If no PIN code is entered the user is assigned the default PIN code ‘1234’.
The user may change the PIN code subsequently (3.4.7).
Prerequisites:

3.4.7
Administrator must provide users with an ID code and PIN code.
Allow users to change their PIN code
If Allow users to change PIN code is checked on the Users tab in the Server
properties dialog (5.7.2), then users can change their PIN code using any of the
below methods:


D60603-21
Using the SafeCom G3 Web Interface.
On devices equipped with SafeCom Color Front-end.
44
3 Planning your SafeCom solution
3.4.8
Determine user’s home server
If SafeCom Multiserver Support is enabled the home server denotes the
SafeCom server where the user’s print jobs remains. If the server group consists
of only one SafeCom server there is no need to specify home server, since it is
identical to that one SafeCom server.
The user’s home server can be specified in SafeCom Administrator. Refer to
5.8.1. If the user changes home server documents will not follow, but will be
deleted according to the specified time jobs are allowed to remain on that
SafeCom server.
If no home server is specified the user’s home server will become the one that
is first contacted. First-time contact is when the user prints to a SafeCom
device or logs in at a SafeCom device.
Users that are created at first print (3.4.2) will by default get the master server
as home server.
3.5
Overview of software installation
In most cases it is sufficient to install a SafeCom server and a shared SafeCom
Pull Printer on the server.
If you have multiple Windows print servers with shared printers you can turn
these printers into SafeCom Pull Printers by making them use the SafeCom Pull
Port, a special port monitor (3.5.4). You still need to install SafeCom hardware
at the physical device to allow Pull Printing.
To administrate your SafeCom solution from other computers, simply install the
SafeCom Administrator on those computers (5.2).
To release yourself of some of the administrative obligations you can assign
administrator rights to appointed SafeCom users.
D60603-21
45
3 Planning your SafeCom solution
3.5.1
Server installation
You need to make a SafeCom Server installation on a server computer. Just
insert the SafeCom CD and select Server installation (4.2.2). This will install all
the required software, including the port monitor SafeCom Pull Port and the
administrative application SafeCom Administrator. Refer to 1.10.1 for a
description of the server requirements.
The Server installation allows you to specify two destination folders; one for
the program files and another for the print jobs. You may wish to locate the
print jobs on a hard disk equipped with RAID or similar technology.
The default installation folder is:
C:\Program Files\
SafeCom\SafeComG3
3.5.2
Multiserver installation
The SafeCom master server must run Microsoft SQL Server. You need to make a
SafeCom Server installation on each server as outlined in 3.5.1. You use
SafeCom Administrator to group the servers together. The steps involved are
described in 4.6.
3.5.3
Disk space considerations
The amount of recommended disk space on the SafeCom server depends on a
number of parameters: The number of users, number of documents, the size of
these documents and the time they are stored before they are collected by the
users at the devices.
Through the SafeCom Administrator you can specify how often uncollected
documents should be deleted and if users should be notified by e-mail in
advance about this (5.7.1).
With today’s low storage prices we recommend something like 100 Mb per user
for printing purpose. The SafeCom software itself requires less than 25 Mb.
disk space = average number of jobs on the server per user  average size of jobs
D60603-21
46
3 Planning your SafeCom solution
3.5.4
Shared SafeCom Pull Printer
The easiest way to make SafeCom Pull Printing available to users is to make an
existing shared Windows printer on the SafeCom server or on a Windows print
server use the SafeCom Pull Port, a special port monitor that sees to the
transfer of documents to the SafeCom server.
Prerequisites:


A Client installation is performed to install the SafeCom Pull Port on the
Windows print server (4.2.3). The SafeCom Pull Port is installed on the
SafeCom server as part of the Server installation (4.11).
The SafeCom Pull Port should be set to Use network logon.
To avoid interfering with your users while you test your SafeCom solution, we
recommend leaving shared printers as they are and just add a few new shared
SafeCom Pull Printers, dedicated to testing SafeCom.
3.5.5
Local SafeCom Pull Printer
A local SafeCom Pull Printer (4.12) must be installed on the user’s computer in
order to print encrypted (4.15). In all other cases it is sufficient to use a shared
SafeCom Pull Printer. However, SafeCom PopUp (4.14) must be running on the
user’s computer in these cases:



3.5.6
If users need to print from the computer without being logged into
Windows as themselves (4.13.4).
If SafeCom Rule Based Printing (10) is used to ask for print confirmation.
If SafeCom Client Billing is used and the user has to select a billing code
at print submission time (11).
SafeCom printers can reference multiple servers
The SafeCom Pull Port (4.13.3) and SafeCom Push Port (9.3) can reference
more than one SafeCom server.
This feature can be used to give additional resilience in a multiserver solution
where SafeCom printers are installed on local clients or print servers.
If the first SafeCom server on the list is unavailable it will try the next one.
After 60 seconds it will attempt to revert to the first SafeCom server.
D60603-21
47
3 Planning your SafeCom solution
3.5.7
Printer driver and document fidelity considerations
When printing, the SafeCom solution takes the output from the installed
Windows printer driver and stores it in the SafeCom database until the user
collects the document at the device.
The question is: What happens if the document is subsequently collected at a
different device model? The worst case is that the document prints incorrectly
or not at all. The best case is that the document prints correctly.
However, you may also experience something in between. For example if you
request printing on both sides (duplex) in the printer driver, but this is not
supported by the device. In this case you will probably get single sided
(simplex) print.
Document fidelity is determined by comparing the name of the printer driver
embedded in the print job with the list of driver names returned by the
SafeCom device. If there is no match it is considered low fidelity and the
document is labeled with a question mark [?]. Refer to 5.7.3 on how to
configure document fidelity.
In our experience document fidelity is pretty high if you use a printer driver
that generates PCL and subsequently collect the document at a printer that
supports PCL. The same goes for PostScript.
If you use many different devices from different manufacturers then you may
have to install multiple shared SafeCom Pull Printers, each one with their
specific Windows printer driver.
3.5.8
High Speed Print considerations
By enabling High Speed Print on the SafeCom-enabled device, documents that
are collected at the device are printed almost as fast as those that are printed
directly. This is because print data is sent directly to the device from the
SafeCom server.
However, as the print data is received directly by the device, it is not always
possible to hold off other users print jobs, while a user is logged in at the
device. Users may risk that the output bin contains other users’ documents.
This is obviously not an issue if management has decided to ban all direct
printing and only allow Pull Print.
Documents that are submitted via a SafeCom Push Port within the same
SafeCom group can be held off, but documents that are submitted via a
Standard TCP/IP Port cannot be held off.
D60603-21
48
3 Planning your SafeCom solution
3.6
Print from other systems
Even though the SafeCom solution is a Windows-based printing solution, it is
possible to print from other systems. This is described in the following sections.
3.6.1
Print from Apple Mac
Printing from Mac OS X Server via LPR/LPD is possible. The printing system in
Mac OS X is based on the Common UNIX Printing System (CUPS).
Printing from earlier versions of Apple Mac OS is possible using the crossplatform file and printer sharing solution DAVE from Thursby Software Systems,
thursby.com.
Prerequisites:

The Windows component Print Services for UNIX must be installed. The
Windows server must be restarted after installation.
If the user logon on Windows differs from the one on the Mac, then the user
logon on the Mac must be on the user’s list of aliases (5.8.6).
3.6.2
Print from UNIX
On UNIX it is possible to define an LPR/LPD printer that prints to the shared
SafeCom Pull or Push Printer on the Windows server.
Prerequisites:

The Windows component Print Services for UNIX must be installed. The
Windows server must be restarted after installation.
If the user logon on Windows differs from the one on UNIX, then the user logon
on UNIX must be on the user’s list of aliases (5.8.6).
3.6.3
Print from Novell
With Novell Netware 6 and NDPS (Novell Distributed Print Services) you can use
Novell iPrint to print via LPR to the shared SafeCom Pull or Push Printer on the
Windows server. Refer to novell.com for additional information.
3.6.4
Print from Host systems (mainframe)
From the Host system it is possible to define an LPR/LPD printer that prints to
the shared SafeCom Pull or Push Printer on the Windows server.
Prerequisites:

D60603-21
The Windows component Print Services for UNIX must be installed. The
Windows server must be restarted after installation.
49
3 Planning your SafeCom solution
3.7
Roll out considerations
We want your SafeCom solution to be easy to administrate and yield high user
satisfaction. The following sections describe how you can make your SafeCom
solution a successful one.
3.7.1
Test solution prior to roll out
Before you roll out your SafeCom solution you should test it to make sure that
everything works as expected.
We encourage you to involve a sampling of users during testing. Users are an
invaluable source of information, and are likely to come up with suggestions as
to how you should implement your SafeCom solution. Users can also help
spread the word about the SafeCom solution in the organization.
3.7.2
Inform and prepare your users
A SafeCom solution affects the way users print. It is very important for an
organization to use the channels available to them to inform users how their
daily work is affected.
Even though the SafeCom solution is as easy to use as a cash dispenser, we urge
you to schedule a couple of short user sessions at a SafeCom-enabled device.
During these sessions, demonstrate the SafeCom solution, allow users to try it
hands-on and answer any questions that users have.
You may wish to temporarily post an instruction sheet at SafeCom-enabled
devices. These instructions should briefly introduce new users to how they
should operate the SafeCom-enabled device. Instruction sheets are available on
our web site, safecom.eu.
3.7.3
Clearly define responsibilities and procedures
The overall responsibility for the SafeCom solution should be assigned to a
single person. That way there will be no doubt as to who is responsible.
You need to decide who should have rights (5.8.4) as Technician and
Administrator.
If your organization has a help desk you should ensure that help desk staff feel
comfortable with the SafeCom solution and are capable of answering questions
and resolving or escalating problems relating to the SafeCom solution. We
encourage you to include your help desk contact information on the Instruction
sheets you can post at your devices.
D60603-21
50
3 Planning your SafeCom solution
You can also include help desk contact information on the OUT OF ORDER
screen, which the SafeCom Front-end displays when communication is lost to
the SafeCom server. The SafeCom Front-end returns to normal operation by
itself a couple of minutes after communication is restored.
The person responsible for the SafeCom solution should ensure that
administrative procedures are in place for the following:





3.8
Backup and restore (3.9).
When you need to add new users (7.5).
When users lose their ID card (7.15).
When users forgets their ID code (7.16).
When users forget their PIN code (7.17).
Preemptive support and diagnostic tools
The following subsections describe the support and diagnostic tools.
3.8.1
Event log and e-mail notification
The SafeCom server writes information to its Event log (5.16). You can access
the Event log from the Servers menu in the SafeCom Administrator. Events
older than one year are automatically deleted from the database.
Furthermore the administrator can receive service and error (event log)
messages via e-mail (5.7.4).
D60603-21
51
3 Planning your SafeCom solution
3.8.2
scping
Use the supplied command line utility scping to search for SafeCom servers.
Syntax:
scping [Group|Ip|-h:Host|-b:IpMask [-c]] [-x:Host:Port] [/?]
Note: On Windows 64-bit the program is names scping64.exe.
Group
Ip
-h:Host
-b:IpMask
-c
-x:Host:Port
Broadcast for server group.
Ping server on specified IP address.
Ping server on specified host.
Broadcast for servers on specified subnet.
Try to connect server to confirm it's running.
Try to establish a connection to Host using Port.
Examples:
scping
scping
scping
scping
scping
3.8.3
MyServerGroup
10.0.0.10 -c
-h:MyServer -c
-b:10.255.255.255
-x:MyServer:7700
SafeCom Service and processes
The SafeCom Service:

scSafeComService.exe
The SafeCom Service launches the following processes:




scBroadcastServer.exe
scJobServer.exe
scMoneyServer.exe
scTrackingServer.exe
Note: On Windows 64-bit the files are named *64.exe.
D60603-21
52
3 Planning your SafeCom solution
3.8.4
TCP and UDP port numbers used by SafeCom
TCP
50003
50002
50001
9443
9100
8080
7900
7723
7700
7600
7500
7400
7290
5742
5740
D60603-21
Usage
Used between SafeCom Device Server and Konica
Minolta/Océ device
Used between SafeCom Device Server and device
Used between SafeCom Device Server and HP
Future Smart device
SafeCom Mobile Print - web print
Used for sending print data to the device via
TCP/IP (raw).
Web browser
Used between the SafeCom Job Server(s) and the
SafeCom Tracking Server. In a multiserver
solution with offline tracking outbound port 7900
is used from the master Job Server to the slave
Tracking server(s). With online tracking port 7900
is used from the slave Job Server to the master
Tracking server. In case of a single server solution
the communication does not go onto the network,
but the port still need to be open.
Used for TELNET connection to the SafeCom Job
Server to control the SafeCom Trace Facility.
Used between the SafeCom Job Server and
SafeCom applications and SafeCom devices
(SafeCom Go and SafeCom Controller). Also used
between the SafeCom Master and Slave servers.
Used between the SafeCom devices and SafeCom
Print Client version S82 070.410 and older.
SafeCom Print Client version S82 070.420 and
newer use port 7700.
Used between the SafeCom Job Server and
SafeCom devices.
Used between the SafeCom Job Server(s) and the
SafeCom Money Server. In a multiserver solution
port 7400 is used from the slave Job Server to the
master Money server. In case of a single server
solution the communication does not go onto the
network, but the port still need to be open.
SafeCom Mobile Print - web print
Used between the SafeCom Administrator and
SafeCom Go, SafeCom Device Server and SafeCom
Controller.
Used by the SafeCom Application Print, SafeCom
Pull Port and SafeCom Push Port and SafeCom
PopUp dialog (scPopup.exe) for presenting dialogs
on users’ screen.
Protocol
HTTPS
HTTPS
HTTPS
HTTPS
RAW
HTTP
SafeCom
TELNET
SafeCom
SafeCom
SafeCom
SafeCom
HTTP
SafeCom
SafeCom
53
3 Planning your SafeCom solution
TCP
1433
995
993
636
389
465
443
143
110
80
25
UDP
5742
5741
1434
161
D60603-21
Usage
Used by default for replication between Microsoft
SQL servers. May be different on your server.
Named instances use dynamic ports. Can be
specified during advanced installation (4.2.2).
SafeCom Mobile Print - e-mail print
SafeCom Mobile Print - e-mail print
Port 389 is used for user import from Active
Directory (AD) and port 636 is used if this needs to
be secure via SSL/LDAPS.
SafeCom Mobile Print - e-mail print
Used to contact MFP during operation
SafeCom Mobile Print - e-mail print
SafeCom Mobile Print - e-mail print
Used between the SafeCom Administrator and
SafeCom devices’ web interface.
Used for sending e-mails from SafeCom Server,
SafeCom Controller and device.
Usage
Used by the SafeCom Job Server, SafeCom Go,
SafeCom Device Server, SafeCom Controller and
SafeCom applications to find each other via the
SafeCom Broadcast Server.
Used between the SafeCom Administrator and
SafeCom Go, SafeCom Device Server and SafeCom
Controller.
Applications use this port to initially talk to the
SQL server to determine which TCP port (default
1433) should be used.
Used between the SafeCom Administrator and
SafeCom devices when adding devices or
retrieving status. Used by Port Monitor if SNMP
status is enabled.
Protocol
SQL
POP3 SSL
IMAP SSL
LDAP
LDAPS
SMTP SSL
HTTPS
IMAP
POP3
HTTP
SMTP
Protocol
SafeCom
SafeCom
SQL
SNMP
54
3 Planning your SafeCom solution
The following tables contain some typical SafeCom server and client
installations and list what inbound and outbound ports should be open if a
firewall, such as Windows Firewall (4.2.5), is installed on the computer.
SafeCom Server
TCP
In
SafeCom master server
with local database
7400
7500
7700
External SQL server
SafeCom master server
with external SQL server
14337
Out
25
80
389
636
5740
5742
7700
79005
8080
9100
14336
25
80
389
636
UDP
In
5742
Out
5742
1434
1434
5742
5742
5742
5742
5740
5742
7400
7500
7700
SafeCom slave server
with local database
7500
7700
79009
7700
79008
8080
9100
80
5740
5742
7400
7700
8080
9100
5
With offline tracking outbound port 7900 if used to collect tracking data from the
slaves. With online tracking inbound port 7900 on the master must be open.
6
SQL server may use another TCP port than 1433.
7
SQL server may use another TCP port than 1433.
8
With offline tracking outbound port 7900 if used to collect tracking data from the
slaves. With online tracking inbound port 7900 on the master must be open.
9
With offline tracking inbound port 7900 if used to collect tracking data from the
slaves. With online tracking outbound port 7900 on the slave must be open.
D60603-21
55
3 Planning your SafeCom solution
SafeCom Device Server
SafeCom Device Server
TCP
In
5742
Out
80
443
7500
770010
UDP
In
5741
Out
161
5742
8080
9100
5000111
50002
5000312
10
If the job is stored on a SafeCom Print Client version S82 070.410 or older, then port
7600 is also used.
11
SafeCom Go HP Device Server
12
SafeCom Go Konica Minolta, SafeCom Go Océ
D60603-21
56
3 Planning your SafeCom solution
SafeCom Client and other
SafeCom Print Client
TCP
In
770013
Client with
local SafeCom printers
(Pull and Push Ports)
Client with
SafeCom PopUp
Client with
SafeCom Application Print
Client with
SafeCom Administrator
5740
SafeCom Controller
80
5742
Out
750014
7700
9100
5740
750015
7700
9100
UDP
In
5742
161
7700
80
5742
7500
7700
8080
161
5741
161
5741
7500
770016
9100
SafeCom Web Interface
Out
5742
161
5742
80
443
7700
8080
SafeCom Mobile Print
SafeCom
Mobile Print
Web print
Email print
TCP
In
7290
9443
110
143
Out
7290
9443
25
UDP
In
Out
465
993
995
13
SafeCom Print Client version S82 070.420 use port 7700. Previous versions also use
port 7600.
14
SafeCom Print Client by default use port 7500. However, if the SafeCom Print Client is
running on a server it is recommend to configure Default Server Port=7700 (see section
4.3.6) as this means that the SafeCom Print Client will keep the connection open to the
SafeCom Server instead of having to open and close the connection for each job.
15
SafeCom Pull Port by default use port 7700. However, if the SafeCom Pull Port is
running on a client it is recommend to configure Server Port=7500 as this means that
the SafeCom Pull Port open and close the connection for each document.
16
SafeCom Controller use port 7700 to collect documents from SafeCom Print Client
version S82 070.420. Port 7600 is used to collect documents from previous versions of
SafeCom Print Client. Port 7500 is used to collect documents from SafeCom servers.
D60603-21
57
3 Planning your SafeCom solution
The figure shows the connections between the different SafeCom components
and the TCP and UDP ports used for communication.
Legend:
SafeCom
Job
Server
(slave)
Print data via TCP 9100 (High Speed)
Print data via TCP 7500
Control data via TCP
Control data via UDP
TCP
7700
UDP
5742
SafeCom
Broadcast
Server
AD
online tracking only
TCP
7700
Mail
Server
TCP
25
user import
SafeCom
Tracking
Server
TCP
7500
SafeCom
Money
Server
UDP
1434
TCP
1433**
SQL Server
scEvent
scCore
* 636 if
secure via
SSL/LDAPS
TCP
7400
TCP
7900
SafeCom
Job
Server
(master)
TCP
7500
TCP
389*
scPurse
scTracking
** SQL Server
may use
another TCP
port
SafeCom
PopUp
UDP
5742
TCP
5740
SafeCom
Print Client
SafeCom
Web Interface
SafeCom
APIs
SafeCom
Money Loader
SafeCom
Pull Port
SafeCom
Push Port
TCP
7700
UDP
161
5741
SafeCom
Administrator
TCP
9100
SafeCom
Device Server
UDP
161
TCP
8080
5742
UDP
161
5741
SafeCom
Controller
TCP TCP
9100 443
5000x*
UDP
161
TCP
9100
TCP
80
5742
UDP
161
TCP
9100
TCP
80
5742
UDP
161, 5741
SafeCom Go:
Canon, HP, Lexmark,
Ricoh and Samsung
UDP
161
UDP
161
SafeCom Go/Device Server:
Fuji Xerox, HP,
Konica Minolta, Océ, Sharp
and Xerox
UDP
161
SafeCom Go/Controller:
Sharp, Xerox and others
* SafeCom Device Server may use additional TCP ports
Refer to the SafeCom Go Administrator’s Manual for details
If multiple servers are used each SafeCom slave server will use TCP port 7900
to deliver tracking data to the SafeCom Tracking server on the SafeCom master
server, either continuously (online tracking) or scheduled (offline tracking).
Refer to 9.9.
There is only one SafeCom Money Server and it resides on the SafeCom master
server. SafeCom slave servers will use TCP port 7400 to communicate with the
SafeCom Money Server on the SafeCom master server.
D60603-21
58
3 Planning your SafeCom solution
3.8.5
SafeCom SQL databases
The following databases are used:

SafeCom Job Database
Used by scJobServer.exe and scJobServer64.exe

SafeCom Event Log
Used by scEvent.dll

SafeCom Money Database
Used by scMoneyServer.exe and scMoneyServer64.exe

SafeCom Tracking Database
Used by scTrackingServer.exe and scTrackingServer64.exe
Each SafeCom server in the server group has its own SafeCom Job Database and
SafeCom Event Log. Events older than one year are automatically deleted from
the database.
The SafeCom Tracking Database is only relevant if your solution includes the
SafeCom Tracking or SafeCom Pay. The SafeCom Money Database is only
relevant if your solution includes the SafeCom Pay.
A server group should only use one SafeCom Money Server. This is located on
the SafeCom master server by default.
3.8.6
SafeCom database update log
A number of scdbu*.log files are created in the SafeCom installation folder
the first time the SafeCom Service is started after a new SafeCom server
version has been installed. The files are created whether or not trace is
enabled.
D60603-21
59
3 Planning your SafeCom solution
3.8.7
Windows registry settings
Use the Windows regedit program to view Windows registry settings. Settings
for the SafeCom Server software are stored at:

HKEY_LOCAL_MACHINE\SOFTWARE\
SafeCom\SafeComG3
If a 32-bit SafeCom G3 version is installed on Windows 64-bit:

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
SafeCom\SafeComG3
Settings for the SafeCom Port Monitors are stored at:
3.9

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\
Print\Monitors\SafeCom Pull Port

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\
Print\Monitors\SafeCom Push Port
Backup and restore
We recommend you have backup and restore processes in place for your
SafeCom solution. With well-defined and tested processes it is possible to
reduce downtime. With Microsoft Cluster Service (MSCS) the downtime can be
reduced even further.
If a Service Level Agreement (SLA) exists it may specify the accepted
downtime. The shorter the time period specified, the better prepared you have
to be to restore the SafeCom solution and the more evident is the need for a
clustered SafeCom solution.
When devising the backup and restore processes you should consider:





Standby computer to replace a faulty one (3.9.1).
Backup and restore SafeCom Windows registry settings (3.9.2).
Backup and restore any customized SafeCom files (3.9.3).
Backup and restore printer configurations (3.9.4).
Backup and restore SafeCom databases (3.9.5).
Note: The described processes do not include backup and restore of users’
uncollected and retained documents.
3.9.1
Standby computer equipment
If you have a complete standby computer, you will be in a good position to
immediately replace the one you currently use one should it become faulty. If
the standby computer is dedicated to the SafeCom solution you can reduce
downtime even further by ensuring that it is pre-loaded with the right Windows
Operating System and SafeCom software.
D60603-21
60
3 Planning your SafeCom solution
The SafeCom Server software must be the same version as on the computer it
is to replace. This is particularly important in a multiserver solution where all
the computers in the SafeCom group must be on the same SafeCom server
version. See Chapter 4 Installation.
To secure a smooth transition to the new server, it should inherit the Server
address and the computer name of the one it is replacing. That way all
references from SafeCom-enabled devices and SafeCom ports to the SafeCom
server will remain valid. You should either secure that your DHCP server will
give the new server the same IP address or you should give it a static IP
address.
You can further reduce downtime if the standby computer is already updated
with the more static SafeCom Windows registry settings (3.9.2), customized
SafeCom files (3.9.3) and printer configurations (3.9.4). That way you can
reduce the restore process to restoring the backup of the SafeCom databases.
If the computer is a SafeCom slave server it will automatically get its SafeCom
databases restored, as the SafeCom master server sees to this as part of the
replication process. It is recommended to reinitialize the subscription (4.6.7).
3.9.2
SafeCom Windows registry settings
It is particularly important that the location of print files as specified by the
Windows registry setting File Path (4.2.19) is the same on both the standby
computer and the current computer. Follow the steps below to backup and
restore the SafeCom Windows registry.
To backup:
1.
Open the Registry Editor and browse to:
HKEY_LOCAL_MACHINE\SOFTWARE\
SafeCom\SafeComG3
If a 32-bit SafeCom G3 version is installed on Windows 64-bit:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
SafeCom\SafeComG3
2.
3.
On the File menu click Export.
Specify File name and click Save.
To restore:
1.
D60603-21
Double-click the backup registry file and answer Yes when asked to
update the Windows registry.
61
3 Planning your SafeCom solution
3.9.3
Customized SafeCom files
The files listed below are typically customized or translated.



3.9.4
EmailWelcome.txt, EmailPUK.txt, EmailWarning.txt and
EmailJobDelete.txt (7.19).
ExcludeJobNames.txt (8.16).
JobNamePricing.txt (12.10.1)
Printer configurations
The Microsoft Print Migrator 3.1, available at microsoft.com/printserver, can
back up and restore all print shares and user permissions.
The Print Migrator does not back up the actual SafeCom Pull Port and SafeCom
Push Port monitors, only the ports’ attributes. Prior to the restore operation,
you must reinstall the original set of SafeCom port monitors to ensure complete
functionality.
Print Migrator comes with a command line interface printmig that takes these
switches: -? Help, -b Backup and –r Restore.
If the computer is clustered you must backup the cluster’s virtual server.
printmig –b \\filesrv\backup\printers.cap \\clustergroupname
where clustergroupname is the Network Name of the virtual server that
contains the Print Spooler resource. The printmig can be integrated into a jobscheduler, such as the Scheduled Task mechanism in Microsoft Windows.
Please refer to online help in Windows.
D60603-21
62
3 Planning your SafeCom solution
3.9.5
SafeCom databases
This section explains how to backup and restore the SafeCom databases.
SafeCom can work with the below two versions of the SQL databases.

Microsoft SQL Server
Must be purchased and licensed from Microsoft. Backup can be performed
by use of Microsoft SQL Server Management Studio, or an SQL client tool
that comes with the Microsoft SQL Server. Alternatively you can use the
Transact-SQL BACKUP DATABASE statement, and run the SQL command
line utility, osql.exe.

Microsoft SQL Server 2008 R2 Express
This is distributed with SafeCom. No license is required from Microsoft.
Database size is limited to 10 GB.
The SafeCom databases are created to use full recovery model in contrast to
simple recovery model. This can lead to large transaction logs if no scheduled
backup is put in place from the beginning.
Note: We recommend you establish a nightly scheduled full backup with a
maintenance plan that shrinks the transaction logs.
Go to microsoft.com for more information on the Microsoft SQL tools and
utilities mentioned above. To backup the database, use the supplied SafeCom
command line utility scBackup (3.9.6).
All SafeCom print files are by default stored in the folder:
C:\Program Files\
SafeCom\SafeComG3\Data
If a 32-bit SafeCom G3 version is installed on Windows 64-bit:
C:\Program Files (x86)\
SafeCom\SafeComG3\Data
Database files are by default stored in the folder:
C:\Program Files\
Microsoft SQL Server\MSSQL10_50.SAFECOMEXPRESS\
MSSQL\DATA
If a 32-bit SafeCom G3 version is installed on Windows 64-bit:
C:\Program Files (x86)\
Microsoft SQL Server\MSSQL10_50.SAFECOMEXPRESS\
MSSQL\DATA
D60603-21
63
3 Planning your SafeCom solution
3.9.6
scBackup
As mentioned in 3.9.5 you can use the supplied command line utility scBackup
to backup the SafeCom databases .scBackup must be Run as administrator.
The program works only if the database is set to use full recovery model.
Syntax:
scBackup.exe –b | -r <path>
Note: On Windows 64-bit the file is named scBackup64.exe.
Where –b specifies to backup data in the specified path and –r specifies to
restore data from the path. The backup results in the files: sccore.bak,
scevent.bak, scpurse.bak and sctracking.bak.
Note: To restore successfully the SafeCom server version must NOT change
from the time of backup to the restore is performed.
Example:
scBackup.exe –b C:\backup
During restore (-r) scBackup will attempt to stop the SafeCom Service and
subsequently restart the SafeCom Service. This will not work in a MS Cluster
environment or if other services depend on the SafeCom Service. In such cases
the SafeCom Service must be manually stopped and started.
The scBackup can be integrated into a job-scheduler, such as the Scheduled
Task mechanism in Microsoft Windows. Please refer to online help in Windows.
Note: The scbackup might fail if the backup is made from a database that is
newer than the database used to restore job. Instead, use an SQL Studio
manager that is capable of handling both database versions for both the
backup and the restore job.
D60603-21
64
3 Planning your SafeCom solution
3.10
SafeCom server trace facility
Note: Use the SafeCom trace facility only if SafeCom Support instructs you to
do so.
3.10.1 Enable trace
1.
2.
3.
Stop the SafeCom Service (16.30) and the Print Spooler.
On the SafeCom server create the folder c:\safecom_trace
Start the SafeCom Service and the Print Spooler.
Stopping the SafeCom Service and the Print Spooler and then deleting the
folder c:\safecom_trace will disable the trace again. The trace files (3.10.2)
will by default occupy maximum 220Mb of disk space.
Trace can also be turned on/off without disrupting the SafeCom Service
through a TELNET interface (3.10.3). This interface can also be used to
configure the trace facility, including the size and location of the trace files.
The SafeCom Service executes the supplied scStartup.cmd file in the
installation folder just before starting. By editing the scStartup.cmd file it can
be made to copy (and compress) the trace files before they are reset.
D60603-21
65
3 Planning your SafeCom solution
3.10.2 Trace files
Note: Use the SafeCom Trace Facility only if SafeCom Support instructs you to
do so.
Trace files are by default stored in the folder C:\safecom_trace
To change the default location of the trace files use the TELNET interface
(3.10.3) or modify these Windows registry:
HKEY_LOCAL_MACHINE\SOFTWARE\
SafeCom\SafeComG3\Trace
Value name
Enabled
(REG_DWORD)
TracePath
(REG_SZ)
TraceSize
(REG_DWORD)
Value data
0 = Disabled
1 = Enabled
Location for the trace files. Default is:
C:\safecom_trace
Set the maximum size of a trace file in
kilobytes. Default is 10485760 (10 MB).
Trace files also contain a number <number> as part of their filename. When a
trace file reaches the maximum size (10 Mb), a new trace file starts, and the
first trace file number is incremented by one. The trace folder contains two
versions of a trace file, the most recent and the preceding. Older versions are
automatically deleted.
Example:
C:\safecom_trace\SafeComService123.trc
C:\safecom_trace\SafeComService124.trc
Enabling the trace facility could result in a list of files twice as long as the list
below. The total number of trace files depends on the SafeCom installation as
well as the workstation it’s installed on.
Trace file names














D60603-21
AdmClient<no>.trc
AdmGui<no>.trc
BroadcastServer<no>.trc
DevMonServer<no>.trc
JobServer<no>.trc
keyManager<no>.trc
MoneyServer<no>.trc
PortConfigurator<no>.trc
PullPM2kSrv<no>.trc
PullPM2kUI<no>.trc
PushPM2kUI<no>.trc
SafeComService<no>.trc
SafeComWeb<no>.trc
SafeComWebconfig<no>.trc
66
3 Planning your SafeCom solution






scAppPrint<no>.trc
scCoInstall<no>.trc
scDevMonServer<no>.trc
scPopUp<no>.trc
scPrintClient<no>.trc
TrackingServer<no>.trc
Restarting the SafeCom Service clears the trace files (*.trc).
3.10.3 TELNET interface
Through the TELNET interface it is possible to enable, disable and configure the
SafeCom server trace facility. Use of telnet can be disabled by changing the
Windows Telnet Server’s Registry setting: TelnetPort value to 0.
1.
From the command prompt window, issue the telnet command. Enter:
telnet <address> 7723
2.
The SafeCom server prompts you for a username and a password of a
SafeCom user with Administrator rights. The default username is admin
and the password is nimda. Enter username:
admin
3.
Enter password:
nimda
Once you are logged in you will see the prompt:
sc.tel>
4.
Enter any of the TELNET commands below such as trace on to enable
trace or trace off to disable trace.










help – online help.
logoff – logoff from the TELNET session.
multiple info – listing of open connections.
server info – list status of servers (6.6).
trace info – information about current trace setup.
trace off – disable trace.
trace on – enable trace.
trace path <path> - specify a new location for the trace files.
trace size <n kilobytes> - set the maximum size of a trace file.
trace Store – write the trace setup into Windows registry.
Note: You can type help to see additional TELNET commands, and
help <command> to get help on a specific command.
5.
D60603-21
To close the TELNET session enter 'logoff'.
67
3 Planning your SafeCom solution
3.11
SafeCom device trace facility
To further assist the troubleshooting process it is also possible to obtain
information from the SafeCom-enabled device.
D60603-21

SafeCom Controller
The SafeCom Controller contains a debug interface. Instructions on how
to use enable and use this is forwarded on a per-case basis.

SafeCom Go
Please refer to the Troubleshooting chapter in the appropriate SafeCom
Go Administrator’s Manual. A complete list of manuals is available in
section 1.11.
68
4 Installation
4
Installation
4.1
Introduction
The installation of software and hardware is described in the SafeCom Go
Administrator’s Manual and SafeCom Controller Administrator’s Manual. See
section (1.11) for a complete list of these documents.
This chapter covers SafeCom installation, including multiserver (4.5.1) and
cluster installation (4.8).
Note: Use the forms in Chapter 17 to record your SafeCom solution
information.
4.2
The install program
SafeCom has two installation options:
4.2.1

Basic server installation
Select this 5-step Basic (4.2.1) installation of the SafeCom Server
Software and all required components to a default location.

Advanced installation
Select this to do a Server(4.2.2) installation that use an existing SQL
server or if there is a need to specify the location of SafeCom program
files, SafeCom print files and database location. This option also allows
Client (4.2.3) and Tools (4.2.4) installation.
Server installation (Basic)
Note: Microsoft SQL Server 2008 R2 Express is distributed with the software
and REQUIRES Microsoft .Net Framework 3.5 SP1 and Windows Installer 4.5.
Please visit microsoft.com to download and install these prior to the
installation of SafeCom G3.
1.
2.
3.
4.
5.
6.
D60603-21
Insert the SafeCom CD or download the safecom_g3_xxx_32bit.exe or
safecom_g3_xxx_64bit.exe file from the link supplied to you. The
installation must be Run as administrator. When the installation program
is launched click Next.
Read and accept the end-user license agreement. Click Next.
Click Basic server installation. Click Next.
Current settings are displayed. Click Install to accept and start the
installation. The Microsoft SQL Server 2008 R2 Express is also installed.
The Print Spooler is restarted at the end of this process.
Click Finish to launch SafeCom Administrator (5.1).
If Windows Firewall is on, then open ports as specified (4.2.5).
69
4 Installation
4.2.2
Server installation (Advanced)
Note: Microsoft SQL Server 2008 R2 Express is distributed with the software
and REQUIRES Microsoft .Net Framework 3.5 SP1 and Windows Installer 4.5.
Please visit microsoft.com to download and install these prior to the
installation of SafeCom G3.
1.
2.
3.
4.
5.
6.
Insert the SafeCom CD or download the safecom_g3_xxx_32bit.exe or
safecom_g3_xxx_64bit.exe file from the link supplied to you. The
installation must be Run as administrator. When the installation program
is launched click Next.
Read and accept the end-user license agreement. Click Next.
Click Advanced installation. Click Next.
Click Server. Click Next.
Select the location for the SafeCom program files. Click Next.
Select the location for print files. Click Next. Refer to 4.2.18 if you
choose to use an external file share.
Location of
print files:
7.
Select preferred SQL Server and click Next.


Install SQL Server 2008 Express, default data location
Install SQL Server 2008 Express, specify data location
Select this to specify the location of the SQL database files.
Location of
SQL files:

8.
9.
10.
11.
D60603-21
Use an existing SQL Server
On the existing SQL server you need to create the intermediate SQL
user: safecominstall (4.2.12). On SQL 2008 and 2005 Server enable
the TCP/IP protocol (4.2.15). Enter the SQL server as:
computername\instancename or just computername
if there is no named instance of the SQL Server. Step 3 in subsection
4.5.2 explains how to determine if an instancename needs to be
specified. If the SQL server requires the use of a specific port that
differs from the default 1433, then enter a comma after the
computername, like this: computername,port. The instance
name is case sensitive. The instance name must NOT be:
SAFECOMEXPRESS or SAFECOMMSDE.
Current settings are displayed. Click Install to accept and start the
installation. The Print Spooler is restarted at the end of this process.
Click Finish to launch SafeCom Administrator (5.1).
If using SQL 2008 then remember to register sqldmo.dll on the SQL 2008
Server (4.2.16).
If Windows Firewall is on, then open the ports as specified (4.2.5) and
make the SQL Server use the fixed TCP port 1433 (4.2.6).
70
4 Installation
4.2.3
Client installation
A Client installation is relevant if you intend to:


Create a shared SafeCom Pull Printer (3.5.4) or SafeCom Push Printer on a
Windows print server.
Create a local SafeCom Pull Printer (3.5.5) or SafeCom Push Printer on
clients.
Follow these steps to make a Client installation.
1.
2.
3.
4.
5.
6.
7.
4.2.4
Insert the SafeCom CD or download the safecom_g3_xxx_32bit.exe or
safecom_g3_xxx_64bit.exe file from the link supplied to you. The
installation must be Run as administrator. When the installation program
is launched click Next.
Read and accept the end-user license agreement. Click Next.
Click Advanced installation. Click Next.
Click Client. Click Next.
Select the location for the SafeCom program files. Click Next.
Current settings are displayed. Click Install to accept and start the
installation. The Print Spooler is restarted at the end of this process.
Click Finish.
Tools installation
You only need to do a Tools installation if you want to administer your SafeCom
solution from multiple computers. Follow these steps to make a Tools
installation.
Installing SafeCom Administrator will also install the files required to run
SafeCom Administrator API (AdmClient.exe) and SafeCom Batch Print API
(scClient.exe). Check SafeCom Port Configurator to install it.
1.
2.
3.
4.
5.
6.
7.
8.
Insert the SafeCom CD or download the safecom_g3_xxx_32bit.exe or
safecom_g3_xxx_64bit.exe file from the link supplied to you. The
installation must be Run as administrator. When the installation program
is launched click Next.
Read and accept the end-user license agreement. Click Next.
Click Advanced installation. Click Next.
Click Tools. Click Next.
Check the tools you wish to add. Click Next.
Select the location for the SafeCom program files. Click Next.
Current settings are displayed. Click Install to accept and start the
installation. If the installation includes SafeCom Port Configurator the
Print Spooler is restarted at the end of this process.
Click Finish.
Users who are to use the SafeCom Administrator on the computer MUST have
permission to the Windows registry:
HKEY_LOCAL_MACHINE\SOFTWARE\SafeCom\SafeComG3
D60603-21
71
4 Installation
4.2.5
Windows Firewall – Ports that must be opened
If Windows Firewall is enabled it may prevent the SafeCom solution from
working. Disable the firewall or run the script below.
1.
2.
Browse to the SafeCom installation folder.
Right-click open_firewall_safecom.cmd. The command file must be Run
as administrator. In the file you can see what TCP and UDP ports will be
opened.
Note: If users are to be imported from Active Directory (AD) you will need to
add TCP port 389 (or 636 if the import is to be secure via SSL/LDAPS).For a
complete list of ports that need to be open refer to 3.8.4.
4.2.6
Windows Firewall – Make SQL use fixed port
In Windows 2008/2008 R2, 7, Vista and XP with SP2 and later the Windows
Firewall is by default on and blocking remote connections. The following ports
are used in connection with SQL communication:


UDP port 1434
The SQL Server Browser Service uses the UDP port.
TCP port 1433
Configure the SQL Server to use the fixed TCP port (see below).
Following the instruction below to make the SQL server used a fixed port.
D60603-21
1.
Click Start, point to All Programs, Microsoft SQL Server 2008 R2,
Configuration Tools and SQL Server Configuration Manager.
2.
Double-click TCP/IP to open TCP/IP properties dialog.
72
4 Installation
D60603-21
3.
On the IP Addresses tab scroll to the IP All section at the bottom.
4.
5.
6.
Clear TCP Dynamic Ports and set TCP Port to 1433.
Click OK.
Click SQL Server Services.
7.
8.
Right-click SQL Server (SAFECOMEXPRESS) and click Restart.
Start the SafeCom Service.
73
4 Installation
4.2.7
After installation security checkup
Once the SafeCom G3 server has been installed and successfully tested it is
recommended to go through this checklist:





4.2.8
Change the default password (nimda) for the built-in user account ADMIN
(5.3.2).
Change the default password (hcet) for the built-in user account TECH.
Check that the initial PUK code 12345678 is no longer present.
Check that SafeCom Controllers and SafeCom Go devices are password
protected.
Delete the intermediate SQL user: safecominstall (4.2.11).
Put in place a scheduled backup of the database (3.9.5).
Scripts to manually create the databases
Included in the distribution of SafeCom G3 is a number of *.scs script files that
can be used to manually create the databases required by SafeCom.
Note: Running these scripts clears the existing SafeCom databases.
The scripts are located in the SafeCom installation folder. The default
installation folder is:
C:\Program Files\
SafeCom\SafeComG3
If a 32-bit SafeCom G3 version is installed on Windows 64-bit:
C:\Program Files (x86)\
SafeCom\SafeComG3
The scripts need to be executed in the following order:








D60603-21
sccore.scs
sccoredef.scs
scevent.scs
sceventdef.scs
scpurse.scs
scpursedef.scs
sctracking.scs
sctrackingdef.scs
74
4 Installation
If the distribution includes any of the files below these must be executed last.




sccoreadapt.scs
sceventadapt.scs
scpurseadapt.scs
sctrackingadapt.scs
To ensure that the database ownership is correct, run the following script:

4.2.9
scChangeOwner.sql
SQL collation
The databases created by the SafeCom system use the collation:
SQL_Latin1_General_CP1_CI_AS.
Use of other collations has not been tested and is as such not supported. Using
another collation may perhaps reveal situations where case sensitivity could
cause problems.
To use another SQL collation, do the following, before the databases are
created:
1.
On the SafeCom master server make a backup of the files:




2.
sccore.scs
scevent.scs
scpurse.scs
sctracking.scs
Edit each of the above *.scs files to reference the appropriate SQL
collation. Look for the text string: SQL_Latin1_General_CP1_CI_AS
Note: The corresponding *def.scs should NOT be edited.
If the solution is a multiserver installation the modified *.scs files must also be
used on the SafeCom slave servers. This implies that the modified *.scs files
must be copied to the SafeCom slaver server before the slave creates its
database.
4.2.10 Create intermediate SQL 2008 user: safecominstall
The SafeCom Service will automatically create the SafeCom databases in the
Microsoft SQL Server the next time the SafeCom Service is restarted. However,
before this is done you need to temporarily create an SQL user named
safecominstall.
The SQL user is created using the Microsoft SQL Server Management Studio.
Refer to online Windows help for additional information on the Management
Studio.
D60603-21
75
4 Installation
1.
Click Start, point to All Programs, Microsoft SQL Server 2008 and click
SQL Server Management Studio.
Note: The SQL Server Group must NOT be registered as LOCAL. The
server name must be used instead, example SAFECOM4.
2.
D60603-21
Expand to the Logins level depicted on the figure below.
76
4 Installation
D60603-21
3.
Right-click Logins and click New Login…
4.
On the General page set Login name to safecominstall. Check SQL
Server authentication and set Password to safecom_2_DB. Clear Enforce
password policy.
77
4 Installation
5.
Click on the Server Roles page.
6.
Give the SQL user the required rights by checking sysadmin. Click OK.
Remember that the safecominstall SQL user is a temporary user and you
can delete the user later on as described in 4.2.11.
4.2.11 Delete intermediate SQL 2008 user: safecominstall
1.
2.
3.
D60603-21
Open the SQL Server Management Studio.
Browse to Logins.
Right-click the safecominstall SQL user and click Delete.
78
4 Installation
4.2.12 Create intermediate SQL 2005 user: safecominstall
The SafeCom Service will automatically create the SafeCom databases in the
Microsoft SQL Server the next time the SafeCom Service is restarted. However,
before this is done you need to temporarily create an SQL user named
safecominstall.
The SQL user is created using the Microsoft SQL Server Management Studio.
Refer to online Windows help for additional information on the Management
Studio.
1.
Click Start, point to All Programs, Microsoft SQL Server 2005 and click
SQL Server Management Studio.
Note: The SQL Server Group must NOT be registered as LOCAL. The
server name must be used instead, example SAFECOM4.
2.
D60603-21
Expand to the Logins level depicted on the figure below.
79
4 Installation
D60603-21
3.
Right-click Logins and click New Login…
4.
On the General page set Login name to safecominstall. Check SQL
Server authentication and set Password to safecom_2_DB. Clear Enforce
password policy.
80
4 Installation
5.
Click on the Server Roles page.
6.
Give the SQL user the required rights by checking sysadmin. Click OK.
Remember that the safecominstall SQL user is a temporary user and you
can delete the user later on as described in 4.2.13.
4.2.13 Delete intermediate SQL 2005 user: safecominstall
1.
2.
3.
Open the SQL Server Management Studio.
Browse to Logins.
Right-click the safecominstall SQL user and click Delete.
4.2.14 Do not modify SQL user: safecom
The first time the SafeCom Service is started the temporary safecominstall SQL
user is used to create a permanent safecom SQL user. The safecom SQL user is
used to log in to the database.
Note: DO NOT modify the settings of the safecom SQL user as it may stop dayto-day operation and prevent successful future update of the SafeCom G3
Server software. Also DO NOT enforce a password renewal policy to the
safecom SQL user as it may cause the safecom SQL account to be locked and
prevent the solution from working when this happens.
D60603-21
81
4 Installation
4.2.15 Enable TCP/IP protocol on SQL 2008 and 2005
1.
2.
3.
Click Start, point to All Programs, Microsoft SQL Server 2005,
Configuration Tools and SQL Server Configuration Manager.
Browse to SQL Server Network Configuration and Protocols for
MSSQLSERVER.
Right-click TCP/IP and select Enable.
4.2.16 Register sqldmo.dll on SQL 2008 Server
This section is relevant for a SafeCom multiserver solution. Microsoft SQL
Server 2008 by default allows connections from another SQL Server 2008. To
allow connections from SQL Server 2005 and 2008 R2 Express the Microsoft
component sqldmo.dll need to be installed and registered on the SQL Server
2008.
1.
Click Start, type regsvr32.exe sqldmo.dll into the Search box and press
ENTER.
If you get an error message then install SQLServer2005_BC.msi and run the
above command again.
4.2.17 Determine physical and virtual memory on the server
For good performance it is important to have sufficient physical RAM.
Remember that SQL is a memory intensive application. 2 GB of physical
memory is a good start, but more is better. To take advantage of 4 GB or more
physical memory it is necessary enable PAE X86 (Physical Address Extension) on
32-bit Windows server. Refer to microsoft.com.
The amount of physical memory can be determined by looking at the General
tab in the System Properties dialog.
How to determine CPU and RAM:
1.
2.
3.
Open the Control Panel on the computer where the SafeCom server
software is installed.
Click Administrative Tools. Click Computer Management.
Right-click Computer Management (Local) and click Properties. The
General tab includes information about CPU (MHz), RAM (Mb) and will say
Physical Address Extension if PAE is enabled.
If you see a little balloon in the bottom right corner of the screen announcing
Windows – Virtual Memory Minimum Too Low Windows is increasing the
virtual memory, but during this process, memory requests for some
applications, such as the SafeCom server may be denied and these applications
may potentially become unstable.
D60603-21
82
4 Installation
How to adjust the virtual memory:
1.
2.
3.
4.
5.
6.
7.
8.
Log in with administrator privileges on the server.
Open the Control Panel on the computer where the SafeCom server
software is installed.
Click Administrative Tools. Click Computer Management.
Click on the Advanced tab.
In Performance click Settings.
In Virtual memory click Change.
In the Drive list, click the drive that contains the paging file you want to
change.
Under Paging file size for selected drive, type a new paging file size in
megabytes in the Initial Size (Mb) or Maximum Size (Mb) box, and then
click Set. If you increase the sizes you are normally not required to
restart the computer.
Note: The initial size is normally equivalent to 1.5 times the amount of
physical RAM on the system. If the Task Manager (see below) indicates
that the Peak memory use is close to the maximum it is recommended to
change the initial size to 1.5 times the current maximum and to increase
the maximum to 2 or more times the current maximum. Example: Initial
size is 2 GB and maximum is 4 GB. If Peak gets close to 4 GB then
increase Initial size to 6 GB and maximum to 8 GB.
How to check peak memory usage:
1.
2.
3.
Right-click an empty space on the Taskbar and click Task Manager.
Click on the Performance tab.
In Commit Charge (K) you can see the Peak memory usage.
Peak memory usage on a SafeCom server is typically reached when there
is high print activity and/or when user data is imported.
4.2.18 Store print files on an external file share
If the print files folder you specified in 4.2.2 is on an external file share you
must ensure that the SafeCom Service runs as an account that has read and
write access to the external file share.
1.
2.
3.
4.
5.
D60603-21
Open the Control Panel on the computer where the SafeCom server
software is installed.
Click Administrative Tools. Click Services.
Right-click SafeCom Service and click Properties.
Click on the Log on tab.
Check This account and assign an account that has read and write access
to the external file share.
83
4 Installation
4.2.19 Change location of SafeCom print files
Unless you specified an alternate location when you installed the SafeCom
software, the SafeCom print files are by default stored in the folder:
C:\Program Files\SafeCom\SafeComG3\data
If a 32-bit SafeCom G3 version is installed on Windows 64-bit:
C:\Program Files (x86)\SafeCom\SafeComG3\data
Follow the steps below to change the location of SafeCom print files.
1.
2.
3.
4.
5.
6.
Click Start, type service.msc into the Search box and press ENTER.
Right-click SafeCom Service and click Stop.
Right-click Print Spooler and click Stop.
Create the folder that should hold the print files from now on.
Copy the existing print files to the new folder.
Open the Registry Editor and browse to:
HKEY_LOCAL_MACHINE\SOFTWARE\
SafeCom\SafeComG3
If a 32-bit SafeCom G3 version is installed on Windows 64-bit:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
SafeCom\SafeComG3
7.
8.
9.
D60603-21
Change FilePath to the new location.
Close the Registry Editor.
Start the SafeCom Service and the Print Spooler.
84
4 Installation
4.2.20 Update SafeCom software – single server
The SafeCom license must be valid (not expired) in order to perform an update.
If you launch the install program to update the SafeCom G3 software or do a reinstallation the install program will adapt to what is currently installed on the
computer:

Server is already installed
The install program will offer you to update your existing SafeCom server
installation.

Client is already installed
The install program will offer you to update your existing SafeCom client
installation and offer you to add whatever tools you have not installed at
previous occasions.

SafeCom Administrator is installed alone
The install program will offer you to update the SafeCom Administrator.
This implies that if you want to subsequently install a client then you
must first uninstall the SafeCom Administrator as described in 4.2.21 and
then make a Client installation and then a Tools installation.
Note: SafeCom solutions originally based on SafeCom G2 will, after the
update, continue to use the original SafeCom installation folder (SafeComG2
instead of SafeComG3) and it will also continue to use the SQL server. This
implies that the update will NOT replace the use of for example MSDE with
SQL Server 2008 R2 Express.
Follow these steps to update a single server:
1.
2.
3.
4.
Click Start, type services.msc into the Search box and press ENTER.
Stop the SafeCom Service and the Print Spooler, and any other services
that depend on the Print Spooler.
Update the SafeCom G3 software.
Check Yes, I want to restart my computer now17.Click Finish. This will
restart the computer (and the SafeCom Service and Print Spooler).
The update procedure for multiserver installation is covered in 4.7. The update
procedure for a cluster installation is covered in SafeCom G3 Cluster
Administrator’s Manual D60620.
If you are updating from a SafeCom G2 version older than S82 070.340*05 you
are advised to update to SafeCom G2 version S82 070.380*09, before updating
to SafeCom G3. If in doubt, contact [email protected]
17
It is recommended to restart the computer, but in most cases it is sufficient to
restart the SafeCom Service and Print Spooler.
D60603-21
85
4 Installation
4.2.21 Uninstall SafeCom software
When you uninstall SafeCom G3 software on a computer you also delete the
SafeCom Pull Printers, that is, the printers that use the SafeCom Pull Port or
SafeCom Push Port.
1.
2.
3.
4.
5.
6.
6.
Stop the SafeCom Service (16.30) and the Print Spooler (16.31). If other
services depend on the Print Spooler these must also be stopped.
If SafeCom PopUp (scPopUp.exe) is running, then stop it.
Open the Control Panel.
Click Programs and Features (or Add or Remove Programs).
Right-click SafeCom G3 and click Uninstall.
Proceed to section (4.2.22) to uninstall the SafeCom specific instance of
the Microsoft SQL Server 2008 R2.
You will need to restart your computer after uninstalling Microsoft SQL
Server 2008 R2.
4.2.22 Uninstall Microsoft SQL Server 2008 R2 Express
1.
2.
3.
4.
Open the Control Panel.
Click Programs and Features (or Add or Remove Programs).
Right-click Microsoft SQL Server 2008 R2 and click Uninstall.
Uninstall the the DATA folder that contains SafeCom SQL database files
(sc*.mdf and sc*.ldf). These files need to be deleted manually.
The default location for the database files
C:\Program Files\
Microsoft SQL Server\MSSQL10_50.SAFECOMEXPRESS\
MSSQL\DATA
If a 32-bit SafeCom G3 version is installed on Windows 64-bit:
C:\Program Files (x86)\
Microsoft SQL Server\MSSQL10_50.SAFECOMEXPRESS\
MSSQL\DATA
If you chose a different location during installation (4.2.2), find the files
and delete them manuall. If you reinstall SafeCom software, these files
are suffixed with *.old before a new set of SafeCom SQL database files
is installed.
4.
D60603-21
Restart the computer.
86
4 Installation
4.3
SafeCom Print Client
Network bandwidth is often a barrier to the central administration of printers
at remote sites. With SafeCom Print Client, you can minimize the need for
network capacity locally since only control data travels over the corporate
network. Pending documents are stored locally on the user's computer until the
user authenticates and collects the print job at any network printer. Only login
and tracking information is sent to the SafeCom server.
Note: Tracking data is still sent to the SafeCom server.
Print jobs are stored on the hard disk drive in:
C:\Program Files\SafeCom\
SafeComPrintClient\JobFiles\
On Windows 64-bit:
C:\Program Files (x86)\SafeCom\
SafeComPrintClient\JobFiles\
Note: The location of print jobs is specified in the scPrintClient.ini file (4.3.6)
The software can be installed on computers that conform to the specified
system requirements (1.10.2).
Note: On Windows 7 you MUST set User Account Control18 (4.12.2) to Never
notify during installation.
Note: On Windows Vista User Access Control should be turned off.
4.3.1
Installation
1.
2.
2.
3.
Download the safecom_print_client_xxx.exe file from the link supplied to
you. The installation must be Run as administrator. Click Next.
Select the options and click Next.
Enter SafeCom server address. The address can be in form of the
hostname or IP address. Use semicolon as separator if multiple servers19
are entered. Click Next.
Click Install to copy the files to the installation folder. Default
installation folder is:
C:\Program Files\SafeCom\SafeComPrintClient
4.
Click Finish to apply the following changes to the system:
New service named: SafeCom Print Client.
New port (scPull) that uses the SafeCom Pull Port (4.13.2).
18
The creation of the SafeCom Pull Port (scPull) requires User Account Control to be
turned off.
19
In a SafeCom multiserver solution the SafeCom Print Client and the SafeCom Pull Port
(4.13.2) will use the list of servers to failover to the server in the order they are listed.
D60603-21
87
4 Installation
The SafeCom PopUp (4.14) is also installed and started if selected in the
installation wizard.
Note: If SafeCom PopUp needs to run on the workstation that has
SafeCom Print Client is installed, SafeCom Application Print also needs
to be installed on this workstation. How to install SafeCom Application
Print is described in 4.4 SafeCom Application Print.
4.3.2
Windows Firewall - Ports that must be opened
If Windows Firewall is enabled it may prevent the SafeCom solution from
working. Disable the firewall or run the script below.
1.
2.
4.3.3
Browse to the SafeComPrintClient installation folder.
Right-click open_firewall_print_client.cmd. The command file must be
Run as administrator. In the file you can see what TCP and UDP ports will
be opened.
Print test page
1.
Use one of these methods to make a printer use SafeCom Print Client:


2.
D60603-21
Modify an existing local printer to use the new port. In the Print
properties dialog click on the Ports tab and check the scPull port.
Add a new local printer and make it use the new port.
Please refer to these sections for instructions: Windows 7 (4.12.2),
Windows XP (4.12.3) and Windows Vista (4.12.4).
Print a test page and collect it at one of the SafeCom-enabled devices.
88
4 Installation
4.3.4
Direct print if SafeCom server is offline
If the connection to the SafeCom server fails, it is still possible for a user to
print with SafeCom Print Client installed.
SafeCom Print Client keeps a record of the devices that have been used for
printing so if the connection to the SafeCom server is lost, SafeCom Print Client
offers the user to print directly to one of the last used devices.
When a user submits a print job and the SafeCom server is offline, the SafeCom
Print Client dialog opens, offering the user to send the print job directly to a
printer on a list.
The user chooses a printer from the drop-down menu, clicks OK, and the print
job is sent directly to the selected printer. Printers that are driven by SafeCom
Device Server version S82 060.050 or earlier are excluded from the list.
Note: Even when the connection the SafeCom server is lost, the tracking data
is still collected and then sent to the server once the connection is back up.
4.3.5
Deployment to computers
The IT administrator can deploy the SafeCom Print Client software to
computers silently by following these steps:
1.
2.
Create a folder and copy safecom_print_client_xxx.exe and
scPrintClient.ini (4.3.6) into the folder.
Edit the DefaultServerAddress=entry in the scPrintClient.ini to include the
address (hostname or IP address) of the SafeCom server(s).
DefaultServerAddress=slave1;slave2
Use semicolon (;) as separator. It might be relevant to reference a couple
of SafeCom slave servers, similar to what you might do for the purpose of
failover (6.6). To control the location of print job files edit the
parameter:
JobStoragePath=
D60603-21
89
4 Installation
3.
4.
Save the scPrintClient.ini.
To suppress dialogs invoke the safecom_print_client_xxx.exe file with the
command line parameters (4.3.8):
/VERYSILENT /NORESTART /SUPPRESSMSGBOXES
To install in a specific folder use the /DIR="x:\pathname" command line
parameter. A fully qualified pathname must be specified.
4.3.6
scPrintClient.ini file
[scPrintClient]
JobStoragePath=C:\Program Files\SafeCom\SafeComPrintClient\JobFiles\
ScReconnectRetryWaitMs=120000
DefaultServerAddress=xxx.yyy.zzz.nnn; aaa.bbb.ccc.ddd
DefaultServerPort=7500
DefaultServerPortPS=7700
JobServerConnTimeOutMS=30000
JobServerPingTimeOutMS=1000
OfflineTrackingTaskInterval=1200000
OfflineTrackingTaskIntervalRnd=1200000
CleanUpTaskInterval=72000
CleanUpTaskIntervalRnd=36000










D60603-21
JobStoragePath=C:\Program
Files\SafeCom\SafeComPrintClient\JobFiles\:States the path where the
print client saves the job files
ScReconnectRetryWaitMs=1200000: States the time that must pass in
between retries to connect to the SafeCom server.
DefaultServerAddress=xxx.yyy.zzz.nnn; aaa.bbb.ccc.ddd: Semicolon
separated list of server addresses to which the print client connects.
DefaultServerPort=7500: Port used when computer is running in
workstation mode (default is 7500).
DefaultServerPortPS=7700: This is the port that the print client will use
for connecting to the job server if the computer is running in PrintServer
mode (default is 7700).
JobServerConnTimeOutMS=30000: Time in milliseconds to wait in
between tries to reconnect to a server if the current server is not
responding. If no server responds to the print client, the print client will
go into offline mode. The default is 30000. The print client will also
respond in an offline manner if user’s home server is offline.
JobServerPingTimeOutMS=1000: timeout in milliseconds used when
pinging servers.
OfflineTrackingTaskInterval=1200000: time in milliseconds between
performing offline tracking.
OfflineTrackingTaskIntervalRnd=1200000: Value used to calculate
random offset added to the OfflineTrackingTaskInterval parameter to
prevent that all print clients perform offline tracking at the exact same
time.
CleanUpTaskInterval=72000: Time in milliseconds between performing
cleanup (removing old jobs, and so on).
90
4 Installation

CleanUpTaskIntervalRnd=36000: Value used to calculate random offset
added to the CleanUpTaskInterval parameter to prevent that all print
clients perform cleanup at the exact same time.
Note: The servers listed in parameter DefaultServerAddress are not
prioritized. The print client will only connect to the first server in the list at
service restart.
4.3.7
Trace facility
Note: Use the SafeCom trace facility only if SafeCom Support instructs you to
do so.
1.
On the computer create the folder c:\safecom_trace
The trace file scPrintClient<no>.trc contains a number as part of the filename.
When a trace file reaches the maximum size (10 Mb) a new one is created and
the number is incremented with one. The trace folder will hold the current and
previous version of the trace file. Older files are automatically deleted.
Restarting the SafeCom Print Client Service will by default reset the trace files.
D60603-21
91
4 Installation
4.3.8
Command line parameters
Following command line parameters can be used to achieve the wanted
behavior of the deployment
/SPDisables the “This will install... Do you wish to continue?” prompt at the
beginning of Setup. Of course, this will have no effect if the
DisableStartupPrompt [Setup] section directive was set to yes.
/SILENT, /VERYSILENT
Instructs Setup process to be silent or very silent. When Setup is silent the
wizard and the background window are not displayed whilst the installation
progress window is shown. When a setup is very silent the installation progress
window is not displayed. Everything else is normal as for example error
messages during installation are displayed and the start-up prompt is as well (if
it has not been disabled by DisableStartupPrompt or the '/SP-' command line
option explained above).
If a restart is necessary and the '/NORESTART' command is not used (see below)
and Setup is silent, the application will display a “Reboot now?” message box.
If it's very silent it will reboot without asking.
/SUPPRESSMSGBOXES
Instructs Setup process to suppress all message boxes. This parameter can only
be used when combined with '/SILENT' and '/VERYSILENT'.
The default response in situations where there's a choice is:






Yes in a 'Keep newer file?' situation.
No in a 'File exists, confirm overwrite.' situation.
Abort in Abort/Retry situations.
Cancel in Retry/Cancel situations.
Yes (=continue) in a diskSpaceWarning / DirExists / DirDoesntExist /
NoUninstallWarning / ExitSetupMessage / ConfirmUninstall situation.
Yes (=restart) in a FinishedRestartMessage/UninstalledAndNeedsRestart
situation.
5 message boxes are not suppressible:





D60603-21
The About Setup message box.
The Exit Setup? message box.
The FileNotInDir2 message box displayed when Setup requires a new disk
to be inserted and the disk was not found.
Any (error) message box displayed before Setup (or Uninstall) could read
the command line parameters.
Any message box displayed by [Code] support function MsgBox.
92
4 Installation
/LOG
Causes Setup process to create a log file in the user's TEMP directory detailing
file installation and [Run] actions taken during the installation process. This can
be a helpful debugging aid. For example, if you suspect a file is not being
replaced when you believe it should be (or vice versa), the log file will tell you
if the file was really skipped, and why.
The log file is created with a unique name based on the current date. (It will
not overwrite or append to existing files.)
The information contained in the log file is technical in nature and therefore
not intended to be understandable by end-users. Nor is it designed to be
machine-parseable; the format of the file is subject to change without notice.
/LOG="filename"
Same as /LOG, except it allows you to specify a fixed path/filename to use for
the log file. If a file with the specified name already exists it will be
overwritten. If the file cannot be created, Setup will abort with an error
message.
/NOCANCEL
Prevents the user from cancelling during the installation process, by disabling
the Cancel button and ignoring clicks on the close button. Useful along with
'/SILENT' or '/VERYSILENT'.
/NORESTART
Instructs Setup process not to reboot even if it's necessary.
/RESTARTEXITCODE=exit code
Specifies the custom exit code that Setup process is to return when a restart is
needed. Useful along with '/NORESTART'. Also see Setup Exit Codes.
/LOADINF="filename"
Instructs Setup process to load the settings from the specified file after having
checked the command line. This file can be prepared using the '/SAVEINF='
command as explained below. Don't forget to use quotes if the filename
contains spaces.
/SAVEINF="filename"
Instructs Setup process to save installation settings to the specified file.
Don't forget to use quotes if the filename contains spaces.
/LANG=language
Specifies the language to be used. Language states the internal name of the
language as specified in a [Languages] section entry.
When a valid /LANG parameter is used, the Select Language dialog will be
suppressed.
/DIR="x:\dirname"
Overrides the default directory name displayed on the Select Destination
Location wizard page. A fully qualified pathname must be specified.
D60603-21
93
4 Installation
/GROUP="folder name"
Overrides the default folder name displayed on the Select Start Menu Folder
wizard page. If the [Setup] section directive DisableProgramGroupPage was set
to yes, this command line parameter is ignored.
/NOICONS
Instructs Setup to initially check the Don't create a Start Menu folder check box
on the Select Start Menu Folder wizard page.
/NOPOPUP
Install scPopUp is an option during installation. With a command line
installation the scPopUp can be excluded from the installation by specifying
/NOPOPUP.
/NOSERVICE
Install scPopUp is an option during installation. With a command line
installation the SafeCom Print Client Service can be configured to not start
after installation by specifying /NOSERVICE. This means that the SafeCom Print
Client installation can be used to deploy the SafeCom Pull Port and SafeCom
Push Port, but without launching the SafeCom Print Client Service.
D60603-21
94
4 Installation
4.4
SafeCom Application Print
SafeCom Application Print activates SafeCom Popup on end-user computers. It
is installed on a shared network print queue and interacts with the print
spooler, SafeCom Pull Port (4.13) and SafeCom Push Port (9.3) to retrieve user
print job data. Application print then uses this data to communicate specific
information back to the user about their print job.
If you want to use SafeCom Popup then you must install SafeCom Application
Print. For more information on SafeCom Popup, see (4.14).
TCP port 7500 is used to connect to the SafeCom server.
4.4.1
Installation
1.
2.
Download the safecom_app_print_xxx.exe file from the link supplied to
you. On Windows 7 and Windows 2008/2008 R2 the installation must be
Run as administrator20.
Click Next to copy the files to the destination folder:
%PROGRAMFILES%\SafeCom\SafeComAppPrint
which normally maps to:
C:\Program Files\SafeCom\SafeComAppPrint
3.
Click Finish.
The following changes have been applied to the system:
The Print Spooler is restarted.
The SafeCom PopUp (4.14) is also installed and started.
4.
5.
Configure the pull port’s Ports tab to Show authentication dialog at
every print.
Print a test page to confirm that the popup dialog works.
Tip! In the Configure Pull Port window select Use network logon to allow
users to skip the authentication popup dialog, or rather to allow hidden
network authentication.
20 The installer needs access to restricted area in the Windows registry, therefore
installation as Administrator is recommended on all platforms.
D60603-21
95
4 Installation
4.4.2
Deployment to computers
The following SafeCom Popup dialog software must be deployed to client
computers:
scPopup.exe
scPopup_lang.ini
Additional information:




4.4.3
SafeCom PopUp – scPopUp.exe 4.14
Trace facility (4.4.3).
Windows registry settings (4.4.4).
Command line parameters (4.3.8).
Trace facility
Note: Use the SafeCom trace facility only if SafeCom Support instructs you to
do so.
1.
On the computer create the folder c:\safecom_trace
The trace file scAppPrint<no>.trc contains a number as part of the filename.
When a trace file reaches the maximum size (10 Mb) a new one is created and
the number is incremented with one. The trace folder will hold the current and
previous version of the trace file. Older files are automatically deleted.
D60603-21
96
4 Installation
4.4.4
Windows registry settings
Use the Windows regedit program to see the Windows registry settings. Settings
for the SafeCom Application Print are stored at
HKEY_LOCAL_MACHINE\SOFTWARE\SafeCom\SafeComAppPrint
The registry settings are:





4.5
Active
A value of 1 (default) indicates that SafeCom Application Print is active.
Change to 0 if you wish to disable use of SafeCom Application Print.
CacheExpireFailure
SafeCom Application Print caches the settings of the SafeCom Pull Port
and SafeCom Push Port at regular intervals. In case there is a failure in
the print process the frequency is increased to occur every 60 seconds
(default). If there is no failure in the print process the settings of the
SafeCom Pull Port and SafeCom Push Port are cached according to the
value of CacheExpireSuccess value.
CacheExpireSuccess
Under normal circumstances SafeCom Application Print caches the
settings of the SafeCom Pull Port and SafeCom Push Port every 600
seconds (10 minutes).
ServerPort
The TCP Port (default 7500) that is used to communicate with the
SafeCom Server.
ServerTimeout
The number of milliseconds (default 5000) that can elapse before the
attempt to connect to the SafeCom server times out.
Upgrade from Express to Microsoft SQL Server
You can use the supplied scBackup (3.9.6) to backup the SQL Server 2008 R2
Express database and use it to restore the backup once you have changed to
Microsoft SQL Server as described below:
1.
2.
3.
4.
5.
Create intermediate SQL user: safecominstall (4.2.12).
Stop the SafeCom Service (4.5.1).
Change Windows Registry to reference SQL Server (4.5.2).
Change the dependencies on the SafeCom Service (4.5.3).
Delete intermediate SQL user: safecominstall (4.2.13).
Note: For this to take effect you MUST restart the computer.
Once you have performed the above successfully you may uninstall the SQL
Server 2008 R2 Express database as described in 4.2.22.
4.5.1
Stop the SafeCom Service
1.
2.
D60603-21
Click Start, type services.msc into the Search box and press ENTER.
Right-click the SafeCom Service and click Stop.
97
4 Installation
4.5.2
Change Windows Registry to reference SQL Server
1.
Open the Registry Editor and browse to:
HKEY_LOCAL_MACHINE\SOFTWARE\
SafeCom\SafeComG3\Database
If a 32-bit SafeCom G3 version is installed on Windows 64-bit:
2.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
SafeCom\SafeComG3\Database
For each these registry settings:
DBServerNameCore
DBServerNameEvent
DBServerNamePurse
DBServerNameTracking
3.
Change the value from:
computername\SAFECOMEXPRESS
to one of the below two. It is NOT possible to specify the IP address
instead of the computername.

computername
You only need to specify the computername if there is no named
instance of the SQL Server. There is no named instance of the SQL
Server if Services only lists MSSQLSERVER.

computername\instancename
You need to specify both computername and instancename if
there is a named instance of the SQL Server. The instance name can
be seen in Services. The named service will appear in Services as
MSSQL$instancename. The instance name is case sensitive.
4.
Click OK to save the settings.
5.
Repeat step 3-4 for the remaining registry settings.6.
Editor.
D60603-21
Exit the Registry
98
4 Installation
4.5.3
Change the dependencies on the SafeCom Service
1.
Open the Registry Editor and browse to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\SafeCom Service
2.
Double-click DependOnServiceand replace MSSQL$SAFECOMEXPRESS with
the instance name of the SQL Server (MSSQL$instancename). Use
MSSQLSERVER if there is no named instance. See also step 4 in 4.5.2. The
instance name is case sensitive.
If the SQL Server is installed on another computer you should right-click
DependOnService and click Delete.
Note: For this to take effect you MUST restart the computer.
D60603-21
99
4 Installation
4.6
Multiserver installation
Prerequisites:

A SafeCom license key code (4.9) that includes SafeCom Enterprise
Server. The license key code is based on the computer name (4.9.1) of
the SafeCom master server.

The SQL master server must run Microsoft SQL Server 2008 or 2005. It
must be licensed and installed (including replication option). Microsoft
SQL is quite memory intensive and basically the more memory the better.
2 GB RAM is a good start.

The SQL master server must be defined as an SQL distributor and
publisher.

The SQL master server must be configured to use Authentication method
SQL Server and Windows.

The SQL master server must have the following three services running
otherwise the one-way replication from the master to the slaves does not
work:
o
SQL service (best practice is to use a standard domain user, e.g.
SqlRun)
o
SQL Browser
o
SQL Agent (best practice is to use a standard domain user, e.g.
SqlRun - the same as for the SQL service)

The SQL master server, SafeCom master server and SafeCom slave servers
must be part of the same domain or workgroup.

The SQL master server must know the SafeCom slave servers by DNS and
vice versa.

The SafeCom master server must know the SQL master server by DNS.

The SafeCom master server must know its SafeCom slave servers by
hostname or IP address and vice versa.

The firewall for both the master server and the slave servers must either
be turned off, or a static SQL port must be set.
If you set a static port: (refer to section 4.2.6)
o
Make sure to open the static port in the firewall.
o
Open the port 1434.
o
Make sure the SQL Browser service is running.

D60603-21
The master and slave servers must be installed with the same SafeCom
server version.
100
4 Installation

Make sure that the master server has writing access to C:\Program
Files\Microsoft SQL Server\MSSQL.1\MSSQL\Data. The standard domain
user set in the SQL agent, must as a minimum have access right set to
Modify.
Warning: When you add a SafeCom server to a SafeCom master server’s
group the SafeCom slave server loses its existing data, including: devices,
users, and print jobs.
Note: Refer to 4.5 if you are upgrading from a running SafeCom Server
with Microsoft SQL Server 2008 R2 Express to Microsoft SQL Server.
4.6.1
Overview
1.
2.
3.
4.
5.
6.
7.
8.
Do a SafeCom Server installation on each slave server (4.2.2).
Do a SafeCom Server installation on the master server. Select Advanced
installation and Use an existing SQL Server (4.2.2).
Use SafeCom Administrator to install the license key code on the master
server (4.9).
Set SQLSERVERAGENT to automatic startup (4.6.2).
Add the other servers to the master server’s group (4.6.3).
Delete intermediate SQL user: safecominstall (4.2.13).
Check that replication is working (4.6.4).
Enable Offline tracking (9.9) if tracking is used.
The Microsoft SQL Server is installed in the folder:
C:\Program Files\
Microsoft SQL Server\MSSQL
If a 32-bit SafeCom G3 version is installed on Windows 64-bit:
C:\Program Files (x86)\
Microsoft SQL Server\MSSQL
4.6.2
Set SQL Server Agent to automatic startup
The SQL Server Agent (instancename) on the SQL server must be set to
Automatic startup in Services.
4.6.3
Add the other servers to the master server’s group
Use SafeCom Administrator to add the other servers to the master server’s
group. The server you add must be running. Refer to section 6.3.
D60603-21
101
4 Installation
4.6.4
Check that the replication is working
On SQL 2008 and 2005:
1.
Open SQL Server Management Studio.

Verify that the SQL Server Agent is running.
Right-click SQL Server Agent and click Properties and verify that Service
state is Running.
Monitor the replication.
Browse to Replication and Local Publications and right-click
[sccore]:sccoreTrans and click Launch Replication Monitor.

The Replication Monitor:



D60603-21
If the replication is working status symbols should be colored green only
and NOT red.
To check any latency click on the Tracer Tokens tab and click Insert
Tracer.
Click on the Agents tab and check that agents are running.
102
4 Installation
The following tables must be selected for replication:

























scAliases
scBillingCodes
scBillingComb21
scBillingConfig22
scBillingFavorites
scBillingUserInfo
scBOPCInfo
scBranchInfo
scCardInfo
scDeviceInfo
scDomainInfo
scGroupInfo
scGroupMembers
scGroupRbpRule
scMainSettings
scMasterServerVersion
scPriceScheme
scRbpAction
scRbpCondition
scRbpRuleInfo
scScheduleInfo
scServerInfo
scServerSettings
scTreeView
scUserInfo
Note: Make sure to check the right ones!
4.6.5
Repair replication
If a replication fails or is interrupted, it can be repaired from SafeCom
Administrator.
Tip: Use Microsoft SQL Management Studio to back up your replication
configuration, using the Generate Script button.
Note: This feature can only be used if Setup replication was checked when
the slave server was added (6.3.2).
1.
2.
3.
4.
Right-click the slave server and select Repair replication.
Click OK to confirm and the replication repair begins; the slave server's
subscription is deleted and created again.
When the message "The replication was repaired with success!" appears,
the replication repair is completed successfully.
Click OK.
21
scBillingComb was introduced in SafeCom G3 Server version S82 070.410*01
scBillingConfig was introduced in SafeCom G3 Server version S82 070.410*01
22
D60603-21
103
4 Installation
4.6.6
What happens if servers or network connections are down?
In order to answer this question we will first explain the concept behind the
SafeCom multiserver solution.
The SafeCom master server uses SQL replication to propagate the entire
configuration to the SafeCom slave servers. Initially it does a snapshot
replication and subsequently it only replicates the changes (transactional
replication).
This way all the SafeCom servers have the configuration, including the network
details of each other. This allows the servers to communicate directly, rather
than having to rely on the SafeCom master server. You can say the SafeCom
servers become autonomous.
The replication from the SQL server to the SafeCom slave servers is one-way.
Changes to the configuration are possible only when the SafeCom master server
and SQL master server are running. This is secured by the system as users with
special rights always have the SafeCom master server as their home server.

If the master server is down it is not possible to make any configuration
changes (Administrators cannot log in to SafeCom Administrator).

If a SafeCom server is down users who have this SafeCom server as their
home server cannot log in. However, push printers configured to allow
printing at all times can still be used on the servers running. SafeCom
servers still running will continue to serve the users who have those
servers as their home server.
Additional resilience can be achieved by specifying a prioritized list of
failover servers (6.6) that users should be moved to in the event that
their home server becomes unavailable.

D60603-21
If the network is partially down, it is still possible to print and roam
between the servers as long as they can still reach each other (they are
not affected by the part of the network that is down). If the network is
completely down nothing is possible until the network is up again.
104
4 Installation
4.6.7
Reinitialize the subscription
If a SafeCom slave server has been restored you may wish to reinitialize the
replication from the SQL server to the SafeCom slave server.
On SQL 2008 and 2005:
1.
2.
3.
4.
Click Start, point to All Programs, Microsoft SQL Server 2008 (or 2005)
and click SQL Server Management Studio.
Log in to the SQL server and browse to Replication, Local Publications
and [sccore]:sccoreTrans.
Right-click the subscription of the SafeCom slave server and select
Reinitialize All Subscriptions.
Check Generate the new snapshot now. Click Mark For Reinitialization.
Section 4.6.4 describes how to check that the replication is working.
4.6.8
Prevent the subscription from expiring
The replication from the SQL server to the slave may get dropped if the
subscription is not synchronized within 72 hours.
On SQL 2008 and 2005:
1.
2.
3.
4.
Click Start, point to All Programs, Microsoft SQL Server 2008 (or 2005)
and click SQL Server Management Studio.
Log in to the SQL server and browse to Replication, Local Publication.
Right-click [sccore]:sccoreTrans and select Properties.
On the General page check Subscription never expire, but they can be
deactivated until they are reinitialized. Click OK.
4.7
Update multiserver installation
4.7.1
Pre-requisites


The SafeCom license must be valid (not expired) in order to perform an
update.
If you are updating from SafeCom G2 version S82 070.360 or S82 070.370
you MUST install scLicenseManager.dll version 8.38.1.1 on all slaves prior
to the update.
Note: SafeCom solutions originally based on SafeCom G2 will after the update
continue to use the original SafeCom installation folder (SafeComG2 instead of
SafeComG3) and it will also continue to use the SQL server. This implies that
the update will NOT replace the use of for example MSDE with SQL Server 2008
R2 Express.
D60603-21
105
4 Installation
4.7.2
Update SafeCom software
All the SafeCom slave servers must be updated before the SafeCom master
server. The installation will not function properly before all servers are
updated to the same version.
Note: It is best practice to use change management during the update process.
The update process should occur outside normal working hours as it requires a
restart of the computers after the update.
The Microsoft SQL Server will continue to replicate the SafeCom databases to
the slaves during the update. Every 10 seconds each slave server will check if
the master server is on the correct version. Once they are on the same version
the slave servers will start automatically.
The update process on each server is as follows:
1.
Stop the SafeCom Service (16.30) and the Print Spooler (16.31). If other
services depend on the Print Spooler these must be stopped also.
Update with the SafeCom G3 software.
Check Yes, I want to restart my computer now23.Click Finish. This will
restart the computer (and the SafeCom Service and Print Spooler).
2.
3.
Note: How to update a SafeCom cluster installation is covered in SafeCom G3
Cluster Administrator’s Manual D60620.
The update should be completed outside normal working hours, as printing will
be unavailable during the update process. You may want to use the table below
to help you through the update process.
No
Slave server
address
1. Stop
services
2. Update
software
3. Start
services
Version
Master server
address
1. Stop
services
2. Update
software
3. Start
services
Version
1
2
3
4
…
No
M
After the update has been completed you should check that the replication
from the master server is still working. (Refer to 4.6.4)
You may also wish to view the scdbu*.log files that were created during the
update process. (Refer to 3.8.6)
23
It is recommended to restart the computer, but in most cases it is sufficient to
restart the SafeCom Service and Print Spooler.
D60603-21
106
4 Installation
4.8
Cluster installation
Cluster installation is covered in SafeCom G3 Cluster Administrator’s Manual
D60620.
4.9
Install the SafeCom license key code
All SafeCom licenses require the installation of a license key code that is linked
to the server via the computer name (4.9.1). On a cluster server the license is
based on the cluster name (4.9.2).
Note: If your SafeCom solution is a multiserver solution the license is based on
the name of the SafeCom master server and only needs to be installed on the
SafeCom master server. The license applies to all servers within the group.
The supplier of your SafeCom solution will provide you with your license key
code.
1.
2.
3.
4.
5.
4.9.1
On the server, click Start, point to All Programs, SafeCom G3and rightclick SafeCom Administrator and select Run as administrator.
Log in to the server by double-clicking its Group name listed to the left.
Enter User logon (default is ADMIN) and Password (default is nimda).
On the Servers menu, click License to open the License dialog (5.5).
Enter the license key code and click Apply. Click Close. The license key
code takes immediate effect and there is no need to restart the server.
Determine the Computer Name
1.
2.
Open the Control Panel, and click System.
Click the Computer Name tab and note the Full computer name. Only
the first part of the computer name (up to the first dot ‘.’) is used.
The first part of the license key code corresponds to the computer name,
with letters in uppercase and the removal of all dashes. Spaces and
underscores remain.
Computer name
prn-srv1.acme
Prn_Srv F16
D60603-21
Sample license keys
PRNSRV1-2923rS-254zMhqGTH-5B62ZZ
PRN_SRV F16-29233Xa-2s4A2ZCfDG-5BkJdy
107
4 Installation
4.9.2
Determine the Cluster Name
On a cluster server the license is based on the cluster name instead of the
computer name.
Windows 2008/2008 R2:
1.
2.
3.
Open Failover Cluster Management.
Browse to the cluster and select Properties.
Name contains the cluster name.
Windows 2003:
1.
2.
3.
4.
5.
4.9.3
Open Cluster Administrator.
Browse to Groups, Cluster Group.
Right-click Cluster Name and select Properties.
Click on the Parameters tab.
Name contains the cluster name.
Understanding the license key code
A new license key code is only accepted if the current configuration does not
conflict with the new license key code. The Event log contains information
about possible license issues (5.16).
A new license key code overrides the old license key code. This means that the
new license key code should embed the features allowed by the previous
license key plus the new ones. It is therefore necessary to supply the existing
license key code to get a new license key code.
D60603-21

Maintenance license
If SafeCom maintenance is bought (for a period of 1, 2, 3, 4 or 5 years)
the license key includes the maintenance expiry date. Update is only
possible to a version that has a version date that is earlier than the expiry
date of the maintenance license. If no SafeCom maintenance is bought
update is possible for a period of 90 days after the license is issued.

Trial license
A standard trial license expires 30 days after it is issued and allows
testing of all functionality. It allows 3 servers, 5 SafeCom Go, 5 SafeCom
Go High-end and 5 SafeCom Controllers. Customized trial licenses are
available upon request. Contact [email protected]

Embedded license
The embedded license expires 30 days after installation. It allows 1
server, 1 SafeCom Go, 1 SafeCom Go High-end, 1 SafeCom Controller, 10
Tracking devices and all device features. This allows loading the software
and getting started while waiting for a trial license or the purchased
permanent license.
108
4 Installation
4.9.4
Device license and user settings dependencies
The dependencies between device licenses and user settings are covered in the
following for Encryption, Tracking, Pay, Rule Based Printing and Client Billing.

Encryption
The prerequisites for printing encrypted documents is listed in section
4.15. Table 3 describes the relation between device licenses and user
encryption settings.
Table 3 Device license and user encryption settings

Device \ User
No encryption of
user’s documents
Encryption of
user’s documents
No encryption
by device
No encryption
No encryption
Encryption
by device
No encryption
Encrypt and ignore High
Speed Print if enabled.
Tracking (9) and Pay (12)
Tracking data is recorded if the device has a SafeCom Tracking license
and the user is set to cost control Tracking or Pay. If the user is set to No
cost control tracking data is not recorded.
A Pay user (cost control is Pay) can log in to a device with a SafeCom Pay
license and to a device with a Tracking license provided Allow Pay user is
checked on the device. When Allow Pay user is checked the Pay user is
not charged.
Table 4 Device license and user cost control settings
Device \
User
D60603-21
No cost
user
Tracking
User
No cost
device
No tracking
No tracking
Tracking
device
No tracking
Tracking
Pay
device
No tracking
Tracking
Pay
User
No tracking and
reject login
unless Allow Pay
user is checked
Tracking and
reject login
unless Allow Pay
user is checked
Pay
109
4 Installation

Rule Based Printing (10)
Tracking and Pay users are subjected to Rule Based Printing on devices
with a SafeCom Rule Based Printing license.

Client Billing (11)
A Billing user (set to Bill clients for costs) can select billing codes with
jobs that are tracked on devices with a SafeCom Client Billing license. If
the Billing user uses a device with no SafeCom Client Billing license the
job is tracked without the possibility to select a billing code.
Table 5 Device license and user billing settings
D60603-21
Device \
User
No bill clients
for cost
Bill clients
for cost
No billing
device
No billing
No billing
Billing
device
No billing
Billing
110
4 Installation
4.10
User rights required when adding printers
The policy of some corporations may prohibit grant of Windows administrator
rights to the user who needs to add SafeCom printers and configure the
SafeCom Pull Port and SafeCom Push Port.
In most cases there are no policy restrictions and the user who adds SafeCom
printers has Windows administrator rights on the computer in question and
therefore there is no need to make any changes.
In cases with policy restrictions AND if the adding of printers is done remotely
by typing \\server in Explorer then special steps must be followed. If the
printers are added using Remote Desktop these steps are not required.
Special steps: The user in question must be a member a group with sufficient
rights, permissions must be granted and the Print Spooler must be restarted.
Additional configuration changes are required if the SafeCom server is
clustered.
One way to go about this would be to add the user to the Domain Print
Operators group and then add the Domain Print Operators group to the local
Power Users group on the print servers. This way you do not need to add the
individual users to the local Power Users group on the print servers.
The steps are covered in the following:
If the SafeCom server is clustered complete these steps:


User MUST be a member of the local Power Users group on both nodes.
The SafeCom Port Monitors are installed on the computer and the version
of these is across the solution.
On node 1 and 2 grant permissions in Local Security:
1.
2.
3.
4.
5.
D60603-21
Open the Control Panel.
Click Administrative Tools and Local Security Policy.
Browse to Local Policies, User Rights Assignment and double-click Load
and unload device drivers.
Click Add User or Group and add the local Power Users group.
Repeat step 1-4 on the other node.
111
4 Installation
On node 1 grant permission in cluster:
Windows 2008/2008 R2:
1.
2.
3.
Open Failover Cluster Management.
Right-click [Cluster] and click Properties.
On the Cluster permissions tab add the local Power Users group and
grant Full Control.
Windows 2003:
1.
2.
3.
Open Cluster Administrator.
Right-click [Cluster] and click Properties.
On the Security tab add the local Power Users group and grant Full
Control.
On node 1 grant permission in Registry:
1.
Open the Registry Editor and browse to:
HKEY_LOCAL_MACHINE\SYSTEM\Cluster\Resources
2.
3.
Right-click Resources and click Permissions.
Add the local Power Users group and grant Full Control.
Restart the Print Spooler:
1.
D60603-21
To take effect on the changes, open Cluster Administrator to restart
Print Spooler. Locate Print Spooler service, right-click and choose Take
Offline, wait for status changed to Offline. Then right-click Print Spooler
again and choose Bring Online to start service.
112
4 Installation
4.11
Add a SafeCom Pull Printer on Windows 2008/
2008 R2 and 2003
This section describes how to add a shared SafeCom Pull Printer on a Windows
2008/2008 R2 and 2003 server. It is assumed the SafeCom Pull Port has been
installed on the server (3.5).
1.
2.
3.
Click Start, Settings and Printers.
Double-click Add Printer. The Add Printer Wizard appears.
On Windows 2008/2008 R2: Click Add a local printer. Please ensure that
User Account Control (UAC) settings is turned off, otherwise you will not
be able to add the printer as there is not sufficient rights to add the
SafeCom Pull Port.
On Windows 2003: Click Next. Select Local printer and clear
Automatically detect and install my Plug and Play printer. Click Next.
Note: If you have already created a printer that uses the SafeCom Pull
Port, you should use this port instead of creating a new one (as described
in step 4, 5 and 6).
4.
5.
6.
7.
8.
9.
10.
11.
Choose Create a new port and select SafeCom Pull Port from the dropdown list. Click Next.
Enter a unique name of your choice for the port in Port Name. Click OK.
The Configure Pull Port dialog (4.13.2) allows you to enter the hostname
or IP address of the SafeCom Server. Select Use network logon as
method of User authentication.
Click OK. The Authorize port configuration dialog appears. Enter User
logon and Password of a user that has SafeCom Administrator or
Technician rights. Click OK.
Click Have Disk to install the files from the printer
manufacturer's installation disk (or downloaded the files from the
manufacturer's web site). Click Next.
Enter a Printer name and choose whether or not this printer should be
your default Windows printer. Click Next.
Select Share this printer and enter Share name. Click Next.
On Windows 2008/2008 R2: Click Print a test page to verify the system.
Click OK when prompted to confirm that the test page printed correctly.
Click Finish.
On Windows 2003: Select Yes to print a test page to verify the system.
Click Next. Click OK when prompted to confirm that the test page printed
correctly. Click Finish.
Note: In SafeCom Administrator the Test page appears as a pending
print job under the user you are logged in as (Administrator).
Check the Printer properties:
1.
2.
D60603-21
Right-click the printer and click Printer properties.
On the Device Settings tab check settings, such as paper size in the trays
and installable options.
113
4 Installation
3.
4.
On the Advanced tab check Start printing after last page is spooled.
This is required in order for the tracking and billing information to be
correct. Also it allows for faster spooling.
Click OK.
For high load systems you can minimize the wait for documents to be processed
and transferred to the SafeCom server by checking Enable printer pooling
(4.13.1) on the Ports tab and add multiple identically configured SafeCom Pull
Ports. In our experience 1-4 ports is sufficient and no more than 12 ports
should be added.
4.12
Add a SafeCom Pull Printer on client
computers
As discussed in 3.5.5 you may wish to add a local SafeCom Pull Printer on a
client computer. To do this you need to do two things on the client computer:


Install SafeCom client on the computer (4.12.1).
Add a local SafeCom Pull Printer on Windows 7 (4.12.2), Windows XP
(4.12.3) or Windows Vista (4.12.4).
4.12.1 Install SafeCom client
In order to add a local SafeCom Pull Printer you need to install the SafeCom
Pull Port on the client computer. You only need to do this once on the
computer.
1.
2.
3.
Insert the SafeCom CD or download the safecom_g3_xxx_32bit.exe or
safecom_g3_xxx_64bit.exe file from the link supplied to you. The
installation must be Run as administrator. When the installation program
is launched click Next.
Click Advanced installation. Click Next.
Click Client and follow the instructions on the screen (4.2.3).
The SafeCom Pull Port is now installed on the client computer. Next you need
to either modify an existing local printer or add a new local printer. When you
do this you should make sure that:



D60603-21
The printer is not shared.
The printer uses the SafeCom Pull Port, which sees to the transfer of
documents to the SafeCom server from the SafeCom Pull Printer.
The SafeCom Pull Port is configured correctly (4.13.2).
114
4 Installation
4.12.2 Add a local SafeCom Pull Printer on Windows 7
The User Account Control(UAC) settings must be turned off, otherwise the
adding of the printer will fail as there is not sufficient rights to add the
SafeCom Pull Port.
Turn off User Account Control:
1.
2.
3.
4.
5.
Open the Control Panel.
Click User Accounts.
Click Change User Account Control settings.
Select Never notify. Click OK.
Restart the computer.
Add the printer:
1.
2.
3.
4.
Click Start and Devices and Printers.
Click Add a printer.
Click Add a local printer.
Choose Create a new port and select SafeCom Pull Port from the dropdown list. Click Next.
Note: If you have installed SafeCom Print Client (4.3.1), you can choose
Use an existing port and select scPull from the drop-down list. Click
Next and continue to step 8.
5.
6.
7.
8.
9.
10.
Enter a unique name of your choice for the port in Port Name. Click OK.
The Configure Pull Port dialog (4.13.2) prompts you to enter the
hostname or IP address of the SafeCom Server and choose the method of
User authentication. Refer to step 5 in 4.13.2. Click OK.
The Authorize port configuration dialog appears. Enter User logon and
Password of a user that has SafeCom Administrator or Technician rights.
Click OK.
Select the manufacturer and printer model. Click Next.
Select whether or not you want to keep the existing driver or use the new
one. Click Next.
Enter a Printer Name. Click Next.
Note: If the Installing printer… dialog is hanging for more than half a
minute it is because User Account Control was NOT turned off.
11.
12.
Select Do not share this printer. Click Next.
Clear Set as default printer if this printer should be your default
Windows printer. Click Print a test page to print a test page to verify the
system. You are prompted to confirm that the test page was printed
correctly, but the test page is only printed when you log in at the device.
For now, click Close, and then Finish.
If the SafeCom Pull Port has been configured to show the SafeCom Print
Authentication dialog (4.13.2) or if SafeCom Rule Based Printing is used to ask
for print confirmation, then scPopUp.exe (4.14) must be setup to start in each
session, either by making a shortcut in the Windows Startup folder or by
starting it in a logon script.
D60603-21
115
4 Installation
4.12.3 Add a local SafeCom Pull Printer on Windows XP
1.
2.
3.
4.
Click Start and Printers and Faxes.
Click Add a Printer. The Add Printer Wizard welcome screen appears.
Click Next.
Select Local printer and clear Automatically detect and install my Plug
and Play printer, then click Next.
Choose Create a new port and select SafeCom Pull Port from the dropdown list. Click Next.
Note: If you have installed SafeCom Print Client (4.3.1), you can choose
Use an existing port and select scPull from the drop-down list. Click
Next and continue to step 8.
5.
6.
7.
8.
9.
10.
11.
12.
D60603-21
Enter a unique name of your choice for the port in Port Name. Click OK.
The Configure Pull Port dialog (4.13.2) prompts you to enter the
hostname or IP address of the SafeCom Server and choose the method of
User authentication. Refer to step 5 in 4.13.2.
Click OK. The Authorize port configuration dialog appears. Enter User
logon and Password of a user that has SafeCom Administrator or
Technician rights. Click OK.
Select the manufacturer and printer model. Click Next.
State whether or not you want to keep the existing driver or use the new
one. Click Next.
Enter a Printer Name and choose whether or not this printer should be
your default Windows printer. Click Next.
Select Do not share this printer. Click Next.
Select Yes to print a test page to verify the system. Click Next, and then
Finish. You are prompted to confirm that the test page was printed
correctly, but the test page is only printed when you log in at the device.
For now, click OK.
116
4 Installation
4.12.4 Add a local SafeCom Pull Printer on Windows Vista
Note: It is necessary to setup scPopUp.exe (4.14) to start in each session,
ether by making a shortcut in the Windows Startup folder or by starting
it in a logon script to avoid the below dialog from appearing when
printing through a local SafeCom Pull Printer or SafeCom Push Port.
1.
2.
3.
4.
Click Start, Control Panel and Printers.
On the File menu point to Run as administrator, and click Add Printer.
The User Account Control dialog appears. Click Continue.
The Add Printer Wizard welcome screen appears.
Click Add a local printer.
Choose Create a new port and select SafeCom Pull Port from the dropdown list. Click Next.
Note: If Run as administrator was NOT chosen in step 2 Windows will
report Specified port cannot be added. Access is denied.
Note: If you have installed SafeCom Print Client (4.3.1), you can choose
Use an existing port and select scPull from the drop-down list. Click
Next and continue to step 8.
5.
6.
7.
8.
9.
10.
11.
12.
D60603-21
Enter a unique name of your choice for the port in Port Name. Click OK.
The Configure Pull Port dialog (4.13.2) prompts you to enter the
hostname or IP address of the SafeCom Server and choose the method of
User authentication. Refer to step 5 in 4.13.2.
Click OK. The Authorize port configuration dialog appears. Enter User
logon and Password of a user that has SafeCom Administrator or
Technician rights. Click OK.
Click OK and select the manufacturer and printer model. Click Next.
State whether or not you want to keep the existing driver or use the new
one. Click Next.
Enter a Printer Name and choose whether or not this printer should be
your default Windows printer. Click Next.
Select Do not share this printer. Click Next.
Click Print a test page to print a test page to verify the system. You are
prompted to confirm that the test page was printed correctly, but the
test page is only printed when you log in at the device. For now, click
Close, and then Finish.
117
4 Installation
4.13
SafeCom Pull Port
The SafeCom Pull Port is a special port monitor that transfers documents to
the SafeCom server from the SafeCom Pull Printer. The SafeCom Pull Port is
installed when you perform a Server installation, Client installation (4.12) and
when installing SafeCom Print Client (4.3).
4.13.1 Enable printer pooling
You can enable Windows printer pooling to minimize the wait for documents to
be processed and transferred to the SafeCom server and/or if users in Citrix
and Windows Terminal Service (WTS) environments (4.16) are dissatisfied with
the time it takes before the SafeCom Print Authentication dialog appears.
1.
Click Start, point to Settings and click Printers.
2.
Right-click the SafeCom Pull Printer and click Properties.
3.
Click the Ports tab.
4.
Check Enable printer pooling. Click Add Port… to create multiple
instances of the SafeCom Pull Port.
Note: In our experience you should not use more than 12 ports per queue.
D60603-21
118
4 Installation
4.13.2 Configure the SafeCom Pull Port
The SafeCom Pull Port is configured when you add a SafeCom Pull Printer.
To configure the SafeCom Pull Port after you have added the SafeCom Pull
Printer, go through the following steps:
D60603-21
1.
2.
3.
Click Start and then click Devices and Printers.
Right-click the SafeCom Pull Printer and click Printer Properties.
Click the Ports tab. Select the SafeCom Pull Port and click Configure
Port…
4.
Click Edit servers…to add, remove, change or test the connection to the
SafeCom server (4.13.3).
119
4 Installation
5.
Select the method of User authentication:

Use network logon: Select to use your Windows logon as your
SafeCom user logon when printing.

Use specified logon: Select and enter the SafeCom user logon of
the user who is to receive all future prints sent to the print queues
that uses this Pull Port. This can be combined with Group print
(5.13.8) by specifying the name of the group instead of the name of
a user.

Show authentication dialog at every print: Select if you do not
want to use the Windows logon as the SafeCom user logon. SafeCom
PopUp must be running on the user’s computers to show dialog that
prompts for the login (4.13.4) and SafeCom Application Print must
be installed on the computer that hosts the Pull Port. Up to 10
minutes may elapse before the choice takes effect. The time is
configured by the Windows registry setting CacheExpireSuccess
(4.4.4).
To enable SafeCom Print Authentication by Card, make sure you
select Show authentication dialog at every print. SafeCom Print
Authentication by Card also requires installation of SafeCom
Application Print. See (4.4)
D60603-21

Show authentication dialog on first print only: Select if the user
should only be prompted the first time they print. SafeCom PopUp
must be running on the user’s computer to show dialog that prompts
for the login (4.13.4) and SafeCom Application Print must be
installed on the computer that hosts the Pull Port. Up to 10 minutes
may elapse before the choice take effect. The time is configured by
the Windows registry setting CacheExpireSuccess (4.4.4).

Use job data logon: Select to extract the logon from the job data
(4.13.7).

Override driver name: Select and enter the driver name. The
specified driver name overrides the driver name supplied by the
printer driver.

Charging scheme: Select the charging scheme to use when the
Confirm pull job notification (10.4) appears, specifying the cost of
the document. By default the Default charging scheme is selected.
120
4 Installation
6.
Click OK. The Authorize port configuration dialog appears.
4.13.3 Edit servers dialog
In the Edit servers dialog click Test connection to test the communication
with the SafeCom server. Click Close.
It is NOT possible to edit an entry on the server list. Instead select the server
and click Remove. Then click Add…
D60603-21
121
4 Installation
In the Add server dialog enter the SafeCom server address (IP address or
hostname). Click OK.
D60603-21
122
4 Installation
4.13.4 SafeCom Print Authentication dialog
If the SafeCom Pull Port is configured to Show authentication dialog at every
print the following dialog will appear every time you print.
Check Remember to make the dialog appear with the last used ID the next
time you print. Restarting the computer or the Print Spooler will clear the
Remember checkbox.
Note: If any Show authentication dialog options are enabled and the printer
is shared then SafeCom PopUp (4.14) MUST be running on the users’ computer.
4.13.5 Customize the SafeCom Print Authentication dialog
You can change or customize Enter your ID, the dialog timeout, or whether you
want to show or hide Remember in the SafeCom Print Authentication dialog.
“Enter your ID” can be substituted with something more relevant or specific to
your users, for example the exact login they should enter. For example, if users
log in by entering their social security number you could change the text to
Enter social security number. For more information on ID codes see (3.3).
D60603-21
123
4 Installation
To show or hide Remember:
1.
Open the Registry Editor and browse to:
HKEY_LOCAL_MACHINE\SOFTWARE\SafeCom\SafeComAppPrint
2.
Create a DWORD with the value:
Value name
AuthRememberMe
Value data
0 = Hide Remember check box
1 = Show Remember check box
To change Enter you ID or Remember dialog text:
1.
In the SafeCom program folde, locate the file:
scPopup_lang.ini
2.
In the scPopup_lang.ini file, define the following:
AuthenticationHeadline
AuthenticationRememberMe
Change Enter your ID to text with a
max. of 30 characters.
Change Remember to text with a
max. of 30 characters.
The changes take effect once either the computer has been restarted or the
Print Spooler service has been restarted.
To restart the Print Spooler:
1.
2.
Click Start, type services.msc into the Search box and press ENTER.
Right-click Print Spooler and click Restart.
4.13.6 Force focus on the SafeCom Print Authentication dialog
1.
Open the Registry Editor and browse to:
HKEY_CURRENT_USER\Control Panel\DeskTop
2.
3.
Double-click ForegroundLockTimeout and set Value to 0. Click OK
You must log out and log in on the computer before the changes take
effect.
Please note that changing the above parameter will affect the behavior of all
applications that attempts to take focus.
D60603-21
124
4 Installation
4.13.7 Configure Use job data logon
The SafeCom Pull Port (4.13.2) can be configured to Use job data logon instead
of the network logon.
Note: This requires a SafeCom Enterprise Server (Multiserver license.)
When printing from SAP and similar applications the print job is normally
associated with a generic user logon rather than the logon of the real user. This
is quite unfortunate in a Pull Print scenario, as it will cause all jobs to be
stored under the name of this generic user.
However, for SAP it is possible to configure it such that the logon of the real
user can be embedded in the job data stream as a PJL command. Please refer
to the documentation that came with your application (SAP).
With the user authentication option Use job data logon the SafeCom Pull Port
can be configured to extract the logon from the job data.
1.
2.
3.
Open the Configure Pull Port dialog (4.13.2).
Select Use job data logon.
Click Configure… to open the Job data properties dialog.
Job data string is the string that precedes the logon. The logon (maximum
characters) is extracted as the string that is between the Job data string (with
the potential succession of any skip characters and a start character) and the
Stop character.
Max search length is the number of bytes to search into the job data stream.
Typically the job data string is within the first 1000 bytes.
Characters to skip can be <None>, <Tab>, <Space> or any entered printable
character and defines that any occurrence of this character should be skipped
after the Job data string and before the Start character.
Start character can be <None>, <Tab>, <Space> or any entered printable
character and defines the character in front of the logon.
D60603-21
125
4 Installation
Stop character can be <None>, <Tab>, <Space> or any entered printable
character and defines the character after the logon. A carriage return or new
line will always terminate the logon string.
Use alternative logon can be <None> or Network logon and defines the
fallback logon to use in case the logon cannot be extracted from the job data.
Here are some examples:
Extract from file
Job data string
Characters to skip
Start character
Stop character
Extracted logon
D60603-21
Date=”2007.01.01”
Name=”JS”,File=”letter.txt”
Time:
12:15:32
”
”
User: JS
Doc: letter.txt
User:
<Space>
<None>
<None>
JS
JS
Name=
<None>
126
4 Installation
4.14
SafeCom PopUp – scPopUp.exe
SafeCom PopUp displays the following popup dialogs on the user’s screen:

Print authentication
For user authentication at print submission time when a user is not logged
onto the network. This can be configured for both the SafeCom Pull Port
(4.13) and the SafeCom Push Port (9.3). The Print Authentication dialog
can be customized, see (4.13.5). Authentication by card at print
submission time is possible by specifying the /AU and /LC startup
parameters to scPopUp (4.14.1).

Delegate print
With SafeCom Delegate Print users grant permission to other users to
print or collect print jobs on their behalf (5.8.7).

Client billing
With SafeCom Client Billing (11) it is possible to ask users to select a
billing code at print submission time.

Print confirmation
With SafeCom Rule Based Printing (10.3) it is possible to increase cost
awareness among users by asking them to confirm that the document
should be printed.

Show job price before printing
With SafeCom Push Print (9.3) it is possible to show the job price to the
user at print submission time.

SafeCom Print Client off line printing
When a user submits a print job and the SafeCom server is offline, the
SafeCom Print Client dialog opens (4.3.4), offering the user to choose a
printer to send the print job to directly.
4.14.1 Setup SafeCom PopUp
scPopUp.exe is installed as part of a Server installation (4.2.2) and Client
installation (4.2.3). The PopUp is also installed and started automatically as
part of an Application Print (4.4) and Print Client installation ((4.3) although
with the Print Client the PopUp installation can optionally be deselected).The
scPopUp.exe is located in the SafeCom installation folder:
C:\Program Files\
SafeCom\SafeComG3
Note: scPopUp.exe should be the same version as the SafeCom G3 server
software.
If you intend to run scPopUp.exe from a file share you should ensure that
Internet Properties on the computer allows local (Intranet) sites and includes
the specified share. Otherwise Windows may present a Security Warning
stating The publisher could not be verified. See (16.38).
D60603-21
127
4 Installation
If Windows Firewall (4.2.5) is installed on the computer then TCP port 5740
must be open.
To start scPopUp:
1.
Start scPopUp.exe. We recommend setting up scPopUp.exe to start each
session, either by making a shortcut in the Windows Startup folder or by
starting it in a logon script. To view PopUp help, use the command:
scPopUp.exe /?
Help:
POPUP [/G] [/K] [/P] [/S] [/T] [/TO] [/PO] [/AM] [/CA path]
[/LC] [/AU [[r:]xx[yy]]] [/WT ”<windows title>”[:<seconds>]]
/G
/K
/P
/S
/T
/TO
/PO
/AM
Run in guest mode, prohibits the user to exit the application.
Timeout on a dialog will select OK button as default.
Hide login credentials typed in by user.
Show splash screen on startup.
Use TCP and PIPE connection.
Use TCP connection only (DEFAULT).
Use PIPE connection only.
Allow running multiple instances of PopUp.
/CA path
Specifies the path of the language captions file.
/LC Listen for supported card readers.
/AU [[r:]xx[:yy]]]
Show authentication status dialog.
r
Indicates that authentication status timer is reset on every
print job.
xx
Is the user session timeout.
Default: 1800 seconds.
yy
Is the authentication status dialog timeout warning.
Default: 60 seconds.
/WT ”<windows title>”[:<seconds>]
The <windows title> specifies an application modifying the
authentication behavior of the popup. When a logged in user exits
the specified application, the popup will forget that user and
authentication is re-required when submitting the next print job.
The parameter is not case sensitive.
Seconds specifies in seconds how often the popup should check
whether the specified application is still open. Default is 5.
Example: scPopUp /AU R:300 /WT ”Clinical Management System”:5
D60603-21
128
4 Installation
Note: The window title parameter only looks for text matches in
window titles and is unable to differentiate files containing the
defined text from real applications. Example: If you have defined
Clinical Management System in the window title parameter and
open a document containing the phrase Clinical Management
System, the popup will not react to closing the Clinical Management
System application since the document is still open.
If no arguments are supplied, the PopUp starts only with TCP connection.
2.
Double-click the scPopUp icon in the Windows system tray to see status
and version.
4.14.2 SafeCom PopUp on Mac computers
SafeCom Popup on Mac computers requires Mac OS X version 10.2 or newer
against SafeCom G3 Server version S82 070.410*3 or newer on Windows
2008/2008 R2 or 2003.
To install SafeCom Popup on a Mac computer:
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
D60603-21
Download the installation file scPopup for Mac to the Mac computer.
Control-click the installation file, and select Open from the context
menu, then in the dialog box opening click Open.
Double-click the installation file, and the Applications window opens.
In the Applications window,
double-click the scPopUp file.
SafeCom PopUp is now
launched to the menu bar.
In the Apple menu, select
System Preferences….
In the System section of the
System Preferences window,
select Accounts.
In the Applications window,
control-click and drag the
scPopUp file to the
Applications folder.
Log out, and then log in again.
In the Applications folder, double-click scPopup.
In the Accounts window, select Login Items and verify that scPopup is
listed in the login items with Application Kind. Exit Accounts and System
Preferences.
129
4 Installation
4.14.3 SafeCom PopUp examples
Below are some examples of how the SafeCom PopUp appears on users’
computer screen.
D60603-21

Print authentication
If one of the Show authentication dialog options is enabled on the
SafeCom Pull Port (4.13.2) or SafeCom Push Port (9.3).

Print confirmation
If the rule has Notify by popup enabled and/or includes the action
Confirm pull job. Message: ‘text’ or Confirm push job. Message: ‘text’
(10.3).
130
4 Installation

Delegated print
If delegated print is allowed on the SafeCom server users can delegate
their print jobs to each other via the print delegation dialog. Delegate
relationships are set up in the SafeCom Administrator and/or the SafeCom
Web Interface.
4.14.4 Force SafeCom Port Monitors to use SafeCom PopUp
The SafeCom Pull Port and SafeCom Push Port monitor can be controlled how it
should connect to the scPopUp.exe.
1.
Open the Registry Editor:
For Pull Port browse to:
HKEY_LOCAL_MACHINE\SYSTEM\
CurrentControlSet\Control\Print\Monitors\
SafeCom Pull Port\Ports
For Push Port browse to:
HKEY_LOCAL_MACHINE\SYSTEM\
CurrentControlSet\Control\Print\Monitors\
SafeCom Push Port\Ports
The location of registry settings is the same in a cluster.
2.
Create a new DWORD named WTSDialogs. It can take the following values:
0:
1:
2:
3:
D60603-21
Auto-detect whether the client is running in a Windows Terminal
Service environment, in which case a pipe (value 1) will be used to
connect to scPopUp.exe. Otherwise TCP will be used (value 2).
Use pipe to connect to scPopUp.exe.
If this fails the print job is deleted.
Use TCP to connect to scPopUp.exe.
If this fails the print job is deleted.
Use TCP to connect to scPopUp.exe.
If this fails the print job is printed anyhow. However, if one of the
Show authentication dialog options is enabled on the SafeCom Pull
Port, the print job is deleted.
131
4 Installation
4.14.5 Control dialog timeout
Timeout for scPopUp is controlled from the Windows Registry settings of the
SafeCom Pull Port and SafeCom Push Port.
1.
Open the Registry Editor and browse to:
For Pull Port browse to:
HKEY_LOCAL_MACHINE\SYSTEM\
CurrentControlSet\Control\Print\Monitors\
SafeCom Pull Port\Ports
For Push Port browse to:
HKEY_LOCAL_MACHINE\SYSTEM\
CurrentControlSet\Control\Print\Monitors\
SafeCom Push Port\Ports
The location of registry settings is the same in a cluster.
2.
4.15
Create a new DWORD named DialogTimeout. It can take any of a value
between 3 and 600 seconds. The default is 30 seconds.
Printing encrypted documents
With SafeCom Encryption documents can be encrypted on the network; from
the moment the user clicks print on their computer and until the document is
collected at the device. This prevents anyone from reading the documents,
should they be intercepted on the network. Documents are always encrypted
when traveling from the SafeCom Pull Port to the SafeCom server and when
they are stored for later printing.
Prerequisites:





D60603-21
Encryption is included in the SafeCom license key code (5.5).
The user has encryption enabled, that is, Encrypt documents is checked
on the Settings tab in the User properties dialog (5.8.2).
The device has encryption enabled, that is, Encryption is checked on the
License tab in the Device properties dialog (5.9.3).
A local SafeCom Pull Printer is installed on the computer of the user
requiring encryption (4.12).
The device is connected to the SafeCom Controller’s 2-port switch. On
devices with an internal SafeCom Go solution decryption is done inside
the device.
132
4 Installation
4.16
Printing in Citrix and Windows Terminal
Service environments
This section describes how to make the SafeCom Print Authentication dialog
(4.13.4) appears on the screen of the client terminal in Citrix and Windows
Terminal Service (WTS) environments.
Prerequisites:




Citrix or WTS running on a Windows Server 2008/2008 R2 or 2003.
Clients have full desktop access.
There is at least one logon name per client terminal.
A logon is only used on one client terminal at a time.
The steps:
1.
2.
3.
4.
4.17
Add a local SafeCom Pull Printer on the Windows server running Citrix or
WTS (4.12). Check Enable printer pooling (4.13.1) to minimize the
possibility of users having to wait until other users have responded to the
SafeCom Print Authentication dialog.
Configure the SafeCom Pull Port to Show authentication dialog (4.13.2).
Optionally you may wish to customize the SafeCom Print Authentication
dialog as described in 4.13.5.
Setup scPopUp.exe to start as described in 4.14.
Make all printing go through the SafeCom
solution
This section describes how you can ensure that all printing is done solely
through SafeCom. When using the word “ensure” we disregard outrageous user
behavior, such as disconnecting the SafeCom hardware - an act, which could
probably be made subject to prosecution.
Basically you only need to take special precautions for devices with a built-in
and connected network interface. An obvious precaution is to ensure that only
the SafeCom servers are allowed to connect to the device’s network interface.
Some network interfaces, such as the HP JetDirect print servers and Ricoh
Network Interface Cards, features an IP host access list. Only the hosts on the
list are allowed to access the network interface. In this case it means that the
IP address of the SafeCom server and/or SafeCom Controller should be the only
ones on the list. The SafeCom Controller should have a fixed IP address.
You may also need to disable selected network printing protocols, such as the
Internet Printing Protocol (IPP). Some network devices also offer the possibility
to disable their parallel and/or USB port. For additional information, please
refer to the documentation that came with your device / network interface or
contact your printer vendor.
D60603-21
133
4 Installation
4.18
Install a card reader on a computer
If the administrator is to register cards with users (3.4.5) it requires a card
reader to be connected and configured on the computer.
The stand-alone card readers (Table 1 on page 24) can be used with the
SafeCom Administrator. Most USB card readers can be connected to the
computer via the USB port and used directly. Connecting a SafeCOm ID device
needs to be connected to a USB port if you want to enable SafeCom Print
Authentication by card. The serial card readers can be connected to the
computer via a SafeCom Serial PC Cable (p/n 660010). The cable connects to
the computer’s RS-232 DB9 connector for communication and 5 Volt power
must be supplied via the PS2 keyboard pass-thru connector.
1.
2.
3.
4.
4.19
Connected the USB card reader to the USB port. The serial card reader
should be connected to the computer’s serial port (COM1, COM2 or
COM3).
Start SafeCom Administrator.
On the Actions menu, click Options.
Click on the Card reader tab in the Options dialog and make your
selections.
Update selected SafeCom components
To update to a complete new SafeCom G3 Server version, please refer to the
sections: Single server (4.2.20), Multiserver installation (4.7) and Cluster
installation (4.8).
In the period between complete releases, SafeCom Support releases sometimes
patches for selected components. Always read the release note that
accompanies the supplied patch, as it may contain additional and important
information.
The update of selected SafeCom components is covered as follows:







D60603-21
SafeCom Administrator, scAdministrator.exe (4.19.1)
SafeCom Port Monitors, scPullPM2k.dll and scPushPM2k.dll (4.19.2).
SafeCom Job Server, scJobServer.exe (4.19.3).
SafeCom Secure Library, scSecureLib.dll (4.19.4).
SafeCom ID code conversion, filtercard.dll (4.19.5).
SafeCom Parser, scParser.dll (9.16).
SafeCom Rule Executer, scRuleExecuter.dll (10.7).
134
4 Installation
4.19.1 Update SafeCom Administrator
1.
2.
Close SafeCom Administrator.
Replace the scAdministrator.exe in the SafeCom installation folder with
the new one.
Note: If the server is clustered use the Cluster Administrator to move the
virtual server as you update scAdministrator.exe on the nodes.
Note: To determine the version right-click the scAdministrator.exe file, click
Properties and click on the Version tab.
4.19.2 Update SafeCom Port Monitors
On Windows 32-bit:
1.
2.
3.
On the computer stop the Print Spooler (16.31).
Replace the scPullPM2k.dll and scPushPM2k.dll files in the
C:\Windows\system32 folder.
Start the Print Spooler.
On Windows 64-bit:
1.
2.
3.
4.
On the computer stop the Print Spooler (16.31).
Replace the scPullPM2k64.dll and scPushPM2k64.dll files in the
C:\Windows\system32 folder.
Replace the scPullPM2k.dll and scPushPM2k.dll files in the
C:\Windows\syswow64 folder.
Start the Print Spooler.
Note: If any of the servers are clustered use the Cluster Administrator to move
the virtual server as you update the files on the nodes.
Note: To determine the version right-click the file, click Properties and click
on the Version tab.
4.19.3 Update scJobServer.exe
1.
On all the SafeCom servers you must stop the SafeCom Service (16.30)
replace the scJobServer.exe in the SafeCom installation folder with the
new one and then restart the SafeCom Service.
Note: On Windows 64-bit the file is named scJobServer64.exe.
2.
If you are using the SafeCom G3 Web Interface you must also restart IIS
Admin Service, HTTP SSL, World Wide Web publishing service for the fix
to take effect.
Note: If any of the servers are clustered use the Cluster Administrator to move
the virtual server as you update the scJobServer.exe on the nodes.
Note: To determine the version right-click the scJobServer.exe file, click
Properties and click on the Version tab.
D60603-21
135
4 Installation
4.19.4 Update scSecureLib.dll
1.
On all the SafeCom servers you must stop the SafeCom Service (16.30)
and Print Spooler (16.31) and replace the scSecureLib.dll in the SafeCom
installation folder with the new one and then restart the SafeCom
Service and Print Spooler.
Note: On Windows 64-bit the file is named scSecureLib64.dll.
2.
If you are using the SafeCom G3 Web Interface you must also restart IIS
Admin Service, HTTP SSL, and World Wide Web publishing service for the
fix to take effect.
Note: If any of the servers are clustered use the Cluster Administrator to move
the virtual server as you update the scSecureLib.dll on the nodes.
Note: To determine the version right-click the scSecureLib.dll file, click
Properties and click on the Version tab.
4.19.5 Update filtercard.dll
This section is relevant only for customers who have been supplied with a
filtercard.dll to accomplish on-the-fly ID code conversion. This method can be
used in installations where SafeCom ID devices return ID codes differently.
1.
2.
3.
Unzip the received file.
If the received DLL file is not already named filtercard.dll then
rename it to filtercard.dll.
Copy the filtercard.dll file to the SafeCom installation folder. The
default folder is:
C:\Program Files\SafeCom\SafeComG3\
4.
Restart the SafeCom Service.
The above steps should be performed on all SafeCom servers. It should also be
performed on all the computers that have SafeCom Administrator installed and
a card reader connected (4.18).
D60603-21
136
5 SafeCom Administrator
5
SafeCom Administrator
5.1
Introduction
SafeCom Administrator is the application you use to configure and
administrate your SafeCom solution. SafeCom Administrator can be installed
on any Windows computer and used to administrate all the SafeCom servers
within TCP/IP range of the computer.
When you log in to SafeCom Administrator it will present the SafeCom
Assistant (5.3.1). This will guide you through the steps needed to make your
devices part of the SafeCom solution.
D60603-21
137
5 SafeCom Administrator
5.2
Install SafeCom Administrator
To administrate your SafeCom solution from other computers, you simply install
the SafeCom Administrator on those computers. If you want to install a local
SafeCom Pull Printer or SafeCom Push Printer on this computer also you must
install SafeCom Client first (4.12).
1.
2.
3.
4.
5.3
Insert the SafeCom CD or download the safecom_g3_xxx_32bit.exe or
safecom_g3_xxx_64bit.exe file from the link supplied to you. The
installation must be Run as administrator. When the installation program
is launched click Next.
Click Advanced installation. Click Next.
Click Tools.
Check SafeCom Administrator. Follow the instructions on the screen or
refer to 4.2.4 for details.
Log in to SafeCom Administrator
1.
2.
Click Start, point to All Programs, SafeCom G3, and click SafeCom
Administrator.
In SafeCom Administrator click on the server to log in and enter the user
logon and password:
a.
To log in enter the user logon (default ADMIN) and password
(default nimda).Once you are logged in, you can change the user
logon and password.
Note: If the user belongs to a domain it must be specified in front
of the user’s logon followed by a slash (/) or a backslash (\).
Example: MYDOMAIN\JS. Alternatively you can specify user logon
followed by (@) and the domain, like this [email protected]
b.
D60603-21
To log in with Windows credentials, enter Windows logon followed
by @ and the domain in the User logon field and then enter the
password.
138
5 SafeCom Administrator
5.3.1
SafeCom Assistant
When you log in to SafeCom Administrator it will present the SafeCom
Assistant. However, it is NOT present in multiserver solutions.
The SafeCom Assistant will guide you through a 3-step process to make your
devices part of the SafeCom solution. You can jump between the steps by
clicking on the title, for example 2 Add SafeCom Pull Printer.
Clear Show the screen at login if you do not want the SafeCom Assistant to
open at login.
1.
Devices

D60603-21
Select device type
Click the type of SafeCom device; SafeCom Go (Canon, Fuji Xerox,
HP, Konica Minolta, Kyocera, Lexmark, Océ, Ricoh, Samsung, Sharp,
Xerox) or SafeCom Controller (Other).
139
5 SafeCom Administrator
24
25
D60603-21

Download device manuals and software
Download is required if the manuals and device_software (8.10.1)
subfolders does not contain the required files24. Click Next.

Open device manual (and install device hardware etc.)
The relevant device manual appears25. Open the manual, as you
may need to consult it in order to install device hardware and/or
send software to the device. The manual is in PDF format and
requires Adobe Reader. Click Next.
To get future updates use Check for updates in the System overview (5.4).
The manual is also added to the list of manuals in the System overview (5.4).
140
5 SafeCom Administrator
2.
D60603-21
Add a SafeCom Pull Printer

Add a SafeCom Pull printer
Click Windows Add Printer Wizard to open this and add a shared
printer to be used for Pull printing. Follow the instructions in the
device manual or as documented in section 4.11. If a SafeCom Pull
Printer is already added you do not need to do this.

Add device
Click Add device to add the physical device to the SafeCom
solution. On SafeCom Go HP, SafeCom Go Lexmark and SafeCom Go
Ricoh the steps include sending software to the device. Complete
the steps according to the device manual or as documented in
section 8.3.
141
5 SafeCom Administrator
3.
Add a SafeCom Push Printer

5.3.2
Open SafeCom Port Configurator
If you have an existing TCP/IP printer and wish to convert this to a
SafeCom Push printer and thus also be able to track documents that
are printed directly. Click Close and complete the steps in SafeCom
Port Configurator (9.4).
Change password
1.
2.
3.
On the Users menu, click Change password.
Enter your Old password and New password and Confirm new password.
Click OK.
The password can also be changed in the User properties dialog (5.8.4).
D60603-21
142
5 SafeCom Administrator
5.3.3
Test server
1.
2.
On the Actions menu, click Test server…
Enter the Server address (IP address or hostname) and click Test.
The connection can also be tested in the Server properties dialog (5.7.1) and
by right-clicking a SafeCom server and click Test server…
The Loop check box and Server address are only present when the Test server
dialog is opened from the Actions menu.
5.3.4
Menus and commands
This section lists the SafeCom Administrator menus and commands, their
shortcut keys and a reference to the relevant sections in this manual.
Additional commands may appear if your solution includes any add-on modules
such as Tracking and Pay.
Actions
D60603-21
Login
Logout
Test server…
Reports…
Export…
Server group
Add server group…
Remove server group…
Server group properties…
Locate server groups
Options…
Exit
ENTER
CTRL+Q
CTRL+R
CTRL+E
5.3
5.3.3
9.13
5.17
CTRL+L
5.10
ALT+F4
143
5 SafeCom Administrator
Users
Devices
D60603-21
Refresh
Add user…
Delete user
Import users…
Aliases…
ID codes…
Domains…
User groups
Add group…
Delete group
Group properties…
Jobs
Refresh…
Auto-retrieve
Delete job
Change password…
User properties…
F5
INS
DEL
Refresh
Add device…
Delete device
Send Go Loader…
Update software…
Restart…
Open in web browser
Monitor setup…
Charging schemes
Refresh
Add charging scheme
Delete charging scheme
Charging scheme properties
Device properties…
F5
INS
DEL
7.5
7.11
7.3
7.13
5.13
INS
DEL
ALT+ENTER
7.18
F5
DEL
ALT+ENTER
ALT+ENTER
5.3.2
5.8
0
8.9
8.10
8.10
8.12
8.13
8.11
9.11
5.9
144
5 SafeCom Administrator
Servers
View
D60603-21
Refresh
Add server…
Delete server…
License…
Branches
Add branch…
Delete branch…
Branch properties…
Organizational units
Add org. unit…
Delete org. unit
Org. unit properties…
Rule Based Printing…
Client Billing
Manage billing codes…
Import billing codes…
Schedule billing code import…
Tracking data
Export tracking data…
Import tracking data codes…
Statistics…
Event log…
Server properties…
6.3.2
6.5
5.5
INS
DEL
5.12
INS
DEL
10
11
9.14.1
9.14.2
CTRL+ENTER
5.14.3
5.16
5.7
SafeCom Assistant…
Toolbars
Users
Devices
Servers
Charging schemes
Search
Tools
View server group info…
Expand server view at login
All
Branches
Groups
Servers
5.3.1
Cashier
Account status…
Cash flow report…
12.6
12.7
Help
Support…
SafeCom online…
About…
5.10.5
145
5 SafeCom Administrator
5.3.5
Server group and server icons
Server group
Master server
Slave server
Offline server
Unsupported server group (old version)
Server group is unavailable (unable to connect)
5.3.6
User icons
Standard user
Default user
Locked user (login prevented)
User with no defined home server
User has been moved to a failover server
Technician
Cashier user (requires SafeCom Pay)
Administrator
Administrator with limited rights
5.3.7
Device icons
MFP or printer with SafeCom Controller
MFP with SafeCom Go / SafeCom Controller
MFP with SafeCom Go / SafeCom Device Server
MFP with SafeCom Go Canon
MFP with SafeCom Go HP
Printer with SafeCom P:Go HP
MFP with SafeCom Go High-end HP
MFP with SafeCom Go Lexmark
Printer with SafeCom P:Go Lexmark
MFP with SafeCom Go Ricoh
Printer with SafeCom P:Go Ricoh
Push Printer
Device with no defined home server
Device registration not completed
Device not registered in the SafeCom solution
D60603-21
146
5 SafeCom Administrator
5.3.8
Document icons
Document
Retained document
Group printed document
Delegated document
Branch office document
Branch office document retained
Document delegated and retained
Job deleted after first print
Group retained print job
5.3.9
Other icons
Branches (top level)
Branch
Computer in branch
Groups (top level)
Group
Organizational units (top level)
Org. unit
Servers (top level)
Standard charging scheme (requires SafeCom Tracking)
Default charging scheme (requires SafeCom Tracking)
5.3.10 Built-in user accounts
The SafeCom solution features two built-in user accounts:


D60603-21
ADMIN
Administrator account with the default password nimda.
TECH
Technician account with the default password hcet, initial PUK code
12345678 and default PIN code 1234.
147
5 SafeCom Administrator
5.4
System overview
Click the server group to open System overview. This provides an easy access
to system information, manuals, updates, and common tasks.
5.4.1
Manuals
List the relevant manuals. Click the manual title to open it in Adobe Reader.
Click the Manuals arrow icon to configure the manuals of interest.

5.4.2
SafeCom G3 Administrator’s ManualD60603 (this manual) is the initially
listed manual. Relevant SafeCom Go Administrator’s Manuals and others
are added to the list as you use the SafeCom Assistant (5.3.1).
Users
Show the total number of users (initially two). Click the Users arrow icon to
open the list of users on the master server.
D60603-21

Default user shows the user logon of the defined default user (7.2).
Click the user logon to open the User properties dialog.

Click User import to open the Scheduled user import dialog (7.3).
The date and time of the next scheduled user import is shown.
148
5 SafeCom Administrator
5.4.3
Devices
Show the total number of devices. Click the Devices arrow icon to open the list
of devices on the master server.
5.4.4

Default charging scheme 1 and Default charging scheme 2. Click the
respective names to open the Charging scheme dialog (9.11).

Click Add device (8.3) to configure and register the device on the
SafeCom master server. This function is not available in a multiserver
solution, as you would normally have devices registered on the slaves.

Click Windows Add Printer Wizard to open this.

Click SafeCom Port Configurator to open this (9.4).
Servers
Servers show information about the master (and slave) servers. Click the
Servers arrow icon to open the list of servers.
Click the License arrow icon to open the License dialog (5.5).
5.4.5
Collect system info
In Collect System Info click Collect.
5.4.6
Check for updates
In Check for updates click Check. A connection is established to the SafeCom
Update Server to check for new updates of manuals, device software and
release notes.
Click Run in background to have the files downloaded while you continue your
work. If access to the Internet requires use of a Proxy server this can specified
on the Network tab in the Options dialog (5.10.3).
Note: If the Check for updates function is used on a cluster, you are advised
to update both nodes.
5.4.7
Save-O-Meter
In order for the SafeCom Save-O-Meter to work the Track deleted print jobs on
the Tracking tab in the Server properties dialog must be checked (5.7.5).
For more information on Save-O-Meter, the Widget, and how savings are
calculated, refer to SafeCom Save-O-Meter Administrators Manual D60640.
D60603-21
149
5 SafeCom Administrator
5.5
License
The License dialog can be accessed from the Servers menu. The License dialog
shows the number of licensed server features, devices and device features and
it allows you to install license upgrades in the form of a key code. More
information about license key codes is available in 4.9.
Enter your key code in Enter key code and click Apply. Current key displays
the license key code currently used by the SafeCom server. Listing features
displays the features activated by the current license key code. Refer to
section 8.5.2 to see how the Find devices function can be used to see which
device is using which device license.
D60603-21
150
5 SafeCom Administrator
5.6
Server group properties
The Server group properties dialog can be accessed from the Servers menu
and by right-clicking the group in the Server groups pane.
Click Search… to search for server groups. Search result is shown in the dialog.
Click Test… to test the connection.
D60603-21
151
5 SafeCom Administrator
5.7
Server properties
The Server properties dialog can be accessed from the Servers menu, the
Server tool button and by right-clicking the server in the Server groups pane.
The dialog comprises the tabs:








5.7.1
Server (5.7.1)
Users (5.7.2)
Devices (5.7.3)
E-mail (5.7.4)
Failover (6.6)
Tracking (5.7.5 and 9.9.1)
Billing (5.7.6 and 11.3)
Encryption (5.7.7)
Server
Server group is the name of the server group. Computer name must match the
computer name of the SafeCom server. Refer to 4.9.1.
D60603-21
152
5 SafeCom Administrator
Note: If using SafeCom Administrator version 9.41.6.2, the server group name
can be changed. If clicking the Refresh servers icon
in the Server groups
pane within a minute after changing the name, the old server group name
appears again in the Server groups pane. Click the Refresh servers icon again
after another minute, and the new name appears in the Server groups pane.
Org. unit is the organizational unit the SafeCom server belongs to (5.12).
Server address is the address of the SafeCom server. Click Test server… to test
the connection (5.3.3).
Check Write event to Windows event log (5.16) if you wish to be able to use
the Window Event Viewer to view event log messages from the SafeCom
solution.
Database integrity check verifies the consistency between document
references in the SafeCom database and executes the delete document
functionality. The check can take place on selected weekdays (Monday,
Tuesday, … , Sunday) at a specific time or at a regular predefined intervals
starting at a specific time. The available intervals are every 10, 20, or 30
minutes, or every 1, 2, 3, 4, 6, 8 and 12 hours. Every 2 hours on all weekdays is
default.
Check Delete print jobs after to keep the print in the SafeCom solution for the
specified number of day(s), hour(s) and min(s). The default is 1 day.
D60603-21
153
5 SafeCom Administrator
5.7.2
Users
Under Automation you can choose to Create users at first print (7.4). This
means that a new user account is created in the database the first time the
new user prints with the SafeCom solution. Check Same ID code as User logon
if newly created users log in at the device with their user logon (JS).
Check Generate PUK on Pull print if the PUK code should be generated on Pull
print. The PUK code can be e-mailed (5.7.4).
Check Create e-mail addresses with domain to combine the user logon (JS)
and the E-mail domain (safecom.eu) into the user’s valid e-mail address
([email protected]).
Check Release credits reserved on error to give back users reserved credits if
an error occurs. This is only relevant if SafeCom Pay (12.2.2) is used.
Under Security you can specify Max login attempts to control the number of
times the user can try to log on with an invalid PIN code, before the account is
locked. The default is 3 times. The Administrator can unlock a locked user
account by clearing Prevent login on the Identification tab in the User
properties dialog (5.8.1).
Note: The max login attempts do not apply to users with Administrator rights.
D60603-21
154
5 SafeCom Administrator
Check Allow users to change PIN code to allow users to change their PIN code
through the SafeCom G3 Web Interface and SafeCom-enabled devices
(restrictions may apply). Do not check this if you wish to manage PIN codes
centrally.
Check Deny multi delete to prevent deleting multiple devices and users (This
option is only editable for administrators with full rights for users).
Check ID codes to hide user codes and card numbers in SafeCom Administrator
to all users except the users with administrator rights (7.8). The administrators
are still able to see ID codes and export these.
Check Document names to hide document names in SafeCom Administrator.
When this is checked the Document name column in the list of a user’s
pending jobs is not visible for users that do not have administrator rights (7.9).
Check Allow delegates to permit users to delegate or accept delegation of
print jobs. Allow delegates is not selected by default.
Under IDs you can specify the Max IDs per user. By default there is one ID per
user. The IDs control is not present in the Server properties dialog of SafeCom
slave servers.
Under Default settings it shows if a default user is defined (7.2). If there is a
default user you can choose to Keep default user and use settings when
creating new users. You can select the Default user by right-clicking a user
with Standard rights in the list of users.
In the list of user the default user is shown with a plus sign:
Initial account 2 is only relevant if SafeCom Pay (12.2.2) is used.
D60603-21
155
5 SafeCom Administrator
5.7.3
Devices
As discussed in 3.5.7 Document fidelity is determined by comparing the name
of the printer driver embedded in the print job with the list of driver names
returned by the SafeCom Controller or SafeCom Go. You may choose among the
following options:
D60603-21

No fidelity check
All the user’s documents can be collected at the device.

Show fidelity warning
All the user’s documents can be collected at the device. If a SafeCom
Front-end is used a warning dialog will appear whenever the user
attempts to print a document that was generated with a driver that is not
included on the SafeCom Controller’s list of driver names.
156
5 SafeCom Administrator

Filter document list
Only those of the user’s documents with a matching driver name can be
collected at the device.
Touch tone controls if touching the touch-screen should cause a beep sound.
The change takes effect the next time someone logs in at the SafeCom Frontend. It also applies to selected SafeCom ID devices.
The SafeCom Front-end will still use two beeps to indicate a card read error
and one beep 10 seconds prior to automatic logout.
5.7.4
E-mail
SMTP mail server shows the hostname or the IP address of the mail server that
is used to send outgoing mails. Port is 25 by default.
Reply address is used by the SafeCom auto-mailer when sending e-mails. Some
mail servers require a valid reply address in order to deliver the mail. The
default [email protected] satisfies this syntax check.
D60603-21
157
5 SafeCom Administrator
E-mail address: Type in the e-mail address to which SafeCom should send
Event and Credits reserved notification messages. The SafeCom solution will
send e-mail messages These e-mail messages help administrators address
potential problems proactively. For example, these e-mails may inform the
administrator that a trial license is about to expire in a couple of days. The
administrator can also look in the Event log (5.16).
If you check E-mail PUK code when generated the PUK code is automatically
sent to the user via e-mail using the template EmailPUK.txt (7.19). A PUK code
is generated in the following ways:



If Generate PUK on Pull print is checked on the Users tab in the Server
properties dialog (5.7.2).
When generating a PUK code on the ID code tab in the User properties
dialog (5.8.3).
When importing users and Generate PUK is checked in the step (7.3).
Note: No e-mail is sent if the PUK is generated from the SafeCom G3
Web Interface.
If you check E-mail welcome message to new users a welcome message is
automatically sent to the user via e-mail using the template EmailWelcome.txt
(7.19).
If you check E-mail job deletion note to author of job the author will receive
an e-mail when a document has been deleted. See EmailJobDelete.txt in 7.19.
In E-mail delete warning to: you can check Author of job and/or Recipients of
job. If checked an e-mail warning is sent the specified length of time prior to
deletion. See EmailWarning.txt 7.19.
D60603-21
158
5 SafeCom Administrator
5.7.5
Tracking
Check Track deleted print jobs to have the SafeCom solution track deleted
jobs and to see the effect in the Save-O-Meter (5.4.7).
Check Allow money server to be unavailable if you want pay users to be able
to print and log in to devices even if it is not possible to charge the user for the
jobs produced by the user.
Check Allow tracking server to be unavailable if you want tracking users to be
able to print and log in to devices even if it is not possible to track the jobs
produced by the user. The tracking server can only be allowed unavailable if
the money server is allowed unavailable.
D60603-21
159
5 SafeCom Administrator
How it works:

A severity 2 event (error) is created in the SafeCom event log (5.16) when
the first pay user logs in while the money server is unavailable. The user
is treated as a tracking user. If the tracking server is unavailable the user
is treated as a no cost user.
A severity 5 event (information) is created in the SafeCom event log (5.16)
when the first user logs in and the servers are available again.
In a multiserver solution the Tracking tab looks different on the master server
(9.9.1) and the slave server (9.9.2).
5.7.6
Billing
Check Store tracking data temporarily to allow users to apply billing codes.
Chose the number period you want to elapse before the billing data is
committed and when the billing data should be moved to the tracking data.
Refer to section 11.3 for additional information.
D60603-21
160
5 SafeCom Administrator
5.7.7
Encryption
All control data that is exchanged using the SafeCom protocol is encrypted
according to the choice of cipher. This includes login requests with user details
such as user logon, card numbers, PIN codes and passwords. Other data that is
encrypted include List of documents, tracking data, event log information etc.
Asymmetric: RSA is used for asymmetric encryption and for exchange of the
symmetric keys. RSA is a very slow encryption algorithm and is not suited to
encrypt and decrypt bulk data efficiently. The default is RSA 512-bit
encryption.
Symmetric: Encryption of bulk data is done using more efficient algorithms,
either AES (Rijndael algorithm) or TwoFish, a proposal by NIST (National
Institute of Standards and Technology) for an Advanced Encryption Standard.
The default is AES 128-bit encryption.
D60603-21
161
5 SafeCom Administrator
Pending documents are always encrypted using 128-bit encryption. Pull
print data is always encrypted on the network while traveling to the
server. Pull print data traveling to a device is encrypted if:
Encrypt documents is enabled for the user (5.8.2).
Encryption is enabled for the device (5.9.3).
By default any client will try to honor the encryption method and size that has
been specified on the server. Clients include the SafeCom Print Client, SafeCom
Pull Port, SafeCom Push Port, SafeCom Administrator, SafeCom Reports,
SafeCom Web Interface, and SafeCom Go devices.
The SafeCom Go devices will take the processing power and memory of the
device into consideration. This means that in most cases no additional
configuration steps are required on the device. Refer to the relevant SafeCom
Go Administrator’s Manual for additional information.
The choice of encryption on the server take effect once the SafeCom Service
has been restarted on the server. When a slave server is added it will by
default get the same encryption settings as that of the master server.
D60603-21
162
5 SafeCom Administrator
5.8
User properties
The User properties dialog is accessed from the Users menu, the User tool
button and by right-clicking a user in the Users list.
The dialog tabs are:









5.8.1
D60603-21
Identification (5.8.1)
Settings (5.8.2)
ID code (5.8.3)
Rights (5.8.4)
Member of (5.8.5)
Aliases (5.8.6)
Delegates (5.8.7)
Account (5.8.8)
Billing (5.8.9)
Identification
163
5 SafeCom Administrator
 Domain: The domain the user belongs to.
 User logon: This is identical to the user’s Windows logon. The user logon is
mandatory, maximum 20 characters and must be unique in regards to
other user logons, user aliases, and group names. ID is the database ID.

Full name: The user’s name.

Home server: The SafeCom server the user belongs to. Only present if
you have a SafeCom License Key.

Org. unit: The organizational unit the user belongs to (5.12).

E-mail: The user’s e-mail address. The SafeCom solution can use the email address to send welcome message and PUK code message.

Description: Enter an optional description of the user.

Cost code: Use to enter a cost code of the user.

Credits section: Only relevant if the Cost control is set to Pay on the
Settings tab.

Logins failed: The number of consecutive failed login attempts for the
user. Click Clear to set the number to zero. If this number reaches the
Max login attempts specified on Users tab of the Server properties
dialog, the user is prevented from printing (Prevent login is checked).

Prevent login: Check to make the user unable to log in at the device. A
user that is prevented from printing is shown as
D60603-21
in the User list.

Login without PIN code: Check if the user should not be required to
enter a 4-digit PIN code at the device (restrictions may apply).

Source ID: This indicates from which source the user was imported. A
value of zero indicates that the user was manually created.
164
5 SafeCom Administrator
5.8.2
Settings
For additional information about Bill clients for cost see Chapter 11 SafeCom
Client Billing.
Encrypt documents is only relevant if encryption of document is indeed
possible (4.15).
Allow retain documents shows if the user is allowed to keep documents on the
server so they can be printed multiple times.
Print all at login is if all the user’s documents should be printed as soon as the
user logs in at the device. Documents are printed in chronological order (oldest
first).
For additional information about Cost control, see Chapter 9 SafeCom
Tracking and Chapter 12 SafeCom Pay.
D60603-21
165
5 SafeCom Administrator
Access rights are what users are allowed to do at the devices in your print
environment. By default users have access to all device functions.








Copy
Copy in color
E-mail
Scan
Fax
USB memory scan allows users to scan from a flash memory or mass
storage device
USB memory print allows users to print from a flash memory or mass
storage device
Print all button
The concept is based on a bitmask and the bitmask can be imported as part of
the user import (7.3). To see the current value position the mouse pointer on
the blue icon . Click the icon to copy the value to the clipboard.
Tip! When importing users check the Modify users checkbox on the Rules step
of the User import configuration wizard and run the import twice
immediately. This lets users with access rights to all functions keep their access
rights.
Table 6 Access rights bitmask
Bit
bit 2
bit 3
bit 4
bit 5
bit 6
bit 7
bit 8
bit 9
Name
Copy
Copy in color
Fax
Scan
E-mail
USB memory print
USB memory scan
Print all
Hex
0x0004
0x0008
0x0010
0x0020
0x0040
0x0080
0x0100
0x0200
In the database the bitmask is stored as an Integer (32 bits). A bit value of 0
(zero) means that access is allowed. A value of 1 (one) means that access is
denied.
D60603-21
166
5 SafeCom Administrator
5.8.3
ID code
By default there is one ID (card or code) per user. The maximum IDs per user
can be specified on the Users tab in the Server properties dialog (5.7.2) of the
SafeCom master server.
1.
Enter the ID code and click Add. A warning appears when the maximum
number of IDs per user is reached.
2.
If the ID code is only to be valid for a restricted period, check Temporary
ID. Expired IDs are deleted from the SafeCom solution automatically
within 10 minutes.
Note: If Temporary ID is checked an e-mail reminder can be set up to be
sent to the user specified days before the ID code expires. This way the
user is reminded to either generate a new ID code themselves (if the user
is allowed) or to make sure a new ID code is generated for them.
D60603-21
167
5 SafeCom Administrator
3.
Choose from the popular dates: Today, Today and tomorrow, This week
(End date is the coming Sunday at midnight), This month (End date is the
last day of the month at midnight), or Specify dates.
4.
5.
Choose Specify dates and specify the Start date, End date and Time.
Click the calendar icon to open Choose date dialog for easy date
selection.
Click Listen for ID if a card reader is installed on the computer (4.18).
6.
In ID codes the available codes are listed. Start date and End date appear only
if Temporary ID was checked when the ID was added. The Source ID indicates
from which source the ID was imported. A value of zero indicates that the ID
was manually added.
7.
Select an ID code and click one of the buttons:
Copy
ID code
8.
Modify
ID code
Delete
ID code
In PUK and PIN code use these there buttons:
Copy
PUK code
Generate
PUK code
Clear
PUK code
The user can have one PUK code open at a time.
Note: The PUK code is generated irrespectively if you subsequently click Cancel
to exit the User properties dialog.
The behavior of the Generate PUK button depends on the following:

Single ID per user (default)
Generating a new PUK code will delete the PIN code and remove any
current registration with an ID.

Multiple IDs per user
Generating a new PUK code is possible until the maximum number of IDs
has been reached. Otherwise one of the existing IDs must be deleted
before a new PUK code can be generated.
9.
D60603-21
Click PIN code to open the PIN code dialog.
168
5 SafeCom Administrator
APIN code contains the 4-digit PIN code. If a PIN code is assigned when
the dialog is opened the field contains ‘****’.
10.
11.
Click Random to assign and display a randomly generated PIN code.
Click Default to assign and display the default PIN code ‘1234’. Changing
the PIN code automatically clears Prevent login and reset Logins failed
to zero on the Identification tab in the User properties dialog. The user
can have only one PIN code.
If no PIN code is specified, but only a code, the user is assigned the
default PIN code when OK is clicked in the User properties dialog.
If allowed (5.7.2) the user may subsequently change the PIN code and ID
code at the SafeCom G3 Web Interface or at the SafeCom-enabled device
(restrictions may apply).
5.8.4
Rights
A standard user can have any server as their home server, whereas users with
other rights MUST have the master server as their home server.
Selecting Technician rights allows users to install SafeCom devices. Devices are
operable and can be used for Pull Printing once a user with Technician or
Administrator rights has logged in at the device. In a SafeCom Pay solution the
Technician’s (or Administrator’s) Cost control setting should be set to No
D60603-21
169
5 SafeCom Administrator
control or Tracking because choosing Pay will prevent the user from
registering SafeCom devices at the device.
Selecting Cashier user (Requires SafeCom Pay) rights allows the user to use
SafeCom Administrator in Cashier mode.
When Administrator, Technician, or Cashier user is selected, two additional
password fields and a checkbox to set up login with Windows credentials are
displayed in the dialog:
 Login with Windows credentials only
Restricts login to Windows credentials only.

Password
Enter a password of your choice to password-protect login or to change
your existing password.

Confirm Password
Re-enter the new password.
If you select Administrator, the user is given administrator rights, allowing the
user to modify users, modify devices, group, and server.
D60603-21

User rights
Full rights allow you to add, modify, and delete users. With Partial rights
it is possible to do everything except modify user rights and export ID
codes and PUK codes. Limited rights only allow assigning a new Code,
PIN code, and PUK code as well as clear Logins failed and Prevent login.
It is not possible to add, modify, and delete users. Typically Help Desk
personnel are issued this s type of limited administrative rights.

Device rights
Full rights allow you to add, modify, and delete devices.

Server rights
Full rights allow you to add, modify, and delete servers.
170
5 SafeCom Administrator

5.8.5
Report rights
Full rights allow you to log in to SafeCom Reports (9.13).
Member of
Member of contains a list of the groups the user belongs to.
D60603-21
171
5 SafeCom Administrator
5.8.6
Aliases
The SafeCom solution supports printing from multiple client operating systems.
Since users often do not use the same user logon for all systems, the SafeCom
solution’s aliases mapping feature allows user access their documents from all
systems using the same SafeCom account.
Enter the Alias and click Add. To delete an alias, select the alias and click
Delete. The alias must be unique in regards to other user aliases, user logons
and group names. 20 characters is the maximum length of an alias. Any number
of aliases can be entered. In the Aliases overview dialog (7.12) it is possible to
see which alias is mapped to what user.
D60603-21
172
5 SafeCom Administrator
5.8.7
Delegates
Note: The Delegates tab is only visible if Allow Delegates is selected on the
Users tab in the Server Properties dialog, see 5.7.2.
With SafeCom Delegate Print, users grant permission to other users to print or
collect print jobs on their behalf. Setup is centrally controlled under
Delegates, while users themselves can also manage who is allowed to carry out
print tasks for them (see SafeCom G3 Delegate Print User’s Guide D60629).
To select a user to collect documents on behalf of another user
1.
D60603-21
Under Submit delegated documents to these users, click Add.
173
5 SafeCom Administrator
2.
In the Add user dialog:
If you know the name of the user:
Enter the name in Find users and click Find. If SafeCom recognizes the
user, there name is listed under Users. Select their name in the list and
click Add to confirm. If SafeCom does not recognize the user you will get
the <No matches found!> message.
If you are unsure of the user name or want to select more than one user:
Under Find users click Find. In the Confirm dialog click Yes for SafeCom
to retrieve all users listed in the database. In the Users list, select the
names of the users for delegate print or click Select all and Finish. You
can select up to 10 delegates.
To select a user who can delegate the collection of their documents to
another user
1.
2.
Under Collect delegated documents from these users, click Add.
Follow the steps in Step 2 above to select users. You can select up to 10
delegates.
For users in the list to always be delegated all submitted documents, select
Always delegate to the listed users. With this option enabled, the user who
submits documents for delegation will not need to confirm delegation through
SafeCom PopUp.
D60603-21
174
5 SafeCom Administrator
To set a time limit on print delegation
Under Delegates in the User Properties dialog, select the name of the user and
click Modify.
Select End date and enter the date that print delegation should end and click
OK.
D60603-21
175
5 SafeCom Administrator
If there is a delegate print relationship with a time limit that should be
permanent, deselect End date.
Users who have a submit/collect relationship in delegate print always have user
properties that correlate. When you change, for example, the expiration date
for a user who submits a print job for the other user to collect, the date is
automatically updated in the user properties of the other user.
D60603-21
176
5 SafeCom Administrator
5.8.8
Account







D60603-21
Account 1: Shows the current amount of money available with the user.
Account 2: Shows the current available quota available for the user.
Low limit: This is the lowest amount that should be available in order to
print (Allows negative figures). Click to edit the Low limit.
Reserved: This is the amount of credits reserved due to a print or copy
job that finished in error. It should be 0.00 (zero) most of the time. If the
system has reserved any credits you will see a positive amount printed in
red color. Click to edit the Reserved. The amount must be greater than
0.00 (zero) and less than or equal to the currently reserved amount of
credits.
Disposable: This amount is equal to Balance minus Low limit and
Reserved.
Amount: Type in amount to add to, subtract from or set account to –
select appropriate action from the drop-down list. Select appropriate
account and click Record to carry out the transaction.
Comment: Add any description (optional).
Transactions: View a list of user account transactions.
177
5 SafeCom Administrator
5.8.9
Billing
Click Add to add the selected billing code to the Billing code favorites list. It
will be listed in the Source column as User. The user billing code can be
removed from the list by clicking Delete.
Billing code favorites that are listed in the Source column as Group are billing
codes that are associated to the groups the user is a member of. In this dialog
it is not possible to remove group billing codes from the list. This must be done
through the Billing menu in the Group properties dialog (5.13.7).
Note: A users billing code favorites are replicated to all slave servers which
means, that a user is still able to view and use the favorite billing codes even
if the home server is changed. This does not apply to Last used billing codes.
(To see what elements are replicated between slave servers, see 4.6.4)
D60603-21
178
5 SafeCom Administrator
5.9
Device properties
The Device properties dialog can be accessed from the Devices menu, the
Device tool button and by right-clicking a device in the Devices list.
The dialog comprises the tabs: Settings, Charging scheme and License. Each
tab is described subsequently.
5.9.1
Settings
Name is a field for specifying a name for the device (mandatory).
Model is a field for specifying the model and/or manufacturer of the device
(optional).
Home server is the SafeCom server the device belongs to. Only present if you
have a SafeCom Multiserver license key.
Org. unit is the organizational unit the device belongs to (5.12). Only present
of there are any defined organizational units.
Branch is the branch the device belongs to (5.11). Only present if there are any
defined branches.
D60603-21
179
5 SafeCom Administrator
Location is a field for indicating the place where the device is physically
located (optional).
Device address is the hostname or IP address of the device.
Capabilities show a number of checkboxes depending on the device and
SafeCom license key code. Check Duplex supported, Color supported,
Restricted access, Allow Pay user (only available if the server key license
allows one or more Pay devices) and Push print if the device supports it.
Restricted access can be used to control users’ access to the device based the
organizational relationship (5.12).
Click Open in browser if you want to access the device’s web interface (8.13).
Click Update software… to update the software of the device (8.10).
5.9.2
Charging scheme
On the Charging scheme tab in the Device properties dialog it is possible to
choose which charging schemes should be used on the device in question.
Click View… to see the charging scheme (9.11).
D60603-21
180
5 SafeCom Administrator
5.9.3
License
On the License tab in the Device properties dialog it is possible to choose
which SafeCom features should be enabled on the device in question.
The checked features are only accepted if the license key code allows the
device features. Click License… to open the License dialog (5.5) to see if the
license key code allows the additional features to be enabled for this device.
D60603-21
181
5 SafeCom Administrator
5.9.4
Statistics
On the Statistics tab in the Device properties dialog it is possible to a Textual
and Graphical representation of the statistics. The Statistics tab is not
presented if you have opened multiple devices.
How to monitor device status is covered in section 8.11.
D60603-21
182
5 SafeCom Administrator
5.10
Options dialog
The Options dialog can be accessed from the Actions menu.
The dialog comprises the tabs: General, Card reader, Network and
Maintenance. Each tab is described subsequently.
5.10.1 General
Check Remember desktop layout if you want to remember the position and
size of SafeCom Administrator when you exit. The next time you start
SafeCom Administrator it appears as when you exited. Click Forget now to
reset the desktop layout.
D60603-21
183
5 SafeCom Administrator
5.10.2 Card reader
Section 4.18 describes how to connect the card reader.
USB card reader:
1.
2.
D60603-21
Check USB if a USB card reader is connected.
Click Test USB reader and present the card.
184
5 SafeCom Administrator
Serial card reader:
1.
2.
3.
Choose a Reader type from the drop-down list: None, Generic,
Magnetic, Adazzi, HID Prox, Legic, and Mifare. Click Support to see the
latest list of supported card readers on our web site.
Choose a COM port from the drop-down list: COM1, COM2, and COM3.
Click Test and use the card to test if reading is possible. If it fails you
may need to move the card reader to another COM port.
If your card reader does not match any of the listed reader types you should
select Generic and find the correct combination of Baud rate: 4800, 9600,
14400, 19200, 28800, 38400, Bits: 7 or 8 and Parity: No, Even and Odd.
Listen timeout can be 10, 20, 30, 40, 50 and 60 seconds. Listen time out
determines the maximum number of seconds that may parse from you click
Listen for ID on the ID code tab in the Users properties dialog (5.8.3) and until
you use the card with the card reader.
D60603-21
185
5 SafeCom Administrator
5.10.3 Network
In Logout if inactive for you can change the automatic logout time. If no
activity has been registered in the SafeCom Administrator for the number of
minutes shown, all open connections are closed. The default is 15 minutes and
the maximum value is 99 minutes.
Broadcast timeout is the time in seconds the SafeCom Administrator will
search for SafeCom servers and devices on the network. Default is 10 seconds.
Transaction timeout is the time in seconds the SafeCom Administrator will
maximum wait for a SafeCom server to respond. We recommend that this be
only increased in large installations with thousands of users. Default is 60
seconds.
Broadcast addresses show the list of network masks for all TCP/IP networks
containing SafeCom servers and devices. You must configure this list correctly
for the SafeCom Administrator to be able to locate all SafeCom servers and
broadcast for SafeCom devices.
Note: It is recommended to replace 255.255.255.255 with a list of individual
masks, as broadcasting may otherwise not work.
If access to the Internet requires use of a Proxy the Check for updates (5.4.6)
cannot connect to the SafeCom Update Server to check for new updates of
manuals, device software and release notes. Specify the IP address, Port
(default 2121) and Type (default FTP) of connection the proxy server is using.
D60603-21
186
5 SafeCom Administrator
5.10.4 Maintenance
In a Pay solution you may wish to delete transaction records older than a
certain date. Specify the exact Date or select a date from the drop-down list,
that includes the selections: 1 month, 2 months, …, 11 months, 1 year, 2
years, …, 5 years.
Check Backup database to have a backup created of the scpurse database
before deletion. The user’s most recent transaction is not deleted. Click Clean
up.
D60603-21
187
5 SafeCom Administrator
5.10.5 Server group info
On the View menu check View server group info to display the Server group
info dialog.
The Server group info dialog will update its content whenever you select
another server and you are not required to log in to the server. You can anchor
the Server group info dialog to the bottom of the Server groups pane by
dragging it to the bottom left corner of the SafeCom Administrator.
D60603-21
188
5 SafeCom Administrator
5.11
Branches
In SafeCom Administrator it is possible to define branches and associate
devices and computers to these. This is used to ensure that devices within the
branch allow collection of documents only that reside on the computers that
belong to the same branch. The table below reflects when printing is possible.
Device
belongs to
No branch
Device
belongs to
Branch A
Device
belongs to
Branch B
Computer
belongs to
No branch
Yes
Computer
belongs to
Branch A
Yes
Computer
belongs to
Branch B
Yes
Yes
Computer is added
to Branch A
Yes
Computer is added
to Branch B
Yes
No
No
Yes
In this context the term computer denotes a computer that is running the
SafeCom Client Print software where documents reside on the computer’s local
hard disk drive rather than on a SafeCom server.
The maximum number of branches, computer, users, and devices is virtually
unlimited, but of course subject to the limitations imposed by the size of the
database.
1.
2.
3.
4.
5.
D60603-21
Click the Branches icon in the Server groups pane to expand the list of
defined branches (in alphabetic order).Two panes appear to the right.
The top pane is the Devices pane. The bottom pane is the Computers
pane.
In the Devices pane click Refresh to retrieve an updated list from the
database of all the devices that have not been added to a branch.
Right-click the device and click Properties to open the Device properties
dialog (5.9.1).
In the Computers pane click Refresh to retrieve an updated list from the
database of all the computers that have not been added to a branch.
Right-click the computer and click Properties to open the Computer
properties dialog (5.11.6).
189
5 SafeCom Administrator
5.11.1 Administrator rights
Within the SafeCom solution the administrator must have Full server rights to
modify branches, computers, and the branch property in devices.
5.11.2 Add a branch
Branches can be added in the Branches dialog. The Branches dialog can be
accessed from the Servers menu.
Click the Branches icon in the Server groups pane. On the Servers menu click
Branches and click Add branch…
Right-click the Branches icon in the Server groups pane and click Add
Branch…
1.
Enter the Name of the branch and an optional Description. Click
OK.ID is the database ID of the branch.
2.
To associate devices and computers to a branch you can drag and
drop these between the branches. Alternatively you can select the
branch from the Branch drop-down list in the Device properties
dialog (5.9) or the Computer properties dialog (5.11.6).
5.11.3 Delete a branch
1.
Right-click the branch in the Server groups pane and click Delete
Branch.
Note: A Branch can only be deleted if no device and computers reference it.
D60603-21
190
5 SafeCom Administrator
5.11.4 Add a device to a branch
Adding a device to a branch can be done in the following ways:
In the Devices pane select the device and drag and drop it onto the branch in
the Server group pane.
In the Device properties dialog select the Branch.
5.11.5 Remove a device from a branch
Removing a device from a branch can be done in the following ways:
In the Branch devices pane select the device and drag and drop it onto the
Branches icon in the Server group pane.
In the Branch devices pane right-click the device and click Remove device
from branch.
In the Device properties dialog change Branch to <None>.
5.11.6 Computer properties
Right-click a computer in the Computers pane to open the Computer
properties dialog.
Computer name is the hostname (FQDN) of the computer.
IP address holds the IP address the computer had the last time it was started.
Notes hold optional notes that have been entered by the administrator.
Branch is the branch the device belongs to. Only present if there are any
defined branches.
Description holds the description of the computer.
D60603-21
191
5 SafeCom Administrator
Version is the version of the SafeCom Branch software running on the
computer.
ID is the database ID of the computer.
Note: The computer is listed in the SafeCom database by its GUID (globally
unique identifier).
The Computer name, IP address and Description fields are not editable once
the computer has been added. These properties are automatically updated
when the SafeCom Branch software is started on the computer.
Note: Tracking data is reported to the Home Server of the user printing. The
computer has no Home Server itself.
5.11.7 Add a computer to SafeCom solution
A computer is by default added to the SafeCom solution the first time the
installed SafeCom Branch software is started. Information about the computer
is stored in the SafeCom Job Database (sccore) on the SafeCom master server.
5.11.8 Add a computer to a branch at first print
A computer that has not been added to a branch will have the branch
determined at first print. When the first document is pulled from the local hard
disk drive of the computer the computer is added to the same branch as the
device pulling the document.
5.11.9 Add a computer to a branch manually
Adding a computer to a branch can be done manually in the following ways:
In the Computers pane select the computer and drag and drop it onto the
branch in the Server group pane.
In the Computer properties dialog select the Branch.
5.11.10 Import computers
Computers can be imported into the SafeCom solution in the following ways:
D60603-21
192
5 SafeCom Administrator
Right-click a branch and click Import computers.
Import source file can be in CSV format and can contain the following columns:
Computer name (mandatory)
IP address (optional)
Description (optional)
5.11.11 Remove a computer from a branch
Removing a computer from a branch can be done in the following ways:
In the Computers pane select the computer and drag and drop it onto the
Branches icon in the Server group pane.
In the Computers pane right-click the computer and click Remove computer
from branch.
In the Computer properties dialog change Branch to <None>.
5.11.12 Delete a computer from the SafeCom solution
Deleting a computer from the SafeCom solution can be done in the following
ways:
In the Computers pane right-click the computer and click Delete computer.
5.12
Organizational units
With the concept of organizational units you can use SafeCom Administrator to
visualize the organizational/departmental relations between users, devices and
servers in your SafeCom solution.
There is a strong resemblance between the organizational unit concept and the
folder structure on a computer and many of the same rules apply. The
organizational path can be up to 255 characters long.
The organizational relationship can be used to restrict users’ access to devices.
Refer to5.12.3.
D60603-21
193
5 SafeCom Administrator
5.12.1 Add an organizational unit
Organizational units can be added in the Organization Unit dialog. The
Organizational Unit dialog can be accessed from the Servers menu.


1.
2.
Click the Org. units icon in the Server groups pane. On the Servers menu
click Organizational units and click Add org. unit…
Right-click the Org. units icon in the Server groups pane and click Add
org. unit…
Enter the Name of the organizational unit and an optional Description.
Click OK.ID is the database ID of the organizational unit. This corresponds
to UserNodeID in tracking records.
To associate resources (users, devices and servers) to an organizational
unit you can drag and drop these between the organizational units.
Alternatively you can select the organizational unit from the Org. unit
drop-down list in the resource’s properties dialog.
New users, devices and servers are always created at the root. The relationship
to an organizational unit must be done manually using drag and drop. Users,
devices and servers can be assigned to one and only one organizational unit.
5.12.2 Delete an organizational unit
1.
Right-click the organizational unit in the Server groups pane and click
Delete org. unit.
Note: Organizational units can only be deleted if they are not referenced by
any user, device, server and organizational unit.
D60603-21
194
5 SafeCom Administrator
5.12.3 Restrict access to devices
The following rules apply to restricted access.

A device with Restricted access can only be used by users who have the
device in their organizational path.

A device without Restricted access can be
used by any user regardless of the user’s
and device’s organizational path.

Restricted access does not apply to users
with SafeCom Technician or Administrator
rights.
Examples:

Devices with restricted access in Dept A1
can be used by all users in Dept A1.

Devices with restricted access in Dept A
can be used by all users in Dept A, Dept A1 and Dept A2.

Devices without restricted access in Dept A1
can be used by all users.

Devices without restricted access in Dept A
can be used by all users.
How it works:
The user cannot log in to the device if Restricted access is checked on the
Device properties dialog (5.9.1) and the device is not part of the user’s
organizational path.
The user may see the message “Restricted Access” on the device’s control
panel if a SafeCom Go product is used or on the SafeCom Front-End.
D60603-21
195
5 SafeCom Administrator
5.13
Groups
With the concept of groups you can use SafeCom Administrator to organize
users into groups. Information about groups can be imported from and
synchronized with Active Directory (7.3.13). However, it is also manually
possible to add groups (5.13.1), delete groups (5.13.3) and add members to
groups (5.13.4). It is even possible to print to groups (5.13.8).
5.13.1 Add groups manually
Groups can be added in the Add group dialog.
1.
Click on the Groups icon
in the Server groups pane. On the Users
menu click User groups and then Add group…
2.
Enter a Name and an optional Description. Click Add. The name must be
unique in regards to other groups, user logons, and user aliases.
Note: The group name cannot be more than 20 characters if group print
should be allowed (5.13.2).
3.
D60603-21
Click Close when finished adding groups.
196
5 SafeCom Administrator
5.13.2 Group properties dialog
1.
2.
Click on the Groups icon
in the Server groups pane.
Double-click a group in the Group list to open the Group properties
dialog.
The Group properties dialog includes these menus:
D60603-21

General
On the General menu you can change the Name and Description of the
group and allow Group print (5.13.8).

Rules
On the Rules menu you can select the rules to be used by the group. For
additional information about rules please refer to Chapter 10.

Members
On the Members menu you select which users are a member of the group
(5.13.4).

Credit schedule
On the Credit schedule menu you can add and subtract credits on a
scheduled basis (12.4).
197
5 SafeCom Administrator
5.13.3 Delete groups
In the Groups list select the groups you wish to delete. You can delete the
groups in the following ways:


Select the group and press the DEL key.
Right-click the group and select Delete group…
5.13.4 Add members to a group
1.
2.
Open the Group properties dialog (5.13.2).
Click on the Members menu.
Members can be added in only one of the following two ways:


Select Users to add users individually. Check All users to include all users
as members. Click Add user to open the Add user dialog to select users
individually.
Select Org. units to add users by org. unit. Selecting an org. unit will also
include the users in the sub units.
Note: Any subsequent import of users and groups (7.3) may override your
selections.
D60603-21
198
5 SafeCom Administrator
Clicking Add user opens the Add user dialog.
1.
2.
3.
4.
5.
Enter your find criteria and click Find. The find function is using field
based case insensitive free text search.
Click Select all or press and hold down CTRL, and then click each user.
Check Differences to filter away the users who are already member of
the group.
Click Add.
Click Finish when you are done selecting and adding users to the group.
In the Group properties dialog click Apply and then OK.
5.13.5 Remove users from a group
1.
2.
3.
4.
D60603-21
Open the Group properties dialog (5.13.2).
Click on the Members menu.
Press and hold down CTRL, and then click each user.
Click Remove user.
199
5 SafeCom Administrator
5.13.6 Select rules to be used on a group
D60603-21
1.
2.
Open the Group properties dialog (5.13.2).
Click on the Rules menu.
3.
4.
Check the rules you want to be used on the group.
Click OK.
200
5 SafeCom Administrator
5.13.7 Select favorite billing codes for a group
1.
2.
Open the Group properties dialog (5.13.2).
Click on the Billing menu.
3.
Click Add to add the selected billing code to the Billing code favorites
list. The group billing code can be removed from the list by clicking
Delete.
Click OK.
4.
D60603-21
201
5 SafeCom Administrator
5.13.8 Group print
By allowing group print for a group the members of that group can collect the
documents sent to the group. In a multiserver solution the members must
belong to the same home server.
1.
2.
Open the Group properties dialog (5.13.2).
Click on the General tab.
3.
4.
Check Allow group print.
Check Print once to delete the document from all members once one
member has collected it.
Click OK.
5.
One way of submitting a print job to a group is by printing via a computer that
has a SafeCom Pull Port (4.12), which is configured to Show authentication
dialog at every print (4.13.4). When the SafeCom Print Authentication dialog
appears you enter the name of the group and click OK.
Note: If there is a user with a User Logon identical to the name of the group
the print job goes to the user and not to the members of the group.
D60603-21
202
5 SafeCom Administrator
5.14
Device Servers
Under Device Servers in SafeCom Administrator, you gain a great overview of
the SafeCom Device Servers including the specific devices that are added to
each device server.
Furthermore it is indicated with the icon
next to the device server if the
connection to a device server is lost, in which case you benefit from having an
quick overview of which devices then no longer work as a result thereof.
The following sections cover how to:

Add a device server in the SafeCom Administrator (5.14.1)

View and change the device server properties (5.14.2)

Delete a device server (5.14.3)
D60603-21
203
5 SafeCom Administrator
5.14.1 Add Device Server
To add a device server in the SafeCom Administrator:
1.
2.
Open and log in to SafeCom Administrator.
Right-click the Device servers container in the Server groups pane and
click Add device server…
4.
In the Hostname field, enter the hostname or IP address of the device
server.
If needed, enter a note for the device server. This note is displayed in the
device server list next to the device server.
Click Add, and the device server is listed under Device servers.
5.
6.
If the connection to the device server is down it is indicated with the icon
next to the device server and the status is Down.
Once a device server is added, the devices added to that specific device server
(via the add device functionality) are automatically added to the device server
in the Device Servers menu. To add a new device to the device server, go to
section 8.4.
D60603-21
204
5 SafeCom Administrator
5.14.2 Device server properties
If for example the device server has a changed IP address, this can be changed
under the Device server properties. Furthermore you can edit the note to the
device server if necessary and if the device server has multiple IP address, they
are also listed in the Device server properties.
To view the device server properties:
1.
2.
Double-click the Device servers container in the Server groups pane.
Right-click the device server and click Device server properties.
3.
4.
Make the necessary changes to the device server properties.
Click OK.
5.14.3 Delete device server
To delete a device server:
1.
2.
3.
D60603-21
Right-click the device server.
Click Delete device server.
Click OK.
205
5 SafeCom Administrator
5.15
Statistics
The SafeCom solution collects statistics every time an integrity check is
performed (5.7.1). The Statistics dialog can be accessed from the Servers
menu.
The Statistics dialog will by default show the number of jobs handled today.
Period can be Today, One week, or One month. Show can be Jobs, Pages or
Size. Click Refresh to update the statistics.
Jobs that are deleted by users with Administrator rights are tracked as Jobs
deleted by system and not as Jobs deleted by user.
D60603-21
206
5 SafeCom Administrator
5.16
Event log
Event log messages are written to the SafeCom event log database and
optionally to the Windows event log if this is enabled in the Server properties
dialog (5.7.1).
SafeCom event log:
The Event log dialog can be accessed from the Servers menu and by rightclicking a SafeCom server. If your SafeCom solution does not quite behave the
way you expect it to you should always look at the event log for a possible
explanation. In the event log you will for example find information about
license issues.
The event log records which user with special rights (Administrator, Technician
or Cashier) logs in and performs such tasks as: add, modify or delete of users,
devices, servers and charging schemes. These events all get severity 6
(Information) and will NOT be forwarded to the administrator by e-mail.
1.
2.
3.
4.
Open the Event log dialog.
Select the period. A number of predefined periods are available ranging
from Today to 7 days back. Choose Specify period to freely specify the
beginning (from) and finish (to) of the period.
Click Refresh to view the events for the selected period.
Click Save to file… to save the events as a CSV file with the fields:
EventId, UserId, DateTime, Abstract, Module, Severity and Description.
Windows event log:
Provided writing events to the Windows event log is enabled (5.7.1) it is
possible to use the Windows Event Viewer to see these and also to use
Microsoft Operations Manager (MOM) to monitor SafeCom event alert
messages.
1.
2.
3.
D60603-21
Open the Control Panel on the computer where the SafeCom server
software is installed.
Click Administrative Tools. Click Event Viewer.
Click SafeCom.
207
5 SafeCom Administrator
Note: Messages are stored on a per server basis (and per node basis in a
clustered environment). This implies that Microsoft Operations Manager (MOM)
should be set up to monitor all SafeCom servers within the solution and not
just the SafeCom master.
The table below describes how SafeCom event log messages are mapped to the
Windows event log.
SafeCom
Field
EventDateTime
Severity
Windows
Field
Date
Time
Type
Event ID
Abstract /
EventSubject
Description /
EventText
Module /
CodeModule
Description
Source
Category
User
Computer
UserId /
CreatorId
Viewed
EventId
D60603-21
Comment
Date. Example: dd-mm-yyyy
Time hh:mm:ss
Error - SafeCom Severity 1 and 2
Warning - SafeCom Severity 3 and 4
Information - SafeCom Severity 5 and 6
SafeCom Severity
1 -> Windows EventID 10001
2 -> Windows EventID 10002
3 -> Windows EventID 10003
4 -> Windows EventID 10004
5 -> Windows EventID 10005
6 -> Windows EventID 10006
Description of the event
Always SafeCom EventLog
Always None
Always N/A
Computer
N/A
N/A
N/A
208
5 SafeCom Administrator
5.17
Export data
Users that are administrators in the SafeCom solution and have Full user rights
can export data about users, devices, and servers in XML or CSV format.
5.17.1 Export users
1.
2.
3.
4.
5.
On the Actions menu, click Export…
Check Users.
Click Next.
Select Save as type and enter File name. Click Save.
Click Close.
Note: When exporting to a CSV file it is only the first AliasName, CardNo, and
GroupID that is exported for each user. When exporting to an XML file all
Aliases, Cards and Groups with additional details are exported.
The XML tags are covered in the tables in the following. The CSV column header
is the same as the XML tag.
Parameter
UserID
UserLogon
FullName
HomeServer
EMail
Description
UserNodeID
CostCode
LoginsFailed
UserLocked
AvoidPINCode
AllowRetainDocuments
EnableBillingDialog
PrintAll
AccountingModel
PUKCode
D60603-21
Description
Database ID of the user
Logon name
Full name
Home server
E-mail address
Description
Database ID of the organizational unit the user
belongs to
Cost code
Number of failed login attempts
Prevent login. Values: Yes | No
Login without PIN code. Values: Yes | No
Allow retain documents. Values: Yes | No
Bill client for costs. Values:
Yes | No | Yes_Restrict
Print all at login. Values: Yes | No
Cost control. Values: NONE | PRINT_AND_PAY |
PAY_AND_PRINT
PUK code
209
5 SafeCom Administrator
Parameter
GroupID
GroupName
GroupDescription
Description
Database ID of the group
Group name
Group description
Parameter
CardID
CardNo
SourceID
TemporaryCard
StartDate
StartTime
EndDate
EndTime
Description
Database ID of the card
Card number
Source ID of the card
Temporary card. Values: Yes | No
Start date, yyyy-mm-dd
Start time, hh:mm:ss
End date, yyyy-mm-dd
End time, hh:mm:ss
Parameter
AliasID
AliasName
Description
Database ID of the alias
Alias name
5.17.2 Export servers
1.
2.
3.
4.
5.
On the Actions menu, click Export…
Check Servers.
Click Next.
Select Save as type and enter File name. Click Save.
Click Close.
The XML tags are covered in the table in the following. The CSV column header
is the same as the XML tag.
Parameter
ServerID
ComputerName
IPAddress
MasterServer
D60603-21
Description
Database ID of the server
Computer name
IP address
Master server. Values: Yes | No
210
5 SafeCom Administrator
5.17.3 Export devices
1.
2.
3.
4.
5.
On the Actions menu, click Export…
Check Devices.
Click Next.
Select Save as type and enter File name. Click Save.
Click Close.
The XML tags are covered in the table in the following. The CSV column header
is the same as the XML tag.
Parameter
DeviceID
Name
Model
Type
Version
HomeServer
Location
IPAddress
DuplexSupport
RestrictedAccess
ColorSupport
PushPrint
PullPrint
LicenseTracking
LicenseClientBilling
LicenseRuleBasedPrinting
LicensePay
LicensePullPrint
LicenseEncryption
DeviceMac
ChargingSchemeID
ChargingSchemeType
ChargingSchemeName
ChargingSchemeDescription
D60603-21
Description
Database ID of the device
Device name
Device model
Device type. Values: SafeCom Controller |
SafeCom Go <vendor> | SafeCom P:Go
<vendor> | SafeCom Go High-end HP
Version
Home server
Location
IP address
Duplex support. Values: Yes | No
Restricted access. Values: Yes | No
Color support. Values: Yes | No
Push print. Values: Yes | No
Pull print. Values: Yes | No
Tracking license. Values: Yes | No
Client Billing license. Values: Yes | No
Rule Based Printing license. Values: Yes | No
Pay license. Values: Yes | No
Pull Print license. Values: Yes | No
Encryption license. Values: Yes | No
MAC address
Database ID of charging scheme
Type of charging scheme.
Values: Primary (1) | Secondary (2)
Charging scheme name
Description of charging scheme
211
5 SafeCom Administrator
5.17.4 Export billing codes
1.
2.
3.
4.
5.
On the Actions menu, click Export…
Check Billing codes.
Click Next.
Select Save as type and enter File name. Click Save.
Click Close.
The XML tags are covered in the table in the following. The CSV column header
is the same as the XML tag.
Parameter
BillingCodeID
BillingCode
BillingDescription
Level
SourceID
Billable
Description
Database ID of the billing code
The billing code
The description of the billing code
The level. 1 for primary code and 2 for
secondary code.
Source ID of the combined billing code
Billable. 1 if the billing code is billable and 0 if
it is not billable.
5.17.5 Export 2-level billing codes
1.
2.
3.
4.
5.
On the Actions menu, click Export…
Check Billing codes.
Click Next.
Select Save as type and enter File name. Click Save.
Click Close.
The XML tags are covered in the table in the following. The CSV column header
is the same as the XML tag.
Parameter
CombCodeID
BillingCodeID1
BillingCodeID2
PrimaryBillingCode
PrimaryBillingDescription
SecondaryBillingCode
SecondaryBillingDescription
SourceID
Billable
D60603-21
Description
Database ID of the combined billing code
Database ID of the primary code
Database ID of the secondary code
The primary code
The description of the primary code
The secondary code
The description of the secondary code
Source ID of the billing code
Billable. 1 if the billing code is billable and 0 if
it is not billable.
212
6 Manage servers
6
Manage servers
6.1
Introduction
SafeCom servers can be organized into two types of server groups in the
SafeCom Administrator:

Single server group. This is a group
consisting of only a master server.

Multiserver group. This is a group with
multiple servers - one master server and
one or more slave servers. This requires
SafeCom Multiserver Support.
The figure to the right shows how server groups
and servers appear in the Server groups pane in
the SafeCom Administrator.
In the figure a multiserver group called Master
which consists of a master server (Master) and a
slave server (Slave1) is listed.
Also listed is a Single server group called
SCDKHBOW00022 consisting of only a master
server by the same name.
Below, the different icons for Server groups and Servers in the SafeCom
Administrator are listed.
Server group
Master server
Slave server
Offline server
Unsupported server group (old version)
Server group is unavailable (unable to connect)
6.2
Add a single server group
To add single server groups in the SafeCom Administrator:
1.
2.
Open and log in to the SafeCom Administrator.
Click the Actions menu, browse to Server group, and then click Add
server group.
You can also right-click in the Server groups pane and then select Add
server group.
D60603-21
213
6 Manage servers
3.
Specify the Server address of the SafeCom server you want to have as
master server.
If you do not know the name of the server, click Search… to search for
the appropriate master server.
4.
5.
6.
Click Test to verify that you can connect to the server.
When the green play button appears the server is running properly and
you can click Close.
Click OK to add server group.
The new single server group is now available in the Server groups pane in the
SafeCom Administrator. In order to log in, double-click the server group and
enter login credentials.
6.3
Create a multiserver group
To create a multiserver group you need to have SafeCom installed on at least
two different servers (see section 4.6.). One server is a master and one is to be
added to the master server and turned into the slave in the multiserver group.
Note: The installed SafeCom G3 version must be the same for all servers.
6.3.1
Prerequisites
Caution! Before creating a Multiserver group, make sure to go through the
prerequisites in section 4.6 Multiserver installation.
Note: Create a back-up of the master server in case a restore is necessary.
D60603-21
214
6 Manage servers
6.3.2
Add server
Warning: When you add a server to a master server group, slave servers lose
their existing data including devices, users, and print jobs.
1.
2.
In the SafeCom Administrator, log in to the master server.
Browse to the Servers container in the left menu, right-click, and then
click Add server.
3.
4.
5.
Enter the Server address of the slaveserver (IP address or hostname).
Uncheck Setup replication, if replication is not necessary.
Click Next and the server is now being added. This can take a few
minutes.
The server is added successfully when a green check mark appears next to
Server added.
D60603-21
215
6 Manage servers
6.
7.
D60603-21
Once the server is added, select Open Server properties after wizard is
completed if needed.
Click Finish.
216
6 Manage servers
6.3.3
Troubleshooting
If the attempt to create a multiserver fails, double-check the list of
prerequisites in section Multiserver installation 4.6 and for troubleshooting go
through the lists below.
On the Master server:
 Check that publication and subscription are set up. Refer to section 4.6.4.
 Reinitialize subscription (refer to section4.6.7) or repair replication from
SafeCom Administrator (refer to section 4.6.5).
 Use the tool SQL management studio for troubleshooting the SQL.
On the Slave server:
 If slave server does not start up, enable SafeCom Trace to view the job
server trace log file.
 Restart the SafeCom Service on slave.
 Restart the SQL service (SafeComExpress) on slave.
 Toggle online/offline tracking on slave.
Fixes:
 If there is no back-up, the master server may be fixed by removing excess
rows from SafeCom Database table: SCServerInfo, SCServerSettings.
6.4
Remove single or multiserver group
A server group can be deleted in the following two ways:


Select the server group that must be deleted in the Server groups pane.
Click the Actions menu, browse to Server group, and then click Remove
server group.
Right-click the server group in the Server groups pane and select
Remove server group.
Removing a server group only prevents it from appearing in the Server groups
pane, it is not deleted completely.
D60603-21
217
6 Manage servers
6.5
Delete a slave server from a multiserver group
If the server group contains multiple servers you can delete the servers that are
not master server. You must be logged into the server group to delete a server.
You can delete a server from the server group in the following way:

From the Servers menu click Delete server.
Before you can delete the server the following conditions must be met.

Slave server must be running
The slave server must be running at the time of deletion because
otherwise its reference to the master server cannot be removed from its
database.

No users must have the server as home server
Verify this in SafeCom Administrator by clicking on the server in question
and verify that the Users folder is empty.

No devices must have the server as home server
Verify this in SafeCom Administrator by clicking on the server in question
and verify that the Devices folder is empty.
Note: All Windows print queues that uses a SafeCom Pull Port to connect to
the deleted server will stop working until they have been configured to use
another server in the group.
To remove the SafeCom Server software from the deleted server you must log
in to the server and uninstall the SafeCom software (4.2.21).
D60603-21
218
6 Manage servers
6.6
Failover servers
In a SafeCom multiserver solution additional resilience can be achieved by
specifying a prioritized list of servers that users should be moved to in the
event that their home server becomes unavailable. The home server is where
the user’s documents remain until they are either collected or deleted.
Prerequisites:


The SafeCom master server and the SQL master server are available.
Users with special rights are not moved as they always have the SafeCom
master server as their home server.
The user’s home server will automatically be reset to the original once the
original home server is available again. To avoid excess network load pending
documents are not moved when the user’s home server change. Users may
therefore have to submit their documents for printing again.
1.
2.
D60603-21
Open the Server properties dialog (5.7).
Click on the Failover tab (only available on slave servers).
219
6 Manage servers
3.
4.
5.
Select a server and use the left arrow and right arrow buttons to add and
remove server to and from the list of failover servers.
Use the up arrow and down arrow buttons on control the priority of the
failover servers. The master server will always have lowest priority.
Click Apply to accept the changes.
At the end of section 17.2 there is a table that can be used to plan how servers
should failover.
How it works:

When a server goes down the failover process is initiated after approx. 2
minutes and the users’ home server reference is changed to the failover
server with the highest priority. The change sets in on the affected slaves
as soon as the changed home server reference has been replicated from
the SQL master server to the databases used by the slaves.
The failover triggers a severity 2 event (error) in the SafeCom event log
(5.16). The event includes the name of the server that went down and
the name of the failover server.

When the server comes back the users that originally belonged to it are
moved back.
The fallback triggers a severity 5 event (information) in the SafeCom
event log (5.16). The event includes the name of the server that came
back up and the name of the failover server that temporarily acted as
home server.
Status of servers can be viewed by clicking the Servers icon
groups pane. Status can be Running, Down or Master.
D60603-21
in the Server
220
6 Manage servers
The TELNET interface (3.10.3) can also be used to view the status of the
servers. Once logged in use the TELNET command server info.
Below is an example of the server status:
ServerId
1
2
3
4
ComputerName
SAFECOM4
SAFECOM5
SAFECOM6
SAFECOM7
Ip
172.16.6.164
172.16.6.165
172.16.6.166
172.16.6.167
Status
MASTER
UP
DOWN
UP
UserMovedTo
4
-
In the above example the slave server SAFECOM6 is unavailable and all the
users have been moved to SAFECOM7 (ID 4).
D60603-21
221
7 Manage users
7
Manage users
7.1
Introduction
User management was introduced in section 3.4, and the interface dialogs
described in chapter 5. This chapter covers how to manage users in more
detail.
7.2
Default user
When you define a default user, new users inherit default user properties.
Typically one default user resides on the SafeCom master server
Note:
Tip: For ease of use, we recommend using the logon DEFAULT.
How to create a default user:
1.
2.
3.
4.
D60603-21
On the Users menu, click Add user and enter DEFAULT in User logon.
On the Identification tab (5.8.1) and Settings tab (5.8.2) check the
desired settings.
Click Add. Click Finish.
Right-click the DEFAULT user and click Set as default user.
222
7 Manage users
Table 7 User properties inherited from the default user
Tab
User Property
Identification
(5.8.1)
Settings
(5.8.2)
Low limit
Login without PIN code
Print documents
Bill clients for cost
Restrict choice of billing code
General document settings
Encrypt documents
Allow retain documents
Collect documents at the printer
Print all at login
Cost control
No control
Tracking
Pay
Access Rights
Copy
E-mail
USB memory scan
Copy in color
Scan
USB memory print
Fax
Print all button
Factory
default
0,00
No
No
No
No
Yes
No
Yes – if no license
key
Yes - if part of
license key
Yes - if part of
license key
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Prevent login and account credit balance are not inherited from the default
user.
Table 8 User properties inherited from other sources
Tab
User Property
Identification Initial account 2
(5.8.1)
ID code
PIN code
(5.8.3)
Rights
Standard user
(5.8.4)
Factory
default
0,00
1234
Standard user
Initial Account 2 is specified on the Users tab in the Server properties dialog
(5.7.2). This setting is only relevant if Cost control is Pay.
D60603-21
223
7 Manage users
How to delete a default user:
1.
2.
3.
Open the Server properties dialog and click on the Users tab (5.7.2).
Clear Keep default user and use settings when creating new users and
click OK.
Right-click the default user and click Delete user.
In a multiserver solution there can be a default user per server. Please read the
following to understand how the concept of default user comes into play in
different situations:

Manually added users (7.5)
When users that are added manually via the SafeCom Administrator the
User properties dialog is pre-filled according to the settings of the
default user defined on the SafeCom server they are added to. If there is
no default user factory defaults are used. The home server becomes the
one they are added to.
Users that are added while the Find users list is open will have the User
properties dialog pre-filled according to the default user on the master
server.
D60603-21

Created users at first print (7.4)
Users that are created at first print inherit the settings of the default
user defined on the SafeCom master server. If there is no default user
factory defaults are used. The home server is set to the SafeCom master
server.

Imported users (7.3)
Users that are imported inherit the settings of the default user defined on
the SafeCom master server or the settings of a particular user if this is
specified for the scheduled import. If there is no default user factory
defaults are used. The home server remains undefined until they get in
contact with the SafeCom solution in any of the following three ways:

Printing
If their first action is to print, their home server will be the one
referenced by the SafeCom Pull Port.

Log in at device
If their first action is to log in at a SafeCom-enabled device their
home server will be the one that is referenced by the SafeComenabled device.

SafeCom G3 Web Interface
If their first action is to log in to the SafeCom G3 Web Interface
their home server will be the one referenced by the SafeCom G3
Web Interface (typically the SafeCom master server).
224
7 Manage users
7.3
Import users
It is possible to create multiple user import schedules. This gives great
flexibility as exemplified in the following bullets.

Run now
Click Run now to instantly run any user import. This way user import is
performed immediately during initial configuration.

Import from multiple sources
Import users from different sources, for example the Active Directory, a
file or even a different part of the same Active Directory. The SafeCom
Administrator supports infinite possibilities.

Default user per import schedule
Select Apply settings from default user or choose which settings should
be applied from a specific user.
Example: An educational institution imports staff from one part26 of the
Active Directory and sets them to Tracking. It then imports students
from another part of the Active Directory and has them inherit the
settings of a manually27 created user (DEFAULT_STUDENT) which is set to
Pay.

User handling
There is only one way that users created at first print or added manually
in SafeCom Administrator can be deleted during a scheduled import.
These users are only deleted if they had, at any time, also been part of a
scheduled import and are subsequently missing from a later scheduled
import. The SafeCom solution will notice their absence and delete them.
Whenever a user is imported the ID of the import schedule is recorded in
the database together with the user. A manually added user initially has
the Source ID 0. User Logon is unique regardless of Source ID. The
function Find user (7.6) allows selection of Source ID as criteria.
26
See search root and search filter in section 7.3.5.
A User Logon that starts with DEFAULT_ makes it easier to find the user and keep the
user out of any scheduled import to prevent unintentional deletion.
27
D60603-21
225
7 Manage users

ID handling
There is only one way that IDs (or cards) registered at the device or
added manually in SafeCom Administrator can be deleted during a
scheduled import. These IDs are only deleted if their card numbers had,
at any time, also been part of a scheduled import and are subsequently
missing from a later scheduled import. The SafeCom Solution will notice
their absence and delete them.
Whenever an ID code is imported the ID of the import schedule is
recorded in the database together with the ID code. A manually added ID
codes initially has Source ID 0. In the ID codes overview dialog (7.13) the
Source ID can be seen for each ID code. ID code must be unique
regardless of Source ID.
If Max IDs per user (5.7.2) is greater than 1, you can add an ID as long as
the user has not reached the maximum number of IDs. If a user is listed
with another ID code in the same and subsequent import, the original ID
code is replaced with the new one.

Secondary and primary source
A secondary source is only meant to modify the settings of existing users,
typically the ID code or cost code. A primary source is usually used to
add, modify and delete users and contains User Logon. The secondary
source MUST include the User Logon as the unique identifier.
Example: Users and most of their settings are imported from Active
Directory (primary source) and card numbers are imported from a CSV
file (secondary source). In the CSV file the user’s logon is listed together
with the ID code.
D60603-21
226
7 Manage users
7.3.1
Overview
1.
2.
3.
D60603-21
On the Users menu, click Import users…
The User import schedules dialog appears.
Click Add and proceed to Server (7.3.2).
227
7 Manage users
4.
If at least one scheduled import is defined, select it. To test it click Run
now. Click Edit to proceed to Server (7.3.2). Click Delete to delete the
scheduled import. When a schedule is deleted the Source ID of the
affected users and ID codes are reset to 0.
5.
In the User import dialog, there is both a progress bar and status list.
Check Show log to see a user import log (7.3.16).
D60603-21
228
7 Manage users
7.3.2
Server
1.
2.
3.
The SafeCom server properties dialog appears.
Enter Server address (hostname or IP address), User logon with
Administrator rights and Password.
Click Next and proceed to Import source (7.3.3).
If you are editing an existing schedule, click 8. Schedule to jump directly
to the Schedule information dialog (7.3.15), and make changes to the
name of the schedule or the actual schedule.
Note: In a multiserver installation you should specify the master server
for best performance.
D60603-21
229
7 Manage users
7.3.3
Import source
1.
2.
3.
The Select import source dialog appears.
Select the source of the user import.
Click Next and proceed to the relevant bolded sections:
1. Overview
2. Server
3. Import source
4. File source
4. Properties
5. Configuration
6. Rules
7. Extra
8. Schedule
CSV
file
XML
file
7.3.4
7.3.4
7.3.8
7.3.9
Active
Dir
7.3.1
7.3.2
7.3.3
Novell
eDir
LDAP
7.3.5
7.3.10
7.3.13
7.3.14
7.3.15
7.3.6
7.3.11
7.3.7
7.3.12
Source type can be Primary (standard) or Secondary.
Only select Secondary if the import is meant to modify only the settings
of existing users, typically card number or cost code.
The secondary source MUST include the User Logon as the unique
identifier.
D60603-21
230
7 Manage users
7.3.4
File source (CSV file and XML file)
1.
2.
The Select source of file dialog appears.
Browse to the import file. Specify the name of the file to import from
(with full path) as seen from the SafeCom server. The account that runs
the SafeCom Service (normally the Local System account) must have read
access to the file.
Note: If you intend to click Run now in the User import schedules dialog
to run the import momentarily the file to import from (with full path)
should be specified as seen locally from the computer where you are
running SafeCom Administrator.
3.
D60603-21
Click Next and proceed to Configuration for CSV (7.3.8) or XML (7.3.9).
231
7 Manage users
7.3.5
Properties (Active Directory)
1.
2.
3.
The Active Directory properties dialog appears.
Enter AD server (hostname or IP address), User account (specify the user
logon followed by (@) and the domain, like this [email protected]
Alternatively you can specify: MYDOMAIN\ADMIN) and Password.
Click Next and proceed to Configuration (7.3.10).
The import can be secure and happen via SSL (LDAPS) and port 636 by
preceding the AD server with LDAPS://. If another port is used it must be
specified after the hostname or IP address. Example:
LDAPS://myserver.mydomain.com:8010
For the secure import to function the AD server must have Certificates
Services installed (7.3.18) and running and the SafeCom Server must trust
the certificate from the AD server.
Check Search root to import all users from the specified organizational
unit and below. Search root example:
OU=MyDept,OU=MyCompany,DC=MyDomain,DC=com
Check Search filter (7.3.17) to import user objects matching the
specified filter. Search filter example:
(&(objectClass=user)(sAMAccountName=*))
D60603-21
232
7 Manage users
7.3.6
Properties (Novell eDirectory)
1.
2.
3.
The Novell eDirectory properties dialog appears.
Enter eDir server (hostname or IP address), User account (specify the
user logon, like this: cn=Administrator, o=Admins) and Password.
If using LDAPS use the server name from the certificate, typically the DNS
name: LDAPS://dns name.
Click Next and proceed to Configuration (7.3.11).
Check Search root to import users or enter the specific organizational
unit where you want Search root to look for users, for example:
ou=MyDept,o=MyOrg
Check Search filter (7.3.17) to import user objects matching the
specified filter. Search filter example:
(&(objectClass=user)(Uid=*))
D60603-21
233
7 Manage users
7.3.7
Properties (LDAP server)
1.
2.
3.
The LDAP server properties dialog appears.
Enter LDAP server (hostname or IP address), User account and
Password.

If the LDAP server is an AD server, specify the user logon followed by
(@) and the domain like this: [email protected] Alternatively you
can specify: MYDOMAIN\ADMIN.

If the LDAP server is an eDir server, specify the user logon like this:
cn=Administrator, o=Admins.

If the LDAP server is a Linux/Unix, specify the user logon like this:
The DN distinguished name must be cn=xxxx, ou=xxxx, dc=xxxx,
dc=com, or a Uid=xxxx, ou=xxxx, dc=xxxx, dc=com.

If using LDAPS use the server name from the certificate, typically the
DNS name: LDAPS://dns name.
Click Next and proceed to Configuration (7.3.12).
Refer to section 7.3.5 if the import needs to be secure.
Check Search root to import users from that organizational unit, for
example:
D60603-21
234
7 Manage users

Search root example AD server:
OU=MyDept,OU=MyCompany,DC=MyDomain,DC=com

Search root example eDir server:
ou=MyDept,o=MyOrg
Check Search filter (7.3.17) to import user objects matching the
specified filter.
7.3.8
Configuration (CSV)
1.
2.
3.
The Specify fields in CSV file dialog appears.
Check the configuration options as required (see below).
Click Next and proceed to Rules (7.3.13).
Specify from which field in the CSV file the values should be retrieved.
Leave a field value of 0 to avoid import.
Example CSV file with header and two entries:
UserLogon;FullName;Email;IDCode
JS;John Smith;[email protected];1232
JD;Jane Doe;[email protected];9856
Microsoft Excel files with the extension *.csv cannot be used directly.
Open the file in Notepad, for example, to ensure that it is a plain text
file like the example and to determine what Separator character is used
D60603-21
235
7 Manage users
(semicolon is default).
If you check First line in file is a header you will need to specify the
name of the field rather than the number. The field name is case
insensitive.
If Code is being imported and the import consists of magnetic card ID
codes select the appropriate conversion method (7.3.19).
In Alias you can specify multiple fields, by separating them by semicolon.
Example: Alias1; Alias2; Alias3.
In Access rights mask specify the access rights mask (See Table 6 on page
166).
D60603-21
236
7 Manage users
7.3.9
Configuration (XML)
There is no XML configuration dialog. Proceed to Rules (7.3.13).
The syntax of the XML file is illustrated by this example:
<?xml version="1.0" ?>
<UserList>
<User>
<UserLogon>JS</UserLogon>
<FullName>John Smith</FullName>
<Description>location 1</Description>
<EMail>[email protected]</EMail>
<CardNo>1232</CardNo>
<PINCode>2222</PINCode>
<OrgUnit>\MyCompany\MyDepartment</OrgUnit>
<Alias>JSmith</Alias>
<CostCode>90678</CostCode>
</User>
</UserList>
Parameter
Description
Remark
UserLogon
Mandatory
Optional
None
Optional
None
Optional
None
Optional
None
PINCode
The user’s logon
name.
Maximum 20
characters.
The user’s full name.
Maximum 80
characters.
Description field.
Maximum 80
characters.
The user’s E-mail
address.
Maximum 80
characters.
The ID code.
Maximum 39
characters.
Refer to 3.3
The 4-digit PIN code.
Default
value
None
Optional
1234
OrgUnit
The organization unit. Optional
None
Alias
Alias.
Maximum 20
characters.
Maximum 10 Alias
tags.
Cost code.
Maximum 50
characters.
Optional
None
Optional
None
FullName
Description
Email
CardNo
CostCode
D60603-21
237
7 Manage users
D60603-21
Parameter
Description
Remark
AccessRightsMask
Access rights mask.
Integer (See Table 6
on page 166).
Optional
Default
value
0
238
7 Manage users
7.3.10 Configuration (Active Directory)
1.
2.
3.
The Active Directory configuration dialog appears.
Check the configuration options as required (see below).
Click Next and proceed to Rules (7.3.13).
Check Prevent login if account is disabled in AD if users who are
disabled28 in Active Directory should be prevented from logging in to the
SafeCom solution (Login denied). In SafeCom Administrator this is
reflected by the status of the Prevent login check box on the
Identification tab of the User properties dialog (5.8.1).
Check Import Description and specify the AD field that holds the
description.
Check Import Code and specify the AD field that holds the ID code. If the
import consists of magnetic card ID code select the appropriate
conversion method (7.3.19).
Check Import PIN code and specify the AD field that holds the PIN code.
28
The user is considered disabled in Active Directory if the UF_ACCOUNTDISABLE bit is
set in the userAccountControl attribute.
D60603-21
239
7 Manage users
Check Import Alias and specify the AD field that holds the alias. You can
specify multiple alias fields, by separating them by semicolon. Example:
Alias1; Alias2; Alias3.
Check Import Cost code and specify the AD field that holds the cost
code.
Check Import Access rights mask and specify the AD field that holds the
access rights mask (See Table 6 on page 166).
These standard AD attributes are used during the import:
Microsoft
Management
Console
User logon
name
Display name
Description
E-mail
Account is
locked out
Org. unit
AD
Field name
SafeCom
Examples
sAMAccountName
User logon
JS
DisplayName
Description
Mail
userAccountControl
Full name
Description
E-mail
Prevent
login
Org. unit
John Smith
location 1
[email protected]
distinguishedName
Alias
Cost code
Access
rights mask
D60603-21
ou=MyDept,
ou=MyCompany
Jsmith
240
7 Manage users
7.3.11 Configuration (Novell eDirectory)
1.
2.
3.
The Novell eDirectory configuration dialog appears.
Check the configuration options as required (see below).
Click Next and proceed to Rules (7.3.13).
Check Import Description and specify the eDir field that holds the
description.
Check Import Code and specify the eDir field that holds the ID code. If
the import consists of magnetic card ID code select the appropriate
conversion method (7.3.19).
Check Import PIN code and specify the eDir field that holds PIN code.
Check Import Alias and specify the eDir field that holds alias. You can
specify multiple alias fields, by separating them by semicolon. Example:
Alias1; Alias2; Alias3.
Check Import Cost code and specify the eDir field that holds the cost
code.
Check Import Access rights mask and specify the eDir field that holds
the access rights mask (See Table 6 on page 166).
D60603-21
241
7 Manage users
These Novell eDirectory attributes are used during the import:
Novell
ConsoleOne
Unique ID
Full name
Department
E-mail address
dn29
eDir
Field name
Uid
FullName
Ou
Mail
Dn
SafeCom
Examples
User logon
Full name
Description
E-mail
Org. unit
JS
John Smith
location 1
[email protected]
ou=MyDept,
o=MyOrg
Jsmith
Alias
Cost code
Access rights
29
The organizational unit is extracted from the distinguished name in Novell eDirectory
and not held in one particular field.
D60603-21
242
7 Manage users
7.3.12 Configuration (LDAP server)
1.
2.
3.
The LDAP server configuration dialog appears.
Check the configuration options as required (see below).
Click Next and proceed to Rules (7.3.13).
Check User logon and specify the LDAP field that holds the user logon.
Check Full name and specify the LDAP field that holds the full name.
Check Description and specify the LDAP field that holds the description.
Check E-mail and specify the LDAP field that holds the e-mail address.
Check Code and specify the LDAP field that holds the ID code. If the
import consists of magnetic card ID codes select the appropriate
conversion method (7.3.19).
Check PIN code and specify the LDAP field that holds PIN code.
Check Org. unit and specify the LDAP field that holds organizational unit
information.
Check Alias and specify the LDAP field that holds alias. In Alias you can
specify multiple fields, by separating them by semicolon. Example:
Alias1; Alias2; Alias3.
Check Cost code and specify the LDAP field that holds the cost code.
Check Access rights mask and specify the LDAP field that holds the
access rights mask (See Table 6 on page 166).
D60603-21
243
7 Manage users
7.3.13 Rules
1.
2.
3.
The Rules when importing users dialog appears.
Check the rules as required (see below).
Click Next and proceed to Extra (7.3.14).
Check Add users to have all users imported.
Check Apply settings from default user if you want the newly imported
users to inherit the settings of the default user.
Note: The following settings are NOT inherited even though Apply
settings from default user is checked; Prevent login, Account Credit
Balance, and User Access Rights.
Check Specify user logon and enter the user logon of the user from which
you wish the new users to inherit settings. In a multiserver installation
the default user must have the master server as home server.
Check Generate PUK code if you want a PUK code to generated. The PUK
code can be e-mailed to users (5.7.4). Generate PUK code is dimmed if
ID codes are part of the import.
Check Generate PIN code to generate PIN codes for AD users missing PIN
codes in AD. Already existing PINs in AD will not be overwritten. Choose
between Default PIN (1234) and Random PIN.
Change Initial amount on account 2 to another value than 0.00 only if
the solution involves Pay and the initial amount on the account should
D60603-21
244
7 Manage users
have the specified value. See also section 12.4 Credit schedule.
Check Modify users will modify the settings of any user that were
previously imported through this schedule, that is, the schedule ID of the
user matches that of the schedule. Running the import twice will ensure
that users with access rights to all functions keep these access rights.
Check Delete users to delete any existing users that is now missing from
this import, but were previously imported through this schedule, that is,
the schedule ID of the user matches that of the schedule. The default
user and users with special rights (5.8.4) are not deleted.
Use Max user deletion as a safety measure to prevent unintentional
deletion of users. A value of 0% will cause the import to take place
anyhow. A value of 20% will cancel the import if it would result in a
deletion of every fifth or more users that were previously imported
through this same scheduled import.
Use Max ID code deletion as a safety measure to prevent unintentional
deletion of ID codes. A value of 0% will cause the import to take place
anyhow. A value of 20% will cancel the import if it would result in a
deletion of every fifth or more ID code that were previously imported
through this same scheduled import.
The import of a user will fail if the user’s ID code is already registered
with another user in the SafeCom solution. To resolve this check If ID
code exists delete it from previous user. For this to work you are
advised to check Modify users and/or Delete users. During the import
users are sorted alphabetically based on their user logon and ID codes are
being reused in that order. Details are recorded in the log file.
Check Org. units to extract organizational units (5.12).
Check Aliases will import alias from the list if fields specified in the Alias
field.
The following two checkboxes are only present when importing from
Active Directory.
Check Groups to import group (5.13) information from Active Directory
and include it in the import.
Check Synchronize groups if you want the information in Active Directory
to completely control which groups a user is member of and any local
changes made within the SafeCom solution are lost at the subsequent
import from Active Directory.
Most of the controls are dimmed when Source type is set to Secondary in
the Select import source dialog (7.3.3).
D60603-21
245
7 Manage users
7.3.14 Extra
1.
2.
3.
D60603-21
The Advanced extra configuration dialog appears.
If a special user import module has been supplied you should check Use
extra configuration and enter the configuration according to the supplied
instructions.
Click Next and proceed to Schedule (7.3.15).
246
7 Manage users
7.3.15 Schedule
1.
2.
3.
The Schedule information dialog appears.
Check the schedule options as required (see below).
Click Finish to save the changes return to Overview (7.3.1) where the
scheduled import, including its Source ID, is listed and can be Run now.
Enter a meaningful Name. If you leave it empty it will get populated with
the text User schedule (date time).
It is possible to schedule imports One time only, Daily, Weekly and
Monthly.
Check End date and specify a date for when the scheduled import should
end. Please ensure that the end date does not conflict with the selected
frequency options. Otherwise you may risk that the scheduled import will
not run.
D60603-21
247
7 Manage users
7.3.16 User import log file
During the import a log file is created.
A log file with the name <Lyyyymmddhhmmss.log>, where yyyy is the year, mm
is the month, dd is the day, hh is the hour, mm is the minutes and ss is the
seconds. The log file is stored in the logfiles folder below the SafeCom G3
installation folder. The default folder is:
C:\Program Files\
SafeCom\SafeComG3\logfiles
If a 32-bit SafeCom G3 version is installed on Windows 64-bit:
C:\Program Files (x86)\
SafeCom\SafeComG3\logfiles
During import you may encounter conflicts because either the UserLogon (cc =
58) or the Card number (cc = 60) already exists. Examples:




Not able to add new user. Logon <UserLogon>, cc = 58
Not able to add new user. Logon <UserLogon>, cc = 60
Not able to modify user (modify). Logon <UserLogon>, cc = 58
Not able to modify user (modify). Logon <UserLogon>, cc = 60
If the import includes aliases you may also get these messages either because
the specified user does not exist (cc = 54) or the specified alias already exists
(cc = 73). Examples:


Not able to add new alias. User <UserLogon> Alias <Alias>. cc = 54
Not able to add new alias. User <UserLogon> Alias <Alias>. cc = 73
Provided If ID code exists delete it from previous user (7.3.13) was checked
during import there will be an entry in the log file for each reused ID code.
Example:
27.11.2008 10:16:15: Duplicate card Card3 removed from user USERC
27.11.2008 10:16:15: Duplicate card Card3 given to user USERD
D60603-21
248
7 Manage users
7.3.17 Search filter
This section describes how to use the Search filter.
How to match more than one attribute
If the users are distinguished by having two objectClass attributes (one equal to
'person' and another to 'user'), the Search filter should look like this:
(&(objectClass=person)(objectClass=user))
Meaning: Search for objectClass=person AND object=user.
The ampersand symbol '&' symbol at the start denotes AND.
Alternatively,
(|(objectClass=person)(objectClass=user))
Meaning: Search for objectClass=person OR object=user.
The pipe symbol '|' denotes OR.
Wildcards
(&(objectClass=user)(cn=*Marketing*))
Meaning: Search for all entries that have objectClass=user AND cn that contains
the word Marketing.
How to match 3 attributes
(&(&(objectClass=user)(objectClass=top))(objectClass=person))
Notice how to weave one query into another.
Matching components of distinguished names
You may want to match part of a DN, for instance when you need to look for
your users in two sub trees of your server.
(&(objectClass=user)(|(ou:dn:=Copenhagen)(ou:dn:=London)))
Meaning: Find users with an OU component of their DN which is either
Copenhagen OR London.
Using not
To exclude entities which match an expression, use '!'.
(&(objectClass=user)(&(ou:dn:=Copenhagen)(!(ou:dn:=Ballerup))))
Meaning: Find all Copenhagen users except those with a Ballerup OU
component. Note the extra parentheses: (!(<expression>))
D60603-21
249
7 Manage users
7.3.18 Install certificate
1.
2.
3.
Copy the certificate file to the SafeCom master server.
Right-click the certificate file and click Install Certificate.
Complete the steps presented by the Certificate Import Wizard.
Note: If a one-time import is to be done the certificate must be installed on
the computer from where the SafeCom Administrator is used.
7.3.19 Conversion of magnetic ID codes
When importing magnetic ID codes you have to choose which track you want to
use (Track1, Track 2 or Track 3). Track 2 is normally the one you should use.
If you are using SafeCom magnetic cards the ID code is stored on Track 2 and is
printed on the card. However, you cannot just import the ID code.
First register the card at the device and check what it looks like in when it
appears in SafeCom Administrator. If the ID code contains any of the letters
‘C’, ‘D’ or ‘E’ within the number (not at the end or the start) then the letter
need to be replaced with another character at the same location. In the
example below the ‘=’ character is inserted in order to get a resulting ‘D’.
Example:

60321700000002954890103000
This is how the ID code is printed on the card.

B6032170000000295489D0103000F1
This is how the ID code appears in SafeCom Administrator if it has been
registered at a device or in SafeCom Administrator using a connected ID
device (card reader).

6032170000000295489=0103000
This is how the ID code need to look like before import. The ‘=’ character
is inserted in order to get a resulting ‘D’.
For the letter ‘C’ to appear insert ‘<’.
For the letter ‘D’ to appear insert ‘=’.
For the letter ‘E’ to appear insert ‘>’.
D60603-21
250
7 Manage users
7.4
Create users at first print
As discussed in 3.4.2 this method keeps administrative overhead to a minimum.
1.
2.
3.
4.
5.
6.
7.
8.
9.
7.5
On the Servers menu click Properties. In a multiserver solution these
changes are only required on the SafeCom master server.
Click the Users tab (5.7.2).
Check Create users at first print.
Check Create e-mail addresses and enter the E-mail domain.
Check Keep default user and use settings when creating new users and
select the Default user.
Click the E-mail tab (5.7.4).
Verify that a valid SMTP mail server has been specified.
Check E-mail PUK code to new users and any other of the messages you
may wish to enable.
Customize the e-mail messages if required (7.19).
Add users manually
You can add users in the following ways:



Right-click in the Users list and select Add user.
On the Users menu click Add user.
Click the Add user tool button.
Refer to the User properties dialog in 5.8 for a description of the fields.
D60603-21
251
7 Manage users
7.6
D60603-21
Find users
1.
2.
Click the Find tool button.
Change Search in to Users.
3.
Enter search string in Look for and click Find now. The find function uses
case insensitive free text search. Click Retrieve all to display all users
regardless of their home server. Click Clear to reset the find function.
4.
Or Click Find… to open the Find users dialog. Enter your find criteria and
click Find. The find function is using field based case insensitive free text
search, with the exception of ID codes. To find a particular ID code enter
the complete ID code in the right case or click Listen for card if a card
reader is installed on the computer (4.18).
252
7 Manage users
7.7
Customize the user list view
1.
2.
7.8
In the User list right-click one of the column headers, such as User logon.
Check the properties that should appear as columns in the User list.
Hide ID codes
For security reasons, viewing ID codes (user codes and card numbers) in
SafeCom Administrator can be restricted for users with no administrator
rights.
To hide ID codes:
1.
2.
3.
Start SafeCom Administrator and log in.
Check Hide ID codes on the Users tab in the Server properties dialog.
Identify the users with administrator rights who are not allowed to see ID
codes and make sure to change their user rights to Partial rights or
lower.
Users with only Partial user rights can then no longer:




See the ID codes on the ID code tab in the User properties dialog.
View the column ID codes in the list of users.
Open the ID codes overview dialog from the Users menu.
See ID codes when testing a connected USB or Serial card reader.
Note: Checking Hide ID codes does not affect the users view in SafeCom Web
Interface. Hiding ID codes in the Web Interface must be set up in
scWebConfigurator.exe. Refer to SafeCom G3 Web Interface Administrator’s
Manual D60604.
D60603-21
253
7 Manage users
7.9
Hide document names
To hide document titles:
1.
2.
3.
Start SafeCom Administrator and log in.
Check Hide Document names on the Users tab in the Server properties
dialog.
Identify the users with administrator rights who are not allowed to see ID
codes and make sure to change their rights to Full rights or lower.
A user with no administrator rights can then no longer see document titles in
the list of print jobs under any user, including in the users own list of
documents.
Note: Checking Hide Document names does not affect the users view in the
SafeCom Web Interface.
D60603-21
254
7 Manage users
7.10
Edit the properties of multiple users
1.
2.
Use Find users (7.6) to get a list of relevant users.
Do one of the following:



To select consecutive users, click the first user, press and hold
down SHIFT, and then click the last user.
To select nonconsecutive users, press and hold down CTRL, and
then click each user.
To select all the users in the window, press CTRL+A.
3.
Press ALT+ENTER or right-click the selected user(s) and select User
properties.
4.
Make the required changes on the Identification and Settings tab.



5.
On the Identification tab (5.8.1) it is possible to edit these
properties: Domain, Home server, Org. unit, Description, and Cost
code. It is possible to 1) click Clear to set the number of failed
login attempts to zero, 2) Check or uncheck Prevent login and 3)
Check or uncheck Login without PIN code.
On the Settings tab (5.8.2) it is possible to edit all properties.
On the ID code tab (5.8.3) it is possible to 1) click PUK to generate a
new PUK code and 2) click PIN code to assign a default PIN code.
The PUK code can be e-mailed to users (5.7.4).
Click OK.
When editing multiple properties the following legend applies:



7.11
Checkboxes can have three states: Checked, clear and dimmed. If it is
dimmed it is because the selected users have difference properties.
Fields is shown with a light gray background color and the text N/A in
black if the selected users have different properties.
Drop-down lists is shown with a light gray background and the first
element in the list.
Delete users
In the Users list select the users you wish to delete. You can delete the users in
the following ways:



D60603-21
Right-click the selected user and select Delete user.
On the Users menu, click Delete user.
Select the user and press the DEL key.
255
7 Manage users
7.12
List of aliases
1.
2.
On the Users menu click Aliases…
The Aliases overview dialog appears.
Click Copy to copy the selected aliases to the clipboard.
Click Save to save the list of aliases to file (7.12.1).
7.12.1 Save aliases to file
1.
2.
3.
Open the Aliases overview dialog (7.12).
Click Save.
Select Save as type (XML or CSV) and enter File name. Click Save.
The XML tags are covered in the table in the following. The CSV column header
is the same as the XML tag.
Parameter
UserLogon
FullName
Alias
D60603-21
Description
Logon name
Full name
Alias
256
7 Manage users
7.13
List of ID codes
1.
Open the SafeCom Administrator and log in.
Note: Only users with administrator rights have the option to open the ID
codes overview if Hide ID codes is checked in Server properties on the
Users tab.
2.
3.
On the Users menu click ID codes…
The ID codes overview dialog appears. The list of temporary IDs is
displayed by default.
4.
Check Permanent cards to see list the permanent cards.




D60603-21
Click Make permanent to change selected temporary ID(s) to
permanent ID(s).
Click Copy to copy the selected ID codes to the clipboard.
Click Delete to delete the selected IDs from the user(s).
Click Save to save the list of ID codes to file (7.13.1).
257
7 Manage users
7.13.1 Save ID codes to file
1.
2.
3.
Open the ID codes overview dialog (7.13).
Click the Save button. Either Temporary IDs or Permanent IDs are saved.
The saved information includes User Logon, Full name and ID code
(decrypted). If Temporary IDs are saved the Start date and End date is
NOT included.
The Save list of ID codes dialog appears. Select Save as type (CSV, XML
or TXT). Enter File name and click Save.
The XML tags are covered in the table in the following. The CSV column
header is the same as the XML tag.
Parameter
UserLogon
FullName
CardNo
7.14
Description
Logon name
Full name
ID code
Customize the format of ID codes
Default settings.
When a user generates an ID code via the SafeCom Web Interface, the ID code
is set by default to the following:
 Six characters in length – with a minimum two digits and two letters (lower
case only).
 Temporary – ID codes expire six months after they are created.
Also by default, the SafeCom solution sends three e-mail warnings to the user
that their ID code is going to expire. The first e-mail is a three week warning,
the second a two week warning and the last one is a seven day warning.
Customize ID codes:
To customize ID code settings:
1.
Open the IDCodeGenerating.txt file. The file is located in the
%SafeCom%\Templates folder. By default located in:
C:\Program Files\
SafeCom\SafeComG3\Templates
If a 32-bit SafeCom G3 version is installed on Windows 64-bit:
C:\Program Files (x86)\
SafeCom\SafeComG3\Templates
D60603-21
258
7 Manage users
IDCodeGenerating.txt
;-------------------------------------------------; This file specifies the configuration
; of generation of ID codes in SafeCom.
;
; (c) 2011 SafeCom A/S
;-------------------------------------------------[Params]
Version="1"
CodePattern="11xx**"
LifeTime="00-06-00"
ExpireWarning1="21"
ExpireWarning2="14"
ExpireWarning3="7"
2.
Change the file as follows.
Note: When choosing the number of characters in the ID code, make sure
there are a sufficient number of permutations possible, considering the
number of ID codes needed in your organization.

CodePattern: This string specifies the minimum number of digits,
minimum number of lowercase letters and the total length.
o
The string “11xx**” indicates a 6 character string, with
minimum 2 digits (11) and 2 letters (xx).
o
The string “11111” indicates a 5 digit string.
Note: Only numbers 0-9 and letters a-z (lower case only) can be
used. No special characters are allowed.

LifeTime: This string specifies the expiry date in the format yy-mmdd (year, month, and day).
o
The string “00-06-00” is an ID code that expires in 6 months.
The string “00-00-05” is an ID code that expires in 5 days.
o
The string “00-00-00” is a permanent ID code.

ExpireWarning1: This string is when the first e-mail is sent warning
that the ID code expires in the specified amount of days.

ExpireWarning2: This string is when the second e-mail is sent
warning that the ID code expires in the specified amount of days.

ExpireWarning3: This string is when the final e-mail is sent warning
that the ID code expires in the specified amount of days.
Note: An automatic e-mail reminder can be set up to notify the user
their ID code will soon expire (7.19).
3.
4.
D60603-21
Save the changes to the file.
Copy the file from the Templates folder to the SafeCom install folder on
the SafeCom master server. The new template takes effect immediately
after restarting the SafeCom service.
259
7 Manage users
7.15
User has lost ID card
If a user loses their ID card the user needs to register another card.
1.
2.
3.
7.16
Find the user (7.6).
Open the User properties dialog. Click on the ID code tab (5.8.3).
Click PUK to generate a new PUK code or enter the ID code.
User has forgotten ID code
If the user forgets their ID code, you can retrieve it.
1.
2.
3.
7.17
Find the user (7.6).
Open the User properties dialog. Click on the ID code tab (5.8.3).
Code contains the ID code.
User has forgotten PIN code
If the user forgets their PIN code you can generate a new PIN code.
1.
2.
3.
4.
7.18
Find the user (7.6).
Open the User properties dialog. Click on the ID code tab (5.8.3).
Click PIN code.
Click Random to assign and display a randomly generated PIN code. Click
Default to assign and display the default PIN code ‘1234’. Refer to 3.4.7
on how users can subsequently change the PIN code.
Delete a user’s print jobs (documents)
Select the user, whose print jobs (documents) you wish to delete. In the Job
list select the print jobs and you can delete them in the following three ways:



On the Jobs menu, click Delete job.
Right-click the selected job and select Delete job.
Press the DEL key.
The job list may contain these columns:






Document name. The name of the print job.
Pages. The number of pages in the print job.
Generated. The date and time when the job was stored.
Paper size. The paper size (A4, Letter, …).
Driver name. The name of the print driver.
File location. The computer where the print job is stored. The computer is
running the SafeCom server software or the SafeCom Print Client.
 Job distributor. The SafeCom server the SafeCom Pull Port or SafeCom Print
Client was referencing at the time of printing.
D60603-21
260
7 Manage users
7.19
Customize and translate e-mail messages
E-mail messages can be customized and translated to give the users the highest
user satisfaction. Dates are written according to the server’s short format.
To use a specific e-mail template, copy the template file from the templates
folder to the SafeCom installation folder on the SafeCom master server. The
new template automatically takes effect. The files are located in the
%SafeCom%\Templates folder,
C:\Program Files\
SafeCom\SafeComG3\Templates
The e-mail templates:
D60603-21

EmailWelcome.txt
Send welcome message to new user if E-mail welcome message to new
users is checked on the E-mail tab in the Server properties dialog
(5.7.4).

EmailPUK.txt
Send PUK code to user if E-mail PUK code when generated is checked on
the E-mail tab in the Server properties dialog (5.7.4).

EmailCode.txt
Send code to user if the EmailCode.txt file is located in the SafeCom
installation folder. The E-mail is sent if the code is added in SafeCom
Administrator, through APIs or via an import. If the user gets for example
two codes during an import, then the user will receive two e-mails, one
with each code.

EmailJobDelete.txt
Send note to author about document that has been deleted if E-mail job
deletion note to author of job is checked on the E-mail tab in the Server
properties dialog (5.7.4).

EmailWarning.txt
Send warning to author and/or recipients about document to be deleted
if E-mail delete warning is checked on the E-mail tab in the Server
properties dialog (5.7.4).

EmailIDCodeExpireyWarning.txt
Send e-mail reminder to users warning them, that they have an ID code
that is about to expire.

Email DelegateRequest.txt
Send e-mail notification to potential user of SafeCom Delegate Print.

EmailDelegateRequestAccept.txt
Send e-mail where a user accepts use of SafeCom Delegate Print.

EmailDelegateRequestReject.txt
Send e-mail where a user rejects use of SafeCom Delegate Print.
261
7 Manage users
In the EmailWelcome.txt and EmailPUK.txt file it is possible to use the tags:
<%ACCOUNTINGMODEL="No|Tracking|Pay For Print"%>
<%CREDITS%>
<%ENCRYPTION="No|Yes"%>
<%GROUPNAME%>
<%LOGINWITHOUTPIN="No|Yes"%>
<%PIN%>
<%PRINTALL="No|Yes"%>
<%PUK%>
EmailWelcome.txt
<%SUBJECT="Welcome to SafeCom"%>
Dear <%USER%>,
You have been added as a user to the SafeCom solution.
You are about to experience the patented SafeCom Pull Print
technology. It gives you the freedom to collect your
documents at any SafeCom-enabled printer when it suites you.
When you print via SafeCom uncollected documents are deleted
after <%JOBDELETEDAYS%> day(s), <%JOBDELETEHOURS%> hour(s)
and <%JOBDELETEMINUTES%> min(s).
www.safecom.eu
EmailPUK.txt
<%SUBJECT="SafeCom PUK code"%>
Dear <%USER%>,
Your PUK code is: <%PUK%>
When you present the card at a SafeCom-enabled printer you
will be prompted for the above PUK code.
Write down the PUK code and bring it with you so you can
enter it when you are at the printer.
Once you have entered the PUK code, you do not need the PUK
code any longer.
www.safecom.eu
D60603-21
262
7 Manage users
EmailCode.txt
<%SUBJECT="SafeCom ID code"%>
Dear <%USER%>,
You have been granted the following ID code:
<%CardNo%>
To login at the SafeCom-enable printer you can enter the
above code.
www.safecom.eu
EmailWarning.txt
<%SUBJECT="[SafeCom] Delete warning"%>
This mail is to inform you that
your document: <%DOCUMENTNAME%>
submitted on <%SUBMITDATE%><%SUBMITTIME%>
will be deleted on <%DELETEDATE%><%DELETETIME%>
<%USERLIST TEXT="Document has not yet been collected by:"%>
www.safecom.eu
EmailJobDelete.txt
<%SUBJECT="[SafeCom] Document deleted"%>
This mail is to inform you that
your document: <%DOCUMENTNAME%>
submitted on <%SUBMITDATE%><%SUBMITTIME%>
has been deleted.
<%USERLIST TEXT="Document was not collected by:"%>
www.safecom.eu
EmailIDCodeExpireyWarning.txt
<%SUBJECT="[SafeCom] ID code is about to expire"%>
This mail is to inform you that you have an ID code that
will expire on: <%DELETEDATE%><%DELETETIME%>
Please click the link below to generate a new ID code or
contact your administrator.
www.safecom.eu
D60603-21
263
7 Manage users
EmailDelegateRequest.txt
<%SUBJECT="[SafeCom] Print delegate request"%>
Dear <%USER%>,
<%DELEGATEUSER%> has requested print delegation. Click the
link below to open a web browser and respond to the request.
http://server/safecom/<%DELEGATELINK%>
Print delegation enables you to submit delegated documents
to selected users and/or accept delegated documents from
selected users.
www.safecom.eu
EmailDelegateRequestAccept.txt
<%SUBJECT="[SafeCom] Print delegate request accepted"%>
Dear <%USER%>,
<%DELEGATEUSER%> has accepted your print delegate request.
www.safecom.eu
EmailDelegateRequestReject.txt
<%SUBJECT="[SafeCom] Print delegate request rejected"%>
Dear <%USER%>,
<%DELEGATEUSER%> has rejected your print delegate request.
www.safecom.eu
D60603-21
264
8 Manage devices
8
Manage devices
8.1
Introduction
From within SafeCom Administrator it is possible to manage SafeCom devices
and do the following:
D60603-21

Device license (8.2)
Choose licenses for the device.

Add device (8.3)
Register a device in the database.

Add device to a SafeCom Device Server (8.4)
Register a device to a device server.

Find devices (8.5)
Search the database for devices.

Broadcast for devices (8.6)
Broadcast on the network to find SafeCom Controllers and devices with
SafeCom Go.

Customize the device list view (8.7)

Edit the properties of multiple devices (8.8)

Delete devices (8.9)
Remove a single or multiple devices from the database.

Update software (8.10)
Load new software to a single or multiple devices.

Monitor device status (8.11)
See the online status of devices. Enable device status logging for
troubleshooting purpose.

Restart devices (8.12)
Restart a single or multiple devices.

Open the device’s web interface (8.13)
The web interface that can be used for configuration.
265
8 Manage devices
8.2
Device license
On the License tab in the Device properties dialog it is possible to choose
which SafeCom features should be enabled on the device in question.
The checked features are only accepted if the license key code allows the
device features. Click License… to open the License dialog (5.5) to see if the
license key code allows the additional features to be enabled for this device.
D60603-21
266
8 Manage devices
8.3
Add device
It is possible to add devices in the following ways:




Right-click in the Device list and select Add device.
On the Devices menu click Add device.
Click the Add device tool button.
In System overview click Add device (only present on single servers).
You need to know the IP address of the device. Alternatively you may try to
Broadcast for the device (8.6).
1.
The Add device wizard is launched. Enter the Device address (hostname
or IP address). Click Next.
2.
Information is retrieved from the device to establish the type of device.
Click More information to see additional details:
D60603-21
267
8 Manage devices
3.
If you agree with the type of device click Next.
Otherwise click [change] to change the SafeCom type.
4.
Select the type of SafeCom device:




SafeCom Go in the device
SafeCom Go/SafeCom Device Server
SafeCom Go/SafeCom Controller
SafeCom tracking device (9).
Note: If you select any device under SafeCom Go/SafeCom Device
Server or SafeCom Go/SafeCom Controller you are prompted for the IP
address or hostname of the MFP. You are also prompted for the user
name and password needed to log in to the MFP.
5.
D60603-21
Click Next.
268
8 Manage devices
8.3.1
6.
On the Settings tab (5.9.1) specify the properties of the device (Duplex
supported and Color supported).
7.
Click Add to register the device and save it in the database.
Resend configuration
If a device added in the SafeCom Administrator is not configured correctly, or if
the device must be reconfigured to a different server, it is possible to resend
the configuration details (Server address and Group name) to the device.
1.
2.
Browse to Devices in the SafeCom Administrator.
Right-click the device and click Resend configuration.
The configuration details are now sent to the device and the configuration is
successful when the message "Server is reconfigured" appears.
Note: The Resend configuration functionality does not work with devices that
are SafeCom enabled via the device server.
D60603-21
269
8 Manage devices
8.4
Add a device to a SafeCom Device Server
Before adding a device server device in SafeCom Administrator a SafeCom
Device Server must be added to the Device server container in the left menu.
If the relevant device server is already added in the SafeCom Administrator, go
to Add device server device below.
Add device server
1.
2.
Start SafeCom Administrator.
Log in to the server by double-clicking its group name listed to the left.
Note: In a multiserver installation, best practice is to make sure that the
device server references the slave server.
3.
4.
5.
Enter User logon (default is ADMIN) and Password (default is nimda).
Right-click the Device servers container and select Add device server...
Enter the IP address or hostname of the device server and if necessary a
note, and click Add.
Note: To delete the device server again you right-click the device server and
select Delete device server.
The SafeCom Device Server is now added to SafeCom Administrator and you can
now add a device.
Add device server device
1.
2.
3.
4.
D60603-21
Click the Devices container, right-click the content area and then Add
device. The Add device wizard is now launched.
From the Device server drop down menu, select the relevant SafeCom
Device Server and click Next.
Information is retrieved from the device server to establish the status of
device server. Click Next.
Enter the Printer address (the device IP address or host name) and click
Next.
270
8 Manage devices
5.
6.
7.
8.
9.
Information is then retrieved from the device. Click Next.
Now select the type of device and click Next.
Enter the username and password, as specified on the device web page
and click Next.
The device properties dialog now opens. Make sure to specify on the
Settings tab the device server and the properties of the device (duplex
and color supported).
Click Add to register the device and save it in the database. After approx.
2 minutes the device is added to the device server and available to be
configured in SafeCom Device Server.
The device server device is now added and listed both under Devices and under
the device server under Device servers with the name SafeCom Device Server.
D60603-21
271
8 Manage devices
8.5
Find devices
Once a device has been registered you can use the find function in SafeCom
Administrator to find it.
8.5.1
1.
2.
Click the Find tool button.
Change Search in to Devices.
3.
Enter text in Look for and click Find now. The find function uses case
insensitive free text search. Click Retrieve all to display all registered
devices. Click Broadcast to broadcast for devices.
4.
Or Click Find… to open the Find devices dialog. The Find devices dialog is
available in a Simple (8.5.1) and Advanced (8.5.2) search mode. The
latter is very useful if you want to search for devices based on their use
of device licenses.
Simple search
The Find devices dialog opens in Simple search mode by default.
D60603-21
1.
Enter your find criteria and click Find. The find function is using field
based case insensitive free text search.
2.
The search result appears with information about version and online
status. Click the column label to sort the result. If you would rather see
what license is in use by the different devices you can right-click in the
Device list and check Show device license.
272
8 Manage devices
8.5.2
Advanced search – Device licenses
Click Advanced in the Find devices dialog to also search for devices based on
their use of device licenses. Examples: To find all devices that uses a Pull Print
license change Pull Print to Yes. To find all devices that do not use a Client
Billing license, change Billing to No.
1.
Enter your find criteria and click Find. The find function is using field
based case-insensitive free text search.
2.
The search result appears with information about what license is in use by
the different devices. Click the column label to sort the result.
If you would rather see the version and online status of the devices you
can right-click in the Device list and clear Show device license.
D60603-21
273
8 Manage devices
8.6
Broadcast for devices
1.
2.
Click on the Find button and select Devices.
Click Broadcast…
If a device does not appear it could be because it is powered off, not
connected or not reachable because the network setup is not reflected by the
list of Broadcast addresses (5.10.3). If the device does not appear refer to
troubleshooting (16.4).
8.7
Customize the device list view
1.
2.
D60603-21
In the Device list right-click one of the column headers, such as Device
name.
Check the properties that should appear as columns.
274
8 Manage devices
8.8
Edit the properties of multiple devices
1.
2.
Use Find devices (8.4) to get a list of relevant devices.
Do one of the following:



3.
4.
Press ALT+ENTER or right-click the selected device(s) and select Device
properties.
Make the required changes on the Settings and Charging scheme tab.



5.
To select consecutive devices, click the first device, press and hold
down SHIFT, and then click the last device.
To select nonconsecutive device, press and hold down CTRL, and
then click each device.
To select all the devices in the window, press CTRL+A.
On the Settings tab (5.9.1) it is possible to edit these properties:
Model, Home server, Org. unit, Location, Duplex supported,
Color supported, Restricted access and Disable Pay for Print.
On the Charging scheme tab it is possible to edit all properties.
On the License tab (5.9.3) it is possible to edit all properties.
Click OK.
When editing multiple properties the following legend applies:



D60603-21
Checkboxes can have three states: Checked, clear and dimmed. If it is
dimmed it is because the selected devices have difference properties.
Fields is shown with a light gray background color and the text N/A in
black if the selected devices have different properties.
Drop-down lists is shown with a light gray background and the first
element in the list.
275
8 Manage devices
8.9
Delete devices
In the Devices list select the devices you wish to delete. You can delete the
devices in the following ways:



8.10
Right-click the selected devices and select Delete device.
On the Devices menu, click Delete device.
Press the DEL key.
Update software
In the Devices list select the devices you wish to update. The settings of the
device are preserved during the software update. You can update the devices
in the following ways:



Right-click the selected device(s) and select Update software.
On the Devices menu, click Device properties. In the Device properties
dialog click Update software…
The SafeCom Controller can also be updated via FTP.
Check the Online status (8.11) in SafeCom Administrator to ensure the device
is powered on and ready to receive updated software.
SafeCom Controller
SafeCom Controller
Sharp OSA-enabled MFP
Xerox EIP-enabled MFP
SafeCom Controller 3 Port
SafeCom Controller 1 Port
SafeCom Device Server
Fuji Xerox ApeosPort III, IV MFP
HP LaserJet device with OXP and FutureSmart
Konica Minolta OpenAPI-enabled MFP
Océ OpenAPI-enabled MFP
Sharp OSA-enabled MFP
Xerox EIP-enabled MFP
Canon MFPs
Canon MEAP-enabled MFP
D60603-21
Software
(*.b80)
508xxx
312xxx
304xxx
Software
No software
on the device
Software
(*.lic, *.jar)
010xxx
276
8 Manage devices
HP MFPs and printers
CP4025, CP4525
P3015
CP3525
CM3530 MFP
CM6030 MFP, CM6040 MFP, CM6049 MFP
CP6015
P4014, P4015, P4515
CP3505
CM8050 MFP, CM8060 MFP
P3005
M3035 MFP, M4345 MFP, M4349, MFP CM4730 MFP,
M5035 MFP, M5039 MFP, M9040 MFP, M9050 MFP,
M9059 MFP, 9250C Digital Sender
3000, 3800
4730mfp
4700
4345mfp, 9040mfp, 9050mfp, 9500mfp
2410, 2420, 2430, 4250, 4350
9040, 9050
4650, 5550
SafeCom Go HP
(*.b49, *.b89, *.uin)
151xxx
150xxx
141xxx
140xxx
132xxx
131xxx
130xxx
121xxx
120xxx
111xxx
110xxx
102xxx
101xxx
100xxx
090xxx
081xxx
080xxx
075xxx
Note: SafeCom Go HP software can only be updated if a password is set for the
admin account.
Lexmark MFPs and printers
X463de, X464de, X466de, X466dte, X466dwe,
X651de, X652de, X654de, X656de, X658de
X734de, X736de, X738de, X738dte,
X860e, X862e, X864e
X642e, X644e, X646e, X646ef, X646dte,
X782e, X782e XL, X850e, X854e,
X940e, X945e
T656dne
Ricoh MFPs and printers
SP C320DN, SP C430DN, SP C431DN
MP C300, MP C400,
MP C2051,MP C2551,
MP C3001SP, MP C3501SP,
MP C4501SP, MP C5501SP, MP C6501SP, MP C7501SP
SP 4210N, SP C820DN, SP C821DN
MP 6001, MP 7001, MP 8001, MP 9001,
Pro 907EX, Pro 1107EX, Pro 1357EX
MP 2851, MP 3351, MP 4001, MP 5001,
MP C2050, MP C2550, MP C2800, MP C3300,
MP C4000, MP C5000
SP C420DN
D60603-21
SafeCom Go Lexmark
(*.fls)
021xxx
012xxx
121xxx
SafeCom Go Ricoh
(*.b87, *.uin)
150xxx
147xxx
110xxx
100xxx
090xxx
080xxx
277
8 Manage devices
Ricoh MFPs and printers
MP 2550, MP 3550, MP 4000, MP 5000,
MP C6000, MP C7500
MP 1100, MP 1350, MP 5500, MP 6000, MP 6500,
MP 7000, MP 7500, MP 8000, MP 9000,
MP C2000, MP C2500, MP C3000, MP C3500, MP C4500
Pro906EX, Pro1106EX, Pro1356E
MP 2510, MP 3010, MP 3500, MP 4500,
2051 (DSm651), 2060 (DSm660), 2075 (DSm675), 3025
(DSm725), 3030 (DSm730), 3035 (DSm735),
3224C (DSc424), 3228C (DSc428), 3232C (DSc432),
3235C (DSc435), 3245C (DSc445), 3260C (DSc460),
5560C (CS555)
Samsung MFPs
Samsung XOA-enabled MFP
SafeCom Go Ricoh
(*.b87, *.uin)
060xxx
030xxx
020xxx
SafeCom Go Samsung
(*.b94)
010xxx
8.10.1 Location of device software
SafeCom Administrator will automatically pick the latest software version for
updating if the files are located in the device_software subfolder to where you
installed SafeCom G3 server software, normally:
C:\Program Files\SafeCom\SafeComG3\device_software
D60603-21
278
8 Manage devices
8.10.2 Single device software update
D60603-21
1.
Open the Device control dialog as described in 8.10.
Specify the Software file or Browse to it.
2.
Click Start to begin the software update process. If you are updating
SafeCom Go HP software the Device Authorization dialog appears. Enter
User name admin and the Password.
3.
Click Close when the software update processes has been completed.
After the process completes you can click View log to see the details. If
the update process fails, try again. If you are updating SafeCom Go
product you should refer to relevant SafeCom Go Administrator’s Manual
for troubleshooting hints.
279
8 Manage devices
8.10.3 Multiple devices software update
1.
Select multiple devices. Open the Device control dialog as described in
8.10.
2.
If you have selected multiple types of devices you need to specify the
Software file(s) for each type. Select <specify software file> and click on
the browse button […] to launch an Open dialog. Then browse to and
select the software update file matching the select type. Repeat this step
for each device type.
Max connections specify the maximum allowed devices that can be
updated simultaneously. When you open the dialog the maximum
connections is set to 10. You can specify a maximum of 1, 5, 10, 20, 50 or
100 connections. This limit is to ensure that the software update process
does not occupy all the network bandwidth.
D60603-21
3.
Click Start to begin the software update process. If you are updating
SafeCom Go HP software the Device Authorization dialog appears. Enter
User name admin and the Password.
4.
Click Close when the software update processes has been completed for
the selected devices. If the update process fails, try again or refer to
Troubleshooting chapter in the appropriate SafeCom Go administrator’s
Manual (See list in section 1.11).
280
8 Manage devices
8.11
Monitor device status
To monitor the status of the SafeCom devices from within SafeCom
Administrator you have two possibilities:

Online status (simple)
In the Devices pane right-click any of the headers (Device name, IP
address, …) and check Online to enable status for all devices. Press F5
to retrieve device status.

Device status logging (troubleshooting)
Device status logging allows monitoring of reboots, uptime and response
time of selected SafeCom devices. Can be very useful in troubleshooting
situations. Follow the steps below to start device status logging.
Start the device monitor:
D60603-21
1.
2.
On the Devices menu click Monitor setup…
The Device Monitor dialog appears.
3.
The default Poll interval is 5 minutes. Click Start to launch the
scDevMonServer.exe process.
281
8 Manage devices
Enable monitoring on selected devices:
1.
2.
3.
D60603-21
Use Find devices (8.4) to get a list of relevant devices.
In the Devices pane right-click any of the headers (Device name, IP
address, …) and check one of the following:

Monitored status
The Monitored column to appear. An x indicates that the device is
monitored and a – indicates that the device is not monitored.

Monitoring ->
Allows you to control what details should be presented in the
columns. Choose between Reboots, Uptime, Avg. ping and Normal
ping. Select All to choose all of the above.
Right-click a device and click Monitor device.
282
8 Manage devices
8.11.1 Look at device statistics
1.
2.
3.
D60603-21
Open the Device properties dialog.
Click on the Statistics tab. The statistics tab is not presented if you have
opened multiple devices.
A textual representation of the statistics is shown.
283
8 Manage devices
4.
8.12
Check Graphical to see a graphical representation of the statistics.
Restart devices
Devices can be restarted from within SafeCom Administrator in two ways:


8.13
Right-click in the Device list and select Restart…
On the Device menu, click Restart…
Open in web browser
The SafeCom devices have a web interface that can be used for configuration.
The web interface can be opened in the following ways:


D60603-21
Right-click in the Device list and select Open in web browser.
In the Device properties dialog (5.9.1) click Open in browser.
284
8 Manage devices
8.14
Restrict users’ access to devices
1.
2.
3.
8.15
Build an organizational tree by adding org. units as required (5.12).
Associate users and devices to the org. units.
Check Restricted access in the Device properties dialog of the intended
devices (5.9.1).
DHCP server
You can assign a fixed IP address in the DHCP server. If you know the MAC
address you can log in to the DHCP server to determine which IP address has
been assigned. The MAC address of the SafeCom Controller is printed on the
white label on the bottom of the SafeCom Controller. The MAC address is a 12digit hexadecimal number. Example: 00C076FF00F2.
D60603-21
285
8 Manage devices
8.16
Shorten job names in document list
Redundant text such as Microsoft Word, Microsoft Excel and http:// can be
excluded from the job name that appear in the Document list in the SafeCom
Front-end (available as the first action after you click MORE...) and in the
device’s control panel if SafeCom Go is used.
The text to exclude is controlled by the ExcludeJobNames.txt file located
in the %SafeCom%\Templates folder. The %SafeCom% indicates the SafeCom
installation folder, normally
C:\Program Files\
SafeCom\SafeComG3
If a 32-bit SafeCom G3 version is installed on Windows 64-bit:
C:\Program Files (x86)\
SafeCom\SafeComG3
1.
2.
3.
Copy the ExcludeJobNames.txt file from the %SafeCom%\Templates folder
to the %SafeCom% folder.
Modify the ExcludeJobNames.txt file in the %SafeCom% folder to match
your requirements.
Restart the SafeCom Service (16.30).
Note: Subsequent modifications to the file in the %SafeCom% folder will take
immediate effect.
ExcludeJobNames.txt
;-------------------------------------------------; This file specifies text to be excluded from
; job names in the SafeCom Front-end.
;
; Text is excluded if appearing as the first part
; of the job name.
;
; (c) 2003 SafeCom A/S
;-------------------------------------------------Version="1"
Item="Microsoft Word - "
Item="Microsoft Excel - "
Item="http://"
D60603-21
286
9 SafeCom Tracking
9
SafeCom Tracking
9.1
Introduction
The SafeCom Tracking makes it possible to track print and MFP usage and costs
on a per device and user basis.
You can use SafeCom Reports (9.13) to view tracking data and generate
reports.
9.2
Pull print tracking
Pull print tracking makes it possible to track print costs on SafeCom Pull
printers. Tracking is performed by the special port monitor SafeCom Pull Port.
The Pull print tracking process:
1.
2.
3.
D60603-21
The SafeCom Pull Port analyzes the document in regards to number of
pages, paper size, and possible use of color and duplex.
The SafeCom Pull Port transfers the document and the resulting tracking
data to the SafeCom server. The document remains on the SafeCom
server until the user collects it. Documents that are not collected are
automatically deleted after a configurable time.
When the user collects the document the price is calculated based on the
charging scheme of the selected device. If Post track (9.7) is enabled the
tracking data can be adjusted according to the information that is
available from the device at print time.
287
9 SafeCom Tracking
9.3
Push print tracking
Push print tracking makes it possible to track print costs without installing
dedicated SafeCom hardware. Push print tracking requires the use of the
special port monitor SafeCom Push Port.
The Push print tracking process:
1.
2.
3.
The SafeCom Push Port analyzes the document with regards to number of
pages, paper size, use of color and duplex.
The SafeCom Push Port transfers the resulting tracking data to the
SafeCom server where the data is registered under the appointed
tracking device and the price is calculated based on the charging
scheme.
The SafeCom Push Port can be configured to either:


9.3.1
Print directly
The document is output directly to the physical device’s TCP (port
9100). Refer to 9.3.1.
Print via a second printer
The document is forwarded to the port monitor of a second printer,
which in turn outputs the document directly to the physical device.
The second printer is also called the output device. Refer to 9.3.2.
Printing directly
The method of printing directly is illustrated below:
D60603-21
288
9 SafeCom Tracking
9.3.2
Printing via a second printer
The method of printing documents via a second printer (output device) is
illustrated below:
When printing via a second printer, the printer driver of the first printer
formats the document, whereas the printer driver of the second printer (the
output device) is not used.
The port monitor on the second printer communicates directly with the
physical printer. This concept gives you the freedom to use your printer vendor
supplied port monitor. Port monitors may support such protocols as: LPR, TCP
(port 9100), DLC, PJL, AppleTalk or SCSI.
Only the first printer should be shared. Sharing the secondary printer will
enable users to print and bypass tracking.
Note: There must be one instance of the SafeCom Push Port per physical
printer on each machine.
D60603-21
289
9 SafeCom Tracking
9.3.3
Add a secondary printer (output service)
As explained above the SafeCom Push print concept involves two print queues,
print directly, or print via secondary printer.
In the following it is described how to add a secondary printer (output service).
1.
2.
3.
4.
5.
6.
7.
8.
Open the Windows Control panel and browse to printers.
Open the Add Printer wizard.
Do one of the following depending on Windows version installed
a)
On Windows 2008/2008 R2: Click Add a local printer.
b)
On Windows 2003 and 2000: Click Next. Select Local printer and
clear Automatically detect and install my Plug and Play printer.
Click Next.
Choose an existing port that is used to connect to the printer. Click Next.
Click Have Disk and browse to install the files from the printer
manufacturer's installation disk (or downloaded the files from the
manufacturer's web site). Click OK.
Click Next.
Enter a Printer Name. Click Next.
Select Do not share this printer. Click Next.
Note: Do not make this printer your default Windows printer.
9.
D60603-21
Depending on the Windows version installed:
a)
Windows 2008/2008 R2: Click Print a test page to verify the system.
Click OK when prompted to confirm that the test page printed
correctly. Click Finish.
b)
On Windows 2003 and 2000: Select Yes to print a test page to verify
the system. Click Next. Click OK when prompted to confirm that
the test page printed correctly. Click Finish.
290
9 SafeCom Tracking
9.3.4
Add the first printer (SafeCom Push Port)
If you are printing directly via TCP/IP port 9100, follow these steps to add the
first printer (SafeCom Push port).
1.
2.
3.
4.
5.
D60603-21
Open the Windows Control Panel and browse to Printers.
Open the Add Printer Wizard.
Do one of the following depending on Windows version installed:
a)
On Windows 2008/2008 R2: Click Add a local printer.
b)
On Windows 2003 and 2000: Click Next. Select Local printer and
clear Automatically detect and install my Plug and Play printer.
Click Next.
Choose Create a new port and select SafeCom Push Port from the dropdown list. Click Next.
Enter a unique name of your choice for the port in Port Name. Click
Next.
291
9 SafeCom Tracking
6.
The dialog box Configure Push Port appears.
7.
In Servers click Edit servers…to add, remove, change or test the
connection to the SafeCom server.
Note: It is NOT possible to edit an entry on the SafeCom server list in the
Edit servers dialog. Instead you have to remove the server and then add
a new.
8.
Set up the User authentication as required according to the following
descriptions.





D60603-21
Select Use network logon to use your Windows logon as your
SafeCom user logon when printing.
Select Use specified logon and enter the SafeCom user logon of the
user who is to receive all future prints sent to the print queues that
uses this push port. This can be combined with Group print (5.13.8)
by specifying the name of the group instead of the name of a user.
Select Show authentication dialog at every print if you do not
want to use the Windows logon as the SafeCom user logon. SafeCom
PopUp must be running on the user’s computer to show dialog that
prompts for the login (4.13.4) and SafeCom Application Print must
be installed on the computer that hosts the Pull Port. Up to 10
minutes may elapse before the choice take effect. The time is
configured by the Windows registry setting CacheExpireSuccess
(4.4.4).
Select Show authentication dialog on first print only if the user
should only be prompted the first time they print. SafeCom PopUp
must be running on the user’s computer to show the dialog that
prompts for the login (4.13.4) and SafeCom Application Print must
be installed on the computer that hosts the Pull Port. Up to 10
minutes may elapse before the choice take effect. The time is
configured by the Windows registry setting CacheExpireSuccess
(4.4.4).
Select Use job data logon to extract the logon from the job data
(4.13.7).
292
9 SafeCom Tracking
9.
In Output device you need to check Use printer IP address or hostname
and specify the IP address if you are printing directly. Click Test
connection to display the Printer Properties dialog and to test the
connection to the printer.
The printer must be online and allow SNMPv1 access via UDP port 161,
otherwise you will get the message: Not able to connect to printer.
Note: If you are printing via a second printer you need to check Select
the printer that this port will use as output device and select one of
the output devices.
10.
Check SNMP status enabled if you want SNMP status to be reported.
11.
In Select printer for tracking you can check Select printer from list and
choose a tracking device.
Alternatively check Auto-create printer and then enter a Printer name
and an optional Printer location.
12.
In the Miscellaneous section select according to the following
descriptions:



13.
D60603-21
Show job price before printing: Check if users are to
unconditionally see dialog with the cost of the document before
they print. If the printer is a shared printer users MUST have
SafeCom PopUp (4.14) setup and running on their computer in order
to confirm that they wish to print the document.
Override user cost code: The specified cost code overrides the cost
code of the user who prints. Example: If John Smith has the cost
code 2949 and prints to a Push Port where a cost code of 1009 is
specified the resulting UserCostCode parameter in the tracking
record will show 1009 and not 2949.
Override driver name: The specified driver name overrides the
driver name supplied by the printer driver. This is particular useful
to differentiate printers using the HP Universal Print Driver.
Click OK and the Authorize port configuration dialog opens.
293
9 SafeCom Tracking
14.
Enter User logon and Password for a user with SafeCom Administrator or
Technician rights. Click OK.
15.
Click the button Have Disk and in the Install From Disk dialog browse to
the files from the printer manufacturer's installation disk (or downloaded
the files from the manufacturer's web site).Click Next.
16.
17.
18.
Enter a Printer Name. Click Next.
Select Share this printer and enter Share name (P101). Click Next.
Set up whether or not this printer should be your default Windows
printer.
a)
b)
On Windows 2008/2008 R2: Click Print a test page to verify the
system. Click OK when prompted to confirm that the test page
printed correctly. Click Finish.
On Windows 2003 and 2000: Select Yes to print a test page to verify
the system. Click Next. Click OK when prompted to confirm that
the test page printed correctly. Click Finish.
Check the Properties of the printer:
1.
2.
3.
4.
9.3.5
Back in the Control Panel right-click the printer, and then click Printer
Properties.
On the Device Settings tab check settings, such as paper size in the trays
and installable options.
On the Advanced tab check Start printing after last page is spooled.
This is required in order for the tracking and billing information to be
correct. Also it allows for faster spooling.
Click OK.
Set TCP port to another value than 9100
The SafeCom Push Port will by default print directly to port 9100. However this
can be changed as follows:
1.
2.
Stop the SafeCom Service and the Print Spooler.
Open the Registry Editor and browse to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\
Print\Monitors\SafeCom Push Port\Ports
D60603-21
294
9 SafeCom Tracking
3.
4.
5.
6.
9.3.6
Browse to the relevant instance of the port.
Right-click Output Ip Port select Edit and change the value from 9100 to
TCP port value to be used. Click OK.
Exit the Registry Editor.
Start the SafeCom Service and the Print Spooler.
Allow printing at all times
The port monitors will allow print on server error by default. The behavior can
be controlled via the Registry Editor.
It is possible to create and specify an overall AllowPrintOnServerError setting
for the SafeCom Push Port. A setting like this will also prevent dropping of print
jobs in case the SafeCom Push Port is referencing a non-existing tracking
device.
1.
2.
Stop the SafeCom Service and the Print Spooler.
Open the Registry Editor and browse to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\
Print\Monitors\SafeCom Push Port\Ports
3.
Create a new DWORD named AllowPrintOnServerError. It can take any of
the following values:
0:
1:
4.
5.
Do not print on server error.
Allow print on server error (Default).
Exit the Registry Editor.
Start the SafeCom Service and the Print Spooler.
The overall AllowPrintOnServerError setting takes effect, when local
PrintOnJdbError for the SafeCom Push Port has a value of 2.
Follow these steps to change the port specific PrintOnJdbError setting:
1.
2.
Stop the SafeCom Service and the Print Spooler.
Open the Registry Editor and browse to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\
Print\Monitors\SafeCom Push Port\Ports\<port>
0:
1:
2:
3.
4.
5.
6.
D60603-21
Do not print on server error.
Allow print on server error.
Use the overall setting AllowPrintOnServerError (Default).
Browse to the relevant instance of the port.
Right-click PrintOnJdbError select Edit and change the value. Click OK.
Exit the Registry Editor.
Start the SafeCom Service and the Print Spooler.
295
9 SafeCom Tracking
9.4
SafeCom Port Configurator
SafeCom Port Configurator is a wizard-based tool for converting existing
TCP/IP30 printers to SafeCom Push printers and revert SafeCom Push printers
back to their original TCP/IP settings. The tool allows viewing of printers in the
domain and easy launch of the Port configuration dialog for TCP/IP, Push and
Pull printers. Selected settings in the scPortConfigurator.ini file (9.4.8) can be
edited to customize the behavior of SafeCom Port Configurator.
This chapter includes:









9.4.1
Install SafeCom Port Configurator (9.4.1)
Start SafeCom Port Configurator (9.4.2)
Add server (9.4.3)
Convert to Push (9.4.4)
Restore to TCP/IP (9.4.5)
List and repair printers (9.4.6)
Read servers from file (9.4.7)
scPortConfigurator.ini (9.4.8)
Troubleshooting(9.4.9)
Install SafeCom Port Configurator
SafeCom Port Configurator can be installed in the following two ways:

Server installation
Always as part of a Server installation (4.2.1).

Tools installation
Optional when doing a Tools installation by checking SafeCom Port
Configurator. If you intend to make a Client and Tools installation on the
same computer, you should make the Client installation (4.2.3) first.
The SafeCom installation files are copied to the SafeCom installation folder.
The default is:
C:\Program Files\
SafeCom\SafeComG3
If a 32-bit SafeCom G3 version is installed on Windows 64-bit:
C:\Program Files (x86)\
SafeCom\SafeComG3
30
A TCP/IP printer is a Windows print queue that uses the Standard TCP/IP port
monitor.
D60603-21
296
9 SafeCom Tracking
9.4.2
Start SafeCom Port Configurator
The SafeCom Port Configurator enables you to:

Convert to Push (9.4.4)
Convert existing TCP/IP printers to SafeCom Push, allowing SafeCom
Tracking and SafeCom Rule Based Printing.

Restore to TCP/IP (9.4.5)
Restore printers converted to SafeCom Push back to their original TCP/IP
settings.

List and Repair Printers (9.4.6)
List printers in the domain and reconfigure these.
To start the SafeCom Port Configurator:
D60603-21
1.
Click Start, point to All Programs, click SafeCom G3, and then SafeCom
Port Configurator. Alternatively click scPortConfigurator.exe if a
separate installation (9.4.1) was performed.
2.
The SafeCom Port Configurator wizard appears, and you can choose the
task you want to perform.
297
9 SafeCom Tracking
9.4.3
Add server
The SafeCom Port Configurator will by default list printers on the local server
only. To use it to convert, restore and list printers on other servers you must
add these servers to the list of servers. The list of servers is saved to and read
from a file (9.4.7).
1.
Start SafeCom Port Configurator (9.4.2) and select what you would like
to do:
 Convert to Push (9.4.4)
 Restore to TCP/IP (9.4.5)
 List and Repair Printers (9.4.6).
2.
Once you are logged in, click Add server… and the Add server dialog
appears.
3.
To add just one server select Single, enter the Server (Host name or IP
address). Click OK.
Note: If the server is clustered you MUST reference the Virtual Server.
4.
D60603-21
To add multiple servers select Multiple, then select the Domain. Click
OK.
298
9 SafeCom Tracking
Once a server has been added it is stored in a file. In section 9.4.8 it is covered
how you can customize behavioral settings of SafeCom Port Configurator.
If you wish to remove a server open the file and remove the row containing the
server(s) in question (9.4.7).
D60603-21
299
9 SafeCom Tracking
9.4.4
Convert to Push
To convert existing TCP/IP printers to SafeCom Push:
1.
2.
3.
Start SafeCom Port Configurator(9.4.2)
Check Convert to Push. Click Next.
Enter SafeCom Server, SafeCom User name and Password in the
SafeCom Login dialog. Click Next.
Note: The SafeCom user needs to have SafeCom Administrator or
Technician rights.
D60603-21
300
9 SafeCom Tracking
4.
The Convert to Push dialog appears with one or more servers, including
Local Machine.
Log in by using one of the following methods:
a)
Press Shift + Click on a listed server. This will prompt you to log in
to the server with your Windows user name and Password.
b)
Click on a print server, and it will attempt to log in as the user you
are already logged in as31. If the server is part of a domain and you
are already logged into the domain then you are logged in directly.
Otherwise you are asked to log in with your Windows user name
and Password.
Note: If the windows user running the application has
administrative rights on the clicked print server (or its domain),
then both shared and non-shared (local) printers will be listed.
However, if the user has no elevated rights in the machine (or
domain), then only public (local) TCP/IP printers will be listed.
A public printer is a printer queue that has been made shared, and
at the same time has Allow checked for Print for Everyone on the
Security tab in the Properties dialog.
c)
Log in as a domain user by specifying the domain followed by a
backslash (\) and the Windows user name. Example: MYDOMAIN\JS.
Alternatively you can specify user logon followed by (@) and the
domain, like this [email protected]
If the server does not appear in the list, then add a new server by clicking
Add server… (9.4.3)
31
There will be no error messages specific for failed logons: The program will not
distinguish between A) A misspelled username/password B) Successful logon of a user
with not rights to "see" (server-enumerate) the printers.
D60603-21
301
9 SafeCom Tracking
5.
Check the printers to be converted from TCP/IP to Push. Click Next.
6.
The Push Port Configuration dialog appears. Make changes to the Push
Port Configuration according to the descriptions below or leave the
default settings. Click Next.
Check Show job price before printing if users are to unconditionally see
dialog with the cost of the document before they if they print. If the
printer is a shared printer, users MUST have SafeCom PopUp (4.14) set up
and running on their computer in order to be able to confirm that they
wish to print the document.
Check Override user cost code and enter the cost code to have the
specified cost code override the cost code of the user who prints.
Example: If John Smith has the cost code 2949 and prints to a Push Port
where a cost code of 1009 is specified the resulting UserCostCode
parameter in the tracking record will show 1009 and not 2949.
Check Override driver name and enter the driver name to have the
specified driver name override the driver name supplied by the printer
driver. This is particular useful to differentiate printers using the HP
Universal Print Driver.
In Sharing you can check Make sure printer is shared (default) or check
Do not change share to leave it as is.
D60603-21
302
9 SafeCom Tracking
7.
One of the following two dialogs will open:

Printer not registered in SafeCom server (default)
Create a tracking device in the SafeCom server.

Printer already registered in SafeCom server
A tracking device with a matching MAC address is already registered
in the SafeCom server and it is suggested to use that.
Make your choices. Click Next.
Both dialogs are described in detail in the following:
The Printer not registered in SafeCom server dialog:
Check Create in SafeCom, a new device to track this printer if your
SafeCom solution is Push Print solution only.
Check Skip reconfiguring the print queue for this printer if your
SafeCom solution includes Pull Print and you wish to add the printer as a
Pull Printer to the SafeCom solution first. This way both Pull and Push
print activity gets associated with the same tracking device in the
SafeCom solution. Proceed to step 8.
Check Do not ask again if the choices are to apply in conversions made
during this session.
The Printer already registered in SafeCom server dialog:
D60603-21
303
9 SafeCom Tracking
Check Merge print tracking with already existing SafeCom device if you
wish to have all tracking registered under the same tracking device. The
match is done based on the physical printer’s MAC address.
Check Create in SafeCom, a new device dedicated to track only Push
jobs sent to this printer if you want jobs coming from this particular
print queue with a dedicated tracking device.
Check Do not ask again if the choices are to apply in future conversions.
D60603-21
8.
A dialog appears with information about the number of converted
printers. Click OK.
9.
The Continue dialog appears. Make your choices. Click Next.
304
9 SafeCom Tracking
Check No, I have finished setting up printers if you have finished. Click
Next to close the SafeCom Port Configurator.
Check Yes, I’d like to reconfigure more printers for Push printing if you
wish to convert additional printers. Click Next to go to the SafeCom
Tracking dialog described in step 4.
D60603-21
305
9 SafeCom Tracking
9.4.5
Restore to TCP/IP
To restore printers converted to SafeCom Push back to their original TCP/IP
settings:
1.
2.
3.
Start SafeCom Port Configurator (9.4.29.4.2). Click Next.
Check Restore to TCP/IP. Click Next.
The TCP/IP Printer Restore dialog appears with one or more servers,
including Local Machine.
Double-click a server to expand and to show the list of Push printers.
Other types of printers (TCP/IP, Pull, etc) will not appear in the list.
To see all printers on the server press Shift + Click. You will be prompted
to supply a Windows User Name and Password.

Server NOT part of domain
If the server is NOT part of the domain you must supply Windows
User Name and Password of a local administrator on the server.

Server part of domain
If the server is part of a domain and you are already logged into the
domain then you are logged in directly. Otherwise you are asked to
log in. Enter Windows user name and Password. Click Login.
Note: If the windows user running the application has
administrative rights on the clicked print server (or its domain),
then both shared and non-shared (local) printers will be listed.
However, if the user has no elevated rights in the machine (or
domain), then only public (local) Push printers will be listed.
If the server does not appear in the list click Add server…(9.4.3).
D60603-21
306
9 SafeCom Tracking
9.4.6
4.
Check the printers to be restored to TCP/IP. Restore is possible only if
the printer has a Yes in the Restorable column. Click Next.
5.
A dialog appears with information about the number of reverted printers.
Click OK to go to the TCP/IP Printer Restore dialog in step 3.
List and repair printers
The List Printers dialog lists the printers in the domain and enables you to
reconfigure them.
To list printers in the domain:
1.
2.
3.
Start SafeCom Port Configurator (9.4.2). Click Next.
Check List Printers. Click Next.
The List Printers dialog appears. Click on a server to expand it to show
the list of shared TCP/IP, Push and Pull printers.
The List Printers dialog can also be used to identify Push Printers that are not
referencing a valid tracking device (Unknown Device ID).
D60603-21
307
9 SafeCom Tracking
To Repair Push Printer:
1.
2.
3.
Start SafeCom Port Configurator (9.4.2) and click Next.
Check List Printers. Click Next.
Click Repair Push > to repair the push printer.
4.
A dialog appears with information about the number of push printers
fixed. Click OK
Note: The new device will have the Tracking license checked. If the
SafeCom license key code is a permanent one Rule Based Printing,
Client Billing and Pay licenses are checked if there are any spare
licenses. To control use o2
f licenses open the License tab in the Device properties dialog.
D60603-21
308
9 SafeCom Tracking
9.4.7
Read servers from file
SafeCom Port Configurator can read servers from file. This may prove useful in
installations where browsing the domain takes too long due to the number of
servers or where the possibility to browse the domain is limited.
By default the servers are read from the srvlist.csv file located in the SafeCom
Port Configuration installation folder. It is the same file that is used to record
the servers that are added by clicking Add server… (9.4.3)
Example srvlist.csv file, where the first line (Host) is the header:
Host
server1
server2
In the scPortConfigurator.ini file it is possible to control the name of the file
(9.4.8)
[GENERAL]
ExternalServerList_FileName=srvlist.csv
If you wish to remove a server you should open the srvlist.csv file and remove
the row containing the server(s) in question.
9.4.8
scPortConfigurator.ini
An scPortConfigurator.ini file is produced to record information from the
previous SafeCom Port Configurator session, including last used server,
window sizes and column widths.
Settings in the file are added as dialogs are used. Edit selected settings to
customize the behavior of SafeCom Port Configurator. These settings are
covered in the following:







D60603-21
Push port name
Tracking device name
Tracking device settings
Tracking device licenses
Convert to Push dialog
Restore to TCP/IP dialog
List Printers dialog
309
9 SafeCom Tracking
Push port name
The default convention for naming Push ports is similar to the one used by the
Standard TCP/IP port, except that IP_ is replaced by Push_. For example if the
IP address is 172.16.6.123 the default TCP/IP port is named IP_172.16.6.123
and the Push port is named Push_172.16.6.123.
In the scPortConfigurator.ini file this is controlled as follows:
[PortReconfiguration]
NameForNewPort_use_PortType=1
NameForNewPort_use_QueueName=0
NameForNewPort_use_PrinterIP=1
The Push port will inherit the print queue name if the settings are changed to:
[PortReconfiguration]
NameForNewPort_use_PortType=0
NameForNewPort_use_QueueName=1
NameForNewPort_use_PrinterIP=0
Tracking device name
The tracking device in the SafeCom solution will by default inherit the name of
the print queue. For example if the print queue name is myprinter the tracking
device is named myprinter. To include additional information simply change
one or more of the below settings from 0 to 1.
[PortReconfiguration]
NameForNewTrackingDevice_use_QHostName=0
NameForNewTrackingDevice_use_QueueName=1
NameForNewTrackingDevice_use_PrtModel=0
NameForNewTrackingDevice_use_PrtIP=0
NameForNewTrackingDevice_use_PrtLocation=0
NameForNewTrackingDevice_TokenSeparator=' '
D60603-21
310
9 SafeCom Tracking
Tracking device settings
The Settings tab in the Device properties dialog in SafeCom Administrator.
In the following it is described how selected settings from the [CoScum] section
maps to the controls on the Settings tab in the Device properties dialog.
[CoScum]
NewTrackingDevice_Default_DeviceIPAddress=127.0.0.1
NewTrackingDevice_Default_AllowPay=1
NewTrackingDevice_Default_AllowBilling=1
NewTrackingDevice_Default_RBP=1
NewTrackingDevice_Default_AllowPull=1
NewTrackingDevice_Default_AllowEncryption=1
NewTrackingDevice_Default_Duplex=0
NewTrackingDevice_Default_Color=0
NewTrackingDevice_Default_TreeNodeId=0
NewTrackingDevice_Default_DeviceTypeBitmask=2
NewTrackingDevice_Default_ServerId=-1
NewTrackingDevice_Default_DisablePayAndPrint=0
NewTrackingDevice_Default_RestrictedAccess=0
D60603-21
311
9 SafeCom Tracking
MAC is pre-filled if the physical printer is online at the time of creation.
Otherwise it will read 00000000.
ID is the database ID of the tracking device.
Name is for specifying a name for the device (mandatory). This is by default
the name of the print queue, but it can be customized to be composed of for
example the IP address and Model (Tracking Device Name).
Model is for specifying the model and/or manufacturer of the device
(optional). If the physical printer was online at the time of conversion it is prefilled. Otherwise it is left blank.
Home server is present only if SafeCom Multiserver Support is enabled. This
can be controlled at the time of creation by setting
NewTrackingDevice_Default_ServerId. The default is –1.
Org. unit is the organizational unit the device belongs to. The default is 0. The
setting NewTrackingDevice_Default_TreeNodeId does NOT control the ID of the
org. unit.
IP address is pre-filled if the physical printer was online at the time of
creation. Otherwise it will default to the value specified by
NewTrackingDevice_Default_DeviceIPAddress.
Capabilities show a number of checkboxes depending on the device and
SafeCom license key code.
Duplex supported is checked if the printer driver that is associated with the
device supports duplex. The NewTrackingDevice_Default_Duplex is NOT used.
Color supported is checked if the printer driver that is associated with the
device supports color. The NewTrackingDevice_Default_Color setting is NOT
used.
Restricted access.The NewTrackingDevice_Default_RestrictedAccess setting is
NOT used.
Allow Pay user is only available if the server key license allows one or more
Pay devices. The NewTrackingDevice_Default_DisablePayAndPrint is NOT used.
Push print is checked by default.
D60603-21
312
9 SafeCom Tracking
Tracking device licenses
The License tab in the Device properties dialog in SafeCom Administrator.
When a tracking device is added it will always occupy at least a Tracking
license. If the SafeCom license key code is a permanent one and there is
available Rule Based Printing, Client Billing and Pay licenses these are also
taken.
Convert to Push dialog
In the following it is described how the settings from the [PortReconfiguration]
section affects the Convert to Push dialog (9.4.4) and the subsequent
conversion process.
[PortReconfiguration]
Default_Print_if_SafeCom_offline=2
GUIShowOption_Print_if_SafeCom_offline=0
Calculate needed tracking licenses before converting any printer=1
Match_SCDevice_by_IP_if_TCPIP_MAC_unavailable=1
Default_Print_if_SafeCom_offline maps directly to the SafeCom Push Port’s
Windows registry setting PrintOnJdBError. It is recommended to leave it at the
default 2 to use the overall setting AllowPrintOnServerError.
D60603-21
313
9 SafeCom Tracking
GUIShowOption_Print_if_SafeCom_offline can be set to 1 to cause the
inclusion of an additional checkbox in the Push Port Configuration dialog. The
checkbox maps directly to the SafeCom Push Port’s Windows registry setting
PrintOnJdbError. The checkbox can have three labels and states:



If SafeCom offline: Use common registry setting.
This maps to PrintOnJdbError=2.
If SafeCom offline: Don’t print.
This maps to PrintOnJdbError=0.
If SafeCom offline: Allow print.
This maps to PrintOnJdbError=1.
Calculate needed tracking licenses before converting any printer is 1 by
default. By setting it to 0 there is no check to ensure that the SafeCom license
key code includes the required device tracking licenses. Lack of device tracking
licenses will cause print jobs to be cancelled.
Match_SCDevice_by_IP_if_TCPIP_MAC_unavailable is used to control if the
device IP address can be used to determine if the device is already registered
and if the Printer already registered in SafeCom server dialog should appear.
Restore to TCP/IP dialog
In the following it is described how the settings from the [RestoreTCPDialog]
section affects the Restore to TCP/IP dialog (9.4.5) and the subsequent restore
process.
MachinePingTimeOutMS=1000
CtrlClick_opens_remote_queue=1
SNMPWaitTimeoutMS_when_clicking_next=5000
Deserialize remote TCP port on restore=0
List Printers dialog
In the following it is described how the settings from the [PrinterViewDialog]
section affects the List Printers dialog (9.4.6).
Update_scDevices_IP=1
Update_scDevices_MAC=1
Update_scDevices_Location=1
Update_scDevices_Model=1
MachinePingTimeOutMS=1000
D60603-21
314
9 SafeCom Tracking
9.4.9
Troubleshooting
SafeCom Administrator: Unable to locate all SafeCom
servers
The SafeCom Administrator uses broadcasts to locate the SafeCom servers. If
your network is a VLAN (Virtual Local Area Network) then it may prevent the
SafeCom Administrator from locating the SafeCom servers.
To solve the problem you should enter the SafeCom servers’ IP addresses
directly in the list of individual Broadcast addresses on the Network tab in the
Options dialog.
Document is not printed
Check this if the document leaves the print queue as printed:



Is the printer powered on and connected?
Is the printer online?
Is intervention required? Check for:
1)
wrong paper size
2)
manual feed
3)
out of paper
4)
paper jam
5)
toner low

Does the printer driver work with the printer? Test this by using the
Standard TCP/IP port instead of the SafeCom Push Port. If it still fails try
to use a more appropriate printer driver. Another possibility is to test if
the problem is related to a specific application or perhaps version of an
application.
Check this if the document remains in the print queue:

D60603-21
Is the print queue paused?
315
9 SafeCom Tracking
Check this if the document is deleted from the print queue:

Does the SafeCom Event Log contain any event of the type Push print
failed? The event will contain additional details indicating that perhaps
the Tracking device is missing. Open the Configure Push Port dialog and
verify that a SafeCom printer is selected for tracking. SafeCom Port
Configurator can be used to repair the Push printer (9.4.6).

Does the SafeCom Event Log contain any event of the type Push print
failed? The event will contain additional details indicating that perhaps
the cost control of user does not match device, that is, a Pay user is
trying to print on a device that does not have a Pay license.

Does the SafeCom Event Log contain any event of the type Push print
failed? The event will contain additional details indicating perhaps user
credits shortage, that is, the Pay user did not have enough credits.

Is the user subject to SafeCom Rule Based Printing and the rule is causing
the deletion of the document?

Is the user unknown to SafeCom? If SafeCom trace is enabled the
PullPM2kSrv.trc will contain a line with the text:
ExecuteTransaction: Status error [SC_USER_NOT_FOUND].
Document is not tracked




Did the document print?
Is the user set to Cost control Tracking?
Does the device include a Tracking license?
If Client Billing is enabled there is a delay before you can see the tracking
record.
User’s computer: “… Please contact your administrator!”
If there are problems that prevent users from printing documents via SafeCom,
the Messenger Service dialog will appear on the screen.
Typical messages:





Unable to connect to SafeCom server.
There is not enough disk space on the SafeCom server.
Unable to logon to the SafeCom database.
SafeCom license violation.
You are unknown to SafeCom.
The above SafeCom generated messages will appear after any print notification
messages sent by the Windows print subsystem. For this reason we recommend
that you disable notification messages from the Windows print subsystem. On
the Windows server open the Printers folder. On the File menu, click Server
Properties and click the Advanced tab. Refer to online Windows help.
D60603-21
316
9 SafeCom Tracking
9.5
Copy tracking
Copy tracking makes it possible to track copy costs on MFPs. Your SafeCom
license key code must include Copy Control and the MFP must be networked
and in most cases you need a special SafeCom MFP cable. There is a complete
list of supported MFPs in SafeCom Controller Administrator’s Manual D60700.
9.6
Fax, Scan and E-mail tracking
Fax, Scan and E-mail tracking is possible on most MFPs equipped with SafeCom
Go.
9.7
Post track
Post track affects these tracking data for Pull print jobs:

Tracking pages (TrackingPageCount) is adjusted to reflect the actual
number of pull printed pages. If a 100 page document is cancelled after
10 pages the job is only tracked (and priced) as 10 pages.

Color pages (TrackingColorPageCount) is adjusted to reflect the actual
number of pull printed pages with color.

Price 1 (JobPrice) and Price 2 (JobPrice2) are adjusted as well to reflect
the adjustment of Tracking pages and Color pages. See also
12.2.1Accounting policy.

Toner (TonerCyan, TonerMagenta, TonerYellow and TonerBlack) is
tracked. The values are not shown in the Tracking record dialog (9.15.6).
Supported devices and how to enable Post track:
D60603-21

Canon MFPs with SafeCom Go Canon version S88 nnn.010*02 or later. On
the SafeCom Go Canon Configuration web page check Post track and
click Apply.
Canon devices (CPCA protocol v.1 and v.2) connected with a SafeCom
Controller version S80 nnn.750*61 or later. On the SafeCom Controller
Printer web page set Post tracking to YES.

Ricoh MFPs with SafeCom Go Ricoh version S82 nnn.010*19 or later. On
the SafeCom Go Ricoh Configuration web page check Post track and click
Apply.
Ricoh devices connected with SafeCom Controller. On the SafeCom
Controller Printer web page set Post tracking to YES.

HP MFPs and printers with SafeCom Go HP version S89 nnn.030*29 or
later. On the SafeCom Go HP Configuration web page check Post track
and click Apply.

Sharp MFPs with SafeCom Go Sharp version S80 508.780*12 or later. On
the SafeCom Controller Printer web page set Post tracking to YES.
317
9 SafeCom Tracking

D60603-21
Xerox MFPs with SafeCom Go Xerox version S80 508.780*36 or later. On
the SafeCom Controller Printer web page set Post tracking to YES.
Xerox devices connected with SafeCom Controller. On the SafeCom
Controller Printer web page set Post tracking to YES.
318
9 SafeCom Tracking
9.8
Planning your SafeCom Tracking solution
When planning your SafeCom Tracking solution you need to:






9.8.1
Define what the cost of printing should be. This is accomplished via a
charging scheme (9.8.1). Print costs defaults to 0.00 if no charging
scheme is defined.
Set up the server properties to track deleted jobs (9.8.2).
Plan how you will secure the recorded tracking data (9.8.3).
Decide if you wish to use the recorded tracking data for invoicing and/or
auditing (9.8.4).
Control what happens if the tracking server is unavailable (5.7.5).
If your SafeCom solution is a multiserver solution you need to configure if
tracking data should be collected online or offline (9.9).
Defining print costs via charging schemes
The price calculation is defined in a charging scheme. The price calculation is
based on paper size, number of sheets and impressions and possible use of
color. Multiple charging schemes can be created to reflect the varying print
costs of different printer models.
SafeCom supports dual charging schemes; each printer can be associated with
two charging schemes:


Primary charging scheme
The primary charging scheme (Cost 1) is used to charge users and possibly
invoice departments.
Secondary charging scheme
The secondary charging scheme (Cost 2) is used to reflect the true print
costs.
It is recommended to have the Name and/or Description of the charging
scheme reflect if it is a primary or secondary charging scheme.
Sample charging scheme:
Print
Price per job (start-up cost)
Price per page
Paper size
A3
A4
Executive
Letter
Ledger
Other
D60603-21
Sheet
0.10
0.05
0.05
0.05
0.05
0.05
0.20
Impressions
Mono Color
0.20
0.60
0.10
0.30
0.10
0.30
0.10
0.30
0.10
0.30
0.10
0.30
319
9 SafeCom Tracking
Copy
Price per job (start-up cost)
Price per page
Paper size
A3
A4
Executive
Letter
Ledger
Other
Sheet
0.10
0.05
0.05
0.05
0.05
0.05
0.20
Impressions
Mono Color
0.20
0.60
0.10
0.30
0.10
0.30
0.10
0.30
0.10
0.30
0.10
0.30
Fax
Price per job (start-up cost)
Price per page
0.10
0.10
Scan
Price per job (start-up cost)
Price per page
0.10
0.10
E-mail
Price per job (start-up cost)
Price per page
0.10
0.10
How to proceed:
1.
2.
3.
4.
Make a list of all the relevant printer models in your solution.
Calculate the costs for each printer model.
Make a proposal for the charging schemes. The charging schemes may
require approval from higher management.
Use SafeCom Administrator to define the charging schemes (9.11).
Note: Some Windows printer drivers set paper size to “Default”. The SafeCom
solution will map this to “Other”. For this reason you should set the price of
“Other” to the same price as the most commonly used paper size, typically
“A4” or “Letter”.
Note: Some MFPs can only report the number of copied pages and does not
provide information about paper size or use of color and duplex. In such cases
the copy page price is based on the price of “A4”.
D60603-21
320
9 SafeCom Tracking
9.8.2
Track deleted jobs
9.8.3
Backup and restore
This topic is covered in 3.9, where you will also find information about the
Tracking database.
9.8.4
Using tracking data
The tracking data can be exported for further analysis (9.14) and analyzed by
the supplied Data Mining tool (9.15).
As the amount of tracking data will continue to grow it is advisable to delete
tracking data (9.14.2) once it has been exported, perhaps on a monthly or
quarterly basis. During the exporting or deletion of large amount of tracking
data the server may become slow. It is therefore recommended to perform this
out of hours, or at least not during peak hours.
D60603-21
321
9 SafeCom Tracking
The tracking data can also be used to invoice users based on what they have
printed. If you want users to pay up front you should use the SafeCom Pay
module described in chapter 12.
You can utilize the Organizational Unit and/or Description properties of users
to specify their belonging to cost center, division or department. That way you
can invoice the user’s organizational unit.
With the SafeCom Administrator API (option) you can extract tracking data
automatically. This XML-based tool is ideal for system integration with financial
applications. Refer to SafeCom G3 Administrator API Reference Manual
D60822.
9.9
Multiple servers: Online or offline tracking
SafeCom Tracking solutions with multiple servers can be configured to use:

Offline tracking (recommended and set by default)
Tracking data is stored locally on the SafeCom slave server to allow
subsequent scheduled collection by the SafeCom master server.
Scheduling data collection to run at night saves network bandwidth during
daytime.

Online tracking
SafeCom slave servers continuously report tracking data to the SafeCom
master server.
To configure offline tracking:
1.
2.
D60603-21
On the SafeCom master server you need to enable and configure the
scheduled collection of tracking data (9.9.1).
On each SafeCom slave server you need to configure it to use offline
tracking (9.9.2).
322
9 SafeCom Tracking
9.9.1
Configure SafeCom master server
The scheduled collection of tracking data by the master server can take place
on selected weekdays (Monday, Tuesday, … , Sunday) at a specific time or at a
regular predefined interval starting at a specific time. The available intervals
are every 10, 20, or 30 minutes, or every 1, 2, 3, 4, 6, 8 and 12 hours.
1.
2.
3.
D60603-21
On the Servers menu, click Server properties.
Click on the Tracking tab.
Configure the scheduled collection of tracking data. Click OK.
323
9 SafeCom Tracking
9.9.2
D60603-21
Configure SafeCom slave servers
1.
2.
On the Servers menu, click Server properties.
Click on the Tracking tab.
3.
Check Offline. Click OK.
324
9 SafeCom Tracking
9.10
Configuration overview
Before you proceed with the configuration of your SafeCom Tracking solution
you should get an overview of the steps involved:
D60603-21
1.
Install license key code. Use SafeCom Administrator to install your
license key code with tracking enabled.
2.
Create charging schemes. Use SafeCom Administrator to create multiple
charging schemes to reflect the varying print costs of the different printer
models (9.11).
3.
Associate charging scheme with device. Use SafeCom Administrator to
associate a charging scheme with the device (9.11.4).
4.
Change cost control to tracking. Use SafeCom Administrator to change
the user property Cost control to Tracking (9.12).
5.
Work with the tracking data. Use the Data Mining tool to view the
tracking data (9.14).
325
9 SafeCom Tracking
9.11
Charging schemes
In section 9.8.1 we described the concept of charging schemes, dual charging
schemes, and how to set them up. The following subsections describe how to
work with charging schemes in SafeCom Administrator.
9.11.1 Add charging scheme
1.
2.
3.
On the Devices menu, point to Charging schemes and click Add charging
scheme…
The New Charging Scheme dialog appears. Enter prices.
Click Add and then Finish.
Name is the unique name of the charging scheme (mandatory).
Description is an optional description of the charging scheme.
Enter Price per job to charge a Start-up cost per job. Check Subject for job
name pricing if you wish to enable pricing based on job name (12.10).
Enter Price per page in the form of the price for Sheet (paper), Mono
Impression and Color Impression for the paper sizes: A3, A4, Executive, Letter
and Legal. Click Set all to quickly enter a price for all paper sizes. The price
specified in Other is used when the paper size is unknown (or default).
D60603-21
326
9 SafeCom Tracking
Click the Copy tab to specify the prices for copy jobs.
Note: Some MFPs that are unable to provide information about paper size or
use of duplex and color, try to compensate for this lack of detail by reporting
a higher number of copied pages. For example one monochrome A3 page or
one color A4 page is reported as two pages. Or one color A3 page is reported as
4 pages.
D60603-21
327
9 SafeCom Tracking
For selected MFPs it is also possible to charge for fax, scan and e-mail. Click
the Fax+Scan+E-mail tab to specify these prices.
D60603-21
328
9 SafeCom Tracking
Check Show print and copy tab for OLD device to include a Print+Copy tab
for backward compatibility with SafeCom-enabled devices running software
dated before September 2007. Newer SafeCom-enabled devices will continue to
use the prices and settings on the Print+Copy tab as long as all the prices are
set to 0,0000 on the Print and Copy tab of the Primary charging scheme.
Check Charge per page to charge per printed page and paper size. Enter Price
per page for the paper sizes: A3, A4, Executive, Letter and Legal. Click Set all
prices to quickly enter a price for all paper sizes. The price specified in Other
is used when the paper size is unknown (or default).
Check Charge per job to charge per job printed according to the price entered
in Price per job. Check Subject to job name pricing if you wish to enable
pricing based on job name (12.10).
Check Duplex and enter the modifier to use when calculating the discount of
double-sided printing. The modifier is normally between 0,5 and 1.
Check Color and enter the modifier to use when calculating the price of color
impressions on color devices. The modifier is normally greater than 1.
D60603-21
329
9 SafeCom Tracking
9.11.2 Sample charging calculation
Job properties:
5 color pages in paper size A4 and duplex
Price per job = 0.20
Price per sheet A4 = 0.05
Price per color impression A4 = 0.30
Price calculation:
= price per job + price per sheet  number of sheets + price per impression x number of
impressions
= 0.20 + 0.05  3 + 0.30  5
= 0.20 + 0.15 + 1.50
= 1.85
9.11.3 Charging scheme properties
You can see the properties of a charging scheme in the following ways:



Double-click the charging scheme in the Charging scheme list.
On the Devices menu, point to Charging schemes and click Charging
scheme properties…
Open the Device properties dialog and click on the Charging scheme
tab. Click View…
Refer to 9.11.1 for a description of the Charging scheme properties dialog.
D60603-21
330
9 SafeCom Tracking
9.11.4 Associate charging scheme with device
D60603-21
1.
2.
Double-click the device in the Devices list.
The Device properties dialog appears. Click on the Charging scheme tab.
3.
Select a charging scheme as Charging scheme 1 (primary). This is used
to charge users and possibly invoice departments. Optionally select a
charging scheme as Charging scheme 2 (secondary). This is used to
reflect the true print costs. Click OK.
331
9 SafeCom Tracking
9.11.5 Default charging scheme for new devices
A charging scheme can be marked as the default. All new devices will use this
charging scheme by default.
1.
2.
3.
In SafeCom Administrator open the Server properties dialog and click on
the Devices tab.
Check Keep default charging scheme 1 and assign it to auto-created
devices and optionally check Keep default charging scheme 2 and assign
it to auto-created devices.
Click OK.
9.11.6 Delete a charging scheme
Deleting a charging scheme will remove the charging scheme from all the
devices that used it. No charging is done on these devices until you select
another charging scheme.
1.
D60603-21
In the Charging scheme list right-click the charging scheme and select
Delete charging scheme.
332
9 SafeCom Tracking
9.12
Change cost control to tracking
For existing users you must enable Tracking for each user. This is achieved by
checking Tracking on the Settings tab in the User properties dialog of
SafeCom Administrator.
It is possible to change the property of multiple users. Refer to 7.8.
By selecting a Tracking user as the default user you can make any future
imported user, user created at first print and manually added user a Tracking
user.
D60603-21
333
9 SafeCom Tracking
9.13
SafeCom Reports
SafeCom Reports is an optional program that enables viewing of main tracking
statistics, user statistics, device statistics, client billing statistics and job list.
For additional information refer to SafeCom Reports Administrator’s Manual
D60609.
9.13.1 Install SafeCom Reports
1.
2.
3.
4.
5.
Download the software from the link supplied to you.
When the SafeCom Reports Setup Wizard appears click Next.
Choose the destination folder for the SafeCom Report files. Optionally
click Disk Cost… to check the available disk drives for required disk
space. Check Everyone to install SafeCom Reports so everyone who uses
the computer can use it. Click Next.
Click Next to start the installation. A progress bar appears.
Click Close when the installation has completed.
The default installation folder is:
C:\Program Files\SafeCom\SafeCom Reports
9.13.2 Start SafeCom Reports
1.
2.
Click the SafeCom Reports icon on the desktop.
Enter SafeCom Server (IP address or hostname or) or click the SafeCom
Server button to broadcast for available SafeCom servers. Enter User
(default is ADMIN), Password (default is nimda).
Note: If the user belongs to a domain the domain followed by a backslash
(\) must be specified in front of the user’s logon. Example:
MYDOMAIN\JS.
3.
You must have SafeCom Report rights (5.8.4) to log in. Click Login.
9.13.3 Make a report
1.
2.
3.
4.
Once you are logged into SafeCom Reports you will be able to generate a
report. Select a report of in the Report column, for example Application
Usage or Largest Print Users.
Click Extract New Data for Report.
In most reports you need to specify the period in the form of Date of first
record and Date of last record.
Click OK to generate the report. In the Exporting Records dialog you can
monitor the progress as records are being exported.
It is possible to schedule one or more reports using the supplied SafeCom
Reports command line interface. Refer to SafeCom Reports Administrator’s
ManualD60609.
D60603-21
334
9 SafeCom Tracking
9.14
Work with the tracking data
9.14.1 Export tracking data
1.
2.
3.
4.
5.
6.
7.
8.
On the Servers menu, click Tracking data and Export tracking data…
Select the period. A number of predefined periods are available ranging
from Today to 1 year back. Choose Specify period to freely specify the
beginning (from) and finish (to) of the period.
Enter the path and File name of the export file.
You can click Browse… to specify the location of the export file.
Select File format (XML, TXT or CSV).
Select Separator (not needed when using XML). The default value for
separator is taken as the List separator setting on the Numbers tab of
the Regional settings dialog. Use the default setting if you intend to use
Microsoft Excel, since Excel takes its default separator from the same
place and the separators need to match.
Check Launch Datamining if you want to analyze the data right away.
Click OK.
Note: When you export to txt format, two files are created. One is a *.txt (or
*.csv) file, the other is a *.sch file. They are automatically placed in the same
directory when they are created. The *.sch file is used by Administrator’s Data
mining function as a reference file; it tells Administrator how to interpret
each field in the *.txt file. For this reason, you must keep them together in
the same directory when using the files for Data mining.
D60603-21
335
9 SafeCom Tracking
9.14.2 Delete tracking data
You can delete data prior to a given date from the Tracking database. This can
be used to increase the speed of your SafeCom solution; too much data can
slow it down.
1.
2.
3.
4.
5.
6.
7.
D60603-21
On the Servers menu, click Tracking data and Delete tracking data…
All data before Last date is exported to a file and deleted from the
tracking database.
Enter the path and File name of the delete file.
You can click Browse… to specify the location of the export file.
Select File format (XML, TXT or CSV). Do not select CSV if you intend to
Launch Datamining.
Select Separator (not needed when using XML). The default value for
separator is taken as the List separator setting on the Numbers tab of
the Regional settings dialog. Use the default setting if you intend to use
Microsoft Excel, since Excel takes its default separator from the same
place and the separators need to match. In chapter 14 there is a
complete description of the exported tracking data.
Click OK.
336
9 SafeCom Tracking
9.15
SafeCom Data Mining
SafeCom Data Mining enables you to see main tracking statistics, user
statistics, device statistics, billing statistics and job list.
Note: SafeCom Data Mining is designed to handle up to 50,000 tracking
records. Use SafeCom Reports (9.13) to work with more tracking records. The
optional SafeCom Administrator API can be used to export selected fields from
the tracking records. This allows optimized data post processing by third party
applications that can work on the CSV or XML file exported from the SafeCom
solution.
To start SafeCom Data Mining:
1.
2.
Check Launch Datamining when you export tracking data (9.14.1) or
delete tracking data (9.14.2).
The SafeCom Datamining window is displayed (9.15.1).
Using SafeCom Data Mining:
1.
2.
3.
4.
5.
On the File menu click Open.
Find the SafeCom Data Mining File (*.xml or *.txt) containing the data you
want to view. Click Open.
Choose either to view All data or Selecta Period (click Refresh if you
change Period).
Click User Statistics, Device Statistics or Billing statistics tab, according
to the data you want to view.
If you click Options and select Setup…, you can change the following:
You can select whether Completed jobs only, Failed/Interrupted jobs
only or All jobs should be included in the statistics.
Click Refresh to update the view of the exported statistics according to
the changed options.
D60603-21
337
9 SafeCom Tracking
9.15.1 Main tracking
The Main tracking tab gives an overview of the tracking data, including the
ratio between the different job types and use of color and duplex.
Tracking entries shows the number of Completed jobs, Failed/Interrupted
jobs and Total jobs.
Tracking load shows a graphic representation of the number of tracking jobs as
a function of time (the selected period).
Summary lists the Number of jobs, Size of jobs, Number of pages and the
resulting costs as calculated using the primary and secondary charging scheme.
The Pull print ratio, Push print ratio, Copy ratio and Fax/Send/E-mail ratio
are also listed. The Duplex ratio and Color ratio are also shown.
Pull print lists the Number of jobs, Size of jobs, Number of pages and the
resulting costs as calculated using the primary and secondary charging scheme.
Push print lists the Number of jobs, Size of jobs, Number of pages and the
resulting costs as calculated using the primary and secondary charging scheme.
Copy jobs lists the Number of jobs, Size of jobs, Number of pages and the
resulting costs as calculated using the primary and secondary charging scheme.
Fax/Scan/E-mail lists the Number of jobs, Size of jobs, Number of pages and
the resulting costs as calculated using the primary and secondary charging
scheme. You can track Fax, Scan and E-mail on devices with SafeCom Go
installed.
D60603-21
338
9 SafeCom Tracking
9.15.2 User statistics
The User statistics tab lists the recorded tracking data summarized on a
per-user basis. The following columns are available: User logon, Full name,
Description, Jobs, Pages and Cost.



D60603-21
Click on the Pages header to sort and find who has been producing most
pages using the printers and MFPs for the specified period.
Click on the Cost header to sort and find who has been spending most
credits using the printers and MFPs for the specified period. The listed
cost is the cost calculated using the primary charging scheme.
Click the selected user to open the Statistics dialog with more detailed
statistics, including cost calculated using the secondary charging scheme.
339
9 SafeCom Tracking
9.15.3 Device statistics
The Devices statistics tab lists the recorded tracking data summarized on a
per-device basis. The following columns are available: Device name, Model,
Location, Copy pages, Print pages and Cost.




D60603-21
Click on the Print pages header to sort and find which device has been
printing most pages for the specified period.
Click on the Copy pages header to sort and find which device has been
copying most pages for the specified period.
Click on the Cost header to sort and find which device has been producing
most for the specified period. The listed cost is the cost calculated using
the primary charging scheme.
Click the selected device to open the Statistics dialog with more detailed
statistics, including cost calculated using the secondary charging scheme.
340
9 SafeCom Tracking
9.15.4 Billing statistics
The Billing statistics tab lists the recorded tracking data summarized on a perbilling code basis. The following columns are available: Billing code,
Description, Invoice, Jobs, Pages and Cost.



D60603-21
Click on the Pages header to sort and find who has been producing most
pages using the printers and MFPs for the specified period.
Click on the Cost header to sort and find who has been spending most
credits using the printers and MFPs for the specified period. The listed
cost is the cost calculated using the primary charging scheme.
Click the selected billing code to open the Statistics dialog with more
detailed statistics, including cost calculated using the secondary charging
scheme.
341
9 SafeCom Tracking
9.15.5 Job list
The Job list tab lists the recorded tracking data on a per-job basis. The
following columns are available: Date, User logon, Job name, Device name,
Pages and Cost.




D60603-21
Click on the User logon header to sort and find the jobs produced by user
for the specified period.
Click on the Device name header to sort and find the jobs produced by
device for the specified period.
Click on the Cost header to sort and find which job is the most expensive
for the specified period. The listed cost is the cost calculated using the
primary charging scheme.
Click the selected job to open the Tracking record dialog (9.15.6) with
more detailed information, including cost calculated using the secondary
charging scheme.
342
9 SafeCom Tracking
9.15.6 Tracking record dialog
The Tracking record dialog appears when you click on a job in the job list
(9.15.5).
D60603-21
343
9 SafeCom Tracking
The tables in the following lists the subset of tracking record fields displayed in
the Tracking record dialog. The records are grouped around:






Job
User
Device
Page count
Cost
Miscellaneous
The corresponding XML tag is also listed and can be used to reference the
tracking format as described with all fields in section 14.3. A ‘+’ indicates the
field is relevant for the listed job. A ‘-’ indicates the field is not relevant for
the listed job.
Job
Name
<JobName>
Generated
<JobDate>
Size
<JobSize>
Paper
<JobPageFormat>
Duplex
<JobIsDuplex>
Color
<JobIsColor>
Driver
<DriverName>
Type
<JobType>
Destination
<JobDestination>
User
ID
<UserID>
User logon
<UserLogon>
Full name
<FullName>
Description
<Description>
Cost code
<UserCostCode>
D60603-21
PUSH
PULL
COPY
SCAN
EMAIL
FAX
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
+
+
+
+
+
+
-
-
-
+
+
+
PUSH
PULL
COPY
SCAN
EMAIL
FAX
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
344
9 SafeCom Tracking
Device
ID
<DeviceID>
Name
<DeviceName>
Model
<DeviceModel>
Location
<DeviceLocation>
Duplex
<DeviceSupportsDuplex>
Color
<DeviceSupportsColor>
MAC
<DeviceMac>
Page count
Tracking state
<TrackingState>
Tracking pages
<TrackingPageCount>
Driver pages
<DriverPageCount>
Parser pages
<ParserPageCount>
Color pages
<TrackingColorPageCount>
Sheets
<JobSheetCount>
Cost
Price 1
<JobPrice>
Price 2
<JobPrice2>
Miscellaneous
Start time
<StartDate>
End time
<StopDate>
Print queue
<PMQueueName>
Print computer
<PMComputerName>
D60603-21
PUSH
PULL
COPY
SCAN
EMAIL
FAX
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
PUSH
PULL
COPY
SCAN
EMAIL
FAX
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
+
+
-
-
-
-
+
+
+
+
+
+
+
+
+
-
-
-
PUSH
PULL
COPY
SCAN
EMAIL
FAX
+
+
+
+
+
+
+
+
+
+
+
+
PUSH
PULL
COPY
SCAN
EMAIL
FAX
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
+
+
-
-
-
-
345
9 SafeCom Tracking
9.16
Update scParser.dll
The component scParser.dll is responsible for parsing the print data stream. If a
new version is made available to you, you should follow the steps below to
update.
Note: On Windows 64-bit the file is named scParser64.dll.
1.
Backup the existing file scParser.dll from the SafeCom installation folder.
The default is:
C:\Program Files\SafeCom\SafeComG3\
2.
3.
Stop the SafeCom Service and the Print Spooler.
Copy scParser.dll to the SafeCom installation folder. Default is:
C:\Program Files\SafeCom\SafeComG3\
4.
D60603-21
Start the SafeCom Service and Print Spooler.
346
10 SafeCom Rule Based Printing (RBP)
10
SafeCom Rule Based Printing (RBP)
10.1
Introduction
The Rule Based Printing module makes it possible to gain cost savings by
offering management a method of enforcing policies for printing.
The policies are formulated as one or more rules. Rules are assigned to groups
of users. It is possible to construct rules like:




Only color jobs can be printed on color devices.
Print e-mail as b/w and with toner save.
Color print is not allowed.
Allow color print, but warn that color printing is more expensive.
Disclaimer:
o
SafeCom Rule Based Printing needs to modify the print data stream to
control: Duplex on/off, Toner save on/off and Force job to b/w. SafeCom
does NOT guarantee that these modifications will work and cannot be
held responsible if they do not work as expected.
SafeCom Rule Based Printing has been tested against PCL5, PCL5c, PCL5e,
PCL6, PCL XL and PostScript level 2 and 3 printer drivers from HP using a
broad range of HP LaserJets.
10.2
Planning your SafeCom RBP solution
When planning your SafeCom Rule Based Printing solution you need to:






D60603-21
Organize users into groups, as rules apply to groups rather than individual
users. A user can be a member of multiple groups and is subject to all
rules of the groups he is a member of.
Create the rules enforcing the policies (10.3).
Run the scPopUp.exe program on the user’s computer if the rule to notify
the user runs on the user’s computer (4.14).
Test all new rules using the available printer drivers and printers to
ensure that the outcome is as expected before applying the rules on a
large scale. Section 10.5 includes some troubleshooting hints.
Select the rules to use on the different groups (10.4).
Make sure your license covers tracking (4.9.4) and that relevant users’
cost control is set to either Tracking or Pay (5.8.2).
347
10 SafeCom Rule Based Printing (RBP)
10.3
Creating the rules
Select the conditions, actions and notification to make up and create a rule.
D60603-21
1.
On the Servers menu click Rule Based Printing… to open the Rule Based
Printing dialog.
2.
Click Add to create a new rule.
348
10 SafeCom Rule Based Printing (RBP)
3.
On the Conditions tab double-click a condition to apply it. If no
conditions are applied the rule will always apply (unconditional). Multiple
conditions can be applied. Remove an applied condition by selecting it
and then click the left arrow.
Available Conditions:







D60603-21
Device [does | does not] support color
Allows you to choose if the rule should apply when printing on a
device with color capabilities.
Device location contains “specific text”
Device location does not contain “specific text”
Allows you to specify a text that will be used for case insensitive
matching based on the device location.
Device model contains “specific text”
Device model does not contain “specific text”
Allows you to specify a text that will be used for case insensitive
matching based on the device model.
Device name contains “specific text”
Device name does not contain “specific text”
Allows you to specify a text that will be used for case insensitive
matching based on the device name.
Job color mode is [b/w | color]
Allows you to choose if the rule should apply to a b/w or color job.
Job driver name contains “specific text”
Job driver name does not contain “specific text”
Allows you to specify a text that will be used for case insensitive
matching based on the job driver name.
Job name contains “specific text”
Job name does not contain “specific text”
Allows you to specify a text that will be used for case insensitive
matching based on the job name. Jobs printed from Microsoft
Internet Explorer and other browsers typically include the text
string “http”. Section 10.6 gives more examples on how the job
name can be used to determine the application.
349
10 SafeCom Rule Based Printing (RBP)




Job page count larger than “number”
Allows you to specify a larger than page count.
Job page count less than “number”
Allows you to specify a less than page count.
Job size larger than “number” KB
Allows you to specify a larger than job size in kilobytes.
Job size less than “number” KB
Allows you to specify a less than page job size in kilobytes.
Note: The “specific text” is used for case insensitive matching. There is
NO support for wildcard syntax, such as use of * and ?.
D60603-21
350
10 SafeCom Rule Based Printing (RBP)
4.
On the Actions tab double-click an action to apply it. If no actions are
applied there is no action to the rule. Multiple actions can be applied.
Remove an applied action by selecting it and then click the left arrow.
Available actions:






D60603-21
Confirm pull job. Message: “text”
When Pull Printing, a popup dialog will appear with the configured
message text (max 100 characters). The user can click OK to print
or Cancel. One <%pages%> and one <%price%> tag can be included in
the text and will be replaced with the number of pages and the
price of the job. Requires use of SafeCom PopUp (4.14). Details
about the calculation of the price based on charging scheme are in
section 9.8.1.
Confirm push job. Message: “text”
When Push Printing, a popup dialog will appear with the configured
message text (max 100 characters). The user can click OK to print
or Cancel. One <%pages%> and one <%price%> tag can be included in
the text and will be replaced with the number of pages and the
price of the job. Requires use of SafeCom PopUp (4.14).
Delete job
The job is deleted.
Duplex on/off
The print data is modified to get double-sided print. To avoid 1page documents from using the duplexer it is recommended to
combine include the condition: Job page count larger than 1.
Force job to b/w
The print data is modified to force job to b/w.
Hide pull print job
The job will not appear on the Pull Print list of documents.
Typically combined with the conditions Device supports color and
Job color mode is color to ensure that only color jobs can be Pull
printed on color devices. If the job is Push Print it is deleted.
351
10 SafeCom Rule Based Printing (RBP)



D60603-21
Redirect to queue “name”
This action applies to Push Print only. The print job will be
redirected to the specified destination. Normally the destination is
in the form of a printer’s IP address or hostname. However, it is
also possible to redirect to another print queue by for example
entering the share name: Example \\SERVER\Printer. If you redirect
to a print queue that uses the SafeCom Push Port the print job is
tracked again.
Redirect to user “logon”
This action applies to Pull Print only. The print job is redirected and
stored under the specified user logon. Redirecting to a Group name
is not supported.
Toner save on/off
The print data stream is modified to enable toner save (Economode
on b/w HP LaserJets).
352
10 SafeCom Rule Based Printing (RBP)
5.
On the Notification tab check the notification method you want to use
and enter the notification message. It is possible to refrain from selecting
any of the notification methods to have the rule execute behind the
scenes (silently).
The notification message text does NOT support use of tags like
<%pages%> and <%price%>. If you require use of these tags then please use
the Action: Confirm Pull job or Confirm Push job.
The notification will only occur if a notification message text is specified.
Notify by:



D60603-21
PopUp
A popup dialog with a configurable message will appear on the
user’s computer explaining that the rule has been executed. No
client installation is required (4.14).
E-mail
The user receives an e-mail with a configurable message explaining
that the rule has been executed.
Log file
This should only be used during testing. The SafeCom event log will
list that the rule was applied. Refer to information about the event
log in 3.8.1.
353
10 SafeCom Rule Based Printing (RBP)
6.
D60603-21
On the Rule description tab enter a meaningful Rule name to identify
the rule. Click OK.
354
10 SafeCom Rule Based Printing (RBP)
10.4
D60603-21
Select rules to be used on group
1.
2.
3.
Click on the Groups icon
in the Server groups pane.
Click on a group in the Group list to open the Group properties dialog.
Click on the Rules tab.
4.
5.
Check the rules you want to be used on the group.
Click Apply and then Close.
355
10 SafeCom Rule Based Printing (RBP)
10.5
What if the rule does not work?
Go through the below troubleshooting hints if the rule does not work:

Identify the rules
Verify that the rule is indeed to be executed. You can do this by looking
at the Member of tab in the User properties dialog to determine which
groups the user is a member of. Next you should look at the Rules tab in
the respective Group properties dialog to see which rules are selected.

Print data stream compatibility
If the rule requires customization of the print data stream it may be that
the print data stream is not PCL5, PCL5c, PCL5e, PCL6, PCL XL or
PostScript level 2 or 3.

Printer driver compatibility
Even if the print data stream is indeed supported it may be driver/printer
specific to a level that is not supported by the current SafeCom Rule
Based Printing. In this case you should refrain from using the rule.
Feedback wanted: We would be very grateful if you could send an e-mail to
[email protected] with the technical details, including information about
the printer model, printer firmware version, driver, driver version, description
of rule and document you are printing.
10.6
How to determine the application
Many customers want to define rules based on the application. The application
can in most cases be determined by using the condition: Job name contains
“specific text”
The table below contains suggested texts to use for popular applications.
Application
Adobe
Microsoft Excel
Microsoft Outlook
Microsoft PowerPoint
Microsoft Word
Notepad
Plain text files
Windows Internet Explorer
Windows Test Page
Specific text
.pdf
.xls
Microsoft Outlook
outbind://
Microsoft PowerPoint
Microsoft Word
Notepad
.txt
http
Test Page
Note: E-mails printed from Lotus Notes will have the same job name as the
subject of the e-mail. It is therefore NOT possible to use the job name to
determine that it’s the Lotus Notes application.
D60603-21
356
10 SafeCom Rule Based Printing (RBP)
10.7
Update scRuleExecuter.dll
The component scRuleExecuter.dll is responsible for modifying the print data
stream. If a new version is made available to you, you should follow the steps
below to update.
Note: On Windows 64-bit the file is named scRuleExecuter64.dll.
1.
Backup the existing file scRuleExecuter.dll from the SafeCom installation
folder. The default is:
C:\Program Files\SafeCom\SafeComG3\
2.
3.
Stop the SafeCom Service and the Print Spooler.
Copy scRuleExecuter.dll to the SafeCom installation folder. Default is:
C:\Program Files\SafeCom\SafeComG3\
4.
D60603-21
Start the SafeCom Service and Print Spooler.
357
11 SafeCom Client Billing
11
SafeCom Client Billing
11.1
Introduction
The Client Billing module makes it possible to register billing codes with any
job that is tracked by the SafeCom solution. The billing data can be exported
and used for further analysis.
Users can specify billing codes in the following three ways:

At print submission
A billing code can be specified when submitting a job for either Pull or
Push print. When a billing code is added at print submission for a Pull
print it is preserved and cannot be overridden by a new billing code
selected at the device.
Note: For billing codes to be selectable at print submission time SafeCom
PopUp (4.14) MUST be running on the user’s computer and SafeCom
Application Print (4.4) MUST be installed on the server hosting the
shared printer or on the computer if printer is a local.

At the device
On selected SafeCom-enabled MFPs the billing code can be selected with
any job that is tracked by SafeCom. The user can select from a list of
specified, favorite billing codes and the last 10 billing codes used.

Via web interface
Via SafeCom G3 Web Interface users can specify billing codes on their
print jobs, if this is done before the elapsed time. Also, the users can
change billing codes specified earlier.
How users perform typical tasks related to client billing is covered in SafeCom
G3 Client Billing User’s Guide D60627.
D60603-21
358
11 SafeCom Client Billing
11.1.1 Manage billing codes
Managing billing codes involves these administrator tasks:

Import billing codes into the SafeCom solution
Billing codes can be imported either on a scheduled basis or added
manually through the SafeCom Administrator or SafeCom API. Refer to
SafeCom G3 Administrator API Reference Manual D60822-02.

Assign favorite billing codes to users and/or user groups
To control which billing codes a user can choose from on print jobs, the
administrator can create a predefined list, Favorite billing codes, for each
user.
The administrator can create these predefined lists of billing codes either
through the SafeCom Administrator or the SafeCom API. Using the
SafeCom API enables system integration and limits the manual labor
involved in managing billing codes.
Utilizing the SafeCom G3 Web Interface, users can be allowed to build
and manage their own list of favorite billing codes. This reduces the
administrative overhead, but it requires that the administrator can rely
on user’s honesty and ability to select the appropriate billing code for the
jobs they perform.
11.1.2 Plan your SafeCom Client Billing solution
When planning your SafeCom Client Billing solution you need to:
D60603-21

Plan and configure SafeCom Tracking as SafeCom Client Billing relies on
that. Consult chapter 9 on how to plan (9.8) and configure (9.10) SafeCom
Tracking.

Decide where to install the SafeCom G3 Web Interface and how users
should authenticate themselves to see the SafeCom Client Billing web
page. Refer to SafeCom G3 Web Interface Administrator’s Manual
D60604.

Decide if client billing should be done using one- or two-level codes. For
two-level codes the billing code is consists of a primary (Client) code and
secondary (Matter) code.

Decide if billing codes should be imported on a scheduled basis.

Decide the elapse time before billing codes are committed to tracking
data. During this period of time users can select and change billing codes
on the SafeCom Client Billing web page.

Schedule and prepare training of users on how to select billing codes for
jobs.
359
11 SafeCom Client Billing
11.2
Configuration overview
Pre-requisites:

Configure SafeCom Tracking. Refer to section 9.8, 9.9 and 9.10.

Install the SafeCom G3 Web Interface. Refer to SafeCom G3 Web
Interface Administrator’s Manual D60604.
Before proceeding to the configuration of the SafeCom Client Billing solution
you should get an overview of the steps involved:
D60603-21
1.
Configure SafeCom Client Billing (11.3)
2.
Add the billing codes into the SafeCom solution.
Import billing codes automatically (11.4). Add one-level billing codes
(11.7 ) and two-level billing codes (11.8) manually.
3.
Assign favorite billing codes to users and/or user groups.
Select favorite billing codes for a user (5.8.9).
Select favorite billing codes for a group (5.13.7).
4.
Allow users to select billing codes on print jobs (11.5).
5.
Edit the reminder template so it references the SafeCom G3 Web
Interface, that is, the Billing web page (11.6).
6.
Work with the tracking data. Use the Data Mining tool to view the
tracking data (9.15).
360
11 SafeCom Client Billing
11.3
Configure SafeCom Client Billing
In this section the following setups are described:


Configure the billing codes and how they are displayed for the users
Set the elapse time before billing codes are committed to tracking
To configure the billing codes in SafeCom Client Billing:
1.
2.
D60603-21
In the SafeCom Administrator, click on the Servers menu and choose
Server properties.
Click on the Billing tab.
361
11 SafeCom Client Billing
3.
If you are working with one-level billing codes, enter a Primary code that
coincides with terms use within your organization.
Or
Check Secondary code in order to use2-level billing codes, composed of a
primary (Client) code and secondary (Matter) code. Enter the
codes(Client code and Matter code) to match the terms used within your
organization.
4.
Configure how the codes should be displayed to the user at the printer, or
on the SafeCom Web Interface.
a.
b.
c.
Under Display format, specify the field order of Primary code and
Primary description, and of the Secondary code and Secondary
description. You can choose not to display all by choosing <None>.
For example, select Primary code in the first drop-down, and then
Secondary code in the second drop-down. In the third drop-down,
you can choose <None>and nothing else will be displayed.
Under Size, set the field abbreviation value to a number between 0
and 50. The number indicates the number of characters (including
the separators) that will be displayed of the text. 0 indicates that
the text should not be abbreviated.
Specify the type of separator you want to use. Three periods (…) are
added to the displayed text to indicate that it is abbreviated. See
the following examples.
Example 1:
Two-level code with default order of fields, comma as separator and an
abbreviation of descriptions to 12 characters.
0123,Ajax Interna…,4567,Project Mana…
Example 2:
Two-level without separator and without abbreviation, but with primary
code and secondary code first followed by the corresponding descriptions.
01234567Ajax InternationalProject Management
D60603-21
362
11 SafeCom Client Billing
4.
Check Store tracking data temporarily to allow users to apply billing
codes. Specify the period where the users can still modify billing codes to
a job already sent. After this period of time has passed, the billing data is
committed and moved to the tracking data.
Note: In a multiserver environment, tracking data within the billing
window will not be collected by the master server.
11.4
5.
Specify under Commit billing records how often you want to move billing
records to tracking data.
6.
Click OK. Once this is done you will see the tracking records and selected
billing codes when you export tracking data (9.14).
Import billing codes
In this chapter the import of billing codes is covered. The import is completed
via a wizard that takes you through the necessary steps.
The import file with billing codes MUST be a CSV file, saved as a *.txt file.
The following are examples of a one-level and two-level CSV file, where the
first line is a header. The billable field can be 0 (not billable) or 1
(billable).The billing code and the billing code description can each consist of
maximum 50 characters.
Note: You do not get a notification if the billing code or description exceeds
the allowed number of characters.
One-level billing code
Code;Description;Billable
10102;Human Resources;0
10103;Acme Project;1
Two-level billing code
Code1;Description1;Code2;Description2;Billable
1;United States;002;Athletics;1
1;United States;004;Basketball;1
1;United States;011;Modern pentathlon;0
44;United Kingdom;002;Athletics;1
44;United Kingdom;008;Football;1
44;United Kingdom;011;Modern pentathlon;0
45;Denmark;008;Football;1
45;Denmark;011;Modern pentathlon;0
46;Sweden;002;Athletics;1
46;Sweden;008;Football;1
D60603-21
363
11 SafeCom Client Billing
To open the Billing codes import configuration wizard follow these steps:
D60603-21
1.
On the Servers menu, click Client Billing and Import billing codes…
2.
To schedule a new import of billing codes, click Add.
3.
Enter Server address (hostname or IP address), User logon with
administrator rights and Password. In a multiserver installation you
should specify the master server for best performance. Click Next.
364
11 SafeCom Client Billing
4.
Click Next to select the CVS file you want to import billing codes from.
The content of the file has to be structured as a CSV file. (See examples
11.4)

When run by SafeCom Server: Specify the path to the file to import
billing codes from in a scheduled import. The file name must be
specified with full path as seen from the SafeCom server and the
account that runs the SafeCom Service (normally the Local System
account) must have read access to the CSV file.

Same as server filename: Uncheck if you want to use a different CSV
file for an immediate billing code import (Run now functionality).
Specify the path to the file to import billing codes from in the When
run locally from SafeCom Administrator.
Note: The CSV file MUST be a *.txt file. When browsing remember to
select All files, so that the *.txt files are visible.
5.
Click Next to specify the format of the CSV file that you want to import
from.
Indicate with numbers from which location in the CSV file the values
should be retrieved. Leave a field value of 0 to avoid import from the
specific location.
If you are working with two-level billing codes you will need to specify
the location for primary code and primary description, as well as
secondary code and secondary description.
D60603-21
365
11 SafeCom Client Billing
If the first line in the CSV file is a header, you need to check First line in
file is a header. Then the specific name of the location rather than the
number needs to be specified.
If two-level billing codes are used the dialog will look like the following:
Note: The field names are case insensitive.
7.
D60603-21
Now specify in the field Separator character the separator used in the
CSV file (default is semicolon.) Click Next.
366
11 SafeCom Client Billing
8.
Check the options as required according to descriptions below.





9.
D60603-21
Add billing codes: This will import all billing codes in the file.
Modify billing codes: This will modify any existing billing codes
according to the imported values.
Delete billing codes: This deletes existing billing codes that do not
appear in the import file.
Max difference: Use this to control if an import should be cancelled
if the difference between the imported file and the existing billing
codes are too big. A value of 0 (zero percent) will cause the import
to take place regardless to the difference in percentage.
Use extra configuration: If a special billing code import module has
been supplied you should check this check box and enter the
configuration according to the supplied instructions.
Click Next.
367
11 SafeCom Client Billing
10.
In the Scheduled billing code import dialog, select the schedule option
according to descriptions below.

Name: Specify a name for the import.

Manual: The import must be run manually.

One time only: Specify the Start date and Time for the import and it
is run only once at that specific time.

Daily: Specify the Start date and Time for the import and how often
you want to perform this task.
o
Every1, 2, 4, 6, 12, or 24 hour. The import will start running
from the specified start time.
o
Weekdays. The import will run once a day, Monday through
Friday, at the specified time.
o
Every 1, 2, 3 etc. day. The import will start running at the
specified time.
If needed, specify the End date as well.

Weekly: Specify the Start date and Time for the import and how
often you want to perform this task on a weekly basis. Also select
the days of the week, where you want the import to run, and if
needed the End date.

Monthly: Specify the Start date and Time for the import and how
often you want to perform this task on a monthly basis. Also select
the specific months of the year, where you want to import to run,
and if needed the End date.
Note: If an End date is specified, the import task will be deactivated by
midnight on the date specified.
D60603-21
368
11 SafeCom Client Billing
11.
Click Finish and the billing schedule now appear in the Billing Import
dialog from where you can choose Edit, Delete or run the billing code
schedule now.
To run the billing import immediately:
1.
2.
3.
Select the billing code schedule in the list.
Click Run now.
When the import has finished successfully, the following dialog opens.
Click Show log in order to see the import log.
Once the import is run and the billing codes imported, they can be viewed in
the Manage billing codes dialog (see 11.7), and also be added as favorites for
specific users in the User properties (5.8.9).
To see the billing codes in the Manage billing codes dialog:
1.
2.
D60603-21
Click Servers, Client billing and then Manage billing codes.
To refresh the dialog, click the green refresh button in the top right
corner or click Find and then Yes to retrieve all billing codes.
369
11 SafeCom Client Billing
The following screenshot shows the Manage billing codes dialog, when working
with two-level billing codes.
D60603-21
370
11 SafeCom Client Billing
11.4.1 Billing code import log file
During the import, a log file is created with information about the input
parameters, RunTime messages, and the statistics for the import of billing
codes. The statistics include the number of billing codes added, modified, and
deleted during the import.
The log file is named <Billingyyyymmddhhmmss.log>:






yyyy specifies the year
mm specifies the month
dd specifies the day
hh specifies the hour
mm specifies the minutes
ss specifies the seconds
The log file is stored in the logfiles folder below the SafeCom G3 installation
folder. The default folder is:
C:\Program Files\
SafeCom\SafeComG3\logfiles
On Windows 64-bit:
C:\Program Files (x86)\
SafeCom\SafeComG3\logfiles
If the same billing code exists twice in the same import file, the following
RunTime message appears.

Not able to add Billing code <BillingCode>. cc = 131
This means that the billing code is added, but only once.
D60603-21
371
11 SafeCom Client Billing
11.5
Set up users to use billing codes
For users to be able to use billing codes, this must be set up on the User
properties.
1.
2.
3.
4.
5.
6.
32
D60603-21
Open the User properties by double-click on a specific user in SafeCom
Administrator.
Click the Settings tab.
Make sure that either Tracking or Pay32is selected under Cost control.
Check the Bill clients for cost under Print documents.
Check Restrict choice of billing codes if the user only should be able to
select from the billing codes on the predefined list of Favorite billing
codes. If Restrict choice of billing codes is not checked, then the user
can use the SafeCom G3 Web Interface to add and delete billing codes to
the list of Favorite billing codes.
Click OK.
A Pay user is not charged for the job if a billing code is selected.
372
11 SafeCom Client Billing
Note: When importing users, you can specify that the settings from the
Default user should be applied to the imported users. This could for example
be the Bill clients for cost parameter if this is set up on the Default user.
The following describes how Tracking and Pay affects billing:
 If the user is set to Tracking and Bill clients for cost and only has one
Favorite billing code, then that one billing code will be used when
printing. In order not to use that billing code the user must access the
Account icon on the printer and press No billing.
 If the user is set to Tracking and Bill clients for cost and if the user has
more than one Favorite billing code, then the user must choose the
specific billing code by pressing the Account icon on the printer.
Otherwise the print job is not billed.
 If the user is set to Pay and Bill clients for cost then the user must choose a
billing code at the printer by pressing the Account icon. Otherwise the
print job is not billed and the user is charged for the job.
 If a billing code is added at print submission time it is preserved and not
overridden by for example a billing code selected at the device.
To change the Bill clients for cost property of multiple users:
1.
2.
Use Find users (7.6) to get a list of relevant users.
Do one of the following:



D60603-21
To select consecutive users, click the first user, press and hold
down SHIFT, and then click the last user.
To select nonconsecutive users, press and hold down CTRL, and
then click each user.
To select all the users in the window, press CTRL+A.
3.
Open the User properties by pressing ALT+ENTER or right-click the
selected user(s) and select User properties.
4.
Click the Settings tab and make the changes as described above.
373
11 SafeCom Client Billing
11.5.1 Add favorite billing codes for a user
When a user selects a billing code to a print job, the user can choose a billing
code from a list of 10 last used billing codes or from the Favorite billing codes
list.
The list of Favorite billing codes is a list of the billing codes that are relevant to
a specific user or group. This is set up in the SafeCom Administrator, but in
some cases users can select the favorite billing codes themselves via the
SafeCom Web Interface.
In the SafeCom Administrator, favorite billing codes can be applied to a specific
user or user group.
To add favorite billing codes to a user:
1.
2.
D60603-21
Open the User properties for on a specific user in SafeCom
Administrator.
Click the Billing tab.
374
11 SafeCom Client Billing
3.
In the drop-down menu under Add billing code favorite select the billing
code that you want to add and click Add.
The billing code is now listed under Billing code favorites, with the Source
column specified as User. The list also shows the billing code favorites that are
added to groups that the user is a member of. These are specified with Group
in the Source column.
Note: A users billing code favorites are replicated to all slave servers which
means, that a user is still able to view and use the favorite billing codes even
if the home server is changed. This does not apply to Last used billing codes.
(To see what elements are replicated between slave servers, see 4.6.4)
A favorite billing code can be removed again from the list if you select it and
then click Delete.
Note: On the User properties dialog it is not possible to delete group favorite
billing codes. This must be done from the Group properties dialog (5.13.7).
11.5.2 Select favorite billing codes for a group
Favorite billing codes can also be added to groups.
D60603-21
1.
2.
Open the Group properties dialog (5.13.2).
Click on the Billing menu.
3.
4.
Select a billing code under Add billing code favorite and click Add.
Click OK.
375
11 SafeCom Client Billing
The group billing code favorite can be removed from the list if you select it and
click Delete.
11.6
Edit the template for billing reminder
If the user has enabled the Reminder on the SafeCom web interface, an e-mail
is sent to remind the user about selected billing codes to the print job. The
user can set up the e-mail to be sent either:
a)
b)
As soon as a job completes
When the specified number of jobs has been completed.
This is set up in the SafeCom web interface as well.
The e-mail is based on the EmailBilling.txt template which is located in the
%SafeCom%\Templates folder. The %SafeCom% indicates the SafeCom
installation folder, normally:
C:\Program Files\
SafeCom\SafeComG3
On Windows 64-bit:
C:\Program Files (x86)\
SafeCom\SafeComG3
The e-mail template looks as follows:
EmailBilling.txt
<%SUBJECT="[SafeCom] Billing notification"%>
This mail is to inform you that
you now have <%BILLINGJOBS%> jobs that require
your choice of billing code.
Click the link below to go to the billing web page:
<%BILLINGLINK HOST="http://safecomserver/safecom/"%>
www.safecom.eu.
In order to use the e-mail template the following steps must be completed:
1.
2.
3.
4.
D60603-21
Open the EmailBilling.txt file in an editor such as Notepad.
Replace the http://safecomserver/safecom/ link with the link to
the server that hosts the SafeCom G3 web interface.
Refer to SafeCom G3 Web Interface Administrator’s Manual D60604
Customize or translate the message to accommodate the users.
Save the file into the %SafeCom% folder. If you leave it in the
%SafeCom%\Templates folder it will not take effect.
376
11 SafeCom Client Billing
11.7
Manage 1-level billing code
In the following section it is covered how to manage one-level billing codes. In
the Manage billing codes dialog it is possible to:




Add billing codes
Find billing codes
Delete billing codes
Modify billing codes
Note: In order to manage one-level billing codes, it must be configured on the
Server properties, Billing tab. The Secondary code check box must be
cleared.
11.7.1 Add billing code
To add billing codes manually from the SafeCom Administrator:
1.
D60603-21
Click the Servers menu, click Client billing, and then open the Manage
billing codes.
377
11 SafeCom Client Billing
2.
Click Add…to add a new billing code.
3.
4.
Enter Code and Description in the New billing code dialog.
The new billing code is billable by default, so clear Billable if you do not
want it to be billable.
Click OK, and the billing code can now be viewed in the Manage billing
codes dialog.
5.
11.7.2 Find billing codes
1.
2.
Open the Manage billing code dialog
Enter the search text in the Find field and click Find. If the search field
is left empty all billing codes are retrieved.
Note: The find function is using case insensitive free text search across both
the code and description fields.
11.7.3 Delete billing codes
1.
2.
3.
In the Manage billing code dialog use the Find function to retrieve all
relevant billing codes.
Select the billing codes and click Delete…
Click Yes in the Confirm dialog to delete the billing code.
Note: If a user selects a billing code for a print job at the computer, and if
then the billing code is deleted from SafeCom before the user collects the
print job the printer, the billing code for the print job is not remembered. The
billing information is then replaced by N/A.
11.7.4 Modify billing codes
1.
2.
3.
4.
In the Manage billing code dialog use the Find function to retrieve the
relevant billing codes.
Select the billing code you want to modify and click Modify…
Modify Description and Billable as required.
Click OK.
Note: You cannot modify the Code for the billing code, only the Description
and whether it needs to be billable or not. This applies to both imported and
manually created billing codes.
D60603-21
378
11 SafeCom Client Billing
11.8
Manage 2-level billing code
In the following section it is covered how to manage two-level billing codes. In
the Manage billing codes dialog it is possible to manage both billing codes and
primary and secondary codes.
Under Primary and secondary codes the available primary and secondary
codes are listed. In the Level column it is specified if the code is level 1, or
level 2.
Under Billing codes the available combinations of the primary and secondary
codes are listed. Both primary and secondary codes and descriptions are
specified, and also if the code is billable or not.
Note: Because the billing codes are combinations of the primary and secondary
codes, it is advised to add the primary and secondary codes first and then the
billing codes.
D60603-21
379
11 SafeCom Client Billing
The following is covered in this section.
Primary and secondary codes:
 Add primary or secondary codes
 Find primary or secondary codes
 Delete primary or secondary codes
 Modify primary or secondary codes
Billing codes:
 Add billing codes
 Delete billing codes
 Modify billing codes
Note: In order to manage two-level billing codes, it must be configured on the
Server properties, Billing tab. The Secondary code check box must be
checked.
11.8.1 Add primary or secondary code
Follow these steps to add primary and secondary codes:
1.
2.
Click the Servers menu, click Client billing, and then open the Manage
billing codes dialog.
Under Primary and secondary codes click Add…
3.
4.
Enter Code and Description.
Select the Level(Primary 1, Secondary 2), and click OK.
11.8.2 Find primary or secondary codes
1.
2.
Open the Manage billing code dialog.
In Primary and secondary codes field enter the search text and click
Find. If the search field is left empty all billing codes are retrieved.
Note: The find function is using case insensitive free text search across both
the code and description fields.
D60603-21
380
11 SafeCom Client Billing
11.8.3 Delete primary or secondary codes
1.
2.
3.
4.
Open the Manage billing code dialog.
In Primary and secondary codes use the Find function to retrieve the
relevant billing codes.
Select the codes and click Delete…
Click Yes in the Confirm dialog to delete the code.
Note: When you delete primary or secondary codes, the billing codes that
contain the specific primary or secondary codes are also deleted.
Note: If a user selects a billing code for a print job at the computer, and if
then the billing code is deleted from SafeCom before the user collects the
print job the printer, the billing code for the print job is not remembered. The
billing information is then replaced by N/A.
11.8.4 Modify primary or secondary codes
1.
2.
3.
4.
Open the Manage billing code dialog.
Use the Find function to retrieve the relevant billing codes.
Select a code and click Modify…
Modify Description and Billable as required. Click OK.
Note: You can only modify the Description of a primary or secondary code.
11.8.5 Add billing code
Note: You must have at least one primary and one secondary code before you
can add 2-level billing code.
D60603-21
381
11 SafeCom Client Billing
1.
2.
Open the Manage billing code dialog.
Under Billing codes click Add…
3.
4.
4.
Select Primary code and Secondary code.
Clear Billable if you do not want the billing code to be billable.
Click OK to add the new billing code.
Note: Click the Add new primary code or Add new secondary code to add
codes that are not already available from the drop-down menus.
11.8.6 Delete billing codes
1.
2.
3.
Open the Manage billing code dialog.
In Billing codes find and select the billing codes you want to delete and
click Delete…
Click Yes in the Confirm dialog to delete the billing code.
11.8.7 Modify billing codes
1.
2.
3.
4.
11.9
Open the Manage billing code dialog.
Under Billing codes find and select the billing code you want to modify
and click Modify…
Change the choice of Primary code and/or Secondary code.
Click Modify.
Work with Tracking data
Use the Data Mining tool to view and work with the tracking data created with
relations to billing codes. See more at9.15.
Note: If a print job is sent to the printer with an assigned billing code and
before printing the job the billing code is deleted from the server, then once
the job is printed it is tracked without a billing code.
D60603-21
382
12 SafeCom Pay
12
SafeCom Pay
12.1
Introduction
The SafeCom Pay module provides total print cost management. In addition to
the SafeCom Tracking module described in chapter 9 the module can be used to
prevent a user from printing if the account balance falls below a specified limit
(default zero credits).
The SafeCom Administrator (12.5) can be used to add (deposit) or subtract
(withdraw) credits from the user’s account. Credits are equivalent to money.
12.2
Planning your SafeCom Pay solution
When planning your SafeCom Pay solution you need to:







Define what the cost of printing should be. This is accomplished via a
charging scheme (9.8.1).
Plan how you will secure the data stored in the tracking server and money
server databases (9.8.3).
Control what happens if the money server is unavailable (5.7.5).
Choose accounting policy (12.2.1).
Ensure that users pay (12.2.2).
Investigate if a cashless solution is required (12.2.3).
Change the user property Cost control to Pay (12.3).
12.2.1 Accounting policy
There are three different accounting policies:

Full cost recovery
The user has to pay for all prints (and copies). This policy is popular in
libraries. Involves account 1 only.

Partial cost recovery
The user is given a certain amount of credits on their account 2. When
the credits run out the user can choose to add money to their account 1.
This policy is popular at universities.

Quota control
The user is given a certain amount of credits and can print until they run
out (quota is used). This policy is popular in schools that do not allow feebased printing. Involves using account 2 only.
In addition you need to decide if Post track (9.7) should be enabled, in which
case, pay users may be charged a different (lower) price compared to the price
they were given when they collected their document.
D60603-21
383
12 SafeCom Pay
12.2.2 Ensure users pay
The introduction of a fee-based printing solution may tempt some users to try
to avoid having to pay for their prints (and copies). To make these attempts in
vain you can apply a number of counter measures:

Make all printing go through the SafeCom solution
Refer to 4.17.

View list of unfinished jobs
The SafeCom Tracking database record information about unfinished print
(and copy) jobs. An unfinished job may be caused by legitimate network
or printer failure. However, the cause may also be purposely tampering
with the printer and SafeCom hardware. The list of unfinished
(failed/interrupted) jobs can be viewed in SafeCom Data Mining (9.15).

Notify administrator by e-mail
You can configure your SafeCom solution to send an e-mail to the
administrator whenever a job does not finish. By looking at and perhaps
sorting the list of received e-mails, the administrator can quickly spot if
someone is trying to avoid having to pay. If required the administrator
can prevent the user from logging into the SafeCom solution.

Do not release credits reserved on error
When the user prints the SafeCom solution reserves credits corresponding
to the cost of the print job. When the user copies the SafeCom solution
will reserve all the user’s credits. On the Users tab in the Server
properties dialog (5.7.2) you can request that the reserved credits are
not released in case of error. The reserved credits can be released
manually from SafeCom Administrator (12.5.10).

Awareness through information
By making users aware that the SafeCom Pay solution includes counter
measures to prevent repeated attempts to avoid paying will probably
reduce the number of attempts.
Educational institutions in particular should inform their users about these
counter measures. This will help them limit the number of unfinished jobs that
are likely to happen at the start of semester when new students enroll.
12.2.3 Cashless solution
Your SafeCom solution can be enhanced to support methods where users can
make deposits to their account via the Internet using SafeCom ePay.
SafeCom Pay solutions also support the use of smart cards. If the user’s
SafeCom account is empty, the user can use a smart pay to finance their print
activity. Contact [email protected] for more details.
D60603-21
384
12 SafeCom Pay
12.3
Change cost control to pay
For existing users you must enable Pay for each user. This is achieved by
checking Pay on the Settings tab in the User properties dialog.
It is possible to change the property of multiple users (7.8).
By selecting a Pay user as the default user you can make any future imported
user, user created at first print and manually added user a Pay user.
D60603-21
385
12 SafeCom Pay
12.4
Credit schedule
1.
2.
Open the Group properties dialog (5.13.2).
Click on the Credit schedule tab.
Enter a meaningful Description.
In Transaction select if the member’s Account 1 or Account 2 should be
Set to the specified Amount or changed with the specified amount (Add
or Subtract). An optional Comment can be entered.
D60603-21
386
12 SafeCom Pay
Provided the schedule is Enabled it is possible to schedule credits One
time only, Daily, Weekly and Monthly.
Check End date and specify a date for when the periodic schedule should
end. Please ensure that the end date does not conflict with the selected
frequency options. Otherwise you may risk that the credit schedule will
not run.
In the above example members of the STUDENTS group are having their
account 2 set to 100 credits on the first Monday at midnight of each
month, except for the three summer months.
D60603-21
387
12 SafeCom Pay
In the above example members of the TRAINEES group have their account
1 set to 40 credits each weekday at 07:00 am.
D60603-21
388
12 SafeCom Pay
12.5
Cashier – How to
The following subsections assume that you are logged into SafeCom
Administrator as a user with Cashier rights (5.8.4).
12.5.1 Login to SafeCom Administrator in Cashier mode
1.
2.
3.
Click Start, point to All Programs, SafeCom G3 and click SafeCom
Administrator.
In SafeCom Administrator click on the server to log in.
Enter User logon and Password. Click Login.
Note: If you belong to a domain the domain followed by a slash (/) or a
backslash (\) must be specified in front of the user’s logon. Example:
MYDOMAIN\JS. Alternatively you can specify user logon followed by (@) and
the domain, like this [email protected]
D60603-21
389
12 SafeCom Pay
12.5.2 Find user
1.
2.
Enter the search string in Look for and press Enter. If a card reader is
installed on the computer (4.18) then present the card.
Or Click Advanced search to open the Find users dialog (7.6). Enter your
find criteria and click Find. The find function is using field based case
insensitive free text search, with the exception of ID codes. To find a
particular ID code enter the complete ID code in the right case or click
Listen for card if a card reader is installed on the computer (4.18).
No users match
the search string
(red icon)
3.
D60603-21
Multiple users match
the search string
(green icon)
No search string
entered
(blue icon)
If only one user is found the User properties dialog (12.5.3) appears.
Otherwise double-click a user on the appearing list of users.
390
12 SafeCom Pay
12.5.3 User properties dialog
Account 1 shows the current amount of money available with the user.
Account 2 shows the current available quota available for the user.
Low limit is the lowest amount that should be available in order to print
(Allows negative figures). Click to edit the Low limit.
Reserved is the amount of credits reserved due to a print or copy job that
finished in error. It should be 0.00 (zero) most of the time. If the system has
reserved any credits you see a positive amount printed in red color. Click to
edit Reserved. The amount must be between 0.00 (zero) and the currently
reserved amount of credits.
Disposable is equal to Balance minus Low limit and Reserved.
Amount Type in amount to add to, subtract from or set account to – select
appropriate action from the drop-down list. Select appropriate account and
click Record to carry out the transaction.
Comment allows you to add any description (optional).
D60603-21
391
12 SafeCom Pay
Transactions: View a list of user account transactions.
Select the Details tab to see additional information about the user.
12.5.4 View user transactions
1.
2.
3.
4.
5.
Open the User properties dialog (12.5.3).
On the Account tab click Transactions… to open the User transactions
dialog (12.8).
Look at the transactions. To look at transaction from a different period,
make your Selection and click Refresh.
Click Print… to make a printout of the transactions.
When done click Close.
12.5.5 Issue a new PIN code
1.
2.
3.
4.
D60603-21
Open the User properties dialog (12.5.3).
On the Account tab click Generate random PIN.
A new random 4-digit PIN code is displayed.
Click Close.
392
12 SafeCom Pay
12.5.6 Unlock user
1.
2.
3.
Open the User properties dialog (12.5.3).
On the Account tab click Unlock user.
Click Close.
12.5.7 Deposit credits
1.
2.
Open the User properties dialog (12.5.3).
On the Account tab
3.
4.
5.
select Account 1 (money) or
select Account 2 (quota).
Enter the Amount and select add amount from the drop-down list.
Enter an optional Comment and click Record.
Click Close.
12.5.8 Withdraw credits
1.
2.
Open the User properties dialog (12.5.3).
On the Account tab
3.
4.
5.
select Account 1 (money) or
select Account 2 (quota).
Type in the Amount and select subtract amount from the drop-down list.
Type in an optional Comment and click Record.
Click Close.
12.5.9 Set low limit
Low limit is the amount of credits that must be available in order to print (and
copy).
1.
2.
3.
Open the User properties dialog (12.5.3).
On the Account tab click
and enter Low limit amount and click OK.
The amount is normally 0.00, but it can be both positive and negative.
Press Enter.
12.5.10 Free reserved credits
If the system has reserved any credits you see a positive amount printed in red
color in the User account dialog. Refer to section 12.9 for a discussion of
reserved credits.
To free the reserved credits:
1.
2.
3.
D60603-21
Open the User properties dialog (12.5.3).
On the Account tab click next to the reserved amount and enter the
amount that must be released. To free up the whole amount enter 0 and
the maximum is the currently reserved amount.
Press Enter.
393
12 SafeCom Pay
12.5.11 Reset cash cards
This section is only relevant if the SafeCom Pay solution stores money on a
Smart Card. The dialog will display Temporary card: <amount> in red color
when the user has had the specified amount transferred from the cash card to
the SafeCom account on the SafeCom server.
Warning: If you click Reset the money will NOT be transferred back to the
user’s cash card the next time the cash card is used at one of the SafeComenabled printers.
1.
2.
3.
Open the User properties dialog (12.5.3).
On the Account tab click Reset.
Click Close.
12.5.12 Detect attempt to avoid paying
The SafeCom Pay solution can be configured to send an e-mail to the
administrator whenever a SafeCom session does not terminate appropriately.
1.
2.
3.
4.
Log in to SafeCom Administrator as an administrator.
Log in and open the Server properties dialog.
Click on the E-mail tab.
Check E-mail notification on credits reserved.
For additional information please refer to section 12.9.
12.5.13 Print reports
It is possible to print a number of reports, including:



Account status (12.6)
Cash flow report (12.7)
Transactions (12.8)
Refer to the relevant sections for additional information.
D60603-21
394
12 SafeCom Pay
12.6
Account status
1.
On the Cashier menu click Account status to view and print the credit
status, including:



Total credits in the system
Total reserved in the system
Total temporary cash card33
The Cash card tab is only available if the SafeCom Pay solution stores
money on a Smart Card. On the Cash card tab it is possible to see a list of
the users who temporarily has had money transferred from their cash
card to their SafeCom account on the SafeCom server. This money will be
transferred back to the user’s cash card the next time the cash card is
used at one of the SafeCom-enabled printers.
2.
Click Print… to print a hardcopy of the reports.
33
sSafeCom Pay solution with money stored on a Smart Card.
D60603-21
395
12 SafeCom Pay
12.7
Cash flow report
1.
On the Cashier menu click Cash flow report to view and print a cash flow
report for a specified period. The cash flow report can be of the type:



2.
3.
4.
Cashier, Account 1
Cashier, Account 2
ePay
Select the period. A number of predefined periods are available ranging
from today to 1 year back. Choose Specify period to freely specify the
beginning (from) and finish (to) of the period.
Click Refresh to view the transactions for the selected period.
Click Print… to print the cash flow report.
The cash flow report contains a list of the transactions, detailing the ID,
Date/Time, Type (Cashier, or ePay), Account, Value, and Comment. In case of
ePay the comment column contains the ePay order number.
Check Personalize if the report should only include transactions conducted by
the user that is currently logged into SafeCom Administrator.
D60603-21
396
12 SafeCom Pay
12.8
User transactions dialog
1.
2.
3.
4.
In the User properties dialog on the Account tab (12.5.3) click
Transactions.
Select to see the 20, 50 or 100 last transactions, choose among the
predefined periods. Choose Specify period to freely specify the beginning
(from) and finish (to) of the period.
Click Refresh to view the transactions for the selected period.
Click Print… to print the report.
Current values show the Balance, Low limit, Reserved and Disposable.
GID is an identification number for the transaction(s).
Date/Time indicates the date and time of the transaction.
Author is the User logon of the user who did the transaction.
Type indicates the type of transaction.
Description shows the description (if any) of the transaction.
Value indicates the amount that has been added/subtracted from the account.
Account 1 shows the balance on the account with real money. Account 2
shows the balance on the account with quota.
Card is only present if the SafeCom Pay solution stores money on a Smart Card.
It shows the amount that has been transferred from the cash card to the
SafeCom account on the SafeCom server. Check the Merge Cash Card if you
want to see the transactions that involves the cash card.
D60603-21
397
12 SafeCom Pay
Check Show reservations if you want to see reservations as well.
12.9
Prevent cheating
To ensure user payment and prevent cheating, the SafeCom solution can
reserve all or some user credits whenever a Pay user logs in to SafeCom to copy
or print.
12.9.1 E-mail template for an unfinished job
If the SafeCom session does not terminate correctly, an e-mail is sent to the
administrator based on the UnfinishedJob.txt e-mail template. The reserved
credits are freed as soon as the e-mail has been sent.
This functionality is controlled via Server properties dialog:

Check E-mail notification on credits reserved on the E-mail tab in the
Server properties dialog.

Check Release credits reserved on error on the Users tab in the Server
properties dialog.
UnfinishedJob.txt
<%SUBJECT="[SafeCom Unfinished Job] <%USERLOGON%>"%>
This mail is to inform you about an unfinished job.
Credits
------Reserved:
<%RESERVEDCREDITS%>
Job properties
-------------Job name:
<%DOCUMENTNAME%>
Pages:
<%PAGES%>
Date:
<%STARTDATE%>
Device properties
----------------Device name: <%DEVICENAME%>
IP address: <%DEVICEIPADDR%>
MAC address: <%DEVICEMAC%>
Model:
<%DEVICEMODEL%>
Location:
<%DEVICELOCATION%>
User properties
--------------User logon: <%USERLOGON%>
Full name:
<%FULLNAME%>
E-mail:
<%EMAIL%>
D60603-21
398
12 SafeCom Pay
12.9.2 Difference between print and copy
When a user prints, the SafeCom solution reserves credits corresponding to the
cost of the print job or document. When a user copies, the SafeCom solution
reserves all their credits.
The below table describes how the print and copy values differ in an unfinished
job e-mail.
Tag
<%RESERVEDCREDITS%>
Pull print
Cost of the document.
<%DOCUMENTNAME%>
<%PAGES%>
Name of the document.
Number of document
pages. Number of pages
actually printed not
possible to calculate.
Copy
Calculated sum of user
credits, from start of
copy job minus cost of
pages copied and
tracked.
Always “Copy job”
Number of tracked
copy pages. Additional
pages may have been
copied.
12.10 Job name pricing
Job name pricing allows you to impose print charges based on the print job
name. This was originally developed for libraries to allow borrowers to print
search results and electronic articles for free or for a fixed amount.
The name of the print job is compared against a list of conditions (filters). If
one of the conditions is met the document is priced according to the specified
price. If none of the conditions are met the document’s price is calculated
according to the defined charging scheme.
To enable job name pricing for a printer you have to perform the following
steps:
1.
2.
3.
D60603-21
Check Subject for job name pricing on the charging scheme that is used
by the printer in question (9.11.3).
Modify the JobNamePricing.txt (12.10.1) file to match your requirements.
Restart the SafeCom Service (16.30).
399
12 SafeCom Pay
12.10.1 JobNamePricing.txt
The pricing based on job names is controlled from the text file
JobNamePricing.txt located in the SafeCom Templates folder located in the
SafeCom installation folder, default is:
C:\Program Files\
SafeCom\SafeComG3
On Windows 64-bit:
C:\Program Files (x86)\
SafeCom\SafeComG3
1.
2.
3.
Copy the JobNamePricing.txt file from the Templates folder to the
SafeCom installation folder.
Modify the JobNamePricing.txt file in the SafeCom installation folder to
match your requirements.
Restart the SafeCom Service (16.30).
Note: Subsequent modifications to the file in the SafeCom installation folder
will take immediate effect.
You can add as many filters/prices as you want. You can use a maximum of 4
wildcards (‘*’) in a filter. The filters are case sensitive. The price must be
specified with a decimal point (‘.’).
;-------------------------------------------------; This file specifies print jobs to be given a
; special price if job name is matching a
; certain filter.
;
; The '*' character is used as wild card.
; Maximum 4 '*' (wild cards) is allowed per filter.
;
; (c) 2003 SafeCom A/S
;-------------------------------------------------Version="1"
Price1="0.00"
Filter1="Test Page"
Price2="0.10"
Filter2="http*safecom.eu*"
Filter2="safecom*.PDF*"
D60603-21
400
13 SafeCom Device Utility
13
SafeCom Device Utility
13.1
Introduction
SafeCom Device Utility is an application used to load SafeCom device software
onto devices in preparation for a staged rollout. It does not require SafeCom
server software and databases to be running and it will not register devices. It
is possible to load and save lists of device addresses as (*.dip).
SafeCom Device Utility can also be used to upload, edit, save and download
configuration files from SafeCom Controllers and devices that have SafeCom
software inside.
SafeCom Device Utility is part of the SafeCom G3 software and is started by
clicking scDevUtil.exe. It requires the presence of the files: scDevUtilLib.dll,
scSNMPlib.dll, scSecureLib.dll and scUtillib.dll
13.2
Starting SafeCom Device Utility
1.
Double-click scDevUtil.exe in the SafeCom installation folder.
Details on how to populate the list of devices are in section 13.4. Get
configuration and Set configuration is covered in section 13.5.
Click Status to enable status updates from the listed devices every 30 seconds.
Click Refresh to update the list of devices and their status.
D60603-21
401
13 SafeCom Device Utility
13.3
Menus and commands
This table lists the menus and commands for the SafeCom Device Utility.
Menu
File
Action
Description
Load device list from file…
Load the devices from a plain text
file.
Save the list of device to as a *.dip
file.
Exit the SafeCom Device Utility.
Send the Go Loader software to the
selected devices.
Send the SafeCom Go file to the
selected devices.
Retrieve the configuration of the
device.
Load current configuration to the
selected devices.
Edit the configuration file.
Save the configuration as a *.cfg file.
Restart the device.
Remove the device from the list.
Open the device in a web browser.
View the version number for
SafeCom Device Utility.
Save device list to file…
Exit
Send Go Loader…
Update software…
Get configuration…
Action
Help
13.4
Set configuration…
Edit configuration…
Save configuration to file…
Restart device…
Remove device from list
Open in web browser…
About…
Populate list of devices
With SafeCom Device Utility there are three ways to add devices to the
device:
D60603-21

Load from file
Create a plain text file with one address (IP address or hostname) per line
and save it with the extension dip (Device IP file).
On the File menu click Load device list from file…

Add device
Enter the Device address and click Add.

Broadcast for devices
Click Broadcast to broadcast for devices.
402
13 SafeCom Device Utility
13.5
Working with configurations
Get and edit configuration:
1.
2.
3.
4.
Select a device and click Get configuration to retrieve the configuration
from the selected device.
On the Action menu click Edit configuration to open the configuration in
the editor. Configuration files are human readable. Configuration files
from SafeCom Go devices are in XML format. Configuration files from
SafeCom Controllers are in a special format with BEGIN_CONFIGURATION
and END constructions.
On the Action menu click Close edit configuration when done editing (or
viewing).
On the Action menu click Save configuration to file… to optionally save
the file for subsequent use.
Set configuration:
The configuration that is currently uploaded can be loaded to one or more
selected device(s), if they are the same device type. This can be used to clone
entire configurations from one device to other devices.
1.
2.
3.
4.
D60603-21
Click Set configuration to load the current configuration to the selected
device(s) of the same type.
Enter User name and Password of the device to authorize the download
of the configuration. Check Same for all devices if you are updating
multiple devices and they are configured with same the user name and
password. A SafeCom Controller has adm as default User name and
Password.
A dialog will appear saying either
Set configuration succeeded!
or Set configuration failed!
Click OK.
403
14 Format of tracking data
14
Format of tracking data
14.1
Introduction
This chapter describes the format of the exported tracking data.
14.2
Format history
SafeCom G3 S82 070.410*01

New client billing, with primary and secondary code.
SafeCom G3 S82 070.400*01

D60603-21
Introduced Unicode support.
404
14 Format of tracking data
14.3
Format
Parameter
Description
TrackingID
A unique ID for this tracking
record.
Name of the computer
Contains the value of the
ApplyExportTrackingID that was
supplied the first time this
tracking record was exported.
Otherwise it is blank.
Maximum 20 characters.
A unique ID that can be used to
link to corresponding
transaction (change of credits).
The type of cost control the
user was set to when copies
were made or the document
was printed (collected at the
printer).
The date when the user started
collecting the document at the
printer.
The date when the user’s
document was printed.
The state of the tracking. If the
state is interrupted it could
indicate that an attempt was
made to disconnect or
otherwise tamper with the
SafeCom equipment to bypass
tracking.
Number of pages to use for
tracking purpose of both print
and copy jobs.
ComputerName
ExportTrackingID
TransactionID
AccountingModelUsed
StartDate
StopDate
TrackingState
TrackingPageCount
Default value
NONE
PAY_AND_PRINT
PRINT_AND_PAY
TRACKING_STATE_COMPLETED
TRACKING_STATE_INTERRUPTED
In case of a print job (see
JobType) the number of pages
is normally the same as
reported by ParserPageCount.
ParserPageCount
DriverPageCount
D60603-21
However, if TrackingState is
INTERRUPTED then
TrackingPageCount can be less
than ParserPageCount.
Number of pages as counted by
the used SafeCom Pull Port and
SafeCom Push Port.
This is 0 in case of a copy job
(see JobType).
The status of the parsing can be
seen from PageCountStatus.
Number of pages as reported by
the Windows printer driver (see
DriverName).
This is 0 in case of a copy job
(see JobType).
405
14 Format of tracking data
Parameter
Description
JobSubmitLogon
The UserLogon of the user who
submitted the document for
printing. In case of distribution
(P-mail) this will differ from
UserLogon.
Name of the document. Always
‘Copy job’ in case of copies.
The date when the document
was submitted for printing, that
is when it arrived in the
SafeCom job database.
Number of bytes
The ID (internal) of the user.
The ID (internal) of the domain.
The user’s logon name
The user’s domain
The user’s full name
Description field
The user’s e-mail
The MAC address of the device.
The ID (internal) of the device.
The name of the device.
The location of the device.
The IP address of the device.
Whether or not double-sided
print is supported.
Whether or not color is
supported.
The Model name listed in the
SafeCom Administrator’s Device
properties dialog.
This is the driver name. It is
identical to the Model name
listed in the Windows printer
properties dialog.
The paper size. Typically, A4,
A3 or Letter.
Is the job set up for doublesided print?
Is the job a color job?
JobName
JobDate
JobSize
UserID
UserDomainID
UserLogon
Domain
FullName
Description
Email
DeviceMac
DeviceID
DeviceName
DeviceLocation
DeviceIpAddr
DeviceSupportsDuplex
DeviceSupportsColor
DeviceModel
DriverName
JobPageFormat
JobIsDuplex
JobIsColor
BillingCode
BillingDescription
BillingInvoice
JobPrice
JobType
D60603-21
The primary code.
Maximum of 50 characters.
The primary code description.
Maximum of 50 characters.
If YES the billing code can be
used to invoice clients.
The cost of the job. Calculated
based on charging scheme and
job/device attributes.
The type of job: Pull print, Push
print, Copy, Fax, Scan, or
E-mail.
Default value
YES
NO
YES
NO
NO
YES
JOB_TYPE_PULL
JOB_TYPE_PUSH
JOB_TYPE_COPY
JOB_TYPE_FAX
JOB_TYPE_SCAN
JOB_TYPE_EMAIL
406
14 Format of tracking data
Parameter
Description
Default value
PageCountStatus
Indicates the status of the
parsing done with the SafeCom
Pull Port and SafeCom Push
Port.
The internal ID of the
Organizational unit the user
belongs to. The ID can be seen
in the Org. unit properties
dialog in SafeCom
Administrator.
The internal ID of the
Organizational unit the device
belongs to. The ID can be seen
in the Org. unit properties
dialog in SafeCom
Administrator.
If pages were counted by
software(0) or hardware(1).
Pull and Push print jobs are
always counted using software
method.
Number of pages with color.
Empty in case of a print or copy
job. If a Fax job this is the
phone number of the receiver.
In a Scan job this is the name of
the folder. If an E-mail job this
is the e-mail address of the
receiver.
Whether or not toner save was
invoked. Reserved for future
use.
The cost of the job. Calculated
based on the secondary
charging scheme and
job/device attributes.
The name of the Windows print
queue that was used to print
the document via the SafeCom
Push Port or SafeCom Pull Port.
The name of the SafeCom Push
Port or SafeCom Pull Port that
was used to print.
The computer name of the
computer with the Windows
print queue using either the
SafeCom Push Port or SafeCom
Pull Port.
The computer name of the
client from where the
document was formatted.
PAGECOUNT_STATUS_OK
PAGECOUNT_STATUS_UNDEFINED
PAGECOUNT_STATUS_FAILURE
UserNodeID
DeviceNodeID
PageCountModel
TrackingColorPageCount
JobDestination
TonerSave
JobPrice2
PMQueueName
PMPortName
PMComputerName
DocComputerName
D60603-21
0
0
0
YES
NO
407
14 Format of tracking data
Parameter
Description
Default value
TonerCyan
The toner coverage is recorded
as 100 times the coverage in
percent. Example: A toner
coverage of 2.5% is recorded as
the 250. A toner coverage of
10000 is equal to 100%. Toner
coverage is tracked for Copy,
Scan, E-mail and Fax jobs on
selected HP LaserJet MFPs with
SafeCom Go.
See TonerCyan.
See TonerCyan.
See TonerCyan.
User’s cost code.
Number of sheets.
The secondary code.
Maximum of 50 characters.
The secondary code
description. Maximum of 50
characters.
0
TonerMagenta
TonerYellow
TonerBlack
UserCostCode
JobSheetCount
BillingCode2
BillingDescription2
D60603-21
0
0
0
408
15 SafeCom ID Devices
15
SafeCom ID Devices
15.1
Introduction
SafeCom offers the following stand-alone card readers.
15.2
ID devices
USB
Serial
Section
SafeCom AWID Reader
SafeCom Barcode Reader
SafeCom Casi-Rusco Reader
SafeCom EM Reader
SafeCom HID Prox Reader
SafeCom HID Prox Reader 37 bit (custom)
SafeCom iCLASS Reader
SafeCom Indala Reader 26bit
SafeCom Indala Reader 29bit
SafeCom Keypad
SafeCom Legic Reader
SafeCom Magnetic Card Reader (Tr 1)
SafeCom Magnetic Card Reader (Tr 2)
SafeCom Magnetic Card Reader (Tr 3)
SafeCom Magnetic Card Reader DD (Tr 1)
SafeCom Magnetic Card Reader DD (Tr 2)
SafeCom Magnetic Card Reader DD (Tr 3)
SafeCom Mifare Reader
SafeCom Nedap Reader
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
USB
Serial
Serial
Serial
Serial
Serial
Serial
Serial
Serial
Serial
Serial
Serial
Serial
Serial
Serial
15.2
15.3
15.4
15.5
15.6
15.6
15.7
15.8
15.8
15.9
15.10
15.11
15.11
15.11
15.12
15.12
15.12
15.13
USB
USB
USB
USB
USB
Serial
Serial
SafeCom AWID Reader
Dimensions: 6.4 x 10.6 x 2.2 cm. Color is black. Cable length: 1.8 m. When a
proximity card is presented to the reader, the red light flashes green.
15.3
SafeCom Barcode Reader
Dimensions: 5.2 x 12.7 x 3.5 cm. Color is black. Cable length: 1.8 m.
Barcode centerline length: 1.25 cm from bottom of slot to reading window
center. Supported barcode formats: UPC-A, UPC-E, EAN-8, EAN-13, Code 39,
Telepen, Interleaved 2 of 5, Industrial 2 of 5, Code 128, MSI/Plessey, Codabar.
15.4
SafeCom Casi-Rusco Reader
Dimensions: 6.4 x 10.6 x 2.2 cm. Color is black. Cable length: 1.8 m. When a
proximity card is presented to the reader, the red light flashes green.
D60603-21
409
15 SafeCom ID Devices
15.5
SafeCom EM Reader
Dimensions: 5.5 x 9.0 x 2.0 cm. Color is black. Cable length: 2.0 m. Supports
the following card technologies: EM41xx, UNIQUE, TITAN, Hitag 1/2/S and
Paxton. The card reader can signal status via lights and beeps when used with
SafeCom Go:
Status
Nobody is logged in
Card is presented
User is logged in
15.6
Ligths
Solid red
Flashing green
Solid green
Beeps
Off
One
Off
SafeCom HID Prox Reader
Dimensions: 5.5 x 9.0 x 2.0 cm. Color is black. Cable length: 2.0 m. The reader
is available in a 35 bit (most common) and a 37 bit version. The card reader can
signal status via lights and beeps when used with SafeCom Go:
Status
Nobody is logged in
Card is presented
User is logged in
15.7
Ligths
Solid red
Flashing green
Solid green
Beeps
Off
One
Off
SafeCom iCLASS Reader
Dimensions: 5.5 x 9.0 x 2.0 cm. Color is black. Cable length: 2.0 m. The card
reader can signal status via lights and beeps when used with SafeCom Go:
Status
Nobody is logged in
Card is presented
User is logged in
15.8
Ligths
Solid red
Flashing green
Solid green
Beeps
Off
One
Off
SafeCom Indala Reader
Dimensions: 6.4 x 10.6 x 2.2 cm. Color is black. Cable length: 1.8 m. The card
reader is available in a 26 bit version (most common) and a 29 bit version.
When a proximity card is presented to the reader, the red light flashes green.
D60603-21
410
15 SafeCom ID Devices
15.9
SafeCom Keypad
The SafeCom Keypad USB (p/n 699010) can be used with SafeCom Go HP on the
HP Color LaserJet 3000, 3800 and 4700. The SafeCom Keypad is powered from
the printer’s USB port. Dimension: 10.7 x 15.8 x 3.8 cm. Color is black. Cable
length: 1.5 m.
The SafeCom Keypad Serial (p/n 974010) can be used with SafeCom Go HP on
the HP LaserJet 4250, 4350, 4650 and 5550. The SafeCom Keypad is powered
from the supplied switch mode power supply (Input: 230V~, 50Hz/145mA,
Output: 12V, 1.3A). Dimension: 10.7 x 15.8 x 3.8 cm. Color is black. Cable
length: 1.5 m.
15.10 SafeCom Legic Reader
Dimensions: 5.5 x 9.0 x 2.0 cm. Color is black. Cable length: 2.0 m. The card
reader can signal status via lights and beeps when used with SafeCom Go:
Status
Nobody is logged in
Card is presented
User is logged in
Ligths
Solid red
Flashing green
Solid green
Beeps
Off
One
Off
15.11 SafeCom Magnetic Card Reader
Dimensions: 3.0 x 9.0 x 2.8 cm. Color is black. Cable length: 2.0 m. The card
reader should be mounted on a plain clean surface. The card reader can signal
status via its two lights and beeper when used with SafeCom Controller:
Status
Standby
Card is read
Documents
No documents
Prevent login
Card read failed
Unknown card
Other errors
Ligths
Off
Green is on
Green and red
Green and red
Off
Green and red
Green and red
Green and red
are flashing once
are flashing twice
are flashing six times
are flashing six times
are flashing six times
Beeps
Off
One
One
Two
Off
Six
Six
Six
15.12 SafeCom Magnetic Card Reader DD
Dimensions: 3.13 x 10.0 x 3.25 cm. Color is black. Cable length: 1.8 m.
Connector USB Type A plug. The card reader should be mounted on a plain
clean surface.
D60603-21
411
15 SafeCom ID Devices
15.13 SafeCom Mifare Reader
Dimensions: 5.5 x 9.0 x 2.0 cm. Color is black. Cable length: 2.0 m. The card
reader can signal status via lights and beeps when used with SafeCom Go:
Status
Nobody is logged in
Card is presented
User is logged in
D60603-21
Ligths
Solid red
Flashing green
Solid green
Beeps
Off
One
Off
412
16 Troubleshooting
16
Troubleshooting
16.1
SafeCom Help Desk Assistant
We want your SafeCom solution to be one that reduces not only print costs, but
is also easy to support. In the following you will find useful troubleshoot hints.
The most common problems reported by end-users have been compiled into an
online SafeCom Help Desk Assistant available at safecom.eu/help
16.2
SafeCom Administrator: Login failed
When you try to log in to a group with SafeCom Administrator it reports: Login
failed. Check your user logon, password and that you have Administrator rights
(5.8.4). Remember that if you belong to a domain (5.8.1) you must specify the
domain followed by a slash (/) or a backslash (\) in front of the user logon.
Alternatively you can specify user logon followed by (@) and the domain, like
this [email protected]
16.3
SafeCom Administrator: Unable to locate all
SafeCom servers
The SafeCom Administrator uses broadcasts to locate the SafeCom servers. If
your network is a VLAN (Virtual Local Area Network) then it may prevent the
SafeCom Administrator from locating SafeCom servers.
Enter the SafeCom servers’ IP addresses manually directly in the list of
individual Broadcast addresses on the Network tab in the Options dialog
(5.10.3).
If the server group appears with a question mark
it is either because the
SafeCom server is not running or because it is not referencing the IP addresses
of the SafeCom server.
1.
2.
3.
D60603-21
Start SafeCom Administrator (5.3) and right-click the group in the Server
groups pane and click Server group properties (5.5).
In IP address of entry point you should enter the IP address of the
SafeCom server. Click OK.
Log in to the group and open the Server properties dialog (5.7.1). In IP
address you should enter the IP address of the SafeCom server. Click OK.
413
16 Troubleshooting
The IP address of the SafeCom server can be obtained by logging into the
SafeCom server, start a Command Prompt and type ipconfig -all
16.4
SafeCom Administrator: Unable to locate all
SafeCom devices
A device will only appear in the SafeCom Administrator after it was added
through the SafeCom Administrator or after a user with either Technician or
Administrator rights (5.8.4) has logged in.
If you are attempting to Broadcast (8.6) for SafeCom Controllers:
1.
2.
16.5
In SafeCom Administrator click on the Actions menu, Options and verify
that the list of Broadcasts addresses on the Network tab is correct.
Contact a network administrator that has access to the DHCP server. The
network administrator can log in to the DHCP server and see the IP
address that is assigned to the device.
SafeCom Administrator: Users are missing
Users are either not associated to a server or they belong to another server
than the one you are looking at. Click on the Find tool button and then click
Retrieve all (7.6).
16.6
SafeCom Administrator: Add user failed and
Add alias failed
This is because either a user with the specified user logon or alias (5.8.6) exists
already. Consult the SafeCom server event log (5.16) to see which user is
causing the conflict.
16.7
SafeCom Administrator: License does not take
effect
If nothing happens when you try to apply a new license key code (4.9), close
SafeCom Administrator and start it again by right-clicking SafeCom
Administrator and selecting Run as administrator.
16.8
SafeCom Administrator: Controls in dialog are
not visible
The menus and controls in SafeCom Administrator adapt to reflect the SafeCom
license key code and the rights with which you are logged into SafeCom
Administrator. However, if certain control in the dialog displayed by the
SafeCom Administrator is not completely visible it may be because the
D60603-21
414
16 Troubleshooting
resolution of the screen is configured for different value than 96 dpi. Change
the resolution to 96 dpi.
16.9
User is not created at first print
First verify that Create users at first print is checked (5.7.2). If the user is
printing from a workgroup computer to a shared SafeCom Pull Printer (4.11) the
user must be known on the server under the exact same logon and password as
used on the client. If this is not the case the print job is stored under the server
account that owns the printer, typically the Administrator or Guest account. If
the server and the client belong to the same domain there is no problem.
16.10 Device web interface: Displayed incorrectly or
settings not saved
Your web browser must allow use of JavaScript (Active Scripting). The steps
below apply to Internet Explorer.
1.
2.
3.
4.
5.
6.
7.
Start Internet Explorer.
On the Tools menu click Internet Options…
Click on the Security tab in the Internet Options dialog.
Click on Custom Level… to open the Security Settings dialog.
Scroll down to Scripting, Active scripting and click Enable.
Click OK.
Click OK.
16.11 At the printer: Out of order
This message is displayed when communication with the SafeCom server is lost.
Check the following:






Does the web page of the SafeCom device reference a SafeCom server
and is the IP address and Group name correct?
Is the SafeCom Service running on the SafeCom server (16.30)?
Is the network down?
Is there a firewall blocking communication (4.2.5)?
Is the SafeCom Controller connected to the network via the MDI/MDI-X
port? If the network is up and running the port’s green light should be on
and its yellow light should be flashing.
Is the printer connected to the network?
The message is cleared and the device returns to normal operation a couple of
minutes after communication has been restored.
16.12 At the printer: User unknown
The used card (or entered ID code) is unknown. The user needs a PUK code
from the administrator. Refer to 7.5 and 0.
D60603-21
415
16 Troubleshooting
16.13 At the printer: Login denied



Wrong PIN code.
The device is not registered. For SafeCom Controller refer to the SafeCom
Controller Administrator’s Manual and for SafeCom Go refer to the How
to chapter in the appropriate SafeCom Go Administrator’s Manual (See
list in 1.11).
Too many consecutive failed login attempts has caused Prevent login to
be checked on the Identification tab in the User properties dialog
(5.8.1).
If none of the above, it could be because the Windows system on the SafeCom
server does not allow any more connections. If you also get a “Connection
error. Login failed” when you try to log in to SafeCom Administrator, then you
should restart the computer.
16.14 At the printer: Restricted access


The user is not allowed to use the device.
A Pay user is trying to log in and Pay is not checked on the License tab in
the Device properties dialog.
16.15 At the printer: Error printing document


Pull Print is cleared on the License tab in the Device properties dialog
(5.9.3).
Pull Print is cleared on the Settings tab in the Device properties dialog
(5.9.1).
16.16 At the printer: Question mark before the
document name
The list of supported printer drivers does not include an entry matching the
driver you used. Use the web browser to add the driver name to the list (5.7.3).
16.17 At the printer: Printer busy, retry later
The 'Print busy, retry later' message on the device’s control panel indicates
that SafeCom does not have exclusive access control of the device. Exclusive
SafeCom access control ensures that it is only the user currently logged in can
print or copy documents. If there is no apparent reason for this message, check
whether SNMP is disabled on the printer and enable it.
16.18 At the printer: Printer keeps rebooting
Please check that the printer’s formatter board is properly in place.
D60603-21
416
16 Troubleshooting
16.19 At the printer: Copy not allowed
Please check that MFP is checked in the Device properties dialog (5.9.1).
16.20 At the printer: Login error <number>


Is the SafeCom Service running on the SafeCom server?
Is the SafeCom device registered at the SafeCom server?
16.21 At the printer: Error printing: General Failure
The document you are trying to print is no longer on the SafeCom server. This
may happen if you log in at two or more devices and try to perform a
simultaneous print all.
16.22 At the printer: Card reader not working



Is the card reader powered and firmly connected?
Is the card compatible with the reader?
Try to move the card reader away from the printer to check that if it is
electrical interference that prevents the reader from working.
16.23 Document not printed




Is the print queue paused?
Is the printer powered on and connected?
Is the printer online?
Is intervention required? Check for: 1) wrong paper size, 2) manual
feed, 3) out of paper, 4) paper jam or 5) toner low.
16.24 Some documents are missing




D60603-21
The user may be trying to collect documents that have not yet been
transferred to the SafeCom solution. Allow sufficient time for the
document to be processed and spooled. Try to log in again.
The user may previously have attempted to print the documents on
another device, but did not collect all of the documents. (Perhaps
because the printer required intervention or needed to warm up?) Consult
SafeCom Tracking data (if available) to confirm whether this is the case.
The Filter document list (5.7.3) should be enabled, to control that only
documents generated by certain drivers are available for printing on a
particular printer.
The printer may have discarded the document due to driver compatibility
problems. Try to print the same document directly to the printer to verify
that this has nothing to do with SafeCom.
417
16 Troubleshooting
16.25 Document printed incorrectly



Is there a paper jam?
Is the toner low?
Does the driver support the printer? If PostScript or PCL data is sent to a
printer that does not support it, the result may be garbage print. Change
to a printer driver that supports the printer.
16.26 Nothing is copied



Is the MFP powered on and is the SafeCom MFP Cable connected?
Is the MFP online?
Is the MFP out of paper, low on toner or is there a paper jam?
16.27 Driver names are missing
During the installation of the SafeCom Front-end you are presented with a list
of driver names. The list of driver names is provided and maintained by the
SafeCom server.
New driver names are automatically added to the list when a document is
printed from a printer that uses the SafeCom Pull Port. If there are driver
names missing from the list it is because you have not printed a document with
that driver.
16.28 Add Printer Wizard: Specified port cannot be
added
When you try to configure a Windows printer to use the SafeCom Pull Port or
Push Port and you receive the message:
Specified port cannot be added. The request is not supported.
It is because you tried to create a shared SafeCom printer on a clustered server
computer other than the two nodes.
16.29 Local SafeCom Pull Printer is unable to print
Use the SafeCom Administrator to check if the document is on the user’s Job
list. If this is the case, then it could be because the SafeCom Pull Port used by
the local SafeCom Pull Printer cannot connect to the SafeCom server.
Open the Configure Pull Port dialog (4.13.2) and enter the Address of the
SafeCom server.
D60603-21
418
16 Troubleshooting
16.30 How to start and stop the SafeCom Service
1.
2.
3.
Click Start, type services.msc into the Search box and press ENTER.
Locate the SafeCom Service. Check the Status field. Click Start or Stop
SafeCom Service as needed.
To restart, right-click the SafeCom Service and click Restart.
16.31 How to start and stop the Print Spooler
1.
2.
3.
Click Start, type services.msc into the Search box and press ENTER.
Locate the Print Spooler. Check the Status field. Click Start or Stop as
needed.
To restart, right-click the Print Spooler and click Restart.
Note: If other services, such as Fax, depend on the Print Spooler these
must also be stopped.
16.32 User’s computer: Unable to connect to
SafeCom server
Either the SafeCom server is not running or the SafeCom Pull Port cannot
broadcast to the SafeCom server.
1.
2.
Open the Configure Pull Port dialog (4.13.2).
Test the connection to the configured SafeCom server(s).
16.33 User’s computer: Please contact your
administrator!
If a user can not print documents via SafeCom, the Messenger Service dialog
displays one of the following error messages:





Unable to connect to SafeCom server (16.32).
There is not enough disk space on the SafeCom server.
Unable to logon to the SafeCom database.
SafeCom license violation.
You are unknown to the SafeCom solution.
These SafeCom generated messages appear after print notification messages
sent by the Windows print subsystem. For this reason we recommend that you
disable notification messages from the Windows print subsystem. On the
Windows server open the Printers folder. On the File menu, click Server
Properties and click the Advanced tab. Refer to online Windows help.
D60603-21
419
16 Troubleshooting
16.34 Import users: No users imported
If the Import user function (see 7.3) fails or yields only incomplete results,
check whether:





The separator specified in the CSV import (7.3.8) matches the actual
separator used in the CSV file. Use Notepad or another editor to verify
the separator in the CSV file.
The specified field name is the correct one or if it was is typed
incorrectly.
The specified import file exists, is empty or is formatted incorrectly.
Make sure to specify the name of the file to import from (with full path)
as seen from the SafeCom server. The account that runs the SafeCom
Service (normally the Local System account) must have read access to
the file.
The difference between the existing users and the users in the import file
exceeds the percentage specified in Max user deletion.
In a multiserver installation, the users have a home server assigned. Use
Find users (7.6) to see the imported users. If users are not assigned a
home server then they won’t appear in the import list.
For additional troubleshooting, consult the log file produced during the
attempted import (7.3.16).
16.35 Import billing codes: No codes imported
If the Import billing codes function (see 11.4) fails or yields incomplete results
Check the whether:




The separator specified in the CSV import (11.4) matches the actual
separator used in the CSV file. Use Notepad or another editor to verify
the separator in the CSV file.
The specified field name is the correct one or if it was typed incorrectly.
The specified import file is non-existing, empty, or formatted incorrectly.
Make sure to specify the name of the file to import from (with full path)
as seen from the SafeCom server. The account that runs the SafeCom
Service (normally the Local System account) must have read access to
the file.
The difference between the existing billing codes and the billing codes in
the import file exceeds the percentage specified in the Max difference
[%] field.
For additional troubleshooting consult the log file produced during the
attempted import (7.3.16).
D60603-21
420
16 Troubleshooting
16.36 Multiserver installation

User is unknown when logging in on some devices
Occurs if the replication from the master server to the slave servers does
not work. Refer to section 4.6.4 and verify that the replication is
working. Remember to set SQLSERVERAGENT to automatic startup (4.6.2).
16.37 Restore SafeCom server
After restarting the SafeCom Service (16.30) and Print the Spooler (16.31), and
your SafeCom solution still isn’t operating normally restart the computer itself.
If the SafeCom Service is using an SQL server on another computer then check
that it is up and running.
If none of above, and your SafeCom solution still isn’t operating there may be
more serious issues with the computer and it may be necessary to restore the
SafeCom server (3.9).
16.38 scPopUp: The publisher could not be verified
If you run scPopUp.exe (4.14.1) from a file share and Windows presents a
Security Warning stating The publisher could not be verified you need to:
1.
2.
3.
4.
5.
6.
D60603-21
Click Start, type inetcpl.cpl into the Search box and press ENTER.
The Internet Properties dialog appears. Click on the Security tab.
Select Local intranet as Zone. Click Sites.
Ensure that Include all local (intranet) sites not listed in other zones is
checked. Click Advanced.
Enter the website (\\share) and click Add. Click Close.
Click OK. Click OK.
421
17 Administrator’s installation notes
17
Administrator’s installation notes
17.1
Introduction
This chapter contains forms that allow you to record relevant information
about the SafeCom solution. The information is relevant when multiple people
are involved in the solution over time in connection with for example
maintenance and support.
17.2
Servers
If the solution is a multiserver solution, we recommend creating an overview
diagram (using Microsoft Visio or a similar tool). The diagram should visually
illustrate the different servers and ports used in your solution.
This section contains three types of tables:



SafeCom master Server
SQL master Server
SafeCom slave Server
The right-most column in the tables contains one or more letters. Use the
letters with the legend below:
Legend:
A If the SafeCom server is clustered all other SafeCom components (devices,
port monitors, etc.) must reference Virtual Server and not the nodes.
Otherwise failover will not function properly.
B The SafeCom license key code is based on the Computer Name (4.9.1),
unless the master server is clustered in which case it is based on the Cluster
Name (4.9.2).
C A SafeCom multiserver solution requires the SafeCom master server to use
Microsoft SQL Server. Enter SQL Server 2008R2 Express or SQL. If the SQL
server resides on another server then added the word Remote and fill-in the
SQL master server table.
D Enter the SafeCom G3 version. Example: S82 070.410*07.
E Enter the Windows OS information. Example: Windows 2003 SP2 64-bit.
F Normally a cluster has two nodes. Add more rows if required.
G If the SQL server is clustered the reference to the SQL server should be
NetworkName\instancename. Otherwise it should be
computername\instancename. The instance name is case sensitive.
H Normal practice is to install and use SQL Server 2008 R2 Express on SafeCom
slave servers.
D60603-21
422
17 Administrator’s installation notes
17.2.1 SafeCom master server
SafeCom master server
Server address
Computer Name
SQL / Express
SafeCom G3 version S82 070.
Windows OS
A
B
C
D
E
Cluster information
Cluster
Group
Virtual
Server
1
Virtual
Server
2
Node
1
Node
2
D60603-21
Server address
Cluster Name
Disk Resource (Q)
Server address
Network Name
Disk Resource
Spool folder
SC print job folder
SQL folder
Server address
Network Name
Disk Resource
Spool folder
Server address
Heartbeat address
Network Name
Server address
Heartbeat address
Network Name
B
A
A
A
A
F
F
F
F
F
F
423
17 Administrator’s installation notes
17.2.2 SQL master server
SQL master server
Server address
Port
Computer Name
SQL
SQL instancename
Windows OS
G
Cluster information
Cluster
Group
Virtual
Server
Node
1
Node
2
Folder
D60603-21
Server address
Cluster Name
Disk Resource (Q)
Server address
Network Name
Disk Resource
Server address
Heartbeat address
Network Name
Server address
Heartbeat address
Network Name
SQL
G
F
F
F
F
F
F
424
17 Administrator’s installation notes
17.2.3 SafeCom slave server
SafeCom slave server
Server address
Computer Name
SQL / Express
SafeCom G3 version S82 070.
Windows OS
A
B
C
D
E
Cluster information
Cluster
Group
Virtual
Server
1
Virtual
Server
2
Node
1
Node
2
D60603-21
Server address
Cluster Name
Disk Resource (Q)
Server address
Network Name
Disk Resource
Spool folder
SC print job folder
SQL folder
Server address
Network Name
Disk Resource
Spool folder
Server address
Heartbeat address
Network Name
Server address
Heartbeat address
Network Name
A
A
A
A
F
F
F
F
F
F
425
17 Administrator’s installation notes
17.2.4 Failover servers
In case you intend to increase resilience by specifying failover servers (6.6) you
can use the table below to record the priorities.
Failover servers
Server address
1
2
3
4
5
6
7
8
…
17.3
Prioritized failover servers
User authentication
How are users identified at the devices?
Authentication Method
ID code
SafeCom Casi-Rusco Reader
SafeCom Cotag Reader
SafeCom Deister Reader
SafeCom EM Reader
SafeCom Felica Reader
SafeCom HID Reader 35 bit
SafeCom HID Reader 37 bit
SafeCom iCLASS Reader
SafeCom Indala Reader 26bit
SafeCom Indala Reader 29bit
SafeCom IoProx
SafeCom Legic Reader
SafeCom Magnetic Card Reader, Track 1
SafeCom Magnetic Card Reader, Track 2
SafeCom Magnetic Card Reader, Track 3
SafeCom Magnetic Card Reader DD, Tr 1
SafeCom Magnetic Card Reader DD, Tr 2
SafeCom Magnetic Card Reader DD, Tr 3
SafeCom Mifare Reader
SafeCom NEDAP Reader
SafeCom NexWatch Reader
D60603-21
426
17 Administrator’s installation notes
17.4
Devices
Devices can be SafeCom-enabled by means of:

SafeCom Controller(Type = EC)
Involves the SafeCom Controller and a SafeCom ID Device (normally the
SafeCom Front-end). This solution is pretty independent of the printer
firmware version.

SafeCom Go in the device(Type = GO)
SafeCom software is installed on the device’s hard disk or on a memory
module. Attaching a SafeCom ID Device (card reader) may require a
SafeCom ID Kit. Always check if there are any dependencies of the printer
firmware version.

SafeCom Go / SafeCom Device Server(Type = GS)
User interaction is via the device’s touch-screen control panel, but
SafeCom communication happens via the SafeCom Device Server. Always
check if there are any dependencies of the printer firmware version.

SafeCom Go / SafeCom Controller(Type = GC)
User interaction is via the device’s touch-screen control panel, but
SafeCom communication happens via the SafeCom Controller. Always
check if there are any dependencies of the printer firmware version.
Use the table below to record the SafeCom device and printer firmware level.
Device
Model
HP Color LaserJet CM4730 MFP
Xerox WorkCentre Pro 255
…
17.5
Firmware
50.011.6
14.60.22.000
…
Type
GO
GC
Version
S89 110.030*42
S80 508.770*42
…
Printer drivers
Printer driver
HP Color LaserJet 4730mfp PS
…
D60603-21
SafeCom
Version
60.52.262.32
…
427
18 Disclaimer
SafeCom software features interact with non-proprietary information areas of
printer drivers. Printer drivers withholding print job information in proprietary
information areas may hinder correct SafeCom behavior. SafeCom does NOT
guarantee that each and all SafeCom software features will work with all
printer drivers and cannot be held responsible if they do not work as expected.
The following sections contain known issues with proprietary printer driver
information causing incorrect SafeCom behavior:
Rule Based Printing rules have no effect
SafeCom Rule Based Printing needs to modify the print data stream to control:
Duplex on/off, Toner save on/off and Force job to b/w.
SafeCom Rule Based Printing has been tested against PCL5, PCL5c, PCL5e,
PCL6, PCL XL and PostScript level 2 and 3 printer drivers from HP using a broad
range of HP LaserJets.
Incorrect copy page count and job price in SafeCom PopUp
Some printer drivers sending print jobs in Enhanced Metafile (EMF) format may
provide the SafeCom PopUp dialog with an incorrect page count when printing
multiple copies of a document causing the popup dialog to show an incorrect
page count and job price. However, once the print job is completed the
SafeCom database holds the correct page count and job price.
In most cases the issue is caused by the printer driver not setting the dmCopies
value of the DEVMODE data structure correctly. Typically the printer driver will
set a value of 1 in dmCopies instead of the actual number of copies.
18
For print jobs in PCL and PostScript the SafeCom Parser compensates for this
flaw in the printer driver and obtains the correct page count value by parsing
the print job and then reporting the page count to SafeCom PopUp.
Disclaimer
SafeCom software features interact with non-proprietary information areas of
printer drivers. Printer drivers withholding print job information in proprietary
information areas may hinder correct SafeCom behavior. SafeCom does NOT
guarantee that each and all SafeCom software features will work with all
printer drivers and cannot be held responsible if they do not work as expected.
The following sections contain known issues with proprietary printer driver
information causing incorrect SafeCom behavior:
Rule Based Printing rules have no effect
SafeCom Rule Based Printing needs to modify the print data stream to control:
Duplex on/off, Toner save on/off and Force job to b/w.
SafeCom Rule Based Printing has been tested against PCL5, PCL5c, PCL5e,
PCL6, PCL XL and PostScript level 2 and 3 printer drivers from HP using a broad
range of HP LaserJets.
Incorrect copy page count and job price in SafeCom PopUp
Some printer drivers sending print jobs in Enhanced Metafile (EMF) format may
provide the SafeCom PopUp dialog with an incorrect page count when printing
multiple copies of a document causing the popup dialog to show an incorrect
page count and job price. However, once the print job is completed the
SafeCom database holds the correct page count and job price.
D60603-21
428
18 Disclaimer
SafeCom software features interact with non-proprietary information areas of
printer drivers. Printer drivers withholding print job information in proprietary
information areas may hinder correct SafeCom behavior. SafeCom does NOT
guarantee that each and all SafeCom software features will work with all
printer drivers and cannot be held responsible if they do not work as expected.
The following sections contain known issues with proprietary printer driver
information causing incorrect SafeCom behavior:
Rule Based Printing rules have no effect
SafeCom Rule Based Printing needs to modify the print data stream to control:
Duplex on/off, Toner save on/off and Force job to b/w.
SafeCom Rule Based Printing has been tested against PCL5, PCL5c, PCL5e,
PCL6, PCL XL and PostScript level 2 and 3 printer drivers from HP using a broad
range of HP LaserJets.
Incorrect copy page count and job price in SafeCom PopUp
Some printer drivers sending print jobs in Enhanced Metafile (EMF) format may
provide the SafeCom PopUp dialog with an incorrect page count when printing
multiple copies of a document causing the popup dialog to show an incorrect
page count and job price. However, once the print job is completed the
SafeCom database holds the correct page count and job price.
In most cases the issue is caused by the printer driver not setting the dmCopies
value of the DEVMODE data structure correctly. Typically the printer driver will
set a value of 1 in dmCopies instead of the actual number of copies.
For print jobs in PCL and PostScript the SafeCom Parser compensates for this
flaw in the printer driver and obtains the correct page count value by parsing
the print job and then reporting the page count to SafeCom PopUp.
In most cases the issue is caused by the printer driver not setting the dmCopies
value of the DEVMODE data structure correctly. Typically the printer driver will
set a value of 1 in dmCopies instead of the actual number of copies.
For print jobs in PCL and PostScript the SafeCom Parser compensates for this
flaw in the printer driver and obtains the correct page count value by parsing
the print job and then reporting the page count to SafeCom PopUp.
When the print job is in EMF format, it is not parsed and hence the only
available information is that which is made available by the print driver in the
DEVMODE data structure. It may be that the print driver has embedded the
page count information into the driver specific (proprietary) part of the
DEVMODE data structure, but SafeCom solution does not this information,
because it is not only printer driver specific, but also printer driver version
specific.
If you experience the issue, try any of the following:
D60603-21

Switch the printer driver to one that correctly sets the dmCopies value,
for example HP Universal Print Driver PCL6 or Xerox Global Print Driver
PCL6.

Enable Client Side Rendering in the printer driver, provided the printer
driver supports this. This way print data is sent in RAW format (PCL or
429
18 Disclaimer
SafeCom software features interact with non-proprietary information areas of
printer drivers. Printer drivers withholding print job information in proprietary
information areas may hinder correct SafeCom behavior. SafeCom does NOT
guarantee that each and all SafeCom software features will work with all
printer drivers and cannot be held responsible if they do not work as expected.
The following sections contain known issues with proprietary printer driver
information causing incorrect SafeCom behavior:
Rule Based Printing rules have no effect
SafeCom Rule Based Printing needs to modify the print data stream to control:
Duplex on/off, Toner save on/off and Force job to b/w.
SafeCom Rule Based Printing has been tested against PCL5, PCL5c, PCL5e,
PCL6, PCL XL and PostScript level 2 and 3 printer drivers from HP using a broad
range of HP LaserJets.
Incorrect copy page count and job price in SafeCom PopUp
Some printer drivers sending print jobs in Enhanced Metafile (EMF) format may
provide the SafeCom PopUp dialog with an incorrect page count when printing
multiple copies of a document causing the popup dialog to show an incorrect
page count and job price. However, once the print job is completed the
SafeCom database holds the correct page count and job price.
In most cases the issue is caused by the printer driver not setting the dmCopies
value of the DEVMODE data structure correctly. Typically the printer driver will
set a value of 1 in dmCopies instead of the actual number of copies.
For print jobs in PCL and PostScript the SafeCom Parser compensates for this
flaw in the printer driver and obtains the correct page count value by parsing
the print job and then reporting the page count to SafeCom PopUp.
PostScript) and not in EMF format.

D60603-21
Clear (disable) Enable advanced printing features in the printer driver,
provided the printer driver supports this. This way print data is sent in
RAW format (PCL or PostScript) and not in EMF format.
430
19 Index
19
Index
A3 size, 326
A4 size, 326
Accounting policy, 384
Active scripting, 416
Add billing codes, 378, 380
Add charging scheme, 326
Add device, 267
Add group, 245
Add server group, 213
Add user, 251
Adjustment of tracking data, 317
ADMIN account, 147
Administrative overhead, 37
Administrator, 169
Aliases, 172
Allow delegates, 155
Allow users to change PIN code, 154
Apple Mac, 49
Application Programming Interface, 38
Associate charging scheme with device,
331
Authentication dialog, 123
Awareness, 385
Backup, 63, 321
Benefits, 32
Billing code, 17
Billing codes, 19, 359
Broadcast addresses, 186
Broadcast for devices, 274
Built-in accounts, 147
Card lost, 260
card number conversion, 136
Cashier, 390
Cashless solution, 385
Change location of SafeCom print files, 84
Charge, 177
Charge method, 326
Charge per job, 326
Charge per page, 326
Charging scheme, 17, 319, 326
Cheating, 399
Checklist, 39
Citrix, 133
Client installation, 71
Cluster installation, 107
Color, 326
Color supported, 179
Commit billing codes, 362
D60603-21
Completed jobs, 337
Computer name, 107
Configure SafeCom Pull Port, 119
Copy Control, 179
Cost recovery, 384
Counter measures, 385
Create e-mail addresses, 154
Create users at first print, 42, 154
Customize e-mail messages, 261
Data Mining, 337
Database, 59
Database integrity check, 152
Database update log, 59
Default charging scheme, 332
Default user, 155
Delegate print, 155, 173, 261
Delete billgin codes, 379, 382, 383
Delete charging scheme, 332
Delete devices, 276
Delete print jobs, 152
Delete server, 218
Delete server group, 217
Delete tracking data, 336
Delete users, 255
Deposit, 177
Device properties dialog, 179
Device Servers, 203
Device statistics, 337
Device status, 281
DHCP server, 285
Difference between print and copy, 400
Disk space, 22, 46
Document fidelity, 48, 156
Document history, 29
Document list, 286
Domain, 17
Domains, 34
Driver name, 17, 48, 419
Dual charging scheme, 17, 319
Duplex, 326
Duplex supported, 179
E-mail error messages, 157
E-mail notification on credits reserved,
399
E-mail PUK code to new users, 157
E-mail service messages, 157
EmailBilling.txt, 377
EmailJobDelete.txt, 263
EmailPUK.txt, 262
431
19 Index
EmailWarning.txt, 263
EmailWelcome.txt, 262
Encryption, 17, 132
Error printing document, 417
Event log, 51
Event log dialog, 207
ExcludeJobNames.txt, 286
Export tracking data, 335
External file share, 83
Extract logon, 125
Failed jobs, 337
Failover servers, 219
FAQ, 32
File location, 260
Filter document list, 157
filtercard.dll, 136
Find billing codes, 379, 381
Find devices, 272
Find users, 252
Firewall, 72, 88
Frequently asked questions, 32
Front-end, 20
Full cost recovery, 384
Group info, 188
Group print, 202
Group properties dialog, 151
Help Desk Assistant, 37, 414
Hide document names, 254
Hide ID codes, 253
Home server, 18, 164
Host access list, 133
Host systems, 49
ID code, 40, 43, 44
ID code conversion, 136
ID codes, 258
ID devices, 24
Import billing codes, 364
Import users, 225
Install a card reader on a computer, 134
Install license key code, 107
Install SafeCom Administrator, 138
Installation, 69
Interrupted jobs, 337
JavaScript, 416
Job data string, 125
Job distributor, 260
Job list, 337
Job name pricing, 400
JobNamePricing.txt, 401
D60603-21
Letter size, 326
License dialog, 150
License key code, 18, 107
Local SafeCom Pull Printer, 47, 114
Login denied, 417
Login without PIN code, 165
Lost card, 260
Low limit, 177, 392
Mac, 49
Mainframe, 49
Manuals, 25
Master server, 18
Max login attempts, 154
Member of, 171
Memory, 82
MFP, 18
Modifier, 326
Modify billing codes, 379, 382, 383
Money Server, 20
Monitor device status, 281
MSCS, 18
Multi Function Printer, 18
Multi server installation, 100
Multiserver Support, 18
Network ports, 23, 53
Notification, 51
Notify administrator, 385
Novell, 49
Offline tracking, 322
Online status, 281
Online tracking, 322
Organizational units, 193, 245
Out of order, 416
PAE X86, 82
Paging file, 82
Paper size, 326
Partial cost recovery, 384
Password, 169
Patent, 2
Pay, 384
PCL, 23, 348, 357, 429
Physical Address Extension, 82
PIN code, 18
Planning, 39, 319, 384
Pooling, 118
Port Configurator, 296
Port monitor, 16, 18
Port numbers, 23, 53
Post tracking, 317
432
19 Index
PostScript, 23
Prevent cheating, 399
Print all at login, 165
Print Authentication dialog, 119
Print from other systems, 49
Print once, 202
Print Spooler, 420
Printer pooling, 118
Processes, 52
Proxy server, 186
PUK code, 18
Pull Print, 19, 179
Pull Printing, 16, 287
Push Print, 19, 179, 288
Push tracking, 37, 288
Quota control, 384
RAID, 36
RAM DISK, 418
RBP, 21
Re-installation, 85
Release credits, 385
Release credits reserved on error, 399
Replication, 103
Reply address, 157
Reserved, 177, 392
Reserved credits, 400
Resilience, 219
Restart devices, 284
Restore, 63, 321
Restricted access, 34, 179, 195, 285, 417
Retain documents, 165
Roll out considerations, 50
Rule Based Printing, 21
SafeCom Administrator, 137
SafeCom App Print, 95
SafeCom Application Print, 95
SafeCom Billing, 19
SafeCom Client, 19
SafeCom Controller, 20
SafeCom Data Mining, 337
SafeCom Device Utility, 402
SafeCom ePay, 20
SafeCom Front-end, 20
SafeCom Go, 14, 20
SafeCom Help Desk Assistant, 37, 414
SafeCom Job Server, 20
SafeCom Mobile Print, 20
SafeCom Money Loader, 385
SafeCom Money Server, 20
SafeCom Pay, 384
SafeCom PopUp, 127
D60603-21
Dialog timeout, 132
SafeCom Port Configurator, 296
SafeCom Print Client, 21, 87
SafeCom processes, 52
SafeCom Pull Port, 119
SafeCom Rule Based Printing, 21
SafeCom Service, 52
SafeCom Tracking Server, 21
SafeCom Web Interface, 21
safecom_trace folder, 65
SAP print, 125
Save-O-Meter, 149
Scalability, 35
scBackup, 64
sccoremssql, 59
scdbu.log, 59
sceventmssql, 59
Schedule billing code import, 364
Scheduled tracking data collection, 323
Scheduled user import, 225
scping, 52
scPopUp.exe, 127
scpursemssql, 59
scRuleExecuter.dll, 347, 358
scStartup.cmd, 65
sctrackingmssql, 59
Server group name, 21
Server installation, 70
Server properties dialog, 152
Server requirements, 22
Service, 52
Set low limit, 177, 392
Shared SafeCom Pull Printer, 47, 113
Smart Card, 396
SMTP mail server, 157
SQL collation, 75
SQL database, 59
SQL Server
Port, 54, 70
SQL user
safecominstall, 75, 79
Standard user, 169
Statistics dialog, 206
Subject for job name pricing, 326
System integration, 38
System requirements, 22
Clients, 23
Printers, 23
Server, 22
TCP port numbers, 23, 53
TECH account, 147
Technician, 169
Terms, 17
433
19 Index
Test server, 143
Third Party Software, 2
Tool installation, 71
Touch tone, 156, 157
Touch-screen, 34
Trace, 65
scStartup.cmd, 65
Trace facility, 68
Tracking, 287
Tracking data, 335
Tracking data adjustment, 317
Tracking Server, 21
Trademarks, 2
Transactions dialog, 398
Translate e-mail messages, 261
Troubleshooting, 414
UDP port numbers, 23, 53
Unable to connect to SafeCom server, 420
Uncollected documents, 36
Unfinished job, 399
UnfinishedJob.txt, 399
Uninstall
SafeCom, 86
SQL Server 2008 R2 Express, 86
UNIX, 49
D60603-21
Update log, 59
Update SafeCom software
Multi server installation, 106
Single server, 85
Update software
SafeCom devices, 276
Upgrade from Express to SQL, 97
Use job data logon, 125
User account dialog, 177
User created at first print, 416
User creation, 41
User import, 225
User properties dialog, 163
User statistics, 337
User unknown, 416
Virtual memory, 82
Virtual server, 21
Windows Firewall, 72, 88
Windows printer pooling, 118
Windows registry settings, 60
Windows Terminal Service, 133
WTS, 133
434
19 Index
D60603-21
436
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertisement