ndi professional services system build reference & testing

© 2017 Nuance Communications, Inc. All rights reserved.

NDI Professional Services System Build Reference & Testing Guide EFI Equitrac Office v 5.6 & 5.7

2 System Build Reference & Configuration Guide

NDI Professional Services April 2nd,2018


Table of Contents

Executive Summary .............................................................................................................. 3

Stakeholders ......................................................................................................................... 4

Document Information ...................................................................................................... 4

Project Members .............................................................................................................. 4

System Build ......................................................................................................................... 5

Reference Documents ...................................................................................................... 5

Infrastructure .................................................................................................................... 6

Software Installation Steps ............................................................................................. 10

Software Licensing Steps ............................................................................................... 18

Software Configuration ................................................................................................... 21

Device Configuration Details .......................................................................................... 38

Configuration (Xerox Altalink C8070) ............................................................................. 48

Device Settings – AltaLink C8070 .................................................................................. 49

Print Drivers used: .......................................................................................................... 55

Appendix ............................................................................................................................. 56

Glossary of Terms .......................................................................................................... 56




Executive Summary

Electronics for Imaging, Inc (EFI) sent Nuance fiery unit to be tested on Xerox multi-function printers (MFP) specifically

Altalink 8000 series devices. Nuance Analyst created a controlled environment with one Core Account Server (CAS) and

one print server (DCE/DRE). All testing was performed at least twice for consistency. EFI engaged Nuance Document

Imaging Professional Services (NDI PS) team to build a Nuance software configuration for certification of the fiery network

controller. This build reference guide outlines the steps necessary to implement that design and produce a working

system. This guide depicts the steps taken and specific settings for a specific environment. If the guide is used to create a

similar configuration in a different environment, great care should be taken to adapt the steps and configurations as

needed.

Information covered in this guide will include:

– Installation process

– Software updating/patching using services packs/hotfixes

– Software licensing

– Software and server configuration settings

– Device (MFP) installation

– Fiery controller installation

– Testing




Stakeholders

Document Information

Project Name Equitrac Office 5.6 Installation

Document Prepared by Khurram Iftikhar

Reviewed and approved by Jennifer Castillo

Reviewed and approved date April 2, 2018

Project Members The following people are stakeholders within their respective organizations.

Name Organization Role

Gayle Schaeffer Electronics for Imaging, Inc Project Owner

Justin Rea Electronics for Imaging, Inc Project Manager

Anthony Leung Electronics for Imaging, Inc Project Manager

NUANCE PROFESSIONAL SERVICES CONSULTANTS The following individuals within the Nuance organization are responsible for this document.

Name Organization Title Role

Rob O'Leary Nuance Senior Professional Services Manager Project Owner

Khurram Iftikhar Nuance Senior Professional Services Consultant Project Manager

Jennifer Castillo Nuance Senior Professional Services Consultant Project Manager




System Build

Reference Documents

SYSTEM DESIGN DIAGRAMS A visual representation of the system design described in the system design document can be found here:

Figure # 1

Print Server

Equitrac Office Core Accounting Server (CAS) Roles

· SQL Server Express· CAS, SCH.SLP· IIS (EQ WebClient)

Print Server Roles

· DRE, DCE, DWS, SPE, SLP· Document & Print Services

Active Directory

Xerox Altalink 8000

Fiery Network Controller




Infrastructure

FIREWALL CONFIGURATION Windows Firewall not active on servers

Firewall Port & Reason Status

ANTIVIRUS EXCEPTIONS & CONFIGURATION

Item Description

Product Symantec End Point Protection

On Access Scanner Yes

Excluded Directories C:\Windows\System32\spool

C:\Program Files\Equitrac

C:\Users\svcequitrac\AppData\Local\Equitrac

SERVICE ACCOUNTS

Account name Description

TRN\EQService Used to run all Equitrac services

SERVER DETAILS

Server 1 – CAS.TRN.local

Nuance software/service and version Role or usage

EQ Core Accounting Service (CAS) Communicates with the central database containing all Equitrac Office accounts, transaction tracking and device information. Considered the central core of all print and copy tracking activity, CAS handles user authentication requests and tracks activity forwarded by DRE and DCE.

EQ Scheduler Service Responsible for launching all tasks that run on a timed interval





EQ Service Location Protocol (SLP) Registers secure print jobs and their location for retrieval by users

Server 1 Parameters Value/Description

Host Name CAS

Domain TRN.local

Virtual or Physical VM

CPU Information 2 x 2.20 GHz Xeon E5-2660

Server Memory 4096 MB

Free Disk Space C:\80 GB

Server Operating System Windows Server 2012 R2

Server IP Address(es) 10.17.21.202

Subnet Mask 255.255.252.0

Default Gateway 10.17.21.1

Domain Service Account TRN\EQService

Failover? No

Installation Media Location C:\EO_Install

Windows Installer 4.5? Yes

.NET Framework 4.5? Yes

Internet Information Services Yes




Server 2 – EQDRE.TRN.local


EQ Device Communication Engine (DCE) manages and tracks walk-up secure document release, copy and scan jobs.

EQ Document Routing Engine (DRE) Tracks print jobs originating from network printers.

EQ Scan Processing Engine (SPE) Used to perform OCR operation on scanned jobs

EQ Device Web Service (DWS) Used for Xerox ECSP platform for embedded client

EQ Service Location Protocol (SLP) Registers secure print jobs and their location for retrieval by users




Server 2 Parameters Value/Description

Host Name EQDRE.TRN.local

Domain TRN.local

Virtual or Physical VM

CPU Information 2 x 2.20 GHz Xeon E5-2650 v2

Server Memory 8192MB

Free Disk Space C:\80 GB

Server Operating System Windows Server 2012 R2

Server IP Address(es) 10.17.21.203

Subnet Mask 255.255.252.0

Default Gateway 10.17.21.1

Domain Service Account TRN\EQService

Failover? No

Installation Media Location C:\EO_Install

Windows Installer 4.5? Yes

.NET Framework 4.5? Yes

Print Management Role and MMC Application? Yes




Software Installation Steps

EQUITRAC EXPRESS V5.6 – CORE ACCOUNTING SERVER (CAS)

Step & Description Screenshot

Navigate to the installation media directory of the CAS

server.

C:\EO_Install\EO5.6\EO\Installs\WINx64

Run the Equitrac.Express.x64 file as an administrator

(Right Click > Run as Administrator)

If you receive the Open File – Security Warning select

the Run option

When the Equitrac Express Setup window appears

select the Next option to continue with the installation.

Check the acceptance box for the EULA agreement and

select Next to continue.





Select the appropriate Language and confirm the

Standard install option is selected.

Click Next to continue.

The following components are installed on this CAS server:

· Core Accounting Service

· Web Client

· Administrative Applications

· Documentation

Select Next to continue.

Input your Equitrac service account credentials and select Test Credentials. You will only be able to select next to continue after a successful test.





If your local windows firewall is active select Setup automatically to add the port exceptions required by Equitrac. If there is no local firewall active use the Setup manually option and nothing will be changed. Select Next to continue.

Select the database platform you will be using and select Next to continue.

Input your database server name and instance if necessary: Server Name\instance name





Confirm the Equitrac service account is stated in the Windows Authentication dialogue and select Test Connection. You will not be able to proceed without a successful test. Select Next to continue.

Select Install to begin the software installation.

When the installation wizard completed select Finish to complete the installation. You may need to start the EQCAS service manually the first time before opening the System Manager.




EQUITRAC EXPRESS V5.6 – PRINT SERVER (DRE/DCE)


Navigate to the installation media directory of server 1. C:\EO_Install\EO5.6\EO\Installs\WINx64 Run the Equitrac.Express.x64 file as an administrator (Right Click > Run as Administrator) If you receive the Open File – Security Warning select the Run option

When the Equitrac Express Setup window appears select the Next option to continue with the installation.

Check the acceptance box for the EULA agreement and select Next to continue.





Select the appropriate Language and confirm the Standard install option is selected. Click Next to continue.

The following components are installed on this Print server:

· Document Routing Engine

· Device Control Engine

· Device Web Services

· Scan Processing Service


Input the IP address or the FQDN of you CAS server and select Test Credentials.





Input your Equitrac service account credentials and select Test Credentials. You will only be able to select next to continue after a successful test.

If your local windows firewall is active select Setup automatically to add the port exceptions required by Equitrac. If there is no local firewall active use the Setup manually option and nothing will be changed.


Select Install to begin the software installation.





When the installation wizard completed select Finish to complete the installation.




Software Licensing Steps

EQUITRAC OFFICE V5.6 LICENSING


Each Equitrac Serial number must be manually registered at: https://activation.equitrac.com/register/ to obtain an Activation code

In the Equitrac System Manager select the licensing option from the left side tree

Select the <Add…> option

https://activation.equitrac.com/register/





Select Next when the Equitrac Office software activation wizard opens.

Input the serial number and select the Add button. You can select the Add Multiple… and add multiple serial numbers at once. Select Next when complete.





Select Next when the Manual activation option appears.

Select finish at the manual activation confirmation screen.

You will be prompted to input the activation code for the corresponding serial number obtained in the registration process in the first step. Select Add to add the license to the system.




Software Configuration

EQUITRAC OFFICE V5.6

Configuration options and steps to take Screenshot

Open the Equitrac System Manager and select the Configuration option from the left side options.

Accounting and Quotas > Account Charging: Option Charge to Department if available is NOT set (Default)

Accounting and Quotas > Account creation: Set to: Automatically create a new user account (Default)





Accounting and Quotas > Accounting precision: Calculate document cost to: 2 decimals (default) *NOTE: If this setting is changed you must also change it in the Windows Regional settings on the server for numerical as well as currency settings or Windows will round to the decimal it is set for.

Accounting and Quotas > Color quota: No color quota enabled (Default)

Accounting and Quotas > Transaction tracking: Enabled (Default)





Accounting and Quotas > Unidentified documents:

Configuration sets > Language sets: None configured (Default)

Configuration sets > PageControl Touch: N/A for this system (Default)





Devices > Control terminals: Copier timeout: 60 Message display time: 2000 Administrator PIN: 2468 Control terminal timeout: 30 Only release when device is ready: enabled (All Default)

Devices > Defaults: Media size: Letter Monochrome settings: Color Track Twin/Mono Color as Black and White: No (All Default)





Devices > Embedded devices: Xerox Secure Access: Tracked activities: Copy Enable release all jobs prompt: enabled Force logout on swipe: enabled Xerox ECSP: Tracked activities: Copy Force logout on swipe: enabled Enable job limits: enabled End session inactivity timer: 60 Polling interval: 900 Polling threads: 6





Devices > Function access control: Default access: Allow all users (Default)

Network environment > Automated PIN code management: Not enabled (Default)





Network environment > Directory Services synchronization: AD Sync enabled: Yes AD Controller: AD.TRN.local:

Field mappings: Account name = sAMAccountName Display name = displayName Email address = mail Updates applied: Changes Deletes Automatic synchronization: enabled

Network environment > Domain qualification: Not enabled (Default)

Network environment > SMTP mail server: SMTP Email server address: Mail.TRN.local SMTP Email server port: 25 Mail from address: [email protected]





Network environment > SMNP configuration: SNMP v1/2: enabled Get: public Set: private Polling interval: 30 (All Default)

Network environment > Uplink: Name: (Not necessary in a single CAS system) Do not post transactions: enabled (All Default)





Printing > Desktop printing exclusion list: N/A for this system (All Default)

Printing > Driver repository: N/A for this system Nothing configured (All Default)





Printing > DRE/DCE and Follow-You Printing: All Default settings except: Job expiry time: 72 hours





Printing > Port exclusion list: N/A for this system (All Default)

Security and Authentication > Access permissions: Admin: BUILTIN/Administrators Reports: BUILTIN/Administrators Accounts: BUILTIN/Administrators Department: BUILTIN/Administrators Device Admin: BUILTIN/Administrators Print distribution: BUILTIN/Administrators (All Default)

Security and Authentication > External authentication: Windows: enabled Domain 1: TRN.local





Security and Authentication > Guest User: N/A for this system Nothing configured (Default)

Security and Authentication > User authentication: Equitrac Office PINs: enabled External user ID and password: enabled Store secondary PIN encrypted: enabled Login caching: DCE servers: enabled DRE servers: Print, charge accounts later Authentication options: Input type: Card swipe or keypad entry Secondary prompt: Only with keyboard login Deny keyboard login with empty password: enabled Card data position 1-50 (default) No HID decoding configured (Default) Auto-register primary PINs: enabled





User interaction > Billing code access: User access to billing codes: All codes (Default)

User interaction > Error notifications: Using messaging service: enabled (Default)

User interaction > Savings report metrics: All Default settings





User interaction > Session flow: All Default settings

User interaction > Workstation popup behavior: N/A for this system (All Default)





Workflows and scanning > Scan configuration: N/A for this system Licensing required

Workflows and scanning > Scan destinations: N/A for this system Licensing required





Workflows and scanning > Scan-to-Me: N/A for this system (All Default)

Workflows and scanning > Workflow containers: Launcher: Active Follow-You Printing: Default Scan-to-Me Scan





Quick Shortcuts: Follow-You Printing: Default Scan-to-Me Scan Scan: Scan-to-Me: Default (All Default)

Workflows and scanning > Workflow management: Mail: active My Folder: active Follow-You Printing: active Release all: active Enable copier: active Fax Over SMTP: active (All Default)




Device Configuration Details Device is delivered by Xerox but connected to the network by Nuance.




Create printer object on the print server.

Select Add a printer

Select 'The Printer that I want isn't listed'

Select 'Add a local or network printer as an

administrator'

Select 'The Printer that I want isn't listed'




Select 'Add a local printer or network printer with

manual settings'

Create a new TCP/IP port for the printer

Input IP address for Printer

Print Driver for all printers is the Xerox Pull Print Driver

PCL6




Printer Name is USWAP-Prt-1120

The printers are NOT shared

Print a test page when complete. This is Equitrac v5.6

so no port conversion is required. This step will create

the Physical device and print queue in the System

Manager.




Leave the print server and login to the CAS server.

Launch System Manager and select the Devices list.

Locate and open the new device shown by IP address.

Open the physical device and re-name the device with

the same device name that was entered on the

spreadsheet.

The Description is the numerical Device ID (the last 4

numbers of the device name)

Set the Manufacturer and the Model attributes

Select 'Release documents from pull group' and select

both pull groups.

Richt click the physical device and add the

embedded device controller to the Physical device

Type = EIP, JBA

Name = EMB_<DeviceName> or <IP Address>

Input admin credentials and Click OK

***Pause here – This step is called later in this guide.

Set the Enable Follow-You Printing applet setting and

Initialize

Note: Please wait for the Initialization to complete

before proceeding as the device will re-boot at this

time.




Configuration (Xerox Altalink C8070)

FIERY CONFIGURATION The device is setup with dual IP, utilizing individual ethernet ports, one for the Fiery network controller and the other for

Xerox MFP:

Topology Layout: -




Device Settings – AltaLink C8070 Please find the Xerox device setting screen shots below:

Go to the webpage of the MFP and login

Click Properties Tab

In the Left pane under Security>Certificate> click on

Certificate Key Length.

In the Right pane, click on 1024-bit minimum for the

key length and Apply.




Create a valid self-sign certificate

In the Left pane, under Connectivity please click Setup

and in the Right pane click on edit in front of HTTP

Under connection select the Enable radio button with

port 80.

Under Force Traffic Over Secure Connection (HTTPS)

Select the Yes radio button with port 443

Keep Alive Timeout should be at least 10 seconds.

Click Save.




Now, in Left pane go to General Setup > and enable

the follow two check boxes:

[X] Export password to Extensible Services

[X] Enable the Extensible Services Browser

Click Apply

Click on Enable All

Now, in the Left pane under Login / Permissions /

Accounting, click on Accounting Methods

Enable Network Accounting for photocopy tracking




Now, in the Left pane under Login / Permissions /

Accounting, click on Login Methods

Enable Xerox Secure Access Unified ID System

Under the same step as above, click on the highlighted

Edit, for Xerox Secure Access Setup.

Configured the DCE server IP or FQDN here




Now, initialize the device from within Equitrac System

Manager

Richt click the physical device and add the

embedded device controller to the Physical device

Type = EIP, JBA

Name = EMB_<DeviceName> or <IP Address>

Input admin credentials and Click Initialize

*** Earlier step recalled

Set the Enable Follow-You Printing applet setting and

Initialize

Note: Please wait for the Initialization to complete

before proceeding as the device will re-boot at this

time.

Go back to the device’s home page and in the Left

pane, click on Users Permissions




In the Right pane, under Non-Logged-In Users > Click

on Edit

Now, Click on Apps & Tools here

Click on Custom, and Lock (Not Allowed) the following:

· Copy

o Color Copy

· ID Card Copy

o Color Copy

· Follow-You

You may select other options as needed.

At this time you are now ready for testing, if you need

to test the card reader please make sure it’s connected

to the USB port and the light on the reader is turned

ON.




Logged into Fiery controller and performed the following action:

1. Open Internet explorer, type the IP address of the Fiery unit, and then click the Configure tab on the

Fiery server homepage. Click Launch Configure and log on with Administrator privileges.

2. Go to Configure > Network > SNMP and specify the following settings:

a) Set Security Level to minimum to allow Set requests and Get requests.

b) In Write Community Name, type Private. EIP applications use Private as the community string for Set

requests.

Installed the Fiery print queue on the print server, submitted a print job and tracked the transaction in the

Equitrac reports manager successfully.

Installed the Xerox Altalink print queue on the print server, submitted a print job and tracked the transaction

in the Equitrac reports manager successfully.

Initialized the Xerox Altalink device successful, locked the photocopy and Equitrac Follow-You application on

the device.

Logged into the device successfully and performed the following tests:

▪ Device Initialization test (ECSP) = Successful

▪ Embedded login test = Successful

▪ Regular print submission test = Successful

▪ Equitrac Scan to me = Successful

▪ Photocopy test = Successful

▪ Print tracking = Successful

▪ Print tracking using Fiery driver = Successful

▪ Follow-You print submission – Successful

▪ Follow-You print submission using Fiery driver – Successful

▪ Follow-You print release – Successful

▪ Follow-You print release using Fiery driver – Successful

▪ Manual Login via MFP panel – Successful

▪ Card Registration – Successful

▪ Equitrac 5.6 testing & tracking – Successful

▪ Equitrac 5.7 testing & tracking – Successful

▪ All the EFI Fiery functions are found to be working

All testing has been 100% successful without issues or performance degradation.

Print Drivers used:

Xerox Global Print Driver PCL6 v5.585.13.0

Xerox Pull Print Driver PS v5.585.13.0




Appendix

Glossary of Terms

Term Description

Server A Physical/Virtual unit running an operating system which serves an application to users.

SQL Structured query language

Database A structured set of data held in a computer, especially one that is accessible in various ways.

Secure Print/Follow

You Print/Pull Print

A specific type of print action that refers to the queuing of documents and information for on-

demand print release by an authenticated user at a print device such as an MFP

SME This persona serves as an authority in a particular area, topic, or domain. A SME may be a

Nuance resource, an end-customer resource, a partner resource or all of the above

MFD/MFP Refers to a multi-function device/printer typically capable of print, copy, and scan

Core Accounting

Server (CAS)

The Core Accounting Server is a core component of Equitrac Office and Express. This service

controls the accounting database that stores all printer, user, department, transaction and

balance information. The CAS also verifies users, calculates printing charges and assigns

charges to an appropriate user or department.

Device Control Engine

(DCE)

A core component of Equitrac Office and Express, the DCE communicates with terminals that

control access to MFPs.

Document Routing

Engine (DRE)

A core component of Equitrac Office and Express, the DRE enables document flow from

workstations to output devices. When a job is released, the DRE captures the job

characteristics and communicates the characteristics to the CAS.

Device Web Server

(DWS)

A core component of Equitrac Office/Express, the DWS acts as a virtual web server, and

brokers communication between a Xerox & Fuji Xerox MFP and Equitrac’s Device Control

Engine (DCE).

Service Location

Protocol (SLP)

The Service Location Protocol (SLP) is a standard TCP/IP network service discovery protocol.

SLP utilizes unicast UDP port 427 for communications between Service Agents (SA),

Directory Agents (DA), and User Agents (UA). SLP allows Equitrac services to quickly update

the status and location of other services as needed. The SLP is primarily used by DCE to

locate DREs and DRCs that are holding documents for a specific user.