Configuring FUJIFILM BI AIP 7 Devices
This manual was created based on FUJIFILM BI Apeos C5570 and should be applicable to most FUJIFILM BI Apeos MFDs that support AiP 7, although slight differences may occur.
Requirements
The device has to support the YSoft SafeQ Embedded Terminal. The list of compatible devices is available on the Partner Portal in the Hardware Compatibility List (HCL)
If you are planning on using Elatec TWN4 reader, make sure the reader has Keyboard standard firmware.
Limitations can be found on page Requirements and Known Limitations of YSoft SafeQ Embedded Terminal for FUJIFILM BI .
General notes
During MFD configuration, MFD sometimes requires a reboot. When prompted for reboot, follow the instruction displayed either on web browser or on MFD operation panel.
General configuration
General settings
Login to MFD as a system administrator and go to the Device settings.
Configure date and time according to the server running YSoft SafeQ
Go to Device > System Settings > System Clock / Timers
Time Zone
Date
Time
Set these options in the aforementioned order, because the Time Zone setting has an effect on the Time setting.
Configure NTP
This is optional
Go to Device > System Settings > System Clock / Timers
NTP time synchronization: On
NTP server address
Configure waiting time to release the print job
Go to Device > System Settings > System Clock / Timers
Auto Print: 1 Seconds
Security settings
Administrator user ID and password
Access to MFD at http://MFP_IP_Address using Web Browser
The following screen will be displayed. Then click Log In. Authentication dialog pops up. Type in admin credentials.
Go to Administrator > Profile.
Press the Edit button for User Details to change and insert new user ID name for Administrator and click Save.
Press the Change Password button and insert the current password and then the new administrator password and click Save.
Log in as Admin user for the next steps.
Machine Digital Certificate
The certificate is by default installed. It is not necessary to generate one unless otherwise, you want.
Go to System > Security > Certificate Settings
SSL/TLS
Go to System > Security > SSL/TLS settings
By default, Apeos has TLS 1.2 enabled. Apeos supports TLS1.3 as the image below, but YSoft SafeQ does not support it yet.
If you want to use SafeQube 2, the Protocol version must be set to value "TLS 1.0 or Later" because of the limitations of SafeQube 2.
Make sure to keep Verify Remote Server Certificate disabled. Otherwise, users would get an error message when opening the YSoft SafeQ application on the MFD panel due to an untrusted certificate.
Network settings
Configure static IPv4 address
Go to Network > Ethernet
Edit connected Ethernet, set IP Address Resolution to STATIC and fill all required fields according to your network and click Save.
Protocol settings
Go to Network > Protocols and Verify protocols you would need are enabled.
HTTP/S
Check that Port (HTTP/HTTPS) is set to Enable All. Can be changed to Enable HTTPS Only which disables the HTTP port.
SOAP
If Scan workflow should upload Scan using SwA (SOAP with Attachments) , SOAP should be enabled.
FTP Client
If Scan workflow should upload Scan using FTP protocol, FTP should be enabled.
LPD
To receive print jobs via LPR, LPD should be enabled.
IPP
To receive print jobs via IPP/IPPS, IPP should be enabled.
Port 9100
To receive print jobs via TCP/IP RAW, Port 9100 should be enabled.
Port 9100 needs to be disabled only for improving security. You need to enable this port when performing a firmware upgrade.
SNMP (v3)
Click on SNMP v3.
Enable SNMP v3 and Allow Write. Then enable System Administrator Account and fill Authentication Password and Encryption password used in your organization and click Save.
The same Authentication Password and Encryption password have to be used in device configuration in YSoft SafeQ .
Plug-in settings
Go to System > Plug-in Settings
Enable Embedded Plug-ins
Signature Verification when Adding/Updating option will not be visible on production models. You can safely ignore it
Web browser settings
Go to Apps > Web Browser Setup
Make sure that Web Application Version has selected value V4
Worldwide models do not have option called Web Application Version as they only support version V5. FUJIFILM BI Embedded terminal 1.0.0 does not support version V5.
Card reader settings
Enable Card Reader support
Go to Permissions > Authentication and Accounting > Advanced Settings
If you are planning on using authentication with the card, set the following property to On, otherwise set it to Off.
Set Use of IC Card to On and click on Save.
Do not enable Use of IC Card when Card Reader is not connected or you will not be using authentication with the card.
Configuration after installation of YSoft SafeQ Embedded Terminal
Configure access to device functions
To restrict access to walk-up functions by YSoft SafeQ user access right setting, the setting below needs to be configured.
Go to Permissions > Permissions > Access Control and s et Device Control Panel Access to Locked.
By configuring this, the YSoft SafeQ authentication screen becomes the home screen and the user needs to authenticate to access any functions.
If the administrator wants to define access to individual functions separately, configure App Access instead of Device Control Panel Access.
After uninstallation of YSoft SafeQ Embedded Terminal from the MFD, these settings need to be set to Unlocked in order to allow access to the MFD's functions again.
Configure color copy restriction
For the terminal to restrict access to Full-color copy by YSoft SafeQ user access right setting, the setting below needs to be configured.
Go to Permissions > Permissions > Access Control and s et Color Copying to Locked and click Save.
Device NVM setup
This requires FUJIFILM BI Partner Engineer to do this on site.
Accounting settings
For Apeos to report accounting of print jobs to print jobs delivered by the SafeQ system, this configuration is required. Also if this configuration is not done, Apeos requires authentication for print requests and stores print jobs without authentication information to the internal storage.
Input in Chain-Link and corresponding value as 701-436 =0
YSoft SafeQ Payment System settings / Fax restrictions
This configuration is required if SCAN should be also managed based on credit/quota via Payment System.
This configuration is required if Fax restrictions should be also managed by YSoft SafeQ Management Service Access definitions.
The following settings are required to be done in order to make scan control (scan quota which limits the number of scanning pages) and enable Fax restrictions feature working on FUJIFILM BI devices.
Set NVM 850-015 = 1 will enable the control. Set NVM 850-015 = 0 will disable the control.
Input in Chain-Link and corresponding value as 850 -015=1