Configuring FUJIFILM BI AIP 7 Devices

This manual was created based on FUJIFILM BI Apeos C5570 and should be applicable to most FUJIFILM BI Apeos MFDs that support AiP 7, although slight differences may occur.


Requirements

  1. The device has to support the YSoft SafeQ Embedded Terminal. The list of compatible devices is available on the Partner Portal in the Hardware Compatibility List (HCL)

  2. If you are planning on using Elatec TWN4 reader, make sure the reader has Keyboard standard firmware.

General notes

  • During MFD configuration, MFD sometimes requires a reboot. When prompted for reboot, follow the instruction displayed either on web browser or on MFD operation panel.

General configuration

General settings

Login to MFD as a system administrator and go to the Device settings.

images/download/attachments/298102722/image2021-8-5_15-4-59.png

Configure date and time according to the server running YSoft SafeQ

Go to Device > System Settings > System Clock / Timers

  • Time Zone

  • Date

  • Time

Set these options in the aforementioned order, because the Time Zone setting has an effect on the Time setting.

images/download/attachments/298102722/image2021-8-5_15-5-52.png

images/download/attachments/298102722/image2021-8-5_15-6-36.png

Configure NTP

This is optional

Go to Device > System Settings > System Clock / Timers

  • NTP time synchronization: On

  • NTP server address

images/download/attachments/298102722/image2021-8-5_15-7-17.png

Configure waiting time to release the print job

Go to Device > System Settings > System Clock / Timers

  • Auto Print: 1 Seconds

images/download/attachments/298102722/image2021-8-5_15-7-55.png

Security settings

Administrator user ID and password

Access to MFD at http://MFP_IP_Address using Web Browser

The following screen will be displayed. Then click Log In. Authentication dialog pops up. Type in admin credentials.

images/download/attachments/298102722/image2021-8-3_13-2-29.png

Go to Administrator > Profile.

images/download/attachments/298102722/image2021-8-3_13-4-44.png

Press the Edit button for User Details to change and insert new user ID name for Administrator and click Save.

images/download/attachments/298102722/image2021-8-3_13-6-47.png

images/download/attachments/298102722/image2021-8-3_13-14-12.png

Press the Change Password button and insert the current password and then the new administrator password and click Save.

images/download/attachments/298102722/image2021-8-3_13-10-22.png

images/download/attachments/298102722/image2021-8-3_13-12-6.png

Log in as Admin user for the next steps.

Machine Digital Certificate

The certificate is by default installed. It is not necessary to generate one unless otherwise, you want.

Go to System > Security > Certificate Settings

images/download/attachments/298102722/image2021-8-3_13-15-46.png

images/download/attachments/298102722/image2021-8-3_13-16-43.png

SSL/TLS

Go to System > Security > SSL/TLS settings

By default, Apeos has TLS 1.2 enabled. Apeos supports TLS1.3 as the image below, but YSoft SafeQ does not support it yet.

If you want to use SafeQube 2, the Protocol version must be set to value "TLS 1.0 or Later" because of the limitations of SafeQube 2.

Make sure to keep Verify Remote Server Certificate disabled. Otherwise, users would get an error message when opening the YSoft SafeQ application on the MFD panel due to an untrusted certificate.

images/download/attachments/298102722/image2021-8-3_13-19-28.png

Network settings

Configure static IPv4 address

Go to Network > Ethernet

images/download/attachments/298102722/image2021-8-3_13-20-44.png

Edit connected Ethernet, set IP Address Resolution to STATIC and fill all required fields according to your network and click Save.

images/download/attachments/298102722/image2021-8-3_13-22-42.png

images/download/attachments/298102722/image2021-8-3_13-24-13.png

Protocol settings

Go to Network > Protocols and Verify protocols you would need are enabled.

images/download/attachments/298102722/image2021-8-3_13-25-51.png

images/download/attachments/298102722/image2021-8-3_13-26-20.png

HTTP/S

Check that Port (HTTP/HTTPS) is set to Enable All. Can be changed to Enable HTTPS Only which disables the HTTP port.

images/download/attachments/298102722/image2021-8-3_13-32-48.png

SOAP

If Scan workflow should upload Scan using SwA (SOAP with Attachments) , SOAP should be enabled.

images/download/attachments/298102722/image2021-8-3_13-33-21.png

FTP Client

If Scan workflow should upload Scan using FTP protocol, FTP should be enabled.

images/download/attachments/298102722/image2021-8-3_13-33-54.png

LPD

To receive print jobs via LPR, LPD should be enabled.

images/download/attachments/298102722/image2021-8-3_13-34-30.png

IPP

To receive print jobs via IPP/IPPS, IPP should be enabled.

images/download/attachments/298102722/image2021-8-3_13-34-58.png

Port 9100

To receive print jobs via TCP/IP RAW, Port 9100 should be enabled.

images/download/attachments/298102722/image2021-8-3_13-35-24.png

Port 9100 needs to be disabled only for improving security. You need to enable this port when performing a firmware upgrade.

SNMP (v3)

Click on SNMP v3.

images/download/attachments/298102722/image2021-8-3_13-37-8.png

Enable SNMP v3 and Allow Write. Then enable System Administrator Account and fill Authentication Password and Encryption password used in your organization and click Save.

images/download/attachments/298102722/image2021-8-3_13-53-56.png

The same Authentication Password and Encryption password have to be used in device configuration in YSoft SafeQ .

Plug-in settings

Go to System > Plug-in Settings

Enable Embedded Plug-ins

Signature Verification when Adding/Updating option will not be visible on production models. You can safely ignore it

images/download/attachments/298102722/image2021-8-3_13-55-33.png

Web browser settings

Go to Apps > Web Browser Setup

images/download/attachments/298102722/webBrowserSetup.png

Make sure that Web Application Version has selected value V4

images/download/thumbnails/298102722/webAppVersion.png

Worldwide models do not have option called Web Application Version as they only support version V5. FUJIFILM BI Embedded terminal 1.0.0 does not support version V5.

Card reader settings

Enable Card Reader support

Go to Permissions > Authentication and Accounting > Advanced Settings

images/download/attachments/298102722/image2021-8-3_14-22-57.png

images/download/attachments/298102722/image2021-8-3_14-24-9.png

If you are planning on using authentication with the card, set the following property to On, otherwise set it to Off.

Set Use of IC Card to On and click on Save.

images/download/attachments/298102722/image2021-8-3_14-25-59.png


Do not enable Use of IC Card when Card Reader is not connected or you will not be using authentication with the card.

Scan related settings

Enable auto-completion of email address in native scanning application

Go to Apps > Scan > Add Me, check On, and click Save.

images/download/attachments/298102722/image2023-2-8_14-43-48.png
images/download/attachments/298102722/image2023-2-8_14-45-8.png

Go to Apps > Email > SMTP Settings "Setup"
images/download/attachments/298102722/image2021-8-3_14-37-52.png
images/download/attachments/298102722/image2023-2-8_14-33-39.png

Fill the Device Email Address and Server Settings

images/download/attachments/298102722/image2023-2-8_14-35-59.png

Go to Add Me, check On, and choose to Add to "To" or "Cc".
Click Save.

images/download/attachments/298102722/image2021-8-3_14-41-32.png

images/download/attachments/298102722/image2021-8-3_14-42-44.png

You may optionally configure the "From " Field.

Go to "From " Field

images/download/attachments/298102722/image2021-8-3_14-50-24.png

Change Edit "From" Field option to Logged-In Users Only and click Save.

images/download/attachments/298102722/image2021-8-3_14-53-22.png

Configuration after installation of YSoft SafeQ Embedded Terminal

Configure access to device functions

To restrict access to walk-up functions by YSoft SafeQ user access right setting, the setting below needs to be configured.

Go to Permissions > Permissions > Access Control and s et Device Control Panel Access to Locked.

By configuring this, the YSoft SafeQ authentication screen becomes the home screen and the user needs to authenticate to access any functions.

If the administrator wants to define access to individual functions separately, configure App Access instead of Device Control Panel Access.

After uninstallation of YSoft SafeQ Embedded Terminal from the MFD, these settings need to be set to Unlocked in order to allow access to the MFD's functions again.

images/download/attachments/298102722/image2021-8-3_14-56-53.png

images/download/attachments/298102722/image2021-8-23_9-26-22.png

Configure color copy restriction

For the terminal to restrict access to Full-color copy by YSoft SafeQ user access right setting, the setting below needs to be configured.

Go to Permissions > Permissions > Access Control and s et Color Copying to Locked and click Save.

images/download/attachments/298102722/image2021-8-3_14-56-53.png

images/download/attachments/298102722/image2021-8-4_8-39-43.png

Device NVM setup

This requires FUJIFILM BI Partner Engineer to do this on site.

Accounting settings

For Apeos to report accounting of print jobs to print jobs delivered by the SafeQ system, this configuration is required. Also if this configuration is not done, Apeos requires authentication for print requests and stores print jobs without authentication information to the internal storage.

Input in Chain-Link and corresponding value as 701-436 =0

images/download/attachments/298102722/image2021-8-6_11-18-23.png

YSoft SafeQ Payment System settings / Fax restrictions

This configuration is required if SCAN should be also managed based on credit/quota via Payment System.

This configuration is required if Fax restrictions should be also managed by YSoft SafeQ Management Service Access definitions.

The following settings are required to be done in order to make scan control (scan quota which limits the number of scanning pages) and enable Fax restrictions feature working on FUJIFILM BI devices.

Set NVM 850-015 = 1 will enable the control. Set NVM 850-015 = 0 will disable the control.

Input in Chain-Link and corresponding value as 850 -015=1

images/download/attachments/298102722/image2021-8-6_11-18-26.png