Epa System Installation Guide npd6718-00 en

Epson Print Admin
System Installation Guide
NPD6718 -00 EN
About this Guide
About this Guide
The content of this document

This guide describes the procedures necessary to prepare for operation from the installation of the Epson Print
Admin.
❏ What you need to set up
❏ Check device information
❏ System installation
❏ System configuration
❏ Operational check
❏ Check before practical usage of the system
Following manuals are available.

❏ Epson Print Admin: Solution Overview
Provides a summary of Epson Print Admin.
❏ Epson Print Admin: Installation Quick Guide
Explains the procedure for installing this system.
❏ Epson Open Platform: Hardware Setup Guide
Explains how to set up Epson Open Platform on multi-function devices (multi-function devices).
❏ Epson Print Admin: Administrator’s Guide
Explains system settings for Epson Print Admin.
❏ Epson Print Admin: User’s Guide
Explains how standard users can use Epson Print Admin.
Using this Guide
Marks and Symbols
! Caution:
Instructions that must be followed carefully to avoid bodily injury.
c Important:
Instructions that must be observed to avoid damage to your equipment.
Note:
Provides complementary and reference information.
2
About this Guide
Related Information
& Links to related sections.
Screenshots Used in This Guide

❏ Screenshots used in this guide are currently under development. They may differ from the release version.
❏ Setting items may vary depending on products and setting conditions.
Operating System References

Windows
In this manual, terms such as “Windows 10”, “Windows 8.1”, “Windows 8”, “Windows 7”, “Windows Vista”,
“Windows Server 2019”, “Windows Server 2016”, “Windows Server 2012 R2”, “Windows Server 2012”, “Windows
Server 2008 R2”, “Windows Server 2008” refer to the following operating systems. Additionally, “Windows” is used
to refer to all versions.
® ®
❏ Microsoft Windows 10 operating system
❏ Microsoft® Windows® 8.1 operating system
❏ Microsoft® Windows® 8 operating system
❏ Microsoft® Windows® 7 operating system
❏ Microsoft® Windows Vista® operating system
❏ Microsoft® Windows Server® 2019 operating system
❏ Microsoft® Windows Server® 2012 R2 operating system
❏ Microsoft® Windows Server® 2008 R2 operating system
Mac OS
In this manual, “Mac OS” is used to refer to “macOS Catalina”, “macOS Mojave”, “macOS High Sierra”, “macOS
Sierra”, “OS X El Capitan”, “OS X Yosemite”, “OS X Mavericks”, and “OS X Mountain Lion”, “Mac OS X v10.7.x”,
and “Mac OS X v10.6.8”.
3
Contents
Contents
About this Guide 4. Setting the system and registering

The content of this document. . . . . . . . . . . . . . . . . . 2 information
Using this Guide. . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Login. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Marks and Symbols. . . . . . . . . . . . . . . . . . . . . . . 2 Initial configuration menu. . . . . . . . . . . . . . . . . . . 30
Screenshots Used in This Guide. . . . . . . . . . . . . . 3 Setting Each Item. . . . . . . . . . . . . . . . . . . . . . . . . . 30
Operating System References. . . . . . . . . . . . . . . . 3
Basic settings. . . . . . . . . . . . . . . . . . . . . . . . . . . 30
SMTP Server Settings. . . . . . . . . . . . . . . . . . . . .31
Setting Up LDAP server settings. . . . . . . . . . . . . . . . . . . . . 33
Setup procedure. . . . . . . . . . . . . . . . . . . . . . . . . . . .6 Registering a Multi-function Device. . . . . . . . . . 35
What you need to set up. . . . . . . . . . . . . . . . . . . . . .7
5. Operational check
1. Prepare device and check Printer driver installation. . . . . . . . . . . . . . . . . . . . 38
information Register to an authentication card. . . . . . . . . . . . . . 39
Print check. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Related Hardware. . . . . . . . . . . . . . . . . . . . . . . . . . 8
Epson Print Admin Server. . . . . . . . . . . . . . . . . . 8
Multi-function device. . . . . . . . . . . . . . . . . . . . .10 6. Check Before Practical Use of the
Client computer. . . . . . . . . . . . . . . . . . . . . . . . . 11 System
Installer and license. . . . . . . . . . . . . . . . . . . . . . . . 12 Installing the printer driver. . . . . . . . . . . . . . . . . . .42
Checking Registration Information. . . . . . . . . . . . . 12 Add ID and domain to driver. . . . . . . . . . . . . . . 42
System Configuration. . . . . . . . . . . . . . . . . . . . .12 Select Driver Type. . . . . . . . . . . . . . . . . . . . . . . 43
Multi-function device. . . . . . . . . . . . . . . . . . . . .13 Installing on the client computer. . . . . . . . . . . . .43
Authentication device and the authentication Installing on the print server. . . . . . . . . . . . . . . .43
card. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14 Distribute by using Active Directory Server
Groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Group Policy and so on. . . . . . . . . . . . . . . . . . . 46
User. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Distributing Files. . . . . . . . . . . . . . . . . . . . . . . . 48
Distribute in EpsonNet SetupManager. . . . . . . . 49
2. Operational Check of the Registering a License. . . . . . . . . . . . . . . . . . . . . . . 49
Installation Environment Registering Multi-function Devices. . . . . . . . . . . . .50
Creating a provisional printer registration for
Check essential software. . . . . . . . . . . . . . . . . . . . . 15
the CSV file. . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Ports to be used. . . . . . . . . . . . . . . . . . . . . . . . . . . 15
High security settings. . . . . . . . . . . . . . . . . . . . . . .53
Check connection. . . . . . . . . . . . . . . . . . . . . . . . . 17
Set the print environment and rules. . . . . . . . . . . . 53
Multi-function device. . . . . . . . . . . . . . . . . . . . .18
Rules/Policy Settings. . . . . . . . . . . . . . . . . . . . . 53
Server, client computer. . . . . . . . . . . . . . . . . . . .18
Editing an unassigned user. . . . . . . . . . . . . . . . . 54
Setting Cost. . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
3. Installing the System User Registration. . . . . . . . . . . . . . . . . . . . . . . . . . 56
Running the installer. . . . . . . . . . . . . . . . . . . . . . . 20 User account registration. . . . . . . . . . . . . . . . . . 56
Pre-installation. . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Synchronizing with an LDAP Server. . . . . . . . . . 57
Creating Server certificate and Binding settings. . 23
Installing Epson Print Admin. . . . . . . . . . . . . . . . . 25 Uninstalling and Updating
Uninstalling. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .59
Updating the System. . . . . . . . . . . . . . . . . . . . . . . 61
4
Contents
Solving Problems Sample Driver Distribution for Group Policies. . . . .92

Installation settings for a distributed driver. . . . . 92
Administrator pages and user pages do not appear. .62
Uninstalling distributed drivers. . . . . . . . . . . . . .95
Card authentication, authentication using the
control panel, and screen transitions take time. . . . .62 Trademarks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
For Servers Without an Internet Connection. . . . 62 Caution. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
For Servers with an Internet Connection. . . . . . . 66
Repair Installation. . . . . . . . . . . . . . . . . . . . . . . . . 66
What to do if the Epson Print Admin server
goes down. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Setting the Authentication Server Error Mode. . . 67
Setting each Function. . . . . . . . . . . . . . . . . . . . .69
Error menu. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
HTTP communication error. . . . . . . . . . . . . . . .72
Certificate error. . . . . . . . . . . . . . . . . . . . . . . . . 72
Other network errors. . . . . . . . . . . . . . . . . . . . . 75
Panel Messages. . . . . . . . . . . . . . . . . . . . . . . . . . . 78
Appendix
High security settings. . . . . . . . . . . . . . . . . . . . . . .79
Applying a profile of security configuration. . . . . 79
Setting an administrator account and locking
the panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Importing and changing settings in the
settings file. . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Setting security for the communication path. . . . 83
Operational check. . . . . . . . . . . . . . . . . . . . . . . 85
Customization example of a high security setting. . .85
When you want to prohibit printing from a
client computer and allow scanning and faxing. . 85
When you want to print directly from a
specific client computer. . . . . . . . . . . . . . . . . . . 86
When you want to scan directly from a
specific client computer. . . . . . . . . . . . . . . . . . . 87
When you want to receive fax in a specific
client computer. . . . . . . . . . . . . . . . . . . . . . . . . 88
When you permit IPP/IPPS print from a
client computer. . . . . . . . . . . . . . . . . . . . . . . . . 89
When you permit Document Capture Pro
and Document Capture Pro Server. . . . . . . . . . . 89
When you want to permit a connection from
a smart device. . . . . . . . . . . . . . . . . . . . . . . . . . 89
When you want to print directly from any
client computer. . . . . . . . . . . . . . . . . . . . . . . . . 90
When you want to enable/disable the specific
protocols. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
When you want to release Wi-Fi direct panel
lock. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92
When you want to enable/disable the PC - fax
transmission function. . . . . . . . . . . . . . . . . . . . 92
5
Setting Up
Setting Up
Setup procedure
Follow the procedures below to set up this system.
Procedure Operations Approximate

Work Time
(mins.)
1 Preparing to Install ❏ Checking hardware and software requirements for the 60

Epson Print Admin server computer.
❏ Checking hardware requirements and the OS
environment for the client computer.
❏ Checking requirements for the multi-function device,,
the authentication device and authentication card.
❏ Acquiring the installer
❏ Checking the license
❏ Checking and recording server settings and registration
information. *
2 Operational check of the ❏ Check the components 10

installation environment
❏ Check the firewall and port
❏ Check the device, database, and client computer
connections
3 System installation Installing and configuring the system and components 30

using an installer.
When installing an SQL server.
Installing and configuring the system and components 5

using an installer.
When using an existing SQL Server
4 Setting the system and registering ❏ Setting each server 10

information
❏ Register or provisionally register the devices necessary
for system building
5 Operational check ❏ Driver installation 10

❏ Register to an authentication card
❏ Print test
6 Check before practical use of the ❏ Setting the license 60

system
❏ Register all devices
❏ High security settings and operational checks
❏ Set the print environment and rules
❏ User registration
❏ Notification email settings
6
Setting Up
* Record collected information on the “Setup Information Collection Sheet” (Excel file). Complete the items necessary for
setting up for a smooth setup experience.
What you need to set up

The setting requires the following.
Items Description
1 Multi-function device A multi-function device on which Epson Open Platform has been activated.
See the "Hardware setup guide" for details on activating and using Epson Open
Platform.
You can also set up a system by registering a printer temporarily by using a CSV
file.
2 Authentication device and the This is not necessary if user authentication does not require an authentication
authentication card (optional) device.
Authentication device and card that can connect to the multi-function device
over a USB connection.
3 Computer for Epson Print A computer on which Epson Print Admin is installed.
Admin
4 Database server You can use an existing SQL server. You can also build a new system in the Epson
Print Admin server.
5 SMTP server For sending email notifications.
6 Computer for administrator A computer for managing Epson Print Admin. This allows you to access the Web
page for the Epson Print Admin server. It is also used as a single user’s computer.
7 Epson Print Admin installer, The installer and license key for Epson Print Admin. The method of acquiring
license key these items differs depending on your dealer.
Contact your dealer for more information.
8 Setup Information Collection An Excel file for collecting system setup information for the Epson Print Admin
Sheet System account, individual server settings, and so on.
Related Information
& “Epson Print Admin Server” on page 8
7
1. Prepare device and check information

Check the preparations necessary to build an authentication system for Epson Print Admin, such as the device,
usage conditions, and setting information.
Related Hardware
Epson Print Admin Server

The following shows the system requirements for the server being installed as the main system and the necessary
components.
Hardware
Minimum system requirements
❏ CPU: 2 cores and 2.0 GHz or faster processor
❏ RAM: 2 GB or more (4 GB or more recommended)
❏ Hard disk free space: 50 GB or more (Except for database capacity)
❏ Display: 1024 x 768 or higher
! Caution:
❏ You cannot install this system on a server that is being used to control domains (such as the Windows Small
Business Server or the Active Directory server).
❏ This system does not support a Multihomed computer environment. In this situation, address resolution may not
be completed for the system.
Note:
Make sure the system configuration matches the current environment, such as the network communication speed, number of
multi-function devices, number of users, and so on.
Operating system
The server must be running one of the following.
OS Service packs Edition
Windows Server 2008 (32bit/64bit) Service Pack 2 or later Standard / Enterprise / Datacenter
Windows Server 2008 R2 Service Pack 1 or later Standard / Enterprise / Datacenter
Windows Server 2012 - Essentials / Standard / Datacenter
Windows Server 2012 R2 - Essentials / Standard / Datacenter
8
OS Service packs Edition
Windows 7 Service Pack 1 or later Professional / Enterprise / Ultimate
Windows 10 - Pro / Education / Enterprise
! Caution:
Notes for installing Epson Print Admin on Windows 7 or Windows 10
❏ Authenticating or printing may take some time.
❏ Due to a restriction in Windows, you cannot use the Notifier on 10 or more computers at the same time. Printing
speed may slow down when using the Notifier.
❏ If Epson Print Admin is installed on a computer running Windows 10, and you cannot open the administrator's
page or the user's page in Edge, try using Internet Explorer.
Operation in a virtual environment

This is also available under the following virtual environments, but performance may be degraded.
❏ Hyper-V: Versions in conjunction with a running OS
❏ VMWare: vSphere Ver.4.1, 5.5, 6.0
! Caution:
If dynamic memory is set in a virtual environment, set the minimum memory size to 2 GB or more.
Required components, software

❏ Runtime: .NET Framework 4.5 or later
Installed by default on Windows Server 2012 or later.
Web server
The followings IIS (Microsoft Internet Information Services) versions are supported within this system.
OS Version
Windows Server 2008 7.0
Windows Server 2008 R2 / Windows 7 7.5
Windows Server 2012 8.0
Windows Server 2012 R2 8.5
Windows Server 2016 / Windows Server 2019 / Windows 10 10.0
Database server
The following database servers are supported.
Microsoft SQL Server 2014 Express *
Microsoft SQL Server 2008
9
Microsoft SQL Server 2008 R2
* Included in the package in this system.
SMTP server
The following shows the security methods compatible with the SMTP server.
Security Settings
Authentication method No authentication, SMTP authentication, and POP before SMTP
Encryption No encryption, StartTLS, and SMTP over TLS
Compatible directory services

Available with other servers that manage users or drivers.
Service name Version
Active Directory Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows
Server 2012 R2, Windows Server 2016, Windows Server 2019
OpenLDAP Ver.2.3, Ver.2.4
Print server
Runs on a computer with the same OS requirements as the Windows client computer.
Multi-function device
Compatible with Epson Open Platform
Compatible with Epson Open Platform.
See the "Epson Open Platform Hardware Setup Guide" for information on compatibility checks and setup
methods.
Before installing the system, you need to complete initial setup for the multi-function device you want to connect,
such as ink charging, language settings, and so on.
Platform Version
Epson Open Platform 1.0, 1.1
10
Authentication device and authentication card

You can check information on authentication devices and authentication cards for which operations have already
been confirmed on the following Web site.
https://openplatform.epson.biz/download/op/
Client computer
This computer accesses the system’s administrator page and user page, and installs the driver and the client tool for
printing.
Supported operating systems

❏ Windows
Operating system Service packs Edition
Windows Server 2008 (32bit/64bit) Service Pack 2 or later Standard / Enterprise / Datacenter
Windows Server 2008 R2 Service Pack 1 or later Standard / Enterprise / Datacenter
Windows Server 2012 R2 - Essentials / Standard / Datacenter
Windows 7 Service Pack 1 or later Professional / Enterprise
Windows 8.1 - Professional / Enterprise
Windows 10 - Pro / Education / Enterprise
❏ Mac OS
Operating system Version
Mac OS 10.8.5 or later
Compatible browsers
Note:
You need to enable cookies and JavaScript in the browser.
Browser Version
Internet Explorer 9 or later
Microsoft Edge Ver.20 or later
Google Chrome Ver.40 or later
Mozilla Firefox 37 or later
Safari 5.x or later (excluding Windows version)
11
Installer and license

The method of acquiring the installer and license key for this system differs depending on your dealer. Contact
your dealer for more information.
Checking Registration Information

Before setting up this system, check the account, the connected mail server, and the license information, and enter
the information on the "Setup Information Collection Sheet". A to E below correspond to the number on the
"Setup information sheet".
System Configuration
Ask your respective server administrators about setting items for the server and the acquisition of email addresses.
A-1 - Epson Print Admin Sever Log in account

This is the configuration information of this system server (this system). The account information is used during
service execution and registration of this system.
Related Information
& “3. Installing the System” on page 20
A-2 - SQL Server Setting Information

This is used to access the database. This is unnecessary if you are installing the SQL server during setup.
Related Information
& “Pre-installation” on page 21
A-3 - Epson Print Admin System account Information

This is the administrator account information for this system. This is necessary to access the administrator menu
during setup.
Related Information
A-4 - SMTP Server Setting Information

This system and multi-function device use this to send emails.
12
Related Information
& “SMTP Server Settings” on page 31
A-5 - Printer driver Setting Information

This is used to download the Epson Print Admin driver.
Related Information
A-6 - LDAP Server Setting Information

This system uses this to acquire user information from the LDAP server. This is not necessary if you are not
connecting to an LDAP server.
Related Information
& “LDAP server settings” on page 33
A-7 - Print Server Setting Information

This is used for the user to access the print queue. This is not necessary if you are not using a print server.
Print servers cannot be used from the Mac OS client.
Related Information
& “Installing on the print server” on page 43
A-8 - Epson Print Admin Software License Information

This is used to register the authentication system as a product version.
Related Information
& “Registering a License” on page 49
B-1 - Device Information

This is multi-function device information used with this system.
Related Information
& “Registering a Multi-function Device” on page 35
13
Authentication device and the authentication card
C-1 - Card Reader Information

This is the authentication device (card reader) information used in the authentication system. The authentication
device should support the type of card used for the authentication card information.
Related Information
& “Register to an authentication card” on page 39
C-2 - Card Information

This is the authentication card information used in the authentication system.
Related Information
& “Register to an authentication card” on page 39
Groups
D-1 - Group Information

This is the group information for users of the system. Users that are managed by linking to an LDAP server do not
need to be entered.
Related Information
& “Editing an unassigned user” on page 54
User
E-1 - User Information

This is the user account information for users of the system. Users that are managed by linking to an LDAP server
do not need to be entered.
Related Information
& “User Registration” on page 56
14
2. Operational Check of the Installation Environment
2. Operational Check of the Installation

Environment
Check essential software

For Windows Server 2008 and Windows Server 2008 R2, make sure that .NET Framework 4.5 or later is installed
on the server. You need to log in as an administrator.
Note:
❏ .NET Framework 4.5 is installed as standard on Windows Server 2012 or later.
❏ If .NET Framework 4.5 or later is not installed, an error screen appears during Epson Print Admin installation.
1. Navigate to Control Panel, Programs and then click Programs and Features.
2. Check the list of programs.
If "Microsoft .NET Framework" 4.5 or later is displayed, .NET Framework 4.5 or later is installed.
If it is not installed, download from the following Microsoft Web site.
http://www.microsoft.com/en-gb/download/details.aspx?id=30653 (English)
http://www.microsoft.com/ja-jp/download/details.aspx?id=30653 (Japanese)
Ports to be used
Sender Target (Server) Protocol Port Usage
(Client)
Client Computer Epson Print HTTP (TCP) 80*1*8 User, Administration menu
AdminServer
(Browser) HTTPS (TCP) 443*1*3*8
Client Computer Epson Print HTTP (TCP) 80*1*8 Print data submit
Admin Server
(Printer driver) HTTPS (TCP) 443*1*3*8
Print Server
15

(Client)
Client Computer Epson Print HTTP (TCP) 80*1*8 Balance display, Rule-based print inquiry
Admin Server
(Notifier) HTTPS (TCP) 443*1*3*8
Epson Print Printer LPR (TCP) 515 LPR print

Admin Server
Epson Print Printer HTTPS (TCP) 443 Authentication, usage history acquisition, use
Admin Server restriction setting
Epson Print Printer SNMP (UDP) 161 Device discovery, Device information
Admin Server acquisition
Printer Epson Print HTTPS (TCP) 443*2*8 Device panel display

Admin Server
Epson Print SQL Server SQL (TCP) 1433 SQL server connection
Admin Server
SQL (UDP) 1434
Epson Print LDAP Server LDAP (TCP) 389*4 User information acquisition
Admin Server
LDAP (TCP) 636*3*4
Epson Print SMTP Server SMTP (TCP) 25*5 Email transmission

Admin Server
SMTP (TCP) 465*3*5
Epson Print POP Server POP (TCP) 110*5 POP before SMTP connection
Admin Server
POP (TCP) 995*3*5
Epson Print FTP Server FTP (TCP) 20 Backup, Scan to My Folder

Admin Server
Epson Print FTP Server FTP (TCP) 21 Backup, Scan to My Folder

Admin Server
Epson Print File Server SMB (TCP) 445 Backup, Scan to My Folder, Scheduled
Admin Server Reports
Epson Print File Server NetBIOS (UDP) 137 Backup, Scan to My Folder, Scheduled
Epson Print File Server HTTP (TCP) 80 Scan to My Folder

Admin Server
Epson Print File Server HTTPS (TCP) 443 Scan to My Folder

Admin Server
Printer File Server HTTP (TCP) 80 File transmission
Printer File Server HTTPS (TCP) 443 File transmission
Printer FTP Server FTP (TCP) 20 File transmission*6
16

(Client)
Printer FTP Server FTP (TCP) 21 File transmission*6
Printer File Server SMB (TCP) 445 File transmission*6
Printer File Server NetBIOS (UDP) 137 File transmission*6
Printer SMTP Server SMTP (TCP) 25 Email transmission*6
Printer SMTP Server SMTP SSL/TLS 465 Email transmission*6

(TCP)
Printer SMTP Server SMTP STARTTLS 587 Email transmission*6

(TCP)
Printer POP Server POP3 (TCP) 110 POP before SMTP connection*6
Printer LDAP Server LDAP (TCP) 389 User information acquisition (when using
contacts of the printer body.)
Printer KDC Server Kerberos (TCP) 88 User authentication of sending mail

User authentication of user information
acquisition*7
*1 The default port number. The actual port number is set to the user for the URL of the authentication system.
*2 The default port number. The actual port number is set to the control panel for the URL configuration of the authentication
system.
*3 The port number when using encryption.
*4 The default port number. If you want to change the port number, set the number that is used by the LDAP server
configuration of the authentication system.
*5 The default port number. If you want to change the port number, set the number that is used by the SMTP server
configuration of the authentication system.
*6 If you are using the printer’s Scan to Email function , Scan to My Email(Scan and Send to Me), or Scan Presets to scan
documents, the printer sends scanned data by accessing the destination server directly.
*7 When using the printer’s contacts and file transmission for scanned documents in Scan Presets.
*8 If ports 80 and 443 are already in use, Epson Print Admin will change to ports 10080 and 10443 for installation. In this case,
allow access to ports 10080 and 10443 in the firewall settings.
Check connection
Make sure the system, multi-function device, and client computer are all connected correctly.
17
Check the connection between the computer and the multi-function device by trying to display the Web Config
page.
1. Run Internet Explorer on the server.
2. Enter the IP address for the multi-function device as shown below, and then press Enter.
http://192.168.111.222 (If the IP address is 192.168.111.222)
Note:
When you access the administrator login page in SSL communication (https), the message “There is a problem with this
website’s security certificate” may be displayed. (The screen capture is an example of Internet Explorer. The actual screen
displayed depends on the browser you are using.)
This happens when the browser attempts an SSL encrypted communication when the Web site is using a self-signed
certificate. Click “Continue browsing of this site (not recommended)”. To avoid displaying this warning, use a certificate
issued by a trusted certification authority.
3. If the Web Config menu is displayed, confirmation is complete. Close Web Config.
Server, client computer

Check that the server on which Epson Print Admin is installed can communicate with the other servers and client
computers. The following example uses the ping command.
18
Check the connection here when you are using an existing SQL Server for the database.
❏ a: Epson Print Admin server

❏ b: SQL server
❏ c: SMTP server
❏ d: Client computer
1. Select Command Prompt from Accessories on the start menu.
2. Enter the following in the command line, and then press Enter.
ping 192.168.111.111 (If the IP address of the computer you want to check is 192.168.111.111)
3. If the following is displayed, confirmation is complete. Close the Command Prompt.

Ping statistics for 192.168.111.111:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Round-trip time: (ms):
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Checking the server settings according to the Internet connection

environment
Check the certificate and proxy server settings according to the Internet connection environment of the Epson
Print Admin server.
For details on the settings, see the related information.
Related Information
& “Card authentication, authentication using the control panel, and screen transitions take time” on page 62
19
3. Installing the System

Install components and this system.
Running the installer

When this system is installed for the first time, the initial setup installs and configures the components.
This step is skipped when restoring the installation.
! Caution:
❏ Before starting the installation, close all anti-virus programs and running applications. If any applications are
running, it may not be correctly installed.
❏ If SSL 3.0 IIS support is enabled, it is disabled when the program is installed and the computer needs to be
restarted. If you do not want to restart after installation, disable SSL 3.0 IIS support before you start the
installation.
❏ If the operating system of the computer on which Epson Print Admin is installed has been updated, restart the
computer after the update is complete, and then install Epson Print Admin.
1. Log in to the server which you set up using the user name and the password decided by the A-1 - Epson Print
Admin Sever Log in account
Check A-1 - Epson Print Admin Sever Log in account with the “Setup information collection sheet”.
2. Run the installer.

For Windows Server 2008 (x86): PrintAdmin_Setup_SQLx86_Vxxx.exe
Otherwise: PrintAdmin_Setup_SQLx64_Vxxx.exe
(Where "xxx" is the software version number.)
The Pre-installation menu is displayed when installing for the first time. Go to the next section.
If you are restoring an installation, go to the installation section for Epson Print Admin.
Related Information
& “Installing Epson Print Admin” on page 25
20
Pre-installation
1. Specify the database you want to use, and then click Next.
❏ Install SQL Server 2014 Express:
Select this if you want to build a database by installing SQL Server 2014 Express.
❏ Use existing SQL server:
Select this if you want to use an existing SQL server.
Note:
SQL Server 2014 Express is a new installation and database construction takes about 15 to 20 minutes.
2. Go to the steps indicated below according to the database that you selected in step 1.
❏ Install SQL Server 2014 Express:
Go to step 3.
❏ Use existing SQL server:
Configure the following, and them click Next. Perform an access test to the database server.
Specify the SQL server instance to Specify the database by either entering it directly or by selecting using
use Browse.
Use the SQL Server that was Select this if you want to use an SQL server that was previously installed in the
previously installed in the Epson Epson Print Admin.
Print Admin
Previously used login ID and the password are used.
Use SQL Server supplied by the Select this if you want to use an existing SQL server. You need the login ID and
customer password for the server.
21
When the results are displayed, click OK to select the SQL Server you want to use.
3. Click Next.
Installation and component setup starts. You cannot cancel this operation.
❏ For Windows Server 2008, the IIS manager starts automatically. Go to step 4.
❏ For Windows Sever 2008 R2 or later, go to step 5.
Note:
The following setup is performed here.
❏ Installation of SQL Server 2014 Express (when Install SQL Server 2014 Express. is selected)
❏ Enable message queue (MSMQ) (Windows function)
❏ Enable Microsoft Internet Information Services (IIS) (Windows function)
❏ Create and bind self-signing certificate (Excluding Windows Server 2008)
4. Create and bind the server certificate according to the “Creating Server certificate and Binding settings”.
If the create and bind self-signing certificate setup is not complete, you cannot proceed to the main system
installation.
22
Note:
You can open the IIS manager from the following.
Control Panel > System and Security > Administrator Tools > Internet Information Services (IIS)
Manager
5. When the completion screen for pre-setup is displayed, click Close.

Proceed to the installation of the Epson Print Admin.
Related Information
& “Epson Print Admin Server” on page 8
& “Creating Server certificate and Binding settings” on page 23
Creating Server certificate and Binding settings

For Windows Server 2008, configure the following settings.
23
1. Double-click the server certificate.
2. Click Create Self-Signed Certificate from the Actions menu.
3. Enter a friendly name for the certificate in Specify a friendly name for the certificate in the Create Self-
Signed Certificate menu, and then click OK.
If you do not have a certificate, enter “Epson Print Admin”.
24
4. Select the web site for which you want to enable SSL, and then click Bindings from Actions.
The Site Bindings menu is displayed.
5. Click Add.
6. Select https from the Type menu.
7. Select the created SSL certificate, and then click OK.
8. Close the IIS Manager.
Installing Epson Print Admin

When restoring, the installer starts from this procedure.
25
Note:
The following settings and installation are performed here.
❏ Copying system files
❏ Access right setting of files and folders
❏ Setting of config files according to the installation environment
❏ Registration to registry
❏ Registration of Web application
❏ Registration of Windows services
❏ Registration of short cut
❏ Registration of MSMQ
❏ Creating a database
❏ Setting a firewall
❏ Disabling SSL3.0 of IIS
1. Click Next.
2. Check the software license agreement, select I accept the terms in the License Agreement, and then click
Next.
3. Click Next.
You can change the installation destination by clicking &Change.
26
4. Specify the URL for the Web site for the Administrator page and the User page, and then click Next.
5. Enter the Administrator ID, Password, and Email Address decided in A-3 - Epson Print Admin System
account Information, and then click Next.
❏ System ID:
Enter the user ID between 1 and 256 characters.
You can use alphanumeric, symbol, space and additional Latin characters. (ISO-8859-1 characters except
for control characters, 0x7f to 0xbf, 0xd7, and 0xf7.) See the following table for details.
❏ Password:
Enter the password between 1 and 128 characters.
You can use alphanumeric, symbol, space and additional Latin characters. See the following table for
details.
Available characters
SP* ! " # $ % & ' ( ) * + , - . /
0 1 2 3 4 5 6 7 8 9 : ; < = > ?
@ A B C D E F G H I J K L M N O
P Q R S T U V W X Y Z [ \ ] ^ _
` a b c d e f g h i j k l m n o
p q r s t u v w x y z { | } ~
À Á Â Ã Ä Å Æ Ç È É Ê Ë Ì Í Î Ï
Ð Ñ Ò Ó Ô Õ Ö Ç Ø Ù Ú Û Ü Ý Þ ß
à á â ã ä å æ ç è é ê ë ì í î ï
ð ñ ò ó ô õ ö ø ù ú û ü ý þ ÿ
* Space character
The administrator account created here is registered as the built-in user.
27
6. Click Install.
Installation starts.
7. Click Close to close the menu.
If you are prompted to restart, restart the server.
28
4. Setting the system and registering information
4. Setting the system and registering

information
Make the initial settings for the server and systems that communicate with this system from the administrator’s
client computer.
Note:
You can also perform initial configuration on the server on which Epson Print Admin is installed. In that case,
“administrator’s client computer” should read “server on which you have installed Epson Print Admin.”
Login
Login as the system administrator of the system, and make settings for each item.
1. Access the Web site you set while installing the Epson Print Admin from a browser on the administrator’s
client computer.
http://<Web site URL that is set to IIS>/PrintAdminWeb/
Note:
When using the server on which you installed Epson Print Admin, select Start menu > Epson Software > Epson Print
Admin.
2. Enter the ID and password for A-3 - Epson Print Admin System account Information set when installing
this system, and then select (Local) as the domain.
Note:
If you want to change the display language, select the language you want from the language menu.
When you access this system at first, language of the contents is displayed with browser's language. If you want
to change display language, select language from language menu.
3. Click Log in.

When you login, the initial configuration menu is displayed automatically.
29
! Caution:
Do not use your browser’s navigation buttons, such as Back or Forward, otherwise Epson Print Admin may
not operate correctly.
Related Information
Initial configuration menu

Set the system and users related to the system. If you have not completed the setup, you cannot proceed to the
operation check.
Note:
Depending on the item, you can skip the settings by pressing the skip button.
You can set the following items.

❏ Basic settings
❏ SMTP server settings
❏ LDAP server settings
❏ Device Registration
Setting Each Item
Basic settings
Set items related to the printer driver and how the device can be used.
1. Click Basic Settings on the initial configuration menu.
30
2. Set each item.
See the following to make settings. You can change these settings after the initial setup is complete.
Items Description
Print Queue Print queue name: Enter any printer name. The name you enter here is used as the
multi-function device name. When you install the printer driver, a printer icon with this
name is displayed in Control Panel > Devices and Printers.
Set as default printer (Windows): Select this to set Epson Print Admin as the default
printer when the user installs the printer driver.
Quota management Sets the method to restrict usage of functions for users, such as printing and scanning.
None: Does not apply any limits.
Credit Limit: The amount the function can be used is limited by the credit possessed
by the user.
Page Quota: The amount the function can be used is limited by setting the number of
pages that the user can use.
Cost Settings Select the target to set the cost.

Set cost per device: Applies the cost set for each printer. The same cost setting applies
to any user who uses the same printer.
Set cost per group of users: Applies the cost set for each group. The same cost setting
is applied to any printer used from the same group.
OK Registers the settings to the system.
3. Click OK.
You are returned to the system configuration menu.
SMTP Server Settings

You need to make settings for the email sending server to send email to administrators and users from the system.
31
1. Click SMTP Server on the initial configuration menu.
2. Set each item.
See the following to make settings.
Items Description
Server address Enter the IP address or the host name of the SMTP server within 255 characters.
Port Number Enter the port number for the SMTP server (outgoing email server) with a number
between 0 and 65535. The default number is 25.
Secure Connection Select the encryption method for the SMTP server from None, SSL/TLS, or
STARTTLS.
32
Items Description
Authentication Method Select the authentication type for the SMTP Server. Setting content varies depending
on the selected items.
SMTP Auth
❏ Account:
The login ID for SMTP authentication. Enter within 255 characters.
❏ Password:
The password for SMTP authentication. Select to enter a password. Enter within
255 characters.
POP before SMTP

❏ Server address:
Enter the IP address or host name for the email receiving server (POP 3 server)
within 255 characters.
❏ Port Number:
Enter the port number of the incoming email server with a number between 0
and 65535. The default number is 110.
❏ Account:
The login ID for POP before SMTP authentication. Enter within 255 characters.
❏ Password:
The password for POP before SMTP authentication. Select to enter a password.
Enter within 255 characters.
Email sender address Set the email address used as the email sent from the system within 255 characters.
Email recipient address Enter the recipient email address for test transmissions.
The default value is the email address of the administrator account that is currently
logged in.
Send test email Sends an email to the target address.
3. Click Send test email.

Sends an email to the target address.
Note:
You can specify not to perform a connection check to the SMTP server. See the Administrator's Guide for details.
"Administrator’s Guide" - "Solving Problems" - "When you do not want to check the SMTP connection SMTP".
4. Click OK.
LDAP server settings

Set when using an LDAP server.
You can register users that are managed by an LDAP server as Epson Print Admin users.
1. Click LDAP server settings on the initial configuration menu.
33
2. Set each item.
Items Description
LDAP connection Set whether or not to link to an LDAP server.
LDAP server type Select the type of LDAP server from Active Directory and OpenLDAP.
Server address Enter the host name or IP address of the LDAP server within 255 characters.
Port Number Enter the port number of the LDAP server with a number between 0 and 65535.
The default value is 389. If you use the Global Catalog for the Active Directory,
specify 3268 as the port number.
Secure Connection Select the encryption method for the LDAP server from None, SSL/TLS, or
STARTTLS.
Authentication protocol Select the authentication protocol from PLAIN, DIGEST-MD5, or GSSAPI (Kerberos
V5).
Base DN Enter the identifier of the search base of the directory service.
Example: DC = ldap, DC = xxx, DC = com
Anonymous access Select whether or not to search using anonymous authentication.
Administrator DN Enter the identifier of the LDAP server administrator.

Example: CN = myldap, OU = mySercice, DC = ldap, DC = xxx, DC = com
Administrator password Enter the administrator password used during the search.
Select this to enter a password.
34
Items Description
LDAP Synchronization Set the interval to synchronize user information on the LDAP server with this system.
You cannot change settings that do not synchronize automatically from the
configuration menu by default. To change these settings, you need to set them
again after setting all the configuration items on the configuration menu.
Test connection Check the connection test to the LDAP server.
3. Click Test connection.

A connection and search test to the LDAP server is performed, and then the result is displayed.
4. Click OK.
If the connection test fails, check the following items, and then try again.
❏ The LDAP server is working normally.
❏ The entered values are correct.
5. Configure Search Condition List and Group and User Attributes if necessary.
Note:
You can associate search condition, and the attributes of this system and the attributes of the LDAP server. Refer to the
Administrator’s Guide for detail of the LDAP server settings.
"Administrator’s Guide" - "Management Settings" - "System administration" - "LDAP server".
6. Click OK.
7. Click OK on the confirmation screen.
Registering a Multi-function Device

Register a multi-function device to the system. Only register one at first to check system operations.
Note:
When you pre-register printers by using a CSV file, you can register the printers after setting up the system.
1. Click Add device on the initial configuration menu.
35
2. Select IP Address from Search Parameters.
3. Enter the IP address of the multi-function device you want to register.
4. Click Next.
The system searches for multi-function device that are connected to the network using the selected search
method, and displays the search results.
5. Select the device you want to register, and then click Next.
If you have set an administrator password on the multi-function device, enter the password.
6. Click OK.
36
7. Click Finish on the initial configuration menu.
The administrator’s dashboard is displayed.
Related Information
& “Registering Multi-function Devices” on page 50
37
Check that the user can log in with an authentication card, and print on this system.
Note:
You can also check operations for the server on which Epson Print Admin is installed. In that case, “administrator’s client
computer” should read “server on which you have installed Epson Print Admin.”
Printer driver installation

Install the printer driver dedicated to this system.
1. Click to display the account menu.

Login using the account in A-3 - Epson Print Admin System account Information if you are not already
logged in.
2. Select User.
The administrator menu switches to the user menu.
3. Select Driver/Client Tool Download on the menu.

The Driver/Client Tool Download menu is displayed.
38
4. Click from the Windows version Driver.

Note:
The items displayed in the software download menu vary depending on the operating system on which the browser is
running.
5. Follow the on-screen instructions to install the printer driver.

A queue is created and settings such as the print port are made.
Note:
The message “Could not verify the msi publisher” may be displayed depending on the browser settings. Click Run to
continue the installation.
6. Open Control Panel > Devices and Printers, and check that the icon for the Authentication system server
name of A-1 - Epson Print Admin Sever Log in account has been created.
This screen capture is an example of a print queue with the name Epson Print Admin.
Related Information
& “Basic settings” on page 30
Register to an authentication card

Register the authentication card, and check the operations for the card reader.
! Caution:
For the authentication device connected to the multi-function device, use the product with the same model number
as the authentication device that was used to authenticate the card. If the authentication device is different, you
may not be able to log in.
Note:
When the multi-function device is in power-saving mode, it may take some time to recognize the authentication card. Please
your authentication card again.
39
1. Hold the authentication card over the card reader.

The unregistered card settings menu is displayed on the multi-function device’s control panel.
2. Click Yes.
The screen for entering the user ID and password is displayed.
3. Enter the ID and password of A-3 - Epson Print Admin System account Information in the control panel of
the multi-function device, and then select (Local) from the domain.
4. Press Register.
Authentication is performed, and the registration completion menu is displayed.
5. Hold the authentication card over the authentication device connected to the multi-function device again.
Login to the multi-function device.
6. Check that the ID for A-3 - Epson Print Admin System account Information is displayed on the multi-
function device’s control panel.
Print check
Check that you can print from the client computer.
1. From a client computer, print a document from any application, such as Notepad or WordPad by selecting the
print queue in A-5 - Printer driver Setting Information.
2. Hold the authentication card over the authentication device that is connected to the multi-function device to
log in.
3. Make sure that the print job in step 1 is registered in the Print Jobslist menu in the multi-function device.
40
4. Press Print by selecting the print job.

Make sure that you can print.
41
6. Check Before Practical Use of the System
6. Check Before Practical Use of the

System
Make the settings necessary for practical use. Make these settings from the administrator’s client computer.
Note:
You can also make settings on the server on which Epson Print Admin is installed. In that case, "administrator's client
computer" should read "server on which you have installed Epson Print Admin."
Installing the printer driver

Install the printer driver for Epson Print Admin. The installation method varies depending on the system’s
configuration.
❏ Install on the client computer
❏ Install on the print server
❏ Distribute by using Active Directory Server Group Policy and so on
❏ Distribute in EpsonNet SetupManager
Add ID and domain to driver

The print job from the driver is added using the following ID and domain.
❏ Driver that was installed on the client computer (Download from the user page)
The following ID and domain is added by the server that manages the user.
❏ For users who are managed only in the Epson Print Admin Server:
User ID and (Local) domain that is logged in to the user page
❏ For users that are managed by linking to an LDAP server:
ID and the LDAP server domain of the account that is logged in to the client computer
Or, the user ID and (Local) domain that is logged in to the user page.
❏ Driver that was installed on the print server

The following ID is added by using authentication when connecting to a driver on the print server from the
client computer.
❏ If the menu to log in to the print server is displayed:
ID of the account that is logged in to the print server
❏ If the menu to log in to the print server is not displayed:
ID of the account that is logged in to the client computer
42
❏ Driver that was distributed from a server

The following IDs are added depending on the settings when downloading the driver from the server. The
domain is not added.
❏ ID of the account that is logged in to the client computer

❏ ID that was set during driver installation
❏ ID that was set for each print
Select Driver Type

You can select a driver for inkjet printers and a driver for laser printers. When multiple laser printers have been
registered, you can download the driver type from System Settings > Basic Settings > User > Driver and Client Tool
> Allow users to download driver type on the administrator's page.
Note:
❏ When printing on an inkjet printer using a certified inkjet printer driver, the paper margin is 3 mm. When printing on a
laser printer, the paper margin is 5 mm.
❏ When using a certified laser printer driver, the paper margin is 5 mm regardless of whether you print on an inkjet printer
or a laser printer.
Installing on the client computer

In systems that do not build a print server, you can install the driver for the client.
Related Information
& “Printer driver installation” on page 38
Installing on the print server

If you are connecting the printer to a print server to share a print queue, make sure you install the printer driver for
the print server. When the printer driver is installed, nine ports are automatically created in the print queue.
43
! Caution:
Only Windows supports connections that use the print servers.

❏ b: Print server
❏ c: Multi-function device
1. Login to the server as an administrator from the administrator’s client computer.
2. Select Driver/Tool > Authentication Print Driver from the menu.

The certified printing driver download screen is displayed.
44
3. Click in Driver(For the print server) row to download the driver.

Copy the downloaded file to removable media, a network folder, and so on, so that it can be accessed from the
print server.
4. Login to the print server using the administrator account.
5. Follow the on-screen instructions to install the printer driver that you downloaded.
6. Open Control Panel > Devices and Printers, and then make sure that the icon for “Epson Print Admin server
name” from A-1 - Epson Print Admin Sever Log in account has been created.
7. Right-click the icon, and then select Printer Properties.
8. Select Share this printer on the Sharing tab.
9. Click OK.
45
Distribute by using Active Directory Server Group Policy and so on

You can install the appropriate printer driver by distributing to a client computer automatically by using a Group
Policy in Active Directory server.

❏ b: Driver distribution server
❏ c: Multi-function device
Use the driver for the client computer to distribute the printer driver. Follow the steps below to acquire the file.
46
3. Click in Driver(For GPO) in the row to download the driver.

The drivers for distribution are downloaded.
Note:
When distributing a driver other than those specified in the Group Policy of the Active Directory server, select the driver
in the Driver(For client) row.
47
Distributing Files
Use a file for users when distributing the printer driver to users as a file. Allows you to select an ID used by the
printer driver.
3. Select User ID used by printer driver.

Logon ID for computer: Set the login ID used by the user to login to the computer.
User ID settings when installing: Specify the user ID for Epson Print Admin that users use when they install
the driver or client tool.
Prompt user at each print job: You will be prompted for an ID when printing.
48
4. Click in the Driver(For client) row.

The drivers for distribution are downloaded.
Distribute in EpsonNet SetupManager

EpsonNet SetupManager is software that creates packages, such as printer drivers and scanner drivers. When you
distribute and run packages on client computers, you can automatically install the drivers and set the printing
ports. See the Epson Web site for more details.
When you click in the row for the Windows version of the DriverEpson Print Admin Notifier(For
EpsonNet SetupManager) row, you can download a file that includes the driver and the Epson Print Admin
Notifier at the same time.
Registering a License
You need a license key to increase the number of multi-function devices.
1. From the administrator’s client computer, login by entering the ID and password set in A-3 - Epson Print
Admin System account Information during installation.
2. Click System Settings > License Registration
3. Enter the License key, and then click Next.
4. Check the message, and then click Register.
49
5. Check that the license information on the dashboard has been updated.
Registering Multi-function Devices

Search for and register all multi-function devices to be deployed.
1. Select Devices > Device List from the menu.

logged in.
2. Click Add.
The Device search menu is displayed.
50
3. Specify an IP address or a range of IP addresses by selecting a search method for the multi-function device
from IP AddressNetwork Address, and Range of IP Address.

You can set up to five search conditions for each method.
Discovery method Description
IP Address Searches for the multi-function device using the specified IP address in unicast.
Specify the IP address directly.
Network Address Searches for the multi-function device using the specified network address in
broadcast.
Enter the network address and subnet mask to be searched.
Range of IP Address Searches for the multi-function device using the specified IP address range in
unicast.
Enter the start and end addresses of the IP address range to be searched.
Note:
You can only search for Epson Open Platform compatible multi-function devices that have been activated.
4. Click Next.
The multi-function device search begins, and the search results are displayed.
5. Select the multi-function device you want to register from the search results, and then click Next.
The multi-function device registration results are displayed.
51
If an administrator password has been set on the multi-function device to be registered, enter the password in
the password field.
6. Click OK.
You are returned to the Device List menu.
If you cannot find the multi-function device you want, try searching by selecting a different search method in
step 3.
Creating a provisional printer registration for the CSV file

You can temporarily register the printer by importing printer information from a CSV file. Describe in the
following format. Create a CSV file to import using spreadsheet software or a text editor, according to the following
format.
Items Max. No. of Description

Characters
Device Name 64 Enter the multi-function device name that you want to update.
Location 40 Enter the location to be updated.
Description 256 Enter the remarks to be updated.
IP Address 15 Enter the IP address (IPv4) to be updated.
MAC Address 12 This value is invalid for temporary registrations. Leave this blank.
Flag for temporary 1 This is a flag for provisional registration. “1” means temporary
registration printer registration.
The following shows the file specifications.
52
❏ File format: CSV

❏ Character code: UTF-8
❏ Upper size limit: 10 MB
❏ Delimiter: comma or semicolon (Delimiter that is set in System Settings > Basic Settings > Server > Delimiter
of CSV Data.)
❏ Text qualifier: double quotes
❏ Line feed code: CRLF
❏ Line format: Device name, Location, Description, IP address, MAC address
Note:
❏ Items other than the printer name, IP address, and flag are optional. The item is not updated if you leave it blank.
❏ Lines starting with # are comments.
Example
“WF-C869R (XXXX0000XX)”, “London office 1F”, “shared printer next to lobby”, “192.0.2.172”, “”, “1”
❏ Printer name: WF-C869R (XXXX0000XX)
❏ Location: London office 1F
❏ Remarks: the lobby next to the shared printer
❏ IP address: 192.0.2.172
❏ MAC address: none
High security settings

You can enhance the multi-function device’s security by using the multi-function device’s own security features.
Set to limit operations that do not pass through the Epson Print Admin server. This setting is optional.
Related Information
& “High security settings” on page 79
Set the print environment and rules

You can assign usage restrictions to users for printing, scanning, usage costs for a certain period, and so on. This
section explains how to create rules that need to be set before starting operation.
Rules/Policy Settings
You can set the rules/policies to be applied on a per-user or per-group basis. Rules/policies that are registered here
are applied when they are enabled in the user or group settings.
You can set the following rules/policies.
53
❏ Scan Presets
Register to read settings and the output destination for the scanner.
❏ Rule-based Printing
Register rules such as color settings or two-sided printing settings.
❏ Allowed Times
Register the periods the user can use the multi-function device.
❏ Credit Recharges
Register the period and amount to recharge credit.
❏ Billing code
Register a billing code that classifies costs.
See the following for details on each setting.

“Epson Print Admin Administrator’s Guide” > “Setting by function”
1. Select each setting menu from Rules/Policies on the function menu.

If you are not logged in to the administrator page, log in with an account from A-3 - Epson Print Admin
System account Information.
2. Click Add.
3. Set each item, and then click OK.
Editing an unassigned user

By default, unassigned users are registered to a group. When you set editing limits and rules to Unassigned users,
the settings are copied and applied to the group.
When you make settings before synchronizing, they are also applied to groups that are managed by linking to an
LDAP server.
1. Select Groups on the menu.

2. Click Unassigned users from Group in the Group list.
54
3. Set each item.
See the following for information on setting each tab.

“Epson Print Admin Administrator’s Guide” - “Setting by function” - “Group”
4. Click OK.
5. Click OK on the completion menu.
Setting Cost
You can register the costs of using functions, paper sizes, job types, and so on, for each device or each group. Edit
the Default cost registered in advance and apply it to groups or devices.
If you want to make individual settings for each multi-function device, register the cost and apply it to the multi-
function device. See the following for more details.
“Epson Print Admin Administrator’s Guide” - “Setting by function” - “Cost”
Editing the default costs

1. Select Rules/Policies > Cost Settings on the menu.
2. Click the Default cost from Name in the Cost settings list.
55
3. Select Setup type, and then set each item.
See the following for details on each item.

“Epson Print Admin Administrator’s Guide” - “Setting by function” - “Charging”
4. Click OK.
User Registration
Register users to the system before starting operations.
You can register users directly by using this system, or register accounts managed by an LDAP server.
User account registration

Register users directly to this system.
If you have a lot of users, you can register in bulk by using a CSV file. See the following for details.
“Epson Print Admin Administrator’s Guide” - “Management setting” - “User Management” - “Registering users”
1. Select Users on the menu.

logged in.
2. Click Add.
56
3. Set each item.
See the following for details on each item.

“Epson Print Admin Administrator’s Guide” - “Management setting” - “User Management”
4. Click OK.
Synchronizing with an LDAP Server

If you want to register a user account managed by an LDAP server, synchronize the LDAP server with this system’s
server.
1. Select System Settings > LDAP Server from the menu.

Login using the account in A-3 - Epson Print Admin System account Information if you are not already logged
in.
57
2. Select the Sync. tab, and then click Execute.

Synchronization starts, and the synchronization results are displayed.
3. Click OK.
58
Uninstalling and Updating
Uninstalling
Make sure you backup your data and settings before uninstalling.
See the following for details.
“Epson Print Admin Administrator’s Guide” - “Daily management” - “Backup”
Note:
❏ The following software and components are not uninstalled.
❏ .NET Framework 4.5 or later
❏ SQL Server
❏ For the following software and components, only the files and data used by this system are deleted.
❏ Message queue (MSMQ)

❏ Microsoft Internet Information Services (IIS)
Admin Sever Log in account.
2. Click Control Panel > Uninstall a program, and then open Programs and Features.
3. Select Epson Print Admin, and then click Uninstall/Change.
4. Follow the on-screen instructions.
59
5. Click Remove.
6. Select whether or not to delete the system logs and system backup, and then click Next.
7. Select whether or not to delete the database, and then click Next.
60
8. Click Next.
Uninstallation starts.
! Caution:
If files to be deleted are being used during uninstallation, the following menu is displayed. Close the software,
and then click Retry.
9. Click Close.
Updating the System

The product is updated to improve functions, increase quality, and so on. To update, follow the instructions
provided by the updated version.
61
Solving Problems
Solving Problems
Administrator pages and user pages do not appear

Check the following.
❏ Cookies are enabled in your browser.
❏ JavaScript is enabled in your browser.
❏ If “A system error has occurred.” is displayed, make sure the service is running normally.
❏ Ports 80 or 443 were used during Epson Print Admin installation. When not in use, the port is opened.
You can check the port you are using from the URL displayed in the browser when you open the administrator
page from the start menu of the server where Epson Print Admin is installed.
Ask your network administrator about opening the port.
Card authentication, authentication using the control

panel, and screen transitions take time
If card authentication, authentication using the printer's control panel, or screen transitions take, configure the
following settings according to the Internet connection environment for Epson Print Admin server.
For Servers Without an Internet Connection

If your Epson Print Admin server is not connected to the Internet, make settings so that the certificate is not
obtained.
1. Enter mmc into the Start menu > Search programs and files to run the Microsoft Management Consol.
62
Solving Problems
2. Select File > Add/Remove Snap-in.
3. Select Group Policy Object Editor, and then click Add.

The Select Group Policy Object screen is displayed.
63
Solving Problems
4. Click Finish.
5. Click OK.
6. Select Public Key Policies.
64
Solving Problems
7. Double-click Certificate Path Validation Settings in Object Type.

The Certificate Path Validation Settings Properties screen is displayed.
8. Select the Network Retrieval tab, and then make the following settings.
Select Define these policy settings
Clear Automatically update certificates in the Microsoft Root Certificate Program
Clear Allow issuer certificate (AIA) retrieval during path validation
9. Click OK.
65
Solving Problems
For Servers with an Internet Connection

If your Epson Print Admin server can connect to the Internet, make proxy settings for the LocalSystem authority
user.
1. Right-click Start > All Programs > Accessories > Command Prompt, and then select Run as administrator.
2. Enter the following command to stop using a proxy.

bitsadmin /util /setieproxy localsystem NO_PROXY
3. Enter the following command according to the proxy settings.

Using the automatic configuration script:
bitsadmin /util /setieproxy localsystem AUTOSCRIPT [URL of the automatic configuration script]
Using the list for an explicit proxy:
bitsadmin /util /setieproxy localsystem MANUAL_PROXY [proxy configuration]
Repair Installation
If the system does not start-up, or operations become unstable, and so on, you may be able to fix the problem by
performing a repair installation. The repair installation overwrites system files while leaving settings and
registration information untouched.
Admin Sever Log in account.
2. Click Control Panel > Uninstall a program, and then open Programs and Features.
3. SelectEpson Print Admin , and then click Uninstall/Change.
4. Follow the on-screen instructions.
66
Solving Problems
5. Click Re&pair.
6. Click Re&pair.
7. Click Close.
8. Reboot the computer if necessary.
What to do if the Epson Print Admin server goes down

control panel using the printer driver.
The following occurs when the server goes down.
❏ Printer drivers:
A print error occurs and the print job is automatically deleted.
❏ Notifier:
Connecting is displayed in the pop-up on the task tray icon.
❏ multi-function device control panel:
Network Error Browser Timeout is displayed.
If the authentication system goes down, you can operate the control panel and print from the printer driver by
performing the following steps.
A. Create an emergency account
B. Release the high-security settings.
C. Install the printer driver and set authentication information in the printer driver.
You can set these settings manually. You can also control the emergency account and high security settings using
the Authentication Server Error Mode.
Setting the Authentication Server Error Mode

You can set the following items under the Authentication Server Error Mode.
A. Create an emergency account.
67
Solving Problems
B. Release the high-security settings (disable IPsec/IP filtering and enable WSD).
Note:
This setting may not be displayed depending on the multi-function printer. To display this setting, update the printer's
firmware, and then enable Epson Open Platform.
Setting Operations when the Authentication Server is Down

You can set operations for the Authentication Server Error Mode
1. On a computer, open your web browser, and then open the Web config by entering "http://<epson-device-IP>".
2. Select Epson Open Platform Settings > Authentication Server Error Mode Settings (or Epson Open
Platform tab > Authentication Server Error Mode Settings).
3. Click Edit on the Settings for Authentication Server Error Mode screen.
4. See the following to change settings.
Items Description
Access Control Disable the access control feature Disable the settings in Access Control Settings >
Settings Basic.
Specify to allow all users to access all functions
when the authentication server goes down.
Allow RAW(Custom Port) Printing You can specify whether or not to allow processing
for print jobs and scan jobs. If Disable the access
control feature is selected, this value is disabled.
Register the user for the You can specify the login account for the multi-
authentication server error mode function printer in Access Control Settings > User
Settings (or Product Security tab) > Access
Control Settings > User Settings.
Specify to allow specific users to use specific
functions when the authentication server goes
down.
❏ Number: Select the number to register an
account. If you specify the registered number,
the original account is replaced by this account
when the Authentication Server Error Mode is
enabled. When the Authentication Server Error
Mode is disabled, the account is replaced with
the original.
❏ User Name: Enter a display name on the list
between 1 and 14 characters in ASCII
(0x20-0x7E).
❏ Password: Enter between 0 and 20 characters in
ASCII (0x20-0x7E).
❏ Select the check box to enable or disable each
function.: Checked functions are allowed for use.
Communication Disable IPsec/IP Filtering Disable Network Security Settings (or Network
Settings Security tab) > IPsec/IP Filtering.
Enable WSD Enable WSD printing and WSD scanning.
68
Solving Problems
5. Click Next.
The confirmation screen is displayed.
6. Click OK.
The settings are saved.
If you allow specific users only to print when the authentication server goes down, set the authentication
information in the printer driver.
Note:
If you want to back up the settings, select Authentication Server Error Mode Settings in Export and Import Setting
Value > Export (or Device Management tab) > Export and Import Setting Value > Export to export the settings.
Related Information
& “C. Setting Authentication Information in the Printer Driver” on page 71
Enabling Operation Settings when the Authentication Server is Down

If the authentication server goes down, you can apply setting items.
1. Select Enable from Authentication Server Error Mode in Epson Open Platform Settings > Authentication
Server Error Mode Settings (or Epson Open Platform tab > Authentication Server Error Mode Settings).
2. Click Next.
3. Click OK.
The Authentication Server Error Mode is applied, and the multi-function printer is available.
Disabling Operation Settings when the Authentication Server is Down

The Authentication Server Error Mode is disabled, and the settings are returned to their previous status.
1. Select Enable from Authentication Server Error Mode in Epson Open Platform Settings > Authentication
Server Error Mode Settings (or Epson Open Platform tab > Authentication Server Error Mode Settings).
2. Click Next.
3. Click OK.
The Authentication Server Error Mode is disabled, and the settings are returned to their previous status.
Setting each Function

Perform the following to access Web Config from the client computer by entering the multi-function device's IP
address in a browser.
❏ To use a standalone function, perform "A. Create an emergency account in use restriction setting".
69
Solving Problems
❏ In addition to the above, if you want to scan or receive a fax from the client computer, perform "B. Release the
high-security setting."
A. Create an emergency account with usage restriction settings.

The Epson Print Admin server account has been registered as user number 1 in the user restriction settings. When
assigning clients other than the server, use numbers 2 to 10.
The following explains how to set up a user that can copied to the number 2 user as an example.
1. Navigate to Access Control Settings > User Settings, and then click Add for number 2.
Navigate to the input page.
2. Enter the User Name and Password, select Copy in the enable/disable functions check box.
If you want to allow other functions, select the appropriate check box.
3. Click Apply.
B. Release the high-security settings.

Perform any of the following.
❏ Apply a configuration profile for emergencies
❏ Disable IPsec/IP filtering
❏ Add an IP filtering policy
Applying a configuration profile for emergencies

Apply a profile for emergencies that disables high-security settings.
1. Output all settings to a file using the export function from the Web Config.
You can return settings to normal by importing the saved setting profile.
2. You can obtain a configuration profile for emergencies from the web site.
3. Using the import function in the Web Config, apply the configuration profile that you obtained.
Note:
The configuration profile for emergencies performs the following settings.
❏ Disables IPsec/IP filtering settings
❏ Enables PC-FAX transmission functions
❏ Unlocks Wi-Fi Direct panel operations
❏ Enables network scanner (AirPrint) functions
❏ Enables WSD functions
70
Solving Problems
Disabling IPsec/IP Filtering
1. Navigate to Network Security Settings > IPsec/IP Filtering > Basic in the Web Config.
2. Set IPsec/IP Filtering to Disable.
3. Click Next.
4. Click OK.
5. Results are reflected when you restart the network.
Adding an IP filtering policy

You can set a policy to allow operations from a particular client in a separate policy.
C. Setting Authentication Information in the Printer Driver

In emergency situations such as when the Epson Print Admin server goes down, you can set authentication
information to the printer driver. You can print from the specified printer driver. Create an account to be used for
emergencies by using Access Control Settings or Authentication Server Error Mode Settings in the multi-function
device before setting up.
The following is an example for Windows.
1. Install the printer driver you want to use.
2. For Windows, navigate to Control Panel > Hardware and Sound > Devices and Printers, and then right-click
the printer icon.
3. Select Printing Preferences from the menu.
4. Click the Printer and Option Information icon on the Maintenance tab.
5. Select Save Access Control settings in the Access Control, and then click Settings.
6. Enter a User Name and Password for the emergency account, and then click OK.
Related Information
& “Setting Operations when the Authentication Server is Down” on page 68
& “A. Create an emergency account with usage restriction settings.” on page 70
Error menu
When the multi-function device cannot display the web page that is sent from the Epson Print Admin server, an
error is displayed on the control panel.
Press Reload button to redisplay the web page.
71
Solving Problems
HTTP communication error

When an HTTP communication error occurs, an HTTP status code, an explanation, and an error code are
displayed.
The HTTP status codes and explanations are displayed according to the RFC2616 standards. For more
information, see the following Web site.
http://www.w3.org/Protocols/rfc2616/rfc2616-sec6.html
When an HTTP communication error and other network errors occur at the same time, the HTTP
communication error is given higher priority.
Certificate error
When an error related to electronic certificate signing occurs, a Certification Error, an explanation, and an error
code are displayed.
Code Explanation Meaning Solution
ec-1 Unable To Get Issuer Cannot acquire the issuer certificate. Make sure that the correct certificate
Certificate has been imported to the multi-
function device.
ec-2 Unable To Decrypt Cannot decrypt the signature for the Make sure that the correct certificate
Certificate Signature certificate. has been imported to the multi-
function device.
ec-3 Unable To Decode Issuer Cannot decode the public key for the Make sure that the correct certificate
Public Key issuer. has been imported to the multi-
function device.
72
Solving Problems
ec-5 Certificate Not Yet Valid The certificate is not valid yet. ❏ Check that the Date and Time
settings are correct for the multi-
function device.
❏ Check the expiration date of the
certificate for Epson Print Admin.
❏ Make sure that the correct
certificate has been imported to
the multi-function device.
ec-6 Certificate Expired The certificate has expired. ❏ Check that the Date and Time
settings are correct for the multi-
function device.
❏ Check the expiration date of the
certificate for Epson Print Admin.
❏ Make sure that the correct
ec-7 Invalid Not Before Field The notBefore field in the certificate is ❏ Make sure that the correct
in an invalid format. certificate has been imported to
❏ Make sure that the certificate for
Epson Print Admin is correct.
ec-8 Invalid Not After Field The notAfter field in the certificate is in ❏ Make sure that the correct
an invalid format. certificate has been imported to
ec-9 Self-Signed Certificate The certificate is self-signed. ❏ If you are using a self-signed
certificate in the Epson Print
Admin, make sure that you have
disabled certificate validation in the
Web Config.
❏ Set a certificate signed by a
certificate authority that is
imported to the multi-function
device in Epson Print Admin.
❏ Check if Certificate Validation on
Browser is Disabled in the Web
ConfigEpson Open Platform
Settings (or Epson Open Platform
tab) > Authentication System >
Basic.
ec-10 Self-Signed Certificate In The self-signed certificate is included ❏ If you are using a self-signed
Chain in a certificate chain. certificate in the Epson Print
Admin, make sure that you have
disabled certificate validation in the
Web Config.
❏ Set a certificate signed by a
certificate authority that is
imported to the multi-function
device in Epson Print Admin.
73
Solving Problems
ec-11 Unable To Get Local Cannot acquire the root certificate. ❏ Make sure that the correct
Issuer Certificate certificate has been imported to
ec-12 Unable To Verify First Cannot verify the first certificate. ❏ Make sure that the correct
Certificate certificate has been imported to
ec-13 Certificate Revoked The certificate has been revoked. ❏ Make sure that the correct
ec-14 Invalid CA Certificate The CA certificate is invalid. ❏ Make sure that the correct
ec-15 Path Length Exceeded The maximum hierarchy for the length ❏ Make sure that the correct
of the certificate chain has been certificate has been imported to
exceeded. the multi-function device.
ec-16 Invalid Purpose Cannot use the certificate for the ❏ Make sure that the correct
specified purpose. certificate has been imported to
ec-17 Certificate Untrusted The certificate is not trusted. ❏ Make sure that the correct
ec-18 Certificate Rejected The certificate has been rejected. ❏ Make sure that the correct
ec-19 Subject Issuer Mismatch The subject name does not match with ❏ Make sure that the correct
the current issuer name for the certificate has been imported to
certificate. the multi-function device.
74
Solving Problems
ec-20 Authority Issuer Serial The serial number for the certification ❏ Make sure that the correct
Number Mismatch authority does not match. certificate has been imported to
ec-21 No Peer Certificate The certificate is not valid. ❏ Make sure that the correct
ec-22 Host Name Mismatch The host names do not match. Make sure that the certificate for Epson
Print Admin is correct.
Refer to the “System Administrator’s Guide” of multi-function device for the import of the certificate.
Other network errors

When an HTTP communication error and an error other than a CA certificate error occurs, the Network Error,
an explanation, and an error code are displayed.
ec-1 Connection Refused The remote server refused the ❏ Make sure that the addresses are
connection. correct in Web ConfigEpson Open
Platform Settings (or Epson Open
Platform tab) > Authentication
System > Basic > Web Page URL
Before Login and Web Page URL
After Login.
❏ Make sure that Epson Print Admin
is running correctly.
❏ Check the server firewall settings of
the server on which Epson Print
Admin is installed, such as Port 80
to be used in the Epson Print
Admin (http) / 443 (https) is
permitted.
75
Solving Problems
ec-2 Remote Host Closed The remote server closed the Make sure that Epson Print Admin is
connection before a reply could be running correctly.
processed and completed.
ec-3 Host Not Found The remote host name is invalid. ❏ Make sure that the addresses are
correct in Web ConfigEpson Open
After Login.
❏ Make sure that the multi-function
device is connected to the network.
❏ Make sure that the DNS for the
multi-function device settings are
correct.
ec-4 Timeout The connection to the remote server ❏ Make sure that the addresses are
was lost due to a timeout. correct in Web ConfigEpson Open
After Login.
❏ Check the server firewall settings of
the server on which Epson Print
Admin is installed, such as Port 80
to be used in the Epson Print
Admin (http) / 443 (https) is
permitted.
ec-5 Operation Canceled The connection to the remote server Make sure that Epson Print Admin is
was disconnected and the operation running correctly.
has been canceled.
ec-6 SSL Handshake Failed The SSL/TLS handshake failed, and a Make sure that the addresses are
coded channel could not be correct in Web ConfigEpson Open
established. Platform Settings (or Epson Open
After Login.
ec-201 Content Access Denied Access to remote content has been ❏ Make sure that the addresses are
denied. correct in Web ConfigEpson Open
(This is the equivalent to a 401 HTTP
communication error.)
After Login.
❏ Make sure the server settings that
are installed on Epson Print Admin
are correct.
76
Solving Problems
ec-203 Content Not Found Remote content was not found on the ❏ Make sure that the addresses are
server. correct in Web ConfigEpson Open
(This is the equivalent to a 404 HTTP
communication error.)
After Login.
are correct.
ec-204 Authentication Required The remote server authentication ❏ Make sure that the addresses are
needed to provide content did not correct in Web ConfigEpson Open
accept the credentials submitted. Platform Settings (or Epson Open
After Login.
are correct.
ec-99 Unknown Network An unknown network error has been ❏ Check the current IP and the IP of
detected. the multi-function device that was
registered to Epson Print Admin are
identical.
❏ Check the network status.
ec-299 Unknown Content An unknown remote content error has ❏ Make sure that the addresses are
been detected. correct in Web ConfigEpson Open
After Login.
are correct.
ec-399 Protocol Failure An error in the network protocol has ❏ Make sure that the addresses are
occurred. correct in Web ConfigEpson Open
After Login.
77
Solving Problems
ec-999 Browser Timeout The browser determined that a ❏ Make sure that Epson Print Admin
timeout has occurred after a specified is running correctly.
amount of time (30 seconds).
❏ Make sure that the multi-function
device is connected to the network.
If other errors occurs, restart the Epson Print Admin server and the multi-function device.
Panel Messages
As well as errors displayed on the Web page, you may receive the following messages.
Message Cause Solution
The card is not registered in the sys- Authentication card is not registered. Register the authentication card of the
tem. Please contact your administrator. user in Users > User List > Basic In-
(If it is not checked in System Settings
formation from the administrator’s
> Basic Settings > Allow users to reg-
page.
ister authentication cards in Admin-
istrator page)
The device is unavailable. Valid printer has not been set for the Set a valid printer in Users > User List
user. > Devices or the group of the relevant
user from the administrator’s page.
Usage permission for this function has Effective functions have not been set Set a valid function in Users > User
not been set. for the user. List > Functions or the group of the
relevant user from the administrator’s
page.
Operations are restricted at this time. Effective time zone for the users not Set a valid available time zone in Users
been set. > User List > Allowed Times or the
group of the relevant user from the ad-
ministrator’s page.
Cannot use Epson Print Admin. Please Printer is set to Disabled. Set the printer to Enable in Devices >
contact your administrator. Device List from the administrator’s
page.
This device is not managed by Epson Printer has been un-registered. ❏ Print using a registered printer.
Print Admin.
❏ Register the printer.
The print speed may decrease due to 20 or more print jobs have been sent Wait until other printers have finished
the high load in Epson Print Admin. to the printer at the same time. printing.
A temporary card has been registered. The deadline for the temporary card ❏ Erase the temporary card ID.
You cannot register any more cards. has not expired.
❏ Wait until the temporary card
deadline has expired.
An error has occurred in the Epson Failed to read and write server data- If the server does not recover from the
Print Admin server. Contact the admin- base connection or database. error, restore the database.
istrator.
A communication error has occurred Communication token does not Check the printer error in Dashboard
with the device. Please contact your match. from the administrator’s page, and fol-
administrator. low the instructions in the solution.
78
Appendix
Appendix
High security settings

By using the multi-function device’s security features, you can prohibit the use of a multi-function device that does
not pass through the authentication server. If this is not set, it can lead to unauthorized use of the multi-function
devices because it is possible to print and scan by connecting the computer to the multi-function devices directly,
and fax and copy by using the control panel. See the manual for the multi-function device for details on the
security features.
Applying a profile of security configuration

A profile of security configuration is necessary to apply security settings. The profile contains security levels. You
can customize this to suit your environment based on how close the level of the profile is to your security and
usage environment.
To acquire a profile of security configuration see the following Web site.
Overview of profile of security configuration

The profile of security configuration disables functions and communication of multi-function devices with the
following settings.
Level Overview Functions to Functions to Communications to

Disable in Protocol Disable in Wi-Fi Disable in IPsec/IP
Settings Direct Filtering Settings
Configuration
6 Encrypt communication ❏ PC-FAX sending ❏ Wi-Fi Direct Panel (Restricted by IP sec)

between multi-function Settings
❏ AirPrint scanning ❏ PC-FAX receiving
devices and the
authentication server by ❏ WSD (printing, ❏ Network scanning
IPsec to prevent scanning)
interception of ❏ LPR printing
communication. ❏ Port9100 printing
❏ Only the following ❏ AirPrint printing
processes through the (IPP/IPPS)
authentication server
are allowed. ❏ FTP printing
❏ Printing
❏ Scanning
❏ Sending and
receiving faxes
❏ Use of Wi-Fi Direct from

smart devices is
prohibited.
79
Appendix

Configuration
5 ❏ Only the following ❏ PC-FAX sending ❏ Wi-Fi Direct Panel ❏ PC-FAX receiving
processes through the Settings
(Recommended) ❏ AirPrint scanning ❏ Network scanning
authentication server
are allowed. ❏ WSD (printing, ❏ LPR printing
scanning)
❏ Printing ❏ Port9100 printing
❏ Scanning ❏ AirPrint printing

(IPP/IPPS)
❏ Sending and
receiving faxes ❏ FTP printing

smart devices is
prohibited.
4 ❏ Allow the following ❏ PC-FAX sending ❏ Wi-Fi Direct Panel ❏ PC-FAX receiving
processes from the Settings
❏ AirPrint scanning ❏ Network scanning
client computer to
Level 5 restrictions. ❏ WSD (printing, ❏ AirPrint printing
scanning) (IPP/IPPS)
❏ Printing

smart devices is
prohibited.
3 ❏ Allow the following ❏ PC-FAX sending ❏ Wi-Fi Direct Panel ❏ PC-FAX receiving
❏ AirPrint printing
client computer to
(IPP/IPPS)
Level 5 restrictions.
❏ Printing
❏ Scanning

smart devices is
prohibited.
2 ❏ Allow the following - ❏ Wi-Fi Direct Panel -

client computer to
Level 5 restrictions.
❏ Printing
❏ Scanning
❏ Sending and
receiving faxes

smart devices is
prohibited.
80
Appendix

Configuration
for emergency This is used when you Enable the following. Releases the Wi-Fi Disable IPsec / IP
want to disable the high- Direct panel control filtering
❏ WSD (printing,
security settings profile limit.
scanning)
when the authentication
server fails, and so on. ❏ AirPrint scanning
❏ Releases restrictions set ❏ PC-FAX sending
in the profile.
❏ Allow processes from
other client PCs.
Level 1 locks the control panel and prohibits setting changes by setting an administrator password. A profile is not
used.
Setting an administrator account and locking the panel

Set an administrator password so that the user cannot change settings for a device. This also prohibits operations
from the Epson device’s control panel, such as faxing and copying.
If you have already set an administrator password, skip steps 2 and 3.
1. On a computer, open your web browser, and then open the Web config by entering “http://<epson-device-IP>”.
2. Select Administrator Settings > Change Administrator Password, Administrator Settings > Change
Administrator Authentication Information, or Product Security tab > Change Administrator
Authentication Information according to the multi-function device.
3. Enter Current password, New password, and Confirm New Password, and then click OK.
4. Click System Settings > Control Panel or Device Management tab > Control Panel.
81
Appendix
5. Set Panel Lock to ON, and then click OK.
Importing and changing settings in the settings file

Import the profile of security configuration, and then change the settings to suit the environment.
1. From the Web Config in the advanced menu, select Export and Import Setting Value > Import or Device
Management tab Export and Import Setting Value > Import.
2. Specify the profile of security configuration that you acquired, and then click Next.
3. Select All in the category that you want to import, and then click Next.
4. Click OK.
82
Appendix
Setting security for the communication path

When this is set using a profile of security configuration, a continuous restriction is applied to the communication
route.
1. From the Web Config in the advanced menu, select Network Security Settings > IPsec/IP Filtering > Basic or
Product Security tab > IPsec/IP Filtering > Basic.
2. Select the 1 tab for an individual policy.
3. Select Enable this Group Policy, and then perform the following operations.
Local Address(Printer): IP address for the Epson device that is set.
Remote Address(Host): IP address or FQDN for the system server.
83
Appendix
4. For Level 6, set IPsec encryption. For other levels, proceed to "Customize by usage environment" in this
manual.
Make sure that the Authentication Method is set to Pre-Shared Key, and set any pre-shared keys.
5. Click Next.
6. Click OK on the confirmation screen.
7. Set Pre-Shared Key on the Epson Print Admin server.

See the next section for details.
Setting IPsec pre-shared key

Set a pre-shared key for IPsec on the Epson Print Admin server to allow IPsec communication to the Epson device.
1. Open Control Panel > System and Security > Windows Firewall > Advanced settings on the primary server
computer.
2. Click Windows Firewall Properties.
3. Navigate to IPsec Settings tab > IPsec defaults, and then Click Customize.
4. Select Advanced Settings as the Authentication method, and then click Customize.
5. Click Add in First Authentication.
6. Select Pre-Shared Key, enter the pre-shared key that you set in the Epson device in step 4.
7. Click OK to close each screen.
Customizing by use scene

Customize it according to the environment that uses the setting applied with a set profile. See the following about
the example of setting customization.
84
Appendix
Related Information
& “High security settings” on page 79
Operational check
Perform a test operation whether the restriction of the print, copy, scan, and fax that you set work as they are set.
If the printer and the server can not connect, check the "Setting security for the communication path."
Refer to the following when you want to release a high-security settings, in case that a problem occurs in Epson
Print Admin server or you want to rework settings.
Related Information
& “Setting security for the communication path” on page 83
& “What to do if the Epson Print Admin server goes down” on page 67
Test cases to check the restriction of printing that does not pass through the
Epson Print Admin server:
1. Install the drivers for the multi-function device to the client computer.
2. Print any document on the printer driver.
3. Navigate Control Panel > Hardware and Sound > Devices and Printers, right-click on the multi-function
device icon.
4. Click See what’s printing.
5. Make sure if a print job of the document you printed remains in the displayed menu.
When a print job is left, restriction is functioning.
6. Delete the print job, close the menu.
Customization example of a high security setting

You can customize the security settings according to the environment that uses the setting applied with a profile.
Use the Web Config.
When you want to prohibit printing from a client computer and

allow scanning and faxing
Location: Network Security Settings > IPsec/IP Filtering > Basic or Network Security tab > IPsec/IP Filtering >
Basic
85
Appendix
Setting Overview Setting Settings

Profiles to
Import
Import a level 5 setting profile, Level 5 Clear the following in Service Name from Group Policy 10.
clear the setting items for scanning
and faxing from the prohibited IPP/IPPS*
rules. Network Scan
CIFS (Local)
* IPP/IPPS and clear the check if you want to use IPP Faxout from Mac OS. If you clear, IPP/IPPS printing is allowed.
When you want to print directly from a specific client computer

Basic

Profiles to
Import
Set the IPsec filtering rules for the Level 5 Set the following in Group Policy 2.
client computer to allow vacant
Access Control: Permit Access
individual policies by importing a
Level 5 setting profile. Local Address(Printer): IP address of the printer
Remote Address(Host): IP address of the client computer
Method of Choosing Port: Service Name
Service Name: Check RAW (Port9100)
For others, select the item to allow the service.
LPR printing: LPR
FTP printing: FTP Data (Local), FTP Control (Local)
IPP/IPPS printing: IPP/IPPS
Select Allows printing and scanning without authentication
information or Allow printing and scanning without
authentication information from a computer in Access
Control Settings > Basic or Product Security > Access Control
Settings > Basic.
86
Appendix

Profiles to
Import
Set the IPsec rules for the client Level 6 Set the following in Group Policy 2.
computer to allow vacant
Access Control: IPsec
Remote Address(Host): IP address of the authentication server
Service Name: Check RAW (Port9100)
Authentication Method: Pre-Shared Key
Pre-Shared Key: Any
Security Protocol: ESP
Settings > Basic.
When you want to scan directly from a specific client computer

Basic

Profiles to
Import
Service Name: Check the Network Scan
Settings > Basic.
87
Appendix

Profiles to
Import
Pre-Shared Key: Any
Settings > Basic.
When you want to receive fax in a specific client computer

Basic

Profiles to
Import
Service Name: Check the CIFS (Local)
Service Name: Check the CIFS (Local)
Pre-Shared Key: Any
88
Appendix
When you permit IPP/IPPS print from a client computer

Basic

Profiles to
Import
Clear the settings for the IPP/IPPS Level 3-6 Clear IPP/IPPS from Service Name in Group Policy 10.
printing items from the prohibited
If you clear the IPP/IPPS, restrictions for the IPP Faxout function
rules by importing a Level 3-6
are released.
setting profile.
When you permit Document Capture Pro and Document Capture

Pro Server
Basic

Profiles to
Import
Set the IPsec filtering and IPsec Level 4, 5 Set the following in Group Policy 2.
rules for the client computer to
allow vacant individual policies by
importing a Level 4-6 setting Local Address(Printer): IP address of the printer
profile.
Level 6 Set the following in Group Policy 2.

Local Address(Printer): IP address of the printer
Pre-Shared Key: Any
If you are using the Document Capture Pro Server, we recommend installing on the same computer as the Epson
Print Admin server, since setting changes are not required.
When you want to permit a connection from a smart device

Basic
89
Appendix

Profiles to
Import
Import a Level 5 setting profile, and Level 5 (1) Log in as a system administrator from the control panel of the
then set the pass rules to individual device.
vacant policies.
(2) Enable simple AP mode.
(3) Navigate in the Web Config, Network Security Settings >
IPsec/IP Filtering > Basic. Set the following in Group Policy 2.
Local Address(Printer): Any addresses
Remote Address(Host): Enter “192.168.10.1/24”*
* The range of IP addresses
When you want to print directly from any client computer

Location: Access Control Settings > Basic or Product Security > Access Control Settings > Basic

Profiles to
Import
Allow printing without Select Allows printing and scanning without authentication information or
authentication information Allow printing and scanning without authentication information from a
computer.
When you want to enable/disable the specific protocols

Set the function for each protocol to enable/disable by changing the items in the available services.
90
Appendix
Setting Location Function Contents
Services > Protocol or Network Enable WSD Switch between enable/disable for WSD printing and
Security tab > Protocol WSD scanning.
The default setting for multi-function device is
enabled.
Disabled in setting profiles with Level 4 or higher
security.
Allow LPR Port Printing Switch between enable/disable for LPR printing.
enabled.
This does not change in the setting profile.
Allow RAW (Port9100) Switch between enable/disable for RAW printing.

Printing
enabled.
Enable IPP Switch between enable/disable for IPP/IPPS printing.

enabled.
Enable FTP Server Switch between enable/disable for FTP printing.

disabled.
Services > MS Network > Use Use Microsoft network Switch between enable/disable for Microsoft Network
Microsoft network sharing or sharing (network folder sharing and scan to folder function).
Network Security tab > MS
Network > Use Microsoft
enabled. This does not change in the setting profile. If
network sharing
you disable it, because the client function is disabled,
you cannot use the scan to folder feature. You can use
IP filtering to use the scan to folder function while
limiting folder sharing.
Services > Network Scan > Switch between enable/ Switch between enable/disable scanning from EPSON
Network Scan > Enable scanning disable scanning from Scan.
or Network Security tab > EPSON Scan
Network Scan > Network Scan >
enabled.
Enable scanning
Services > Network Scan > Switch between enable/ Switch between enable/disable AirPrint scan (eSCL).
AirPrint > Enable scanning or disable AirPrint scan (eSCL)
Network Security tab > Network
enabled.
Scan > AirPrint > Enable
scanning Disabled in setting profiles with Level 4 or higher
security.
91
Appendix
When you want to release Wi-Fi direct panel lock

Switch between enable/disable Wi-Fi Direct settings from the control panel. Setting location and menus vary
depending on the model.
Services > Wi-Fi Direct > Prohibit Wi-Fi Direct Setting Switch between enable/disable Wi-Fi Direct
Connect to the Wi-Fi Direct from the Panel settings from the panel.
devices only
disabled (not prohibited).
Enabled (prohibited) in setting profiles with Level 2 or
higher security.
Network Settings > Services > Enable the Wi-Fi Direct Switch between enable/disable Wi-Fi Direct
Wi-Fi Direct > Enable Wi-Fi Function settings from the panel.
Direct function or Network
Security tab > Wi-Fi Direct >
enabled (not prohibited).
Enable Wi-Fi Direct function
Disabled (prohibited) in setting profiles with Level 2
or higher security.
When you want to enable/disable the PC - fax transmission function

Change the PC-FAX transmission settings to enable/disable the PC-FAX transmission function.
Fax Settings > Send Settings > Enable PC-FAX transmission Switch between enable/disable the PC-FAX
PC to FAX Function or Fax tab > function transmission function.
Send Settings > PC to FAX
The default setting for multi-function device is Use.
Function
Disabled in setting profiles with Level 3 or higher
security.
Sample Driver Distribution for Group Policies

This section explains sample driver distributions for group policies for the active directory. You need to install the
Active Directory domain in advance to use this setting.
This section uses Windows Server 2012 as an example.
Installation settings for a distributed driver

The following section explains how to install a distributed driver on each client computer.
! Caution:
The Epson Print Admin printer driver and the Epson Print Admin Notifier must be distributed to each client
computer.
92
Appendix
1. Click Start > Administrative Tools > Group Policy Management.
2. Right-click in the domain name or organization unit (OU) to which the computer that you want to distribute
the driver belongs to, and then select Create a GPO in this domain, and Link it here.
3. Enter any GPO name in Name, and then click OK.
4. Right-click the GPO you created, and then select Edit.
93
Appendix
5. Right-Click Software Installation in Computer Configuration > Policy > Software Installation, and then
select Create New.
6. Select the driver that you want to install in client computers, and then click Open.
Download the Driver (For client) in the English row for the Windows version in System Settings > Driver/
Client Tool Download on the administrator page.
7. Select Advanced, and then click OK.
94
Appendix
8. Select the Extract tab, and then select the “Uninstall the applications when they fall out of the scope of
management.” check box.
9. Click Advanced.
10. Select “Ignore language when deploying this package” check box, and then click OK.
11. Click OK to close the settings window.
Related Information
& “Distribute by using Active Directory Server Group Policy and so on” on page 46
Uninstalling distributed drivers

To uninstall a distributed driver, remove the link for GPO and OU.
95
Appendix
1. Right-click the GPO for the distributed driver you want to uninstall, and then select Link Enabled.
2. Make sure that Link Enabled is changed to No.
Trademarks
❏ EPSON and EXCEED YOUR VISION are registered trademarks of the Seiko Epson Corporation.
❏ Microsoft, Windows, Windows Server, and Windows Vista are registered trademarks of the Microsoft
Corporation in the US and other countries.
❏ macOS, Mac OS, OS X, and Safari are trademarks of Apple Inc., registered in the U.S. and other countries.
❏ Other product names may be trademarks or registered trademarks of their respective owners.
© Seiko Epson Corporation 2020
96
Appendix
Caution
❏ Unauthorized reproduction of a part or all of this guide is strictly prohibited.
❏ The contents of this guide are subject to change without prior notice.
❏ Contact our company if you have any questions, find a mistake, encounter a missing description, and so on in
the contents of this guide.
❏ Regardless of the previous point, we will under no conditions be liable for any damages or losses resulting from
the operation of this product.
❏ We will under no conditions be liable for any damages or losses resulting from operation of this product in any
way other than described in this manual, inappropriate use of this product, or modifications performed by a
third party other than our company or our suppliers.
97

Epa System Installation Guide npd6718-00 en

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Epa System Installation Guide npd6718-00 en

Uploaded by

Copyright:

Available Formats

Epson Print Admin

System Installation Guide

About this Guide

About this Guide

The content of this document

Following manuals are available.

Using this Guide

Marks and Symbols

About this Guide

Screenshots Used in This Guide

Operating System References

About this Guide 4. Setting the system and registering

Solving Problems Sample Driver Distribution for Group Policies. . . . .92

Procedure Operations Approximate

1 Preparing to Install ❏ Checking hardware and software requirements for the 60

2 Operational check of the ❏ Check the components 10

3 System installation Installing and configuring the system and components 30

Installing and configuring the system and components 5

4 Setting the system and registering ❏ Setting each server 10

5 Operational check ❏ Driver installation 10

6 Check before practical use of the ❏ Setting the license 60

What you need to set up

5 SMTP server For sending email notifications.

1. Prepare device and check information

1. Prepare device and check information

Epson Print Admin Server

OS Service packs Edition

Windows Server 2008 R2 Service Pack 1 or later Standard / Enterprise / Datacenter

Windows Server 2012 - Essentials / Standard / Datacenter

Windows Server 2012 R2 - Essentials / Standard / Datacenter

Windows Server 2016 - Essentials / Standard / Datacenter

Windows Server 2019 - Essentials / Standard / Datacenter

1. Prepare device and check information

OS Service packs Edition

Windows 7 Service Pack 1 or later Professional / Enterprise / Ultimate

Windows 10 - Pro / Education / Enterprise

Operation in a virtual environment

Required components, software

Windows Server 2008 7.0

Windows Server 2008 R2 / Windows 7 7.5

Windows Server 2012 8.0

Windows Server 2012 R2 8.5

Windows Server 2016 / Windows Server 2019 / Windows 10 10.0

Microsoft SQL Server 2014 Express *

Microsoft SQL Server 2008

1. Prepare device and check information

Microsoft SQL Server 2008 R2

Microsoft SQL Server 2012

Microsoft SQL Server 2014

Microsoft SQL Server 2016

Microsoft SQL Server 2017

Microsoft SQL Server 2019

* Included in the package in this system.

Authentication method No authentication, SMTP authentication, and POP before SMTP

Encryption No encryption, StartTLS, and SMTP over TLS

Compatible directory services

Service name Version

OpenLDAP Ver.2.3, Ver.2.4

Epson Open Platform 1.0, 1.1

1. Prepare device and check information

Authentication device and authentication card

Supported operating systems

Operating system Service packs Edition

Printer Epson Print HTTPS (TCP) 44328 Device panel display