Secure Printing Using SSL

Secure printing takes advantage of SSL, which requires users to authenticate using their eDirectory usernames and passwords. Users authenticate once per eDirectory tree per session. The print data is encrypted, and all print communication uses port 443. Without secure printing, the printer is available to anyone inside the firewall on the network and the print data is not encrypted. Secure printing works in conjunction with the security level set for the printer.

The following table shows how access is determined, depending on the level of printer security and if secure printing is enabled or disabled.


Table . Effects of Printer Security

Printer Security Level Secure Printing Disabled (No SSL) Secure Printing Enabled (With SSL)

Low

Full access

eDirectory authentication

Medium (Default)

Users granted access as if they had been assigned the User role.

eDirectory authentication and check user's effective rights

High

Users must use SSL and authenticate to eDirectory

Users might receive an error if SSL is not enabled. (See High Security Requires User Authentication .)

eDirectory authentication, check user's effective roles, and connection verification

SSL is automatically enabled when a printer's security is changed to High when using Novell iManager.

For more information on printer security levels, see "Setting Printer Security Levels" in the Novell Distributed Print Services Administration Guide.


Considerations When Changing Printer Security


High Security Requires User Authentication

If you change the printer agent security level to high, the Requires Security check box (enabling SSL) on the IPP Support page of the printer's Client Support Page in Novell® iManager is enabled automatically.

NOTE:   When setting printer agent security at the server console, SSL is not enabled automatically, and users might receive the following error 

Error message: iPrint Client - "The request requires user authentication."

To avoid the error, ensure that the Requires Security check box is checked when a printer agent's security is changed to High. For more information, see Enabling SSL .


Enabling SSL Changes the Printer URL

When you check the Requires Security check box, the URL for the associated printer will change. Users who have already installed this printer will have to delete and reinstall the printer in order to use the updated URL.


Lowering Printer Security

Once a printer's security is set to High and SSL is enabled with the Requires Security check box, SSL remains enabled even if the security level is lowered. If SSL is disabled, then the URL will change and users will have to reinstall the printer.


Enabling SSL

  1. From Novell iManager, click iPrint Management > Manage Printer.

  2. Browse to and select the Printer object you want to modify.

  3. Click Client Support > IPP Support.

  4. Check/Uncheck the Requires Security check box.

  5. Click Apply or OK to update the printer settings.