myQ X 10.2 RC 8 Print Server User Guide

myQ X 10.2 RC 8 Print Server

MyQ Print Server 10.2

• Minimum required support date: 1st of April 2023
• Minimum required version for upgrade: 8.2

What’s New in 10.2

Click to see a list of new features available in version 10.2

• Entra ID (Azure AD) Joined devices are now supported for Job Authentication; a new option to
• Entra ID User Synchronization can automatically create compatible user aliases from concatenated
• Display names (for job submission from local accounts such as AzureAD\displayName).
• New page Print Drivers in Settings and new queue options now available, allowing to manage captured drivers for the upcoming printer provisioning and print driver deployment of the MyQ
• Desktop Client (MDC 10.2 will be required for this functionality).
• User synchronization from Google Workspaces (formerly GSuite) via LDAP is now supported also on Standalone MyQ installations.
• Easy Print now supports “User doing the scan” authentication for folder scan and print destinations, allowing users to save passwords to access such folders in MyQ Web Interface.
• Added support for Integrated Windows Authentication (Windows single sign-on) for Web User
• Interface and MyQ Desktop Client 10.2, logging in environments where IWA is used can be enabled in Settings – User Authentication and MyQ Desktop Client’s Configuration profiles.
• In addition to permanent PINs, you can now create temporary PINs with limited validity.
• Desktop Client can now be configured from the Web Admin Interface and multiple configuration profiles can be created, allowing more flexibility in MDC deployments.
• Users can save passwords in MyQ Web User Interface used to access secured shared folders they have available as destinations for Easy Scan, instead of providing them manually on the Embedded
• Terminal during each scan. When no password is saved at the time of scan, the user receives an email to connect the folder to have the scan delivered.
• Ukrainian was added as a new supported language on MyQ Print Server.
• Users can now manage their own Address Books with Email addresses and Fax numbers. They can select these personal contacts as Scan and Fax recipients on the Embedded Terminal if the terminal action uses the Address Book parameter and destination.
• When a user scans to a cloud storage they do not have connected, they will receive an email with a quick link to connect their storage immediately, and their scan is then delivered. Scan is no longer disposed. This improves the experience of setting the user’s cloud storage.
• It is possible to run multiple versions of the Embedded Terminal at the same time, and administrators can select devices for which each of these versions should be used; this can help with zero downtime upgrades as well as with trying out new Embedded Terminal versions.
• It is now possible to set admin username and password for printers via CSV import, allowing the import of these credentials in bulk.
• In MyQ Desktop Client’s configuration profiles, an option to select between Private and Public mode was added; public mode is expected to be used for shared workstations, print rooms, etc. where many different users might need to print; this mode disables storing the print jobs locally on such devices (Client Spooling) as well as ensures that user is logged out automatically after printing or when being idle for more than a minute.
• The widget “Updates” was added on the admin’s Dashboard. When a new version of MyQ or
• Terminal patch is released, administrators will see the update as available.
• Option in Easy Config to import only settings from the Database backup file lets administrators to use one server as a template for deploying multiple servers.
• Print Server now collects more information about connected devices such as Embedded SDK version and platform. Details can be optionally displayed on the Printers page in the MyQ Web Interface.
• New user’s attribute “Alternate email” allows the administrator to add multiple email addresses to a user. If enabled by the administrator, users can submit jobs from these emails and use them as a scan destination.
• New connector “External Storage API” can be used to connect an API adapter. This way, new scan destinations not natively supported by MyQ can be integrated.
• Administrators can now automatically connect users synchronized from Azure AD to their OneDrive storage if they set up an Azure application with sufficient permissions as per documentation. Users will not have to individually log in to the MyQ Web User Interface to connect their OneDrive account.
• MyQ Log interface was largely improved, it now allows saving commonly used filters and reusing them while searching or monitoring live logs.

10.2 RC 8

Security

• Easy Config settings to lock/unlock PHP Scripting is applied also to Queue’s User Interaction Scripting, improves security by allowing to keep these settings in read-only mode at all times (resolves CVE-2024-22076).
• Improved logging of login events especially attempts to log in with invalid credentials; these changes should make filtering such events in the MyQ Log easier.
• Limited access to data that could be considered sensitive when custom reports are used.
• Limited options for well-known clients to request certain operations on users via REST API.
• Obfuscation of database password in a log file.
• The access of the account for external reporting has been limited, some database tables with data that might be considered sensitive will not be accessible by default by this user.
• Unsuccessful authentications are now limited for security reasons, by default, the client/device is blocked for 5 minutes if more than 5 invalid login attempts are registered in a span of 60 seconds; these periods can be manually adjusted.

Improvements

• NEW FEATURE It is possible to run multiple versions of the Embedded Terminal at the same time, and administrators can select devices for which each of these versions should be used; this can help with zero downtime upgrades as well as with trying out new Embedded Terminal versions.
• NEW FEATURE Added support for Integrated Windows Authentication (Windows single sign-on) for Web User Interface and MyQ Desktop Client 10.2, logging in environments where IWA is used can be enabled in Settings – User Authentication and MyQ Desktop Client’s Configuration profiles.
• NEW FEATURE In MyQ Desktop Client’s configuration profiles, an option to select between Private and Public mode was added; public mode is expected to be used for shared workstations, print rooms, etc. where many different users might need to print; this mode disables storing the print jobs locally on such devices (Client Spooling) as well as ensures that user is logged out automatically after printing or when being idle for more than a minute.
• NEW FEATURE MyQ Log interface was largely improved, it now allows saving commonly used filters and reusing them while searching or monitoring live logs.
• The design of the Azure-related connectors (Entra ID, OneDrive for Business, and SharePoint Online) was improved.
• The connection processes for SharePoint Online and Entra ID were improved, administrators can use the Automatic mode when creating the connector which does not require creating an Azure application manually but uses a MyQ predefined Enterprise application instead.
• Added options that allow to automatically create a synchronization source and authentication server for Entra ID in the dialogue for adding a new Entra ID connector.
• Easy Config UI enhanced and reorganized.
• Terminal package upgrade was adjusted to the new functionality that allows running two
• Embedded terminal packages for the same vendor at the same time; upgrade of the terminal package initiates the upgrade only of those devices running the version that is being upgraded.
• Added options to select the level of synchronization for Aliases and Groups in LDAP sources; allowing for more flexibility such as choosing whether full synchronization should be performed or when synchronization should be skipped.
• The option to generate Aliases to support printing from Entra ID Joined devices in the Entra ID synchronization was improved, it now removes more characters from the user’s Display name (” [ ] : ; | = + * ? < > / \ , @); this should improve options for job sender recognition in environments where Entra ID Joined devices exist.
• Copy/paste of the authorization code by the administrator during connecting of OneDrive for Business is not required in the automatic mode.
• IPPS support was largely improved in MyQ; print options in IPPS printers will now reflect policies configured on the queues they are printing to; this enhances the deployments of IPPS printers which can act as a universal method for printing in organizations with multi-vendor fleet.
• The Windows certificate store is synchronized with MyQ’s certificate storage; this means that MyQ should automatically trust all certificates trusted by the system MyQ is running on without the need to include these certificates by editing configuration files manually.
• Added support for finishing print options to job scripting.
• Since emails with scans from MyQ are now graphical by default, an option was added in the Easy
• Scan terminal action settings to send them as plain text; this might be needed, for example, when the email with a scan should be further processed by automation or fax servers.
• LDAP synchronization options are validated on saving to avoid duplicated Base DNs which could cause errors during user synchronization.
• Loading of Internal Code Books should now be faster on the Embedded Terminals, and pagination was added on the MyQ Web Interface where Code Books are managed.
• Name or Tenant Domain is displayed of Entra ID is displayed on the Connections page for better recognition when multiple tenants are used.
• NEW FEATURE Added support for MyQ in IPv6 networks, IPv6 addresses can now be used across
• MyQ to configure authentication servers, SMTP, add printers, configure MyQ Desktop Client configuration profiles, and more.
• NEW FEATURE Changed settings for price calculation now allow to set the number of clicks for each paper format individually.
• Added option to switch accounting and reporting to clicks instead of sheets for paper formats and simplex/duplex (available in config.ini).
• NET Runtime updated to version 8.
• Apache updated to version 2.4.59.
• Firebird upgraded to version 4.
• PHP upgraded to version 8.3.6.

Changes

• Custom reports have to be signed; in case the installation uses custom reports, backup them before the upgrade to be able to request signing.

• Lotus Domino has been repositioned to the legacy mode; upgraded installations will preserve Lotus

• Domino integration (it is recommended to test the integration before upgrading production environments), and new installations will not have the option to add a new Lotus Domino connection available by default.

• Queue’s User detection method “MyQ Desktop Client” has been deprecated; with MyQ Desktop Client 10.2, it is possible to print to all queues using the Job Sender method as well as other forms of user detection; to preserve backward compatibility, the method “MyQ Desktop Client” may still be visible after upgrades and will remain functional, however, it can be switched to “Job Sender” once all computers run MDC 10.2.

• The CASHNet payment provider has been deprecated; the upgrade will also remove the existing CASHNet payment provider, payment history data are preserved and moved under “External Payment Provider”, and thus backup of payment history is recommended before the upgrade if CASHNet was used.

• The login option “User name and password” in the Embedded Terminal’s configuration profile has been renamed to “User name and password/PIN” to accommodate for the fact that this method accepts both, user name + password as well as user name + PIN.
  NOTE : If you want to allow login with PIN but without typing out the user name, select the “PIN” method.

• Automatic login when navigating to sites from the Central Server’s Sites page was removed, login will now be required when opening the site server.

• Configuration for Fallback printing was not added to the MyQ Desktop Client’s Configuration profiles settings, Printing tab.

• The process to automatically connect MyQ to OneDrive for Business was improved, requested scopes were limited, and the connector interface simplified.

Bug Fixes

• A warning “Unlock job scripting: An error occurred while sending a request to the server” can be shown during database restore even if Database restore is successful.
• Certificate validation could cause problems with connecting to Google Workspace.
• Certificates are not validated during connection to cloud services.
• Changing database password in Easy Config causes “An error occurred while sending a request to the server” when Print Server and Central Server are running on same Windows server.
• Configured HTTP proxy is not used for connections to Entra ID and Gmail.
• Connection to LDAP Active Drectory can fail with TLS enabled and valid certificate used.
• Easy Config > Log > Subsystem filter: “Unselect all” is present even if all is already unselected.
• Emails from Easy Scan to Fax Server are sent in HTML format instead of plain text which might affect their processing by the fax server.
• Error (pipe has been ended) can be triggered during History Deletion.
• Faxes with A3 paper size are incorrectly accounted.
• In rare cases, the user could be logged out prematurely from the embedded terminal (affecting only user sessions lasting longer than 30 minutes).
• Leap year data (data from 29th of February) blocks replications.
• Logged repeating error “Error occurred while performing message service callback. | topic=Counter History Request | error=Invalid date: 2025-2-29” (caused by the “Leap year replication” issue also fixed in this release).
• Number of copies could be incorrectly displayed in Easy Print.
• Original jobs moved to different queue by job scripting are included in reports for expired and deleted jobs.
• Print discovery throws error while trying to run print discovery from CSV file in network folder.
• Project editor displays project code as project name.
• Recharging credit via GP webpay – payment gateway is not loaded when the user’s language is set to specific languages (FR, ES, RU).
• Report “Projects – User Session details” shows the user’s Full name in the User name field.
• Scan to cloud fails when metadata are included.
• Some groups might be considered different if they contain full-width and half-width characters in the name.
• The outgoing SMTP Server step under Quick Setup Guide on the MyQ Home page is not marked done after the SMTP server is configured.
• The test of connection to Google Workspace in the authentication server settings which did not require credentials previously could have impacted user synchronization and caused problems with authentication to Google Workspace; the Test of connection will now also require user credentials filled in similarly to the synchronization source settings.
• Time zone detection can give warning even correct time zone seems to be set.
• User group is not possible to be a delegate of its own to allow members of the group to be delegates of each other (i.e. members of the group “Marketing” cannot release documents on behalf of other members of this group).
• User synchronization from Entra ID can fail when a user is manually created on Print Server but the same user exists also in Entra ID.
• User synchronization from the Central to the Site server fails with no clear warning in cases when the user has the same alias as the username, now this duplicate alias is skipped during synchronization as aliases on the Print Server are case insensitive (fixes synchronization error “(Return value of MyQ_Alias is null)”).
• VMHA license switch is displayed on Site server.
• Watermark cannot display Hebrew language characters.
• When a higher number of Job Roaming jobs are being downloaded from a site while being printed and the user logs out, these jobs might not return to the Ready state, and would not be available for print next time.
• When communication with the License server is not possible, an invalid error message might be shown with no description of the reason.
• When Job Encryption is activated, jobs archived with Job Archiving are also encrypted.

Device Certification

• Added support for Canon iR C3326.
• Added support for Epson AM-C400/550.
• Added support for HP Color LaserJet Flow X58045.
• Added support for HP Color LaserJet MFP M183.
• Added support for HP Laser 408dn.
• Added support for HP LaserJet M612, Color LaserJet Flow 5800 and Color LaserJet Flow 6800.
• Added support for HP LaserJet M554.
• Added support for OKI ES4132 and ES5112.
• Added support for Toshiba e-STUDIO409AS.
• Added support for Xerox VersaLink C415.
• Added support for Xerox VersaLink C625.
• Ricoh IM 370/430 edit option to print large formats.

10.2 RC 7

Security

• Added option in the Easy Config to lock/unlock Queue’s Scripting (PHP) settings for changes, improves security by allowing to keep these settings in read-only mode at all times (resolves CVE-2024-22076).
• Disallowed sending HTTP requests during file processing of Office documents printed via Web User
• Interface (Server-Side Request Forgery). In addition the processing of queued Office documents was improved.
• LDAP communication was not validating certificates.
• MiniZip’s vulnerability CVE-2023-45853 solved by updating MiniZip version.
• OpenSSL’s vulnerability CVE-2023-5678 solved by updating OpenSSL version.
• Phpseclib’s vulnerability CVE-2023-49316 solved by removing dependencies of phpseclib.
• Printing office document which contains macro via WebUI print would execute the macro.
• REST API Removed capability to change the authentication server of a user (LDAP) server.
• Traefik’s vulnerability CVE-2023-47106 solved by updating Traefik version.
• Traefik’s vulnerability CVE-2023-47124 solved by updating traefik version.
• Unauthenticated Remote Code Execution Vulnerability fixed (resolves CVE-2024-28059 reported by Arseniy Sharoglazov).
• Default password for the *admin account is not set for new MyQ installations anymore. Set the password manually in the Easy Config before heading to the MyQ Web Admin Interface. If you are still using the default password at the time of the upgrade, you will be asked to create a new one in the Easy Config.
• Added option to enable/disable admin account which leads to a new possibility to lock admin account for login when required. It is recommended to assign specific users desired rights and prevent using a shared account for server administration.
• REST API Scopes well-known clients (MyQ applications) can request were decreased to strengthen security.

Improvements

• NEW FEATURE Entra ID (Azure AD) Joined devices are now supported for Job Authentication; a new option to Entra ID User Synchronization can automatically create compatible user aliases from concatenated Display names (for job submission from local accounts such as AzureAD\displayName).
• NEW FEATURE New page Print Drivers in Settings and new queue options now available, allowing to manage captured drivers for the upcoming printer provisioning and print driver deployment of the MyQ Desktop Client (MDC 10.2 will be required for this functionality).
• NEW FEATURE User synchronization from Google Workspaces (formerly GSuite) via LDAP is now supported also on Standalone MyQ installations.
• NEW FEATURE Added support for native Epson driver Remote + ESC/P-R which allows such jobs to be authorized and printed.
• NEW FEATURE Easy Print now supports “User doing the scan” authentication for folder scan and print destinations, allowing users to save passwords to access such folders in MyQ Web Interface.
• Added column “Counter – Remaining” to reports Quota status for users and Quota status for groups and renamed column “Counter value” to “Couter – Used”.
• Added help texts to SMTP and FTP configuration in Network Settings page.
• Added option to add an additional column “Project code” to reports in the Projects category.
• Added support for checking new available updates of the Sharp Luna Embedded Terminal in the
• Updates Dashboard widget and in Printers & Terminals.
• Added support for Force mono policy for print to Xerox devices and Mono (B&W) release option for MyQ Xerox Embedded Terminal (PostScipt, PCL5, and PCL6) Limitation – Not applied for PDF jobs.
• Improved health check messages about unsupported features by terminals.
• Improved logging of user synchronization issues.
• Improved UI of Easy Config’s “Change Location” dialog.
• Mako updated to 7.1.0.
• Mako updated to version 7.2.0.
• OpenSSL updated to version 3.2.1.
• Password field for SMTP settings can accept up to 1024 characters instead of 40.
• Reading lower printer counters are ignored (i.e. printer for some reason temporarily report some counters as 0) to avoid accounting of invalid values to some user or *unauthenticated user.
• UI of MDC configuration profile settings was improved.
• “Keep printing after logout” renamed to “Stop sending jobs after user logout” for better clarify about the functionality of this feature.
• NET Runtime updated to 6.0.26.
• Data generated for Helpdesk now contain also Firebird logs.
• Default PIN length increased to 6 and minimum PIN length is now 4, resulting in improved security defaults for user authentication; for upgraded installations, if PIN is set to length below 4, it is automatically increased and will be used next time you generate new PINs.
• MyQ now contains a configuration profile called Default to simplify the initial configuration on new installations.
• OpenSSL updated to 3.2.0.
• PHP updated to 8.2.15.
• REST API Added option to soft-delete users.
• REST API Enhanced options for user management by allowing you to set user group memberships.
• REST API New options for filtering printers by printer group memberships.
• The option to copy selected settings from one queue to another was added, making it easier to distribute Job parsing options, PJL detection settings grid, and print driver assignments to queues where the same settings should be used.
• To strengthen the security of user authentication, manually and automatically generated PINs are now subject to improved complexity standards; weak PINs (with subsequent numbers, etc.) cannot be manually set and are never automatically generated. It is recommended to always use the Generate PINs functionality instead of filling PINs manually.
• Traefik updated to version 2.10.7.

Changes

• Correction of project names “No project” and “Without project”.
• It is not possible to connect MDC version lower than 10.2.
• Security settings in webUI were changed from SSL to TLS.
• REST API Parameter autoDarkMode for Authorization Grant login removed, new parameter theme added to request a particular skin (red/blue/dark/accessibility).
• Name of the payment provider “WebPay” corrected to “GP webpay”.
• Password has been removed from Easy Scan parameters; passwords for shared folders can be saved in advance by individual users on their MyQ Web Interface in case they have access to such folders.
• Removed support to submit jobs via myqurl files.
• Small translation changes of “Reason for rejection” in Jobs > Delete, Failed, column renamed to Deleted/Rejected.
• Smaller changes in the default Scan to Email messages.

Bug Fixes

• A job with mixed color and B&W pages uploaded via Web Interface is recognized as a full color document.
• Cannot generate support data past midnight.
• Codebook operations using OpenLDAP fail due to incorrect username format.
• Disabled terminal actions that are in a folder are still displayed on the Embedded Terminal.
• Easy Scan to Email fails when more than one recipient is used.
• Emails send by Print Server are not consistent.
• Favorite items in Codebooks are not displayed first on the Embedded Terminal.
• IPP Job receiving may not work after a queue change.
• IPP printing from MacOS forces mono on color job.
• Monthly report containing the Period column has months in incorrect order.
• Not possible to add rights for “All users” to an Internal Codebook in case when rights were previously removed.
• Not possible to login to the Mobile Client in some cases (error “Missing scopes”).
• Notification for printer event “Paper jam” does not work for manually created events.
• Opening Settings > Jobs on Site server causes Web Server Error.
• Opening the Printers page may result in the Web Server Error when Terminal’s SDK/platform column was added.
• Parsing of specific PDF files can fail.
• Parsing of specific print job failed.
• REST API Possible to change user properties on Site server
• Possible to change users on Site server by modifying web page.
• Project’s rights for “All users” are not assigned properly when imported from CSV.
• Purchase date description text can be displayed multiple times.
• Reinstalling MyQ X to a different path without deleting the data folder first results in the Apache service not able to start.
• Restarting services can cause exceptions in PHP logs.
• Scan to FTP uses additional port 20.
• Self-created user is given persistent PIN even they are set to receive temporary one.
• Some reports can display different values on Site Server and Central Server.
• The User Rights settings dialog window is continuously moving if the window does not fit in the screen.
• Upgrade of specific database can fail at step 102.27.
• User synchronization from Azure ID (Microsoft Entra) can fail in case of large amount of groups.
• When creating a new price list or editing an existing one, the Cancel button does not work correctly.

Device Certification

• Added support for Canon GX6000.
• Added support for Canon LBP233.
• Added support for HP Color LaserJet 6700.
• Added support for HP Laser MFP 137 (Laser MFP 131 133).
• Added support for Ricoh IM 370 and IM 460.
• Added support for Ricoh P 311.
• Added support for RISO ComColor FT5230.
• Added support for Sharp BP-B537WR.
• Added support for Sharp BP-B547WD.
• Corrected color counters of HP M776.
• Corrected scan counters of HP M480 and E47528 read via SNMP.

10.2 RC 6

Improvements

• NEW FEATURE : In addition to permanent PINs, you can now create temporary PINs with limited validity.

• NEW FEATURE : Desktop Client can now be configured from the Web Admin Interface and multiple configuration profiles can be created, allowing more flexibility in MDC deployments.
  LIMITATION : MDC 10.2 required.

• New permission Delete Cards added, allowing you to give users or user groups the option to be able to delete ID cards without them having access to other user management features.

• Added possibility to login into other account using Microsoft SSO than the one currently signed in (in previous versions, if user was logged to one MS account, this account was always used).

• Improved support of native Epson driver ESC/Page-Color which allows such jobs to be correctly accounted.

• Added option to assign a payment account/cost center via Job Processing > PHP scripting in Queue Settings.

• For a direct queue, it’s now possible to change the “user detection method” from the default “MyQ desktop client” when the MDC option “Ask for payment account” is enabled.

• List of characters allowed to be used in project code expanded. LIMITATION : Upgrade of Central

• Server to 10.1 (patch 4) and 10.2 RC 3 is required beforehand for replications to work correctly.

• Added additional options for User synchronization from Microsoft Entra ID (ignore sync source, deactivate missing users, add new users).

• Connecting cloud storage dialogues were improved and simplified.

• Improved design of connect folder/cloud storage screens.

• Added support for PJL command @PJL SET FITTOPAGESIZE (to set paper format) for PDF direct print on Ricoh devices.

• Changed “Azure AD” to “Microsoft Entra ID” to correspond with MS naming.

• Administrators can create multiple Entra ID instances to synchronize and authenticate users towards more than one tenant.

• Traefik updated to version 2.10.5.

• OpenSSL updated to version 3.1.4.

• Apache updated to version 2.4.58.

Changes

• Locked parameters of Easy scan renamed from “Prevent changing the value” to “Read Only”.
• License is removed when restoring settings from backup.

Bug Fixes

• Maximum OUT delta exceeded warning can appear repeatedly.
• Possible to use expired certificate for data encryption.
• Parameters in Microsoft Entra ID user synchronization changed and became invalid after upgrade from previous RC version causing synchronization to fail.
• License missing warning is shown during upgrade even when license is present.
• Error while communicating with the server was displayed after cloud storage is connected despite storage being connected successfully.
• LDAP Codebook: Search only matches items that begin with the query, when it should be a full-text search.
• Not possible to print from Easy Print terminal action if user does not have right for project “no project”.
• Possible to add User’s scan storage path longer than max allowed number of characters which is causing a Web Server Error.
• Not possible to remove a job from favorites with projects disabled, when the job was previously added to favorite with projects enabled.
• Creating project name starting with “&” causes Web Server Error.
• Price for A3 print/copy jobs may be incorrect in reports marked as beta.
• Easy Scan parameter “Microsoft Exchange Address Book” is not possible to configure.
• The “Help” widget on the dashboard does not display the custom title specified in the settings.
• Searching a codebook on the embedded terminal does not work for the query “0”. Nothing will be returned.
• User groups imported from CSV are automatically set as Cost Center for users when Cost Center accounting mode is selected.
• External account payment provider HTTP client does not use Proxy settings.
• Report “Credit and quota – Quota status for user” takes too long to generate in some cases.
• Upgrade of terminal package does not remove .pkg file of previous version of terminal from Program Data folder.

10.2 RC 5

Security

• Hashing of PINs enhanced. LIMITATION : As a result of changes, users who authenticate towards an LDAP authentication server must use their LDAP password on the Web User Interface, use of PIN is not possible (their PIN will still work from Embedded Terminals, and Desktop Client). Users who authenticate towards MyQ can still use their PIN everywhere.

Improvements

• Added option to assign project to print job by Job processing / PHP scripting in queue settings.
• Added new settings to Azure AD synchronization source that allow setting attributes to synchronize the users’ Full name, and Language. New attributes are also available for Aliases, PINs, Cards, and Personal numbers. It is now also possible to manually type in a required Azure AD user attribute to be used for these values.
• Enabled switch moved to setting header.

Bug Fixes

• User with rights to edit Scheduled report cannot select other attachment file format than PDF.
• Inactivity for some time on Web UI can lead to Web Server Error requiring user to refresh page and log in again.
• Adding “SDK/Platform” column on Printers tab can cause Web Server Error in some cases.
• Jobs via Web UI are printed always in mono when Job Parser is set to Basic.
• Dropdown list for tools and actions cannot be opened on deleted users.

10.2 RC 4

Security

• Hashing of passwords enhanced. LIMITATION : As a result of changes, users who authenticate towards an LDAP authentication server must use their LDAP password on the Web User Interface, use of PIN is not possible (their PIN will still work from Embedded Terminals, and Desktop Client). Users who authenticate towards MyQ can still use their PIN everywhere.

Improvements

• NEW FEATURE : Users can save passwords in MyQ Web User Interface used to access secured shared folders they have available as destinations for Easy Scan, instead of providing them manually on the Embedded Terminal during each scan. When no password is saved at the time of scan, the user receives an email to connect the folder to have the scan delivered. Applicable to Easy Scan destination Folder and User’s storage with Connect as: User doing the scan.
• NEW FEATURE : Ukrainian was added as a new supported language on MyQ Print Server.
• Option to automatically delete favorite jobs older than a specified amount of time was added.
• Users using Azure AD as their authentication server can authenticate with their Microsoft credentials on the Embedded Terminals (in case they use User Principal Name as their username in MyQ).
• Users who have available OneDrive Business or SharePoint destinations now can browse their entire storage when using Easy Print and Easy Scan, allowing them to select/enter any file/folder they have access to.
• If Folder browsing is disabled on this destination, scanned files are saved in the root folder of the storage.
• Possible to use variable %userID% for prologue/epilogue and custom PJL.
• Optimizations of Azure AD synchronization via Microsoft Graph API connector that should prevent slowdowns and skipping users.
• Added a link to Online Docs on the Terminal Actions settings page.
• PHP updated to 8.2.12.
• CURL upgraded to 8.4.0.

Changes

• In newly created user synchronization sources using the Azure AD connector (Microsoft Graph), the User Principal Name is now used as the username. After upgrade, existing username settings are preserved. To transition from old attributes to User Principal Name, users should be synchronized, the synchronization source removed, and created again. Users are also always paired by Azure AD’s unique Object ID.

Bug Fixes

• In some cases, MyQ Print Server can become inaccessible, resulting in Server Error when accessing the MyQ Web Interface and failing communication between Server and Embedded Terminals.
• Deleted printers are shown in Reports.
• Filter for printer group in Environmental – Printers report does not correctly filter printers to be included in the report.
• Duplex option does not work when printing from Linux with some drivers.
• Not possible to use advanced processing features (like watermarks) on some PDF jobs.
• Credit statement is not visible in the main menu after enabling credit until the page is refreshed manually.
• When closing tab of edited report without saving, Save Dialog window doesn’t close after first attempt.
• User synchronization results page is not refreshed automatically when synchronization finishes.
• Missing Chinese languages in Easy Config language selection.
• Credit actions drop-down menu options on Users tab is incorrectly aligned (cut off).

Device certification

• Added support for Ricoh IM C8000.
• TERMINALS Added support of Embedded Terminal for Sharp Luna devices.
• Added support for Sharp BP-70M31/36/45/55/65.

10.2 RC 3

Improvements

• NEW FEATURE Users can now manage their own Address Books with Email addresses and Fax numbers. They can select these personal contacts as Scan and Fax recipients on the Embedded Terminal if the terminal action uses the Address Book parameter and destination.
• NEW FEATURE When a user scans to a cloud storage they do not have connected, they will receive an email with a quick link to connect their storage immediately, and their scan is then delivered. Scan is no longer disposed. This improves the experience of setting the user’s cloud storage.
• NEW FEATURE Added support for native Epson driver ESC/Page-Color which allows such jobs to be authorized and printed.
• OpenSSL updated to version 3.1.3.
• Firebird update to version 3.0.11.
• Traefik updated to version 2.10.4.
• PHP updated to version 8.2.11.
• Built-in Groups (All users, Managers, Unclassified) are moved to new hidden group “built-in” to avoid conflicts with groups with same name created by user synchronization.
• PJL detection settings on Queue were enhanced, allowing to set how to detect the job owner’s domain, including regular expression transformation.
• When a user is signing into an external REST API application via MyQ login, and the user is currently signed in to MyQ, they can select the current account or switch to another one.
• Prologue/Epilogue can be inserted at the beginning and end of the print file.
• HTTPS is used for external links from the Web Interface.

Changes

• Removed obsolete ciphers from SNMP v3 settings (DES, IDEA and 3DES).

Bug Fixes

• In some cases, not all users are synchronized from Azure AD via Microsoft Graph (added in Connections).
• Built-in Embedded Terminal themes are missing except for the default one.
• Credit statement in CSV cannot be downloaded.
• User cannot change own profile properties (when enabled) on Site server.
• “Operation failed” error is sometimes shown when user is connecting Google Drive storage.
• HW terminal TerminalPro does not work without certificate even when unsecure connection is allowed.
• In Job privacy mode, user running a report is excluded when Exclude filter is not used.
• New user is not registered after a card swipe with “Register a new user by swiping an unknown ID card” enabled.
• Some groups reports cannot be saved when only Accounting group filter is set with error “User may not be empty”.
• Users could lose some Cost Center assignments after user synchronization from Azure AD and LDAP.
• Job preview of invalid job could cause Embedded Terminal to freeze.
• Installation of Kyocera embedded terminal sets device SMTP with no security.
• Two groups with identical names are indistinguishable in reports.
• In Job privacy mode, Administrators and users with Manage reports rights can see only their own data in all reports, resulting in the inability to generate organization-wide reports for group accounting, projects, printers, and maintenance data.
• Print of specific PDF via Web upload could cause Print Server service to crash.
• Synchronized users who are members of groups with identical names to MyQ built-in groups in the source, are wrongly assigned to these built-in groups due to conflicting names.
• Update interval for Offline login user synchronization is not applied.
• %DDI% parameter in .ini file does not work in MyQ DDI standalone version.
• Printers filter of nested Terminal Actions are not inherited from folder’s filter for Printers.
• In rare cases, Web Server Error could be displayed to a user after login due to multiple memberships in the same group.
• The server could crash during a continuous high-level print load.

Device Certification

• Added support for Olivetti models – d-COPIA 5524MF, d-COPIA 4524MF plus, d-COPIA 4523MF plus, d-COPIA 4524MF, d-COPIA 4523MF, PG L2755, PG L2750, PG L2745.
• Added support for Kyocera TASKalfa M30032 and M30040.
• Added support for Brother MFC-8510DN.
• Added support for Brother MFC-9140CDN.
• Added support for Brother MFC-B7710DN.
• Added support for Brother MFC-L2740DW.
• Added support for Brother DCP-L3550CDW.
• Added support for Brother MFC-L3730CDN.
• Added support for HP Color LaserJet MFP X57945 and X58045.
• Added support for HP LaserJet Flow E826x0.
• Added support for HP LaserJet M610.
• Added support for Sharp BP-50M26/31/36/45/55/65.
• Added support for Lexmark XC9445.
• Added support for Lexmark XC4342.
• Added support for Canon iPR C270.
• Corrected counter reading of Epson M15180.
• Corrected print counters of HP LaserJet Pro M404.

10.2 RC 2

Improvements

• Added option to synchronize “on Premises Sam Account Name” and “on Premises Domain Name” from
• Azure AD via MS Graph and pairing by Object ID to allow updating existing users whose usernames changed.
• Added option to exclude specific user(s) from Reports.
• MAKO updated to version 7.0.0.
• Added option to define regular expression for user synchronization (LDAP and Azure AD) for Aliases, Cards, PINs and Personal numbers.
• Failed jobs in jobs folder are deleted after 7 days (by default) during System maintenance to prevent them from taking up storage.

Changes

• PHP version downgraded to 8.2.6. PHP was crashing in some cases.

Bug Fixes

• Not possible to edit user on Site Server.
• Easy Fax appears as a destination of Easy Scan panel operation.
• User synchronization could result with errors if the source contained invalid values.
• Parsing of some PDF files fails because of unknown font.
• HP finishing options not correctly applied in some cases.
• In specific cases, zero counter can be read from HP Pro device, leading to negative counters accounted to *unauthenticated user.
• User synchronization takes more time than in previous MyQ versions.
• License plan of License widget contains label “EDITION”.
• LDAP user synchronization page is not responding in Firefox browser.

Device Certification

• Corrected toner reading values of Epson WF-C879R.
• Added support for Sharp Luna devices.
• Added support for Ricoh Pro 83×0

10.2 RC 1

Improvements

• Users now do not need to retype the authorization code manually when connecting a new cloud storage. Same for Gmail connection created by administrators.
• Added unique session identifiers to replication data to prevent differences in accounting data between Sites and Central.
• PHP upgraded to version 8.2.8.
• Improved look of new HTML emails. Footer text in emails now can be translated.
• Added options for behavior of PINs and Cards synchronization from LDAP same way as in CSV synchronization.
• REST API Added option to execute reports over REST API for external integrations.

Bug Fixes

• When user deletes all their own ID Cards on Site Server, it is not propagated to Central Server.
• User interaction script can not be saved.
• Some Project reports are available with Job privacy enabled.
• Some documents are parsed and showing as B&W on Terminal but are printed and accounted as color.
• Site Server’s print service crashes when Job roaming jobs are requested for deleted user.
• Scanning to OneDrive Business – insufficient user consents.
• Refresh token for Exchange Online expires due to inactivity despite of the system being actively used.
• Page-Range PDF cannot be read by Adobe Reader and causing Ricoh device to restart itself.
• Missing Scan and Fax columns in report Projects – User Session details.
• It is possible to save empty email destination for Log Notifier rules.
• Invalid SMTP port configuration (same port for SMTP and SMTPS) prevents MyQ Server from receiving print jobs.
• In some cases printer cannot be activated with SQL error “Malformed string”.
• Entering an invalid email when editing user account via Terminal Action displays incorrect error message.
• Document with multiple paper sizes (i.e. A3+A4) is printed on only one size (i.e. A4).
• Credit account type is not translated.
• Cloud service name missing in Connect dialogue.
• Punching on Canon’s CPCA job is not applied upon release of job.
• Booklet stapled on Ricoh device is stapled on the wrong place in some cases.

Device Certification

• Canon model lines Kodaimurasaki, Tawny, Azuki, Cornflower blue, Gamboge and Ghost white added for embedded terminal support.
• Added support for Toshiba e-STUDIO65/9029A.
• Added support for Ricoh IM C20/25/30/35/45/55/6010 (requires Embedded version 8.2.0.887 RTM).
• Added duplex counter for NRG SP C320.
• Added embedded terminal support for Canon iR-ADV C3922/26/30/35.

10.2 BETA 2

Improvements

• NEW FEATURE Possible to set admin username and password for printers via CSV import, allowing the import of these credentials in bulk.
• NEW FEATURE Widget “Updates” was added on the admin’s Dashboard. When a new version of
• MyQ or Terminal patch is released, administrators will see the update as available.
• Printer Status Check now checks also coverage counters, allowing them to be included in reports (for devices where applicable).
• Page range setting on PDF print files is achieved by incremental update instead of PJL command, improving support across devices.
• Added support for newer authentication protocols for SNMP v3 (SHA2-224, SHA2-256, SHA2-384, SHA2-512).
• Health check will warn the administrator if their database is using a page size of 8KB instead of 16KB which may affect the performance. Page size can be increased by backing up and restoring the database.
• Installation via Printer Discovery initiated by the Embedded Terminal is now supported (requires to be also supported by the Embedded Terminal).
• Added support for Romanian language.
• User rights changes are logged to Audit log.
• Web UI accessed over HTTP is redirected to HTTPS (except when accessing localhost) for improved security.
• Propagation of changes between Sites when their settings change on Central improved.
• Certificates in PHP updated.
• PHP updated to v8.2.6.

Changes

• Removed support for GPC file format in Bulk credit recharge.
• Renamed “Local Print Spooling” to “Device Spooling” is Settings (to unify and more easily distinguish different functions).
• Removed Terminal Manager (Terminal Manager was used for older version of terminals which are no longer supported).
• The default runtime of scheduled tasks changed to prevent them from running at the same time.
• Attempt of reading printer’s OID which is not available is logged as Debug message instead of Warning.

Bug Fixes

• Delegates of user groups are not synchronized from Central Server.

• Some rows could be skipped during replication on a Site that had active user sessions, causing inconsistencies in reports.
  NOTE : Site 10.2 BETA is now incompatible with Central Server 10.2 BETA 2 due to differences in communication during replications. Upgrade of the Site to 10.2 BETA 2 is required.” Job files of not replicated jobs to Central Server are never deleted.

• Unclear error message on the Terminal when a user without scan destination uses an Easy Scan action.

• Credit tab in User detail cannot be accessed (Web Server Error).

• Creating LDAP synchronization with unreachable domain causes Web Server Error.

• Not possible to use License manual activation.

• Missing Secure flag in Cookies.

• Sign in with Microsoft does not work in the Mobile Client when the server was added via Application proxy URL.

• Emails viewed in Outlook are missing line breaks and other small fixes.

Device Certification

• Added support for Ricoh M C251FW.
• Added support for Canon iR-ADV 6855.
• Added support for Canon iR-ADV C255 and C355.
• Added support for Ricoh P C600.
• Added support for Ricoh P 800.
• Added support for OKI B840, C650, C844.
• Added support for Sharp MX-8090N and terminal 8.0+ support for MX-7090N.
• Corrected copy, simplex and duplex counters of HP M428.
• Added support for Brother DCP-L8410CDW.
• Added support for Canon MF832C.

10.2 BETA

Security

• The default minimum TLS version has been increased to version 1.2.

Improvements

• NEW FEATURE Option in Easy Config to import only settings from the Database backup file lets administrators to use one server as a template for deploying multiple servers.
• NEW FEATURE Print Server now collects more information about connected devices such as Embedded SDK version and platform. Details can be optionally displayed on the Printers page in the MyQ Web Interface. NOTE : Must also be supported by the Embedded Terminals.
• NEW FEATURE New user’s attribute “Alternate email” allows the administrator to add multiple email addresses to a user. If enabled by the administrator, users can submit jobs from these emails and use them as a scan destination.
• NEW FEATURE New connector “External Storage API” can be used to connect an API adapter. This way, new scan destinations not natively supported by MyQ can be integrated.
• NEW FEATURE Administrators can now automatically connect users synchronized from Azure AD to their OneDrive storage if they set up an Azure application with sufficient permissions as per documentation. Users will not have to individually log in to the MyQ Web User Interface to connect their OneDrive account.
• Traefik updated to version 2.10.
• OpenSSL updated to version 3.1.0.
• PHP updated to version 8.2.5.
• Apache updated to version 2.4.57.
• Possible to use original print properties (job properties “Do not change”) of the job for Easy Print.
• Outgoing emails sent to MyQ users, e.g. emails with scanned documents, have been redesigned to look better than before.
• Design of the login page users can see when logging in MyQ Desktop Client and MyQ X Mobile Client is improved. NOTE : Applies if the client application supports the new login experience (currently MyQ X Mobile Client 10.1 and higher)
• Added support for accounting of IPP jobs on Epson with Embedded Terminal. Jobs were accounted to *unauthenticated user.
• LPR server is now able to receive jobs with unknown sizes. This means that spooling a job to MyQ via a Windows driver should no longer require LPR Byte Counting enabled.
• Purchased Assurance Plan is displayed on the Dashboard of the MyQ Web Interface. Job Preview is now generated in higher image quality.
• Canon CPCA jobs support watermarks and orientation.
• Support for release parameter “Page range” was added, allowing Terminals supporting this parameter to show selection of pages of the document to be printed.
• Possible to synchronize user’s multiple email addresses. Attributes for email address needs to be separated by semicolon and all next email addresses are imported as alternate email address. Saved OneDrive Business connector can be edited or re-authorized from the context menu, allowing to change application credentials without deleting and creating a new connector.
• New “Automatic” way of setting up an OneDrive Business connector introduced. It does not require creating an Azure application manually. Instead, MyQ’s preconfigured application can be added on the tenant. Users are automatically connected to their OneDrive storage, meaning they do not have to do so manually in the MyQ Web User Interface.
• Minimum TLS version configured for MyQ communication is visible on the Network page in Settings.
• Newly added option to enable Delete a file for Easy Print and Easy Scan cloud storages. NOTE :
• Must be supported by the cloud storage type, currently available for External Storage destinations.
• If you modify settings in the MyQ Web Interface and forget to save them, MyQ will now remind you about that.

Changes

• TERMINALS Removed support for all remaining Embedded Terminals version 7. If you are affected by this change, upgrade the installed Terminals to, at least, version 8.
• Minimal supported version of Windows Server is 2016.
• Following features were deprecated: SQL Server as user synchronization source, custom user synchronization source, schedulable external commands via Task Scheduler, editable username during self-registration, and SQL filtering for reports.
• REST API Removed support for API v1. Use at least API v2 in your integrations with MyQ.
• TERMINALS Removed support of old Embedded Terminals using API v1.
• Removed “Recharge Credit (on a terminal attached to a printer)” credit recharge option.
• Removed Custom data processing from Queue settings.
• Removed support for license keys. Not possible to upgrade to 10.2 when license keys are being used.
• Removed SW Lock via SNMP.
• Removed secondary terminal.
• Removed credit account type “Managed by the printer”. Note that after upgrade, all existing credit accounts of this type will be deleted.
• Removed the possibility to set Custom destination with PHP processing.
• Removed “MyQ SMTP Server” option for receiving jobs via Email. Jobs can still be received from external mailboxes connected to MyQ in Settings – Network – Connections.
• User’s email address is handled as a unique parameter (two or more users can no longer have the same email address).
• Replaced UDP communication for MDC with WebSockets (Requires MDC 10.2).
• User’s scan storage now does not accept email addresses, only valid storage paths.

Bug Fixes

• Aliases are incorrectly escaped in exported users CSV file.
• Some internal tasks (which take less that few seconds) can be executed twice instead of only once.

Device Certification

• Added support for Epson WF-C529RBAM.
• Added support for Konica Minolta Bizhub 367.
• Added support for Sharp BP-70M75/90.
• Added simplex/duplex counters for Ricoh SP C840.
• Added support for Sharp MX-C407 and MX-C507.
• Added support for Brother MFC-L2710dn.
• Added support for Canon iR C3125.

Component Versions

Expand the content to see the version list of used components for the above MyQ Print server releases.

| Ap ache| Apa che SSL| ServerSSL| Firebi rd| PHP| PHPSSL| C++ Runtime s| T raefik| MA KO
---|---|---|---|---|---|---|---|---|---
MyQ Print Server 10.2 RC 7| 2.4
.58| 3.1.
3| 3.1.
0| WIV3.0.1
1.337
03| 8.2.15| 3.0.12| VC++
2015-20
22 (vc17)
–
14.32.31
326.0| 2.10.7| 7.2.0
MyQ Print Server 10.2 RC 6| 2.4
.58| 3.1.
3| 3.1.
4| WIV3.0.1
1.337
03| 8.2.12| 3.0.11| VC++
2015-20
22 (vc17)
–
14.32.31
326.0| 2.10.5| 7.2.0
MyQ Print Server 10.2 RC 5| 2.4
.57| 3.1.
0| 3.1.
3| WIV3.0.1
1.337
03| 8.2.12| 3.0.11| VC++
2015-20
22 (vc17)
–
14.32.31
326.0| 2.10.4| 7.0.
3.1
99
x64
MyQ Print Server 10.2 RC 4| 2.4
.57| 3.1.
0| 3.1.
3| WIV3.0.1
1.337
03| 8.2.12| 3.0.11| VC++
2015-20
22 (vc17)
–
14.32.31
326.0| 2.10.4| 7.0.
0.1
92
x64
MyQ Print Server 10.2 RC 3| 2.4
.57| 3.1.
0| 3.1.
3| WIV3.0.1
1.337
03| 8.2.11| 3.0.8| VC++
2015-20
22 (vc17)
–
14.32.31
326.0| 2.10.4| 7.0.
0.1
92
x64
MyQ Print Server 10.2 RC 2| 2.4
.57| 3.1.
0| 3.1.
0| WIV3.0.8
.3353
5| 8.2.6| 3.0.8| VC++
2015-20
22 (vc17)
–
14.32.31
326.0| 2.9.8| 7.0.
0.1
92
x64
MyQ Print Server 10.2 RC 1| 2.4
.57| 3.1.
0| 3.1.
0| WIV3.0.8
.3353
5| 8.2.8| 3.0.8| VC++
2015-20
22 (vc17)
–
14.32.31
326.0| 2.9.8| 6.6.
3.1
24
x64
MyQ Print Server 10.2 BETA 2| 2.4
.57| 3.1.
0| 3.1.
0| WIV3.0.8
.3353
5| 8.2.6| 3.0.8| 2015-20
22 (vc17)
–
14.32.31
326.0| 2.9.8| 6.6.
3.1
24
x64
MyQ Print Server 10.2 BETA| 2.4
.57| 3.1.
0| 3.1.
0| WIV3.0.8
.3353
5| 8.2.5| 3.0.8| VC++
2015-20
22 (vc17)
–
14.32.31
326.0| 2.10.1| 6.6.
3.1
24_
x64

Read User Manual Online (PDF format)

Read User Manual Online (PDF format)  >>

Download This Manual (PDF format)

Download this manual  >>