6.4 SCAN TO EMAIL Screen Notification Messages........................................... 171
6.4.1 SCAN TO EMAIL Warning Message........................................................... 171
6.4.2 SCAN TO EMAIL Input Request Messages................................................171
6.4.3 SCAN TO EMAIL Notification Messages.....................................................172
6.4.4 SCAN TO EMAIL Error Messages..............................................................172
6.5 SCAN TO FAX Screen Notification Messages............................................... 173
6.5.1 SCAN TO FAX Warning Message ..............................................................173
4 Authorized Send Installation and Configuration Guide for imageRUNNER Machines
6.5.2 SCAN TO FAX Input Request Messages .................................................... 173
6.5.3 SCAN TO FAX Notification Messages ........................................................174
6.5.4 SCAN TO FAX Error Messages..................................................................174
6.6 SCAN TO FOLDER Screen Notification Messages.......................................175
6.6.1 SCAN TO FOLDER Warning Message.......................................................175
6.6.2 SCAN TO FOLDER Input Request Messages............................................175
6.6.3 SCAN TO FOLDER Notification Messages.................................................176
6.6.4 SCAN TO FOLDER Error Messages ..........................................................176
Authorized Send Installation and Configuration Guide for imageRUNNER Machines 5
This page is intentionally left blank.
6 Authorized Send Installation and Configuration Guide for imageRUNNER Machines
Preface
Thank you for purchasing the Authorized Send software application. Please read this manual
thoroughly before operating the product on your MEAP-enabled machine to familiarize
yourself with its capabilities, and to make the most of its many functions. After reading this
manual, store it in a safe place for future reference.
How to Use This Manual
This manual assumes that the reader has a good understanding of MEAP (Multifunctional
Embedded Application Platform). This manual does not provide instructions for using or
operating the Authorized Send application. For instructions on using the Authorized Send
application, see the Authorized Send User’s Guide for imageRUNNER Machines.
Symbols Used in This Manual
The following symbols are used in this manual to explain procedures, restrictions, and
instructions that should be observed for safety.
IMPORTANT Indicates operational requirements and restrictions. Be sure to read these
items carefully to operate the machine correctly, and avoid damaging the
machine.
NOTE Indicates a clarification of an operation, or contains additional explanations
for a procedure. Reading these notes is highly recommended.
Authorized Send Installation and Configuration Guide for imageRUNNER Machines 7
Keys and Buttons Used in This Manual
Keys for using the machine’s main functions are located on the top of the touch panel
display. To use any of the desired function’s features, you must first press the key or
application tab for the desired function. Press [] (arrow key) to access installed MEAP
applications.
On the MEAP Application screen, there may be several application tabs that you can select.
Select only the proper tab for the application that you want to use.
The default application tab for Authorized Send is:
NOTE
The default tab name can be customized, and therefore the Authorized Send tab could have
a different name.
8 Authorized Send Installation and Configuration Guide for imageRUNNER Machines
The following key and button names are a few examples of how keys and buttons to be
pressed and clicked are represented in this manual:
Control Panel Keys: Key Icon (Key Name)
Examples: ~ (Start)
(Stop)
Buttons on Computer Operations Screens: [Key Name]
Examples: [Install]
[OK]
Displays Used in This Manual
Most screen shots used in this manual are those taken when Authorized Send is being
installed using MEAP SMS (Service Management Service), or when Authorized Send is
running on the Color imageRUNNER C5185, unless otherwise specified.
The keys/buttons you should select or click are marked with a circle, as shown below. When
multiple keys/buttons can be selected on the screen, all keys/buttons are circled.
Example:
1. Select the [Authorized Send] radio button ➞ click [Start].
Select
these
buttons
for
Authorized Send Installation and Configuration Guide for imageRUNNER Machines 9
operation
Abbreviations and Terms Used in This Manual
The following abbreviations are used in this manual.
Abbreviation Definition
AD
ADF
DFS
DN
FQDN
HID
HTTP
HTTPS
IP
KDC
LAN
LDAP
LMS
MEAP
MEAP device
NTLM
Printable ASCII
SMS
SMTP
SSL
STRING
UDP
UI
URL
Active Directory
Automatic Document Feeder
Distributed File System
Distinguished Name
Fully Qualified Domain Name
Human Interface Device
Hypertext Transfer Protocol
Hypertext Transfer Protocol Secure
Internet Protocol
Key Distribution Center
Local Area Network
Lightweight Directory Access Protocol
License Management System
Multifunctional Embedded Application Platform
Supported Canon imagePRESS, imageRUNNER, or
Color imageRUNNER multifunctional machine featuring
embedded MEAP technology.
NT LAN Manager
These characters are from ‘ ’ (space) up to and including
‘~’ (tilde) on the ASCII table (the decimal values for the
characters, x , are: 32 (space) ≤ x ≤ 126 (tilde)).
Service Management Service
Simple Mail Transfer Protocol
Secure Sockets Layer
A set of consecutive characters that the user is able to
input into a text box. If input into a text box is required, a
string consisting of all spaces is not valid.
User Datagram Protocol
User Interface
Uniform Resource Locator
Hyperlinks
When this manual is in its native PDF form, the blue underlined text represents a hyperlink to
the corresponding sections of this manual or to external Web sites.
For example: See
Likewise, all entries in the Table of Contents are hyperlinks.
10 Authorized Send Installation and Configuration Guide for imageRUNNER Machines
Chapter 1, “Overview,” on p. 13.
Legal Notices
Trademarks
Canon, the Canon logo, imageRUNNER, Color imageRUNNER, imagePRESS, and MEAP
are registered trademarks, and the MEAP logo is a trademark, of Canon Inc. in the United
States and may also be trademarks or registered trademarks in other countries.
Windows and .NET Framework are registered trademarks of Microsoft Corporation in the
United States and are trademarks or registered trademarks of Microsoft Corporation in other
countries.
Java and all Java-based trademarks and logos are the trademarks or registered trademarks of
Sun Microsystems, Inc. in the United States or other countries.
Other product and company names herein are, or may be, the trademarks of their respective
owners.
Copyright
Copyright 2009 by Canon U.S.A., Inc. All rights reserved.
No part of this publication may be reproduced or transmitted in any form or by any means,
electronic or mechanical, including photocopying and recording, or by any information
storage or retrieval system without the prior written permission of Canon U.S.A., Inc.
Disclaimers
The information in this document is subject to change without notice.
CANON U.S.A., INC. MAKES NO WARRANTY OF ANY KIND WITH REGARD TO
THIS MATERIAL, EITHER EXPRESS OR IMPLIED, EXCEPT AS PROVIDED HEREIN,
INCLUDING WITHOUT LIMITATION, THEREOF, WARRANTIES AS TO
MARKETABILITY, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE
OR USE OR NON-INFRINGEMENT. CANON U.S.A., INC. SHALL NOT BE LIABLE
FOR ANY DIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY
NATURE, OR LOSSES OR EXPENSES RESULTING FROM THE USE OF THIS
MATERIAL.
Authorized Send Installation and Configuration Guide for imageRUNNER Machines 11
This page is intentionally left blank.
12 Authorized Send Installation and Configuration Guide for imageRUNNER Machines
Chapter 1 Overview
Authorized Send is a customized MEAP application. It should be installed and operated on a
Canon MEAP-enabled device, and provides authenticated scan to e-mail, scan to fax, and
scan to folder functionalities. Authorized Send does not require the user to be authenticated
to use the native functions of the machine, such as Copy, Print, and Scan, and does not
interfere with any of these functions.
MEAP (Multifunctional Embedded Application Platform) is a software platform embedded
in Canon imageRUNNER and imagePRESS machines that enables the development of
custom applications, which run alongside native functions, such as Copy, Print, and Scan.
MEAP, developed by Canon, is based on Sun Microsystems’ Java and Java 2 Micro Edition
technology.
“MEAP device” is a MEAP-enabled Canon imageRUNNER or imagePRESS that is running
the Authorized Send application. It may also be referred to as “MEAP imageRUNNER” or
“machine.”
imageRUNNER machines are the Canon imageRUNNERs, Color imageRUNNERs, and
imagePRESS multifunctional machines.
Authorized Send is designed to perform the following functions once configured from the
Authorized Send Configuration servlet:
• Authenticate against an LDAP server.
• Ability to disable LDAP authentication.
• Authenticate to an address book server anonymously.
• Retrieve a user’s e-mail address and home directory.
• Search the LDAP address book server for e-mail addresses.
• Browse a network for valid share folders.
• Provide the ability to configure preset shares.
• Scan and send a document to a valid e-mail address, networked folder, or fax server.
• Enables a System Administrator to control the features that are available to a user.
• Enables a System Administrator to set default values for the Scan to E-Mail function.
• If activated, enables the use of the Searchable PDF, Encrypted PDF, and Compact PDF
modes.
• Logs error and debugging information that is generated by the application to your local
hard drive and to optional remote syslog servers.
• Scan in the PDF, TIFF, TIFF(Single), and JPEG file formats.
• Create folders that do not exist dynamically (in particular, using the user’s User Name).
Authorized Send Installation and Configuration Guide for imageRUNNER Machines 13
• Authenticate to a separate domain when scanning to a folder.
• Provide the ability to use NTLM Authentication for Scan to Folder, regardless of the
authentication method used.
• Provide the ability to dynamically locate the closet available domain controller within the
domain, and cache that domain controller until it becomes no longer available.
• Provide the ability to populate the User Name text box from a login application.
• Authenticate to a separate SMTP server.
• Job Build feature
• Ability to upgrade from previous versions of Authorized Send.
• MEAP Configuration Tool 1.0 compatibility.
• Ability to change the application display name.
• Ability to configure the application’s images and colors.
• Ability to alter address book search results.
• Provide USB keyboard support.
• Enables a System Administrator to configure default scan settings for each file type.
IMPORTANT
• Basic knowledge of networking and imageRUNNER/imagePRESS machines is necessary
to install and configure the Authorized Send application.
•For instructions on using Authorized Send, see the Authorized Send User’s Guide for
imageRUNNER Machines.
•The device must support MEAP Spec Version 13 to use the PDF Encryption feature.
14 Authorized Send Installation and Configuration Guide for imageRUNNER Machines
1.1 System Requirements
Authorized Send requires the proper installation and configuration of all items
documented in this guide. Failure to correctly install or configure the application will
affect its operation.
If Authorized Send is not working properly, the problem can likely be traced to an
installation or configuration issue. Please consult the appropriate chapters (including
Chapter 5, “Troubleshooting,” on p. 149) before contacting Canon U.S.A.’s e-Support.
1.1.1 Hardware Requirements
Authorized Send is designed to operate on the following Canon MEAP-enabled
devices using the minimum specified MEAP Contents version.
- Windows 2000 SP4/2003 SP2/2008SP1 (or later) DNS server
• Supported Scan to E-Mail servers:
- Microsoft Exchange Server 2000/2003/2007 SP1
• Supported Scan to Network Share servers (with the exclusion of Cluster Server
environment):
- Windows Vista SP1/XP SP2/2000 SP4/2003 SP2 (or later)/2008 SP1 Local Share
- Windows Vista SP1/XP SP2/2000 SP4/2003 SP2 (or later)/2008 SP1 Domain
Share
- Windows DFS (Distributed File System) Share
- Windows Vista SP1/XP SP2/2000 SP4/2003 SP2/2008 SP1
• The following fax servers have been tested:
- Relay Fax 6.7 by ALT-N Technologies
(In order for the Scan to Fax function to work successfully with Relay Fax, each
fax number used must have a corresponding e-mail address.)
16 Authorized Send Installation and Configuration Guide for imageRUNNER Machines
1.1.3 Software Requirements
Microsoft Internet Explorer 6.0 or later, with JavaScript enabled, must be installed
and configured prior to installing the Authorized Send application.
KDC is necessary for running Kerberos authentication.
1.1.4 Home Directory Requirements
If the System Administrator wants to configure the Retrieve Home Directory (Active
Directory only) feature, the following three types of configurations are supported.
■ Local Share
This configuration illustrates when the home directory exists on the authentication
server as a local share. No text manipulation is required, and the value entered is
used exactly as is.
Home Directory as a Local Share
Authorized Send Installation and Configuration Guide for imageRUNNER Machines 17
■Local Path
This configuration illustrates when the home directory exists on the authentication
server as a local folder.
Home Directory as a Local Path
When the home directory exists on the authentication server as a local folder, it is
impossible for Authorized Send to use the text as it is. Therefore, some text
manipulation is required. In this case, Authorized Send removes the leading drive
letter (in this case, “C:”), and then the rest of the text is treated as a local share. In
this example, “home_directories” must be a valid share name.
■ Mapped Share
This configuration illustrates when the home directory exists as a mapped share.
In this example, “fileserver” is used as the host name of the file server, and
“\home\dev\user1” is used as the share’s file path.
Home Directory as a Mapped Share
18 Authorized Send Installation and Configuration Guide for imageRUNNER Machines
1.1.5 Distributed File System Requirements
Authorized Send supports the following two DFS (Distributed File System) roots.
■ Stand-alone DFS root
■ Domain-based DFS root
Successful domain-based DFS root support for Authorized Send requires that
certain configuration settings be implemented and understood.
1. End users can only access the domain-based DFS roots that belong to the
domain against which they were authenticated.
2. The authentication server created with Authorized Send’s Configuration
servlet must have the Domain Name configured to match the FQDN.
IMPORTANT
If the authentication server is configured with a NetBIOS domain name,
access is granted to the application; however, you will not be able to access
any domain-based DFS roots.
3. Browsing for domain-based DFS roots are not supported. A preset share or
home directory must be configured, or be manually entered in the share
location.
IMPORTANT
If you configure a preset share for a domain-based DFS root, the file server
must be configured with the FQDN of the Domain (i.e., If the domain name
is “MyCompany.com,” then the file server must be configured with the
FQDN “MyCompany.com.” The FQDN is not case-sensitive.). This results
in the domain-based DFS root’s preset share on the file server matching the
authentication server’s domain name.
4. The first successful DFS target is used; otherwise, the end user will not be
able to scan to the DFS root.
Authorized Send Installation and Configuration Guide for imageRUNNER Machines 19
1.1.6 Communication Interfaces
The table below shows the different communication interfaces, their specific port
numbers, and descriptions used with Authorized Send.
Communication Interface Port Description
NTLM
Kerberos UDP/TCP Port 88 Used for authentication.
LDAP TCP Port 389
SMB
SMTP TCP Port 25
HTTP TCP Port 8000
HTTPS TCP Port 8443
SSL TCP Port 636
Syslog UDP Port 514
Determined by AD
server
TCP Port 139 and
TCP Port 445
Used for authentication.
Used to retrieve e-mail
addresses.
Used for the Scan to Folder
function.
Used for the Scan to E-Mail
function.
Used to access the
administration Web page.
Used to access the secure
administration Web page.
Used to communicate with the
LDAP server.
Used to communicate with the
syslog server.
20 Authorized Send Installation and Configuration Guide for imageRUNNER Machines
1.1.7 Supported Authentication Protocols
Kerberos and NTLM are the supported protocols when communicating with a
Microsoft Active Directory server.
Simple Binding is the supported protocol when communicating with Novell
eDirectory and Lotus Domino.
Anonymous Binding is the protocol reserved for communication with any of the
supported address book servers (when applicable).
IMPORTANT
If Simple is selected as the authentication method and Novell eDirectory is the
targeted authentication server, set the following settings on the eDirectory server:
- Disable “Require TLS for Simple Binds with Password” for the LDAP Group.
- Disable “Require TLS for all operations” for the LDAP Server in the Connections
section.
- In the Restrictions section, select [Use Low Cipher (56 or 64-bit)].
1.1.8 MEAP Application Coexistence Support
Authorized Send can coexist with other installed MEAP applications that have
received verification by Canon U.S.A., Inc., provided that there are sufficient
resources available on the MEAP device.
The following table shows the maximum values for MEAP resources that Authorized
Send could use in a MEAP device.
MEAP Device Resource Requirements Maximum
File space usage 25,000 KB
Memory usage 5,000 KB
File descriptor usage 20
Socket usage 16
Thread usage 50
Authorized Send has been confirmed to coexist with the following applications:
• Scan to Database 1.1
• Pharos 2.3.10 with Uniprint 8.0 (Not supported when the [Enable USB Keyboard
input] check box on the Options screen is selected.)
Authorized Send Installation and Configuration Guide for imageRUNNER Machines 21
1.2 Communication Environment
Authorized Send must be installed on a MEAP-enabled device. There must be network
connectivity between the MEAP device, DNS, authentication servers, address book
servers, SMTP server, and shared file servers.
It is necessary to configure Authorized Send to communicate with the authentication
servers and address book servers.
The following table lists the supported authentication servers and authentication
methods.
Windows Active Directory NTLM, Kerberos (with or without SSL)
Novell NetWare 6.5/eDirectory 8.7 SP1 Simple LDAP (with or without SSL)
Lotus Domino v7 Simple LDAP (with or without SSL)
The following table lists the supported address book servers and binding methods.
Supported Address Book Servers Binding Methods
Windows Active Directory NTLM, Kerberos (with or without SSL)
Novell NetWare 6.5/eDirectory 8.7 SP1 Simple LDAP (with or without SSL)
Lotus Domino v7 Simple LDAP (with or without SSL)
22 Authorized Send Installation and Configuration Guide for imageRUNNER Machines
The following illustrations represent a flow of operations for the Scan to E-Mail,
Scan to Fax, and Scan to Folder functions of the Authorized Send application.
Scan to E-Mail
1. The user makes an address book query from the Scan to E-Mail function on the
MEAP machine. The machine sends an LDAP query to the address book server to
retrieve the desired list of e-mail addresses.
2. Once all e-mail addresses are verified and selected, the machine sends the e-mail
message to the E-mail or SMTP server.
Scan to Fax
1. The user manually inputs the recipient’s fax number.
2. The machine sends the scanned document to the SMTP server.
3. The SMTP server sends the scanned document to the fax server.
4. The fax server sends the scanned document to the destination.
Authorized Send Installation and Configuration Guide for imageRUNNER Machines 23
Scan to Folder
1. The user browses for the desired folder on the file server directly from the machine.
2. Once the directory is found and selected, the machine sends the file to the
designated location on the file server.
NOTE
When a user accesses a network share, they are authenticated against that share using
their credentials. If they do not have access rights to that share, they will be prompted
to enter a user name and password.
Scan to Folder with NTLM Authentication
1. The user logs on to the machine using one of the authentication methods.
2. The user browses and enters their credentials to gain access to a network shared
folder using NTLM as the authentication method.
3. Once access is granted, the scanned document is stored in the selected folder.
24 Authorized Send Installation and Configuration Guide for imageRUNNER Machines
Scan to a Dynamically Created Folder
1. The authenticated user selects a folder, enters a document name, and scans the
document.
2. The scanned document is automatically stored in a sub-folder (that was dynamically
created) of the selected folder.
Dynamic Domain Controller Location
1. The user tries to log on to the machine using one of the authentication methods.
2. The system is unable to contact the authentication server previously cached.
3. The system locates the next closest available domain controller.
4. Authentication or address book lookup is performed by the new domain controller.
5. The new domain controller is cached.
Authorized Send Installation and Configuration Guide for imageRUNNER Machines 25
1.2.1 Communication Diagrams
This section shows the flow of communication protocols based on the authentication
method that you select. You can configure up to 10 authentication servers.
1.2.1.1 Authentication Communication Diagrams
Kerberos Authentication
Communication Protocol LDAP/Kerberos
NTLM Authentication
Communication Protocol LDAP/NTLM
Simple Authentication
Communication Protocol LDAP/Simple
26 Authorized Send Installation and Configuration Guide for imageRUNNER Machines
1.2.1.2 Address Book Communication Diagrams
Kerberos Communication with an Address Book Server
NTLM Communication with an Address Book Server
Simple Communication with an Address Book Server
Anonymous Bind Communication Using LDAP with an Address Book Server
Authorized Send Installation and Configuration Guide for imageRUNNER Machines 27
This page is intentionally left blank.
28 Authorized Send Installation and Configuration Guide for imageRUNNER Machines
Chapter 2 Installing Authorized Send
This chapter describes how to install Authorized Send on a MEAP-enabled machine using
the MEAP SMS program.
The System Administrator for the target MEAP device is best suited for installing the
Authorized Send application, using a networked computer that is connected to the Internet
and the device.
Before installation, you must obtain the license file from
the IP address of the MEAP-enabled device.
IMPORTANT
• This chapter describes the procedure for a new installation of Authorized Send Version 4.1.
• If you want to upgrade from a previous version of Authorized Send, you must uninstall the
previous version from the MEAP device before installing this version. If you are upgrading
from version 3.0, 3.51, 3.52, or 4.0 you do not have to uninstall the previous version if you
are using the same license file (although you still must [Stop] the program).
• Do not use the browser’s [Back] and [Forward] buttons during the installation process.
Only use the clickable links in the browser’s window.
•For more information on using SMS and uninstalling MEAP applications, see the MEAP
SMS Administrator Guide that came with your MEAP device.
1. Open a browser window ➞ enter the following URL:
http://<device IP>:8000/sms
https://<device IP>:8443/sms (if you are using SSL for communications)
(Replace <device IP> with the IP address of the MEAP device.)
www.canon.com/Meap, and have
Authorized Send Installation and Configuration Guide for imageRUNNER Machines 29
2. Enter MeapSmsLogin in [Password] ➞ click [Log In].
The SMS Application List screen is displayed.
3. Click the [Install] tab.
The SMS Install Application/License screen is displayed.
30 Authorized Send Installation and Configuration Guide for imageRUNNER Machines
Loading...
+ 146 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.