Setup Internet Printing Protocol (IPP) With SSL/TLS (IPPS) to Print From a Client With Microsoft OS

There are 3 parts to this procedure:

1. Setup IPP on the Printer.

2. Create a Self-Signed Certificate on the Printer.

3. Install the Self-Signed Certificate on a client that is using the Microsoft OS.

Setup IPP on the Printer

Internet Printing Protocol (IPP) is a standard network protocol that allows you to print and manage jobs remotely. When IPP is configured, IPP authentication allows users to authenticate their identities using IPP through HTTP authentication methods. An IPP client can pass user credentials to the printer to use for authentication.

To configure IPP on the printer:

1. In the Embedded Web Server, log in as administrator. For more information, refer to Log in to the Printer's Control Panel or Embedded Web Server as a System Administrator

2. Click Connectivity.

3. For Protocols, click IPP.

4. For Port, click the toggle button.

5. For PJL, click the toggle button.

6. For print mode, click Print Mode, then select an option.

7. For Alternate Port (IPP), click the toggle button.

8. If you enabled Alternate Port (IPP), for Alternate Port Number (IPP), type a port number in the field.

9. For Alternate Port (IPPS), click the toggle button.

10. If you enabled Alternate Port (IPPS), for Alternate Port Number (IPPS), type a port number in the field. The default port is 631.

11. For TBCP Filter, click the toggle button.

12. For Password Required, click the toggle button.

13. For Connection Timeout, click the toggle button.

14. If you enabled Connection Timeout, for Timeout, type the number of seconds in the field.

15. Click OK.

16. For the new settings to take effect, restart your printer.

For IPPS to be successful your client workstation must have a certificate installed that trusts the certificate on the printer. Create a self-signed certificate on the printer, see For more information, refer to Create or Delete a Certificate.

Install the Self-Signed Certificate on a client that is using the Microsoft OS:

If your print server is using self-signed certificates, the following steps can be used to install the self-signed certificate on the client(s) to be able to use the printer. 

IMPORTANT: This should only be performed for SSL certificates from servers you trust.

1. Logon to the client as an administrator.

2. Find Internet Explorer in the start menu, right-click on it, and click Run as administrator.

3. In Internet Explorer, browse to the Print Server using HTTPS (for example, https://PrintServerName/).

4. In the address bar, the words "Certificate Error" should appear on the right side next to a Red shield icon.

5. Click on the error.

6. Click View Certificates.

7. Click Install Certificate...

8. Select Place all certificates in the following store.

9. Click Browse...

10. Select Trusted Root Certification Authorities and click OK.

11. Click Next, then click Finish.

12. A security warning will appear that you are adding a certificate from a source that cannot be validated. Click Yes to trust this SSL certificate.

13. Close Internet Explorer. The printer can now be installed.