Network Settings
On the Network settings tab, you can manage the network communication between the MyQ server and other parts of the MyQ solution. It is divided into the following sections: General, Communication Security, Outgoing SMTP Server, MyQ SMTP Server, FTP Server, MyQ X Mobile Client, HTTP Proxy Server, Firewall, and PM Server.
![Network settings tab](../../../__attachments/1263174074/image-20240322-135730.png?inst-v=f576f6b0-eb9f-4035-8724-3dad44b7106e)
General
In this section, you can view the current Minimum TLS version (1.2) that affects MyQ communications (HTTP proxy, SMTP, IPPS, LPR). See how you can modify the security settings in the config.ini file if you want to change this setting.
In the This server hostname field, you should enter the hostname of the MyQ Print server. This hostname is used by external components of the MyQ system, such as embedded terminals or MyQ Desktop Client, for communication with the MyQ server.
![General network settings](../../../__attachments/1263174074/NetworkGeneral.png?inst-v=f576f6b0-eb9f-4035-8724-3dad44b7106e)
During remote setup, the server hostname should be a valid hostname or IP address. A licenses update might change the hostname to myq.local. Then the remote setup will fail and result in an error message.
Certificates
In this section, you can choose how your security certificates are managed.
MyQ offers three different certificate management modes:
Built-in Certificate Authority - This is the default mode for new installations. MyQ creates a self-signed CA certificate and uses it to sign server and client certificates. The public key of the CA certificate can be exported (click the Export CA certificate button) to install it to clients, so they trust MyQ server. It is possible to specify the Subject Alternative Name (SAN), which is set as a comma separated list of domain names and/or IP addresses. In case the certificate is compromised, click the Generate new CA certificate button, to generate a new one.
Company Certificate Authority - Your company CA generates an intermediate CA certificate which MyQ uses to sign certificates for the server and clients. To generate an intermediate CA certificate click Create CSR to create a Certificate Signing Request (CSR), sign it by your CA and click Finish CSR to finish CSR by importing signed certificate. If the intermediate CA certificate does not contain a CA root certificate in its chain, the administrator is prompted to upload the public key of the CA root certificate as well (the Import CA root certificate button appears).
Manual Certificate Management - Provide a certificate for the MyQ Server. MyQ creates no certificates; all certificates are managed by you. Click Import Server certificate to upload it. The certificate can be uploaded in PEM (public + private key separately) or in PFX format. The PFX format may be password encrypted. This mode is recommended only for expert users.
![image-20240322-135842.png](../../../__attachments/1263174074/image-20240322-135842.png?inst-v=f576f6b0-eb9f-4035-8724-3dad44b7106e)
When upgrading an existing MyQ installation, the Certificate Authority mode is selected according to the existing server certificate:
if the certificate is not CA, then the mode is set to Manual Certificate Management.
if it was generated by MyQ before, then the mode is set to Built-in Certificate Authority.
in other cases, the mode is set to Company Certificate Authority.
Outgoing SMTP Server
To send email reports, send error messages to users, send automatically generated PIN to users, and forward scanned documents, you have to configure the email server where all emails are forwarded.
To configure the server, do the following:
Select a Type from Classic SMTP Server, Microsoft Exchange Online or Gmail.
For Classic SMTP Server:
Enter the server hostname or IP address in the Server text box. If the email server listens to a port other than the 25 TCP port, change the Port setting to the correct value.
Choose one of the available Security options.
Prefer StartTLS - allows even unencrypted communication (default)
Implicit TLS - allows only full encryption
Require StartTLS - allows for the handshake to be unencrypted then switches to encrypted
Optionally choose to Validate certificate or not.
If credentials are required, enter the User and Password.
Enter the address that you want to be displayed as the Sender email for PIN, alert and report messages.
After you enter the data, you can click Test to test the connection to the email server and click Save to save your changes.
For Microsoft Exchange Online:
If you have already set up a Microsoft Exchange Online server in the Connections settings, the server is available in the Connections field drop-down. If not, you can click on the Connections field and then click Add new to add your Microsoft Exchange Online server connection. For more information, check Microsoft Exchange Online Setup.
If credentials are required, enter the User.
Enter the address that you want to be displayed as the Sender email for PIN, alert and report messages.
After you enter the data, you can click Test to test the connection to the email server and click Save to save your changes.
For Gmail:
If you have already set up a Gmail server in the Connections settings, the server is available in the Connections field drop-down. If not, you can click on the Connections field and then click Add new to add your Gmail server connection. For more information, check Gmail with OAuth2 Setup.
If credentials are required, enter the User.
Enter the address that you want to be displayed as the Sender email for PIN, alert and report messages.
After you enter the data, you can click Test to test the connection to the email server and click Save to save your changes.
MyQ SMTP Server
![MyQ STMP Server settings](../../../__attachments/1263174074/image-20240322-140133.png?inst-v=f576f6b0-eb9f-4035-8724-3dad44b7106e)
In this section you can view and modify the SMTP server settings.
SMTP (STARTTLS) - Enable when using unsecure communication or secure communication over STARTTLS. Port 25 by default.
SMTPS(SSL/TLS) - Enable when using secure communication over SSL/TLS. Port 587 by default.
If scanning to MyQ is enabled, set the port shown here in the device's SMTP settings.
MyQ FTP Server
![MyQ FTP Server settings](../../../__attachments/1263174074/image-20240322-140215.png?inst-v=f576f6b0-eb9f-4035-8724-3dad44b7106e)
In this section, you can set the FTP server port that terminals use when sending scan jobs to MyQ over the FTP protocol. The FTP port is 21 by default, and the range is 0 to 65535. If you click the Generate new password button, there is a confirmation pop-up informing that if a new password is generated, all the terminals need to be reconfigured.
MyQ X Mobile Client
In this section, you can set the server hostname or IP address and the communication port for using the MyQ X Mobile Client application and MyQ Print Agent. They may differ from the general settings because mobile devices connect via Wi-Fi.
Choose Use the same settings as on the LAN (hostname:port) to use the same settings as the MyQ server (default) or choose Use custom settings and add the Server and Secure port (SSL) you want to use.
![MyQ X Mobile Client network settings](../../../__attachments/1263174074/NetworkMobileClient.png?inst-v=f576f6b0-eb9f-4035-8724-3dad44b7106e)
HTTP Proxy Server
![HTTP Proxy Server settings](../../../__attachments/1263174074/image-20240322-140335.png?inst-v=f576f6b0-eb9f-4035-8724-3dad44b7106e)
In this section, you can choose whether to enable and set up a MyQ Proxy server which can be used for activating a license. Mandatory fields are Server (name) and Port. After changing ports, restart all MyQ services.
Firewall Management
In this section, you can Allow editing firewall rules of the Microsoft Windows Firewall and you can also Reset firewall rules.