Secured run of the terminal

To run the terminal in the secured mode, you need to upload and install your SSL certificate to the printing device, and then install the embedded terminal via an SSL installation package. To install certificates in the PFX format, you can use the InstallCertificate.ps1 PowerShell script, certificates in other formats need to be
installed manually.

The following two sections describe the two ways of setting up the secured communication: installation via the PowerShell script and manual installation.

• The SSL installation package and the non-SSL installation package are mutually exclusive. Only one of them can be installed on the printing device. If you want to start using the terminal in the non-SSL mode, you need to replace the SSL package by the non-SSL package.

• Each time the package is reinstalled on a different port, you need to perform one of the two procedures (PowerShell script or manual) for the new port.

Setting up the secured communication via the PowerShell script

Before proceeding with the setup, download the SSL installation package and the InstallCertificate.ps1 file.

To setup the secured communication via a PowerShell script, follow these steps:

1. On the MyQ server, run the following script:
   .\InstallCertificate.ps1 -certPath path -certPass pass -port portnumber
   Where path is the path to your certificate, pass is the certificate's password, and portnumber is the number of the port that is going to be used for the embedded terminal. By default, it is the first unused port after 8080; if no other web terminal packages are uploaded on the server, it is 8081.

2. On the Network settings tab of the MyQ web administrator interface, under Communication Security, set Enable only secure connection to ON.

3. On the printing device's web UI, in External Accounting Application Settings, change the Address for Application UI and the Address for Web Service to "https://...".

   

4. On the Printers settings tab of the MyQ web administrator interface, under Embedded terminal installation packages, upload the SSL package to MyQ. In the MyQ Log, you can see if the package is successfully uploaded: the "Terminal package installation phase 2/2 succeeded" message has to be displayed in the log. If it is not, you need to delete the SSL package and re-run the script from step 1.

5. Install the embedded terminal via remote setup (see Installation).

6. Restart the printing device.

Manual secured communication setup

Only certificates with a private key can be used for the setup. Before proceeding, download the SSL installation package.

1. On the MyQ server, click the SSL certificate to open the installation wizard. Follow the steps on the wizard to install the certificate to LocalMachine Personal store.

2. On the MyQ server, run the following command:
   netsh http add sslcert ipport=0.0.0.0:portnumber certhash=CertThumbprint
   appid={345E53F5-34CA-4D64-8D9B-14D0B3B0CCF7}
   Where portnumber is the number of the port that is going to be used for the embedded terminal (by default it is the first unused port after 8080; if no other web terminal packages are uploaded on the server, it is 8081) and CertThumbprint is the Thumbprint of the certificate.

   

3. On the Network settings tab of the MyQ web administrator interface, under Communication Security, set Enable only secure connection to ON.

4. On the printing device's web UI, in External Accounting Application Settings, change the Address for Application UI and the Address for Web Service to "https://...".

   

5. On the Printers settings tab of the MyQ web administrator interface, under Embedded terminal installation packages, upload the SSL package to MyQ. In the MyQ Log, you can see if the package is successfully uploaded: the "Terminal package installation phase 2/2 succeeded" message has to be displayed in the log. If it is not, you need to delete the SSL package and re-run the script from step 1.

6. Install the embedded terminal via remote setup (see Installation).

7. Restart the printing device.