HP DSS 5 User Manual

							◦HKEY_CURRENT_USER\Software\Hewlett-Packard\HP Digital Sending Software
◦HKEY_LOCAL_MACHINE\SOFTWARE\Hewlett-Packard\HP Digital Sending Software 5.00
◦HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP\Parameters
\SslBindinginfo
●Users must also have permission to host a service on port 7627. The following command can be
used to give this permission to a Windows group. The group should be given permission and
non-administrator users should be made members of this group. This command must be run by
an administrator on the system.
In the example below, “DSS_Server” is the server where DSS is installed and “DSSAdmins” is
the name of the group to give permissions. If a group was already created to give non-admins
permissions to start the Configuration Utility, then it makes sense to give port 7627 permissions
to that same group.
◦>netsh http add urlacl url=https://+:7627/ user=DSS_Server\DSSAdmins
This command can only be used to give permissions to a single group. If permission has been
given to one group and you wish to give permissions to a different group instead the following
command must be run first:
◦>netsh http delete urlacl url=https://+:7627/
Device credentials for FutureSmart devices
HP Digital Sending Software communicates with FutureSmart devices for many purposes, including
adding and removing devices, getting status from devices, configuring devices and processing jobs
from devices. When a FutureSmart device has a password set, the device's security model requires
that DSS know and use that password to enable device communication.
This section describes the various device passwords that can be set. It also describes how DSS uses
the credentials it has stored for device communication and how to configure those credentials within
DSS.
FutureSmart device accounts and credentials
HP LaserJet printers have for many years had an Embedded Web Server (EWS) interface. This can
be accessed by using a web browser and typing in the IP address of the device. Within the devices is
the concept of an Admin User that has access to all of the capabilities available via the EWS. The
Admin User also has access to all the applications on the device such as the Copy application, Send
to Network Folder application, etc.
As a factory default, the Admin User’s password is blank which means that anyone that accesses the
EWS has permissions to all the capabilities provided by the EWS. Within the EWS there is a place
where the Administrator User’s password can be set. Once the password is set then a user
connecting to the EWS must sign in with the password to have Administrator level permissions.
If the Administrator password is set, DSS must also know and use that password for any of the
communication tasks (add/remove, get status, configure, process job) it wants to accomplish with the
device.
Starting with the spring 2012 release of FutureSmart firmware, a new factory defined user will be
available in the devices. This is the Config User. For devices with this spring 2012 firmware (or
newer) DSS can communicate if it has either the Admin User or the Config User’s password. The
Config User can not be used by users connecting to the EWS with a web browser; it is only available
for use by remote applications such as DSS and HP Web Jetadmin.
ENWW Planning the DSS deployment 33 
						

							Like the Admin User, the Config User’s password ships as blank as a factory default. The password
can be set within the EWS in the same location as the Admin User’s password. These are set on the
Security Tab in the General Security section. Unlike the Admin user however, the Config user is
inactive if the password blank. This user is only activated when the password is configured within the
EWS. See the screenshot below.
The Config User has been added so that companies can change the Admin password, if their
company security policies require, without changing the Config User password. This means that DSS
can be given the Config User’s password, instead of the Admin password, and continue to operate
properly when the Admin password is changed.
Figure 3-1  DSS General Security screen
DSS configuration and use of FutureSmart device credentials
DSS stores a single set of device-specific credentials for each device, and is also capable of storing
one set of common credentials it can use for communication with FutureSmart devices. See 
Set the
DSS common credentials on page 35 for instructions of how to set these credentials. If DSS tries to
use the common credentials with a device and they work, then those common credentials will be
copied to the device-specific credentials for that device. See 
Figure 3-2 DSS common and device-
specific credentials flow on page 35 for the logic of how DSS uses the common credentials and
device-specific credentials when adding a FutureSmart device.
34 Chapter 3   Installation and configuration ENWW 
						

							Figure 3-2  DSS common and device-specific credentials flow
Set the DSS common credentials
1.Click the Device Sign In button in the Configuration Utility.
ENWW Planning the DSS deployment 35 
						

							2.In the Administrator credentials are required dialog, use “admin” or “config” for the Username
field, and then enter and verify a password in the Password and Verify Password fields.
Figure 3-3  Set the DSS common credentials
3.Click the Apply button to set the common credentials.
36 Chapter 3   Installation and configuration ENWW 
						

							Installation
This section contains the following topics:
●
Pre-installation checklist
●
Installer screens and options
Pre-installation checklist
1.Review the hardware and software requirements for the DSS server. See System and
environment requirements on page 24 for more information.
2.Verify that devices planned for connection to DSS have the minimum required firmware.
3.If you are upgrading from a previous version of DSS, make a backup of the existing
configuration.
Installer screens and options
Follow these steps to install the HP Digital Sending Software 5.0.
1.After downloading the software to your computer or network, close all programs that are open on
the computer.
2.Navigate to the location on the computer or network where you downloaded the HP Digital
Sending Software 5.0 software, and double-click the setup.exe file.
NOTE:If the downloaded software is in a compressed format, uncompress the installer files
before running the setup.exe file.
NOTE:Windows administrator rights are required for installing DSS. However, if User Account
Control (UAC) is turned on it may prevent the installation program from completing some tasks
successfully, such as installing SQL Server. If UAC is turned on, you might have to right click the
DSS installer setup.exe file and select Run as administrator from the menu to install DSS.
3.The Welcome screen appears. Click Next to continue.
Figure 3-4  Software Installation – Welcome screen (1 of 11)
ENWWInstallation 37 
						

							4.The License Agreement screen appears. Click Print to print a copy of the license agreement.
Click I do not accept the terms in the license agreement, and then click Next to cancel the
installation.
After reading the license agreement, click to select I accept the terms in the license agreement,
and then click Next to continue the installation.
Figure 3-5  Software Installation – license agreement (2 of 11)
5.The Destination Folder screen appears. Accept the default installation folder or click the Change
button to select a different folder. Select the Full Installation check box or the Configuration
Utility Only check box, depending on the type of installation you need. Click the Next button.
Figure 3-6  Software Installation – installation location (3 of 11)
38 Chapter 3   Installation and configuration ENWW 
						

							6.The Windows Firewall Configuration screen appears. Click to select the Allow DSS Installer to
open the required ports in Windows Firewall. check box, and then click Next to continue.
Figure 3-7  Software Installation – firewall configuration (4 of 11)
7.The External Database Configuration screen appears. This screen allows for a database other
than the default Microsoft SQL Server database installed by DSS to be used with DSS. When
this feature is used, the DSS installer does not install the default MS SQL Server database.
The DSS installer creates two separate, uniquely-named databases within a single SQL Server
instance; one database for customer data and one database for machine data.
Figure 3-8  Software Installation – external database configuration (5 of 11)
Use the following steps to configure an external database for use with DSS
a.Select the Use external database check box, and then click the Configure connection
settings button.
ENWWInstallation 39 
						

							Figure 3-9  Software Installation – external database configuration (6 of 11)
b.The HP DSS 5.0 External Database Configuration Tool screen appears.
Figure 3-10  Software Installation – external database configuration (7 of 11)
The following settings are required for configuring an external database:
●Create database using area: Enter values for the User name and Password fields.
These credentials are used by DSS to configure databases for DSS use. DSS will not
do the initial creation of these databases, but DSS will configure the databases with
the structure they need such as tables, keys, etc. These credentials are used only for
40 Chapter 3   Installation and configuration ENWW 
						

							initial database configuration. Enter the credentials for a SQL-authorized user account,
not a Windows-authorized user account.
The “Create database using” user must have, as a minimum, the following roles in
SQL Server:
◦Server role: public
◦Database roles for the two DSS databases: db_owner
●The Access database using area: Enter values for the User name and Password
fields. DSS uses these credentials for all database operations, except the database
initialization process
The “Access database using” user must have, as a minimum, the following roles in
SQL Server:
◦Server role: public
◦Database roles for the two DSS databases: db_datareader, db_datawriter
●The Connect using area:
◦Database type: Select one of the three SQL Server versions:
●SQL Server 2005
●SQL Server 2008
●SQL Server 2012
◦Autoclose: When set to On, the SQL Server instance and its databases are
closed and their resources are freed when the last associated DSS instance is
closed. The SQL server instance and its databases are opened automatically
when a DSS user requires them. When set to Off, the SQL Server instance and
its databases remain open even when the last associated DSS instance is
closed.
◦Command timeout: The amount of time DSS waits for a connection to the SQL
Server before terminating the connection attempt.
◦Server name: The name of the server where the DSS SQL server is installed.
◦DB instance name: The name of the SQL Server instance.
◦Machine database name: The name to use for the machine data database. This
database must exist within the SQL Server instance before DSS can be
configured to use it. DSS will fill out the structure of the database but will not do
the initial creation.
◦Customer database name: The name to use for the customer data database. This
database must exist within the SQL Server instance before DSS can be
configured to use it. DSS will fill out the structure of the da
tabase but will not do
the initial creation.
●The Optional parameters area: Use the For machine database and For customer
database fields to enter additional connection strings parameters appended to the
connection string when connecting to these databases. The syntax of these additional
connection string parameters must adhere to the SQL Server connection string format.
ENWWInstallation 41 
						

							The Configuration preview field displays the connection strings for the machine and
customer databases as the connections strings are being entered. When the HP DSS
5.0 External Database Configuration Tool is opened after the initial configuration, the
Configuration preview field displays the saved connection string settings.
●Click the Test Connection button to test the following configuration settings:
◦The SQL Server instance exists
◦The “create database” credentials are valid
◦The “access database” credentials are valid
●Click the OK button to test, and then save the following configuration settings:
◦The SQL Server instance exists
◦The “create database” credentials are valid
◦The “access database” credentials are valid
●Click the Cancel button to close the HP DSS 5.0 External Database Configuration Tool
without saving any changes.
8.The Ready to Install the Program screen appears. Click Back to go back to change installation
options. Click Install to start the installation.
Figure 3-11  Software Installation – ready to install screen (8 of 11)
42 Chapter 3   Installation and configuration ENWW