This guide is to install, configure and setup the HP Workpath Application which has 5 parts:

  • Prerequisites
  • Installation of SAFEQ Cloud Pull Print from Command Center
  • SAFEQ Cloud Server Setting using Web UI
  • SAFEQ Cloud Authentication application remote configuration
  • HP Workpath embedded application setup


  • Ensure all necessary ports on SAFEQ Cloud server are open. Please refer to section 11 from Ports and Protocols.
  • If using PC client in local storage mode, please ensure that all necessary ports on printer are open. Please refer to section 7 from Ports and Protocols.
  • On the MFP, under Network Identification, please make sure that you configured the Host Name, Domain Name and DNS.
  • If you have an account on SAFEQ Cloud Cloud, please ensure that the communication between the printer and the SAFEQ Cloud server is working.
  • On the MFP, under Security -> General Security, HP JetAdvantage Link Platform setting must be enabled
  • If the mobile service does not need the SAFEQ Cloud CA, please skip this. Otherwise, you need to have a valid certificate under “Private certificate chains”.
  • Please make sure that SAFEQ Cloud CA is added under the Certificates list on MFP.
  • Set up Mobile Print under the customer. Select from drop down the mobile service and make sure that “Enable MDM Single Sign On” is unchecked.
  • Set up the remote configuration from HP Command Center for SAFEQ Cloud Authentication application.
  • SAFEQ Cloud API Access Key is required, the Default key for client and gateway is preconfigured.

Installation of SAFEQ Cloud Pull Print from Command Center

The access can be exclusively provided by HP after their Verification and Validation process.
HP embedded contains two applications which can be downloaded and installed from HP Command Center:

  • SAFEQ Cloud Authentication
  • SAFEQ Cloud Pull Print

On the MFP please check the following:

  • under Security -> Access Control SAFEQ Cloud Pull Print application should be locked, using EopAuthAgent
  • under HP Web Services, enable the web services

SAFEQ Cloud Server Setting using Web UI

1. Open SAFEQ Cloud Web UI https://<domain_name>:8443
2. Please enter required credentials in order to login to SAFEQ Cloud.
3.1. In case you are hosted on Y Soft side, make sure you have selected Primary’s mobile print service in Account / Mobile Print

3.2. Otherwise, please make sure that you have the following services under your hosted server (gateway): terminal, document output, mobile, messaging.

The mobile service should have port settings as shown on the following image

4. Add SMTP configuration under the customer, by selecting Messaging from the tree. Fill in all the required details.

5. Create an embedded configuration under the customer. It is required for Scan to My Email functionality (note that this feature is available in the embedded application only if “Enable scan application” is checked). Fill the required details: Name, Vendor as HP, valid device admin username and password, USB Card Reader Vendor ID, USB Card Reader Product ID, Check Enable Scan Application, Select SMTP Configuration, Select Mapped Devices.

6. Add one Input Port under the customer. Select Port Type as Pull Queue for it.

7. Add the HP printer under the customer, having the following parameters mandatory as shown in the below picture:

Device serial number from the printer can be retrieved from here:

SAFEQ Cloud Authentication application remote configuration

Note – SAFEQ Cloud HP Workpath version 3.6 or later is required for Remote Configuration

The remote configuration can be done from HP Command Center by choosing the SAFEQ Cloud Authentication application, selecting the option Configure and following the wizard. The below settings screen is displayed:

Domain name of the account to which the applications will be connecting.

The secure (SSL) server port for the mobile service. The default value is 9444.

Scan port
The secure (SSL) server port used by the scan to my email feature. The default value is 7301.

Please make sure that 7301 and 9444 ports are opened.

Api key

A valid SAFEQ Cloud API Access Key. If defaults to Default key for client and gateway, but customers who have disabled or changed the default key have to supply a valid alternative.

HP Workpath embedded application setup

1. Go to the MFP. The Home screen with installed applications will be displayed.

2. Click on Pull Print Icon to go to the application. The login on MFP is possible using “Short ID Login” or “Keyboard Login” or by swiping the card.

At this step the remote configuration file is loaded in the application and is checking the server configuration. Also, at this step the account logo is retrieved from the server and displayed in the main screen.

  • In case the application has no remote configuration file uploaded, the error from the below image will occur:

  • In case the admin uploaded wrong settings in the configuration file, this error is displayed:

3. Go to the Settings page by clicking on the top-right icon to check the settings and SAFEQ Cloud connectivity. The host and the port fields are read-only and their values are retrieved from the remote configuration file. The “Test” button is used for testing the SAFEQ Cloud connectivity. The API Access Key is not displayed, but the key is also validated in the connectivity test. The OK button will set up the connection to the server according to the settings for future actions. Then, the application will navigate to the main screen and the account logo will be refreshed.

Important Remark: HP MFP should have internet connection

4. User can login to the application using one of those three methods:

  • Short ID login: use the “Short ID” value from the user you want to login
  • Keyboard login: use the “Username” and “Password” values from the user
  • Swipe card: it is working from the application and from HP Launch screen

For card authentication please refer to section 9.17. Supported Card Readers – VIDs and PIDs to check the supported card readers.

When user will swipe card for the first-time, application will ask for card registration process. Register the card using Username and Password.

5. After successful login using any of the three methods there are two options:

  • the screen with “Pull Print” or “Scan to my email” buttons is displayed in case the setting “Enable Scan application” under the embedded configuration is checked. By pressing one of them, the user will be redirected to the corresponded page.

  • if the “Enable scan application” setting is unchecked then the Pull print page is displayed after launching the application.

6. Pull Print

  • All – select all jobs from all pages
  • Refresh – refresh the job list, retrieve the job from the server
  • Navigation buttons
  • Print – will print the selected documents on MFP
  • Print + Hold – will print the selected documents on MFP. The printed files will remain stored in MFP and will be available for another jobs
  • Delete button on the right on every row will remove the job from the server

7. Scan to My Email
“Start Scan” button will begin the scan process.

By pressing the button “Scan settings” user can select settings for scan operation.


Was this helpful?

Yes No
You indicated this topic was not helpful to you ...
Could you please leave a comment telling us why? Thank you!
Thanks for your feedback.

Post your comment on this topic.

Post Comment