2023
The following contains a list of notable changes in SAFEQ Cloud.
Legend:
+ Added feature
x Improved/changed feature
- Bug fixed
Build 3.39.7 [2023-12-01]
Primary Server
- Added authentication performance enhancements.
- Fixed PDF print over IPP affecting bespoke configurations.
Build 3.39.5 [2023-11-27]
Primary Server
- Introduced caching to address slow requests for selected secondary server deployments with LDAP authentication enabled.
Build 3.39.3 [2023-11-24]
Primary Server
- Optimized User Authentication Caching.
- Optimized document retry tasks for improved performance.
- Optimized automation tasks.
- Added additional metrics logging.
Build 3.39 [2023-11-02]
Web UI
x Improved user experience of the Print queues menu.
x Moved SAFEQ Cloud Client download to My profile screen so that the end users can access the pre-configured SAFEQ Cloud Client.
x The Server information tab for a Secondary Gateway was redesigned for easier administration and configuration.
- When clicking a server in the left navigation menu, the server details are now displayed correctly.
PC Client
x The SAFEQ Cloud Client now performs printer synchronization less often.
- Silent install sets all parameters correctly when color, duplex, or paper size is specified.
- The SAFEQ Cloud Client is updated with Ghostscript 10.02 to resolve the CVE-2023-38545 and CVE-2023-38546 vulnerabilities.
Authentication
x Added the ability to track how long authentication takes for specific authentication providers if a user is authenticated by multiple of them.
x OIDC is now compliant with RFC 8414.
- For customers with multiple authentication providers, the amount of SAFEQ Cloud Client failed authentications has been decreased.
- Azure AD authentication provider now handles custom extension attributes correctly.
Scanning
- When disabled, the OCR Output parameters are not saved in the workflow settings in the SAFEQ Cloud Web UI.
- The Reorder button is now visible only to users with ModifyScanWorkflow permission.
Performance
x To further reduce the load on DB, calls to UserFacade are cached (especially the findByName method that is used in hot queries).
- NullPointerException no longer occurs in the document facade when the document is linked to a non-existent printer or provider ID.
Ricoh Cloud Terminal (Gen2)
+ Users can select one or multiple jobs for deletion.
+ User can manually refresh the job list while at the MFD.
+ The Job list shows job attributes (Colour/B&W, Number of pages, Number of copies).
+ The terminal deployment via Secondary Gateway has been improved.
+ The terminal can be deployed via the Ricoh App Store (Pending availability on the Ricoh App Store).
+ The terminal can be manually configured at the MFD by an admin as the admin now can enter the Domain and the API key manually.
+ The terminal installation status is shown in the SAFEQ Cloud Web UI.
x A meaningful error message is shown when job retrieval fails.
x The Registration and Authorization messages are now brand-neutral.
x Admin gets proper feedback when entering wrong credentials during uninstallation on G2 devices.
x The automatic user logout now works correctly when the MFD goes into sleep mode.
x Users without rights to print can no longer open the print application on G2 devices.
x Admin users can now log in using the native login button as this button redirects them to the authentication screen.
x During terminal uninstallation, the User Authentication Management is set back to OFF.
x If entering credentials during card activation times out (takes over 60 seconds), the user is returned to the login screen instead of being shown the error message "You have placed unknown or damaged card."
x The RXOP library is updated to version 3.8.8.
- Fixed issue with jobs taking too long to print if PJL headers are not present.
- Fixed issue with jobs being released from Secondary Gateway storage showing error Status code 404.
- The terminal no longer crashes during manual installation.
- SP option SCAN_SETTINGS__PRINT_DELETE_SCANNER_JOURNAL is correctly set on installation so that scanning is not blocked when the device scan journal is full.
- G2 devices no longer require a manual reboot after terminal installation.
HP OxPD Terminal
- The page count is correct when printing multiple copies of a print job sent via IPP Pull Print to an HP MFD with OxPD terminal.
- When a document is not printed within the maximum expected wait time after a user taps Print, the document's release is canceled.
Konica Minolta IWS Cloud Terminal
x Scan jobs can be merged when the Merging originals option is enabled in the scan workflow settings.
x Added the support for booklets.
- The terminal respects stapling when using pull print.
Konica Minolta OpenAPI Terminal
- When using the KM PCL6 Universal Print driver, the page count is displayed correctly.
FujiFilm BI Cloud Terminal
x The users can now use basic workflow settings at the MFD.
Build 3.38 [2023-10-05]
Printing
- Fixed issue on secondary servers causing documents to be rejected when using offline caching.
- Delegated print jobs can now be released at Pure Cloud Terminals.
+ Added the ability to set the default page size per print queue.
Scanning
- Removed SMTP configuration from Embedded client configuration for Pure Cloud terminals, as this setting is unnecessary.
- Added exception information to WPS logs for failed scan processing jobs.
- Added validation for SharePoint connector where Target SharePoint online library is a required field.
x Added the ability to download failed scan jobs.
Web UI
- When clicking on the documentation link, the admin is directed to documentation branded for their variant of the product.
x The theme of the login screen is now modifiable, and the navigation in the tree structure is improved.
Chrome Extension
- Chrome extension no longer removes printers and configuration when clicking test or when a blank api field is used.
Mobile apps
- Removed dependency on external barcode scanning app by embedding its functions in the Android app.
- Print jobs submitted via the Mobile apps can now be released on KM Cloud Terminal even if they originally did not contain PJL headers.
Fujifilm BI Cloud Terminal
- Scanned documents are correctly accounted for even if the user uses the native copy application.
x Added the ability to print booklets.
x Added ability to account for scanned documents.
Canon Embedded Terminal
- The login screen no longer freezes after attempting to log in with invalid credentials.
Sharp Embedded Terminal
- The terminal can now display more than ten print jobs.
Xerox Embedded Terminal
x Login at Xerox Embedded Terminal no longer fails when secondary servers are configured with multiple CPUs.
Konica Minolta IWS Cloud Terminal
x Direct print jobs no longer create duplicate entries in the printed documents list.
API
x Added the ability to manage access rights.
x Improved security of document history API by adding role-based access.
x Increased security by only displaying API keys once when generated. The ability to view existing API keys is removed.
Build 3.37 [2023-09-07]
Scanning
+ SAFEQ Cloud Web UI updated so that administrators can see that they can use workflow variables in workflow fields.
x Scan files that failed during workflow processing are stored for 7 days and can be downloaded from My Documents in the SAFEQ Cloud Web UI.
x Improved notifications for administrators when a scan job fails.
- A user who has not yet submitted any print jobs can see My Authorisations in the SAFEQ Cloud Web UI and can authorize connections to Microsft365 applications.
Konica Minolta IWS Cloud Terminal
+ New Konica Minolta Terminal for Konica Minolta IWS devices.
+ Cloud printing with no requirement for a Secondary Gateway.
+ Users can log in to the MFD via username and password (or OTP), PIN, or card.
+ Users can register their card at the Cloud Terminal terminal.
+ Users can access Print and Scan workflows in Quick Actions upon login.
+ Users can select and print one or multiple jobs with finishing options applied at job output.
+ Print jobs can be released from any configured storage location (SAFEQ Cloud Client, Cloud, or Secondary Gateway storage) and will be routed to the MFD in the most efficient way.
+ Users get feedback on print job status (e.g., Waiting, Printing, Downloading, Downloaded and Printing).
+ New scan workflows are available in the Cloud Terminal UI.
+ Users can scan to email, Microsoft OneDrive, and Microsoft Sharepoint.
+ Users can access Quick Copy from My quick actions screen.
+ Administrators have instructions for deployment in the Embedded configuration section of the SAFEQ Cloud Web UI.
+ Administrators can set configuration options for the terminal.
+ Administrators can register the cloud terminals in SAFEQ Cloud.
+ Administrators can install the Cloud Terminal from Konica Minolta Marketplace
+ Administrators can pre-configure multiple MFDs for installation from Konica Minolta Marketplace.
+ Logs are stored on the MFD and can be retrieved remotely via Konica Minolta Marketplace.
Ricoh Cloud Terminal
+ Ricoh Gen2 terminal can be deployed from the Secondary Gateway.
Fujifilm BI Cloud Terminal
+ Users can delete print jobs at the terminal.
+ Copy and scan jobs are accounted for and can be viewed in the SAFEQ Cloud Web UI in Reports.
Sharp OSA Terminal
- The Print button is no longer hidden behind print jobs when there are multiple jobs in the list.
HP OXpD Terminal
- A new option was added to SAFEQ Cloud Web UI to enable driver (sotware) copy collation so that printing multiple copies works correctly.
Public API
- Adding authentication providers using API (/authproviders) now works correctly.
Authentication
- Azure AD client now handles the AAD on-premise extension attributes in a special way so that administrators can store card numbers stored in Custom Attributes (e.g., extension attributes such as extensionAttribute1).
SAFEQ Cloud Web UI
x The action buttons in the top menu bar are now grouped.
x Workflows now open in edit mode by default, reducing the number of steps required to create or update configuration items.
- Certificate expiration dates are now displayed correctly.
OMNI Bridge
x Landing page from the device's QR code is used to enroll the device in SAFEQ Cloud.
SAFEQ Cloud Client
+ Administrators can download the SAFEQ Cloud Client from the Print queues section of SAFEQ Cloud Web UI.
x The SAFEQ Cloud Client icon now has neutral branding.
Server
- Fixed intermittent authentication issues in EU due to connecting clients overloading the cluster after restart.
Localization
- Updated incorrect French translations for ID in Users.
- Updated incorrect Dutch translation of About in SAFEQ Cloud Client.
Security
x Updated backend API key security.
x Added AUD (audience) claim to API access tokens for improved security.
x Updated JRE version to Version 11.0.20
Build 3.36 [2023-08-10]
Scanning
+ Documentation link added to the navigation bar.
x User and admin are notified if workflow processing fails to start.
- OCR improvements for large jobs.
- In scan workflows, it is now possible to change the From address.
Web User Interface
x Alerts moved to Overview.
x Admins can see the status of the gateways in the Web UI.
x Cloud Terminal Installation status is displayed in the Web UI.
- Corrected French translations.
SAFEQ Cloud Client
+ Added text with the Client’s status next to the Client’s icon.
x Simplified the installation and configuration of the Mac Client.
Konica Minolta IWS Embedded Terminal (This feature is in testing, not general production)
+ The terminal now has the scanning functionality.
x Print jobs are delivered more effectively.
Terminal Deployment Tool
- The password parameter is now always visible in the command.
HP Workpath Cloud Terminal (Gen2)
- The terminal now supports Y Soft Card Readers.
Build 3.35.2 [2023-07-25]
Core
- Fixed issue related to automation tasks resulting in reduced server performance.
Build 3.35.1 [2023-07-19]
Ricoh Cloud Terminal (Gen2)
- Fixed issue during card enrollment for new cards displaying the unknown or damaged card error message.
Build 3.35 [2023-07-13]
Printing
+ SAFEQ Cloud Client now has the ability to send a username to the MFD when the print protocol is IPP.
- Improved speed of print job display for embedded terminals connected to YSoft OMNI Bridge
- Cloud Terminals can now print correctly when the selected paper size is Ledger.
Scanning
+ Administrators can add scan metadata to Sharepoint Scan workflows.
+ Administrators can configure file overwrite behavior for OneDrive and Sharepoint Scan workflows.
SAFEQ Cloud Web UI
x Improved user experience of creating new Partner or Customer accounts.
x Improved user experience of creating new Printers and Print Queues.
- Fixed issue when all advanced OCR features are enabled simultaneously.
SAFEQ Cloud Client
x Added auto-configuration for the OIDC authentication provider when installing the SAFEQ Cloud Client.
- The SAFEQ Cloud Client for macOS now includes the user's domain name when using the Store and deliver via gateway option.
Ricoh Cloud Terminal (Gen2)
- Uninstallation of the terminal does not freeze when the admin enters an incorrect device password.
- After uninstallation of the terminal, the User Authentication and Administrator Authentication options are set back to "Off" on the MFD.
HP Workpath Cloud Terminal (Gen2)
x Improved status messages when releasing print jobs at the MFD.
Konica Minolta Embedded terminal
- Fixed deployment of KM Open API for devices located in the US region.
- Fixed KM IWS card login issue when Enforce API Token access is enabled.
Sharp Embedded terminal
- Scrolling through the print job list is no longer slow.
Build 3.34 [2023-06-26]
Ricoh Cloud Terminal
+ New Ricoh Cloud Terminal for Ricoh SOP devices
+ Cloud printing with no requirement for Secondary Gateway
+ Users can select one or multiple jobs for printing
+ Users get feedback on print job status (e.g., Waiting, Printing, Downloading, Downloaded and Printing)
+ Print jobs can be released from any configured storage location (SAFEQ Cloud Client, Cloud, or Secondary Gateway storage) and will be routed to the MFD in the most efficient way
+ Users can view recently printed jobs in the Cloud Terminal user interface
+ New scan workflows available in the Cloud Terminal user interface
+ User can scan to email, Microsoft OneDrive, and Microsoft Sharepoint
+ Users can merge multiple documents into a single scan job
+ Users can log in to the device using username and password (or OTP), PIN, or card
+ Users can access scan and print workflows from a single interface
+ Users can register their card at the Cloud Terminal terminal
HP Workpath Cloud Terminal
+ New HP Workpath Cloud Terminal for HP Workpath devices
+ Cloud printing with no requirement for Secondary Gateway
+ Users can select one or multiple jobs for printing
+ Users get feedback on print job status (e.g., Printing, Downloading and Printing)
+ Print jobs can be released from any configured storage location (SAFEQ Cloud Client, Cloud, or Secondary Gateway storage) and will be routed to the MFD in the most efficient way
+ Users can view recently printed jobs in the Cloud Terminal user interface
+ Users can delete print jobs from the Cloud Terminal user interface
+ New scan workflows available in the Cloud Terminal user interface
+ User can scan to email, Microsoft OneDrive, and Microsoft Sharepoint
+ Users can merge multiple documents into a single scan job
+ Users can log in to the device using username and password (or OTP), PIN, or card
+ Users can access scan and print workflows from a single interface
+ Users can register their card at the Cloud Terminal terminal
Fujifilm BI Cloud Terminal
x Updated Fujifilm BI Cloud terminal
+ Cloud printing with no requirement for Secondary Gateway
+ Users can select one or multiple jobs for printing
+ Users get feedback on print job status (e.g., Waiting, Printing, Downloading)
+ Print jobs can be released from any configured storage location (SAFEQ Cloud Client, Cloud or Secondary Gateway storage) and will be routed to the device in the most efficient way
+ Users can view recently printed jobs in the Cloud Terminal user interface
+ Users can delete print jobs from the Cloud Terminal user interface
+ New scan workflows available in the Cloud Terminal user interface
+ User can scan to email, Microsoft OneDrive, and Microsoft SharePoint
+ Users can merge multiple documents into a single scan job
+ Users can log in to the device using username and password (or OTP), PIN, or card
+ Users can access scan and print workflows from a single interface
+ Users can register their card at the Cloud Terminal
x Support added for additional devices (ApeosPort VII gen2 devices) – see the Compatibility List for full details
HP OXPd Embedded terminal
x Improved user interface for HP OXPd embedded terminal
x Streamlined card enrolment workflow by removing pop-up after card swipe
x User login screen reconfigured for ease of use
x Text formatting updated for improved readability
- Fixed login/card enrolment UI for better usability on devices with small screens
+ Baltech card readers can be used with HP devices
Sharp Embedded terminal
- Users can now authenticate after Secondary Gateway was restarted. The MFD must be rebooted after the server update for the fix to be applied.
- Fixed potential vulnerability
Scan Workflows
NOTE: The Scan workflows feature (scan to email, SharePoint, and OneDrive) is available only in the Y Soft-hosted cloud environment and only with pure cloud terminals (FUJIFILM BI, Ricoh, HP Workpath).
+ New scan workflows can be configured for Scan to Email
+ New scan workflows can be configured for Scan to OneDrive
+ New scan workflows can be configured for SharePoint
+ Users can authorize access to their Microsoft 365 storage services (OneDrive & Sharepoint)
+ OCR can be configured for scan workflows
+ The available output formats for scan jobs are: PDF, JPEG, TIFF, Multipage TIFF, Compact PDF, Searchable PDF, docx, xlsx, xls, pptx, txt, rtf, PDF/a-1a, PDF/a-1b, PDF/a-2a, PDF/a-2u, PDF/a-3a, PDF/a-3u
+ PDF MRC Compression can be set for scanned files
+ PDF encryption can be set (automatic or manual password generation)
+ Image optimization can be applied (Dual page splitting, Blank page removal, Detect page orientation, Despeckle pages)
+ Merging originals can be enabled/disabled
+ Document preferences can be applied by workflow (Resolution, simplex/duplex, colour/B&W)
+ Static or variable metadata can be set by workflow for subject, body, and filename
Authentication Providers
+ Auth0 added as a new authentication provider
+ Users can authenticate at SAFEQ Cloud Client with Auth0 credentials using OIDC
+ Auth0 groups can be synchronized and used for Access Control
External Card Repository
+ External card repository option is available in Authentication providers so that customers can use the custom external card repositories integration with SAFEQ Cloud
Secondary Gateway
+ SAFEQ Cloud Gateway can be deployed to YSoft OMNI Bridge (an edge device) from Endpoints in SAFEQ Cloud Web UI
+ Admin Authorisation workflow and automated download and installation of Secondary Gateway can be initiated from Endpoints
SAFEQ Cloud Client
x A5 page size can be set as the default paper size in unattended installations of the SAFEQ Cloud Client in addition to A4 and US Letter
Print Driver
x SAFEQ Cloud job renderer updated to include support for Epson PCL6 and PS devices correctly applying finishing options
User Interface
- Feedback and error handling improved when the admin does not fill out all required fields in SAFEQ Cloud Web UI configuration screens
Build 3.33 [2023-05-18]
FujiFilm BI Embedded
+ Updated UI with simplified installation steps for deploying embedded terminal.
x Added ability to set up FujiFilm BI terminal for push print with Output Type "PDF" (no requirement for Postscript to be installed on MFD).
x Added ability to deliver print jobs in the most efficient way from any configured storage (e.g. jobs will be routed directly from PC Client to the MFD if available, otherwise they will be routed via the cloud).
x Card plugin and card service will always be installed.
- Job list order fixed in the terminal UI so that the most recent jobs are at the top of the list.
- Finishing options (Punch & Staple) are now working when using push print with FujiFilm BI devices.
Mobile Apps
+ Enhanced iOS and Android apps and HP Workpath terminal with user_token security.
API
x Added printer information to Documents History API.
- Fixed issue with Access Control List (ACL) inheritance properties when updating ACL via API.
PC Client
- Fixed issue with user being logged out from PC Client for Mac when the client is offline when refreshing OIDC token.
Single Driver
- Fixed issue with landscape documents in non-standard formats (e.g. envelope, ledger, check, etc.) being incorrectly rotated when staple or punch is applied.
Authentication
- Fixed issue with users being unable to authenticate when duplicate group names exist in Google Workspace authentication providers.
Web UI
- Fixed issue with Date/Time picker text being obscured by the cursor when hovering in Reports UI.
Build 3.32 [2023-04-25]
Ricoh SDK/J Legacy Embedded
- Ricoh legacy embedded terminal works again after removal of an expired Ubiquitech certificate from the truststore.
FujiFilm BI Cloud Embedded
+ Advanced finishing options defined by user when submitting the print job via {ShortProductName} PC client are respected when the user releases the job at the FUJIFILM BI Cloud terminal.
+ Added Quick scan workflows.
+ Scanning added to Quick action screen.
+ Unified Embedded UI.
+ FujiFilm BI Cloud Terminal UI is unified with other Cloud Terminals.
+ Added card activation at Cloud Terminal.
- Card activation at the Cloud Terminal is now possible.
- Simplex push print is now working.
- Visual bug removed from the UI.
- With a long Fullname, the Logout button is displayed correctly.
Lexmark Embedded
- Card self-registration is now possible for Local users at Lexmark MFDs with YSoft card reader.
Public API
+ {ShortProductName} API endpoint date/time matches the actual job release date/time.
- Documents/history API endpoint is filtering for the "PRINTED" status.
Authentication
- Authenticated users are now prevented from printing jobs of other users via job ID tampering.
Web Client
- The text in the middle panel retains a proper color.
Chromebook extension
- Removed fallback to email authentication when “disableAuthentication” is enabled. Users can only authenticate via token ID.
FMV-Specific Development
- Canceling pending documents is working as expected.
Build 3.31 [2023-03-25]
FujiFilm BI Embedded
+ Added the possibility to refresh pending jobs.
+ Added ability to receive simple scan jobs via SwA in SAFEQ Cloud.
+ Fujifilm BI terminal can now release print jobs directly from the cloud.
+ Streamlined installation of the embedded terminal.
Xerox Embedded
- After registering a card with OTP, an "Authentication failed" message is displayed, and users must log in again.
HP OXPD Embedded
+ Enhanced UI
Public API
+ Customer can get information on users' group membership via Public API.
Card Registration
+ Enhanced Refo script allows inactive user cards to be used again.
Admin
+ Improved UX for a better admin experience.
+ Improved Dashboard in web UI.
- In SAFEQ Cloud web UI, the colors in the middle of the panel are not turning gray.
SAFEQ Cloud Android App
- Y Soft App does not overwrite the setting from duplex to simplex.
Web Client
- KM Web Client session at MFD can not be hijacked by other users from a web browser.
- Sharp Web Client session at MFD can not be hijacked by other users from a web browser.
PC Client
- PC Client 3.27 is not randomly logging users out.
- Chrome extension does now sync with Email auth and GSuite.
Message service
- The number of characters in messaging template was increased.
Build 3.30 [2023-03-01]
Fujifilm BI Embedded
x Added support for Fujifilm BI embedded terminal.
HP WorkPath Embedded
+ Updated HP Workpath Embedded to version 3.29 (check the documentation for update requirements).
- Enhanced HP WorkPath with user_token security (check the documentation for update requirements).
- Added print options button.
- Fixed changing subject and filename when scanning to show updates while typing.
- French UI update.
- Correction in French localization.
KM IWS Embedded
+ Updated KM IWS terminal to version 3.30.
- Fixed Card swipe becomes irresponsive after the "Back" button is pressed during card registration.
KM OpenAPI Embedded
- Added Security enhancement against XSS attack.
Xerox Embedded
- Fixed error during login for Xerox Altalink devices.
- Jobs are correctly displayed in print queue.
Authentication
- Fixed error message when logging in at printer with card ID imported from common Azure AD attribute.
- Fixed "400 Bad Request" Azure Graph API call error when utilizing custom fields for card ID mapping.
Public API
- In document history, documents are recorded under correct device when the jobs are sent with the "serialnumber" parameter.
PC Client
+ Added option for PC Client to enable custom port monitor instead of IPP.
- Wrong copyright year display in windows client.
SAFEQ Cloud Server
- Fixed correct sorting of job list if requested through "jobs" endpoint.
+ Updated logic so that administrators can't enable WPS on Secondary Server.
Build 3.29 [2023-02-03]
PC Client
x Added Czech, Slovak, and Polish language support.
- PC Client 3.27 no longer logs the user out when switching to offline mode during token refresh.
- Fixed the certificate-related connectivity issues when upgrading from versions older than 3.15.
- Fixed memory error on shutdown related to Windows network events handler incorrectly deregistered upon application termination.
Server
x Added Czech, Slovak, and Polish language support.
- Workflow Processing system (WPS) service is now hidden behind a feature flag.
Driver
x Added Czech, Slovak, Portuguese, Polish, and Swedish language support.
KM Open API
x Added Czech, Slovak, Portuguese, Polish, and Swedish language support.
- Fixed the issue with “Internal server error” displayed when the device can’t print.
KM IWS
- Card swipe now stays responsive after the “Back” button is pressed during card registration.
- Password containing the “&” character no longer causes failure during card registration.
- Jobs with empty names no longer trigger error messages.
Sharp OSA
x Added Czech, Slovak, Portuguese, Polish, and Swedish language support.
- The users are no longer redirected back to the login screen after logging in.
- Punch function is now working for 4 holes on Sharp.
Ricoh SOP
- Print jobs containing both A4 and A3 pages are printed correctly using their respective formats.
HP OXPd
x Added Czech, Slovak, Portuguese, Polish, and Swedish language support.
Build 3.28.2 [2023-01-16]
API
x Enhanced internal API token access control security.
HP OXPd Embedded
- Enhance escaping of invalid characters from document titles.
- Fixed issue with installation failing in specific model configurations with a non-derived FaultException.
- Fixed issue where in some configurations card reader PID/VID issue would occur after sending configuration to device.