Konica Minolta IWS Gen 2 Cloud Terminal with device locking (IWS Service Platform integration)

The feature is under KmIwsDeviceLocking feature flag and under a beta program. If interested, please register at https://www.ysoft.com/safeq/beta-testing.

Prerequisites

  • i-Series MFD

    • IWS Service platform is not supported on older device generations

  • MFD Network Configuration set up like this:

Settings

Value

Description

Network → TCP/IP Setting → Quick IP Filtering

No Filtering

This value allows the terminal to communicate with cloud services.

Network → IWS Settings

Enable IWS Settings


Network → OpenAPI Setting → OpenAPI Setting → SSL Port Settings

SSL Only


Network → TCP Socket Setting → TCP Socket Setting

Enable Use SSL/TLS


Network → WebDav Server Settings → SSL Settings

SSL/Non-SSL


  • License with a KmIwsDeviceLocking feature flag enabled

    • You can check if the feature is enabled by visiting WebUI (Settings → Customer account → License) and scrolling down to Features. Feature flag must be present under the Account or Inherited features.

      image-20251118-115811.png

  • IWS Service platform application is installed on the MFD

    • Application is available only via KM Marketplace. In case you do not have Marketplace account or you are unable to install IWS Service platform application, contact your printer supplier

  • KM Cloud terminal installed and configured (e.g. in a state where user can log in and release a print job)

    • A guide how to install and configure terminal is available here: Konica Minolta IWS Gen 2 Cloud Terminal)

    • Required version of terminal is 2025.11.1 or newer. We recommend to enable auto update of Marketplace applications so you always have the latests and the most secure version available

    • Warning: API key of type embedded has to be used to configure terminal. When configuring terminal, even general API key type can be used for standalone mode (mode without device locking), but is not sufficient for locking state. So if you register terminal previously with general API key, you need to generate a API key of embedded and re-register terminal before proceeding further

      image-20251118-141201.png

  • Valid MFD administrator password inputed - without correct password both installation and uninstallation processes will fail. Please refer to “Setting MFD admin password” section below

    • There are two ways how to input MFD

Setting MFD admin password

  • There are two possibilities how to input MFD admin password

  • For bigger environments where some devices share mfp admin password and some not both approaches can be used at once

Embedded template level

  • First option is to set password on the Embedded terminal template level. ( Printers → Embedded terminal templates → Select desired embedded template (Default template for KM devices is Konica Minolta Cloud Terminal) → Detail icon image-20251118-125712.png → Device admin password)

  • This option suits best for cases where mutliple MFDs share same admin password

Printer level

  • Second option is to set password on the printer level. ( Printers → Select desired printer → Detail icon image-20251118-125712.png → Advanced setup → Device admin password)

    • Warning: This password will override password set on assigned the Embedded terminal template

  • This option suits best for cases where printers have different password

Installation (locking device)

  1. Make sure all prerequisities are met

  2. Access detail of IWS Gen 2 embedded terminal template for which you want to enable device locking (all devices assigned to this template will be affected) ( Printers → Embedded terminal templates → Select desired embedded template → Detail icon image-20251118-125712.png )

  3. Find option Enable Device Locking and set it to enabled and confirm prompt

    • Warning: If there is authentication application present on the device, it will be replaced

    • If you can not see this option, make sure that Vendor is set to Konica Minolta and Application type is set to IWS Gen 2.

      image-20251118-132354.png

  4. All devices with this terminal embedded template assigned now need to launch terminal application (either by someone access it to perform print job release for instance or by administrator once option is set to enabled)

    • Until this launch happens, device will not be locked but terminal is still functional and can be used in standalone mode

  5. Upon terminal launch you should see that device is locking itself and after process is done, authentication page should be displayed

In case that device was not locked, please refer to Printers page in the WebUI to see what is the issue or see the device logs- see more in Konica Minolta IWS Gen 2 Cloud Terminal (extensive logging must be enabled during the process of terminal startup)


Uninstallation (unlocking device)

Uninstallation process will affect all devices assigned to terminal embedded template that is going to be changed. If you want uninstall just subset of devices, please refer to “Uninstalling just one device from the template” and apply process to all desired devices

  1. Make sure all prerequisities are met

    • Warning: Especially make sure that MFD admin password for device that will be subject of uninstallation is still correct (and did not change in time for instance)

  2. Access detail of IWS Gen 2 embedded terminal template for which you want to enable device locking (all devices assigned to this template will be affected) ( Printers → Embedded terminal templates → Select desired embedded template → Detail icon image-20251118-125712.png )

  3. Find option Enable Device Locking and set it to disabled

  4. On all affected devices authentication application has to be reloaded (either by auto reset or by pressing “Reset” button in the MFD bottom display)

  5. Once this is done device should unlock itself

  6. After this terminal application has to be launched manually so uninstallation process can finish

In case that device is still locked, please refer to Printers page in the WebUI to see what is the issue or see the device logs- see more in Konica Minolta IWS Gen 2 Cloud Terminal (extensive logging must be enabled during the process of terminal startup)

Uninstalling just one device from the template

  • If you want to uninstall just one device from the template, this device has to be assigned to another template so disabling device locking will not affect other devices in the template

  1. Visit desired printer detail and press Add new button next to Embedded terminal template ( Printers → Select desired printer → Detail icon image-20251118-125712.png → Embedded terminal template → Add new )

  2. Fill some name to a embedded template and press Save

    image-20251118-135518.png

  3. Go to a detail of newly created template ( Printers → Embedded terminal templates → Select desired embedded template → Detail icon image-20251118-125712.png ) and make sure Enable device locking option is set of disabled

  4. From this point uninstallation process remains the same

In case you need to uninstall multiple devices from one template, these steps have to be done just once. For all other devices you can just change embedded template on Printer detail


Deleting printer with active authentication application

  • Deletion of a printer that has still active authentication application will cause that our solution will not be able to remove authentication application and unlock the device

  • Before removing printer from the WebUI please make sure authentication application is removed and device is unlocked (follow the uninstallation guide above and check that users can access MFD native menu without need of logging in).

  • If such case happens despite that, please contact your printer supplier

Supported Firmware Versions

Model

Required Version

bizhub C750i

GC4-RB or G00-RF or later

bizhub C650i, C550i, C450i

GC4-RB or G00-RF or later

bizhub C360i, C300i, C250i

GC4-RB or G00-RF or later

bizhub C287i, C257i, C227i

GC4-RB or G00-RF or later

bizhub 950i, 850i

GC4-RB or G00-RF or later

bizhub 750i

GC4-RB or G00-RF or later

bizhub 650i, 550i, 450i

GC4-RB or G00-RF or later

bizhub 360i, 300i

GC4-RB or G00-RF or later

bizhub C4050i, C3350i

GC4-RB or G00-RF or later

bizhub C4000i

GC4-RB or G00-RF or later

bizhub 4750i, 4050i

GC4-RB or G00-RF or later

bizhub 4700i

GC4-RB or G00-RF or later

bizhub C751i

GC4-RB or G00-RF or later

bizhub C651i, C551i, C451i

GC4-RB or G00-RF or later

bizhub C361i, C301i, C251i

GC4-RB or G00-RF or later

bizhub 751i

GC4-RB or G00-RF or later

bizhub 651i, 551i, 451i

GC4-RB or G00-RF or later

bizhub 361i, 301i

GC4-RB or G00-RF or later

bizhub C4051i, C3351i

GC4-RB or G00-RF or later

bizhub C4001i

GC4-RB or G00-RF or later

bizhub 4751i, 4051i

GC4-RB or G00-RF or later

bizhub 4701i

GC4-RB or G00-RF or later

Limitations

General

  • Configuration to the secondary gateway server is not supported. 

  • Features that are not documented may not be supported.

  • The software logout button image-2024-10-15_10-22-38.png  is not present. Logout is done only when the user clicks the MFD logout button (for some devices HW button or software logout button between Home and Reset buttons.

    • Logging out via card is also not available

Authentication

  • Card authentication is active regardless of the chosen login method. It can be disabled by unplugging the card reader or turning it off in the MFD settings.

Accounting

  • External direct print is not accounted (may change in future releases)

Printing

  • USB printing is not restricted by USB print permission. Instead, it inherits the release job and color print permissions for black-and-white and color printing, respectively