Konica Minolta IWS Gen 2 Cloud Terminal with device locking (IWS Service Platform integration)

The feature is under KmIwsServicePlatformEmbedded feature flag and under a beta program. If interested, please register at https://www.ysoft.com/safeq/beta-testing .

Card login is fully supported when the terminal is set as a default app. Refer to “Card reader” section below for more details.

Prerequisites

  • MFD Network Configuration:

Settings

Value

Description

Network → TCP/IP Setting → Quick IP Filtering

No Filtering

This value allows the terminal to communicate with cloud services.

Network → IWS Settings

Enable IWS Settings


Network → OpenAPI Setting → OpenAPI Setting → SSL Port Settings

SSL Only


Network → TCP Socket Setting → TCP Socket Setting

Enable Use SSL/TLS


Network → WebDav Server Settings → SSL Settings

SSL/Non-SSL


  • License with a "KmIwsServicePlatformEmbedded" feature flag
    You can check if the feature is enabled by scrolling down on the Overview page. It must be present under the Account or Inherited features.
    image-2025-2-11_13-55-39.png

  • IWS Service platform application is installed on the MFD (usually installed using KM Marketplace on MFD, valid KM Marketplace account needed)

  • KM Cloud terminal installed (minimal version 2025.03.02, a guide is available here: Konica Minolta IWS Gen 2 Cloud Terminal )

  • Network visibility from MFD to cloud servers

Setup

  1. Open IWS Service PF application on the MFD
    image-2024-9-19_9-6-16.png

  2. Prepare configuration values for the next step to avoid machine logout timeout.
    You will have to enter the tenant domain three times, the API key of embedded type twice and change "Authorization Server Parameter".

    <customer-domain>: Go to Settings > Customer account and obtain a domain from the Domains list
    image-2025-2-11_10-30-47.png

    <embedded type API KEY>: Create a new API key under Security > API keys > Add, select Embedded type and note the API key value.
    image-2025-2-11_10-38-15.png

  3. Click on three dots in the upper left corner, open Administrator Setting, and Login by Administrator Password 
    (use the admin MFD password).
    image-2024-9-19_9-7-3.png image-2024-9-19_9-9-57.png

  4. Go to OpenAPI Gateway > External Server Communication Settings

  5. Fill in the following fields and click save: 
    WebSocket Endpoint URL:  <customer-domain>
    WebSocket Endpoint Port: 443 (or 8715 if test environment does not support 443)
    WebSocket LoginName: fill with any character, such as “t”. The value is mandatory but not used.
    WebSocket Password: <embedded type API KEY>
    Authorization Server Hostname: <customer-domain>
    Authorization Server Parameter: /ispf/v1/get_token
    Authorization Server Endpoint Port: 443 (or 8705 if test environment does not support 443)
    API Server Hostname: <customer-domain>
    API Server Port Number: 443 (or 8705 if test environment does not support 443)
    Client Secret Password: <embedded type API KEY>
    Certificate Verification Settings:  leave on True (or set False in a testing environment)

    Screenshot 2025-03-18 at 12.51.16.png Screenshot 2025-03-18 at 12.51.25.png Screenshot 2025-03-18 at 12.51.33.png

  6. Login as an administrator to a web UI and check the Printers tab.

    There should be a printer with name MFD with IWS Service Platform <mfd-serial-number> which has assigned IWS Service Platform Embedded configuration.

    KM_IWS_SPF.png



  7. Go to the Embedded clients and select Deployment actions  image-2025-2-11_12-42-30.png for IWS Service Platform

a. If the printer has the same machine admin password as default the Embedded is automatically installed and the MFD is locked.
image-2024-9-19_9-34-12.png

image-2024-10-15_16-45-29.png

b. If the password differs the automatic installation fails and you need to change the Device admin password to the correct value in Embedded configuration > Device admin password
image-2024-11-27_14-14-31.png

c. You can configure "Type of login" here (Credentials or PIN).


  1. If the Device admin password is set correctly and automatic installation failed, the MFD can be Locked by the Install and configure button and also Unlocked by the Uninstall button.
    image-2024-9-19_9-34-12.png

Card reader in CCID mode or in Keyboard wedge mode using loadable driver

In order for a card reader to work in CCID mode or Keyboard wedge mode using loadable driver, you need to ensure following:

  • Loadable driver is installed. You may verify it in administrator settings under Firmware Version

    Screenshot 2025-05-13 at 9.37.34.png

  • “Authentification Device 2” dip switch (“Management Function Choice” on some models) is set to “Card”

  • MFD is in a Kiosk mode with default startup application configured (restrict to use only default app is not required- Basic Functions Setting option can be enabled)

Setting up kiosk mode using MFD Admin settings

  • Network → OpenAPI Setting → Specified Application Start Setting

Settings

Value

Network → OpenAPI Setting → Specified Application Start Setting → Specified Application Start Setting

On

Network → OpenAPI Setting → Specified Application Start Setting → Default Startup Application Selection

Terminal application selected

Network → OpenAPI Setting → Specified Application Start Setting → Basic Functions Settings

On = enable access to other MFD applications
Off = disable access to other MFD applications (not recommended)
Screenshot 2025-05-13 at 14.48.02.png

Setting up kiosk mode using Marketplace

Settings

Value

Set as default app/UI

On

Restrict MFD to default app/UI

On = enable access to other MFD applications
Off = disable access to other MFD applications (not recommended)
image-20250520-163441.png

Troubleshooting

If these steps don't help, please contact support.


  • Printer is not created automatically - possible causes:

    • Printer with the same serial number already exists (for example from a previous Cloud terminal deployment):

      • Either change its embedded configuration to IWS Service Platform and trigger the installation under Deployment actions of the embedded template (  image-2025-2-11_12-42-30.png icon)

      • Or delete the existing printer and restart the MFD to trigger automatic creation again

    • Wrong domain in the configuration - check if it was entered correctly

    • Wrong API key in the configuration - check if it was entered correctly

    • IWS Service PF application was previously configured to a different environment - please restart the MFD after the configuration.

  • Printer is created, but cannot be installed:

    • Please see the exact message under Printers > Embedded templates > Deployment actions of the IWS Service Platform embedded template ( image-2025-2-11_12-42-30.png icon), follow the instructions and manually trigger the installation from deployment actions again.

Supported Firmware Versions

Model

Required Version

bizhub C750i

GC4-RB or G00-RF or later

bizhub C650i, C550i, C450i

GC4-RB or G00-RF or later

bizhub C360i, C300i, C250i

GC4-RB or G00-RF or later

bizhub C287i, C257i, C227i

GC4-RB or G00-RF or later

bizhub 950i, 850i

GC4-RB or G00-RF or later

bizhub 750i

GC4-RB or G00-RF or later

bizhub 650i, 550i, 450i

GC4-RB or G00-RF or later

bizhub 360i, 300i

GC4-RB or G00-RF or later

bizhub C4050i, C3350i

GC4-RB or G00-RF or later

bizhub C4000i

GC4-RB or G00-RF or later

bizhub 4750i, 4050i

GC4-RB or G00-RF or later

bizhub 4700i

GC4-RB or G00-RF or later

bizhub C751i

GC4-RB or G00-RF or later

bizhub C651i, C551i, C451i

GC4-RB or G00-RF or later

bizhub C361i, C301i, C251i

GC4-RB or G00-RF or later

bizhub 751i

GC4-RB or G00-RF or later

bizhub 651i, 551i, 451i

GC4-RB or G00-RF or later

bizhub 361i, 301i

GC4-RB or G00-RF or later

bizhub C4051i, C3351i

GC4-RB or G00-RF or later

bizhub C4001i

GC4-RB or G00-RF or later

bizhub 4751i, 4051i

GC4-RB or G00-RF or later

bizhub 4701i

GC4-RB or G00-RF or later

Limitations

General

  • Configuration to the secondary gateway server is not supported. 

  • Features that are not documented may not be supported.

  • The software logout button image-2024-10-15_10-22-38.png  is not present. Logout is done only when the user clicks the HW logout button.

Authentication

  • Card authentication is active regardless of the chosen login method. It can be disabled by unplugging the card reader or turning it off in the MFD settings.

  • Card authentication registration is supported in keyboard mode. CCID Mode (also known as Loadable Driver Mode) is also supported, but only when the terminal is in kiosk mode.

  • Logging out with a card is not available.

Accounting

  • If you are using Cloud Terminal version 2024.11.01 or older with SQC server version 2024.11.14 or newer, the Copy job accounting from Cloud Terminal will be doubled in Reports.

  • If you are using Cloud Terminal version 2025.03.02 or older with SQC server version 2025.03.20 or newer, the Print job accounting from Cloud Terminal will be doubled in Reports.

  • External direct print is not accounted (may change in future releases)

Printing

  • USB printing is not restricted by USB print permission. Instead, it inherits the release job and color print permissions for black-and-white and color printing, respectively

3rd party limitations

KM IWS Service Platform

  • USB import - Currently not implemented feature.