Requirements
Supported Clients
The following clients are supported for sending print jobs to SAFEQ Cloud:
- Windows SAFEQ Cloud Clients with Internet Printing Port enabled, on the following versions of Windows:
- Windows 10 or later
- Windows Server 2012 R2 or later
- Mac computer clients, macOS Big Sur – version 11 or later
- Apple iOS devices. iOS 8.0 or later
- Android devices, Android OS version 5.1 or later
- Chrome version 44 or later for the Chrome extension
Supported Printers
For SAFEQ Cloud to send print job data to printers, a Document Output Service must be able to deliver data to the printers IP address on port 9100 or IPP (for more details see section Ports and Protocols below).
SAFEQ Cloud single driver capability is supported on the following vendors:
| Vendor | Driver | ||
|---|---|---|---|
PostScript | PCL6 | ||
| Brother |  |  | |
| Canon | | | |
| FUJIFILM BI |  (limitations apply) | | |
| HP | | | |
| Konica Minolta | | | |
| Kyocera | | | |
| Lexmark | | | |
| Ricoh | | | |
| Sharp | | | |
| Xerox | | | |
Additional printer vendors are added continuously, so this list is not exhaustive. If a vendor/language combination is needed which isn’t listed above, contact support.
SAFEQ Cloud can also receive raw print data streams from an IPP/IPPS client and deliver to a printer using any printer driver.
For more information on supported devices, see Hardware Compatibility List (HCL).
Ports and Protocols
The following is a list of possible ports used in SAFEQ Cloud. Ports required depend on the features, services and architecture used.
Communication occurs to/from a service, and the diagrams below serve only as a simple example, as services, such as Authentication Service, can be placed anywhere; in cloud, remotely, private cloud, on-premise etc.
SAFEQ Cloud uses TLS 1.3 for all internal communication (see Limitations for exceptions).
Server to Server
| Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 2560 | TCP | Secondary SAFEQ Cloud Server | Primary SAFEQ Cloud Server | A secondary server communicating with the primary SAFEQ Cloud server for messaging exchange |
| 7300 | TCP HTTPS | Secondary SAFEQ Cloud Server | Primary SAFEQ Cloud Server | A secondary server communicating with the primary SAFEQ Cloud server API |
| 2552 | TCP | Primary SAFEQ Cloud server | Primary SAFEQ Cloud Server | A primary cluster server node communicating with other primary cluster server nodes |
| 8080 | TCP HTTP | Primary SAFEQ Cloud server | Primary SAFEQ Cloud server | Required for cluster node relay communication of UI requests |
Server to printers – print operations
| Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 9100 | TCP | SAFEQ Cloud Document Output Service | Printer | An SAFEQ Cloud document output service delivering print jobs to a physical printer |
| 631 | TCP HTTP | SAFEQ Cloud Document Output Service | Printer | An SAFEQ Cloud document output service delivering print jobs to a physical printer via IPP/S |
| 443 | TCP HTTPS | SAFEQ Cloud Document Output Service | Printer | An SAFEQ Cloud document output service delivering print jobs to a physical printer via IPP/S |
Server to MFD’s – embedded deployment
| Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 161 | UDP | SAFEQ Cloud Terminal Client Service | Printer | SNMP management |
| 443 | TCP HTTPS | SAFEQ Cloud Terminal Client Service | Printer | Deployment of the embedded client to the MFD (all brands) |
| 80 | TCP HTTP | SAFEQ Cloud Terminal Client Service | Ricoh MFD’s | Deployment of the embedded client to Ricoh MFD’s |
| 8080 | TCP HTTP | SAFEQ Cloud Terminal Client Service | Ricoh MFD’s | Deployment of the embedded client to Ricoh MFD’s |
| 8451 | TCP HTTP | SAFEQ Cloud Terminal Client Service | Canon MFD’s | Deployment of the embedded client to Canon MFD’s |
| 51443 | TCP HTTPS | SAFEQ Cloud Terminal Client Service | Ricoh MFD’s | Deployment of the embedded client to Ricoh MFD’s |
| 8710 | UDP | SAFEQ Cloud Terminal Client Service | Ricoh, Lexmark MFD’s | Deployment of the embedded client to Ricoh and Lexmark MFD’s |
| 80 | TCP HTTP | SAFEQ Cloud Terminal Client Service | HP MFD’s | Deployment of the embedded client to HP MFD’s |
| 7627 | TCP HTTP | SAFEQ Cloud Terminal Client Service | HP MFD’s | Deployment of the embedded client to HP MFD’s |
| 10080 | TCP | SAFEQ Cloud Terminal Client Service | Sharp MFD’s | Sharp OSA communication, only for Sharp devices with embedded client |
| 50003 | TCP | SAFEQ Cloud Terminal Client Service | KM MFD’s | Konica Minolta OpenAPI communication, only for KM devices with embedded client |
| 8091 | TCP | KM IWS Install Tool | KM MFD’s | default port for installing IWS from the IWS Install Tool |
Embedded clients to server
| Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 8700 | SSL | Printer | SAFEQ Cloud Terminal Client Service | Connection from the embedded clients running on the Ricoh and Lexmark MFDs |
| 8703 | SSL | Printer | SAFEQ Cloud Terminal Client Service | Connection from the embedded clients running on the MFDs (except Ricoh and Lexmark) |
| 8704 | TCP | Printer | SAFEQ Cloud Terminal Client Service | Connection from the embedded clients running on the MFDs (except Ricoh and Lexmark) |
| 7301 | TCP HTTPS | Printer | SAFEQ Cloud Terminal Client Service | Connection from the embedded clients running on the HP and Konica Minolta MFDs |
| 7302 | TCP HTTP | Printer | SAFEQ Cloud Terminal Client Service | Connection from the embedded clients running on the MFDs |
| 7400 | TCP HTTPS | Printer | EveryonePrint HCP Authentication Service | Connection from the embedded clients to EveryonePrint HCP Authentication Service to register as trusted endpoints |
| 14080 | TCP HTTPS | Printer | SAFEQ Cloud Terminal Client Service | Connection from Equitrac server for embedded clients running on the MFDs |
| 14081 | TCP HTTP | Printer | SAFEQ Cloud Terminal Client Service | Connection from Equitrac server for embedded clients running on the MFDs |
| 14082 | TCP HTTPS | Printer | SAFEQ Cloud Terminal Client Service | Connection from the Ricoh SLNX Share embedded clients running on the MFDs |
| 14083 | TCP HTTP | Printer | SAFEQ Cloud Terminal Client Service | Connection from the Ricoh SLNX Share embedded clients running on the MFDs |
Web Administration UI
| Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 8443 | TCP HTTPS | Client Web browser | SAFEQ Cloud Primary Server | HTTPS/SSL Web interface of the SAFEQ Cloud solution |
| 7290 | TCP HTTP | Client Web browser | EveryonePrint Mobile Print Server | Clients accessing the non-SSL Web interface of Y Soft Server. Default can be changed to standard http port 80 |
| 9443 | TCP HTTPS | Client Web browser | EveryonePrint Mobile Print Server | Clients accessing the SSL Web interface of Y Soft Server. Default can be changed to standard https port 443 |
SAFEQ Cloud Clients to server
| Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 2560 | TCP | SAFEQ Cloud Client | Primary SAFEQ Cloud Server | SAFEQ Cloud Client in ‘Local Storage’ mode communicating with the primary SAFEQ Cloud server for messaging exchange |
| 7300 | TCP HTTPS | SAFEQ Cloud Client | SAFEQ Cloud API Service | SAFEQ Cloud Client communicate with API to authenticate users and retrieve printers |
| 7300 | TCP HTTPS | SAFEQ Cloud Client | SAFEQ Cloud API Service | Clients sending standard print jobs to server |
| 7400 | TCP HTTPS | SAFEQ Cloud Client | EveryonePrint HCP Authentication Service | SAFEQ Cloud Client communicate with EveryonePrint HCP Authentication Service to register as trusted endpoints |
| 8631 | TCP HTTP | Client IPP | SAFEQ Cloud IPP Service | Clients sending IPP/http print jobs to server |
| 9631 | TCP HTTPS | Client IPP | SAFEQ Cloud IPP Service | Clients sending IPPS/https print jobs to server |
SAFEQ Cloud Clients to printers – print operations
For SAFEQ Cloud Client in ‘Local Storage’ mode:
| Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 9100 | TCP | SAFEQ Cloud Client Document Output Service | Printer | An SAFEQ Cloud document output service delivering print jobs to a physical printer |
| 631 | TCP HTTP | SAFEQ Cloud Client Document Output Service | Printer | An SAFEQ Cloud document output service delivering print jobs to a physical printer via IPP/S |
| 443 | TCP HTTPS | SAFEQ Cloud Client Document Output Service | Printer | An SAFEQ Cloud document output service delivering print jobs to a physical printer via IPP/S |
Mobile Print to server
| Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 7910 | TCP HTTPS | Apple iOS clients | SAFEQ Cloud Mobile Print Service | AirPrint print jobs from Apple iOS devices (secure) |
| 9444 | TCP HTTPS | Y Soft Mobile App | SAFEQ Cloud Mobile Print Service | Authentication and document data from Apps (secure) |
Server to external authentication
| Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 88 | TCP and UDP | EveryonePrint HCP Authentication Service | KDC | LDAP Kerberos authentication |
| 389 | TCP | EveryonePrint HCP Authentication Service | LDAP server | Connecting to LDAP server via LDAP (default port for LDAP) |
| 636 | TCP | EveryonePrint HCP Authentication Service | LDAP server | Connecting to LDAP server via LDAPS SSL (default port for LDAPS) |
| 443 | TCP HTTPS | EveryonePrint HCP Authentication Service | Microsoft Entra ID, OKTA, Google, PingID | Connecting to Entra ID, OKTA, Google or PingID via TLS/SSL |
Server to external database
| Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 5432 | TCP | Primary SAFEQ Cloud Server | PostgreSQL Database | Connecting to external PostgreSQL database (default port for PostgreSQL database) |
| 1433 | TCP | Primary SAFEQ Cloud Server | MS SQL Database | Connecting to external MS SQL database (default port for MS SQL database) |
| 1521 | TCP | Primary SAFEQ Cloud Server | Oracle Database | Connecting to external Oracle database (default port for Oracle database) |
Embedded clients to Cloud Server or Gateway
| Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 7301 | TCP HTTPS | Printer | SAFEQ Cloud Terminal Client Service | Connection from the embedded clients, HP Workpath Application and KM IWS, running on the MFDs |
| 7400 | TCP HTTPS | Printer | EveryonePrint HCP Authentication Service | Connection from the embedded clients to EveryonePrint HCP Authentication Service to register as trusted endpoints |
| 9444 | TCP HTTPS | Printer | SAFEQ Cloud Mobile Gateway Service | Connection from the embedded clients, HP Workpath Gen 1 Application and KM IWS Gen 1, running on the MFDs |
IP card reader to Server
| Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 7300 | TCP HTTPS | IP card reader | SAFEQ Cloud API Service | IP card reader communicate with API to authenticate users |
| 7303 | TCP HTTP | IP card reader | SAFEQ Cloud API Service | IP card reader communicate with API to authenticate users |
SAFEQ Cloud Chrome Extension to Server
| Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 7300 | TCP HTTPS | Chrome Extension | SAFEQ Cloud API Service | Chrome Extension communicate with API to authenticate users, retrieve printers and send jobs to SAFEQ Cloud |
Cloud terminal Integration to Server
| Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 7400 | TCP HTTPS | Printer | EveryonePrint HCP Authentication Service | Cloud terminal integration – communicate with EveryonePrint HCP Authentication Service to register as trusted endpoints |
| 8705 | HTTPS | Printer | SAFEQ Cloud Terminal Client Service | Cloud terminal integration (SQTS) – connection from Cloud Terminals running on MFDs (e.g. HP Workpath Gen2, KM IWS Gen 2, Ricoh Gen 2) and for sending scanned jobs (e.g., HP Workpath Gen 2, Ricoh Gen 2) |
| 8706 | TCP | Printer | SAFEQ Cloud Terminal Client Service | Cloud terminal integration – connection from Cloud terminals running on MFDs |
| 8707 | TCP HTTPS | Printer | SAFEQ Cloud Terminal Client Service | Cloud terminal integration – connection from Cloud terminals running on MFDs which provide scan data using SwA protocol (mainly Fujifilm BI terminals) |
| 8711 | TCP HTTPS | Printer | SAFEQ Cloud Terminal Client Service | Cloud terminal integration – connection from Cloud terminals running on MFDs which provide scan data using WebDAV protocol (KM IWS cloud terminals) |
Edge Gateway to Microsoft IoT Hub
| Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 443 | SSL | Edge Gateway | mcr.microsoft.com | Microsoft Container Registry |
| 443 | SSL | Edge Gateway | *.data.mcr.microsoft.com | Data endpoint providing content delivery |
| 443 | SSL | Edge Gateway | *.cdn.azcr.io | Deploy modules from the Marketplace to devices |
| 443 | SSL | Edge Gateway | global.azure-devices-provisioning.net | Device Provisioning Service access |
| 443 | SSL | Edge Gateway | *.azurecr.io | Personal and third-party container registries |
| 443 | SSL | Edge Gateway | *.blob.core.windows.net | Download Azure Container Registry image deltas from blob storage |
| 5671, 8883, 443 | AMQP, MQTT, AMQP over WS | Edge Gateway | *.azure-devices.net | IoT Hub access |
| 443 | SSL | Edge Gateway | *.docker.io | Docker Hub access |
| 443 | SSL | Edge Gateway | *.ysoft.cloud | Platform |
| 2560 | TCP | Edge Gateway | Primary SAFEQ Cloud Server | A secondary server communicating with the primary SAFEQ Cloud server for messaging exchange |
| 7300 | TCP HTTPS | Edge Gateway | Primary SAFEQ Cloud Server | A secondary server communicating with the primary SAFEQ Cloud server API |
| 123 | UDP NTP | Edge Gateway | *.google.com (or anything else you will set up on the OMNI Bridge device) | NTP server (time{1-12}.google.com) or any chosen NTP server |
Terminal Deployment Tool to Printer
Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 58070 | TCP HTTPS | Terminal Deployment Tool | Printer (FUJIFILM BI only) | Connection for pushing configuration to FUJIFILM BI devices |
| 443 | TCP HTTPS | Terminal Deployment Tool | Printer | Connection for installing terminal over HTTPS |
| 80 | TCP HTTP | Terminal Deployment Tool | Printer (Ricoh only) | Connection for installing terminal over HTTP |
Mobile device to built-in DNS
| Port | Protocol | From | To | Description |
|---|---|---|---|---|
| 8053 | UDP, TCP | Mobile device | SAFEQ Cloud Mobile Print Service | Needed for AirPrint via DNS-SD (this only applies to Secondary SAFEQ Cloud Servers) |
| 53 | UDP, TCP | Mobile device | SAFEQ Cloud Mobile Print Service | Needed for AirPrint via DNS-SD (this only applies to Secondary SAFEQ Cloud Servers) |