Konica Minolta IWS Gen 2 Cloud Terminal with device locking (IWS Service Platform integration)

The feature is under KmIwsServicePlatformEmbedded feature flag and under a beta program. If interested, please register at https://www.ysoft.com/safeq/beta-testing.

Card login is fully supported if the Card Reader is set to Keyboard mode. KM Mode (also known as Loadable Driver Mode) is also supported, but only when the terminal is in kiosk mode.

Prerequisites

• MFD Network Configuration:

• License with a "KmIwsServicePlatformEmbedded" feature flag
  You can check if the feature is enabled by scrolling down on the Overview page. It must be present under the Account or Inherited features.
  

  

• IWS Service platform application is installed on the MFD (usually installed using KM Marketplace on MFD, valid KM Marketplace account needed)

• KM Cloud terminal installed (minimal version 2025.03.02, a guide is available here: Konica Minolta IWS Gen 2 Cloud Terminal)

• Network visibility from MFD to cloud servers

Setup

1. Open IWS Service PF application on the MFD
   

   

   
   
   

2. Prepare configuration values for the next step to avoid machine logout timeout.
   You will have to enter the tenant domain three times, the API key of embedded type twice and change "Authorization Server Parameter".
   
   <customer-domain>: Go to Settings > Customer account and obtain a domain from the Domains list
   

   

   
   
   <embedded type API KEY>: Create a new API key under Security > API keys > Add, select Embedded type and note the API key value.
   

   

3. Click on three dots in the upper left corner, open Administrator Setting, and Login by Administrator Password 
   (use the admin MFD password).
   

   

   

4. Go to OpenAPI Gateway > External Server Communication Settings

5. Fill in the following fields and click save: 
   WebSocket Endpoint URL:  <customer-domain>
   WebSocket Endpoint Port: 443 (or 8715 if test environment does not support 443)
   WebSocket LoginName: fill with any character, such as “t”. The value is mandatory but not used.
   WebSocket Password: <embedded type API KEY>
   Authorization Server Hostname: <customer-domain>
   Authorization Server Parameter: /ispf/v1/get_token
   Authorization Server Endpoint Port: 443 (or 8705 if test environment does not support 443)
   API Server Hostname: <customer-domain>
   API Server Port Number: 443 (or 8705 if test environment does not support 443)
   Client Secret Password: <embedded type API KEY>
   Certificate Verification Settings:  leave on True (or set False in a testing environment)
   
   

   

   

   

   
   
   

6. Login as an administrator to a web UI and check the Printers tab.

   There should be a printer with name MFD with IWS Service Platform <mfd-serial-number> which has assigned IWS Service Platform Embedded configuration.
   

   

   
   
   

7. Go to the Embedded clients and select Deployment actions 

   

   for IWS Service Platform

   1. If the printer has the same machine admin password as default (1234567812345678) the Embedded is automatically installed and the MFD is locked.
      

      

      
      

      

      
      
      

   2. If the password differs the automatic installation fails and you need to change the Device admin password to the correct value in Embedded configuration > Device admin password
      

      

      
      
      

   3. You can configure "Type of login" here (Credentials or PIN).

8.  If the Device admin password is set correctly, the MFD can be Locked by the Install and configure button and also Unlocked by the Uninstall button.
   

   

Troubleshooting

If these steps don't help, please contact support.

• Printer is not created automatically - possible causes:

  • Printer with the same serial number already exists (for example from a previous Cloud terminal deployment):

    • Either change its embedded configuration to IWS Service Platform and trigger the installation under Deployment actions of the embedded template ( 

      

      icon)

    • Or delete the existing printer and restart the MFD to trigger automatic creation again

  • Wrong domain in the configuration - check if it was entered correctly

  • Wrong API key in the configuration - check if it was entered correctly

  • IWS Service PF application was previously configured to a different environment - please restart the MFD after the configuration.

• Printer is created, but cannot be installed:

  • Please see the exact message under Printers > Embedded templates > Deployment actions of the IWS Service Platform embedded template (

    

    icon), follow the instructions and manually trigger the installation from deployment actions again.

Supported Firmware Versions

Limitations

General

• Configuration to the secondary gateway server is not supported. 

• The software logout button

  

   is not present. Logout is done only when the user clicks the HW logout button.

Authentication

• Card authentication is active regardless of the chosen login method. It can be disabled by unplugging the card reader or turning it off in the MFD settings.

• Card authentication registration is supported in keyboard mode. KM Mode (also known as Loadable Driver Mode) is also supported, but only when the terminal is in kiosk mode.

Accounting

• If you are using Cloud Terminal version 2024.11.01 or older with SQC server version 2024.11.14 or newer, the Copy job accounting from Cloud Terminal will be doubled in Reports.

• If you are using Cloud Terminal version 2025.03.02 or older with SQC server version 2025.03.20 or newer, the Print job accounting from Cloud Terminal will be doubled in Reports.

• Native Scan is not accounted (will change in the future releases)

• External direct print is not accounted (may change in future releases)

Printing

• USB printing is not restricted by USB print permission. Instead, it inherits the release job and color print permissions for black-and-white and color printing, respectively

3rd party limitations

KM IWS Service Platform

• USB import - Currently not implemented feature.