RICOH Streamline NX Install & Config Guide

Copyright 2014
Streamline NX
Server Software
I n s t a l lation &
Configuration
Guide
Complete Document Capture, Distribution
& Output Management Solution
Copyright
Copyright 2014, Ricoh Company Ltd.
Trademarks
Adobe, Acrobat, Reader, and PostScript are either registered trademarks or trademarks of Adobe Systems
Incorporated in the United States and/or other countries.
Microsoft, Windows, Windows Vista, Windows Server, SQL Server, Active Directory, Excel and
Internet Explorer are either registered trademarks or trademarks of Microsoft Corporation in the United States
and/or other countries.
Intel, Xeon and the Intel logo are trademarks of Intel Corporation in the United States and other countries.
Java is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their
respective owners.
VMware and VMware ESX Server are registered trademarks or trademarks of VMware Inc.
Firefox is a registered trademark of the Mozilla Foundation.
Other product names used herein are for identification purposes only and might be trademarks of their respective
companies. We disclaim any and all rights to those marks.
Disclaimers
To the maximum extent permitted by applicable law:
The supplier shall not be liable for the result of operation of this software or the use of this document.
The supplier shall not be liable to you for damages or loss of any document or data produced by using this
software.
The supplier shall not be liable to you for any consequential, incidental or indirect damages (including, but not
limited to, damages for loss of profits, business interruption or loss of business information, and the like) caused
by failure of this software or loss of documents or data, nor for any other damages arising out of the use of this
software, if the supplier has been advised of the possibility of such damages.
Some illustrations or explanations in this guide may differ from your product due to improvement or change in the
product.
The content in this document is for information only, and is subject to change without notice. While reasonable
efforts have been made in the preparation of this document to assure its accuracy, Ricoh Americas Corporation, its
contractors and partners, assume no liability resulting from errors or omissions in this document or from the use of
the information contained herein.
No part of this document may be duplicated, replicated, reproduced in any form, modified or quoted without prior
consent of the supplier.
It is possible that any document or data stored in the computer will be damaged or lost by user error during
operation or software error. Be sure to back up all important data beforehand. Important documents and data
should always be copied or backed up. Documents and data can be lost because of malfunction or human error.
Furthermore, the customer is responsible for protection measures against computer viruses, worms, and other
harmful software.
Revision History
SL-NX Component Document
Date Version Source Version
Oct. 2013 ADM v2.2.1.0 Ricoh Americas Corporation (RAC) Technology Center Rev. 1 (Apr. 2014)
Oct. 2013 AAM v2.2.0.0
Dec. 2013 SFM v2.2.1.0
Dec. 2013 SPM v2.2.1.0
Dec. 2013 RG v2.2.1.0
Contents of this document are subject to change without notice. Some illustrations or explanations in this
guide may differ from your product due to enhancements or changes in the product.
Adobe Acrobat or Adobe Reader is required to view PDF documents. Helpful Hint: When using internal
hyperlinks in this PDF document, press [Alt] + [] to return to the page you were on.
Ricoh Solutions Support Help Desk: 1 (888) 424-1573
3
Contents
CONTENTS
Preface................................................................................................................... 9
Guides for This Solution .................................................................................................................. 9
Acronym Reference ......................................................................................................................... 9
CHAPTER 1: ABOUT STREAMLINE NX .................................................................... 10
1.1 Introduction ............................................................................................................................ 10
1.2 Component Software Overview ............................................................................................ 10
1.3 Streamline NX Features, At-a-Glance .................................................................................... 12
CHAPTER 2: INSTALLATION PREREQUISITES ......................................................... 13
2.1 Server Requirements .............................................................................................................. 13
2.2 SQL Server Requirements ...................................................................................................... 14
2.3 System Capabilities & Server Sizing ....................................................................................... 15
Scenario A Small Enterprise......................................................................................................... 15
Scenario B Large Enterprise......................................................................................................... 15
2.4 Additional Installation Considerations .................................................................................. 17
2.5 SL-NX Workflow Summary, Step by Step .............................................................................. 21
CHAPTER 3: INSTALLING SERVER SOFTWARE (All steps are required) ................... 22
Step 1: Install SQL Server .............................................................................................................. 22
Enable SQL Server Protocols .......................................................................................................... 30
Start SQL Server Agent & SQL Server Browser ........................................................................ 31
Restart SQL Server ................................................................................................................... 31
Step 2: Download Zip Folder ......................................................................................................... 32
Step 3: Create Databases .............................................................................................................. 33
3.1 Administration Manager Database ......................................................................................... 34
3.2 Authentication and Accounting Manager Database ............................................................... 36
3.3 Secure Print Manager Database .............................................................................................. 38
3.4 Report Generator Database .................................................................................................... 41
Step 4: Install SL-NX Software Components................................................................................ 44
4.1 Administration Manager Installation ...................................................................................... 44
4.2 Authentication and Accounting Manager Installation ............................................................ 49
4.3 Scan and Fax Manager Installation (Optional Component) .................................................... 54
4.4 Secure Print Manager Installation (Optional Component)...................................................... 60
4.5 Report Generator Installation ................................................................................................. 65
Step 5: Start Services .................................................................................................................... 70
4
Streamline NX Server Software Installation & Configuration Guide
Contents
Step 6: Activate Licenses .............................................................................................................. 72

ADM/AAM/RG Activation (Base License) ....................................................................................... 72
Restart ADM Windows Service ................................................................................................ 74
SPM Activation (Option License) .................................................................................................... 76
SFM Activation (Option License) .................................................................................................... 76
SFM Plugin Activation .............................................................................................................. 77
Checking Activation List.................................................................................................................. 82
License Activation/Deactivation Error Messages ........................................................................... 82
CHAPTER 4: CONFIGURING SERVER SOFTWARE (Asterisk [*] = required procedure] .... 84
Administration Manager ............................................................................................................... 85
Starting Administration Manager................................................................................................... 85
AdminTool Login ...................................................................................................................... 85
AdminTool Logout.................................................................................................................... 86
*Configure Authentication Profile ................................................................................................. 87
Step 7: Configure Devices.............................................................................................................. 90
Add a Discovery Setting.................................................................................................................. 91
*Add Devices .................................................................................................................................. 94
Edit Devices Default & Custom Properties ........................................................................... 96
Delete Devices ......................................................................................................................... 98
Group Devices ................................................................................................................................ 99
Edit Device Groups................................................................................................................. 101
Delete Device Groups ............................................................................................................ 102
Add a Filter ................................................................................................................................... 103
Edit a Filter ............................................................................................................................. 104
Delete a Filter......................................................................................................................... 104
Export/Import Device Information............................................................................................... 105
Export Device Information ..................................................................................................... 105
Import Device Information .................................................................................................... 107
*Add Device Software (SDK) Applications.................................................................................... 109
Delete SDK Applications......................................................................................................... 111
*Add a Device Software Template ............................................................................................... 111
Edit a Device Software Template ........................................................................................... 114
Copy a Device Software Template ......................................................................................... 114
Delete a Device Software Template ...................................................................................... 115
*Add/Execute a Device Software Policy....................................................................................... 116
Edit a Device Software Policy................................................................................................. 119
5
Contents
Delete a Device Software Policy ............................................................................................ 120

Add Schedule to Device Software Policy Setting ................................................................... 121
Edit a Schedule....................................................................................................................... 123
Delete a Schedule .................................................................................................................. 123
Executing a Policy Setting ...................................................................................................... 124
*Add a Device Preference Template ............................................................................................ 125
Edit a Device Preference Template........................................................................................ 127
Copying a Device Preference Template ................................................................................. 127
Export/Import a Device Preference Template....................................................................... 128
Delete a Device Preference Template ................................................................................... 129
*Add/Execute a Device Preference Policy ................................................................................... 130
Edit a Device Preference Policy ............................................................................................. 133
Delete a Device Preference Policy ......................................................................................... 133
Step 8: Configure Servers ........................................................................................................... 134
*Add Servers................................................................................................................................. 134
*Confirm ADM Connection to Servers................................................................................... 136
Edit Servers ............................................................................................................................ 139
Group Servers ........................................................................................................................ 139
Edit Server Groups ................................................................................................................. 141
Delete Server Groups ............................................................................................................. 141
Delete Servers ........................................................................................................................ 142
*Add a Server Preference Template ............................................................................................ 142
Edit a Server Preference Template ........................................................................................ 146
Copy a Server Preference Template ...................................................................................... 147
Export/Import a Server Preference Template ....................................................................... 148
Delete a Server Preference Template.................................................................................... 149
*Add/Execute a Server Preference Policy .................................................................................... 150
Edit a Server Preference Policy .............................................................................................. 152
Delete Server Preference Policy ............................................................................................ 153
Step 9: Configure SFM and SPM Servers for AAM .................................................................... 155
SPM Server Configuration ............................................................................................................ 155
SFM Server Configuration ............................................................................................................ 157
*Create SFM Profile...................................................................................................................... 159
Configure Scan to Folder........................................................................................................ 159
Configure Scan to Mail ........................................................................................................... 163
6
Contents
Step 10: Configure Report Generator ........................................................................................ 167

*RG Database Connection............................................................................................................ 169
SQL Server 2012 Express Edition Setting ...................................................................................... 170
*AAM/ADM Synchronization ....................................................................................................... 170
Step 11: Install & Configure Print Drivers & Ports .................................................................... 174
*Download Universal Print Driver ................................................................................................ 174
Configure SL-NX SPM Port ............................................................................................................ 176
Configure SL-NX SPM Direct Port ................................................................................................. 179
Universal Print Driver Authentication Settings ............................................................................ 185
Configure SL-NX SPM External Port Settings ................................................................................ 186
Step 12: Test System .................................................................................................................. 190
Test Authentication ...................................................................................................................... 190
Manual Login ......................................................................................................................... 190
Card Login .............................................................................................................................. 192
Test Scanning................................................................................................................................ 193
Test Secure Print Release ............................................................................................................. 194
Test Report Generation ................................................................................................................ 195
Appendix A: Installation Restrictions ................................................................. 196

Administration Manager ............................................................................................................. 196
Accounting and Authentication Manager .................................................................................. 196
Scan and Fax Manager ................................................................................................................ 197
Secure Print Manager .................................................................................................................. 197
Report Generator ........................................................................................................................ 198
Appendix B: Configuring Windows Firewall ....................................................... 199
Appendix C: Enabling .NET Framework .............................................................. 202
Appendix D: Updating Microsoft SQL Server 2008 .............................................. 205
Appendix E: Enabling Flash Plugin for IE (on Win 2012) ..................................... 206
Appendix F: Configuring Proxy Server................................................................ 209
Appendix G: Managing Software Components .................................................. 210
Uninstall Software ....................................................................................................................... 210
Deactivate Licenses ...................................................................................................................... 210
Administration Manager Uninstall ............................................................................................... 212
Authentication and Accounting Manager Uninstall ..................................................................... 214
Scan and Fax Manager Uninstall .................................................................................................. 214
7
Contents
Secure Print Manager Uninstall ................................................................................................... 215

Report Generator Uninstall .......................................................................................................... 217
Update Software ......................................................................................................................... 218
Procedure v2.1.2 to v2.2.0 ........................................................................................................... 218
Procedure v2.1.0 to v2.2.0 (Direct Update) ................................................................................. 219
Procedure v2.0.x to v2.2.0 (Direct Update).................................................................................. 220
Troubleshooting AAM-S ConvertTool .......................................................................................... 221
SFM v2.2.0 Barcode Engine Replacement .................................................................................... 222
Appendix H: Installing & Configuring AAM-LCS Failover Server ......................... 223
Step 1: Create AAM-LCS Database.............................................................................................. 223
Step 2: Install AAM Software ...................................................................................................... 226
Step 3: Configure AAM-LCS Windows Services .......................................................................... 230
Appendix I: Configuring SFM Failover Server ..................................................... 232
Secondary Delivery Server Workflow ......................................................................................... 232
Registering a Secondary Delivery Server .................................................................................... 232
When Using a Secondary Delivery Server .................................................................................... 234
Removing a Secondary Delivery Server ........................................................................................ 235
Making a Secondary Delivery Server the Primary Delivery Server............................................... 236
Appendix J: Managing Certificates & Private Keys ............................................. 237
Managing Site Certificates for RICOH Streamline NX Components .......................................... 237
Managing a Server Certificate for SFM....................................................................................... 238
Obtaining and Installing a Server Certificate ................................................................................ 239
IIS - SSL On/Off ............................................................................................................................. 243
Managing a Site Certificate for SFM ........................................................................................... 244
Importing a Site Certificate .......................................................................................................... 244
Managing Private Keys for SFM .................................................................................................. 245
Importing a Private Key ................................................................................................................ 245
Appendix K: Troubleshooting Checklist - Solutions ............................................ 246
Appendix L: Troubleshooting Logs .................................................................... 248
Download AAM/SPM Logs .......................................................................................................... 248
Download SFM Logs .................................................................................................................... 251
Appendix M: Glossary ........................................................................................ 253
Appendix N: Streamline NX Site Survey ............................................................. 254
8
Streamline NX
Preface
The purpose of this document is to provide Ricoh Solution Analysts and customer IT
professionals (herein called system administrator) with the instructions needed to
successfully install and configure Streamline NX in single- and multiple-server environ-
ments. Please read all guides carefully before proceeding with deployment.
Guides for This Solution

The following guides are available for RICOH Streamline NX:
RICOH Streamline NX Server Software Installation & Configuration Guide

(this document) This guide explains how to perform a complete installation and
configuration of SL-NX software, including database preparation, license
activation, as well as device and server setup.
RICOH Streamline NX Administrators Guide This guide explains how to

manage and check status of Streamline NX devices and servers.
RICOH Streamline NX Users Guide This guide explains how to log in to a

device, scan documents and manage print jobs.
RICOH Streamline NX Reports Generator Administrators Manual, User

Manual, Reports Guide These guides explain how to configure, generate and
classify reports.
Acronym Reference
Acronym Full Name
ADM Administration Manager
AAM Authentication and Accounting Manager
AAM-E Authentication and Accounting Manager Embedded
AAM-S Authentication and Accounting Manager Server
SFM Scan and Fax Manager
SFM-E Scan and Fax Manager Embedded
SFM-S Scan and Fax Manager Server
SPM Secure Print Manager
SPM-E Secure Print Manager Embedded Client
SPM-S Secure Print Manager Server
RG Report Generator
Note: Also see Appendix M: Glossary.
9
About Streamline NX
Streamline NX
ABOUT STREAMLINE NX
1 1.1 Introduction
RICOH Streamline NX (herein called SL-NX) combines Print, Scan, Fax, Accounting
and Device Management applications into one simple to use Enterprise Content
Management (ECM) solution. With a unified interface, SL-NX helps both users and
Administrators enhance business efficiency.
Each function of SL-NX helps to reduce TCO, enhance security and ease administrative
burden through advanced document capture, distribution and output management of
large enterprise MFP/printer (device) fleets.
Whether network devices are distributed geographically, or contained within one

location, SL-NX offers powerful, centralized controls for user authentication, secure
printing, flexible scanning, quota management, comprehensive reporting, and much
more.
1.2 Component Software Overview

As an integrated all-in-one solution, SL-NX combines
five key software components (also called applications) in
a single, convenient platform. This enables organizations
of all sizes to manage and monitor document-related costs,
device usage, sustainability and security more efficiently
and effectively.
Administration Manager (ADM) Enables the

Administrator to manage various SL-NX components, e.g., establish
system settings, register and configure devices and servers, manage
print jobs and logs, as well as access administrative tools within
Authentication & Accounting Manager, Secure Print Manager and Scan
& Print Manager.
Authentication and Accounting Manager (AAM) Enables the Administrator

to manage authentication settings for user login at the device (with
embedded AAM), as well as track usage and costs by user, set limits
and establish printing rules, e.g., color usage, duplex, page limits by
device, user quota chargebacks, etc.
10
About Streamline NX
Report Generator (RG) Enables the Administrator to configure, generate and

classify reports. For example, reports can be run based on information
gathered from devices, such as device status, counter data, job logs, etc.
Templates can also be used to automatically generate reports
according to a pre-set schedule.
Scan and Fax Manager (SFM) Enables the Administrator to manage settings
that will route scanned documents (electronic files) from a device
(with embedded SFM) to email addresses, network folders, fax
servers, as well as Microsoft SharePoint and other line-of-business
applications.
Optional SFM Plugins
Send to RightFax Barcode
Send to DocumentMall ZoneOCR
Send to MS Exchange ZoneOCR for HotFolder
Send to FileNet Send to SharePoint
HotFolder Send to SharePoint (Enhanced)
Secure Print Manager (SPM) Enables the Administrator to create a secure

printing communication path between the SPM Server and device
(with embedded SPM).
MFP User Interface With Embedded SFM and SPM
Each of the five components runs as a service on a Windows server platform and
may be installed on a single server or across multiple servers, if required. Each service
runs within a Java Tomcat web instance, as a self-contained environment, and
therefore requires no underlying web infrastructure to be in place prior to
deployment.
11
About Streamline NX
1.3 Streamline NX Features, At-a-Glance

Component Features
Scanning and Routing
Device Management
Admin & Reporting

Secure Printing
Authentication
Accounting
Functions (partial list)
Scan to image file formats, e.g., TIFF, JPEG, PNG, DCX, DBP, GIF
PDF/A archival file format for electronic document storage
OCR with support for editable format, e.g., PDF, Word, Excel, Word Perfect
Auto-route incoming faxes
1
Optional integration with SharePoint
Optional integration with RightFax Server1
1
Optional scan to HotFolder
Optional linear and 2D barcode support1
128-bit encrypted transmission
Release confidential documents at the MFP with user ID/password
Held print jobs are encrypted
Authentication at the MFP by card, network log-in or pin
Card authentication with a wide range of proximity cards supported
Issued cards can manage user privileges
Device monitoring, total print meters, toner, paper levels, other basic function 2
Collect detailed meter, alert and status information 2
Batch configuration 2
Remote fleet management 2
Establish charge-backs
Set budgetary account limits
Pop-up messages provide notification to users
Set roles-based administrative levels
Establish printing rules to allow/restrict certain settings on devices
Manage user privileges
Access and audit job logs by user
1
Requires optional plugin.
2
Ricoh devices.
12
SSttrreeaam
mlliinnee N
NXX
2 INSTALLATION PREREQUISITES
Prior to installation of SL-NX software components, please review the following
requirements to ensure optimum operating conditions.
2.1 Server Requirements

All five SL-NX components can be installed on one or more servers, with support for up to 5,000 devices
provided that the servers meet the following requirements:
Authentication
Administration and Accounting Secure Print Scan and Fax Report
Manager Manager Manager Manager Generator
Specification (ADM) (AAM) (SPM) (SFM) (RG)
PC PC/AT Compatible
CPU Intel Xeon Processor 5000 Series 3.0 GHz (2 core) or higher
Main Memory 16GB or more
Software 600MB or more 600MB or more 600MB or more 1GB or more 600MB or more
HDD Data 1
1GB or more 2GB or more 250GB or more 2GB or more 1GB or more
Storage
Microsoft Windows Server 2008 Standard/Enterprise Edition SP2 [32-bit/64-bit (using WOW64])
Operating Systems Microsoft Windows Server 2008 R2 Standard/Enterprise/Datacenter Edition SP1 (64-bit)
Microsoft Windows Server 2012 Standard/Datacenter Edition (64-bit)
Monitor Resolution 1024 x 768 pixels or more

2
Web Server Built-in (Jetty)
SQL Server 2008 & 2008 R2 Standard/Enterprise Editions Same as
Database Engine 3
Not Used
SQL Server 2012 Standard/Enterprise/Express Editions ADM/AAM/SPM
VMWare ESXi Server 4.0/5.0/5.1.0
Virtual Environment Microsoft Windows 2008 Hyper-V 1.0 & 2008 R2 Hyper-V 2.0
Microsoft Windows Server 2012 Hyper-V
Authentication
Active Directory (Kerberos), LDAP v3 (AD and other), and local user accounts
Environments
1
Excluding database storage.
2
SFM supports both Jetty and Microsoft IIS web servers.
3
If using Microsoft SQL Server 2012 Express Edition, see 2.4 Additional Installation Considerations.
Note:
For VMWare, be aware that insufficient virtual memory may prevent application startup.
RG requires that JavaScript and cookie settings are enabled within web browser.
13
Installation Prerequisites
2.2 SQL Server Requirements

SL-NX requires access to a Microsoft SQL Server, in order to store and retrieve data from the databases.
SQL Server software can be installed on the same server that will run SL-NX (locally-installed) or a remote
SQL Server. Existing SQL infrastructures are supported.
Important:
During the first installation of SQL Server 2008/2012, the "Named instance" (StreamlineNX) needs to be
created, which provides dedicated space for SL-NX data. You must create a named instance, because the
default SQL instance is not supported by SL-NX components. Note : If SQL Server is currently installed,
without the "Named instance, you must run the SQL Server installer again, to create the named instance
(StreamlineNX).
When SL-NX is installed on multiple servers, SQL Server must be available (locally or remotely) for:
ADM Server
AAM Server
SPM Server
RG Server
SL-NX does not support the database mirroring capabilities of SQL Server 2008/2012.
Install the correct database version for the server architecture (e.g., x64 vs. x86).
For supported SQL Server versions, see 2.1 Server Requirements.
For SQL Server 2012 hardware and software requirements, go to http://msdn.microsoft.com/en-
us/library/ms143506.aspx.
Sample Database Structures (v2.2.0 or later)

Database Description Structure
Single Server Each SL-NX component,
database and database
instance shares the same Database Instance
server (physical or virtual).
Database
Remote Database The database and database

Server instances exist on a single
remote database server,
separate from SL-NX
components, which can be on
the same or separate servers.
Individual Servers Each SL-NX component has its

own server, database and
database instance.
14
2.3 System Capabilities & Server Sizing

Streamline NX is a powerful, fully-scalable solution. As such, many factors need to be taken into account
prior to installation. This includes gathering information from disparate parts of the organization (see
Streamline NX Site Survey). This will ensure that the design maximizes system performance, while aligning
with key business objectives, including optimization of document workflow, productivity, security and return
on investment.
To give you a general idea about the number of servers and bandwidth required to support potential load,
please review the following two scenarios:
Scenario A Small Enterprise

A customer with 1,000 employees and 100 devices has Copy, Print and Scan volumes of 50K, 200K and
100K, respectively. With only 10% of print jobs sent directly to devices, 90% are processed through a server.
Further, 75% of all scanning requires OCR, with conversion to PDF.
Based on these Input Values (in yellow), the Streamline NX Calculation Sheet indicates the Estimated
Calculation (in turquoise), with required daily bandwidth and annual database sizes of approximately 1.5GB
and 3.2GB, respectively.
Input Values Estimated Calculation (Result)

Number Number Total Percentage Percentage Total Total DB Number Number Number of
of Users of Copy/Print/Scan of of Scan Bandwidth Size of SPM of SFM Jobs per
Devices Volume Serverless Jobs OCRd daily Annually Server(s) Server(s) Minute
(Pages per Printing w/o w/o per Server
Month) (Direct Failover Failover
Print) Server(s) Server(s)
1000 100 Copy = 50,000 10% 75% 1544MB 3184MB 1 1 SFM Non
Print = 200,000 OCR
Scan = 100,000 Jobs=0.79
SFM OCR
Jobs =2.35
SPM Jobs
=2.68
Source : Streamline NX Calculation Sheet
The key result from the Estimated Calculation is the number of servers needed for this installation 1 server
for Secure Print Manager (SPM) and 1 server for Scan and Fax Manager (SFM), without failover. The SFM
Server can process .79 and 2.35 jobs per minute, for non-OCR and OCR scans, respectively, while the SPM
Server can process almost 3 jobs per minute. Should the customer need processing times greater than these
estimated values, additional servers are required.
Scenario B Large Enterprise

A customer with 50,000 employees and 5,000 devices has Copy, Print and Scan volumes of 2.5M, 10M and
2M, respectively. 75% of all print jobs are sent directly to devices, so 25% are processed through a server.
Only 10% of scanning requires OCR, with conversion to PDF.
15
Based on these Input Values (in yellow), the Streamline NX Calculation Sheet indicates the Estimated
Calculation (in turquoise), with required daily bandwidth and annual database sizes of approximately 37GB
and 125GB, respectively.
Input Values Estimated Calculation (Result)

Number Number Total Percentage Percentage Total Total DB Number Number Number of
of Users of Copy/Print/Scan of of Scan Bandwidth Size of SPM of SFM Jobs per
Devices Volume Serverless Jobs OCRd daily Annually Server(s) Server(s) Minute
(Pages per Printing w/o w/o per Server
Month) (Direct Failover Failover
Print) Server(s) Server(s)
50,000 5,000 Copy = 2,500,000 75% 10% 36832MB 125296MB 2 6 SFM Non
Print = OCR
10,000,000 Jobs=9.38
Scan = 2,000,000 SFM OCR
Jobs =1.05
SPM Jobs
=18.56
Source : Streamline NX Calculation Sheet
The key result from the Estimated Calculation is the number of servers needed for this installation 2
servers for Secure Print Manager (SPM) and 6 servers for Scan and Fax Manager (SFM), without failover.
The SFM Server can process 9.38 and 1.05 jobs per minute, for non-OCR and OCR scans, respectively,
while the SPM Server can process over 18 jobs per minute. Should the customer need processing speeds
greater than these estimated values, additional servers are required.
Important:
As the complexity of the workflow increases (OCR, PDF, High Compression, Archiving), the time taken
to complete a transaction increases, as does the server load. Typically, Ricoh recommends a maximum of
500 devices per SFM Server.
For the purposes of calculating network impact for scanning, a single page scanned at 300dpi, in full color,
to non-searchable PDF will produce a payload of 307KB.
Typically, for best performance SFM should be implemented with a single-core processor and configured
using the native load-balancing architecture built into the product.
Note:
Ricoh Solution Consultant The Streamline NX Calculation Sheet (XLS) is available to help determine the
number of servers and bandwidth required to support potential load. For details on server sizing, also refer
to the Streamline NX Planning & Deployment Guide (PDF). Both are posted on the TSRC website as
KnowledgeBase Answer ID 172932/FAQ ID 172856.
Ricoh Customer If you need additional information, including a detailed breakdown of system
requirement based on your specific environment, please contact your Ricoh Solution Consultant.
16
2.4 Additional Installation Considerations

To follow are other important considerations when deploying SL-NX.
Topic Description
Network
Bandwidth Network bandwidth must be ensured to allow adequate performance for authen-
tication and print job transfer. Any implementation of Quality of Service (QoS) on the
network must not force printing to a low priority, if performance is to be maintained.
See 2.3 System Capabilities & Server Sizing.
Firewall Settings Always apply firewall exceptions to the ports used by SL-NX. If exceptions are
improperly configured, devices wont be able to connect to individual components. For
details, see Appendix B: Configuring Windows Firewall.
Failover If you want to use the Local Cache Server function of AAM, see Appendix H: Install-
ing & Configuring AAM-LCS Failover Server.
If you want to use the failover functions for Scan and Fax Manager, see
Appendix I: Configuring SFM Failover Server.
Security Update If you installed security update 956572 on the server, please install security update
971812 before SL-NX installation.
White Paper An extensive library of Security and Performance White Papers are available through
the TSRC website.
Server
Structure SL-NX can be installed on a single server or multiple servers. With multiple servers,
AAM/SPM/SFM servers can be used, with a mix of remote and local databases. ADM
and RG, however, must be only one per SL-NX component structure. See Sample
Database Structures.
Server Sizing See 2.3 System Capabilities & Server Sizing.
Operating System Currently, 64-bit installation is supported for Windows 2008 R2 and Windows 2012.
During SL-NX software component installation, 64-bit installation is automatically
selected for AAM and SPM, while 64-bit is selected manually for ADM, SFM and RG.
For all other OS (e.g., even Windows 2008 64-bit), the 64-bit installation option is
disabled.
SQL Database For SL-NX v2.2 or later, RG can use the same database instance as ADM/AAM/SPM
database. It is strongly recommended to use the same database instance between RG
and ADM/AAM/SPM.
ADM, AAM, SPM and RG Databases cannot use the Microsoft SQL Servers default
instance; a named instance must be created, e.g., StreamlineNX.
Remote SQL database creation is not supported, i.e., Create Database procedures must
be executed directly on the server that will host the database.
SQL Server 2008 R2 requires Microsoft .NET Framework. See Appendix C: Enabling
.NET Framework.
When using SQL Server 2012 Express Edition, additional rules apply:
RG Server and RG Database must be installed on the same physical server; RG
cannot use Express Edition as a remote database.
17
Before installation of RG, Windows scheduler service must be running.

RG service requires Administrator rights in order to configure the Microsoft
Windows scheduler service.
The total amount of data that can be stored is 10GB.
The database instance used by RG can also be used by ADM and AAM.
Note: For details on instance names, access the following URL:
http://msdn.microsoft.com/en-us/library/ms143531(SQL.90).aspx
For details on database names, access the following URL:
http://msdn.microsoft.com/en-us/library/ms175874(SQL.90).aspx
SQL Server Agent SQL Server Agent is required when SQL Server Enterprise/Standard Edition is used.
RG needs SQL Server Agent service to be running on ADM and AAM Database
Servers.
SQL Server Browser SQL Server Browser must be enabled (it is disabled by default).
SL-NX Web Browser The browser used to access SL-NX Administration Manager must have Flash installed.
Note: Flash support can come from three sources. If running Windows 2008, install
the Flash Player that comes with SL-NX or download the software from Adobes
website. If running Windows 2012, enable Windows Desktop Experience. For details
on Desktop Experience, see Appendix E: Enabling Flash Plugin for IE (on Win 2012).
Add the SL-NX URL as a trusted site, from [Control Panel] > [Internet Options].
Internet Explorer 11 If using IE 11, Protected Mode must be unchecked in [Internet Options]. Otherwise
Web Browser the ADM, AAM, SPM and/or SFM web pages wont display. For details, see IE 11
Protected Mode.
Web Server Port When installing SL-NX software on the same server, you must use a different
Numbers HTTP/HTTPS port number for each application. Component and recommended port
numbers are as follows:
Component Port Number (HTTP/HTTPS)
ADM 8080/8443
AAM 8081/8444
SFM 8082/8445
SPM 8083/8446
RG 8084/8447
Note: If the above ports are used, then the resulting server URLs will be consistent, for
example:
ADM: http://<server Name>:8080/main/AdminTool.html
AAM: http://<server Name>:8081/aam-s
SFM: http://<server Name>:8082/sfm
SPM: http://<server Name>:8083/spm-s
RG: http://<server Name>:8084/rg/login
Important: See Firewall Settings, above.
Database Migration Though SL-NX server instances are similar to existing solutions, migration from those
products is not supported.
Microsoft DTC If RG Server is deployed on a server other than AAM and Administration Manager
databases, the DTC service (Distributed Transaction Coordinator) must be running on
18
Service (MSDTC) all AAM Database, ADM Database and RG Database Servers.
Web Server Type SL-NXs Scan and Fax Manager component supports both Jetty and Microsoft Internet
Information Services (IIS) web servers1. All other components run on Jetty only. If IIS
will be used for SFM, you must set up IIS on the server before installing SFM software.
Secure Sockets Layer When using SSL, a certificate is required for ADM and SFM. Certificates are pre-
(SSL) installed for AAM and SPM, which can be changed through Certificate Management.
See Appendix J: Managing Certificates & Private Keys.
SL-NX Software
SL-NX Software & Installing RICOH solution consultants should check the TSRC website for the latest SL-
Documentation NX software, update and related documentation.
Software Download For installing technicians, it is highly recommended that the zip folder download (e.g.,
thumb drive) takes place before arrival at customer site.
Access Privileges To install SL-NX software, you must have local Administrator rights. If User Account
Control (UAC) is enabled, Run as administrator must be used; right-click .exe file, and
then click Run as administrator.
Installation For Windows 2008 or later, it is recommended that you install using the Run as
administrator option (see above).
Authentication Type Pre-determine the mode to use for connecting to SQL: Mixed Mode or Windows
Authentication, as this mode must be the same for ADM, AAM and RG Databases.
If you are using SQL Server Authentication, the Authentication Type must be set
to Mixed Mode.
If you are using Windows Authentication, note the following:
The database is accessed by the specified user account; the user must have
database read/write privileges.
The components must be installed by this user. If the installing user does not
have the appropriate privileges, installation will fail; display reads, It failed in
the connection to the Database.
Streamline NX services should be configured to start automatically and use
the specified Windows account.
Default Languages The SL-NX installation program using the default language of the servers operating
system. If the operating system language is not supported, English is used.
The Create DataBase launch and settings screens are displayed in English only;
ReadMe file is displayed in English or Japanese, depending on the software in use.
SL-NX Service After installing SL-NX components, confirm that Windows and SQL services are
Startup running. For details, see Chapter 3, Step 5: Start Services.
License Activation There are four different types of SL-NX product keys, all of which require activation.
1. ADM/AAM/RG (standard base product key)
2. SPM product key (optional)
3. SFM product key (optional)
4. SFM plugin product keys (optional)
Note: For details, see Chapter 3, Step 6: Activate Licenses.
19
Installation Error If any of the following conditions exist, an error message will appear when attempting
Conditions to install the SL-NX software:
A current logged-in user does not have administrative authority.
Other installed SL-NX software is currently running on the computer.
The operating system is not supported. If the operating system check screen
appears, the operating system on which you are attempting to install SL-NX
software is not supported.
If you dont accept terms of licensing agreement, installation cannot proceed.
Hardware
Supported MFPs See TSRC website for the latest information on supported RICOH MFP models. Also,
the SL-NX SDK application must be installed on each device. Also, check that each
device is running the correct Java version.
Printer Driver Install supported printer drivers on the same servers as are running SPM Server, and
Install & Distribution distribute.
Note: For details, refer to RICOH Streamline NX Administrators Guide.
1
SFM supports IIS only.
Important:
Also see Appendix N: Streamline NX Site Survey.
20
2.5 SL-NX Workflow Summary, Step by Step

Helpful Hint: Within this PDF document, search by the asterisk symbol (*) to locate required procedures.
With the exception of character usage, this will quickly locate the steps that are required in order to install
and configure Streamline NX.
21
Installing Server Software
Streamline NX
INSTALLING SERVER SOFTWARE

3 (All steps are required)
Prior to installing the SL-NX software, Microsoft SQL Server must be installed and con-
figured. You will then download the SL-NX zip folder to the server HDD.
Next, you will create databases for ADM, AAM, SPM and
RG components, using the SL-NX installer.
After the databases are created, the SL-NX software can be

installed, started and activated.
Important:
After successful installation of SL-NX, you must
configure each SL-NX components to communicate with
one another and the MFP/printer installed base. For
details, see CHAPTER 4: CONFIGURING SERVER
SOFTWARE.
Step 1: Install SQL Server

This section explains how to install Microsoft SQL Server
2012. For information on installation of SQL Server 2008,
refer to the Microsoft website.
Important:
During the first installation of SQL Server 2012, the "Named instance" (StreamlineNX) needs to be
created, which provides dedicated space for SL-NX data. You must create a named instance, because the
default SQL instance is not supported by SL-NX components. Note : If SQL Server is currently installed,
without the "Named instance, you must run the SQL Server installer again, to create the named instance
(StreamlineNX).
When SL-NX is installed on multiple servers, SQL Server must be available (locally or remotely) for:
ADM Server
AAM Server
SPM Server
Report Generator
SL-NX does not support the database mirroring capabilities of SQL Server 2012 or SQL Server 2008.
If using SQL Server 2012 Express Edition, SQL Server Browser is disabled by default. The browser must
be enabled. When using SQL Server 2012 Express Edition, additional rules apply:
RG Server and RG Database must be on the same physical server.
RG service requires Administrator rights in order to configure the Microsoft Windows scheduler
service.
22
Install the correct database version for the server architecture (e.g., x64 vs. x86).
For SQL Server version support, see 2.1 Server Requirements.
For SQL Server 2012 hardware and software requirements, go to http://msdn.microsoft.com/en-
us/library/ms143506.aspx.
SQL Server Service Accounts:

The domain user created as the Log On user for the SQL services does not have to be a local admin of
the server.
If it is a regular user, the user has to be given full control on the SQL server directory, C:\Program
Files\Microsoft SQL Server.
The domain user created as the Log On user for the SL-NX services does not have to be a local admin of
the server.
If it is a regular user, the user has to be given full control on the Streamline NX directory, C:\Program
Files\Streamline NX.
To install and configure SQL Server 2012, proceed as follows:
1. Insert SQL Server installation media.
2. From root folder, right-click [Setup.exe], and

select [Run as administrator].
Important:
If prompted that .NET Framework is needed, see
Appendix C: Enable .NET Framework.
3. Click [New SQL Server stand-alone].
23
4. Click [OK].
5. Specify SQL Server 2012 edition to install,

and then click [Next >].
6. Read licence agreement, select I accept the

license terms checkbox, and then click
[Next >].
24
7. On Product Updates screen, the latest

available SQL Server updates are displayed.
It is recommended that [Include SQL
Server product updates] remains enabled.
8. Click [Next >].
Download of SQL Server Setup files begins
9. Check Setup Support Rules for any conditions

that must be addressed, and then click [Next >].
25
10. With [SQL Server Feature Installation]

selected, click [Next >].
11. Select the following SQL Features:

Instance Features
Database Engine Services
Shared Features
Client Tools Connectivity
Client Tools SDK
Management Tools Basic
Management Tools Complete
12. Click [Next >].
13. On the Installation Rules screen, Setup

verifies the system state before continuing.
Click [Next >].
26
14. For [Named instance], type StreamlineNX.
Important:
Be sure to create a named instance; the default
instance is not supported for some components.
15. For Instance ID, type StreamlineNX.
16. Click [Next >].
17. Review Disk Usage Summary, which

calculates the required disk space for the
features, and then click [Next >].
18. Click [Next >].
Note :
All Startup Types should be set to [Automatic].
27
19. Select [Mixed Mode (SQL Server

authentication and Windows
authentication)].
20. Specify at least one SQL Server system

administrator.
21. Enter password for the system administration

(sa) account. Re-enter to confirm.
22. Click [Next >].
23. You can choose to send information to

Microsoft that will help improve SQL
Server. By default, the checkbox is
enabled.
24. Click [Next >].
25. Click [Next >].
Note :
The System Configuration Checker will
run one more set of rules to validate
your computer configuration with the
SQL Server features that you have
specified.
28
26. Click [Install].
Note :
The Ready to Install page shows a tree view
of installation options that were specified
during Setup.
SQL Server Setup will first install the required
prerequisites for the selected features
followed by the feature installation.
During installation, the Installation Progress
page provides status so that you can monitor
installation progress as Setup continues.
29
27. To complete the installation process, click [Close].
The installation of Microsoft SQL Server 2012 is complete! Next, enable SQL Server
protocols
Enable SQL Server Protocols

To finish your SQL Server installation, you must enable protocols for SL-NX. SQL Server Agent must also
be running. Then, youll restart SQL Server Services.
1. Open SQL Server Configuration Manager.
Note :
For SQL Server 2008, click [Start] > [All Programs] > [Microsoft
SQL Server 2008] > [Configuration Tools], and then click [SQL
Server Configuration Manager].
2. In the console pane, expand [SQL Server Network Configuration], and then click [Protocols for
STREAMLINENX].
3. Right-click [Named Pipes], and then click [Enable].
4. Right-click [TCP/IP], and then click [Enable].
30
Start SQL Server Agent & SQL Server Browser

SQL Server Agent (StreamlineNX) and SQL Server Browser must be running
Continuing from previous page
5. In the console pane, select [SQL Server Services].
6. If stopped, right-click and select [Start].
Restart SQL Server

In order to enable specified protocols, the SQL Server (STREAMLINENX) must restart
Continuing from above
7. Right-click [SQL Server (STREAMLINENX)], and then click [Restart].
Please continue with Step 2
31
Step 2: Download Zip Folder
1. Download the SL-NX zip folder from the Ricoh Technology Resource Center website
(http://tsrc.ricoh-usa.com). After login, click [Solutions] > [Streamline NX]. Follow prompts.
Important:
Due to the time required for download, you should perform this step prior to visiting the
customer site.
2. Extract SL-NX zip folder to target folder.
3. To launch SL-NX installer, double-click

[RDLaunch.exe].
32
Step 3: Create Databases

SL-NX requires four databases, one each for ADM, AAM, SPM and RG.
Important:
If you prefer to create a database, and then install the associated component software, click on the link
(within this PDF file), which appears at the end of each set of instructions. This will take you directly to
the associated procedures.
Note :
SL-NX v2.2 or later supports a single named database instance for ADM, AAM, SPM and RG.
ADM/AAM/SPM/RG cannot use the default instance name; a unique database named instance must be
created.
During SL-NX component installation, you will be required to enter the Microsoft SQL Server address
and instance name you created when installing the database. For details, see 2.2 SQL Server Requirements.
The SL-NX databases must be created using the same version and edition of Microsoft SQL Server.
Remote SQL database creation is not supported, i.e., Create Database procedures must be executed
directly on the server that will host the database.
A remote database cannot be used for Report Generator. The RG component and the database must be
installed on the same server. If running in a VM environment, this means running on the same VMware
machine.
Pre-determine the mode to use for connecting to SQL: SQL Authentication Mode or Windows Authentication,
as this mode must be the same for ADM, AAM and RG Databases. If you use SQL Server
Authentication, the Authentication Mode must be set to Mixed Mode.
The time required for the software to create a database depends on server specifications.
RG Server must have access to the ADM and AAM Database.
If using Microsoft SQL Server Express Edition, the total amount of data that can be stored is limited to
10GB. Additional rules apply when using SQL Server 2012 Express Edition:
RG service requires Administrator rights in order to configure Microsoft Windows scheduler service.
SL-NX Component Database Instance Name Database Name

Administration Manager StreamlineNX ADM
Authentication and Accounting Manager StreamlineNX AAM
Scan and Fax Manager (Not used)
Secure Print Manager StreamlineNX SPM
Report Generator StreamlineNX RG
33
3.1 Administration Manager Database

The ADM Database stores data for device administration and solution configuration, including:
Device mappings (associations to groups, locations, departments, etc.).

Notification settings for device alerting (error, supplies, etc.).
Server management settings for all servers under its control (AAM, SFM, and SPM).
Templates and Profiles for configuring all servers under its control (AAM, SFM, and SPM).
Templates and Profiles for deploying software and firmware updates to all devices under its control.
Templates and Profiles for configuring, managing, and monitoring all devices under its control.
This database is critical; should it become corrupted or lost completely then all Profiles, Templates,
notifications and alerts, and device mappings would need to be re-created. Consideration should be given to
providing a high availability configuration for this database in critical environments.
Important:
The supported SQL Server must be installed and set up.
When connecting to a database using Windows authentication, a user must also have appropriate access
rights and execute permission for the database.
If the Administration Manager uses the same database server as other products, specify a different
database name from that of other products.
You can specify a database on a server other
than the one with Administration Manager
installed.
Also see Appendix A: Installation Restrictions.
To create the ADM Database, proceed as follows:
1. On SQL Server, launch SL-NX.
2. Click [Administration Manager].
Note :
The Home screen default language is determined
by the computers Operating System.
3. Click [Create DataBase].
34
4. Press [Enter] to apply the default named

instance value: StreamlineNX.
5. Type database name, and press [Enter], or press

[Enter] to apply default database name: ADM .
Note :
If ADM uses the same database instance as
other products, specify a different database
name from that of other products.
6. Press any key to continue.
7. Click [Close].
Creation of Administration
Manager database is complete!
Please continue with creation of AAM
Database...
Note :
If you prefer to install ADM software next, go to 4.1 Administration Manager Installation.
35
3.2 Authentication and Accounting Manager Database

The AAM Database stores data for authentication and accounting, including:
Username
Card IDs
Pin codes, when used
Encrypted user password
Audit data (for all copy, print, scan, and fax transactions for reporting)
Important:
If the primary AAM Server software has been installed, and the AAM Database has been created,
you can configure a secondary AAM-LCS (Local Cache Server) database to provide failover
services, in the event that the primary AAM or AD/LDAP servers are unavailable. For details, see
Appendix H: Installing & Configuring AAM-LCS Failover Server.
To create the AAM Database, proceed as follows:
1. On SQL Server, launch SL-NX, if necessary.
2. Click [Authentication and Accounting Manager].
36
4. Type 1 to create new AAM Database, and

then press [Enter].
5. Type instance name, and press [Enter], or press

[Enter] to apply default instance value:
StreamlineNX.
6. Type database name, and press [Enter], or

press [Enter] to apply default database name:
AAM .
Wait a moment
37
8. Click [Close].
Creation of Authentication and Accounting Manager database is complete!

Please continue with creation of SPM database
Note :
If you prefer to install AAM software next, go to 4.2 Authentication and Accounting Manager Installation.
3.3 Secure Print Manager Database

The SPM database provides storage for transactional print job data. When a user prints a document
to an SPM Server the details of that job (spool folder location, job name, username, job details,
time received, etc.) are written to the database. If a user releases the job, the audit data of the job is uploaded
to the AAM Database and the local copy deleted. If the job expires, and is deleted, the job data is also
deleted.
Important:
You can specify a database on a server other than the one with SPM installed.
To create the SPM Database, proceed as follows:
2. Click [Secure Print Manager].
38
4. Type 1, and then press [Enter].
5. Type instance name, and press [Enter], or

press [Enter] to apply default instance value:
StreamlineNX.
Note :
Either Default Instance or Named Instance
can be used.

SPM .
39
8. Click [Close].
Creation of Secure Print Manager database is complete! Please continue with

creation of RG Database...
Note :
If you prefer to install SPM software next, go to 4.4 Secure Print Manager Installation.
40
3.4 Report Generator Database

The RG Database provides storage for consolidated reporting data collected from all AAM and
ADM Databases, allowing reports to be generated that span the entire solution.
Important:
RG requires SQL Server Agent service to be running on ADM and AAM Database Servers.
To install RG, you must have Administrator rights, which means you must belong to the Administrators
group.
When using SQL Server 2012 Express Edition, the following rules apply:
Before the installation of RG, Microsoft Windows scheduler service should be running.
RG services require Administrator rights in order to configure the Windows scheduler service.
For SL-NX v2.2 or later, RG can use the same database instance as ADM/AAM/SPM database. It is
strongly recommended to use the same database instance between RG and ADM/AAM/SPM.
A remote database cannot be used for Report Generator. The RG component and the database must be
installed on the same server. If running in a VM environment, this means running on the same VMware
machine.
If AAM, ADM and RG Databases are installed onto different servers, it is recommended to ensure stable
connectivity between the RG Database instance and the AAM/ADM Database instance(s) by using a tool
like DTCtester before installation (http://support.microsoft.com/kb/293799/en-us).
To create the RG Database, proceed as follows:
2. Click [Report Generator].
41
4. Type 1 and press [Enter].
5. Type instance name, and press [Enter], or

press [Enter] to apply default instance value:
StreamlineNX.

RG.
7. Press any key to continue
42
8. Click [Close].
Creation of ADM, AAM, SPM and RG Databases is complete! Please continue with
Step 4
Note :
If you prefer to install RG software next, go to 4.5 Report Generator Installation.
43
Step 4: Install SL-NX Software Components

In this step, you will install the five SL-NX components ADM, AAM, SFM, SPM
and RG. The SL-NX Installation Launcher makes it each to install, with a setup
wizard provided for each application.
Note :
With SL-NX, there can be only one ADM Server and one RG Server, though
multiple AAM, SFM and SPM Servers can be deployed. If installing multiple
AAM, SFM and/or SPM Servers, repeat the software install procedures for that
component on another server.
Important:
To install SL-NX software, you must have local Administrator rights.
If UAC is enabled, Run as Administrator must be used; right-click .exe file, and then click Run as
Administrator.
4.1 Administration Manager Installation

The ADM software component enables the Administrator to establish system settings, register
and configure devices and servers, manage print jobs and logs, as well as access administration
tools within Authentication & Accounting Manager, Secure Print Manager and Scan & Print Manager.
Important:
After all components are installed you must activate the Administration Manager software and obtain a
license code in order to use this component.
If the SQL Server has been installed, and the ADM

Database has been created, proceed as follows:
1. Launch SL-NX, and then click [Administra-

tion Manager].
2. Click [Administration Manager (64 bit)].
Note:
If the installer is launched on a 32-bit
Operating System, Administration Manager
(64 bit) is not enabled.
44
3. Select English, and then click [OK].
4. On Welcome screen, click [Next].
5. Read Licensing Agreement, select I accept

the terms in the license agreement, and then
click [Next].
45
6. Confirm Default Path to installation folder, and

then click [Next].
Note :
To change path, click [Browse].
In the following cases, an error message
will appear:
You specify an installation folder in
which files or folders already exist.
Path exceeds 90 characters or includes
invalid characters, e.g., 2-bit characters,
, *, ?, |, <>, /, ; , @, &, =, +, $,
comma (,), #, ', %.
7. Enter Port Numbers:

Example: HTTP = 8080 (default)
HTTPS = 8443 (default)
Important:
When installing multiple components on a
single server, different HTTP/HTTPS
ports must be configured for each app.
If the specified port is not in the range of
1 65535, or is already in use, an error
message appears. Click [OK], and then
enter correct port number.
8. Click [Next].
9. Select Authentication Mode, and then

click [Next].
46
10. Specify Database Connection Settings.
SQL Server Authentication Windows Authentication
Max. Default Value

Setting Description Characters
Host Name Enter a host name or IP address of server on which the supported 63 127.0.0.1
SQL Server database is installed. Note: If Remote SQL Server is in
use, enter the host name or IP address of the SQL Server.
Instance Name Enter an instance name for the SQL Server. 63 StreamlineNX
Database Name Enter database name for the SQL Server. 63 ADM
1
User Name Enter a user name specified when installing the SQL Server. 128 sa
1
Password Enter a password specified when installing the SQL Server. 128 Blank
1
Only for SQL Server Authentication.
11. Click [Next].
Note :
If the connection to the database fails, an
error message appears. Click [OK], and then
specify a setting again. If error continues,
contact the SQL Administrator.
12. Confirm settings, and then click [Next].
47
Installation begins
Note :
To halt installation, click [Interrupt]. File Copy
Start screen displays. Click [Next] to resume
installation.
To cancel installation, click [Cancel]. Click [Yes]
to exit the installation program. Click [No] to
resume installation.
13. Click [Finish].
14. Click [Close].
Important:
If installing multiple AAM Servers, repeat
the software install procedures for this
component on the next server.
Installation of Administration Manager is complete! Please continue with installation

of AAM software
48
4.2 Authentication and Accounting Manager Installation

The AAM software component enables the Administrator to manage authentication settings for
user login at the device (with embedded AAM), as well as track usage and costs by user, set limits
and establish printing rules, e.g., color usage, duplex, page limits by device, user quota chargebacks, etc.
Important:
If the SQL Server has been installed, and the AAM

Database has been created, proceed as follows:
1. Launch SL-NX, and then click [Authentication

and Accounting Manager].
2. Click [Authentication and Accounting Manager].
49
5. Read License Agreement, select I accept the

terms in the license agreement, and then
click [Next].
6. Confirm Default Path to installation folder,

and then click [Next].
Note :
To change the path, click [Browse].
In the following cases, an error message
will appear:
invalid characters, e.g., 2-bit
characters, , *, ?, |, <>, /, ; , @, &,
=, +, $, comma (,), #, ', %.
50

Example: HTTP = 8081 HTTPS = 8444
Important:
single server, different HTTP/HTTPS ports
must be configured for each application.
If the specified port is not in the range of 1
65535, or is already in use, an error message
appears. Click [OK], and then enter correct
port number (up to five digits).
8. Click [Next].
9. Select Authentication Mode, and then click

[Next].
10. Specify Database Connection Settings.
51
Max. Default
Setting Description Characters Value
Host Name Enter a host name or IP address of server in which the supported 63 127.0.0.1
SQL server is installed. Note: If Remote SQL Server is in use, enter
the hot name or IP address of the SQL Server.
Database Name Enter database name for the SQL Server. 63 AAM
1
1
1
11. Click [Next].
Note :
If the connection to the database fails, an
error message appears. Click [OK], and then
specify a setting again.
Installation begins
Note :
To cancel installation, click [Cancel]. Click
[Yes] to exit the installation program. Click
[No] to resume installation.
52
13. Click [Finish].
14. Click [Close].
Installation of Authentication and Accounting Manager is complete! Please

continue with installation of SFM software
53
4.3 Scan and Fax Manager Installation (Optional Component)

The SFM software component, which must be purchased, enables the Administrator to manage
settings that will route scanned documents (electronic files) from a device to email addresses,
network folders, fax servers, as well as Microsoft SharePoint and other line-of-business applications.
Important:
Before software installation
SFM software uses Java-based Jetty as the default web server. If this deployment will use Microsoft
Internet Information Services (IIS), you must set up IIS on the computer before installing SFM software.
You must log on to the computer you will install the software on using an account that has Administrator
rights.
After software installation
You must activate the optional SFM component, and obtain a license code, to utilize the software.
Optional SFM Plugins, e.g., RightFax, Barcode, etc., are installed during the SFM component install.
Each plugin must also be activated before it can be used.
For details on activation, see Step 6: Activate Licenses.
The Administrator must configure the necessary network settings and distribution parameters to
support scan functionality on the SFM-enabled MFPs.
1. Launch SL-NX, and then click [Scan and

Fax Manager].
2. Click [Scan and Fax Manager].
Note :
The available selections depend on
server Operating System support. In this
example, both 32- and 64-bit OS are
supported, so 64-bit is selected.
54
Note :
Supported languages for SFM include
English, German, French, Italian, Spanish,
Dutch, Simplified Chinese and Japanese.
5. Read License Agreement, select I accept

the terms in the license agreement, and
then click [Next].
55
6. Confirm Default Paths to installation folders,

Note :
To change paths, click [Browse].
In the following cases, an error message will
appear:
invalid characters, e.g., 2-bit characters, ,
*, ?, |, <>, /, ; , @, &, =, +, $, comma
(,), #, ', %.
7. To Start SFM Delivery Service immediately

after the computer (running SFM software) is
turned on, select Start delivery service
checkbox, and then click [Next].
Note :
This specifies the SFM Servers
Running/Suspended status for job processing.
After installation, the Starting Mode can be
changed from the Administrative Tool.
8. To install a Template Project, select Install the

template checkbox, and then click [Next].
Note :
Installing a Template Project allows you to use
SFMs basic delivery services immediately after
the installation.
The option of installing the Template is
available only for the first time you install SFM.
When you overwrite or modify the software,
existing Project data is used.
The StartPoint Path is the Template Project is
pre-configured with the following settings:
[Path]: SFM
[User Name]: User Name (When [Proxy
User] is selected as the authentication method.
56
9. Select Web Server Type, and then click [Next].
Note :
If Built-in Web Server (Default) is selected,
Java-based Jetty web server is used.
For IIS support, IIS must be setup on the
server before installing SFM software.

Important:
enter correct port number (up to five
digits).
In order to enable HTTPS communica-
tion (SSL) for a secure connection, it is
necessary to establish Certificate settings.
See Appendix J: Managing Certificates &
Private Keys.
11. Specify a Virtual Directory Name to access

the SFM Admin Tool, and then click [Next].
Note :
The default directory name is sfm. If
you specify another name, the base URL
for the AdminTool is:
http(s)://IPAddress:PortNo/
DirectoryName/
The maximum length of the Virtual
Directory Name is 15 alphanumeric
characters.
The Virtual Directory name specified here
will be created on the web server.
57
Installation begins
Note :
To halt installation, click [Interrupt]. File Copy
Start screen displays. Click [Next] to resume
installation.
13. Click [Finish].
58
14. Click [Close].
Important:
If installing multiple SFM servers, repeat
Installation of Scan and Fax Manager is complete! Please continue with installation
of SPM software
59
4.4 Secure Print Manager Installation (Optional Component)

The SPM software component, which must be purchased, enables the Administrator to create a
secure printing communication path between the SPM Server and device (with embedded SPM).
When the SPM software is installed on the server, the Secure Print (SNX SPM Port), Direct Print (SNX SPM
Direct Port) and External OEM Print (SNX SPM External Port) are automatically installed. For information
on how to configure those ports, i.e., specify authentication and driver settings, see Step 11: Install & Configure
Print Drivers & Ports.
Note :
After installing the SPM software, install supported drivers on the same server running SPM, and
distribute.
Important:
If the SQL Server has been installed, and the SPM database has been created, proceed as follows:
1. Launch SL-NX, and then click [Secure

Print Manager].
2. Select English, and then click [Next >].
60
3. Click [Next >].
4. Read License Agreement, select I

accept the terms of the license
agreement, and then click [Next >].
61
5. Choose folder for install files, and then click

[Next >].
6. Specify Authentication Method, and then

click [Next >].
62
Max. Default
Setting Description Characters Value
Host Name Enter a host name or IP address of server in which the 63 127.0.0.1
supported SQL server is installed. Note: If Remote SQL Server is
in use, enter the host name or IP address of the SQL Server.
Database Name Enter database name for the SQL Server. 63 SPM
1
1
1
7. Click [Next >].
Note :
If the connection to the database fails, an error
message appears. Click [OK], and then specify
a setting again.
8. Select Job Storage Path, and then click [Next >].
Note :
This is where secure print jobs are stored.

Example. HTTP = 8083 HTTPS = 8446
Important:
digits).
10. Click [Next >].
63
11. Click [Install].
Installation begins
12. Click [Finish].
64
13. Click [Close].
Important:
If installing multiple SFM servers, repeat
Installation of Secure Print Manager is complete! Please continue with installation

of RG software.
4.5 Report Generator Installation

The RG software component enables the Administrator to configure, generate and classify
reports. For example, reports can be run based on information gathered from devices, such as
device status, counter information, job logs, etc. Templates can also be used to automatically generate reports
according to a pre-set schedule.
If the SQL Server has been installed, and the RG Database has been created, proceed as follows:
1. Launch SL-NX, and then click [Report

Generator].
65
2. Select button that matches the Operating

System used on the Report Generator
Server.
66
5. Read License Agreement, select I accept

the terms of the license agreement, and
then click [Next].
6. Confirm Installation Path and Temporary

Files Path, and then click [Next].
Note :
To change paths, click [Browse].
On the creating installation folder screen of
the installer, the temporary files folder should
not have a space in its path.

Example. HTTP = 8084 HTTPS = 8447
Internal Database Port = 1627
Important:
65535, or is already in use, an error
digits).
8. Click [Next].
67
Installation begins
Note :
10. Click [Finish].
68
11. Click [Close].
Installation of Report Generator is complete!
12. To exit installation program, click [Close] on

the Streamline NX Home screen.
69
Start Services
Step 5: Start Services

In order to use Streamline NX, you must confirm that SQL and Windows services are running.
To confirm service status, proceed as follows:
1. Log in to SL-NX Server.
2. Click [Start] > [Administration Tools] > [Services].
3. Confirm that [Status] column of each service listed below is Started/Running.
Important:
If the Status column is indicated as Stopped/field is blank, right-click the service, and then click
[Start], or use the Start [ ] button. Status changes to Started/Running.
The SQL services section (above) will not display when using remote database(s).
Service Type Service Name

SQL Service SQL Server (StreamlineNX)
SQL Server Agent (StreamlineNX)
SQL Server Browser
MSDTC Service
Windows Service Streamline NX Administration Manager
Streamline NX Authentication and Accounting Manager
Streamline NX Scan and Fax Manager
Streamline NX Secure Print Manager
Streamline NX Report Generator Manager
70
Start Services
Required Services Service Name

Mandatory SQL Server
1
SQL Server Browser (disabled by default)
Conditional SQL Server Agent (required when SQL Enterprise/Standard Edition is used)
Windows Scheduler (required when SQL Express Edition is used)
MSDTC Service (required when RG Database and ADM/AAM Databases are on separate servers)
1
Must be enabled when using SQL Server 2012 Express Edition.
Note :
To stop one or more services, right-click
service, and then click [Stop].
With Streamline NX services started, please continue with Step 6
71
Activate Licenses
Step 6: Activate Licenses

After installing Streamline NX components, you must activate the software and obtain a license code. The
license code is required for a new installation, and is essentially the product key and lock code.
There are four different types of SL-NX product keys, as follows:
1. Streamline NX Base License (standard ADM/AAM/RG components)
2. Streamline NX SPM Option License
3. Streamline NX SFM Option License
4. Streamline NX SFM Plugin Option License
There are also two types of activation tools, one for activation of items 1-3 listed above (ADM/AAM/RG/
SPM/SFM), and another for activation of any optional SFM Plugins.
Important:
To complete the activation process, you need the Product Key (also called CD key) this is printed on the
purchased product certificate.
You must log on to the computer you will perform the activation on using an account that has
Administrator rights. Run as administrator is recommended.
To acquire a license code, access the Ricoh Software License Management Service website:
https://licensemanagement.ricoh.com/aui/
Activation must be performed to enable the number of MFPs/printers used. For example, if the number
of devices exceeds the available licenses, or if ADM is not activated, some operations are prohibited.
For troubleshooting, see License Activation/Deactivation Error Messages.
If using a proxy server, additional settings are required. For details, see Appendix F: Configuring Proxy
Server.
ADM/AAM/RG Activation (Base License)

Important: Activation can only be performed on the server where ADM/AAM/RG is installed.
1. On the desktop, double-click [Administration

Manager Activation Tool].
Note :
Or click [Start] > [All Programs] > [Streamline NX] >
[Administration Manager] > [Administration Manager
Activation Tool].
If user account screen appears, click [Yes].
2. Click [Activation].
72
Activate Licenses
3. Specify Activation Settings, as outlined below:
Setting Description
License Status Indicates if the SL-NX components are
Activated or Not Activated.
Activation [Internet]: Select when activating software
Method on the internet.
[Enter License Code]: Select when you
already have a license code.
Note: If the computer cannot connect to the
internet, connect using a different computer,
and obtain the license code. In that case,
select [Enter License Code] and enter the
code in the License Code field.
Country Click drop-down list and select country.
Information
Company Name Enter company name.

License Name Click drop-down list and select license name that corresponding to your product key.
RICOH Streamline NX Base License (activates ADM/AAM/RG components)
RICOH Streamline NX SPM Option License (activates optional SPM component)
RICOH Streamline NX SFM Option License (activates optional SFM component)
Product Key Enter product key, which is printed on the purchased product certificate.
License Code When [Enter License Code] is selected as the Activation Method, enter a license code. When
[Internet] is selected, this setting is not enabled.
Lock Code A lock code is displayed.
Important:
Write down the lock code and keep in a safe place.
Note:
If connecting to the internet through a proxy server, proxy settings are required. For details, see Appendix F: Configuring
Proxy Server.
73
Activate Licenses
4. Click [Activate].
Note :
An error message appears if settings are not specified
correctly.
If an error has occurred on a proxy server an error
message appears with an error code of the server in
parentheses.
For details on deactivation, see Appendix G: Managing
Software Components.
5. Click [OK].
ADM/AAM/RG components are now activated!
Restart ADM Windows Service
Important:
Administration Manager Windows Service must
be restarted after activation is performed. If this
service is running, restart it manually, as follows.
1. Click [Start] > [Run]. Enter services.msc , and

click [OK].
74
Activate Licenses
2. Right-click [Streamline NX Administra-

tion Manager].
3. Click [Start].
Note :
To deactivate licenses, see Deactivate
Licenses.
75
Activate Licenses
SPM Activation (Option License)

To activate the optional SPM component, proceed as follows:
1. Follow steps 1-4 in Administration Manager
Activation section. In step 3, select [RICOH
Streamline NX SPM Option License] from the
drop-down list.
2. When activation is complete, restart ADM Windows

Service, as outline in previous section.
SFM Activation (Option License)

To activate the optional SFM component, proceed as follows:
1. Follow steps 1-4 in Administration Manager
Activation section. In step 3, select [RICOH
Streamline NX SFM Option License] from the
drop-down list.
2. When activation is complete, restart ADM Windows

Service.
76
Activate Licenses
SFM Plugin Activation

If one or more optional SFM Plugins have been purchased, e.g., Barcode, RightFax, SharePoint, HotFolder
Capture, FileNet, etc., each must be activated with the Scan and Fax Manager Activation Tool.
1. On the desktop, click [Scan and Fax

Manager Activation Tool].
Note :
Or click [Start] > [All Programs] >
[Streamline NX] > [Scan and Fax
Manager] > [Scan and Fax Manager
Activation Tool].
2. Click [Next >].
3. Write down locking code and keep in a

safe place.
4. For Activation Method, select [Internet],

and then click [Next >].
Note :
You are automatically directed to the on-line activation
web page.
77
Activate Licenses
5. Scroll down, and select I Agree checkbox,

6. For Registered Users, enter User ID and

Password, and then click [Login]. Go to
step 7.
Note :
If you are not a Registered User, click [PC
Application], and complete the form to
follow
78
Activate Licenses
New Product Registration

Complete all required fields, and then click [Next].
Go to step 8.
7. Click [PC Application].
8. From Product name drop-down list, select

the Plugin.
Note :
In this example, the Streamline NX Barcode
Plugin has been selected.
79
Activate Licenses
9. Enter Product Key (printed on the

purchased product certificate) and Locking
Code (written down in step 3), and any other
required fields.
Note :
Product key prefixes will vary based on
SFM Plugin type, e.g., Barcode, RightFax,
FileNet, etc.
10. After all required fields are entered, click

[Next]; scroll down, if necessary.
11. Please review pop-up message, and then

click [OK].
12. To save license code to the clipboard,

click [Copy Button].
13. Click Activation Code icon on taskbar

(circled at right).
14. On Scan and Fax Manager screen, press Ctrl + V to insert license code, and then click [Next >].
80
Activate Licenses
15. Click [Finish].
16. Click [Close].
Activation of optional Streamline NX SFM Plugin is complete!
Note :
To activate another optional SFM Plugin, repeat Steps 1 15.
No deactivation procedures are required for SFM Plugins. For details, see Appendix G: Managing
Software Components.
81
Activate Licenses
Checking Activation List

Product keys and license codes for ADM/AAM/RG/
SPM/SFM can be confirmed on the Activation List.
1. Open Streamline NX Activation Tool.
2. Click [Activation List].
3. Check activation information.
4. Click [OK] to exit.
Note :
To deactivate a license, see Appendix G: Managing Software Components.
License Activation/Deactivation Error Messages

Error Message Causes/Solutions
Activation has failed Check if the computer connects to the internet correctly, or if proxy
settings are correctly specified.
Deactivation has failed Check if the computer connects to the internet correctly, or if proxy
Activation Tool has already been started You cannot start up the activation tool because it has already been
started. Use the activation tool running.
Cannot write to the file Specify a destination to save a writable file.
Cannot connect to the activation server Check if the computer connects, or the internet correctly, of if proxy
Select a country name Select a country name in [Country Information] drop-down list.
82
Activate Licenses
Enter the product key Enter the product key in [Product Key] field.
Enter the license code Enter the license code in [License Code] field.
Enter the address and port Enter an address and a port number.
Enter the user name. Enter an authentication user name in [User Name] field.
Please input right port number (1-65535) Enter a port number in the range of 1 to 65535 in [Port] field.
The product key is invalid Check if a product key is entered correctly or if entered product key
corresponds to a license name.
The product key is currently being used This product key cannot be used because it is being used by another
computer. To use this product key on this computer, deactivate the
license used by the other computer.
The license code is invalid Check if a license code is entered correctly.
The license code cannot be used The license code cannot be used because the license has been
deactivated. Enter another license code.
Installation and activation of Streamline NX software is now complete! Please

continue with Step 7
83
Configuring Server Software
Streamline NX
4 CONFIGURING SERVER SOFTWARE

(Asterisk [*] indicates required procedure)
Now that all necessary software is installed, running and activated (as outlined in Steps 1 - 6), you are ready
to register devices and push firmware to those devices. This is done using Administration Managers
AdminTool, your central console for SL-NX configuration and management.
The AdminTool also includes a scheduler for

deploying device/software preferences, as well as
address book and discovery functions. In addition,
Job status and activity logs provide access to detailed
Administration Manager (ADM), Scan and Fax
Manager (SFM)1 and Secure Print Manager (SPM)1
metrics, allowing easy remote system monitoring.
For a basic installation of Streamline NX, which this

guide covers, we suggest that you configure devices
(MFPs/printers) first. This will enable you to apply
settings for user authentication, export/import
device information, etc.
After device-related settings are finished, youll use

the AdminTool to add servers to the system.
Specifically, this will link AAM, SFM1 and SPM1
Server URLs and apply configuration settings that
will enable communication with ADM and SL-NX-
enabled devices.
Report Generator is then set up to link with ADM

and AAM Servers, so data can be gathered for report generation.
Lastly, printer drivers are installed and configured for shared printing. You can then test the system for
authentication, secure print release and scan-to functionality.
Optional component.
1
84
Administration Manager
Again, Administration Manager is the tool used to manage Streamline NX components. As such, you will
configure the server(s) and devices within the SL-NX deployment through Administration Managers
AdminTool.
In this section you will register (add) devices and

servers using the AdminTool, and then apply device
software and device configuration settings by creating
Templates, and the corresponding Policy, which
when executed pushes the settings to the target
devices or servers.
Starting Administration Manager
AdminTool Login
1. Before logging in to the Administration Manager AdminTool, close all open tabs and windows.
Note :
When using the AdminTool, it is recommended that you do not operate multiple tabs and windows at
the same time.
2. On the desktop, double-click [Administration Manager AdminTool] icon.
Note :
To remotely connect to the ADM Server from your web browser, enter the ADM URL:
http://<Administration Manager IP address/Host name>:<Administration Manager port
number>/main/AdminTool.html.
Example : http://192.168.1.100:8080/main/AdminTool.html
URL is case sensitive.
3. Log in. Default login credentials are as follows:
[Authentication Profile1]: built-in

[Password]: blank
[Language]: English
4. Click [Login].
85
SL-NX AdminTool Screen
Helpful Hint: On any selected AdminTool screen, you

can drill down within the navigation pane by clicking
on all right arrows (). This makes available folders/
sub-folders easy to locate and select.
1
Note :
If built-in is selected, enter password only. This
login password for the Administration Manager
AdminTool can be changed. It is recommended
that you do so periodically. To set the password,
proceed as follows:
a. Click [System] > [System Configuration] >
[Common] > [Authentication] > [Built-in].
b. Enter Password and Confirm.
c. Select whether or not to Disable Built-in User.
Note :
- If [Disable] is selected, a built-in user cannot
log in to the AdminTool.
- When a user logs in to the AdminTool as a
built-in user, the [Disable] checkbox cannot
be selected.
d. Click [Apply].
If LDAP is selected, enter user name and password.
If Kerberos is selected, a specified domain name is displayed. Enter a user name and password.
For details, see the RICOH Streamline NX Administrators Guide.
AdminTool Logout
1. Click [Logout], upper right corner of screen.
86
*Configure Authentication Profile

To enable user authentication, i.e., secure (username/password) login on the device touch panel, you must
establish AAM Server authentication settings through the AdminTool.
1. Click [Configuration] tab.
2. On Category pane, click [ Server Preference] > [Authentication Management], and then click [ ].
3. Specify Authentication Settings, as outlined below.
Setting Description
Authentication Enter a name for the authentication settings.
Setting Name
Comment Enter any necessary comment.
Authentication Select [Kerberos] from drop-down list.

Type Note:
Kerberos can be used when Windows Active
Directory is used.
Important:
SFM will attempt to distribute settings using
Kerberos, so Kerberos is recommended when
using SFMs Send to Folder.
Kerberos Configure Kerberos
Configuration a. Click [Setting].
b. Enter the following Kerberos authentication
information.
[Realm]: Domain name used for user
authentication, e.g., RICOH.LOCAL.
[Key Distribution Center]: FQDN/IP address
of the domain controller, e.g.,
spsdc.ricoh.local.
c. Click [OK].
4. In order to confirm that Kerberos Configuration works correctly, click Connection Test [Run].
87
The Connection Test screen displays
5. Select AAM Server from drop-down list.
6. Enter Login User Name and Login Password.
Note :
Enter the correct user name and password for a user
belonging to the domain configured for Kerberos
authentication.
7. Click [Start].
Note :
The Connection Test will be performed via the AAM Server selected in the [Server] area.
When there are multiple AAM Servers, testing must be performed on each AAM Server.
Succeeded
If the Connection Test is successful, the screen at right displays
Failed
If the test fails, screen at right displays
Check that settings are correct, and try again. Also see Appendix K:
Troubleshooting Checklist, 3. Check PC Application: Network
Commands.
8. Click [OK].
9. Next, enter User Information Server Settings, as outlined below.
Setting Description
Server Name Enter FQDN/IP address of the LDAP server
(or domain controller, in Windows domain
environments), for example:
spsdc.ricoh.local
Search Base Enter base position for LDAP user searches
(Base DN), for example:
dc=ricoh,dc=local
Port Number Enter port number. Default port number is
389. If using SSL, the default is 636.
SSL If turning SSL on, upload the certificate Scroll down
file. For details, see Appendix J: Managing
Certificates & Private Keys.
Domain Name Enter name of domain on which to
perform LDAP search, for example:
ricoh.local
88
Timeout Select timeout in range of 1 100 seconds.

Search Base Same as entered above, for example:
dc=ricoh,dc=local
Search Query Enter search attribute, e.g.,
(&(objectClass=group)(cn=^*))
Attributed Enter search results, for example:
cn
10. Confirm all settings, and then click Acquisition Test [Run].
The Acquisition Test screen displays
11. Enter same credentials used for Connection Test.
12. Click [Start].
If the connection is successful, Result screen displays...
Note :
If the test fails, check that the correct credentials were
entered, and try again.
13. Confirm that the user information has been acquired

correctly, and then click [OK].
14. Click [OK] to save settings.
Note :
Confirm that the settings have been successfully saved.
89
Step 7: Configure Devices

Streamline NX devices are registered through Administration Managers Device Management screen, either
manually, imported or discovered.
Important:
Before adding devices, make sure they are running the most up-to-
date Java version. For details, go to TSRC website.
The Administration Manager screen is divided into the following

primary sections:
A. Screen Navigation
B. Device List
C. Device Properties
D. Device Group
E. Function Toolbar
Streamline NX Administration Manager
Section Title Description

A Screen Navigation The following tabs are available. Note: Click [ ] to display additional selections.
Device Management: View Device List, Device Groups and Device Properties panes.
Server Management: View Server List, Server Groups.
Configuration: View Category pane (Device Preference, Device Software, Device
Address Book, Server Preference).
Scheduler: Execute All Functions, Device Preferences, Device Address Book,
Discovery, Device Software).
Job: View AAM, SFM or SPM Job Log.
Log: View AAM, SFM or SPM System Log.
B Device List This pane displays all registered devices, which can be filtered so that only devices that
meet the specified conditions display. Specified filters are displayed in green on the
[Device Groups] pane. For details, see Add a Filter.
90
C Device Properties This pane displays properties of the device selected on the Device List.
D Device Groups Device Group folders:
1. IP Address (default)
2. Model (default)
3. Device Install Group (named)
When devices are registered, they are automatically sorted into the IP Address and Model
folders, which are displayed in blue. For details, see Add Devices.
Depending on your needs, registered devices can also be manually sorted into group
folders, which are displayed in yellow. For details, see Group Devices.
E Function Toolbar Each screen has a related series of functions. Click to open drop-down list.
Note: There are multiple ways to access system functions. For example, if you select a
device or server on a list pane (B), right-click on the row (in a blank area) to access the
available feature drop-down. Alternatively, you can highlight the device or server on the
list pane and click any one of the functions on the toolbar, e.g., [Edit], [System], etc. Both
methods are used in this section.
Add a Discovery Setting

If you have a large number of devices to register to the Administration Manager, you can use the Discovery
function to automatically search for devices to be registered. The Discovery function can be performed at a
specified date and time.
Note :
Only users with Administrator rights can configure the discovery settings.
To add discovery settings, proceed as follows:
1. Click [Device Management] tab > [Settings1] > [Discovery].
2. Click [ ].
1
Note : Through [Settings] > [Error Notification] you can also add email addresses of those who are to
receive notification in the event of a device error and/or recovery condition. For example, if a device is low
on toner, an email can be sent to the person in charge of ordering supplies. For details, see the RICOH
Streamline NX Administrators Guide.
91
3. Enter Name.
4. Enter Comment.
5. To specify Search Range conditions, click [ ].
Search Type: Select either [Specify IP Address] or [IP

Range].
Include/Exclude:
When [Include] is selected, specify an IP address or an IP
address range to be searched.
When [Exclude] is selected, specify an IP address or an IP
address range to be excluded from a discovery.
Note :
Be sure to specify one or more IP addresses and IP address
ranges to be searched by selecting [Include].
6. Click [OK].
Other Discovery Functions:

Icon Function
Edit a selected search range setting.
Delete a selected search range setting.
Copy a selected search range setting.
Execute a selected discovery setting.
7. Select Execution [Now] checkbox.
8. Click [OK].
92
Discovery begins
9. Click [OK].
10. Check the Device List for discovered devices
Note :
To view/edit other discovery settings, click [Access Account], [Discovery Option] and [Email
Settings] tabs. For details, see the RICOH Streamline NX Administrators Guide.
93
*Add Devices
The Add Device screen is used to manually register device account information and configure SNMP
settings that enable Administration Manager to poll a device to obtain device status information.
Important:
Only users with Administrator rights can add devices to all device groups. Limited access users can add
devices only to a manually sorted device group for which the access level of [Device Manager] is granted.
For details, see the RICOH Streamline NX Administrators Guide.
To add a device, proceed as follows:
1. Click [Device Management] tab, click [Edit] > [Add Device].
2. Enter IP address/host name of the device to be registered, and

then click [ ].
3. To add more devices, repeat step 2.
Note :
Click [ ] to delete a device address setting, from the last one
specified.
To exit, without saving settings, click [Cancel].
4. Click [Access Account Settings] tab.
Important:
Device SNMP community names and web service accounts (device Administrator accounts) are necessary
to access devices from the Administration Manager. If device settings are changed from the default, the
modified information must be entered in the [Access Account Settings] tab when adding the device.
94
5. Specify Device Settings, as outlined below:
Setting Description
User name: Enter a user name to access a device.
Password: Enter a password to access a device.
SNMP Option: Time (0.5-60):

Specify the SNMP communications timeout in a
range from 0.5 to 60 seconds.
Retry Time (0-10):
Specify the number of SNMP retry times in a
range from 0.5 to 60 seconds.
Protocol: Select SNMPv1/v2 or SNMPv3.

SNMPv1/v2:
Read community name:
Enter a community name for read access to
a device.
Write community name:
Enter a community name for write access
to a device.
SNMPv3:
User Name:
Enter a user name to access devices using
the SNMP v3 protocol.
Password:
Enter a password to access devices using
the SNMP v3 protocol.
Authentication Algorithm:
Select [MD 5] or [SHA1] for the encryption
algorithm for SNMP v3.
Encryption Password:
Enter a password for encryption.
Context Name:
Enter a context name specifying the MIB
range for access.
Encryption Algorithm:
Select [DES] or [AES 128] for the encryption
algorithm for SNMP v3.
6. Click [OK].
7. Confirm that device(s) appear in Device List
95
Note :
If the added device does not display, click the refresh [ ] button on the Device Groups pane.
Registered devices are automatically saved and sorted into folders by IP address and model name, which
are displayed in blue on the Device Groups pane.
If the device has been connected to successfully, the Connection Status column indicates ACTIVE.
A device that does not belong to any other groups on the same level is in the No Value folder.
To exit Add Device screen, without saving settings, click [Cancel].
Edit Devices Default & Custom Properties

To edit default and customer device properties, proceed as follows:
1. Click [Device Management] tab.
2. On Device List pane, select desired device (highlight row), and then right-click [Edit Device].
3. Click Default Properties tab. Editable fields are indicated by an

asterisk.
96
4. Click [Custom Properties] tab. Editable fields are

indicated by an asterisk.
5. To view/edit additional device, account and license settings, click

[Advanced Properties]. For details, see the RICOH Streamline NX
Administrators Guide.
Detailed Status (incl. Counter) Access Account
SDK Applications License Status
6. Click [Apply], and then click [OK] to save settings.
Note : To exit, without saving settings, click [Cancel].
97
Delete Devices
To delete devices, proceed as follows:
2. On Device List pane, select device(s), and then right-click > [Delete Device].
Note :
Multiple devices can be selected.
3. To confirm deletion, click [Yes].
Note :
To cancel deletion, click [No].
If necessary, click refresh [ ] on Device List pane to update
screen.
98
Group Devices
Devices can be sorted into groups manually, which can ease management by dividing a large number of
devices into categories. When a manually sorted device group is selected on the [Device Groups] pane, the
information of devices registered in the selected group is displayed on the [Device List] pane.
To register a Parent Group, proceed as follows:
2. On Device Group pane, click [Edit] > [Add Group].
Note : If a group is selected, right-click [Deselect] to deselect a group before right-clicking [Add Group] or
selecting [Edit] > [Add Group]. Otherwise, sub-group belonging to a selected group is registered.
Important:
If a group is selected (highlighted), right-click, then click
[Deselect] to deselect the group before adding a Parent
Group, otherwise a sub-group belonging to the selected
Parent Group will be registered.
3. Enter Group Name.
Note :
To cancel setting, click [Cancel].
4. Click [OK].
99
Note :
If the Group Name you entered is not displayed correctly, click refresh [ ] on the Device Groups
pane.
5. To register a sub-group, select a Parent Group to which the

sub-group belongs, and then click [Edit] > [Add Group].
Note :
For details on Account Control List (ACL) settings, see the
RICOH Streamline NX Administrators Guide.
7. Click [OK].
Note :
The name of the [Uncategorized] group cannot be changed.
100
Edit Device Groups

Note :
Only users with Administrator rights can edit both Parent Groups and sub-groups.
Limited access users can edit only manually sorted device groups for which the access level of [Device
Manager] is granted.
To edit a Parent Group or sub-group name, proceed as follows:
2. On Device Groups pane, select desired Parent Group or

sub-group, right-click > [Edit Group].
3. Edit Name.
4. Click [OK].
Note :
If necessary, click refresh [ ] on the Device Groups pane to
update screen.
Edit Device Properties

SNMP settings for devices registered in a group can be edited in [Editing Devices Properties]. To do so,
proceed as follows:
2. On Device Groups pane, select desired group, right-click >

[Edit Devices Properties].
101
3. Edit SNMP settings.
Setting Description
SNMP Timeout (0.5-60): Specify the SNMP communications
Option timeout in the range from 0.5 to 60
seconds.
Retry Times (0-10): Specify the number of SNMP retry
times in the range of 0 to 10 times.
4. Click [OK].
Note :
Delete Device Groups

Note :
Only users with Administrator rights can edit both Parent Group and sub-groups.
Limited access users can edit only manually sorted device groups for which the access level of [Device
When a Parent Group is deleted, the registered devices are not deleted.
To delete a Parent Group, proceed as follows:
2. On Device Groups pane, select desired Parent Group,

right-click > [Delete Group].
3. Click [Yes].
Note :
screen.
102
Add a Filter
With the filtering function, only devices that meet the specified conditions are displayed on the Device List
pane.
Note :
Only users with Administrator rights can add a filter condition.
To add a Filter Condition, proceed as follows:
2. On [Device Groups] pane, select desired group, right-click >

[Add Filter].
3. Enter Filter Name.
4. Select Filter Condition from drop-down list, enter a

keyword, if desired, and then click [ ].
The following filter conditions are available: [Display

Name], [Serial Number], [Manufacturer ID], [Model
Name], [MAC Address], [Registration Date and
Time], [Registration Person], [Last Communication
Date and Time], [IP Address], [Device Address],
[Connection Status], [System], [Printer], [Copy],
[Fax], [Scanner], [Base License], [SPM Option
License] or [SFM Option License].
5. Repeat step 4 to add additional Filter Conditions.
Note :
To delete a filter condition, select a filter condition to be deleted,
and then click [Remove].
To delete all filter conditions, click [Remove All].
6. Click [OK]. The registered filter appears in green.
Note :
To cancel the setting, click [Cancel].
If necessary, click refresh [ ] on the Device Groups pane to
update screen.
103
Edit a Filter
Note :
Only users with Administrator rights can edit a filter condition.
To edit a Filter Condition, proceed as follows:
2. On [Device Groups] pane, select desired group, right-click >

[Edit Filter].
3. Edit filter, as needed. See Add a Filter.
Delete a Filter
Note :
Only users with Administrator rights can delete a filter condition.
To delete a Filter Condition, proceed as follows:
2. On [Device Groups] pane, select desired group, right-

click > [Delete Filter].
Note :
screen.
104
Export/Import Device Information

Device information can be exported or imported from/to the Administration Manager as an UTF-8 encoded
CSV file. Devices can be registered in the Administration Manager by importing device information files.
Note :
Device information file is exported/imported in English only.
The CSV file should be opened in the appropriate procedure. Otherwise, data may not be displayed in a
proper way. For details, see the RICOH Streamline NX Administrators Guide, Contents of CSV File for Device
Information, Composition of Device Information in CSV File and Opening the CSV File.
Export Device Information

There are two ways to export; exporting an information file for all devices and exporting an information file
for devices belonging to a selected Device Group.
Note :
Only users with Administrator rights can export information of all device groups.
Limited access users can export information of manually sorted device groups for which the access level of
[Device Manager] is granted.
All device security information is exported as plain text.
A. To export an information file for all devices, proceed as follows:
2. If a Device Group is selected, right-click and [Deselect], so group information is not exported.
3. Click [Edit] > [Export].
Display reads
4. Click [OK].
105
5. Select a destination, and then click [Save].
Note :
6. Click [OK].
B. To export an information file for devices belonging to the selected Device Group, proceed as
follows:
1. Complete steps 1 4, above. On Device Group pane, select a Device Group, and then click [Edit] >
[Export].
Note :
The property type "{ManualGroupProperty_N}" is exported in a CSV file only when a Device Group
that has a sub group except the [Uncategorized] group is selected.
Display reads
2. Click [OK].
3. Select a destination, and then click [Save].
Note :
4. Click [OK].
106
Import Device Information

With importing a CSV file, device information can be registered in the Administration Manager. There are
two ways to import; importing an information file without selecting a manually sorted Device Group and
importing an information file for devices belonging to a selected manually sorted Device Group.
Note:
Only users with Administrator rights can import device information.
A CSV file exported from the Administration Manager or a file you created can be used to import device
information.
If you specify any property values except the pre-defined property, they are imported as custom properties.
Device information that has been already registered in the Administration Manager is updated with the
imported information.
Also see the RICOH Streamline NX Administrators Guide, Notes on Importing a CSV file.
A. To import an information file without selecting a manually sorted Device Group, proceed as
follows:
2. If a Device Group is selected, right-click and [Deselect], so group information is not exported.
3. Click [Edit] > [Import].
Note :
If a CSV file to be imported includes the information of
manually sorted Device Group, the property value first
appeared in the column of [{ManualGroupProperty_N}] is
exported as a name of root folder of manually sorted Device
Group.
4. Click [Browse] to select a file, and then click [Open].
107
Note :
If the file or folder name contains double quotation marks, \, /, :, *, ?, <, >, or
|, [Browse] does not work.
5. Click [OK].
Note :
If device information that has been imported is not displayed correctly on the [Device List] pane,
refresh the display on the pane.
Check the result with the job log of the Administration Manager. For details, see the RICOH
Streamline NX Administrators Guide, Managing Administration Manager Logs.
B. To import an information file for devices belonging to a selected manually sorted device group,
proceed as follows:
1. On Device Groups pane, select a group, and then click [Edit] > [Import].
Note :
If a CSV file to be imported includes the information of manually sorted device group, the subfolder
structure is imported with a selected device group as the top of hierarchy.
2. Click [Browse] to select a file, and then click [Open].
Note :
If the file or folder name contains double quotation marks, \, /, :, *, ?, <, >, or |,
[Browse] does not work.
3. Click [OK].
Note :
If device information that has been imported is not displayed correctly on the Device List pane,
click refresh [ ].
Check the result with the job log of the Administration Manager. For details, see the RICOH
Streamline NX Administrators Guide, Managing Administration Manager Logs.
108
*Add Device Software (SDK) Applications

To support Streamline NX functionality, connected devices must run embedded SDK applications
(firmware) that enables the device to communicate with the SL-NX server(s).
Note :
Only users with Administrator rights can add/delete device SDK Applications.
SL-NX Server Device SDK Application Std/Opt. Folder\File Name

Authentication AA Manager (Embedded) Std. AuthenticationandAccountingManager\aam-
and Accounting 2.2.1.0
Manager
Scan and Fax SF Manager (Embedded) Opt. ScanandFaxManager\sfm-2.2.0.0
Manager
Secure Print SP Manager (Embedded) (for MFP) Opt. SecurePrintManager\spm-2.2.0.0
Manager
SP Manager (Embedded) (for Printer) SecurePrintManager\spm-printer-2.2.0.0
Direct Print Direct Print (with tracking) Std. direct_print.zip
Note:
To add SDK applications, proceed as follows:
2. On Category pane, click [ Device Software] > [ Repository], and then click [SDK Application].
3. Click [ ] to open Register SDK Application screen.
4. Browse to application folder, within the EmbeddedSoftware

folder of installation media.
109
5. Select application, e.g., aam-2.2.1.0.zip.
6. Confirm that selected application appears on the Register SDK

Application screen, and then click [OK].
SDK Application Repository pane displays added application...
7. Repeat steps 3 - 6 to add additional SDK applications, e.g., Direct Print, as well as optional Scan and Fax
Manager (Embedded) and Secure Print Manager (Embedded).
8. Confirm that embedded applications appear on the SDK Application Repository screen
Note :
If necessary, click refresh [ ].
110
Delete SDK Applications

To delete an SDK Application, proceed as follows:
1. Repeat steps 1 3, Add Device Software (SDK) Applications.
2. Select Application, and then click [ ].
Note :
*Add a Device Software Template

Added a Device Software Template for SDK Applications enables you to easily install Streamline NX
firmware to multiple devices. A Device Software Policy, created in the next section, will then enable you to
push the Device Software Template to all selected devices.
The following SDK Applications are available. Note that required applications vary by device type MFP or
printers, specifically, you must create separate Templates for MFPs and printers.
SL-NX Server Device SDK Application MFP Printer

Authentication and Accounting AA Manager (Embedded) aam-2.2.0.0 aam-printer-2.2.0.0
Manager
Scan and Fax Manager SF Manager (Embedded) sfm-2.2.0.0 Not supported (prohibited)
Secure Print Manager SP Manager (Embedded) spm-2.2.0.0 spm-printer-2.2.0.0
To add a Template for installation of SDK Applications, proceed as follows:
111
2. On Category pane, click [ Device Software] > [Template], and then click [ ].
3. Enter Template Name, up to 128 characters.
4. Enter Comment.
5. Click [SDK Application] tab.
6. Click [Browse].
7. Select SDK Applications.
Note :
To select multiple apps, Ctrl + click.
If Direct Print is available, it is
recommended that you include this
commonly-used feature.
Important:
Check that Repository is selected as the
Browse setting.
8. Click [ Select].
112
Note :
Check that Installation Type is Install for
each application.
9. Click [OK].
10. To save the Template, click [OK].
Note :
To exit, without saving, click [Cancel].
11. Confirm that the newly-created Template has been successfully added....
Note : If necessary, click refresh [ ].
113
Edit a Device Software Template

Note :
Only users with Administrator rights can edit any Device Software Templates.
Limited access users can edit only Device Software Templates they have access rights.
To edit a Device Software Template, proceed as follows:
2. On Category pane, select [ Device Software] > [Template], select a Template to edit, and
then click [ ].
3. Perform steps 3 - 11, Add a Device Software Template.
Copy a Device Software Template

To copy a Device Software Template, proceed as follows:
2. On Category pane, select [ Device Software] > [Template], select a Template, and then click [ ].
114
Copied Device Software Template displays...
3. Edit as needed, and then click [OK]. See Add a

Device Software Template.
Delete a Device Software Template

To delete a Device Software Template, proceed as follows:
2. On Category pane, select [ Device Software] > [Template], select a Template, and then click [ ].
Note :
Multiple Templates can be selected.
3. Click [Yes].
Note :
115
*Add/Execute a Device Software Policy

Adding a Device Software Policy enables you to apply a Device Software Template, containing required SDK
Applications, to specific devices.
To add a Policy to install device SDK Applications, proceed as follows:
2. On Category pane, click [ Device Software] > [Policy], and then click [ ].
3. Specify Policy Settings, as follows:
a. Enter Policy Name, up to 128 characters.
b. To select a previously-created Template, click [Browse].
c. Select Template to install SDK Applications.
d. Click [Select].
116
e. Confirm that selected Template displays
f. Click [ ] to add device(s) to which the SDK application

will be installed.
g. On Groups pane, click [IP Address] or [Model].
h. Select device(s) on Devices pane.
i. Click [Select].
j. Confirm that the selected device(s) appear on

Selected Devices pane, and then click [OK].
117
k. Confirm that selected device(s) appear on the Policy

Settings screen...
l. For Job execution type, select [Apply].
m. For Execution, select [Now].
Note :
When [Now] is selected, the job is executed immediately after
clicking [OK].
If [Now] is not selected, [Execute Policy] can be selected by
right-clicking on the Policy on Device Software Policy list, to
manually execute the job.
4. Click [OK].
5. On Information (job execution confirmation) screen, click [OK].
6. Confirm that the Policy appears in Device Software Policy list
7. Confirm job execution status. Click [ ] to display additional menu items, and then select [Jobs].
Note :
The Job screen is used to confirm jobs currently being executed.
118
8. Lastly, click [ ], and then select [Log].
Note :
The Progress percentage is calculated as follows:
% = Number of devices for which job execution has been completed/total number of devices on
which job has/is being executed.
Example :
When the job is executed on a single device, the display will change from 0% to 100%.
When the job is executed on two devices, the display will change from 0% to 50% to
100%.
The devices are now running the required firmware to support SL-NX services!
Edit a Device Software Policy

Note :
Only users with Administrator rights can edit a Device Preference Policy.
Limited access users can edit only Device Preference Policy they have access rights.
To edit a Device Software Policy, proceed as follows:
2. On Category pane, select [ Device Software] > [Policy], select a Policy, and then click [ ].
119
3. Perform steps 3 - 8 in Add/Execute a Device Software

Policy.
Note :
A Device Group for which the access level of [Device Manager] is not granted to a login user or a
device that belongs to that group is displayed in gray instead of black in [Devices] of [Basic Settings]. In
this case, [OK] is disabled.
A Server Group for which an access right is not granted to a login user or a server that belongs to that
group is displayed in gray instead of black in [Servers] of [Basic Settings]. In this case, [OK] is disabled.
When a user logs in as an Administrator, all Devices, Device Groups, Servers or Server Groups are
displayed in black in [Devices] or [Servers] of [Basic Settings], and all the Policy settings are enabled.
[Schedule] cannot be selected in [Execution] of [Basic Setting]. To specify the Schedule, see Add
Schedule to a Device Software Policy Setting.
Delete a Device Software Policy

To delete a Device Software Policy, proceed as follows:
2. On Category pane, select [ Device Software] > [Policy], select a Policy, and then click [ ].
Note :
Multiple Policies can be selected.
3. Click [Yes].
120
Note :
If there is a Device Group for which the access level of [Device Manager] is not granted to a login user
or a device that belongs to that group in a policy setting, [ ] is disabled and a Policy setting cannot be
deleted.
If there is a Server Group for which an access right is not granted to a login user or a server that belongs
to that group in a Policy setting, [ ] is disabled and a Policy setting cannot be deleted.
When a user logs in as an Administrator, all the Policy settings can be deleted.
If Policy settings you have deleted remain displayed, click refresh [ ].
Add Schedule to Device Software Policy Setting

You can register a Schedule to specify when to execute Device Software Policy settings. To do so, proceed as
follows:
2. On Category pane, select [ Device Software] > [Policy], select a Policy, and then click [Add
Schedule].
3. Specify Schedule Settings, as outlined below.
Setting Description
Enable: Select whether the schedule is enabled or
disabled.
Target Function: Select Device Software.
Target Setting: Click [Browse] to select a target setting, and then

click [Select].
Comment: Enter any necessary comment.
First Execution Specify a start date and time to execute.
Date and Time:
Schedule Type: Once only:
Select when executing once at a specified date
and time.
Weekly:
Select when executing every week on a
specified day of the week. Select the day of the
week.
Note: To execute the schedule every day, select
all checkboxes.
121
Monthly:
Select when executing every month. Select a
date in the drop-down list.
4. On Schedule Settings screen, click [OK].
Note :
To exit, without saving settings, click [Cancel].
5. Click [OK].
6. Confirm that added Schedule appears on Schedule List pane Click [ ], and then click [Scheduler].
Note :
122
Edit a Schedule
To edit a Schedule to execute Device Software Policy settings, proceed as follows:
1. Click [ ], and then click [Scheduler], as illustrated above.
2. Select Schedule in Schedule List, and then click [ ].
3. Perform steps 3 6, Add Schedule to Device Software Policy Setting.
Delete a Schedule
To delete a Schedule, proceed as follows:
1. Click [ ], and then click [Scheduler].
2. Select Schedule in Schedule List, and then click [ ].
Note :
To cancel the deletion, click [No].
Confirm that the Schedule has been removed from the list. If
necessary, click refresh [ ].
123
Executing a Policy Setting

To execute a Policy, proceed as follows:
2. On Category pane, select [ Device Software] > [Policy], select a Policy, and then click [Execute].
3. Click [OK].
Note :
A Policy setting can be checked for consistency with or applied
to only manually sorted Device Groups for which the access
levels of [Device Manager] are granted to a user and devices
that belong to those groups, or to only manually sorted Server Groups for which the access rights are
granted to a user and servers that belong to those groups. Here, a user means a person who clicks
[Execute] or selects [Execute Policy] in [Execution], and does not mean a person who has specified a
Policy setting.
Check the result with the job log of the Administration Manager. For details, see the RICOH Streamline
NX Administrators Guide, Managing Administration Manager Logs.
124
*Add a Device Preference Template

A Device Preference Template is used to configure device settings for AAM
and SPM servers, thus enable authentication and job distribution, respectively.
A Device Preference Policy, created in the next section, will then enable you
to push that Template to all selected devices.
To add a Device Preference Template, proceed as follows:
2. On Category pane, click [ Device Preference] > [Template], and

then click [ ].
3. Enter Template Name.
4. Enter Comment.
5. On Template Category pane, click [Authentica-

tion and Accounting Manager], and then click
[Embedded Settings].
125
6. Enter Host Name: AAM Server IP address.
7. Enter Port Number: AAM Server HTTPS

port.
Important:
The HTTPS port configured for the AAM
Server must always be specified as the
port number. This port is used to transfer
user information from the device. It is
prohibited to send user information over
an HTTP connection, so if an HTTP port
is selected, user authentication will fail.
8. Next, open [Secure Print Manager].
9. Enter Display Name: SPM Server.
10. Enter Server Name: SPM Server IP address.
11. Click [OK].
12. Confirm that the added Template appears in Device Preference Template list
Note :
126
Edit a Device Preference Template

Note :
Only users with Administrator rights can edit Device Preference Templates.
Limited access users can edit only Device Preference Templates they have access rights.
To edit a Device Preference Template, proceed as follows:
2. On Category pane, select [ Device Preference] > [Template], select a Template, and then click [ ].
Note :
A Template Category name of a selected
Template is displayed in blue.
3. Expand desired Template.
4. Perform steps 5 12, Add a Device Preference

Template.
Copying a Device Preference Template

Note :
Any user can copy a Template regardless of the ACL setting, though contents of the ACL settings will not
be copied.
To Copy a Device Preference Template, proceed as follows:
127
Copied Device Preference Template appears
3. Perform steps from 3 12, Add a Device Preference

Template.
Export/Import a Device Preference Template
A. Export a Device Preference Template
Note :
Any user can export a Template regardless of the ACL setting, though contents of the ACL settings
will not be exported. For details on ACL settings, see the RICOH Streamline NX Administrators Guide.
2. On Category pane, click [Device Preference] > [Template], select a Template, and then
click [ ].
3. Specify a destination, and then click [Save].
Note :
Export is complete
4. Click [OK].
128
B. Import a Device Preference Template
Note :
Only users with Administrator rights can import Server
Preference Templates.
1. Complete steps 1 - 2 above.
2. On Device Preference Template list, select a Template file to

be imported, and then click [ ].
3. Click [Open].
Note :
If information on the imported CSV file is not displayed, click refresh [ ] on the Device
Preference Template pane.
Delete a Device Preference Template

Note :
Only users with Administrator rights can delete any Device Preference Templates.
Limited access users can delete only Device Preference Templates they have access rights.
To delete a Device Preference Template, proceed as follows:
Note :
3. Click [Yes].
Note :
Confirm that Template has been removed from the list. If necessary, click refresh [ ].
129
*Add/Execute a Device Preference Policy

After creation of the Device Preference Template, you must add a Device Preference Policy that will push
Template settings to all selected devices, which enables authentication and job distribution through the AAM
and SPM Servers, respectively.
To add a Policy that will apply the Device Preference Template to select devices, proceed as follows:
2. On Category pane, click [ Device Preference] > [Template], and then click [ ].
3. Specify Policy Settings, as follows:
a. Enter Policy Name.
b. Click [Browse] to select previously-created Device Preference

Template.
c. Select Template.
d. Click [Select].
130
e. Confirm that selected Template displays
f. Click [ ] to add a device to which this Template will be

applied.
g. On Groups pane, click [IP Address] or [Model].
h. Select device on Devices pane.
i. Click [Select].
j. Confirm that the selected device appears on

Selected Devices pane, and then click [OK].
131
k. Confirm that selected device appears
l. For Job execution type, select [Apply].
m. For Execution, select [Now].
Note :
When [Now] is selected, the job is executed immediately
after clicking [OK].
If [Now] is not selected, [Execute Policy] can be selected
by right-clicking on the Policy on Device Software
Policy list, to manually execute the job.
4. Click [OK].
5. On Information (job execution confirmation) screen, click [OK].
6. Confirm that the Policy appears in Device Preference Policy list
7. Use the [Job] and [Log] screens to confirm that the Device Preference Policy has been successfully
applied.
132
Edit a Device Preference Policy

To edit a Device Preference Policy, proceed as follows:
2. On Category pane, click [ Device Preference] > [Policy], select Policy, and then click [ ].
3. Follow steps 3 7, Add/Execute a Device Preference Policy.
Delete a Device Preference Policy

To delete a Device Preference Policy, proceed as follows:
2. On Category pane, click [ Device Preference] > [Policy], select Policy, and then click [ ].
3. Click [Yes].
Note :
Confirm that Policy has been removed from the list. If necessary, click
refresh [ ] on the Device Preference Policy pane.
133
Step 8: Configure Servers

Streamline NX servers are registered through Administration Managers Server Management screen.
Specifically, you must register servers for Authentication and
Accounting Manager (AAM), a standard SL-NX component. If Scan
and Fax Manager (SFM) and Secure Print Manager (SPM)
components have been purchased, those servers must be registered
as well.
After registration is complete, you can access the Home page of each
server component, for on-going system management. For details, see
the RICOH Streamline NX Administrators Guide.
The Server Management screen has two panes:

A. Server Groups
B. Server List
When servers are registered, they are automatically sorted by server type; the folder is displayed in blue. For
details, see Add Servers (to follow). Note that depending on your needs, the registered servers can also be
manually sorted into groups; the folder is displayed in yellow. For details, see Group Servers.
*Add Servers
Note :
Only users with Administrator rights can add servers.
To add the AAM Server, proceed as follows:
1. Click [Server Management] tab.
2. On Server List, right-click [Server Name] > [Add Server]
134
3. Specify Server Settings, as outlined below:
Setting Description
Server Name: Enter a server name, e.g., AAM Server, SFM
Server or SPM Server.
Server Type: Select server type from drop-down list:
Authentication and Accounting Manager
Scan and Fax Manager
Secure Print Manager
Note: To enable log-in to the individual servers
(Single Sign-On), you must select the correct
Server Type for the specified URL (shown
below).
Language: Authentication and Accounting Manager & Secure Print Manager: AdminTool for each
server uses the language you selected when logging in, either [English] or [Japanese].
Scan and Fax Manager: Select [English], [German], [French], [Italian], [Spanish], [Dutch],
[Danish], [Portuguese], [Norwegian], [Russian], [Simplified Chinese] or [Japanese].
URL: Enter a URL in the format to follow, in order to open the AdminTool of the respective server.
Server Name URL Entry Examples
AAM Server http://AAMServer IPAddress:8081/aam-s
1
SFM Server http:// SFMServer IPAddress:8082/sfm
SPM Server http://SPM Server IPAddress:8083/spm-s
1
If a virtual directory (directory on the web server) was specified during installation of the
SFM Server, the default virtual directory is sfm.
Note:
Do not use a loopback address (127.0.0.1) or a host name localhost when accessing the
ADM Server remotely. Otherwise, a single sign-on (SSO) service will not work.
If the SSL protocol and a port number are specified, ADM can connect to each server using
the HTTPS protocols. If any SSL certificates for servers are not imported to ADM, the
default certificate can be used.
When using the default certificate in Internet Explorer 9 or 10: In Internet Explorer, [Warn
about certificate address mismatch] is enabled by default. If connecting to the AAM, SFM
or SPM Server through the Administration Manager AdminTool, specify a correct site
name for each certificate to apply to the Administration Manager.
For details on the SSL certificates, see the RICOH Streamline NX Administrators Guide.
Comment: Enter any necessary comment.
135
4. Click [OK].
Note :
To exit without saving settings, click [Cancel].
5. To add the next server, repeat steps 2 4.
6. Confirm that servers display on Server List
Note :
If necessary, click refresh [ ] on the Server List pane to update screen.
Administration Manager cannot be used to register or manage the Report Generator. For details,
see Step 10: Configure Report Generator.
A server that does not belong to any other groups on the same level is in the No Value folder.
*Confirm ADM Connection to Servers

To confirm that Administration Manager can access AAM, SFM and SPM servers, proceed as follows:
Important:
If using Internet Explorer 11 as your web browser, see IE 11 Protected Mode.
1. Log in to Administration Manager AdminTool.
2. Confirm that the following values have been set.
[Authentication Profile1]: built-in

[Password]: blank
[Language]: English
136
4. On Server Groups pane, click [ Server Type].
5. Click AAM Server URL, to open AAM Home page.
AAM Home Page
Important:
If the error message at right displays, a connection cannot be established
between the ADM and AAM Server. See Appendix K: Troubleshooting
Checklist.
If the error message at right displays, there is a mistake in the AAM Server
authentication settings. A connection can be established with the AAM
Server, but AAM-S authentication has failed. See Configure Authentication
Profile.
6. Close your web browser.
7. Repeat steps 4 6 to open SFM Home page, and then SPM Home page.
SFM Home Page
137
SPM Home Page
Note :
For management of AAM, SFM and SPM Servers, see the RICOH Streamline NX Administrators Guide.
8. When finished, close your web browser.
IE 11 Protected Mode
In order for SL-NX web pages (ADM, AAM, SPM and/or SFM)
to display in Internet Explorer 11, the Protected Mode setting
must be unchecked, otherwise the error message at right
displays...
To resolve this issue, proceed as follows:
1. Open IE 11 web browser.
2. Click [Tools] > [Internet Options].
3. Uncheck Protected Mode, and then click [OK].
4. Restart Internet Explorer.
138
Edit Servers
Note :
Only users with Administrator rights can edit servers.
To edit a server, proceed as follows:
1. Click [Server Management] tab, right-click on desired server row, and then click [Edit Server].
2. Select Server Type from drop-down list.
3. Edit Server Settings, as required. For details, see Server

Settings.
4. Click [OK].
Note :
If necessary, click refresh [ ] on the Server List pane to update screen.
Group Servers
Servers can be manually sorted into groups, which can ease management by dividing a large number of
servers into categories. When a manually sorted server group is selected on the [Server Groups] pane, the
information of servers registered in the selected group are displayed on the [Server List] pane.
A Parent Group (root group), or a sub group that belongs to a Parent Group, can be registered to classify
servers.
To register a Parent Group, proceed as follows:
1. Click [Server Management] tab > [Edit] > [Add Group].
139
Important:
If a group is selected (highlighted), right-click on group row, then click [Deselect] to deselect the group
before adding a Parent Group, otherwise a sub-group belonging to the selected Parent Group will be
registered.
Note :
3. Click [OK].
4. Confirm that the Parent Group displays on the Server List
Note :
The Parent Group is displayed in yellow. All registered servers are in the Parent Group you have
registered.
If the Group Name you entered is not displayed correctly, click refresh [ ] on the Server Groups
pane.
5. To register a sub-group, select a Parent Group to which a

sub-group belongs, and then [Edit] > [Add Group].
Note :
For details on Account Control List (ACL) settings, see the
RICOH Streamline NX Administrators Guide.
7. Click [OK].
8. Confirm that sub-group displays
Note :
The name of the [Uncategorized] group cannot be changed.
140
Edit Server Groups

Note :
Limited access users can edit only manually sorted Device Groups for which the access level of [Server
To edit a Parent Group or sub-group name, proceed as follows:
2. On Server Groups pane, select desired Parent Group or

sub-group, right-click on row, and then click [Edit
Group].
3. Edit Group Name.
4. Click [OK].
Note :
If necessary, click refresh [ ] on the Server Groups pane to update screen.
Delete Server Groups

Note :
Limited access users can edit only manually sorted Device Groups for which the access level of [Server
When a Parent Group or sub-group is deleted, the registered servers are not deleted.
To delete a Parent Group or sub-group name, proceed as follows:
2. On Device Groups pane, select desired Parent Group or

Sub-Group, right-click on row, and then click [Delete
Group].
3. Click [Yes].
Note :
If necessary, click refresh [ ] on Server List to update screen.
141
Delete Servers
To delete a server, proceed as follows:
Note :
Only users with Administrator rights can delete servers.
1. Click [Server Management] tab, right-click desired server row, and then click [Delete Server].
Note :
Multiple servers can be selected.
Note :
If necessary, click refresh [ ] on the Server List pane to update
screen.
*Add a Server Preference Template

With Server Preference Template settings, you can easily configure server settings. Then, in the next section,
you will apply those settings to the servers.
To add a Server Preference Template, proceed as follows:
2. On [Category] pane, select [Server Preference] > [Template], and then click [ ].
142
3. Enter Template Name, up to 128 characters.
4. Enter Comment.
5. Click [OK].
Note :
To cancel settings, click [Cancel].
To establish server settings that will be applied to the AAM Server, continue
6. Select the newly-added Template from the Server Preference Template list, and then click [ ].
7. Click [Authentication and Accounting

Manager] > [Authentication Settings].
8. Select Authentication Settings checkbox.
9. Scroll to bottom of screen, and click [Edit].
143
10. Select the Authentication Setting Name

created earlier.
Display shows selected Authentication Settings
11. On Template Category pane, click [Scan and

Fax Manager] > [I/O Device Settings].
12. Select I/O Device Settings checkbox.
13. Click [ ] to add a device to which to distribute

Profiles from the SFM Server.
144
14. Select device(s), and click [OK].
15. Confirm Profile ID. A Profile ID is automatically

assigned (pf_1, pf_2, etc.), must be set as Profile
ID. Profile names should not be entered. Scroll
down, if necessary.
Note : The Profile ID is an ID used to specify the

screen to display on the device control panel. The
screen layout is configured from [Scan and Fax
Manager] > [Configuration] > [Profile]. For
details, see RICOH Streamline NX Administrators
Guide.
Important: (pf_1, pf_2, etc.) must be set as

[Profile ID] in [I/O Device Settings]. Profile
names should not be entered. An ID is
automatically assigned to every newly created
profile. Two profiles are installed by default.
"pf_1" is the ID used for standard MFPs. "pf_2"
is the ID used for 4.3 inch panel MFPs.
16. On Server Preference Template pane, confirm that the created Template is successfully saved.
145
Edit a Server Preference Template

Note :
Only users with Administrator rights can edit any Server Preference Templates.
Limited access users can edit only Server Preference Templates that they have been granted access rights.
To edit a registered Server Preference Template, proceed as follows:
1. On Server Preference Template pane, select a Template, and then click [ ].
2. Select [Authentication and Accounting Manager] > [Authentication Settings] or [Scan and Fax
Manager] > [I/O Device Settings].
Authentication and Accounting Manager Scan and Fax Manager
3. Edit Template. See Add a Server Preference Template.
146
Copy a Server Preference Template

Note :
Any user can copy a Template regardless of the ACL setting, though contents of the ACL settings will not
be copied.
To copy a registered Server Preference Template, proceed as follows:
Copied Server Preference Template displays
2. Edit as needed. See Add a Server Preference

Template.
147
Export/Import a Server Preference Template

A Server Preference Template can be exported/imported as a UTF-8 encoded CSV file. To do so, proceed as
follows:
A. Export a Server Preference Template
Note :
Any user can export a Template regardless of the ACL setting, though contents of the ACL settings
will not be exported. For details on ACL settings, see the RICOH Streamline NX Administrators Guide.
2. On Category pane, click [Server Preference] > [Template], select a Template, and then
click [ ].
3. Specify a destination, and then click [Save].
Note :
Export is complete
4. Click [OK].
148
B. Importing a Server Preference Template
Note :
Only users with Administrator rights can import Server
Preference Templates.
1. Complete steps 1 - 2 above.
2. On Server Preference Template list, select a Template

file to be imported, and then click [ ].
3. Click [Open].
Note :
If information on the imported CSV file is not displayed on the Server Preference Template list,
click refresh [ ].
Delete a Server Preference Template

Note :
Only users with Administrator rights can delete any Server Preference Templates.
Limited access users can delete only Server Preference Templates they have access rights.
To delete a Server Preference Template, proceed as follows:
2. On Category pane, click [Server Preference] > [Template].
Note :
4. Click [Yes].
Note :
149
5. Confirm that the Template has been deleted
Note :
*Add/Execute a Server Preference Policy

After a Server Preference Template has been created, you add a Policy that will then push those settings to
SL-NX servers specified in the Template.
To add/execute a Server Preference Policy, proceed as follows:
2. On [Category] pane, select [Server Preference] > [Policy], and then click [ ].
3. Enter Policy Name, up to 128 characters.
150
4. Click [Browse].
5. Select Server Preference Template created in

previous section.
6. Click [Select].
7. Confirm that selected Server Preference Template displays
8. Enter Comment.
9. Click [ ] to add a server to which to apply Template settings.
10. On Groups pane, click [Server Type].
11. Click AAM Server, hold Shift and click SFM Server,
and then click [Select].
Note :
There are no Templates for SPM Server. If a Server
Preference Template is applied to a SPM Server, the
selection is ignored.
12. Click [OK].
151
13. Confirm that the selected servers are displayed
14. Select Execution [Now] checkbox.
15. Click [OK].
16. On Job Execution Information screen, click [OK].
Note :
Use the [Job] and [Log] screens to confirm that the server
configuration Policy has been successfully applied.
When the Server Preference Policy is applied successfully,
Single Sign-On will be possible to the AAM Server.
Edit a Server Preference Policy

To edit a Server Preference Policy, proceed as follows:
2. On [Category] pane, select [Server Preference] > [Policy], select a Policy, and then click [ ].
152
3. Edit Policy, as needed. See Add/Execute a Server Preference

Policy.
Delete Server Preference Policy

Note :
Only users with Administrator rights can delete any server preference policies.
Limited access users can delete only server preference policies they have access rights.
To delete a Server Preference Policy, proceed as follows:
2. On [Category] pane, select [Server Preference] > [Policy], select a Policy, and click [ ].
3. Click [Yes].
Note :
153
4. Confirm that the Policy has been deleted
Note :
154
Step 9: Configure SFM and SPM Servers for AAM

This procedure is only required if the optional Scan and Fax Manager and Secure Print Manager
components have been purchased, installed and activated. By completing this step, SFM and SPM
Servers will be able to communicate with AAM, for support of user authentication and job distribution.
SPM Server Configuration
2. On [Server Group] pane, select [Server Type] to display the registered servers.
3. On Server List, click SPM Server URL.
4. After logging in to Secure Print Manager, click [Authentication and Accounting Manager Settings].
5. For Primary Server, enter:
[Server Address]: AAM Server IP address, e.g., 192.168.0.101.

[HTTPS Port Number]: AAM Server HTTPS port number, e.g., 8444
155
Important:
The HTTPS port configured for the AAM Server must always be specified as the port number. This
port is used to transfer user information from the device. It is prohibited to send user information over
an HTTP connection, so if an HTTP port is selected, user authentication will fail.
6. Click Connection Test [Run].
7. Confirm that the connection test was successful, and

then click [OK].
8. To save settings, click [OK]. Scroll down, if necessary.
You should also test the connection between the SPM Server and device running SPM-E (the embedded
SDK application). To do so, proceed as follows:
1. Open your web browser and type:

http://DeviceIPaddress :8080/spm/login.
Note :
Default login credentials are admin and
password.
2. On navigation pane, click [System

Configuration].
3. Check settings, and then click [Run].
Note :
Connection Test Result should indicate
Succeeded.
156
SFM Server Configuration
2. On [Server Group] pane, select [Server Type] to display the registered servers.
3. On Server List, click SFM Server URL.
SFM Home page displays
4. Click [Configuration].
5. Click [System] tab.
6. For Primary Server, enter the following:
[Server Address]: AAM Server IP address, e.g.,

192.168.0.101.
[HTTPS Port Number]: AAM Server HTTPS port
number, e.g., 8444
Important:
The HTTPS port configured for the AAM Server must always be specified as the port number. This
port is used to transfer user information from the device. It is prohibited to send user information over
an HTTP connection, so if an HTTP port is selected, user authentication will fail.
157
7. Click [Test].
8. Confirm that the Connection Test was successful, and then

click [OK].
9. To save settings, click [Apply]. Scroll down, if necessary.
158
*Create SFM Profile

A Profile defines the document distribution flow of an MFP, i.e., identifies the Groups, Projects and Services
available to the user at the MFP display panel. The Profile works in the background to control network scan
operations.
Note :
For details, see RICOH Streamline NX Administrators Guide.
Configure Scan to Folder

The Scan to Folder Profile enables MFP users to save scanned documents to shared network folders or save
documents locally on the server.
To allow for system testing in Step 12, you must first identify a target folder for the default Profile (pf_1),
which was created automatically when the SFM software was installed.
2. Click [Server Management] tab, and then [Server Type] > [Scan and Fax Manager].
3. In URL column, click SFM link.
4. On SFM Home screen, click [Profile].
159
5. On Profile list, double-click [RICOH Streamline NX(WVGA) (pf_1)].
Note :
Two profiles are install-
ed by default. Profile ID
pf_1 specifies the screen
to display on standard
MFP touch panels.
Profile ID pf_2 specifies
the screen to display on
MFPs with 4.3 touch
panels.
6. On SFM Services screen, double-click

[Scan to Folder].
7. On Delivery Flow screen, double-

click [Send to Folder].
160
8. On Properties screen, select Send to

Folder checkbox, and then click [Edit].
9. On General Settings screen, enter the Path

to the destination folder, and any other
required fields, and then click [OK].
Note :
All folder contained in the path will be
available as destinations.
Local folders can be specified as the
destination folders. When entering local
folders, use the absolute paths for each
platform, e.g., C:\LocalFolder.
10. Click [Filter].
Note :
A Filter represents a set of criteria that
defines input/output, controlling how
a document is processed, thus
extending SFM functionality.
11. On Scan Settings screen, enter desired

defaults.
161
12. Click [Image Correction] tab, and select

desired settings.
13. Click [Service] tab.
Note :
After configuration is complete, you
can view/confirm what the user will
see on the MFP touch panel.
14. When finished, click [Apply] > [OK]

to save settings.
162
Configure Scan to Mail
1. Follow steps 1-5, previous section.
2. On SFM Services screen, double-click

[Scan to Mail].
3. On Scan to Mail screen, double-click

[Send to Mail].
4. On Properties screen, enter all required

Email System Settings.
5. Click [Send to Mail Option Settings].
163
6. Select Options Settings.
7. Click [Email Search Settings].
8. Select all required settings, and then click

[OK] to save settings.
9. Click [Filter].
Note :
A Filter represents a set of criteria that
defines input/output, controlling how a
document is processed, thus extending
SFM functionality.
164
10. Click [Image Correction] tab, and select

desired settings.
11. Click [Service] tab.
Note :
After configuration is complete, you can
view/confirm what the user will see on
the MFP touch panel.
12. To test the Address Book search function,

click [Search].
13. Enter search criteria, and then press [OK],

to search for all email addresses that
match.
165
Search results display
14. When finished, click [Apply] > [OK] to

save settings.
166
Step 10: Configure Report Generator

This step is required to enable RG to use its internal database to build the connection to AAM and ADM
Databases. RG will synchronize the data from all assigned AAMs and Administration Manager on a regular
basis, as defined by the user.
Note :
Version and Edition
It is not possible to have different versions/editions of SQL Server over AAM, ADM and RG Databases.
All the databases in the system should have the same version and edition.
Authentication Type
Authentication type (Windows authentication/SQL Server authentication) must be the same for all the
server components (AAM, ADM and RG Databases).
If AAM, ADM and RG Databases are installed onto different servers, it is recommended to ensure stable
connectivity between the RG Database instance and the AAM/ADM Database instance(s) by using a tool
like DTCtester before installation (http://support.microsoft.com/kb/293799/en-us).
For additional information, see Step 3: Create Databases.
Important:
The RD database must be set up before RG can be configured, otherwise its not possible to create a
connection to the AAM Server. For details on RG Database creation, see 3.4 Report Generator Database.
To log in to Report Generator, as the administrator, proceed as follows:
1. Double-click RICOH Streamline NX Report Generator desktop icon.
Note :
To remotely connect to the RG Server from your web browser, enter the RG URL:
http://<Report Generator IP address/Host name>:<Report Generator port
number>/main/AdminTool.html
Example : http://192.168.0.11:8084/rg/login
Report Generator login screen displays
2. If necessary, select English from drop-down.
3. Click [Switch to Administration Login Page]

link at the bottom of the page.
167
Administration Manager login screen displays
4. Enter User Name and Password.
Note :
Default user name is admin. Default password is password.
5. Click [Login].
Important:
If the Report Generator login screen is blank (as shown at
right), you must add Compatibility View Settings, as
outlined below:
a. Click [Tools] > [Compatibility View settings].
b. Add loopback IP address, SL-NX Server IP address and

localhost (RG URL) to the Compatibility View list.
Note :
The addresses added to compatibility mode will depend on where
the RG page is being accessed from. For instance, if the
Administrator (or user) is accessing the RG page locally, then the
localhost and loopback address (127.0.0.1) must be added. If
accessing the page remotely, then the IP address and/or host
name must be added.
c. If necessary, select [Display intranet sites in Compatibility

View] and [Use Microsoft compatibility list] checkboxes.
d. Click [Close].
168
*RG Database Connection

In order to generate reports, you must connect the RG Server to the RG Database, as follows:
Continuing from step 5, previous page
1. Click [RG Database Connection].
2. Specify RG Database Connection settings, as outlined below:
Setting Description
Database Host Host name/IP address of the database to be used
by the Report Generator, for example,
192.168.1.101.
Connection Select Instance Name.
Type
Port Number Automatically selected.
Instance Name Instance name of the database to be used by the

Report Generator, StreamlineNX.
Database Name of the database to be used by the Report
Name Generator, RG.
Authentication Database authentication method, SQL Server
Type Authentication.
User Name & SQL user name and password only when using SQL
Password Server Authentication, for example, sa.
3. Click [Test Connection] to check whether the database

connection is specified correction.
Note :
If the database is not set up correctly, the pop-up message reads, Connection failed, please check the
error log for details.
4. Click [OK].
169
SQL Server 2012 Express Edition Setting

This step is only required if you are using SQL Server 2012 Express Edition.
1. Click [MS SQL Edition Setting].
2. Select [Express Edition].
3. Click [OK].
*AAM/ADM Synchronization
In order to create reports, you must set up the connection to the AAM and ADM Databases, and then
schedule synchronization of those databases with Report Generator.
1. Click [AAM/ADM Synchronization].
170
AAM/ADM screen displays
2. To add an AAM Database, click [Add].
3. Specify the connections to the AAM and ADM Databases, as outlined below:
Setting Description
Name Display name for this connection
setting, AAM.
Use same When this checkbox is selected,
instance as RG [Database Host], [Connection Type],
[Port Number] and [Instance Name]
are grayed out.
Database Host Host name/IP address of the
database to be used by the AAM
Server.
Connection Instance name.
Type
Port Number Not necessary.
Instance Name Instance name of the database to

be used by the AAM Server,
StreamlineNX.
Database Instance name of the database to
Name be used by the AAM Server, AAM.
Authentication SQL Server Authentication
Type
User Name & SQL user name and password only
Password when using SQL authentication
4. After entering information, click [Test Connection].
Next, configure scheduled synchronization between the Report Generator and the AAM Database.
5. On Synchronization tab, click [Add]. [Daily], [Weekly], or [Monthly] synchronization can be selected.
6. Click [Execute Now] and confirm that scheduled synchronization to the AAM Database can be
executed.
171
Note :
If the [Execute Now] button is grayed out, click
[OK] and return to the [AAM/ADM] screen. Click
the [Edit] button, and when returning to the [AAM
Database creation/edition page] screen, the
[Execute Now] will be selectable.
7. When you have finished configuring synchronization

with the AAM Database, click [OK] and return to
the [AAM/ADM] screen.
8. To add an ADM Database, click [Add].
[ADM Database creation/edition page] screen displays.
9. Specify the connection settings, as outlined below:
Setting Description
Name Display name for this connection setting, ADM.
Use same instance as RG When this checkbox is selected, [Database Host], [Connection Type], [Port Number] and
[Instance Name] are grayed out.
Database Host Host name/IP address of the database to be used by the AAM Server.
Connection Type Instance name.
Port Number Not necessary.
Instance Name Instance name of the database to be used by the ADM Server, StreamlineNX.
Database Name Instance name of the database to be used by the AAM Server, ADM.
Authentication Type SQL Server Authentication
User Name & Password SQL user name and password only when using SQL authentication, e.g., sa, set password.
10. After information is entered, click [Test

Connection], and then click [OK].
Next, configure scheduled synchronization between the

Report Generator and the ADM Database.
11. On Synchronization tab, click [Add]. The

configuration process is identical to that for the
AAM Server.
12. Click [Execute Now] and confirm that scheduled

synchronization to the ADM Database can be
executed.
172
Note :
If the test connection fails, check the database connection settings.
13. After you have finished configuring synchronization with the ADM Database, click [OK].
14. On AAM/ADM screen, confirm that the Status column indicates, SUCCESS.
Note :
Refer to Reports Generator Administrators Guide for information on configuring the Report Generator user
accounts. The accounts you create can then be used to Log into the Report Generator user screen.
Refer to Report Generator User Manual for the Report Generator usage procedures.
Important:
Report data is output based on data synchronized from the ADM and AAM Databases. In order to
confirm the operation of the Report Generator, you need to perform printing with the device in which
Streamline NX has already been installed. After printing, the Report Generator must synchronize with the
AAM Database (as specified by [AAM/ADM Database creation/edition page] schedule settings, or by
clicking [Execute Now]).
Synchronization of different databases should never run at the same time. So schedules should be
configured in order to avoid time overlap. Basically a minimum of 1 hour difference is recommended
between each synchronization schedule. More might be required depending on the size and activity of the
account.
If multiple synchronizations are executed simultaneously, some might fail. In such case, the failed
synchronizations can simply be restarted at a later time.
173
Install & Configure Print Drivers & Ports
Step 11: Install & Configure Print Drivers & Ports

If RICOH Streamline NXs optional Secure Print Manager software has been purchased, installed and
activated, you must install and configure a print driver to enable secure printing to devices; authentication
services will then be available at all SL-NX-enabled devices. While you can install a print driver specific to
each Ricoh model, the recommended print driver is the RICOH Universal Print Driver, which supports
current and legacy MFPs and laser printers.
Regardless of print driver chosen, you must establish authentication settings and configure ports. After
installing SPM software on the server, the SNX SPM Port, SNX SPM Direct Port and SNX SPM External
Port are automatically installed at the same time.
SL-NX SPM Port Used for secure printing to SL-NX-enabled Ricoh devices, i.e., user must authenticate
before print jobs are released. Print metrics are gathered for reporting purposes.
SL-NX SPM Direct Port Used for printing to devices that are not SL-NX-enabled. Print metrics are
gathered for reporting purposes.
SL-NX SPM External Port Used for printing to select OEM devices that are not SL-NX enabled. Print
metrics are not gathered.
Note :
The screens of the Universal Print Driver are used for the illustrations in this section, on a computer
running Windows Server 2012. As such, navigating to the properties screen of a specific print driver will
differ depending on the Operating System in use.
You may need to run the Add Printer Wizard in Administrative mode, in some situations.
For details on how to print use the Universal Print Driver, see the RICOH Streamline NX Users Guide.
*Download Universal Print Driver

Important:
When installing print drivers, you must perform driver download to the SPM Server, not a client PC.
1. From SPM Server, navigate to www.ricoh-usa.com, and click [Downloads].
2. Scroll down, and click [Universal Print Driver].
174
3. Select, for example, 32-bit or 64-bit PCL6 Driver.
Important:
Though we are using a 64-bit PCL6 Driver as an example, additional
drivers should be downloaded and installed to the Print Server via
Additional Drivers on the Sharing tab, as necessary. This will
accommodate all of the Client Operating Systems on the network.
4. Read licensing agreement, and click I agree .
5. Choose your Operating System.
Note :
Unless noted, the chosen OS is 32-bit.
6. Click [Download] for PCL6 Driver.
7. Click [Save].
8. Click [View Downloads].
9. Click [Run].
10. Browse to target folder, and click [OK].
175
11. Click [Unzip].
12. Click [OK].
13. Close open window(s).
Download of the Ricoh Universal Print Driver is complete!
Configure SL-NX SPM Port

For secure printing to SL-NX-enabled Ricoh devices, via the Universal Print Driver, configure the SL-NX
SPM Port as follows:
1. Navigate to Devices and Printers.
2. Click [Add a printer].
Note :
Click [Stop], if you wish to cancel printer search.
176
3. Click The printer that I want isnt listed .
4. With Add a local printer select, click [Next].
5. From Use an existing port drop-down, select

SNX SPM Port, and then click [Next].
6. Now, install the Universal Print Driver.
7. On Manufacturer list, select RICOH and print driver.
8. Click [Have Disk].
9. Browse to Universal Print Driver folder, and open file.
10. Click [OK].
177
11. Select preferred print driver, and then click [Next].
12. Click [Next].
13. Enter Printer name, and click [Next].
14. Enter Share name, Location and Comment fields, and

then click [Next].
Important:
If your environment requires mobile printing to this
device, using the RICOH Smart Device Print & Scan app,
the share name cannot contain spaces.
178
15. Click [Finish].
New printer (with SPM Port) is added

to printer list
SL-NX SPM Port configuration is complete!
Configure SL-NX SPM Direct Port

In this step, you will establish settings for printing to devices are not SL-NX enabled. Note, however, that
print metrics are gathered for reporting purposes.
1. Navigate to Devices and Printers.
179
Note :
4. With Add a local printer selected, click [Next].
5. Select [Create a new Port].
6. Select SNX SPM Direct Port from drop-down list, and

then click [Next].
180
Secure Print Manager Direct Port Wizard opens
7. Click [Next].
8. Enter Printer Name, IP address or URL, and click [Next].
Note :
Printer Name/IP address/URl field can contain up to
256 characters.
Port Name can contain up to 63 characters.
If port is to be used for logged-in users only, [Create
Direct Port for alias users only] checkbox should be
deselected.
9. Select [SNMPv1/v2] or [SNMPv3] (encrypted) setting.
Note :
When a URL is entered in step 8, select the checkbox of
[Authentication is required] to enable the HTTP
communication with authentication, enter a user name and
password, respectively, using up to 8 characters, and then
click [Next]. A connection test is performed. If
authentication fails, an error message appears. Enter the
correct user name and password.
SNMPv1/v2
When selecting SNMPv1/v2, enter SNMP community
name (up to 15 characters), and then click [Next].
181
SNMPv3
When select SNMPv3, specify the settings outlined below, and then click [Next].
Setting Description
Context Name: Enter a context name using up to 32 characters.
GWNCS is the default setting.
Authentication Select [SHA] or [MD5] for an authentication
Algorithm: algorithm. [SHA1] is the default setting.
Encryption Select [AES128] or [DES] for an encryption
Algorithm: algorithm. [DES] is the default setting.
Permit SNMP v3 Select whether to encrypt the SNMP v3
Communication: Communication. [Encryption] is the default setting.
Encryption Enter a password for encryption of SNMP v3
Password: communication, using up to 32 characters.
Account Name: Enter a user name for authentication of SNMP v3
communication, using up to 32 characters.
Authentication Enter a password for authentication of SNMP v3
Password: communication, using up to 32 characters.
10. Confirm SNMP protocol settings, and then click [Finish].
SNMPv1/v2 SNMPv3
182
15. Click [OK].
17. Click [Next].
19. Enter Share name, Location and Comment fields.
Important:
If your environment requires mobile printing to this
device, using the RICOH Smart Device Print & Scan
app, the share name cannot contain spaces.
183
20. Print a test page, if you like, and then click [Finish].
SL-NX SPM Direct Port configuration is complete!
184
Universal Print Driver Authentication Settings

User authentication at the device can be enabled through the Universal Print Driver, as follows:
1. From the SPM Server, navigate to

Devices and Printers.
2. Right-click Universal Print Driver icon,

and then select [Printer Properties].
3. On General tab, click [Advanced Options].
4. Select [User Authentication] checkbox.
5. Click [OK].
Universal Print Driver Authentication

configuration is complete!
185
Configure SL-NX SPM External Port Settings

The Streamline NX Secure Print Manager External Port is used to send print data to other manufacturers
models, specifically, the SP 4400S, SP 4410SF, SP 4420SF devices. These OEM models do not support
Streamline NX, thus the prints generated are not available for reporting purposes.
To enable external printing to these devices, proceed as follows:
1. From SPM Server, navigate to Devices and Printers.
Note :
186
4. With Add a local printer selected, click [Next].
5. Select Use an existing port drop-down, and select SNX

SPM External Port, and then click [Next].
10. Click [OK].
187
12. Click [Next].
14. Enter Share name, Location and Comment fields.
188
15. Print a test page, if you like, and then click [Finish].
SL-NX SPM External Port configuration is complete!
189
Test System
Step 12: Test System

After completion of all required installation and configuration steps, confirm that Administration Manager
can connect to each server and that all services are started. Next, in this section, you will test authentication,
secure print release, scanning at the device, and then report generation.
Test Authentication
How a user logs in to the device is based on SL-NX configuration settings. The available login methods
include the following:
1. Manual Login (User Name/Password)

2. Card Login
3. Card and Login Password
4. PIN Code Login
5. Guest User Login
The basic procedures for 1) Manual Login and 2) Card Login are outlined below.
Manual Login
1. On MFP touch screen, confirm that Login

screen displays
2. Press [Login].
3. Enter User Name, and then press [OK].
190
Test System
4. Enter Login Password, and then press [OK].
Note :
Entered password is masked.
5. Confirm that the RICOH Streamline NX [Home]

screen displays
6. To end session, press [Logout].
Important:
If the Streamline NX Home screen does not display, check the following items:
Confirmation Item Sections within Guide Explanation

SDK Application Add a Device Software Template Installation status of each application
Add/Execute a Device Software Policy
Device Configuration Add a Device Preference Template Configuration items/application status
Add/Execute a Device Preference Policy
Server Confirmations Configure Authentication Profile Configuration items/application status
Add a Server Preference Template
Add/Execute a Server Preference Policy
Note :
For more information, including list of login error codes, see the RICOH Streamline NX Users Guide.
191
Test System
Card Login
To utilize card authentication, you must first register your card ID on the device, as follows:
1. On MFP touch screen, confirm that Login screen

displays
2. Hold card over card reader (or insert into card reader).
A screen prompting you to register the card displays
3. Press [Register].
4. Enter User Name, up to 128 characters, and then press

[OK].
5. Enter Login Password, up to 128 characters, and then

press [OK].
Note :
Entered password is masked.
192
Test System
6. Confirm that RICOH Streamline NX [Home] screen

displays
7. Press [Logout].
8. Hold card over the card reader again. If the login attempt is successful, the RICOH Streamline NX Home
screen displays.
Note :
Card login registration can also be performed on the AAM Server.
Test Scanning
Scan and Fax Manager operation will depend on how projects were configured for document delivery. As
such, procedures will vary.
1. Log in to the device (see previous section, if necessary), and

then confirm that the RICOH Streamline NX [Home]
screen displays
2. Execute the Projects whose operation you wish to confirm,

and check that they are distributed correctly.
Note :
For details, see the RICOH Streamline NX Users Guide.
193
Test System
Test Secure Print Release

Secure Print Manager operation confirmation is performed by confirming Secure Print and Direct Print.
Secure Print
1. On the SPM Server, open Notepad.
2. Enter text, e.g., Test.
Note :
The job will not be saved correctly if Notepad does not
contain text.
3. Select Secure Print port set up when installing Streamline

NX, and print contents of Notepad.
To confirm that the print job was successful, proceed as

follows:
5. Click [Log], and then select [Secure Print Manager] and [SPM] from drop-down lists.
Note :
If the job is not saved successfully, the job result will be Failed. See the [Message] field for the reason.
6. Log in to the account used to issue the print job to the device.
194
Test System
7. Log in to the device, and confirm that the print job is displayed.
Note :
If the print job is not displayed, check the port settings.
8. Execute the print job, and confirm that the printout matches what was entered in Notepad.
9. This completes the Secure Print operation confirmation process.
Direct Print
1. Set up Notepad in the same way as with the Secure Print operation confirmation process.
2. Select the Direct Print port set up when installing RICOH Streamline NX, and print the contents of the
Notepad.
3. Confirm that the printout from the device matches what was entered in Notepad.
4. This completes the Direct Print operation confirmation process.
Note :
If the print job is not displayed, check the port settings.
Test Report Generation

To confirm the operation of Report Generator, issue an immediate report. The actual creation of the report
confirms that Report Generator is functioning correctly.
Note :
For details, see RICOH Streamline NX Report Generator User Manual.
195
Installation Restrictions
Appendix A: Installation Restrictions

10
Administration Manager
Account for installation

To install Administration Manager, you must have Administrator rights, which means you must belong
to the Administrators group.
Computer name
The name of the computer on which you install Administration Manager must contain only
alphanumeric characters (A-Z, a-z, 0-9) and hyphens (-).
Name of the program files folder
Although the name of the Program Files folder varies depending on the Operating System being used,
the installer displays the default installation folder as "Program Files". Because the installer needs the
name in English, do not change it to the localized name.
Modifying the database information or port number used
To modify the above settings, re-install the product from the installation media. Uninstallation of the
product before starting the re-installation may be required depending on the settings you want to
modify.
To change the Database Information or Port Number, re-install the product in the following manner:
1. Uninstall the current Administration Manager from the PC.
2. Re-install the product from the installation media.
Accounting and Authentication Manager

To install Authentication and Accounting Manager, you must have Administrator rights, which
means you must belong to the Administrators group.
Computer name
The name of a computer on which Authentication and Accounting Manager is installed should consist
of alphanumeric characters (A-Z, a-z, 0-9) and hyphens (-) only.
Installation Folder
On the creating installation folder screen of the installer, the icon for creating a folder is disabled when
the Program Files folder is selected as the installation folder. In this case, enter a folder name directly in
the folder name column, or create an installation folder using the Internet Explorer etc. in advance.
After you change IP address, domain name and port number of your PC, restart the PC.
196
Scan and Fax Manager
Scan and Fax Manager cannot be installed on a PC where any of the following products are already
installed:
DeskTopBinder Lite/Professional ScanRouter Document Server
ScanRouter V2 Professional ScanRouter Web Navigator
ScanRouter Enterprise GlobalScan NX
ScanRouter Ex Professional/Enterprise
To install Scan and Fax Manager, you must have Administrator rights, which means you must belong
to the Administrators group.
Do not install Scan and Fax Manager on a domain controller
Do not install Scan and Fax Manager on a computer that is acting as a domain controller.
Computer name
The name of the computer on which you install Scan and Fax Manager must contain only
alphanumeric characters (A-Z, a-z, 0-9) and hyphens (-).
Installation folder
The button to create a new folder will be disabled on the Install Folder Selection screen of the installer
when the Program Files folder is selected as the destination folder. New folders can be created under
the Program Files folder by manually editing the path name. However, it is suggested that the new
folder be created before starting the installation.
Name of the program files folder
Although the name of the Program Files folder varies depending on the Operating System being used,
the installer displays the default installation folder as Program Files. Because the installer needs the
name in English, do not change it to the localized name.
IIS, the ISAPI extension & the ISAPI filter
If you use IIS 7 as your Web server on Windows Server 2008, you need to have both ISAPI extension
and the ISAPI filter installed on the computer where IIS is installed.
Secure Print Manager

The SPM Server should be installed by a person who has the administrative authorization for the
computer on which the software will be installed.
Computer name
The name of computer with the SPM Server installed should consist of alphanumeric characters (A-Z,
a-z, 0-9) and hyphens (-) only.
Installation source
You cannot install the SPM Server from a network drive. Install from a DVD-ROM drive on the
computer on which the SPM Server will be installed. When you copy the install software into a hard
drive, installation may fail if the installation path is too long.
MS SQL Server
You cannot install Microsoft SQL Server on a compressed drive or on a compressed folder.
SSL
197
When communicating with SSL between the client computers and the SPM server, install IIS (Internet
Information Services) on the SPM server by using a certificate issued by a trusted certificate authority.
IP address change
Restart the computer with the SPM Server installed if the IP address is changed.
Report Generator

To install Report Generator, you must have Administrator rights, which means you must belong to the
Administrators group.
Installation folder
On the creating installation folder screen of the installer, the temporary files folder should not have
space character in its path.
Database
The RG Database cannot use same MS SQL instance as AAM or ADM Databases.
The MSDTC service for AAM Database, ADM Database and RG Database Servers must be running
for data synchronization to work in case they are not running on the same physical server.
Authentication type (windows authentication/SQL authentication) must be the same on all the server
components (AAM Database, ADM Database and RG Database)
If synchronization fails because of a timeout, the user needs to execute the synchronization again
manually.
Microsoft SQL Server 2012 Express
When using MS SQL 2012 Express, the RG Server and RG Database must be on the same physical
server.
The RG service requires Administrator rights in order to configure the MS windows scheduler and
before the installation of RG, windows scheduler service should be running.
MS SQL 2005
When using MS SQL 2005, the synchronization between AAM Database/ADM Database and RG
Database could stop before the synchronization finishes. In such a case, please execute the
synchronization manually again.
Synchronization
It is not possible to run multiple synchronizations at the same time. This can lead to the
synchronizations to fail. Restarting synchronizations will solve the problem.
198
Configuring Windows Firewall
Appendix B: Configuring Windows Firewall

This section provides an overview of how to configure Microsofts Firewall Rules, i.e., exceptions, to SL-NX
ports using Windows Server 2012R2. This procedure will enable devices to connect to individual SL-NX
components. If exceptions are improperly configured, devices wont be able to connect to these components.
To configure SL-NX port exceptions, proceed as follows:
1. On Server Manager Dashboard, click [Local

Server].
2. Click [Windows Firewall] setting.
3. Click [Advanced settings].
Important:
If testing, troubleshooting or demonstrating
SL-NX, you can turn Windows Firewall off.
On navigation pane, click [Turn Windows
Firewall on or off], and then select [Turn of
Windows Firewall (not recommended)] for
each network type, and click [OK].
4. Click [Inbound Rules].
199
5. Click [New Rule].
Note :
SL-NX auto creates the port exceptions named
FRPRINT_HTTP/HTTPS during installation
of the SPM software component.
6. Select [Port], and then click [Next].
7. Select [TCP] and [Specific local ports].
8. Enter ADM port, 8080 (or a range for all

components, 8080-8084), and then click
[Next >].
Important:
Port numbers may vary, as they are entered
during installation of each component.
9. Click [Allow the connection], and then click

[Next >].
Note :
If you added exceptions for the secure ports of
the components, you can select the second
option.
200
10. Select desired networks you wish to apply the

exception, and then click [Next >].
Note :
Depending on the environment, you may
need to select one, two, or all of the networks.
11. Enter a friendly Name and Description, and

then click [Finish].
Important:
Once finished entering the exception, if you
entered a port range (8080-8084, commonly
used) to address all the components installed
on this server, you would repeat the steps for
the secure ports range (8443-8447, commonly
used).
If you entered a single port you would repeat
the steps for the secure port number, and then
repeat again and again for each component
installed on the server.
12. When finished, close Windows Firewall [X].
201
Enabling .NET Framework
Appendix C: Enabling .NET Framework

Streamline NX requires .NET Framework. If this feature is not enabled during SQL Server software
installation, you will be prompted. Follow the procedures outlined below:
1. Click [OK].
2. Click [Add Features].
3. On Role Services screen, select [.NET

Extensibility] checkbox.
4. Click [Next >].
202
5. On Confirmation screen, click [Install].
Installation begins
Progress screen displays
203
6. On Results screen, click [Close].
7. On Features screen, .NET Framework

indicates Installed.
8. Close window [X] or click [Cancel] to exit.
9. If necessary, continue with SQL Server

software installation.
204
Updating Microsoft SQL Server 2008
Appendix D: Updating Microsoft SQL Server 2008

If using Microsoft SQL Server 2008, it is recommended that you download available updates, as follows:
1. Download Microsoft SQL Server 2008 Service Pack 1 (SP1) from Microsoft Download Center.
2. Open downloaded Microsoft SQL Server 2008 Service Pack 1 (SP1) .exe file.
[Welcome] screen appears.
3. Click [Next >].
[Select Features] screen appears.
4. Select the check box of [STREAMLINENX], and then click [Next >].
[Check Files In Use] screen appears.
5. Click [Next >].
[Ready to Update] screen appears.
6. Click [Update].
[Update Progress] screen appears.
205
Enabling Flash Plugin for IE (on Win 2012)
Appendix E: Enabling Flash Plugin for IE (on Win 2012)

If your web browser (IE) does not support Flash Player, you must install this plugin. For Windows 2012
users, this can be performed by enabling Desktop Experience, a new Windows 2012 feature.
To install Desktop Experience using Server Manager, proceed as follows:
1. Click [Start] > [Server Manager].
2. In Server Manager, click [Add roles and features].
3. Select [Installation Type] as Role-based, and

then click [Next >].
4. Click [Next >].
206
5. Select [Features].
6. Expand [User Interface and Infrastructure

(Installed)].
7. Select [Desktop Experience] checkbox.
8. Click [Install].
9. After installation is complete, click [Close].
207
To uninstall Desktop Experience using Server Manager, proceed as follows:
1. Follow Steps 1-3, above.
2. Deselect [Desktop Experience] checkbox.
3. Click [Next >], and then click [Remove].
208
Configuring Proxy Server
Appendix F: Configuring Proxy Server

If connecting to the Internet through a proxy server, for license activation, you must configure proxy
settings. To do so, proceed as follows:
1. Open Streamline NX Activation Tool, and then click [Proxy Settings].
2. Specify a proxy server.
Setting Description
Use Proxy Server Select checkbox to enable the proxy server
settings.
Address: Enter proxy server address.
Port: Enter port number of the proxy server.
Note:
Server address and port number are
required fields, otherwise an error message
appears.
If the specified port number is not in the
range of 1 65535, or is already in use, an
error message appears.
Use Proxy Server Select checkbox to use proxy server authentication.
Authentication User Name: Enter a user name for proxy authentication.
Password: Enter password for proxy authentication.
Note: User Name and Password are required fields, otherwise an error message appears.
Connection Test Click [Connection Test] to test the connection to the activation server.
3. Click [OK].
209
Managing Software Components
Appendix G: Managing Software Components

Uninstall Software
When uninstalling SL-NX software, you must first deactivate the Base License, which will remove license
codes for ADM/AAM/RG/SPM/SFM. After license deactivation, you can then run the uninstall.
Deactivate Licenses
Note :
When deactivation is performed, all licenses registered to ADM will be deactivated.
By deactivating a currently-used license, the license can be used for other computers.
Deactivating licenses one by one is not supported.
There is no deactivation procedure required for optional SFM Plugins.
Product keys and license codes can be confirmed on the Activation List. For details, see Checking
Activation List.
For details on activation, see Step 6: Activate Licenses.
For details on error messages, see License Activation/Deactivation Error Messages.
Deactivation is also possible via the Ricoh Software License Management Service website:
To deactivate the Streamline NX Base License, proceed as follows:
1. On the desktop, double-click [Administration Manager

Activation Tool]
Note :
Or click [Start] > [All Programs] > [Streamline NX] >
[Administration Manager] > [Administration Manager
Activation Tool].
If user account screen displays, click [Yes].
2. Click [Deactivation].
Note :
If software is not activated, [Deactivation] button is disabled.
210
3. Click [Deactivate].
Note : If connecting to the Internet through a proxy server, proxy

settings are required. For details, see Appendix F: Configuring Proxy
Server.
4. Confirm that you want to deactivate all licenses by clicking [OK].
5. Click [OK].
Note :
[Deactivate] button is disabled after deactivation is complete.
Deactivation via the internet is complete!
Important: If deactivation via the internet has failed, the screen for
deactivating on the local network appears.
a. Specify a destination location for saving a license code for

deactivation, and then click [Save].
b. When deactivation is complete on the local network, a

license code for deactivation is output in the specified
location.
211
c. Access the URL below, and deactivate the license by entering the
information described in the file you have saved.
Administration Manager Uninstall

1. Close any applications currently running on the computer.
2. On the desktop, click [Start] > [Control Panel] > [Uninstall a Program].
3. Right-click [Streamline NX Administration

Manager].
4. Click [Uninstall].
212
5. After uninstall is complete, click [Finish].
6. Message to restart your computer displays;

click [OK].
7. Restart your computer.
213
Authentication and Accounting Manager Uninstall

Follow Uninstall Administration Manager
instructions (above). In step 3, select
[Streamline NX Authentication and
Accounting Manager].
Scan and Fax Manager Uninstall
Note :
You must log on to the computer you will perform the uninstall on using an account that has
Administrator rights.
Before you uninstall an optional plugin, make sure that the plugin has been removed from all delivery
flows. The plugin must be deleted from every flow before you uninstall it.
If you are reconfiguring the port number, virtual directory, or web server, make sure the [Delete data
path] checkbox is cleared on the Uninstall screen (step 4). Doing this will allow the current settings to be
carried over when you re-install SFM software.
If you are reconfiguring system settings other than those mentioned above, make sure the [Delete data
path] checkbox is selected on the Uninstall screen (step 4).
2. On the desktop, click [Start] > [Control

Panel] > [Uninstall a Program].
3. Right-click [Streamline NX Scan and Fax

Manager].
214
5. Specify the [Delete data path] checkbox, and

then click [Uninstall].
Note :
When this checkbox is selected, all relevant
files, including shortcuts, except data related to
activation, will be deleted.
When this checkbox is not selected, you can
reuse your setting data, if you install SFM
software again.
7. Message to restart your computer displays. Click

[OK].
8. Restart the computer.
Secure Print Manager Uninstall


3. Right-click [Streamline NX Secure Print

Manager].
215
5. Select [Remove], and then click [Next >].
6. Click [Yes].
216
Report Generator Uninstall

To uninstall Report Generator from your computer, you must have Administrator rights. Please
make sure to use the same account that was used when the product was installed.

3. Right-click [Streamline NX Secure Print

Manager].
4. Select [Forced Delete] checkbox to

delete the temporary files during uninstall
(recommended).
217
Update Software
This section explains the software update (upgrade) procedures for Streamline NX, procedures that are
performed by Ricoh Professional Services.
Before You Start:

Be sure to back up ADM, AAM-S, SPM-S and RG Databases simultaneously . If necessary, refer to
RICOH Streamline NX Update Procedure (Doc. #002621).
It is recommended to update all the applications simultaneously, in the order outlined below.
Updating ADM, AAM-S and RG simultaneously is mandatory.
Because of the activation system change, ADM must be activated again using the newly-issued product
keys. Be sure to get the correct product keys from marketing. Re-activations for SFM optional plugins are
not required.
For additional information, see RICOH Streamline NX Update Procedure (Doc. #002621).
Procedure v2.1.2 to v2.2.0

Important:
AAMConvertTool.v2.2.0.zip is not required for this procedure.
1.1 Update ADM PC application and perform activation

1.1.1 Perform an overwrite installation of ADM.
1.1.2 Activate ADM via Administration Manager Activation Tool.
Note : ADM Database is automatically converted during ADM overwrite installation. There is no
need to perform ADM Create Database to update the database.
1.2 Update AAM-S database with Create Database, and then update the AAM-S PC
application
1.2.1 Run the AAM-S Create Database function and select Update AAM database.
1.2.2 Perform an overwrite installation of AAM-S.
1.3 Update RG PC application
1.3.1 Perform an overwrite installation of RG.
Note : RG Database is automatically converted during RG overwrite installation. There is no need
to perform RG Create Database to update the database.
1.4 Update SFM-s PC application
1.4.1 Perform an overwrite installation of SFM-S.
Note : Internal engine for Barcode Plugin has been replaced to ABBYY engine at v2.2.0. It is
recommended to perform overwrite installation if the customer uses the existing Barcode engine
(SPIRIT). For details, see SFM v2.2.0 Barcode Engine Replacement.
1.5 Update SPM-s database with Create Database, then update the SPM-S PC application
1.5.1 Run the SPM-S Create Database function and specify the existing v2.1.0 SPM database to
convert it.
1.5.2 Perform an overwrite installation of SPM-S.
1.6 Distribute SL-NX v2.2.0 SDK applications
1.6.1 Install the Streamline NX v2.2.0 SDK applications for MFPs.
1.6.2 Uninstall the existing Streamline NX v2.1.2 SDK applications from LPs.
1.6.3 Install Streamline NX v2.2.0 SDK applications for LPs.
218
Procedure v2.1.0 to v2.2.0 (Direct Update)

Important:
Read Before You Start.
Tool Contents:
File Name Description
AAMConvertTool.v2.2.0.zip AAM-S database conversion tool. The tool is required for direct update
from v2.0.x or 2.1.0, and NOT required for update from v2.1.2.
Note: For a list of ConvertTool error messages, see Troubleshooting AAM-S ConvertTool.
2.1 Update ADM PC application and perform activation

2.1.2 Activate the ADM via Administration Manager Activation Tool.
Note : ADM Database is automatically converted during ADM overwrite installation. No need to
perform ADM Create Database to update the database.
2.2 Update AAM-s database with Create Database", then update the AAM-s PC application
2.2.1 Run the AAM-S Create Database function and select Update AAM database.
2.2.2 Perform an overwrite installation of AAM-S.
2.3 Convert AAM-s database (user and group information) with AAMConvertTool
2.3.1 Login to ADM.
2.3.2 Open [Configuration] > [Server Configuration] > [Server Template] and configure the
authentication setting used by each AAM.
2.3.3 Distribute the Template via a Policy.
2.3.4 Login to AAM-S and confirm that only one Authentication Setting has been distributed.
2.3.5 Copy the convert tool to the AAM-S server.
2.3.6 Add the AAM-S install path to the "migrationV20x_V210_To_V220.bat" batch file. This
batch calls a Java program, so it is recommended that the JRE used by AAM-s is also used to
run this conversion process.
Before Modification:
java -jar aam-s_converter-1.3.1.jar -conf migrationV2100ToV2200.properties -params
"%host%" "%instance%" "%database%" "%sa%" "%password%"
After Modification:
"<AAM-S installation path>\jre\bin\java" -jar aam-s_converter-1.3.1.jar -conf
migrationV2100ToV2200.properties -params "%host%" "%instance%" "%database%"
"%sa%" "%password%"
2.3.7 Run "migrationV20x_V210_To_V220.bat". The following inputs are required:
Host name: Source AAM-S host name
Instance name: Source AAM-S database instance
Database name: Source AAM-S database name
Sa: Database sa account
Password: sa password
2.4 Update RG PC application
2.4.1 Perform an overwrite installation of RG.
Note : RG Database is automatically converted during RG overwrite installation. No need to
perform RG Create Database to update the database.
219
2.5 Update SFM-S PC application

2.6 Update SPM-S database with Create Database, then update the SPM-S PC application
convert it.
2.7.2 Uninstall the exiting Streamline NX v2.1.2 SDK applications from LPs.
2.7.3 Install the Streamline NX v2.2.0 SDK applications for LPs.
Procedure v2.0.x to v2.2.0 (Direct Update)

Important:
Read Before You Start.
Tool Contents:
File Name Description
AAMConvertTool.v2.2.0.zip AAM-S database conversion tool. The tool is required for direct update
from v2.0.x or 2.1.0, and NOT required for update from v2.1.2.
Note: For a list of ConvertTool error messages, see Troubleshooting AAM-S ConvertTool.
3.1 Update the ADM PC application and perform activation

3.1.2 Activate the ADM via Administration Manager Activation Tool.
Note : ADM Database is automatically converted during ADM overwrite installation. No need to
perform ADM Create Database to update the database.
3.2 Update AAM-S database with Create Database", then update the AAM-s PC application
3.2.1 Run the AAM-s Create Database function and select Update AAM database.
3.2.2 Perform an overwrite installation of AAM-s.
3.3 Convert the AAM-S database (user and group information) with AAMConvertTool
3.3.1 Login to ADM.
3.3.2 Open Configuration > Server Configuration > Server Template and configure the
authentication setting used by each AAM.
3.3.3 Distribute the Template via a Policy.
3.3.4 Login to AAM-S and confirm that only one Authentication Setting has been distributed.
3.3.5 Copy the convert tool to the AAM-S server.
3.3.6 Add the AAM-S install path to the "migrationV20x_V210_To_V220.bat" batch file. This batch
calls a Java program, so it is recommended that the JRE used by AAM-S is also used to run this
conversion process.
Before Modification:
java -jar aam-s_converter-1.3.1.jar -conf migrationV2100ToV2200.properties -params
"%host%" "%instance%" "%database%" "%sa%" "%password%"
After Modification:
220
"<AAM-S installation path>\jre\bin\java" -jar aam-s_converter-1.3.1.jar -conf

migrationV2100ToV2200.properties -params "%host%" "%instance%" "%database%"
"%sa%" "%password%"
3.3.7 Run "migrationV20x_V210_To_V220.bat". The following inputs are required:
Host name: Source AAM-S host name
Instance name: Source AAM-S database instance
Database name: Source AAM-S database name
Sa: Database sa account
Password: sa password.
3.4 Re-install Report Generator
Because of a modification of the Report Generator database structure, it must be re-installed and re-
configured. Data migration is not supported.
3.4.1 Uninstall the previous RG PC application v2.0.0.
3.4.2 Install the RG PC application.
3.4.3 Configure the RG report templates.
3.5 Update SFM-S PC application
3.6 Update SPM-S database with Create Database", then update the SPM-S PC application
convert it.
3.7.2 Uninstall the exiting Streamline NX v2.1.2 SDK applications from LPs.
3.7.3 Install the Streamline NX v2.2.0 SDK applications for LPs
Troubleshooting AAM-S ConvertTool
AAM-S Database ConvertTool Errors:

Message Required Action
Com.microsoft.sqlserver.jdbc.SQLServerException Unable to open the database or the connection was
closed.
File not found. : The file in italics was not found (see Step 2).
./AccountingEnvironmentResource.properties
It failed in migration : The file in italics contains invalid properties.
./AccountingEnvironmentResource.properties
The schema version of a Database is not supported. The target database is not supported.
Java.lang.IllegalArgumentException: The required database category was not found.
Database does not have a category.
221
SFM v2.2.0 Barcode Engine Replacement

The Barcode Engine has been changed to "ABBYY FineReader Engine" as of SLNX v2.2.0 (Barcode Plugin
version is v2.3.0).
Barcode Plugin Version Method Barcode Engine

From To
v2.0-v2.2.0 v2.3.0 Overwrite Installation SPIRIT
v2.3.0 New Installation ABBYY
Note :
If updating Barcode Engine from Barcode Plugin v2.2.x or earlier to the latest, the Barcode Engine
created by SPIRIT is still used. If the Barcode Plugin with SPIRIT engine is included, it is recommended
to perform an overwrite installation.
When using ABBYY FineReader Engine as barcode engine, the following information is logged in the
system log after starting SFM Windows Service.
222
Installing & Configuring AAM-LCS Failover Server
Appendix H: Installing & Configuring AAM-LCS

Failover Server
If installation of the primary Authentication and Accounting
Manager (AAM) Server(s) is complete (see CHAPTER 3:
INSTALLING SERVER SOFTWARE), one or more
secondary AAM failover servers, called AAM Local Cache
Server (or AAM-LCS) can be configured to synchronize with
the authentication server(s).
When the user logs in to a device, using the primary AAM-S,

user information is copied from the device to AAM-LCS every
time. If the primary AAM-S is down, the device connects to the AAM-LCS via failover. AAM-LCS
authenticates the user using its cache (or by connecting to the authentication server). Accounting data is
stored on the AAM-E until the primary AAM server recovers, at which point all the accounting data is
uploaded to the primary AAM-S database.
The failover server creates a more stable environment by backing up user information in the event that the
primary AAM and AD/LDAP servers are both unavailable. In short, this provides uninterrupted support, if
communication to the authenticating server(s) is lost.
Note :
AAM-LCS must be configured with the same AD/LDAP configuration policy as the primary AAM-S.
Important:
To create a AAM-LCS failover server, you must create the AAM-LCS database on the SQL Server. For
details on SQL server, see 2.2 SQL Server Requirements.
Each AAM Server must be set to use the same database, as user and accounting information is stored in
the database, not the AAM Server.
Also see Technical Reference for Streamline NX version 2.1.x - High Availability (Doc. #002721).
Step 1: Create AAM-LCS Database

In this step, you will create a database local to SQL.
1. On SQL Server, double-click RDLaunch

(from root folder), to open Streamline NX
installer
Note : You can also right-click RDLaunch, and

then click [Open].
223
2. On SL-NX Home screen, click [Authentication

3. Click Create DataBase (Local Cache Server).
4. On Command screen, type 1 to create new AAM-

LCS database, and then press [Enter].
224
5. Type instance name, and press [Enter], or press

[Enter] to apply default instance value: StreamlineNX.
6. Type database name, and press [Enter], or press

[Enter] to apply default database name: AAMLCS .
Wait a moment.
8. Click [Close].
Creation of AAM-LCS database is complete!
225
Step 2: Install AAM Software

1. On SL-NX Home screen, click [Authentication
2. Click [Authentication and Accounting

Manager].
226
5. Read licensing agreement, select I accept the

terms in the license agreement, and then click
[Next].
6. Confirm default path to installation folder,

Note :
To change the path, click [Browse].
In the following cases, an error message will
appear:
You specify an installation folder in which files
or folders already exist.
Path exceeds 90 characters or includes invalid
characters, e.g., 2-bit characters, , *, ?, |, <>,
/, ; , @, &, =, +, $, comma (,), #, ', %.
227
7. Enter port numbers:

Important:
65535, or is already in use, an error message
appears. Click [OK], and then enter correct
port number (up to five digits).
8. Select Authentication Mode, and then click [Next].
9. Specify DB Connection Settings, and then

click [Next].
228
11. After installation is complete, click [Finish].
12. Click [Close].
229
Step 3: Configure AAM-LCS Windows Services

1. Click [Start] > [Server Manager] > [Tools] > [Services].
2. Select, and then right-click [Streamline NX Accounting and Authentication Manager] > [Properties].
3. Click [Log On] tab.
4. Select [This account].
5. Click [Browse].
6. Click [Locations], select [AAM2-LCS], and click [OK].
7. Enter object name, and click [OK].
230
8. Click [Apply].
231
Configuring SFM Failover Server
Appendix I: Configuring SFM Failover Server

The SFM Failover feature provides processing redundancy when you register a Secondary Delivery Server to
the Primary Delivery Server (the main processing server). If the Primary Delivery Server experiences
connectivity or other communication problems, the Secondary Delivery Server will automatically assume the
Primary Delivery Server's document processing role. This feature is useful in large organizations, with heavy
workloads.
Preparation
Install and activate SFM software on the computer that you want to use as the Secondary Delivery Server.
If you are using SSL, import Server Certificates and Site Certificates into the Secondary Delivery Server.
Only one Secondary Delivery Server can be registered to the Primary Delivery Server at a time.
Secondary Delivery Server Workflow

The following figure illustrates the role of the Secondary Delivery Server.
1. The MFP attempts to send a job to the Primary Delivery Server, but fails
due to a network error.
2. The MFP automatically reroutes the job to the Secondary Delivery Server.
Note:
Jobs that remain on the Primary Delivery Server will not be processed until the
Primary Delivery Server is restored.
If the Primary Delivery Server fails, the Secondary Delivery Server assumes the
jobs; users can access and operate the MFP normally. However, job logs cannot
be viewed from the MFP touch panel. If the user tries to view job logs from the
MFP touch panel, an error message displays.
Make sure to restore the Primary Delivery Server as soon as possible.
Registering a Secondary Delivery Server

This section explains the settings that are available on the Secondary Delivery Server Settings screen.
To register a Secondary Delivery Server, proceed as follows:
1. On Primary Delivery Server, log in to

SFM AdminTool.
2. Click [Home] > [System].
232
3. Click [Secondary Delivery Server Settings].
4. Select [Use Secondary Delivery Server] checkbox.
5. Click [Browse] to select the server that you want to use as the
Secondary Delivery Server from a list of connected servers, or
enter the server's URL in [Secondary Delivery Server].
Note :
If you click [Browse], a list of server names displays. Select a
server, and then click [OK]. The URL of the server displays in
text box.
If you enter the URL of the server, the format must be as
follows:
http(s)://IP Address:Port Number/Virtual Directory Name/
Default: http(s)://IP Address:8080(8443)/sfm/
6. Click [Synchronize] to copy all of the Profiles, system settings, etc., from the Primary Delivery Server to
the Secondary Delivery Server.
Note :
AdminTool will check the specified server to make sure it can be registered as a Secondary Delivery
Server. See Secondary Delivery Server Conditions (below) for the list of conditions.
If the specified server can be registered, a confirmation message displays.
233
7. Click [Yes] to synchronize the servers.
Note :
Click [No] to cancel the operation.
Click [Apply] to save the settings without synchronizing the servers.
Click [Back] to return to the System menu, without saving the settings.
Secondary Delivery Server Conditions

If the server you are registering as the Secondary Delivery Server meets any of the conditions listed below,
an error message will display when you click [Synchronize].
The server is not a Scan and Fax Manager server.
The server is not running the same server edition of Scan and Fax Manager as the Primary Delivery
Server.
The version of the software that is installed on the server is different from the version that is installed on
the Primary Delivery Server.
The server is the Primary Delivery Server (i.e., you are trying to register the Primary Delivery Server as its
own Secondary Delivery Server).
The server is already registered as the Secondary Delivery Server to another Primary Delivery Server.
The server is already registered as the Primary Delivery Server with another Scan and Fax Manager
system.
If one or more MFPs are registered to the specified Secondary Delivery Server, an error message will
display.
Remove all registered MFPs from the specified server, and then click [Synchronize] again.
When Using a Secondary Delivery Server

Make sure to keep the following in mind:
Important:
If you change any settings on the Primary Delivery Server, you must synchronize the Secondary Deliver
Server again.
If you do not synchronize the servers, the Secondary Delivery Server will not operate correctly.
After you register a Secondary Delivery Server, you can use AdminTool on the Secondary Delivery Server
to perform the same operations that are available on the Primary Delivery Server, such as adding Profiles
and changing system settings. However, changing system settings through the Secondary Delivery Server
can result in malfunctions. For this reason, do not use AdminTool on the Secondary Delivery Server to
change system settings.
After you register a Secondary Delivery Server, you must synchronize the Primary Delivery Server with all
connected MFPs so that the MFPs can recognize the Secondary Delivery Server. In Administration
Manager, apply the target policy for Scan and Fax Manager to the device. For details, see the RICOH
Streamline NX Administrator's Guide > Policy Settings.
For synchronization to succeed, the two following settings must be the same on the Primary Delivery
Server and the Secondary Delivery Server.
DNS Server IP address
Date/time setting
If you are using Replacement Tables in your delivery flows, keep the following in mind.
234
Before enabling the Failover function, you must configure the Replacement Tables and then synchronize
both the Primary and Secondary Delivery Server.
After you have enabled failover, you must not use the auto-entry function for the Replacement Tables.
Note :
Job information and log details are not synchronized between delivery servers. This means that job
information and log details are stored only on the server that processed the job. Therefore, if you want to
view the status and error information of a job that was processed by the Secondary Delivery Server, you
must access the Secondary Delivery Server to do so.
To change the Secondary Delivery Server, you must first remove the currently registered server. See
Removing a Secondary Delivery Server, to follow.
Removing a Secondary Delivery Server

To remove the Secondary Delivery Server setting from the Primary Delivery Server, proceed as follows:
1. On Primary Delivery Server, log in to SFM AdminTool.
2. Click [Home] > [System].
3. Click [Secondary Delivery Server Settings].
4. Clear [Use Secondary Delivery Server] checkbox.
5. Click [Apply]. Confirmation message displays.
6. Click [OK] to confirm settings.
235
Making a Secondary Delivery Server the Primary Delivery Server

If the Primary Delivery Server is unavailable, or if you no longer want to use it as the Primary Delivery
Server, you can easily change the registered Secondary Delivery Server to be the Primary Delivery Server.
Important:
Make sure that you synchronize the Primary and Secondary Delivery Servers whenever you change settings
such as Profiles on the Primary Delivery Server. If you do not, the Secondary Delivery Server will not have
the most recent settings, and this might complicate the transition to Primary Delivery Server.
1. On Secondary Delivery Server, log in to SFM AdminTool.
2. Click [System] shortcut, and then click [Remove Secondary Delivery Server Settings].
Confirmation screen displays.
3. Click [Yes] to confirm removal of the Secondary Delivery Server setting and change the server status to
Primary Delivery Server.
Note :
Or click [No] to cancel the operation.
4. If necessary, make any other settings to configure the server for use as the Primary Delivery Server (e.g.,
synchronizing Profiles with MFPs).
Note :
If you want to restore the original Primary Delivery Server, you must re-register the Secondary Delivery
Server. See Registering a Secondary Delivery Server.
236
Managing Certificates & Private Keys
Appendix J: Managing Certificates & Private Keys

Note : Also see, SSL Certificate Setup Guide for RICOH Streamline NX (Doc. #002526).
Managing Site Certificates for RICOH Streamline NX Components

A site certificate file for each component of RICOH Streamline NX (installed on each server) is required to
communicate with each client computer. A client computer on which a RICOH Streamline NX component is
installed is needed to import a site certificate file from the corresponding server computer, as described below.
Client
Administrat
SPM Server
SFM Server
2
Embedded
Embedded
Embedded
Computer
Computer
Computer
Manager
Server
Client
Client
AAM
AAM
Server
SPM
SFM
ion
Computer
Administration - - - - - - - A -
Manager
AAM Server B - C D - F - A -
SPM Server - - - - E - - A A
SFM Server B - - - - - G A -
MFP IPP(s) - - - A - - - - -
MFP Built-in - - - - - - - - -
HTTP(S)
MFP DSDK B - - A - F - A -
HTTP(S)
A Install a site certificate file on a client computer.
B Import a site certificate into a keystore file by referring to Importing an SSL Certificate in RICOH
Streamline NX Administrators Guide.
C Import a site certificate into a keystore file by referring to Importing a Certificate File to a Keystore File in
Authentication and Accounting Manager (Embedded) Administrators Guide.
D Import a site certificate to a keystore file by referring to Importing an SSL Certificate in Secure Print
Manager (Server) Administrators Guide.
E Import a site certificate into a keystore file by referring to Importing a Certificate File to a Keystore File in
Authentication and Accounting Manager (Embedded) Administrators Guide.
F Import a site certificate by referring to Managing the Server Certificate of SYSTEM CONFIGURATION in
Scan and Fax Manager Administrators Guide.
G Register devices to the SFM server and distribute the site certificates to the registered devices with the
SFM embedded by referring to Server Configuration Template Settings in RICOH Streamline NX
1
Client computer used to access each server.
2
Client computer used to execute print jobs through the SPM server.
237
Managing a Server Certificate for SFM

In order to use HTTPS to secure communication between the server, with the SFM administrative tool, and
a connected MFP, it is necessary to install a server certificate. HTTPS is a communication protocol that
includes SSL (Secure Sockets Layer) data encryption. When a web browser communicates with server
installed with the administrative tool, a secure handshake authenticates the session using a public and private
key, provided by the certificate. The public key is used to encrypt information and the private key is used to
decipher it.
By obtaining and installing a certificate, from a trusted Certificate Authority (CA), it is possible
to protect the SFM data.
Note :
When using SSL, it is not necessary to install certificates on registered MFPs, as the VM card contains a
self-certified web server.
A maximum of two server certificates can be managed per computer.
If IIS is specified as the web server for SFM, only the On/Off feature is provided. For details, see IIS -
SSL On/Off.
If you want to use the failover or load balancing functions and want to protect the data, you must install
server certificates on the servers that you will use for these functions.
Important:
When SSL is used, the URL of the administrative tool must be specified as follows:
https://FQDN:PortNo/DirectoryName/.
Use the same URL that was entered for the Common Name [CN] by an administrator. For details, see Scan
and Fax Manager Administrators Guide.
To use SSL for the SFM Server, import a site certificate for the server by following the procedures
described in the RICOH Streamline NX Administrators Guide > Importing an SSL Certificate.
238
Obtaining and Installing a Server Certificate

If [Built-in Web Server (Default)] is selected when installing the SFM software, the web server is automa-
tically installed on the computer, along with a shortcut to the Server Certificate Setting Tool. Use this tool to
obtain and install a server certificate.
Note :
The Server Certificate Setting Tool is not available to remote computers, i.e., it can only start from the
web browser on the computer running SFM software.
1. On your desktop, click [Start], select [All Programs] > [Streamline NX] > [Scan and Fax Manager],
and then click [Scan and Fax Manager SSL Setting Tool].
The [Server Certificate Management] screen appears.
Note :
The Server Certification Setting Tool does not require login.
The language selected when installing the SFM software is applied to the Server Certification Setting
Tool.
The following items are displayed on the [Server Certificate Management] screen.
Item Description
Create CSR Click to create the CSR.
Install Certificate Click to install a server certificate.
Delete Select a server certificate to be deleted, and then click this button. A selected
certificate and the private key are deleted.
Note:
A certificate currently in use cannot be deleted.
Certificate Details Select a server certificate, and then click this button. Detailed information on a
selected certificate is displayed.
Certification Select the certificate to use from the available certificates in the drop-down list. Select
[Do not use] if a certificate is not used.
Column The following items are displayed in the column.
Certificate No.
Certificate Status
Issuer
A certificate authority is displayed.
Subject
Term of Validity
Expiration date for a certificate is displayed.
2. Create a CSR (Certificate Signing Request):
a. Select a line in which you wish to create/register a Certificate.
Note :
When you are carrying out this operation on a line whose Certificate Status is not None, you
create a CSR using the existing private key. For example, in a situation where you want to extend the
239
use of a certificate that has expired, select the appropriate line and follow this procedure to create a
CSR again.
b. Click [Create CSR].
The Create CSR screen appears.
Note :
Required fields are indicated with an asterisk (*).
c. Specify the information outlined below.
Item Description Supported Characters*

Common Name [CN] The URL using FQDN (Fully-qualified Alphanumeric characters
Domain and the following
Name) can be specified using up to 64 characters:
characters. Space [ ]
Hyphen [-]
Dot [.]
Underscore [_]
Organization Unit The name of the department or Alphanumeric characters
[OU] organization unit making the request can and the following
be specified using up to 64 characters. characters:
Space [ ]
Hyphen [-]
Dot [.]
Underscore [_]
Comma [,]
Plus [+]
Slash [/]
Parenthesis [ ( ], [ ) ]
Organization [O] The legal name of the organization under Same as Department
which Name
your organization is registered can be
specified
using up to 64 characters. Note:
Abbreviations cannot
be used.
City/Locality [L] The name of city in which the Same as Department
organization is located can be specified Name
using up to 128 characters. Note:
Abbreviations cannot be used.
State/Province [ST] The state or province name can be Alphanumeric characters
specified using up to 128 characters. and the following
Note: Abbreviations cannot characters:
be used. Space [ ]
Hyphen [-]
Dot [.]
Comma [,]
Plus [+]
Slash [/]
Parenthesis [ ( ], [ ) ]
240
Country Code [C] C] The 2-character ISO format country Alphabets, for example,
code can be United States of
specified. America: us
Germany: de
United Kingdom: uk
Note: Regarding other
countries, search for
the word ccTLD with
an internet search
engine.
* Supported Characters lists the characters that are generally supported. However, as the supported characters can
vary between Certificate Authorities, you might want to check them beforehand.
d. Click [OK].
The Create CSR screen closes and Certificate Status changes to Requesting.
3. Submit the newly-created CSR to a CA (Certificate Authority) to obtain a certificate.
a. Select the line where you created the CSR.
b. Click [Certificate Details].
The Certificate Details screen appears.
c. Copy and paste the CSR content from the Certificate Details screen and submit it to a Certificate
Authority.
Note :
The text from -----BEGIN NEW CERTIFICATE REQUEST----- to -----END NEW
CERTIFICATE REQUEST----- is the CSR content (information) the Certificate Authority needs to
create a certificate.
Some Certificate Authorities require the CSR content via email, others require it via a website. For
details, see the instructions provided by the CA.
The Certificate Authority may charge a fee to issue a certificate.
4. If you obtain a certificate from a CA, install the certificate as follows:
a. Select the line where you wish to install the certificate. If you wish to import intermediate CA
certificates, proceed to step (b). If not, go to step (f).
Note :
Be sure to choose the line where you created the CSR content. If you choose the other one,
operation will not be guaranteed, even if the installation is successful.
b. Click [Install Certificate].
The Install Certificate screen appears.
241
c. Select [Intermediate CA Certificates] checkbox.
d. Copy the content of the intermediate CA certificate to import, and paste it to the text area in the
screen.
Note :
Some Certificate Authorities send the certificate via email, others display the certificate in the Web
browser. For details, see the instructions provided by the CA.
See the sample certificate obtained from a Certificate Authority by email. The text from -----
BEGIN CERTIFICATE----- to -----END CERTIFICATE ----- is the certificate content
(information) you must copy and paste to the text area.
e. Click [OK].
The Create CSR screen closes. The "Certificate Status" changes to "Installed".
f. Click [Install Certificate].
The Install Certificate screen displays.
g. Confirm that the [Intermediate CA Certificates] checkbox is not selected.
h. Copy the content of the certificate issued using the CSR, and paste it to the text area in the screen.
Note :
Some Certificate Authorities send the certificate via email, others display the certificate in the web
browser. For details, see the instructions provided by the CA.
See the sample certificate obtained from a Certificate Authority by email. The text from -----
BEGIN CERTIFICATE----- to -----END CERTIFICATE ----- is the certificate content
(information) you must copy and paste to the text area.
i. Click [OK].
The Create CSR screen closes. The Certificate Status changes to Installed.
5. Select the certificate you wish to use from the Certification drop-down list.
Note :
You can select not to use a certificate. In that case, choose [Do not use].
6. When finished, close your web browser.
Note :
When you have changed the certificate, you are asked to restart the server.
242
IIS - SSL On/Off

If the IIS web server is specified when installing the SFM software, the screen for specifying the SSL setting
appears when launching the Server Certificate Setting Tool. On this screen, SSL On/Off control is
supported.
In order to enable SSL communication, it is necessary to configure IIS as well as the SFM. The configuration
can be done through the IIS Management Tool (Internet Services Manager).
The following procedure gives a simple explanation of how to enable SSL using IIS.
1. On your desktop, double-click [Scan and Fax Manager SSL Setting Tool] icon.
2. Select [Use SSL] checkbox.
3. Restart the SFM service.
4. In the IIS management tool, open the SFM properties, select [Directory Security] tab, and then request a
certificate.
Contact a certificate authority (CA) to have a certificate issued.
5. After you have obtained a certificate, register it in IIS.
6. Enter the port number to use for SSL connections.
Note :
The default HTTPS port number is 8443.
7. Download the intermediate CA certificates, and import them into the SFM via the Site Certificate settings
in Administrative tool.
8. On the Device List screen in AdminTool, select all MFPs, and then click [Synchronize] to update their
SSL settings.
Important:
The SSL setting in the SFM must first be configured before configuring the SSL setting in IIS.
In case you first configured the SSL setting in IIS, access the following URL to set the SSL setting in the
SFM to On. https://127.0.0.1:8443/sfm/ssl_xx.html
Replace xx with your desired language code as specified below:
English: en Danish: da
French: fr Portuguese: pt
German: de Norwegian: no
Italian: it Russian: ru
Dutch: nl Simplified Chinese: cn
Spanish: es Japanese: ja
After configuring the SSL setting in the SFM, you must reboot the computer to enable the new setting.
243
Managing a Site Certificate for SFM

A Site Certificate is required in order to utilize SSL/TSL to encrypt data communication, thus secure the
path between the SFM server and destination servers, for example, SMTP, LDAP or WebDAV servers.
For the LDAP server, the Site Certificate enables you to secure User Authentication and Address Book
search operations.
Note :
If you want to use the failover or load balancing functions, you must also import a site certificate on the
servers that you will use for these functions. Import the certificate before registering the servers.
If you want to use private keys for secure Send to FTP Service, refer to Scan and Fax Manager Administrators
Guide.
Supported Certificate file formats include the following:

DER encoded binary X.509
Base 64 encoded X.509
Cryptographic Message Syntax Standard - PKCS #7
Importing a Site Certificate
1. Log in to SFM AdminTool.
2. From Home page, select [System].
3. Click [Certificate].
4. Click [Site Certificate] accordion button to open the site certificate screen, if necessary.
5. Click [Import].
6. Specify the path to the file, i.e., browse and select, for example, sample.cer.
The Site Certificate has been successfully imported.
244
Note :
To delete a site certificate, select a certificate, and then click [Delete]. Click [OK] to confirm deletion.
To select multiple certificates, click multiple items while pressing the Shift key or Ctrl key.
Important:
Deletion of a site certificate is performed regardless of whether the certificate is currently used or not.
Managing Private Keys for SFM

When using SFTP, or Secure FTP (SSH Protocol), in the Send to FTP Service, it is necessary to import a
private key.
Note :
For details, refer to Scan and Fax Manager Administrators Guide.
Importing a Private Key
1. Log in to SFM AdminTool.
2. From Home page, select [System].
3. Click [Certificate].
4. Click [Private Key Management] accordion button on the bottom of screen to open the Private Key
Management screen.
5. Click [Import].
6. Specify the path to the file and open.
The private key has been successfully imported.
Note :
To delete a private key, select a key, and then click [Delete]. Click [OK] to confirm deletion.
To select multiple keys, click multiple items while pressing the Shift key or Ctrl key.
Important:
Deletion of a private key is performed regardless of whether it is currently used or not.
245
Troubleshooting Checklist
Appendix K: Troubleshooting Checklist - Solutions

1. Check PC Application: Configuration
Rebooted the PC.
Verified that the applications Windows Service is started.
Verified that the applications service account is correct, and manually restarted.
PC meets applications minimum specs (CPU, memory, etc.).
Tried changing the services account to a Local Administrator.
Disabled any firewall and verified that any required ports are open.
Disabled any anti-virus software and tested.
(If Remote Desktop is used) Tested by logging in to the server directly.
(If virtualization or server-based computing is used) Confirmed the results in a non-virtual environment (this includes
scan destinations on a virtual machine and Citrix XenApp, so try printing using/distribution to a non-virtual system).
(Point&Print/Web Point&Print) Tested printing from the print server.
(Point&Print/Web Point&Print) Test printing using a standard TCP/IP port.
2. Check PC Application: Browser

A supported web browser is used.
Flash Player is the latest version.
The applications site is a Trusted Site.
The servers Certificate is Trusted.
Reset the web browsers setting (in IE (Option] > [Advanced] > [Reset]).
Rebooted the PC.
3. Check PC Application: Network Commands

Confirmed that the IP address and DNS settings are correct.
Pinged the device from target/the target from the device.
Performed all nslookup tests:
nslookup <devices FQDN>
nslookup <devices IP address> (Result must be identical to the devices FQDN)
nslookup <PCs FQDN>
nslookup <PCs IP address> (Result must be identical to the PCs FQDN)
nslookup <domain name> (Result must include the address of the DC).
nslookup <DCs FQDN>
nslookup <DCs IP address> (Result must be identical to the DCs FQDN)
nslookup <DFS controllers FQDN>
nslookup <DFS controllers IP address> (Result must be identical to the DFS controllers FQDN)
nslookup <destinations FQDN>
nslookup <destinations IP address> (Result must be identical to the destinations FQDN)
4. Check Both Device and PC Application

Confirmed that the device/PC time is synchronized with the authentication server (adjusted for time zone).
Confirmed that the device and PC use the same DNS server.
Confirmed that the device and PC use the same domain name.
Tested with IPv6 disabled on both the device and PC.
(If SSL is used) Tested with SSL disabled on both the device and PC.
246
Troubleshooting Checklist
5. If Network Packet Capture is Allowed

Filter the device and PC/authentication servers IP and confirm that communication between the device & servers is
captured.
Filter the packets with dns and confirm that no errors are logged.
Filter the packets with http and confirm that no errors are logged.
(Authentication) Filter the packets with kerberos and confirm that no errors are logged.
(Authentication) Filter the packets with ldap and confirm that no errors are logged.
(Print) Filter the packets with tcp.port==9100 and confirm that no error is logged.
(Print) Filter the packets with tcp.port==515 and confirm that no error is logged.
(Scan to Folder) Filter the packets with smb and confirm that no error is logged.
(Scan to Email) Filter the packets with smtp and confirm that no error is logged.
Checked the web for error information.
6. Windows Logs
(If IIS is used) Used RSInfo to collect the IIS log.
(If IIS is used) Confirmed that access privileges for the IIS site are configured properly.
(If SQL is used) Used RSInfo to collect the SQL Servers log.
Checked the Windows Application Log and searched the MS KB for details.
Important:
For details on SL-NX error codes, including Cause and Solution, see the RICOH Streamline NX
For details on exporting Device and Server Logs, for troubleshooting purposes, see Appendix L: Trouble-
shooting Logs.
247
Troubleshooting Logs
Appendix L: Troubleshooting Logs

The Batch Download Log function can be used to export/archive the AAM/SPM Device Log and Server
Log for Administration Manager, for troubleshooting purposes. Scan and Fax Manager acquires the Device
Log and Server Log from the SFM Server. Procedures for downloading the respective logs follows.
Download AAM/SPM Logs

2. Click [System] > [Batch Download Log] > [Archive Log].
3. Select the device whose logs you wish to archive. Click [ ].
4. Open folder in Groups pane.
5. Select device in Devices list, and then click [Select].
6. Click [OK].
248
7. Confirm that selected device displays
8. Select the server who server logs you wish to archive. Click [ ].
9. Click [Server Type], and then select, for example,

[Authentication and Accounting Manager] >
[AAM-S], and then click [Select].
10. Repeat for Secure Print Manager.
11. Click [OK].
12. Confirm that servers appear
13. Click [OK].
Archival confirmation message displays
14. Click [OK].
249
15. View progress via Log screen
Note :
16. Now, download the Batch Download Log. Click [System] > [Batch Download Log] > [Download
Log].
17. In list, select desired log, and then click [Download].
18. Select destination folder, and then click [Save].
19. Confirm that download is complete
20. Click [OK].
250
Download SFM Logs

1. Log in to SFM Server.
2. Click [Maintenance Settings].
3. Click [Batch Download Logs]. Scroll down, if necessary.
4. Select logs to download.
5. Select target device.
6. Click [Batch Download].
251
Display reads
7. Click [OK].
8. Select destination folder, and then click [Save].
9. Confirm that download is complete
10. Click [OK].
11. Click [Close].
252
Glossary
Appendix M: Glossary
Acronym Description
AAM Authentication and Accounting Manager (Streamline NX component)
AD Active Directory
ADM Administration Manager (Streamline NX component)
CA Certificate Authority
CN Common Name
CSR Certificate Signing Request
IE Internet Explorer
FQDN Fully-qualified Domain Name
HDD Hard Disk Drive
HTTP Hyper-Text Transfer Protocol
HTTPS Hyper-Text Transfer Protocol Secure
LCS Local Cache Server
LDAP Lightweight Directory Access Protocol
MFP Multifunctional Printer/Peripheral
MSDTC Microsoft Distributed Transaction Coordinator
RG Report Generator (Streamline NX component)
SFM Scan and Fax Manager (Streamline NX component)
SMTP Simple Mail Transfer Protocol
SNMP Simple Network Management Protocol
SQL Microsoft SQL Server
TCP/IP Transmission Control Protocol/Internet Protocol
UAC User Account Control
253
Streamline NX Site Survey
Appendix N: Streamline NX Site Survey

Updated: 3/26/2014
1. POC Site Information
Customer Name: Phone:
Contact Name: Fax:
Department: Cell:
Address 1: E-mail:
Address 2: State:
City: Zip:
2. Network Domain Information

Windows OS version:
TCP/IP Address of Domain Controller:
Domain Name:
Does MFP device have static IP address or leased IP address from DHCP server?
Is there Gateway address configured in MFP?
3. LDAP Server (AD) Information

Active Directory info
IP Address of Active Directory:
Domain Name:
Which Port is used for LDAP query?: 389
LDAP Attribute (Please correct default value.)

Name: name
Display Name: displayName
Email Address: mail
Group: MemberOf
Home Folder: homeDirectory
254
Classification: department
Group Search Setting

LDAP Search base:
(e.g. dc=test, dc=com)
LDAP Search Query:
Attributes: cn
4. Streamline NX Server Information

CPU: HDD Space:
Memory: Server OS:

Virtualization: Streamline NX software version: Ex. v2.2.1
e.g. VMware, Hyper-V, Citrix Xen
Windows user account who will install the Streamline Windows user account's password:
NX:
Number of SPM Server: 1 Number of SFM Server: 1
5. IP address and port for Streamline NX Server

Port number
Application Name IP Address
(HTTP/HTTPS)
Administration Manager (ADM) e.g. 192.168.1.15 e.g. 8080/8443
Authentication and Accounting Manager (AAM) e.g. 192.168.1.15 e.g. 8081/8444
Scan and Fax manager (SFM) e.g. 192.168.1.15 e.g. 8082/8445
Secure Print manager (SPM) e.g. 192.168.1.15 e.g. 8083/8446
Report Generator (RG) e.g. 192.168.1.15 e.g. 8084/8447
6. Database
SQL Server version:
SQL Server OS:
SQL Server IP address:
Named Instance for ADM/AAM/SPM/RG: StreamlineNX
Authentication mode: SQL Server authentication or Windows authentication:
Case of SQL Server authentication - SA Password:
Case of Windows authentication - User name and password:
255
7. Authentication and Accounting Manager (AAM)

7-1. Card authentication
Do you require user to be authenticated prior to using MFP? YES
What is the card type for authentication?
7-2. Proxy login

Proxy login for authentication is used?
If yes, Proxy user name and password:
7-3. Guest login

Guest login to the MFP is enabled?
If yes, Guest user name and password:
PIN code is used when guest printing?
8. Secure Print Manager (SPM)

8-1. Secure Print
Display name on the MFP: Secure Print
SSL is enabled: Yes/No
Job Storage Path: C:\ProgramData\Streamline NX\SPM\Data\spool (Default)
Printer Driver Language (PDL): PCL6, PS
Printer driver name and version:

(e.g. PCL6 Driver for Universal Print v4.0)
8-2. Direct Print

Print server's IP address for direct printing:
8-3. SAP Printing

User name who send a print job from SAP to the MFP on the SAP Print Server (Windows):
256
9. Scan and FAX Manager (SFM)
9-1. Scan to home folder
Start point path for scan to folder:
File naming rule (if you have):
Authentication method when accessing to shared folder: Login user or proxy user?
If proxy user is used for authentication, proxy user Password of proxy user:
name:
Domain name to which proxy user belongs:
9-2. Scan to Email
SMTP server type and version:

(e.g., Microsoft Exchange 2010, Lotus Notes 6, 7, 8)
SMTP Server Name or IP address:
SMTP/SMTPS
SMTP
SMTP over SSL
SMTPS (StartTLS)
SMTP Port Number:
Authentication Method:
No authentication
SMTP-AUTH
POP before SMTP
Login Information: Proxy user or Login user:
10. MFP information for POC

MFP product name for POC:
MFP IP address:
MFP Location:
257
: Glossary
NOTES:
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________
__________________________________________________________________________

RICOH Streamline NX Install &amp; Config Guide

Diunggah oleh

Informasi Dokumen

Hak Cipta

Format Tersedia

Bagikan dokumen Ini

Bagikan atau Tanam Dokumen

Opsi Berbagi

Apakah menurut Anda dokumen ini bermanfaat?

Apakah konten ini tidak pantas?

Hak Cipta:

Format Tersedia

RICOH Streamline NX Install &amp; Config Guide

Diunggah oleh

Hak Cipta:

Format Tersedia

Copyright 2014

Ricoh Solutions Support Help Desk: 1 (888) 424-1573

Step 6: Activate Licenses .............................................................................................................. 72

Delete a Device Software Policy ............................................................................................ 120

Step 10: Configure Report Generator ........................................................................................ 167

Appendix A: Installation Restrictions ................................................................. 196

Secure Print Manager Uninstall ................................................................................................... 215

Guides for This Solution

RICOH Streamline NX Server Software Installation & Configuration Guide

RICOH Streamline NX Administrators Guide This guide explains how to

RICOH Streamline NX Users Guide This guide explains how to log in to a

RICOH Streamline NX Reports Generator Administrators Manual, User

Whether network devices are distributed geographically, or contained within one

1.2 Component Software Overview

Administration Manager (ADM) Enables the

Authentication and Accounting Manager (AAM) Enables the Administrator

Report Generator (RG) Enables the Administrator to configure, generate and

Secure Print Manager (SPM) Enables the Administrator to create a secure

MFP User Interface With Embedded SFM and SPM

1.3 Streamline NX Features, At-a-Glance

Scanning and Routing

Admin & Reporting

2.1 Server Requirements

Main Memory 16GB or more

Monitor Resolution 1024 x 768 pixels or more

2.2 SQL Server Requirements

Sample Database Structures (v2.2.0 or later)

Remote Database The database and database

Individual Servers Each SL-NX component has its

2.3 System Capabilities & Server Sizing

Scenario A Small Enterprise

Input Values Estimated Calculation (Result)

Scenario B Large Enterprise

Input Values Estimated Calculation (Result)

2.4 Additional Installation Considerations

Before installation of RG, Windows scheduler service must be running.

2.5 SL-NX Workflow Summary, Step by Step

INSTALLING SERVER SOFTWARE

After the databases are created, the SL-NX software can be

Step 1: Install SQL Server

SQL Server Service Accounts:

To install and configure SQL Server 2012, proceed as follows:

1. Insert SQL Server installation media.

2. From root folder, right-click [Setup.exe], and

3. Click [New SQL Server stand-alone].

5. Specify SQL Server 2012 edition to install,

6. Read licence agreement, select I accept the

7. On Product Updates screen, the latest

8. Click [Next >].

Download of SQL Server Setup files begins

9. Check Setup Support Rules for any conditions

10. With [SQL Server Feature Installation]

11. Select the following SQL Features:

12. Click [Next >].

13. On the Installation Rules screen, Setup

14. For [Named instance], type StreamlineNX.

15. For Instance ID, type StreamlineNX.

16. Click [Next >].

17. Review Disk Usage Summary, which

18. Click [Next >].

19. Select [Mixed Mode (SQL Server

20. Specify at least one SQL Server system

21. Enter password for the system administration

22. Click [Next >].

RICOH Streamline NX Install & Config Guide

RICOH Streamline NX Install & Config Guide