Configure Secure Print Job Submission (Force HTTPS)

By default, Mobility Print for Windows allows print job submissions over both unencrypted HTTP (port 9163) and encrypted HTTPS (port 9164).

To comply with high-security environments, you can configure the Mobility Print server to strictly reject any print jobs sent over unencrypted channels. This ensures all print data in transit remains fully encrypted.

Setting the ForceHTTPSJobSubmissions configuration key strictly blocks print job submissions over unencrypted HTTP (port 9163). It does not disrupt printer discovery.

Windows Client Impact: Existing Windows queues on port 9163 will stop working immediately once the config key is enabled. Users must reinstall their printers to utilize the HTTPS queue.

Trusted Certificate Required: For Windows clients to connect and print successfully under strict HTTPS, you must configure a trusted, CA-signed SSL/TLS certificate on your Mobility Print serverfirst.

Unaffected Clients: Standard macOS, iOS (AirPrint and Profile-based), Android, Chrome Extension, and Cloud clients will continue to work seamlessly under default configurations.

Third-Party Integrations: Any manually created third-party IPP print queues explicitly targeting port 9163 will be blocked from submitting jobs.

How to configure

To force HTTPS for print job submissions:

1. Open the Configuration File:
   On your Mobility Print server, locate and open the [app-path]/data/config/mobility-print.conf.toml configuration file in a plain text editor:

2. Add/Modify the Configuration Key:
   Under the general configurations, locate or add the ForceHTTPSJobSubmissions key and set it to true. I.e. ForceHTTPSJobSubmissions = true

3. Restart the Service:
   Save the file and restart the Mobility Print Server service to apply the change.

   Note: Restarting will immediately cancel any in-flight print jobs currently being processed.