[LEGACY] Adding PaperCut as a certificate Trusted Publisher for the PaperCut Global PostScript driver.
The information below only pertains to older versions of PaperCut. Please note that with the release of PaperCut 17.0.3, a Microsoft signed version of the PaperCut Global Print Driver has been included with the installation, meaning that it is no longer necessary to follow the steps below. You can find the PaperCut Global Postscript driver files where PaperCut is installed:
Have a look at this page for more information about our Global Print Driver.
Adding PaperCut as a certificate Trusted Publisher for the PaperCut Global PostScript driver.
When creating a connection to a Find Me shared printer which uses the PaperCut Global PostScript driver, a “Do you trust this printer?” message is displayed. This will occur when PaperCut has not been added as a Trusted Publisher to the certificate store on the machine adding the connection.
When the printer is added but PaperCut has not been added as a certificate Trusted Publisher, there will be a Windows Print Service event 600 on the client machine stating: “The print spooler failed to import the printer driver that was downloaded from \\server\print$\x64\PCC\pcglobal.inf_amd64_ee2a354197beaa68.cab into the driver store for driver PaperCut Global PostScript. Error code= 800f0242. This can occur if there is a problem with the driver or the digital signature of the driver.”
Organizations deploying a connection to a Find Me shared printer which uses the PaperCut Global driver and wish to retain the default Domain Point and Print Restrictions policy settings or wish to avoid the event 600 message, will need to add PaperCut as a Trusted Publisher to the Local Computer certificate store. Here is a link to PAPERCUT_Trusted_Publisher.cer PAPERCUT_Trusted_Publisher.zip Unzip the file and copy to an accessible location.
Performing this task using group policy.
Please follow the guidance provided in this Microsoft TechNet article. https://technet.microsoft.com/en-us/library/cc770315.aspx
Performing this task using the Certificate Manager on the local machine.
Launch mmc.exe, if a User Account Control prompt is displayed, click Yes. Add the Certificate Management snap-in. Click File, Add/Remove Snap-in…, Certificates. Click Add, click Computer account, Next. Retain “Local computer” selection, Finish, OK.
Click Trusted Publishers, Right click, All Tasks, Import…, Next, Browse, locate the PAPERCUT_Trusted_Publisher.cer downloaded previously. Open, Next.
Retain “Place all certificates in the following store”
The connection to the shared printer will now complete without an additional prompt or action required by the user.
Note: With the release of Microsoft security update https://support.microsoft.com/en-us/kb/3170005, the vendor signed driver model is no longer supported with “Point and Print” driver deployment. We are currently in the process of obtaining a Microsoft signature for the PaperCut Global PostScript driver.
Keywords: global, driver, group policy, Find Me, Do you trust this printer?