Papercut MF Server and printer upgrade

[Theldron]

Hi all,

 

Hope you are well.

 

I have 2 schools who use Papercut MF and they need the software upgraded. Is the upgrade procedure relatively straight forward with regards to the server and embedded printer software?

 

Has there been any gotchas?

 

Thanks

[atcoates]

I've got three schools to do. As it's just a minor revision to a current version, rather than an upgrade of versions I'm hoping it will be just a simple process. Think standard procedure is to backup the papercut database etc and then perform the upgrade.

 

https://www.papercut.com/kb/Main/Upgrading#application-server-upgrade

[Michael]

There are several considerations -

 

You need an active/valid license to apply any upgrade.

 

If it's a major upgrade, for example version 21 > 22, then I'd take a VM snapshot.

 

If it's an incremental upgrade, 9/10 it should be absolutely fine.

 

Either of the above, I would still highly recommend reading the upgrade notes; what's fixed, but more crucially known compatibility issues.

 

Depending on the make/model of the MFP, the embedded software may also need upgrading from your leasing provider beforehand.

 

As with anything software, upgrading to the latest isn't always the best. Papercut are very good at providing multiple versions/revisions to support customer requirements.

[free780]

Crucially don’t put your Papercut web server on the internet. Force it through azure app proxy if external access is needed.

 

I wouldn’t be surprised if additional vulnerabilities are found. This happened to the spooler service and Exchange. Security researchers may examine Papercut more throughly and find vulnerabilities.

[Theldron]

Its a major version upgrade for both schools, so should be interesting. The one school papercut is on a vm the other schools its not.

[MYK-IT]

Critical: Please note that as of 18th April, 2023 we have evidence to suggest that unpatched servers are being exploited in the wild, (particularly ZDI-CAN-18987 / PO-1216).

 

Our immediate advice is to upgrade your PaperCut Application Servers to one of the fixed versions listed below if you haven’t already.

 

If you suspect that your server has been compromised, we recommend taking server backups, then wiping the Application Server, and rebuilding from a ‘safe’ backup point prior to when you discovered any suspicious behavior. We have also updated the FAQ “How do I know if my server has been exploited?” question below.

 

https://www.papercut.com/kb/Main/PO-1216-and-PO-1219

 

Also, check the Known Issues - especially if you have (specific) Xerox Models as you cannot currently apply the update (that includes the security patches) and have to stay on 22.0.7 - unless the mentioned workaround is suitable for your situation.

[Theldron]

Thanks. We are running Sharp and Konica machines, so looks ok.

[Michael]

https://www.papercut.com/kb/Main/PO-1216-and-PO-1219

 

Also, check the Known Issues - especially if you have (specific) Xerox Models as you cannot currently apply the update (that includes the security patches) and have to stay on 22.0.7 - unless the mentioned workaround is suitable for your situation.

 

22.0.9 fixes these issues

[psydii]

FWIW while we do nominally follow the process outlined by@%1;, we update at least three times a year and have been for *years* now. Never had a problem.

[Michael]

Why would anyone need to make Papercut public out of curiosity?

[Theldron]

Why would anyone need to make Papercut public out of curiosity?

 

No clue, we keep ours well away.

[Theldron]

FWIW while we do nominally follow the process outlined by@%1;, we update at least three times a year and have been for *years* now. Never had a problem.

 

Do you normally have to do anything special with the embedded software on the printers if you use it?

[psydii]

Do you normally have to do anything special with the embedded software on the printers if you use it?

 

I seem to recall that we contact the MFD supplier to check if they need to do anything to keep things running smoothly. But, we usually just update server-side and the rest just follows along.

[DGardiner]

Why would anyone need to make Papercut public out of curiosity?

 

Even so, its an internal attack vector for malware to get roots.

 

- - - Updated - - -

 

I seem to recall that we contact the MFD supplier to check if they need to do anything to keep things running smoothly. But, we usually just update server-side and the rest just follows along.

 

These days the MFP may need a licence/configuration to enable the embeded software but papercut auto installs/sets up the embeded stuff on every copier brand ive used it with after thats done so never had to touch them, except maybee a reboot of the printer if the embeded software hangs after updating.

[MatthewL]

Why would anyone need to make Papercut public out of curiosity?

 

The only time would be using web print but advised to use a server in a DMZ for this purpose.

 

If you have Sharp machines just run a backup of PaperCut database and snap shot server if you can, stop PaperCut services and run upgrade. PaperCut to Sharp machines is just a webpage if anyone is unsure on these.

[Theldron]

Hi all, thanks for the advice, did this last night on the sharp printers and it updated the server and printer flawlessly. Just need to do this at the other school now with Konica Minolta printers. Hopefully it will be as easy.

[DGardiner]

Hi all, thanks for the advice, did this last night on the sharp printers and it updated the server and printer flawlessly. Just need to do this at the other school now with Konica Minolta printers. Hopefully it will be as easy.

 

its automatic, the embeded functions on the km machines is just a website so loads back up as the papercut server comes online