Skip to main content
Kofax

Ricoh MFP Client cannot connect to the KFS 4.1.0 server over HTTPS after installing Fix Pack 12 or 13

21927

QAID # 21927 Published

Question / Problem:

After installing Fix Pack 12 or Fix Pack 13 for Kofax Front Office Server (KFS) 4.1.0, the Ricoh MFP Client cannot successfully connect to the KFS server over an HTTPS connection.

Answer / Solution:

Fix Pack 12 for KFS 4.1 introduced a security enhancement whereby the Ricoh MFP Client is configured to not trust any unknown server-side SSL certificates. Therefore, it is necessary to add the KFS server’s SSL certificate to the certificate store prior to deploying the Ricoh MFP Client. This issue has been documented in TFS 712558.

To resolve this issue:

  1. Upgrade the KFS 4.1.0 installation to Fix Pack 14 or higher.
    NOTE: Upgrading to KFS 4.1.1 and/or any of its fix packs is also valid.
  2. On the KFS server, use the Windows Certificate Export Wizard to export the SSL certificate in Base-64 X.509 format.
  3. Navigate to the following folder:
    • C:\Program Files (x86)\Kofax\Front Office Server 4.1\
  4. Create a new folder and name it externalcerts.
  5. Copy the SSL Certificate file(s) into the externalcerts folder.
  6. Log in to the KFS Administration Console.
  7. Navigate to the Settings ¦ Advanced screen.
  8. In the kfs.properties namespace, make sure that the ProxyServer value is set to the hostname or IP address of the KFS server (or the load balancer, if applicable).
  9. In the kfs.properties namespace, make sure that the ProxyServerSecurePort is set to the correct port for HTTPS communication (default is 443).
  10. In the kfs.properties namespace, make sure that the ProxyServerProtocol value is set to HTTPS.
  11. Click Save.
  12. Use the instructions in the Kofax Front Office Server Administrator’s Guide for Ricoh MFPs to redeploy the Kofax Ricoh MFP Client to the devices.

Applies to:

Product Version Category
KFS 4.1 MFP Client