Lexmark multifunction devices are supported by OptimiDoc through the embedded Solutions Framework (eSF). This page describes how the integration works under the hood, lists the supported models, outlines available features and authentication methods, and documents known limitations and firmware requirements.
Lexmark is an embedded-terminal vendor: OptimiDoc installs an eSF application on the device panel, can lock the panel behind authentication, release held jobs, and run scan workflows. All Lexmark communication is always encrypted.
Integration Method
OptimiDoc integrates with Lexmark devices via the eSF (embedded Solutions Framework) — Lexmark's platform for deploying custom applications directly onto the device control panel. The OptimiDoc eSF application provides:
-
A custom login screen for card, PIN, and username/password authentication.
-
A pull-print job list for releasing held print jobs.
-
Scan-to-workflow buttons for initiating server-managed scan templates.
The eSF application is deployed remotely from the OptimiDoc web interface using the device's embedded web server credentials. Communication between the device and the OptimiDoc server always occurs over HTTPS.
How the Integration Works
1. Installation
When you install OptimiDoc onto a Lexmark device, OptimiDoc locates the correct eSF application package for the device from its bundled Lexmark terminal versions, checks whether the OptimiDoc application is already installed, deploys it if necessary, and then configures the terminal (server URL, authentication method, and behaviour). All of this is performed remotely from the web interface.
2. Old and New API dual-mode
OptimiDoc supports two communication modes for Lexmark devices and selects one automatically during installation:
|
Mode |
Selection criteria |
Description |
|---|---|---|
|
New API |
The device has an administrator password set and responds to the |
Modern token/session-based authentication; no cookies required. |
|
Old API |
The device has no password or does not support the session endpoint |
Legacy cookie-based authentication. |
If the device has administrator credentials configured and responds to the session authentication endpoint, the New API is used; otherwise OptimiDoc falls back to the Old API.
3. Authentication and accounting
The user authenticates at the panel with a card, PIN, or login/password (see methods below), and access rights are enforced per user. Copy and print usage is tracked through the eSF application and reported back to OptimiDoc for accounting.
4. Remote login (logout not supported)
Lexmark supports remote login — a user can be logged in at the device from the OptimiDoc web/mobile app, which calls the device's unlock endpoint. Remote logout is not supported on Lexmark; the session ends at the device.
5. Uninstallation
Uninstalling removes the OptimiDoc eSF application from the device.
Authentication Methods
The authentication methods offered for a Lexmark device depend on whether Device Authentication is enabled:
|
When Device Authentication is enabled |
Description |
|---|---|
|
PIN |
User enters a numeric PIN code. |
|
Login and Password |
User enters a username and password. |
|
Card |
User taps a card on the device's card reader. |
|
Card or PIN |
User may authenticate with either a card tap or a PIN. |
|
Card or Login and Password |
User may authenticate with either a card tap or credentials. |
|
External Authentication |
Authentication delegated to an external system via the OptimiDoc External Authentication API. |
|
When Device Authentication is disabled |
Description |
|---|---|
|
Single Sign-On |
The only method available. Authenticates via the organisation's SSO provider. |
Lexmark specifics:
Single Sign-On is available only when Device Authentication is disabled (
ssoOnlyWithoutDeviceAuth), and the User List method is not offered for Lexmark devices.Lexmark does not support the combined Card and PIN or Card and Login and Password two-factor methods (
allowCardAnd: false) — only the "Card or …" variants, where the user chooses one method, are available.
Always-Secure Connection
Lexmark devices always use a secure (HTTPS) connection to communicate with the OptimiDoc server. Unlike other vendors, the secure-connection toggle is not shown in the device configuration dialog (showSecure: false) because it is always enabled and cannot be disabled. This ensures all communication between the device and the server is encrypted.
Terminal Localisation
Unlike most other vendors, Lexmark devices do not offer a user-configurable terminal localisation setting (showLocalization: false). The terminal language is determined by the system configuration rather than a per-device setting.
Supported Models
CX Series (Colour MFP)
|
Model |
Minimum Firmware |
Notes |
|---|---|---|
|
CX622ade |
Firmware 75.x or later |
Full feature support |
|
CX625ade |
Firmware 75.x or later |
Full feature support |
|
CX725de/dhe |
Firmware 75.x or later |
Full feature support |
|
CX820de/dte/dtfe |
Firmware 75.x or later |
Full feature support |
|
CX825de/dte/dtfe |
Firmware 75.x or later |
Full feature support |
|
CX860de/dte/dtfe |
Firmware 75.x or later |
Full feature support |
|
CX920de/CX921de/CX922de |
Firmware 75.x or later |
Full feature support |
|
CX923dte/dxe/dze |
Firmware 75.x or later |
Full feature support |
MX Series (Monochrome MFP)
|
Model |
Minimum Firmware |
Notes |
|---|---|---|
|
MX622ade/adhe |
Firmware 75.x or later |
Full feature support |
|
MX721ade/adhe |
Firmware 75.x or later |
Full feature support |
|
MX722ade/adhe |
Firmware 75.x or later |
Full feature support |
|
MX822ade/adxe |
Firmware 75.x or later |
Full feature support |
|
MX826ade/adxe |
Firmware 75.x or later |
Full feature support |
Next-Generation Series
|
Model |
Minimum Firmware |
Notes |
|---|---|---|
|
CX730de/CX735adse |
Firmware 81.x or later |
Full feature support |
|
CX930dse/CX931dse |
Firmware 81.x or later |
Full feature support |
|
CX942adse/CX943adxse/CX944adxse |
Firmware 81.x or later |
Full feature support |
|
MX432adwe |
Firmware 81.x or later |
Full feature support |
|
MX532adwe |
Firmware 81.x or later |
Full feature support |
Supported Features
|
Feature |
Status |
Notes |
|---|---|---|
|
Pull print (release at device) |
Supported |
Card, PIN, or username/password authentication |
|
Scan to workflow |
Supported |
Templates displayed on device panel |
|
Copy/print accounting |
Supported |
Per-page colour/BW tracking via the eSF application |
|
Card authentication |
Supported |
USB card readers; HID, Mifare |
|
PIN authentication |
Supported |
Configurable PIN length |
|
Device monitoring (SNMP) |
Supported |
Toner levels, paper trays, page counts, error status |
|
Agent remote installation |
Supported |
Via eSF remote deployment |
|
Secure print release |
Supported |
TLS encrypted communication (always enabled) |
|
Remote login |
Supported |
Log a user in from the OptimiDoc web/mobile app |
|
Remote logout |
Not supported |
Session ends at the device |
Prerequisites
Before installing the OptimiDoc eSF application on a Lexmark device:
-
Ensure eSF support. Verify the device model supports eSF applications. Most enterprise-class Lexmark MFPs include eSF support as standard.
-
Enable eSF on the device. Navigate to the device web interface > Settings > Security > Solutions (eSF) and ensure solution deployment is enabled.
-
Enable HTTPS. The eSF framework requires secure communication between the device and the server.
-
Configure SNMP for device monitoring. Set up SNMPv2c or SNMPv3 with credentials matching the OptimiDoc configuration.
-
Note the device administrator credentials. These are required for remote eSF application deployment. Providing a password also enables the New API communication mode.
Known Limitations
-
Older firmware compatibility: Devices running firmware versions older than 75.x may not support the current version of the OptimiDoc eSF application. Update the firmware before attempting installation.
-
eSF memory limits: Some lower-end Lexmark models have limited memory available for eSF applications. If the installation fails, check the available eSF memory on the device.
-
Card reader models: Lexmark uses specific card reader modules that attach to the device. Ensure the card reader is a Lexmark-compatible module (e.g. the Lexmark N-series card reader or a compatible USB HID reader).
-
Scan resolution: When initiating scans via the eSF application, the maximum resolution may be limited by the eSF framework. For high-resolution scanning, use the device's native scan function.
-
No Card+PIN combinations: Unlike some other vendors, Lexmark does not support the combined Card and PIN or Card and Login and Password methods.
-
No remote logout: Remote login is supported, but there is no remote logout.
Firmware Update Notes
Lexmark firmware updates are generally backwards compatible with eSF applications. However:
-
Always test firmware updates on a single device before fleet-wide deployment.
-
After updating, verify the OptimiDoc eSF application is still installed and functional.
-
Check for eSF framework version changes in the Lexmark firmware release notes.
-
If the eSF application is removed during a firmware update, redeploy it from the OptimiDoc web interface.
In Summary
Lexmark devices integrate through the eSF platform over an always-encrypted connection. OptimiDoc deploys the correct eSF application version, configures the terminal, and selects a modern (New API) or legacy (Old API) communication mode automatically based on the device's capabilities. Single Sign-On is used when the panel is unlocked; card/PIN/login and External Authentication apply when Device Authentication is enabled. Remote login is supported, but remote logout is not.
Related articles