OptimiDoc Server Help Center

Lexmark

Lexmark multifunction devices are supported by OptimiDoc through the embedded Solutions Framework (eSF). This page describes how the integration works under the hood, lists the supported models, outlines available features and authentication methods, and documents known limitations and firmware requirements.

Lexmark is an embedded-terminal vendor: OptimiDoc installs an eSF application on the device panel, can lock the panel behind authentication, release held jobs, and run scan workflows. All Lexmark communication is always encrypted.


Integration Method

OptimiDoc integrates with Lexmark devices via the eSF (embedded Solutions Framework) — Lexmark's platform for deploying custom applications directly onto the device control panel. The OptimiDoc eSF application provides:

  • A custom login screen for card, PIN, and username/password authentication.

  • A pull-print job list for releasing held print jobs.

  • Scan-to-workflow buttons for initiating server-managed scan templates.

The eSF application is deployed remotely from the OptimiDoc web interface using the device's embedded web server credentials. Communication between the device and the OptimiDoc server always occurs over HTTPS.


How the Integration Works

1. Installation

When you install OptimiDoc onto a Lexmark device, OptimiDoc locates the correct eSF application package for the device from its bundled Lexmark terminal versions, checks whether the OptimiDoc application is already installed, deploys it if necessary, and then configures the terminal (server URL, authentication method, and behaviour). All of this is performed remotely from the web interface.

2. Old and New API dual-mode

OptimiDoc supports two communication modes for Lexmark devices and selects one automatically during installation:

Mode

Selection criteria

Description

New API

The device has an administrator password set and responds to the /webservices/auth/session endpoint

Modern token/session-based authentication; no cookies required.

Old API

The device has no password or does not support the session endpoint

Legacy cookie-based authentication.

If the device has administrator credentials configured and responds to the session authentication endpoint, the New API is used; otherwise OptimiDoc falls back to the Old API.

3. Authentication and accounting

The user authenticates at the panel with a card, PIN, or login/password (see methods below), and access rights are enforced per user. Copy and print usage is tracked through the eSF application and reported back to OptimiDoc for accounting.

4. Remote login (logout not supported)

Lexmark supports remote login — a user can be logged in at the device from the OptimiDoc web/mobile app, which calls the device's unlock endpoint. Remote logout is not supported on Lexmark; the session ends at the device.

5. Uninstallation

Uninstalling removes the OptimiDoc eSF application from the device.


Authentication Methods

The authentication methods offered for a Lexmark device depend on whether Device Authentication is enabled:

When Device Authentication is enabled

Description

PIN

User enters a numeric PIN code.

Login and Password

User enters a username and password.

Card

User taps a card on the device's card reader.

Card or PIN

User may authenticate with either a card tap or a PIN.

Card or Login and Password

User may authenticate with either a card tap or credentials.

External Authentication

Authentication delegated to an external system via the OptimiDoc External Authentication API.

When Device Authentication is disabled

Description

Single Sign-On

The only method available. Authenticates via the organisation's SSO provider.

Lexmark specifics:

  • Single Sign-On is available only when Device Authentication is disabled (ssoOnlyWithoutDeviceAuth), and the User List method is not offered for Lexmark devices.

  • Lexmark does not support the combined Card and PIN or Card and Login and Password two-factor methods (allowCardAnd: false) — only the "Card or …" variants, where the user chooses one method, are available.


Always-Secure Connection

Lexmark devices always use a secure (HTTPS) connection to communicate with the OptimiDoc server. Unlike other vendors, the secure-connection toggle is not shown in the device configuration dialog (showSecure: false) because it is always enabled and cannot be disabled. This ensures all communication between the device and the server is encrypted.


Terminal Localisation

Unlike most other vendors, Lexmark devices do not offer a user-configurable terminal localisation setting (showLocalization: false). The terminal language is determined by the system configuration rather than a per-device setting.


Supported Models

CX Series (Colour MFP)

Model

Minimum Firmware

Notes

CX622ade

Firmware 75.x or later

Full feature support

CX625ade

Firmware 75.x or later

Full feature support

CX725de/dhe

Firmware 75.x or later

Full feature support

CX820de/dte/dtfe

Firmware 75.x or later

Full feature support

CX825de/dte/dtfe

Firmware 75.x or later

Full feature support

CX860de/dte/dtfe

Firmware 75.x or later

Full feature support

CX920de/CX921de/CX922de

Firmware 75.x or later

Full feature support

CX923dte/dxe/dze

Firmware 75.x or later

Full feature support

MX Series (Monochrome MFP)

Model

Minimum Firmware

Notes

MX622ade/adhe

Firmware 75.x or later

Full feature support

MX721ade/adhe

Firmware 75.x or later

Full feature support

MX722ade/adhe

Firmware 75.x or later

Full feature support

MX822ade/adxe

Firmware 75.x or later

Full feature support

MX826ade/adxe

Firmware 75.x or later

Full feature support

Next-Generation Series

Model

Minimum Firmware

Notes

CX730de/CX735adse

Firmware 81.x or later

Full feature support

CX930dse/CX931dse

Firmware 81.x or later

Full feature support

CX942adse/CX943adxse/CX944adxse

Firmware 81.x or later

Full feature support

MX432adwe

Firmware 81.x or later

Full feature support

MX532adwe

Firmware 81.x or later

Full feature support


Supported Features

Feature

Status

Notes

Pull print (release at device)

Supported

Card, PIN, or username/password authentication

Scan to workflow

Supported

Templates displayed on device panel

Copy/print accounting

Supported

Per-page colour/BW tracking via the eSF application

Card authentication

Supported

USB card readers; HID, Mifare

PIN authentication

Supported

Configurable PIN length

Device monitoring (SNMP)

Supported

Toner levels, paper trays, page counts, error status

Agent remote installation

Supported

Via eSF remote deployment

Secure print release

Supported

TLS encrypted communication (always enabled)

Remote login

Supported

Log a user in from the OptimiDoc web/mobile app

Remote logout

Not supported

Session ends at the device


Prerequisites

Before installing the OptimiDoc eSF application on a Lexmark device:

  1. Ensure eSF support. Verify the device model supports eSF applications. Most enterprise-class Lexmark MFPs include eSF support as standard.

  2. Enable eSF on the device. Navigate to the device web interface > Settings > Security > Solutions (eSF) and ensure solution deployment is enabled.

  3. Enable HTTPS. The eSF framework requires secure communication between the device and the server.

  4. Configure SNMP for device monitoring. Set up SNMPv2c or SNMPv3 with credentials matching the OptimiDoc configuration.

  5. Note the device administrator credentials. These are required for remote eSF application deployment. Providing a password also enables the New API communication mode.


Known Limitations

  • Older firmware compatibility: Devices running firmware versions older than 75.x may not support the current version of the OptimiDoc eSF application. Update the firmware before attempting installation.

  • eSF memory limits: Some lower-end Lexmark models have limited memory available for eSF applications. If the installation fails, check the available eSF memory on the device.

  • Card reader models: Lexmark uses specific card reader modules that attach to the device. Ensure the card reader is a Lexmark-compatible module (e.g. the Lexmark N-series card reader or a compatible USB HID reader).

  • Scan resolution: When initiating scans via the eSF application, the maximum resolution may be limited by the eSF framework. For high-resolution scanning, use the device's native scan function.

  • No Card+PIN combinations: Unlike some other vendors, Lexmark does not support the combined Card and PIN or Card and Login and Password methods.

  • No remote logout: Remote login is supported, but there is no remote logout.


Firmware Update Notes

Lexmark firmware updates are generally backwards compatible with eSF applications. However:

  1. Always test firmware updates on a single device before fleet-wide deployment.

  2. After updating, verify the OptimiDoc eSF application is still installed and functional.

  3. Check for eSF framework version changes in the Lexmark firmware release notes.

  4. If the eSF application is removed during a firmware update, redeploy it from the OptimiDoc web interface.


In Summary

Lexmark devices integrate through the eSF platform over an always-encrypted connection. OptimiDoc deploys the correct eSF application version, configures the terminal, and selects a modern (New API) or legacy (Old API) communication mode automatically based on the device's capabilities. Single Sign-On is used when the panel is unlocked; card/PIN/login and External Authentication apply when Device Authentication is enabled. Remote login is supported, but remote logout is not.


Related articles