Hotfixes and Updates after HP Insights 4.5 General Release

HP Secure Print Service Hotfix (Local and Cloud Connector)

Version: 2605.2506.4850

Release Date: May 29, 2026

HP Secure Print Service Bug fixes

• QR sign-in failure on HP printers (Cloud Connector) - Fixed an intermittent issue where QR sign-in could fail on HP printers secured using the Cloud Connector, even after successful approval in the mobile app.

• MagTek card reader authentication issue - Fixed an issue where misread swipes on MagTek magnetic stripe readers could, in rare cases, authenticate a user as the wrong account. The Secure Print Service now detects and rejects invalid card reads on HP and Toshiba devices, preventing them from being registered or used for sign-in.

• Max File Size not enforced (Scan to Email via Microsoft 365 SMTP) - Fixed an issue where the Max File Size limit was not enforced for Scan-to-Email jobs sent via Microsoft 365 SMTP. Scans exceeding the configured limit are now correctly blocked, and users receive an appropriate error notification.

• Log4j vulnerability remediation - Removed unused Log4j library files from the Secure Print Service and Discovery Deployment Utility to address flagged vulnerabilities (CVE-2021-44832, CVE-2025-68161).

HP Insights 4.5 Release Notes - May 2026

Note: For a complete list of the features and improvements included in the HP Insights 4.4, refer to the HP Insights/HP Secure Print 4.5 Release Notes - May 2026.

Security Updates

System User Password Expiration

Administrators can now enforce password expiration for internal users, including enabling or disabling expiration, setting expiration intervals (1–365 days), and immediately expiring passwords to require a change at next login.

For more information, see Password Expiration for System Users

Masked Private Data Fields

HP Insights 4.5 improves handling of sensitive configuration values in the web console by masking them by default, reducing the risk of exposure in shared or screen‑shared environments. The following fields are now displayed as hidden values instead of full text: Site Encryption Key, API Authorization Key, and OAuth API Client Secret.

Platform Updates

Centralized Mobile App Access Controls

A new Mobile section under Secure Settings provides a single location to enable or disable end-user access to the Secure Print mobile app. The Enable Mobile Access toggle controls mobile app registration and use. A read-only Mobile Features list shows which capabilities are active based on your configuration and licensing.

Note: Requires Print Scout v8.3 (Windows) or v2.31 (macOS).

For more information, see Mobile App Access Controls

Email Notification Management

A new Email Notification section under Account Settings provides a single place to control which system-generated emails are sent and to whom. Notifications are organized by audience (Print Users and Administrators) and can be enabled or disabled individually. Notifications required for core functionality are marked Always On.

For more information, see Email Notification Management.

Enhanced Print Scout Management in Web Console

Archive Print Scouts

Archive and Archived Print Scouts actions are now available on the Discover > Print Scout page, allowing administrators to maintain a cleaner view of the Print Scout screen. Filtered data can also be exported to help identify outdated Print Scouts.

For more information, see Archive Print Scouts

New Columns in the Print Scout Tab

Three columns have been added or updated on the Discover > Print Scout tab - Scout Health (renamed), Active in Last 30 Days (new), and Support Level (new).

For more information, see Print Scout Columns

New CSV Export

A new CSV Export button has been added to the Discover > Print Scout tab, allowing administrators to export Print Scout data to a CSV file for external analysis, reporting, or sharing with other teams.

Discover on Demand for Device Scout

Administrators can now trigger an immediate Device Scout discovery scan from the web console without waiting for the next scheduled scan. Available under Discover > Device Scout.

Note: Requires Device Scout version 1.25.4.103 or later.

For more information, see Discover on Demand

Direct Print Enhancements

Bulk Location Import via CSV

A new CSV Location Import option under Direct > Direct Printers > Locations allows administrators to import locations in bulk using a CSV file, instead of creating them individually in the web console.

For more information, see Bulk Location Import for Direct Print

Enhanced Devices Import

The Devices Import in Direct > Direct Printers has been updated to support two additional fields: Queue Name (formerly Printer Label) and Profile Override.

Queue Profiles for Direct Print

Queue Profiles introduce a rule-based approach to print queue creation for Direct Print. Administrators define matching rules (model, IP range, or location) and queue templates. HP Insights includes built-in profiles for out-of-the-box configuration.

For more information, see Queue Profiles

Create Queues from Profile

A new Create Queues from Profile action under Direct > Direct Printers automatically generates print queues based on defined Queue Profiles. HP Insights evaluates selected devices against enabled profiles and creates queues using the first matching profile.

For more information, see Create Queues from Profile

Secure Print Service Updates

QR Sign-In (HP Devices Only)

QR Sign-In provides a passwordless sign-in option at secure printers. Users scan a QR code displayed on the printer screen using the HP Secure Print mobile app to sign in and access their print jobs. QR Sign-In works alongside existing sign-in methods.

Note: Requires Secure Print Site Service 2604.1405.1503 and DDU version 2.2.1. Supported on HP devices only.

For more information, see Configuring QR Sign-In.

Admin-Managed Certificates for Secure Print Service(On-Premises Only)

Administrators can now apply custom TLS/SSL certificates and server aliases to the Sentry Print Service, replacing the default HP certificate. A new Certificate Manager app is included with Secure Print Service at C:\Program Files (x86)\HPSystems\Secure Print Service\Configurator.

Print Scout Hotfix

Version: 8.2.2.103

Release Date: March 27, 2026

Print Scout IPP Driver installation and upgrade failure

Fixes an issue in Print Scout version 8.2.1.103 that causes printing to fail when upgrading from a previous version or when performing a new installation using the IPP print driver option.

Secure Print Service Hotfix (Local and Cloud Connector)

Version: 2602.2403.2924

Release Date: March 9, 2026

Card login immediately logs users out on some HP devices

This fix resolves a critical issue affecting multiple customers on newer HP multifunction devices using “rf IDEAS Proximity” card readers. In some cases, a single card swipe was incorrectly interpreted as multiple swipe events, causing users to successfully log in and then be immediately logged out.

Secure Print Service Hotfix (Local Connector Only)

Version: 2602.403.2922

Release Date: February 26, 2026

Improved Handling of Large Scan Jobs on Secured Ricoh Devices

Fixed an issue where large scan jobs on secured Ricoh MFDs could cause the HP Secure Print application to crash. The  maximum supported scan size is 100 MB (roughly 250 pages at 300 DPI), and users will now receive a clear message when this limit is exceeded.

Note: Printers must be re‑secured to apply this fix.

To verify the fix, after re‑securing the affected devices, check the Secured Version column in Secure > Secure Printerswithin the web console. The updated version confirms successful deployment.

HP Insights 4.4 Release Notes - February 2026

Note: For a complete list of the features and improvements included in the HP Insights 4.4, refer to the HP Insights/HP Secure Print 4.4 Release Notes - February 2026.

Secure Print Updates

Enhanced Passcode Management

This update introduces advanced administrative options for managing user passcodes in Secure > Settings > Passcode Settings.

New Alphabetic Passcode Option

Administrators now have the option to require passcodes consisting only of lowercase letters with the new Alphabetic setting, in addition to the existing Numeric (default) and Alphanumeric options.

Notes:

• Existing customer configurations (e.g., Numeric or Alphanumeric) remain unaffected.

• The new Alphabetic option does not override or interfere with previously selected Character Complexity options.

Configurable Passcode Expiration

Administrators can now configure expiration policies for passcodes. By default, passcodes are set to Never Expire for both new and existing customers. Previously, a user’s passcodes did not have an expiration period.

The Secure > Settings > Passcode Settings section of the web console now includes the following configurable expiration options:

• Never Expires - This is the default option for all customers.

• Expires in 15 Minutes - Passcodes become invalid 15 minutes after creation. A 15‑minute passcode is intended for single‑use, short‑term access. It expires quickly and is meant to be used once and then forgotten, reducing the risk of reuse or impersonation associated with long‑lived passcodes. This option is best suited for customers who require temporary access only.

• Expires in X Days - Passcodes expire after a specified number of days, configurable between 1 and 365 days.

Passcode Notifications

Users receive alerts when a passcode is about to expire and when it has expired, with the option to reset via the User Portal, Print Scout, or the Secure Print mobile app.

Improved Passcode Experience in the User Portal

Passcodes in the User Portal are now easier to read with larger fonts, increased letter spacing, and visual grouping. A Copy to Clipboard option has also been added for quick access.

Passcode Email Security Enhancement

To improve credential security and meet compliance standards, passcodes no longer appear in plain text in email notifications. Users will now receive an email alert indicating that a passcode has been generated or updated.

Note: Users must now store their passcodes themselves, as these are no longer sent by email. Passcodes can be reset through the User Portal, mobile app, or Print Scout if needed.

Device Profiles Updates

The Secure > Device Profiles tab in the web console has been updated with these changes:

• New More Device Functions Button setting

• Added Guest Print

• Added Offline Print

• New Supported Paper Sizes for Secure Scan

New “More Device Functions Button” setting

A new setting called More Device Function Button has been added to the User Experience drop-down in Secure > Device Profiles tab. This setting controls whether a user can access the printer's native home screen and apps, such as copy, scan, fax, or other non‑HP Insights‑controlled functions.

Added Guest Print to Device Profiles

Admins can now enable or disable Guest Print for individual devices or groups of devices via Device Profiles. Guest Print is centrally controlled through Secure > Settings > Guest Print setting. When Guest Print is enabled globally, administrators can configure it at the device level through the Secure > Device Profiles tab. If Guest Print is disabled globally, the option is hidden from all device profiles and cannot be enabled on individual devices. This update allows granular device-level control when Guest Print is turned on globally.

Added Offline Print Configuration to Device Profiles

Offline Print is managed globally under Secure > Settings. When enabled globally, Offline Print also appears in the Secure Release section under Device Profiles.

• When Offline Print is enabled globally, administrators can turn Offline Print ON or OFF for each individual printer via its assigned Device Profile, allowing granular control over which devices support offline operation.

• When Offline Print is disabled globally, the option is removed from all Device Profiles and cannot be configured at the device level.

Note: Existing customers will retain their current global Offline Print settings after the update.

New Supported Paper Sizes in Device Profiles For Secure Scan

Device Profiles now support two new scan paper sizes, A4 Landscape and Letter Landscape. These options are available in the Scan section of the Secure > Device Profile settings, allowing administrators to configure secure printers to accept and process scans in landscape orientation for both A4 and Letter formats. This enhancement provides greater flexibility for environments that frequently scan wide‑format documents or forms that are better suited to landscape layout.

Enterprise Updates

User Management Improvements

This section describes the latest improvements to user management in the web console, aimed at making user administration easier and ensuring that only authorized users can access HP Insights services.

Activate or Deactivate Accounts

Administrators can now change a user’s account status directly from the Users > User Management screen in HP Insights. For users whose source is either Manual or System, the previously read-only Active field is now editable in the User Properties panel. Set Active to “No” to deactivate a user or set it to “Yes” to activate them.

• Users remain active unless manually changed by an administrator.

• Deactivated users lose access immediately across all HP Insights interfaces.

• User status changes made in the external identity provider will be automatically reflected during SCIM synchronization.

Restricting Inactive Users in HP Insights

HP Insights now enforces restrictions on inactive user accounts making sure that only users marked as ‘Active’ in the User Management screen are permitted to access HP Insights features.

Users whose status is set to Inactive (e.g. “Active” = “No” in the User Management screen) are now blocked from logging in across all HP Insightsd interfaces, including Print Scout, Mobile App, User Portal, and Chrome extension.

Note: This restriction applies exclusively to users who have not been imported via SCIM. Accounts managed through SCIM remain subject to the policies of their respective external identity providers.

New View Active only filter in User Management

A new “View active only” toggle has been added to Users > User Management to help administrators quickly focus on users who are currently active in the system. This filter makes it easier to review and manage your currently active user population, align with licensing views, and reduce noise from historical or deactivated accounts.

• When enabled, the user grid displays active users only, hiding any inactive users.

• When disabled, the grid shows all users, including both Active and Inactive accounts.

Decode Card Data Updates

New Revert to Defaults button

The new Revert to Defaults button in the Decode Card Data section lets administrators quickly reset all card decoding settings to their original values, making setup and troubleshooting easier. All parameters revert to those specified C:\Program Files (x86)\HP\HP Secure Print Service\App_Data\hp\DataDecodeDefaults.xml.

Card Decoding Form Behaviour Update

Updated the card decoding utility so specific fields are automatically enabled or disabled based on related checkbox selections, preventing invalid or inconsistent configurations.

Refreshed License screen

The Account Settings > License tab in the web console now presents licensing details more clearly and accurately. The update improves administrative visibility and makes it easier to view user and device entitlements as they change.

New Auto-Provision Setting

A new Auto‑Provision toggle has been introduced under Account Settings > Settings. This tenant-level option lets administrators decide if users should be automatically created (“just‑in‑time” provisioned) when signing in through OpenID or SAML. Previously, there was no option to disable this functionality. Allowing administrators to control auto provisioning helps organizations manage user access and licensing costs more effectively.

• When Auto‑Provision is enabled, HP Insights creates users automatically when they first sign in through supported identity providers (OpenID or SAML) using any access point, such as the mobile app, User Portal, Chrome extension, secure printers, or Print Scout. This allows instant user creation for logins authenticated by external IdPs, consistent with previous versions.

• When Auto‑Provision is disabled, users are not permitted to self-register during authentication. Users can still be added manually or through SCIM provisioning

Notes:

• This setting only affects auto‑provisioning via OpenID and SAML; it does not block Internal Authentication user creation, or Active Directory–based auth flows.

• Auto‑Provision is enabled by default for all customers, so unless an admin disables it, HP Insights will continue to create new users automatically on their first OpenID/SAML sign-in.

Admin SSO for web console with SCIM Group Mapping

HP Insights 4.4 adds a new way to control who can sign in to the web console as an administrator, using your organization’s identity provider (IdP) groups and SCIM. This feature lets organizations manage admin web console access centrally from their IdP instead of creating and maintaining local admin accounts in HP Insights.

This feature introduces:

• A new Group Mapping section under the Users tab has been added. This allows administrators to assign SCIM‑synced IdP groups to specific HP Insights web console admin roles. For example, admins can link an Entra ID group to the IT Administrator role.

• The Account Settings > Settings page now includes an “Enable SSO Sign-in for System Users” option. When turned on and configured, HP Insights system users (administrators) sign in to the web console using your organization’s SSO and their accounts are managed via SCIM. Admins authenticate with your external identity provider instead of HP Insights managed passwords.

• A dedicated Admin SSO Friendly URL in the Account Settings > Settings tab.

Note: Group Mapping applies to HP Insightsweb console admin roles only. It does not control end-user print access, printer/device permissions, print policies, or quotas.

For more information on how to configure new SCIM-based SSO for administrators, refer to the Configuring the New SSO (SCIM‑Based) for Administrators document.

External Card Integration Update - Added support for OAuth Bearer Token

HP Insights now offers OAuth 2.0 bearer tokens as an optional authentication method, providing stronger security for customers with advanced requirements. Previously, authentication was limited to HTTP signatures. With this update, the web console supports OAuth 2.0 bearer token authentication for external identity assertion and includes four new configuration fields under Analysis > API > External Card Integration:

• Client ID

• Client Secret

• Client Scopes

• Token Endpoint

Client Application Updates

The Analysis > API page has been updated to use applications for API access management. Administrators can now create application APIs, choose which API each application can call, and assign a permission level (Full Access or Read only). Each application receives its own client credentials and can be revoked independently. This provides clearer, more granular control over API access for external integrations. Administrators can now create applications in the Analysis > API > Client Application section in the web console.

Print Scout Updates

This section covers new features, significant enhancements, and bugfixes in Windows Print Scout (v8.2.x) and Mac Print Scout (v2.30). It also includes 8.1.x hotfixes released after HP Insights 4.3.

Windows and Mac Scout Changes

Enhanced Language Support for Print Scout

To better support our global customer base and expand adoption, Print Scout now includes multi-language support for all customer-facing texts. This enhancement ensures that notifications, error messages, and UI prompts are available in the following languages:

• French

• Italian

• Japanese

• German

• Spanish

• Swedish

• Chinese

• Portuguese (Portugal)

• Portuguese (Brazil)

• Dutch

• Norwegian

• English

This provides better experience for global users. Users see Print Scout messages in their local language instead of English-only text.

Passcode Expiry Notification in Print Scout

Print Scout now proactively notifies users when their passcode is about to expire or has already expired, so they can reset it and avoid losing access.

• Advance Warnings: Starting 7 days before expiry, users will see one warning message per day. The notification message shows the number of days remaining (e.g., “Your passcode will expire in 6 days. Please reset it now to avoid losing access.”).

• When one day is left before the passcode expires, Print Scout shows the notification “Your passcode will expire today. Please reset it now to avoid losing access.”

  • No notifications will be shown if the passcode is set to expire in more than seven days.

  • If the passcode has expired for more than 30 days, Print Scout will consider it inactive, requiring the user to create a new passcode.

• Expired Passcode Alerts: If a user’s passcode has expired, Print Scout shows a daily reminder when the user opens the app, with an option to reset it and regain access.

  The warning messages appear under the following conditions:

  • Once every 24 hours while the HP Secure Print desktop app is running

  • When theHP Secure Print desktop app is launched. Note: If the HP Secure Print desktop app is minimized to the system tray, it won’t relaunch until the app is fully quit and restarted, so the warning may not appear daily.

  • When the user logs in after a full logout and login (not just unlocking the screen)

  Reset Passcode

  Print Scout now lets users reset their passcodes directly from the expiry notification in the HP Secure Print desktop app. Just click the Reset button to start authentication and receive your new passcode. Remember to save your passcode. Alternatively, passcodes can be reset via the user portal, the Print Scout desktop app menu, and the mobile app.

  Note: To use the passcode expiry notification feature, you must install the latest Print Scout (8.2 or greater) or Mac Print Scout (v2.30 or greater). If you don’t upgrade to the latest Print Scout, the only way to notify user that their passcodes have expired is via the User Portal.

Ability to Collect Logs for Scouts

HP Insights introduces an easier way to collect logs from both Print Scout and Device Scout interfaces. This feature streamlines the process of collecting diagnostic logs for troubleshooting and support, making it simple for administrators to send all necessary logs to IT or support teams. This feature gives Support and customer admins a self-service way to gather detailed diagnostics from Print Scouts without needing direct access to the workstation or print server.

A new Collect Logs button is available on the Discover > Print Scout and Discover > Device Scout tabs of the web console. This action allows administrators to initiate a log collection request from selected Scouts. Administrators can select one or more Print Scouts or Device Scouts in the grid and submit a single log collection request for all of them at once.

The Collect Log Status option displays the progress of a log collection request started via the Collect Logs button for a Print Scout or a Device Scout.

• The status is “Collecting” while logs are being gathered.

• After the log-download email is sent, the status changes to “Emailed”. This process may take up to 24 hours.

Note: The Collect Logs feature is available only for scouts with a status of OK, Reboot Required, or Needs Attention. It is not available for uninstalled or unregistered scouts. For uninstalled or unregistered scouts, the Collect Logs button is disabled. A scout must also be actively communicating with the system, as shown in the Health Updated column, to receive a log collection request.

Limitation:

• Linux Print Scout does not support collecting logs.

See Collect Logs for Scouts

Windows-Specific Changes

Display Architecture Type for Print Scout Installations

HP Insights now displays whether a Print Scout is running on Intel x64 or ARM64 architecture directly in the web console. Previously, admins could not easily determine the system architecture from the hostname or device list. IT teams can now deploy appropriate drivers and software, streamline troubleshooting, and better manage mixed Intel and ARM workstation environments.

The Operating System Column in the Discover > Print Scout tab now includes Arm64 or x64 including the build number.

Update Print Scout with HP Universal Print Driver 7.9

The Windows Print Scout installer has been updated to bundle the latest HP Universal Print Driver (UPD) version 7.9, replacing the previous version 7.8. This update ensures compatibility with the most current HP printing technology, enhances stability, and addresses known issues from prior versions.

macOS Specific Changes

Toshiba Bypass Tray Support

Mac Print Scout now supports the Toshiba bypass tray in macOS print workflows. Users can select the Bypass Tray directly from the macOS print dialog (Paper Feed section), and jobs will be routed correctly to the bypass / multipurpose tray via CUPS PPD integration. This extends the bypass tray support previously introduced for Windows (Print Scout 8.1.14.103 with Microsoft IPP Class Driver and PSA) to the macOS environment.

Bugfix

• Fixed an issue where Mac Print Scout showed an incorrect page count in the HP Secure Print desktop app when using the Toshiba e‑STUDIO3505AC driver with duplex printing. Page counts now display correctly starting in Mac Print Scout 2.30.

Print Scout 8.1.x Post Release Hotfixes (included in 8.2)

This release includes all bugfixes from the various 8.1.x patch versions. These fixes, originally shipped in separate updates (each with its own version number) are now part of Print Scout 8.2.

8.1.123.103 – November 2025

Installer Update

To improve enterprise readiness, Print Scout now prevents installation when required configuration files InstallConfig.ini, Setup.ini, or CustomerSecret.dat are missing. This safeguard helps avoid misconfigured or unintended deployments. If these files are not included in the deployment package, the installer displays a warning message to the administrator and halts the installation process.

8.1.14.103 – September 2025

Policy Print Update

This update enhances how Print Scout manages and applies print policies. It also includes detailed policy logging for better visibility and easier troubleshooting.

Support for Bypass Tray with Microsoft IPP Class Driver and PSA (Windows Only)

This hotfix introduces full support for the Bypass Tray (also known as Multipurpose Tray) when printing via the Microsoft IPP Class Driver. Users can now select the Bypass Tray in the print dialog, and the correct IPP job attributes are sent to the printer to ensure accurate media routing.

Notes:

• This functionality is only available when using Print Support App (PSA), which is supported on Windows 11 version 24H2 or later.

• Earlier versions of Windows or environments without PSA will not expose or support Bypass Tray selection.

Print Scout Known Issue

After uninstalling macOS Print Scout, a small black dot may remain in the menu bar. This is only a visual issue. You can remove it by right‑clicking the icon and selecting Quit. Reinstalling the Print Scout will restore the icon.

Secure Print Mobile App Updates

Reset Passcode on Mobile App

Users can now reset their passcode directly within the Secure Print Mobile app, providing greater flexibility and convenience for managing access to print jobs.

Passcode expiry notification on mobile app

Users will now be notified of expired passcodes directly in the Secure Print Mobile app, in addition to current alerts in the user portal and Print Scout.

Secure Print Service Updates

This section outlines significant improvements to the Secure Print Service, enhancing reliability, streamlining administrative processes, and optimizing the overall print experience. Additionally, it details resolve issues and bug fixes.

DDU captures IPP details for Direct printers

The Device Discovery and Deployment Utility (DDU) now collects IPP Support and Discovered IPP URL for discovered devices. These details are shown in the Direct > Direct Printers grid for all customers with a Direct Print license.

Notes:

• Available in DDU 2.1.1 or later.

• Applies to both new and existing Direct Print customers.

Device Profiles Updates

In HP Insights 4.4, the Secure Print Service has been enhanced to align with the latest Device Profiles changes. This includes support for the following features:

• Guest Print

• More Device Functions

• Added new paper sizes for Secure Scan

See the New Options in Device Profiles section under Secure Print Updates of this document for more details on these updates.

Clear message for expired passcodes on secure printers

In HP Insights 4.4, the Secure Print Service now distinguishes between an invalid passcode and an expired passcode when users sign in at a secure printer. If a user enters a passcode that is correct but no longer valid, the device now shows a clear, specific message:

“Your passcode has expired. Please reset your passcode and sign in again”.

Support “Select All” Button on Small Screen devices

A new Select All button was added for small‑screen devices to keep the experience consistent with larger‑screen devices.

Sentry Print Bugfixes

• Scan to OneDrive jobs failing on HP devices - Fixed an issue where large scans from HP devices failed to appear in OneDrive if users were logged out during processing. The HP client now keeps sessions active until uploads finish, ensuring documents reliably show up in OneDrive.

Secure Print Service Hotfix (Local Connector Only)

Version: 2507.3015.3765

Release Date: December 2025

This release introduces the latest Secure Print Service for HP Insights including several significant improvements and bugfixes.

• Secure Scan Workflow DPI Issue - Fixed the Secure Scan workflow so that the selected Secure Scan DPI is correctly applied to the job instead of always defaulting to 300 dpi.

• Fixed Scan to OneDrive Failures - Resolved an issue where scans failed to upload if the user was logged out manually or automatically by the printer. This was caused by the printer’s inactivity timeout interrupting the upload process. The Secure Scan upload process now continues even if the user is logged out.

• Secure Scan Filename Error with SCIM-Provisioned User Names - Resolved an issue where secure printers displayed a “Please enter a valid file name” error during Secure Scan if the user's name (imported via SCIM as “Lastname, Firstname”) contained a comma. This occurred when scan attributes were modified. Users can now change scan settings without encountering filename validation errors.

Secure Print Service Hotfix (Cloud Connector Only)

Version: 2507.3015.3767

Release Date: December 2025

Enhanced Card Swipe Reliability

Improved how card swipe events are handled to make authentication more reliable. Card events are now processed only when the device is ready. Communication with HP card readers has been strengthened for better accuracy and clearer logging. Initialization of card readers is now more consistent, especially during device startup or reconnects. These changes make card swipe behavior more stable, predictable, and easier to diagnose.

HP Secure Print mobile app Update

• Android: 2.13.7.25100710

• iOS: 2.12.3.25091712

• Release Date: December 2025

This release includes design enhancements and an updated location for the Print Scout QR Code.

Print Scout Hotfix

Version: 8.1.23.103

Release Date: November 2025

Installer Update

Resolved an issue where the Print Scout MSI installer could connect to the wrong environment when no configuration files are present. The MSI installer will now block installation if the configuration file (Setup.ini and CustomerSecret.dat OR Installconfig.ini) are missing, preventing accidental connections to the wrong environment.

If you installed Print Scout (versions 8.1.12 or 8.1.14) via the MSI installer without including a valid configuration file, uninstall the current installation then reinstall using the latest version (8.1.23). Make sure that the correct configuration files are located in the same directory as the MSI installer.

Secure Print Service Hotfix (Local Connector Only)

Version: 2507.3015.3748

Release Date: October 2025

This hotfix resolves a login failure caused by the local Secure Print Service mistakenly routing card swipe events to regional cloud endpoints instead of the local service. The update ensures card swipes are now correctly directed to the local Secure Print Service, restoring expected login behavior.

Print Scout Hotfix

• Version: 8.1.14.103

• Release Date: September 24, 2025

Policy Print Update

This update enhances how Print Scout manages and applies print policies. It also includes detailed policy logging for better visibility and easier troubleshooting.

Support for Bypass Tray with Microsoft IPP Class driver and PSA

This hotfix introduces full support for the Bypass Tray (also known as Multipurpose Tray) when printing via the Microsoft IPP Class Driver. Users can now select the Bypass Tray in the print dialog, and the correct IPP job attributes are sent to the printer to ensure accurate media routing.

Notes:

• This functionality is only available when using Print Support App (PSA), which is supported on Windows 11 version 24H2 or later.

• Earlier versions of Windows or environments without PSA will not expose or support Bypass Tray selection.

The following image shows the availability of the Bypass Tray as a selectable input source within the printer’s Printing Preferences dialog.

Secure Print Service Hotfix (Cloud Connector only)

• Version: 2507.3015.3737

• Release Date: September 11, 2025

HP released a hotfix for the Secure Print Service in HP Insights 4.3 to address two specific issues affecting cloud deployments:

Fixed: Scan to OneDrive Failures

Resolved an issue where scans failed to upload if the user was logged out manually or automatically by the printer. This was caused by the printer’s inactivity timeout interrupting the upload process. The Secure Scan upload process now continues even if the user is logged out.

Secure Scan Filename Error with SCIM-Provisioned User Names

Resolved an issue where secure printers displayed a “Please enter a valid file name” error during Secure Scan if the user's name (imported via SCIM as “Lastname, Firstname”) contained a comma. This occurred when scan attributes were modified. Users can now change scan settings without encountering filename validation errors.

HP Insights 4.3 Release Notes - September 2025

Note: For a complete list of the features and improvements included in the HP Insights 4.3, refer to the HP Insights/HP Secure Print 4.3 Release Notes-September 2025.

Added option to disable web upload in User Portal

HP Insights 4.3 adds a new Allow Job Upload setting in the User Portal Settings. Admins can now choose if users can upload print jobs through the User Portal. Previously, enabling the User Portal allowed users to upload jobs and access cloud storage even when cloud storage was disabled.

More Information : End-User Portal

Lock Secure Release Settings

Administrators can now lock both Secure > Settings and Direct > Settings screen to prevent unauthorized or accidental changes. By default, the Settings pages are unlocked. To lock or unlock these pages, a Site Encryption Key is required. This ensures that configuration changes are securely managed and limited to authorized personnel.

More Information:

• Secure Print Settings

• Secure Print Direct Settings

Device Profile Updates

The following settings have been migrated to the Device Profiles tab from the Secure > Settings > Secure Print Settings tab of the web console. This allows administrators to configure the following settings for each print device instead of a single global setting for all devices.

• Card Reader - The Card Reader section allows administrators to assign a Card Reader reader to Device Profiles.

• Lock Device Functions (HP Only) - The setting previously known as “Require authentication for all device functions” has been renamed to Lock Device Functions and moved to the Secure Release section of the Device Profiles tab.

More Information: Device Profiles

Card Decoding for HP Universal and HP LEGIC Readers

HP Insights 4.3 now allows administrators to set card decoding parameters for HP Universal and HP LEGIC card readers. This ensures the system will read badge data the same way on all devices, avoiding manual setup per printer and reducing errors with different card types.

• Selecting HP Universal Card Reader or HP LEGIC in the Card Reader menu displays the supported card types, letting administrators choose a card type from a list of predefined options.

• A new Decode Card Data section is now available on the Secure > Settings screen, enabling administrators to set how HP Universal and HP Legic card readers interpret Card Reader data.

More Information: Decode Card Data

Print Scout Updates

The Print Scout component (v8.1) of HP Insights has been updated with the following new features:

• New Windows MSI Installer

• Secure Print and Secure Print Direct: Support for HP Universal Print Driver 7.7.0

• Secure Print: Support for Print Support App (PSA)

• Secure Print Direct: Support for Windows Protected Print (WPP) mode, Windows on Arm , and Print Support App (PSA)

• Disable application tracking from web console

New Windows MSI Installer

The latest Print Scout (v 8.1) introduces a new MSI installer, replacing the older EXE format. This change is designed to streamline enterprise deployments.

More Information: MSI Installer Properties

Secure Release: Support for Print Support App (PSA)

HP Insights 4.2 introduced support for Windows on Arm devices as well as Windows Protected Print (WPP) mode on Windows 11. These enhancements enabled users to securely release print jobs via the Microsoft IPP class driver.

Print Scout v8.1, released as part of HP Insights 4.3 now integrates with the Print Support App (PSA) to enhance the printing experience. This integration allows users to access advanced printing options such as tray selection, duplex printing, and other finishing preferences that are not available when using the default Microsoft IPP Class Driver. These capabilities are comparable to those provided by the HP IPP Driver.

More Information: Secure Print IPP Queues

Direct Print: Added support for WPP, Windows on Arm devices, and Print Support App (PSA)

HP Insights 4.3 expands support for Windows Protected Print (WPP) and Windows on Arm devices by introducing support for Direct Print, building on the Secure Release and Print Analytics support first delivered in HP Insights 4.2.

With the latest Print Scout (v8.1), direct IP printing is supported from Arm-based devices and WPP-enabled environments using the Microsoft IPP Class Driver. Additionally, integration with the Print Support App (PSA) enhances the Direct Print experience by adding advanced print options such as tray selection, duplex, etc.

Disable application tracking from web console

Application Tracking is a feature that identifies which application (e.g., Outlook, Word) a user printed from. This information is used in reporting to better understand print behavior across an organization.

The Print Scout Configuration in the Discover > Print Scout > Configure has been updated with a new setting called Enable application tracking.

• When enabled, Print Scout captures and records the source application information.

• When disabled, Print Scout disables application tracking (through injecting into the applications) but does not disable application mapping.

More Information: Enable Application Tracking

Bugfix: Improved Job Release Reliability

Addressed an intermittent issue where print jobs could disappear before being released at the device. This enhancement improves connection stability and ensures more consistent job delivery for environments using local storage.

Print Scout Limitations and Known Issues

Print Scout 8.1 does not support Tenant Location Switcher

Print Scout 8.1 does not support Tenant Location Switcher for MSI installers. If you're currently running a multi-tenant setup, HP strongly recommends not installing or upgrading to Print Scout 8.1.

Watermark feature is not supported

The watermark feature is not supported on Microsoft IPP Class Driver. It's only supported on HP Class Driver which is typically installed on Windows 10.

Direct Print: Default Printer Not Updated When Using ‘Set Default’ in Print Scout

Clicking “Set Default” for a direct queue in Print Scout does not reliably set it as the default printer. This may occur even when “Let Windows manage my default printer” is disabled. As a result, the chosen queue may not be used as the default when printing.

Uninstalling with KEEP_SETTINGS doesn't retain proxy information

Uninstalling Print Scout using the KEEP_SETTINGS=yes property removes proxy settings from the registry key. After reinstalling, the Configuration Tool does not restore these settings.

If using a deployment package with InstallConfig.ini during installation, proxy settings will be automatically applied. However, if no deployment file is used, an administrator must manually re-enter the proxy settings after reinstalling.

Print Spooler must be enabled for Print Scout on Windows Server

On Windows Server, Print Scout requires the Windows Print Spooler service to be enabled. If the spooler is disabled, Print Scout may fail with errors like “RPC server unavailable” and stop functioning. To ensure stable operation, the Windows Print Spooler must remain active.

Secure Print Service Updates

• Added Device Scout column to Secure Printers screen

• Preserve Secure Print Trust Root Certificate on uninstall of Secure Print Service

• Improve Secure Print feedback for Scout Release Failures

Added “Device Scout” column to the Secure Printers screen

Admins can now identify which Device Scout is installed by matching Device Scout IDs to names. Previously, only the Device Scout ID was shown on the Secure Printers grid, requiring steps to locate the corresponding name in the Discover tab. A new Device Scout Name column has been added directly to the Secure Printers screen, improving the process for administrators.

Preserve Secure Print Trust Root Certificate on uninstall of Sentry Print Service

Secure Print now retains the Secure Print Trust Root certificate during uninstallation. Previously, uninstalling Sentry Print deleted the certificate, breaking trust with existing secure printers.

This update adds a safeguard that retains the Secure Print Trust Root Certificate during uninstallation. This helps maintain secure print configurations and avoids the need to re-secure devices after uninstalling.

Improve HP Secure Print feedback for Scout Release Failures

For organizations configured for Print Scout Release (Push Print), if a user's workstation is unavailable, job release may fail on the Secure Print printer. In such cases, an informative error message "Print job(s) failed to release due to unavailable services" will now be displayed on the printer interface. This provides users with clear feedback on the failure. Previously, job releases would fail without notifying users and the only indication was that no document was printed.

HP Insights 4.2 Release Notes - May 2025

Note: For a complete list of the features and improvements included in the HP Insights 4.2, refer to the HP Insights/HP Secure Print 4.2 Release Notes.

Print Scout Updates

The Print Scout component (v8.0) of HP Insights has been updated with the following new features:

• Support for Microsoft Windows on Arm devices

• Support for Windows Print Protected Mode (WPP)

• Support for Ubuntu 24.04

• Bugfix: TCP Socket Leak

Support for Windows on Arm devices

Starting with HP Insights 4.2, Print Scout has been updated to support Windows on Arm workstations. In this release, only the following HP Insights features are supported. Other features may be made available in future updates.

• Secure Print

• Print Analytics

Support for Windows Protected Print Mode (WPP)

Windows Protected Print (WPP) is a secure printing mode introduced by Microsoft in October 2024. It enhances print security by using the Microsoft IPP Class Driver and is designed to work with Mopria-certified printers. WPP modernizes the print infrastructure by eliminating the need for traditional print servers and vendor-specific drivers, offering simplified, secure, and driverless printing experience.

• The Print Scout component of the HP Insights has been updated to support the new WPP mode.

• Windows Protected Print Mode is supported on Windows 11 24H2 or later. It supports Intel and Arm architecture on Windows.

More Information: Windows Protected Print (WPP)

Support for Ubuntu 24.04

A new version (v2.2.0) of the Linux Print Scout is now available. This adds support for Ubuntu 24.04.

Bugfix

TCP Socket Leak Fix: Fixed an issue where network connections were not properly closed, causing print jobs to fail and degrading printer performance due to TCP socket leaks.

Secure Print Mobile App Updates

Bugfix: Resolved unresponsive screen issue on iOS devices

The latest version of the Secure Print mobile app (iOS) resolved an issue on certain models where the screen became unresponsive, preventing users from proceeding.

Update: Secure Print mobile app on Android devices

Updated the Secure Print mobile app (Android) to use the latest MAUI platform.

Secure Print Updates

Secure Scan: Added the search capability for OneDrive, SharePoint and Network Folder Scan Destinations

Users can now search for specific folders by name when selecting OneDrive, SharePoint, or Network Folder as a scan destination. This feature is useful for users with many folders, making the selection process faster and more efficient.

See Configuring Secure Scan for more information

IPV6 Support for HP devices

HP Insights 3.5 introduced IPv6 support for Insights and Direct Print, providing an expanded IP address space. With HP Insights 4.2, Secure Print now supports IPv6 HP devices, enabling secure print job releases on IPv6 networks.

Bugfix

• Addressed an issue with the "Oops! secure print is currently unavailable" message persisting on printers even after toggling offline print settings.

HP Insights 4.1 Release Notes - March 2025

Note: For a complete list of the features and improvements included in the HP Insights 4.1, refer to the HP Insights/HP Secure Print 4.1 Release Notes.

Support for SAML as a User Authentication Provider

HP Insights now supports SAML for end-user authentication, providing seamless and secure login experiences across all HP Insights applications.

SAML support, previously available for system users logging into the web console, is now expanded to end-user authentication. SAML has been added as a User Authentication Provider for Secure Print and Secure Print Direct, facilitating user registration for HP Insights applications, such as Print Scout, User Portal, Chrome Print, and the mobile app.

More Information: Authentication Providers

New APIs

Administrators can use the Analysis > API screen in the web console to connect to specific API endpoints. These endpoints enable the extraction of data from the HP Insights providing access to valuable information such as meter data, print transactions data, and so on. Once extracted, administrators can use a variety of tools, such as Power BI to manipulate and analyze the data.

In this update, three new APIs have been introduced to expand data access and support various organizational requirements. The new APIs with this release are:

• Users

• Device Toner Data

• Device Status Data

Note: Device Toner and Device Status APIs require a Device Meter Data license.

More Information: Connecting to the API to extract Data

External Card Integration (Preview Mode)

Note: The External Card integration feature is in “Preview Mode” only. You can request access to this feature by emailing HP.

HP Insights now integrates with third-party card systems, allowing organizations to connect external web services to query card information. Printers can retrieve card details directly from external sources, offering a more flexible, secure, and scalable solution that meets modern workplace security requirements.

With this update, card management is handled by your organization, reducing reliance on HP Insights.HP Insights performs real-time queries to third-party APIs whenever card information is needed. In addition, administrators can test card IDs directly within the web console to help verify that the integration works and ensures smooth operations for end users.

Important Notes:

• This feature works for OpenID or SAML authentication providers only. It does not support Email Authentication or Active Directory authentication.

• When you enable and configure External Card Integration, any previously stored card data within HP Insights will no longer be used.

• Only one card system can be active at a time. You can either use the card system within HP Insights or use the external card integration feature. You cannot use both at the same time.

Web Console Update

To support this feature, a new External Card Integration section has been added to the Analysis > API tab in the web console. Administrators can use this section to configure and manage the connection between HP Insights and third-party identity providers.

More Information: External Card Registration

Device Profile Updates

Added Cloud Release toggle in Device Profiles

This update introduces a new Cloud Release toggle option within Secure > Device Profiles. The new setting allows administrators to override the global Cloud Release option available on the Secure Print Settings page. This update gives organizations more control over device configurations, making Secure Print setup simpler and more flexible.

Added the ability to hide Print Options and Print and Retain

In the previous version, the Print Options and Print and Retain settings in the Device Profiles tab of the web console could only be set to "Shown". With this update, they can now be set to “Hidden” if needed. This allows administrators to allow or restrict users to use these options.

More Information: Device Profiles

Secure Print Service Updates

Enhanced Control over Print Options and Print Retain

Updated the Secure Print Service to support the ability to disable Print Options and Print and Retain in the Secure > Device Profiles tab of the web console. Previously, these options were always visible on secure printers. In this update, these options can now be hidden if required.

Email notification when scan file size is exceeded

The file size limit for scanned documents in the Secure Scan app is 80 MB. When a user's file exceeds this limit, an email notification is now sent to users. This helps users be aware that they have exceeded the limit allowing them to take action.

Bugfixes

• HP devices - Secure Scan quality attribute mapping on HP devices now functions correctly, ensuring full utilization of the scan functionality.

• Canon devices - Job upload and accounting for Copy/Scan now function correctly when a user logs out immediately after job completion. Previously, logging out too quickly caused failures when uploading to all destinations (OneDrive, SharePoint, Email, Network Folder).

Print Scout Updates

The Print Scout has been updated with the following changes:

• Added support for the latest HP Universal Print Driver 7.3.0 (released in November 2024).

• Implemented security patches to address known vulnerabilities and mitigate potential exploits.