Upgrading the Secure Print Service (Local Connector / On‑Premises)

The Secure Print Service manages the Secure Print app on your MFPs. Upgrading the Secure Print Service is an in-place process that typically takes less than 10 minutes. During this time, users will be unable to log into printers that have been secured against this instance of the Secure Print Service.

Prerequisites

  • The Secure Print Service is already installed and running on the host machine.

  • Local Administrator access is available on the Secure Print Service host machine.

Preparation

Backing up the certificates currently in use with the Secure Print Service allows for quick restoration of service to already-secured printers if the application needs to be uninstalled, reinstalled, or downgraded.

  1. From an elevated Command Prompt or PowerShell, run:

    netsh http show sslcert ipport=0.0.0.0:4321

  2. Within the results, copy the Certificate Hash and Application ID values.
  3. Paste these values into a new text document and save it in a safe location.
  4. Open File Explorer and navigate to:

    C:\Program Files (x86)\HP\HP Secure Print Service\App_Data\Certificates

  5. Locate the file whose name begins with"Secure Print Trust Root" (the file extension is .cer).
  6. Copy the file and paste it into a safe location.

Performing the Upgrade

Step 2: Obtain the Latest Installer
  1. Download the latest installer from the HP Release Versions and Updaters page.
  2. Download the latest Mps.Client.Mfp.Install.msi..
  3. Right-click the downloaded file, select Properties, and unblock the file.
  4. Copy the installer file to the server on which the upgrade will be performed.
Step 3: Perform the In-Place Upgrade

Schedule a suitable maintenance window during which to perform the upgrade. Upgrading the Secure Print Service generally takes less than 10 minutes to complete.

  1. Open Windows Services, stop Secure Print Service, then close the Services console.

    Important: Leaving the console open can cause a file lock and prevent the service from being re-registered during the upgrade.

  2. Double‑click Mps.Client.Mfp.Install.msi and approve the UAC prompt to start the in‑place upgrade.

  3. The upgrade runs silently with no completion prompt.

  4. Reopen Windows Services and confirm Secure Print Service is Running.

  5. Open the service properties, set Startup type to Automatic (Delayed Start), and close the console.

Post-Upgrade

  1. Verify the installed version of Secure Print Service in Control Panel > Programs and Features.
  2. Open the Deployment.log file in a text editor:

    \ProgramData\HP\HP Secure Print Service\Deployment.log

    Look for the updated version in the log. Validate that the WebSocket connection to the cloud is successful.

  3. Open the Runtime.log file in a text editor:

    \ProgramData\HP\HP Secure Print Service\Runtime.log

    Look for the updated version in the log. Validate that the service started successfully.

  • HP printers may display a message on the LCD stating "Incompatible client version." This message can be cleared by selecting the Reset soft button in the top left corner of the LCD to force the printer to reload the web app.
  • Card readers on HP may appear nonfunctional for a few minutes immediately after the upgrade. The card readers should reinitialize on their own within a few minutes. This process can be sped up by detaching/reattaching the reader's USB connection or rebooting the printer.
  • HP and Ricoh printers: The first user login event after the Secure Print Service upgrade may result in a message on the LCD screen containing a large triangle and a reference to an unknown error. This occurs when the printer has not yet refreshed its client application. The condition will self-correct when the client application is next refreshed.

Recommendation: After upgrading the Secure Print Service, use a fleet management tool (such as HP Web Jetadmin or Ricoh Device Manager NX) to remotely reboot HP and Ricoh printers. This forces the printers to reload the Secure Print app and avoids temporary errors during the first user login after the upgrade.

If the upgrade causes issues and you need to roll back:

  1. Stop the Secure Print Service.

  2. Uninstall via Control Panel > Programs and Features.

    Note: Do not delete program files or program data. They are retained for reinstallation.

  3. Rebind the certificate using the values from Step 1:

    netsh http add sslcert ipport=0.0.0.0:4321 certhash=[hash] appid="{[appID]}"

  4. Reinstall the previous version of Mps.Client.Mfp.Install.msi.

  5. Restore the backed-up Secure Print Trust Root certificate to:

    C:\Program Files (x86)\HP\HP Secure Print Service\App_Data\Certificates

  6. Start the service and verify printers are communicating.