Support

System requirements

This page applies to:

Find out which operating systems, platforms, and devices are supported with PaperCut Hive and Pocket.

If you’re looking to see which printers and MFDs are supported with PaperCut Hive and Pocket, take a look at the Supported Printers page.

Client requirements

PaperCut Hive and Pocket user client software

The client software for PaperCut Hive and Pocket authenticates users, allowing them to print into the system. It is also used for print job routing as well as other important functions. The software is primarily downloaded and installed from one of the following locations, either self-served by the user, or pre-deployed by an Administrator:

Supported Environments and Technologies

Description

Operating Systems

Windows 10 (64-bit) / 11 / Windows Server 2016 and later

  • Machine names must conform to Windows NetBIOS naming conventions and be 15 characters and less

  • Windows systems must have the "Internet Printing Client" enabled under "Print and Document Services" in Windows Features

macOS 12 (Monterey) and later

Arm architecture

Arm64 architecture for Windows and macOS are supported

Other devices that support ARM architecture without emulation layers, such as the Raspberry Pi, are not supported.

Memory

1GB minimum

Hard disk

600MB minimum, plus additional storage for logs

CPU

Dual core CPU

Virtual Desktop Infrastructure

  • Persistent, single session VDI solutions are supported. The PaperCut client software must be installed after the session is created (self-serve via the User Portal/classic invitation OR deployed via a software deployment solution)

    • If the PaperCut client software is pre-installed from an image (before session is created), then a duplicated client component will be installed and this will cause issues.

  • All other VDI environments, such as multi-session or non persistent single session are not supported at this time

ChromeOS

ChromeOS supports printing only. See here for more information

Running alongside PaperCut NG/MF

Running PaperCut MF/NG alongside Papercut Hive or Pocket will cause issues. We advise against running both of these together on the same computer.

If you would like to test both our products, we recommend uninstalling one and using the other.

Ghost Trap

Ghost Trap is a required program that converts PostScript data to PDF, enabling the PaperCut Global PS Driver to support all printer manufacturers.

Ghost Trap is also used for thumbnail generation and PDF to URF conversion if a printer supports URF over IPP.

The PaperCut Print Client software will install Ghost Trap if it is not detected on the client system.

Ghost trap has a dependency on MS Visual C++ 2015-2022 Redistributable (x64). This is also installed automatically if not detected on the client system.

Web Admin console and User Portal

Latest stable version of all major browsers are supported

Mobile App

  • iOS 17 or later
  • Android 12 or later

Firewall and networking

In many networks, PaperCut Hive and Pocket should ‘just work’. However, if you have a more restrictive firewall policy in place, you may need to open the following ports and URLs to get everything working.

Please note, PaperCut Hive and Pocket are hosted in a region of your choice, so please choose the correct location based on your tenancy.

United States (US) data center

If it’s allowed, add the following to your firewall:

  • *.papercut.com
  • storage.googleapis.com
  • securetoken.googleapis.com
  • identitytoolkit.googleapis.com
  • googleapis.com
  • mqtt.googleapis.com

Alternatively, you can use the below. They are outbound traffic to the URLs, using port 443 (HTTPS):

  • pocket.papercut.com
  • hive.papercut.com
  • pmitc.papercut.com
  • cloudnode.pmitc.papercut.com
  • update.pmitc.papercut.com
  • regions.pmitc.papercut.com
  • mqtt.googleapis.com
  • mqtt.notifications.cloud.papercut.com
  • mqtt2.notifications.cloud.papercut.com
  • mqtt3.notifications.cloud.papercut.com
  • storage.googleapis.com
  • mobile.pcut.app for ChromeOS devices
  • send.papercut.com for Integrated Scanning in PaperCut Hive
  • \*.printerapp.papercut.com wildcard for embedded applications in PaperCut Hive
  • login.papercut.com
  • securetoken.googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://securetoken.googleapis.com/v1/token
  • identitytoolkit.googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://identitytoolkit.googleapis.com/v1/projects
  • googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig

Email Delivery Service - SendGrid

  • IP Address: 168.245.53.86
  • Domain: papercut.com
Europe (EU) data center

If it’s allowed, add the following to your firewall:

  • *.papercut.com
  • storage.googleapis.com
  • securetoken.googleapis.com
  • identitytoolkit.googleapis.com
  • googleapis.com
  • mqtt.googleapis.com

Alternatively, you can use the below. They are outbound traffic to the URLs, using port 443 (HTTPS):

  • eu.pocket.papercut.com
  • eu.hive.papercut.com
  • eu.pmitc.papercut.com
  • cloudnode.eu.pmitc.papercut.com
  • update.pmitc.papercut.com
  • regions.pmitc.papercut.com
  • mqtt.googleapis.com
  • mqtt.notifications.cloud.papercut.com
  • mqtt2.notifications.cloud.papercut.com
  • mqtt3.notifications.cloud.papercut.com
  • storage.googleapis.com
  • mobile.eu.pcut.app for ChromeOS devices
  • eu.send.papercut.com for Integrated Scanning in PaperCut Hive
  • \*.eu.printerapp.papercut.com wildcard for embedded applications in PaperCut Hive
  • login.papercut.com
  • securetoken.googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://securetoken.googleapis.com/v1/token
  • identitytoolkit.googleapis.com
    Or alternatively use this URL, however, it might change in the future:<br>https://identitytoolkit.googleapis.com/v1/projects
  • googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig

Email Delivery Service - SendGrid

  • IP Address: 168.245.53.86
  • Domain: papercut.com
United Kingdom (UK) data center

If it’s allowed, add the following to your firewall:

  • *.papercut.com
  • storage.googleapis.com
  • securetoken.googleapis.com
  • identitytoolkit.googleapis.com
  • googleapis.com
  • mqtt.googleapis.com

Alternatively, you can use the below. They are outbound traffic to the URLs, using port 443 (HTTPS):

  • uk.pocket.papercut.com
  • uk.hive.papercut.com
  • uk.pmitc.papercut.com
  • cloudnode.uk.pmitc.papercut.com
  • update.pmitc.papercut.com
  • regions.pmitc.papercut.com
  • mqtt.googleapis.com
  • mqtt.notifications.cloud.papercut.com
  • mqtt2.notifications.cloud.papercut.com
  • mqtt3.notifications.cloud.papercut.com
  • storage.googleapis.com
  • mobile.uk.pcut.app for ChromeOS devices
  • uk.send.papercut.com for Integrated Scanning in PaperCut Hive
  • \*.uk.printerapp.papercut.com wildcard for embedded applications in PaperCut Hive
  • login.papercut.com
  • securetoken.googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://securetoken.googleapis.com/v1/token
  • identitytoolkit.googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://identitytoolkit.googleapis.com/v1/projects
  • googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig

Email Delivery Service - SendGrid

  • IP Address: 168.245.53.86
  • Domain: papercut.com
Australia (AU) data center

If it’s allowed, add the following to your firewall:

  • *.papercut.com
  • storage.googleapis.com
  • securetoken.googleapis.com
  • identitytoolkit.googleapis.com
  • googleapis.com
  • mqtt.googleapis.com

Alternatively, you can use the below. They are outbound traffic to the URLs, using port 443 (HTTPS):

  • au.pocket.papercut.com
  • au.hive.papercut.com
  • au.pmitc.papercut.com
  • cloudnode.au.pmitc.papercut.com
  • update.pmitc.papercut.com
  • regions.pmitc.papercut.com
  • mqtt.googleapis.com
  • mqtt.notifications.cloud.papercut.com
  • mqtt2.notifications.cloud.papercut.com
  • mqtt3.notifications.cloud.papercut.com
  • storage.googleapis.com
  • mobile.au.pcut.app for ChromeOS devices
  • au.send.papercut.com for Integrated Scanning in PaperCut Hive
  • \*.au.printerapp.papercut.com wildcard for embedded applications in PaperCut Hive
  • login.papercut.com
  • securetoken.googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://securetoken.googleapis.com/v1/token
  • identitytoolkit.googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://identitytoolkit.googleapis.com/v1/projects
  • googleapis.com
    Or alternatively use this URL, however, it might change in the future:
    https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig

Email Delivery Service - SendGrid

  • IP Address: 168.245.53.86
  • Domain: papercut.com

On-premise and cloud ports

Port Protocol From To Reason
9263 HTTP (encrypted payload) ChromeOS Edge node For accepting print jobs from ChromeOS
9264 HTTPS Windows, macOS, Android, iOS, edge node Edge node Job submission, Job replication, Pull a job from spooling edge node to processing edge node (Edge node with access to printer calls the edge node holding the job)
9265 HTTPS Windows, macOS, Android, iOS Edge node Submits the print job into the Edge Mesh
9266 HTTPS Mobile app Edge node Job release in offline mode
443 HTTPS/MQTT Edge nodes and print clients PaperCut cloud services Cloud communication including sending notifications to the edge nodes and replication to the Cloud Node
80/443/631 IPP/IPPS Edge node Printers IPP job submission, Printer discovery
9100 TCP Edge Node Printers
Print job delivery when using a manufacturer print driver
161/162 SNMP Edge Node Printers Printer discovery and status monitoring

PaperCut Hive embedded applications

  • For Integrated Scanning:
    • US data center: send.papercut.com
    • UK data center: uk.send.papercut.com
    • EU data center: eu.send.papercut.com
    • AU data center: au.send.papercut.com
  • Use a wildcard for the following URL:
    • US data center: \*.printerapp.papercut.com
    • UK data center: \*.uk.printerapp.papercut.com
    • EU data center: \*.eu.printerapp.papercut.com
    • AU data center: \*.au.printerapp.papercut.com
Unable to use a wildcard for URLs? Discover platform-specific URLs

PaperCut Hive and Pocket Lite Release App MFD URLs

MFD Port Protocol Region URL
Brother 443 HTTPS
United States
Europe
United Kingdom
Australia
brother-connect.printerapp.papercut.com
Not available in this region
Not available in this region
Not available in this region
All other platforms 443 HTTPS
United States
Europe
United Kingdom
Australia

PaperCut Hive Full Release App MFD URLs

MFD Port Protocol Region URL
Canon 443 HTTPS
United States
Europe
United Kingdom
Australia
Fujifilm 443 HTTPS
United States
Europe
United Kingdom
Australia
Fujifilm LeSF 443 HTTPS
United States
Europe
United Kingdom
Australia
Fuji Xerox 443 HTTPS
United States
Europe
United Kingdom
Australia
HP OXPd 443 HTTPS
United States
Europe
United Kingdom
Australia
Konica Minolta 443 HTTPS
United States
Europe
United Kingdom
Australia
Kyocera Hypas 443 HTTPS
United States
Europe
United Kingdom
Australia
Lexmark 443 HTTPS
United States
Europe
United Kingdom
Australia
Ricoh SmartSdk 443 HTTPS
United States

Europe

United Kingdom

Australia
Sharp OSA 443 HTTPS
United States
Europe
United Kingdom
Australia
Sharp LeSF 443 HTTPS
United States
Europe
United Kingdom
Australia
Toshiba MDS V3 443 HTTPS
United States
Europe
United Kingdom
Australia
Toshiba LeSF 443 HTTPS
United States
Europe
United Kingdom
Australia
Xerox 443 HTTPS
United States
Europe
United Kingdom
Australia
Xerox LeSF 443 HTTPS
United States
Europe
United Kingdom
Australia

 

PaperCut Hive Lite Release App MFD firewall ports

MFD Port Protocol Port direction
Brother 443 HTTPS Outbound
Epson 443 HTTPS Outbound
Fuji Xerox 443 HTTPS Outbound
HP OXPd & WorkPath 443 HTTPS Outbound
Konica Minolta 443 HTTPS Outbound
Sharp OSA 443 HTTPS Outbound
Toshiba MDS v3 443 HTTPS Outbound
Xerox 443 HTTPS Outbound

PaperCut Hive Full Release App MFD firewall ports

MFD Port Protocol Port Direction
Canon 443 HTTPS Outbound
Fujifilm 443 HTTPS Outbound
Fujifilm LeSF 443 HTTPS Outbound
Fuji Xerox
443
443
HTTPS
HTTPS
Outbound
Inbound*(from Edge Mesh to MFD)*
HP OXPd
443
7627
HTTPS
HTTPS
Outbound
Inbound*(from Edge Mesh to MFD)*
Konica Minolta
443
50003
HTTPS
HTTPS
Outbound
Inbound*(from Edge Mesh to MFD)*
Kyocera HyPAS 443 HTTPS Outbound
Lexmark 443 HTTPS Outbound
Ricoh SmartSDK 443 HTTPS Outbound
Sharp OSA 443 HTTPS Outbound
Sharp LeSF 443 HTTPS Outbound
Toshiba MDS v3
443
49630
50083 (or any customized port for scanning services)
HTTPS
HTTPS
HTTP
Outbound
Inbound*(from Edge Mesh to MFD)
Inbound
(from Edge Mesh to MFD)*
Toshiba LeSF 443 HTTPS Outbound
Xerox
443
443
HTTPS
HTTPS
Outbound
Inbound*(from Edge Mesh to MFD)*
Xerox LeSF 443 HTTPS Outbound

Network traffic diagram

This diagram shows network traffic flowing around a PaperCut Hive or Pocket environment.

Network traffic flowing around a PaperCut Pocket or PaperCut Hive environment

You can download a copy of this diagram here.

Comments