Find out which operating systems, platforms, and devices are supported with PaperCut Hive and Pocket.
If you’re looking to see which printers and MFDs are supported with PaperCut Hive and Pocket, take a look at the Supported Printers page.
Client requirements
PaperCut Hive and Pocket user client software
The client software for PaperCut Hive and Pocket authenticates users, allowing them to print into the system. It is also used for print job routing as well as other important functions. The software is primarily downloaded and installed from one of the following locations, either self-served by the user, or pre-deployed by an Administrator:
Supported Environments and Technologies | Description |
|---|---|
Operating Systems | Windows 10 (64-bit) / 11 / Windows Server 2016 and later
macOS 11 (Big Sur) and later |
Arm architecture | Arm64 architecture for Windows and macOS are supported Other devices that support ARM architecture without emulation layers, such as the Raspberry Pi, are not supported. |
Memory | 1GB minimum |
Hard disk | 600MB minimum, plus additional storage for logs |
CPU | Dual core CPU |
Virtual Desktop Infrastructure |
|
ChromeOS | ChromeOS supports printing only. See here for more information |
Running alongside PaperCut NG/MF | Running PaperCut MF/NG alongside Papercut Hive or Pocket will cause issues. We advise against running both of these together on the same computer. |
Ghost Trap | Ghost Trap is a required program that converts PostScript data to PDF, enabling the PaperCut Global PS Driver to support all printer manufacturers. Ghost Trap is also used for thumbnail generation and PDF to URF conversion if a printer supports URF over IPP. The PaperCut Print Client software will install Ghost Trap if it is not detected on the client system. Ghost trap has a dependency on MS Visual C++ 2015-2022 Redistributable (x64). This is also installed automatically if not detected on the client system. |
Web Admin console and User Portal
Latest stable version of all major browsers are supported
Mobile App
- iOS 17 or later
- Android 12 or later
Firewall and networking
In many networks, PaperCut Hive and Pocket should ‘just work’. However, if you have a more restrictive firewall policy in place, you may need to open the following ports and URLs to get everything working.
Please note, PaperCut Hive and Pocket are hosted in a region of your choice, so please choose the correct location based on your tenancy.
United States (US) data center
If it’s allowed, add the following to your firewall:
*.papercut.comstorage.googleapis.comsecuretoken.googleapis.comidentitytoolkit.googleapis.comgoogleapis.commqtt.googleapis.com
Alternatively, you can use the below. They are outbound traffic to the URLs, using port 443 (HTTPS):
pocket.papercut.comhive.papercut.compmitc.papercut.comcloudnode.pmitc.papercut.comupdate.pmitc.papercut.comregions.pmitc.papercut.commqtt.googleapis.commqtt.notifications.cloud.papercut.commqtt2.notifications.cloud.papercut.commqtt3.notifications.cloud.papercut.comstorage.googleapis.commobile.pcut.appfor ChromeOS devicessend.papercut.comfor Integrated Scanning in PaperCut Hive\*.printerapp.papercut.comwildcard for embedded applications in PaperCut Hivelogin.papercut.comsecuretoken.googleapis.com
Or alternatively use this URL, however, it might change in the future:https://securetoken.googleapis.com/v1/tokenidentitytoolkit.googleapis.com
Or alternatively use this URL, however, it might change in the future:https://identitytoolkit.googleapis.com/v1/projectsgoogleapis.com
Or alternatively use this URL, however, it might change in the future:https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig
Email Delivery Service - SendGrid
- IP Address:
168.245.53.86 - Domain:
papercut.com
Europe (EU) data center
If it’s allowed, add the following to your firewall:
*.papercut.comstorage.googleapis.comsecuretoken.googleapis.comidentitytoolkit.googleapis.comgoogleapis.commqtt.googleapis.com
Alternatively, you can use the below. They are outbound traffic to the URLs, using port 443 (HTTPS):
eu.pocket.papercut.comeu.hive.papercut.comeu.pmitc.papercut.comcloudnode.eu.pmitc.papercut.comupdate.pmitc.papercut.comregions.pmitc.papercut.commqtt.googleapis.commqtt.notifications.cloud.papercut.commqtt2.notifications.cloud.papercut.commqtt3.notifications.cloud.papercut.comstorage.googleapis.commobile.eu.pcut.appfor ChromeOS deviceseu.send.papercut.comfor Integrated Scanning in PaperCut Hive\*.eu.printerapp.papercut.comwildcard for embedded applications in PaperCut Hivelogin.papercut.comsecuretoken.googleapis.com
Or alternatively use this URL, however, it might change in the future:https://securetoken.googleapis.com/v1/tokenidentitytoolkit.googleapis.com
Or alternatively use this URL, however, it might change in the future:<br>https://identitytoolkit.googleapis.com/v1/projectsgoogleapis.com
Or alternatively use this URL, however, it might change in the future:https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig
Email Delivery Service - SendGrid
- IP Address:
168.245.53.86 - Domain:
papercut.com
United Kingdom (UK) data center
If it’s allowed, add the following to your firewall:
*.papercut.comstorage.googleapis.comsecuretoken.googleapis.comidentitytoolkit.googleapis.comgoogleapis.commqtt.googleapis.com
Alternatively, you can use the below. They are outbound traffic to the URLs, using port 443 (HTTPS):
uk.pocket.papercut.comuk.hive.papercut.comuk.pmitc.papercut.comcloudnode.uk.pmitc.papercut.comupdate.pmitc.papercut.comregions.pmitc.papercut.commqtt.googleapis.commqtt.notifications.cloud.papercut.commqtt2.notifications.cloud.papercut.commqtt3.notifications.cloud.papercut.comstorage.googleapis.commobile.uk.pcut.appfor ChromeOS devicesuk.send.papercut.comfor Integrated Scanning in PaperCut Hive\*.uk.printerapp.papercut.comwildcard for embedded applications in PaperCut Hivelogin.papercut.comsecuretoken.googleapis.com
Or alternatively use this URL, however, it might change in the future:https://securetoken.googleapis.com/v1/tokenidentitytoolkit.googleapis.com
Or alternatively use this URL, however, it might change in the future:https://identitytoolkit.googleapis.com/v1/projectsgoogleapis.com
Or alternatively use this URL, however, it might change in the future:https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig
Email Delivery Service - SendGrid
- IP Address:
168.245.53.86 - Domain:
papercut.com
Australia (AU) data center
If it’s allowed, add the following to your firewall:
*.papercut.comstorage.googleapis.comsecuretoken.googleapis.comidentitytoolkit.googleapis.comgoogleapis.commqtt.googleapis.com
Alternatively, you can use the below. They are outbound traffic to the URLs, using port 443 (HTTPS):
au.pocket.papercut.comau.hive.papercut.comau.pmitc.papercut.comcloudnode.au.pmitc.papercut.comupdate.pmitc.papercut.comregions.pmitc.papercut.commqtt.googleapis.commqtt.notifications.cloud.papercut.commqtt2.notifications.cloud.papercut.commqtt3.notifications.cloud.papercut.comstorage.googleapis.commobile.au.pcut.appfor ChromeOS devicesau.send.papercut.comfor Integrated Scanning in PaperCut Hive\*.au.printerapp.papercut.comwildcard for embedded applications in PaperCut Hivelogin.papercut.comsecuretoken.googleapis.com
Or alternatively use this URL, however, it might change in the future:https://securetoken.googleapis.com/v1/tokenidentitytoolkit.googleapis.com
Or alternatively use this URL, however, it might change in the future:https://identitytoolkit.googleapis.com/v1/projectsgoogleapis.com
Or alternatively use this URL, however, it might change in the future:https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig
Email Delivery Service - SendGrid
- IP Address:
168.245.53.86 - Domain:
papercut.com
On-premise and cloud ports
| Port | Protocol | From | To | Reason |
|---|---|---|---|---|
| 9263 | HTTP (encrypted payload) | ChromeOS | Edge node | For accepting print jobs from ChromeOS |
| 9264 | HTTPS | Windows, macOS, Android, iOS, edge node | Edge node | Job submission, Job replication, Pull a job from spooling edge node to processing edge node (Edge node with access to printer calls the edge node holding the job) |
| 9265 | HTTPS | Windows, macOS, Android, iOS | Edge node | Submits the print job into the Edge Mesh |
| 9266 | HTTPS | Mobile app | Edge node | Job release in offline mode |
| 443 | HTTPS/MQTT | Edge nodes and print clients | PaperCut cloud services | Cloud communication including sending notifications to the edge nodes and replication to the Cloud Node |
| 80/443/631 | IPP/IPPS | Edge node | Printers | IPP job submission, Printer discovery |
| 9100 | TCP | Edge Node | Printers | Print job delivery when using a manufacturer print driver |
| 161/162 | SNMP | Edge Node | Printers | Printer discovery and status monitoring |
PaperCut Hive embedded applications
- For Integrated Scanning:
- US data center:
send.papercut.com - UK data center:
uk.send.papercut.com - EU data center:
eu.send.papercut.com - AU data center:
au.send.papercut.com
- US data center:
- Use a wildcard for the following URL:
- US data center:
\*.printerapp.papercut.com - UK data center:
\*.uk.printerapp.papercut.com - EU data center:
\*.eu.printerapp.papercut.com - AU data center:
\*.au.printerapp.papercut.com
- US data center:
Unable to use a wildcard for URLs? Discover platform-specific URLs
PaperCut Hive and Pocket Lite Release App MFD URLs
| MFD | Port | Protocol | Region | URL |
|---|---|---|---|---|
| Brother | 443 | HTTPS | United States Europe United Kingdom Australia |
brother-connect.printerapp.papercut.com Not available in this region Not available in this region Not available in this region |
| All other platforms | 443 | HTTPS | United States Europe United Kingdom Australia |
lite-release.printerapp.papercut.com
lite-release.eu.printerapp.papercut.com lite-release.uk.printerapp.papercut.com lite-release.au.printerapp.papercut.com |
PaperCut Hive Full Release App MFD URLs
PaperCut Hive Lite Release App MFD firewall ports
| MFD | Port | Protocol | Port direction |
|---|---|---|---|
| Brother | 443 | HTTPS | Outbound |
| Epson | 443 | HTTPS | Outbound |
| Fuji Xerox | 443 | HTTPS | Outbound |
| HP OXPd & WorkPath | 443 | HTTPS | Outbound |
| Konica Minolta | 443 | HTTPS | Outbound |
| Sharp OSA | 443 | HTTPS | Outbound |
| Toshiba MDS v3 | 443 | HTTPS | Outbound |
| Xerox | 443 | HTTPS | Outbound |
PaperCut Hive Full Release App MFD firewall ports
| MFD | Port | Protocol | Port Direction |
|---|---|---|---|
| Canon | 443 | HTTPS | Outbound |
| Fujifilm | 443 443 |
HTTPS HTTPS |
Outbound Inbound*(from Edge Mesh to MFD)* |
| Fujifilm LeSF | 443 | HTTPS | Outbound |
| Fuji Xerox | 443 443 |
HTTPS HTTPS |
Outbound Inbound*(from Edge Mesh to MFD)* |
| HP OXPd | 443 7627 |
HTTPS HTTPS |
Outbound Inbound*(from Edge Mesh to MFD)* |
| Konica Minolta | 443 50003 |
HTTPS HTTPS |
Outbound Inbound*(from Edge Mesh to MFD)* |
| Kyocera HyPAS | 443 | HTTPS | Outbound |
| Lexmark | 443 | HTTPS | Outbound |
| Ricoh SmartSDK | 443 | HTTPS | Outbound |
| Sharp OSA | 443 | HTTPS | Outbound |
| Sharp LeSF | 443 | HTTPS | Outbound |
| Toshiba MDS v3 | 443 49630 50083 (or any customized port for scanning services) |
HTTPS HTTPS HTTP |
Outbound Inbound*(from Edge Mesh to MFD) Inbound(from Edge Mesh to MFD)* |
| Toshiba LeSF | 443 | HTTPS | Outbound |
| Xerox | 443 443 |
HTTPS HTTPS |
Outbound Inbound*(from Edge Mesh to MFD)* |
| Xerox LeSF | 443 | HTTPS | Outbound |
Network traffic diagram
This diagram shows network traffic flowing around a PaperCut Hive or Pocket environment.
Comments