The Advanced Hybrid Storage feature of Lexmark’s Cloud Print Management has been enhanced to allow the assignment of Storage Clients by Organization, Cost Center, Department, Group or Personal. These assignments are performed by a Print Release Management Administrator. This provides more flexibility for storage locations based upon network architecture.
The 32-bit version of the Local Agent client application for Cloud Fleet Management has been deprecated and is no longer available from Lexmark Cloud Services. The 64-bit version will continue to be available.
A new version, v5.0.5, of the Printer Agent eSF application for Lexmark Cloud Fleet Management is now available.
This version corrects a discrepancy in the large paper size counts reported by Printer Agent eSF applications for Cloud Fleet Management (CFM). The page counts displayed in CFM were higher than those recorded by the printer itself.
A new version, v2.0.2.179, of the Lexmark Cloud Print Management for Chrome extension is now available.
This version corrects an issue causing some user authentications to hang.
A new version, v2.20.7, of the Printer Enrollment Tool (PET) is now available.
This version includes PET improvements when enrolling printers in environments with a large number of existing Fleet Agents.
A new version, v3.6.0, of the Lexmark Print Management Client (LPMC) is now available for Windows, macOS, and Ubuntu users.
Microsoft IPP Class Driver
The LPMC is now an IPP-capable printer using Microsoft’s native IPP Class Driver.
· Enables Windows Protected Print (WPP) using the LPMC.
· Supports secure, modern printing workflows ensuring print jobs are encrypted and held securely until released by the user, helping prevent data leaks and unauthorized access.
· Support Cloud, Hybrid and Direct Print job submission capabilities with an IPP class driver.
· Only supported by the Lexmark Print Management Client for Windows.
Single Direct Print Queue
The LPMC simplifies the Direct Print setup by consolidating multiple queues into a single, universal print queue.
· Eliminates the need for separate installer packages or multiple queues per printer/tag.
· Enhances scalability and user experience by assigning printers based on:
o IP subnet
o Department/Cost center
o User attributes
· Printer assignments are dynamically retrieved from the cloud
· Supported by the Windows, macOS, and Ubuntu versions of LPMC.
Printcryption2 for PCLXL and PCL
Enables secure printing for PCLXL jobs that are not compatible with IPPS, using Lexmark’s proprietary PrintCryption2 protocol
· Provides end-to-end encryption for PCLXL and PCL jobs.
· Complements IPPS by covering formats it doesn’t support.
· Supported by the Windows, macOS, and Ubuntu versions of LPMC.
Secure Direct Print
Enhances Direct Print security by supporting encrypted transmission protocols and secure job handling within the organization’s network.
· Adds encryption to Direct Print workflows.
· Users select from available printers at release time.
o Supports search, printer setting changes, and “remember printer” functionality.
· Meets modern security and compliance standards.
o IPPS (Port 443): TLS-encrypted.
o PrintCryption2 (Ports 9100, 9198, 9199): End-to-end encrypted print path using Lexmark firmware or eSF application.
o IPP (Port 631): Standard IP printing.
· Supported by the Windows, macOS, and Ubuntu versions of LPMC.
Update-Service merged with universal-service
The services architecture of the LPMC has been simplified by consolidating the update mechanisms into a single, unified service.
· Ensures consistent behavior across all service types (Cloud, Direct, Hybrid).
· Streamlines update delivery and configuration management.
· Supported by the Windows, macOS, and Ubuntu versions of LPMC.
The ability to perform conformance checking and enforcement have been added to the Native Agent and the Printer Agent. This functionality previously had only been available in the Fleet Agent.
| Agent | Version |
|---|---|
| Native Agent | In Firmware versions xxxx.230.216 and later |
| Printer Agent | v4.1.4 |
Conformance compares the printer settings to the CFM Configuration and shows customers which settings and firmware are out of compliance. For settings and firmware that are out of conformance.
Enforcement can be used to apply the assigned CFM Configuration to the device(s). Supported LCS agents include Fleet Agent, Native Agent, and Printer Agent.
Conformance and Enforcement provide customers with the ability to create, assign, and deploy configurations to device(s), and to conduct conformance and enforcement checks to ensure that a device's settings and firmware remain in compliance with a customer's security posture.
Supplies Days to Replace calculations are now available for all organizations. This calculation provides an estimated days-remaining for supplies based upon the historical usage of the printer.
A new version, v1.2.94, of the Printer Support Library is now available. This version updates support for 3rd-party printers.
The Cloud Solution Center eSF bundle now supports Advanced Match (regular expressions) as a match type for document redaction.
| Component | Firmware Families CS, CX, MS, and MX | Firmware Families LW and LHS |
| Cloud Authentication | 5.8.10 | N/A |
| Keyboard Reader | 2.5.2 | N/A |
| Omnikey Reader | 1.3.1 | N/A |
| Solution Center | 1.3.6 | N/A |
The Cloud Solution Center now offers enhanced document redaction capabilities by introducing support for Advanced Match (regular expressions) as a match type. This enhancement provides more precise control over the redaction process. The custom text redaction methods now are Whole word only, Contains, Exact Match, and Advanced Match.
A new version, v2.20.6-1, of the Printer Enrollment Tool (PET) is now available.
This version contains
· Updates to internal libraries and,
· An option to allow printers to be enrolled with the Native Agent when they do not have a ScopeID set.
A new version, v2.1.35, of the Fleet Agent is now available.
This version contains updates to internal libraries.
A new version of the Printer Enrollment Tool (PET), v2.20.3, is now available.
This version contains internal library updates.
Resolved enrollment issue with the Native Agent when a proxy was configured.
The Cloud Print Management eSF bundle is being updated. The new version changes polling of the Cloud Authentication eSF app from every 15 minutes to 60 minutes.
eSF Application | Firmware Families: CS, CX, MS, and MX | Firmware Families: LW and LHS |
|---|---|---|
| Cloud Authentication | 5.8.10 | 2.6.44 |
| Device Usage | 2.6.1 | 2.6.1 |
| Keyboard Reader | 2.5.2 | 2.5.2 |
| Omnikey Reader | 1.3.1 | 1.3.1 |
| Print Release | 5.11.4 | 2.6.51 |
Version 2.0.1.176 of the Lexmark Cloud Print Management for Chrome extension is now available from the Chrome web store.
Adds security features for v3 extensions for federated customers
[Security] Cloud Print Management (3231842)
A new version, v3.5.3, of the Lexmark Print Management Client (LPMC) is now available.
This version addresses CVE-2025-4054.
Version v2.1.27 of the Fleet Agent is now available. This version contains security and library updates.
[Fix][Maintenance][Security] Cloud Fleet Management Update (313543)
Version 2.11.47.0 of the Local Agent is now available. This version contains reliability improvements and security updates.
[Feature] Cloud Print Management Update (309682)
Hybrid Print Management now supports Lexmark Optra Edge as a replica option for Advanced Hybrid Storage.
Advanced hybrid storage options now include Windows, Linux, and Optra Edge.
The Optra Edge skill for Advanced Hybrid Storage may be found on the Optra Edge Marketplace.
[Maintenance] Cloud Fleet Management (307820)
Printer Enrollment Tool (PET) version v2.19.7 is now available.
Updates for improved security.
[Maintenance] Lexmark Cloud Services Terms of Use Update (304998)
Lexmark has updated the Lexmark Cloud Services (LCS) Terms of Use (TOU).
When an organization administrator logs into the LCS portal, they will see the new TOU and must Accept it to continue to the dashboard. If your company has a signed agreement with Lexmark, your existing agreement is still in effect. The TOU are not changing for you. The full (English) text of the TOU can be found in the Lexmark Cloud Services New and Changed Functionality document for March 2025.
[Feature][Enhancement] Cloud Connector Update (298406)
A new version of the Cloud Connectors eSF application, v1.9.9, is now available.
Support for new product models.
[Feature][Enhancement] Cloud Fleet Management Update (298442)
A new version of the Printer Configuration Agent, v4.2.5, is now available.
Support for new additional printer reports:
Device Statistics Reports
Event Log Summary
[Feature][Enhancement] Cloud Solution Center Update (298448)
A new version of the Cloud Solution Center eSF application, v1.1.1, is now available.
Support for new product models.
Tracks printer activity associated with Cloud Solution Center workflows.
[Feature][Enhancement] Translation Assistant Update (299998)
A new version of the Translation Assistant eSF application, v3.4.0, is now available.
Support for new product models.
[Maintenance] Cloud print Management Update (301537)
A new version of the Lexmark Print Management Client (LPMC), v3.5.2, is now available.
This version contains:
Improvements in the functionality of the LPMC’s system tray interface and logout function.
Updates to digital signing and access permissions.
Library updates.
[Fix] Cloud Fleet Management Update (301604)
A new version of the Fleet Agent, v2.1.12, now available. This version improves the data collection for predictive analytics.
[Fix] Fleet Management Update (298165)
A new version of the Fleet Agent, v2.1.10, is now available. This version resolves an issue with the collection of predictive analytics. It is recommended that you upgrade all Fleet Agents to the latest version.
[Feature] Cloud Solutions Center (292891)
To further enhance our cloud offerings, we are excited to announce the launch of a new cloud solution this year: Lexmark Cloud Solution Center (CSC).
Cloud Solution Center is a document enhancement solution that delivers an intuitive way to capture, process and route every type of document, all in the security of the cloud. CSC takes what was Cloud Scan Management, Translation Assistant and Redaction functionalities and rolls them in a single, easy-to-use solution.
CSC provides a common point for users to enhance documents and create simple to complex workflows that can be easily shared across the enterprise. It’s simple to use, fast to deploy and customizable for your organization’s unique workflows. And best of all, it’s a one-stop source designed to eliminate the many steps – and solutions – users generally need to manage documents.
[Feature] Print Management Update – Offline Print (292897)
We are introducing the new Offline Print feature, designed to ensure uninterrupted printing even during internet or cloud outages.
Offline Print allows users to continue printing through local networks, with metadata synced to the cloud once connectivity is restored. This feature guarantees business continuity during network disruptions, providing a transparent user experience with minimal downtime. It seamlessly integrates with existing workflows, ensuring that critical documents, such as patient records and prescriptions, are printed without interruption.
Offline Print is a reliable solution for maintaining full accountability, as offline print metadata is automatically integrated into cloud analytics upon reconnection. This feature enhances staff efficiency by eliminating the need for manual reprints during network disruptions.
[Feature] Print Management Update – Advanced Hybrid Storage (292897)
We are excited to announce the launch of the Advanced Hybrid Storage feature, revolutionizing print management with enhanced security, flexibility, and business continuity.
Advanced Hybrid Storage combines local storage with cloud scalability, allowing sensitive documents to be stored locally while non-sensitive documents utilize the cloud. This hybrid model ensures compliance with data residency laws and provides faster local processing for large jobs. It offers hybrid flexibility to meet diverse organizational needs, making it an ideal solution for industries with strict data compliance regulations.
With Advanced Hybrid Storage, users can achieve 100% compliance with regional data residency laws, reduce average print job processing time for high-security documents, and improve resource allocation by using cloud storage for non-sensitive tasks. This feature seamlessly integrates into hybrid and direct printing workflows, providing unmatched business continuity during outages.
[Feature] Print Management Client Update (292897)
A new version of the Lexmark Print Management Client, v3.5.1, is now available.
This version provides support for Offline Print and Advanced Hybrid Storage.
[Maintenance] Fleet Management Update (294787)
A new version of the Printer Enrollment Tool (PET) is now available.
The new PET, v2.18.1-1, contains updates to internal libraries.
[Maintenance][Fix] Cloud Print Management Update (247325)
New Universal Lexmark Print Management Client installation package in now available. The new package includes:
Lexmark Print Management Client v3.3.3
Improved handling of large print jobs.
Improved print job parsing performance.
Improved error handling.
Universal Print Driver v3.0.3.0
Image compression set to “on” by default.
Note: The legacy LPMC installation packages are not updated in this release.
[Maintenance] Cloud Fleet Management (240586)
A new version of the Local Agent, v2.6.28, has been released.
Updates to included libraries.
[Feature] Cloud Fleet Management Update (244394)
Updates have been made to the Cloud Fleet Configuration Management (CFM) feature.
Configurations are new versioned.
The Configuration List and Create Configuration pages now show version information.
[Security] Cloud Fleet Management Update (230054)
Release of Fleet Agent, v1.4.5, and Printer Support Library, v1.2.85
Updates to component libraries.
[Fix] Cloud Print Management Update (250364)
New Universal Lexmark Print Management Client installation package in now available. The new package includes:
Lexmark Print Management Client v3.3.4
Improved proxy support.
Improved error handling.
Note: The legacy LPMC installation packages are not updated in this release.
[Maintenance] Cloud Fleet Management (254641)
Printer Enrollment Tool (PET) version v2.14.0 is now available.
Updates for new product support.
[Feature] Cloud Fleet Management (245448)
New versions of the Fleet Agent and the Printer Support Library have been released.
Fleet Agent: v2.0.3
Printer Support Library: v1.2.86
Updates to improve system performance related to data collection by the Fleet Agent.
[Maintenance][Fix] Cloud Print Management Update (255404)
Version 3.3.5 of the Lexmark Print Management Client (LPMC) is now available.
Improved proxy support (727672)
Corrected installation issues seen on non-English OS. (728606)
[Fix] Cloud Fleet Management (258226)
Local Agent, v2.8.32, in now available.
This version provides improved proxy support.
[Feature] Analytics Update (257390)
The beta release of Analytics v2.0 Print Summary Report is now available.
The Print Summary Report is now available with the beta version of the Outliers Report for Cloud Print Management. The Print Summary Report provides:
An interactive report that allows the print administrator to drill into layers of data from within a single report, going from the top organizational level all the way down to a user.
Increased report performance.
A clean visualization.
Notes:
The beta reports are provided for a limited time only.
The one of the following roles is required to access the Print Summary Report:
Direct Print Management Administrator
Hybrid Print Management Administrator
Print Release Management Administrator
[Maintenance] Cloud Fleet Management (252559)
A new version of the Printer Agent eSF application for Cloud Fleet Management is now available.
Support for new product models.
| eSF Application | Firmware Families CS, CX, MS, and MX | Firmware Families LW and LHS |
|---|---|---|
| Printer Configuration Agent | v4.0.1 | v4.0.1 |
[Maintenance] Cloud Print Management (253298)
A new version of the Cloud Print Management eSF application bundle is now available.
eSF application updates to support new printer models.
| Bundle component | Firmware Families CS, CX, MS, and MX | Firmware Families LW and LHS |
|---|---|---|
| Cloud Authentication | v5.7.13 | v2.6.41 |
| Device Usage | v2.4.38 | v2.4.38 |
| Keyboard Emulation Reader Driver | v2.4.22 | v2.4.22 |
| Omnikey5247ck Reader Driver | v1.2.19 | v1.2.19 |
| Print Release | v5.10.45 | v2.6.48 |
[Maintenance] Cloud Connector (254444)
A new version of the Cloud Connector eSF applicationis now available.
eSF application updates to support new printer models.
| eSF Application | Firmware Families CS, CX, MS, and MX | Firmware Families LW and LHS |
|---|---|---|
| Cloud Connector | v1.8.7 | Not Available |
[Enhancement][Fix] Cloud Scan Management (246422)
A new version of the Cloud Scan Management eSF application bundle is now available for Firmware families CS, CX, MS, and MX. The versions for the Firmware families LW and LHS have not changed.
| Bundle Component | Firmware Families CS, CX, MS, and MX | Firmware Families LW and LHS |
|---|---|---|
| Cloud Authentication | v5.7.13 | v2.6.34 |
| Cloud Scan | v2.5.3 | v2.3.5 |
| Device Usage | v2.4.38 | v2.4.32 |
| Keyboard Emulation Reader Driver | v2.4.22 | v2.4.17 |
| Omnikey5247ck Reader Driver | v1.2.19 | v1.2.15 |
[Maintenance] eSF Applications Updates (256093)
New versions of these eSF applications are now available.
eSF application updates to support new printer models.
| eSF Application | Firmware Families CS, CX, MS, and MX | Firmware Families LW and LHS |
|---|---|---|
| Card Authentication | v5.8.36 | v2.16.12 |
| PrintCryption 2.0 | v2.1.1 | v2.1.1 |
| Keyboard Emulation Reader Driver | v2.4.22 | v2.4.22 |
| Omnikey 5427ck Reader Driver | v1.2.19 | v1.2.19 |
[Enhancement][Fix] Lexmark Translation Assistant (246657)
A new version of the Lexmark Translation Assistant eSF application bundle is available.
Support for new product models.
Improved user experience.
| Bundle Component | Firmware Families CS, CX, MS, and MX | Firmware Families LW and LHS |
|---|---|---|
| Cloud Authentication | v5.7.13 | Not Available |
| Keyboard Emulation Reader Driver | v2.4.22 | Not Available |
| Omnikey5247ck Reader Driver | v1.2.19 | Not Available |
| Translation Assistant | v3.2.0 | Not Available |
[Fix] Cloud Fleet Management Update (265739)
A new version of the Printer Agent, v4.0.4, is now available.
Corrects an issue with the upload of the printer's asset data, such as Firmware, Page Counts, and Supplies.
Note: We recommend all customers white list our IoT hosts. Lexmark will be moving exclusively to the IoT rollup path in the future. For the full list of require host names, please see:
Lexmark Cloud Services Security and Privacy White Paper.
or
[Maintenance] Cloud Fleet Management (262870)
A new version of the Printer Enrollment Tool, v2.15.0-1, is now available.
Updates to application libraries.
[Feature][Security][Maintenance][Fix] Solutions Quota Management (261578)
Solution Quota Manager is replacing the Translation Manager.
Translation distributions and individual translations quotas are now handled by the Solution Quota Manager.
[Feature][Fix] Cloud Fleet Management (260343)
Configuration Management updates
The description of a configuration can now be edited after the configuration has been published.
The full version history of a configuration can now be viewed.
[Feature] Cloud Fleet Management (260287)
The ability to update installed eSF apps has been added to the Printers Page of the All Organizations view.
The Partner Administrator can now update eSF apps across all their child organizations from one screen.
[Feature] Cloud Fleet Management (260293)
Installed custom eSF apps that are not available from the CFM eSF app catalog can now be seen from the Apps page.
[Feature] Cloud Fleet Management (263161)
The ability to update Firmware has been added to the Printers Page of the All Organizations view.
The Partner Administrator can now update Firmware on printers across all their child organizations from one screen.
[Feature] Cloud Fleet Management (264803)
Groups of Filter settings can be saved on the Printer listing page.
Saved Filter groups can be reused and are available to all CFM users on the organization.
[Fix] Cloud Print Management (271020)
A new version of the Lexmark Print Management Client (LPMC) for macOS and Windows is now available.
The new version, 3.4.0, contains performance, security, and installer updates.
Note: The LPMC for Ubuntu remains at version, 3.3.5.
[Feature] Analytics Update (269707)
Reports are now restricted by user role.
Print Management reports will only be available to users with an administrative Print Management role.
A new reports selection page for Analytics 2.0 reports is now available.
The reports selection page allows you to select from all the available Analytics 2.0 reports.
The custom date range for reports has been enabled.
The maximum range is a one-year window within the prior two years.
[Feature] Cloud Fleet Management (271759)
Settings VCC files can now be exported from printers directly into Resource Library files or saved to a file outside of Cloud Fleet Management.
New versions of the Fleet Agent and Printer Support Library are now available.
Library and performance updates
Fleet Agent 2.0.6
Printer Support Library 1.2.90
[Maintenance] Cloud Print Management (270164)
Version 2.0.0.164 of the Lexmark Cloud Print Management for Chrome is now available.
Supports the V3 Manifest for Chrome extensions.
The V3 Manifest provides improved security and performance.
Note: Lexmark Cloud Print Management for Chrome versions prior to 2.0.0.164 will no longer be supported after June 2025.
[Fix] Cloud Fleet Management Update (274688)
A new version of the Local Agent, v2.9.35, is now available.
Fixes to improve the Local Agent reliability.
Fixes to improve printer status warnings.
[Fix] Cloud Print Management (274583)
A new version of the Lexmark Print Management Client (LPMC) for Linux is now available.
The new version, 3.4.0, contains installer updates.
[Maintenance] Cloud Fleet Management Update (271928)
A new version of the Printer Enrollment Tool (PET), v2.16.0, is now available.
The new version contains updates for compatibility with backend services.
[Enhancement] Account Management Updates (278124)
[Maintenance] Print Management Update (283111)
The legacy 2.x version of the Lexmark Print Management Client (LPMC) is no longer available.
Please use the v3.x version of the LPMC appropriate for your workstations.
[Enhancement] Account Management Updates (278124)
The ability to delete child organization has been moved from the parent organization’s child list to the child’s Organization Information page.
Note: This enhancement only affects organizations using Lexmark Cloud Services’ new customer identity access management (CIAM) solution for user authentication.
[Feature] Cloud Fleet Management Update (270731)
Printer configuration conformance can now be checked and enforced from the Fleet Management portal.
A Configuration can be assigned to a printer as a conformance baseline.
Conformance checking and enforcement can be done manually or on a scheduled basis to verify printer conformance to its assigned conformance baseline.
Note: Currently, conformance checking and enforcement are only supported for Lexmark printers enrolled under a Fleet Agent.
[Feature] Cloud Fleet Management Update (278189)
A new Fleet Management Viewer role has been added to Cloud Fleet Management.
A user with only this role:
Can see printers enrolled in the organizations, the eSF applications installed, and access the Standard/Quick views.
Cannot enroll printers, create or deploy configurations, create Notification policies, nor generate Analytics reports.
[Enhancement][Fix] Cloud Fleet Management (277332)
A new version of the Local Agent, v2.10.42, is now available.
Reliability improvements
Improved proxy support
Improved handling of printer data and printer warnings
Added conditional data rollup based on changes to page counts, supplies, or printer status.
[Fix] Lexmark Translation Assistant (275010)
A new version of the Lexmark Translation Assistant eSF application bundle is available.
Improved user experience.
Resolved numerous deferred issues.
New Translation Assistant bundle eSF application versions
Translation Assistant: v3.3.0
Cloud Authentication: v5.7.13
Keyboard Emulation Reader Driver: v2.4.22
Omnikey5247ck Reader Driver: v1.2.19
[Enhancement][Feature] Cloud Fleet Management (276931)
A new version, v4.1.6, of the Printer Agent is now available.
Settings VCC files can now be exported from printers directly into Resource Library files or saved to a file outside of Cloud Fleet Management.
[Enhancement] Account Management Update (278148)
Active Lexmark Cloud Services
Entitled Lexmark Cloud Services that are active in an organization are shown on the Organization Information page in the Account Management portal. This includes the Lexmark Cloud Services for Cloud Print Management and Translation Assistant.
Deleting Child Organization
The Delete Organization button has been moved from the Child Organizations listing page to the Organization Information page of each child organization. The ability to delete child organizations is now only available to users that are a member of a Child Organization Access Group that includes the Organization Administrator role.
Note: This enhancement only affects organizations using Lexmark Cloud Services’ new customer identity access management (CIAM) solution for user authentication.
[Feature] Fleet Management Update (287762)
Added new columns to Task History on the Printer Detail page.
Submitted By
Task ID
Added filtering capabilities to the Task History on the Printer Detail page.
Filter by: Date Range, Type, Submitter, and Status.
[Feature] Fleet Management Update (282242)
Two reports required for warranty claims have been added to the Reports section of the Printer Details page.
Device Statistics
Event Log Summary
Note:
These reports are only available on printers with FW xxxx.230.329 or later and are enrolled with the Native Agent or the Fleet Agent v2.1.6 or later. While these reports are not currently available with the Printer Agent, they will be added in an upcoming release.
[Feature] Analytics Update (283460)
Users may now submit feedback on the Analytics 2.0 reports directly from the Analytics portal after generating a report.
[Enhancement] Account Management Update (286442)
The expiration of user passwords has been extended. Passwords will now remain valid for 1 year.
[Enhancement] Print Management Update (287934)
Increased the number of child organizations shown in the Select Organization drop-down menu.
[Feature][Security] Cloud Print Management Update (293656)
ACTION REQUIRED – Lexmark Print Management Client (LPMC) 3.5.0 is now available.
LPMC 3.5.0 addresses a security vulnerability present in the LPMC versions 3.0 through 3.4. Lexmark recommends that all customers using the affected LPMC versions update as soon as possible. For additional details on the security vulnerability, please see below.
This release contains additional changes:
The folder structure for the LPMC data folders has changed for some operating systems.
On Windows, the folder for the configuration file is unchanged. It remains c:\programdata\lpmc.
On Mac, the folder for the configuration file has changed to /var/Lexmark/PrintManagementClient.
On Ubuntu, the folder for the configuration file is unchanged. It remains /etc/Lexmark/PrintManagementClient
The user’s print jobs are now stored within a jobs folder under the main LPMC data folder. For example, the LPMC for Windows uses the c:\programdata\lpmc\jobs folder. Each user on the system will have a subfolder for their own data under the jobs folder.
All log files have moved to the logs folder under the base data folder. For example, the LPMC for Windows puts all logs in the c:\programdata\lpmc\logs folder.
ACTION REQUIRED: Please ensure that any rules for antivirus software and other security software you may use are updated to reflect the new folder structure.
The LPMC 3.5.0 uses a new configuration.json file format, replacing the previous configuration.xml and DirectPrintConfiguration.xml files.
The LPMC will automatically convert your existing xml files to the new configuration.json format at install time. This applies to initial installations as well as upgrades from previous versions of LPMC 3.x.
The LPMC Configuration Guide describes the new format. This configuration guide is also present in the installation folder (C:\Program Files\Lexmark\Print Management Client on Windows).
In addition to addressing the security issue previously mentioned, LPMC release 3.5.0 includes additional security improvements, such as updated controls around folder permissions for the LPMC.
When downloading custom packages for the LPMC, PCL/XL and PS3 Emulation drivers are available. A custom LPMC installer package containing a PCL 5 driver is no longer available from the LCS web portal. If you need an LPMC installer that includes a PCL 5 driver, please contact Lexmark Technical Support to obtain that installer package.
Technical Information for CVE-2024-11348
Summary
Lexmark has identified a vulnerability in our Lexmark Print Management Client (LPMC).
References
CVE: CVE-2024-11348
CWE: CWE-843
Details
A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client.
CVSSv3 Base Score: 9.3 (AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Impact Subscore: 6.0
Eploitability Subscore: 2.5
Affected Products
The vulnerability exists in LPMC 3.0.0 through 3.4.0. If the LPMC version falls into this range, upgrade to version 3.5.0 or later.
Obtaining Updated Software
Customers can download the latest LPMC release through the Lexmark Cloud web portal.
Workarounds
Lexmark recommends updating the LPMC version if affected.
Exploitation and Public Announcements
Lexmark is not aware of any malicious use of the vulnerability described in this disclosure.
Status of this Notice:
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND IS PROVIDED WITHOUT ANY EXPRESS OR IMPLIED GUARANTEE OR WARRANTY WHATSOEVER, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR USE OR PURPOSE. LEXMARK RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME
Distribution
The final advisory will be posted on Lexmark’s web site at http://support.lexmark.com/alerts
Future updates to this document will be posted on Lexmark’s web site at the same location.
Revision History
Revision Date Reason
0.1 22 December 2024 Initial draft
The vulnerability exists in Windows, Mac, and Linux clients. The vulnerability is present in all LPMC releases from LPMC 3.0.0 – LPMC 3.4.0.
An attacker could exploit this vulnerability to achieve the following:
Launch arbitrary process under the SYSTEM or root context, depending op operating systems.
Delete folders on the workstation, including folders that require typically Administrator or other evelvated permissions to access.
Lexmark has released LPMC 3.5.0 to address this issue.
Action Required:
Lexmark strongly recommends that all customer currently using LPMC 3.0 through 3.4.0 update immediately to address this issue.
We apologize for any inconvenience this may cause and appreciate your prompt attention to this matter. If you have any questions or need assistance, please contact your Lexmark account team or contact the Technical Support Center. Contact information is available at https://support.lexmark.com/en_us/contact-support.html
Note:
Remote update to the LPMC v3.5.0 has been temporarily disabled to prevent disruption for customers who must update security rules. It will be re-enabled in February 2025. Until then, users must be upgraded either manually or via their corporate deployment tools.
[Enhancement][Feature] Cloud Fleet Management Update (260666)
Printer Login Methods and Permissions
Cloud Fleet Management (CFM) Configurations can now be used to configure device security permissions and author local and network login methods that can be assigned and enforced to a fleet of Lexmark print devices. Supported login methods include, LDAP, Kerberos 5, LDAP+GSSAPI, username/password, username, password, or pin. Login methods are supported by the Fleet Agent, Native Agent and Printer Agent.
Conformance and enforcement support login methods, device settings, and firmware to ensure a device's configuration remains in compliance with a customer's security posture.
Secure access features in Lexmark products and solutions ensure that only authenticated and authorized users can access sensitive, valuable, and protected information. This solution helps customers easily change passwords to support their rotational password policies.
Additional notes:
1. Currently, conformance and enforcement operations for Login Methods and Permissions are only supported by the Fleet Agent, v2.1.8.
2. Support for login methods and permissions as part of a CFM configuration is available only on devices announced in 2016 or later
3. Login methods and permissions deployed through CFM will overwrite any previous device security settings and login methods.
[Enhancement][Feature] Cloud Fleet Management Update (260666)
Fleet Agent version, 2.1.8, is now available.
Supports Printer Login Methods and Permission in CFM configurations.
[Feature] Cloud Fleet Management Update (286043)
A new version of the Printer Enrollment Tool (PET), v2.17.0, is now available.
The PET is now using your default browser for authentication. Using the default browser is the industry standard and provides a higher level of security. This PET update follows similar updates by other Lexmark Cloud Services components.
[Enhancement][Maintenance] Print Management Updates (172457)
Delegate Management
The expiration of a Print Delegate’s assignment can now be modified.
[Feature] Fleet Management Updates (166663)
New Notification Printer Information policy type for tracking printer communications with Lexmark Cloud Services has been added.
Last Data Refresh
Printer is communicating but is not responding to Refresh Information tasks.
Last Communicated
Printer either not polling or not responding to tasks.
[Update] Lexmark Cloud Services Infrastructure Hostnames Changes
The list of hostnames used by Lexmark Cloud Services has changed. This is a result of the security and reliability improvements implemented on 5 January 2023,
The following hostnames are no longer required and may be removed from firewall or proxy allow lists.
Hosts for the EU Data Center
prodwesteulexcloudk8s54.iss.lexmark.com
prodwesteulexcloudk8s199.iss.lexmark.com
Hosts for the US Data Center
prodlexcloudk8s239.iss.lexmark.com
prodlexcloudk8s19.iss.lexmark.com
The full list of hostnames used by Lexmark Cloud Services can be found here:
[Fix] CFM Update (176018)
Corrected an issue with e-mails generated for Toner Level policy notifications. (EV#705528 and EV#705324)
[Maintenance][Security] Platform Maintenance (159292 and 165590)
Lexmark has updated the Lexmark Cloud Services (LCS) platform to enable additional security and reliability improvements. Administrative actions may be required. These changes require older LCS clients to update, including applications installed on the printer and applications used for Cloud Print Management, and if a firewall or other security software tools are used, they must be updated to permit traffic to Lexmark Cloud Services. Failure to update LCS clients or to add the hostnames to your firewall’s allow list will result in a service interruption; this will include disruptions to your ability to print.
For more information about the minimum client versions, please see white paper here
The full list of hostnames can be found in the Lexmark Cloud Services: Security and Privacy White Paper.
[Maintenance] Print Management Updates (183339)
Lexmark Print Management Client (LPMC) update
Updates to support future product releases.
| Component | Version |
|---|---|
| Lexmark Print Management Client | 2.3.1145.0 |
[Maintenance] eSF Application Updates (180332)
eSF application updates to support new printer models.
| eSF Application | Version |
|---|---|
| Card Authentication | 5.8.23 (e5 or later) 2.6.10 (e3 and e4) |
| Keyboard Emulation Reader Driver | 2.4.17 |
| Omnikey 5427ck Reader Driver | 1.2.15 |
| PrintCryption 2.0 | 2.0.10 |
[Security][FIX] Print Management Updates (177713)
Security enhancements across all Print Management services.
Improve Print Management performance when used with CIAM. (346)
[Fix] Print Management Update (188733)
Cloud Print Management eSF bundle update to resolve a display issue when the printer language set to French. (707940)
| Bundle Component | Firmware Families CS, CX, MS, and MX | Firmware Families LW and LHS |
|---|---|---|
| Cloud Authentication | 5.6.39 | 2.6.35 |
| Device Usage | 2.4.32 | 2.4.32 |
| Keyboard Emulation Reader Driver | 2.4.17 | 2.4.17 |
| Omnikey5247ck Reader Driver | 1.2.15 | 1.2.15 |
| Print Release | 5.10.33 | 2.6.40 |
[Feature][Fix][Maintenance][Security] Print Management Update (187996)
Introducing the Direct Print feature for Locu Print Management.
Sends print jobs directly from a workstation to an administrator-designated, network attached printer.
Print job never leaves the customer's network.
[Feature] Lexmark Announcement Center (187078)
Introducing the Lexmark Announcement Center.
The Lexmark Announcement Center keeps you up to date on Lexmark Cloud Service changes that affect you.
Announcements are sent based upon your role(s) within Lexmark Cloud Services, so you only receive the information you need.
Announcements may cover such things as:
- New feature/function releases,
- Service changes, or
- Other details related to your usage of Lexmark Cloud Services.
[Maintenance] Fleet Management Update (180054)
Print Enrollment Tool (PET) Update
PET version 2.12.0-2 is now available.
Updates to PET libraries.
[Maintenance] Print Management eSF Application Updates (183647)
Cloud Print Management eSF application bundle update
eSF application updates to support new printer models.
| Bundle Component | Firmware Families CS, CX, MS, and MX | Firmware Families LW and LHS |
|---|---|---|
| Cloud Authentication | 5.6.38 | 2.6.34 |
| Device Usage | 2.4.32 | 2.4.32 |
| Keyboard Emulation Reader Driver | 2.4.17 | 2.4.17 |
| Omnikey5247ck Reader Driver | 1.2.15 | 1.2.15 |
| Print Release | 5.10.33 | 2.6.40 |
[Enhancement] Fleet Management Updates (180052)
Fleet Agent update
Rollup of meters and counters now occurs daily and on alert status changes.
Prior versions only rolled up meters and counters on a page count or an alert status change.
New Fleet Agent and Printer Support Library versions are available.
| Component | Version |
|---|---|
| Fleet Agent | v1.3.25 |
| Printer Support Library | v1.2.76 |
[Maintenance] eSF Application Updates
eSF application updated to support new printer models.
| Bundle Component | Firmware Families CS, CX, MS, and MX | Firmware Families LW and LHS |
|---|---|---|
| Cloud Connector (189392) | v1.6.37 | N/A |
| Cloud Scan (194782) | v2.2.0 | v2.2.0 |
| Printer Configuration Agent (189390) | v3.1.16 | v3.1.16 |
[Feature] Print Management eSF Application Updates (202476)
The Print Management eSF applications now use the user’s data center information included in the user’s access token.
| Bundle Component | Firmware Families CS, CX, MS, and MX | Firmware Families LW and LHS |
|---|---|---|
| Cloud Authentication | v5.6.42 | v2.6.40 |
| Device Usage | v2.4.35 | v2.4.35 |
| Keyboard Reader | v2.4.17 | v2.4.17 |
| Omnikey 5427ck | v1.2.15 | v1.2.15 |
| Print Release | v5.10.36 | v2.6.42 |
[Fix] Feet Management Update (202446)
Fixed an issue where printer Asset Tag and Location information could not be updated from the Fleet Management portal. (EV#713314)
[Enhancement] Feet Management Update (195401 and 195407)
Supplies Notification Alerts Updates
Supplies policies are now effective immediately.
Days to Replace information added to Supply Alert e-mail.
Task Submitter Identification
The submitter of Fleet Management tasks is now shown.
[Maintenance][Security] Lexmark Print Management Client for macOS® Update (198048)
New version of Lexmark Print Management Client for macOS: 1.1.1546
Security updates
Updates to the EULA and notices files
[Feature] Translation Assistant Update (200072)
Quota management has been added to Translation Assistant. Translation Assistant users and administrator will receive the following Announcement Center messages.
Translation Assistant Users:
Lexmark has enabled the ability to see your remaining Translation Assistant quota with the new "My Translation Quota Remaining" Dashboard Card. If the card is not shown on your Dashboard, you may add it from the "Actions" menu.
Note: Quota may be shared with other Translation Assistant users in your organization.
Translation Assistant Administrators and Solutions Quota Administrators:
Lexmark has enabled Translation Assistant quota management. A new LCS web portal called "Translation Manager" is available in your LCS application menu that will allow management of default quotas and custom quotas. Additionally, new dashboard cards showing quota status are now available. Please contact your Lexmark representative if you have any questions.
[Fix] Fleet Management Updates (207618)
Release of new Local Agent
Expanded printer meters collection.
| Component | Description | New Version |
|---|---|---|
| Local Agent | The Local Agent is an application installed on a computer system that has USB-attached printers. It enrolls locally attached Lexmark or another manufacturer’s printers into Lexmark Cloud Services. | 2.4.16 |
[Feature] Fleet Management Updates (204989)
Update installed eSF applications from the Fleet Management portal, printer listing page.
Select one or more printers, expand the Configure drop-down menu and select Update apps. Select which eSF applications to update.
[Fix] Fleet Management Updates (196399)
Release of new Fleet Agent
Addresses intermittent firmware update failures when using the Fleet Agent.
| Component | Description | New Version |
|---|---|---|
| Fleet Agent | The Fleet Agent is an application installed on a dedicated on-site computer system with high availability. It enrolls printers from Lexmark and other manufacturers into Lexmark Cloud Services. | 1.3.38 |
| Printer Support Library | The Printer Support Library is used by the Fleet Agent and provides it with the methods for obtaining printer data. | 1.2.81 |
[Maintenance] Print Agent Updates (194790)
The Print Configuration Agent eSF application now uses the user’s data center information included in the user’s access token.
Printer Configuration Agent v3.2.6 is now available.
[Feature] Cloud Scan Update (202483)
Release of Cloud Scan eSF app 2.3.11
Added support for Box as a scan destination.
[Maintenance] Printcryption Update (217003)
Release of Printcryption v.2.1.1
Improvements to printing performance.
[Enhancement] Cloud Fleet Management Update (223900)
Firmware downgrade warning added to CFM Configurations
A firmware downgrade warning is now shown when a non-recommended version of firmware is added to a CFM Configuration.
The warning provides a link to a support article about the effects of downgrading printer firmware.
[Maintenance] Local Agent Update (225358)
New Local Agent version, v2.5.19, is now avaialble.
Local Agent library updates.
[Enhancement][Fix][Maintenance] Printer Agent eSF Application Update (204350)
New Printer Configuration Agent version, v3.3.2, is now avaialble.
Supplies data now reported when a supplies level change is detected.
Corrected the display in the Fleet Management portal of the last control panel message sent to a printer.
Support for latest firmware updates.
| Component | Description | Version |
|---|---|---|
| Printer Configuration Agent | The Printer Configuration Agent is an application configured and installed on a Lexmark printer to enroll that printer into Lexmark Cloud Services. | 3.3.2 |
[Maintenance] Fleet Management Update (218226)
Release of Printer Enrollment Tool, v2.13.0-8.
Printer Enrollment Tool library updates.
[Maintenance] Hostname Updates
North American (US) data center
b2ccustomizationsprodsa.blob.core.windows.net
European (EU) data center
b2ccustomizationsprodsa.blob.core.windows.net
lexmarkb2c.b2clogin.com
[Feature] Fleet Management Update (220295)
Agent update functionality added to the All Organizations view.
[Feature] Cloud Print Management Update (230624)
Universal Lexmark Print Management Client
Release of new Lexmark Print Management Client (LPMC) clients, version 3.3.0, that brings the Windows, macOS, and Ubuntu clients together under a common architecture.
Supports Cloud Print, Hybrid, and Direct Print.
Supports remotely updating to future LPMC releases.
Supports a single login for all configured print submission modes, using your default browser.
Note: Prior Windows and macOS versions will be available for a limited time with critical updates only.
Remote Client Update
Print Administrators can configure remote update for LPMC clients from within the Print Management portal.
Can select to automatically update clients when a new version is available.
Configuration allows for immediate update or for an update within a specific time frame.
LPMC checks for updates every 4 hours.
The Remote Update function is enabled on the Print Management Organizational Setting page.
Supported by LPMC v3.3.0 or later.
New Print Management Portal for Print Client Status
Show information about LPMC in the organization.
LPMC versions.
Date LPMC last checked in.
Hostname, IP address, and operating system of the workstation.
Logged in user on the workstation when the LPMC last checked in.
Support LPMC v3.3.0 or later.
[Feature] Analytics Update (228155 and 229750)
The beta release of Analytics Report v2.0 is now available.
The beta version contains the Outliers report for Cloud Print Management. The Outlier report provides:
An interactive report that allows the print administrator to drill into layers of data from within a single report, going from the top organizational level all the way down to a user.
Increased report performance.
A clean visualization.
Notes:
The Print Outliers Beta report is provided for a limited time only.
The one of the following roles is required to access the Print Outliers report:
Direct Print Management Administrator
Hybrid Print Management Administrator
Print Release Management Administrator
[Feature] Cloud Print Management Update (225318, 227239)
Print Administrators can now set when users are allowed to release submitted print jobs as part of Print Policies. Scheduling options can be set for
The same time every day of the week.
The same time every day, Monday through Friday.
A different time for each day of the week.
This affects the release of print jobs submitted using the
Lexmark Print Management Client: for both Cloud Print and Hybrid.
Cloud Print Management for Google Chrome extension
Lexmark Print application: for both iOS and Android.
Notes:
Direct Print and the release of print jobs using the ELATEC TCP3 adapter are not affected.
Requires the Print Release eSF application v5.10.42 or v2.6.45 or newer.
[Feature] Cloud Print Management eSF Bundle Update (227649)
Release of a new Cloud Print Management eSF bundle to support Schedule Printing.
| Solution Bundle | Part Number | Description |
|---|---|---|
| Cloud Print Management | 82S1118 | This solution enables customers to effectively manage and monitor their document output through the Lexmark Cloud Print Management offering. |
| Component | Description | Firmware Families CS, CX, MS, and MX | Firmware Family LW | Firmware Family LHS |
|---|---|---|---|---|
Cloud Authentication
|
Keep devices and documents secure by requiring user authentication by ID card, security badge, or login credentials. It secures access to the printer using a cloud-based user authentication.
|
5.6.42
|
2.6.40
|
2.6.40
|
Device Usage
|
Device Usage is used in conjunction with the Lexmark Print Release to track printer usage. This enables customers to effectively manage and monitor their document output.
|
2.4.35
|
2.4.35
|
2.4.35
|
Keyboard Emulation Reader Driver
|
Driver application that supports badge readers configured in keyboard wedge mode.
|
2.4.17
|
2.4.17
|
2.4.17
|
Omnikey5247ck Reader Driver
|
Driver application for the Omnikey 5427ck contactless card reader in CCID mode.
|
1.2.15
|
1.2.15
|
1.2.15
|
Print Release
|
Allows users to release jobs securely from cloud-based or Hybrid-based print queues.
|
5.10.42
|
2.6.45
|
2.6.45
|
[Maintenance] Cloud Fleet Management Update (225351)
New version of the Fleet Agent, v1.3.49, is now available.
Fleet Agent library updates
[Feature] Cloud Fleet Management Update (226365)
Additional supplies options have been added to the Supplies Notification Policy.
Maintenance kit
Fusers
Photoconductors
Waste toner bottle
Transfer Module
[Enhancement] Lexmark Cloud Services Administrator's Guide - Rollout Guide
A Rollout Guide section has been added to the Lexmark Cloud Services Administrator's Guide.
Describes the recommended process of rolling out Lexmark Cloud Fleet Management and Cloud Print Management. This knowledge helps you to start managing your fleet and printing with the full capabilities of Lexmark Cloud Services.
Provides instructions and explains setup and configuration choices.
Online and downloadable versions can be accessed from Lexmark Support for Lexmark Cloud Service.
https://support.lexmark.com/en_us/manuals-guides/solution/Lexmark-Cloud-Platform.html
For more information, see the Lexmark Could Services - New and Changed Functionality October 2023 document.
https://www.lexmark.com/content/dam/lexmark/documents/user-guides/y2023/2023-October-New_and_Changed_Functionality.pdf
[Maintenance] Cloud Connector eSF Application Update (232829)
New Cloud Connector eSF application v1.7.11 is now available.
Device support updates.
[Maintenance] Cloud Connector Update (232829)
A new version of the Cloud Connector eSF application, v1.7.11, is now available.
Support for Firmware v23.
[Fix] Print Management Client Update (232918)
New Lexmark Print Management Client (LPMC) v2.3.1170.0 is now available.
Resolves an issue with non-English characters in the names of files printed using the LPMC.
[Fix] Cloud Print Management Client Update (241945)
A new universal Lexmark Print Management Client (LPMC), v3.3.1, is now available.
Update is for the macOS operating system only.
Contains updates for
Improvements for the submission of large print jobs.
Security enhancements and firewall compatibility improvements
[Feature] Cloud Fleet Management Update (240901 and 241234)
A Cloud Fleet Configuration Management feature (CFCM) has been added to Cloud Fleet Management (CFM).
In conjunction with using VCC bundles, users will have the ability to configure around 1500 individual device settings from within a CFM Configuration.
CFM Configurations now allow you to control individual device settings and deployed them to a fleet of print devices.
Device settings can also be added to CFM Configurations by imported from a VCC settings bundle.
[Fix] Cloud Print Management Client Update (241257)
A new universal Lexmark Print Management Client (LPMC), v3.3.1, is now available.
Update is for the Windows and Linux operating systems only.
Contains updates for
Improvements for the submission of large print jobs.
Security enhancements and firewall compatibility improvements
[Maintenance] Deprecation of the v2 Print Management API (241298)
The v2 Print Management API used by older print clients and printer applications has been discontinued.
For more information about the minimum client versions, please see:
The full list of hostnames can be found in the Lexmark Cloud Services: Security and Privacy White Paper.
[Feature] Cloud Print Management Update (232929)
A new Cloud Print Mangement eSF application bundle is now available.
The new bundle contains an updated Cloud Authentication eSF application that can coexist with other authentication applications. This allows other authentication applications to be used as the primary authenticator.
| Solution Bundle | Part Number | Description |
|---|---|---|
| Cloud Print Management | 82S1118 | This solution enables customers to effectively manage and monitor their document output through the Lexmark Cloud Print Management offering. |
| Component | Description | Firmware Families CS, CX, MS, and MX | Firmware Family LW | Firmware Family LHS |
|---|---|---|---|---|
Cloud Authentication
|
Keep devices and documents secure by requiring user authentication by ID card, security badge, or login credentials. It secures access to the printer using a cloud-based user authentication.
|
5.7.12
|
2.6.41
|
2.6.41
|
Device Usage
|
Device Usage is used in conjunction with the Lexmark Print Release to track printer usage. This enables customers to effectively manage and monitor their document output.
|
2.4.37
|
2.4.37
|
2.4.37
|
Keyboard Emulation Reader Driver
|
Driver application that supports badge readers configured in keyboard wedge mode.
|
2.4.21
|
2.4.21
|
2.4.21
|
Omnikey5247ck Reader Driver
|
Driver application for the Omnikey 5427ck contactless card reader in CCID mode.
|
1.2.18
|
1.2.18
|
1.2.18
|
Print Release
|
Allows users to release jobs securely from Cloud-based, Hybrid-based, or Direct print queues.
|
5.10.44
|
2.6.48
|
2.6.48
|
[Fix] Fleet Management Update (240330, EV#725337)
Resolved an issue where Supplies Notification emails were not generated for some 3rd-party printers.
[Maintenance] Cloud Fleet Management Update (232835)
New version of the Printer Configuration Agent eSF application, v3.4.2, is now available.
Updates for future feature support.
[Feature] Cloud Print Management Update (240533 and 242883)
Cloud Print Management Administrators can now customize the names of the direct print queues they create.
[Feature] Cloud Fleet Management Update (242250)
Cloud Fleet Management has added a feature that allows Fleet Management Administrators to:
View the current eSF applications installed across their fleet of printers.
View the versions of installed eSF applications and see which have updates available.
Export the list of installed eSF applications to a CSV file.