iR2535i cannot scan to email

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • bubbafet
    • Jun 2025

    #1

    iR2535i cannot scan to email

    When trying to send an email, the session times out after a minute and prints an TX error page (ND 0753). I've looked up the error and it just doesn't make sense. The users can print to the printer, copy, fax, scan, but not scan to e-mail.

    Background:

    The printer is on a TCP/IP network and it communicates with our Exchange server (2007). The printer is configured by DCHP. The users print via a Windows print server, and scan to our exchange server

    A typical setup includes inputting the Server IP in the printer and using Hub Transport on the Exchange server. We typically leave all major setting blank, and only input reference data like the Host name, device location, and etc. We also add all of the users to an address book. We really don't change much. We do not require authentication, all Exchange does is forward the incoming mail to the correct user or user listed in the address book.


    Update: We used "Network Monitor" to capture traffic to the Exchange server. In "blue" you will notice the client was not authenticated. TLS is involved in the authentication of the traffic, and we are figuring it has something to do with CA (certificate authority). However, unlike the other image runners we have, this little sucker came without a "default key"; how fortunate.

    6366 2:45:22 PM 10/21/2011 56.0144993 edgetransport.exe RYPES04 172.19.8.145 SMTP SMTP:Rsp 530 5.7.1 Client was not authenticated, 40 bytes {TCP:364, IPv4:112}


    How would I get a default key? I can't generate one with this particular model, there's not "generate" button.



    ca.jpg
    Last edited by Guest; 10-24-2011, 10:59 PM. Reason: update
  • aodtech
    Trusted Tech

    100+ Posts
    • Nov 2007
    • 194

    #2
    Re: iR2535i cannot scan to email

    AFAIK, this series does NOT support SSL or TLS. Nor can you change the port from it's default 25. You get what you pay for.

    Comment

    • teckat
      Field Supervisor

      Site Contributor
      10,000+ Posts
      • Jan 2010
      • 16083

      #3
      Re: iR2535i cannot scan to email

      imageRUNNER2545i/2545-Remote UI

      see pdf>>>>>>>>>>>

      Managing Key Pairs and Digital Certificates

      Key pairs and digital certificates can be used for security purposes, such as
      IEEE802.1X port-based authentication.
      You can manage key pairs and digital certificates from the Remote UI by dividing them into the following types:
      Key and Certificate
      In IEEE802.1X port-based authentication, a key pair (or a private key and
      certificate) in PKCS#12 format is required for enabling the EAP-TLS method on
      the client device. Up to three key pairs can be registered.
      CA Certificate
      CA certificates are used for verifying the digital certificates sent from other
      devices, such as servers, client computers, etc. Up to 10 CA certificates
      (including the pre-installed CA certificate) can be registered.
      IMPORTANT
      •Certificates must meet the following requirements:
      - Format: X.509 version 1 or version 3 (DER encoded binary)
      - Signature algorithm: SHA1-RSA, MD5-RSA, or MD2-RSA (For CA certificates,
      SHA1-DSA is also allowed.)
      - Key length: 512 bits or 1024 bits (RSA)/2048 bits (DSA)
      - File extension: ‘.p12’ (for key pair files)/‘.cer’ (for CA certificate files)
      • The machine does not use certificate revocation list (CRL) for verifying digital
      certificates.
      • Self-signed certificates are not supported.
      The Certificate Settings are available only when the Remote UI is in the System Manager Mode.

      Installing and Registering a Key and Certificate/ OPEN RUI>
      Click [Add.Func.] [Settings] in the [Add.Func.] menu.
      Click [TCP/IP Settings]
      Scroll the page until [Certificate Settings] appears >click [Key and Certificate Settings].
      Click [Register Key and Certificate].
      To install a new key and certificate:Click [Install].
      Click [Browse] select the file to install click [Start Installation].
      The Remote UI starts installing the key and certificate and when it is complete, the page returns to the Register Key and Certificate page.-The Remote UI starts installing the key and certificate and when it is complete, the page returns to the Register Key and Certificate page.
      The maximum number of characters that you can enter for the file name is 24 (including the file extension)

      To register the key and certificate:
      To register the key and certificate:
      Click [ ] (Select) next to the file you want to register [Register].
      Enter the key name and password (up to 24 characters respectively) click [OK].
      The Remote UI starts registering the key and certificate and when it is complete, the page returns to the Register Key and Certificate page.
      **Knowledge is time consuming, exhausting and costly for a trained Tech.**

      Comment

      • teckat
        Field Supervisor

        Site Contributor
        10,000+ Posts
        • Jan 2010
        • 16083

        #4
        Re: iR2535i cannot scan to email

        imageRUNNER2545i/2545-Remote UI

        Installing and Registering a CA Certificate

        Install a CA certificate in the machine as described below. You can also register the CA certificate or delete unnecessary certificate files.
        OPEN RUI>
        Click [Add.Func.] [Settings] in the [Add.Func.] menu.
        Click [TCP/IP Settings]
        Scroll the page until [Certificate Settings] appears click [CA Certificate Settings].
        Click [Register CA Certificate].
        To install a new CA certificate:Click [Install].
        Click [Browse]select the file to install click [Start Installation].
        The Remote UI starts installing the CA certificate and when it is complete, the page returns to the Register CA Certificate page.
        The maximum number of characters that you can enter for the file name is 24 (including the file extension ‘.cer’).
        To register the CA certificate:
        Click [ ] (Select) next to the file you want to register [Register].
        The Remote UI starts registering the CA certificate and when it is complete, the page returns to the CA Certificate Settings page.
        Restart the machine.
        Turn OFF the machine, wait at least 10 seconds, and then turn it ON.
        **Knowledge is time consuming, exhausting and costly for a trained Tech.**

        Comment

        • bubbafet

          #5
          Re: iR2535i cannot scan to email

          The key thing here, is that I don't have a certificate to install. I'm getting the feeling I'll have to rent a new model.

          Comment

          • bubbafet

            #6
            Re: iR2535i cannot scan to email

            Originally posted by aodtech
            AFAIK, this series does NOT support SSL or TLS. Nor can you change the port from it's default 25. You get what you pay for.
            I was told today that TLS was a yes, but it wouldn't support SSL. I'm now finding out that a printer tech will need to enable a service, EDRS I believe, before the CA certificate would even appear. I couldn't Google that acronym, so don't quote me on that.

            If I wish really hard, it will fix itself. Otherwise, we may need the help of a magical Canon fairy.

            Comment

            • teckat
              Field Supervisor

              Site Contributor
              10,000+ Posts
              • Jan 2010
              • 16083

              #7
              Re: iR2535i cannot scan to email

              Originally posted by bubbafet
              I was told today that TLS was a yes, but it wouldn't support SSL. I'm now finding out that a printer tech will need to enable a service, EDRS I believe, before the CA certificate would even appear. I couldn't Google that acronym, so don't quote me on that.

              If I wish really hard, it will fix itself. Otherwise, we may need the help of a magical Canon fairy.

              did u read the RUI Manual link I posted
              **Knowledge is time consuming, exhausting and costly for a trained Tech.**

              Comment

              • bubbafet

                #8
                Re: iR2535i cannot scan to email

                I saw this:

                Key and Certificate
                In IEEE802.1X port-based authentication, a key pair (or a private key and
                certificate) in PKCS#12 format is required for enabling the EAP-TLS method on
                the client device. Up to three key pairs can be registered.

                I was not physically present when the printer tech was muddling through the settings. He reported back to me saying that TLS was not supported and we'd need another model. I can plainly see here that it is supported, and he couldn't figure it out.

                Thanks all, but we can discontinue this thread. I will be more mindful of these settings in the future.

                Last edited by Guest; 11-14-2011, 05:34 PM.

                Comment

                • teckat
                  Field Supervisor

                  Site Contributor
                  10,000+ Posts
                  • Jan 2010
                  • 16083

                  #9
                  Re: iR2535i cannot scan to email

                  Originally posted by bubbafet
                  I read it. It didn't help. I actually read the PDF before posting here. I finally got the printer tech out to do all of that (in system manager mode), to no avail.

                  The issue has been closed and a new printer is being brought out to our campus. Canon, via an RJYoung tech, reported that TLS was not supported on this model. So, anyone having trouble scanning to an Exchange 2007 email server, that may be your problem. My suggestion is to use a packet sniffing tool, such as Microsoft's Network Monitor, to reveal the problem. You should see a "start TLS" session from the Server, with no response from the printer. This was the indicator that proved TLS was not supported; we just needed to hear it from Canon.

                  Thanks for all the help aodtech and teckat.


                  FYI TO ANYONE READING THIS: This model does not support TLS and will not send scan's to a 2007 exchange server (via hub transport).


                  FTB
                  Windows 2000/2003/ Server
                  Windows Vista/Server 2008-Windows 7/Server 2008 R2

                  Windows (SMB)

                  Windows 2000/XP/Vista/7/
                  Server 2003/Server 2008





                  TLS Encryption Protocol Support for Canon Devices
                  The following Canon devices support TLS encryption Protocol:
                  -ALL imageRUNNER ADVANCE Series
                  -imageRUNNER 2535 / 2545 / 3225 / 3230 / 3235 / 3245
                  -imageRUNNER C1030 / C1030i
                  **Knowledge is time consuming, exhausting and costly for a trained Tech.**

                  Comment

                  • Mikael.Valkeinen

                    #10
                    Re: iR2535i cannot scan to email

                    Originally posted by bubbafet
                    When trying to send an email, the session times out after a minute and prints an TX error page (ND 0753). I've looked up the error and it just doesn't make sense. The users can print to the printer, copy, fax, scan, but not scan to e-mail.

                    Background:

                    The printer is on a TCP/IP network and it communicates with our Exchange server (2007). The printer is configured by DCHP. The users print via a Windows print server, and scan to our exchange server

                    A typical setup includes inputting the Server IP in the printer and using Hub Transport on the Exchange server. We typically leave all major setting blank, and only input reference data like the Host name, device location, and etc. We also add all of the users to an address book. We really don't change much. We do not require authentication, all Exchange does is forward the incoming mail to the correct user or user listed in the address book.


                    Update: We used "Network Monitor" to capture traffic to the Exchange server. In "blue" you will notice the client was not authenticated. TLS is involved in the authentication of the traffic, and we are figuring it has something to do with CA (certificate authority). However, unlike the other image runners we have, this little sucker came without a "default key"; how fortunate.

                    6366 2:45:22 PM 10/21/2011 56.0144993 edgetransport.exe RYPES04 172.19.8.145 SMTP SMTP:Rsp 530 5.7.1 Client was not authenticated, 40 bytes {TCP:364, IPv4:112}


                    How would I get a default key? I can't generate one with this particular model, there's not "generate" button.

                    Hi,

                    did you manage to solve this? I have the same issue with one of my customers machines'.

                    Comment

                    • SAZ911
                      Trusted Tech

                      100+ Posts
                      • Mar 2013
                      • 193

                      #11
                      Re: iR2535i cannot scan to email

                      Originally posted by Mikael.Valkeinen
                      Hi,

                      did you manage to solve this? I have the same issue with one of my customers machines'.
                      hi,

                      what # code do you get when you look at your send log in the system monitor.

                      SYSTEM MONITOR > SEND > LOG > (select the last scan to mail job that failed) > DETAILS...... at the top of the page there will be a code that starts with a #

                      ????
                      SAZ911..........

                      Comment

                      • Mikael.Valkeinen

                        #12
                        Re: iR2535i cannot scan to email

                        Before I started to toy around about I only got 752, however I'm currently getting 810.

                        Comment

                        • SAZ911
                          Trusted Tech

                          100+ Posts
                          • Mar 2013
                          • 193

                          #13
                          Re: iR2535i cannot scan to email

                          Originally posted by Mikael.Valkeinen
                          Before I started to toy around about I only got 752, however I'm currently getting 810.
                          HI MIKAEL,

                          It looks like we have a DNS / SMTP connection error, both codes seem to refer to the same problem. I have attached two images with the error codes. I recommend that you run the setting by the administrator of the network your are trying to scan to mail on, it should be easy once the settings given are correct.

                          make sure these settings are correct:

                          IP ADRESS:
                          SUBNET MASK:
                          DEFAULT GATEWAY:


                          PRI DNS:
                          SECONADARY DNS:
                          (OPTIONAL) as long as the primary works fine

                          DOMAIN NAME:

                          SMTP: (mail server address or name) but IP works better
                          EMAIL ADDRESS: (a valid and functioning email address) preferably with no authentication but if they insist you can get the user name and password from the administrator

                          752.JPG
                          810.JPG

                          hope this helps,

                          regards,
                          saz
                          SAZ911..........

                          Comment

                          • Mikael.Valkeinen

                            #14
                            Re: iR2535i cannot scan to email

                            Hi, thanks for your reply.

                            I've entered all information regarding their local network correctly into the machine, however (I should've mentioned this earlier, sorry!) they seem cheap and would like to use Gmail. This seems to be a problem when Gmail wants to use SSL or TLS over port 465 when port 25 is the only option to my understanding (on this machine that is), correct me if I'm wrong!

                            Would it be possible with Gmail over port 465 or do they have to use SMTP over port 25? I've failed to find information about which ports and certificates this machine supports both in SIMS and Partnernet.

                            Please advise.

                            Comment

                            • SAZ911
                              Trusted Tech

                              100+ Posts
                              • Mar 2013
                              • 193

                              #15
                              Re: iR2535i cannot scan to email

                              Originally posted by Mikael.Valkeinen
                              Hi, thanks for your reply.

                              I've entered all information regarding their local network correctly into the machine, however (I should've mentioned this earlier, sorry!) they seem cheap and would like to use Gmail. This seems to be a problem when Gmail wants to use SSL or TLS over port 465 when port 25 is the only option to my understanding (on this machine that is), correct me if I'm wrong!

                              Would it be possible with Gmail over port 465 or do they have to use SMTP over port 25? I've failed to find information about which ports and certificates this machine supports both in SIMS and Partnernet.

                              Please advise.
                              hi mikael,

                              To be honest i cant tell you about setting it up via gmail. it always seems to be a problem, and i have only ever setup one before successfully on an IR1024IF and it was a couple of years ago. The port for gmail is 465 and should just work but doesn't. Honestly i just convince my customers to scan to file rather,.... or purchase a exchange server.... (this usually gets them on your side regarding scan to file).

                              sorry couldn't be of more assistance, but ill try get some info for you....

                              regards...
                              SAZ911..........

                              Comment

                              Working...