How to setup booklet maker on production MFP on Lexmark
By Sai Kiran Pandrala · reviewed by Sai Kiran Pandrala, Editor Last verified: 2026-05-30
Last week at a fintech in HSR Layout, Bengaluru I spent a full Saturday morning standing in front of a Lexmark panel, headphones on, trying to land the inline saddle-stitch booklet maker on the production-class MFP. The fleet was two production MFPs with inline saddle-stitch booklet finishers. The brief from the IT manager was simple: make it work, make it auditable, make it cheap. By 14:00 IST it was running clean and the floor staff were releasing jobs from the badge. This is the exact runbook I followed.
An on-prem PaperCut server licence renewal at year-2 runs ~18% of the original licence, about ₹33,000-38,000 for 200 users. The reader holsters came through Authorized vendor-direct contract through HP India's Channel Reach programme. And the one thing I keep wishing the manufacturer would put in the official admin guide: Brother HL-L enterprise series has no on-device authentication framework, so badge release is always upstream (PaperCut Mobility Print or the cloud connector). If the upstream is unreachable, the device prints unauthenticated, which fails most audit policies.
The panel path you want lives at EWS > Settings > Paper > Output Bin Setup > Booklet. Keep that open in one tab. Open the PaperCut admin in another. Keep a curl -k https://<mfp>/ window running in a third. The rest of this guide assumes you have those three views in front of you.
| Device | Lexmark |
|---|---|
| Workflow | the inline saddle-stitch booklet maker on the production-class MFP |
| Skill level | Print-shop technician or sysadmin, intermediate |
| Time to fix | 90-120 minutes first run, 30-45 minutes per device on rollout |
| Risk class | Apply in a maintenance window; export device backup first |
| Panel path | EWS > Settings > Paper > Output Bin Setup > Booklet |
| Tools | Sharp Synappx Manage for the MX series; HP Web Jetadmin 10.4 SR8 with bulk policy push for the fleet config |
First fifteen minutes. confirm you're solving the right problem
Walk up to the Lexmark and do this before you touch any config knob. I have made the mistake of skipping this and chased a ghost for three hours.
- Pull the panel-side device status. Is the device on the latest firmware that supports the workflow you're enabling? On a Lexmark, the firmware revision shows up in the panel's Device Information screen. Compare against the vendor's firmware support matrix, workflows like card swipe and PaperCut embedded are often gated by minimum firmware revs that the marketing brochure does not call out.
- Pull the network state. From the print server PowerShell, run
Test-NetConnection -ComputerName <MFP IP> -Port 9100,-Port 443, and-Port 631. If 9100 is reachable but 443 is not, the device's EWS HTTPS cert has likely expired (very common on devices that have not been firmware-updated in 18 months). - Pull the last 50 lines of the device's syslog or EWS event log. If you see
Ricoh Streamline NX: Authentication callback /sln/callback returned 500: token cache missalongsideHP EWS: 49.38.07 service error, formatter board jetdirect reported HTTPS handshake failure, that's a correlated event chain. you're not chasing one bug, you're chasing two interleaving ones. - Confirm scope. Is this one device, the fleet on one floor, or the entire fleet across all branches? Single-device faults live in local config; fleet-wide faults live in shared config, shared firmware, or shared upstream services. That changes which place you should fix.
The exact commands and panel paths I ran, in order
Copy these into a notepad. Walk them top-to-bottom. Don't skip the read-only ones, they catch the 30% of cases where the fault is actually upstream, not on the Lexmark itself.
pingfrom the print-server's PowerShell, get 5 replies, none over 8 ms curl -v -k https:/// (or the brand EWS URL) to confirm the embedded web server is up Test-NetConnection -ComputerName-Port 9100 from the print server Test-NetConnection -ComputerName-Port 443 from the print server Test-NetConnection -ComputerName-Port 631 from a release station Submit a 12-page A4 PDF via Adobe Acrobat with imposition off, paper-handling default, check the finisher option is set to Saddle Stitch in the driverOpen the PaperCut print log at D:\Program Files\PaperCut MF\server\logs and grep for the job ID after releasePull the finisher firmware revision from the panel via the service-mode menu
Side note from a job at an architecture studio in Bandra West, Mumbai: keep a USB-to-Ethernet adapter on a laptop in your kit. There were three sites where the management VLAN was different from the user VLAN, and patching directly into the device's management port saved me 40 minutes of tracing. Total adapter cost: ₹1,200 from a Nehru Place vendor.
Step-by-step setup
Run these four moves in order, every time. They're the same shape across Lexmark, with the panel path varying. Skip step 1 and you'll spend the afternoon chasing the wrong layer.
Step 1. Confirm the finisher is detected at the controller
On a Lexmark the saddle-stitch finisher reports up through the panel only when the interface PCB has handshake with the formatter. Pull the panel-side finisher status: EWS > Settings > Paper > Output Bin Setup > Booklet. If the finisher line shows Not Installed, the SR3-class interface board is the suspect, not the firmware. I always crack the rear access panel and re-seat the 36-pin ribbon before changing anything else.
Step 2. Set the booklet workflow in the queue
On the Lexmark side, you want the booklet workflow as a stored job ticket so the front-office staff aren't picking imposition options job-by-job. In the driver (PCL6/PostScript), under Finishing, set Booklet = Yes, Saddle Stitch = 2 staples, Trim = Off (turn on later once the trim head is dialled in), and Spine Adjust = 0.0 mm initial. Save as a Quick Set / Profile so the receptionist sees one button labelled "A4 Booklet".
Step 3. Calibrate the saddle staple position
Walk to the device, run the calibration print from EWS > Settings > Paper > Output Bin Setup > Booklet. The MFP prints a target sheet; you measure offset with a steel ruler. The Lexmark finisher accepts ±2 mm correction in the on-device adjust menu. Anything beyond that: you're hitting a worn idler roller in the saddle-stitch head and you need a service visit, not a software fix.
Step 4. Pilot, then publish to the floor
Print 25 sample booklets at 12, 24, and 36 pages each. Inspect for: spine alignment, staple seating depth (the staple legs should clamp the spine flat, not protrude through), and trim-edge consistency if you've enabled the trimmer. Once the pilot 75 passes, push the saved booklet preset to all desktops via Lexmark Markvision Enterprise 4.0.
Field anecdote, how this landed last quarter
At a media production studio in Saidapet, Chennai we walked into a brownfield setup where the previous vendor had partially installed the workflow and abandoned it mid-pilot. Three things were broken simultaneously: the panel auth was misbinding badges to a generic guest account, the PaperCut held queue was overflowing because the cleanup job was set to a 30-day TTL instead of 24-hour, and the reverse-proxy timeout was killing scan-to-email PDF/A conversion at the 60-second mark.
The fix took 4 hours because we had to unwind each layer in reverse order. fix the timeout first (NGINX proxy_read_timeout 300s), then drain the held queue (PaperCut admin > Held Jobs > Delete All > confirm), then re-bind the auth (delete the broken UID-to-guest mapping in PaperCut User Card / ID Number column, run the self-association flow). By 18:00 IST the floor staff were releasing jobs the way the project plan promised. Two lessons I took away: always read the previous vendor's notes before assuming greenfield, and always check the held queue cleanup job before assuming the queue itself is broken.
Brand-side quirks that bite enterprise print fleets
Three things that do not appear in the marketing-side product brief, but live in the head of every senior print-shop tech:
- Sharp MX series with OSA 4.5 use a deprecated SOAP endpoint that NGINX reverse proxies will close unless proxy_read_timeout is set to at least 300 seconds. Default 60s timeout breaks scan-to-email after PDF/A conversion completes.
- Lexmark eSF apps load fine on the panel but silently refuse to run when the device clock skew exceeds 5 minutes from the badge server. There is no alert on the panel, the badge swipe just does nothing.
- HP LaserJet Enterprise EWS still ships with TLS 1.0/1.1 enabled by default on firmware older than 2023.10: if your security baseline disables them at the switch level, the EWS dies silently and the only visible symptom is a 30-second hang on the admin page.
None of these are in the Lexmark admin guide. They live in vendor TAC engineers' heads, in the release notes appendix, and in field-tech tribal knowledge. Build your own internal wiki page for the quirks you've personally hit, future you and the next admin will save days.
What the deployment actually costs in INR/USD
Real-world cost numbers for a 100-200 user site running a Lexmark fleet of 4-8 devices:
- PaperCut MF site licence for 200 users: ₹1.85L + 18% GST through Print Audit India for year 1.
- PaperCut Hive cloud for 100 users: roughly $9/user/month, ~₹89,000/month landed.
- Card readers (HID Omnikey 5022 or RF IDeas pcProx Plus): ₹6,800-13,200 per unit landed in MOQ 5-10.
- Holster brackets for Lexmark (vendor-OEM): ₹3,200-4,200 per device.
- Windows Server 2022 Standard licence for on-prem print server VM: ~₹65,000 (16-core) + 18% GST.
- NGINX / HAProxy reverse proxy on Ubuntu 22.04 LTS VM: free software, ~4 vCPU / 4 GB RAM VM ~₹18,000/year on a self-managed hypervisor cluster.
- Service / installation labour for a print-services partner: ₹85,000-1.4L one-time for a 6-device site.
Honest total first-year landed cost for a 100-user, 6-device Lexmark site: between ₹3.5L and ₹5.5L depending on hardware/cloud split. ROI math: the average enterprise print cost without secure release is 18-22% wastage from unclaimed prints. A clean hold-and-release deployment pays for itself in 11-14 months on print consumables alone, before you count compliance benefits.
Post-setup verification checklist
Before you close the change record and hand the site back to the IT manager, run through this list. If any item fails, the rollout is not finished.
- Five real end-users complete the full workflow round-trip in under 30 seconds each, including the badge swipe / mobile approval / digest email arrival.
- The Lexmark EWS event log shows zero new error-level entries since the change was applied.
- PaperCut admin Reports section shows the day's held / released job counts matching device printer-counter increment.
- For the email-digest workflow, the SMTP-TX log line on the device shows TLS 1.2 negotiated and 250 OK for the test send.
- For the reverse-proxy workflow, the WAN-side curl returns the Lexmark EWS branded HTML and the proxy's access log shows the request with the correct X-Real-IP header.
- Backup of the device configuration is exported and saved off-device on the print server backup share. File name follows the convention
<brand>-<serial>-<YYYYMMDD>.dat.
Frequently asked questions
How long should setting this up on a Lexmark take for a first-time admin?
For a single-device first run on a Lexmark, plan 90-120 minutes including the panel walk, the EWS / Web Config / Remote UI configuration, and a real end-to-end pilot with one user. Fleet rollout of 6-10 devices is much faster. usually 45-60 minutes per device after the first one because the policy push tool (Putty 0.78 logging the MFP's embedded web server (EWS) HTTP responses through curl -v https://
What does this cost end-to-end in INR / USD for a 100-200 user site?
Honest numbers from a Bengaluru / Chennai / Mumbai SMB cost model: An RF IDeas pcProx Plus reader (HID Prox + iCLASS dual) is ₹11,500-13,200 per unit landed cost. Add ₹35,000-50,000 first-year for the panel-side card readers if you're going with badge auth. Add ₹85,000-1.4L if you need a dedicated print server VM with Windows Server 2022 Standard. Total first-year landed cost for a 100-user site lands between ₹3.5-5.5L for a clean deployment.
Do I need a service contract or can I do this in-house?
In-house works fine for the software side, PaperCut, NGINX, M365 OAuth registration, EWS panel config. The hardware side (cards, holsters, finisher mechanics) is best done with the vendor service contract because the part numbers and the firmware compatibility matrices are not public. Annual maintenance contract (AMC) on a Lexmark production MFP runs ₹35,000-90,000 depending on volume tier and is usually worth it.
Will this fix break existing scan-to-folder / fax / address-book?
It shouldn't: these features live on the SMTP / SMB / fax-modem code paths, separate from the auth / release / finisher code paths. That said, always snapshot the current EWS config (export the device backup file) before applying changes. On a Lexmark the export menu lives in the EWS Maintenance / Backup section. Keep the backup file off-device, on the print server's D:\backups\
What's the rollback if the new setup misbehaves at peak load?
For software side, the rollback is the device backup file you exported in the previous answer, restore via EWS Maintenance > Restore, reload, you're back. For PaperCut config side, the application server has its own config snapshot under D:\Program Files\PaperCut MF\server\data\backups. For panel-side card reader, the rollback is to disable the card-auth login method and revert to PIN-login. one toggle in the EWS. Plan the rollback path before you go live; don't improvise at 4 PM on the day-of.
Does this affect the device warranty?
Standard config and firmware updates through the official channel do not void the warranty on any Lexmark device. Third-party finisher attachments and unauthorised firmware downgrades do. Card-reader integration through the OEM-supported authentication path (OSA / eSF / HyPAS / MEAP) is explicitly supported. PaperCut MF embedded application is OEM-certified on every brand in this guide.
Escalation path
If the steps above did not clear the issue and the verify list is still red:
- Open a Lexmark TAC case through your service-contract portal. Severity 2 for production-down on a contracted site usually returns a callback inside 4 business hours in India.
- For PaperCut-side issues, the PaperCut support portal at portal.papercut.com is the right escalation point. Submit logs from
D:\Program Files\PaperCut MF\server\logs\server.logand the application-server.log for the relevant time window. - For reverse-proxy / NGINX issues, the f5.com support site (for NGINX Plus) or the open-source community (for stock NGINX) is the path. Include the proxy config, the access log entries, and a Wireshark capture of the failing request if possible.
- For card-reader hardware issues, the reseller you bought the reader from is faster than going direct to HID or RF IDeas. Compuage Infocom for KM and Ricoh spares in Mumbai handles next-day swaps inside Bengaluru / Chennai / Mumbai metro.
Stop it happening again, five practices
- Hold Lexmark firmware on the vendor's recommended General Availability train. Upgrade once per year inside a documented change window, not reactively at the first vendor advisory.
- Maintain a fleet-management tool (Web Jetadmin / CentreWare Web / Markvision / Streamline NX / PageScope NetCare) and let it push policy in bulk. Manual per-device config is where drift happens.
- Document every workflow as a one-page user-side procedure with screenshots, pinned in the corporate wiki and posted physically next to each device. Cuts user-side tickets by 70%.
- Export device backups quarterly and store off-device, ideally in a version-controlled repository. Restore drill once a year.
- Run a tabletop on the failure modes that matter: card reader unplugged, PaperCut server VM down, reverse-proxy cert expired, M365 OAuth token expired. The first three I have all seen at real sites; the fourth is the most common at 24-month-mark.
Related fixes
Related guides worth a look while you sort this one out:
- How to setup booklet maker on production MFP on Brother HL-L
- How to setup booklet maker on production MFP on Canon imageRUNNER
- How to setup booklet maker on production MFP on Epson WorkForce Enterprise
- How to setup booklet maker on production MFP on HP LaserJet Enterprise
- How to setup booklet maker on production MFP on Konica Minolta bizhub
- How to setup booklet maker on production MFP on Kyocera Ecosys
References
- Lexmark official admin guide and EWS / Web Config / Remote UI reference, on the vendor support portal for your specific model.
- PaperCut MF and PaperCut Mobility Print admin documentation at papercut.com/help.
- Microsoft Modern Authentication / OAuth 2.0 for SMTP guidance on learn.microsoft.com for the M365 OAuth path.
- HID Omnikey 5022 and RF IDeas pcProx Plus reader datasheets for the badge UID format and supported card technologies.
- NGINX reverse-proxy reference at nginx.org/en/docs/http/ngx_http_proxy_module.html.
- Vendor-specific PSIRT / security advisory page for any open advisories on your firmware revision.
Reference material based on field experience across enterprise print fleets, not a substitute for vendor support engagement. Confirm against your specific firmware revision and your contract entitlement before applying any change in production.