Issue

When saving scanned documents to the Save to SharePoint feature using SharePoint Online on HP LaserJet Enterprise Flow Multifunction Printers (MFPs), the following message “Server connection or certificates error” displays and the documents are not saved in SharePoint Online”

This issue applies to the following HP LaserJet Flow MFPs with FutureSmart firmware version 3.4:

HP LaserJet Enterprise flow MFP M525
HP LaserJet Enterprise color flow MFP M575
HP Color LaserJet Enterprise Flow MFP M680
HP LaserJet Enterprise flow M830 Multifunction Printer
HP Officejet Enterprise Color Flow MFP X585

SharePoint Online is a Microsoft cloud-based service available with Office 365 Business and Enterprise plans.

Cause

This issue occurs when the FutureSmart firmware version 3.4 does not include the certificate required to validate the SharePoint Online server.

HP LaserJet Enterprise Flow MFPs with FutureSmart firmware version 3.4 have included CA certificates required to validate the most popular email services (Gmail, Yahoo, Office 365,), but these certificates do not validate the SharePoint Online servers. The certificates to validate the SharePoint Online servers will be included in future firmware versions.

Though FutureSmart firmware version 3.4 does not have the certificate required to validate the SharePoint Online server, it will still secure its communications with encryption.

Solution

To resolve the issue, follow one of the following methods:

Method 1: Obtain a valid certificate from Windows and import the certificate into the MFP
- Step One: Obtain a valid certificate from Windows
- Step Two: Import the certificate into the MFP
Method 2: Disable the server validation in Save to SharePoint

Method 1: Obtain a valid certificate from Windows and import the certificate into the MFP

Follow these steps to obtain and import the certificates into the MFP:

Step One: Obtain a valid certificate from Windows

Make sure to have Internet access, and then follow these steps to obtain the certificate:

Open Internet Explorer.
Click on the Tools menu, and then select Internet Options.
Select the Content tab, and then click Certificates.
On the Certificates window, select the Trusted Root Certificates tab.
Under the Issued To column, select Baltimore CyberTrust Root, and then click Export.
1: Obtaining Certificates from Windows
On the Certificate Export Wizard, click Next.
Select the DER encoded binary X.509 (.CER) option, and then click Next.
Type the SharePoint destination path, filename, and then click Next.
Click Finish, and then click OK.

The exported file can be installed in the LaserJet Enterpriser Flow MFP to validate the SharePoint Online servers.

Step Two: Import the certificate into the MFP

Follow these steps to import the obtained certificate into the MFP:

Obtain the IP address from the printer.
1. From the Home screen on the printer's control panel, touch the Network button ().
2. On the How to Connect screen, the IPv4 Address displays the IP Address of the printer.
3. Touch Print.
Open a supported web browser, type the IP Address obtained from the How to Connect screen in the address/URL field, and then press Enter to open the EWS.
Click Continue to this website (not recommended). Type a password to login the EWS, if required.
Select the Security tab, and then select Certificate Management from the left pane.
Under the Install Certificates section, click Browse, select the exported certificate file, and then clickImport.
Make sure that the Baltimore CyberTrust Root certificate displays in the Certificate section.
2: Certificate Management

Method 2: Disable the server validation in Save to SharePoint

This method is not recommended. Though the scanned data sent will be encrypted, there is no validation that the server receiving the scans is the intended server. This method should only be used as an interim measure until the proper certificate can be loaded.

Follow these steps to disable the server validation in SharePoint:

Obtain the IP address from the printer.
1. From the Home screen on the printer's control panel, touch the Network button ().
2. On the How to Connect screen, the IPv4 Address displays the IP Address of the printer.
3. Touch Print.
Open a supported web browser, type the IP Address obtained from the How to Connect screen in the address/URL field, and then press Enter to open the EWS.
Click Continue to this website (not recommended). Type a password to login the EWS, if required.
Click the Scan/Digital Send tab, and then select the Save to SharePoint from the left pane.
In the Settings section, click to clear the Validate certificates for outgoing server connections check box.
Click Apply.
3: Save to SharePoint