Network Prerequisites – CMprint / PrinterKiosk / Cartadis’n Pay / Adyen UX410
Network Requirements — CMprint / PrinterKiosk
Inbound and outbound traffic rules required for the Cartadis solution to operate correctly.
?
Upgrading to CMprint 2.0 — Network Prerequisites changes required BEFORE the update
CMprint 2.0 introduces a new communication architecture with Cartadis servers. Firewall rules must be updated before proceeding with any terminal upgrade.
If these traffic rules are not opened before the update:
- The terminal loses its connection to the PrinterKiosk servers — no transactions can be processed, the kiosk is completely out of service.
- Cartadis monitoring is cut off — no alerts are raised, the incident goes undetected until reported by the end customer.
⏱ Allow 24 to 48 hours for the customer's network team to review and apply the new firewall rules before any on-site intervention.
CMprint 1.x PrinterKiosk outbound traffic
api.printerkiosk.com443, 7181, 10000
dev.printerkiosk.com443, 7181, 10000
CMprint 2.0+ New rules to open
api-ng.printerkiosk.com443 ✦ NEW
api-ng.printerkiosk.org443 ✦ NEW
*.printerkiosk.com443 ✦ NEW
sanitizer1.printerkiosk.com443 ✦ NEW
sanitizer1.printerkiosk.org443 ✦ NEW
monitor.cartadis.com443 ✦ NEW
✅ Pre-migration checklist — Verify all items before upgrading to CMprint 2.0
☐ Allow
api-ng.printerkiosk.com:443☐ Allow
api-ng.printerkiosk.org:443☐ Allow
*.printerkiosk.com:443☐ Allow
sanitizer1.printerkiosk.com:443☐ Allow
sanitizer1.printerkiosk.org:443☐ Allow
monitor.cartadis.com:443☐ Connectivity test validated by the network admin
☐ Written confirmation received before on-site intervention
⚠️
CB Option — CartadisNPay The network modem must have an active DHCP server.
CMprint version firmware : 1.x
Network traffic applicable to terminals running CMprint version 1.x.↑ 1. Outbound Network Traffic
PRODUCTION
| Usage | Domain / IP | Port(s) | Proto |
|---|---|---|---|
| PrinterKiosk | api.printerkiosk.com | 443, 7181, 10000 | TCP |
| Cartadis'n Pay | capture.cartadisnpay.com | 8443 | TCP |
| Digital receipt / Scan to smartphone | archives.cartadis.com | 443 | TCP |
| Cartadis VPN (Support) | 51.38.189.192 | 1194 | UDP |
| NTP — CMprint (systemd-timesyncd) | 0.debian.pool.ntp.org | 123 | UDP |
| NTP — CMprint (systemd-timesyncd) | 1.debian.pool.ntp.org | 123 | UDP |
| NTP — CMprint (systemd-timesyncd) | 2.debian.pool.ntp.org | 123 | UDP |
| NTP — CMprint (systemd-timesyncd) | 3.debian.pool.ntp.org | 123 | UDP |
| DNS (domain resolution) | Network DNS server | 53 | UDP/TCP |
PRE-PRODUCTION
| Usage | Domain / IP | Port(s) | Proto |
|---|---|---|---|
| PrinterKiosk — Pre-production | dev.printerkiosk.com | 443, 7181, 10000 | TCP |
| Cartadis'n Pay — Pre-production | capture-dev.cartadisnpay.com | 8443 | TCP |
↓ 2. Local Traffic (Inbound to CMprint)
| Usage | Domain / IP | Port(s) | Proto |
|---|---|---|---|
| SSH (Support) | Internal network or support IP | 22 | TCP |
| VNC (Support) | Internal network or support IP | 5900 | TCP |
⇄ 3. Bidirectional Traffic (CMprint ↔ Payment terminal)
ℹ️ Bidirectional communication between CMprint and the CartadisNPay payment terminal using the NEXO protocol.
| Usage | Domain / IP | Port(s) | Proto |
|---|---|---|---|
| NEXO Protocol (CartadisNPay) | CartadisNPay payment terminal | 8443 | TCP |
↑ 4. Outbound Traffic — CartadisNPay Terminal (UX410)
ℹ️ The CartadisNPay terminal (UX410) communicates directly with Adyen servers and synchronises its clock via NTP, independently of CMprint.
⚠️
MAC address-based authorisation required The UX410 terminal is configured in DHCP mode; its IP address is not static. Firewall rules allowing traffic to
*.adyen.com, *.adyenpayments.com and pool.ntp.org must be applied to the terminal's MAC address, not its IP address.| Usage | Domain / IP | Port(s) | Proto |
|---|---|---|---|
| Adyen UX410 payment terminal | *.adyen.com | 443, 8443 | TCP |
| Adyen UX410 payment terminal | *.adyenpayments.com | 443, 8443 | TCP |
| NTP — CartadisNPay terminal (UX410) | pool.ntp.org | 123 | UDP |
⇄ 5. Printer / MFP Connectivity
ℹ️ Only one print protocol should be allowed, based on the chosen configuration.
Print protocols (Print function)
| Usage | Domain / IP | Port(s) | Proto |
|---|---|---|---|
| IPP | MFP | 631 | TCP |
| IPPS (Secure IPP) | MFP | 443 | TCP |
| LPD / LPR | MFP | 515 | TCP |
| HP JetDirect / AppSocket | MFP | 9100 | TCP |
Scan ports — Bidirectional communication CMprint ↔ MFP
| Usage | Domain / IP | HTTP Port | HTTPS Port | Proto |
|---|---|---|---|---|
| Scan — Ricoh | Ricoh MFP | 80 | 443 | TCP |
| Scan — HP | HP MFP | 80 | 443 | TCP |
| Scan — Lexmark | Lexmark MFP | 80 | 443 | TCP |
| Scan — Sharp | Sharp MFP | 80 | 443 | TCP |
| Scan — Kyocera | Kyocera MFP | 9090, 9095 | 9091, 9096 | TCP |
| Scan — Konica Minolta | Konica Minolta MFP | 8081 | 8082 | TCP |
| Scan — Xerox | Xerox MFP | 80 | 443 | TCP |
| Scan — Canon | Canon MFP | 80 | 443 | TCP |
| Scan — Toshiba | Toshiba MFP | 80 | 443, 10443 | TCP |
| Scan — Brother | Brother MFP | 80 | 443 | TCP |
CMprint version frimware : 2.0+
Complete network traffic reference applicable from version 2.0 onwards.↑ 1. Outbound Network Traffic
PRODUCTION
| Usage | Domain / IP | Port(s) | Proto |
|---|---|---|---|
| PrinterKiosk — API NG | api-ng.printerkiosk.com | 443 | TCP |
| PrinterKiosk — Wildcard | *.printerkiosk.com | 443 | TCP |
| PrinterKiosk — Sanitizer | sanitizer1.printerkiosk.com | 443 | TCP |
| PrinterKiosk — API | api.printerkiosk.com | 443, 7181, 10000 | TCP |
| Cartadis'n Pay | capture.cartadisnpay.com | 8443 | TCP |
| Cartadis Monitoring | monitor.cartadis.com | 443 | TCP |
| Digital receipt / Scan to smartphone | archives.cartadis.com | 443 | TCP |
| Cartadis VPN (Support) | 51.38.189.192 | 1194 | UDP |
| NTP — CMprint (systemd-timesyncd) | 0.debian.pool.ntp.org | 123 | UDP |
| NTP — CMprint (systemd-timesyncd) | 1.debian.pool.ntp.org | 123 | UDP |
| NTP — CMprint (systemd-timesyncd) | 2.debian.pool.ntp.org | 123 | UDP |
| NTP — CMprint (systemd-timesyncd) | 3.debian.pool.ntp.org | 123 | UDP |
| DNS (domain resolution) | Network DNS server | 53 | UDP/TCP |
PRE-PRODUCTION
| Usage | Domain / IP | Port(s) | Proto |
|---|---|---|---|
| PrinterKiosk — API NG Pre-production | api-ng.printerkiosk.org | 443 | TCP |
| PrinterKiosk — Wildcard (Prod & Pre-prod) | *.printerkiosk.com | 443 | TCP |
| PrinterKiosk — Sanitizer Pre-production | sanitizer1.printerkiosk.org | 443 | TCP |
DEMO
| Usage | Domain / IP | Port(s) | Proto |
|---|---|---|---|
| PrinterKiosk — Demo | dev.printerkiosk.com | 443, 7181, 10000 | TCP |
| Cartadis'n Pay — Demo | capture-dev.cartadisnpay.com | 8443 | TCP |
↓ 2. Local Traffic (Inbound to CMprint)
| Usage | Domain / IP | Port(s) | Proto |
|---|---|---|---|
| SSH (Support) | Internal network or support IP | 22 | TCP |
| VNC (Support) | Internal network or support IP | 5900 | TCP |
⇄ 3. Bidirectional Traffic (CMprint ↔ Payment terminal)
ℹ️ Bidirectional communication between CMprint and the CartadisNPay payment terminal using the NEXO protocol.
| Usage | Domain / IP | Port(s) | Proto |
|---|---|---|---|
| NEXO Protocol (CartadisNPay) | CartadisNPay payment terminal | 8443 | TCP |
↑ 4. Outbound Traffic — CartadisNPay Terminal (UX410)
⚠️
MAC address-based authorisation required The UX410 terminal is configured in DHCP mode; its IP address is not static. Firewall rules must be applied to the terminal's MAC address, not its IP address.
| Usage | Domain / IP | Port(s) | Proto |
|---|---|---|---|
| Adyen UX410 payment terminal | *.adyen.com | 443, 8443 | TCP |
| Adyen UX410 payment terminal | *.adyenpayments.com | 443, 8443 | TCP |
| NTP — CartadisNPay terminal (UX410) | pool.ntp.org | 123 | UDP |
⇄ 5. Printer / MFP Connectivity
ℹ️ Only one print protocol should be allowed, based on the chosen configuration.
Print protocols (Print function)
| Usage | Domain / IP | Port(s) | Proto |
|---|---|---|---|
| IPP | MFP | 631 | TCP |
| IPPS (Secure IPP) | MFP | 443 | TCP |
| LPD / LPR | MFP | 515 | TCP |
| HP JetDirect / AppSocket | MFP | 9100 | TCP |
Scan ports — Bidirectional communication CMprint ↔ MFP
| Usage | Domain / IP | HTTP Port | HTTPS Port | Proto |
|---|---|---|---|---|
| Scan — Ricoh | Ricoh MFP | 80 | 443 | TCP |
| Scan — HP | HP MFP | 80 | 443 | TCP |
| Scan — Lexmark | Lexmark MFP | 80 | 443 | TCP |
| Scan — Sharp | Sharp MFP | 80 | 443 | TCP |
| Scan — Kyocera | Kyocera MFP | 9090, 9095 | 9091, 9096 | TCP |
| Scan — Konica Minolta | Konica Minolta MFP | 8081 | 8082 | TCP |
| Scan — Xerox | Xerox MFP | 80 | 443 | TCP |
| Scan — Canon | Canon MFP | 80 | 443 | TCP |
| Scan — Toshiba | Toshiba MFP | 80 | 443, 10443 | TCP |
| Scan — Brother | Brother MFP | 80 | 443 | TCP |
Network Requirements CMprint / PrinterKiosk — Cartadis Support
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article