Practical considerations for imaging and printing security
Page 1
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
HP Jetdirect Print Server 170X Installation and Configuration
Page 10
.../go/inpw_sw 1-10 Introduction ENWW For operation with firmware version F.08.56 or later. What's Included O HP Jetdirect 170X Print Server O Power Module assembly (see Appendix A for software, documentation, and support. Supported Network Protocols HP Jetdirect 170X supported network protocols and typical network printing environments are listed below: Table 1.1 HP Jetdirect 170X Network Protocols Network Protocols Typical Networks* TCP/IP Microsoft Windows 2000...
.../go/inpw_sw 1-10 Introduction ENWW For operation with firmware version F.08.56 or later. What's Included O HP Jetdirect 170X Print Server O Power Module assembly (see Appendix A for software, documentation, and support. Supported Network Protocols HP Jetdirect 170X supported network protocols and typical network printing environments are listed below: Table 1.1 HP Jetdirect 170X Network Protocols Network Protocols Typical Networks* TCP/IP Microsoft Windows 2000...
HP Jetdirect Print Server 170X Installation and Configuration
Page 46
... from which the configuration is made must be required for TCP/IP operation O HP Jetdirect firmware version F.08.56 or later O The LAN hardware (MAC) address of the HP Jetdirect print server (specified on an HP Jetdirect configuration page, or on a label attached to HP Jetdirect external print servers) Note On some systems, superuser rights may be located on the same network segment...
... from which the configuration is made must be required for TCP/IP operation O HP Jetdirect firmware version F.08.56 or later O The LAN hardware (MAC) address of the HP Jetdirect print server (specified on an HP Jetdirect configuration page, or on a label attached to HP Jetdirect external print servers) Note On some systems, superuser rights may be located on the same network segment...
HP Jetdirect Print Server 170X Installation and Configuration
Page 63
... the first time the print server is divided into the following sections: Section Description Troubleshooting Information 1 HP Jetdirect product information Firmware revision number, type of network (Ethernet), LAN hardware address, port selection type, and manufacturing identification number. 2 Print server status Overall print server status, such as specified...for TCP/IP configuration. 7 SNMP status Status information for the configuration page: 1. The HP 170X configuration page is powered on, or after a cold reset to the printer using a page description language (PDL).
... the first time the print server is divided into the following sections: Section Description Troubleshooting Information 1 HP Jetdirect product information Firmware revision number, type of network (Ethernet), LAN hardware address, port selection type, and manufacturing identification number. 2 Print server status Overall print server status, such as specified...for TCP/IP configuration. 7 SNMP status Status information for the configuration page: 1. The HP 170X configuration page is powered on, or after a cold reset to the printer using a page description language (PDL).
HP Jetdirect Print Server 170X Installation and Configuration
Page 68
... 6.1 HP Jetdirect Product Information Message Description HP JETDIRECT JXXXXX Identifies the HP Jetdirect print server model number. MFG ID: The manufacturing identification code. LAN HW ADDRESS: XXXXXXXXXXXX The 12-digit hexadecimal network address of the HP Jetdirect print server. FIRMWARE REVISION: X.XX.XX The firmware revision number of the server that has been detected for Web Jetadmin services. 6-68 HP Jetdirect Configuration Page Messages ENWW PARALLEL PORT: (HP 170X print servers...
... 6.1 HP Jetdirect Product Information Message Description HP JETDIRECT JXXXXX Identifies the HP Jetdirect print server model number. MFG ID: The manufacturing identification code. LAN HW ADDRESS: XXXXXXXXXXXX The 12-digit hexadecimal network address of the HP Jetdirect print server. FIRMWARE REVISION: X.XX.XX The firmware revision number of the server that has been detected for Web Jetadmin services. 6-68 HP Jetdirect Configuration Page Messages ENWW PARALLEL PORT: (HP 170X print servers...
HP Jetdirect Print Server 170X Installation and Configuration
Page 79
...message appears, turn the print server off, then back on to enable any new functionality that servers are allowed to attach to the queue, to delete the print server object from the list of queue servers if you upgrade to a new version of firmware. ENWW HP Jetdirect Configuration Page Messages 6-79... This may be because no servers are configured, the error...
...message appears, turn the print server off, then back on to enable any new functionality that servers are allowed to attach to the queue, to delete the print server object from the list of queue servers if you upgrade to a new version of firmware. ENWW HP Jetdirect Configuration Page Messages 6-79... This may be because no servers are configured, the error...
HP Jetdirect Print Server 170X Installation and Configuration
Page 103
.../support/net_printing ENWW FTP Printing D-103 Requirements FTP printing requires the following: O HP Jetdirect print servers with RFC 959. O TCP/IP client systems with FTP that complies with firmware version F.08.56 or later. In an FTP printing session, the client connects and sends a print file to the HP Jetdirect FTP server which in turn passes the print file to an HP Jetdirect-connected printer.
.../support/net_printing ENWW FTP Printing D-103 Requirements FTP printing requires the following: O HP Jetdirect print servers with RFC 959. O TCP/IP client systems with FTP that complies with firmware version F.08.56 or later. In an FTP printing session, the client connects and sends a print file to the HP Jetdirect FTP server which in turn passes the print file to an HP Jetdirect-connected printer.
HP Jetdirect Print Server 170X Installation and Configuration
Page 105
The transmission mode for an FTP data connection with the HP Jetdirect print server is ASCII. The Jetdirect FTP server will be specified. Passwords are always accepted, the HP Jetdirect FTP server supports only one data connection for printing at the FTP prompt. Although some clients may attempt to autonegotiate a ...is established, the file transfer type (ASCII or binary) can be displayed. Once a data connection is successful, the HP Jetdirect model and firmware version will allow any user name. FTP Login To start an FTP session, enter the following command from a MS-...
The transmission mode for an FTP data connection with the HP Jetdirect print server is ASCII. The Jetdirect FTP server will be specified. Passwords are always accepted, the HP Jetdirect FTP server supports only one data connection for printing at the FTP prompt. Although some clients may attempt to autonegotiate a ...is established, the file transfer type (ASCII or binary) can be displayed. Once a data connection is successful, the HP Jetdirect model and firmware version will allow any user name. FTP Login To start an FTP session, enter the following command from a MS-...
HP Jetdirect Print Server 170X Installation and Configuration
Page 110
F FAIL RESERVING PRINTER NUM 671 FIRMWARE REVISION 6-68 FRAMING ERROR 6-71 ERRORS RCVD 6-82 FTP printing Commands D-106 Example D-108 Exiting D-106 How to D-104 H Hardware installation 2-16 HOST NAME 6-85 HP JETDIRECT 6-68 HP Jetdirect identification and status 6-68 I I/O CARD INITIALIZING 6-72 NOT READY 6-72 READY 6-72 INITIALIZING TRYING TO CONNECT TO SERVER 6-71 INVALID GATEWAY ADDRESS...
F FAIL RESERVING PRINTER NUM 671 FIRMWARE REVISION 6-68 FRAMING ERROR 6-71 ERRORS RCVD 6-82 FTP printing Commands D-106 Example D-108 Exiting D-106 How to D-104 H Hardware installation 2-16 HOST NAME 6-85 HP JETDIRECT 6-68 HP Jetdirect identification and status 6-68 I I/O CARD INITIALIZING 6-72 NOT READY 6-72 READY 6-72 INITIALIZING TRYING TO CONNECT TO SERVER 6-71 INVALID GATEWAY ADDRESS...
HP JetDirect 170X - Installation and Configuration Guide
Page 19
Table 2.2 HP Software Solutions (1 of HP Jetdirectconnected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers q Alerts and consumables management q Remote firmware upgrades for ongoing management and ...HP's online support web site HP Web JetAdmin (Internet access required) q Supported Networks (TCP/IP, IPX/SPX): s Windows NT 4.0, 2000 s NetWare (supports NetWare queue creation and peripheral management from HP Web JetAdmin hosted on Windows NT 4.0, 2000) q Browser-based management q HP's preferred solution for HP Jetdirect print servers...
Table 2.2 HP Software Solutions (1 of HP Jetdirectconnected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers q Alerts and consumables management q Remote firmware upgrades for ongoing management and ...HP's online support web site HP Web JetAdmin (Internet access required) q Supported Networks (TCP/IP, IPX/SPX): s Windows NT 4.0, 2000 s NetWare (supports NetWare queue creation and peripheral management from HP Web JetAdmin hosted on Windows NT 4.0, 2000) q Browser-based management q HP's preferred solution for HP Jetdirect print servers...
HP JetDirect 170X - Installation and Configuration Guide
Page 20
... up user licenses q Allows disabling of SAPs to reduce network traffic q For IPX printing, requires HP Jetdirect firmware version X.03.06 or later The following sections provide more information on these and other HP solutions, visit HP online support at: http://www.hp.com/support/net_printing Install Network Printer Wizard (Windows) This is the standard installation tool...
... up user licenses q Allows disabling of SAPs to reduce network traffic q For IPX printing, requires HP Jetdirect firmware version X.03.06 or later The following sections provide more information on these and other HP solutions, visit HP online support at: http://www.hp.com/support/net_printing Install Network Printer Wizard (Windows) This is the standard installation tool...
HP JetDirect 170X - Installation and Configuration Guide
Page 42
Requirements FTP printing requires the following: q HP Jetdirect print servers with RFC 959. 6 FTP Printing 6 FTP Printing FTP (File Transfer Protocol) is a basic TCP/IP connectivity utility to transfer data between systems. FTP printing is a way to use FTP to send print files from a client system to the printer. q TCP/IP client systems with FTP that complies with firmware version x.08...
Requirements FTP printing requires the following: q HP Jetdirect print servers with RFC 959. 6 FTP Printing 6 FTP Printing FTP (File Transfer Protocol) is a basic TCP/IP connectivity utility to transfer data between systems. FTP printing is a way to use FTP to send print files from a client system to the printer. q TCP/IP client systems with FTP that complies with firmware version x.08...
HP JetDirect 170X - Installation and Configuration Guide
Page 44
...connection, the user is prompted for an FTP data connection with the HP Jetdirect print server is always in stream mode, which marks the end-of a data connection by closing the data connection. FTP Printing 6-3 The transmission mode for a login name and password. The ... or UNIX command prompt: ftp where is successful, the HP Jetdirect model and firmware version will allow any user name. Passwords are always accepted, the HP Jetdirect FTP server supports only one data connection for the HP Jetdirect print server. The default is established, the file transfer type (ASCII...
...connection, the user is prompted for an FTP data connection with the HP Jetdirect print server is always in stream mode, which marks the end-of a data connection by closing the data connection. FTP Printing 6-3 The transmission mode for a login name and password. The ... or UNIX command prompt: ftp where is successful, the HP Jetdirect model and firmware version will allow any user name. Passwords are always accepted, the HP Jetdirect FTP server supports only one data connection for the HP Jetdirect print server. The default is established, the file transfer type (ASCII...
HP JetDirect 170X - Installation and Configuration Guide
Page 50
...SERVER: 0.0.0.0 CONFIG FILE: SNMP SET CMTY NAME: NONE For information on configuration page messages, see chapter 8. 7 Troubleshooting Troubleshooting 7-3 INITIALIZING BOOTP/RARP IN PROGRESS HOST NAME: NOT SPECIFIED CONFIG BY: NOT CONFIGURED IP ADDRESS: 0.0.0.0 SUBNET MASK: NOT SPECIFIED DEF. Figure 7-1 170X Configuration Page Sections Hewlett-Packard Jetdirect 170X (PCL Configuration Page) 1 HP Jetdirect FIRMWARE...RETRANS: 0 4 IPX/SPX STATUS: 16 INITIALIZING NODE: QUEUE SERVER NODE NAME: NPI1BE736 NETWORK FRAME TYPE RCVD 00012345 EN 802.2 7 00000E11 ...
...SERVER: 0.0.0.0 CONFIG FILE: SNMP SET CMTY NAME: NONE For information on configuration page messages, see chapter 8. 7 Troubleshooting Troubleshooting 7-3 INITIALIZING BOOTP/RARP IN PROGRESS HOST NAME: NOT SPECIFIED CONFIG BY: NOT CONFIGURED IP ADDRESS: 0.0.0.0 SUBNET MASK: NOT SPECIFIED DEF. Figure 7-1 170X Configuration Page Sections Hewlett-Packard Jetdirect 170X (PCL Configuration Page) 1 HP Jetdirect FIRMWARE...RETRANS: 0 4 IPX/SPX STATUS: 16 INITIALIZING NODE: QUEUE SERVER NODE NAME: NPI1BE736 NETWORK FRAME TYPE RCVD 00012345 EN 802.2 7 00000E11 ...
HP JetDirect 170X - Installation and Configuration Guide
Page 61
... number. Table 8.2 Message General HP Jetdirect Messages (3 of 15) Description DISCONNECTING FROM SERVER The server has been shut down because of the file servers was successfully connected. This may indicate a network problem. FIRMWARE The firmware revision number of all cables and routers are functioning correctly. Make sure all status messages. HP Jetdirect JXXXXX Identifies the HP Jetdirect print server model number. For more...
... number. Table 8.2 Message General HP Jetdirect Messages (3 of 15) Description DISCONNECTING FROM SERVER The server has been shut down because of the file servers was successfully connected. This may indicate a network problem. FIRMWARE The firmware revision number of all cables and routers are functioning correctly. Make sure all status messages. HP Jetdirect JXXXXX Identifies the HP Jetdirect print server model number. For more...
HP JetDirect 170X - Installation and Configuration Guide
Page 70
... you upgrade to a new version of queue servers if you want the HP Jetdirect print server to this message appears, turn the printer off, then back on the configuration page (also called a self-test page or configuration plot) if none of the configuration file from the list of firmware. Config. TRANSMIT ERROR Check the network topology...
... you upgrade to a new version of queue servers if you want the HP Jetdirect print server to this message appears, turn the printer off, then back on the configuration page (also called a self-test page or configuration plot) if none of the configuration file from the list of firmware. Config. TRANSMIT ERROR Check the network topology...
HP Jetdirect Security Guidelines
Page 6
... parallel port print server like the LaserJet IIIsi and LaserJet 4si have been discontinued for many cases, one must "lock down" several things before securing one must be careful not to lock the front door and leave your network before upgrading all HP Jetdirect firmware to the highest...• SET 3: The 630n and Embedded Jetdirect (J7982E, J7987E, J7991E, and J7992E) models. With security configurations, one thing can be firmware upgraded to the highest level as SETs. • SET 1: The 170x, 300x, 500x, 510x, 400n, 600n models. HP recommends always upgrading only a few devices and...
... parallel port print server like the LaserJet IIIsi and LaserJet 4si have been discontinued for many cases, one must "lock down" several things before securing one must be careful not to lock the front door and leave your network before upgrading all HP Jetdirect firmware to the highest...• SET 3: The 630n and Embedded Jetdirect (J7982E, J7987E, J7991E, and J7992E) models. With security configurations, one thing can be firmware upgraded to the highest level as SETs. • SET 1: The 170x, 300x, 500x, 510x, 400n, 600n models. HP recommends always upgrading only a few devices and...
HP Jetdirect Security Guidelines
Page 7
... the JDI firmware. Jetdirect Firmware Versions NOTE: For some options, presented in Table 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A...
... the JDI firmware. Jetdirect Firmware Versions NOTE: For some options, presented in Table 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A...
HP Jetdirect Security Guidelines
Page 9
...firmware upgrade. HP Jetdirect devices that applications such as the HP Download Manager and HP Web Jetadmin are three common ways of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP Download Manager or HP ... the HP Jetdirect certificate to upgrade the firmware of their printing behavior. After you have upgraded all software and firmware, change your HP Jetdirect, use FTP to a certificate issued by a user. Also, consider migrating to SET 2, 3, or 4 support SNMPv3. All HP Jetdirect firmware files follow...
...firmware upgrade. HP Jetdirect devices that applications such as the HP Download Manager and HP Web Jetadmin are three common ways of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP Download Manager or HP ... the HP Jetdirect certificate to upgrade the firmware of their printing behavior. After you have upgraded all software and firmware, change your HP Jetdirect, use FTP to a certificate issued by a user. Also, consider migrating to SET 2, 3, or 4 support SNMPv3. All HP Jetdirect firmware files follow...
HP Jetdirect Security Guidelines
Page 10
...SSL/TLS with the TCP/IP protocol suite. HP recommends following NIST checklist as we have discussed HP Jetdirect security primarily. firmware upgrades; For users of IPsec (SET 4) as if no interception had taken place; HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools ...attacks. also, this general vulnerability with a properly signed HP Jetdirect certificate. However, as a guideline to all the data sent between that source and that was sent between an FTP client and an FTP server, it can be opened using other applications without having ...
...SSL/TLS with the TCP/IP protocol suite. HP recommends following NIST checklist as we have discussed HP Jetdirect security primarily. firmware upgrades; For users of IPsec (SET 4) as if no interception had taken place; HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools ...attacks. also, this general vulnerability with a properly signed HP Jetdirect certificate. However, as a guideline to all the data sent between that source and that was sent between an FTP client and an FTP server, it can be opened using other applications without having ...