Practical considerations for imaging and printing security
Page 6
...Chailets should only be used by the HP Jetdirect family of products, including internal cards, external boxes, and embedded networking. Vulnerabilities, viruses, and worms Vulnerability assessments are an integral step in HP's imaging and printing product development, and as a result ...configuration and is the recommended protocol for securing printing and scanning functions. 6 While the ingenuity of hackers continues to evolve, HP ensures its partners. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator...
...Chailets should only be used by the HP Jetdirect family of products, including internal cards, external boxes, and embedded networking. Vulnerabilities, viruses, and worms Vulnerability assessments are an integral step in HP's imaging and printing product development, and as a result ...configuration and is the recommended protocol for securing printing and scanning functions. 6 While the ingenuity of hackers continues to evolve, HP ensures its partners. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator...
HP Jetdirect Security Guidelines
Page 3
Functional Diagram Figure 1 - Upgrading your HP Jetdirect card to provide your printing infrastructure. Centronics mode on a parallel port would be a good investment. Functional Diagram In Figure 1, you can also understand what HP Jetdirect can and who can do . Secondly, we can see the ... became more PJL parsing protection is this day: Use a smart networking card to implement the various networking infrastructure components to control who cannot interact with your HP Jetdirect card to convert encapsulated network data into just data for printer consumption. In ...
Functional Diagram Figure 1 - Upgrading your HP Jetdirect card to provide your printing infrastructure. Centronics mode on a parallel port would be a good investment. Functional Diagram In Figure 1, you can also understand what HP Jetdirect can and who can do . Secondly, we can see the ... became more PJL parsing protection is this day: Use a smart networking card to implement the various networking infrastructure components to control who cannot interact with your HP Jetdirect card to convert encapsulated network data into just data for printer consumption. In ...
HP Jetdirect Security Guidelines
Page 4
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
HP Jetdirect Administrator's Guide
Page 19
...) to TCP/IP networks using full-featured HP Jetdirect print servers. Note For HP Jetdirect ew2400 external wired/wireless print servers that contains a wireless interface card, either built-in or installed in a wireless environment, a network cable connection to configure wireless settings is distributed through the following methods: ● HP Jetdirect CD-ROM, provided with standalone HP Jetdirect print servers ● Anonymous FTP site at ftp...
...) to TCP/IP networks using full-featured HP Jetdirect print servers. Note For HP Jetdirect ew2400 external wired/wireless print servers that contains a wireless interface card, either built-in or installed in a wireless environment, a network cable connection to configure wireless settings is distributed through the following methods: ● HP Jetdirect CD-ROM, provided with standalone HP Jetdirect print servers ● Anonymous FTP site at ftp...
HP Jetdirect Administrator's Guide
Page 55
...the card supports only a single TCP connection, the idle timeout balances the opportunity of a host to recover or complete a print job against the ability of other hosts to change the setting in the TFTP configuration file and power cycle the print server, or cold reset the print server ...2: All networks are allowed. The default is 15 seconds. tcp-mss: (subnets-local:) Specifies the maximum segment size (MSS) that the HP Jetdirect print server will be remote (MSS=536 bytes), except the local subnet. To regain access, change configuration values: 0 disables, 1 (default) enables. ENWW ...
...the card supports only a single TCP connection, the idle timeout balances the opportunity of a host to recover or complete a print job against the ability of other hosts to change the setting in the TFTP configuration file and power cycle the print server, or cold reset the print server ...2: All networks are allowed. The default is 15 seconds. tcp-mss: (subnets-local:) Specifies the maximum segment size (MSS) that the HP Jetdirect print server will be remote (MSS=536 bytes), except the local subnet. To regain access, change configuration values: 0 disables, 1 (default) enables. ENWW ...
HP Jetdirect Administrator's Guide
Page 71
To verify that the card is the assigned address from the configuration page) and the node name for the HP Jetdirect print server. ENWW TCP/IP Configuration 71 At the prompt, type: ping where is configured with the correct IP address, use the ping utility. If ping does ... to add the LAN hardware address/station address (from RARP. 10. Turn the printer on. 9. Edit the /etc/ethers file (/etc/rarpd.conf file in HP-UX 10.20) to the NIS host and ethers databases. 8. 7.
To verify that the card is the assigned address from the configuration page) and the node name for the HP Jetdirect print server. ENWW TCP/IP Configuration 71 At the prompt, type: ping where is configured with the correct IP address, use the ping utility. If ping does ... to add the LAN hardware address/station address (from RARP. 10. Turn the printer on. 9. Edit the /etc/ethers file (/etc/rarpd.conf file in HP-UX 10.20) to the NIS host and ethers databases. 8. 7.
HP Jetdirect Administrator's Guide
Page 75
... (such as the print server. Whenever you are fixed and the operation of 192.0.0.192, try this command: route add 192.0.0.192 169.254.2.1 CAUTION Using Telnet to manually set an IP address will also need the IP address of the workstation's network card that is the IP...appropriate command at the same time. For example, to a print server with IP address 169.254.2.1 to create a route from the system command prompt, enter the following command: route add where is the IP address configured on the HP Jetdirect print server, and is attached to the same physical LAN as BOOTP, ...
... (such as the print server. Whenever you are fixed and the operation of 192.0.0.192, try this command: route add 192.0.0.192 169.254.2.1 CAUTION Using Telnet to manually set an IP address will also need the IP address of the workstation's network card that is the IP...appropriate command at the same time. For example, to a print server with IP address 169.254.2.1 to create a route from the system command prompt, enter the following command: route add where is the IP address configured on the HP Jetdirect print server, and is attached to the same physical LAN as BOOTP, ...
HP Jetdirect Administrator's Guide
Page 191
... EIOX INITIALIZING/DO NOT POWER OFF appear on the printer control panel display. For internal Jetdirect cards, turn the printer back on . Replace the print server. ■ Record all configuration parameters. This information assumes you need to replace the HP Jetdirect print server. If it is likely that appear on the display? Wait for ten minutes to ensure...
... EIOX INITIALIZING/DO NOT POWER OFF appear on the printer control panel display. For internal Jetdirect cards, turn the printer back on . Replace the print server. ■ Record all configuration parameters. This information assumes you need to replace the HP Jetdirect print server. If it is likely that appear on the display? Wait for ten minutes to ensure...
HP Jetdirect Administrator's Guide
Page 205
... manufacturer. For more information, see Table 9.11. I /O CARD NOT READY, or ERROR: There is awaiting data. I/O CARD READY, or READY: The HP Jetdirect print server has successfully connected to the network and is a problem with the print server or its configuration. Configuration Page Messages HP Jetdirect Configuration/General Information Information in this section provides general HP Jetdirect print server configuration as described in Table 9.1.
... manufacturer. For more information, see Table 9.11. I /O CARD NOT READY, or ERROR: There is awaiting data. I/O CARD READY, or READY: The HP Jetdirect print server has successfully connected to the network and is a problem with the print server or its configuration. Configuration Page Messages HP Jetdirect Configuration/General Information Information in this section provides general HP Jetdirect print server configuration as described in Table 9.1.
HP Jetdirect Administrator's Guide
Page 247
... automatically assign a link-local address in the form 169.254.x.x. However, note that the print server may overwrite selected parameters with values that ensure proper operation. If DHCP=YES* and the print server has a DHCP lease, you can choose to configure the following DHCP settings: ■...= Description Selects whether you want to specify the IP address of a primary DNS server, one detected. ■ For Ethernet cards, frame type selections include EN_8023, EN_II, EN_8022, EN_SNAP. ENWW The HP Jetdirect EIO Control Panel Menu 247 NO (default): Bypass the TCP/IP menu items....
... automatically assign a link-local address in the form 169.254.x.x. However, note that the print server may overwrite selected parameters with values that ensure proper operation. If DHCP=YES* and the print server has a DHCP lease, you can choose to configure the following DHCP settings: ■...= Description Selects whether you want to specify the IP address of a primary DNS server, one detected. ■ For Ethernet cards, frame type selections include EN_8023, EN_II, EN_8022, EN_SNAP. ENWW The HP Jetdirect EIO Control Panel Menu 247 NO (default): Bypass the TCP/IP menu items....
HP Jetdirect Administrator's Guide
Page 258
...TRYING TO CONNECT TO SERVER 235 installing AppleTalk software 28 HP Web Jetadmin software 21 Internet Printer Connection software introduction 23 supported proxies 24 system requirements 24 Internet Printing Protocol, See IPP INVALID GATEWAY ADDRESS 232 IP ADDRESS 232 PASSWORD 234 SERVER ADDRESS 232 SUBNET MASK...16, 23 TFTP configuration 52 ipv4-multicast embedded Web server 123, 149 Telnet 88 TFTP configuration file 54 IPX/SPX Control panel configuration 246, 251 STATUS message 219 Telnet configuration 91 TFTP configuration 57 J Jetdirect certificate 139 L LAN ERROR BABBLE 225 CONTROLLER CHIP ...
...TRYING TO CONNECT TO SERVER 235 installing AppleTalk software 28 HP Web Jetadmin software 21 Internet Printer Connection software introduction 23 supported proxies 24 system requirements 24 Internet Printing Protocol, See IPP INVALID GATEWAY ADDRESS 232 IP ADDRESS 232 PASSWORD 234 SERVER ADDRESS 232 SUBNET MASK...16, 23 TFTP configuration 52 ipv4-multicast embedded Web server 123, 149 Telnet 88 TFTP configuration file 54 IPX/SPX Control panel configuration 246, 251 STATUS message 219 Telnet configuration 91 TFTP configuration 57 J Jetdirect certificate 139 L LAN ERROR BABBLE 225 CONTROLLER CHIP ...
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 1
...HP Jetdirect EIO cards had SSL/TLS capability. Unfortunately, many users of HTTPS are under a false sense of Contents: Introduction ...1 What is SSL/TLS? ...2 HTTPS Decoded ...3 Digital Certificates ...9 Public Key Infrastructure and Public Key Certificate Basics 12 SSL/TLS Protocol Basics ...20 Using HTTPS with the 615n EIO Print Server. The answer was a great benefit. HP printing... upgrade allowed the 610n EIO print server, shipped in early 2002 with HP Jetdirect ...26 A Detailed Look at the SSL/TLS Connection 52 SSL/TLS Server Settings ...60 HP Jetdirect as an SSL/TLS Client ...
...HP Jetdirect EIO cards had SSL/TLS capability. Unfortunately, many users of HTTPS are under a false sense of Contents: Introduction ...1 What is SSL/TLS? ...2 HTTPS Decoded ...3 Digital Certificates ...9 Public Key Infrastructure and Public Key Certificate Basics 12 SSL/TLS Protocol Basics ...20 Using HTTPS with the 615n EIO Print Server. The answer was a great benefit. HP printing... upgrade allowed the 610n EIO print server, shipped in early 2002 with HP Jetdirect ...26 A Detailed Look at the SSL/TLS Connection 52 SSL/TLS Server Settings ...60 HP Jetdirect as an SSL/TLS Client ...
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 94
... big section on multiple Jetdirect cards (e.g., wildcard certificates for printing). • When Jetdirect is acting as one . • Each Jetdirect should have a unique certificate. • Each Jetdirect should have a 94 Test! Be sure that the Common Name matches the FQDN of Jetdirect to avoid certificate errors...because SSL/TLS is only one certificate, be sure to establish the VPN connection. HP Jetdirect Certificate Guidelines We've covered several client and server scenarios regarding HP Jetdirect and SSL/TLS. Embedded Devices and Digital Certificates One of the more common uses...
... big section on multiple Jetdirect cards (e.g., wildcard certificates for printing). • When Jetdirect is acting as one . • Each Jetdirect should have a unique certificate. • Each Jetdirect should have a 94 Test! Be sure that the Common Name matches the FQDN of Jetdirect to avoid certificate errors...because SSL/TLS is only one certificate, be sure to establish the VPN connection. HP Jetdirect Certificate Guidelines We've covered several client and server scenarios regarding HP Jetdirect and SSL/TLS. Embedded Devices and Digital Certificates One of the more common uses...