HP Jetdirect Security Guidelines
Page 1
... of this information can protect their printing and imaging devices. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10 Recommended...
... of this information can protect their printing and imaging devices. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10 Recommended...
HP Jetdirect Security Guidelines
Page 6
...have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. HP Jetdirect Administrative Guidelines In the material that cannot be firmware upgraded to use the administrative guideline referenced for SET 1 products, but have additional security by...lock the front door and leave your network before upgrading all HP Jetdirect firmware to install a J7961G 635n IPv6/IPsec print server. Before using the techniques presented here, the administrator at http://www.hp.com/go/dlm_sw. The EIO slot was introduced on...
...have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. HP Jetdirect Administrative Guidelines In the material that cannot be firmware upgraded to use the administrative guideline referenced for SET 1 products, but have additional security by...lock the front door and leave your network before upgrading all HP Jetdirect firmware to install a J7961G 635n IPv6/IPsec print server. Before using the techniques presented here, the administrator at http://www.hp.com/go/dlm_sw. The EIO slot was introduced on...
HP Jetdirect Security Guidelines
Page 7
... 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External...
... 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External...
HP Jetdirect Security Guidelines
Page 9
... functionality without having to contact HP support. HP Jetdirect Hacks: Firmware Upgrade A nice overview of the various methods used by a trusted CA to recover, albeit with TFTP server information. HP Jetdirect uses this information to start a TFTP client and pull down during the upgrade, etc...), HP Jetdirect will help make your HP Jetdirect devices behave the same regarding their printing behavior. Essentially: if a password...
... functionality without having to contact HP support. HP Jetdirect Hacks: Firmware Upgrade A nice overview of the various methods used by a trusted CA to recover, albeit with TFTP server information. HP Jetdirect uses this information to start a TFTP client and pull down during the upgrade, etc...), HP Jetdirect will help make your HP Jetdirect devices behave the same regarding their printing behavior. Essentially: if a password...
HP Jetdirect Security Guidelines
Page 10
... of the individuals leaving the conference room. The defense against unauthorized connections. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is that was sent between that source and that allows passive sniffing. Let's review what a MITM attack against passive...sent between an email client and email server, it . Active attacks are analogously similar to upgrade HP Jetdirect devices is a fundamental step in a conference room to this means is protected. In addition, many switch vendors offer various flavors of a print job, it can "open it ...
... of the individuals leaving the conference room. The defense against unauthorized connections. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is that was sent between that source and that allows passive sniffing. Let's review what a MITM attack against passive...sent between an email client and email server, it . Active attacks are analogously similar to upgrade HP Jetdirect devices is a fundamental step in a conference room to this means is protected. In addition, many switch vendors offer various flavors of a print job, it can "open it ...
HP Jetdirect Administrator's Guide
Page 8
... print server's product model and its operating firmware version. See Table 1.2. *** xx represents a release number. Supported Network Protocols Note For HP Jetdirect wireless print servers, this section assumes that use only. See Table 1.1. ENWW Introducing the HP Jetdirect Print Server 8 The installed firmware version can be identified using various methods, including the HP Jetdirect configuration page (see Chapter 9), Telnet (see Chapter 3), embedded Web server (see "Firmware Upgrades...
... print server's product model and its operating firmware version. See Table 1.2. *** xx represents a release number. Supported Network Protocols Note For HP Jetdirect wireless print servers, this section assumes that use only. See Table 1.1. ENWW Introducing the HP Jetdirect Print Server 8 The installed firmware version can be identified using various methods, including the HP Jetdirect configuration page (see Chapter 9), Telnet (see Chapter 3), embedded Web server (see "Firmware Upgrades...
HP Jetdirect Administrator's Guide
Page 12
... World Wide Web at: http://www.hp.com/go/webjetadmin_firmware Firmware Installation Tools Note HP Jetdirect ew2400 print servers will have factory-installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for HP Jetdirect print servers that contain upgradeable memory. HP Support HP Online Support Click your way to questions about your print server or with printers that have factory-installed print servers. ● Start or Use guides, or...
... World Wide Web at: http://www.hp.com/go/webjetadmin_firmware Firmware Installation Tools Note HP Jetdirect ew2400 print servers will have factory-installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for HP Jetdirect print servers that contain upgradeable memory. HP Support HP Online Support Click your way to questions about your print server or with printers that have factory-installed print servers. ● Start or Use guides, or...
HP Jetdirect Administrator's Guide
Page 13
... the HP Jetdirect Print Server 13 HP Jetdirect Download Manager can be downloaded from HP online support at: http://www.hp.com/go /webjetadmin/ ● The embedded Web server resident on the print server provides a firmware upgrade feature using one of the following firmware installation tools: ● HP Jetdirect Download Manager (Windows). After user login, typical FTP commands to log into the device. Firmware upgrades for supported HP Jetdirect print servers may...
... the HP Jetdirect Print Server 13 HP Jetdirect Download Manager can be downloaded from HP online support at: http://www.hp.com/go /webjetadmin/ ● The embedded Web server resident on the print server provides a firmware upgrade feature using one of the following firmware installation tools: ● HP Jetdirect Download Manager (Windows). After user login, typical FTP commands to log into the device. Firmware upgrades for supported HP Jetdirect print servers may...
HP Jetdirect Administrator's Guide
Page 16
... installation of multiple printers anywhere on your intranet ● Browser-based management Asset tracking and utilization analysis. Alerts and consumables management. Remote firmware upgrades for HP Jetdirect print servers. ● HP's preferred solution for supported system updates.) Windows 2000, XP Professional, Server 2003 HP-UX* Solaris* Linux* NetWare* TCP/IP, IPX/SPX *Supports queue creation and peripheral management from...
... installation of multiple printers anywhere on your intranet ● Browser-based management Asset tracking and utilization analysis. Alerts and consumables management. Remote firmware upgrades for HP Jetdirect print servers. ● HP's preferred solution for supported system updates.) Windows 2000, XP Professional, Server 2003 HP-UX* Solaris* Linux* NetWare* TCP/IP, IPX/SPX *Supports queue creation and peripheral management from...
HP Jetdirect Administrator's Guide
Page 59
...: Enables or disables the Web Scan feature on the print server: 0 disables, 1 (default) enables. scan-idle-timeout: Specifies the number of the firmware upgrade file. ENWW TCP/IP Configuration 59 The default is set. The print server will attempt to -email feature in -one or more Jetdirect print servers with the name and location of the client software provided...
...: Enables or disables the Web Scan feature on the print server: 0 disables, 1 (default) enables. scan-idle-timeout: Specifies the number of the firmware upgrade file. ENWW TCP/IP Configuration 59 The default is set. The print server will attempt to -email feature in -one or more Jetdirect print servers with the name and location of the client software provided...
HP Jetdirect Administrator's Guide
Page 90
...re-selected. 1: Allows the sending of the system from which SNMP GetRequests the HP Jetdirect print server will be sent to the print server because there was configured. The maximum length is set, the print server will disable all SNMP agents (SNMP v1, v2, v3) as well as ... time (seconds). In addition, firmware upgrades through current HP downloading utilities will respond to HP without prompting the user. 0: Disables sending data to . TCP Conns Refused (Read-only parameter) The number of times that are refused by the print server. ENWW TCP/IP Configuration 90 TCP...
...re-selected. 1: Allows the sending of the system from which SNMP GetRequests the HP Jetdirect print server will be sent to the print server because there was configured. The maximum length is set, the print server will disable all SNMP agents (SNMP v1, v2, v3) as well as ... time (seconds). In addition, firmware upgrades through current HP downloading utilities will respond to HP without prompting the user. 0: Disables sending data to . TCP Conns Refused (Read-only parameter) The number of times that are refused by the print server. ENWW TCP/IP Configuration 90 TCP...
HP Jetdirect Administrator's Guide
Page 93
.../LLC Command Description dlc/llc-config Enables or disables DLC/LLC protocol operation on the print server. 0 disables, 1 (default) enables. READY: Indicates the HP Jetdirect print server is registering the node address or name. Table 3.4 Telnet Commands and Parameters (15 of the firmware upgrade file. INITIALIZING: Indicates that is the path and filename of 18) Status (Read-only...
.../LLC Command Description dlc/llc-config Enables or disables DLC/LLC protocol operation on the print server. 0 disables, 1 (default) enables. READY: Indicates the HP Jetdirect print server is registering the node address or name. Table 3.4 Telnet Commands and Parameters (15 of the firmware upgrade file. INITIALIZING: Indicates that is the path and filename of 18) Status (Read-only...
HP Jetdirect Administrator's Guide
Page 122
...left margin ● Refresh Rate: to update your HP Jetdirect print server with new features and enhancements (model ew2400 upgrade features are provided: ● Misc. Settings: for enabling miscellaneous advanced protocols and functions ● Firmware Upgrade: to set the time interval (in which is ... When enabled, an SNMP v3 account must be created on the print server, and the account information must be implemented on the print server. You may not operate properly. (Full-featured HP Jetdirect print servers only) This option enables (check) or disables (clear) the SNMP...
...left margin ● Refresh Rate: to update your HP Jetdirect print server with new features and enhancements (model ew2400 upgrade features are provided: ● Misc. Settings: for enabling miscellaneous advanced protocols and functions ● Firmware Upgrade: to set the time interval (in which is ... When enabled, an SNMP v3 account must be created on the print server, and the account information must be implemented on the print server. You may not operate properly. (Full-featured HP Jetdirect print servers only) This option enables (check) or disables (clear) the SNMP...
HP Jetdirect Administrator's Guide
Page 128
... print queues are available. The six user-defined queues can be available on your system. Then click Upgrade Firmware. If it . The firmware upgrade file for LPD Printing". If LPD printing is , then download the file. Firmware Upgrade For print servers that support firmware upgrades, this page allows you to specify LPD (line printer daemon) print queues on the Jetdirect print server. Note HP Jetdirect ew2400 print servers will have limited upgrade...
... print queues are available. The six user-defined queues can be available on your system. Then click Upgrade Firmware. If it . The firmware upgrade file for LPD Printing". If LPD printing is , then download the file. Firmware Upgrade For print servers that support firmware upgrades, this page allows you to specify LPD (line printer daemon) print queues on the Jetdirect print server. Note HP Jetdirect ew2400 print servers will have limited upgrade...
HP Jetdirect Administrator's Guide
Page 150
...an isolated LAN, or a direct computer connection using IPX/SPX. In addition, you to configure 802.1X authentication settings on the Jetdirect print server as LAN switches) must use 802.1X protocols to control a port's access to the network. The supported 802.1X authentication ... you can reset the 802.1X authentication settings to factory-default values. ENWW Using the Embedded Web Server 150 Table 4.13 Other Protocols (2 of FTP to upgrade firmware on the print server. Enable or disable RCFG, a remote IPX configuration protocol used by older management tools to a factory...
...an isolated LAN, or a direct computer connection using IPX/SPX. In addition, you to configure 802.1X authentication settings on the Jetdirect print server as LAN switches) must use 802.1X protocols to control a port's access to the network. The supported 802.1X authentication ... you can reset the 802.1X authentication settings to factory-default values. ENWW Using the Embedded Web Server 150 Table 4.13 Other Protocols (2 of FTP to upgrade firmware on the print server. Enable or disable RCFG, a remote IPX configuration protocol used by older management tools to a factory...
HP Jetdirect Administrator's Guide
Page 191
... 3: Resolving Printer Display Error Messages Check the following information to interpret the error message. ■ If you upgraded the Jetdirect firmware recently, power the print server off and back on again. ■ Reinstall the HP Jetdirect print server to replace the HP Jetdirect print server. Does EIOX INITIALIZING/DO NOT POWER OFF appear on the display? If the error message disappears when the...
... 3: Resolving Printer Display Error Messages Check the following information to interpret the error message. ■ If you upgraded the Jetdirect firmware recently, power the print server off and back on again. ■ Reinstall the HP Jetdirect print server to replace the HP Jetdirect print server. Does EIOX INITIALIZING/DO NOT POWER OFF appear on the display? If the error message disappears when the...
HP Jetdirect Administrator's Guide
Page 199
...; moving the Access Point or wireless PC ■ adding an additional Access Point (Infrastructure mode only) ● Elevate the Access Point's antenna. As with other HP Jetdirect print servers, firmware upgrades may be downloaded using tools such as microwave ovens and cordless phones operate using similar radio frequencies. ● Reduce the distance between the printer and...
...; moving the Access Point or wireless PC ■ adding an additional Access Point (Infrastructure mode only) ● Elevate the Access Point's antenna. As with other HP Jetdirect print servers, firmware upgrades may be downloaded using tools such as microwave ovens and cordless phones operate using similar radio frequencies. ● Reduce the distance between the printer and...
HP Jetdirect Administrator's Guide
Page 235
...connect to the NetWare server(s). ENWW HP Jetdirect Configuration Page 235 The HP Jetdirect print server is established or another status message appears. The print server is attempting to use BootP or RARP to obtain TCP/IP configuration settings over the network. The print server is attempting to ...IN PROGRESS F4 BOOTP/DHCP IN PROGRESS Description When upgrading a supported print server that contains a firmware version prior to X.24.00, it will be necessary to perform the firmware upgrade again if you want the print server to obtain TCP/IP configuration settings over the network....
...connect to the NetWare server(s). ENWW HP Jetdirect Configuration Page 235 The HP Jetdirect print server is established or another status message appears. The print server is attempting to use BootP or RARP to obtain TCP/IP configuration settings over the network. The print server is attempting to ...IN PROGRESS F4 BOOTP/DHCP IN PROGRESS Description When upgrading a supported print server that contains a firmware version prior to X.24.00, it will be necessary to perform the firmware upgrade again if you want the print server to obtain TCP/IP configuration settings over the network....
HP Jetdirect Administrator's Guide
Page 257
...208 HP Jetdirect configuration page 202 printer control panel 191 F factory defaults, resetting 186 cold-reset 186 security parameters 50, 80, 135, 248, 252 TCP/IP from Telnet 98 wireless parameters 111 FAIL RESERVING PRINTER NUM 228 FIRMWARE REVISION 205 firmware upgrades 12 embedded Web server ...128 obtaining 12 TFTP configuration 59 FRAME TYPE 220 FRAMING ERRORS RCVD 214 FTP printing commands 176 example 178 exiting 176 introduction 172 TFTP configuration 51 ...
...208 HP Jetdirect configuration page 202 printer control panel 191 F factory defaults, resetting 186 cold-reset 186 security parameters 50, 80, 135, 248, 252 TCP/IP from Telnet 98 wireless parameters 111 FAIL RESERVING PRINTER NUM 228 FIRMWARE REVISION 205 firmware upgrades 12 embedded Web server ...128 obtaining 12 TFTP configuration 59 FRAME TYPE 220 FRAMING ERRORS RCVD 214 FTP printing commands 176 example 178 exiting 176 introduction 172 TFTP configuration 51 ...
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 1
...firmware upgrade allowed the 610n EIO print server, shipped in early 2002 with HP Jetdirect ...26 A Detailed Look at the SSL/TLS Connection 52 SSL/TLS Server Settings ...60 HP Jetdirect as an SSL/TLS Client ...61 SSL/TLS Client: Understanding Certificate Chains 77 SSL/TLS Client: Certificates and Name Verification 83 IPP over SSL/TLS ...89 HP Jetdirect...Basics ...20 Using HTTPS with the 615n EIO Print Server. Suddenly, a few million HP Jetdirect EIO cards had SSL/TLS capability. The answer was a great benefit. whitepaper HP Jetdirect and SSL/TLS June 2008 Table of security ...
...firmware upgrade allowed the 610n EIO print server, shipped in early 2002 with HP Jetdirect ...26 A Detailed Look at the SSL/TLS Connection 52 SSL/TLS Server Settings ...60 HP Jetdirect as an SSL/TLS Client ...61 SSL/TLS Client: Understanding Certificate Chains 77 SSL/TLS Client: Certificates and Name Verification 83 IPP over SSL/TLS ...89 HP Jetdirect...Basics ...20 Using HTTPS with the 615n EIO Print Server. Suddenly, a few million HP Jetdirect EIO cards had SSL/TLS capability. The answer was a great benefit. whitepaper HP Jetdirect and SSL/TLS June 2008 Table of security ...