HP Jetdirect Security Guidelines
Page 1
... purpose of rather poor quality and inflammatory; whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10 Recommended Security Deployments...
... purpose of rather poor quality and inflammatory; whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10 Recommended Security Deployments...
HP Jetdirect Security Guidelines
Page 6
...least should do not have the most security capability in HP Jetdirect's product line. These models have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. One of the easiest ways to ...firmware upgraded to the highest level as SETs. • SET 1: The 170x, 300x, 500x, 510x, 400n, 600n models. Printers that follows, this product, we evaluate the various attacks employed against HP Jetdirect. This flexibility will automatically indicate which devices need to install a J7961G 635n IPv6/IPsec print server...
...least should do not have the most security capability in HP Jetdirect's product line. These models have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. One of the easiest ways to ...firmware upgraded to the highest level as SETs. • SET 1: The 170x, 300x, 500x, 510x, 400n, 600n models. Printers that follows, this product, we evaluate the various attacks employed against HP Jetdirect. This flexibility will automatically indicate which devices need to install a J7961G 635n IPv6/IPsec print server...
HP Jetdirect Security Guidelines
Page 9
... for FTP firmware upgrades. Essentially: if a password has been specified, it is described here: http://www.hp.com/go/webjetadmin_firmware. This process will be entered to upgrade the firmware of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using SSL/TLS. After you have upgraded all software and firmware, change your HP Jetdirect devices behave...
... for FTP firmware upgrades. Essentially: if a password has been specified, it is described here: http://www.hp.com/go/webjetadmin_firmware. This process will be entered to upgrade the firmware of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using SSL/TLS. After you have upgraded all software and firmware, change your HP Jetdirect devices behave...
HP Jetdirect Security Guidelines
Page 10
...that was sent between an FTP client and an FTP server, it is nonetheless a general vulnerability of the EWS, HP recommends setting the redirect from a node by sending it with a properly signed HP Jetdirect certificate. firmware upgrades; For users of the TCP/IP protocol suite and ...it to behave in MITM attacks. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is the proper deployment of concern among customers. HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools that allows passive sniffing. Active ...
...that was sent between an FTP client and an FTP server, it is nonetheless a general vulnerability of the EWS, HP recommends setting the redirect from a node by sending it with a properly signed HP Jetdirect certificate. firmware upgrades; For users of the TCP/IP protocol suite and ...it to behave in MITM attacks. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is the proper deployment of concern among customers. HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools that allows passive sniffing. Active ...
HP Jetdirect 620n Print Server Setup Guide
Page 5
Warranty Service F. B. Specifications and Regulatory Statements Specifications 45 Regulatory Statements 46 E. HP Jetdirect EIO Control Panel Menus Introduction 36 Classic Control Panel 37 Graphical Control Panel 40 D. HP Jetdirect Solutions Summary Tools Overview 31 Supported Network Protocols 32 HP Installation Software 33 C. HP Support and Service HP Support Online 53 Firmware Upgrades 53 HP Support By Phone 54 5
Warranty Service F. B. Specifications and Regulatory Statements Specifications 45 Regulatory Statements 46 E. HP Jetdirect EIO Control Panel Menus Introduction 36 Classic Control Panel 37 Graphical Control Panel 40 D. HP Jetdirect Solutions Summary Tools Overview 31 Supported Network Protocols 32 HP Installation Software 33 C. HP Support and Service HP Support Online 53 Firmware Upgrades 53 HP Support By Phone 54 5
HP Jetdirect 620n Print Server Setup Guide
Page 31
... (TCP port 80) ■ Embedded Web Server, HTTPS (TCP port 443) ● HP management and support software: ■ HP Web Jetadmin software (TCP/IP and IPX/SPX networks) ■ HP Jetdirect Download Manager (HP Jetdirect firmware upgrades) HP Jetdirect Printing Support ● Embedded HP Jetdirect services: ■ LPD printing (TCP port 515) ■ IPP printing (TCP port 631) ■ FTP printing (TCP ports 20, 21) ■ Raw...
... (TCP port 80) ■ Embedded Web Server, HTTPS (TCP port 443) ● HP management and support software: ■ HP Web Jetadmin software (TCP/IP and IPX/SPX networks) ■ HP Jetdirect Download Manager (HP Jetdirect firmware upgrades) HP Jetdirect Printing Support ● Embedded HP Jetdirect services: ■ LPD printing (TCP port 515) ■ IPP printing (TCP port 631) ■ FTP printing (TCP ports 20, 21) ■ Raw...
HP Jetdirect 620n Print Server Setup Guide
Page 34
... documents over the Internet, replacing fax, mail, and overnight services ● Requires HP Jetdirect print server (firmware version X.07.17 or later) *Note: For Windows 2000, Microsoft's Internet Printing software is already integrated with embedded web servers ● Alerts and consumables management ● Remote firmware upgrades for ongoing management and installation of multiple printers-anywhere on your system and...
... documents over the Internet, replacing fax, mail, and overnight services ● Requires HP Jetdirect print server (firmware version X.07.17 or later) *Note: For Windows 2000, Microsoft's Internet Printing software is already integrated with embedded web servers ● Alerts and consumables management ● Remote firmware upgrades for ongoing management and installation of multiple printers-anywhere on your system and...
HP Jetdirect 620n Print Server Setup Guide
Page 53
... embedded Web server, and HP Jetdirect Download Manager (Windows) or HP Web Jetadmin software. Firmware upgrade files and software tools are available from the World Wide Web at http://www.hp.com/support/net_printing is a great place to start for HP Jetdirect print servers with internal Flash memory. The HP web site at : http://www.hp.com/go/webjetadmin_firmware ENWW 53 Firmware Upgrades Hewlett-Packard...
... embedded Web server, and HP Jetdirect Download Manager (Windows) or HP Web Jetadmin software. Firmware upgrade files and software tools are available from the World Wide Web at http://www.hp.com/support/net_printing is a great place to start for HP Jetdirect print servers with internal Flash memory. The HP web site at : http://www.hp.com/go/webjetadmin_firmware ENWW 53 Firmware Upgrades Hewlett-Packard...
HP Jetdirect Administrator's Guide
Page 8
... the HP Jetdirect Print Server 8 See Table 1.2. *** xx represents a release number. The installed firmware version can be identified using various methods, including the HP Jetdirect configuration page (see Chapter 9), Telnet (see Chapter 3), embedded Web server (see "Firmware Upgrades". Supported Network Protocols Note For HP Jetdirect wireless print servers, this section assumes that use only. Supported Print Servers The features and capabilities of HP Jetdirect print servers depend on the print server's product...
... the HP Jetdirect Print Server 8 See Table 1.2. *** xx represents a release number. The installed firmware version can be identified using various methods, including the HP Jetdirect configuration page (see Chapter 9), Telnet (see Chapter 3), embedded Web server (see "Firmware Upgrades". Supported Network Protocols Note For HP Jetdirect wireless print servers, this section assumes that use only. Supported Print Servers The features and capabilities of HP Jetdirect print servers depend on the print server's product...
HP Jetdirect Administrator's Guide
Page 12
... available from the World Wide Web at: http://www.hp.com/go/webjetadmin_firmware Firmware Installation Tools Note HP Jetdirect ew2400 print servers will have limited upgrade capabilities. A network cable must be used. ENWW Introducing the HP Jetdirect Print Server 12 Firmware Upgrades Hewlett-Packard offers downloadable firmware upgrades for HP Jetdirect print servers that have factory-installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for answers to questions about your...
... available from the World Wide Web at: http://www.hp.com/go/webjetadmin_firmware Firmware Installation Tools Note HP Jetdirect ew2400 print servers will have limited upgrade capabilities. A network cable must be used. ENWW Introducing the HP Jetdirect Print Server 12 Firmware Upgrades Hewlett-Packard offers downloadable firmware upgrades for HP Jetdirect print servers that have factory-installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for answers to questions about your...
HP Jetdirect Administrator's Guide
Page 13
.../go /webjetadmin/ ● The embedded Web server resident on the print server provides a firmware upgrade feature using one of the following firmware installation tools: ● HP Jetdirect Download Manager (Windows). For more information on HP Web Jetadmin, visit: http://www.hp.com/go /dlm_sw ● HP Web Jetadmin may be entered to the print server. To start an FTP session, use the device...
.../go /webjetadmin/ ● The embedded Web server resident on the print server provides a firmware upgrade feature using one of the following firmware installation tools: ● HP Jetdirect Download Manager (Windows). For more information on HP Web Jetadmin, visit: http://www.hp.com/go /dlm_sw ● HP Web Jetadmin may be entered to the print server. To start an FTP session, use the device...
HP Jetdirect Administrator's Guide
Page 16
..., mail, and overnight services ● Requires HP Jetdirect print server (firmware version x.20.00 or later) ● IPP is also integrated with embedded Web servers. Remote installation, configuration, and management of HP Jetdirect-connected print servers, non-HP printers that support the standard MIBs, and printers with Windows 2000, XP, Server 2003. Remote firmware upgrades for HP Jetdirect print servers. ● HP's preferred solution for ongoing management and installation...
..., mail, and overnight services ● Requires HP Jetdirect print server (firmware version x.20.00 or later) ● IPP is also integrated with embedded Web servers. Remote installation, configuration, and management of HP Jetdirect-connected print servers, non-HP printers that support the standard MIBs, and printers with Windows 2000, XP, Server 2003. Remote firmware upgrades for HP Jetdirect print servers. ● HP's preferred solution for ongoing management and installation...
HP Jetdirect Administrator's Guide
Page 56
... address from 1 to 10 may be sent to HP. phone-home-config: Specifies privacy settings on the print server during a forced TCP/IP reconfiguration (for example, when powered off/on product use BOOTP/DHCP). In addition, firmware upgrades through current HP downloading utilities will wait for embedded Web server diagnostic page updates. This is 5 seconds. If set...
... address from 1 to 10 may be sent to HP. phone-home-config: Specifies privacy settings on the print server during a forced TCP/IP reconfiguration (for example, when powered off/on product use BOOTP/DHCP). In addition, firmware upgrades through current HP downloading utilities will wait for embedded Web server diagnostic page updates. This is 5 seconds. If set...
HP Jetdirect Administrator's Guide
Page 59
..., 100FULL, 100HALF, 10FULL, 10HALF. The default is set. ENWW TCP/IP Configuration 59 For AUTO (default), the print server uses autonegotiation to -email feature in -one or more Jetdirect print servers with the name and location of a firmware upgrade file. Selections are properly entered and that an idle scan connection is a higher version than the installed version...
..., 100FULL, 100HALF, 10FULL, 10HALF. The default is set. ENWW TCP/IP Configuration 59 For AUTO (default), the print server uses autonegotiation to -email feature in -one or more Jetdirect print servers with the name and location of a firmware upgrade file. Selections are properly entered and that an idle scan connection is a higher version than the installed version...
HP Jetdirect Administrator's Guide
Page 90
... tab of the system from which SNMP GetRequests the HP Jetdirect print server will be re-selected. 1: Allows the sending of data to HP without prompting the user. 0: Disables sending data to HP without prompting the user. TCP Conns Refused (Read-...HP Jetdirect print server's IP address was no allowable entry in the print server's host access list. DHCP Lease Time (Read-only parameter) DHCP IP address lease duration time (seconds). CAUTION: Disabling SNMP will respond to either a user-specified community name or the factory-default. In addition, firmware upgrades through current HP...
... tab of the system from which SNMP GetRequests the HP Jetdirect print server will be re-selected. 1: Allows the sending of data to HP without prompting the user. 0: Disables sending data to HP without prompting the user. TCP Conns Refused (Read-...HP Jetdirect print server's IP address was no allowable entry in the print server's host access list. DHCP Lease Time (Read-only parameter) DHCP IP address lease duration time (seconds). CAUTION: Disabling SNMP will respond to either a user-specified community name or the factory-default. In addition, firmware upgrades through current HP...
HP Jetdirect Administrator's Guide
Page 93
... DLC/LLC operation. The default address is awaiting data. An additional status message may also be entered. Table 3.4 Telnet Commands and Parameters (15 of the firmware upgrade file. READY: Indicates the HP Jetdirect print server is the factory-assigned address. DLC/LLC Command Description dlc/llc-config Enables or disables DLC/LLC protocol operation on the...
... DLC/LLC operation. The default address is awaiting data. An additional status message may also be entered. Table 3.4 Telnet Commands and Parameters (15 of the firmware upgrade file. READY: Indicates the HP Jetdirect print server is the factory-assigned address. DLC/LLC Command Description dlc/llc-config Enables or disables DLC/LLC protocol operation on the...
HP Jetdirect Administrator's Guide
Page 122
... following tabs are limited and require a wired network connection) ● LPD Queues: for enabling miscellaneous advanced protocols and functions ● Firmware Upgrade: to update your HP Jetdirect print server with new features and enhancements (model ew2400 upgrade features are provided: ● Misc. Privacy Key: a 16-byte hexadecimal value for embedded Web diagnostic page updates ENWW Using the...
... following tabs are limited and require a wired network connection) ● LPD Queues: for enabling miscellaneous advanced protocols and functions ● Firmware Upgrade: to update your HP Jetdirect print server with new features and enhancements (model ew2400 upgrade features are provided: ● Misc. Privacy Key: a 16-byte hexadecimal value for embedded Web diagnostic page updates ENWW Using the...
HP Jetdirect Administrator's Guide
Page 128
... to upgrade. A firmware upgrade through a wireless connection is , then download the file. Locate the print server model and the upgrade file. 2. Enter the path to the upgrade file or click Browse to locate it . LPD printing must be defined by the user. The six user-defined queues can be enabled on the Jetdirect print server. Note HP Jetdirect ew2400 print servers will have limited upgrade capabilities...
... to upgrade. A firmware upgrade through a wireless connection is , then download the file. Locate the print server model and the upgrade file. 2. Enter the path to the upgrade file or click Browse to locate it . LPD printing must be defined by the user. The six user-defined queues can be enabled on the Jetdirect print server. Note HP Jetdirect ew2400 print servers will have limited upgrade capabilities...
HP Jetdirect Administrator's Guide
Page 150
...SPX. To configure initial 802.1X settings before connecting to your network, you to configure 802.1X authentication settings on the Jetdirect print server as LAN switches) must use 802.1X protocols to control a port's access to the network. Available configuration settings are ... Protocols (2 of 2) Item Enable Management Protocols Description Enable or disable Telnet access and the use of FTP to upgrade firmware on the print server model and firmware version. CAUTION Use caution when changing the 802.1X authentication settings; For most 802.1X networks, the infrastructure components...
...SPX. To configure initial 802.1X settings before connecting to your network, you to configure 802.1X authentication settings on the Jetdirect print server as LAN switches) must use 802.1X protocols to control a port's access to the network. Available configuration settings are ... Protocols (2 of 2) Item Enable Management Protocols Description Enable or disable Telnet access and the use of FTP to upgrade firmware on the print server model and firmware version. CAUTION Use caution when changing the 802.1X authentication settings; For most 802.1X networks, the infrastructure components...
HP Jetdirect Administrator's Guide
Page 199
... sources of all wireless devices. As with other HP Jetdirect print servers, firmware upgrades may be performed through a wired/cable connection. If a firmware download failure occurs on , the print server will improve the range and performance of interference. Metallic...Firmware Download Failure HP ew2400 firmware upgrades must be downloaded using similar radio frequencies. ● Reduce the distance between the printer and the Access Point or wireless PC. ENWW Troubleshooting the HP Jetdirect Print Server 199 If it is powered off/on an HP Jetdirect wireless print server...
... sources of all wireless devices. As with other HP Jetdirect print servers, firmware upgrades may be performed through a wired/cable connection. If a firmware download failure occurs on , the print server will improve the range and performance of interference. Metallic...Firmware Download Failure HP ew2400 firmware upgrades must be downloaded using similar radio frequencies. ● Reduce the distance between the printer and the Access Point or wireless PC. ENWW Troubleshooting the HP Jetdirect Print Server 199 If it is powered off/on an HP Jetdirect wireless print server...