Practical considerations for imaging and printing security
Page 1
...Common Criteria Certification 4 HP's imaging and printing security framework 4 Secure the Imaging and Printing Device 5 MFP walk-up authentication ...5 Network printing authentication ...5 Physical document access control 5 HP Secure Erase ...6 Vulnerabilities, viruses, and worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common...
...Common Criteria Certification 4 HP's imaging and printing security framework 4 Secure the Imaging and Printing Device 5 MFP walk-up authentication ...5 Network printing authentication ...5 Physical document access control 5 HP Secure Erase ...6 Vulnerabilities, viruses, and worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common...
Practical considerations for imaging and printing security
Page 2
Jetmobile SecureJet-PS Secure Print Product 10 Jetmobile Technologies SecureJet Authenticator Products 11 SafeCom ...11 Appendix B-HP Secure Erase...12 For more information ...13
Jetmobile SecureJet-PS Secure Print Product 10 Jetmobile Technologies SecureJet Authenticator Products 11 SafeCom ...11 Appendix B-HP Secure Erase...12 For more information ...13
Practical considerations for imaging and printing security
Page 3
... client and server PCs. While certification can prove what a product does properly, it merely provides a means to the imaging and printing infrastructure-becomes critical. As attacks increase in explaining hardcopy-specific needs. Recent publications by IT administrators. Parallels to common security capabilities are more than simple appliances, and that detect viruses before they take advantage of access, wireless networks are...
... client and server PCs. While certification can prove what a product does properly, it merely provides a means to the imaging and printing infrastructure-becomes critical. As attacks increase in explaining hardcopy-specific needs. Recent publications by IT administrators. Parallels to common security capabilities are more than simple appliances, and that detect viruses before they take advantage of access, wireless networks are...
Practical considerations for imaging and printing security
Page 4
... review manufacturer's checklists for relevance and correctness and publish those checklists on the Network Includes network communications, including media access protocols such as 802.1x and secure management, scanning, and printing protocols. IEEE p2600 The IEEE p2600 working group is defining a security standard for hardcopy devices, as well as a means to significantly improve the security capabilities' ease of configuration...
... review manufacturer's checklists for relevance and correctness and publish those checklists on the Network Includes network communications, including media access protocols such as 802.1x and secure management, scanning, and printing protocols. IEEE p2600 The IEEE p2600 working group is defining a security standard for hardcopy devices, as well as a means to significantly improve the security capabilities' ease of configuration...
Practical considerations for imaging and printing security
Page 5
... printers. HP's Digital Sending Software (DSS) enables Windows and Netware authentication using an intermediary server, while Capella Technologies' VeriUser provides Windows authentication embedded in the MFP. The user provides a simple PIN code, or uses an authentication method supported for PIN printing, while Jetmobile, Capella Technologies, Ringdale, and SafeCom each provide Smartcard, swipe card, and proximity card capabilities. Integrating MFP access controls with printing access controls, which allows control of high-value consumables. MFPs can restrict access to installed...
... printers. HP's Digital Sending Software (DSS) enables Windows and Netware authentication using an intermediary server, while Capella Technologies' VeriUser provides Windows authentication embedded in the MFP. The user provides a simple PIN code, or uses an authentication method supported for PIN printing, while Jetmobile, Capella Technologies, Ringdale, and SafeCom each provide Smartcard, swipe card, and proximity card capabilities. Integrating MFP access controls with printing access controls, which allows control of high-value consumables. MFPs can restrict access to installed...
Practical considerations for imaging and printing security
Page 6
...' VeriUser Authentication is primarily intended for small networks lacking sophisticated IT administration. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to remove all current major operating systems, including Windows, Unix®, and Linux®. Secure IPP (IPP-S) The secure form of the IPP protocol using the device's embedded web server, as well as security of web services such as...
...' VeriUser Authentication is primarily intended for small networks lacking sophisticated IT administration. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to remove all current major operating systems, including Windows, Unix®, and Linux®. Secure IPP (IPP-S) The secure form of the IPP protocol using the device's embedded web server, as well as security of web services such as...
Practical considerations for imaging and printing security
Page 7
... networked devices. HP releases firmware updates based on enterprise networks. WJA can manage any device that supports the SNMP Printer MIB and allow individual control over the network. 7 Firmware updates Firmware updates can correct product defects and enhance product functionality, and they are unused often go ignored, resulting in unintended vulnerabilities, such as Omtool, that circumvent job accounting controls. HP Web Jetadmin allows an administrator to develop device-specific extensions using plug-ins. HP imaging and printing devices...
... networked devices. HP releases firmware updates based on enterprise networks. WJA can manage any device that supports the SNMP Printer MIB and allow individual control over the network. 7 Firmware updates Firmware updates can correct product defects and enhance product functionality, and they are unused often go ignored, resulting in unintended vulnerabilities, such as Omtool, that circumvent job accounting controls. HP Web Jetadmin allows an administrator to develop device-specific extensions using plug-ins. HP imaging and printing devices...
Practical considerations for imaging and printing security
Page 8
... of computing equipment. Likewise, content originating at a device (e.g., scanned documents) will ensure devices operate with over individual access to documents, limits on document redistribution, and automatic expiration of a device prior to the network, that only authorized MFPs are allowed access to its use. Adobe® Systems (PDF) and Microsoft (Metro) have both IT administrators and users to enhance the trustworthiness of integrity. Trusted Computing...
... of computing equipment. Likewise, content originating at a device (e.g., scanned documents) will ensure devices operate with over individual access to documents, limits on document redistribution, and automatic expiration of a device prior to the network, that only authorized MFPs are allowed access to its use. Adobe® Systems (PDF) and Microsoft (Metro) have both IT administrators and users to enhance the trustworthiness of integrity. Trusted Computing...
Practical considerations for imaging and printing security
Page 9
... industry are not representative of the true risks that are using HP Web Jetadmin HP Web Jetadmin provides consistent management of the device against product defects and vulnerabilities. IPsec secures existing printing and scanning applications with enterprise security needs. It is using the environment, and how they are enabled. Update firmware images Firmware updates protect against actual needs. 2. Implement access controls HP printers and MFPs allow operations in audit and regulatory compliance. 3.
... industry are not representative of the true risks that are using HP Web Jetadmin HP Web Jetadmin provides consistent management of the device against product defects and vulnerabilities. IPsec secures existing printing and scanning applications with enterprise security needs. It is using the environment, and how they are enabled. Update firmware images Firmware updates protect against actual needs. 2. Implement access controls HP printers and MFPs allow operations in audit and regulatory compliance. 3.
Practical considerations for imaging and printing security
Page 10
... supports: • HP LaserJet 4100mfp, 9000mfp VuNTLM authenticates users via Microsoft's NTLM protocol, which MFP and digital sender functions require authenticated access. HP Job Retention and PIN Printing HP provides support for PIN printing on a wide range of existing MFP devices. DSS allows the MFP to authenticate a user prior to allowing access to MFP and digital sender functions in conjunction with the local Windows server using either a hardware module or software update, that can be installed...
... supports: • HP LaserJet 4100mfp, 9000mfp VuNTLM authenticates users via Microsoft's NTLM protocol, which MFP and digital sender functions require authenticated access. HP Job Retention and PIN Printing HP provides support for PIN printing on a wide range of existing MFP devices. DSS allows the MFP to authenticate a user prior to allowing access to MFP and digital sender functions in conjunction with the local Windows server using either a hardware module or software update, that can be installed...
Practical considerations for imaging and printing security
Page 11
... billing tools. Authentication provided by external SafeCom equipment that attaches via a parallel or network port. SafeCom provides optional encryption for communications and allows the authentication to printing and scanning functionality. SafeCom is an external hardware component, allowing compatibility with Jetmobile, SafeCom supports a variety of printers and MFPs. 11 SafeCom SafeCom provides a suite of authentication products including user pin (SecureJet FP), Smart Card (SecureJet SC), Proximity Card (SecureJet PX...
... billing tools. Authentication provided by external SafeCom equipment that attaches via a parallel or network port. SafeCom provides optional encryption for communications and allows the authentication to printing and scanning functionality. SafeCom is an external hardware component, allowing compatibility with Jetmobile, SafeCom supports a variety of printers and MFPs. 11 SafeCom SafeCom provides a suite of authentication products including user pin (SecureJet FP), Smart Card (SecureJet SC), Proximity Card (SecureJet PX...
Practical considerations for imaging and printing security
Page 12
... an administrator or a regularly scheduled event configured by HP Web Jetadmin. HP Secure Erase is considered unrecoverable. The DoD 5220-22m algorithm specifies the repetitive overwriting of data from a disk, they are simply marked as files are erased from hard disk storage. Secure Erase can occur continuously as removed, however the data remains on the following devices: • HP LaserJet 2400, 4250, 4350 printers • HP LaserJet...
... an administrator or a regularly scheduled event configured by HP Web Jetadmin. HP Secure Erase is considered unrecoverable. The DoD 5220-22m algorithm specifies the repetitive overwriting of data from a disk, they are simply marked as files are erased from hard disk storage. Secure Erase can occur continuously as removed, however the data remains on the following devices: • HP LaserJet 2400, 4250, 4350 printers • HP LaserJet...
Practical considerations for imaging and printing security
Page 13
....com • SafeCom: www.safecom.dk • Trusted Computer Group: www.trustedcomputinggroup.org © 2003 Hewlett-Packard Development Company, L.P. For more information • Please see the "HP Secure Erase for Imaging and Printing" whitepaper (www.hp.com/sbso/security/secure_disk_erase.pdf) for technical or editorial errors or omissions contained herein. The only warranties for HP products and services are U.S.
....com • SafeCom: www.safecom.dk • Trusted Computer Group: www.trustedcomputinggroup.org © 2003 Hewlett-Packard Development Company, L.P. For more information • Please see the "HP Secure Erase for Imaging and Printing" whitepaper (www.hp.com/sbso/security/secure_disk_erase.pdf) for technical or editorial errors or omissions contained herein. The only warranties for HP products and services are U.S.