Practical considerations for imaging and printing security
Page 4
... certified may actually provide more robust security capabilities than products that compose a secure system: confidentiality, access control, integrity, and non-repudiation. 4 Details of configuration for imaging and printing products. HP considers security checklists as a means to significantly improve the security capabilities' ease of the checklist program are available at http://csrc.nist.gov...
... certified may actually provide more robust security capabilities than products that compose a secure system: confidentiality, access control, integrity, and non-repudiation. 4 Details of configuration for imaging and printing products. HP considers security checklists as a means to significantly improve the security capabilities' ease of the checklist program are available at http://csrc.nist.gov...
Practical considerations for imaging and printing security
Page 6
...HP's imaging and printing product development, and as those with HP Jetdirect devices Network connectivity for securing printing and scanning functions. 6 Secure IPP (IPP-S) The secure form of the IPP protocol using SSL/TLS, secure IPP requires no additional configuration and is the recommended protocol for HP imaging and printing... and Linux®. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to extend an imaging and printing device's functionality. Vulnerabilities, ...
...HP's imaging and printing product development, and as those with HP Jetdirect devices Network connectivity for securing printing and scanning functions. 6 Secure IPP (IPP-S) The secure form of the IPP protocol using SSL/TLS, secure IPP requires no additional configuration and is the recommended protocol for HP imaging and printing... and Linux®. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to extend an imaging and printing device's functionality. Vulnerabilities, ...
Practical considerations for imaging and printing security
Page 7
...securing the network communications between the MFP and the DSS Server. WJA allows devices to develop device-specific extensions using plug-ins. Firmware updates Firmware updates can automatically discover and configure newly installed devices. In addition to the secondary email ...-party applications, such as necessary. Device and service control Imaging and printing devices support many network protocols and services. HP releases firmware updates based on enterprise networks. The DSS Server may prevent digital sending to email addresses outside of the internal network ...
...securing the network communications between the MFP and the DSS Server. WJA allows devices to develop device-specific extensions using plug-ins. Firmware updates Firmware updates can automatically discover and configure newly installed devices. In addition to the secondary email ...-party applications, such as necessary. Device and service control Imaging and printing devices support many network protocols and services. HP releases firmware updates based on enterprise networks. The DSS Server may prevent digital sending to email addresses outside of the internal network ...
Practical considerations for imaging and printing security
Page 8
...-wide Common Criteria Certification and expects to certify products to security and access policies. Common Criteria Certification HP is responsible for the HP LaserJet 4345mfp, 4730mfp. Driven by application (e.g., Excel spreadsheets and Word documents). Trusted Computing Group The ... and analog fax capabilities for standards related to provide it . Logging functions can also include configuration and management actions. Trusted imaging and printing platforms will allow both introduced content protection capabilities in process of controls will allow device activity...
...-wide Common Criteria Certification and expects to certify products to security and access policies. Common Criteria Certification HP is responsible for the HP LaserJet 4345mfp, 4730mfp. Driven by application (e.g., Excel spreadsheets and Word documents). Trusted Computing Group The ... and analog fax capabilities for standards related to provide it . Logging functions can also include configuration and management actions. Trusted imaging and printing platforms will allow both introduced content protection capabilities in process of controls will allow device activity...
Practical considerations for imaging and printing security
Page 12
.... Typically when files are deleted, or erase the entire disk when triggered by an administrator or a regularly scheduled event configured by HP Web Jetadmin. Data erased using the DoD 5220-22m algorithm is available on the drive and can occur continuously as removed... remains on the following devices: • HP LaserJet 2400, 4250, 4350 printers • HP LaserJet 4100mfp, 4345mfp, 4730mfp, 9000mfp, 9000Lmfp, 9040mfp, 9050, 9050mfp, 9055mfp, 9065mfp • HP Color LaserJet 5550 printer • HP Color LaserJet 9500mfp 12 HP Secure Erase is considered unrecoverable. Secure Erase can...
.... Typically when files are deleted, or erase the entire disk when triggered by an administrator or a regularly scheduled event configured by HP Web Jetadmin. Data erased using the DoD 5220-22m algorithm is available on the drive and can occur continuously as removed... remains on the following devices: • HP LaserJet 2400, 4250, 4350 printers • HP LaserJet 4100mfp, 4345mfp, 4730mfp, 9000mfp, 9000Lmfp, 9040mfp, 9050, 9050mfp, 9055mfp, 9065mfp • HP Color LaserJet 5550 printer • HP Color LaserJet 9500mfp 12 HP Secure Erase is considered unrecoverable. Secure Erase can...
HP Jetdirect Print Servers - Philosophy of Security
Page 5
...Is this tends to be managed and stored on . What would be setup before security can see a similar line of -band configuration - Example User has revealed critical information to promote security as First Cause or the Unmoved Mover of the very first domino. too ...to 5 You can even begin to wonder what caused the dominoes to realize their database had the usernames/passwords configured - Domain: EXAMPLE Email: [email protected] Intranet Web Server Login: Example_User Password: WOW!I'mAnEntAdminForExample!!! Next, write down ? It depends. Analysis: Here we will be fine...
...Is this tends to be managed and stored on . What would be setup before security can see a similar line of -band configuration - Example User has revealed critical information to promote security as First Cause or the Unmoved Mover of the very first domino. too ...to 5 You can even begin to wonder what caused the dominoes to realize their database had the usernames/passwords configured - Domain: EXAMPLE Email: [email protected] Intranet Web Server Login: Example_User Password: WOW!I'mAnEntAdminForExample!!! Next, write down ? It depends. Analysis: Here we will be fine...
HP Jetdirect Print Servers - Philosophy of Security
Page 6
...access to a Lightweight Directory Access Protocol Server or Hyper-Text Transmission Protocol server for the Certificate Revocation List or trusted access to my Certificate Authority - The device does do this doesn't it is a trusted device? SD: Um... I believe you can configure them manually as well. So, ... your management station? SD: Um... We use SSL. SD: Um...Yes PC: How do more configuring. that is on . PC: Well, that means I 'll have to an Online Certificate Status Protocol server. SD: We use Digital Certificates? SD: Oh yes! SD: Um... SD: Um...Yes. SD...
...access to a Lightweight Directory Access Protocol Server or Hyper-Text Transmission Protocol server for the Certificate Revocation List or trusted access to my Certificate Authority - The device does do this doesn't it is a trusted device? SD: Um... I believe you can configure them manually as well. So, ... your management station? SD: Um... We use SSL. SD: Um...Yes PC: How do more configuring. that is on . PC: Well, that means I 'll have to an Online Certificate Status Protocol server. SD: We use Digital Certificates? SD: Oh yes! SD: Um... SD: Um...Yes. SD...
HP Jetdirect Print Servers - Philosophy of Security
Page 7
... needed to happen before being used, insecure cipher suites eliminated, enforced CRLs, correct time, and so on. • The configuration of using SSL - Easily the most overlooked and hardest part of administration credentials on the device. It is very important to ...understand what needs to be configuring these trust anchors for instance?). • The implementation of the application that need to support digital certificates (e.g., the trusted CA certificate...
... needed to happen before being used, insecure cipher suites eliminated, enforced CRLs, correct time, and so on. • The configuration of using SSL - Easily the most overlooked and hardest part of administration credentials on the device. It is very important to ...understand what needs to be configuring these trust anchors for instance?). • The implementation of the application that need to support digital certificates (e.g., the trusted CA certificate...
HP Jetdirect Print Servers - Philosophy of Security
Page 8
... to keep their energy learning everything about that designed it this configuration performed, and what settings, where does this configuration take place, when does this configuration need to give them to recover your printed and imaged documents because no one will call reductionism. Let's... look at the tasks they could be able to be tricky - With our view of the server or client. 8 "who configures what...
... to keep their energy learning everything about that designed it this configuration performed, and what settings, where does this configuration take place, when does this configuration need to give them to recover your printed and imaged documents because no one will call reductionism. Let's... look at the tasks they could be able to be tricky - With our view of the server or client. 8 "who configures what...
HP Jetdirect Print Servers - Philosophy of Security
Page 12
I configured. Most people leave early on the switch I 'm getting pretty good at the company... on the trays of technical knowledge? I wander around to all the buildings and eat all day on and forget to do server authentication. He was simply no broadband connectivity. Then I looked a bit silly in a suburb and use SSL, but I was...some observations about security • Decisions made by people can help when people do not make good decisions about people printing in the cafe, I placed on a critical issue. They use it so fast they have plenty of an Unethical...
I configured. Most people leave early on the switch I 'm getting pretty good at the company... on the trays of technical knowledge? I wander around to all the buildings and eat all day on and forget to do server authentication. He was simply no broadband connectivity. Then I looked a bit silly in a suburb and use SSL, but I was...some observations about security • Decisions made by people can help when people do not make good decisions about people printing in the cafe, I placed on a critical issue. They use it so fast they have plenty of an Unethical...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 5
Table of contents 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements...
Table of contents 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 6
... Settings 58 Moving to Another Network (IPv4 59 Using the Embedded Web Server ...59 Using the Printer Control Panel ...59 4 Embedded Web Server (V.36.xx) Requirements ...62 Compatible Web Browsers 62 Browser Exceptions 62 Supported HP Web Jetadmin Version 62 Viewing the Embedded Web Server 62 Operating Notes ...64 HP Jetdirect Home Tab ...64 Device Tabs ...65...
... Settings 58 Moving to Another Network (IPv4 59 Using the Embedded Web Server ...59 Using the Printer Control Panel ...59 4 Embedded Web Server (V.36.xx) Requirements ...62 Compatible Web Browsers 62 Browser Exceptions 62 Supported HP Web Jetadmin Version 62 Viewing the Embedded Web Server 62 Operating Notes ...64 HP Jetdirect Home Tab ...64 Device Tabs ...65...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 7
....1X Authentication ...93 IPsec/Firewall ...95 Network Statistics ...95 Protocol Info ...95 Configuration Page ...95 Other Links ...95 ? (Help) ...95 Support ...95 5 IPsec/Firewall Configuration (V.36.xx) Default Rule Example ...100 IPsec Security Associations (SA) ...100 HP Jetdirect IPsec/Firewall Wizard 101 Limitations to Rules, Templates and Services 101 Step 1: Specify...Settings ...83 Select Language ...84 Security: Settings ...84 Status ...84 Wizard ...84 Restore Defaults 86 Authorization ...86 Admin. Account 86 Certificates ...87 Configuring Certificates 88 Access Control 90 Mgmt.
....1X Authentication ...93 IPsec/Firewall ...95 Network Statistics ...95 Protocol Info ...95 Configuration Page ...95 Other Links ...95 ? (Help) ...95 Support ...95 5 IPsec/Firewall Configuration (V.36.xx) Default Rule Example ...100 IPsec Security Associations (SA) ...100 HP Jetdirect IPsec/Firewall Wizard 101 Limitations to Rules, Templates and Services 101 Step 1: Specify...Settings ...83 Select Language ...84 Security: Settings ...84 Status ...84 Wizard ...84 Restore Defaults 86 Authorization ...86 Admin. Account 86 Certificates ...87 Configuring Certificates 88 Access Control 90 Mgmt.
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 8
... 2: Printing an HP Jetdirect Configuration Page 122 Procedure 3: Resolving Printer Display Error Messages 123 Procedure 4: Resolving Printer Communication Problems with the Network 124 8 HP Jetdirect Configuration Pages HP Jetdirect Configuration Page ...128 Status Field Error Messages 128 Configuration Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section...
... 2: Printing an HP Jetdirect Configuration Page 122 Procedure 3: Resolving Printer Display Error Messages 123 Procedure 4: Resolving Printer Communication Problems with the Network 124 8 HP Jetdirect Configuration Pages HP Jetdirect Configuration Page ...128 Status Field Error Messages 128 Configuration Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 9
... 156 LPD on UNIX Systems ...156 Configuring Print Queues for BSD-based Systems 156 Configuring Print Queues Using SAM (HP-UX systems 157 Printing a Test File 158 LPD on Windows 2000/Server 2003 Systems 159 Installing TCP/IP Software 159 Configuring a Network Printer for Windows 2000/Server 2003 Systems ........ 160 Verifying the Configuration 161 Printing from Windows Clients 161 LPD on...
... 156 LPD on UNIX Systems ...156 Configuring Print Queues for BSD-based Systems 156 Configuring Print Queues Using SAM (HP-UX systems 157 Printing a Test File 158 LPD on Windows 2000/Server 2003 Systems 159 Installing TCP/IP Software 159 Configuring a Network Printer for Windows 2000/Server 2003 Systems ........ 160 Verifying the Configuration 161 Printing from Windows Clients 161 LPD on...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 12
... and security features. Table 1-2 Supported Network Protocols Supported Network Protocols Network Printing Environments1 Product Support TCP/IPv4 (Direct Mode printing) Microsoft Windows 2000, XP (32- J7988G (en1700)3 J7993E 2 Chapter 1 Introducing the HP Jetdirect Print Server ENWW Value-featured support includes TCP/IP (IPv 4 and IPv 6) only, with IPv6 client support. Supported Network Protocols The supported network protocols, and popular...
... and security features. Table 1-2 Supported Network Protocols Supported Network Protocols Network Printing Environments1 Product Support TCP/IPv4 (Direct Mode printing) Microsoft Windows 2000, XP (32- J7988G (en1700)3 J7993E 2 Chapter 1 Introducing the HP Jetdirect Print Server ENWW Value-featured support includes TCP/IP (IPv 4 and IPv 6) only, with IPv6 client support. Supported Network Protocols The supported network protocols, and popular...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 14
... Protocol (EAP) on IPv4, IPv6 and IPX networks. Authentication EAP/802.1X Server-Based Authentication As a network client, HP Jetdirect full-featured print servers support network access using ...server authentication and passwords for device management. In cooperation with an authentication server, such as HP Jetdirect en1700, support an SNMP v1/v2c agent only. Full-featured HP Jetdirect print servers... server. To configure the print server for authentication of network access and services available to the print server client. For more information, see Embedded Web Server ...
... Protocol (EAP) on IPv4, IPv6 and IPX networks. Authentication EAP/802.1X Server-Based Authentication As a network client, HP Jetdirect full-featured print servers support network access using ...server authentication and passwords for device management. In cooperation with an authentication server, such as HP Jetdirect en1700, support an SNMP v1/v2c agent only. Full-featured HP Jetdirect print servers... server. To configure the print server for authentication of network access and services available to the print server client. For more information, see Embedded Web Server ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 15
...-featured print servers, such as HP Jetdirect en1700 do not support IPsec may control IP traffic using Firewall protection only. installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for IPsec/Firewall operation, a browser-based wizard is provided that is installed. ● Full-featured print servers and printers/MFPs that support IPsec may control IP traffic using both IPv4 and IPv6...
...-featured print servers, such as HP Jetdirect en1700 do not support IPsec may control IP traffic using Firewall protection only. installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for IPsec/Firewall operation, a browser-based wizard is provided that is installed. ● Full-featured print servers and printers/MFPs that support IPsec may control IP traffic using both IPv4 and IPv6...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 19
...; through IPv4 protocols only. See Table 2-1 Software Solutions on page 9 to help you determine which software is required for IPv6 printing on page 11 (See the HP Website for supported Remote installation, configuration, and ● HP's preferred solution for HP Jetdirect print servers. Solaris1 Fedora Core and SuSE Linux NetWare1 Remote firmware upgrades for system updates.) management of HP Jetdirect-connected print ongoing...
...; through IPv4 protocols only. See Table 2-1 Software Solutions on page 9 to help you determine which software is required for IPv6 printing on page 11 (See the HP Website for supported Remote installation, configuration, and ● HP's preferred solution for HP Jetdirect print servers. Solaris1 Fedora Core and SuSE Linux NetWare1 Remote firmware upgrades for system updates.) management of HP Jetdirect-connected print ongoing...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 20
...server, also known as "client-server" printing. Version 6.0 supports printer discovery on an IPv6 network, but printer discovery is a utility for HP printers connected to IPv4 protocols. HP Install Network Printer Wizard (Windows) The HP Install Network Printer Wizard is limited to TCP/ IPv4 networks using full-featured HP Jetdirect print servers...peer" printing. Printing through an HP Jetdirect print server HP Jetdirect Printer Installer for UNIX The HP Jetdirect Printer Installer for UNIX contains support for HP-UX and Solaris systems. The software installs, configures and ...
...server, also known as "client-server" printing. Version 6.0 supports printer discovery on an IPv6 network, but printer discovery is a utility for HP printers connected to IPv4 protocols. HP Install Network Printer Wizard (Windows) The HP Install Network Printer Wizard is limited to TCP/ IPv4 networks using full-featured HP Jetdirect print servers...peer" printing. Printing through an HP Jetdirect print server HP Jetdirect Printer Installer for UNIX The HP Jetdirect Printer Installer for UNIX contains support for HP-UX and Solaris systems. The software installs, configures and ...