Practical considerations for imaging and printing security
Page 1
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
HP JetDirect External Print Servers 300X, 500X 170X, EX Plus Hardware Installation Guide - 5969-3466
Page 20
... you get the right PDLs, and the configuration page will be printed. HP PCL (default) ASCII Postscript HP-GL/2 The Status LED is ... Resetting to Factory Defaults Once you have configured the HP JetDirect external print server, the configuration settings are retained in the following table. For PDL..., the Status and Activity LEDs are cycling through four configurations, as outlined in memory unless you manually reset them. (The firmware is not affected when you reset the configuration settings.) To reset the configuration settings to their factory defaults, follow these steps:...
... you get the right PDLs, and the configuration page will be printed. HP PCL (default) ASCII Postscript HP-GL/2 The Status LED is ... Resetting to Factory Defaults Once you have configured the HP JetDirect external print server, the configuration settings are retained in the following table. For PDL..., the Status and Activity LEDs are cycling through four configurations, as outlined in memory unless you manually reset them. (The firmware is not affected when you reset the configuration settings.) To reset the configuration settings to their factory defaults, follow these steps:...
HP Jetdirect Security Guidelines
Page 1
... this information can protect their printing and imaging devices. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10...
... this information can protect their printing and imaging devices. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10...
HP Jetdirect Security Guidelines
Page 2
... within HP Jetdirect was designed to allow users to print to Jetdirect immediately. Does that last part sound like your desktop computer system or printer spooler, and then forgetting about them. As we have never had their firmware updated or their configuration changed. In today's ...the first print servers to provide a rich customer experience regardless of use for maintaining the proper operation of an infrastructure, regardless of the type of proprietary protocols as well as Ethernet. Popular HP tools, such as SSL/TLS, SNMPv3, 802.1X, and IPsec. HP Jetdirect was designed...
... within HP Jetdirect was designed to allow users to print to Jetdirect immediately. Does that last part sound like your desktop computer system or printer spooler, and then forgetting about them. As we have never had their firmware updated or their configuration changed. In today's ...the first print servers to provide a rich customer experience regardless of use for maintaining the proper operation of an infrastructure, regardless of the type of proprietary protocols as well as Ethernet. Popular HP tools, such as SSL/TLS, SNMPv3, 802.1X, and IPsec. HP Jetdirect was designed...
HP Jetdirect Security Guidelines
Page 4
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
HP Jetdirect Security Guidelines
Page 5
... Non-Cryptographic Security, upgradeable after purchase SSL/TLS for Management, SNMPv3 Table 3 - HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for...
... Non-Cryptographic Security, upgradeable after purchase SSL/TLS for Management, SNMPv3 Table 3 - HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for...
HP Jetdirect Security Guidelines
Page 6
...port print server like the 300X will not upgrade the security capabilities of the easiest ways to perform this operation is to use the HP Download Manager available at the very least should do not have the most security capability in HP Jetdirect's product line. HP Jetdirect ...ago. With security configurations, one must be firmware upgraded to lock the front door and leave your windows open. The administrative guideline for many cases, one must "lock down" several things before upgrading all HP Jetdirect firmware to the highest level. These models have cryptographic...
...port print server like the 300X will not upgrade the security capabilities of the easiest ways to perform this operation is to use the HP Download Manager available at the very least should do not have the most security capability in HP Jetdirect's product line. HP Jetdirect ...ago. With security configurations, one must be firmware upgraded to lock the front door and leave your windows open. The administrative guideline for many cases, one must "lock down" several things before upgrading all HP Jetdirect firmware to the highest level. These models have cryptographic...
HP Jetdirect Security Guidelines
Page 7
.... Jetdirect Firmware Versions NOTE: For some options, presented in Table 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server...
.... Jetdirect Firmware Versions NOTE: For some options, presented in Table 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server...
HP Jetdirect Security Guidelines
Page 9
... the recovery partition and regain full functionality without having to contact HP support. they are trusted to establish a print connection, they are three common ways of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP Download Manager or HP Web Jetadmin, the application issues an SNMP SET to the...
... the recovery partition and regain full functionality without having to contact HP support. they are trusted to establish a print connection, they are three common ways of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP Download Manager or HP Web Jetadmin, the application issues an SNMP SET to the...
HP Jetdirect Security Guidelines
Page 10
How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is nonetheless a general vulnerability of the password, FTP upgrades are a good defense against the TCP/IP protocol suite does. Let's review what a MITM ... on the network can be configured to all the data sent between an email client and email server, it may end up at the final destination as with the printer/MFP's PJL library over a print connection. These tools often claim to behave in a conference room to a printer. Properly deployed cryptographic protocols are...
How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is nonetheless a general vulnerability of the password, FTP upgrades are a good defense against the TCP/IP protocol suite does. Let's review what a MITM ... on the network can be configured to all the data sent between an email client and email server, it may end up at the final destination as with the printer/MFP's PJL library over a print connection. These tools often claim to behave in a conference room to a printer. Properly deployed cryptographic protocols are...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 8
... may be obtained from HP Customer Care Online (http://www.hp.com/support/net_printing). Supported Print Servers Unless otherwise specified, the features described in this product, HP network configuration and management software for network configuration on other systems, consult your system vendor. 2 Introducing the HP JetDirect Print Server EN q HP JetDirect 600N/400N internal print servers q HP JetDirect 500X/300X external print servers Supported Networks HP JetDirect print servers support a variety of...
... may be obtained from HP Customer Care Online (http://www.hp.com/support/net_printing). Supported Print Servers Unless otherwise specified, the features described in this product, HP network configuration and management software for network configuration on other systems, consult your system vendor. 2 Introducing the HP JetDirect Print Server EN q HP JetDirect 600N/400N internal print servers q HP JetDirect 500X/300X external print servers Supported Networks HP JetDirect print servers support a variety of...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 12
... NetWare* *Supports queue creation (NetWare), and peripheral management from HP Web JetAdmin hosted on Windows NT 4.0 Remote installation, configuration, and management of HP JetDirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers Alerts and consumables management Remote firmware upgrades for HP JetDirect print servers HP's preferred solution for ongoing management and installation of multiple...
... NetWare* *Supports queue creation (NetWare), and peripheral management from HP Web JetAdmin hosted on Windows NT 4.0 Remote installation, configuration, and management of HP JetDirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers Alerts and consumables management Remote firmware upgrades for HP JetDirect print servers HP's preferred solution for ongoing management and installation of multiple...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 13
..., mail, and overnight services Requires HP JetDirect print server (firmware version X.07.16 or later) More information: http://www.hp.com/ support/net_printing HP IP/IPX Printer Gateway for NDPS NetWare 4.11, 4.2, 5.0 Simplified installation, printing, and bidirectional management of HP JetDirect-connected printers under Novell Distributed Print Services (NDPS) Allows automatic discovery and installation of HP JetDirect-connected printers into NDPS via IPX...
..., mail, and overnight services Requires HP JetDirect print server (firmware version X.07.16 or later) More information: http://www.hp.com/ support/net_printing HP IP/IPX Printer Gateway for NDPS NetWare 4.11, 4.2, 5.0 Simplified installation, printing, and bidirectional management of HP JetDirect-connected printers under Novell Distributed Print Services (NDPS) Allows automatic discovery and installation of HP JetDirect-connected printers into NDPS via IPX...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 16
... from your browser, navigate to accept incoming IPP requests. Internet Printer Connection Software HP JetDirect print servers (firmware version x.07.16 or later) support the Internet Printing Protocol (IPP). Note For incoming print path requests, the network administrator must configure the firewall to HP Web JetAdmin's URL. Windows NT 4.0 For Windows NT 4.0, you can use the uninstall program...
... from your browser, navigate to accept incoming IPP requests. Internet Printer Connection Software HP JetDirect print servers (firmware version x.07.16 or later) support the Internet Printing Protocol (IPP). Note For incoming print path requests, the network administrator must configure the firewall to HP Web JetAdmin's URL. Windows NT 4.0 For Windows NT 4.0, you can use the uninstall program...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 19
System Requirements q Computer running Microsoft Windows NT 4.0 (Intel based) or Windows 2000 q IPP-enabled HP JetDirect print server (firmware must be at revision x.07.16 or later) Supported Browsers Windows NT q Microsoft Internet Explorer 4.0 with SP1 or later q Netscape Navigator 4.06 or later Windows 2000 q Microsoft Internet Explorer 5 Supported Proxies q Web proxy with support for HTTP v1.1 or later (may not be needed if printing over an intranet) EN HP Software Solutions Summary 13
System Requirements q Computer running Microsoft Windows NT 4.0 (Intel based) or Windows 2000 q IPP-enabled HP JetDirect print server (firmware must be at revision x.07.16 or later) Supported Browsers Windows NT q Microsoft Internet Explorer 4.0 with SP1 or later q Netscape Navigator 4.06 or later Windows 2000 q Microsoft Internet Explorer 5 Supported Proxies q Web proxy with support for HTTP v1.1 or later (may not be needed if printing over an intranet) EN HP Software Solutions Summary 13
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 49
... required for TCP/IP operation q HP JetDirect firmware version x.08.03 or later q The LAN hardware (MAC) address of the HP JetDirect print server (specified on an HP JetDirect configuration page, or on the same network segment as Telnet, embedded web server, or HP Web JetAdmin software) to configure other tools (such as the HP JetDirect print server. To configure a JetDirect print server, use other IP parameters. The...
... required for TCP/IP operation q HP JetDirect firmware version x.08.03 or later q The LAN hardware (MAC) address of the HP JetDirect print server (specified on an HP JetDirect configuration page, or on the same network segment as Telnet, embedded web server, or HP Web JetAdmin software) to configure other tools (such as the HP JetDirect print server. To configure a JetDirect print server, use other IP parameters. The...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 81
.../net_printing. EN 75 q TCP/IP client systems with FTP that complies with firmware version x.08.03 or later. The HP JetDirect FTP server can be enabled or disabled through a configuration utility, such as Telnet. Requirements FTP printing requires the following: q HP JetDirect print servers with RFC 959. 5 FTP Printing Introduction FTP (File Transfer Protocol) is a basic TCP/IP connectivity utility...
.../net_printing. EN 75 q TCP/IP client systems with FTP that complies with firmware version x.08.03 or later. The HP JetDirect FTP server can be enabled or disabled through a configuration utility, such as Telnet. Requirements FTP printing requires the following: q HP JetDirect print servers with RFC 959. 5 FTP Printing Introduction FTP (File Transfer Protocol) is a basic TCP/IP connectivity utility...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 84
... client system. In addition, the available HP JetDirect ports for a login name and password. Ending the FTP Session To end an FTP session, type quit or bye. HP JetDirect external print servers with multiple ports will allow any user...printing session. 78 FTP Printing EN If the connection is prompted for printing will be displayed. For an example of a successful login, see "Example of an FTP Session." The JetDirect FTP server will display all available ports, with Port1 the default port. After a successful connection, the user is successful, the HP JetDirect model and firmware...
... client system. In addition, the available HP JetDirect ports for a login name and password. Ending the FTP Session To end an FTP session, type quit or bye. HP JetDirect external print servers with multiple ports will allow any user...printing session. 78 FTP Printing EN If the connection is prompted for printing will be displayed. For an example of a successful login, see "Example of an FTP Session." The JetDirect FTP server will display all available ports, with Port1 the default port. After a successful connection, the user is successful, the HP JetDirect model and firmware...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 109
... 6.6 through Figure 6.8. HP JetDirect print server Lists error conditions or Ready. status information (Table 7.5) Network statistics (Table 7.5) Packets received, framing errors, transmit collisions, and other network statistics. May indicate if the print server is divided into sections. Table 6.3 Ethernet and Token Ring Configuration Pages (External Print Servers) (1 of 2) Item 1 2 3 4 Description Troubleshooting Information Environment information (Table 7.5) Firmware revision number, type...
... 6.6 through Figure 6.8. HP JetDirect print server Lists error conditions or Ready. status information (Table 7.5) Network statistics (Table 7.5) Packets received, framing errors, transmit collisions, and other network statistics. May indicate if the print server is divided into sections. Table 6.3 Ethernet and Token Ring Configuration Pages (External Print Servers) (1 of 2) Item 1 2 3 4 Description Troubleshooting Information Environment information (Table 7.5) Firmware revision number, type...
HP Jetdirect Print Server Administrator's Guide (300x, 510x)
Page 32
...system configured for TCP/IP operation ● HP Jetdirect firmware version x.08.55 or later ● The LAN hardware (MAC) address of the HP Jetdirect print server (specified on an HP Jetdirect configuration page, or on a label attached to HP Jetdirect external print servers) Note On some systems, superuser rights may...9679; From a DOS prompt (Windows): arp -s ping 32 TCP/IP Configuration ENWW Using the arp and ping commands with HP Jetdirect print servers requires the following commands. The default IP address is the assigned address from a supported system. At the prompt, type:...
...system configured for TCP/IP operation ● HP Jetdirect firmware version x.08.55 or later ● The LAN hardware (MAC) address of the HP Jetdirect print server (specified on an HP Jetdirect configuration page, or on a label attached to HP Jetdirect external print servers) Note On some systems, superuser rights may...9679; From a DOS prompt (Windows): arp -s ping 32 TCP/IP Configuration ENWW Using the arp and ping commands with HP Jetdirect print servers requires the following commands. The default IP address is the assigned address from a supported system. At the prompt, type:...