Practical considerations for imaging and printing security
Page 6
... form of the IPP protocol using SSL/TLS, secure IPP requires no additional configuration and is implemented as a Chailet. While the ingenuity of hackers continues to evolve, HP ensures its partners. Access controls restrict installation of Chailets to authorized administrators, however...an integral step in large enterprise environments, IPsec is used by HP Web Jetadmin to provide fleet management of HP imaging and printing devices. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-...
... form of the IPP protocol using SSL/TLS, secure IPP requires no additional configuration and is implemented as a Chailet. While the ingenuity of hackers continues to evolve, HP ensures its partners. Access controls restrict installation of Chailets to authorized administrators, however...an integral step in large enterprise environments, IPsec is used by HP Web Jetadmin to provide fleet management of HP imaging and printing devices. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-...
HP Jetdirect Security Guidelines
Page 1
... HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks...security configurations to help customers protect their printing and imaging devices against such attacks and what is HP doing about printing and imaging security. however, some of this information can protect their printing and...
... HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks...security configurations to help customers protect their printing and imaging devices against such attacks and what is HP doing about printing and imaging security. however, some of this information can protect their printing and...
HP Jetdirect Security Guidelines
Page 2
..., getting a configuration page to find out, "plug-n-play " on the network. At the time HP Jetdirect was introduced, there was designed to promote 'Ease-of-Use', to reduce support calls, and to clients on the network and behave as SSL/TLS, SNMPv3, 802.1X, and IPsec. At one of the first print servers to the...
..., getting a configuration page to find out, "plug-n-play " on the network. At the time HP Jetdirect was introduced, there was designed to promote 'Ease-of-Use', to reduce support calls, and to clients on the network and behave as SSL/TLS, SNMPv3, 802.1X, and IPsec. At one of the first print servers to the...
HP Jetdirect Security Guidelines
Page 4
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
HP Jetdirect Security Guidelines
Page 6
... In order to be firmware upgraded to as a security risk. 6 One of the Jetdirect device. This flexibility will automatically indicate which devices need to properly recommend configurations for securing these devices do the following: • Update all devices to the latest firmware....hp.com/go/dlm_sw. These models have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. As a reminder, these devices is to install a J7961G 635n IPv6/IPsec print server. The EIO slot was introduced on the HP LaserJet...
... In order to be firmware upgraded to as a security risk. 6 One of the Jetdirect device. This flexibility will automatically indicate which devices need to properly recommend configurations for securing these devices do the following: • Update all devices to the latest firmware....hp.com/go/dlm_sw. These models have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. As a reminder, these devices is to install a J7961G 635n IPv6/IPsec print server. The EIO slot was introduced on the HP LaserJet...
HP Jetdirect Security Guidelines
Page 9
.... they are trusted to establish a print connection, they are three common ways of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP Download Manager or HP Web Jetadmin, the application issues an SNMP SET to the HP Jetdirect device. This process will be configured to use the well-known default...
.... they are trusted to establish a print connection, they are three common ways of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP Download Manager or HP Web Jetadmin, the application issues an SNMP SET to the HP Jetdirect device. This process will be configured to use the well-known default...
HP Jetdirect Security Guidelines
Page 10
...conversation of course specifying a good password. The defense against TCP/IP MITM attacks is the proper deployment of a print job, it by pretending to be configured to plant the listening device in the conference room and instead pulling a fire alarm in MITM attacks. Some ... server, it to avoid plain-text transmission of all customers concerned about printer/MFP security: http://www.hp.com/united-states/business/catalog/nist_checklist.html. 10 In some cases, as we have discussed HP Jetdirect security primarily. However, as with the printer/MFP's PJL library over a print ...
...conversation of course specifying a good password. The defense against TCP/IP MITM attacks is the proper deployment of a print job, it by pretending to be configured to plant the listening device in the conference room and instead pulling a fire alarm in MITM attacks. Some ... server, it to avoid plain-text transmission of all customers concerned about printer/MFP security: http://www.hp.com/united-states/business/catalog/nist_checklist.html. 10 In some cases, as we have discussed HP Jetdirect security primarily. However, as with the printer/MFP's PJL library over a print ...
HP Jetdirect Security Guidelines
Page 11
...; however, there are many free BOOTP and TFTP servers for a great deal of the TFTP daemon's home directory • Forces HP Jetdirect to DHCP if a BOOTP server is unavailable. Recommended Security Deployments: SET 1 The HP Jetdirect products denoted by SET 1 do not have any cryptographic security capability. This configuration file allows for Windows and setup is recommended...
...; however, there are many free BOOTP and TFTP servers for a great deal of the TFTP daemon's home directory • Forces HP Jetdirect to DHCP if a BOOTP server is unavailable. Recommended Security Deployments: SET 1 The HP Jetdirect products denoted by SET 1 do not have any cryptographic security capability. This configuration file allows for Windows and setup is recommended...
HP Jetdirect Security Guidelines
Page 12
...DEFAULT PASSWORD = 1776 @PJL DINQUIRE PASSWORD @PJL DEFAULT CPLOCK = ON @PJL DINQUIRE CPLOCK @PJL EOJ %-12345X Recommended Security Deployments: SET 2 For the HP Jetdirect products that are in the left-hand navigation bar, and then the "Wizard" tab. Press the "Start Wizard" button to a parameter file called "...pjlprotection". A sample configuration is sent to this page. Here, we are going to choose "Custom Security" to show all the options that are available to implement...
...DEFAULT PASSWORD = 1776 @PJL DINQUIRE PASSWORD @PJL DEFAULT CPLOCK = ON @PJL DINQUIRE CPLOCK @PJL EOJ %-12345X Recommended Security Deployments: SET 2 For the HP Jetdirect products that are in the left-hand navigation bar, and then the "Wizard" tab. Press the "Start Wizard" button to a parameter file called "...pjlprotection". A sample configuration is sent to this page. Here, we are going to choose "Custom Security" to show all the options that are available to implement...
HP Jetdirect Security Guidelines
Page 17
Disable unused print protocols and services. For now, this configuration step is required. For a complete discussion of 802.1X, see HP Jetdirect whitepapers on the topic. Special equipment is skipped. 17 Allowing device discovery helps in device management, but may not be required in all environments. 802.1X authentication can also be done.
Disable unused print protocols and services. For now, this configuration step is required. For a complete discussion of 802.1X, see HP Jetdirect whitepapers on the topic. Special equipment is skipped. 17 Allowing device discovery helps in device management, but may not be required in all environments. 802.1X authentication can also be done.
HP Jetdirect Security Guidelines
Page 28
... to have the Security Wizard for the default rule and then click "Add Rules...". Recommended Security Deployments: SET 4 First and foremost, SET 4 configuration needs to utilize a management protocol. Select "All IP Addresses" and click "Next". 28 Let's go through the same process as we did... with a management protocol to Jetdirect without using HTTPS before navigating to this time, we can begin the IPsec configuration. Select "Allow" for SET 2 executed. If an end station tries to communicate with SET 3, only ...
... to have the Security Wizard for the default rule and then click "Add Rules...". Recommended Security Deployments: SET 4 First and foremost, SET 4 configuration needs to utilize a management protocol. Select "All IP Addresses" and click "Next". 28 Let's go through the same process as we did... with a management protocol to Jetdirect without using HTTPS before navigating to this time, we can begin the IPsec configuration. Select "Allow" for SET 2 executed. If an end station tries to communicate with SET 3, only ...
HP Jetdirect Security Guidelines
Page 30
Some Jetdirect models may require you to configure IKE parameters. The one selected is for more emphasis on Interoperability and less on Security. Click "Next". 30 Name the IPsec Template. However, this model has a quick set of IKE defaults that can be used. Click "New".
Some Jetdirect models may require you to configure IKE parameters. The one selected is for more emphasis on Interoperability and less on Security. Click "Next". 30 Name the IPsec Template. However, this model has a quick set of IKE defaults that can be used. Click "New".
HP Jetdirect 620n Print Server Setup Guide
Page 4
Troubleshooting Tools HP Jetdirect Configuration Page 22 10/100Base-TX Link Configuration 22 Link-Speed LEDs 23 Link Troubleshooting 23 Resetting to Your Network Server or System . . . 16 Microsoft or Novell NetWare Networks 17 UNIX Networks ...Need 8 For Help 9 2. Installation Procedures Verify Printer Operation 10 Remove Power to Printer, Install the Hardware 11 Verify Jetdirect Print Server Operation 12 If Required, Configure Jetdirect With Your Network Settings 14 Add the Printer to Factory Defaults 25 Controlling Network Protocols 25 Enabling or Disabling Network Protocols...
Troubleshooting Tools HP Jetdirect Configuration Page 22 10/100Base-TX Link Configuration 22 Link-Speed LEDs 23 Link Troubleshooting 23 Resetting to Your Network Server or System . . . 16 Microsoft or Novell NetWare Networks 17 UNIX Networks ...Need 8 For Help 9 2. Installation Procedures Verify Printer Operation 10 Remove Power to Printer, Install the Hardware 11 Verify Jetdirect Print Server Operation 12 If Required, Configure Jetdirect With Your Network Settings 14 Add the Printer to Factory Defaults 25 Controlling Network Protocols 25 Enabling or Disabling Network Protocols...
HP Jetdirect 620n Print Server Setup Guide
Page 6
... 10 or 100 Mbps, and to communicate using the printer control panel, or other configuration tools once network communications is illustrated in Figure 1-2. HP Jetdirect EIO print servers support connection to operate with your network and print at network speeds. Figure 1-1 HP Jetdirect EIO Print Server When connected and powered on your network to Fast Ethernet (IEEE 802.3/802.3u...
... 10 or 100 Mbps, and to communicate using the printer control panel, or other configuration tools once network communications is illustrated in Figure 1-2. HP Jetdirect EIO print servers support connection to operate with your network and print at network speeds. Figure 1-1 HP Jetdirect EIO Print Server When connected and powered on your network to Fast Ethernet (IEEE 802.3/802.3u...
HP Jetdirect 620n Print Server Setup Guide
Page 7
Figure 1-2 Typical HP Jetdirect Print Server Installation HP Jetdirect EIO Using the HP Jetdirect print server, setting up your network printer is easy. ● Install the HP Jetdirect print server hardware and connect the printer to your network. ● Use network installation software to configure the print server for network communications, and to add the printer on each computer system that will send print jobs directly to the printer. For detailed instructions, see Chapter 2. ENWW Introduction 7
Figure 1-2 Typical HP Jetdirect Print Server Installation HP Jetdirect EIO Using the HP Jetdirect print server, setting up your network printer is easy. ● Install the HP Jetdirect print server hardware and connect the printer to your network. ● Use network installation software to configure the print server for network communications, and to add the printer on each computer system that will send print jobs directly to the printer. For detailed instructions, see Chapter 2. ENWW Introduction 7
HP Jetdirect 620n Print Server Setup Guide
Page 10
... may also vary by static electricity through electrostatic discharge (ESD). To print a Printer Configuration page, see your printer is working properly, print a Printer Configuration page. ENWW Installation Procedures 10 Note The name of the printer. 2 Installation Procedures CAUTION HP Jetdirect cards contain electronic components that your printer documentation for this purpose. Verify Printer Operation To verify...
... may also vary by static electricity through electrostatic discharge (ESD). To print a Printer Configuration page, see your printer is working properly, print a Printer Configuration page. ENWW Installation Procedures 10 Note The name of the printer. 2 Installation Procedures CAUTION HP Jetdirect cards contain electronic components that your printer documentation for this purpose. Verify Printer Operation To verify...
HP Jetdirect 620n Print Server Setup Guide
Page 12
.... ENWW Installation Procedures 12 In HP DesignJet printers, Jetdirect configuration information will automatically print when you have: ■ Installed the print server correctly and properly connected the print server to If Required, Configure Jetdirect With Your Network Settings. In most HP LaserJet printers, a Jetdirect Configuration page will be included on again to the applicable HP Jetdirect Administrator's Guide located on the HP Jetdirect CD-ROM. 3. If I /O CARD...
.... ENWW Installation Procedures 12 In HP DesignJet printers, Jetdirect configuration information will automatically print when you have: ■ Installed the print server correctly and properly connected the print server to If Required, Configure Jetdirect With Your Network Settings. In most HP LaserJet printers, a Jetdirect Configuration page will be included on again to the applicable HP Jetdirect Administrator's Guide located on the HP Jetdirect CD-ROM. 3. If I /O CARD...
HP Jetdirect 620n Print Server Setup Guide
Page 13
Figure 2-2 Example of HP Jetdirect Configuration Page I/O CARD READY ENWW Installation Procedures 13 Note See Chapter 3 in this guide for this print server supplied electronically on the HP Jetdirect CD-ROM. For persistent problems, refer to the HP Jetdirect Administrator's Guide for link configuration and troubleshooting information.
Figure 2-2 Example of HP Jetdirect Configuration Page I/O CARD READY ENWW Installation Procedures 13 Note See Chapter 3 in this guide for this print server supplied electronically on the HP Jetdirect CD-ROM. For persistent problems, refer to the HP Jetdirect Administrator's Guide for link configuration and troubleshooting information.
HP Jetdirect 620n Print Server Setup Guide
Page 14
... can proceed directly to Add the Printer to access the embedded Web server on the HP Jetdirect print server. The Web pages on the print server allow you to both configure basic network settings on the print server, and add the printer to your system configuration. See Add the Printer to configure network parameters. This software will allow you to Your Network...
... can proceed directly to Add the Printer to access the embedded Web server on the HP Jetdirect print server. The Web pages on the print server allow you to both configure basic network settings on the print server, and add the printer to your system configuration. See Add the Printer to configure network parameters. This software will allow you to Your Network...
HP Jetdirect 620n Print Server Setup Guide
Page 15
..., see the applicable HP Jetdirect Administrator's Guide on the HP Jetdirect CD-ROM. ● Use the printer's control panel (for this print server included on the HP Jetdirect CD-ROM. ENWW Installation Procedures 15 HP printer setup and management software can be downloaded from HP's online support at: http://www.hp.com/support/net_printing Note After the print server is configured with a supported control...
..., see the applicable HP Jetdirect Administrator's Guide on the HP Jetdirect CD-ROM. ● Use the printer's control panel (for this print server included on the HP Jetdirect CD-ROM. ENWW Installation Procedures 15 HP printer setup and management software can be downloaded from HP's online support at: http://www.hp.com/support/net_printing Note After the print server is configured with a supported control...