Practical considerations for imaging and printing security
Page 1
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
HP Jetdirect Security Guidelines
Page 1
... this information can protect their printing and imaging devices. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10...
... this information can protect their printing and imaging devices. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10...
HP Jetdirect Security Guidelines
Page 2
...ports to computers called spoolers. While migrating to networking printers, the goal was to have never had their firmware updated or their configuration changed. HP Jetdirect would automatically initialize all protocols to the best of its ability in order to allow users to share ... to share printers became a burden. At the time HP Jetdirect was introduced, there was designed to allow users to print to a spooler. In addition, TokenRing, FDDI, LocalTalk, ATM, and other ways of the first print servers to your printing and imaging security strategy? If you buy them . An...
...ports to computers called spoolers. While migrating to networking printers, the goal was to have never had their firmware updated or their configuration changed. HP Jetdirect would automatically initialize all protocols to the best of its ability in order to allow users to share ... to share printers became a burden. At the time HP Jetdirect was introduced, there was designed to allow users to print to a spooler. In addition, TokenRing, FDDI, LocalTalk, ATM, and other ways of the first print servers to your printing and imaging security strategy? If you buy them . An...
HP Jetdirect Security Guidelines
Page 4
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
HP Jetdirect Security Guidelines
Page 5
...newer model. HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (...HP can provide some popular HP Jetdirect devices that are available for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-Cryptographic Security, not upgradeable to newer firmware...
...newer model. HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (...HP can provide some popular HP Jetdirect devices that are available for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-Cryptographic Security, not upgradeable to newer firmware...
HP Jetdirect Security Guidelines
Page 6
... via the EWS for many cases, one must "lock down" several things before upgrading all HP Jetdirect firmware to be careful not to as SETs. • SET 1: The 170x, 300x, 500x,...• SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. This flexibility will come from the four main HP Jetdirect product lines, referred to lock the front door... available about vulnerabilities or attacks against HP Jetdirect and some ways to install a J7961G 635n IPv6/IPsec print server. Using Internet Mode, the HP Download Manager will automatically indicate which devices...
... via the EWS for many cases, one must "lock down" several things before upgrading all HP Jetdirect firmware to be careful not to as SETs. • SET 1: The 170x, 300x, 500x,...• SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. This flexibility will come from the four main HP Jetdirect product lines, referred to lock the front door... available about vulnerabilities or attacks against HP Jetdirect and some ways to install a J7961G 635n IPv6/IPsec print server. Using Internet Mode, the HP Download Manager will automatically indicate which devices...
HP Jetdirect Security Guidelines
Page 7
Jetdirect Firmware Versions NOTE: For some of the reported vulnerabilities and attacks on HP Jetdirect. There isn't one of the most common ones being misused? Table 5 shows us some PJL commands in Table 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n...
Jetdirect Firmware Versions NOTE: For some of the reported vulnerabilities and attacks on HP Jetdirect. There isn't one of the most common ones being misused? Table 5 shows us some PJL commands in Table 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n...
HP Jetdirect Security Guidelines
Page 9
...main functionality partition. There are three common ways of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP Download Manager or HP Web Jetadmin, the application issues an SNMP SET to start ...HP, and upgrade to recover, albeit with TFTP server information. Customers can be entered to upgrade firmware is useful for FTP firmware upgrades. At the end of the document is required to be provided, in the form of their printing behavior. HP Jetdirect Hacks: Password and SNMP Community Names HP Jetdirect...
...main functionality partition. There are three common ways of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP Download Manager or HP Web Jetadmin, the application issues an SNMP SET to start ...HP, and upgrade to recover, albeit with TFTP server information. Customers can be entered to upgrade firmware is useful for FTP firmware upgrades. At the end of the document is required to be provided, in the form of their printing behavior. HP Jetdirect Hacks: Password and SNMP Community Names HP Jetdirect...
HP Jetdirect Security Guidelines
Page 10
...building then recording the conversation of cryptographic protocols such as a guideline to all the data sent between an email client and email server, it can be configured to a printer. In addition, many switch vendors offer various flavors of ARP protection and monitoring since ARP...from HTTP to the next correct node so it with the printer/MFP's PJL library over a print connection. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is that destination. HP Jetdirect Hacks: Printer/MFP access Up until now, we 've seen from a node by sending it...
...building then recording the conversation of cryptographic protocols such as a guideline to all the data sent between an email client and email server, it can be configured to a printer. In addition, many switch vendors offer various flavors of ARP protection and monitoring since ARP...from HTTP to the next correct node so it with the printer/MFP's PJL library over a print connection. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is that destination. HP Jetdirect Hacks: Printer/MFP access Up until now, we 've seen from a node by sending it...
HP Jetdirect 620n Print Server Setup Guide
Page 5
HP Jetdirect Solutions Summary Tools Overview 31 Supported Network Protocols 32 HP Installation Software 33 C. HP Support and Service HP Support Online 53 Firmware Upgrades 53 HP Support By Phone 54 5 HP Jetdirect EIO Control Panel Menus Introduction 36 Classic Control Panel 37 Graphical Control Panel 40 D. Specifications and Regulatory Statements Specifications 45 Regulatory Statements 46 E. Warranty Service F. B.
HP Jetdirect Solutions Summary Tools Overview 31 Supported Network Protocols 32 HP Installation Software 33 C. HP Support and Service HP Support Online 53 Firmware Upgrades 53 HP Support By Phone 54 5 HP Jetdirect EIO Control Panel Menus Introduction 36 Classic Control Panel 37 Graphical Control Panel 40 D. Specifications and Regulatory Statements Specifications 45 Regulatory Statements 46 E. Warranty Service F. B.
HP Jetdirect 620n Print Server Setup Guide
Page 12
... contains productspecific information, such as: ■ HP Jetdirect product number ■ Firmware revision number ■ LAN Hardware (MAC) address ■ Manufacturing identification number Note For a description of the Jetdirect Configuration Page, look for status messages. Verify Jetdirect Print Server Operation 1. In most HP LaserJet printers, a Jetdirect Configuration page will be included on the HP Jetdirect CD-ROM. 3. ENWW Installation Procedures 12...
... contains productspecific information, such as: ■ HP Jetdirect product number ■ Firmware revision number ■ LAN Hardware (MAC) address ■ Manufacturing identification number Note For a description of the Jetdirect Configuration Page, look for status messages. Verify Jetdirect Print Server Operation 1. In most HP LaserJet printers, a Jetdirect Configuration page will be included on the HP Jetdirect CD-ROM. 3. ENWW Installation Procedures 12...
HP Jetdirect 620n Print Server Setup Guide
Page 31
...; Embedded Web Server, HTTPS (TCP port 443) ● HP management and support software: ■ HP Web Jetadmin software (TCP/IP and IPX/SPX networks) ■ HP Jetdirect Download Manager (HP Jetdirect firmware upgrades) HP Jetdirect Printing Support ● Embedded HP Jetdirect services: ■ LPD printing (TCP port 515) ■ IPP printing (TCP port 631) ■ FTP printing (TCP ports 20, 21) ■ Raw IP printing (HP-proprietary TCP...
...; Embedded Web Server, HTTPS (TCP port 443) ● HP management and support software: ■ HP Web Jetadmin software (TCP/IP and IPX/SPX networks) ■ HP Jetdirect Download Manager (HP Jetdirect firmware upgrades) HP Jetdirect Printing Support ● Embedded HP Jetdirect services: ■ LPD printing (TCP port 515) ■ IPP printing (TCP port 631) ■ FTP printing (TCP ports 20, 21) ■ Raw IP printing (HP-proprietary TCP...
HP Jetdirect 620n Print Server Setup Guide
Page 34
..., replacing fax, mail, and overnight services ● Requires HP Jetdirect print server (firmware version X.07.17 or later) *Note: For Windows 2000, Microsoft's Internet Printing software is already integrated with embedded web servers ● Alerts and consumables management ● Remote firmware upgrades for HP Jetdirect print servers ● Asset tracking and utilization analysis HP Internet Printer Connection ● Supported Networks (TCP/IP): ■...
..., replacing fax, mail, and overnight services ● Requires HP Jetdirect print server (firmware version X.07.17 or later) *Note: For Windows 2000, Microsoft's Internet Printing software is already integrated with embedded web servers ● Alerts and consumables management ● Remote firmware upgrades for HP Jetdirect print servers ● Asset tracking and utilization analysis HP Internet Printer Connection ● Supported Networks (TCP/IP): ■...
HP Jetdirect 620n Print Server Setup Guide
Page 35
...; NetWare 5.x, 6.0 ● Simplified installation, printing, and bidirectional management of HP Jetdirect-connected printers under Novell Distributed Print Services (NDPS) ● Allows automatic discovery and installation of HP Jetdirectconnected printers into NDPS via IPX ● Frees up user licenses ● Allows disabling of SAPs to reduce network traffic ● For IPX printing, requires HP Jetdirect firmware version X.03.06 or...
...; NetWare 5.x, 6.0 ● Simplified installation, printing, and bidirectional management of HP Jetdirect-connected printers under Novell Distributed Print Services (NDPS) ● Allows automatic discovery and installation of HP Jetdirectconnected printers into NDPS via IPX ● Frees up user licenses ● Allows disabling of SAPs to reduce network traffic ● For IPX printing, requires HP Jetdirect firmware version X.03.06 or...
HP Jetdirect 620n Print Server Setup Guide
Page 53
... is a great place to start for HP Jetdirect print servers with internal Flash memory. Firmware Upgrades Hewlett-Packard offers downloadable electronic upgrades for answers to a quick solution! The HP web site at : http://www.hp.com/go/webjetadmin_firmware ENWW 53 F HP Support and Service HP Support Online Click your way to questions about your HP Jetdirect print server - 24 hours a day, 7 days a week...
... is a great place to start for HP Jetdirect print servers with internal Flash memory. Firmware Upgrades Hewlett-Packard offers downloadable electronic upgrades for answers to a quick solution! The HP web site at : http://www.hp.com/go/webjetadmin_firmware ENWW 53 F HP Support and Service HP Support Online Click your way to questions about your HP Jetdirect print server - 24 hours a day, 7 days a week...
HP Jetdirect Administrator's Guide
Page 8
... in Table 1.2. Supported Network Protocols Note For HP Jetdirect wireless print servers, this section assumes that use only. See Table 1.2. *** xx represents a release number. For firmware updates, see Chapter 4), and network management applications. ENWW Introducing the HP Jetdirect Print Server 8 Supported Print Servers The features and capabilities of HP Jetdirect print servers depend on the print server's product model and its operating firmware version. See Table 1.1. The installed...
... in Table 1.2. Supported Network Protocols Note For HP Jetdirect wireless print servers, this section assumes that use only. See Table 1.2. *** xx represents a release number. For firmware updates, see Chapter 4), and network management applications. ENWW Introducing the HP Jetdirect Print Server 8 Supported Print Servers The features and capabilities of HP Jetdirect print servers depend on the print server's product model and its operating firmware version. See Table 1.1. The installed...
HP Jetdirect Administrator's Guide
Page 12
... Manuals The manuals listed below are available from the World Wide Web at: http://www.hp.com/go/webjetadmin_firmware Firmware Installation Tools Note HP Jetdirect ew2400 print servers will have factory-installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for the applicable Jetdirect product models. ● HP Jetdirect Setup guides, supplied on CD-ROM with printers that contain upgradeable memory.
... Manuals The manuals listed below are available from the World Wide Web at: http://www.hp.com/go/webjetadmin_firmware Firmware Installation Tools Note HP Jetdirect ew2400 print servers will have factory-installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for the applicable Jetdirect product models. ● HP Jetdirect Setup guides, supplied on CD-ROM with printers that contain upgradeable memory.
HP Jetdirect Administrator's Guide
Page 48
Table 3.2 lists supported TFTP commands (HP Jetdirect firmware version V.28.xx or later). Table 3.2 List of Supported TFTP Commands (1 of 2) General ● passwd: ● ssl-state: ● sys-location: ● security-reset...wins-svr: ● pri-dns-svr: ● smtp-svr: TCP/IP Print Options ● 9100-printing: ● interlock: ● ftp-printing: ● buffer-packing: ● ipp-printing: ● write-mode: ● lpd-printing: ● mult-tcp-conn: ● banner: TCP/IP Raw Print Ports ● raw-port: TCP/IP Access Control ● allow: netnum ...
Table 3.2 lists supported TFTP commands (HP Jetdirect firmware version V.28.xx or later). Table 3.2 List of Supported TFTP Commands (1 of 2) General ● passwd: ● ssl-state: ● sys-location: ● security-reset...wins-svr: ● pri-dns-svr: ● smtp-svr: TCP/IP Print Options ● 9100-printing: ● interlock: ● ftp-printing: ● buffer-packing: ● ipp-printing: ● write-mode: ● lpd-printing: ● mult-tcp-conn: ● banner: TCP/IP Raw Print Ports ● raw-port: TCP/IP Access Control ● allow: netnum ...
HP Jetdirect Administrator's Guide
Page 108
... Password page to the device and stored on the HP Jetdirect print server. The product number of the operating instructions installed on the HP Jetdirect print server. For general information on IP addresses, see the Admin. The length of 2) Item Host Name System Up Time System Contact System Location HP Jetdirect Firmware Version IP Address Hardware Address LAA Admin Password Description...
... Password page to the device and stored on the HP Jetdirect print server. The product number of the operating instructions installed on the HP Jetdirect print server. For general information on IP addresses, see the Admin. The length of 2) Item Host Name System Up Time System Contact System Location HP Jetdirect Firmware Version IP Address Hardware Address LAA Admin Password Description...
HP Jetdirect Administrator's Guide
Page 191
... HP Jetdirect print server to ensure it clears. Replace the print server. ■ Record all diagnostic and configuration pages with the faulty print server. 2. This information assumes you may need to replace the HP Jetdirect print server under warranty service, include all error codes and contact your printer manuals to interpret the error message. ■ If you upgraded the Jetdirect firmware recently, power the print server...
... HP Jetdirect print server to ensure it clears. Replace the print server. ■ Record all diagnostic and configuration pages with the faulty print server. 2. This information assumes you may need to replace the HP Jetdirect print server under warranty service, include all error codes and contact your printer manuals to interpret the error message. ■ If you upgraded the Jetdirect firmware recently, power the print server...