Practical considerations for imaging and printing security
Page 1
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 1
... was a great benefit. A free firmware upgrade allowed the 610n EIO print server, shipped in early 2002 with the 615n EIO Print Server. Having the ability to use a browser to manage a device using HTTP was secure management. Suddenly, a few million HP Jetdirect EIO cards had SSL/TLS capability. ...Infrastructure and Public Key Certificate Basics 12 SSL/TLS Protocol Basics ...20 Using HTTPS with HP Jetdirect ...26 A Detailed Look at the SSL/TLS Connection 52 SSL/TLS Server Settings ...60 HP Jetdirect as an SSL/TLS Client ...61 SSL/TLS Client: Understanding Certificate Chains 77 SSL...
... was a great benefit. A free firmware upgrade allowed the 610n EIO print server, shipped in early 2002 with the 615n EIO Print Server. Having the ability to use a browser to manage a device using HTTP was secure management. Suddenly, a few million HP Jetdirect EIO cards had SSL/TLS capability. ...Infrastructure and Public Key Certificate Basics 12 SSL/TLS Protocol Basics ...20 Using HTTPS with HP Jetdirect ...26 A Detailed Look at the SSL/TLS Connection 52 SSL/TLS Server Settings ...60 HP Jetdirect as an SSL/TLS Client ...61 SSL/TLS Client: Understanding Certificate Chains 77 SSL...
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 94
... Embedded Devices and Digital Certificates One of the more common uses of that can be entered. HP Jetdirect Certificate Guidelines We've covered several client and server scenarios regarding HP Jetdirect and SSL/TLS. What do I know that the private key for a temporary session in order...8226; Do not use the self-signed certificate that Jetdirect generates by the firmware of storage available for printing). • When Jetdirect is acting as an SSL/TLS client and is being presented with a server certificate that Jetdirect will keep you have a new application protocol using SSL...
... Embedded Devices and Digital Certificates One of the more common uses of that can be entered. HP Jetdirect Certificate Guidelines We've covered several client and server scenarios regarding HP Jetdirect and SSL/TLS. What do I know that the private key for a temporary session in order...8226; Do not use the self-signed certificate that Jetdirect generates by the firmware of storage available for printing). • When Jetdirect is acting as an SSL/TLS client and is being presented with a server certificate that Jetdirect will keep you have a new application protocol using SSL...
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 95
... possession, due to the end. Summary Well, you want. HP Jetdirect has supported SSL/TLS for the best experience (http://www.hp.com/go/wja_firmware). • EIO print servers 610n, 615n, 620n, 625n, 630n, 635n with the latest firmware. • External USB print server en3700 • Embedded Jetdirect products with the Jetdirect product number J7949E, J7982E, J7991E, J7997E, J7974E, and J7992E...
... possession, due to the end. Summary Well, you want. HP Jetdirect has supported SSL/TLS for the best experience (http://www.hp.com/go/wja_firmware). • EIO print servers 610n, 615n, 620n, 625n, 630n, 635n with the latest firmware. • External USB print server en3700 • Embedded Jetdirect products with the Jetdirect product number J7949E, J7982E, J7991E, J7997E, J7974E, and J7992E...
HP Jetdirect Print Servers - Administrator's Guide
Page 5
... contents 1 Introducing the HP Jetdirect print server Supported print servers ...1 Supported network protocols ...2 Security protocols ...3 SNMP (IP and IPX) ...3 HTTPS ...3 Authentication ...4 EAP/802.1X server-based authentication 4 IPsec/Firewall ...4 Supplied manuals ...5 HP support ...5 HP online support ...5 Firmware upgrades ...5 Firmware installation tools 5 HP support by phone ...6 Product registration ...6 Product accessibility ...6 2 HP software solutions summary HP Install Network Printer Wizard (Windows 8 Requirements ...8 HP Jetdirect printer installer for UNIX...
... contents 1 Introducing the HP Jetdirect print server Supported print servers ...1 Supported network protocols ...2 Security protocols ...3 SNMP (IP and IPX) ...3 HTTPS ...3 Authentication ...4 EAP/802.1X server-based authentication 4 IPsec/Firewall ...4 Supplied manuals ...5 HP support ...5 HP online support ...5 Firmware upgrades ...5 Firmware installation tools 5 HP support by phone ...6 Product registration ...6 Product accessibility ...6 2 HP software solutions summary HP Install Network Printer Wizard (Windows 8 Requirements ...8 HP Jetdirect printer installer for UNIX...
HP Jetdirect Print Servers - Administrator's Guide
Page 7
Settings ...79 Firmware Upgrade 81 LPD Queues ...81 USB Settings ...83 Support Info ...84 Refresh Rate ...84 Select Language ...84 Security: Settings ...84 Status ...84 Wizard ...85 Restore Defaults 86 Authorization ...87 Admin. Operating notes ...64 HP Jetdirect Home tab ...65 Device tabs ...66 Networking tab ...66 TCP/IP Settings ...69 Summary tab ...70...
Settings ...79 Firmware Upgrade 81 LPD Queues ...81 USB Settings ...83 Support Info ...84 Refresh Rate ...84 Select Language ...84 Security: Settings ...84 Status ...84 Wizard ...85 Restore Defaults 86 Authorization ...87 Admin. Operating notes ...64 HP Jetdirect Home tab ...65 Device tabs ...66 Networking tab ...66 TCP/IP Settings ...69 Summary tab ...70...
HP Jetdirect Print Servers - Administrator's Guide
Page 11
...to the network. Supported print servers The following HP Jetdirect print server types are available: ● HP Jetdirect embedded print servers are modular I/O cards ...print server refers to a network. Because they are assigned an HP part number for compatibility and identification purposes. ● HP Jetdirect EIO internal print servers are integrated with multiple users. Table 1-1 Supported HP Jetdirect print server features and capabilities Model Product Number Printer Connect Network Connect1 Network Protocols and Features2 Firmware Version3 690n J8007G 635n J7961G 630n...
...to the network. Supported print servers The following HP Jetdirect print server types are available: ● HP Jetdirect embedded print servers are modular I/O cards ...print server refers to a network. Because they are assigned an HP part number for compatibility and identification purposes. ● HP Jetdirect EIO internal print servers are integrated with multiple users. Table 1-1 Supported HP Jetdirect print server features and capabilities Model Product Number Printer Connect Network Connect1 Network Protocols and Features2 Firmware Version3 690n J8007G 635n J7961G 630n...
HP Jetdirect Print Servers - Administrator's Guide
Page 12
...630n) J8010E, J8011E, J8013E, J8017E FTP printing 2 Chapter 1 Introducing the HP Jetdirect print server ENWW Supported network protocols The following table lists the supported network protocols and network printing environments that use only. J8007G (690n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page 5. Table 1-1 Supported HP Jetdirect print server... Firmware Version3 Not Applicable J8017E Embedded 10/100-TX or Full 10/100/1000T V38.xx.nn 1 Embedded HP Jetdirect print server support for 100T (Gigabit) depends on both the print server and...
...630n) J8010E, J8011E, J8013E, J8017E FTP printing 2 Chapter 1 Introducing the HP Jetdirect print server ENWW Supported network protocols The following table lists the supported network protocols and network printing environments that use only. J8007G (690n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page 5. Table 1-1 Supported HP Jetdirect print server... Firmware Version3 Not Applicable J8017E Embedded 10/100-TX or Full 10/100/1000T V38.xx.nn 1 Embedded HP Jetdirect print server support for 100T (Gigabit) depends on both the print server and...
HP Jetdirect Print Servers - Administrator's Guide
Page 15
... factory- For more information about your browser. installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for your network. Supplied manuals For information about supported systems, visit HP Web Jetadmin at : http://www.hp.com/go /webjetadmin_firmware Firmware installation tools Install firmware upgrades for supported HP Jetdirect print servers over your print server model, you can control IP traffic using one of...
... factory- For more information about your browser. installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for your network. Supplied manuals For information about supported systems, visit HP Web Jetadmin at : http://www.hp.com/go /webjetadmin_firmware Firmware installation tools Install firmware upgrades for supported HP Jetdirect print servers over your print server model, you can control IP traffic using one of...
HP Jetdirect Print Servers - Administrator's Guide
Page 16
.../go/jetdirect_register Product accessibility For information on page 61. ● FTP Transfer a firmware upgrade image file to : accessibility@hp.com 6 Chapter 1 Introducing the HP Jetdirect print server ENWW ● Embedded Web server Provides a firmware upgrade option. Product registration To register your HP Jetdirect print server, use the device IP address or host name. Ensure that the download is set, it must be...
.../go/jetdirect_register Product accessibility For information on page 61. ● FTP Transfer a firmware upgrade image file to : accessibility@hp.com 6 Chapter 1 Introducing the HP Jetdirect print server ENWW ● Embedded Web server Provides a firmware upgrade option. Product registration To register your HP Jetdirect print server, use the device IP address or host name. Ensure that the download is set, it must be...
HP Jetdirect Print Servers - Administrator's Guide
Page 18
... distribution of high-quality hardcopy documents over the Internet, replacing fax, mail, and overnight services. Requires HP Jetdirect print server firmware version x.20.00 or later. 1 Supports queue creation and peripheral management from HP online support at: http://www.hp.com/go/inpw_sw Requirements NOTE: For HP Jetdirect wired/wireless print servers used in an I/O slot. You can remove the cable.
... distribution of high-quality hardcopy documents over the Internet, replacing fax, mail, and overnight services. Requires HP Jetdirect print server firmware version x.20.00 or later. 1 Supports queue creation and peripheral management from HP online support at: http://www.hp.com/go/inpw_sw Requirements NOTE: For HP Jetdirect wired/wireless print servers used in an I/O slot. You can remove the cable.
HP Jetdirect Print Servers - Administrator's Guide
Page 41
...between 1 and 99999 seconds. 0: Disable. set-cmnty-name: (or set-community-name:) Password to determine which SNMP GetRequests the HP Jetdirect print server responds to zero (trap-dest: 0). web-refresh: Time interval (1-99999 seconds) for DHCP configuration offers. auth-trap: (or ...:) IPX/SPX protocol operation on the print server. 0: Disable. 1 (default): Enable SNMP operation. NOTE: On HP Jetdirect 635n print servers, by default all SNMP agents (SNMP v1, v2, v3), communication with HP Web Jetadmin, and firmware upgrades using HP downloading utilities. ENWW IPv4 configuration 31...
...between 1 and 99999 seconds. 0: Disable. set-cmnty-name: (or set-community-name:) Password to determine which SNMP GetRequests the HP Jetdirect print server responds to zero (trap-dest: 0). web-refresh: Time interval (1-99999 seconds) for DHCP configuration offers. auth-trap: (or ...:) IPX/SPX protocol operation on the print server. 0: Disable. 1 (default): Enable SNMP operation. NOTE: On HP Jetdirect 635n print servers, by default all SNMP agents (SNMP v1, v2, v3), communication with HP Web Jetadmin, and firmware upgrades using HP downloading utilities. ENWW IPv4 configuration 31...
HP Jetdirect Print Servers - Administrator's Guide
Page 42
..., 10FULL, 10HALF. The available link-speed depends on the print server. 0: Disable. 1 (default): Enable. ipx-nds-context: NDS context for the HP Jetdirect print servers. 32 Chapter 3 TCP/IP configuration ENWW The range is not supported.) upgrade: Set the name and location of a firmware upgrade file for the HP Jetdirect print server. The communication modes are disabled by factory default. If...
..., 10FULL, 10HALF. The available link-speed depends on the print server. 0: Disable. 1 (default): Enable. ipx-nds-context: NDS context for the HP Jetdirect print servers. 32 Chapter 3 TCP/IP configuration ENWW The range is not supported.) upgrade: Set the name and location of a firmware upgrade file for the HP Jetdirect print server. The communication modes are disabled by factory default. If...
HP Jetdirect Print Servers - Administrator's Guide
Page 43
... direction only (to the printer). ENWW IPv4 configuration 33 Verify that supports bi-directional communication between the printer and print server. Firmware version of this device. usb-mode: USB port communication mode on the HP Jetdirect print server. ◦ Auto (default): Automatically negotiate and set the highest communication mode possible for support of the upgrade file. Support...
... direction only (to the printer). ENWW IPv4 configuration 33 Verify that supports bi-directional communication between the printer and print server. Firmware version of this device. usb-mode: USB port communication mode on the HP Jetdirect print server. ◦ Auto (default): Automatically negotiate and set the highest communication mode possible for support of the upgrade file. Support...
HP Jetdirect Print Servers - Administrator's Guide
Page 59
... Disable. Other hosts cannot make a connection. 270 (default): Enable. user-timeout Seconds that the HP Jetdirect print server advertises for other protocols that an idle print data connection can be disabled without notification. CAUTION: Setting this to 3600 seconds. 0: Disable. 900 ... Enable. Connection does not terminate. ftp-download Download firmware upgrade files to 15 hops. -1: Disable. 4 (default): Enable multicast TTL. Set from 1 to -live (TTL) setting for embedded Web server diagnostic page updates. ews-config Allow use when communicating ...
... Disable. Other hosts cannot make a connection. 270 (default): Enable. user-timeout Seconds that the HP Jetdirect print server advertises for other protocols that an idle print data connection can be disabled without notification. CAUTION: Setting this to 3600 seconds. 0: Disable. 900 ... Enable. Connection does not terminate. ftp-download Download firmware upgrade files to 15 hops. -1: Disable. 4 (default): Enable multicast TTL. Set from 1 to -live (TTL) setting for embedded Web server diagnostic page updates. ews-config Allow use when communicating ...
HP Jetdirect Print Servers - Administrator's Guide
Page 61
... DHCP configuration offers. ENWW IPv4 configuration 51 In addition, firmware upgrades through the print server's host access list.) Enter up to 255 alphanumeric characters. Password to determine which the HP Jetdirect print server's IP address was configured. The community name of an ...default): Enable. TCP Conns Refused (Read-only parameter.) Number of the system from which SNMP GetRequests the HP Jetdirect print server responds to the print server because the print server's host access list does not contain an allowable entry. DHCP Renew Time (Read-only parameter.) DHCP ...
... DHCP configuration offers. ENWW IPv4 configuration 51 In addition, firmware upgrades through the print server's host access list.) Enter up to 255 alphanumeric characters. Password to determine which the HP Jetdirect print server's IP address was configured. The community name of an ...default): Enable. TCP Conns Refused (Read-only parameter.) Number of the system from which SNMP GetRequests the HP Jetdirect print server responds to the print server because the print server's host access list does not contain an allowable entry. DHCP Renew Time (Read-only parameter.) DHCP ...
HP Jetdirect Print Servers - Administrator's Guide
Page 64
...default address is used, enter a string of the firmware upgrade file for data transmitted to replace the factory-assigned LAN hardware (MAC) address. ws-discovery-conf Allow Microsoft WS discovery protocols on the HP Jetdirect print server. 0: Disable. 1 (default): Enable. Other upgrade... Set the name and location of exactly 12 hexadecimal digits. xml-services-conf Allow access by HP Web service applications to upgrade if the upgrade file...
...default address is used, enter a string of the firmware upgrade file for data transmitted to replace the factory-assigned LAN hardware (MAC) address. ws-discovery-conf Allow Microsoft WS discovery protocols on the HP Jetdirect print server. 0: Disable. 1 (default): Enable. Other upgrade... Set the name and location of exactly 12 hexadecimal digits. xml-services-conf Allow access by HP Web service applications to upgrade if the upgrade file...
HP Jetdirect Print Servers - Administrator's Guide
Page 91
... HP Jetdirect print server. Firmware Upgrade For print servers that support firmware upgrades, use the following steps: 1. LPD Printing (RAW) Default LPD raw queue printing. To upgrade the print server using the embedded Web server: 1. The default depends on the print server before or after the print job. Four of the user-specified LPD print queue. Table 4-13 Miscellaneous Settings (continued) Item Description IPP Printing Internet Printing Protocol printing. LPD Printing...
... HP Jetdirect print server. Firmware Upgrade For print servers that support firmware upgrades, use the following steps: 1. LPD Printing (RAW) Default LPD raw queue printing. To upgrade the print server using the embedded Web server: 1. The default depends on the print server before or after the print job. Four of the user-specified LPD print queue. Table 4-13 Miscellaneous Settings (continued) Item Description IPP Printing Internet Printing Protocol printing. LPD Printing...
HP Jetdirect Print Servers - Administrator's Guide
Page 133
...; If you recently upgraded the HP Jetdirect firmware, turn the printer off and then on the printer control panel display, use the following items: 1. You cannot print an HP Jetdirect configuration page to print the configuration page? Procedure 3: Resolve printer display error messages To resolve network-related error messages that the print server or network is disabled, it clears...
...; If you recently upgraded the HP Jetdirect firmware, turn the printer off and then on the printer control panel display, use the following items: 1. You cannot print an HP Jetdirect configuration page to print the configuration page? Procedure 3: Resolve printer display error messages To resolve network-related error messages that the print server or network is disabled, it clears...
HP Jetdirect Print Servers - Administrator's Guide
Page 162
... notification of rejected packets is the same as the one sent. Review your HP Jetdirect print server. Local IP addresses This section lists the IPv4 and IPv6 addresses configured on HTTPS. Client notification of dropped packets is not configured. Upgrade the HP Jetdirect firmware to verify that the received message is provided through ICMP error messages. Replay...
... notification of rejected packets is the same as the one sent. Review your HP Jetdirect print server. Local IP addresses This section lists the IPv4 and IPv6 addresses configured on HTTPS. Client notification of dropped packets is not configured. Upgrade the HP Jetdirect firmware to verify that the received message is provided through ICMP error messages. Replay...