Practical considerations for imaging and printing security
Page 6
... well as those with HP Jetdirect devices Network connectivity for HP imaging and printing devices is used by HP Web Jetadmin to provide fleet management of hackers continues to extend an imaging and printing device's functionality. While Secure IPP may be installed from hard disk storage. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005...
... well as those with HP Jetdirect devices Network connectivity for HP imaging and printing devices is used by HP Web Jetadmin to provide fleet management of hackers continues to extend an imaging and printing device's functionality. While Secure IPP may be installed from hard disk storage. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005...
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 20
...HP Jetdirect and "normal" SSL/TLS protocol interactions. So, can't someone who is to clearly identify the person it has been issued to and to show that that person has the right to drive in Figure 22: Figure 22 - A basic breakdown of SSL/TLS protocol structures is a peer, SSL/TLS has specific...the SSL/TLS connection, like IPsec where each endpoint. It may be allowed. SSL/TLS makes a strong distinction between a Client and a Server. The handshake messages get everything started. We can somehow install a CA certificate of them if Figure 23. 20 Because a driver's license ...
...HP Jetdirect and "normal" SSL/TLS protocol interactions. So, can't someone who is to clearly identify the person it has been issued to and to show that that person has the right to drive in Figure 22: Figure 22 - A basic breakdown of SSL/TLS protocol structures is a peer, SSL/TLS has specific...the SSL/TLS connection, like IPsec where each endpoint. It may be allowed. SSL/TLS makes a strong distinction between a Client and a Server. The handshake messages get everything started. We can somehow install a CA certificate of them if Figure 23. 20 Because a driver's license ...
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 37
Click "Download certificate". We have a template called "jetdirect" which has already been created. We cut and paste the certificate request from Jetdirect into the box provided. Click "Submit". The only thing it really specifies is that the certificate can be used for how to create a specific type of certificate. DER encoding is basically a "cookie cutter" for Client and Server authentication. We select a certificate template. This template is fine. 37
Click "Download certificate". We have a template called "jetdirect" which has already been created. We cut and paste the certificate request from Jetdirect into the box provided. Click "Submit". The only thing it really specifies is that the certificate can be used for how to create a specific type of certificate. DER encoding is basically a "cookie cutter" for Client and Server authentication. We select a certificate template. This template is fine. 37
HP Jetdirect Print Servers - Administrator's Guide
Page 28
... for HP Jetdirect print servers on , the HP Jetdirect print server attempts to the remote host address. ● IPv6 addresses as URL An IPv6 address in a default factory state (as bootstrap protocol/trivial transfer protocol (BOOTP/TFTP), dynamic host configuration protocol/trivial transfer protocol (DHCP/TFTP), or reverse address resolution protocol (RARP). IPv4 configuration This section provides specific IPv4...
... for HP Jetdirect print servers on , the HP Jetdirect print server attempts to the remote host address. ● IPv6 addresses as URL An IPv6 address in a default factory state (as bootstrap protocol/trivial transfer protocol (BOOTP/TFTP), dynamic host configuration protocol/trivial transfer protocol (DHCP/TFTP), or reverse address resolution protocol (RARP). IPv4 configuration This section provides specific IPv4...
HP Jetdirect Print Servers - Administrator's Guide
Page 30
... available. Configuration tools that require a specific default IP address on the print server for example, when manually configured to use BOOTP or DHCP), this parameter, use . Default IPv4 behavior When turned on, a factory-default print server connected to a network through a cable... For the default IP address settings actually configured on , it likely self-assigns a link-local IP address. When an HP Jetdirect Wireless Print Server in a factory default state (without modification. Retrieval of DHCP requests. If configuration fails, a default IPv4 address is connected...
... available. Configuration tools that require a specific default IP address on the print server for example, when manually configured to use BOOTP or DHCP), this parameter, use . Default IPv4 behavior When turned on, a factory-default print server connected to a network through a cable... For the default IP address settings actually configured on , it likely self-assigns a link-local IP address. When an HP Jetdirect Wireless Print Server in a factory default state (without modification. Retrieval of DHCP requests. If configuration fails, a default IPv4 address is connected...
HP Jetdirect Print Servers - Administrator's Guide
Page 31
... more information, see "Use Telnet (IPv4) on page 38". ● Embedded Web server Use the embedded Web server on the HP Jetdirect print server to answer the print server's RARP request and supply the print server with the IP address. For more information about Linux and UNIX systems, see "Use... Because HP-UX does not currently provide dynamic domain name system (DDNS) services for your system. Once configured, the print server saves the configuration when turned off and then turned on. Configuration tools that require a specific default IP address on the print server for simple...
... more information, see "Use Telnet (IPv4) on page 38". ● Embedded Web server Use the embedded Web server on the HP Jetdirect print server to answer the print server's RARP request and supply the print server with the IP address. For more information about Linux and UNIX systems, see "Use... Because HP-UX does not currently provide dynamic domain name system (DDNS) services for your system. Once configured, the print server saves the configuration when turned off and then turned on. Configuration tools that require a specific default IP address on the print server for simple...
HP Jetdirect Print Servers - Administrator's Guide
Page 34
... BOOTP daemon to download the host name to the vendor-specific tag T144, described below. For the HP Jetdirect print server, set the network/subnetwork number and the host address. BOOTP report format (required). The host name is 1-3600 seconds. The range is printed on the HP Jetdirect configuration page, or returned on page 25. T146 -- Buffer packing...
... BOOTP daemon to download the host name to the vendor-specific tag T144, described below. For the HP Jetdirect print server, set the network/subnetwork number and the host address. BOOTP report format (required). The host name is 1-3600 seconds. The range is printed on the HP Jetdirect configuration page, or returned on page 25. T146 -- Buffer packing...
HP Jetdirect Print Servers - Administrator's Guide
Page 35
... file using the /etc/bootptab file's T144 vendor-specific tag, or the ef standard BOOTP tag entry. For example, setting this to close a port 9100 print connection. Send either BOOTP-ONLY or DHCP-ONLY requests. T148 -- HP proprietary. Set the TCP PSH flag for your HP Jetdirect print server, such as in a BOOTP/DHCP boot file (continued...
... file using the /etc/bootptab file's T144 vendor-specific tag, or the ef standard BOOTP tag entry. For example, setting this to close a port 9100 print connection. Send either BOOTP-ONLY or DHCP-ONLY requests. T148 -- HP proprietary. Set the TCP PSH flag for your HP Jetdirect print server, such as in a BOOTP/DHCP boot file (continued...
HP Jetdirect Print Servers - Administrator's Guide
Page 36
... usage auth-trap: on . set -cmnty-name: 1homer2 # # End of the system to send SNMP traps to HP Jetdirect print server configuration parameters using TFTP, Telnet, or the embedded Web server. Use only HTTPS (secure HTTP) communication. 2: Disable redirection to one (1). Send SNMP authentication traps. Enter up to ...or passwd-admin:) Administrator's password to control access to . This table describes the TFTP command parameters supported by HP Jetdirect print servers. (Optional commands for specific systems. The following values: 1: Forced redirection to the HTTPS port.
... usage auth-trap: on . set -cmnty-name: 1homer2 # # End of the system to send SNMP traps to HP Jetdirect print server configuration parameters using TFTP, Telnet, or the embedded Web server. Use only HTTPS (secure HTTP) communication. 2: Disable redirection to one (1). Send SNMP authentication traps. Enter up to ...or passwd-admin:) Administrator's password to control access to . This table describes the TFTP command parameters supported by HP Jetdirect print servers. (Optional commands for specific systems. The following values: 1: Forced redirection to the HTTPS port.
HP Jetdirect Print Servers - Administrator's Guide
Page 37
...) on the print server. 0: Disable. 1 (default): Enable. banner: Print a port-specific LPD banner page. 0: Disable. 1 (default): Enable. ipp-printing: (or ipp-config:, ipp:) Print through FTP. 0: Disable. 1 (default): Enable. ENWW IPv4 configuration 27 sec-dns-svr: IP address of the secondary WINS) server. host-name: (or sys-name:, name:) Node name that appears on the HP Jetdirect configuration page...
...) on the print server. 0: Disable. 1 (default): Enable. banner: Print a port-specific LPD banner page. 0: Disable. 1 (default): Enable. ipp-printing: (or ipp-config:, ipp:) Print through FTP. 0: Disable. 1 (default): Enable. ENWW IPv4 configuration 27 sec-dns-svr: IP address of the secondary WINS) server. host-name: (or sys-name:, name:) Node name that appears on the HP Jetdirect configuration page...
HP Jetdirect Print Servers - Administrator's Guide
Page 39
...parameters (continued) syslog-max: Maximum number of syslog messages sent by the HP Jetdirect print server on the print server. 0: Disable. 1 (default): Enable. The default service name is 1 to 7, with 0 being the most specific, and 7 the most general. ENWW IPv4 configuration 29 The filter range ... level (or higher in priority) are reported. 7 (default): Messages of local0 through 10. Set this service. By default, the HP Jetdirect print server uses LPR as switches, delete active devices from the local network.). -1: Disable. 4 (default): Enable. bonjour-config: Use Bonjour....
...parameters (continued) syslog-max: Maximum number of syslog messages sent by the HP Jetdirect print server on the print server. 0: Disable. 1 (default): Enable. The default service name is 1 to 7, with 0 being the most specific, and 7 the most general. ENWW IPv4 configuration 29 The filter range ... level (or higher in priority) are reported. 7 (default): Messages of local0 through 10. Set this service. By default, the HP Jetdirect print server uses LPR as switches, delete active devices from the local network.). -1: Disable. 4 (default): Enable. bonjour-config: Use Bonjour....
HP Jetdirect Print Servers - Administrator's Guide
Page 44
.... NOTE: For specific topics or for BOOTP or DHCP operation and turned on your system documentation or online help to infinite. support-url: Web URL for its IP address from that a wireless network connection is specified. You can assign or lease to configure extended parameters. See your network, the HP Jetdirect print server automatically obtains...
.... NOTE: For specific topics or for BOOTP or DHCP operation and turned on your system documentation or online help to infinite. support-url: Web URL for its IP address from that a wireless network connection is specified. You can assign or lease to configure extended parameters. See your network, the HP Jetdirect print server automatically obtains...
HP Jetdirect Print Servers - Administrator's Guide
Page 48
... be supported on value-featured print servers. See Troubleshoot the HP Jetdirect print server on the print server using an administrator password, Telnet connections are configuring an HP Jetdirect wireless print server, this section assumes that a wirelss network connection is installed. For networks with high security requirements, you can require a specific format, as Telnet, the embedded Web server, or HP Web Jetadmin to factory values...
... be supported on value-featured print servers. See Troubleshoot the HP Jetdirect print server on the print server using an administrator password, Telnet connections are configuring an HP Jetdirect wireless print server, this section assumes that a wirelss network connection is installed. For networks with high security requirements, you can require a specific format, as Telnet, the embedded Web server, or HP Web Jetadmin to factory values...
HP Jetdirect Print Servers - Administrator's Guide
Page 57
.... Filter syslog messages sent to 9000. Only messages that the HP Jetdirect server sends syslog messages to the printer. CAUTION: Do not use when the specified queue for printing to 7, with 0 being the most specific and 7 the most general. The default queue name is not... all hosts are reported. syslog-svr syslog-max syslog-priority 0: Disable. 1 (default): Enable. The number of syslog messages the HP Jetdirect print server can add up to use lowercase and uppercase characters to eight character strings. addstring Specify a user-defined character string to prepend or ...
.... Filter syslog messages sent to 9000. Only messages that the HP Jetdirect server sends syslog messages to the printer. CAUTION: Do not use when the specified queue for printing to 7, with 0 being the most specific and 7 the most general. The default queue name is not... all hosts are reported. syslog-svr syslog-max syslog-priority 0: Disable. 1 (default): Enable. The number of syslog messages the HP Jetdirect print server can add up to use lowercase and uppercase characters to eight character strings. addstring Specify a user-defined character string to prepend or ...
HP Jetdirect Print Servers - Administrator's Guide
Page 65
... in which data is transferred in the USB v2.0 specifications, compatible with a dual wired/wireless port. The available link-speed depends on the print server model. usb-speed (Read-only parameter, USB 2.0 products only.) Auto-negotiated communication speed over the USB port on the HP Jetdirect print server. ● Auto (default): Automatically negotiate and set to Auto...
... in which data is transferred in the USB v2.0 specifications, compatible with a dual wired/wireless port. The available link-speed depends on the print server model. usb-speed (Read-only parameter, USB 2.0 products only.) Auto-negotiated communication speed over the USB port on the HP Jetdirect print server. ● Auto (default): Automatically negotiate and set to Auto...
HP Jetdirect Print Servers - Administrator's Guide
Page 68
... as IPX/ SPX or AppleTalk are not affected. When accessing the HP Jetdirect menu from the printer's control panel. Use the printer control panel HP Jetdirect EIO or embedded print servers provide a configuration menu that you might need to change the IP address of specific IPv4/IPv6 and IPsec networking parameters depends on the new network. Parameters...
... as IPX/ SPX or AppleTalk are not affected. When accessing the HP Jetdirect menu from the printer's control panel. Use the printer control panel HP Jetdirect EIO or embedded print servers provide a configuration menu that you might need to change the IP address of specific IPv4/IPv6 and IPsec networking parameters depends on the new network. Parameters...
HP Jetdirect Print Servers - Administrator's Guide
Page 85
The initial setting is determined by the HP Jetdirect print server per minute. Select or clear the check box to derive the with 0 being the most specific and 7 being the most general. Enable DHCPv4 FQDN compliance By default, HP Jetdirect uses the Host Name and Domain Name settings to enable (default) or disable stateless DHCPv4 configuration. TTL on...
The initial setting is determined by the HP Jetdirect print server per minute. Select or clear the check box to derive the with 0 being the most specific and 7 being the most general. Enable DHCPv4 FQDN compliance By default, HP Jetdirect uses the Host Name and Domain Name settings to enable (default) or disable stateless DHCPv4 configuration. TTL on...
HP Jetdirect Print Servers - Administrator's Guide
Page 93
...in row 1. (Alternatively, you can create a print queue named clear_printer that printer, includes a reset command at the beginning of the job. f. USB Settings If the HP Jetdirect external print server provides a USB connection to the network device (...specifications, compatible with USB v1.1 specifications. ● Hi-Speed 480 Mbits/sec for USB v2.0 devices only. ● Disconnected USB port is not connected. For example, to specify clear_printer when asked for details. Table 4-15 USB Settings tab Item Description USB Speed (Read-only parameter, for USB 2.0 print servers...
...in row 1. (Alternatively, you can create a print queue named clear_printer that printer, includes a reset command at the beginning of the job. f. USB Settings If the HP Jetdirect external print server provides a USB connection to the network device (...specifications, compatible with USB v1.1 specifications. ● Hi-Speed 480 Mbits/sec for USB v2.0 devices only. ● Disconnected USB port is not connected. For example, to specify clear_printer when asked for details. Table 4-15 USB Settings tab Item Description USB Speed (Read-only parameter, for USB 2.0 print servers...
HP Jetdirect Print Servers - Administrator's Guide
Page 99
...Certificate and Private Key Import a previously acquired and known certificate as specified on the certificate. You are prompted for specific device and organizational information in the following screen: Certificate Information Use this option when an authentication protocol requires that the...when a self-signed certificate is installed. Validity Start Date Calculated from a Certificate Authority. ● Common Name (Required) For HP Jetdirect print servers, specify the FQDN or a valid IP address for EAP authentication is pre-installed and you click Edit Settings to uniquely identify...
...Certificate and Private Key Import a previously acquired and known certificate as specified on the certificate. You are prompted for specific device and organizational information in the following screen: Certificate Information Use this option when an authentication protocol requires that the...when a self-signed certificate is installed. Validity Start Date Calculated from a Certificate Authority. ● Common Name (Required) For HP Jetdirect print servers, specify the FQDN or a valid IP address for EAP authentication is pre-installed and you click Edit Settings to uniquely identify...
HP Jetdirect Print Servers - Administrator's Guide
Page 114
... to create and manage user-defined services. Manage Custom Services Use this custom service to use on the service, select Port Range or Specific Port, then enter the port range or port in the fields provided. Click Add to add the service to the Manage Services page....name must be unique. To add a custom service, use ports. Service Type Service type: ● Printer/MFP Service (default): Local service on the HP Jetdirect print server or device. ● Remote Service: Service on standards and are well known. ● For IGMPv2, local/remote ports or ICMP message types are ...
... to create and manage user-defined services. Manage Custom Services Use this custom service to use on the service, select Port Range or Specific Port, then enter the port range or port in the fields provided. Click Add to add the service to the Manage Services page....name must be unique. To add a custom service, use ports. Service Type Service type: ● Printer/MFP Service (default): Local service on the HP Jetdirect print server or device. ● Remote Service: Service on standards and are well known. ● For IGMPv2, local/remote ports or ICMP message types are ...