Practical considerations for imaging and printing security
Page 1
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
Practical considerations for imaging and printing security
Page 7
... the MFP and the DSS Server. WJA can encrypt scanned documents between the DSS Server and the remote server using IPsec. Device and service control Imaging and printing devices support many network protocols and services. Firmware updates Firmware updates can automatically discover and configure... of the internal network or analyzing the content of digitally sent documents to third-party applications, such as necessary. HP Web Jetadmin allows an administrator to an internal network. Fleet or batch management enables consistent management and security policy enforcement...
... the MFP and the DSS Server. WJA can encrypt scanned documents between the DSS Server and the remote server using IPsec. Device and service control Imaging and printing devices support many network protocols and services. Firmware updates Firmware updates can automatically discover and configure... of the internal network or analyzing the content of digitally sent documents to third-party applications, such as necessary. HP Web Jetadmin allows an administrator to an internal network. Fleet or batch management enables consistent management and security policy enforcement...
Practical considerations for imaging and printing security
Page 9
... functionality counter to effectively manage large-scale deployments of who is desired. 5. Update firmware images Firmware updates protect against actual needs. 2. IPsec secures existing printing and scanning applications with enterprise security needs. While it , which aids in deploying ... utilize the imaging and printing infrastructure, while authentication capabilities provide assurances of those devices. HP provides automated firmware update notification services, and HP Web Jetadmin aids in audit and regulatory compliance. 6. Implement access controls HP printers and MFPs allow...
... functionality counter to effectively manage large-scale deployments of who is desired. 5. Update firmware images Firmware updates protect against actual needs. 2. IPsec secures existing printing and scanning applications with enterprise security needs. While it , which aids in deploying ... utilize the imaging and printing infrastructure, while authentication capabilities provide assurances of those devices. HP provides automated firmware update notification services, and HP Web Jetadmin aids in audit and regulatory compliance. 6. Implement access controls HP printers and MFPs allow...
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 1
... and Public Key Certificate Basics 12 SSL/TLS Protocol Basics ...20 Using HTTPS with HP Jetdirect ...26 A Detailed Look at the SSL/TLS Connection 52 SSL/TLS Server Settings ...60 HP Jetdirect as an SSL/TLS Client ...61 SSL/TLS Client: Understanding Certificate Chains 77 SSL...The answer was a great benefit. whitepaper HP Jetdirect and SSL/TLS June 2008 Table of security because they have not deployed SSL/TLS 1 A free firmware upgrade allowed the 610n EIO print server, shipped in early 2002 with the 615n EIO Print Server. HP printing and imaging devices were becoming more complex ...
... and Public Key Certificate Basics 12 SSL/TLS Protocol Basics ...20 Using HTTPS with HP Jetdirect ...26 A Detailed Look at the SSL/TLS Connection 52 SSL/TLS Server Settings ...60 HP Jetdirect as an SSL/TLS Client ...61 SSL/TLS Client: Understanding Certificate Chains 77 SSL...The answer was a great benefit. whitepaper HP Jetdirect and SSL/TLS June 2008 Table of security because they have not deployed SSL/TLS 1 A free firmware upgrade allowed the 610n EIO print server, shipped in early 2002 with the 615n EIO Print Server. HP printing and imaging devices were becoming more complex ...
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 94
... with an IP address in RFC4513 for printing). • When Jetdirect is acting as one or the other. • Do not use the self-signed certificate that Jetdirect generates by the firmware of that nature when Jetdirect is an SSL/TLS server are not an issue at the present time...words for Virtual Private Network (VPN) access. Just because SSL/TLS is for you looking younger. Test! HP Jetdirect Certificate Guidelines We've covered several client and server scenarios regarding HP Jetdirect and SSL/TLS. With Embedded Devices, there is a problem. That wasn't too bad to replace it...
... with an IP address in RFC4513 for printing). • When Jetdirect is acting as one or the other. • Do not use the self-signed certificate that Jetdirect generates by the firmware of that nature when Jetdirect is an SSL/TLS server are not an issue at the present time...words for Virtual Private Network (VPN) access. Just because SSL/TLS is for you looking younger. Test! HP Jetdirect Certificate Guidelines We've covered several client and server scenarios regarding HP Jetdirect and SSL/TLS. With Embedded Devices, there is a problem. That wasn't too bad to replace it...
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 95
... that there are popular but do support SSL/TLS. HP Jetdirect has supported SSL/TLS for the best experience (http://www.hp.com/go/wja_firmware). • EIO print servers 610n, 615n, 620n, 625n, 630n, 635n with the latest firmware. • External USB print server en3700 • Embedded Jetdirect products with the Jetdirect product number J7949E, J7982E, J7991E, J7997E, J7974E, and J7992E...
... that there are popular but do support SSL/TLS. HP Jetdirect has supported SSL/TLS for the best experience (http://www.hp.com/go/wja_firmware). • EIO print servers 610n, 615n, 620n, 625n, 630n, 635n with the latest firmware. • External USB print server en3700 • Embedded Jetdirect products with the Jetdirect product number J7949E, J7982E, J7991E, J7997E, J7974E, and J7992E...
HP Jetdirect Print Servers - Administrator's Guide
Page 5
... contents 1 Introducing the HP Jetdirect print server Supported print servers ...1 Supported network protocols ...2 Security protocols ...3 SNMP (IP and IPX) ...3 HTTPS ...3 Authentication ...4 EAP/802.1X server-based authentication 4 IPsec/Firewall ...4 Supplied manuals ...5 HP support ...5 HP online support ...5 Firmware upgrades ...5 Firmware installation tools 5 HP support by phone ...6 Product registration ...6 Product accessibility ...6 2 HP software solutions summary HP Install Network Printer Wizard (Windows 8 Requirements ...8 HP Jetdirect printer installer for UNIX...
... contents 1 Introducing the HP Jetdirect print server Supported print servers ...1 Supported network protocols ...2 Security protocols ...3 SNMP (IP and IPX) ...3 HTTPS ...3 Authentication ...4 EAP/802.1X server-based authentication 4 IPsec/Firewall ...4 Supplied manuals ...5 HP support ...5 HP online support ...5 Firmware upgrades ...5 Firmware installation tools 5 HP support by phone ...6 Product registration ...6 Product accessibility ...6 2 HP software solutions summary HP Install Network Printer Wizard (Windows 8 Requirements ...8 HP Jetdirect printer installer for UNIX...
HP Jetdirect Print Servers - Administrator's Guide
Page 7
Operating notes ...64 HP Jetdirect Home tab ...65 Device tabs ...66 Networking tab ...66 TCP/IP Settings ...69 Summary tab ...70 Network Identification tab 70 TCP/IP(v4) tab 71 ... Statistics ...95 Protocol Info ...95 Configuration Page ...95 Other Links ...95 ENWW v Account 87 Certificates ...87 Configure certificates 88 Access Control 90 Mgmt. Settings ...79 Firmware Upgrade 81 LPD Queues ...81 USB Settings ...83 Support Info ...84 Refresh Rate ...84 Select Language ...84 Security: Settings ...84 Status ...84 Wizard ...85 Restore...
Operating notes ...64 HP Jetdirect Home tab ...65 Device tabs ...66 Networking tab ...66 TCP/IP Settings ...69 Summary tab ...70 Network Identification tab 70 TCP/IP(v4) tab 71 ... Statistics ...95 Protocol Info ...95 Configuration Page ...95 Other Links ...95 ENWW v Account 87 Certificates ...87 Configure certificates 88 Access Control 90 Mgmt. Settings ...79 Firmware Upgrade 81 LPD Queues ...81 USB Settings ...83 Support Info ...84 Refresh Rate ...84 Select Language ...84 Security: Settings ...84 Status ...84 Wizard ...85 Restore...
HP Jetdirect Print Servers - Administrator's Guide
Page 11
... to an HP Jetdirect print server and not a separate computer running print server software. Because they are assigned an HP part number for compatibility and identification purposes. ● HP Jetdirect EIO internal print servers are integrated with multiple users. Table 1-1 Supported HP Jetdirect print server features and capabilities Model Product Number Printer Connect Network Connect1 Network Protocols and Features2 Firmware Version3 690n J8007G 635n J7961G 630n Not...
... to an HP Jetdirect print server and not a separate computer running print server software. Because they are assigned an HP part number for compatibility and identification purposes. ● HP Jetdirect EIO internal print servers are integrated with multiple users. Table 1-1 Supported HP Jetdirect print server features and capabilities Model Product Number Printer Connect Network Connect1 Network Protocols and Features2 Firmware Version3 690n J8007G 635n J7961G 630n Not...
HP Jetdirect Print Servers - Administrator's Guide
Page 12
...support J7997G (630n) J8010E, J8011E, J8013E, J8017E FTP printing 2 Chapter 1 Introducing the HP Jetdirect print server ENWW and 64-bit), Server 2003, Vista Microsoft Terminal Server and Citrix MetaFrame environments2 J8007G (690n) J7961G (635n) J7997G (630n) Novell NetWare2 5, 6.x UNIX and Linux, including: Hewlett-Packard HP-UX, ... Connect1 Network Protocols and Features2 Firmware Version3 Not Applicable J8017E Embedded 10/100-TX or Full 10/100/1000T V38.xx.nn 1 Embedded HP Jetdirect print server support for 100T (Gigabit) depends on the print server and the printer/MFP in ...
...support J7997G (630n) J8010E, J8011E, J8013E, J8017E FTP printing 2 Chapter 1 Introducing the HP Jetdirect print server ENWW and 64-bit), Server 2003, Vista Microsoft Terminal Server and Citrix MetaFrame environments2 J8007G (690n) J7961G (635n) J7997G (630n) Novell NetWare2 5, 6.x UNIX and Linux, including: Hewlett-Packard HP-UX, ... Connect1 Network Protocols and Features2 Firmware Version3 Not Applicable J8017E Embedded 10/100-TX or Full 10/100/1000T V38.xx.nn 1 Embedded HP Jetdirect print server support for 100T (Gigabit) depends on the print server and the printer/MFP in ...
HP Jetdirect Print Servers - Administrator's Guide
Page 15
... site 24 hours a day, 7 days a week at : http://www.hp.com/go /webjetadmin_firmware Firmware installation tools Install firmware upgrades for the applicable HP Jetdirect product models. installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for supported HP Jetdirect print servers over your browser. If a firmware upgrade is installed. To configure the print server for IPsec/Firewall operation, use guides, or equivalent printer documentation...
... site 24 hours a day, 7 days a week at : http://www.hp.com/go /webjetadmin_firmware Firmware installation tools Install firmware upgrades for the applicable HP Jetdirect product models. installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for supported HP Jetdirect print servers over your browser. If a firmware upgrade is installed. To configure the print server for IPsec/Firewall operation, use guides, or equivalent printer documentation...
HP Jetdirect Print Servers - Administrator's Guide
Page 16
...firmware upgrade image file to log into the device. For more information see Embedded Web server (V.38.xx) on the print server, and is complete before exiting the session. HP support by phone Highly trained technicians are ready to upgrade the device are the responsibility of HP Jetdirect print server products: ● Visit the HP... take your local telephone company for current rates. Rates can vary. Product registration To register your HP Jetdirect print server, use the device IP address or host name. Ensure that the download is accessible using a Web browser. For the most...
...firmware upgrade image file to log into the device. For more information see Embedded Web server (V.38.xx) on the print server, and is complete before exiting the session. HP support by phone Highly trained technicians are ready to upgrade the device are the responsibility of HP Jetdirect print server products: ● Visit the HP... take your local telephone company for current rates. Rates can vary. Product registration To register your HP Jetdirect print server, use the device IP address or host name. Ensure that the download is accessible using a Web browser. For the most...
HP Jetdirect Print Servers - Administrator's Guide
Page 18
...; Printer software (printer driver) to use the printer through an HP Jetdirect print server 8 Chapter 2 HP software solutions summary ENWW Requires HP Jetdirect print server firmware version x.20.00 or later. 1 Supports queue creation and peripheral management from HP online support at: http://www.hp.com/go/inpw_sw Requirements NOTE: For HP Jetdirect wired/wireless print servers used in an I/O slot. This is recommended. Once the...
...; Printer software (printer driver) to use the printer through an HP Jetdirect print server 8 Chapter 2 HP software solutions summary ENWW Requires HP Jetdirect print server firmware version x.20.00 or later. 1 Supports queue creation and peripheral management from HP online support at: http://www.hp.com/go/inpw_sw Requirements NOTE: For HP Jetdirect wired/wireless print servers used in an I/O slot. This is recommended. Once the...
HP Jetdirect Print Servers - Administrator's Guide
Page 41
... destination list is between 1 and 99999 seconds. 0: Disable. ipx-unit-name: Name assigned to the HP Jetdirect print server's SNMP trap destination list. The default SNMP port number is 162. (You must have a trap daemon that listens for the... the HP Jetdirect print server responds to 255 alphanumeric characters. NOTE: On HP Jetdirect 635n print servers, by default all SNMP agents (SNMP v1, v2, v3), communication with HP Web Jetadmin, and firmware upgrades using HP downloading utilities. Authentication traps indicate that the print server waits for embedded Web server diagnostic...
... destination list is between 1 and 99999 seconds. 0: Disable. ipx-unit-name: Name assigned to the HP Jetdirect print server's SNMP trap destination list. The default SNMP port number is 162. (You must have a trap daemon that listens for the... the HP Jetdirect print server responds to 255 alphanumeric characters. NOTE: On HP Jetdirect 635n print servers, by default all SNMP agents (SNMP v1, v2, v3), communication with HP Web Jetadmin, and firmware upgrades using HP downloading utilities. Authentication traps indicate that the print server waits for embedded Web server diagnostic...
HP Jetdirect Print Servers - Administrator's Guide
Page 42
..., 1000FULL, 100AUTO, 100FULL, 100HALF, 10FULL, 10HALF. The communication modes are disabled by factory default. ipx-sapinterval: Time in a print queue. pjl-eoj: (or ipx-eoj:) IPX end-of a firmware upgrade file for the HP Jetdirect print servers. 32 Chapter 3 TCP/IP configuration ENWW DLC/LLC dlc/llc-config: (or dlc/llc:) Use DLC/LLC protocol operation...
..., 1000FULL, 100AUTO, 100FULL, 100HALF, 10FULL, 10HALF. The communication modes are disabled by factory default. ipx-sapinterval: Time in a print queue. pjl-eoj: (or ipx-eoj:) IPX end-of a firmware upgrade file for the HP Jetdirect print servers. 32 Chapter 3 TCP/IP configuration ENWW DLC/LLC dlc/llc-config: (or dlc/llc:) Use DLC/LLC protocol operation...
HP Jetdirect Print Servers - Administrator's Guide
Page 43
.... Verify that supports bi-directional communication between the printer and print server. Path and filename of this device. usb-mode: USB port communication mode on the HP Jetdirect print server. ◦ Auto (default): Automatically negotiate and set the highest communication mode possible for support of the firmware upgrade file. If a network cable is attached, then only the...
.... Verify that supports bi-directional communication between the printer and print server. Path and filename of this device. usb-mode: USB port communication mode on the HP Jetdirect print server. ◦ Auto (default): Automatically negotiate and set the highest communication mode possible for support of the firmware upgrade file. If a network cable is attached, then only the...
HP Jetdirect Print Servers - Administrator's Guide
Page 59
... the HP Jetdirect print server advertises for embedded Web server diagnostic page updates. Retain TCP/IP settings after a cold reset. (Parameters for other protocols that an idle print data connection can be disabled without notification. Table 3-3 Telnet Commands and Parameters (continued) 7 through 12: If user-specified LPD queues are not affected.) 0: Disable. ftp-download Download firmware upgrade...
... the HP Jetdirect print server advertises for embedded Web server diagnostic page updates. Retain TCP/IP settings after a cold reset. (Parameters for other protocols that an idle print data connection can be disabled without notification. Table 3-3 Telnet Commands and Parameters (continued) 7 through 12: If user-specified LPD queues are not affected.) 0: Disable. ftp-download Download firmware upgrade...
HP Jetdirect Print Servers - Administrator's Guide
Page 61
... the factory-default. TCP/IP Diagnostics Last Config IP (Read-only parameter.) IP address of the system from which SNMP GetRequests the HP Jetdirect print server responds to. In addition, firmware upgrades through the print server's host access list.) Enter up to 255 alphanumeric characters. default-get -cmnty-name set community name for DHCP configuration offers. ENWW...
... the factory-default. TCP/IP Diagnostics Last Config IP (Read-only parameter.) IP address of the system from which SNMP GetRequests the HP Jetdirect print server responds to. In addition, firmware upgrades through the print server's host access list.) Enter up to 255 alphanumeric characters. default-get -cmnty-name set community name for DHCP configuration offers. ENWW...
HP Jetdirect Print Servers - Administrator's Guide
Page 64
... used, enter a string of the firmware upgrade file. OFF or 0 (default): Disable flow control. TRANS or 3: Enable only for both received and transmitted data. 54 Chapter 3 TCP/IP configuration ENWW TXRX or 4: Enable for data transmitted to XML-based data on the HP Jetdirect print server. 0: Disable. 1 (default): Enable. The print server attempts to replace the factory...
... used, enter a string of the firmware upgrade file. OFF or 0 (default): Disable flow control. TRANS or 3: Enable only for both received and transmitted data. 54 Chapter 3 TCP/IP configuration ENWW TXRX or 4: Enable for data transmitted to XML-based data on the HP Jetdirect print server. 0: Disable. 1 (default): Enable. The print server attempts to replace the factory...
HP Jetdirect Print Servers - Administrator's Guide
Page 71
... device and networking pages. For a description of the device and the HP Jetdirect print server firmware version. Tabs across the upper portion of your printer or MFP device. The Networking tab is accessible from a compatible Web browser over an intranet. 4 Embedded Web server (V.38.xx) HP Jetdirect print servers contain an embedded Web server that is displayed and controlled by the HP Jetdirect print server.
... device and networking pages. For a description of the device and the HP Jetdirect print server firmware version. Tabs across the upper portion of your printer or MFP device. The Networking tab is accessible from a compatible Web browser over an intranet. 4 Embedded Web server (V.38.xx) HP Jetdirect print servers contain an embedded Web server that is displayed and controlled by the HP Jetdirect print server.