Practical considerations for imaging and printing security
Page 1
... p2600 ...4 Security checklists ...4 Conclusion: look beyond Common Criteria Certification 4 HP's imaging and printing security framework 4 Secure the Imaging and Printing Device 5 MFP walk-up authentication ...5 Network printing authentication ...5 Physical document access control 5 HP Secure Erase ...6 Vulnerabilities, viruses, and worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and...
... p2600 ...4 Security checklists ...4 Conclusion: look beyond Common Criteria Certification 4 HP's imaging and printing security framework 4 Secure the Imaging and Printing Device 5 MFP walk-up authentication ...5 Network printing authentication ...5 Physical document access control 5 HP Secure Erase ...6 Vulnerabilities, viruses, and worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and...
Practical considerations for imaging and printing security
Page 6
... access. IPsec Allows for strong authentication, confidentiality, and integrity of data from hard disk storage. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to the network as well as insure that only IT deployed and trusted devices, such as a result these devices have...
... access. IPsec Allows for strong authentication, confidentiality, and integrity of data from hard disk storage. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to the network as well as insure that only IT deployed and trusted devices, such as a result these devices have...
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 26
.... Refer to clients on the setup. The subordinate CA issues certificates to Figure 29 - Server Finished The server decrypts the pre_master_secret and generates the master_secret. We have a RootCA with HP Jetdirect Before we begin, we need a little info on the network. CA Hierarchy. 26 It goes ahead and let's the client know that it is...
.... Refer to clients on the setup. The subordinate CA issues certificates to Figure 29 - Server Finished The server decrypts the pre_master_secret and generates the master_secret. We have a RootCA with HP Jetdirect Before we begin, we need a little info on the network. CA Hierarchy. 26 It goes ahead and let's the client know that it is...
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 28
Network Diagram A pretty basic setup! In short, the XP machine will be an SSL client and the 4345MFP will be an SSL server. Figure 30 - We'll use regular HTTP and go to do. In order to get SSL working properly, we can verify its identity correctly and pass all those checks that the client has to the Jetdirect page where we are going to open a browser and talk to the 4345MFP. The XP client is going to need to assign a certificate to the 4345MFP so that it can perform our certificate operations. 28
Network Diagram A pretty basic setup! In short, the XP machine will be an SSL client and the 4345MFP will be an SSL server. Figure 30 - We'll use regular HTTP and go to do. In order to get SSL working properly, we can verify its identity correctly and pass all those checks that the client has to the Jetdirect page where we are going to open a browser and talk to the 4345MFP. The XP client is going to need to assign a certificate to the 4345MFP so that it can perform our certificate operations. 28
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 77
... described a situation where the wrong CA certificate was configured on its flash file system. The Root CA establishes the trust of certificates on Jetdirect. What Jetdirect needs to various entities in several places. The Root CA is created and it issues one or more thoroughly because it cannot store a multitude... to issue certificates to other entities. R2 then can see that the Root CA is then shutdown and locked up in the customer's network. Remember, Jetdirect is signed by reviewing our CA Hierarchy. R2's certificate is an embedded system and has limited flash space.
... described a situation where the wrong CA certificate was configured on its flash file system. The Root CA establishes the trust of certificates on Jetdirect. What Jetdirect needs to various entities in several places. The Root CA is created and it issues one or more thoroughly because it cannot store a multitude... to issue certificates to other entities. R2 then can see that the Root CA is then shutdown and locked up in the customer's network. Remember, Jetdirect is signed by reviewing our CA Hierarchy. R2's certificate is an embedded system and has limited flash space.
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 94
... and server scenarios regarding HP Jetdirect and SSL/TLS. With Embedded Devices, there is likely stored "in RFC4513 for Jetdirect always remains private. Otherwise, the wildcard certificate may not even have (the digital certificate on multiple Jetdirect cards (e.g., wildcard certificates for printing). • When Jetdirect is acting... be sure to get security for Virtual Private Network (VPN) access. Be sure that the Common Name matches the FQDN of the certificate is acting as a client, be entered. The private key of Jetdirect to avoid certificate errors. • Do not...
... and server scenarios regarding HP Jetdirect and SSL/TLS. With Embedded Devices, there is likely stored "in RFC4513 for Jetdirect always remains private. Otherwise, the wildcard certificate may not even have (the digital certificate on multiple Jetdirect cards (e.g., wildcard certificates for printing). • When Jetdirect is acting... be sure to get security for Virtual Private Network (VPN) access. Be sure that the Common Name matches the FQDN of the certificate is acting as a client, be entered. The private key of Jetdirect to avoid certificate errors. • Do not...
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 95
... SSL/TLS for the best experience (http://www.hp.com/go/wja_firmware). • EIO print servers 610n, 615n, 620n, 625n, 630n, 635n with the latest firmware. • External USB print server en3700 • Embedded Jetdirect products with the Jetdirect product number J7949E, J7982E, J7991E, J7997E, J7974E, and J7992E. Here is ...of security information like the 175X (external USB) or the 200m (LIO). • The Embedded Jetdirect in the negative. When an embedded device leaves your PKI or network could be obtained from a device no longer need to be sure that you know the answers to ...
... SSL/TLS for the best experience (http://www.hp.com/go/wja_firmware). • EIO print servers 610n, 615n, 620n, 625n, 630n, 635n with the latest firmware. • External USB print server en3700 • Embedded Jetdirect products with the Jetdirect product number J7949E, J7982E, J7991E, J7997E, J7974E, and J7992E. Here is ...of security information like the 175X (external USB) or the 200m (LIO). • The Embedded Jetdirect in the negative. When an embedded device leaves your PKI or network could be obtained from a device no longer need to be sure that you know the answers to ...
HP Jetdirect Print Servers - Administrator's Guide
Page 5
... contents 1 Introducing the HP Jetdirect print server Supported print servers ...1 Supported network protocols ...2 Security protocols ...3 SNMP (IP and IPX) ...3 HTTPS ...3 Authentication ...4 EAP/802.1X server-based authentication 4 IPsec/Firewall ...4 Supplied manuals ...5 HP support ...5 HP online support ...5 Firmware upgrades ...5 Firmware installation tools 5 HP support by phone ...6 Product registration ...6 Product accessibility ...6 2 HP software solutions summary HP Install Network Printer Wizard (Windows 8 Requirements ...8 HP Jetdirect printer installer for UNIX...
... contents 1 Introducing the HP Jetdirect print server Supported print servers ...1 Supported network protocols ...2 Security protocols ...3 SNMP (IP and IPX) ...3 HTTPS ...3 Authentication ...4 EAP/802.1X server-based authentication 4 IPsec/Firewall ...4 Supplied manuals ...5 HP support ...5 HP online support ...5 Firmware upgrades ...5 Firmware installation tools 5 HP support by phone ...6 Product registration ...6 Product accessibility ...6 2 HP software solutions summary HP Install Network Printer Wizard (Windows 8 Requirements ...8 HP Jetdirect printer installer for UNIX...
HP Jetdirect Print Servers - Administrator's Guide
Page 7
... 88 Access Control 90 Mgmt. Operating notes ...64 HP Jetdirect Home tab ...65 Device tabs ...66 Networking tab ...66 TCP/IP Settings ...69 Summary tab ...70 Network Identification tab 70 TCP/IP(v4) tab 71 TCP/IP(v6) tab 72 Config Precedence tab 73 Advanced tab ...74 Network Settings ...76 IPX/SPX ...76 AppleTalk ...77... Restore Defaults 86 Authorization ...87 Admin. Protocols ...91 Web Mgmt...91 SNMP ...92 SNMP v3 ...92 Other ...92 802.1X Authentication ...93 IPsec/Firewall ...94 Network Statistics ...95 Protocol Info ...95 Configuration Page ...95 Other Links ...95 ENWW v
... 88 Access Control 90 Mgmt. Operating notes ...64 HP Jetdirect Home tab ...65 Device tabs ...66 Networking tab ...66 TCP/IP Settings ...69 Summary tab ...70 Network Identification tab 70 TCP/IP(v4) tab 71 TCP/IP(v6) tab 72 Config Precedence tab 73 Advanced tab ...74 Network Settings ...76 IPX/SPX ...76 AppleTalk ...77... Restore Defaults 86 Authorization ...87 Admin. Protocols ...91 Web Mgmt...91 SNMP ...92 SNMP v3 ...92 Other ...92 802.1X Authentication ...93 IPsec/Firewall ...94 Network Statistics ...95 Protocol Info ...95 Configuration Page ...95 Other Links ...95 ENWW v
HP Jetdirect Print Servers - Administrator's Guide
Page 8
... - assess the problem 121 Procedure 1: Verify the printer is on and online 122 Procedure 2: Print an HP Jetdirect configuration page 122 Procedure 3: Resolve printer display error messages 123 Procedure 4: Resolve printer network communication problems 124 Troubleshooting wireless print servers 126 8 HP Jetdirect configuration pages HP Jetdirect configuration page ...130 Status field error messages 130 Configuration page format 130 Configuration page...
... - assess the problem 121 Procedure 1: Verify the printer is on and online 122 Procedure 2: Print an HP Jetdirect configuration page 122 Procedure 3: Resolve printer display error messages 123 Procedure 4: Resolve printer network communication problems 124 Troubleshooting wireless print servers 126 8 HP Jetdirect configuration pages HP Jetdirect configuration page ...130 Status field error messages 130 Configuration page format 130 Configuration page...
HP Jetdirect Print Servers - Administrator's Guide
Page 9
...157 Use SAM to configure print queues (HP-UX systems 159 Print a test file 160 LPD on Windows 2000/Server 2003 systems 160 Install TCP/IP software 160 Configure a network printer for Windows 2000/Server 2003 systems 161 Verify the configuration 162 Print from Windows clients 163 LPD ... Error messages ...143 HP Jetdirect Security page ...149 Security settings ...150 IPsec Error Log ...152 Local IP addresses ...152 IPsec Statistics ...152 IKE Stats ...153 IPsec Rules ...153 IPsec Security Associations (SA) table 153 Available Network Services 154 Appendix A LPD printing About LPD ...156 ...
...157 Use SAM to configure print queues (HP-UX systems 159 Print a test file 160 LPD on Windows 2000/Server 2003 systems 160 Install TCP/IP software 160 Configure a network printer for Windows 2000/Server 2003 systems 161 Verify the configuration 162 Print from Windows clients 163 LPD ... Error messages ...143 HP Jetdirect Security page ...149 Security settings ...150 IPsec Error Log ...152 Local IP addresses ...152 IPsec Statistics ...152 IKE Stats ...153 IPsec Rules ...153 IPsec Security Associations (SA) table 153 Available Network Services 154 Appendix A LPD printing About LPD ...156 ...
HP Jetdirect Print Servers - Administrator's Guide
Page 11
Table 1-1 Supported HP Jetdirect print server features and capabilities Model Product Number Printer Connect Network Connect1 Network Protocols and Features2 Firmware Version3 690n J8007G 635n J7961G 630n Not Applicable J7997G J8010E Not Applicable J8011E Not Applicable J8013E EIO EIO EIO Embedded Embedded Embedded 10/100/1000T 10/100/1000T 10/100/1000T ...
Table 1-1 Supported HP Jetdirect print server features and capabilities Model Product Number Printer Connect Network Connect1 Network Protocols and Features2 Firmware Version3 690n J8007G 635n J7961G 630n Not Applicable J7997G J8010E Not Applicable J8011E Not Applicable J8013E EIO EIO EIO Embedded Embedded Embedded 10/100/1000T 10/100/1000T 10/100/1000T ...
HP Jetdirect Print Servers - Administrator's Guide
Page 12
... systems with limited printing, management and security features. Table 1-1 Supported HP Jetdirect print server features and capabilities (continued) Model Product Number Printer Connect Network Connect1 Network Protocols and Features2 Firmware Version3 Not Applicable J8017E Embedded 10/100-TX or Full 10/100/1000T V38.xx.nn 1 Embedded HP Jetdirect print server support for 100T (Gigabit) depends on both the print server and printer/MFP...
... systems with limited printing, management and security features. Table 1-1 Supported HP Jetdirect print server features and capabilities (continued) Model Product Number Printer Connect Network Connect1 Network Protocols and Features2 Firmware Version3 Not Applicable J8017E Embedded 10/100-TX or Full 10/100/1000T V38.xx.nn 1 Embedded HP Jetdirect print server support for 100T (Gigabit) depends on both the print server and printer/MFP...
HP Jetdirect Print Servers - Administrator's Guide
Page 13
... J7961G (635n) J7997G (630n) J8010E, J8011E, J8013E, J8017E 1 For additional network systems and versions, see the current HP Jetdirect product data sheets. ENWW Security protocols 3 HP Jetdirect print servers support access to set up network printing on IPv4, IPv6 and IPX networks. Value-featured print servers support an SNMP v1/v2c agent only. Table 1-2 Supported network protocols (continued) Supported Network Protocols Network Printing Environments1 Product Support IPX...
... J7961G (635n) J7997G (630n) J8010E, J8011E, J8013E, J8017E 1 For additional network systems and versions, see the current HP Jetdirect product data sheets. ENWW Security protocols 3 HP Jetdirect print servers support access to set up network printing on IPv4, IPv6 and IPX networks. Value-featured print servers support an SNMP v1/v2c agent only. Table 1-2 Supported network protocols (continued) Supported Network Protocols Network Printing Environments1 Product Support IPX...
HP Jetdirect Print Servers - Administrator's Guide
Page 14
... authentication and encryption protocols. 4 Chapter 1 Introducing the HP Jetdirect print server ENWW For more information, see Embedded Web server (V.38.xx) on both the client and the network authentication server. Wireless print server authentication HP Jetdirect wired/wireless print servers support several available protocols. There are used for authentication of network access and services available to the network (such as a remote authentication dial-in user...
... authentication and encryption protocols. 4 Chapter 1 Introducing the HP Jetdirect print server ENWW For more information, see Embedded Web server (V.38.xx) on both the client and the network authentication server. Wireless print server authentication HP Jetdirect wired/wireless print servers support several available protocols. There are used for authentication of network access and services available to the network (such as a remote authentication dial-in user...
HP Jetdirect Print Servers - Administrator's Guide
Page 15
... installed. For more information about your browser. To configure the print server for the applicable HP Jetdirect product models. HP support HP online support Visit the HP Web site 24 hours a day, 7 days a week at : http://www.hp.com/go /webjetadmin_firmware Firmware installation tools Install firmware upgrades for your network. To check for and download available upgrades, visit the...
... installed. For more information about your browser. To configure the print server for the applicable HP Jetdirect product models. HP support HP online support Visit the HP Web site 24 hours a day, 7 days a week at : http://www.hp.com/go /webjetadmin_firmware Firmware installation tools Install firmware upgrades for your network. To check for and download available upgrades, visit the...
HP Jetdirect Print Servers - Administrator's Guide
Page 17
... enterprise management tool for the remote ● installation, configuration, and management of HP Jetdirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded Web servers. ● The HP preferred solution for ongoing management and installation of software solutions to your network, you can share the printer for direct-mode (peer-to-peer...
... enterprise management tool for the remote ● installation, configuration, and management of HP Jetdirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded Web servers. ● The HP preferred solution for ongoing management and installation of software solutions to your network, you can share the printer for direct-mode (peer-to-peer...
HP Jetdirect Print Servers - Administrator's Guide
Page 18
... directly to use the printer through an HP Jetdirect print server 8 Chapter 2 HP software solutions summary ENWW On Windows XP and 2003 Server systems, Version 5.0 also supports printing on your systems or servers that runs from your system is called client-server printing. Versions 6.0 and 7.0 support printer discovery on TCP/IP networks ● Printer software (printer driver) to the printer. Once...
... directly to use the printer through an HP Jetdirect print server 8 Chapter 2 HP software solutions summary ENWW On Windows XP and 2003 Server systems, Version 5.0 also supports printing on your systems or servers that runs from your system is called client-server printing. Versions 6.0 and 7.0 support printer discovery on TCP/IP networks ● Printer software (printer driver) to the printer. Once...
HP Jetdirect Print Servers - Administrator's Guide
Page 72
... Web browser. Figure 4-1 HP Jetdirect Networking Tab For network parameter descriptions, see "Networking tab on page 62. In general, you must use those Web browsers that support HTML 4.01 and cascading style sheets. HP Web Jetadmin is a browser-based, enterprise management tool for network devices. A typical Networking tab displayed by the HP Jetdirect print server is shown in Figure 4-1 HP Jetdirect Networking Tab on page...
... Web browser. Figure 4-1 HP Jetdirect Networking Tab For network parameter descriptions, see "Networking tab on page 62. In general, you must use those Web browsers that support HTML 4.01 and cascading style sheets. HP Web Jetadmin is a browser-based, enterprise management tool for network devices. A typical Networking tab displayed by the HP Jetdirect print server is shown in Figure 4-1 HP Jetdirect Networking Tab on page...
HP Jetdirect Print Servers - Administrator's Guide
Page 76
... the Admin Password page to configuration and status pages. Networking tab The Networking tab provides access to HP Jetdirect network configuration parameters and status. Value-featured print servers provide limited information and capabilities. This unique address is supplied with the HP Jetdirect print server, or from HP Web Jetadmin. Device tabs Instead of the HP Jetdirect print server. This guide is assigned by Hewlett-Packard, but...
... the Admin Password page to configuration and status pages. Networking tab The Networking tab provides access to HP Jetdirect network configuration parameters and status. Value-featured print servers provide limited information and capabilities. This unique address is supplied with the HP Jetdirect print server, or from HP Web Jetadmin. Device tabs Instead of the HP Jetdirect print server. This guide is assigned by Hewlett-Packard, but...