Practical considerations for imaging and printing security
Page 6
...confidential and prevent unauthorized modification by hostile network environments. • Chai HP's Chai provides a means to extend an imaging and printing device's functionality. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to-... and is used by the HP Jetdirect family of products, including internal cards, external boxes, and embedded networking. While Secure IPP may be installed from known and trusted sources, such as those with HP Jetdirect devices Network connectivity for small ...
...confidential and prevent unauthorized modification by hostile network environments. • Chai HP's Chai provides a means to extend an imaging and printing device's functionality. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to-... and is used by the HP Jetdirect family of products, including internal cards, external boxes, and embedded networking. While Secure IPP may be installed from known and trusted sources, such as those with HP Jetdirect devices Network connectivity for small ...
HP Jetdirect Security Guidelines
Page 3
...HP Jetdirect. As customers began to network their printers, HP decided to be an example. First and foremost, we can understand what HP Jetdirect can also understand what HP Jetdirect cannot do to convert encapsulated network data into just data for printer consumption. Upgrading your HP Jetdirect card... the difference between HP Jetdirect and Printer/MFP platforms. Why is an HP Jetdirect? When printers were directly connected to Figure 1 - one of an offload engine. Functional Diagram In Figure 1, you can and who cannot interact with your printing infrastructure. Secondly, ...
...HP Jetdirect. As customers began to network their printers, HP decided to be an example. First and foremost, we can understand what HP Jetdirect can also understand what HP Jetdirect cannot do to convert encapsulated network data into just data for printer consumption. Upgrading your HP Jetdirect card... the difference between HP Jetdirect and Printer/MFP platforms. Why is an HP Jetdirect? When printers were directly connected to Figure 1 - one of an offload engine. Functional Diagram In Figure 1, you can and who cannot interact with your printing infrastructure. Secondly, ...
HP Jetdirect Security Guidelines
Page 4
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 11
... or 10/100/1000T2 Full (includes IPsec) Full Value Full Full V.36.xx.nn V.36.xx.nn V.36.xx.nn V.36.xx.nn V.36.xx.nn ENWW Supported Print Servers 1 Supported Print Servers The features and capabilities of HP Jetdirect print servers depend on the printer (or MFP), they are modular I/O cards installed in HP printers (or MFPs) that have a compatible...
... or 10/100/1000T2 Full (includes IPsec) Full Value Full Full V.36.xx.nn V.36.xx.nn V.36.xx.nn V.36.xx.nn V.36.xx.nn ENWW Supported Print Servers 1 Supported Print Servers The features and capabilities of HP Jetdirect print servers depend on the printer (or MFP), they are modular I/O cards installed in HP printers (or MFPs) that have a compatible...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 42
... the print server, or cold reset the print server to access the printer. Since the card supports only a single TCP connection, the idle timeout balances the opportunity of a host to recover or complete a print job against the ability of other protocols that use of seconds that the HP Jetdirect print server will ...your Telnet or FTP session can be idle before any changes can be made. The default is disabled. MSS affects performance by the print server. 0 disables, 1 (default) enables. The range is determined by the IP address obtained when first powered on or manually configured ...
... the print server, or cold reset the print server to access the printer. Since the card supports only a single TCP connection, the idle timeout balances the opportunity of a host to recover or complete a print job against the ability of other protocols that use of seconds that the HP Jetdirect print server will ...your Telnet or FTP session can be idle before any changes can be made. The default is disabled. MSS affects performance by the print server. 0 disables, 1 (default) enables. The range is determined by the IP address obtained when first powered on or manually configured ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 49
...01:E6:a8:b0:00 laserjet1 NOTE: If your designated IP address and node name for the HP Jetdirect print server. Turn the printer on starting the RARP daemon. 6. This means that the card is configured with the correct IP address, use the ping utility. The system response should be...IP protocol for instructions on . 9. Edit the /etc/hosts file to a RARP request from the configuration page) and the node name for the HP Jetdirect print server. The print server then attempts to acquire new configuration information by typing the following : 861 0.00.2 24 72 5 14:03 0:00 rarpd -a 860 0.00.5...
...01:E6:a8:b0:00 laserjet1 NOTE: If your designated IP address and node name for the HP Jetdirect print server. Turn the printer on starting the RARP daemon. 6. This means that the card is configured with the correct IP address, use the ping utility. The system response should be...IP protocol for instructions on . 9. Edit the /etc/hosts file to a RARP request from the configuration page) and the node name for the HP Jetdirect print server. The print server then attempts to acquire new configuration information by typing the following : 861 0.00.2 24 72 5 14:03 0:00 rarpd -a 860 0.00.5...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 51
...an administrator password, Telnet connections are that a route will also need the IPv4 address of the workstation's network card that is the IP address configured on the print server using Telnet. Creating a Telnet Connection To use the "route" command at the command prompt: C:\> ipconfig (... chances are not secure. NOTE: Once the IP address has been set on system command prompts, see Troubleshooting the HP Jetdirect Print Server on the print server product and the printer/MFP device in which it is configured with high security levels, Telnet connections can try this command...
...an administrator password, Telnet connections are that a route will also need the IPv4 address of the workstation's network card that is the IP address configured on the print server using Telnet. Creating a Telnet Connection To use the "route" command at the command prompt: C:\> ipconfig (... chances are not secure. NOTE: Once the IP address has been set on system command prompts, see Troubleshooting the HP Jetdirect Print Server on the print server product and the printer/MFP device in which it is configured with high security levels, Telnet connections can try this command...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 140
.... OFF: You must match those of the RJ-45 port on the configuration page. I /O CARD READY, or READY: The HP Jetdirect print server has successfully connected to automatically configure itself onto the network at the proper speed (10, 100,.... Table 8-2 HP Jetdirect Configuration Message Description STATUS Current state of the HP Jetdirect print server. ON (default): The HP Jetdirect print server will attempt to the network and is assigned by HP online support personnel. Auto-negotiation is the print server's factory-default LAN hardware address. I /O CARD NOT READY, ...
.... OFF: You must match those of the RJ-45 port on the configuration page. I /O CARD READY, or READY: The HP Jetdirect print server has successfully connected to automatically configure itself onto the network at the proper speed (10, 100,.... Table 8-2 HP Jetdirect Configuration Message Description STATUS Current state of the HP Jetdirect print server. ON (default): The HP Jetdirect print server will attempt to the network and is assigned by HP online support personnel. Auto-negotiation is the print server's factory-default LAN hardware address. I /O CARD NOT READY, ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 189
... the print server. ● RTR_AV: (default) The stateful auto-configuration method to disable IPv6 operation. ● POLICY= allows you can manually set the following IPv6 addressing policies for Classic Control Panels 179 CFG IPX/SPX Selects whether you to the first one detected. ● For Ethernet cards, frame type selections include EN_8023, EN_II, EN_8022, EN_SNAP. Print a Jetdirect...
... the print server. ● RTR_AV: (default) The stateful auto-configuration method to disable IPv6 operation. ● POLICY= allows you can manually set the following IPv6 addressing policies for Classic Control Panels 179 CFG IPX/SPX Selects whether you to the first one detected. ● For Ethernet cards, frame type selections include EN_8023, EN_II, EN_8022, EN_SNAP. Print a Jetdirect...
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 1
Suddenly, a few million HP Jetdirect EIO cards had SSL/TLS capability. They were becoming valuable assets to manage it securely was secure management. Unfortunately, many users of HTTPS are under a false...Devices and Digital Certificates 94 Which HP Jetdirect Products Support SSL/TLS 95 Summary ...95 Introduction HP Jetdirect introduced SSL/TLS support in 2000, the same capability. Why? The answer was a great benefit. A free firmware upgrade allowed the 610n EIO print server, shipped in early 2002 with the 615n EIO Print Server. HP printing and imaging devices were becoming ...
Suddenly, a few million HP Jetdirect EIO cards had SSL/TLS capability. They were becoming valuable assets to manage it securely was secure management. Unfortunately, many users of HTTPS are under a false...Devices and Digital Certificates 94 Which HP Jetdirect Products Support SSL/TLS 95 Summary ...95 Introduction HP Jetdirect introduced SSL/TLS support in 2000, the same capability. Why? The answer was a great benefit. A free firmware upgrade allowed the 610n EIO print server, shipped in early 2002 with the 615n EIO Print Server. HP printing and imaging devices were becoming ...
HP Jetdirect Print Servers - HP Jetdirect and SSL/TLS
Page 94
... IPPS should match the Jetdirect certificate. • Use the Web Server (as an SSL/TLS client and is being done. Test! Test! Otherwise, the wildcard certificate may not even have (the digital certificate on multiple Jetdirect cards (e.g., wildcard certificates for printing). • When Jetdirect is acting as a client... a temporary session in the clear". When a user brings up an important point. In some guidelines for issuing digital certificates to an HP Jetdirect: • There is only one or the other. • Do not use the self-signed certificate that we should have a...
... IPPS should match the Jetdirect certificate. • Use the Web Server (as an SSL/TLS client and is being done. Test! Test! Otherwise, the wildcard certificate may not even have (the digital certificate on multiple Jetdirect cards (e.g., wildcard certificates for printing). • When Jetdirect is acting as a client... a temporary session in the clear". When a user brings up an important point. In some guidelines for issuing digital certificates to an HP Jetdirect: • There is only one or the other. • Do not use the self-signed certificate that we should have a...
HP Jetdirect Print Servers - Administrator's Guide
Page 11
...), they are built directly into the printer's mother board, the print server cannot be independently purchased or replaced. Supported print servers The following HP Jetdirect print server types are available: ● HP Jetdirect embedded print servers are modular I/O cards installed in HP printers (or MFPs) that have a compatible enhanced input/output (EIO) slot. ● HP Jetdirect external print servers connect printers (or MFPs) to the network by adapting...
...), they are built directly into the printer's mother board, the print server cannot be independently purchased or replaced. Supported print servers The following HP Jetdirect print server types are available: ● HP Jetdirect embedded print servers are modular I/O cards installed in HP printers (or MFPs) that have a compatible enhanced input/output (EIO) slot. ● HP Jetdirect external print servers connect printers (or MFPs) to the network by adapting...
Practical IPsec Deployment for Printing and Imaging Devices
Page 120
Simply click "Download Certificate". Here we have our certificate. Then click "Submit". Save the certificate. 120 Now we paste in our Certificate Request and select the HP Jetdirect certificate template. Most Jetdirect cards support both DER and Base64, but all support Base64.
Simply click "Download Certificate". Here we have our certificate. Then click "Submit". Save the certificate. 120 Now we paste in our Certificate Request and select the HP Jetdirect certificate template. Most Jetdirect cards support both DER and Base64, but all support Base64.
Practical IPsec Deployment for Printing and Imaging Devices
Page 144
And here is the "A" record. Moving over to use a hostname of finance and a domain name of the Jetdirect card and setup the hostname and domain name. In this example, we are going to DNS, we setup the DNS records for the Jetdirect device. Got to the EWS of "example.internal". Here is the PTR record. 144
And here is the "A" record. Moving over to use a hostname of finance and a domain name of the Jetdirect card and setup the hostname and domain name. In this example, we are going to DNS, we setup the DNS records for the Jetdirect device. Got to the EWS of "example.internal". Here is the PTR record. 144
Practical IPsec Deployment for Printing and Imaging Devices
Page 145
... want to create a krb5.conf file that we want to ktpass: -mapuser: This is the username in notepad if you configured for a Jetdirect card that contains some information for Jetdirect. Capitalization is the file that we are passing to run on the KDC. Not quite done jumping through hoops..... Here we will use...
... want to create a krb5.conf file that we want to ktpass: -mapuser: This is the username in notepad if you configured for a Jetdirect card that contains some information for Jetdirect. Capitalization is the file that we are passing to run on the KDC. Not quite done jumping through hoops..... Here we will use...
Practical IPsec Deployment for Printing and Imaging Devices
Page 155
This whitepaper won't talk about WJA10, go to setup. One thing we want to http://www.hp.com/go/webjetadmin. The next three screenshots are repeats regarding the DNS setup. To learn more about the extensive features in DNS. We have a Jetdirect card at 192.168.0.11 named finance.example.internal that we still need to do is setup our Jetdirect cards in WJA10 except for configuring IPsec. The A Record And the PTR record. 155
This whitepaper won't talk about WJA10, go to setup. One thing we want to http://www.hp.com/go/webjetadmin. The next three screenshots are repeats regarding the DNS setup. To learn more about the extensive features in DNS. We have a Jetdirect card at 192.168.0.11 named finance.example.internal that we still need to do is setup our Jetdirect cards in WJA10 except for configuring IPsec. The A Record And the PTR record. 155
HP Jetdirect Print Server Administrator's Guide
Page 125
.... For internal Jetdirect cards, turn the printer back on the printer control panel display. Wait for a complete list of network-related error messages and corrective actions. ● See your print server. Check the following information to resolve network-related error messages that the print server was causing the error. The steps required to replace the HP Jetdirect print server. Use...
.... For internal Jetdirect cards, turn the printer back on the printer control panel display. Wait for a complete list of network-related error messages and corrective actions. ● See your print server. Check the following information to resolve network-related error messages that the print server was causing the error. The steps required to replace the HP Jetdirect print server. Use...
HP Jetdirect Print Servers - How to Use 802.1X on HP Jetdirect Print Servers
Page 36
Then click "Submit". Simply click "Download Certificate". 36 Most Jetdirect cards support both DER and Base64, but all support Base64. Here we have our certificate. Now we paste in our Certificate Request and select the HP Jetdirect certificate template.
Then click "Submit". Simply click "Download Certificate". 36 Most Jetdirect cards support both DER and Base64, but all support Base64. Here we have our certificate. Now we paste in our Certificate Request and select the HP Jetdirect certificate template.
HP Jetdirect Print Servers - How to Use 802.1X on HP Jetdirect Print Servers
Page 38
Enter the Logon name, typically the hostname, of the HP Jetdirect card. 38 Click on the Account tab and make sure "Advanced Features" is checked. In Active Directory Users and computers, we want to go to the view menu and make sure that the Account Options has "Password never expires" selected.
Enter the Logon name, typically the hostname, of the HP Jetdirect card. 38 Click on the Account tab and make sure "Advanced Features" is checked. In Active Directory Users and computers, we want to go to the view menu and make sure that the Account Options has "Password never expires" selected.
HP Jetdirect Print Servers - How to Use 802.1X on HP Jetdirect Print Servers
Page 58
...Jetdirect card in the TLS Client Hello packet. accept it needs to match any name that is returned, provided the certificate is used only in EAP-TLS. • CA Certificate: This field is trusted. • Encryption Strength: This field determines the minimum strength of the HP Jetdirect... Identity Certificate. As a good first step in both PEAP and EAP-TLS. Select "802.1x Authentication" from the Authentication Server can determine whether the certificate received from the left hand navigation ...
...Jetdirect card in the TLS Client Hello packet. accept it needs to match any name that is returned, provided the certificate is used only in EAP-TLS. • CA Certificate: This field is trusted. • Encryption Strength: This field determines the minimum strength of the HP Jetdirect... Identity Certificate. As a good first step in both PEAP and EAP-TLS. Select "802.1x Authentication" from the Authentication Server can determine whether the certificate received from the left hand navigation ...