Practical considerations for imaging and printing security
Page 6
... (DoD) 5220-22m specification for the deletion of web services such as consumable reordering. While Secure IPP may be installed from hard disk storage. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to-clunk performance that afflict enterprise networks.
... (DoD) 5220-22m specification for the deletion of web services such as consumable reordering. While Secure IPP may be installed from hard disk storage. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to-clunk performance that afflict enterprise networks.
HP Jetdirect Security Guidelines
Page 5
...to a newer model. HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (not for...devices) J7982E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-...
...to a newer model. HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (not for...devices) J7982E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-...
HP Jetdirect Security Guidelines
Page 6
..., one must "lock down" several things before upgrading all HP Jetdirect firmware to the highest level. These models have been discontinued for securing these devices is the ability to install a J7961G 635n IPv6/IPsec print server. Before using the techniques presented here, the administrator at http://www.hp.com/go/dlm_sw. Using this operation is located here: http...
..., one must "lock down" several things before upgrading all HP Jetdirect firmware to the highest level. These models have been discontinued for securing these devices is the ability to install a J7961G 635n IPv6/IPsec print server. Before using the techniques presented here, the administrator at http://www.hp.com/go/dlm_sw. Using this operation is located here: http...
HP Jetdirect Security Guidelines
Page 7
.../100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version V.33.14/V.33.15 K.08.49 K.08.49 G.08.49 G.08.49 G.08.49 L.25.57 R.25.57 H.08.60 J.08.60 J.08.60 V.28.22 V.29.20 V.29.29 V.36.11 Table 4 - Some public references talk about HP Jetdirect so far...
.../100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version V.33.14/V.33.15 K.08.49 K.08.49 G.08.49 G.08.49 G.08.49 L.25.57 R.25.57 H.08.60 J.08.60 J.08.60 V.28.22 V.29.20 V.29.29 V.36.11 Table 4 - Some public references talk about HP Jetdirect so far...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 5
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 6
IPv6 Address Introduction 17 IPv6 Address Configuration 18 Link-Local Address 18 Stateless Addresses 18 Stateful Addresses 19 Using DNS ...19 Tools and Utilities 20 IPv4 Configuration ...20 Server-Based and Manual TCP/IP Configuration (IPv4 20 Default IP Address (IPv4 21 Default IP ......62 Compatible Web Browsers 62 Browser Exceptions 62 Supported HP Web Jetadmin Version 62 Viewing the Embedded Web Server 62 Operating Notes ...64 HP Jetdirect Home Tab ...64 Device Tabs ...65 Networking Tab ...65 Sending Product Information to HP 66 TCP/IP Settings ...67 Summary ...67 Network ...
IPv6 Address Introduction 17 IPv6 Address Configuration 18 Link-Local Address 18 Stateless Addresses 18 Stateful Addresses 19 Using DNS ...19 Tools and Utilities 20 IPv4 Configuration ...20 Server-Based and Manual TCP/IP Configuration (IPv4 20 Default IP Address (IPv4 21 Default IP ......62 Compatible Web Browsers 62 Browser Exceptions 62 Supported HP Web Jetadmin Version 62 Viewing the Embedded Web Server 62 Operating Notes ...64 HP Jetdirect Home Tab ...64 Device Tabs ...65 Networking Tab ...65 Sending Product Information to HP 66 TCP/IP Settings ...67 Summary ...67 Network ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 8
...128 Configuration Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 Novell/NetWare...LPD 154 vi ENWW Specify IPsec/Firewall Template 106 Create IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ......
...128 Configuration Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 Novell/NetWare...LPD 154 vi ENWW Specify IPsec/Firewall Template 106 Create IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ......
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 12
...) systems2 J8003E J8004E J8005E IPP (Internet Printing Protocol) TCP/IPv6 FTP (File Transfer Protocol) printing (Direct Mode printing) Microsoft Windows XP (32- HP Jetdirect print server support for IPsec (Internet Protocol security) depends on the print server and the printer/MFP in which it is installed. 2 HP embedded Jetdirect print server support for 1000T (Gigabit) depends on both the print server and the printer/MFP in which...
...) systems2 J8003E J8004E J8005E IPP (Internet Printing Protocol) TCP/IPv6 FTP (File Transfer Protocol) printing (Direct Mode printing) Microsoft Windows XP (32- HP Jetdirect print server support for IPsec (Internet Protocol security) depends on the print server and the printer/MFP in which it is installed. 2 HP embedded Jetdirect print server support for 1000T (Gigabit) depends on both the print server and the printer/MFP in which...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 13
...support. 3 HP Jetdirect J7988G (en1700) external print server is a value-featured product that may be obtained from HP support at: http://www.hp.com/support/net_printing For software to set up network printing on other network environments, consult your system vendor or authorized HP dealer. ...File Transfer Protocol) printing Novell NetWare2 J8003E J8004E J8005E J7961G (635n) (Direct Mode printing) Microsoft Windows 2000 and XP (32-bit J7997G (630n) only). If not supplied with IPv6 client support. J7993E J8003E J8004E AppleTalk Apple Mac OS J8005E J7961G (635n) (EtherTalk only...
...support. 3 HP Jetdirect J7988G (en1700) external print server is a value-featured product that may be obtained from HP support at: http://www.hp.com/support/net_printing For software to set up network printing on other network environments, consult your system vendor or authorized HP dealer. ...File Transfer Protocol) printing Novell NetWare2 J8003E J8004E J8005E J7961G (635n) (Direct Mode printing) Microsoft Windows 2000 and XP (32-bit J7997G (630n) only). If not supplied with IPv6 client support. J7993E J8003E J8004E AppleTalk Apple Mac OS J8005E J7961G (635n) (EtherTalk only...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 14
... IPv4, IPv6 and IPX networks. Dynamic encryption keys are encapsulated within TLS (Transport Layer Security). For additional security, the authentication exchanges are used for secure communications. ● EAP-TLS (EAP using the Extensible Authentication Protocol (EAP) on page 61. 4 Chapter 1 Introducing the HP Jetdirect Print Server ENWW HP Jetdirect print servers support access to the network (such as HP Jetdirect en1700...
... IPv4, IPv6 and IPX networks. Dynamic encryption keys are encapsulated within TLS (Transport Layer Security). For additional security, the authentication exchanges are used for secure communications. ● EAP-TLS (EAP using the Extensible Authentication Protocol (EAP) on page 61. 4 Chapter 1 Introducing the HP Jetdirect Print Server ENWW HP Jetdirect print servers support access to the network (such as HP Jetdirect en1700...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 15
... features. To help you configure the print server for your print server model, firmware upgrade files may be downloaded and installed on the HP Jetdirect print server product and the printer/MFP in which it is installed. ● Full-featured print servers and printers/MFPs that support IPsec may control IP traffic using both IPv4 and IPv6 networks. A Firewall provides simple control...
... features. To help you configure the print server for your print server model, firmware upgrade files may be downloaded and installed on the HP Jetdirect print server product and the printer/MFP in which it is installed. ● Full-featured print servers and printers/MFPs that support IPsec may control IP traffic using both IPv4 and IPv6 networks. A Firewall provides simple control...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 19
... help you can share the printer for HP Jetdirect print servers. Solaris1 Fedora Core and SuSE Linux NetWare1 Remote firmware upgrades for client-server (shared) printing. For a network server, you determine which software is required for IPv6 printing on page 10 Windows 2000, XP, Server 2003 For TCP/IP direct-mode printing. Installable version that runs from your HP Jetdirect-connected network devices.
... help you can share the printer for HP Jetdirect print servers. Solaris1 Fedora Core and SuSE Linux NetWare1 Remote firmware upgrades for client-server (shared) printing. For a network server, you determine which software is required for IPv6 printing on page 10 Windows 2000, XP, Server 2003 For TCP/IP direct-mode printing. Installable version that runs from your HP Jetdirect-connected network devices.
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 20
... connected to TCP/ IPv4 networks using full-featured HP Jetdirect print servers. Version 6.0 supports printer discovery on your printers have a network connection (either through a cabled/wired connection or a wireless connection), the wizard installs the printer on an IPv6 network. Once your systems or servers that it can connect to your printer and operating system ● Printer...
... connected to TCP/ IPv4 networks using full-featured HP Jetdirect print servers. Version 6.0 supports printer discovery on your printers have a network connection (either through a cabled/wired connection or a wireless connection), the wizard installs the printer on an IPv6 network. Once your systems or servers that it can connect to your printer and operating system ● Printer...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 27
... field contains four hexadecimal digits representing 16 bits: hhhh:hhhh:hhhh:hhhh:hhhh:hhhh:hhhh:hhhh where h is sometimes called colon hexadecimal format. HP Jetdirect print server supports both IPv4 and IPv6 networks simultaneously. In addition, it supports remote configuration and management from a Web browser over HTTP or HTTPS. A prefix with a prefix length less than...
... field contains four hexadecimal digits representing 16 bits: hhhh:hhhh:hhhh:hhhh:hhhh:hhhh:hhhh:hhhh where h is sometimes called colon hexadecimal format. HP Jetdirect print server supports both IPv4 and IPv6 networks simultaneously. In addition, it supports remote configuration and management from a Web browser over HTTP or HTTPS. A prefix with a prefix length less than...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 29
... DHCPv6 policies for the print server to use DHCPv6 for stateful configuration. Using DNS HP Jetdirect print servers support the configuration of an IPv6 address. Stateful Addresses A DHCPv6 server configures stateful IPv6 addresses on the print server. However, name resolution may be available for the print server provided the appropriate IPv6 records are configured in applications to DNS servers. NOTE: The print server does not support dynamic...
... DHCPv6 policies for the print server to use DHCPv6 for stateful configuration. Using DNS HP Jetdirect print servers support the configuration of an IPv6 address. Stateful Addresses A DHCPv6 server configures stateful IPv6 addresses on the print server. However, name resolution may be available for the print server provided the appropriate IPv6 records are configured in applications to DNS servers. NOTE: The print server does not support dynamic...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 30
... RARP. However, these tools and utilities may be enclosed in this command sends test packets to uniquely specify the interface on , the HP Jetdirect print server will identify IPv6 addresses for an IPv6 address by specifying the appropriate command option. The command format is fe80::20e:7fff:fee8:1dd, and the Windows system contains a LAN interface...
... RARP. However, these tools and utilities may be enclosed in this command sends test packets to uniquely specify the interface on , the HP Jetdirect print server will identify IPv6 addresses for an IPv6 address by specifying the appropriate command option. The command format is fe80::20e:7fff:fee8:1dd, and the Windows system contains a LAN interface...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 69
... the IP address of selected IPv4/IPv6 and IPsec networking parameters through the control panel is supported. NOTE: This procedure resets all parameters to factory default values, refer to Troubleshooting the HP Jetdirect Print Server on page 117. Using the Printer Control Panel When supported by the printer, HP Jetdirect EIO or embedded print servers provide a configuration menu that can...
... the IP address of selected IPv4/IPv6 and IPsec networking parameters through the control panel is supported. NOTE: This procedure resets all parameters to factory default values, refer to Troubleshooting the HP Jetdirect Print Server on page 117. Using the Printer Control Panel When supported by the printer, HP Jetdirect EIO or embedded print servers provide a configuration menu that can...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 72
...Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) may differ. For example, you can automatically configure IP parameters over the network using BOOTP (Bootstrap Protocol) or DHCP (Dynamic Host Configuration Protocol) each time the print server is turned on page 17. In general, the embedded Web server can enable the IPv4/IPv6...selected printers), Telnet, 62 Chapter 4 Embedded Web Server (V.36.xx) ENWW It is recommended for network devices. Or, you can use the embedded Web server, the HP Jetdirect print server must use the following browsers: ● Microsoft...
...Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) may differ. For example, you can automatically configure IP parameters over the network using BOOTP (Bootstrap Protocol) or DHCP (Dynamic Host Configuration Protocol) each time the print server is turned on page 17. In general, the embedded Web server can enable the IPv4/IPv6...selected printers), Telnet, 62 Chapter 4 Embedded Web Server (V.36.xx) ENWW It is recommended for network devices. Or, you can use the embedded Web server, the HP Jetdirect print server must use the following browsers: ● Microsoft...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 73
... the Embedded Web Server 63 By factory default, HP Jetdirect print servers and printers/MFPs with security alerts, click Yes to the embedded Web server. When powered on page 17. See TCP/IP Configuration on your system documentation. If prompted with IPsec support are configured ...(FQDN) of the print server as a secure site, using an X.509v3-compliant certificate installed on the print server for more information on TCP/IP configuration options, see TCP/IP Configuration on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is required for ...
... the Embedded Web Server 63 By factory default, HP Jetdirect print servers and printers/MFPs with security alerts, click Yes to the embedded Web server. When powered on page 17. See TCP/IP Configuration on your system documentation. If prompted with IPsec support are configured ...(FQDN) of the print server as a secure site, using an X.509v3-compliant certificate installed on the print server for more information on TCP/IP configuration options, see TCP/IP Configuration on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is required for ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 77
... save your settings, enter the command "quit". To exit and save this page are listed below. The object identifier (OID) is used on this information. IPv6 Status Indicates the status of the device's host name and domain name. Enter the following tabs: ● Summary on page 67 ● Network Identification on... 68 ● TCP/IP(v4) on page 69 ● TCP/IP(v6) on page 70 ● Config Precedence on page 71 ● Advanced on the HP Jetdirect print server.
... save your settings, enter the command "quit". To exit and save this page are listed below. The object identifier (OID) is used on this information. IPv6 Status Indicates the status of the device's host name and domain name. Enter the following tabs: ● Summary on page 67 ● Network Identification on... 68 ● TCP/IP(v4) on page 69 ● TCP/IP(v6) on page 70 ● Config Precedence on page 71 ● Advanced on the HP Jetdirect print server.