Security Features
Page 3
... storage and PIN printing...36 ePrint center connection ...36 3. Web Jetadmin ...58 Manageability contract for Large Format Printers ...58 MC DJA 1.0...59 MC DJA 2.0 - JetAdvantage Security Manager...60 Policy compatibility features (HP DesignJet T1700/Z6/Z9+ Printer Series 60 Appendix 3 - Netgard overview ...64 Introduction ...64 3 Ports used in storage...23 Self-encrypted hard disk ...23...
... storage and PIN printing...36 ePrint center connection ...36 3. Web Jetadmin ...58 Manageability contract for Large Format Printers ...58 MC DJA 1.0...59 MC DJA 2.0 - JetAdvantage Security Manager...60 Policy compatibility features (HP DesignJet T1700/Z6/Z9+ Printer Series 60 Appendix 3 - Netgard overview ...64 Introduction ...64 3 Ports used in storage...23 Self-encrypted hard disk ...23...
Security Features
Page 5
...firmware upgrades: 5 The security features described in this document, you the highest security and new features. Please make the HP DesignJet and PageWide XL printer series particularly well suited for deployment in all them blocked (Section 5, Ports used with the latest firmware, that provides you... to configure them and some recommended values (Section 2, Security concepts explanation). • Description of the HP DesignJet and PageWide XL printer series and how they are not implemented. 2. Despite the signature system, the recommendation is compliant with the ...
...firmware upgrades: 5 The security features described in this document, you the highest security and new features. Please make the HP DesignJet and PageWide XL printer series particularly well suited for deployment in all them blocked (Section 5, Ports used with the latest firmware, that provides you... to configure them and some recommended values (Section 2, Security concepts explanation). • Description of the HP DesignJet and PageWide XL printer series and how they are not implemented. 2. Despite the signature system, the recommendation is compliant with the ...
Security Features
Page 8
HP DesignJet Printers Security Settings Disable connectivity interfaces Depending on the printer series, there are some products, you can be disabled to restrict access to disable the onboard Ethernet. In some USB network interfaces that offers ...and enterprise-class security features. Ideal for enterprise and workgroup SMBs requiring full-featured, secure, and backward-compatible print management of printers and MFPs over shared, wired networks. 8 The HP Jetdirect 640n is a print networking device that can install a Jetdirect card to add extra security features, in this case, you...
HP DesignJet Printers Security Settings Disable connectivity interfaces Depending on the printer series, there are some products, you can be disabled to restrict access to disable the onboard Ethernet. In some USB network interfaces that offers ...and enterprise-class security features. Ideal for enterprise and workgroup SMBs requiring full-featured, secure, and backward-compatible print management of printers and MFPs over shared, wired networks. 8 The HP Jetdirect 640n is a print networking device that can install a Jetdirect card to add extra security features, in this case, you...
Security Features
Page 46
... EWS/WJA EWS/FP N/A FP FP FP N/A SMB 2/3 N/A Yes Yes (Only T2500) Yes (Only T2530) No No No EWS multilevel Printer access control Disable USB drive EWS EWS/FP/WJA EWS/FP/WJA N/A EWS/FP/WJA EWS/FP/WJA N/A EWS/FP/WJA EWS/FP/WJA EWS... N/A N/A N/A N/A N/A Only SNMPv1 EWS N/A N/A EWS/FP EWS/FP EWS/FP N/A Yes Yes Yes Yes Device security - HP DesignJet Printer Series Security Settings TECHNICAL PRINTERS Model T7X00 T3500 T2500/T1500/T920 T2530/T1530/T9 T2300/T1300 30 T790/T795 T120/T520 SNMP configurability EWS EWS/FP/WJA EWS/FP/WJA UEFI Secure Boot...
... EWS/WJA EWS/FP N/A FP FP FP N/A SMB 2/3 N/A Yes Yes (Only T2500) Yes (Only T2530) No No No EWS multilevel Printer access control Disable USB drive EWS EWS/FP/WJA EWS/FP/WJA N/A EWS/FP/WJA EWS/FP/WJA N/A EWS/FP/WJA EWS/FP/WJA EWS... N/A N/A N/A N/A N/A Only SNMPv1 EWS N/A N/A EWS/FP EWS/FP EWS/FP N/A Yes Yes Yes Yes Device security - HP DesignJet Printer Series Security Settings TECHNICAL PRINTERS Model T7X00 T3500 T2500/T1500/T920 T2530/T1530/T9 T2300/T1300 30 T790/T795 T120/T520 SNMP configurability EWS EWS/FP/WJA EWS/FP/WJA UEFI Secure Boot...
Security Features
Page 47
... 47 Authentications Yes Yes (Only with Yes (Only with JD640) Yes Yes EWS N/A N/A EWS/WJA EWS/WJA EWS Data security - HP DesignJet Printer Series Security Settings Model T7X00 T3500 T2500/T1500/T920 T2530/T1530/T9 T2300/T1300 30 T790/T795 Wizard setup configuration CA/JD Certificates N/A EWS/WJA EWS EWS/WJA EWS EWS/WJA IPSec...
... 47 Authentications Yes Yes (Only with Yes (Only with JD640) Yes Yes EWS N/A N/A EWS/WJA EWS/WJA EWS Data security - HP DesignJet Printer Series Security Settings Model T7X00 T3500 T2500/T1500/T920 T2530/T1530/T9 T2300/T1300 30 T790/T795 Wizard setup configuration CA/JD Certificates N/A EWS/WJA EWS EWS/WJA EWS EWS/WJA IPSec...
Security Features
Page 48
... retention) T7X00 EWS N/A N/A No T3500 T2500/T1500/T920 T2530/T1530/T9 T2300/T1300 30 T790/T795 EWS/WJA EWS/WJA EWS/WJA EWS EWS EWS/FP/WJA EWS/FP/WJA EWS/FP/WJA EWS/FP EWS/FP EWS/FP EWS/FP EWS/FP FP FP Document security - HP DesignJet Printer Series Model Exclude personal info.
... retention) T7X00 EWS N/A N/A No T3500 T2500/T1500/T920 T2530/T1530/T9 T2300/T1300 30 T790/T795 EWS/WJA EWS/WJA EWS/WJA EWS EWS EWS/FP/WJA EWS/FP/WJA EWS/FP/WJA EWS/FP EWS/FP EWS/FP EWS/FP EWS/FP FP FP Document security - HP DesignJet Printer Series Model Exclude personal info.
Security Features
Page 49
HP DesignJet Printer Series Security Settings OLDER TECHNICAL AND GRAPHIC PRINTERS Model SNMPv3 UEFI Secure Boot Whitelisting Disable Firmware update through USB Automatic Firmware Upgrade (AFU) Disable protocols Disable interfaces Control panel lock EWS multilevel Printer access control Disable USB drive Wizard setup configuration CA/JD Certificates IPSec T1200 EWS N/A N/A N/A No EWS/WJA EWS EWS/WJA EWS...
HP DesignJet Printer Series Security Settings OLDER TECHNICAL AND GRAPHIC PRINTERS Model SNMPv3 UEFI Secure Boot Whitelisting Disable Firmware update through USB Automatic Firmware Upgrade (AFU) Disable protocols Disable interfaces Control panel lock EWS multilevel Printer access control Disable USB drive Wizard setup configuration CA/JD Certificates IPSec T1200 EWS N/A N/A N/A No EWS/WJA EWS EWS/WJA EWS...
Security Features
Page 50
... - PIN printing N/A N/A N/A N/A N/A N/A T620 N/A WJA/FP N/A N/A N/A N/A PAGEWIDE XL PRINTERS Model HP PageWide XL 8000/5000/4600/4500/4100/4000/3900 Printer Device security- EWS from Front Panel (FP) No SMB2/3 Yes EWS multilevel Yes (one level) Printer access control EWS Disable USB drive FP/EWS/WJA 50 HP DesignJet Printer Series Security Settings Model Secure file erase Secure disk...
... - PIN printing N/A N/A N/A N/A N/A N/A T620 N/A WJA/FP N/A N/A N/A N/A PAGEWIDE XL PRINTERS Model HP PageWide XL 8000/5000/4600/4500/4100/4000/3900 Printer Device security- EWS from Front Panel (FP) No SMB2/3 Yes EWS multilevel Yes (one level) Printer access control EWS Disable USB drive FP/EWS/WJA 50 HP DesignJet Printer Series Security Settings Model Secure file erase Secure disk...
Security Features
Page 51
HP DesignJet Printer Series Model HP PageWide XL 8000/5000/4600/4500/4100/4000/3900 Printer Job Storage Mode and PIN printing Yes Wizard setup configuration Yes CA/JD Certificates EWS/WJA Data security - Protected data in storage ... V2 Document security - PIN printing Job Storage Mode and PIN printing Yes Security Settings Model HP PageWide XL 8000/5000/4500/4000 Printer HP PageWide XL 5000/4500/4000 Multifunction Printer HP PageWide XL 4500 Printer and Multifunction Printer TAA Compliant (US Only) Data security - from accounting Disable ePrint Center connectivity Yes FP/...
HP DesignJet Printer Series Model HP PageWide XL 8000/5000/4600/4500/4100/4000/3900 Printer Job Storage Mode and PIN printing Yes Wizard setup configuration Yes CA/JD Certificates EWS/WJA Data security - Protected data in storage ... V2 Document security - PIN printing Job Storage Mode and PIN printing Yes Security Settings Model HP PageWide XL 8000/5000/4500/4000 Printer HP PageWide XL 5000/4500/4000 Multifunction Printer HP PageWide XL 4500 Printer and Multifunction Printer TAA Compliant (US Only) Data security - from accounting Disable ePrint Center connectivity Yes FP/...
Security Features
Page 52
... Yes Yes Yes Yes Yes Disable FTP & Yes Web Access Yes Yes Access to the table below. HP DesignJet Printer Series Security Settings 5. Large Format scanners: security features summary Multi-function printers (MFPs) consist of two main parts: the printer and the scanner. For the scanner, refer to Yes, by default (FTP & Yes, by default N/A images...
... Yes Yes Yes Yes Yes Disable FTP & Yes Web Access Yes Yes Access to the table below. HP DesignJet Printer Series Security Settings 5. Large Format scanners: security features summary Multi-function printers (MFPs) consist of two main parts: the printer and the scanner. For the scanner, refer to Yes, by default (FTP & Yes, by default N/A images...
Security Features
Page 53
... network when DNS name resolving is no impact for OS X. Rarely used to set up ports/services mapping/forwarding. DHCPv4 and BOOTP. HP DesignJet Printer Series 6. The device will become impossible to check the current configuration. DNS. Configuration [EWS] > Network > Other Settings > FTP Printing ...Out In Out In/Out In Out In/Out Purpose and consequences of sending e-mail alerts directly from the device. Ports used in HP printers Security Settings Below you can be used . Resolving device name. Scan to network [EWS] > Network > Other Settings > Telnet Config...
... network when DNS name resolving is no impact for OS X. Rarely used to set up ports/services mapping/forwarding. DHCPv4 and BOOTP. HP DesignJet Printer Series 6. The device will become impossible to check the current configuration. DNS. Configuration [EWS] > Network > Other Settings > FTP Printing ...Out In Out In/Out In Out In/Out Purpose and consequences of sending e-mail alerts directly from the device. Ports used in HP printers Security Settings Below you can be used . Resolving device name. Scan to network [EWS] > Network > Other Settings > Telnet Config...
Security Features
Page 54
... Yes Mgmt. Many SNMP Management utilities can be configured to capture traps. This port can be used for Kerberos authentication. HP DesignJet Printer Series Protocol/Function Port TFTP (Trivial File Transfer Protocol) configuration file HP Jetdirect XML services UDP 69 TCP 80, 8080 AFU, Connectivity Test TCP 80 Kerberos TCP, UDP 88 NetBIOS, SMB (Scan...
... Yes Mgmt. Many SNMP Management utilities can be configured to capture traps. This port can be used for Kerberos authentication. HP DesignJet Printer Series Protocol/Function Port TFTP (Trivial File Transfer Protocol) configuration file HP Jetdirect XML services UDP 69 TCP 80, 8080 AFU, Connectivity Test TCP 80 Kerberos TCP, UDP 88 NetBIOS, SMB (Scan...
Security Features
Page 55
... never used from DMF - It can be configured. Host and Port can be possible to use the HP Connected service or to send usage data to the HP usage server (Fibonacci) or to several cloud services. HP DesignJet Printer Series Protocol/Function Port LDAP TCP 389 SLP (Service Location Protocol) UDP 427 EWS, Web Services (Fibonacci...
... never used from DMF - It can be configured. Host and Port can be possible to use the HP Connected service or to send usage data to the HP usage server (Fibonacci) or to several cloud services. HP DesignJet Printer Series Protocol/Function Port LDAP TCP 389 SLP (Service Location Protocol) UDP 427 EWS, Web Services (Fibonacci...
Security Features
Page 56
... protocol to locate services on OS X for IP address and name resolution. It will not work. HP Web Jetadmin software may perform web service requests to this port to perform address lookups and authentication. HP DesignJet Printer Series Protocol/Function Port LDAP over TLS client. Allows Large Format devices to retrieve device status information and...
... protocol to locate services on OS X for IP address and name resolution. It will not work. HP Web Jetadmin software may perform web service requests to this port to perform address lookups and authentication. HP DesignJet Printer Series Protocol/Function Port LDAP over TLS client. Allows Large Format devices to retrieve device status information and...
Security Features
Page 57
If disabled, it [EWS] > Network > Other will become impossible to print using port 9100. HP DesignJet Printer Series Security Settings Protocol/Function Port In/ Out Purpose and consequences of the main printing ports for Windows & Mac. This is one of... Mode PageWide XL PageWide XL only only 57 If [EWS] > Network > Other disabled, it Configuration DesignJet & DesignJet & PageWide XL PageWide XL SFP MFP SDK (Paper TCP 8085 In Some HP software utilities and HP SDK for RIPs may [Control Panel] > Settings> Yes Yes management) perform web service requests to this...
If disabled, it [EWS] > Network > Other will become impossible to print using port 9100. HP DesignJet Printer Series Security Settings Protocol/Function Port In/ Out Purpose and consequences of the main printing ports for Windows & Mac. This is one of... Mode PageWide XL PageWide XL only only 57 If [EWS] > Network > Other disabled, it Configuration DesignJet & DesignJet & PageWide XL PageWide XL SFP MFP SDK (Paper TCP 8085 In Some HP software utilities and HP SDK for RIPs may [Control Panel] > Settings> Yes Yes management) perform web service requests to this...
Security Features
Page 58
...to carry out the following link: http://www8.hp.com/us/en/solutions/business-solutions/printingsolutions/wja.html Manageability contract for additional functionalities. This means that is a printer management solution capable of performing different functions on ... and adds support for Large Format Printers Since the introduction of HP PageWide XL printers, the list of printers. This includes device configuration, alerts subscription, and printer status information. Web Jetadmin HP Web Jetadmin is periodically updated. HP DesignJet Printer Series Security Settings Appendix 1 -
...to carry out the following link: http://www8.hp.com/us/en/solutions/business-solutions/printingsolutions/wja.html Manageability contract for additional functionalities. This means that is a printer management solution capable of performing different functions on ... and adds support for Large Format Printers Since the introduction of HP PageWide XL printers, the list of printers. This includes device configuration, alerts subscription, and printer status information. Web Jetadmin HP Web Jetadmin is periodically updated. HP DesignJet Printer Series Security Settings Appendix 1 -
Security Features
Page 59
HP DesignJet Printer Series MC DJA 1.0 Device identification System Contact System Location Asset Number Company Name Contact Person Device Name Device settings Control Panel Language Printer Wakeup Sleep Delay Time Security settings Color Copy Option Control Panel Access EWS Password Enable Host USB...Name Network Enable Feature SNMP Trap Destination Table TCP Idle Timeout TCP/IP Configuration Method WINS Server DHCPv4FQDNCompliance Error Handling IPP Printer Install Wizard mDNS Service Name Locally Administered Address System Log Server Info Webservice Print TCP\IP Domain Suffix Upload CA ...
HP DesignJet Printer Series MC DJA 1.0 Device identification System Contact System Location Asset Number Company Name Contact Person Device Name Device settings Control Panel Language Printer Wakeup Sleep Delay Time Security settings Color Copy Option Control Panel Access EWS Password Enable Host USB...Name Network Enable Feature SNMP Trap Destination Table TCP Idle Timeout TCP/IP Configuration Method WINS Server DHCPv4FQDNCompliance Error Handling IPP Printer Install Wizard mDNS Service Name Locally Administered Address System Log Server Info Webservice Print TCP\IP Domain Suffix Upload CA ...
Security Features
Page 60
... for Latest Jetdirect Firmware External Connections Host USB Plug and Play Logging System Logging Stored Data Y Y Y Y N Y N N Read only enabled Y Y Y Y Y N N Y Y Y N N Y Y N N Y 60 Policy compatibility features (HP DesignJet T1700/Z6/Z9+ Printer Series) Authentication Authentication Services 802.1x Authentication 802.1x EAP-TLS Certificate Management Identity Certificate CA Certificate Credentials Admin (EWS) Password Minimum Password Length Admin...
... for Latest Jetdirect Firmware External Connections Host USB Plug and Play Logging System Logging Stored Data Y Y Y Y N Y N N Read only enabled Y Y Y Y Y N N Y Y Y N N Y Y N N Y 60 Policy compatibility features (HP DesignJet T1700/Z6/Z9+ Printer Series) Authentication Authentication Services 802.1x Authentication 802.1x EAP-TLS Certificate Management Identity Certificate CA Certificate Credentials Admin (EWS) Password Minimum Password Length Admin...
Security Features
Page 61
...) AppleTalk DLC/LLC Novell (IPX/SPX) Security Settings Y Y Y Y Y Y Y N N N N N Y Y N Y N Y Y Y Y Y Y Y Y Y Y N Y Y Y Y Y Y Y Y N N N 61 HP DesignJet Printer Series File Erase Mode Device Discovery Service Location Protocol (SLP) IPv4 Multicast LLMNR WS-Discovery Bonjour Network Security Internet Protocol Security (IPsec)/Firewall FIPS 140 Compliance... Allow Web Access Access control List Network Services Novell Remote Config (RCFG) Telnet TFTP Configuration File HP Jetdirect XML Services Certificate Management Service FTP Firmware Update Web Require HTTPS redirect HTTPS Web Encryption Settings ...
...) AppleTalk DLC/LLC Novell (IPX/SPX) Security Settings Y Y Y Y Y Y Y N N N N N Y Y N Y N Y Y Y Y Y Y Y Y Y Y N Y Y Y Y Y Y Y Y N N N 61 HP DesignJet Printer Series File Erase Mode Device Discovery Service Location Protocol (SLP) IPv4 Multicast LLMNR WS-Discovery Bonjour Network Security Internet Protocol Security (IPsec)/Firewall FIPS 140 Compliance... Allow Web Access Access control List Network Services Novell Remote Config (RCFG) Telnet TFTP Configuration File HP Jetdirect XML Services Certificate Management Service FTP Firmware Update Web Require HTTPS redirect HTTPS Web Encryption Settings ...
Security Features
Page 62
... select notebook families provides simple deployment and management of security that best meets their needs. HP DesignJet Printer Series Security Settings Appendix 3 - The optional integrated Smart Card Reader on open standards and HP intellectual property. Security Manager The HP ProtectTools Security Manager can be used for HP ProtectTools • BIOS configuration and security settings from within the...
... select notebook families provides simple deployment and management of security that best meets their needs. HP DesignJet Printer Series Security Settings Appendix 3 - The optional integrated Smart Card Reader on open standards and HP intellectual property. Security Manager The HP ProtectTools Security Manager can be used for HP ProtectTools • BIOS configuration and security settings from within the...