Security Features
Page 3
... - Netgard overview ...64 Introduction ...64 3 Large Format scanners: security features summary 52 6. JetAdvantage Security Manager...60 Policy compatibility features (HP DesignJet T1700/Z6/Z9+ Printer Series 60 Appendix 3 - Security Manager ...62 Appendix 4 - Security concepts explanation...5 2.1 Device security...5 UEFI secure boot...5 Firmware protection ...5... ...23 Secure File Erase (SFE) ...23 Secure Disk Erase (SDE)...24 Scan to network (HP DesignJet T2500, T2530, T3500 eMFP Series 26 Scan to FTP folder ...33 Exclude personal info from DOS command ...39 How to use FTP...
... - Netgard overview ...64 Introduction ...64 3 Large Format scanners: security features summary 52 6. JetAdvantage Security Manager...60 Policy compatibility features (HP DesignJet T1700/Z6/Z9+ Printer Series 60 Appendix 3 - Security Manager ...62 Appendix 4 - Security concepts explanation...5 2.1 Device security...5 UEFI secure boot...5 Firmware protection ...5... ...23 Secure File Erase (SFE) ...23 Secure Disk Erase (SDE)...24 Scan to network (HP DesignJet T2500, T2530, T3500 eMFP Series 26 Scan to FTP folder ...33 Exclude personal info from DOS command ...39 How to use FTP...
Security Features
Page 5
...recommendation is compliant with the UEFI specification. Please make the HP DesignJet and PageWide XL printer series particularly well suited for deployment in environments where network, data, and access control security are digitally signed by HP. The printer is not listed in the root folder. • Sending... the firmware file through EWS. • Sending the firmware file through the port 9100, as of the HP DesignJet and PageWide XL printer series and how they are not implemented. 2. The installation should always be updated in various ways, although not all them are...
...recommendation is compliant with the UEFI specification. Please make the HP DesignJet and PageWide XL printer series particularly well suited for deployment in environments where network, data, and access control security are digitally signed by HP. The printer is not listed in the root folder. • Sending... the firmware file through EWS. • Sending the firmware file through the port 9100, as of the HP DesignJet and PageWide XL printer series and how they are not implemented. 2. The installation should always be updated in various ways, although not all them are...
Security Features
Page 8
... HP Jetdirect 640n is a print networking device that can install a Jetdirect card to add extra security features, in this case, you can be disabled to restrict access to disable the onboard Ethernet. HP DesignJet Printers Security Settings Disable connectivity interfaces Depending on the printer series,... there are some products, you might want to the printer through these interfaces.
... HP Jetdirect 640n is a print networking device that can install a Jetdirect card to add extra security features, in this case, you can be disabled to restrict access to disable the onboard Ethernet. HP DesignJet Printers Security Settings Disable connectivity interfaces Depending on the printer series,... there are some products, you might want to the printer through these interfaces.
Security Features
Page 46
.../WJA EWS/WJA EWS/FP N/A FP FP FP N/A SMB 2/3 N/A Yes Yes (Only T2500) Yes (Only T2530) No No No EWS multilevel Printer access control Disable USB drive EWS EWS/FP/WJA EWS/FP/WJA N/A EWS/FP/WJA EWS/FP/WJA N/A EWS/FP/WJA EWS/FP/WJA EWS.../WJA EWS EWS Yes N/A N/A N/A N/A N/A Only SNMPv1 EWS N/A N/A EWS/FP EWS/FP EWS/FP N/A Yes Yes Yes Yes Device security - HP DesignJet Printer Series Security Settings TECHNICAL PRINTERS Model T7X00 T3500 T2500/T1500/T920 T2530/T1530/T9 T2300/T1300 30 T790/T795 T120/T520 SNMP configurability EWS EWS/FP/WJA EWS/FP...
.../WJA EWS/WJA EWS/FP N/A FP FP FP N/A SMB 2/3 N/A Yes Yes (Only T2500) Yes (Only T2530) No No No EWS multilevel Printer access control Disable USB drive EWS EWS/FP/WJA EWS/FP/WJA N/A EWS/FP/WJA EWS/FP/WJA N/A EWS/FP/WJA EWS/FP/WJA EWS.../WJA EWS EWS Yes N/A N/A N/A N/A N/A Only SNMPv1 EWS N/A N/A EWS/FP EWS/FP EWS/FP N/A Yes Yes Yes Yes Device security - HP DesignJet Printer Series Security Settings TECHNICAL PRINTERS Model T7X00 T3500 T2500/T1500/T920 T2530/T1530/T9 T2300/T1300 30 T790/T795 T120/T520 SNMP configurability EWS EWS/FP/WJA EWS/FP...
Security Features
Page 47
... N/A N/A Yes Yes EWS EWS EWS/WJA Yes EWS/WJA EWS EWS V2 (only T830) V2 N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A Yes N/A N/A Yes Yes EWS/FP/WJA EWS/FP/WJA 47 HP DesignJet Printer Series Security Settings Model T7X00 T3500 T2500/T1500/T920 T2530/T1530/T9 T2300/T1300 30 T790/T795 Wizard setup configuration CA/JD Certificates N/A EWS/WJA EWS...
... N/A N/A Yes Yes EWS EWS EWS/WJA Yes EWS/WJA EWS EWS V2 (only T830) V2 N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A Yes N/A N/A Yes Yes EWS/FP/WJA EWS/FP/WJA 47 HP DesignJet Printer Series Security Settings Model T7X00 T3500 T2500/T1500/T920 T2530/T1530/T9 T2300/T1300 30 T790/T795 Wizard setup configuration CA/JD Certificates N/A EWS/WJA EWS...
Security Features
Page 48
... EWS EWS EWS/FP/WJA EWS/FP/WJA EWS/FP/WJA EWS/FP EWS/FP EWS/FP EWS/FP EWS/FP FP FP Document security - HP DesignJet Printer Series Model Exclude personal info. PIN printing Yes No Yes No No T120/T520 N/A EWS/FP EWS/FP No Security Settings T730/T830 T830 24 inch...
... EWS EWS EWS/FP/WJA EWS/FP/WJA EWS/FP/WJA EWS/FP EWS/FP EWS/FP EWS/FP EWS/FP FP FP Document security - HP DesignJet Printer Series Model Exclude personal info. PIN printing Yes No Yes No No T120/T520 N/A EWS/FP EWS/FP No Security Settings T730/T830 T830 24 inch...
Security Features
Page 49
... HD ver N/A N/A N/A (from F/W 6.0.0.6) Removable HDD N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A Self-Encrypted hard disk N/A N/A N/A N/A N/A N/A N/A N/A 49 HP DesignJet Printer Series Security Settings OLDER TECHNICAL AND GRAPHIC PRINTERS Model SNMPv3 UEFI Secure Boot Whitelisting Disable Firmware update through USB Automatic Firmware Upgrade (AFU) Disable protocols Disable interfaces Control panel lock EWS multilevel Printer access control Disable USB drive Wizard setup configuration CA/JD...
... HD ver N/A N/A N/A (from F/W 6.0.0.6) Removable HDD N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A Self-Encrypted hard disk N/A N/A N/A N/A N/A N/A N/A N/A 49 HP DesignJet Printer Series Security Settings OLDER TECHNICAL AND GRAPHIC PRINTERS Model SNMPv3 UEFI Secure Boot Whitelisting Disable Firmware update through USB Automatic Firmware Upgrade (AFU) Disable protocols Disable interfaces Control panel lock EWS multilevel Printer access control Disable USB drive Wizard setup configuration CA/JD...
Security Features
Page 50
HP DesignJet Printer Series Security Settings Model Secure file erase Secure disk erase T1200 WJA WJA/FP Exclude personal info. Device configuration protection Disable protocols EWS/WJA Disable ... Whitelisting Disable firmware (F/W) update through USB Automatic Firmware Upgrade (AFU) No FP/EWS/WJA Yes Device security - PIN printing N/A N/A N/A N/A N/A N/A T620 N/A WJA/FP N/A N/A N/A N/A PAGEWIDE XL PRINTERS Model HP PageWide XL 8000/5000/4600/4500/4100/4000/3900 Printer Device security- EWS from Front Panel (FP) No SMB2/3 Yes EWS multilevel Yes (one level...
HP DesignJet Printer Series Security Settings Model Secure file erase Secure disk erase T1200 WJA WJA/FP Exclude personal info. Device configuration protection Disable protocols EWS/WJA Disable ... Whitelisting Disable firmware (F/W) update through USB Automatic Firmware Upgrade (AFU) No FP/EWS/WJA Yes Device security - PIN printing N/A N/A N/A N/A N/A N/A T620 N/A WJA/FP N/A N/A N/A N/A PAGEWIDE XL PRINTERS Model HP PageWide XL 8000/5000/4600/4500/4100/4000/3900 Printer Device security- EWS from Front Panel (FP) No SMB2/3 Yes EWS multilevel Yes (one level...
Security Features
Page 51
...EWS/WJA EWS/WJA EWS/WJA Disable internet connection No No No Exclude personal info. HP DesignJet Printer Series Model HP PageWide XL 8000/5000/4600/4500/4100/4000/3900 Printer Job Storage Mode and PIN printing Yes Wizard setup configuration Yes CA/JD Certificates EWS/WJA... PIN printing Job Storage Mode and PIN printing Yes Security Settings Model HP PageWide XL 8000/5000/4500/4000 Printer HP PageWide XL 5000/4500/4000 Multifunction Printer HP PageWide XL 4500 Printer and Multifunction Printer TAA Compliant (US Only) Data security - from accounting Disable ePrint Center...
...EWS/WJA EWS/WJA EWS/WJA Disable internet connection No No No Exclude personal info. HP DesignJet Printer Series Model HP PageWide XL 8000/5000/4600/4500/4100/4000/3900 Printer Job Storage Mode and PIN printing Yes Wizard setup configuration Yes CA/JD Certificates EWS/WJA... PIN printing Job Storage Mode and PIN printing Yes Security Settings Model HP PageWide XL 8000/5000/4500/4000 Printer HP PageWide XL 5000/4500/4000 Multifunction Printer HP PageWide XL 4500 Printer and Multifunction Printer TAA Compliant (US Only) Data security - from accounting Disable ePrint Center...
Security Features
Page 52
...V1 V2 V2 V2 V2 52 Model DJ 4500 MFP/T1100 MFP, HD-MFP Series DJ 4520 Scanner DJ 4500 Scanner DJ HD Scanner HP DesignJet HD/SD Pro Scanner HP HD/SD Pro Scanner PageWide XL MFP series T1120 SD-MFP T2300 MFP T2500 MFP T2530 MFP T3500 MFP T830 MFP Firewall...Access to the table below. Read only) (FTP & EWS - Large Format scanners: security features summary Multi-function printers (MFPs) consist of two main parts: the printer and the scanner. HP DesignJet Printer Series Security Settings 5. For the scanner, refer to Yes, by default (FTP & Yes, by default N/A images in ...
...V1 V2 V2 V2 V2 52 Model DJ 4500 MFP/T1100 MFP, HD-MFP Series DJ 4520 Scanner DJ 4500 Scanner DJ HD Scanner HP DesignJet HD/SD Pro Scanner HP HD/SD Pro Scanner PageWide XL MFP series T1120 SD-MFP T2300 MFP T2500 MFP T2530 MFP T3500 MFP T830 MFP Firewall...Access to the table below. Read only) (FTP & EWS - Large Format scanners: security features summary Multi-function printers (MFPs) consist of two main parts: the printer and the scanner. HP DesignJet Printer Series Security Settings 5. For the scanner, refer to Yes, by default (FTP & Yes, by default N/A images in ...
Security Features
Page 53
...EWS] > Network > TCP/IP Settings > Network Identification [EWS] > Network > TCP/IP Settings > TCP/IP(v4) DesignJet & PageWide XL SFP Yes No Yes Yes Yes Yes Yes Yes DesignJet & PageWide XL MFP Yes Yes Yes Yes Yes Yes Yes Yes 53 Configuration [EWS] > Network > Other Settings > ... used in HP printers Security Settings Below you can be selected instead. Note: Ports may change as HP products develop and evolve; Rarely used to check the current configuration. This port can find a list with the ports used by HP printers. HP DesignJet Printer Series 6. Newer HP Printers and Multi-...
...EWS] > Network > TCP/IP Settings > Network Identification [EWS] > Network > TCP/IP Settings > TCP/IP(v4) DesignJet & PageWide XL SFP Yes No Yes Yes Yes Yes Yes Yes DesignJet & PageWide XL MFP Yes Yes Yes Yes Yes Yes Yes Yes 53 Configuration [EWS] > Network > Other Settings > ... used in HP printers Security Settings Below you can be selected instead. Note: Ports may change as HP products develop and evolve; Rarely used to check the current configuration. This port can find a list with the ports used by HP printers. HP DesignJet Printer Series 6. Newer HP Printers and Multi-...
Security Features
Page 54
... to network folder (to capture traps. If disabled, MFPs will not be accessed by HP Large Format devices for configuration and upgrading of a printer. Protocols > SNMP 54 HP DesignJet Printer Series Protocol/Function Port TFTP (Trivial File Transfer Protocol) configuration file HP Jetdirect XML services UDP 69 TCP 80, 8080 AFU, Connectivity Test TCP 80 Kerberos TCP...
... to network folder (to capture traps. If disabled, MFPs will not be accessed by HP Large Format devices for configuration and upgrading of a printer. Protocols > SNMP 54 HP DesignJet Printer Series Protocol/Function Port TFTP (Trivial File Transfer Protocol) configuration file HP Jetdirect XML services UDP 69 TCP 80, 8080 AFU, Connectivity Test TCP 80 Kerberos TCP...
Security Features
Page 55
... references may also require downloading the print job using HTTPS. Host and Port can be configured. This protocol is only available with the Jetdirect accessory. HP DesignJet Printer Series Protocol/Function Port LDAP TCP 389 SLP (Service Location Protocol) UDP 427 EWS, Web Services (Fibonacci, RIO, ePrint) TCP 443 Syslog LPD (Line...
... references may also require downloading the print job using HTTPS. Host and Port can be configured. This protocol is only available with the Jetdirect accessory. HP DesignJet Printer Series Protocol/Function Port LDAP TCP 389 SLP (Service Location Protocol) UDP 427 EWS, Web Services (Fibonacci, RIO, ePrint) TCP 443 Syslog LPD (Line...
Security Features
Page 56
... lookups and authentication. Allows Large Format devices to retrieve device status information and manage the device. Protocols Multicast discovery protocol to print. HP DesignJet Printer Series Protocol/Function Port LDAP over TLS client. If disabled, the HP WJA fleet management tool might not work , and Windows will not work . [Control Panel] > Connectivity > Services > Settings > Services...
... lookups and authentication. Allows Large Format devices to retrieve device status information and manage the device. Protocols Multicast discovery protocol to print. HP DesignJet Printer Series Protocol/Function Port LDAP over TLS client. If disabled, the HP WJA fleet management tool might not work , and Windows will not work . [Control Panel] > Connectivity > Services > Settings > Services...
Security Features
Page 57
HP DesignJet Printer Series Security Settings Protocol/Function Port In/ Out Purpose and consequences of...In Alternative printing port for HP driver and HP SDK. If [EWS] > Network > Other disabled, it Configuration DesignJet & DesignJet & PageWide XL PageWide XL SFP MFP SDK (Paper TCP 8085 In Some HP software utilities and HP SDK for RIPs may [...] > Network > Other Settings > Enable High Speed Mode PageWide XL PageWide XL only only In Alternative printing port for HP Smart Stream. [EWS] > Network > Other Settings > 9100 Printing [EWS] > Network > Other Settings > Enable ...
HP DesignJet Printer Series Security Settings Protocol/Function Port In/ Out Purpose and consequences of...In Alternative printing port for HP driver and HP SDK. If [EWS] > Network > Other disabled, it Configuration DesignJet & DesignJet & PageWide XL PageWide XL SFP MFP SDK (Paper TCP 8085 In Some HP software utilities and HP SDK for RIPs may [...] > Network > Other Settings > Enable High Speed Mode PageWide XL PageWide XL only only In Alternative printing port for HP Smart Stream. [EWS] > Network > Other Settings > 9100 Printing [EWS] > Network > Other Settings > Enable ...
Security Features
Page 58
...; Control panel access lock. • Setup Admin password. • USB drive control. (Enable or disable the use of devices. Web Jetadmin HP Web Jetadmin is periodically updated. HP DesignJet Printer Series Security Settings Appendix 1 - HP Web Jetadmin can be downloaded at the following operations (assuming they are supported on a fleet of the USB to Web Jetadmin...
...; Control panel access lock. • Setup Admin password. • USB drive control. (Enable or disable the use of devices. Web Jetadmin HP Web Jetadmin is periodically updated. HP DesignJet Printer Series Security Settings Appendix 1 - HP Web Jetadmin can be downloaded at the following operations (assuming they are supported on a fleet of the USB to Web Jetadmin...
Security Features
Page 59
... TCP\IP Domain Suffix Upload CA Certificate Upload JetDirect Certificate Proxy Server MC DJA 2.0 - HP DesignJet Printer Series MC DJA 1.0 Device identification System Contact System Location Asset Number Company Name Contact Person Device Name Device settings Control Panel Language Printer Wakeup Sleep Delay Time Security settings Color Copy Option Control Panel Access EWS Password Enable...
... TCP\IP Domain Suffix Upload CA Certificate Upload JetDirect Certificate Proxy Server MC DJA 2.0 - HP DesignJet Printer Series MC DJA 1.0 Device identification System Contact System Location Asset Number Company Name Contact Person Device Name Device settings Control Panel Language Printer Wakeup Sleep Delay Time Security settings Color Copy Option Control Panel Access EWS Password Enable...
Security Features
Page 60
Policy compatibility features (HP DesignJet T1700/Z6/Z9+ Printer Series) Authentication Authentication Services 802.1x Authentication 802.1x EAP-TLS Certificate Management Identity Certificate CA Certificate Credentials Admin (EWS... Host USB Plug and Play Logging System Logging Stored Data Y Y Y Y N Y N N Read only enabled Y Y Y Y Y N N Y Y Y N N Y Y N N Y 60 HP JetAdvantage Security Manager can generate security reports to use the tool and supported features. HP DesignJet Printer Series Security Settings Appendix 2 - This tool can be downloaded at the following link: http://www8...
Policy compatibility features (HP DesignJet T1700/Z6/Z9+ Printer Series) Authentication Authentication Services 802.1x Authentication 802.1x EAP-TLS Certificate Management Identity Certificate CA Certificate Credentials Admin (EWS... Host USB Plug and Play Logging System Logging Stored Data Y Y Y Y N Y N N Read only enabled Y Y Y Y Y N N Y Y Y N N Y Y N N Y 60 HP JetAdvantage Security Manager can generate security reports to use the tool and supported features. HP DesignJet Printer Series Security Settings Appendix 2 - This tool can be downloaded at the following link: http://www8...
Security Features
Page 61
... AppleTalk DLC/LLC Novell (IPX/SPX) Security Settings Y Y Y Y Y Y Y N N N N N Y Y N Y N Y Y Y Y Y Y Y Y Y Y N Y Y Y Y Y Y Y Y N N N 61 HP DesignJet Printer Series File Erase Mode Device Discovery Service Location Protocol (SLP) IPv4 Multicast LLMNR WS-Discovery Bonjour Network Security Internet Protocol Security (IPsec)/Firewall FIPS 140 Compliance... Allow Web Access Access control List Network Services Novell Remote Config (RCFG) Telnet TFTP Configuration File HP Jetdirect XML Services Certificate Management Service FTP Firmware Update Web Require HTTPS redirect HTTPS Web Encryption Settings...
... AppleTalk DLC/LLC Novell (IPX/SPX) Security Settings Y Y Y Y Y Y Y N N N N N Y Y N Y N Y Y Y Y Y Y Y Y Y Y N Y Y Y Y Y Y Y Y N N N 61 HP DesignJet Printer Series File Erase Mode Device Discovery Service Location Protocol (SLP) IPv4 Multicast LLMNR WS-Discovery Bonjour Network Security Internet Protocol Security (IPsec)/Firewall FIPS 140 Compliance... Allow Web Access Access control List Network Services Novell Remote Config (RCFG) Telnet TFTP Configuration File HP Jetdirect XML Services Certificate Management Service FTP Firmware Update Web Require HTTPS redirect HTTPS Web Encryption Settings...
Security Features
Page 62
... their needs. HP ProtectTools Security Manager is based on select notebook families provides simple deployment and management of authentications, such as TPM encrypted passwords, fingerprint ID, biometrics and USB Tokens. • Console design can grow to choose the level of Business Notebooks and select Business Desktops and Workstations. HP DesignJet Printer Series Security Settings Appendix...
... their needs. HP ProtectTools Security Manager is based on select notebook families provides simple deployment and management of authentications, such as TPM encrypted passwords, fingerprint ID, biometrics and USB Tokens. • Console design can grow to choose the level of Business Notebooks and select Business Desktops and Workstations. HP DesignJet Printer Series Security Settings Appendix...