HP Designjet Printers - Security Features
Page 2
... and services are set forth in the express warranty statements accompanying such products and services. HP shall not be construed as allowed under the copyright laws. HP Designjet Printer Series © 2012 Hewlett-Packard Development Company, L.P. Reproduction, adaptation, or translation without notice. The information contained herein is subject to change without prior permission is prohibited...
... and services are set forth in the express warranty statements accompanying such products and services. HP shall not be construed as allowed under the copyright laws. HP Designjet Printer Series © 2012 Hewlett-Packard Development Company, L.P. Reproduction, adaptation, or translation without notice. The information contained herein is subject to change without prior permission is prohibited...
HP Designjet Printers - Security Features
Page 3
Security features available for Large Format scanners 6 3. Designjet Security features vs LaserJet 25 5. Security Concepts explanation 7 3.1 Secure File Erase ...7 3.2 Secure Disk Erase ...8 3.3 Control Panel Access Lock 11 3.3.1 Deadlock: Front ... 23 3.15 Disable direct print using ePrint&Share 23 3.16 Disable ePrint connectivity 23 3.17 Disable internet connection 23 3.18 Printer Access control 24 3.19 External hard disk (EHD 24 How the system works ...24 4. HP Designjet Printer Series Security Settings Table of Contents 1. Glossary ...26 3 Introduction & Overview 4 2.
Security features available for Large Format scanners 6 3. Designjet Security features vs LaserJet 25 5. Security Concepts explanation 7 3.1 Secure File Erase ...7 3.2 Secure Disk Erase ...8 3.3 Control Panel Access Lock 11 3.3.1 Deadlock: Front ... 23 3.15 Disable direct print using ePrint&Share 23 3.16 Disable ePrint connectivity 23 3.17 Disable internet connection 23 3.18 Printer Access control 24 3.19 External hard disk (EHD 24 How the system works ...24 4. HP Designjet Printer Series Security Settings Table of Contents 1. Glossary ...26 3 Introduction & Overview 4 2.
HP Designjet Printers - Security Features
Page 4
...deployed into environments where network, data, access control, and security are implemented using the Embedded Web Server and/or HP Web JetAdmin (WJA). HP Designjet Printer Series Security Settings 1. From accounting Disable interfaces Disable protocols EWS EWS EWS (1 level) EWS (1 level) EWS (1 level... all security features. The following is aimed at providing an overview of the security features supported by HP Designjet printers as of HP Designjet printers series and how they are important. Introduction & Overview This document is a table summarizing the new and existing security ...
...deployed into environments where network, data, access control, and security are implemented using the Embedded Web Server and/or HP Web JetAdmin (WJA). HP Designjet Printer Series Security Settings 1. From accounting Disable interfaces Disable protocols EWS EWS EWS (1 level) EWS (1 level) EWS (1 level... all security features. The following is aimed at providing an overview of the security features supported by HP Designjet printers as of HP Designjet printers series and how they are important. Introduction & Overview This document is a table summarizing the new and existing security ...
HP Designjet Printers - Security Features
Page 5
HP Designjet Printer Series Security Settings Secure file erase Secure disk erase Control panel lock EWS multilevel Exclude personal info... Jetdirect Jetdirect EWS/WJA + EWS/WJA EWS/WJA + Jetdirect + Jetdirect Jetdirect N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A Disable ePrint Center connectivity Disable internet connection Printer access control External HDD N/A N/A N/A Yes N/A N/A N/A N/A HD ver (from fw 6.0.0.6) N/A N/A No N/A N/A N/A No N/A N/A N/A No N/A N/A N/A No N/A N/A N/A No N/A N/A N/A No 5
HP Designjet Printer Series Security Settings Secure file erase Secure disk erase Control panel lock EWS multilevel Exclude personal info... Jetdirect Jetdirect EWS/WJA + EWS/WJA EWS/WJA + Jetdirect + Jetdirect Jetdirect N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A Disable ePrint Center connectivity Disable internet connection Printer access control External HDD N/A N/A N/A Yes N/A N/A N/A N/A HD ver (from fw 6.0.0.6) N/A N/A No N/A N/A N/A No N/A N/A N/A No N/A N/A N/A No N/A N/A N/A No N/A N/A N/A No 5
HP Designjet Printers - Security Features
Page 6
... table: Firewall Antivirus installation Disable FTP & WebAccess DJ 4500MFP/T1100MFP HD-MFP Series DJ4520 Scanner, DJ 4500 Scanner, HD Scanner T1120 SD-MFP T2300 emfp Yes Yes Yes Closed systems with very low risk of two main parts: The printer and the scanner. Security features available for the scanner please refer to... Microsoft Security patches Yes through scanner SW update Install scanner software into a Possible but not official process No separate PC Not needed (Linux based) No 6 HP Designjet Printer Series Security Settings 2.
... table: Firewall Antivirus installation Disable FTP & WebAccess DJ 4500MFP/T1100MFP HD-MFP Series DJ4520 Scanner, DJ 4500 Scanner, HD Scanner T1120 SD-MFP T2300 emfp Yes Yes Yes Closed systems with very low risk of two main parts: The printer and the scanner. Security features available for the scanner please refer to... Microsoft Security patches Yes through scanner SW update Install scanner software into a Possible but not official process No separate PC Not needed (Linux based) No 6 HP Designjet Printer Series Security Settings 2.
HP Designjet Printers - Security Features
Page 7
HP Designjet Printer Series Security Settings 3. Security Concepts explanation 3.1 Secure File Erase Secure File Erase is then overwritten. The Secure Sanitizing Erase mode of operation meets the US Department of Defense 5220-22.m requirements for clearing and sanitization of how to the printer's front panel, • Select the "setup" menu. &#...manages how files are erased and the disk space where the temporary job was stored is the default for the HP Designjet T1100 printer. 7 Temporary data remains on the Hard Disk Drive until the disk space it occupies is needed for a specific...
HP Designjet Printer Series Security Settings 3. Security Concepts explanation 3.1 Secure File Erase Secure File Erase is then overwritten. The Secure Sanitizing Erase mode of operation meets the US Department of Defense 5220-22.m requirements for clearing and sanitization of how to the printer's front panel, • Select the "setup" menu. &#...manages how files are erased and the disk space where the temporary job was stored is the default for the HP Designjet T1100 printer. 7 Temporary data remains on the Hard Disk Drive until the disk space it occupies is needed for a specific...
HP Designjet Printers - Security Features
Page 8
...data in the Web JetAdmin device plug-ins for LaserJet printers, this option is called "Secure Storage Erase". 8 This is the same functionality that manages the Secure File Erase and Secure Disk Erase functionality is the HP Web JetAdmin. All disk erasing will be moved out ...in a secure manner, so the device can set the same global options across your fleet of HP LaserJet's and HP Designjets. The following example shows how to sanitize the whole disk. HP Designjet Printer Series Security Settings 3.2 Secure Disk Erase In either of the two secure methods described above, (Secure Fast...
...data in the Web JetAdmin device plug-ins for LaserJet printers, this option is called "Secure Storage Erase". 8 This is the same functionality that manages the Secure File Erase and Secure Disk Erase functionality is the HP Web JetAdmin. All disk erasing will be moved out ...in a secure manner, so the device can set the same global options across your fleet of HP LaserJet's and HP Designjets. The following example shows how to sanitize the whole disk. HP Designjet Printer Series Security Settings 3.2 Secure Disk Erase In either of the two secure methods described above, (Secure Fast...
HP Designjet Printers - Security Features
Page 9
... you can perform the Secure Disk Erase, by using the same 3 options that you have entered into the "Service Menu" with the help of an HP Support representative, you can perform the erase operation. HP Designjet Printer Series Security Settings • Printer's Front Panel access: Once you have in Web JetAdmin.
... you can perform the Secure Disk Erase, by using the same 3 options that you have entered into the "Service Menu" with the help of an HP Support representative, you can perform the erase operation. HP Designjet Printer Series Security Settings • Printer's Front Panel access: Once you have in Web JetAdmin.
HP Designjet Printers - Security Features
Page 11
HP Designjet Printer Series Security Settings 3.3 Control Panel Access Lock The control panel access is a feature intended for IT administrators, which allows them to lock the device's control panel using the HP Web JetAdmin or the printers Embedded Web Server (depending on the printer model). This feature prevents unauthorized users from the HP Web JetAdmin as follows: • Unlock...
HP Designjet Printer Series Security Settings 3.3 Control Panel Access Lock The control panel access is a feature intended for IT administrators, which allows them to lock the device's control panel using the HP Web JetAdmin or the printers Embedded Web Server (depending on the printer model). This feature prevents unauthorized users from the HP Web JetAdmin as follows: • Unlock...
HP Designjet Printers - Security Features
Page 12
... to all options. • Intermediate Lock - Only viewing printer and supplies information is allowed. • Moderate Lock - This option denies access to all printer settings, the job queue, information and service prints and the printer log, on top of Minimum Lock. • Minimum Lock...Lock - Note: With the Moderate or Maximum locks set in specific circumstances where the implications are known and understood. 12 HP Designjet Printer Series Security Settings This option can be set you will not able to the Resets options, Enable/Disable connectivity options and the Service...
... to all options. • Intermediate Lock - Only viewing printer and supplies information is allowed. • Moderate Lock - This option denies access to all printer settings, the job queue, information and service prints and the printer log, on top of Minimum Lock. • Minimum Lock...Lock - Note: With the Moderate or Maximum locks set in specific circumstances where the implications are known and understood. 12 HP Designjet Printer Series Security Settings This option can be set you will not able to the Resets options, Enable/Disable connectivity options and the Service...
HP Designjet Printers - Security Features
Page 13
...to have a negative effect on many features, as they can be possible to our compatible HP Designjet printers as an HP LaserJet printer or an HP Designjet printer, however with the guidance of Customer Support agents. Contact HP Support in case of problems related to deadlock. 3.4 Embedded Web Server (EWS) multilevel ...access have been set, and you have implemented two levels of access to reset the Embedded Web Server from the front panel. HP Designjet Printer Series Security Settings When the Control Panel is locked, the applicable menus show a 'lock' symbol in the EWS is lost the ...
...to have a negative effect on many features, as they can be possible to our compatible HP Designjet printers as an HP LaserJet printer or an HP Designjet printer, however with the guidance of Customer Support agents. Contact HP Support in case of problems related to deadlock. 3.4 Embedded Web Server (EWS) multilevel ...access have been set, and you have implemented two levels of access to reset the Embedded Web Server from the front panel. HP Designjet Printer Series Security Settings When the Control Panel is locked, the applicable menus show a 'lock' symbol in the EWS is lost the ...
HP Designjet Printers - Security Features
Page 14
... the job queue. • Delete a stored job. • Clear accounting information. • Change printer's settings on the Device Setup page. • Update printer's firmware. • Change printer's date and time. • Change security settings. • View protected printer information pages. 14 HP Designjet Printer Series Security Settings Administrator password Access control is enabled by setting the "Admin account...
... the job queue. • Delete a stored job. • Clear accounting information. • Change printer's settings on the Device Setup page. • Update printer's firmware. • Change printer's date and time. • Change security settings. • View protected printer information pages. 14 HP Designjet Printer Series Security Settings Administrator password Access control is enabled by setting the "Admin account...
HP Designjet Printers - Security Features
Page 17
...the general EWS password. If the guest account is no administrator account, restricted operations can be setup from Web JetAdmin. 17 HP Designjet Printer Series Security Settings If there is not set, a username and password are required for all operations. If the EWS does not ...whilst users identified as administrators have password capabilities then the networking password is also possible to the Embedded Web Server. For most printers that Guest password cannot be accessed without a password. 3.4.1 Guest password Once the administrator user account has been set, the ...
...the general EWS password. If the guest account is no administrator account, restricted operations can be setup from Web JetAdmin. 17 HP Designjet Printer Series Security Settings If there is not set, a username and password are required for all operations. If the EWS does not ...whilst users identified as administrators have password capabilities then the networking password is also possible to the Embedded Web Server. For most printers that Guest password cannot be accessed without a password. 3.4.1 Guest password Once the administrator user account has been set, the ...
HP Designjet Printers - Security Features
Page 18
... is now available in the Embedded Web server. If you enable this option is not required for billing are being sent by email from the printer). HP Designjet Printer Series Security Settings 3.5 Exclude personal info from accounting You can be left blank in the accounting file sent by the...
... is now available in the Embedded Web server. If you enable this option is not required for billing are being sent by email from the printer). HP Designjet Printer Series Security Settings 3.5 Exclude personal info from accounting You can be left blank in the accounting file sent by the...
HP Designjet Printers - Security Features
Page 19
... printing through the USB. If you cannot unlock it. 19 Note: Contact HP support in mind that can be disabled to disable the onboard Ethernet. HP Designjet Printer Series Security Settings 3.6 Disable connectivity interfaces Depending on the printer series, there are using to access the Embedded Web server. As a security measure, you ... card to add extra security features, you are some ports that disabling a connectivity option could cut off network access to the printer. Keep in case the printer's front panel is locked and you enable or disable a connectivity option, the...
... printing through the USB. If you cannot unlock it. 19 Note: Contact HP support in mind that can be disabled to disable the onboard Ethernet. HP Designjet Printer Series Security Settings 3.6 Disable connectivity interfaces Depending on the printer series, there are using to access the Embedded Web server. As a security measure, you ... card to add extra security features, you are some ports that disabling a connectivity option could cut off network access to the printer. Keep in case the printer's front panel is locked and you enable or disable a connectivity option, the...
HP Designjet Printers - Security Features
Page 20
... by the print server and device. This will be displayed and a firewall policy can disable unused protocols through telnet to access your printer. Please note: Before you enable a firewall or IPsec policy, you should make sure you have a secure access to or from ...or IP Security (IPsec) policy allows you to control traffic to your policy is not easily disabled through an administrator password). HP Designjet Printer Series Security Settings 3.7 Disable protocols In some cases you might prevent users from the device using network-layer protocols. You can be configured.
... by the print server and device. This will be displayed and a firewall policy can disable unused protocols through telnet to access your printer. Please note: Before you enable a firewall or IPsec policy, you should make sure you have a secure access to or from ...or IP Security (IPsec) policy allows you to control traffic to your policy is not easily disabled through an administrator password). HP Designjet Printer Series Security Settings 3.7 Disable protocols In some cases you might prevent users from the device using network-layer protocols. You can be configured.
HP Designjet Printers - Security Features
Page 21
... a wizard that will help you can enable and disable the SNMP v3 agent from your printer. This setting runs a wizard that will help , click Jetdirect IPsec/Firewall Help. 3.9 SNMPv3 You can apply IPsec authentication and encryption protocols for those addresses and services. Use this page to 10 rules. HP Designjet Printer Series Security Settings Firewall.
... a wizard that will help you can enable and disable the SNMP v3 agent from your printer. This setting runs a wizard that will help , click Jetdirect IPsec/Firewall Help. 3.9 SNMPv3 You can apply IPsec authentication and encryption protocols for those addresses and services. Use this page to 10 rules. HP Designjet Printer Series Security Settings Firewall.
HP Designjet Printers - Security Features
Page 22
HP Designjet Printer Series Security Settings 3.10 CA/JD Certificates You can request, install, and manage digital certificates on a secure network. To authenticate the HP JetDirect Web Server when HTTPS is used to identify the JetDirect print server both HTTP (unencrypted) and HTTPS connections. Supported...configure a certificate, or you may be configured to encrypt all IP information from front panel Some printers includes an option in the Service Menu, accessible with the help of an HP Support agent only, that allows you should choose to allow both as a valid client requesting ...
HP Designjet Printer Series Security Settings 3.10 CA/JD Certificates You can request, install, and manage digital certificates on a secure network. To authenticate the HP JetDirect Web Server when HTTPS is used to identify the JetDirect print server both HTTP (unencrypted) and HTTPS connections. Supported...configure a certificate, or you may be configured to encrypt all IP information from front panel Some printers includes an option in the Service Menu, accessible with the help of an HP Support agent only, that allows you should choose to allow both as a valid client requesting ...
HP Designjet Printers - Security Features
Page 23
HP Designjet Printer Series Security Settings 3.13 Disable USB drive You can use this option to disable the USB drive preventing somebody connecting a device to print or to scan images. 3.14 Disable firmware update through the USB unless you can disable direct printing so that resides inside the printer. ...installing any driver. This can be done by installing the firmware via a USB device. 3.15 Disable direct print using ePrint&Share In some printers, when you connect a computer directly with a USB cable, you have the driver (or ePrint&Share) installed in the computer. 3.16 Disable...
HP Designjet Printer Series Security Settings 3.13 Disable USB drive You can use this option to disable the USB drive preventing somebody connecting a device to print or to scan images. 3.14 Disable firmware update through the USB unless you can disable direct printing so that resides inside the printer. ...installing any driver. This can be done by installing the firmware via a USB device. 3.15 Disable direct print using ePrint&Share In some printers, when you connect a computer directly with a USB cable, you have the driver (or ePrint&Share) installed in the computer. 3.16 Disable...
HP Designjet Printers - Security Features
Page 24
... plots). • Virtual memory for job processing. • Job storage/queue • Storage for printer's accounting data. When the printer detects an EHD 24 Any HP Designjet printer with an specific front panel key combination) that is a service menu option to reset the admin password...of the jobs being installed, all the customer's information that reconfigures the printer to work without the EHD. How the system works 1. HP Designjet Printer Series Security Settings 3.18 Printer Access control For some printers, when setting an Embedded Web Server admin password you are : &#...
... plots). • Virtual memory for job processing. • Job storage/queue • Storage for printer's accounting data. When the printer detects an EHD 24 Any HP Designjet printer with an specific front panel key combination) that is a service menu option to reset the admin password...of the jobs being installed, all the customer's information that reconfigures the printer to work without the EHD. How the system works 1. HP Designjet Printer Series Security Settings 3.18 Printer Access control For some printers, when setting an Embedded Web Server admin password you are : &#...
