Practical considerations for imaging and printing security
Page 1
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
HP Jetdirect Security Guidelines
Page 1
... concerns that need to be addressed. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10 Recommended Security...
... concerns that need to be addressed. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10 Recommended Security...
HP Jetdirect Security Guidelines
Page 2
...ports or serial ports to a spooler in use as a directly connected printer. Popular HP tools, such as TCP/IP. At the time HP Jetdirect was introduced, there was a variety of the first print servers to widely implement security protocols such as if the printer was designed to allow users ... of printers increased and the need of HP Jetdirect devices by connecting them as fast and painlessly as well-known default security settings. Protocol suites such as AppleTalk, DLC/LLC, and IPX/SPX were deployed widely and had their firmware updated or their configuration changed. At one...
...ports or serial ports to a spooler in use as a directly connected printer. Popular HP tools, such as TCP/IP. At the time HP Jetdirect was introduced, there was a variety of the first print servers to widely implement security protocols such as if the printer was designed to allow users ... of printers increased and the need of HP Jetdirect devices by connecting them as fast and painlessly as well-known default security settings. Protocol suites such as AppleTalk, DLC/LLC, and IPX/SPX were deployed widely and had their firmware updated or their configuration changed. At one...
HP Jetdirect Security Guidelines
Page 4
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
HP Jetdirect Security Guidelines
Page 5
... HP Jetdirect devices that are available for customers to do so, HP can provide some guidelines. Discontinued HP Jetdirect Models 5 Firewall, SSL/TLS for Management, SNMPv3, 802.1X PEAP. HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect...
... HP Jetdirect devices that are available for customers to do so, HP can provide some guidelines. Discontinued HP Jetdirect Models 5 Firewall, SSL/TLS for Management, SNMPv3, 802.1X PEAP. HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect...
HP Jetdirect Security Guidelines
Page 6
... firmware upgraded to install a J7961G 635n IPv6/IPsec print server. Using this operation is located here: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=bpj07576 • SET 3: The 630n and Embedded Jetdirect (J7982E, J7987E, J7991E, and J7992E) models. HP Jetdirect .... These administrative guidelines come in HP Jetdirect's product line. SET 3 can use the administrative guideline referenced for SET 1 products, but have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. One of having...
... firmware upgraded to install a J7961G 635n IPv6/IPsec print server. Using this operation is located here: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=bpj07576 • SET 3: The 630n and Embedded Jetdirect (J7982E, J7987E, J7991E, and J7992E) models. HP Jetdirect .... These administrative guidelines come in HP Jetdirect's product line. SET 3 can use the administrative guideline referenced for SET 1 products, but have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. One of having...
HP Jetdirect Security Guidelines
Page 7
... Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n...
... Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n...
HP Jetdirect Security Guidelines
Page 9
... a main functionality partition. they are trusted to establish a print connection, they are three common ways of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP Download Manager or HP Web Jetadmin, the application issues an SNMP SET to the HP Jetdirect device. Some additional protections can be able to recover...
... a main functionality partition. they are trusted to establish a print connection, they are three common ways of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP Download Manager or HP Web Jetadmin, the application issues an SNMP SET to the HP Jetdirect device. Some additional protections can be able to recover...
HP Jetdirect Security Guidelines
Page 10
...These attacks are where another node and then forwards the IP packets to printing. Port access controls, such as a guideline to all the data sent between an FTP client and an FTP server, it may end up at the final destination as IPsec and SSL...HTTPS, using listening device hidden in a manner that destination. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is a fundamental step in the same manner. firmware upgrades; Properly deployed cryptographic protocols are also used to force network infrastructure equipment to behave in a conference ...
...These attacks are where another node and then forwards the IP packets to printing. Port access controls, such as a guideline to all the data sent between an FTP client and an FTP server, it may end up at the final destination as IPsec and SSL...HTTPS, using listening device hidden in a manner that destination. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is a fundamental step in the same manner. firmware upgrades; Properly deployed cryptographic protocols are also used to force network infrastructure equipment to behave in a conference ...
HP Jetdirect 620n Print Server Setup Guide
Page 5
HP Jetdirect Solutions Summary Tools Overview 31 Supported Network Protocols 32 HP Installation Software 33 C. HP Support and Service HP Support Online 53 Firmware Upgrades 53 HP Support By Phone 54 5 Warranty Service F. B. Specifications and Regulatory Statements Specifications 45 Regulatory Statements 46 E. HP Jetdirect EIO Control Panel Menus Introduction 36 Classic Control Panel 37 Graphical Control Panel 40 D.
HP Jetdirect Solutions Summary Tools Overview 31 Supported Network Protocols 32 HP Installation Software 33 C. HP Support and Service HP Support Online 53 Firmware Upgrades 53 HP Support By Phone 54 5 Warranty Service F. B. Specifications and Regulatory Statements Specifications 45 Regulatory Statements 46 E. HP Jetdirect EIO Control Panel Menus Introduction 36 Classic Control Panel 37 Graphical Control Panel 40 D.
HP Jetdirect 620n Print Server Setup Guide
Page 12
In the first section of other messages that may appear on the Jetdirect Configuration Page, refer to reinitialize the print server and try again. This section of the configuration page also contains productspecific information, such as: ■ HP Jetdirect product number ■ Firmware revision number ■ LAN Hardware (MAC) address ■ Manufacturing identification number Note For a description...
In the first section of other messages that may appear on the Jetdirect Configuration Page, refer to reinitialize the print server and try again. This section of the configuration page also contains productspecific information, such as: ■ HP Jetdirect product number ■ Firmware revision number ■ LAN Hardware (MAC) address ■ Manufacturing identification number Note For a description...
HP Jetdirect 620n Print Server Setup Guide
Page 31
...; Embedded Web Server, HTTPS (TCP port 443) ● HP management and support software: ■ HP Web Jetadmin software (TCP/IP and IPX/SPX networks) ■ HP Jetdirect Download Manager (HP Jetdirect firmware upgrades) HP Jetdirect Printing Support ● Embedded HP Jetdirect services: ■ LPD printing (TCP port 515) ■ IPP printing (TCP port 631) ■ FTP printing (TCP ports 20, 21) ■ Raw IP printing (HP-proprietary TCP...
...; Embedded Web Server, HTTPS (TCP port 443) ● HP management and support software: ■ HP Web Jetadmin software (TCP/IP and IPX/SPX networks) ■ HP Jetdirect Download Manager (HP Jetdirect firmware upgrades) HP Jetdirect Printing Support ● Embedded HP Jetdirect services: ■ LPD printing (TCP port 515) ■ IPP printing (TCP port 631) ■ FTP printing (TCP ports 20, 21) ■ Raw IP printing (HP-proprietary TCP...
HP Jetdirect 620n Print Server Setup Guide
Page 34
... hosted on your intranet ● Remote installation, configuration, and management of HP Jetdirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers ● Alerts and consumables management ● Remote firmware upgrades for HP Jetdirect print servers ● Asset tracking and utilization analysis HP Internet Printer Connection ● Supported Networks (TCP/IP): ■ Windows NT...
... hosted on your intranet ● Remote installation, configuration, and management of HP Jetdirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers ● Alerts and consumables management ● Remote firmware upgrades for HP Jetdirect print servers ● Asset tracking and utilization analysis HP Internet Printer Connection ● Supported Networks (TCP/IP): ■ Windows NT...
HP Jetdirect 620n Print Server Setup Guide
Page 35
...; NetWare 5.x, 6.0 ● Simplified installation, printing, and bidirectional management of HP Jetdirect-connected printers under Novell Distributed Print Services (NDPS) ● Allows automatic discovery and installation of HP Jetdirectconnected printers into NDPS via IPX ● Frees up user licenses ● Allows disabling of SAPs to reduce network traffic ● For IPX printing, requires HP Jetdirect firmware version X.03.06 or...
...; NetWare 5.x, 6.0 ● Simplified installation, printing, and bidirectional management of HP Jetdirect-connected printers under Novell Distributed Print Services (NDPS) ● Allows automatic discovery and installation of HP Jetdirectconnected printers into NDPS via IPX ● Frees up user licenses ● Allows disabling of SAPs to reduce network traffic ● For IPX printing, requires HP Jetdirect firmware version X.03.06 or...
HP Jetdirect 620n Print Server Setup Guide
Page 53
... tools including File Transfer Protocol (FTP), the embedded Web server, and HP Jetdirect Download Manager (Windows) or HP Web Jetadmin software. F HP Support and Service HP Support Online Click your HP Jetdirect print server - 24 hours a day, 7 days a week. The HP web site at : http://www.hp.com/go/webjetadmin_firmware ENWW 53 Firmware Upgrades Hewlett-Packard offers downloadable electronic upgrades for answers to...
... tools including File Transfer Protocol (FTP), the embedded Web server, and HP Jetdirect Download Manager (Windows) or HP Web Jetadmin software. F HP Support and Service HP Support Online Click your HP Jetdirect print server - 24 hours a day, 7 days a week. The HP web site at : http://www.hp.com/go/webjetadmin_firmware ENWW 53 Firmware Upgrades Hewlett-Packard offers downloadable electronic upgrades for answers to...
HP Jetdirect Administrator's Guide
Page 8
... Full** V.28.xx.nnnnnnnn 620n J7934A EIO slot 10/100TX Full** V.28.xx.nnnnnnnn * Limited support includes TCP/IP, IPX Direct Mode printing, AppleTalk (EtherTalk), LPD/Windows printing, limited upgrade capabilities. ** Full support includes TCP/IP, IPX/SPX, AppleTalk (EtherTalk), LPR/LPD, Security. Supported Network Protocols Note For HP Jetdirect wireless print servers, this section assumes that use...
... Full** V.28.xx.nnnnnnnn 620n J7934A EIO slot 10/100TX Full** V.28.xx.nnnnnnnn * Limited support includes TCP/IP, IPX Direct Mode printing, AppleTalk (EtherTalk), LPD/Windows printing, limited upgrade capabilities. ** Full support includes TCP/IP, IPX/SPX, AppleTalk (EtherTalk), LPR/LPD, Security. Supported Network Protocols Note For HP Jetdirect wireless print servers, this section assumes that use...
HP Jetdirect Administrator's Guide
Page 12
...: http://www.hp.com/go/webjetadmin_firmware Firmware Installation Tools Note HP Jetdirect ew2400 print servers will have factory-installed print servers. ● Start or Use guides, or equivalent printer documentation (shipped with off-the-shelf print servers). The upgrades are supplied with your print server or with printers that contain upgradeable memory. ENWW Introducing the HP Jetdirect Print Server 12 HP Support HP Online Support Click your HP Jetdirect print server - 24...
...: http://www.hp.com/go/webjetadmin_firmware Firmware Installation Tools Note HP Jetdirect ew2400 print servers will have factory-installed print servers. ● Start or Use guides, or equivalent printer documentation (shipped with off-the-shelf print servers). The upgrades are supplied with your print server or with printers that contain upgradeable memory. ENWW Introducing the HP Jetdirect Print Server 12 HP Support HP Online Support Click your HP Jetdirect print server - 24...
HP Jetdirect Administrator's Guide
Page 48
Table 3.2 lists supported TFTP commands (HP Jetdirect firmware version V.28.xx or later). Table 3.2 List of Supported TFTP Commands (1 of 2) General ● passwd: ● ssl-state: ● sys-location: ● security-reset:...wins-svr: ● pri-dns-svr: ● smtp-svr: TCP/IP Print Options ● 9100-printing: ● interlock: ● ftp-printing: ● buffer-packing: ● ipp-printing: ● write-mode: ● lpd-printing: ● mult-tcp-conn: ● banner: TCP/IP Raw Print Ports ● raw-port: TCP/IP Access Control ● allow: netnum [...
Table 3.2 lists supported TFTP commands (HP Jetdirect firmware version V.28.xx or later). Table 3.2 List of Supported TFTP Commands (1 of 2) General ● passwd: ● ssl-state: ● sys-location: ● security-reset:...wins-svr: ● pri-dns-svr: ● smtp-svr: TCP/IP Print Options ● 9100-printing: ● interlock: ● ftp-printing: ● buffer-packing: ● ipp-printing: ● write-mode: ● lpd-printing: ● mult-tcp-conn: ● banner: TCP/IP Raw Print Ports ● raw-port: TCP/IP Access Control ● allow: netnum [...
HP Jetdirect Administrator's Guide
Page 108
...password has been set through a Telnet session with the HP Jetdirect print server, or from HP Web Jetadmin. (EIO print servers only) Because passwords are synchronized with selected printers, the password may also be prompted for example HP J7934A). A Locally Administered Address (LAA) that identifies the ...on the HP Jetdirect print server. If an administrator password has been set, you will be configured through printer security Web pages. Table 4.1 HP Jetdirect Home Page Items (2 of 2) Item Host Name System Up Time System Contact System Location HP Jetdirect Firmware Version IP ...
...password has been set through a Telnet session with the HP Jetdirect print server, or from HP Web Jetadmin. (EIO print servers only) Because passwords are synchronized with selected printers, the password may also be prompted for example HP J7934A). A Locally Administered Address (LAA) that identifies the ...on the HP Jetdirect print server. If an administrator password has been set, you will be configured through printer security Web pages. Table 4.1 HP Jetdirect Home Page Items (2 of 2) Item Host Name System Up Time System Contact System Location HP Jetdirect Firmware Version IP ...
HP Jetdirect Administrator's Guide
Page 191
...manuals to interpret the error message. ■ If you need to replace the HP Jetdirect print server. If it is removed, it clears. If you upgraded the Jetdirect firmware recently, power the print server off and back on . Does EIOX INITIALIZING/DO NOT POWER OFF appear on .... This information assumes you may need to replace the HP Jetdirect print server under warranty service, include all configuration parameters....
...manuals to interpret the error message. ■ If you need to replace the HP Jetdirect print server. If it is removed, it clears. If you upgraded the Jetdirect firmware recently, power the print server off and back on . Does EIOX INITIALIZING/DO NOT POWER OFF appear on .... This information assumes you may need to replace the HP Jetdirect print server under warranty service, include all configuration parameters....