Practical considerations for imaging and printing security
Page 1
... ...4 Security checklists ...4 Conclusion: look beyond Common Criteria Certification 4 HP's imaging and printing security framework 4 Secure the Imaging and Printing Device 5 MFP walk-up authentication ...5 Network printing authentication ...5 Physical document access control 5 HP Secure Erase ...6 Vulnerabilities, viruses, and worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively...
... ...4 Security checklists ...4 Conclusion: look beyond Common Criteria Certification 4 HP's imaging and printing security framework 4 Secure the Imaging and Printing Device 5 MFP walk-up authentication ...5 Network printing authentication ...5 Physical document access control 5 HP Secure Erase ...6 Vulnerabilities, viruses, and worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively...
Practical considerations for imaging and printing security
Page 6
... its products meet the threat posed by the HP Jetdirect family of HP imaging and printing devices. Network connectivity with virus protection software, are confidential and prevent unauthorized modification by HP Web Jetadmin to -clunk performance that afflict enterprise networks. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click...
... its products meet the threat posed by the HP Jetdirect family of HP imaging and printing devices. Network connectivity with virus protection software, are confidential and prevent unauthorized modification by HP Web Jetadmin to -clunk performance that afflict enterprise networks. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click...
HP Jetdirect Print Servers - Administrator's Guide
Page 5
... contents 1 Introducing the HP Jetdirect print server Supported print servers ...1 Supported network protocols ...2 Security protocols ...3 SNMP (IP and IPX) ...3 HTTPS ...3 Authentication ...4 EAP/802.1X server-based authentication 4 IPsec/Firewall ...4 Supplied manuals ...5 HP support ...5 HP online support ...5 Firmware upgrades ...5 Firmware installation tools 5 HP support by phone ...6 Product registration ...6 Product accessibility ...6 2 HP software solutions summary HP Install Network Printer Wizard (Windows 8 Requirements ...8 HP Jetdirect printer installer for UNIX...
... contents 1 Introducing the HP Jetdirect print server Supported print servers ...1 Supported network protocols ...2 Security protocols ...3 SNMP (IP and IPX) ...3 HTTPS ...3 Authentication ...4 EAP/802.1X server-based authentication 4 IPsec/Firewall ...4 Supplied manuals ...5 HP support ...5 HP online support ...5 Firmware upgrades ...5 Firmware installation tools 5 HP support by phone ...6 Product registration ...6 Product accessibility ...6 2 HP software solutions summary HP Install Network Printer Wizard (Windows 8 Requirements ...8 HP Jetdirect printer installer for UNIX...
HP Jetdirect Print Servers - Administrator's Guide
Page 7
Operating notes ...64 HP Jetdirect Home tab ...65 Device tabs ...66 Networking tab ...66 TCP/IP Settings ...69 Summary tab ...70 Network Identification tab 70 TCP/IP(v4) tab 71 ... AppleTalk ...77 DLC/LLC ...77 SNMP ...78 Other Settings ...79 Misc. Protocols ...91 Web Mgmt...91 SNMP ...92 SNMP v3 ...92 Other ...92 802.1X Authentication ...93 IPsec/Firewall ...94 Network Statistics ...95 Protocol Info ...95 Configuration Page ...95 Other Links ...95 ENWW v Account 87 Certificates ...87 Configure certificates 88 Access Control...
Operating notes ...64 HP Jetdirect Home tab ...65 Device tabs ...66 Networking tab ...66 TCP/IP Settings ...69 Summary tab ...70 Network Identification tab 70 TCP/IP(v4) tab 71 ... AppleTalk ...77 DLC/LLC ...77 SNMP ...78 Other Settings ...79 Misc. Protocols ...91 Web Mgmt...91 SNMP ...92 SNMP v3 ...92 Other ...92 802.1X Authentication ...93 IPsec/Firewall ...94 Network Statistics ...95 Protocol Info ...95 Configuration Page ...95 Other Links ...95 ENWW v Account 87 Certificates ...87 Configure certificates 88 Access Control...
HP Jetdirect Print Servers - Administrator's Guide
Page 8
...Specify IPsec/Firewall Template 105 Create IPsec Template 105 IPsec Protocols (Manual Keys 110 Rule Summary ...111 Configure Windows systems ...111 6 Security features (V.38.xx) Limit access to security features ...116 7 Troubleshoot the HP Jetdirect print server Reset ...and online 122 Procedure 2: Print an HP Jetdirect configuration page 122 Procedure 3: Resolve printer display error messages 123 Procedure 4: Resolve printer network communication problems 124 Troubleshooting wireless print servers 126 8 HP Jetdirect configuration pages HP Jetdirect configuration page ...130 Status field...
...Specify IPsec/Firewall Template 105 Create IPsec Template 105 IPsec Protocols (Manual Keys 110 Rule Summary ...111 Configure Windows systems ...111 6 Security features (V.38.xx) Limit access to security features ...116 7 Troubleshoot the HP Jetdirect print server Reset ...and online 122 Procedure 2: Print an HP Jetdirect configuration page 122 Procedure 3: Resolve printer display error messages 123 Procedure 4: Resolve printer network communication problems 124 Troubleshooting wireless print servers 126 8 HP Jetdirect configuration pages HP Jetdirect configuration page ...130 Status field...
HP Jetdirect Print Servers - Administrator's Guide
Page 9
... SAM to configure print queues (HP-UX systems 159 Print a test file 160 LPD on Windows 2000/Server 2003 systems 160 Install TCP/IP software 160 Configure a network printer for Windows 2000/Server 2003 systems 161 Verify the configuration 162 Print from Windows clients ...143 Error messages ...143 HP Jetdirect Security page ...149 Security settings ...150 IPsec Error Log ...152 Local IP addresses ...152 IPsec Statistics ...152 IKE Stats ...153 IPsec Rules ...153 IPsec Security Associations (SA) table 153 Available Network Services 154 Appendix A LPD printing About LPD ...156 Requirements...
... SAM to configure print queues (HP-UX systems 159 Print a test file 160 LPD on Windows 2000/Server 2003 systems 160 Install TCP/IP software 160 Configure a network printer for Windows 2000/Server 2003 systems 161 Verify the configuration 162 Print from Windows clients ...143 Error messages ...143 HP Jetdirect Security page ...149 Security settings ...150 IPsec Error Log ...152 Local IP addresses ...152 IPsec Statistics ...152 IKE Stats ...153 IPsec Rules ...153 IPsec Security Associations (SA) table 153 Available Network Services 154 Appendix A LPD printing About LPD ...156 Requirements...
HP Jetdirect Print Servers - Administrator's Guide
Page 10
Print files ...165 Use FTP printing ...165 FTP connections ...165 Control connection 165 Data connection 166 FTP login ...166 End the FTP session ...167 Commands ...167 Example FTP Session ...168 Appendix C HP Jetdirect control panel menus (V.38.xx) Graphical control panel menus ...170 Classic control panel EIO menus ...177 Appendix D Open source licensing statements gSOAP ...181 OpenSSL ...182 OpenSSL license ...182 Original SSLeay license 182 Index ...185 viii ENWW
Print files ...165 Use FTP printing ...165 FTP connections ...165 Control connection 165 Data connection 166 FTP login ...166 End the FTP session ...167 Commands ...167 Example FTP Session ...168 Appendix C HP Jetdirect control panel menus (V.38.xx) Graphical control panel menus ...170 Classic control panel EIO menus ...177 Appendix D Open source licensing statements gSOAP ...181 OpenSSL ...182 OpenSSL license ...182 Original SSLeay license 182 Index ...185 viii ENWW
HP Jetdirect Print Servers - Administrator's Guide
Page 11
... such as a USB port, to the network. Table 1-1 Supported HP Jetdirect print server features and capabilities Model Product Number Printer Connect Network Connect1 Network Protocols and Features2 Firmware Version3 690n J8007G 635n J7961G 630n Not Applicable J7997G J8010E Not Applicable J8011E Not ...IPsec) Full (includes IPsec) Full Full Full Full V.38.xx.nn V.38.xx.nn V.38.xx.nn V38.xx.nn V38.xx.nn V38.xx.nn ENWW Supported print servers 1 In addition, a network connection allows data transfers to an HP Jetdirect print server and not a separate computer running print server...
... such as a USB port, to the network. Table 1-1 Supported HP Jetdirect print server features and capabilities Model Product Number Printer Connect Network Connect1 Network Protocols and Features2 Firmware Version3 690n J8007G 635n J7961G 630n Not Applicable J7997G J8010E Not Applicable J8011E Not ...IPsec) Full (includes IPsec) Full Full Full Full V.38.xx.nn V.38.xx.nn V.38.xx.nn V38.xx.nn V38.xx.nn V38.xx.nn ENWW Supported print servers 1 In addition, a network connection allows data transfers to an HP Jetdirect print server and not a separate computer running print server...
HP Jetdirect Print Servers - Administrator's Guide
Page 12
... 1 Embedded HP Jetdirect print server support for HP support use only. HP Jetdirect print server support for Internet protocol security (IPsec) depends on the print server and the printer/MFP in which it is an encoded value for 100T (Gigabit) depends on both the print server and printer/MFP in which it is installed. 3 xx represents a release number. J8007G (690n) Server 2003, Vista. (Requires HP IPv6/IPv4 port...
... 1 Embedded HP Jetdirect print server support for HP support use only. HP Jetdirect print server support for Internet protocol security (IPsec) depends on the print server and the printer/MFP in which it is an encoded value for 100T (Gigabit) depends on both the print server and printer/MFP in which it is installed. 3 xx represents a release number. J8007G (690n) Server 2003, Vista. (Requires HP IPv6/IPv4 port...
HP Jetdirect Print Servers - Administrator's Guide
Page 13
..., see the current HP Jetdirect product data sheets. HP Jetdirect print servers support access to set up network printing on IPv4, IPv6 and IPX networks. Value-featured print servers support an SNMP v1/v2c agent only. Table 1-2 Supported network protocols (continued) Supported Network Protocols Network Printing Environments1 Product Support IPX/SPX and compatible Novell NetWare2 J8007G (690n) (Direct Mode printing) Microsoft Windows 2000...
..., see the current HP Jetdirect product data sheets. HP Jetdirect print servers support access to set up network printing on IPv4, IPv6 and IPX networks. Value-featured print servers support an SNMP v1/v2c agent only. Table 1-2 Supported network protocols (continued) Supported Network Protocols Network Printing Environments1 Product Support IPX/SPX and compatible Novell NetWare2 J8007G (690n) (Direct Mode printing) Microsoft Windows 2000...
HP Jetdirect Print Servers - Administrator's Guide
Page 14
... server (V.38.xx) on page 61. Wireless print server authentication HP Jetdirect wired/wireless print servers support several available protocols. A firewall provides simple control of network access and services available to use . Dynamic WPA encryption protocols are used . Dynamic encryption keys are used for network communications to provide enhanced security. ● WPA/WPA2-Enterprise Requires 802.1X credentials to the print server...
... server (V.38.xx) on page 61. Wireless print server authentication HP Jetdirect wired/wireless print servers support several available protocols. A firewall provides simple control of network access and services available to use . Dynamic WPA encryption protocols are used . Dynamic encryption keys are used for network communications to provide enhanced security. ● WPA/WPA2-Enterprise Requires 802.1X credentials to the print server...
HP Jetdirect Print Servers - Administrator's Guide
Page 15
... protection only. For more information, see the following installation tools: ● HP Jetdirect download manager (Windows) Download from HP online support at: http://www.hp.com/go/dlm_sw ● HP Web Jetadmin For more information about your HP Jetdirect print server, see IPsec/Firewall configuration (V.38.xx) on the HP Jetdirect print server product and the printer/MFP in which it is available for...
... protection only. For more information, see the following installation tools: ● HP Jetdirect download manager (Windows) Download from HP online support at: http://www.hp.com/go/dlm_sw ● HP Web Jetadmin For more information about your HP Jetdirect print server, see IPsec/Firewall configuration (V.38.xx) on the HP Jetdirect print server product and the printer/MFP in which it is available for...
HP Jetdirect Print Servers - Administrator's Guide
Page 16
..., it must be entered to upgrade the device are the responsibility of HP Jetdirect print server products: ● Visit the HP Web site at: http://www.hp.com/accessibility ● Send email to: accessibility@hp.com 6 Chapter 1 Introducing the HP Jetdirect print server ENWW Product registration To register your HP Jetdirect print server, use the device IP address or host name. Telephone fees are provided...
..., it must be entered to upgrade the device are the responsibility of HP Jetdirect print server products: ● Visit the HP Web site at: http://www.hp.com/accessibility ● Send email to: accessibility@hp.com 6 Chapter 1 Introducing the HP Jetdirect print server ENWW Product registration To register your HP Jetdirect print server, use the device IP address or host name. Telephone fees are provided...
HP Jetdirect Print Servers - Administrator's Guide
Page 17
... and other solutions, visit HP online support at: http://www.hp.com/support/net_printing Table 2-1 Software Solutions Operating Environment Function Remarks HP Install Network Printer Wizard (Windows) on page 8 Windows 2000, XP, Server 2003, Vista TCP/IPv4 and TCP/IPv6 A utility for printer discovery...printers anywhere on your system for the remote ● installation, configuration, and management of HP Jetdirect-connected print servers, non-HP printers that runs from your hard disk from HP's Website. NOTE: Printer software drivers are not included and must be obtained separately. ...
... and other solutions, visit HP online support at: http://www.hp.com/support/net_printing Table 2-1 Software Solutions Operating Environment Function Remarks HP Install Network Printer Wizard (Windows) on page 8 Windows 2000, XP, Server 2003, Vista TCP/IPv4 and TCP/IPv6 A utility for printer discovery...printers anywhere on your system for the remote ● installation, configuration, and management of HP Jetdirect-connected print servers, non-HP printers that runs from your hard disk from HP's Website. NOTE: Printer software drivers are not included and must be obtained separately. ...
HP Jetdirect Print Servers - Administrator's Guide
Page 18
... and peripheral management from HP online support at: http://www.hp.com/go/inpw_sw Requirements NOTE: For HP Jetdirect wired/wireless print servers used in an I/O slot. On Windows XP and 2003 Server systems, Version 5.0 also supports printing on a supported system....HP Web Jetadmin hosted on an IPv6 network, but printer discovery is limited to use the printer through an HP Jetdirect print server 8 Chapter 2 HP software solutions summary ENWW Once the settings are configured, you can share the printer so that it can remove the cable. On wireless print servers, first configure wireless...
... and peripheral management from HP online support at: http://www.hp.com/go/inpw_sw Requirements NOTE: For HP Jetdirect wired/wireless print servers used in an I/O slot. On Windows XP and 2003 Server systems, Version 5.0 also supports printing on a supported system....HP Web Jetadmin hosted on an IPv6 network, but printer discovery is limited to use the printer through an HP Jetdirect print server 8 Chapter 2 HP software solutions summary ENWW Once the settings are configured, you can share the printer so that it can remove the cable. On wireless print servers, first configure wireless...
HP Jetdirect Print Servers - Administrator's Guide
Page 19
... have administrator privileges on the local system. 2. ENWW HP Jetdirect printer installer for HP printers connected to install the HP Web Jetadmin software. HP Web Jetadmin HP Web Jetadmin is well-integrated with HP Jetdirect print servers and HP printers, HP Web Jetadmin can gain access to the HP Web Jetadmin host). NOTE: When HP Web Jetadmin is installed on supported operating systems, clients...
... have administrator privileges on the local system. 2. ENWW HP Jetdirect printer installer for HP printers connected to install the HP Web Jetadmin software. HP Web Jetadmin HP Web Jetadmin is well-integrated with HP Jetdirect print servers and HP printers, HP Web Jetadmin can gain access to the HP Web Jetadmin host). NOTE: When HP Web Jetadmin is installed on supported operating systems, clients...
HP Jetdirect Print Servers - Administrator's Guide
Page 20
..., systemname.domain is the host name of an Internet printing model ● Transmit IPP outbound print send requests through firewalls 10 Chapter 2 HP software solutions summary ENWW Follow the instructions on which HP Web Jetadmin is supported. Internet Printer Connection software (For full-featured print servers only) HP Jetdirect print servers support IPP and Secure IPP. Using the appropriate software...
..., systemname.domain is the host name of an Internet printing model ● Transmit IPP outbound print send requests through firewalls 10 Chapter 2 HP software solutions summary ENWW Follow the instructions on which HP Web Jetadmin is supported. Internet Printer Connection software (For full-featured print servers only) HP Jetdirect print servers support IPP and Secure IPP. Using the appropriate software...
HP Jetdirect Print Servers - Administrator's Guide
Page 21
... administrator to get the IP address or URL of the printer to complete the setup.) HP software system requirements ● Computer running Microsoft Windows 2000 ● IPP enabled HP Jetdirect print server HP software supported proxies Web proxy with https:// in the following steps: 1. Microsoft-supplied software...software You can use the following example: http:// [/ipp/port#] In the example, is the IPv4 address configured on the HP Jetdirect print server is assumed and not required.) NOTE: For a Secure IPP connection, replace http:// with support for a Network printer and then...
... administrator to get the IP address or URL of the printer to complete the setup.) HP software system requirements ● Computer running Microsoft Windows 2000 ● IPP enabled HP Jetdirect print server HP software supported proxies Web proxy with https:// in the following steps: 1. Microsoft-supplied software...software You can use the following example: http:// [/ipp/port#] In the example, is the IPv4 address configured on the HP Jetdirect print server is assumed and not required.) NOTE: For a Secure IPP connection, replace http:// with support for a Network printer and then...
HP Jetdirect Print Servers - Administrator's Guide
Page 22
... NetWare client support, see your browser (such as Rendezvous) for the printer. Use Bonjour (Mac OS X v10.4) HP Jetdirect print servers support Bonjour (formerly known as Rendezvous) technology for example, Built-in Ethernet is active) and be on a network that contains many...host name of the ports list. That page contains unique identification information for TCP/IP Printing. Click Next. 5. Novell-supplied software The HP Jetdirect print server is displayed. 12 Chapter 2 HP software solutions summary ENWW Mac OS network installation Software tools Use the following Mac OS software...
... NetWare client support, see your browser (such as Rendezvous) for the printer. Use Bonjour (Mac OS X v10.4) HP Jetdirect print servers support Bonjour (formerly known as Rendezvous) technology for example, Built-in Ethernet is active) and be on a network that contains many...host name of the ports list. That page contains unique identification information for TCP/IP Printing. Click Next. 5. Novell-supplied software The HP Jetdirect print server is displayed. 12 Chapter 2 HP software solutions summary ENWW Mac OS network installation Software tools Use the following Mac OS software...
HP Jetdirect Print Servers - Administrator's Guide
Page 23
.... 2. Verify network configuration To verify your network correctly. Click the Safari File menu and select Print. 3. A string of the configuration page, see Troubleshoot the HP Jetdirect print server on the printer. When printing a configuration page, make sure a READY message appears on page 129. Test the configuration 1. In the Printer field, select the printer and then click...
.... 2. Verify network configuration To verify your network correctly. Click the Safari File menu and select Print. 3. A string of the configuration page, see Troubleshoot the HP Jetdirect print server on the printer. When printing a configuration page, make sure a READY message appears on page 129. Test the configuration 1. In the Printer field, select the printer and then click...