HP Web Jetadmin - Security and HP Web Jetadmin

DEVICE SECURITY

In many environments, password policies exist that require the device administrator to periodically

reconfigure security credentials. HP Web Jetadmin is a powerful device management tool because it

can configure many devices at once. This saves administrators from having to contact each device

separately to assign configuration items like passwords and other credentials.

Device passwords, community names, ports, and other credentials are used to prevent unauthorized

access. Even though an HP Web Jetadmin installation is secure, other HP Web Jetadmin installations

and other utilities can access devices. These can include:

• HP Web Jetadmin

• Telnet

• Embedded Web Server

• Other SNMP utilities

Protocols used by these and other utilities include:

• SNMP over UDP—changes of PML objects

• RFU file through Port 9100 over TCP—printer firmware upgrades

• PJL file through Port 9100 over TCP—changes of PML objects

• PCL file through Port 9100 over TCP—changes of PML objects

• NFS over TCP—changes to storage (such as hard disk)

In addition to providing additional security methods to prevent unwanted device configuration,

HP Web Jetadmin provides security against unwanted printing. For example, printing can occur to

printers using the following techniques:

• HP Standard Port Monitor

• HP Jetdirect Port

• Microsoft Standard Port Monitor

• LPD

• FTP

• IPP

Passwords and credentials

To prevent unauthorized access to device configuration interfaces, several password and credential

options are available. Setting these items through HP Web Jetadmin is possible in both batch and

single configuration. In addition to configuring passwords and credentials from within HP Web

Jetadmin, the administrator can protect these items through the Credential Store.

Security settings are consolidated beneath the Security configuration category, making them easy to

find and manage. Security settings can also be stored in Configuration Templates so that they can be

applied through Schedules and/or group configuration policies. Security settings can also be

customized under My Settings so that all things considered critical to security can be easily found and

configured by the individual user.

The Credentials Store

The Credentials Store keeps HP Web Jetadmin users from having to provide device credentials every

time one or more devices require credentials. It also facilitates batch and background device

operations.