HP DesignJet and PageWide XL Printers Security features
HP DesignJet Printers Security Settings © 2014, 2016, 2018, 2019 HP Development Company, L.P. Reproduction, adaptation, or translation without prior permission is prohibited, except as allowed under the copyright laws. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as an additional warranty.
HP DesignJet Printers Security Settings Table of Contents 1. 2. 2.1 Introduction & Overview ........................................................................................................................................5 Security concepts explanation..............................................................................................................................5 Device security ..........................................................................................................
HP DesignJet Printers Security Settings User account.................................................................................................................................................................... 64 FP settings ....................................................................................................................................................................... 64 EWS settings...............................................................................................
HP DesignJet Printers Security Settings 1. Introduction & Overview This document provides an overview of the security and connectivity features supported by HP DesignJet and PageWide XL printers as of October 2018. The security features described in this document make the HP DesignJet and PageWide XL printer series particularly well suited for deployment in environments where network, data, and access control security are important.
HP DesignJet Printers 2.2 Security Settings • Protect the EWS access with an admin account (see section 2.2.6, Embedded Web Server (EWS) access control). • Disable the firmware upgrade from USB (see section 2.2.7, USB drive control) • Use the Automatic Firmware Upgrade to download the firmware. Device configuration protection Disable protocols In some cases, you might want to disable all protocols that you do not plan to use to access your printer.
HP DesignJet Printers Security Settings SNMP compatibility SNMP is a protocol to get printer information and to configure it. SNMPv3 is its encrypted version. Enabling it, only the client applications knowing the keys will be able to access the printer using this protocol. The main benefits of using SNMPv3 are: • Integrity: protects data flowing from side-to-side from being modified by a third party. • Authentication: verifies the data source.
HP DesignJet Printers Security Settings Disable connectivity interfaces Depending on the printer series, there are some USB network interfaces that can be disabled to restrict access to the printer through these interfaces. In some products, you can install a Jetdirect card to add extra security features, in this case, you might want to disable the onboard Ethernet.
HP DesignJet Printers Security Settings Features: Print at high speed over gigabit networks • Quickly connect to shared printers and MFPs throughout your office, over a gigabit network. • Maintain rigorous standards through IPv6 network features: more IP addresses than IPv4 and IPsec security. • Help reduce administration and operation costs with off-the-shelf functionality and backward compatibility. See http://www8.hp.com/emea_africa/en/products/print-servers/product-detail.
HP DesignJet Printers Security Settings Control Panel Access The DesignJet and PageWide technologies allow the printer administrator to lock some features in the control panel of the device. Currently, there are two modes of control access “Control Panel Access Lock” and “Access Control”, depending on the model. To use these features, it is compulsory to define an administrator account and password.
HP DesignJet Printers Security Settings The following table shows the features enabled or disabled for each lock level: Lock level Functionality locked when the Lock level is set 0 – Unlock 1 – Minimum Lock Resets, CIP config, Security, Service Menu 1 2 – Moderate Lock Resets, CIP config, Security config Connectivity, AFU, IDS workflows, System info, Job Queue 3 – Intermediate Lock Resets, CIP config, Security Connectivity config, AFU, IDS workflows, System info, Job Queue Media mgmt.
HP DesignJet Printers Security Settings Settings App Inks Entry Access 3 - Intermediate Paper App Access Paper App Load Media Paper App Unload Media Paper App Change Paper Type Paper Widget – Access to Paper App Settings App Paper Entry Access Printer Information App Access Printer Information App AFU Access Job Queue App Access Pause printing Cancel printing Settings App Calibration Info Entry Access 4 - Maximum 3 - Intermediate 3 - Intermediate 3 - Intermediate 4 - Maximum 4 - Maximum 4 - Maximum 2 -
HP DesignJet Printers 2.2.1.2 Security Settings Access Control The Access Control page is placed in the Setup tab, in the subsection called Access Control. This function allows you to manage at least three roles of use (depending on the firmware version), defining which applications are available for each of them. The Control Panel Access Lock (Setup > Security) should be set to unlocked (see 3.5.1. Control Panel Access Lock).
HP DesignJet Printers Security Settings Figure 2 - Sign-in methods b. Device user accounts In this section, there are four actions available: • New: to add a new user account. • Edit: to edit the selected user account. • Delete: to delete the selected user account. • Delete all: to delete all the user accounts. Figure 3 - Empty user accounts list To add a new user: • Click the New button; a section is expanded. It is required to fill in the name and password fields.
HP DesignJet Printers Security Settings c. Sign-in and permissions policies You can change the permissions for the roles guest and user. Select the permissions and click Apply. Figure 6 - Defining permissions Note: Users have at least the Guest permission. Note: Any app that forces the user to log in will cause the Guest column to be disabled. Front Panel log in When the user clicks on any blocked function for the first time, a window appears. The user must enter in his/her password.
HP DesignJet Printers • Security Settings Certificate Authority certificate You can install and manage a CA certificates in the printer. The CA certificate is used to validate the identity of the network servers you may connect to, such as SSL or LDAP servers secured with SSL. Embedded Web Server (EWS) access control The Embedded Web Server is a powerful tool which enables direct management of devices such as the HP LaserJet or the HP DesignJet printers.
HP DesignJet Printers 2.2.1.4 Security Settings Administrator password Access control is enabled by setting the Admin account password, i.e. specifying a password for the user account at admin level. You must then provide the admin password to perform any of the following restricted operations: • Cancel, delete or preview a job in the job queue. • Delete a stored job. • Clear accounting information and configure cost assignment, in some models. • Change printer settings on the Device Setup page.
HP DesignJet Printers Security Settings 18
HP DesignJet Printers Security Settings If there is no administrator account, then the restricted operations can be accessed without a password. 2.2.1.5 Guest password Once the administrator user account has been set, the administrator can also set up a guest user account by specifying a password for the guest.
HP DesignJet Printers Security Settings • These limitations do not apply to printers without touchscreen front panels, as the password can be set using EWS. • Some printer drivers rely on the EWS for creating the preview. In cases where an administrator password is set, the administrator password will be required to access job preview. USB drive control All printers allow you to control the USB use, in two ways: • USB drive: enable or disable the use of the USB to print or scan.
HP DesignJet Printers Security Settings Jetdirect Security Wizard (HP T9x0-T15x0-T25x0-T3500-PageWide XL) The HP Jetdirect Security Configuration Wizard enables you to configure security settings for HP Jetdirect print server management. There are 3 levels of Network Security that can be set: Basic Configure an admin password that is shared on other tools such as Telnet and SNMPv1/v2. Enhanced Disable unsecure management protocols (FTP, Telnet, RCFG, SNMP v1/v2c). Enable SNMPv3.
HP DesignJet Printers 2.3 Security Settings Data security: encrypted communications IPSec A Firewall or IP Security (IPsec) policy enables you to control traffic to or from the device by using network-layer protocols. Either a firewall or IPsec/firewall pages will appear, depending on whether IPsec is supported by the print server and device. If IPsec is not supported, firewall pages will be displayed and a firewall policy can be configured.
HP DesignJet Printers Security Settings regardless of ACL entries. This allows hosts to access the device when proxy servers or Network Address Translators (NATs) are used. However, unfiltered access by HTTP hosts may be disabled by clearing the Check ACL for HTTP checkbox. Host systems that have access are specified by their IP host or network address.
HP DesignJet Printers • Go to the printer’s front panel, • Select the Setup menu. • Select Job management setup. Security Settings For further information, refer to the printer’s user manual, as the actual menu options may differ for a specific printer. The following is an example of how to change the Secure File Erase setting for the HP DesignJet T1100 printer.
HP DesignJet Printers • Security Settings Printer Front Panel access: Once you have entered the Service Menu with the help of an HP Support representative, you can perform the Secure Disk Erase using the same 3 options that you have in Web Jetadmin. Note that the name of the feature in the front panel is Disk Wipe DoD 5220.220M, and that the three options are called Insecure Mode, 1-pass mode and 5-pass mode.
HP DesignJet Printers Security Settings Scan to network (HP DesignJet T2500, T2530, T3500 eMFP Series) A scanned image may be saved on a USB flash drive or in a network folder. The USB flash drive option requires no preparation, but the network folder option will not work until it has been set up in the following way. 1. Create a folder on a computer that the scanner can access through the network. 2. Create a user account on the same computer for the printer (scanner user). 3.
HP DesignJet Printers Security Settings 4. Create a share name for the folder. Note: It is important to complete the above steps before starting the remaining steps below. 5. In the printer's Embedded Web Server, select the Setup tab and then Scan to network. 6. On the Scan to network page, click Add folder details, and fill in the various fields. • The Server name should contain the network name of the remote computer. This remote computer must be connected in the local network to the printer.
HP DesignJet Printers Security Settings 5. Check the Share this folder box. 6. You need to ensure that the scanner user has full read/write control over the shared folder. To do this, click Permissions and grant Full Control to the user (or to any suitable group that includes that user). 7. If there is a Security tab in the Properties window for your folder, then you must also grant the same user Full Control over the folder in the Security tab. Only some file systems such as NTFS require this.
HP DesignJet Printers Security Settings The scanner user can now access the folder and write files to it. Next, you must configure the printer to send scans to the folder. 8. In the Home screen of the printer's Embedded Web Server, select the Scan to network tab. 9. On the Scan to Network page, click Add folder details: If the printer has already been configured for scanning to the network and you now want to use a different shared folder, click Modify.
HP DesignJet Printers Security Settings name and password of the scanner user that you have already created on the remote computer. Leave the user domain field empty unless the user is a member of a Windows domain. If the user is only a local user of the remote computer, leave the field empty. You can use the host name (instead of the IP address) in the server name field only if the shared folder is on a Windows computer in the same local network.
HP DesignJet Printers Security Settings 4. Make sure the scanner user has Read & Write access to the folder. 5. Click Options. 6. Check the Share files and folder using SMB box, and make sure that the scanner user is checked in the On column. 7. Click Done. You will now see file sharing enabled and Windows sharing: On.
HP DesignJet Printers Security Settings The scanner user can now access the folder and write files to it. Next, you must configure the printer to send scans to the folder. 8. From the Home screen of the printer's Embedded Web Server, select the Setup tab and then Scan to network. 9. On the Scan to network page, click Add folder details. If the printer has already been configured for scanning to the network and you now want to use a different shared folder, click Modify.
HP DesignJet Printers 2.4.1.1 Security Settings Troubleshooting scan to network connectivity issues If you are unable set the Scan to network, try the following: • Check that you have filled in each field correctly. • Check that the printer is connected to the network. • Check that the folder is shared. • Check that you can put files into the same folder from a different computer on the network, using the printer's logon credentials.
HP DesignJet Printers Security Settings • Protocol may be FTP or CIFS (Windows). • Folder type may be public or private. The folder type is displayed in both the Embedded Web Server and the front panel with an icon. When you select a private folder, you must enter a password in the front panel. • Alias name is displayed in the front panel when you are choosing the scan destination. It may be different from the network or FTP folder name. • Set this network destination as a default.
HP DesignJet Printers Security Settings You can check at any later time that the shared folder remains accessible by clicking Verify in the Embedded Web Server. A correctly configured shared folder can become inaccessible if the user’s password is changed, or if the shared folder is moved or deleted. Exclude personal info from accounting You can enable or disable the option for the printer to send an e-mail containing accounting information.
HP DesignJet Printers 2.5 Security Settings Document security Job storage and PIN printing Job storage allows jobs to be stored and then printed when required, it also provides features for setting print jobs as “private”, with a personal identification number (PIN). To access job storage features, open the printer’s Properties, and then select Printing Preferences.
HP DesignJet Printers Security Settings 37
HP DesignJet Printers Security Settings This functionality is disabled by default. In PageWide XL, the route to enable it is Settings > Connectivity > HP Connected > HP ePrint connectivity. In the same window, you can set the behavior of the printer for this kind of job. If you want to control the job sent with this path, you can use Hold the job and block the control panel with a password. You can also configure who can use this path (which e-mail addresses are allowed or forbidden).
HP DesignJet Printers Security Settings How to use the LPR command in Windows. • Turn on the windows feature a. Go to Control Panel > Programs > Programs and Features > Turn Windows features on or off. b. Select the LPR Port Monitor from the list. • Open a command window (search cmd in the Start menu). • Use the command: Lpr -S IP –P printer File name a. IP Format: xx.xxx.xx.xxx b. Printer: any name you want to use. c. File name: including complete route.
HP DesignJet Printers Security Settings How to use FTP combined with DMS server Server Operator’s PC is running a printing interface with DMS. The PC and the printer need to be in the same intranet. List all the jobs from DMS that need to be printed. When the operator clicks print, and selects the printer, a request is sent to the server. Once the request reaches the server, the second PC (PC2) will download the printing file from the server and save it locally.
HP DesignJet Printers Security Settings PJL Name Description Accepted values Example STRINGCODESET Indicates the string's codification type used for the "@PJL JOB NAME, @PJL SET JOBNAME and @PJL SET USERNAME" commands (therefore, it comes before them). UTF8 UTF8URL ROMAN8 KAN8 @PJL SET STRINGCODESET=UTF8 JOBNAME (also set via @PJL JOB NAME) Sets the localized version of the job name. It requires specification of the string's codification type.
HP DesignJet Printers MEDIADESTINATION Security Settings @PJL SET MEDIADESTINATION=BIN FOLDINGMETHODTYPE Specifies the folding method type. DEFAULT BIN STACKER FOLDER ACCESSORY_STACKER USER STANDARD FOLDINGMETHODENUM Specifies the folding method value: 0: Do not fold 1: User Defined 2: Folder Selected 3: Stack 4 - 255: Reserved, Do Not Use 256 - 65535: Use freely Specifies the folder output bin number for the job.
HP DesignJet Printers Security Settings [ESC]%-12345X@PJL JOB @PJL SET STRINGCODESET=UTF8 @PJL JOBNAME = “My Job" @PJL USERNAME = “User_01" @PJL MARGINLAYOUT = “OVERSIZE" @PJL MEDIASOURCE = “ROLL6" @PJL ENTER LANGUAGE = PDF %PDF-1.
HP DesignJet Printers Security Settings 4.
HP DesignJet Printers NTLM Security Settings N/A N/A N/A N/A N/A N/A N/A Data security - Protected data in storage External HDD Yes Yes N/A N/A N/A N/A N/A Removable HDD N/A N/A Yes N/A N/A Yes Yes Self-Encrypted HDD N/A N/A N/A N/A N/A N/A Yes Secure file erase WJA WJA WJA/FP WJA WJA (Z2100 only) WJA/FP EWS/FP/WJA Secure disk erase WJA/FP WJA/FP WJA/FP WJA/FP N/A WJA/FP EWS/FP/WJA Exclude personal info.
HP DesignJet Printer Series Security Settings TECHNICAL PRINTERS Model T7X00 T3500 T2500/T1500/T920 T2530/T1530/T9 30 T2300/T1300 T790/T795 T120/T520 T730/T830 T830 24 inch T1700 EWS EWS EWS/FP Device security - Device integrity Only SNMPv1 SNMP configurability EWS EWS/FP/WJA EWS/FP/WJA EWS/FP/WJA EWS EWS UEFI Secure Boot N/A Yes N/A Yes N/A N/A N/A N/A N/A Yes Whitelisting N/A N/A N/A N/A N/A N/A N/A N/A N/A Yes Disable firmware update through USB N/A EWS/FP
HP DesignJet Printer Series Security Settings Model T7X00 T3500 T2500/T1500/T920 T2530/T1530/T9 30 T2300/T1300 T790/T795 T120/T520 T730/T830 T830 24 inch T1700 Wizard setup configuration N/A EWS EWS EWS N/A N/A N/A N/A N/A EWS/WJA CA/JD Certificates EWS/WJA EWS/WJA EWS/WJA EWS/WJA EWS/WJA EWS N/A EWS EWS EWS/WJA Data security – Encrypted communications IPSec EWS EWS/FP/WJA EWS/FP/WJA EWS/FP/WJA EWS/WJA EWS/WJA N/A N/A N/A EWS/WJA TLS/SSL SSL1.
HP DesignJet Printer Series Security Settings Model T7X00 T3500 T2500/T1500/T920 T2530/T1530/T9 30 T2300/T1300 T790/T795 T120/T520 T730/T830 T830 24 inch T1700 Exclude personal info.
HP DesignJet Printer Series Security Settings OLDER TECHNICAL AND GRAPHIC PRINTERS Model T1200 T770 Z3100 Z3100ps 4020/4520 T1100/T1120 Z6100 T620 Device security - Device integrity SNMPv3 EWS EWS EWS + Jetdirect EWS + Jetdirect EWS + Jetdirect EWS + Jetdirect EWS + Jetdirect EWS + Jetdirect UEFI Secure Boot N/A N/A N/A N/A N/A N/A N/A N/A Whitelisting N/A N/A N/A N/A N/A N/A N/A N/A Disable Firmware N/A N/A N/A N/A N/A N/A N/A N/A update through USB Automatic
HP DesignJet Printer Series Security Settings Model T1200 T770 Z3100 Z3100ps 4020/4520 T1100/T1120 Z6100 T620 Secure file erase WJA WJA WJA WJA WJA WJA WJA N/A Secure disk erase WJA/FP WJA/FP (HD) N/A FP FP WJA/FP WJA/FP WJA/FP Exclude personal info.
HP DesignJet Printer Series Security Settings Model HP PageWide XL 8000/5000/4600/4500/4100/4000/3900 Printer Job Storage Mode and PIN printing Yes Wizard setup configuration Yes CA/JD Certificates EWS/WJA Data security - Encrypted communications IPSec EWS/WJA TLS/SSL Yes Encrypt web comms EWS/WJA FIPS-140 Yes, only using SED Data security – Authentication 802.
HP DesignJet Printer Series Security Settings 5. Large Format scanners: security features summary Multi-function printers (MFPs) consist of two main parts: the printer and the scanner. For the scanner, refer to the table below.
HP DesignJet Printer Series Security Settings 6. Ports used in HP printers Below you can find a list with the ports used by HP printers. Some connection problems are caused by a firewall blocking the needed port. They are ordered by protocol or function. Note: Ports may change as HP products develop and evolve; these changes will be communicated to the official channel and the documentation will be updated.
HP DesignJet Printer Series Security Settings Protocol/Function Port In/ Out Purpose and consequences of disabling it TFTP (Trivial File Transfer Protocol) configuration file UDP 69 In/Out HP Jetdirect XML services TCP 80, 8080 In This port is used for configuration and upgrading of the Jetdirect firmware. Only in the case that the Jetdirect card is used: configuration through this protocol cannot be used. Rarely used.
HP DesignJet Printer Series Protocol/Function Security Settings Port In/ Out Purpose and consequences of disabling it LDAP TCP 389 Out SLP (Service Location Protocol) UDP 427 In/Out EWS, Web Services (Fibonacci, RIO, ePrint) TCP 443 In/Out LDAP client. Allows Large Format devices to perform address lookups and authentication. Host and Port can be configured. Devices use SLP for advertising their services.
HP DesignJet Printer Series Protocol/Function Security Settings Port In/ Out Purpose and consequences of disabling it Configuration LDAP over TLS TCP 636 Out Certificate management service WS-Discovery TCP 829 In LDAP over TLS client. Allows Large Format devices to perform address lookups and authentication. Host and Port can be configured. Used for certificate management. If disabled, the HP WJA fleet management tool might not work.
HP DesignJet Printer Series Protocol/Function Security Settings Port In/ Out Purpose and consequences of disabling it Configuration SDK (Paper management) TCP 8085 In Some HP software utilities and HP SDK for RIPs may perform web service requests to this port to retrieve and configure paper preset information.
HP DesignJet Printer Series Security Settings Appendix 1 – Web Jetadmin HP Web Jetadmin is a printer management solution capable of performing different functions on a fleet of devices. This includes device configuration, alerts subscription, and printer status information. The tool allows the user to set up a configuration template and send it to a list of printers.
HP DesignJet Printer Series Security Settings MC DJA 1.
HP DesignJet Printer Series Security Settings Appendix 2 – JetAdvantage Security Manager The HP JetAdvantage Security Manager is a fleet security management tool, which allows the user to apply a security policy across a fleet of devices, monitor the security of these devices, and secure new devices as soon as they are added to the network. This tool can generate security reports to monitor compliance with user defined security policies.
HP DesignJet Printer Series File Erase Mode Device Discovery Service Location Protocol (SLP) IPv4 Multicast LLMNR WS-Discovery Bonjour Network Security Internet Protocol Security (IPsec)/Firewall FIPS 140 Compliance Library Windows Verify Certificate for IPP/IPPS Pull Printing Enable WINS Port WINS Registration Access Control Allow Web Access Access control List Network Services Novell Remote Config (RCFG) Telnet TFTP Configuration File HP Jetdirect XML Services Certificate Management Service FTP Firmware
HP DesignJet Printer Series Security Settings Appendix 3 - Security Manager The HP ProtectTools Security Manager can be configured to prevent unauthorized access using Smart Cards, TPM Embedded security chips, USB tokens and other security technologies. HP ProtectTools Security Manager is completely customizable, which gives business customers the flexibility to choose the level of security that best meets their needs.
HP DesignJet Printer Series Security Settings Note: To obtain an update for your solution or to renew your license, send an email to e-sw-opssupport@hp.com with “Software Updates Portal” in the Subject line and include the name of the solution in the body of the email.
HP DesignJet Printer Series Security Settings Appendix 4 - Netgard overview Introduction API’s Netgard™ MFD product is a network access control device that is used for authenticating users who use multifunction devices (MFDs) and peripherals to access the network. Through the use of a Common Access Card (CAC) or Personal Identification Verification (PIV), this device prevents users from performing ‘Scan’, ‘Copy’ and ‘Print from USB’ operations without authenticating.
HP DesignJet Printer Series Security Settings 3. Select the IPV4 SETTINGS option and set the Config Method as DHCP. 4.
HP DesignJet Printer Series Security Settings 5. Finally, select OK to confirm the settings. EWS settings 1. Access to the EWS through this IP @: 15.196.22.211 2. Go to Setup > Security and apply the following configuration: 3. Go to Networking > Authorization and set a password for the ‘Administrator’ account.
HP DesignJet Printer Series Security Settings Netgard MFD configuration Basic configuration of Netgard MFD for HP printers Netgard MFD user interface access 1. Connect your computer to the MGMT port of the Netgard MFD and assign to your computer an IP address in the same subnet than the MGMT port. It is recommended to use the following details: • IP: 192.168.20.20 • Subnet: 255.255.255.0 • Gateway: 192.168.20.1 2. Open a Firefox window and enter the default address (https://192.168.20.1.
HP DesignJet Printer Series Security Settings 3. When the user is logged in, select the Network tab. For HP printers the user has to apply some changes in the default Netgard MFD configuration: Netgard IP Address: 192.168.245.1 Subnet Mask: 255.255.255.0 Copier IP Address: 192.168.245.30 4. Go to Advance Configuration and check that the DHCP server is enabled.
HP DesignJet Printer Series Security Settings Set the following fields: Domain Name: bchp.com Primary DNS Server: This information is specified under the Network > Configuration section. Secondary DNS Server: This information is specified under the Network > Configuration section. 5. Go to Scan/Prt Setup > Scan to Network.
HP DesignJet Printer Series Security Settings Apply the following settings: Scan Setup Enabled/disabled Port Scan to Email Enabled Depending on the server: SMTP 25 or 465 70
HP DesignJet Printer Series Security Settings IMAP 143 or 993 Scan to FTP Enabled 21 Scan to File Server Enabled 139 Scan to Home Disabled --- The Firewall has to be enabled while scanning (we have to make sure that the “No” option is selected at the Firewall section). Moreover, the Integration with Third Party Document Management Application section must be set as “No”. 6. Go to Scan/Prt Setup > CAC Settings.
HP DesignJet Printer Series Security Settings Change the Port Number field to “8081”. Then, the address to access to Netgard MFD Configuration will be “https://192.168.20.1:8081”.
HP DesignJet Printer Series Security Settings Security Glossary HP DesignJet & PageWide XL printers This glossary lists words and features you might hear or read in a security document. Please note that the features and protocols listed are not all integrated into the HP DesignJet or PageWide XL printers.
HP DesignJet Printer Series Security Settings Device protection related BIOS BIOS The BIOS (basic input/output system) is the program used to get the printer system started after it is turned on. HP Sure Start It validates the integrity of the BIOS at every boot cycle. If a compromised version is discovered, the device reboots using a safe, “golden copy” of the BIOS. UEFI Secure Boot Method to prevent the loading of unauthorized operating systems during the system startup.
HP DesignJet Printer Series Security Settings Remote firmware upgrade This service allows an administrator to configure the printer to check for availability of new firmware versions and prepare them to be installed. For the administration of large networks with several printers, HP recommends using the HP Web Jetadmin software to upgrade the printer or multi-function printer firmware.
HP DesignJet Printer Series Security Settings Data protection related AUTHENTICATION 802.1X Protocol that the printer uses for its authentication in some networks. Access control list It allows the administrator to specify which IPv4 addresses on the network are allowed access to the device. Authentication & authorization workflows with card readers Users authenticate themselves using an ID card and a card reader before they can scan/copy/print.
HP DesignJet Printer Series Security Settings domain names, exactly like Web sites, and any LDAP-compliant client – such as Windows, Mac, or Unix – can gain access. Kerberos Authentication protocol that enables two devices in a network to demonstrate their identities in a secure way. Kerberos is the authentication service in Windows networks. NTLMv2 The authentication protocol used, among other cases, to access to SMB servers.
HP DesignJet Printer Series Security Settings Secure sanitizing erase It conforms to the U.S. Department of Defense 5220-22.M specification for deleting magnetically stored data. Secure sanitizing erase uses multiple data overwrites to eliminate trace magnetic data and also prevents subsequent analysis of the hard disk drive’s physical platters for the retrieval of data. Secure storage A solution to storage critical information encrypting it (using hardware such as TPM or a virtual TPM).
HP DesignJet Printer Series Security Settings Document protection related On-demand document retrieval It allows print jobs to be saved electronically in the device, or on an external server, until the authorized user is ready to print them. The user provides a simple PIN code, or uses an authentication method supported for other HP multi-function printers in walk-up operations, to release the print job. Job held timeout This feature is part of the Job retention feature.
HP DesignJet Printer Series Security Settings Authentication Manager (LJ feature) This feature enables administrators to secure Device functions by requiring users to log in with a specific log in method for each function. For example, users may be required to log in with an Access Code or PIN to make copies, yet be required to log in with a username and password to send e-mails.
