Embedded Web Password for HP-Imaging10

HP Imaging and Printing Security Best Practices

Configuring Security for Multiple LaserJet MFPs and ColorLaserJet MFPs Version 5.0 for HP Web Jetadmin 10

HP LaserJet and Color LaserJet MFP Security Checklist i

Table of Contents

Table of Contents...................................................................................................iChapter 1: Introduction......................................................................................... 1

Cautions........................................................................................................................2Follow the Checklist in Order........................................................................................2Understand the Ramifications........................................................................................2Continue to be Vigilant................................................................................................2MFP Environment............................................................................................................3 Assumptions...................................................................................................................3Solutions covered ...........................................................................................................4Organization.................................................................................................................4

Chapter 2: Threat Model....................................................................................... 5

Spoofing Identity ............................................................................................................5Tampering with Data.......................................................................................................6Repudiation ...................................................................................................................6Information Disclosure .....................................................................................................7Denial of Service............................................................................................................7Elevation of Privilege.......................................................................................................8

Chapter 3: Basic Security for Multiple MFPs............................................................. 9

Notes on the Process of Configuration...............................................................................9Using Web Jetadmin and MFP Passwords......................................................................9Getting started configuring MFP Security Settings..............................................................11Setting up HP Web Jetadmin......................................................................................11Configuring HP Secure Hard Disk ...............................................................................13Configuring SNMPv3................................................................................................16Configuring MFP Device Settings ....................................................................................22I/O Timeout to End Print Job.......................................................................................22 Job Hold Timeout......................................................................................................22 Job Retention............................................................................................................23 Apply the Changes ...................................................................................................23Configuring MFP Network Settings..................................................................................25Enable Features........................................................................................................25Encrypt all Web Communication.................................................................................29Encryption Strength...................................................................................................30Error Handling .........................................................................................................31IPX RCFG Support.....................................................................................................31 Job Timeout..............................................................................................................32Privacy Setting..........................................................................................................32Protocol Stacks.........................................................................................................33 Web Services Print....................................................................................................35 Apply your Changes .................................................................................................36Configuring MFP Security Settings...................................................................................37Bootloader Password.................................................................................................37Color Access Control.................................................................................................38Control Panel Access.................................................................................................38Embedded Web Password.........................................................................................39PJL Password............................................................................................................40

HP LaserJet and Color LaserJet MFP Security Checklist ii

Printer Firmware Update............................................................................................41Secure Disk Encryption Mode.....................................................................................41 Apply the Changes ...................................................................................................42Configuring MFP Fax Settings.........................................................................................44Configuring Fax Printing............................................................................................44 Apply the Changes ...................................................................................................45 Additional Fax Configuration......................................................................................46Configuring MFP Embedded Web Server Settings.............................................................48Embedded Web Server Configuration Options .............................................................48 Apply the Changes ...................................................................................................50Configuring MFP File System Settings ..............................................................................51File System External Access........................................................................................51File System Password ................................................................................................52Secure File Erase Mode.............................................................................................53 Apply the Changes ...................................................................................................54Configuring MFP Digital Sending Settings ........................................................................56 Auto Reset Send Settings............................................................................................56Default From Address................................................................................................57 Apply the Changes ...................................................................................................57Configuring Final Settings..............................................................................................58Disabling Direct Ports ................................................................................................58Disabling EWS Config...............................................................................................59

Chapter 4: Advanced Security for Multiple MFPs .................................................... 61

Access Control List (ACL)............................................................................................61 Authentication Manager ............................................................................................63Group 1 PIN and Group 2 PIN...................................................................................64LDAP.......................................................................................................................66User Pin Authentication..............................................................................................67

Chapter 5: Settings List....................................................................................... 68

Recommended Settings..................................................................................................68Initial settings ...........................................................................................................68Device Page Settings.................................................................................................68Fax Page Options.....................................................................................................68Fax Page Options.....................................................................................................70Digital Sending Page Options.....................................................................................70Embedded Web Server Page Options .........................................................................70File System Page Options...........................................................................................70Network Page Options..............................................................................................68Security Page Options...............................................................................................69Final configurations...................................................................................................70

Chapter 6: Default Settings:................................................................................. 71Chapter 7: Ramifications..................................................................................... 75

Device Page Settings.................................................................................................76Fax Page Options.....................................................................................................76 Additional Fax Configuration......................................................................................81Digital Sending Page Options.....................................................................................81Embedded Web Server Page Options .........................................................................81File System Page Options...........................................................................................82