Security Features
Page 3
... hard disk ...23 Secure File Erase (SFE) ...23 Secure Disk Erase (SDE)...24 Scan to network (HP DesignJet T2500, T2530, T3500 eMFP Series 26 Scan to FTP folder ...33 Exclude personal info from DOS command ...39 How to use FTP combined with...Security Manager ...62 Appendix 4 - JetAdvantage Security Manager...60 Policy compatibility features (HP DesignJet T1700/Z6/Z9+ Printer Series 60 Appendix 3 - Ports used in Windows...39 How to use FTP in HP printers...53 Appendix 1 - Large Format printers: security features summary 44 5. Advanced workflows...38 3.1 Printing using LPR protocol...
... hard disk ...23 Secure File Erase (SFE) ...23 Secure Disk Erase (SDE)...24 Scan to network (HP DesignJet T2500, T2530, T3500 eMFP Series 26 Scan to FTP folder ...33 Exclude personal info from DOS command ...39 How to use FTP combined with...Security Manager ...62 Appendix 4 - JetAdvantage Security Manager...60 Policy compatibility features (HP DesignJet T1700/Z6/Z9+ Printer Series 60 Appendix 3 - Ports used in Windows...39 How to use FTP in HP printers...53 Appendix 1 - Large Format printers: security features summary 44 5. Advanced workflows...38 3.1 Printing using LPR protocol...
Security Features
Page 5
... firmware and downloads it. The firmware can be launched from EWS or printer control panel. HP DesignJet Printers Security Settings 1. The security features described in environments where network, data, and access control security are not implemented. 2. Please make the HP DesignJet and PageWide XL printer series particularly well suited for deployment in this document, you the highest security...
... firmware and downloads it. The firmware can be launched from EWS or printer control panel. HP DesignJet Printers Security Settings 1. The security features described in environments where network, data, and access control security are not implemented. 2. Please make the HP DesignJet and PageWide XL printer series particularly well suited for deployment in this document, you the highest security...
Security Features
Page 8
... high-speed wired functionality, easy set-up, full manageability, backward compatibility and enterprise-class security features. HP DesignJet Printers Security Settings Disable connectivity interfaces Depending on the printer series, there are some products, you might want to the printer through these interfaces. Ideal for enterprise and workgroup SMBs requiring full-featured, secure, and backward-compatible print...
... high-speed wired functionality, easy set-up, full manageability, backward compatibility and enterprise-class security features. HP DesignJet Printers Security Settings Disable connectivity interfaces Depending on the printer series, there are some products, you might want to the printer through these interfaces. Ideal for enterprise and workgroup SMBs requiring full-featured, secure, and backward-compatible print...
Security Features
Page 46
.../WJA EWS/WJA EWS/FP N/A FP FP FP N/A SMB 2/3 N/A Yes Yes (Only T2500) Yes (Only T2530) No No No EWS multilevel Printer access control Disable USB drive EWS EWS/FP/WJA EWS/FP/WJA N/A EWS/FP/WJA EWS/FP/WJA N/A EWS/FP/WJA EWS/FP/WJA EWS.../WJA EWS EWS Yes N/A N/A N/A N/A N/A Only SNMPv1 EWS N/A N/A EWS/FP EWS/FP EWS/FP N/A Yes Yes Yes Yes Device security - HP DesignJet Printer Series Security Settings TECHNICAL PRINTERS Model T7X00 T3500 T2500/T1500/T920 T2530/T1530/T9 T2300/T1300 30 T790/T795 T120/T520 SNMP configurability EWS EWS/FP/WJA EWS/FP...
.../WJA EWS/WJA EWS/FP N/A FP FP FP N/A SMB 2/3 N/A Yes Yes (Only T2500) Yes (Only T2530) No No No EWS multilevel Printer access control Disable USB drive EWS EWS/FP/WJA EWS/FP/WJA N/A EWS/FP/WJA EWS/FP/WJA N/A EWS/FP/WJA EWS/FP/WJA EWS.../WJA EWS EWS Yes N/A N/A N/A N/A N/A Only SNMPv1 EWS N/A N/A EWS/FP EWS/FP EWS/FP N/A Yes Yes Yes Yes Device security - HP DesignJet Printer Series Security Settings TECHNICAL PRINTERS Model T7X00 T3500 T2500/T1500/T920 T2530/T1530/T9 T2300/T1300 30 T790/T795 T120/T520 SNMP configurability EWS EWS/FP/WJA EWS/FP...
Security Features
Page 47
Authentications Yes Yes (Only with Yes (Only with JD640) Yes Yes EWS N/A N/A EWS/WJA EWS/WJA EWS Data security - HP DesignJet Printer Series Security Settings Model T7X00 T3500 T2500/T1500/T920 T2530/T1530/T9 T2300/T1300 30 T790/T795 Wizard setup configuration CA/JD Certificates N/A EWS/WJA EWS ...
Authentications Yes Yes (Only with Yes (Only with JD640) Yes Yes EWS N/A N/A EWS/WJA EWS/WJA EWS Data security - HP DesignJet Printer Series Security Settings Model T7X00 T3500 T2500/T1500/T920 T2530/T1530/T9 T2300/T1300 30 T790/T795 Wizard setup configuration CA/JD Certificates N/A EWS/WJA EWS ...
Security Features
Page 48
... EWS EWS EWS/FP/WJA EWS/FP/WJA EWS/FP/WJA EWS/FP EWS/FP EWS/FP EWS/FP EWS/FP FP FP Document security - HP DesignJet Printer Series Model Exclude personal info.
... EWS EWS EWS/FP/WJA EWS/FP/WJA EWS/FP/WJA EWS/FP EWS/FP EWS/FP EWS/FP EWS/FP FP FP Document security - HP DesignJet Printer Series Model Exclude personal info.
Security Features
Page 49
HP DesignJet Printer Series Security Settings OLDER TECHNICAL AND GRAPHIC PRINTERS Model SNMPv3 UEFI Secure Boot Whitelisting Disable Firmware update through USB Automatic Firmware Upgrade (AFU) Disable protocols Disable interfaces Control panel lock EWS multilevel Printer access control Disable USB drive Wizard setup configuration CA/JD Certificates IPSec T1200 EWS N/A N/A N/A No EWS/WJA EWS EWS/WJA EWS...
HP DesignJet Printer Series Security Settings OLDER TECHNICAL AND GRAPHIC PRINTERS Model SNMPv3 UEFI Secure Boot Whitelisting Disable Firmware update through USB Automatic Firmware Upgrade (AFU) Disable protocols Disable interfaces Control panel lock EWS multilevel Printer access control Disable USB drive Wizard setup configuration CA/JD Certificates IPSec T1200 EWS N/A N/A N/A No EWS/WJA EWS EWS/WJA EWS...
Security Features
Page 50
... WJA/FP N/A EWS EWS EWS N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A Document security - EWS from Front Panel (FP) No SMB2/3 Yes EWS multilevel Yes (one level) Printer access control EWS Disable USB drive FP/EWS/WJA 50 HP DesignJet Printer Series Security Settings Model Secure file erase Secure disk erase T1200 WJA WJA/FP Exclude personal info. PIN printing N/A N/A N/A N/A N/A N/A T620 N/A WJA...
... WJA/FP N/A EWS EWS EWS N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A Document security - EWS from Front Panel (FP) No SMB2/3 Yes EWS multilevel Yes (one level) Printer access control EWS Disable USB drive FP/EWS/WJA 50 HP DesignJet Printer Series Security Settings Model Secure file erase Secure disk erase T1200 WJA WJA/FP Exclude personal info. PIN printing N/A N/A N/A N/A N/A N/A T620 N/A WJA...
Security Features
Page 51
HP DesignJet Printer Series Model HP PageWide XL 8000/5000/4600/4500/4100/4000/3900 Printer Job Storage Mode and PIN printing Yes Wizard setup configuration Yes CA/JD Certificates EWS/WJA Data security - PIN printing Job Storage Mode and PIN printing Yes Security Settings Model HP PageWide XL 8000/5000/4500/4000 Printer HP... PageWide XL 5000/4500/4000 Multifunction Printer HP PageWide XL 4500 Printer and Multifunction Printer TAA Compliant (US Only) Data security - ...
HP DesignJet Printer Series Model HP PageWide XL 8000/5000/4600/4500/4100/4000/3900 Printer Job Storage Mode and PIN printing Yes Wizard setup configuration Yes CA/JD Certificates EWS/WJA Data security - PIN printing Job Storage Mode and PIN printing Yes Security Settings Model HP PageWide XL 8000/5000/4500/4000 Printer HP... PageWide XL 5000/4500/4000 Multifunction Printer HP PageWide XL 4500 Printer and Multifunction Printer TAA Compliant (US Only) Data security - ...
Security Features
Page 52
... Disable FTP & Yes Web Access Yes Yes Access to the table below. Read only) (FTP & EWS - HP DesignJet Printer Series Security Settings 5. Large Format scanners: security features summary Multi-function printers (MFPs) consist of two main parts: the printer and the scanner. scanner through Read only) network Security patches Through scanner SW update N/A Yes Yes Yes...
... Disable FTP & Yes Web Access Yes Yes Access to the table below. Read only) (FTP & EWS - HP DesignJet Printer Series Security Settings 5. Large Format scanners: security features summary Multi-function printers (MFPs) consist of two main parts: the printer and the scanner. scanner through Read only) network Security patches Through scanner SW update N/A Yes Yes Yes...
Security Features
Page 53
... have no other configuration method, or it Printing. Mostly used by a firewall blocking the needed port. DHCPv4 and BOOTP. They are caused by HP printers. Protocol/Function FTP Printing Scan to the official channel and the documentation will be selected instead. The port is no impact for remote configuration of...FTP Printing [EWS] > Setup > Scan to network folder. Resolving device name. It depends on connection tracking (firewall feature). The device will not be updated. Email. HP DesignJet Printer Series 6. Allows devices to introduce itself in Windows.
... have no other configuration method, or it Printing. Mostly used by a firewall blocking the needed port. DHCPv4 and BOOTP. They are caused by HP printers. Protocol/Function FTP Printing Scan to the official channel and the documentation will be selected instead. The port is no impact for remote configuration of...FTP Printing [EWS] > Setup > Scan to network folder. Resolving device name. It depends on connection tracking (firewall feature). The device will not be updated. Email. HP DesignJet Printer Series 6. Allows devices to introduce itself in Windows.
Security Features
Page 54
... configured to capture trap information. Protocols > SNMP 54 Used by any SNMP Management utility. If disabled, MFPs will always fail. HP DesignJet Printer Series Protocol/Function Port TFTP (Trivial File Transfer Protocol) configuration file HP Jetdirect XML services UDP 69 TCP 80, 8080 AFU, Connectivity Test TCP 80 Kerberos TCP, UDP 88 NetBIOS, SMB (Scan...
... configured to capture trap information. Protocols > SNMP 54 Used by any SNMP Management utility. If disabled, MFPs will always fail. HP DesignJet Printer Series Protocol/Function Port TFTP (Trivial File Transfer Protocol) configuration file HP Jetdirect XML services UDP 69 TCP 80, 8080 AFU, Connectivity Test TCP 80 Kerberos TCP, UDP 88 NetBIOS, SMB (Scan...
Security Features
Page 55
.... If disabled, it Out Configuration Out In/Out In/Out Out In LDAP client. It can be manually used by end users as legacy technology). HP DesignJet Printer Series Protocol/Function Port LDAP TCP 389 SLP (Service Location Protocol) UDP 427 EWS, Web Services (Fibonacci, RIO, ePrint) TCP 443 Syslog LPD (Line...
.... If disabled, it Out Configuration Out In/Out In/Out Out In LDAP client. It can be manually used by end users as legacy technology). HP DesignJet Printer Series Protocol/Function Port LDAP TCP 389 SLP (Service Location Protocol) UDP 427 EWS, Web Services (Fibonacci, RIO, ePrint) TCP 443 Syslog LPD (Line...
Security Features
Page 56
... disabling it Configuration LDAP over TLS TCP 636 Certificate management service WS-Discovery TCP 829 UDP 3702 Web Services for IP address and name resolution. HP DesignJet Printer Series Protocol/Function Port LDAP over TLS client. Allows Large Format devices to perform address lookups and authentication. Host and Port can be configured.
... disabling it Configuration LDAP over TLS TCP 636 Certificate management service WS-Discovery TCP 829 UDP 3702 Web Services for IP address and name resolution. HP DesignJet Printer Series Protocol/Function Port LDAP over TLS client. Allows Large Format devices to perform address lookups and authentication. Host and Port can be configured.
Security Features
Page 57
...only only 57 Yes Yes In Alternative printing port for HP SDK. If [EWS] > Network > Other disabled, it Configuration DesignJet & DesignJet & PageWide XL PageWide XL SFP MFP SDK (Paper TCP 8085 In Some HP software utilities and HP SDK for RIPs may [Control Panel] > Settings> ... printing port for HP driver and HP SDK. This is one of disabling it will become impossible to print using RIP Settings > 9100 Printing applications based on remote devices in the local network or internet, using port 9100. HP DesignJet Printer Series Security Settings Protocol/Function...
...only only 57 Yes Yes In Alternative printing port for HP SDK. If [EWS] > Network > Other disabled, it Configuration DesignJet & DesignJet & PageWide XL PageWide XL SFP MFP SDK (Paper TCP 8085 In Some HP software utilities and HP SDK for RIPs may [Control Panel] > Settings> ... printing port for HP driver and HP SDK. This is one of disabling it will become impossible to print using RIP Settings > 9100 Printing applications based on remote devices in the local network or internet, using port 9100. HP DesignJet Printer Series Security Settings Protocol/Function...
Security Features
Page 58
... some extra ones. Currently, two versions of devices. HP DesignJet Printer Series Security Settings Appendix 1 - HP Web Jetadmin can be downloaded at the following link: http://www8.hp.com/us/en/solutions/business-solutions/printingsolutions/wja.html Manageability contract for Large Format Printers Since the introduction of HP PageWide XL printers, the list of features supported by role User...
... some extra ones. Currently, two versions of devices. HP DesignJet Printer Series Security Settings Appendix 1 - HP Web Jetadmin can be downloaded at the following link: http://www8.hp.com/us/en/solutions/business-solutions/printingsolutions/wja.html Manageability contract for Large Format Printers Since the introduction of HP PageWide XL printers, the list of features supported by role User...
Security Features
Page 59
HP DesignJet Printer Series MC DJA 1.0 Device identification System Contact System Location Asset Number Company Name Contact Person Device Name Device settings Control Panel Language Printer Wakeup Sleep Delay Time Security settings Color Copy Option Control Panel Access EWS Password Enable Host USB...Name Network Enable Feature SNMP Trap Destination Table TCP Idle Timeout TCP/IP Configuration Method WINS Server DHCPv4FQDNCompliance Error Handling IPP Printer Install Wizard mDNS Service Name Locally Administered Address System Log Server Info Webservice Print TCP\IP Domain Suffix Upload CA ...
HP DesignJet Printer Series MC DJA 1.0 Device identification System Contact System Location Asset Number Company Name Contact Person Device Name Device settings Control Panel Language Printer Wakeup Sleep Delay Time Security settings Color Copy Option Control Panel Access EWS Password Enable Host USB...Name Network Enable Feature SNMP Trap Destination Table TCP Idle Timeout TCP/IP Configuration Method WINS Server DHCPv4FQDNCompliance Error Handling IPP Printer Install Wizard mDNS Service Name Locally Administered Address System Log Server Info Webservice Print TCP\IP Domain Suffix Upload CA ...
Security Features
Page 60
HP DesignJet Printer Series Security Settings Appendix 2 - Policy compatibility features (HP DesignJet T1700/Z6/Z9+ Printer Series) Authentication Authentication Services 802.1x Authentication 802.1x EAP-TLS Certificate Management Identity Certificate CA Certificate Credentials Admin ...defined security policies. This tool can be downloaded at the following link: http://www8.hp.com/us/en/solutions/business-solutions/printingsolutions/security_manager.html Please refer to HP JetAdvantage Security Manager documentation for Latest Jetdirect Firmware External Connections Host USB Plug and Play...
HP DesignJet Printer Series Security Settings Appendix 2 - Policy compatibility features (HP DesignJet T1700/Z6/Z9+ Printer Series) Authentication Authentication Services 802.1x Authentication 802.1x EAP-TLS Certificate Management Identity Certificate CA Certificate Credentials Admin ...defined security policies. This tool can be downloaded at the following link: http://www8.hp.com/us/en/solutions/business-solutions/printingsolutions/security_manager.html Please refer to HP JetAdvantage Security Manager documentation for Latest Jetdirect Firmware External Connections Host USB Plug and Play...
Security Features
Page 61
...) AppleTalk DLC/LLC Novell (IPX/SPX) Security Settings Y Y Y Y Y Y Y N N N N N Y Y N Y N Y Y Y Y Y Y Y Y Y Y N Y Y Y Y Y Y Y Y N N N 61 HP DesignJet Printer Series File Erase Mode Device Discovery Service Location Protocol (SLP) IPv4 Multicast LLMNR WS-Discovery Bonjour Network Security Internet Protocol Security (IPsec)/Firewall FIPS 140 Compliance... Allow Web Access Access control List Network Services Novell Remote Config (RCFG) Telnet TFTP Configuration File HP Jetdirect XML Services Certificate Management Service FTP Firmware Update Web Require HTTPS redirect HTTPS Web Encryption Settings ...
...) AppleTalk DLC/LLC Novell (IPX/SPX) Security Settings Y Y Y Y Y Y Y N N N N N Y Y N Y N Y Y Y Y Y Y Y Y Y Y N Y Y Y Y Y Y Y Y N N N 61 HP DesignJet Printer Series File Erase Mode Device Discovery Service Location Protocol (SLP) IPv4 Multicast LLMNR WS-Discovery Bonjour Network Security Internet Protocol Security (IPsec)/Firewall FIPS 140 Compliance... Allow Web Access Access control List Network Services Novell Remote Config (RCFG) Telnet TFTP Configuration File HP Jetdirect XML Services Certificate Management Service FTP Firmware Update Web Require HTTPS redirect HTTPS Web Encryption Settings ...
Security Features
Page 62
... find further information about it: • User guide: http://h10032.www1.hp.com/ctg/Manual/c03564719 • Installation guide: http://h10032.www1.hp.com/ctg/Manual/c03564723 • Supported printers: http://h10032.www1.hp.com/ctg/Manual/c03601723 • Licensing: http://h10032.www1.hp.com/ctg/Manual/c04677865 62 Plug-in modules: • Smart Card... best meets their needs. Find attached the links where you can grow to choose the level of Business Notebooks and select Business Desktops and Workstations. HP DesignJet Printer Series Security Settings Appendix 3 -
... find further information about it: • User guide: http://h10032.www1.hp.com/ctg/Manual/c03564719 • Installation guide: http://h10032.www1.hp.com/ctg/Manual/c03564723 • Supported printers: http://h10032.www1.hp.com/ctg/Manual/c03601723 • Licensing: http://h10032.www1.hp.com/ctg/Manual/c04677865 62 Plug-in modules: • Smart Card... best meets their needs. Find attached the links where you can grow to choose the level of Business Notebooks and select Business Desktops and Workstations. HP DesignJet Printer Series Security Settings Appendix 3 -