HP CM8000 HP Color CM8050/CM8060 MFP with Edgeline Technology - Windows XP E

Drawer

Statement

HP Color CM8050/CM8060

MFP with Edgeline

Technology – Windows XP

Embedded Security Concerns

Security Level:

Public

Date Written/Updated:

April 17, 2007

Document Number:

c01119913

Document Summary

D

Addresses concerns regarding Microsoft Windows architecture embedded in device.

Introduction

HP CM8050/8060 Color MFPs with Edgeline will be the first HP MFP devices to include a controller

running Microsoft Windows technology. This document will address common concerns about Microsoft

Windows and their applicability to Edgeline technology.

No Accessibility to the Windows XP Embedded Environment

Edgeline architecture does not allow the user or an attacker to have access to many features that are part

of the core operating system. For example, we do not allow users to log in and run programs like they

can with a desktop PC.

We are able to carefully control exactly what applications and services within

Windows XP Embedded are allowed to run. By doing this, we can prevent users from accessing features

that have security vulnerabilities.

Edgeline Will Not Require Frequent Microsoft Security Patches

Because Windows desktop operating systems require frequent patches, there is a concern this will apply

to Edgeline. The Windows XP Embedded operating system is a modular subset of the full Windows XP

operating system.

We are able to remove applications and infrastructure that are not needed, reducing

exposure to features with vulnerabilities, which reduces our dependence on patches.

By doing this, we estimate that only one or two patches per year will require HP to immediately release a

firmware upgrade. Additionally, each time an Edgeline firmware upgrade is released to customers; it will

include all Microsoft security hot fixes available at that time.

Edgeline Architecture is Resistant to Windows Viruses

Edgeline’s architecture makes it very safe from infection by viruses.

Page 1 of 2

white paper