HP Color LaserJet CM4730 HP LaserJet MPF Products - Configuring Security for M - Page 76

File System Options, Command, Invoke, Download, Execute, Services, Print, System, Password - mfp printing system

Get HP Color LaserJet CM4730 - Multifunction Printer PDF manuals and user guides View all HP Color LaserJet CM4730 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 76 highlights

o Disable Command Invoke. Command Invoke is a legacy feature that does not apply to the MFPs. Disabling it is good security practice to ensure that all possible access to it is closed. o Disable Command Download. Command Download is a legacy feature that does not apply to the MFPs. Disabling it is good security practice to ensure that all possible access to it is closed. o Disable Command Load and Execute. Command Load and Execute accommodates add-on applications (Chailets), such as workflow programs and job accounting programs. Disabling it stops the MFPs from running Chailets during start up. This function is called Load Services in the EWS. If you use Chailets, you should enable Command Load and Execute. If not, you should disable it to prevent users from installing this type of application. With this setting configured, the MFPs will ignore all add-on applications. Tip: You may wish to (turn off the MFPs and turn them on again (power cycle) after disabling Command Load and Execute. This will stop applications that may be already loaded and running. o Disable Print Service. Print Service allows users to send print-ready files such as PDF files directly to MFPs for immediate printing. This feature is available to anyone who has access to the EWS. Disabling it ensures that only users with the MFP Print driver installed can send print jobs to the MFPs. With Print Service disabled, the print options do not appear on the EWS. File System Page Options • Configure the File System Password. The File System password feature restricts access to the MFP storage devices and to the configuration settings that relate to storage. This setting is important to security because it helps protect data stored on the MFPs. It does not affect normal use of the MFPs such as job storage features. Users or applications attempting to make changes to the file system settings or attempting to access data through network ports will be required to provide this password. Without the password, the MFP denies access to the File System and to File System configurations. Web Jetadmin stores the file system password in its encrypted device cache. It automatically provides the password when the MFPs request it. Tip: You should apply the File System Password setting by clicking Configure Devices before continuing with the remaining File System settings. The MFPs require that the File System Password be configured before they will grant access to the remaining settings. • Set the Secure File Erase Mode to Secure Sanitizing Erase. Secure File Erase enables the MFPs to overwrite storage space whenever files are deleted. This helps ensure that the original data is destroyed. Secure Sanitizing Erase mode is recommended because testing shows that it does not significantly affect MFP performance compared to Secure Fast Erase mode. 76

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
o
Disable
Command
Invoke
.
Command
Invoke
is a legacy feature that does not apply to the MFPs. Disabling it
is good security practice to ensure that all possible access to it is closed.
o
Disable
Command
Download
.
Command
Download
is a legacy feature that does not apply to the MFPs.
Disabling it is good security practice to ensure that all possible access to it is closed.
o
Disable
Command
Load
and
Execute
.
Command
Load
and
Execute
accommodates add-on applications (Chailets),
such as workflow programs and job accounting programs. Disabling it stops the
MFPs from running Chailets during start up. This function is called
Load
Services
in
the EWS.
If you use Chailets, you should enable
Command
Load
and
Execute
. If not, you
should disable it to prevent users from installing this type of application.
With this setting configured, the MFPs will ignore all add-on applications.
Tip:
You may wish to (turn off the MFPs and turn them on again (power cycle)
after disabling Command Load and Execute. This will stop applications that
may be already loaded and running.
o
Disable
Print
Service
.
Print
Service
allows users to send print-ready files such as PDF files directly to MFPs
for immediate printing. This feature is available to anyone who has access to the
EWS. Disabling it ensures that only users with the MFP Print driver installed can send
print jobs to the MFPs.
With
Print
Service
disabled, the print options do not appear on the EWS.
File System Page Options
•
Configure the
File
System
Password
.
The
File
System
password
feature restricts access to the MFP storage devices and to the
configuration settings that relate to storage. This setting is important to security because it helps
protect data stored on the MFPs. It does not affect normal use of the MFPs such as job storage
features.
Users or applications attempting to make changes to the file system settings or attempting to access
data through network ports will be required to provide this password. Without the password, the
MFP denies access to the File System and to File System configurations.
Web Jetadmin stores the file system password in its encrypted device cache. It automatically
provides the password when the MFPs request it.
Tip:
You should apply the File System Password setting by clicking Configure
Devices before continuing with the remaining File System settings. The MFPs
require that the File System Password be configured before they will grant
access to the remaining settings.
•
Set the
Secure
File
Erase
Mode
to
Secure
Sanitizing
Erase
.
Secure
File
Erase
enables the MFPs to overwrite storage space whenever files are deleted. This
helps ensure that the original data is destroyed.
Secure
Sanitizing
Erase
mode is recommended
because testing shows that it does not significantly affect MFP performance compared to
Secure
Fast
Erase
mode.
6