HP LaserJet 9040/9050 HP LaserJet MPF Products - Configuring Security for Mult
HP LaserJet 9040/9050 - Multifunction Printer Manual
View all HP LaserJet 9040/9050 manuals
Add to My Manuals
Save this manual to your list of manuals |
HP LaserJet 9040/9050 manual content summary:
- HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 1
HP Imaging and Printing Security Best Practices Configuring Security for Multiple LaserJet MFPs, Color LaserJet MFPs, and Color MFPs with Edgeline Technology Version 3.0 - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 2
10 Overall Network Settings ...10 Notes on the Process of Configuration 11 Notes on Passwords ...11 Configuring MFP Security Settings...12 Setting up HP Web Jetadmin ...12 Configuring Initial Settings...16 Configuring the Bootloader Password or the Startup Administrator Password 28 Configurations - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 3
File System Page Options ...76 Network Page Options...77 Security Page Options...80 Settings Only for Edgeline MFPs ...81 Device Page Options ...81 Digital Sending Page Options ...82 Security Page Options...82 Final Configurations ...83 Overall Limitations...84 Physical Security ...84 Appendix 1: - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 4
guide to help you configure the security-related settings. It provides instructions to configure these settings for one or more MFPs at the same time. This checklist covers the following HP MFP models: MFP Type HP LaserJet MFPs Model HP LaserJet 4345 MFP HP LaserJet M4345 MFP HP LaserJet M3027 MFP - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 5
of each supported MFP The process for configuring this checklist is developed using HP Web Jetadmin Version 8.1 managing all of the MFPs at the same time. It covers only those parts of HP Web Jetadmin that pertain to appropriate security settings. See the user guides, admin guides, and help files - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 6
this checklist are presented in a specific order to ensure success. Many of these settings can be configured successfully only in the correct order. You should follow the instructions exactly and avoid making additional configurations during this process. Configure One MFP Model at a Time For best - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 7
specific HP MFPs. It is meant to help you configure multiple MFPs simultaneously using the HP Web Jetadmin Multiple Device Configuration Tool (explained later). It assumes that the MFPs MFP security settings found in HP Web Jetadmin Version 8.1 and on MFP control instructions for configuring MFP - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 8
person's job. The person who sent a cancelled job gets no warning; only part or none of the job is printed. • Intercepting a print job before it reaches the MFP, altering it, and sending it on to the MFP. • Intercepting remote configuration data, such as communications between Web Jetadmin and the - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 9
data stream to include log data and file metadata (look for this product at hp.com or contact your hp product supplier). Edgeline MFPs already IPsec functionality. Look for information on configuring it at hp.com. • Close unused ports and protocols. • Save copies of log data at a separate location - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 10
settings for one or more MFPs. You should use HP Web Jetadmin Version 8.1 with Service Pack 4 to configure as many of these settings as possible, but some settings are available only in the MFP control panels as noted. Overall Network Settings Before you get started, be sure that your network - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 11
HP Web Jetadmin does not provide support for them, and because they require advanced network configurations. Look for information on these settings in the Edgeline MFP user guides and at hp might be different. Be sure to follow the instructions in order, and consider making adjustments to accommodate - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 12
a setting that is not supported on an MFP, Web Jetadmin shows setting failed - not supported. This is the expected behavior, and the MFP will continue without issues. For best results, configure one MFP model at a time. Setting up HP Web Jetadmin Follow these instructions to prepare Web Jetadmin for - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 13
that is configured for DHCP. Use the Discovery options to restore contact, or configure the MFPs with static IP addresses. You can also use the MFP host names to find them. 3. Click to select the MFPs to configure in the Device List view, and click Configure in the Device Tools dropdown menu (Figure - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 14
you are configuring. This is because some settings may not apply to that specific model. Ignore instructions for settings that do not appear in Web Jetadmin. Remember that the steps in this checklist are for the specified HP MFPs. Other devices may appear in the Device Model list. It may be possible - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 15
outlined in green. The Configure Devices tab contains most all of the settings recommended in this checklist. Tip: Sometimes Web Jetadmin can lose track of MFP credentials. If this happens, some settings might fail. Clear the Web Jetadmin Device Cache (see Web Jetadmin Help) and re-enter the - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 16
, you should configure a few of the settings first. The following instructions explain how to configure these settings: Configuring SNMPv3 SNMPv3 provides encryption for communication between Web Jetadmin and the MFPs. It helps to ensure that only authorized and authenticated administrators have - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 17
. CAUTION: Be sure to remember these credentials and provide them to authorized users. If these credentials are forgotten, the only way to restore communication between HP Web Jetadmin and the MFPs is to restore the 17 - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 18
default settings. These instructions are for the initial configuration of SNMPv3. Once you finish this configuration, the MFPs will require these credentials whenever anyone attempts to access settings over the network. Note: Web Jetadmin retains the SNMPv3 credentials for each MFP, and it will - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 19
Figure 9: The Device Model list. Click Configure Devices (Figure 10) to execute the configuration. Figure 10: The Configure Devices button. After you click Configure Devices, a View Log page (Figure 11) will appear. 19 - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 20
check for the SNMPv3 credentials. Note: Web Jetadmin stores the credentials for each MFP for convenience, but it may prompt for them on occasion. Web Jetadmin stores these credentials encrypted. 10.Click Go Back to view Multiple Device Configuration Tool, and continue with the instructions below: 20 - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 21
Password The Device password restricts access to many of the configuration settings. The MFPs require it to be configured before they allow configuration of some of the other settings. Follow these instructions: 1. Click the Security option in the Configuration Categories menu (Figure 13). Figure 13 - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 22
the Access Control List: HP LaserJet M3035 MFP HP LaserJet M4345 MFP HP LaserJet M5025 MFP HP LaserJet M5035 MFP HP CM 8050 Color MFP HP CM 8060 Color MFP HP Web Jetadmin does not provide options to configure the Jetdirect Firewall settings. Look for them in each MFP EWS. Follow these instructions - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 23
Control List option. 3. Add an IP address or a subnet mask by filling in the fields (Figure 17). Figure 17: The ACL IP address field. CAUTION: Be sure to include the IP address of the computer that Web Jetadmin is using to connect to the MFPs make sure all of the MFPs are configured only with your new - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 24
MFP EWSs. 6. Select the MFPs you wish to configure in the Device Model list, and click Configure Devices (Figure 18). Figure 18: The Configure Devices button. . Configuring Fax Send Setup (Edgeline MFPs) If you are configuring Edgeline MFPs, follow these instructions to enable fax functions (if you - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 25
does not cover alternative fax configurations because they require other network solutions or support. 4. Select the MFPs you wish to configure in the device list (Note that this setting is only for Edgeline MFPs. All other MFPs will ignore this setting). 5. Click Configure at the bottom of the page - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 26
to Folder Setup before they allow configurations for related settings. Follow these instructions: Tip: This setting applies only to Edgeline MFPs. To save time, you should apply this setting only to the Edgeline MFPs you are configuring. 1. Click Digital Sending in the Configuration Categories menu - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 27
Figure 22: The Enable Send to Email option. 3. Click to select Enable Send to Email to the right. Note: You might have to configure the SMTP Gateways Settings as well. 4. Scroll down, and click to select Enable Send to Folder (CM8060) (Figure 23). Figure 23: The Enable Send to Folder options. - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 28
. The Bootloader password can be configured using HP Web Jetadmin, but the Startup Menu Administrator Password can be configured using only the MFP control panel. See instructions for each type below: Configuring the Bootloader Password for LaserJet-Based MFPs: This section explains how to configure - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 29
shut down and restart. Continue to watch the control panel as the MFP begins to start up. 3. As soon as the HP logo appears on the control panel, touch the START button (the large green button on the right side of the control panel). The Startup Menu will appear with a list of options. Note that - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 30
• HP LaserJet M3027 MFP • HP LaserJet M3035 MFP • HP LaserJet M5025 MFP • HP LaserJet M5035 MFP • HP Color LaserJet M4730 MFP • HP CM8050 Color MFP with Edgeline • HP CM8060 Color MFP with Edgeline Hiding the IP address can be done only using the MFP Control panel. Follow these instructions: 1. - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 31
: Remember to configure one model at a time. You can configure any number of individual MFPs of a given model. The instructions below cover settings for all models. Some settings may not apply to the specific model you are configuring, and they may not appear in Web Jetadmin. Ignore these settings - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 32
The Fax configuration page provides a few security options for the analog fax functions. Follow these instructions: Note: Be sure to configure the MFPs for fax capabilities before continuing with the instructions below. At the minimum, configure the modem settings for the country, the company, and - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 33
setting requires users to provide the PIN number at the MFP control panel to print fax jobs. Note: This setting also enables PIN printing. Also includes options for email and for send to network folder. Follow these instructions: 1. Click Digital Sending in the Configuration categories menu. 2. Scroll - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 34
ensures that no one can send improper email messages from the MFPs. 5. Scroll down, and click to select Default 'From:' Address (Figure 29). Figure 29: The Default From Address options. Note: HP recommends configuring the default from address to ensure that no one can send - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 35
includes LDAP, configure the Accessing the LDAP Server options (Figure 30). Figure 30: The Accessing the LDAP Server options. These options enable the MFPs to provide the LDAP address book to users. 10. Select Kerberos in the LDAP Server Bind Method dropdown menu if your network provides Kerberos - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 36
be able to send multiple jobs to a location without having to retype all of the information in the control panel. Choose a reasonable time to allow them to send a new job. 14. Select the MFPs to configure in the Device List, and click Configure Devices. The View Log page will appear to show - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 37
instructions: 1. Click Embedded Web Server in the Configuration Categories menu (Figure 32). Figure 32: The Embedded Web Server page. Note: The first option in the Embedded Web Server Configuration Categories page is Embedded Web Server Password. This setting should already be configured. The MFPs - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 38
users from delaying or stopping the jobs of others. It is the Pause/Resume button in the MFP EWS. Command Invoke (enabled by default) Leave blank to disable Command Invoke does not apply to the MFPs. Disabling it is only a best practice. Command Download (enabled by default) Leave blank to - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 39
MFPs. Continue Button allows the MFPs to resume after they are set to pause. Print Service enables users to send print-ready files directly to an MFP without having the MFP help prevent unauthorized access to data. Follow these instructions: 1. Click Filesystem in the Configuration Categories menu - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 40
needed to clean MFPs for resale, for reuse, or for conforming to high-level security requirements such as Department of Defense regulations. The instructions continue with the File System password: 2. Click to select Set Filesystem Password (Figure 35). Figure 35: The Set Filesystem Password option. - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 41
Erase is recommended for this setting because it ensures that data is completely unrecoverable by overwriting files with three passes. It slows the MFP slightly but is not noticeably slower than the Secure Fast Erase mode, which overwrites files with one pass. 6. Click to select File System - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 42
this protocol NOTE: Disabling the NFS option disables the entire protocol for the MFPs. The PostScript protocol is not as sensitive, and it is more likely to options that relate to the Jetdirect Print Servers. Follow these instructions: 1. Click Network in the Configuration Categories menu (Figure - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 43
dropdown menu, and select the highest setting that your browser supports. The Encryption Strength setting allows you to choose the strength of the encryption algorithm that will be used for communication between the MFP EWS and the web browsers connecting to it (this is related to the - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 44
, send to folder, and fax. You should disable EWS Config while the MFPs are in use, and enable it only to make changes to the affected Printing is the access point for normal printing through standard HP print drivers. IPP Printing Disabled Disabling IPP Printing prevents access to configuration - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 45
that it does not compromise your network security. It allows HP to collect statistical data about the MFPs. HP will not collect network-specific or personal data. For information on HP privacy policies, read the Hewlett-Packard Online Privacy Statement available by clicking privacy statement at http - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 46
(Figure 44), and select Encrypt all web communication. Figure 44: The HTTPS Setting option. This setting requires web browsers to use HTTPS when contacting the MFPs. This ensures secure communications with the MFP EWS. This setting is related to the Encryption Strength setting covered earlier. 46 - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 47
Note: The Access Control List options appear next on the Network page, but you should have already configured this. The ACL instructions appear in the Initial Settings section of this chapter to help ensure security during the time you are configuring the MFPs. 9. Click to select Protocol Stacks ( - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 48
: If you are configuring color MFPs, options for restricting the use of color will appear on the Security page. You should configure these options if you wish to control the costs of color printing. These options are not covered in this checklist. Follow these instructions: 1. Click Security in the - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 49
steps. Note: LDAP, Kerberos, and Digital Send Service require additional solutions on the network for support. 3. Click the dropdown menu next to Log MFP to require everyone to log in for access to control panel menus. You can choose to require further authentication for specific functions of the MFP - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 50
Figure 49: The Accessing the LDAP Server options. These settings enable the MFPs to require a user's NT logon credentials for use of the MFPs. This is related to the LDAP access options in the Digital Sending page, which enable the MFP to use the LDAP address book. This setting is required if you - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 51
. It is not for restricting access to MFP functions. Note: The Bootloader Password option appears next on the Security Page. You should have already configured this at the beginning of this chapter. See the Initial Settings section. 11. Click to select Printer Firmware Update (Figure 51), and click - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 52
enabled only when you are prepared to update firmware. Keep in mind that HP strongly recommends updating MFP firmware regularly. Note: The SNMPv3 option appears next on the Security page, but you should have already configured it. The SNMPv3 instructions appear at the beginning of this chapter to - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 53
the control panel. Note: Control Panel Maximum Lock prevents everyone from accessing configuration settings in the control panel HP Digital Send Service). Figure 53: The Allow Use of Digital Send Service option. Digital Send Service is an HP solution for managing the digital sending functions of MFPs - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 54
at least 5 numbers or up to 2147483647, and repeat it in the Repeat PJL Password field. The PJL password protects the default features on the MFP. PJL commands are allowed only when the correct PJL password is included. This also affects PCL and PostScript commands. 17. Once you have made your - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 55
LaserJet and Color LaserJet-based MFPs. This saves time, and it saves complications that can arise from configuring MFPs that reject these settings. Follow these instructions, but select only Edgeline MFPs Use Fax Printing Schedule. This enables users to control when faxes are printed so they can be - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 56
Figure 57: LDAP Server Settings. These settings enable the Edgeline MFPs to access the LDAP server to provide addresses and contacts. remaining Server Connection Settings as desired. You may wish to select Use MFP user credentials to connect after Sign In, and then configure user access options. 56 - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 57
E-mail Address field. You may wish to use the address of an administrator who can receive responses or error reports for messages sent by the MFPs. This setting may be superseded if you choose to use the user's authenticated email address from the LDAP server. 11. Fill in the Default Display - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 58
and features for each role. Continue with the following steps: a. Choose either Maximum or Custom for the overall access control level. Maximum requires all users to log in for all functions of the MFP. Custom allows you to choose the level of access for each function. b. If you chose Custom for the - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 59
). d. After you have added a name, click Permission set. A list of Device Functions with Access Control (Figure 63) will appear. Figure 63: The Device Functions with Access Control list (Edgeline MFPs). e. Click to select the device functions for which to allow access for that role. f. Click Apply - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 60
MFPs). This feature is for setting up LDAP sign in. It is required if you chose LDAP sign in for the Authentication Manager settings earlier in this section or for the Access Control of your network. 8. If your network supports Novell, configure the NOVELL Sign in Setup options (Figure 66). 60 - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 61
, choose a Permission set in the dropdown list, and click Add New. 10. If you selected Windows sign in for configurations above (only if your network supports it), click to select Windows Users and Groups (Figure 68). 61 - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 62
Device User Accounts, go to the EWS of each MFP, and configure them. See MFP User Guide for more information. 12. Once you have made your settings are for all MFPs. These settings should be configured only by themselves and only at the end of this checklist. Follow these instructions for the final - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 63
Config. EWS Config was required for configuring this checklist, but it should be disabled during normal use of the MFPs. Note: This setting removes all configuration settings from the MFP EWSs. It also removes all EWS-related settings from Web Jetadmin (they will disappear from Web Jetadmin menus - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 64
for each Edgeline MFP using the EWS. See user guides and EWS Help for more information. You can also find helpful information by searching for it at hp.com. Using Web Jetadmin and MFP Passwords Web Jetadmin is a powerful tool that allows you to manage any number of MFPs and printers. It provides - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 65
this checklist. It does not include instructions or explanations. Use it to check-off each setting as you follow the instructions in the Network Security chapter ( common networks that include MFPs. MFPs configured according to this list are considered reasonably secure, but HP does not warrant or - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 66
MFPs). Configure Bootloader password (Security page for LaserJet and Color LaserJet MFPs) or Startup Administrator Password (control panel for Edgeline MFPs). Hide the MFP IP Address (Control Panel on all MFPs). Settings for All MFPs Disable Cancel Job Button. o Disable Go Button. o Disable - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 67
access to specific MFP functions. Choose only methods that are available on your network and that you plan to configure. Configure authentication (LDAP, Kerberos, or Group PIN) according to your choices in the Authentication Manager. Disable Printer Firmware Update. Configure Control Panel - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 68
if your network has Kerberos capabilities. o Configure Use MFP user credentials... or Default Credentials... as desired. o Fill Access Control Levels, configure Windows Sign in Setup. If your network supports Novell, configure Novell Sign in Setup. If you selected LDAP for Access Control Levels - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 69
options. Enable Outgoing Mail. Disable Incoming Mail. Disable Cancel Job Button. Disable Go Button. Disable Command Invoke. Disable Command Download. Disable Command Load and Execute. Enable Continue Button. Disable Print Service. Configure File System Password. Configure Secure File Erase Mode to - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 70
(LDAP, Kerberos, Group 1 PIN, or Group 2 PIN). Disable Printer Firmware Update. Configure Control Panel Access to Maximum Lock. Disable Allow Use of Digital Send Service. Disable Allow Transfer to New Digital Send Service. Configure the PJL Password. Configure color restriction settings. Settings - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 71
Configure LDAP Users and Groups. Configure Windows Users and Groups. Disable EWS Config. Disable Direct Ports. None configured None configured Enabled Enabled 71 - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 72
appears on the Embedded Web Server Configuration Category page. Whenever a change is made to either password, the MFP will change the other one to be the same. • Fill in the Access Control List. The Access Control List is a table that lists the IP addresses of PCs that are allowed to access the - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 73
LaserJet and Color LaserJet MFPs, or configure the Setup Administrator Password for Edgeline MFPs. This password protects against accidental or intentional access to the MFP record it in a safe place. • Hide the MFP IP Address Many of the HP MFPs display buttons to show the IP address. This is meant - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 74
not affected by Job Hold Timeout. Fax Page Options • Configure Fax Printing. With Fax Printing configured, the MFPs will hold all fax jobs until someone provides the PIN at the control panel. This improves security by ensuring that printed faxes are not left in the output trays where unauthorized - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 75
. o Disable Incoming Mail. Some network solutions can send commands to the MFP via email. If your network uses any of these solutions, it might their own jobs from the printer driver or from the control panel. o Disable Go Button. The Go Button is the EWS Pause/Resume button, which enables users to - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 76
send print-ready files such as PDF files directly to MFPs for immediate printing. This feature is available to anyone who has access to the EWS. Disabling it ensures that only users with the MFP Print driver installed can send print jobs to the MFPs. With Print Service disabled, the print options do - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 77
and the specific model of MFP. • Configure File System External Access. The File System External Access settings shut down access to the MFP file system . o Disable PML. PML (Printer Management Language) is an HP proprietary protocol that manages MFPs and printers. Web Jetadmin uses PML for many - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 78
. Telnet Config is an access point used by some older (legacy) printer management tools. Jetdirect also supports some Telnet commands. Telnet Config transmits data in clear text, and it should not be used. With it disabled, MFPs will deny access to Telnet sessions. Note that Web Jetadmin is the - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 79
to collect statistical data on the use of MFPs. HP uses such information to help improve the design and development of MFPs. HP will not collect network-specific or personal data. For information on HP privacy policies, read the Hewlett-Packard Online Privacy Statement available by clicking privacy - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 80
. DLC/LLC is used in small networks where routing is not required. The MFPs include it for compatibility with older HP products. It should be enabled to ensure that the MFPs can work with other HP products. o Disable AppleTalk. AppleTalk is a protocol required for older Apple computers. You should - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 81
MFPs. With Printer Firmware Update disabled, the MFPs will deny access whenever anyone attempts to upgrade the firmware. You should disable it during normal MFPs operations and enable when you wish to upgrade firmware. • Configure Control your network includes Color LaserJet MFPs, you can configure - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 82
on your network and that you plan to configure. • Configure Access Control Level for Device Functions. The Access Control Level for Device Functions feature is similar to the Authentication Manager for LaserJet and Color LaserJet MFPs. This feature allows you to choose the authentication method used - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 83
network and that you wish to configure. If you choose Custom for the Access Control Level, each MFP will require users to sign in when they choose specific functions at the control panel. Once a user signs in, the MFP will provide all applicable access to that user. • Configure sign in methods. The - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 84
line). You can enable fax cancelling by configuring Control Panel Access Lock to Intermediate Lock. • Extra steps for printing faxes: A user will be required to provide a fax PIN before printing a fax (LaserJet and Color LaserJet MFPs only. Edgeline MFPs will require sign in credentials for a user - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 85
cards. Since the formatter is removable (using common tools), it includes the capability to be locked using devices such as Kensington locks. HP Jetdirect 635n Print Server The HP Jetdirect 635n Print Server is an accessory to LaserJet and Color LaserJet MFPs and printers. It provides extra - HP LaserJet 9040/9050 | HP LaserJet MPF Products - Configuring Security for Mult - Page 86
tool for configuring most all settings in this checklist. © 2007 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such
HP Imaging and Printing Security Best Practices
Configuring Security for Multiple LaserJet MFPs, Color LaserJet MFPs,
and Color MFPs with Edgeline Technology
Version 3.0