HP DesignJet Z5400 Security Features - Page 5

Introduction & Overview, Security concepts explanation

Get HP DesignJet Z5400 PDF manuals and user guides View all HP DesignJet Z5400 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 5 highlights

HP DesignJet Printers Security Settings 1. Introduction & Overview This document provides an overview of the security and connectivity features supported by HP DesignJet and PageWide XL printers as of October 2018. The security features described in this document make the HP DesignJet and PageWide XL printer series particularly well suited for deployment in environments where network, data, and access control security are important. In this document, you will find: • The description of the features, where to configure them and some recommended values (Section 2, Security concepts explanation). • Description of the advanced printing workflows that can be used with the HP DesignJet (only T1700/Z6/Z9+) and PageWide XL printers (Section 3, Advanced workflows). • The tables summarizing the new and existing security features of the HP DesignJet and PageWide XL printer series and how they are configured using the control panel, Embedded Web Server and/or HP Web Jetadmin (WJA). Please make sure that your printer has the latest firmware version to benefit from all the security features (Section 4, Large Format printers: security features summary). • The table summarizing the new and existing security features of the HP Scanners compatible with the HP DesignJet and PageWide XL printers (Section 5, Large Format scanners: security features summary). • The list of ports used by the printer and the effect of keep them blocked (Section 5, Ports used in HP printers). Note: If your printer is not listed in the table, then these features are not implemented. 2. Security concepts explanation 2.1 Device security UEFI secure boot It prevents the loading of unauthorized operating systems (OS) during system startup. This feature is compliant with the UEFI specification. Non-configurable feature. Firmware protection All HP portfolio use signed firmware package, that means firmware packages are digitally signed by the HP Code Signing group. The printer is able to check the authenticity of any firmware and install only those signed by HP. It is really important to keep the printer updated with the latest firmware, that provides you the highest security and new features. The firmware can be updated in various ways, although not all them are available in all the printers: • Plugging a USB drive with the firmware file in the root folder. • Sending the firmware file through EWS. • Sending the firmware file through the port 9100, as any other job. • Activating the Automatic Firmware Upgrade (AFU): This function connects the printer with the HP server, checks if there is a new firmware and downloads it. The installation should always be launched from EWS or printer control panel. Despite the signature system, the recommendation is to protect the printer from unauthorized firmware upgrades: 5

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
HP DesignJet Printers
Security Settings
5
1.
Introduction & Overview
This document provides an overview of the security and connectivity features supported by HP DesignJet and
PageWide XL printers as of October 2018.
The security features described in this document make the HP DesignJet and PageWide XL printer series particularly
well suited for
deployment in environments where network, data, and access control security are important.
In this document, you will find:
•
The description of the features, where to configure them and some recommended values (Section 2,
Security concepts explanation
).
•
Description of the advanced printing workflows that can be used with the HP DesignJet (only
T1700/Z6/Z9+) and PageWide XL printers (Section 3,
Advanced workflows
).
•
The tables summarizing the new and existing security features of the HP DesignJet and PageWide XL
printer series and how they are configured using the control panel, Embedded Web Server and/or HP Web
Jetadmin (WJA). Please make sure that your printer has the latest firmware version to benefit from all the
security features (Section 4,
Large Format printers: security features summary
).
•
The table summarizing the new and existing security features of the HP Scanners compatible with the HP
DesignJet and PageWide XL printers (Section 5,
Large Format scanners: security features summary
).
•
The list of ports used by the printer and the effect of keep them blocked (Section 5,
Ports used in HP
printers
).
Note:
If your printer is not listed in the table, then these features are not implemented.
2.
Security concepts explanation
2.1
Device security
UEFI secure boot
It prevents the loading of unauthorized operating systems (OS) during system startup. This feature is compliant with
the UEFI specification. Non-configurable feature.
Firmware protection
All HP portfolio use signed firmware package, that means firmware packages are digitally signed by the HP Code
Signing group.
The printer is able to check the authenticity of any firmware and install only those signed by HP.
It is really important to keep the printer updated with the latest firmware, that provides you the highest security and
new features.
The firmware can be updated in various ways, although not all them are available in all the printers:
•
Plugging a USB drive with the firmware file in the root folder.
•
Sending the firmware file through EWS.
•
Sending the firmware file through the port 9100, as any other job.
•
Activating the Automatic Firmware Upgrade (AFU): This function connects the printer with the HP server,
checks if there is a new firmware and downloads it. The installation should always be launched from EWS
or printer control panel.
Despite the signature system, the recommendation is to protect the printer from unauthorized firmware upgrades: