Home

HP Designjet T1100 A0 User Guide Manual

image

Contents

1. Filmlabber com Recent v HP Drivers amp Get More Add ons v HP Designjet T1200 PostScript Security fh v E dp v Pager Safety Toosv v Ky HP Designjet T1200 PostScript NPIA6343D 16 23 45 148 ae Printer status Replace G cartridge 3 Configuration Printer settings H E mail server Date amp Time New password Maintenance Firmware update Confirm password Paper preset management Set account Set the administrator use G Local intranet Protected Mode Off av 100 v ry B u Hid gt 4 Gr http 16 23 45 148 hp device webAccess index htm v x BR Google P vr Favorites 93 4 4shared com free file sh 4 Filmlabber com Recent HP Drivers amp Get More Add ons v hp Designjet T1200 PostScript Security fo z v dm v Pagey Safetyy Toolsv v pe A A HP Designjet T1200 PostScript fet tT Det ll a Or OH Ol PN NPIA6343D 16 23 45 148 Printer status Replace G cartridge 3 un Configuration Printer settings ga Securty Set the administrator user account E mail server Date amp Time Maintenance Security Settings have been changed successfully Firmware update Security Warning the guest user account is not set Click here to sft the guest user account Paper preset management gturn to the security page G Local intranet Protected Mode Off fay 100 vw 16 Downloaded from ManualsPrinter com Manuals HP De
2. 5 The printer will be configured to use the EHD as the repository for ALL customer jobs including the temporary processing storage area Once the EHD has being installed all the customer jobs will ALWAYS be stored in the EHD When the printer is switched off as a security measure the EHD can be removed and kept in a secure location Notes e Once the printer has an EHD installed it can no longer be initialized without it e If for any reason the installed EHD is no longer available the customer loses the EHD or the EHD is broken there is a mechanism through a special bootmode controlled with an specific front panel key combination that reconfigures the printer to work without the EHD However in that particular case all the information stored in the EHD is lost e Once the EHD is installed on a particular printer it becomes fully tied to it It is not possible to move this EHD to another HP Designjet printer without losing the stored information When the printer detects an EHD 24 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings that has been installed on a different printer it will advise the customer about it If the customer decides to go ahead and use the EHD on a different printer the printer will erase the contents of the EHD once again using the highly secure DoD 5220 22 M process e The EHD has its own software based encryption mechanism that prevents anyone reading the
3. Management Protocol SNMP SNMPv3 Subnet Authentication Manager LJ feature 2 Security Settings This feature is part of the Job Retention feature It limits a held job to the selected time and then the printer deletes it You should select a reasonable timeout value for this setting to allow enough time for a user to walk to the printer to print a job or to allow time for jobs to print in a queue This feature provides job retention options such as private job and hold job You will be able to ensure that they are present during printing to provide privacy for documents in the printer output bins Also known as Bonjour or Rendezvous mDNS uses IP multicast with DNS to provide the capabilities of a DNS server for service discovery in a small network that does not have a DNS server The PJL password feature helps protect the printer from unauthorized configurations through Print Job Language PJL commands It does not affect ordinary print jobs Once the PJL password is configured the MFP requires it before it will process any of these commands This service allows an administrator to use a custom application to upgrade the printer s firmware remotely Since HP recommends using HP Web Jetadmin to upgrade MFP firmware you should disable Remote Firmware Upgrade This is a network monitoring and control protocol SNMP Simple Network Management protocol allows users to manage the printer using SNMP management tools such
4. JetAdmin e Non Secure Fast Erase In this mode all file pointers to the data table indexes are erased Temporary data remains on the Hard Disk Drive until the disk space it occupies is needed for another purpose and is then overwritten This is the fastest mode of operation and is the default for all printers e Secure Fast Erase In this mode of operation file pointers are erased and the disk space where the temporary job was stored is also overwritten with a fixed character pattern This mode of operation is slower than Non Secure Fast Erase but all data is overwritten e Secure Sanitizing Erase In this mode of operation file pointers are erased and the disk space where the temporary job was stored is repetitively overwritten using an algorithm that prevents any residual data This mode of operation may affect product performance The Secure Sanitizing Erase mode of operation meets the US Department of Detense 5220 22 m requirements for clearing and sanitization of disk media When the Secure Sanitizing Erase feature is enabled all temporary files that might contain sensitive data are erased with this method no temporary files are left after a job has completed scan copy or print Furthermore if you do not want to store jobs in the printer you can set the number of jobs to be stored in the printer s queue to 0 To configure this setting perform the following e Go to the printer s front panel e Select the setup menu
5. You can securely manage the network device using a Web browser and the HTTPS protocol To authenticate the HP JetDirect Web Server when HTTPS is used you may configure a certificate or you may use the pre installed self signed X 509 Certificate The encryption strength specifies what ciphers the web server will use for secure communications Supported cipher suites are DES RC4 3DES By enabling encryption the web server encrypts all web communication forcing all connections to use HTTPS Enabling encryption can also be configured to allow both HTTP unencrypted and HTTPS connections In secure environments you should choose to encrypt all web communications Otherwise sensitive management data Administrator Password SNMP Community Names and secret keys may be compromised 22 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings 3 13 Disable USB drive You can use this option to disable the USB drive preventing somebody connecting a device to print or to scan images A Security USB drive Enabled Firmware upgrade from USB Enabled Direct print using HP ePrint amp Share Enabled Enable Internet connection Yes HpP Designjet T2300 PostScript Security fo A v Pagew Safetyv Tools v r aper managemen Disable USB printing Note To disable this interface you should access the EWS through a different network interface W Disable USB drives Disab
6. contents of the EHD for instance by plugging it into a PC The encryption system is not a standard one and cannot be considered as an extremely secure encryption mechanism such as the standard encryption system DES RSA FIPS 140 but it does add a level of security that makes it difficult when trying to read the contents by just connecting the disk to a PC The EHD is not intended to be used as an USB memory stick that is to copy documents from a PC plug it into the printer and to print them 4 Designjet Security features vs LaserJet HP LaserJet printers have some security features that are not yet available in HP Designjet printers As a brief comparison please find the comparison between HP LJ 9050 series and Designjet T1200 series _ Security Feature 19050 DITI2Z00 gt PIL Password Remote FW upgrade 25 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings 5 Glossary An advanced hierarchical directory service that comes with Microsoft Windows servers version 2000 or later It is LDAP compliant and built on the Active Directory AD domain naming system DNS used on the Internet Workgroups are given domain names exactly like Web sites and any LDAP compliant client such as Windows Mac or Unix can gain access Developed by Adobe this is the standard page description language PDL Adobe PostScript for the graphics arts industry and commercial printing Many pr
7. deployed into environments where network data access control and security are important The following is a table summarizing the new and existing security features of HP Designjet printers series and how they are implemented using the Embedded Web Server and or HP Web JetAdmin WJA Please make sure that your printer has the latest firmware version to benefit from all security features Note If your printer is not listed in the table then these features are not implemented a aA ain weal Exclude personal info From EWS accounting Disable protocols EWS WJA EWS WJA EWS WJA ay WIA EWS WJA EWS WJA ra os os ew enn evn rm CAND Certificates EWwS WIA EWS WIA EWS WIA EWS Jetdirect EWS Jetdirect ds A 200 AE OE 200 00 PT PP roe a Disable fmw update es VER rcs EWS SA o Disable direct print with ePrint amp Share mpm er e Disable ePrint Center come ES ua NS EWSP o connection PS only from fw ternal HDD wl i G or 05 Oa i 4 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings SSS SS Control panel er EE personal info from accounting Disable Disable interfaces EWS dd protocols KM WJA KI WJA EN WJA EE WJA T WJA DE WJA KN WJA EM WJA EWS WIA EWS WJA EWS WIA EWS WIA EWS WJA EWS WJA EWS WIA FWSAVA EWS EWS EWS EWS see i EWS lee EWS Ledet w EWS EWS EWS EWS Hide IP from FP MIG Jetdirect Jetdire
8. e mails will not contain personal information user name job name account ID will be left blank in the accounting file sent by email from the printer Typically this option is used for managed print or pay per use contracts to ensure that only the data counters relevant for billing are being sent by the printer Personal information about who printed which file is not required for billing purposes and can be excluded from the accounting email This personal information is typically used for cost allocation within a company HP Designjet T1200 PostScript Printer settings Windows Internet Explorer Ow E hte 16 23 45 148hp device web ccess index htm content device setup x amp vip Favorites 13 4 shared com free file sh My Filmlabber com Recent f HP Drivers amp Get More Add ons SS HP Designjet T1200 Pos x HP Designjet T770 Printe DD HP Designjet 11200 PostScript NPIAG343D 16 23 45 145 en setup Configuration Prini Security E mail serwer E Printer settings E Printing preferences Graphics language Automatic Maintenance Margin Layout Standard Firmware update E Job management Printer settings Date amp Time Paper preset management Queue On Nest Optimized order Max number of printed jobs 32 Start printing After processing Max number of stored jobs 10000 Username is required Off Use crop lines when printing Off Use crop lines when nest is enabled Om El Accou
9. management Administrator password e Set account amp Local intranet Protected Mode Off fay Qm v Notes e Some printers only have 1 level password access to the Embedded Web Server e The networking tab of the Embedded Web Server allows you to setup another password If the printer has an EWS 1 level or multi level password then the networking password is common with the general EWS password If the EWS does not have password capabilities then the networking password is only used for controlling access to the networking area of the EWS e For most printers that have a EWS password capability it is also possible to setup the admin password through Web JetAdmin however only one level can be set so that Guest password cannot be setup from Web JetAdmin 17 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings 3 5 Exclude personal info from accounting You can enable or disable the printer to send an e mail containing accounting information If you enable this setting you have also to fill in the destination of the report using the Send accounting files to setting Please note that you also have to configure the e mail server on the Setup Page In some cases customers prefer not to send personal data from the printers via email and so the option Exclude Personal information from accounting e mail is now available in the Embedded Web server If this option is selected accounting
10. through telnet to manage the printer network settings You can disable unused protocols through the Mgmt protocols option in the Embedded Web Server or Network enable features in Web JetAdmin amp 16 23 13 181 Windows Internet Explore Ap HP Designjet T2300 PostScript NP1002655882481 16 23 13 181 Networking Configuration M mt Protocols TCP IP Settings g Ew H h EG Select the protocols and services that you want to enable Security Settings Authorizati Enable Print Enable Device ESA Services Discovery meets z 7 umR IPsec Fi i vi 9100 vi SLP Eg fel 6 v Enable WINS Port Diagnostics vi LPD v Bonjour E 2 v WINS Registration Network Statistics V Web Services Print v Multicast IPv4 Protocol Info 7 FTP Vl WS Di iscovery Configuration Page Enable Management Protocols v Enable Telnet V HP XML Services W Certificate Mgmt Service G Local intranet Protected Mode Off f 120 v ne JP Apply Template di View History Customize 42 Refresh Py4 Information Network Enable Features nv Pv amp Information F EWS Config mDNS Service Name bed dn 2 Network Enable Features SLF Config SNMP Trap Destination T OSE FTP Printing System Location LPD Printing System Name 9100 Printing TOP Idle Timeout TCP IP Configuration Met mDNS Config Ulead CA Certificate IPv4 Multica
11. 02655882481 emea hpacorp net 16 23 13 181 1 Item Media Type Capacity KB Used Space KB Read Write Enabled HardDisk Read Write Yes e Printer s Front Panel access Once you have entered into the Service Menu with the help of an HP Support representative you can perform the Secure Disk Erase by using the same 3 options that you have in Web JetAdmin Note that the name of the feature in the front panel is Disk Wipe DoD 5220 220M and the three options are called Insecure Mode 1 pass mode and 5 pass mode First you need to select the security level and then you can perform the erase operation The printer will warn you that it is a process which deletes all data and takes a long time when you accept the printer begins the process and displays a progress bar until complete all data will be wiped in one of the two selectable methods and the printer s firmware will be restored In the following screens show how to perform a secure hard disk erase in the HP Designjet T2300 printer service utilities Enable Disable Sleep Mode Disk Wipe DoD 9220 220M Hard Disk Recovery Show Hide Front Panel Info 9 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Disk Wipe DoD 5220 220M Sanity Level Disk Wipe DoD 5220 22 M Sanity Level Insecure Mode 1 Pass Mode 5 Pass Mode Disk Wipe DoD 5220 220M Sanity Level Disk Wipe DoD 5220 22 M Security Set
12. 2 2 Q Q vo Q A Hardware Address 0040CA9C10D1 001279433A3C 001279DEEACC 0021548D7694 0001E65B9005 0030C12D289A 00170890D76D O040CAA1A664 O0040CASBF701 00306ECDB7C1 001708821945 00110AF20B43 0030C18C3260 Status Config Alerts Groups Reports Supplies Storage Applications Detailed Info Capabilities Troubleshoot Fimware SP Apply Template Er View History SP Customize Refresh Set Community Name A AP Web Jetadmin HP Web Jetadmin Downloaded from ManualsPrinter com Manuals Save as Template Apply KR We 11 50 HP Designjet Printer Series Security Settings 3 2 Secure Disk Erase In either of the two secure methods described above Secure Fast Erase and Secure Sanitizing Erase there is also the option to sanitize the whole disk The sanitizing method removes any user data in a secure manner so the device can be moved out from a secure location to unsecure location All disk erasing will be done via the same level of security erase This setting can only be used via Web JetAdmin or the Front Panel Service menu which is only accessible with the help of an HP Support representative e HP Web JetAdmin access The user interface that manages the Secure File Erase and Secure Disk Erase functionality is the HP Web JetAdmin This is the same functionality that is used in the Web J
13. HP Designjet Printer series Security features Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings O 2012 Hewlett Packard Development Company L P Reproduction adaptation or translation without prior permission is prohibited except as allowed under the copyright laws The information contained herein is subject to change without notice The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services Nothing herein should be construed as an additional warranty HP shall not be liable for technical or editorial errors or omissions contained herein February 2012 Edition 2 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings Table of Contents l Introduction amp Overview Lae eee deedbene 4 2 Security features available for Large Format scanners rrrrrrrrrrrvnrrrrvnrrrrrvnerrrnnnrrrrnnernrrnnnnnnn 6 3 Security Concepts OX MCN ON EE a inwesceceesaawinesentareanieseenceeeaeees 7 ENE 7 ee MS 90 28 boll 0 fc EE ENE EE OT een 8 33 Control Panel Access LOCK 1c ivsscecesveccannaneusndaxesesnunssibagmesdasaabavoanonmnasievedtaencrodunasnanaenenasiads 11 3 3 1 Deadlock Front Panel locked EWS password forgotten rrrrrrrrrrrrrvnrrrrrnnrrrrrnerernvnnn 13 3 4 Embedded Web Server EWS multilevel access cccccccceccecceeccecseeceesseeceessee
14. S ecurity Printer settings g E mail server Date amp Time Access control is currently disabled To enable access control you must set the administrator user account A Maintenance Connectivi Fe op le Paper preset management Check to disable or uncheck to enable connectivity options If any of them are changed the printer will automatically restart Disable on board Gigabit Ethernet 2 Disable USB Note To disable this interface you should access the EWS through different network interface Control Panel Access Lock Select an option to set the level of the control panel access lock Unlock Minimum Lock Moderate Lock Intermediate Lock Maximum Lock G Local intranet Protected Mode Off fg v 100 v If you enable or disable a connectivity option the printer will automatically restart Keep in mind that disabling a connectivity option could cut off network access to the printer As a security measure you cannot disable the connection you are using to access the Embedded Web server Note Contact HP support in case the printer s front panel is locked and you cannot unlock it 19 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings 3 7 Disable protocols In some cases you might want to disable all protocols that you do not plan to use to access your printer For example you might prevent users from sending files through the ftp or connecting
15. alsPrinter com Manuals HP Designjet Printer Series Security Settings Gr E http 16 23 45 148 hp device web ccess index htrm content security amp vr Favorites 3 4 4shared com free file sh Filmlabber com Recent v HP Drivers amp Get More Add ons v GHP Designjet T1200 PostScript Security i O mp Pager Safetyy Toos v gt P 7 K HP Designjet T1200 PostScript orrorsom SE SHE SSH NPIA6343D 16 23 45 148 Printer status Replace G cartridge 3 an Configuration Printer settings e i E mail server Date amp Time a Access control is currently disabled To enable access control you must set the administrator user account Maintenance COnmmce Firmware update Paper preset management Check to disable or uncheck to enable connectivity options If any of them are changed the printer will automatically restart Disable on board Gigabit Ethernet E Disable USB Note To disable this interface you should access the EWS through different network interface Control Panel Access Lock Select an option to set the level of the control panel access lock Unlock Minimum Lock Moderate Lock Intermediate Lock Maximum Lock G Local intranet Protected Mode Off fav 100 v 15 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings vy Favorites w 4 shared com free file sh
16. as HP Web JetAdmin SNMP is also the protocol for communicating from the printer to the Windows driver SNMPv3 provides security through user authentication and data encryption A logical division of a local area network which is created to improve performance and provide security A subnet limits the number of nodes that compete for bandwidth It allows administrators to secure Device Functions by requiring users to log in with a specitic Log In Method for each Function For example users may be required to log in with an Access Code or PIN to make copies yet be required to log in with a username and password to send e mails Log In Methods The following Log In Methods are available with the latest device firmware upgrade Group 1 PIN Requires users to input a numeric code for access when at the control panel of the device The numeric code entered by the walk up user is compared to the first of two PINs stored on the device by the Administrator When the PIN is entered correctly the user can proceed Group 2 PIN Requires users to input a numeric code for access when at the control panel of the device The numeric code is compared to the second of two PINs stored on the device by the Administrator LDAP Lightweight Directory Access Protocol Requires users to input a username and password that are veritied by an LDAP server HP Digital Send Service if available Also known as DSS Requires users to enter credentials that are veritied by
17. ces To add a rule click Add Rule This runs a wizard that will help you configure each rule For a detailed description of wizard settings and additional help click Jetdirect IPsec Firewall Help 3 9 SNMPv3 You can enable and disable the SNMP v3 agent from your printer You may set up an account that allows a management application to access the SNMP v3 agent Networking Configuration sopas Mgmt Protocols TCP IP Settings Network Settings Web Mgmt SNMP Other Other Settings Security SNMFv1 v2 Settings f Enable SNMPv1 v2 read write access Authorization Set Community Name PoecFrenal Confirm Set Community Name Diagnostics Get Community Name Network Statistics Confirm Get Community Name Protocol Info C Disable SNMPv1 v2 default Get Community Name of public Configuration Page Enable SNMPv1 v2 read only access Disable SNMPv1A2 SNMPFv3 C Enable SNMPv3 Authentication Protocol MDS Passphrase Privacy Protocol DES Passphrase Context Name To enable or change an SNMPv3 setting values must be entered in all three fields 21 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings 3 10 CA JD Certificates You can request install and manage digital certificates on the HP JetDirect print server Certificates are used to identity the JetDirect print server both as a valid Web server for netwo
18. ct Jetdirect Jetdirect Jetdirect Jetdirect de f NA NA drive ee update thru USB Disable direct print with ePrint amp Share Disable ePrint Center Sels ng Sebo be eel connechon OORDRA Tele control HD ver External HDD from fw No No No No No No 6 0 0 6 5 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings 2 Security features available for Large Format scanners The Multi function printers MFPs are made of two main parts The printer and the scanner For the printer the table above applies for the scanner please refer to the following table DJ 4500MFP T1100MFP HD MFP Series DJ4520 Scanner DJ 4500 12300 emfp Scanner HD Scanner Firewall Antivirus ED systems with very low risk of being infected a a virus no antivirus is installation required Disable FIP amp WebAccess EN Vax bynes in scanner through Read only network Microsoft Security patches Yes through scanner SW update Not needed Linux based Install scanner software into da Possible but not official process separate PC 6 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings 3 Security Concepts explanation 3 1 Secure File Erase Secure File Erase is a feature that manages how files are deleted from the printer s hard disk There are three security modes to the Secure Files Erase feature These settings can be changed in the Web
19. e Select job management setup For further information refer to the printer s user manual as the actual menu options might change for a specific printer The following is an example of how to change the Secure File Erase setting for the HP Designjet T1 100 printer Z HP Web Jetadmin localhost Lo Je se File View Tools Help R Device Management f New Last Discovery 1 of 57 Selected 6 Layouts Y Filters I il Overview Al Devices 65 ley Error Devices 33 Fl Warning Devices 11 ill Ungrouped Devices 44 ig Groups yb Discovery Device Model Photosmart HP LaserJet 4350 HP LaserJet P3005 HP Color LaserJet 4600 HP LaserJet 4050 19 Configuration gt HP LaserJet M4345 MFP HP Designjet 23200ps 44in Photo HP Designjet T1100ps 24in HP LaserJet 4100 MFP HP LaserJet M3035 MFP HP Color LaserJet 5500 ER HP Designjet 800PS TF HP Designjet Z6100ps 60in IP Address 16 23 62 115 16 23 58 133 16 23 56 140 16 23 58 162 16 23 56 148 16 23 60 69 16 23 58 55 16 23 59 163 16 23 59 106 16 23 56 21 16 23 61 106 16 23 56 228 16 23 56 213 IP Hostname dhcppc3 emea h_ HP001279433A3 bcn03032 esp hp npi8d7694 emea bpo430 esp hp c npi2d289a emea npi90d76d emea 1p419 emea hpac pr 203 emea hpg troya221 esp hp npi8219a5 emea bcn03021 esp hp bcn02142 esp hp Port Any 1 1 1 1 1 1 1 1 1 1 1 1 1 Sev Q
20. ent HP Drivers gt Get More Add ons HP Designjet TL200 PostSerpt lob queue iD HP Designjet T1200 PostScript fe I a Lae Be L ke org HPAGIHID 1 18 23 45 198 Printer status i Repinee G cartridge en KE ER Job queue ba gt Page Salety Tool Gb i Sintus Supplies sd i Ez Mowe to front E vette E Retrean H nil FTADTDE 14 48 ot IDTE 14 48 The serar 16 20 95 140 at pryteged DAS reres on VITS 145 Serre arr passord hit HP 0700 14k Euernit jab History Usage accounbng Cohn HP Prateusunnal PANTONE Farla ror Wantage The server amp requesting Wiel pour urra ard PROS Vid pesaverd be sent in an inseoune manner bask quthentiration ritt SUNE connechan ITITS Vid TOTO 144E Buur 14 48 Password WT 14 37 L r name F VEE ear TAM he 1437 TETTE VAD INTE 1437 faa es amp el ala Administrator password Access control is enabled by setting the Admin account password specifying a password for the user account at Admin level You must then provide the Admin password in order to perform any of the following restricted operations e Cancel delete or preview a job in the job queue e Delete a stored job e Clear accounting information e Change printer s settings on the Device Setup page e Update printer s firmware e Change printer s date and time e Change security settings e View protected printer information pages 14 Downloaded from Manu
21. etAdmin device plug ins for LaserJet printers this would enable you can set the same global options across your fleet of HP LaserJet s and HP Designjets The following example shows how to configure the HP Designjet T2300 using the Web JetAdmin Note that in the Web JetAdmin this option is called Secure Storage Erase HP Web Jetadmin localhost File View Tools Help Device Management All Devices 1 of 3 Selected Overview pl nm Layouts F Filters gp 2 8 Al Devices 3 Error Devices 2 Device Model IP Address IP Hostname Port Any Sev Hardware Address 3 Warning Devices 0 Sy HP Designjet T2300 PostScript 16 23 13 31 aparedes emea 1 x 0026558804BF i New Last Discovery 0 MW HP Designjet T7100ps 16 23 56 125 printcornerb2 3 e 1 0026551525BB li Ungrouped Devices 3 HP Designjet T2300 PostScript 16 23 13 181 npi00265588248 1 002655882481 Groups E Discovery Configuration H H Alerts 5 fe Firmware Reports H Storage Solutions gi View Templates Device Model IP Hostname IP Address Q Storage Media HP Designjet T2300 PostScript npi00265588248 16 23 13 181 Storage Device count 1 z Sarr Quick Device Discovery nm j 8 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings Select media eG Select media HP Designjet T2300 PostScript npi0
22. g also Internet connectivity and Diagnostics amp troubleshooting of the network connectivity e Control firmware upgrades e Setup e Reset factory defaults e External hard disk connection e Security If a user loses the admin password it is not possible to reset it so the printer would be locked There is a service menu option to reset the admin password 3 19 External hard disk EHD Some printers allow the connection of an external hard disk Any HP Designjet printer with an internal hard disk uses is for four main purposes e Store the printer s tirmware amp resources media protiles demo plots diagnostic plots e Virtual memory for job processing e Job storage queue e Storage for printer s accounting data The HP Designjet External Hard Disk was designed to fulfill one specific use for those security conscious customers that want to preserve the confidentiality of the jobs being printed in their HP Designjet printers How the system works 1 Connect the External Hard Disk EHD into the printer s USB host port 2 The printer will detect the EHD and will ask the customer for permission to install it When the customer accepts the printer will perform the following step 3 A copy will be made of all the customer s information that is stored in the internal HD and copied to the external HD 4 The customer s internal HD partition will be deleted after a highly secure erasing process DoD 5220 22 M
23. hat affect the data storage system Some of these features are the Secure disk erase mode the Secure Storage Erase feature and the File System Access options File System Password LJ feature Option in the Service Utilities menu of the front panel to show not show the Internet Protocol IP address of your printer In that way only registered users or network administrations will know the correct address to submit jobs to the Hide IP address from front Panel printer Web based fleet management software tool for remote installation HP Web Jetadmin configuration problem resolution proactive management and reporting For more information go to www hp com go webjetadmin IP multicast A one to many transmission of data over an IP network Internet Protocol Security IPsec is a suite of protocols for securing Internet Protocol IP communications by authenticating and encrypting each IP packet of a data stream IPsec also includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session In our case IPsec is used to protect data flows between the host and the printer IPSec 26 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Job Held Timeout LJ feature Job Retention LJ feature Multicast DNS mDNS PJL Password LJ feature Remote Firmware Upgrade LJ feature Simple Network
24. inting devices support PostScript with a built in PostScript interpreter Settings to determine which users and or applications are allowed to print in Color Access Control color Device Password This is equivalent to the designjet s web server password It helps protect the LJ feature printer from unauthorized access through remote applications Domain Naming System Converts host names and domain names into IP addresses on the internet or DNS on local networks that use the TCP IP protocol The EWS resides on a hardware device such as an HP Designjet or in the Embedded Web Server printer firmware The EWS allows you to review configure and change EWS settings on an HP Designjet after inputting an IP address into a Web browser from your computer File system access settings The File System Access options allows you to completely disable many of the access points to the printer s data storage system These access points are for various types of usage for the printer The options are File System Access j settings LJ feature e SNMP disk access e NFS disk access e PS disk access e PJL disk access HP recommends enabling PS Disk Access to allow you to print PS files and disable the rest The File System Password feature helps protect the printer s data storage system options from unauthorized access With the File System password configured the printer requires the password before it will allow configurations to features t
25. le firmware update from USB Control Panel Access Lock Select an option to set the level of the control panel access lock e Unlock Minimum Lock Moderate Lock Intermediate Lock Maximum Lock moai 3 14 Disable firmware update through USB This option is used to disable the possibility of upgrading the printer by installing the firmware via a USB device 3 15 Disable direct print using ePrint amp Share In some printers when you connect a computer directly with a USB cable you can print without installing any driver This can be done by launching the ePrint amp Share application that resides inside the printer This feature can disable direct printing so that you cannot print through the USB unless you have the driver or ePrint amp Share installed in the computer 3 16 Disable ePrint connectivity This feature disables the ePrint Center functionality preventing somebody printing remotely to the printer 3 17 Disable internet connection Disable the direct connection of the printer to the internet This option would also prevent the printer from automatically performing firmware upgrades 23 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings 3 18 Printer Access control For some printers when setting an Embedded Web Server admin password you are also preventing access to certain front panel features The features protected in the front panel are e Network connectivity includin
26. ns v gt gt HP Designjet T1200 PostScript Security fv Gr OG v Pager Safetyw Toolsv v CA HP Designjet T1200 PostScript Oo lO O Q i i NPIA6343D 16 23 45 148 Printer status Replace G cartridge 3 ea oe Setup Configuration Security gi Printer settings Security Access Control E mail server Date amp Time Access control is currently disabled To enable access control you must set the administrator user account Maintenance Connectivi Paper preset management Check to disable or uncheck to enable connectivity options If any of them are changed the printer will automatically restart Disable on board Gigabit Ethernet IE Disable USB Note To disable this interface you should access the EWS through a different network interface Control Panel Access Lock Select an option to set the level of the control panel access lock Unlock Minimum Lock Moderate Lock Intermediate Lock Maximum Lock G Local intranet Protected Mode Off fay 100 v The following table shows the different levels access and what they enable or disable Retrieve Job Information Paper handling Configure Designjet Maximum OK l 1 0 Jo Y Intermediate OK OK I o e o e o Moderate OK OK ox e e o e Maximum Lock This option denies access to all options e Intermediate Lock This option denies access to the paper and ink supplies handling options maintenance options and demo
27. nting Max number of logged jobs 10 Reguire account ID Off Send accounting files Enabled Send accounting files to golarkef hp com Send accounting files every 7 days Exclude personal information from accounting amp mail Off B Advanced Units Metric Cutter On Roll switching options M B Web Services HP Printer Utility Enabled Color and paper management Enabled B Embedded Web Server preferences Refresh rate seconds 180 pk ETEN 18 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings 3 6 Disable connectivity interfaces Depending on the printer series there are some ports that can be disabled to prevent unauthorized printing and possible data theft You might want to disable the USB printing port to avoid people from connecting a laptop directly into the printer and printing through the USB If you have installed a JetDirect card to add extra security features you might want to disable the onboard Ethernet amp HP Designjet T1200 PostScript Security Windows Internet Explorer G eo S http 16 23 45 148 hp device webAccess index htm content x vy Favorites 3 4 4shared com free file sh Filmlabber com Recent v 4 HP Drivers amp Get More Add ons v Ee HP Designjet T1200 PostScript Security z ol rot fo Ky HP Designjet T1200 PostScript 4 AE NPIA6343D 16 23 45 148 Printer status Replace G cartridge g an setup Configuration
28. prints on top of the Moderate Lock Only viewing printer and supplies information is allowed e Moderate Lock This option denies access to all printer settings the job queue information and service prints and the printer log on top of Minimum Lock e Minimum Lock This option denies access to the Resets options Enable Disable connectivity options and the Service Menu Note With the Moderate or Maximum locks set you will not able to load unload paper or replace printheads ink cartridges without first unlocking the front panel and so these options should only be set in specitic circumstances where the implications are known and understood 12 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings When the Control Panel is locked the applicable menus show a lock symbol in the front panel If a user attempts to enter in a locked menu entry a warning message is displayed Default printing options Access denied Contact the printer administrator 3 3 1 Deadlock Front Panel locked EWS password forgotten Under certain circumstances a printer might be blocked if the control panel has been locked and the administrator has lost the password needed to unlock it This could happen if the front panel is locked through the printer s Embedded Web Server and the Administrative password in the EWS is lost In this situation it would not be possible to unblock the front panel f
29. rk clients and as a valid client requesting access ona secure network By default the JetDirect print server contains a See preinstalled certificate amp 16 23 13 181 Windows Internet _ pl x Ap HP Designjet T2300 PostScript NP1002655882481 16 23 13 181 Networking Configuration A uthorization TCP IP Settings EZI J Network Settings Certificates Other Setti is Certificates are used to identify devices on the network Security Settings Jetdirect Certificate By default a pre installed self signed Jetdirect certificate is created to identify Jetdirect You can change this certificate to more accurately identify the device and to update the length of time the certificate is valid ee 173 an VEGNETT Mgmt Protocols IPsec Firewall Status Installed Diagnostics View Configure Network Statistics CA Certificate Protocol Info s i Ta A Certificate Authority CA certificate is required for some authentication methods It is used to verify the authentication server s certificate The CA certificate must be the Configuration Page certificate of the CA that signed the authentication server s certificate Status Not Installed 3 11 Hide IP from front panel Some printers includes an option in the Service Menu accessible with the help of an HP Support agent only that allows you to hide all IP information from the printer s front panel 3 12 Encrypt web communications
30. rom the Embedded Web Server and it would not be possible to reset the Embedded Web Server from the front panel With HP Designjet Printers there is a menu option accessible to users with the guidance of Customer Support agents Contact HP Support in case of problems related to deadlock 3 4 Embedded Web Server EWS multilevel access The Embedded Web Server is a powerful tool which enables direct management of a device such as an HP LaserJet printer or an HP Designjet printer however with no security in place this tool also has the potential to have a negative effect on many features as they can be configured using just a web browser and knowledge of the IP connection to the printer To solve this situation we have implemented two levels of access to our compatible HP Designjet printers as follows The Security page enables users to e Restrict access to the printer by setting an administrator user account e Define two levels of access Administrator and Guest e If the two levels of access have been set and you have neither of the passwords you will not be able to gain access to EWS information see below 13 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings HP Designjet TOU PostScrip Job queue Windows Internet Explurer G 7 T hipu ETLI ip fidence tar b rersndrr hin contrats jab queur T 7 x 27 nagle x GG vr Feenrites ji 2 Ashard com free file sh Ay Filmlabber com Rec
31. signjet Printer Series Security Settings If there is no administrator account restricted operations can be accessed without a password 3 4 1 Guest password Once the administrator user account has been set the administrator can also set the guest user account by specifying a password for the guest If the guest user account is set a username and password are required for all EWS operations users indentified as guests have access to restricted operations whilst users identitied as administrators have access to all operations If the guest account is not set a username and password are not required for unrestricted operations GHP Designjet T1200 PostScript Security Windows Internet Explorer fo G t http 16 23 45 148 hp device we security op set guest A Google P x amp v yy Favorites 93 4 shared com free file sh Filmlabber com Recent v f HP Drivers Get More Add ons v HP Designjet T1200 PostScript Security v 6 J dm v Pagev Safetyv Toolsv v A K HP Designjet T1200 PostScript N NPIA6343D 16 23 45 148 Logged in as administrator Printer status Replace G cartridge 3 ee ae setup Suppor Configuration Securi ty Hi Printer settings Security Set the guest user account E mail server Date amp Time User name Guest i New password e Maintenance Firmware update Confirm password oe Paper preset
32. st Config 4 TT j 3 8 IPSec A Firewall or IP Security IPsec policy allows you to control traffic to or from the device using network layer protocols Either a firewall or IPsec firewall pages will appear depending on whether IPsec is supported by the print server and device If IPsec is not supported firewall pages will be displayed and a firewall policy can be configured Please note Before you enable a firewall or IPsec policy you should make sure you have a secure access to your configuration management settings for example through an administrator password This will ensure your policy is not easily disabled through Telnet control panel menus or other management tools 20 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings Firewall Use this page to view or configure a firewall policy A firewall policy consists of up to 10 rules where each rule specifies the IP addresses and services allowed by the print server and device To add a rule click Add Rule This setting runs a wizard that will help you configure each rule IPsec Firewall Use this page to view or configure an IPsec firewall policy An IPsec firewall policy consists of up to 10 rules As with a firewall policy each rule specifies the IP addresses and services allowed by the print server and device With IPsec support you can apply IPsec authentication and encryption protocols for those addresses and servi
33. sueeeeeeueens 13 3 5 Exclude personal info NNN 18 3 6 Disable connectivity Ne ketdeed enke 19 Gr Dronk PoCo ERE EE E E 20 SEE REE E A E E E E newton poets oeeenunon see 20 NNN 21 3 10 CA JD Certificates ccccccccccccccccecececccececcccacacacacaueeseeesueueeeuaeaeaeacacaeasacacacacacacueueuees 22 3 11 Hide IP from front NL 22 3 12 Encrypt web communications sqscicrcntecdiczsacienietcinyadapcedcadabanteelind tanctigs enedesessardeomeenslanesends 22 3 13 DEN 23 3 14 Disable firmware update through USB rrrrrrrnnrnrrvnrrrrnvnrrrrrnernrnnnrnnrnnerrrrnnnerensnsnnnnnn 23 3 15 Disable direct print using ePrint amp Share rrrrrnrrrrnvnrrrrnvnrrrrvnrrrrvnnrrrrnnerrnrnnnersrnnsennnnne 23 3 16 Disable ePrint connectivity EE 23 3 17 Disable internet connection rrrurrrrvnarrrvvnrrrrvnrrrrvnarernnenernrnnerrrnnnnnrrnnernrnnnsnnrnnssnnnnnn 23 3 18 Fel eg GCOS 5 COMO EEE EE 24 3 19 Paernal harddisk vv4v4v4v424724 ENNEA 24 le 24 4 Designjet Security features vs laserJet rrrrrrrrrrnnnrnrrvnrrrrrvnrrrrnnrrrvvnnrnrnnnernrnnnenenvnsnnnnnnene 25 Di ET 26 3 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings 1 Introduction amp Overview This document is aimed at providing an overview of the security features supported by HP Designjet printers as of February 2012 The security features described in this document make the HP Designjet printer series particularly well suited to being
34. the HP Digital Send Service software HP Digital Send Service sottware must be available to use this Log In Method If no DSS server is associated with this device walk up users will not be required to authenticate before using the device Kerberos Requires users to enter a username and password to be verified by a Windows Server Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings For more information About HP Designjet printers www hp com go designjet About HP WebJetAdmin www hp com go webjetadmin 2012 Hewlett Packard Development Company L P The information contained herein is subject to change without notice The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services Nothing herein should be construed as constituting an additional warranty HP shall not be liable for technical or editorial errors or omissions contained herein Microsoft and Windows are U S registered trademarks of Microsoft Corporation Adobe and PostScript are trademarks of Adobe Systems Incorporated which may be registered in certain jurisdictions April 2012 28 Downloaded from ManualsPrinter com Manuals
35. tings HP Designjet Printer Series Security Settings 3 3 Control Panel Access Lock The control panel access is a feature intended for IT administrators which allows them to lock the device s control panel using the HP Web JetAdmin or the printers Embedded Web Server depending on the printer model This feature prevents unauthorized users from accessing the control panel and changing the printer s settings Administrators can specify the level of access as follows e Unlock e Minimum lock e Moderate lock e Intermediate lock e Maximum lock This option can be enabled from the HP Web JetAdmin as shown below H My Control Panel Access Network Unlock B Security Minimum Lock i ppess Control List Control Panel Access Moderate Lock Disable Direct Ports Intermediate Lock H Embedded Web Server Pass Get Community Name Madmum Lock a PJL Password Printer Firmware Update i SNMP Version Access Control 4 File System 1 Downloaded from ManualsPrinter com Manuals HP Designjet Printer Series Security Settings This option can be enabled from the T1200 Embedded Web server as shown below Ee HP Designjet T1200 PostScript Security Windows Internet Explorer PN G ND http 16 23 45 148 hp device webAccess index htm content security vr Favorites 93 4 shared com free file sh Filmlabber com Recent v HP Drivers amp Get More Add o

Download Pdf Manuals

image

Related Search

Related Contents

Kenmore Elite 6.1 cu. ft. Electric Range w/ Dual True Convection - Stainless Steel Owner's Manual (Espanol)  Ecole du dimanche virtuelle - the Anglican Church of Canada  巻末資料 - 日本結核病学会  Manual del usuario  Bedienungsanleitung  Quantum LTO-5 Quick Start Guide  製品安全行政のミッションと  LEDG88017  Instrucciones de servicio  取扱説明書を必ず参照してください  

Copyright © All rights reserved.
Failed to retrieve file