HP Commercial LaserJet Printers and MFPs - Imaging and Printing Security Best Practices

Chapter 3 HP LaserJet and Color LaserJet MFP Security Checklist 9
Chapter 3: Basic Security for Multiple MFPs
This chapter explains how to configure security settings for one or more MFPs using HP Web
Jetadmin. It assumes that you have taken or plan to take reasonable steps to secure the network
environment in which your MFPs are operating. This includes configuring network firewalls and
providing up-to-date virus controls. If you need help doing this or are looking for information on
Jetdirect Firewall, ACL, Kerberos, PIN authentication, HP Digital Send Service, IPSec, IPv6, or Full
Hard Disk Encryption please refer to the chapter on Advanced Security.
Notes on the Process of Configuration
This checklist covers all relevant security settings available for MFPs. Testing shows that this
combination of settings is successful in the most common network environments as long as the
settings are executed in the correct order.
After each setting in the checklist is applied, it is important that you verify configuration to ensure
this order is maintained. If a setting was not applied, attempt to set that setting again. If you have
further issues with a particular configuration item, you can try using the individual configuration
pages, or setting that item through the EWS if available.
Keep in mind that every network is different. Configuring an MFP for your network may require
adjustments to this configuration. Be aware of your network environment and consider the right
configurations for your situation.
Also, keep in mind that each model of MFP may have unique sets of available settings. For
instance, LaserJet (black and white only) MFPs do not provide settings to restrict color printing.
However, Web Jetadmin lists the aggregate of all possible settings for all MFPs you are managing.
You can select settings for all MFPs, and each individual MFP will accept configurations according
to its capabilities and ignore settings that do not apply.
All of the settings in this chapter are found in HP Web Jetadmin, and you should use Web Jetadmin
to complete them. If possible, try to complete all of the steps in the correct order.
Tip:
Use a printout of the Settings List chapter to check off each item as you
go along.
Using Web Jetadmin and MFP Passwords
Web Jetadmin is a powerful tool that allows you to manage any number of MFPs and printers. It
provides the ability to configure a wide variety of features and services on the network. Without
proper security, Web Jetadmin allows malicious users the same conveniences for attacking your
network. Thus, configuring security features and passwords and updating them regularly for Web
Jetadmin and MFPs is important to network security.
This involves several passwords that limit access to important areas of the MFP. When you attempt
to make changes to configurations, the MFPs will require all applicable passwords. Web Jetadmin
keeps an encrypted cache of all of these passwords for each MFP whenever they are configured or
used. However, sometimes the cache can lose track of some credentials. Thus, you should keep a