Multifunction Peripheral (MFP) Security for Enterprise Environments

MFP Security White Paper
2
Ease of Use
Frequently, security features are ignored because of their complexity. A device may offer credible security
features, however because of the complexity of their use, they may go unused.
HP has concentrated on reducing the complexities of security, while continuing to lead with state-of-the-art
capabilities. By making security seamless in the operation of the device, administrators of all abilities can
ensure the security of their imaging and printing infrastructure (Figure 1).
Figure 1: Imaging and Printing Infrastructure
The following describes the major components of the infrastructure, including their interrelationships, and
security capabilities.
Multifunction Peripheral (MFP) Hardware
HP MFPs allow fast, high-quality printing and copying, as well as advanced finishing capabilities. Security
has been integral to the MFPs design, including mechanisms to limit usage to authorized users, provide
privacy and integrity of printed data, and ensure only authorized management use.
The HP MFP is composed of several subsystems, including major components for scanning and printing. A
network interface provides connectivity allowing remote printing, as well as scanning to email, network
folders, and LAN FAX. An analog FAX accessory allows the transmission and reception of FAXs over analog
telephone lines. Internal to the system are processors, memory (RAM, ROM), firmware, and hard disk storage.
Embedded Operating System and Firmware
At the core of all HP multifunction peripherals (MFPs) are computer processors and firmware. The firmware
consists of an “embedded” operating system and the instructions the processor is to execute to function. The
processors and embedded operating systems contained in the MFP are not based on typical PC platforms
such as Windows and MacOS, and as such have been largely unaffected by devastating network worms
and viruses. While HP MFPs have been affected by denial of service attacks, resulting in slowed operation,
there have been no known cases of viruses infecting these devices, or propagating from them.
Firmware Updates
To facilitate future upgrades and bug fixes, HP MFPs allow remote firmware updates. Using Web Jetadmin,
batch updates of printers may be accomplished easily and quickly. To protect the system from unauthorized
Administrato
r
Web Jetadmin (WJA)
Director
y
Digital Sending
Software (DSS)
User
s
Printers
Multifunction Peripheral (MFP)
Spoolers