HP LaserJet MFP - Imaging and Printing Security Best Practices

Table of Contents
Table of Contents ...................................................................................................... i
Chapter 1: Introduction ............................................................................................. 1
Cautions ........................................................................................................................ 2
Follow the Checklist in Order ........................................................................................ 2
Understand the Ramifications ........................................................................................ 2
Continue to be Vigilant ................................................................................................ 2
MFP Environment ............................................................................................................ 3
Assumptions ................................................................................................................... 3
Solutions covered ........................................................................................................... 4
Organization ................................................................................................................. 4
Chapter 2: Threat Model .......................................................................................... 5
Spoofing Identity ............................................................................................................ 5
Tampering with Data ....................................................................................................... 6
Repudiation ................................................................................................................... 6
Information Disclosure ..................................................................................................... 7
Denial of Service ............................................................................................................ 7
Elevation of Privilege ....................................................................................................... 8
Chapter 3: Basic Security for Multiple MFPs ................................................................ 9
Notes on the Process of Configuration ............................................................................... 9
Using Web Jetadmin and MFP Passwords ...................................................................... 9
Getting started configuring MFP Security Settings .............................................................. 11
Setting up HP Web Jetadmin ...................................................................................... 11
Configuring HP Secure Hard Disk ............................................................................... 13
Configuring SNMPv3 ................................................................................................ 16
Configuring MFP Device Settings .................................................................................... 22
I/O Timeout to End Print Job....................................................................................... 22
Job Hold Timeout ...................................................................................................... 22
Job Retention ............................................................................................................ 23
Apply the Changes ................................................................................................... 23
Configuring MFP Network Settings .................................................................................. 25
Enable Features ........................................................................................................ 25
Encrypt all Web Communication ................................................................................. 29
Encryption Strength ................................................................................................... 30
Error Handling ......................................................................................................... 31
IPX RCFG Support ..................................................................................................... 31
Job Timeout .............................................................................................................. 32
Privacy Setting .......................................................................................................... 32
Protocol Stacks ......................................................................................................... 33
Web Services Print .................................................................................................... 35
Apply your Changes ................................................................................................. 36
Configuring MFP Security Settings ................................................................................... 37
Bootloader Password ................................................................................................. 37
Color Access Control ................................................................................................. 38
Control Panel Access ................................................................................................. 38
Embedded Web Password ......................................................................................... 39
PJL Password ............................................................................................................ 40
HP LaserJet and Color LaserJet MFP Security Checklist i