HP Device Health & System Health Apps - Security White Paper

Appendix – Frequently Asked Questions
1. Q: What are System Health Apps and Device Health?
A: System Health Apps is a new, extensible control panel application included as part of
FutureSmart printers running 4.11 firmware or later. When launched, System Health Apps
displays currently provisioned cloud-based diagnostic and troubleshooting applications to the
user. As of 2020, System Health Apps is only available on devices with a touch screen control
panel of 4.3” (10.9 cm) or larger.
Note: System Health Apps enables access to HP cloud-based solutions such as Device Health. As
such, it can only provide benefits to devices that are connected to a network providing access to
the internet.
HP Device Health is the diagnostic and troubleshooting tool launching with System Health Apps. It
enables the effortless transmission of a printer’s event logs to HP Support to simplify and
accelerate issue identification and resolution.
Once System Health Apps has been enabled – either from the control panel or at device set up,
Device Health will automatically transmit data periodically without any customer or IT Print
manager effort. Together, System Health Apps & Device Health are a simplified extension of the
HP Smart Device Service (SDS) capability to non-contractually managed printers.
2. Q: Which policies govern HP Data use and transport?
A: All data gathered by HP is safeguarded per the tenets of the Online HP Privacy Statement and
Terms of Use.
3. Q: Do System Health Apps, Device Health and HP SDS meet the EU’s General Data Protection
Regulation (GDPR) requirements?
A: Yes. At HP, we have a strong policy for privacy and data protection and HP is implementing
additional controls to ensure that we have established the compliance framework to meet the
GDPR requirements. These include controls for managing third parties, enhancing the way we
gather individual customer consents and implementing systemic procedures for the way we
design our products, services and software. Data is stored in secure servers in the US.
4. Q: Which network endpoints are accessed by the device as part of System Health Apps & Device
Health?
A: The device accesses the following endpoints:
https://*.smartcloudprint.com
*.avatar.ext.hp.com -- over either UDP port 9930, https port 443 or http port 80
Note that communications to these endpoints are encrypted/decrypted outside of the transport
channel using GCM encryption. Specific URLs are available upon request.
5. Q: Which certificates are used for network communication?
A: HP System Health Apps/Device Health uses certificates signed by DigiCert Inc. to secure and
validate communication from the printer to the cloud. Certificate revocation lists located at the
following URLs should be made accessible through the network firewall: