HP Enterprise printers and scanners - Imaging and Printing Security Best Practices (white paper)

Basic Network Security for Multiple HP Devices
This chapter explains how to configure security settings for one or more printers using HP Web Jetadmin. It assumes that you have
taken or plan to take reasonable steps to secure the network environment in which your MFPs are operating. This includes
configuring network firewalls and providing up-to-date virus controls. If you need help doing this or are looking for information on
ACL, Kerberos, PIN authentication, LDAP, or Solutions please refer to the chapter on Advanced Security before continuing.
Notes on the Process of Configuration
This checklist covers all relevant security settings available for both printers and MFPs. Testing shows that this combination of
settings is successful in the most common network environments as long as the settings are executed in the correct order.
After each setting in the checklist is applied, it is important that you verify configuration to ensure this order is maintained. If a
setting was not applied, attempt to set that setting again. If you have further issues with a particular configuration item, you can
try using the individual configuration pages, or setting that item through the EWS if available.
Keep in mind that every network is different. Configuring an MFP for your network may require adjustments to this configuration.
Be aware of your network environment and consider the right configurations for your situation.
Also, keep in mind that each model of MFP may have unique sets of available settings. For instance, LaserJet (black and white only)
MFPs do not provide settings to restrict color printing. However, Web Jetadmin lists the aggregate of all possible settings for all
MFPs you are managing. You can select settings for all MFPs, and each individual MFP will accept configurations according to its
capabilities and ignore settings that do not apply.
All of the settings in this chapter are found in HP Web Jetadmin, and you should use Web Jetadmin to complete them. If possible,
try to complete all of the steps in the correct order.
Tip:
Use a printout of the Settings List chapter to check off each item as you go along.
Using Web Jetadmin and Printer Passwords
Web Jetadmin is a powerful tool that allows you to manage any number of MFPs and printers. It provides the ability to configure a
wide variety of features and services on the network. Without proper security, Web Jetadmin allows malicious users the same
conveniences for attacking your network. Thus, configuring security features and passwords and updating them regularly for Web
Jetadmin and MFPs is important to network security.
This involves several passwords that limit access to important areas of the printer or MFP. When you attempt to make changes to
configurations, the printers and MFPs will require all applicable passwords. Web Jetadmin keeps an encrypted cache of all of these
passwords for each MFP whenever they are configured or used. However, sometimes the cache can lose track of some credentials.
Thus, you should keep a log of the passwords in a safe place. Web Jetadmin will prompt for passwords during the configuration
process if they are missing from the cache.
CAUTION:
Losing passwords can block access to an MFP. Be careful to record them in a safe place.
Here is a list of the passwords you should configure:
 Web Jetadmin password (required during installation of Web Jetadmin)
 SNMPv3 credentials
 EWS Password (applies to the EWS, JetDirect networking, and FTP)
 PJL password