HP LaserJet Enterprise, HP LaserJet Managed, HP PageWide Enterprise, HP PageWide Managed - Configuration Guide using the Embedded Web Server (EWS)

Create or install certicates
Learn how to create or install security certicates.
●
Create a new self-signed certicate
●
Create a certicate signing request
●
Install an identity certicate
●
Import an identity certicate
●
Install a certicate
Create a new self-signed certicate
Use this feature to create a new, self-signed identity certicate for the printer. A self-signed identity certicate is
installed on the printer by default for data-encryption purposes only. Self-signed identity certicates are not
accepted for authentication since they are not issued by a trusted Certicate Authority (CA).
NOTE: To create an identity certicate signed by a CA, see the following sections on creating a certicate
signing request (CSR) and installing an identity certicate from a CSR.
Creating a new, self-signed certicate overwrites and replaces the existing self-signed certicate on the printer.
1. Using the top navigation tabs, click Security.
2. In the left navigation pane, click Certicate Management.
3. Click Create... in the Create New Self-Signed Certicate area.
4. Enter the identifying information for the printer in the Identifying Information area.
5. Select an encryption key length in the RSA Key Length: drop-down menu in the Key Options area.
NOTE: If the Trusted Platform Module (TPM) is installed, the private key may be marked as exportable.
However, if Mark private key as exportable is selected, the private key will not be generated on the TPM.
6. Select a signature algorithm from the Signature Algorithm drop-down menu in the Signature Algorithm
area.
7. Enter the validity period for the certicate in the Certicate Validity area. The default validity period is ve
years from the system date at creation time.
8. Click OK to go to the new, self-signed certication conrmation page. To return to the main Certicates
page without updating the current, signed certicate, click Cancel.
Create a certicate signing request
Use the following steps to create a certicate signing request.
1. Using the top navigation tabs, click Security.
2. In the left navigation pane, click Certicate Management.
3. Click Create... in the Create Certicate Signing Request area.
4. Enter the identifying information for the organization to which the certicate will be issued in the
Identifying Information area.
ENWW Install certicates 65