HP LaserJet, HP PageWide - Firmware updates sent as Print Jobs disabled by default in FutureSmart bundle 4.10 (white paper)

2
Introduction
This whitepaper describes the change to the default value of the “Allow firmware updates sent as print jobs (Port
9100)” setting being introduced in FutureSmart firmware bundle version 4.10. It details it’s effects on firmware
installation methods and printing software solutions. This change is part of the Secure by Default initiative to provide a
more secure printing device “out of box”.
Detailed Description
HP printing devices have the ability to accept firmware upgrades, solutions software and custom color table “bundles
sent as a print job. The “Allow firmware updates sent as print jobs (Port 9100)” setting controls the ability for the
printing device to accept firmware over the standard printing port, and also applies to firmware sent over all print-path
methods including FTP, LDP, IPP(s), EWS Print page or Copy command.
The setting is available from the device EWS, HP Web Jetadmin and HP Security Manager.
 EWS – “Allow firmware updates sent as print jobs (Port 9100)
 HP Web Jetadmin – “Printer Firmware Update”
 HP Security Manager – “Remote Firmware Update (RFU)”
“Allow firmware upgrades sent as print jobs” setting in the Embedded Web Server (EWS)
“Printer Firmware Update” setting in Web Jetadmin
“Remote Firmware Update (RFU)”policy setting in HP Security Manager
Firmware bundle formats
Standard firmware and software bundles have the extension “BDL” and are processed by the device’s Firmware
Integration Manager (FIM) service. Content processed by the FIM service is sent over the standard web services
transport/protocol.
Firmware and software formatted with specialized commands PJL use the file extension “RFU”. Disabling the “Allow
firmware updates sent as print jobs (Port 9100)“ setting will cause the device to ignore PJL wrapped firmware and
software.