HP CM8060 User Manual

5 Secure the device
This chapter contains information about the following topics:
●
Security standards
●
Set the device administrator password
●
Lock the Administrator Tools section of the startup menu
●
Disable printing through a direct connection
●
Disable printing from the embedded Web server
●
Restrict users from sending e-mail to accounts other than their own
●
Control access to the device
●
Restrict color use
●
Manage certificates
●
Example security configurations
ENWW 57
 

Security standards
The device supports security standards and recommended protocols that help you keep the device
secure, protect critical information on your network, and simplify the way you monitor and maintain the
device.
The device comes with an embedded HP Jetdirect  print server that features IP Security (IPsec).
For in-depth information about HPs secure imaging and printing solutions, visit 
www.hp.com/go/
secureprinting . The site provides links to white papers and FAQ documents about security...

Set the device administrator password
To prevent unauthorized access to the device settings, use the embedded Web server to set a device
administrator password. This password grants acce ss to the administrative features of the embedded
Web server. Until the password is set, all  of the tabs are availalble to all users.
When users try to access the embedded Web server after setting the administrator password, the only
tab that is available without signing in is the  Information tab. Access to all other...

Lock the Administrator Tools section of the startup menu
While the device is initializing, you can open a sp ecial startup menu. HP-authorized service personnel
use this menu for advanced troubleshooting proced ures. One section of this menu provides system
administrators with additional device-managemen t features that are not available through the
Administration  menu on the control panel. To prevent unauthorized access to this menu, you can create
a password for the Administrator Tools portion of the...

Disable printing through a direct connection
If you want to allow printing only from users who are connected to the device through a network
connection, you can disable printing through a direct port.
1. Open the embedded Web server. See 
Open the embedded Web server on page 40.
2. Select the  Settings tab, and then select  General Security from the menu on the left side of the
screen.
3. In the area for  Direct Ports, select Disable Direct Ports .
4. Click  Apply . The device automatically turns off...

Restrict users from sending e-mail to accounts other than
their own
You can configure the E-mail option so that us ers can send e-mail only to their own accounts.
1. Open the embedded Web server. See 
Open the embedded Web server on page 40.
2. Select the  Digital Sending  tab, and then select  E-mail Setup from the menu on the left side of
the screen.
3. In the area for  Default Message Settings , select Restrict users from editing all address
fields . Configure the E-mail feature so that  users must...

Control access to the device
You can use the embedded Web server to control which device features require users to sign in before
being able to access those features. You can also  create permission sets that grant varying levels of
access to individual users or groups of users.
1. Open the embedded Web server. See 
Open the embedded Web server on page 40.
2. Select the  Settings tab.
3. Select  Device Sign In  from the menu on the left side of the screen.
Access-control level for device features
On the...

Permission sets
If you selected either Maximum Access Control  or Custom Access Control  for the access-control
level, you must configure permission sets. You can al so create new permission sets to meet access-
control needs. You can assign permission sets to  user accounts that are stored on the device or to
network users and groups.
The device has the following preconfigured permission sets:
● Device User
: This permission set is editable, and it can be assigned to individual users and groups.
The...

Main featureSub-optionsDescription
Fax applicationAbility to edit a Speed DialPermits access to the Fax feature on the
device control panel.
Clear the check box next to  Ability to edit a
Speed Dial  to restrict members of this
permission set from  changing any speed-dial
information.
Job StatusDetails or Cancel any users job
Ability to Promote any users jobPermits access to the  Job Status feature on
the device control panel.
If you clear the check box next to  Details or
Cancel any users job , members...

Main featureSub-optionsDescription
Supply Status application Permits access to the Supplies Status feature
on the device control panel.
If you clear this check box, members of this
permission set cannot view supplies status
and they cannot configure the paper size or
type settings for the trays.
Printing Print with Professional Color Quality
Print with General Office Color Quality Select a 
Printing option to allow members of
this permission set to print with the desired
color quality.
If you clear the...