HP CM8060 User Manual

							
Example security configurations
This section provides examples of setting up several common security configurations.
Scenario 1: Everyone shares the same access code,  and all users must sign
in
In this scenario, the device has one access code.  People who know the access code can use the device.
People who do not know the access code cannot use the device.
The sign-in screen always appears on the device control panel until a user signs in.
1. Open the embedded Web server. See 
Open the embedded Web server on page 40.
2. Select the  Settings tab, and select  Device Sign In from the menu on the left side of the screen.
3. Select the  Device Access  tab.
4. In the area for  Access Control Level for Device Functions , select Maximum Access Control ,
and then click  Apply.
5. On the  Device Sign In  page, select the  Users/Groups tab.
6. In the area for  Device User Accounts , click New.
7. A five-digit access code is already  filled in. If you want to assign a different access code, use a five-
digit number. This is the access code that all users w ill share when they sign in to the device at the
control panel.
8. In the box next to  Full Name, type a name for the account.
9. Assign the  Device Administrator  permission set to the account.
10. Click  OK. Verify that the new account appears  in the list of Device User Accounts.
11. Click  Apply .
12. Provide the access code to the people who should be able to use the device.
Scenario 2: Users must  sign in for specific features, and they use Windows
credentials
In this configuration, users must sign in the first  time they try to use a device feature that requires
authorization. A Windows sign-in screen prompt s them to provide their Windows credentials.
After signing in, users are not prompted to sign in to use any other feature that requires this type of
authorization.
All users who sign in at the device will  have the permission set that is the Default Permission Set for
Windows Users . Assign this permission set by using the  Users/Groups tab. The factory default
permission set for this group is  Device User, but you can also create a new permission set and assign
it to that group.
1. Open the embedded Web server. See 
Open the embedded Web server on page 40.
2. Select the  Settings tab, and select  Device Sign In from the menu on the left side of the screen.
3. Select the  Device Access  tab.
ENWW Example security configurations 77
 
						

							
4.In the area for  Access Control Level for Device Functions , select Custom Access Control .
Wait for the page to refresh, and then click  Define Custom.
5. Select the features that you want people to sign in to use.
For print jobs that are sent from a computer, th e device checks the username that is associated
with the job and it applies any color restrictions  that you have specified for that user or group.
6. For each feature that requires signing in,  select the default method for signing in.
TIP:You can specify different methods for differen t features. For example, you could specify
Windows sign in for the  Copy feature and a differe nt method for the E-mail feature.
Click OK.
7. On the  Device Sign In  page, select the  Sign In Methods  tab.
8. Set the default sign-in method to Windows.
9. In the area for  Windows Sign In Setup , select the check box next to  Enable Windows Negotiated
Sign In .
10. In the area for  Trusted Domains , click Add, and add each domain that you want to include.
11. Provide the attributes that correspond to your  Windows Active Directory setup, and select the
Default Windows Domain. You must use the UNC path  and the exact names that are set up for the
Windows Active Directory. The device has no wa y to verify if you have used the correct names.
12. Click  Apply .
Scenario 3: Customized  access for certain people
This scenario has the following parameters:
●Specific people have device administrator privileges so they can use the 
Administration menu on
the control panel.
● All users must sign in to use the 
E-mail feature.
● Only people who work in the advertising department can use 
Professional color quality for printing
and copying.
● Users must sign in at the device to use specific features.
Setting up this configuration requires these major st eps, which are detailed in the sections that follow.
1. Set the color access-control level.
2. Set the device access-control level.
3. Create a new permission set that restricts Profes sional Quality color printing and copying, and also
adjust the settings for the Device User permission set.
4. Create new users and gr oups for device access.
5. Select the sign-in method.
78 Chapter 5   Secure the device ENWW
 
						

							
Step 1: Set the color access-control level1.Open the embedded Web server. See 
Open the embedded Web server on page 40.
2. Select the  Settings tab.
3. Select  Restrict Color/Limits  from the menu on the left side of the screen, and then select the
Restrict Color  tab.
4. In the area for  Color Access Control Level , select Custom Access Control .
5. Click  Apply .
Step 2: Set the device access-control level 1.Select  Device Sign In  from the menu on the left side of the screen.
2. Select the  Device Access  tab.
3. In the area for  Access Control Level for Device Functions , select Custom Access Control .
Wait for the page to refresh, and then click  Define Custom.
4. Select the check boxes next to  the following items so they require users to sign in:
● Administrator application
● Make a Copy with Professional Color Quality
● E-mail application
● Print with Professional Color Quality
 (This item is near the bottom of the page, in the area
for Color Printing Control.)
5. At the bottom of the page, in the area for  Default Sign In Method for each Device Function ,
select  Default  for the following applications:
● Administration application
● Copy application
● E-mail application (atta
ch a scan to E-mail)
ENWW Example security configurations 79
 
						

							
Step 3: Configure permission sets1.You need to change the default permissions for the  Device User permission set. On the  Device
Access  tab, in the list of permission sets, select  Device User, and then click  Edit.
a. Select the check box next to  E-mail application.
b. Clear  the check boxes next to the following items:
● Administrator application
, and all items that are listed under it.
● Make a Copy with Professional Color Quality
● Print with Professional Color Quality
c. Click  OK.
2. Now create a copy of the edited Device User pe rmission set, and update it to create a new
permission set for people who are allowed to use Professional color printing and copying.
a. In the area for Permission sets, select  Device User, and then click  Copy.
b. Next to  New Permission Set Name , type a name, such as “Professional Color Quality
Allowed”.
Click  OK. Verify that the new permission set appears in the list.
c. Select the new permission set, and click  Edit.
d. Select the check boxes ne xt to the following items so members of this permission set can use
them:
● Make a Copy with Professional Color Quality
● Print with Professional Color Quality
NOTE:
Do not check any of the boxes for the Administrator Application.
Step 4: Create new users and groups for device access
To complete this step, specify a default permission set that applies to most users. To provide additional
privileges for administrators and people who work  in the advertising department, add mappings that
assign a different permission set to each of those us ers. Before beginning this step, obtain the exact
names of the users and groups that are defined in  your Windows Active Directory. Use the full UNC
path.
1. Select the  Users/Groups  tab.
2. Select  Device User  for the Default Permission Set for Windows Users .
3. Set up permission for the users who have access to  the Administrator Application on the control
panel.
a. In the area for  Windows User and Groups , click New.
b. Next to  User or Group , select User.
c. Next to  Network User or Group Name , type the Active Directory username for the user.
d. Next to  Permission Set , select Device Administrator .
80 Chapter 5   Secure the device ENWW
 
						

							
e.Click  OK.
f. Repeat this process for each user who should have this permission.
4. Set up permission for people who work in the ad vertising department to use Professional Color
Quality.
a. In the area for  Windows User and Groups , click New.
b. Next to  User or Group , select Group.
c. Next to  Network User or Group Name , type the Active Directory username for the group that
is associated with the advertising department.
d. Next to  Permission Set , select Professional Color Quality Allowed .
e. Click  OK.
Step 5: Select the sign-in method 1.Select the  Sign In Methods  tab.
2. Next to  Default Sign In Method at the device , select Windows .
3. In the area for  Windows Sign In Setup , select the check box next to  Enable Windows Negotiated
Sign In .
4. In the area for  Trusted Domains , click Add, and add each domain that you want to include.
5. Provide the attributes that correspond to your  Windows Active Directory setup, and select the
Default Windows Domain.
6. Click  Apply .
ENWW Example security configurations 81
 
						

							
82 Chapter 5   Secure the device ENWW
 
						

							
6 Manage the device
This chapter contains information about the following topics:
●
Check job status and use the job queue
●
Use the embedded Web server
●
Use HP Web Jetadmin
●
Set up the notification server
●
Set up Alerts
●
Set up AutoSend
●
Set the date and time
●
Set up a sleep schedule
●
Backup and restore settings
●
Upgrade the firmware
ENWW 83
 
						

							
Check job status and use the job queue
To check the status of individual jobs, use the Job Status feature on the device control panel. Also use
this feature to pause all jobs, remove jobs from the qu eue, or to promote a job so it is processed sooner.
Open the job queue
1.From the Home screen, scroll to and touch  Job Status. The job queue opens.
2. The Active  tab shows jobs that are currently processi ng. From the drop-down menu, select a job
category, and then select the name of the job.
NOTE: The system administrator can configure the de vice so that you cannot cancel, promote,
or see the details for jobs  that are not your own.
●Touch 
Pause All  to stop all active jobs.
CAUTION: As long as the device is in a paused stat e, it will not process incoming print jobs.
It will remain in this state until Resume  All is selected on the control panel.
●Touch 
Cancel Job  to cancel the selected job and remove it from the job queue.
● Touch 
Details  to see the information about the selected job.
● Touch 
Promote  to move the selected job forward in the job queue so it can be completed as
soon as possible. For more information, see 
Promote and interrupt jobs in the queue
on page 86 .
3. The Job Log  tab lists all the completed jobs. From the  drop-down menu, select a job category, and
then select the name of the job. Touch  Details to see the information about the selected job.
NOTE: The Job Log  feature lists only jobs that the user is authorized to view. The user might be
required to log in at the control panel to use this feature.
84 Chapter 6   Manage the device ENWW
 
						

							
Process multiple job types
The device processes multiple jobs simultaneously whenever it can. This is possible because the
scanner, the print engine, and the digital send features  can function at the same time for separate jobs.
For example, the device can be receiving a fax, sending a fax, or sending out a digital send job while
scanning a copy job and while printing a job from a re mote user. It can also allow some types of jobs to
interrupt jobs in process depending on settings and on priority.
The administrator can control the priority of incoming  print jobs using the Hold Off Print Job feature. This
feature provides the option of delaying incoming prin t jobs while users are copying or using the stored
job features at the device. When th e Hold Off Print Job feature is On, incoming print jobs are delayed
until jobs in process at the device are finished. Wh en the Hold Off Print Jobs feature is Off, the device
places incoming print jobs in the queue immediately  even if they interrupt copy jobs or stored jobs.
NOTE:The Hold Off Print Job feature only affects pr ocesses that involve printing. Otherwise, the
device places incoming jobs in the queue as soon at it receives them.
ENWW Check job status and use the job queue 85
 
						

							
Promote and interrupt jobs in the queue
When the device is processing mult iple jobs, in most cases it prioritizes them according to the order in
which it receives them. However, some types of jobs automatically take priority over others. You can
also promote a job in the queue so it is processed  as soon as possible, or you can interrupt a job that
is in progress so a new job is processed immediately.
Job priorities
The device prioritizes jobs in the following  order, with the highest priority listed first:
1. Any job that you have specifically promoted in one of the following ways:
◦ By using the 
Promote option in the  Job Status feature on the device control panel.
◦ By pressing the 
Interrupt button on the device control panel.
Promoting a job by using either of these meth ods causes the current job to be interrupted
immediately. See 
Job interruption on page 87 .
2. Jobs that are started at the device:
◦ copy jobs
◦ job-storage jobs
◦ print internal pages
Starting any of these jobs causes the curr ent job to be interrupted immediately. See 
Job interruption
on page 87.
3. Jobs that are sent  from a computer and incoming faxes. These jobs do not interrupt current jobs.
If someone is currently using the device contro l panel, these jobs are held until that person is
finished. However, the administrator can configure the Hold Off Print Job setting to  Off to prevent
these jobs from being held off by user  activity at the device control panel.
86 Chapter 6   Manage the device ENWW