HP Designjet T1100 A0 User Manual

							HP Designjet  Printer Series        Security Settings  
11    
3.3 Control Panel Access Lock  
The control panel access is a feature intended for IT administrators, which allows them to lock the device’s 
control panel using the HP Web JetAdmin or the printers Embedded Web Server (depending on the printer 
model). This feature prevents unauthorized users from accessing the control panel and changing the printer’s 
settings. Administrators can specify the level of access as follows:   
•   Unlock  
•   Minimum lock  
•   Moderate lock  
•   Intermediate lock  
•   Maximum lock  
 
This option can be enabled from the HP Web JetAdmin as s hown below: 
 
 
 
   
 
						

							HP Designjet  Printer Series        Security Settings   
12   
This option can be enabled from the T1200 Embedded Web server as shown below: 
 
 
 
The following table shows the different levels access and what they enable or disable:  
 
 Retrieve Job Information Paper handling Configure Designjet Diagnostics 
Maximum  OK  ----  ----  ----  ---- 
Intermediate  OK  OK  ----  ----  ---- 
Moderate  OK  OK  OK  ----  ---- 
Minimum  OK  OK  OK  OK  OK 
 
 
•  Maximum Lock –  This option denies access to all options.  
•   Intermediate Lock –  This option denies access to the paper and ink supplies handling options, 
maintenance options and demo prints, on top of the Moderate Lock. Only viewing printer and 
supplies information is allowed.  
•   Moderate Lock –  This option denies access to all printer settings, the job queue, information and 
ser vice prints and the printer log, on top of Minimum Lock.  
•   Minimum Lock –  This option denies access to the Resets options, Enable/Disable connectivity 
options and the Service Menu.  
 
Note: With the Moderate or Maximum locks set you will not able to load/unload paper or replace 
printheads/ink cartridges without first unlocking the front panel, and so these options should only be set in 
specific circumstances where the implications are known and understood.  
 
 
   
 
						

							HP Designjet  Printer Series        Security Settings  
13    
When the Control Panel is locked, the applicable menus show a ‘lock’ symbol in the front panel. If a user 
attempts to enter in a “locked” menu entry, a warning message is displayed. 
 
 
3.3.1  Deadlock: Front Panel locked + EWS password forgotten  
Under certain circumstances, a printer might be blocked if the control panel has been locked and the 
administrator has lost the password needed to unlock it. This could happen if the front panel is locked through 
the printer’s Embedded Web Server and the Administrative password in the EWS is lost. In this situation , it 
would not be possible to unblock the front panel from the Embedded Web Server and it would not be possible 
to reset the Embedded Web Server from the front panel.  
 
With HP Designjet Printers there is a menu option accessible to users with the guidance of Customer Support 
agents.  Contact HP Support in case of problems related to deadlock.  
 
3.4  Embedded Web Server (EWS) multilevel access  
 
The Embedded Web Server is a powerful tool which enables direct management of a device such as an HP 
LaserJet printer or an HP Designjet printer, however with no security in place, this tool also has the potential to 
have a negative effect on many features, as they can be configured using just a web browser and knowledge of 
the IP connection to the printer. To solve this sit uation we have implemented two levels of access to our 
compatible HP Designjet printers as follows:  
 
The Security page enables users to:  
 
•  Restrict access to the printer by setting an administrator user account.   
•   Define two levels of access: Administrator a nd Guest.  
•   If the two levels of access have been set, and you have neither of the passwords you will not be 
able to gain access to EWS information, see below.  
 
 
 
						

							HP Designjet  Printer Series        Security Settings   
14   
 
 
Administrator password  
Access control is enabled by setting the “Admin account password”, specifying a password for the user account 
at Admin level. You must then provide the Admin password in order to perform any of the following 
restricted 
operations
  :
 
•   Cancel, delete or preview a job in the job queue.   
•   Delete a stored job.  
•   Clear accounting information.   
•   Change printer’s settings on the Device Setup page.  
•   Update printer's firmware.  
•   Change printer's date and time.  
•   Change security settings.  
•   View protected printer information pages.  
 
 
 
						

							HP Designjet  Printer Series        Security Settings  
15    
 
 
 
						

							HP Designjet  Printer Series        Security Settings   
16   
 
 
 
						

							HP Designjet  Printer Series        Security Settings  
17    
 
If there is no administrator account, restricted operations can be accessed without a password.  
 
3.4.1  Guest password  
Once the administrator user account has been set, the administrator can also set the guest user account by 
specifying a password for the guest.  
 
If the guest user ac count is set, a username and password are required for  all EWS operations: users 
indentified as guests have access to restricted operations, whilst users identified as administrators have access to 
all operations.   
If the guest account is not set, a userna me and password are not required for unrestricted operations.  
 
 
Notes:  
•  Some printers only have 1 -level password access to the Embedded Web Server.  
•   The networking tab of the Embedded Web Server allows you to setup another password. If the 
printer has an  EWS 1 -level or multi -level password, then the networking password is common with 
the general EWS password. If the EWS does not have password capabilities then the networking 
password is only used for controlling access to the networking area of the EWS.  
•   For most printers that have a EWS password capability, it is also possible to setup the admin 
password through Web JetAdmin, however only one level can be set so that Guest password 
cannot be setup from Web JetAdmin.  
 
 
 
						

							HP Designjet  Printer Series        Security Settings   
18   
3.5 Exclude personal info from accounting  
 
You can enable or disable the printer to send an e -mail containing accounting information. If you enable this 
setting, you have also to fill in the destination of the report using the Send accounting files  to setting. Please note 
that you also have to con figure the e-mail server on the Setup Page . 
 
In some cases customers prefer not to send personal data from the printers via email and so the option Exclude 
Personal information from accounting e -mail is now available in the Embedded Web server. If this option is 
selected, accounting e- mails will not contain personal information (user name, job name, account ID will be left 
blank in the accounting file sent by email from the printer).  
 
Typically this option is used for managed print or pay -per -use contracts to ensure that only the data (counters) 
relevant for billing are being sent by the printer. Personal information about who printed which file is not 
required for billing purposes, and can be excluded from the accounting email. This personal information is 
typically used for cost allocation within a company.  
 
 
 
 
						

							HP Designjet  Printer Series        Security Settings  
19    
3.6 Disable connectivity interfaces  
 
Depending on the printer series, there are some ports that can be disabled to prevent unauthorized printing and 
possible data theft.  
 
You might want to disable the USB printing port to avoid people from connecting  a laptop directly into the 
printer and printing through the USB.  
 
If you have installed a JetDirect card to  add extra security features, you might want to disable the onboard 
Ethernet.  
 
 
 
 
 
If you enable or disable a connectivity option, the printer will automatically restart. Keep in mind that disabling 
a connectivity option could cut off network access to the printer. As a security measure, you cannot disable the 
connection you are using to access the Em bedded Web server. 
 
Note: Contact HP support in case the printer’s front panel is locked and you cannot unlock it.  
 
 
 
 
 
						

							HP Designjet  Printer Series        Security Settings   
20   
3.7 Disable protocols  
 
In some cases you might want to disable all protocols that you do not plan to use to access your printer. For 
example, you might prevent users from sending files through the  ftp or connecting through telnet to manage the 
printer network settings. You can d isable unused protocols through the Mgmt. protocols option in the Embedded 
Web Server or Network enable features in Web JetAdmin .  
 
 
 
 
3.8 IPSec  
A Firewall or IP Security (IPsec) policy allows you to control traffic to or from the device using network -layer 
protocols. Either a f irewall or IPsec /  firewall pages will appear depending on whether IPsec is supported by the 
print server and device. If IPsec is not supported, f irewall pages will be displayed and a firewall policy can be 
configured.   
 
Please note:  B efore you enable a f irewall or IPsec policy, you should make sure you have a secure access to 
your configuration management settings (for example, through an administrator password). This will ensure your 
policy is not easily disabled through Telnet, contr ol panel menus, or other management tools.