HP Designjet T1100 A1 User Manual
Have a look at the manual HP Designjet T1100 A1 User Manual online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 1114 HP manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
HP Designjet Printer Series Security Settings 2 © 201 2 Hewlett -Packard Development Company, L.P. Reproduction, adaptation, or translation without prior permission is prohibited, except as allowed under the copyright laws. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements acc ompanying such products and services. Nothing herein should be construed as an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. February 2012 Edition
HP Designjet Printer Series Security Settings 3 Table of Contents 1. Introduction & Overview ................................................................................................... 4 2. Security features available for Large Format scanners ........................................................... 6 3. Security Concepts explanation........................................................................................... 7 3.1 Secure File Erase ......................................................................................................... 7 3.2 Secure Disk Erase ........................................................................................................ 8 3.3 Control Panel Access Lock ........................................................................................... 11 3.3.1 Deadlock: Front Panel locked + EWS password forgotten ............................................... 13 3.4 Embedded Web Server (EWS) multilevel access ............................................................. 13 3.5 Exclude personal info from accounting .......................................................................... 18 3.6 Disable connectivity interfaces ..................................................................................... 19 3.7 Disable protocols ....................................................................................................... 20 3.8 IPSec ........................................................................................................................ 20 3.9 SNMPv3 ................................................................................................................... 21 3.10 CA/JD Certificates .................................................................................................. 22 3.11 Hide IP from front panel .......................................................................................... 22 3.12 Encrypt web communications ................................................................................... 22 3.13 Disable USB drive................................................................................................... 23 3.14 Disable firmware update through USB ....................................................................... 23 3.15 Disable direct print using ePrint&Share ...................................................................... 23 3.16 Disable ePrint connectivity ....................................................................................... 23 3.17 Disable internet connection ...................................................................................... 23 3.18 Printer Access control .............................................................................................. 24 3.19 External hard disk (EHD) .......................................................................................... 24 How the system works ........................................................................................................ 24 4. Designjet Security features vs LaserJet ............................................................................... 25 5. Glossary ...................................................................................................................... 26
HP Designjet Printer Series Security Settings 4 1. Introduction & Overview This document is aimed at providing an overview of the security fe atures supported by HP Designjet printers as of February 2012. The security features described in this document make the HP Designjet printer series particularly well suited to being deployed into environments where network, data, access control, and secu rity are important. The following is a table summarizing the new and existing security features of HP Designjet printers series and how they are implemented using the Embedded Web Server and/or HP Web JetAdmin (WJA). Please make sure that your printer has the latest firmware version to benefit from all s ecurity features. Note : If your printer is not listed in the table then these features are not implemented. T7100 Z6200 T2300/T1300 T790 Z3200 Z2100 Secure file erase WJA WJA WJA WJA WJA WJA Secure disk erase FP WJA/FP WJA/FP WJA/FP (PS models) WJA/FP N/A Control panel lock EWS/WJA EWS EWS/WJA EWS/WJA N/A N/A EWS multilevel EWS EWS EWS (1 level) EWS (1 level) EWS (1 level) N/A Exclude personal info. From accounting EWS EWS EWS EWS EWS N/A Disable interfaces EWS EWS EWS (USB printing EWS(USB printing only) N/A N/A Disable protocols EWS/WJA EWS/WJA EWS/WJA EWS/WJA EWS/WJA EWS/WJA IPSec EWS EWS EWS/WJA EWS/WJA EWS/WJA EWS/WJA SNMPv3 EWS EWS EWS EWS EWS + Jetdirect EWS + Jetdirect CA/JD Certificates EWS/WJA EWS/WJA EWS/WJA EWS EWS + Jetdirect EWS + Jetdirect Hide IP from fp FP FP FP FP N/A N/A Encrypt web comms EWS/WJA EWS/WJA EWS/WJA EWS EWS + Jetdirect EWS + Jetdirect Disable USB drive N/A N/A EWS/FP EWS/FP N/A N/A Disable fmw update thru USB N/A N/A EWS/FP EWS/FP N/A N/A Disable direct print with ePrint&Share N/A N/A FP FP N/A N/A Disable ePrint Center connectivity N/A N/A FP FP N/A N/A Disable internet connection N/A N/A EWS/FP EWS/FP N/A N/A Printer access control N/A N/A EWS/FP EWS/FP N/A N/A External HDD Yes Yes Yes PS only, from fw IG_01_05_04.4 No No
HP Designjet Printer Series Security Settings 5 T1200 T770 Z3100 Z3100ps 4020/4520 T1100/T1120 Z6100 T620 Secure file erase WJA WJA WJA WJA WJA WJA WJA N/A Secure disk erase WJA/FP WJA/FP (HD) N/A FP FP WJA/FP WJA/FP WJA/FP Control panel lock EWS/WJA WJA N/A N/A WJA EWS EWS N/A EWS multilevel EWS N/A N/A EWS (1 level) EWS EWS EWS N/A Exclude personal info. from accounting EWS EWS N/A N/A EWS EWS EWS N/A Disable interfaces EWS EWS EWS N/A EWS EWS EWS N/A Disable protocols EWS/WJA EWS/WJA EWS/WJA EWS/WJA EWS/WJA EWS/WJA EWS/WJA EWS/WJA IPSec EWS/WJA EWS/WJA EWS/WJA + Jetdirect EWS/WJA + Jetdirect EWS/WJA + Jetdirect EWS/WJA + Jetdirect EWS/WJA + Jetdirect EWS/WJA + Jetdirect SNMPv3 EWS EWS EWS + Jetdirect EWS + Jetdirect EWS + Jetdirect EWS + Jetdirect EWS + Jetdirect EWS + Jetdirect CA/JD Certificates EWS EWS EWS + Jetdirect EWS + Jetdirect EWS + Jetdirect EWS + Jetdirect EWS + Jetdirect EWS + Jetdirect Hide IP from FP FP FP N/A N/A FP FP FP N/A Encrypt web comms EWS EWS EWS/WJA + Jetdirect EWS/WJA + Jetdirect EWS/WJA + Jetdirect EWS/WJA + Jetdirect EWS/WJA + Jetdirect EWS/WJA + Jetdirect Disable USB drive N/A N/A N/A N/A N/A N/A N/A N/A Disable fmw update thru USB N/A N/A N/A N/A N/A N/A N/A N/A Disable direct print with ePrint&Share N/A N/A N/A N/A N/A N/A N/A N/A Disable ePrint Center connectivity N/A N/A N/A N/A N/A N/A N/A N/A Disable internet connection N/A N/A N/A N/A N/A N/A N/A N/A Printer access control N/A N/A N/A N/A N/A N/A N/A N/A External HDD Yes HD ver (from fw 6.0.0.6) No No No No No No
HP Designjet Printer Series Security Settings
6
2. Security features available for Large Format scanners
The Multi function printers (MFPs) are made of two main parts: The printer and the scanner. For the printer, the
table above applies, for the scanner please refer to the following table:
DJ 4500MFP/T1100MFP
HD -MFP Series
DJ4520 Scanner, DJ 4500 Scanner, HD Scanner T1120 SD
-MFP T2300 emfp
Firewall Yes Yes Yes
Antivirus
installation Closed systems with very low risk of being infected by a virus, no antivirus is
required
Disable FTP &
WebAccess Yes
No Yes
Access to images
in scanner through
network
Yes, by default (FTP & EWS -
Read only)
No
No
Microsoft Security
patches Yes through scanner SW update
Not needed (Linux based)
Install scanner
software into a
separate PC Possible but not official process
No No
HP Designjet Printer Series Security Settings 7 3. Security Concepts explanation 3.1 Secure File Erase Secure File Erase is a feature that manages how files are deleted from the printer’s hard disk. There are three security modes to the Secure Files Erase feature. These settings can be changed in the Web JetAdmin. • Non -Secure Fast Erase • : In this mode, all file pointers to the data (table indexes) are erased. Temporary data remai ns on the Hard Disk Drive until the disk space it occupies is needed for another purpose, and is then overwritten. This is the fastest mode of operation and is the default for all printers. Secure Fast Erase • : In this mode of operation, file pointers are e rased and the disk space where the temporary job was stored is also overwritten with a fixed character pattern. This mode of operation is slower than Non -Secure Fast Erase, but all data is overwritten. Secure Sanitizing Erase : In this mode of operation, fi le pointers are erased and the disk space where the temporary job was stored is repetitively overwritten using an algorithm that prevents any residual data. This mode of operation may affect product performance. The Secure Sanitizing Erase mode of operat ion meets the US Department of Defense 5220 -22.m requirements for clearing and sanitization of disk media. When the Secure Sanitizing Erase feature is enabled, all temporary files that might contain sensitive data are erased with this method, no temporary files are left after a job has completed (scan, copy, or print). Furthermore, if you do not want to store jobs in the printer, you can set the number of jobs to be stored in the printer’s queue to 0. To configure this setting perform the following: • Go to the printer’s front panel, • Select the “setup” menu. • Select “job management setup.” For further information, refer to the printer’s user manual, as the actual menu options might change for a specific printer. The following is an example of how to change the ‘Secure File Erase’ setting for the HP Designjet T1100 printer.
HP Designjet Printer Series Security Settings 8 3.2 Secure Disk Erase In either of the two secure methods described above, (Secure Fast Erase and Secure Sanitizing Erase), there is also the option to sanitize the whole disk. The sanitizing method removes any user data in a secure manner, so the device can be moved out from a secure location to unsecure location. All disk erasing will be done via the same level of security erase. This setting can only be used via Web JetAdmin, or the Front Panel “Service menu” which is only accessible with the help of an HP Support representative. • HP Web JetAdmin access: The user interface that manages the Secure File Erase and Secure Disk Erase functionality is the HP Web JetAdmin. This is the s ame functionality that is used in the Web JetAdmin device plug -ins for LaserJet printers, this would enable you can set the same global options across your fleet of HP LaserJet’s and HP Designjets. The following example shows how to configure the HP Designjet T2300 using the Web JetAdmin. Note that in the Web JetAdmin this option is called “Secure Storage Erase”.
HP Designjet Printer Series Security Settings 9 • Printer’s Front Panel access: Once you have entered into the “Service Menu” with the help of an HP Support representative, you can perform the Secure Disk Erase, by using the same 3 o ptions that you have in Web JetAdmin. Note that the name of the feature in the front panel is Disk Wipe DoD 5220.220M , and the three options are called “Insecure Mode”, “1 -pass mode” and “5 -pass mode” First you need to select the security level and then y ou can perform the erase operation. The printer will warn you that it is a process which deletes all data and takes a long time, when you accept the printer begins the process and displays a progress bar until complete, all data will be wiped in one of the two selectable methods and the printer’s firmware will be restored. In the following screens show how to perform a secure hard disk erase in the HP Designjet T2300 printer.