HP Commercial LaserJet Printers and MFPs - Imaging and Printing Security Best Practices

Chapter 1 HP LaserJet and Color LaserJet MFP Security Checklist 2
 HP Web Jetadmin Version 10.2 installed on a Windows XP or Windows Vista PC
 One of each supported MFP with the latest updated firmware found at hp.com
The process for configuring this checklist is developed using HP Web Jetadmin to manage all of the
MFPs at the same time.
This checklist covers only those parts of HP Web Jetadmin that pertain to appropriate security
settings. See the user guides, admin guides, and help files for information on other configurations.
Cautions
HP is dedicated to providing the best and latest security information available for MFPs. This
checklist is meant to help you to improve MFP security in your workplace. HP has tested this
checklist to ensure that MFPs continue to provide the best possible performance while averting
possible security threats; however, some of these settings can cause unexpected problems in your
environment. Please be aware of the following cautions before you begin:
Follow the Checklist in Order
The settings in this checklist are presented in a specific order to ensure success. Many of these
security settings can be configured successfully only in the correct order. You should follow the
instructions in this checklist exactly and avoid making additional configurations during this process.
Other settings can disrupt the order and cause unexpected results.
Understand the Ramifications
HP Web Jetadmin and MFPs include a wide variety of useful settings designed to make work easier
and more productive. However, raising the level of security may require sacrifices in these areas.
Be aware that applying this checklist will limit or even eliminate some of these features. See the
Ramifications chapter for more information.
HP provides this checklist as a guide to best-practice security configurations that allow for
reasonable convenience and usability. Some of the recommended settings create extra steps when
accessing and managing MFPs. For instance, once you disable EWS configuration, you cannot
access it again until you re-enable EWS configuration from HP Web Jetadmin.
These settings are tested in a variety of conditions and using various combinations of simulated
customer environments. Testing includes configuring all of the MFPs at the same time and verifying
that the affected features continue to function. However, it is impossible to test these configurations
in all possible network environments. You should test these settings in your environment to ensure
that you understand their effects. You may find that some of the settings cause undesirable
limitations. See the Ramifications section for further information and cautions.
Continue to be Vigilant
This checklist is provided only as a complementary guide to known best practices for increasing
MFP security. HP does not claim or warrant that these configurations prevent misuse of MFPs or
networks or that they prevent malicious attacks on MFPs or networks. Use this document at your
own risk.