HP Commercial LaserJet Printers and MFPs - Imaging and Printing Security Best Practices

Chapter 7 HP LaserJet and Color LaserJet MFP Security Checklist 81
The Device Password is synchronized with the EWS password. If you change either of
them, the MFP will change the other one to be the same.
 Disable Allow Use of Digital Send Service. HP Digital Sending Software is a useful tool
for managing MFP digital sending. It is available for purchase at hp.com. HP recommends
using Digital Send Service, but it is not covered in this checklist. Thus, this checklist
recommends disabling it unless you are using it.
With Allow Use of Digital Send Service disabled, no one can manage the MFPs with an
installation of Digital Send Service. The MFPs will deny access.
 Disable Allow Transfer to New Digital Send Service. This setting is related to the
previous setting. If you allow use of Digital Send Service, it is possible for any installation of
Digital Send Service to take over management of an MFP. Disabling this setting ensures that the
MFPs will allow only one Digital Send Service computer to manage the MFPs.
With this setting disabled, the MFPs will deny access to a second Digital Send Service
attempting to take over management.
Fax Page Options
 Configure the Fax PIN. With the fax PIN configured, the MFP requires the Fax PIN be provided
before access to held fax jobs is gained at the control panel. This improves security by ensuring
that printed faxes are not left in the output trays where unauthorized personnel might see them.
NOTE:
Stored faxes are not affected by the Job Hold Timeout.
The Fax Printing options limit access to timely faxes. You may wish to provide the PIN to a
number of people to ensure that someone can print a fax on demand. You can also configure fax
alerts to ensure that personnel will know when a fax arrives even though it is not printed upon
arrival.
Additional Fax Configuration
Configure the number of Fax Speed Dials with the Embedded Web server. With the number of fax
speed-dials configured and access to these locked down no one can tamper with you speed-dial
settings from the front panel of the MFP.
Embedded Web Server Page Options
 Configure Embedded Web Server Configuration Options. These options limit some of
the EWS features that can be misused:
 Enable Outgoing Mail. The MFP sends some email, such as automatic fax notifications
and consumables alerts, depending on configurations. This Outgoing Mail feature does not
affect the MFP send to email functions. It also is not known to affect network security. If you
use fax notification or other automatic email alerts, you should enable outgoing email.