Introduction

This document explains how to use the HP Jetdirect security wizard in the embedded Web server (EWS) to configure security-related parameters for HP Jetdirect devices. The document provides steps for using the three security configuration options: basic, enhanced, and custom. This is a feature of Jetdirect firmware version x.24.xx or newer.

Click here to download HP Download Manager software to upgrade the Jetdirect firmware

About the security wizard

The security wizard in the EWS is an easy way to configure security-related parameters for HP Jetdirect devices.

It is important to use the wizard Back and Cancel buttons to perform the back and cancel operations. If the browser Back button is used, the current wizard screen errors out and it is necessary to start the wizard over from the beginning.

All of the security parameters covered by the security wizard can also be configured separately and individually elsewhere in the EWS. So, for example, it is not necessary to run the wizard in order to set just the Access Control List.

Starting the security wizard

1. Open the EWS by typing the IP address of the Jetdirect print server in a Web browser. Use the form "https://".
2. Click Security , click Settings , click the Wizard tab, and then click Start Wizard .
   Figure 1: Wizard tab

   
3. The Security Level page appears. Click one of the three security options:
   • Basic Security (click here to go to the steps)
   • Enhanced Security (click here to go to the steps)
   • Custom Security (click here to go to the steps)
     Figure 2: Security Level page

     

Setting basic security

1. The Administrator Account page appears. Set the password and then click Next .
   When the Administrator Password is set, the Simple Network Management Protocol (SNMP) v1/v2 Set Community Name is also set to the same value.
   Figure 3: Administrator Account page (basic security)

   
2. The Configuration Review page appears, showing the new configuration. Either accept the settings (click Finish at the bottom of the screen) or cancel (click Cancel ).
   Figure 4: Configuration Review page

   

Setting enhanced security

The enhanced security option is designed to use encryption and eliminate any management interfaces that are not using security.

1. The Administrator Account page appears. Set the password and then click Next .
   When the Administrator Password is set, the Simple Network Management Protocol (SNMP) v1/v2 Set Community Name is also set to the same value.
   The administrator password can be sent securely because of preinstalled certificates. Secure Sockets Layer (SSL) is already being used to configure the card. (Notice “https://�? and the lock icon at the bottom of the browser window.)
   Figure 5: Administrator Account page (enhanced security)

   
2. The SNMP Configuration page appears. The enhanced security option of the wizard automatically turns off write access for SNMPv1/v2. It is possible to use SNMPv3, but this is not required - click Enable SNMPv3 , if desired. Click Next to continue.
   Figure 6: SNMP Configuration page

   
3. If SNMPv3 was enabled, the SNMPv3 Configuration page appears in which to configure the SNMPv3 account. Enter the appropriate information and click Next to continue.
   Figure 7:  SNMPv3 Configuration page

   
4. SNMPv1/v2 write access is disallowed for enhanced security. However, it is possible to enable SNMPv1/v2 read access - click Enable SNMPv1/v2 read only access , if desired. Click Next to continue.
   Figure 8: SNMPv3 Configuration page for enabling SNMPv1/v2 read access

   
5. The Configuration Review page appears, showing the new configuration. Either accept the settings (click Finish at the bottom of the screen) or cancel (click Cancel ).
   Figure 9: Configuration Review page

   

Setting custom security

The custom security option is designed for advanced users.

1. The Administrator Account page appears. Set the password and then click Next .
   When the Administrator Password is set, the Simple Network Management Protocol (SNMP) v1/v2 Set Community Name is also set to the same value.
   Figure 10: Administrator Account page (custom security)

   
2. The Web Mgmt page appears. Here it is possible to disable redirection from HTTP to HTTPS (HTTP Security), configure a new certificate, and set the encryption. When finished selecting options, click Next to continue.
   Figure 11: Web Mgmt page

   
3. If Configure a new certificate was selected , different pages appear in which to configure the certificate. On each page, enter the appropriate information and click Next to continue.
   • Certificate options page - used to update an existing self-signed certificate or install a third-party certificate.
   • Update Pre-Installed Certificates - used to update a pre-installed certificate.
   • Certificate Validity - used to change the start date and validity period.
   • Certificate Information - used if the third-party certificate option has been chosen in order to generate a certificate request to Certification Authority (CA).
4. The SNMP Configuration page appears. This page provides the ability to configure SNMPv1/v2 and to enable SNMPv3. Click the desired options and click Next to continue.
   Figure 12: SNMP Configuration page

   
5. If Enable SNMPv1/v2 was selected , the SNMPv1/v2 Configuration page appears. Use this page to specify the set community and get community names as well as to disable the default get community names. Enter the appropriate information and click Next to continue.
   Figure 13: SNMPv1/v2 Configuration page

   
6. If Enable SNMPv3 (Recommended) was selected, the SNMPv3 Configuration page appears in which to configure the SNMPv3 account. Enter the appropriate information and click Next to continue.
   Figure 14: SNMPv3 Configuration page

   
7. The Access Control page appears. Use this page to set IP addresses to control who can establish a TCP connection to the HP Jetdirect device, as well as who can make configuration changes for the device by means of SNMP (if a set communication name has been specified).
   Figure 15: Access Control page

   
8. The Print Protocols and Services page appears. Use this page to control which protocols are enabled for HP Jetdirect devices.
   Figure 16: Print Protocols and Services page

   
9. The Configuration Review page appears, showing the new configuration. Either accept the settings (click Finish at the bottom of the screen) or cancel (click Cancel ).
   Figure 17: Configuration Review page