HP Web Jetadmin Software Manuale Utente Scaricare il pdf (Pagina 16)

Sensitive device information

In some cases, HP Web Jetadmin sends sensitive

information to the device. This information can

include user and password details (Figure 13). In

this case, HP Web Jetadmin uses SSL/TLS to send

the information. This protocol allows HP Web

Jetadmin to send encrypted information to the

device and prevents clear-text information from

being sniffed through a network trace utility. When

communicating with the device through SSL/TLS,

HP Web Jetadmin uses the certificates stored on the

printer’s HP Jetdirect network interface. These

certificates can be self-signed or they can be signed

by a verifiable CA. At this time, HP Web Jetadmin

does not check the authenticity of certificates stored

on the device. HP Web Jetadmin simply uses the

certificate when communicating with the device

through SSL/TLS. This security limitation might be

exploited to allow unauthorized individuals to

access sensitive information. Administrators should

keep this in mind when using HP Web Jetadmin to

manage sensitive device information.

Notes about backups and restores

HP Web Jetadmin stores many items securely in the SQL Server data tables that it uses for all

information storage and retrieval. Much of this information is considered sensitive and is encrypted in

these data tables. HP Web Jetadmin uses security techniques that include tying this data encryption to

the Windows certificate that is unique to each instance of Windows. For this reason, many securely

stored items do not traverse a restore when this operation is being performed on a new or different

instance of Windows. These items include the following:

• All stored device credentials

• Sensitive device configuration items stored in templates, such as account details and passwords

• Any other device-based credentials that are either stored for retrieval and use by HP Web

Jetadmin or used for device configuration

IMPORTANT Backup data, including the HP Web Jetadmin Settings directory backup and HP Web

Jetadmin/SQL Server backup .dat files, should be secured. These files might contain

sensitive information and should not be stored unsecured.

Get Images feature

HP Web Jetadmin users can retrieve files directly from the Internet by using the Get Images feature in

the Firmware Repository. These files can be automatically stored on the HP Web Jetadmin server.

The HP Web Jetadmin client application runs on the end-user host computer. The client application

can contact hp.com and acquire an index file that shows all the available HP Jetdirect, printer, and

MFP firmware images. The user can select the firmware images to download to the client. The

downloaded files are passed to the HP Web Jetadmin server host. The files are then available in the

Firmware Repository and can be installed on HP devices by using the Firmware Upgrade feature.

The HP Web Jetadmin server and client applications do not check the authenticity of either the

downloaded files or the systems hosting them. The software simply uses the HTTP protocol to contact

Figure 13—Solutions settings include user/password

1 2 ... 11 12 13 14 15 16 17 18 19

Commenti su questo manuale

Nessun commento

HP Web Jetadmin Software Manuale Utente Pagina 16

Commenti su questo manuale

Prodotti e manuali riguardandi no HP Web Jetadmin Software