HP 640n Print Server manual Configure certificates, 16Certificate configuration screens

Page 104

NOTE: While self-signed certificates are permitted and allow data encryption, they do not ensure valid authentication. A self-signed certificate is similar to validating your own identity.

The Certificates page provides the status of the certificates installed on the HP Jetdirect print server:

●Jetdirect Certificate Used to validate the identity of the HP Jetdirect device to clients and to network authentication servers.

By factory default, a self-signed HP Jetdirect certificate is pre-installed, which allows the HP Embedded Web Server to use HTTPS and appear as a secure site when accessed by a Web browser.

Click View to view the contents of an installed HP Jetdirect certificate, or click Configure to update or install a new one. For more information, see Configure certificates on page 94.

When installed, an HP Jetdirect certificate is saved after a cold reset, which is used to restore the print server to factory-default values.

●CA Certificate. (Full-featured print servers only) A certificate from a trusted third party, or certificate authority (CA), is used to validate the identity of a network authentication server during 802.1X authentication methods that use EAP. The authentication server's identity is validated when information on the CA certificate matches the information on a certificate received from the authentication server.

A CA certificate for the print server is used to sign the authentication server's certificate. Therefore, the certificate authority for the authentication server's certificate must also be used for the CA certificate.

Click View to view the contents of an installed HP Jetdirect certificate, or click Configure to update or install a new one. For more information, see Configure certificates on page 94.

A CA certificate is not saved when the print server is reset to factory-default values.

Configure certificates

To update or install a certificate, click Configure to start the certificate management wizard. The screens displayed depend on the type of certificate (HP Jetdirect or CA) and your selections. Table 4-16 Certificate configuration screens on page 94 provides a description of the screens and configuration parameters that are displayed.

NOTE: If you improperly exit Certificates configuration by failing to use the Cancel button, for example, an Operation Failed screen appears. If this occurs, wait approximately two minutes and restart the wizard.

Table 4-16Certificate configuration screens

Certificate Options screen. The options displayed depend on your print server model.

94 Chapter 4 HP Embedded Web Server (V.45.xx.nn.xx)

ENWW

Page 103 Page 105
Image 104
Page 103 Page 105
Contents HP Jetdirect Print Servers Page HP Jetdirect Print Servers Trademark Credits Table of contents Mac OS network installation IPX/SPX 125 105121 139 165175 179193 211Introducing the HP Jetdirect print server Supported print serversSupported network protocols 2Supported network protocolsAuthentication EAP/802.1X port-based authenticationSecurity protocols Snmp IP and IPXIPsec/Firewall Wireless print server authenticationSupplied manuals Firmware upgrades Firmware installation toolsHP support HP online supportProduct accessibility Product registrationOperating Environment Function Remarks 1Software SolutionsHP Web Jetadmin see HP Web Jetadmin on HP software solutions summary System requirements HP Jetdirect Printer Installer for UnixHP Web Jetadmin Install HP Web Jetadmin software Configure and modify a deviceRemove HP Web Jetadmin software Verify HP Web Jetadmin installation and provide accessMicrosoft-supplied software Http// IPaddress /ipp/port#Mac OS network installation Novell-supplied softwareSoftware tools Use Bonjour Mac OS XVerify network configuration Test the configurationEnww IPv6 configuration IPv6 address introductionIPv6 address configuration Link-local addressUse DNS Stateless addressesStateful addresses Tools and utilities IPv4 configurationServer-based and manual TCP/IP configuration IPv4 Default IP address is assigned Default IP address IPv4Default IP address is not assigned Default IP on wireless and wired print servers Default IPv4 address configuration optionsDefault IPv4 parameter Dhcp requests enable/disableDefault IPv4 behavior TCP/IP configuration toolsConfigure the print server using BOOTP/TFTP on Unix Use BOOTP/TFTP IPv4Advantages of using BOOTP/TFTP Bootptab file entries IPv4 Systems using network information service NISConfigure the Bootp server 1Tags supported in a BOOTP/DHCP boot file RFC DescriptionTftp configuration file entries IPv4 General 2TFTP configuration file parametersExample HP Jetdirect Tftp configuration file TCP/IP Main TCP/IP Print Options Ftp-printing or ftp-config,ftp Ipp-printing or ipp-config,ippLpd-printing or lpd-config,lpd DefaultqTCP/IP Raw Print Ports TCP/IP Access ControlTCP/IP Other Settings Bonjour-config Slp-keep-aliveSlp-client-mode Syslog-protocolIdle-timeout User-timeout or telnet-timeoutCold-reset Icmp-ts-configDefault-ip Default-ip-dhcpSnmp-config Auth-trap or authentication-trapIpx-config or ipx/spx Trap-dest or trap-destinationTrap-dest ip-address community name port number Ipx-unit-nameOther Settings AppleTalkSupport Use Dhcp IPv4Unix systems Microsoft Windows systems Discontinue Dhcp configurationUse Rarp IPv4 Use the arp and ping commands IPv4 Laserjet1Use Telnet IPv4 Arp -s IP address LAN hardware address Ping IP addressCreate a Telnet connection Typical Telnet sessionTelnet command line interface default Telnet user interface options3Telnet Commands and Parameters Command Description User Control CommandsWireless 802.11 Main Passphrase command Ampdu AggregationNetwork-type Desired-ssidDot11-switch-time Psk-passphraseEncryption Wep-key-methodWireless Diagnostics Roam-threshold00a0f8387af7 Host-nameIpsec-config Firewall-config Tftp ServerTftp Filename Hpnp/printer1.cfgDomain-name support.hp.com Printer1.support.hp.comPri-dns-svr Pri-wins-svrTCP/IP LPD Queues Syslog-svr AllowTCP/IP Other To 1440 Enable Bonjour Domain NameUser-timeout Ftp-downloadTcp-mss Ews-configGw-disable TCP/IP Diagnostics Snmp Traps Phase Ipx-modePjl-banner Ipx-bannerOther Network-select 1000t-ms-conf1000t-pause-conf Web JetAdmin URL Web JetAdmin NameMenu Interface Support-contact1Example Using the Menu Interface Use Telnet to remove an IP addressMove to another network IPv4 Use the HP Embedded Web ServerUse the printer control panel Enww HP Embedded Web Server V .xx.nn.xx Supported HP Web Jetadmin version RequirementsView the HP Embedded Web Server Compatible Web browsersView the HP Embedded Web Server 1HP Jetdirect Home Page Items HP Jetdirect Home tabOperating notes Networking tab Device tabsWireless Station Configuration sectionDiagnostics section 2Networking Menu Items3Wireless Station configuration parameters Network Name Ssid RefreshAd Hoc Network peer-to-peer ChannelWEP Enterprise HpSecureNetwork WPA WiFi Protected AccessWPA-Personal Restore Defaults WPA-Enterprise4TCP/IP Summary tab TCP/IP SettingsSummary tab Network Identification tab 5TCP/IP Network Identification tabTCP/IPv4 tab 6TCP/IPv4 tabTCP/IPv6 tab 7TCP/IPv6 tabConfig Precedence tab 8TCP/IP Config Precedence tabAdvanced tab 9TCP/IP Advanced tabProxy Server Password DisableDefault IP Manually ConfiguredNetwork Settings 10IPX/SPX tab settingsAppleTalk 11AppleTalk tab settings AppleTalk EnableAppleTalk Name Type12SNMP tab settings 13Miscellaneous Settings Other SettingsMisc. Settings Certificate Mgmt Service Web Services PrintLink settings Locally Administered AddressFirmware Upgrade ServiceLPD Queues Bonjour Highest Priority14LPD Queues tab settings Queue NamePrepend String Name Append String NameDefault Queue Name Queue TypeRaw or text String NameSecurity Settings Select Language15Wizard Security Levels Security Level Description Basic SecurityRestore Defaults Security Level Description Enhanced SecurityRecommended Custom SecurityAuthorization Admin. AccountPrinter Password Synchronization CertificatesConfigure certificates 16Certificate configuration screensInstall Certificate Certificate Validity PeriodEncryption Key Length Certificate InformationDomain Name myprinter.mydepartment.mycompany.com Install Certificate or Install CA Certificate screensExamples Access Control ExamplesSnmp Mgmt. ProtocolsWeb Mgmt Enable Print Protocols Enable Print ServicesOther 17Other protocols802.1X Authentication Enable Device DiscoveryMight be disabled without notification Naming Resolution18802.1X configuration settings Device Announcement Agent Other Links Enww IPsec/Firewall configuration V .xx.nn.xx 1Firewall Policy 1IPsec/Firewall Policy Default Rule example All IPv4 Addresses All Jetdirect Print ServicesIPsec security associations SA HP Jetdirect IPsec/Firewall wizardLimit Limitations to rules, templates and services2Limitations to rules, templates and services Specify Address Template Create Address TemplateSpecify Service Template Create Service Template4Create Service Template 3Create Address TemplateManage Services Manage Custom Services5Manage Services 6Manage Custom ServicesSpecify Action Specify IPsec/Firewall Template7Create IPsec Template Identity AuthenticationCreate IPsec Template 8Identity Authentication KerberosCertificates Certificates on9Kerberos Kerberos Settings10Kerberos Settings 11IKEv1/IKEv2 Phase 1 Authentication IKEv1/IKEv2 Phase 1 AuthenticationIKEv1/IKEv2 Phase 2 / Quick Mode IPsec Protocols Advanced IKE Settings 12IKEv1/IKEv2 Phase 2 / Quick Mode Settings IPsec Protocols13Advanced IKE Settings IPsec Protocols Manual KeysManual Keys 14IPsec Protocols Manual Keys15Manual Keys Value for an SA to use for packets received by the deviceConfigure Microsoft Windows systems AuthenticationRule Summary Key Format1Summary of HP Jetdirect security features IP Administrator PasswordSecure Embedded Web Server Management IPsec/FirewallIPv4 Access Control List Authentication and EncryptionTelnet Control IPv4/IPv6 Snmp v1/v2c Set Community Name IP/IPXPrinter Control Panel Lock HP Web Jetadmin IPv4 Password and ProfilesConfiguration Precedence Table Limit access to security features 2Settings for Access ControlMedium HighTroubleshoot the HP Jetdirect print server Reset to factory defaults Example Cold reset using the service menuReset to factory defaults Disable an HP Jetdirect embedded print server V .xx.nn.xx General troubleshooting Troubleshooting chart assess the problemProcedure 1 Verify the printer is on and online Procedure 2 Print an HP Jetdirect configurationProcedure 3 Resolve printer display error messages Procedure 4 Resolve printer network communication problems Telnet IP address port Enww Unable to communicate after initial setup Troubleshooting wireless print serversUnable to communicate during initial setup My configured channel does not match the configuration Symptoms Improving reception and performanceFirmware download failure Corrective actionsEnww HP Jetdirect configuration pages HP Jetdirect configuration Status field error messagesConfiguration page format 1Configuration Page SectionsConfiguration page messages HP Jetdirect Configuration/General Information2HP Jetdirect Configuration/General Information MessageDescriptionWireless station settings Message Description3802.11 Wireless station settings Security Settings Admin Password IPsecFirewall Cert ExpiresNetwork Statistics Total Packets ReceivedUnicast Packets Received BAD Packets ReceivedIPv4 section TCP/IP configuration informationTCP/IP protocol information Default Gateway Config byIP Address Subnet MaskIPv6 section IPv4 SectionIPv6 Section IPX/SPX configuration informationIPX/SPX protocol information CN=ljpserver.OU=support.OU=mycity.OU=mycompany Novell/NetWare parametersAppleTalk protocol information Error messages 11 AppleTalk configuration information12 DLC/LLC configuration information DLC/LLC protocol information13Error messages Error Code and Message DescriptionLAN Error Retry Faults LAN Error no LinkbeatNetwork Reconfig Must Reboot DisconnectedUnable to Login Unable to SET PasswordDisconnecting SPX Timeout2B NDS ERR Unable to Login 2C NDS AuthenticationError Error NDS PS Printer List ErrorNovram Error 4D CF ERR Access List4F Tftp Remote Error Tftp Local ErrorBAD BOOTP/DHCP Reply BAD Bootp TAG SizeBOOTP/RARP in Progress BOOTP/DHCP in ProgressDhcp Lease Timers AdjustedHP Jetdirect Security Trying to Connect to2HP Jetdirect Security 14General InformationCurrent IPsec status IPsec Statistics IPsec Error LogLocal IP addresses IKE Stats IPsec Rules16IPsec statistics 17IKE StatisticsAvailable Network Services IPsec Security Associations SA table18IPsec Security Associations SRCLPD printing Requirements for configuring LPD About LPDTable A-1LPD programs and protocols Purpose of ProgramLPD setup overview Set up IP parametersSet up print queues Print a test fileConfigure print queues for BSD-based systems LPD on Unix systemsUse SAM to configure print queues HP-UX systems Example jetdirect1LPD on Microsoft Windows Server 2003/2008 systems Print a test fileInstall TCP/IP software Verify the configuration Add LPR compatible printer windowConfigure a network LPD printer LPD on Microsoft Windows XP systemsPrint from Microsoft Windows clients Add Microsoft Windows optional networking componentsCreate an LPR port for an installed printer Click Start, Printers and FaxesPrint files Use FTP printingFTP connections Control connectionFTP login Data connectionCommands Table B-1User commands for HP Jetdirect FTP serverCommand Description End the FTP sessionExample FTP Session PORT1HP Jetdirect control panel menus V .xx.nn.xx Graphical control panel menus Table C-1HP Jetdirect EIO Menu on Graphical Control PanelMenu item Sub-menu item Values and Description SsidConfigure Keys Transmit Key ResetEnable IPv4 Settings Config MethodManual Settings Default IPIPv6 Settings Enable Dhcp RenewDHCPv6 Policy Proxy ServerProxy Port Frame TypeAppleTalk Enable Reset SecuritySecurity Print Sec IPsec or FirewallEnable Wipe Code VerificationLAN HW Test Http TestTimeout Snmp TestData Path Test Select All TestsPing Results Packets SentPackets Received Percent LostLink Speed Print ProtocolsClassic control panel EIO menus Table C-2HP Jetdirect EIO Menu on Classic Control PanelMenu Item Description CFG NetworkWEB Menu ItemCFG IPX/SPX Security IpsecFirewall Code VerificationEnww Open source licensing statements GSOAPExpat XML Parser CURL Copyright and Permission NoticeGNU General Public License GNU General Public LicenseGNU General Public License Enww No Warranty END of Terms and Conditions GNU Lesser General Public License GNU Lesser General Public LicenseEnww Enww Enww Enww Enww GNU Lesser General Public License Original SSLeay license OpenSSLOpenSSL license OpenSSL Appendix D Open source licensing statements Index See also Gateway NDS Novram Error Total Packets Rcvd Enww Page  Hewlett-Packard Development Company, L.P
Related manuals
Manual 56 pages 58.74 Kb
Top Page Image Contents