HP 250m Print Server for Fast Ethernet Which HP Jetdirect Products Support SSL/TLS?, Summary

Page 95

physical user interface) and is probably stored right next to the digital certificate. In short, an analysis of the non-volatile storage of your embedded device may reveal more information than you want. When deploying certificates to embedded devices, there are several questions that you should ask the vendor:

•Can the private keys be exported?

•Can exporting private keys be prevented?

•Is the private key password protected?

•How is the password protected in non-volatile storage?

•How is the digital certificate protected in non-volatile storage?

•Does the embedded device meet any security standards regarding the handling of security information like passwords or digital certificates?

•Can this information be securely erased when I no longer need the embedded device?

Anytime you are deploying digital certificates to embedded devices, you need to be sure that you know the answers to these questions. When an embedded device leaves your physical possession, due to a hardware failure, warranty failure, theft, or simply selling them as used, the non-volatile storage may be able to be accessed and some information about your PKI or network could become available. The worse case is that the digital certificate could be obtained from a device no longer used and that digital certificate may be used to attack your network.

Which HP Jetdirect Products Support SSL/TLS?

HP Jetdirect has supported SSL/TLS for a long time. It is actually easier to answer this question in the negative. Here is a list of devices that are popular but do not support SSL/TLS

•Any external parallel port print server does not support SSL/TLS. Common products are the 170X, 300X, 500X, and 510X. The firmware versions are X.08.XX or lower.

•Any MIO products. The firmware versions are X.08.XX or lower.

•The 600n series of EIO print servers – such as the J3113A 10/100. The firmware versions are X.08.XX or lower.

•Value based products like the 175X (external USB) or the 200m (LIO).

•The Embedded Jetdirect in value based products such as the CP4005n and HP Color LaserJet 3600n

Here are some popular HP Jetdirect products that do support SSL/TLS. This is not a comprehensive list and, as always, be sure to upgrade your Jetdirect to the latest firmware available for the best experience (http://www.hp.com/go/wja_firmware).

•EIO print servers 610n, 615n, 620n, 625n, 630n, 635n with the latest firmware.

•External USB print server en3700

•Embedded Jetdirect products with the Jetdirect product number J7949E, J7982E, J7991E, J7997E, J7974E, and J7992E. You can get the product number of Embedded Jetdirect devices through Web Jetadmin or via the HP Download Manager.

Summary

Well, you’ve made it to the end. Hopefully, you’ve learned a lot about SSL/TLS and how it works on HP Jetdirect. Most importantly, know that when someone says their communication is secure because it uses SSL/TLS, you’ll know that there are many more questions to ask before any actual statement about security can be made. Hope you enjoyed it!

95

Page 94 Page 95
Image 95
Page 94 Page 95
Contents Introduction WhitepaperHttp Application What is SSL/TLS?Application Changes Https DecodedHttp Session More Info Https Session Lock Icon Certificate Details IE6 Security Alert Digital CertificatesIE7 Certificate Error IE7 Certificate Error Certificate Information Public Key Infrastructure and Public Key Certificate BasicsSymmetric Cryptography Asymmetric Cryptography Digital Signature Digital Signature Verification Certificate Authority Public Key Certificates Self-Signed Certificate SSL/TLS Protocol Structures SSL/TLS Protocol BasicsClient Hello Server Hello Server Certificate Verification Keying Material Client Finished Server Finished Using Https with HP JetdirectCA Heirarchy Network Diagram Page Page Under the heading Jetdirect Certificate, press Configure… Page Page Page Page Page Page Page Page Page Page Page Save it Go to Tools and click Internet Options Click Certificates Click Import… Click Next Select the file Click Next Page Page Page Page Page Detailed Look at the SSL/TLS Connection Page Page Page Page Check for server certificate revocation is not selected Page Page SSL/TLS Server Settings HP Jetdirect as an SSL/TLS Client Page Page Page Page Select R2 and hit Export… Click Next Select DER. Click Next Save it Save it Click Finish Page Select the file. Click Finish Click OK Page Same message. What did we do wrong? Page Page We use the DNS name and try again Success Page CA Hierarchy SSL/TLS Client Understanding Certificate ChainsPage RootCA Incorrect HP Jetdirect CA Configuration Correct HP Jetdirect CA Configuration Walking the Chain SSL/TLS Client Certificates and Name Verification Subject SubjectAltName Page Page Page IPP over SSL/TLS Click Next Select a network printer… Page Page Print a test Yep we have our print data protected by SSL/TLS Embedded Devices and Digital Certificates HP Jetdirect Certificate GuidelinesSummary Which HP Jetdirect Products Support SSL/TLS?
Top Page Image Contents