◦
HKEY_CURRENT_USER\Software\Hewlett-Packard\HP Digital Sending Software
◦
HKEY_LOCAL_MACHINE\SOFTWARE\Hewlett-Packard\HP Digital Sending Software 5.00
◦
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP\Parameters
\SslBindinginfo
●
Users must also have permission to host a service on port 7627. The following command can be
used to give this permission to a Windows group. The group should be given permission and
non-administrator users should be made members of this group. This command must be run by
an administrator on the system.
In the example below, “DSS_Server” is the server where DSS is installed and “DSSAdmins” is
the name of the group to give permissions. If a group was already created to give non-admins
permissions to start the Configuration Utility, then it makes sense to give port 7627 permissions
to that same group.
◦
>netsh http add urlacl url=https://+:7627/ user=DSS_Server\DSSAdmins
This command can only be used to give permissions to a single group. If permission has been
given to one group and you wish to give permissions to a different group instead the following
command must be run first:
◦
>netsh http delete urlacl url=https://+:7627/
Device credentials for FutureSmart devices
HP Digital Sending Software communicates with FutureSmart devices for many purposes, including
adding and removing devices, getting status from devices, configuring devices and processing jobs
from devices. When a FutureSmart device has a password set, the device's security model requires
that DSS know and use that password to enable device communication.
This section describes the various device passwords that can be set. It also describes how DSS uses
the credentials it has stored for device communication and how to configure those credentials within
DSS.
FutureSmart device accounts and credentials
HP LaserJet printers have for many years had an Embedded Web Server (EWS) interface. This can
be accessed by using a web browser and typing in the IP address of the device. Within the devices is
the concept of an Admin User that has access to all of the capabilities available via the EWS. The
Admin User also has access to all the applications on the device such as the Copy application, Send
to Network Folder application, etc.
As a factory default, the Admin User’s password is blank which means that anyone that accesses the
EWS has permissions to all the capabilities provided by the EWS. Within the EWS there is a place
where the Administrator User’s password can be set. Once the password is set then a user
connecting to the EWS must sign in with the password to have Administrator level permissions.
If the Administrator password is set, DSS must also know and use that password for any of the
communication tasks (add/remove, get status, configure, process job) it wants to accomplish with the
device.
Starting with the spring 2012 release of FutureSmart firmware, a new factory defined user will be
available in the devices. This is the Config User. For devices with this spring 2012 firmware (or
newer) DSS can communicate if it has either the Admin User or the Config User’s password. The
Config User can not be used by users connecting to the EWS with a web browser; it is only available
for use by remote applications such as DSS and HP Web Jetadmin.
ENWW Planning the DSS deployment 33
Commentaires sur ces manuels