HP JetAdvantage Security Manager 10 Device E-LTU Manuel d'utilisateur

HP JETADVANTAGE SECURITY MANAGER Certificate Management CONTENTS Overview ...

This template must be created at the Certificate Authority and customized for printer certificate generation. Relative to HP printers, identity cert

Under the Request Handling tab, Signature and encryption should be selected as the Purpose. Allow private key to be exported can be selected

As is the case when granting the Security Manager server “machine” access to the designated certificate authority, Security Manager access to the ne

Enter the name of the Security Manager server requiring template access (hp-print-mgmt), then select OK. Granting the Security Manager server both R

Now that template configuration is complete, a final step is required to complete the template access process. The new template must be enabled fo

To support a variety of scenarios, Microsoft Active Directory Certificate Services (AD CS) supports industry-standard methods of certificate revo

then Revoke Certificate. Once a reason for revocation is provided and the certificate has been revoked, it is moved from the Issued Certificates q

CDP repositories can either be an LDAP or HTTP location. This example shows CDP configuration if CRL access is to occur via HTTP. The CDP informa

SECURITY MANAGER CERTIFICATE POLICY SETTINGS The image below provides a graphic representation of the configurable identity certificate settings fou

private key. Why select HP Security Manager as the CSR source? When HP Security Manager is selected as the CSR source, stronger encryption algorith

OVERVIEW Digital certificates are a primary foundation of security providing authentication and encryption between two nodes. HP printers use certif

discovered. If there is a hostname reference of an Security Manager device in the database, Security Manager will generate the request (CSR) with th

select the desired key length. More selections are available when HP Security Manager is selected as the CSR source. 15. Certificate Request Signa

This recommendation report shows a failed assessment of the device with the self-signed certificate. Explanation as follows: 1. Common Name Mismat

1. Security Manager will assess the device based upon the Identity Certificate policy editor settings and determine if remediation is necessary. 2.

to the next publishing of the CRL, Security Manager won’t attempt CRL access. The CDP information was gleaned from the certificate when it was issue

4. If an assessment is performed before the next CRL update, Security Manager will not access the CRL to check for certificate revocation. If an

5. Security Manager now possesses revocation knowledge of the certificate it installed on the device. If Security Manager attempts to access the

device. The following image shows completion of this task and evidence of a new certificate based on the new serial number. USING SECURITY MANAGER

Newer HP devices such as the HP LaserJet M604/605/606, HP Color LaserJet MFP M577, HP Color LaserJet M552, and others began to unify the location of

NOTE: For devices that do not support this unification of Jetdirect and device CA certificates and still place the Jetdirect CA certificate on the

The Jetdirect certificate (identity certificate) on the device has two roles: to provide encryption of the data stream and to provide authentication

client and server, may be preventing traffic from reaching the server on TCP port 135. The client may be unable to reach the server at all due to a

7. If workstations are also having issues auto-enrolling for certificates, then the standard troubleshooting steps for resolving RPC Server Unavaila

certificate from one of the devices and using a tool such as Web Jetadmin to install it on the affected devices in one easy step. Since self-signed

CA CERTIFICATES HP Jetdirect can store an Identity certificate and a CA (Certificate Authority) certificate. The CA certificate tells Jetdirect whic

Directory service. When you install an enterprise root CA, it uses Group Policy to propagate its certificate to the Trusted Root Certification Autho

The form itself can take time to complete and is prone to error especially when completing many times over. The Common Name will be either an

 Security Manager incorporates the certificate management solution into the standard assess and remediate lifecycle. Not a separate add-on or plug-

Next, with Authenticated Users highlighted, select the Security tab, click Add. Select Object Type, then select Computers. Select OK and enter t