solution Contentsolution Content

HP printers - Using self-signed certificates with HP printers

HP printers such as HP LaserJet printers have the ability to generate their own self-signed ID certificate using a built-in Certificate Authority.

This certificate includes a valid key pair that can be used to negotiate a secure (encrypted) connection for browsing the Embedded Web Server (EWS). This is its intended purpose.

Note:

Using a printer-generated, self-signed ID certificate for any other purpose can expose the printer to malicious activity.

Applicable printers

This document applies to the following HP printer series:

  • HP LaserJet Enterprise

  • HP LaserJet Managed

  • HP LaserJet Pro

  • HP LaserJet

  • HP OfficeJet

  • HP PageWide Enterprise

  • HP PageWide Managed

  • HP PageWide Pro

About printer-generated, self-signed ID certificates

For security purposes, printer-generated, self-signed ID certificates should always be replaced with a valid CA-signed ID certificate when connecting the printer to a network.

A printer-generated certificate has a creation time and date that is based on the printer’s internal clock setting.

Because they cannot be verified, "self-signed" certificates must not be used for authentication or identification. An unverified certificate cannot be trusted. Trusting self-signed ID certificates could expose an entire network to malicious activity.

A safe and secure configuration for network authentication or identification must include the replacement of a printer-generated, self-signed ID certificate with a valid CA-signed ID certificate that can be verified and trusted.

For more information about managing certificates on HP printers and scanners, go to Install, view, and manage certificates to ensure data security.