solution Contentsolution Content

HP LaserJet Pro - Embedded security features

Introduction

The latest HP LaserJet Pro printers available from Spring 2015 onward are designed with embedded security features to validate the integrity of the firmware and provide protection against complex security threats. The embedded security features implemented in the firmware and hardware are:
  • Code-signing: Validates that the firmware is authentic HP code and is not altered.
  • Hardware root of trust (Secure Boot): Validates the integrity of the HP code when it is installed on the printer and when the printer restarts.
  • Run-time Code Integrity: Protects any alteration of the HP firmware code in memory.

Overview of the embedded security features

When a security intrusion occurs, the embedded security features will automatically restart the printer and ensure that HP’s authentic firmware code is loaded.

Code-signing

The Code-signing feature uses a cryptographic key and HP’s digital signatures to validate that the firmware code is not altered and is authentic since it was distributed. This feature prevents unauthorized distributors to maliciously tamper with the firmware code.

Hardware root of trust (Secure Boot)

The Hardware root of trust feature performs a series of checks to confirm the integrity of the firmware code when it is installed on the printer and every time the printer is powered on. It ensures that only the authentic HP firmware code is loaded on the printer and will validate the code when the printer restarts.

Run-time Code Integrity

The Run-time Code Integrity feature prevents any code alteration in the memory when the firmware code is running on the printer. If any alteration occurs in the memory, the printer detects the intrusion and automatically restarts and loads the authentic HP firmware code.

Best practices to ensure authentic HP firmware code on the printer

To prevent security threats, make sure that the option to downgrade the firmware is disabled in the control panel.
Follow these steps to disable the downgrade firmware feature:
  1. From the Home screen on the product control panel, open the Setup menu.
    • For touchscreen control panels, touch Setup ().
    • For standard control panels, press the left or right arrow button.
  2. Scroll to and open the following menus:
    • Service
    • LaserJet Update
    • Manage Updates
  3. Disable the Allow Downgrade feature.
    • For touchscreen control panels, touch Allow Downgrade, and then touch the No option.
    • For standard control panels, select Allow Downgrade, and then select the No option.
For these printers:
HP LaserJet Pro M404-M405
HP LaserJet Pro M428-M429
HP Color LaserJet Pro M454
HP Color LaserJet Pro M479
Use the following steps:

Touch Screen control panels

  1. From the Home screen on the printer control panel, pull down the dashboard.
  2. Touch the Setup Icon ()
  3. Scroll down to and touch Printer Maintenance.
  4. Scroll down to and touch Update the Printer.
  5. Touch Manage Updates.
  6. Touch Allow Downgrade.
  7. Select NO.
  8. Touch the House Icon () to return to the main menu.

Two line control panels

  1. Touch OK.
  2. At Main Menu Setup screen, Touch OK.
  3. Use the left and right buttons to go to Printer Maintenance, then tough OK.
  4. Use the left and right buttons to go to Update Firmware, then tough OK.
    A printer settings message will appear.
  5. Touch OK.
  6. Use the left and right buttons to go to Manage Updates, then tough OK.
  7. Use the left and right buttons to go to Allow Updates, then tough OK.
  8. Use the left and right buttons to go to NO, then tough OK to select. A check mark should be shown on the right side of the screen.

Supported Printers

The embedded security features are available in the following printers:
  • HP Color LaserJet Pro M252
  • HP Color LaserJet Pro MFP M277
  • HP LaserJet Pro M402
  • HP LaserJet Pro M403
  • HP LaserJet Pro M404
  • HP LaserJet Pro M405
  • HP LaserJet Pro MFP M426
  • HP LaserJet Pro MFP M427
  • HP LaserJet Pro MFP M429
  • HP Color LaserJet Pro M452
  • HP Color LaserJet Pro M454
  • HP Color LaserJet Pro MFP M477
  • HP Color LaserJet Pro MFP M479