HP Officejet Enterprise Color X555 series
HP Officejet Enterprise Color MFP X585 series
HP PageWide Enterprise Color 556 series
HP PageWide Enterprise Color MFP 586 series
HP PageWide Enterprise Color 765dn
HP PageWide Enterprise Color MFP 780, 785 series
HP LaserJet Enterprise M506 series
HP LaserJet Enterprise 500 MFP M525 series
HP LaserJet Enterprise MFP M527 series
HP LaserJet Enterprise 500 color M551 series
HP LaserJet Enterprise 500 color MFP M575 series
HP LaserJet Enterprise 600 M601, M602, M603 series
HP LaserJet Enterprise M604, M605, M606 series
HP LaserJet Enterprise M607, M608, M609 series
HP LaserJet Enterprise MFP M630 series
HP LaserJet Enterprise MFP M631, M632, M633 series
HP LaserJet Enterprise 700 M712 series
HP LaserJet Enterprise MFP M725 series
HP LaserJet Enterprise 700 color MFP M775 series
HP LaserJet Enterprise M806 series
HP LaserJet Enterprise flow MFP M830z
HP Color LaserJet Enterprise M552, M553 series
HP Color LaserJet Enterprise MFP M577 series
HP Color LaserJet Enterprise M651 series
HP Color LaserJet Enterprise M652, M653 series
HP Color LaserJet Enterprise MFP M680 series
HP Color LaserJet Enterprise Flow MFP M681 series, M682z
HP Color LaserJet Enterprise M750 series
HP Color LaserJet Enterprise M855 series
HP Color LaserJet Enterprise flow MFP M880 series
HP Digital Sender Flow 8500 fn2 Document Capture Workstation
HP ScanJet Enterprise Flow N9120 Document Flatbed Scanner
HP LaserJet Managed E500XX series
HP LaserJet Managed E600XX series
HP LaserJet Managed MFP E525XX series
HP LaserJet Managed MFP E625XX series
HP LaserJet Managed MFP E725xx Series
HP LaserJet Managed MFP E825xx Series
HP Color LaserJet Managed E550xx series
HP PageWide Managed Color E556xx series
HP PageWide Managed Color E751xx series
HP Color LaserJet Managed MFP E575xx Series
HP Color LaserJet Managed MFP E675xx Series
HP PageWide Managed Color MFP E776xx Series HP Color LaserJet Managed MFP E778xx Series
HP Laserjet Enterprise & Future Smart Firmware devices Support Page:
1. EWS (embedded web server)
How to access the HP Embedded Web Server (EWS)
1. Identify the product IP address or host name. If the Network button is visible on the Home screen on the
product control panel, touch that button to display the address. Otherwise, follow these steps to print or
view the product configuration page: a. From the Home screen on the product control panel, scroll to and touch the Administration button.
b. Open the menus: Reports– Configuration/Status Pages– Configuration Page c. Touch the Print or View button. d. Find the IP address or host name on the Jetdirect page. In a browser enter the IP address in the URL field.
2. Jet admin software
HP Web Jetadmin is a tool for managing a variety of HP products This solution allows you to remotely install, monitor, maintain, troubleshoot, and secure your printing and imaging environment. CAUTION:
Losing passwords can block access to an MFP. Be careful to record them in a safe place.
Here is a list of the passwords you should configure:
Web Jetadmin password (required during installation of Web Jetadmin)
EWS Password (applies to the EWS, JetDirect networking, and FTP)
Setting up HP Web Jetadmin
Open Web Jetadmin to view the device list that appears by default.
Check to see that the print devices you wish to configure appear in the Device Model List. If they are not in the list, use Discovery options to find devices on your network.
Hold down the CTRL key and click to select the printers or MFPs to configure in the Device List view Click the Config tab in the lower half of the Device List view to show settings available for configuration The next step is to ensure that any installed HP Secure Hard Disks are configured:
Configuring HP Secure Hard Disk
If you have an HP Secure Hard Disk installed, you need to verify data encryption is enabled. Encryption is enabled by default for products and hard drive accessories. WARNING: If your HP Secure Hard Disk is not already configured to encrypt your data, consult your documentation to resolve this issue. Failing to configure your HP Secure Hard Disk before starting this checklist will reset all security settings to factory defaults and require you to repeat this checklist again when you configure the drive.
Follow these steps to use Web Jetadmin to verify your HP Secure Hard Disk is installed and configured:
1. Select the device you want to verify has an encrypted disk and select the Storage tab. Select the device in the device list
and mouse over the Storage Media Column.
2. Examine the storage media data available in the pop-up it should show that the hard drive is enabled, and the encryption
status should be “Encrypted.”
Follow these steps to use the EWS to verify your HP Secure Hard Disk is installed and configured:
1. Go to the EWS for each print device and select the Security tab 2. Select Protect Stored Data from the left-hand menu list to view the Protect Stored Data Page 3. In the Hard Disk Status section of the Protect Stored Data page, you can see the Encryption Status for that device. If you
see a green checkmark, the device is encrypting your data properly
The next step is to configure secure communications between HP Web Jetadmin and the MFPs:
SNMPv3 provides encryption for communication between Web Jetadmin and MFPs. It helps to ensure that only authorized and authenticated administrators have access to the configuration settings of the MFPs. It also helps to ensure that no one can gather sensitive information, such as passwords, usernames, and other codes, over the network while you are configuring the MFPs. Click Security in the Configuration Categories menu to view the options for configuration. From the Security Options select SNMP Version Access Control. On the SNMP Version Access Control menu and select the Enable SNMPv3 checkbox Once Enable SNMPv3 has been selected, and fill in the New User, the New Authentication Passphrase, and the New Privacy Passphrase fields in the New SNMPv3 Credential section. The New User Name field can be any name you choose.
The New Authentication Passphrase field can be any word or phrase that is at least 9 alphanumeric characters.
The New Privacy Passphrase field can be any word or phrase that is at least 9 alphanumeric characters.
These instructions are for the initial configuration of SNMPv3. Once you finish this configuration, your devices will require these credentials whenever anyone attempts to access settings over the network. Be sure to remember these credentials and provide them only to authorized users. If these credentials are forgotten, the only way to restore communication between HP Web Jetadmin and the print devices is to restore them to factory default settings.
Scroll down to the SNMPv1 Settings section, and select SNMPv1 disabled This setting limits all SNMP configuration communication to only SNMPv 3. Once applied your devices will not allow SNMPv1 SET and SNMPv2 GET. Choose Apply at the bottom of the SNMP Version Access Control configuration to apply the settings to the selected devices.
Configuring Security Settings
The Security category includes many advanced security settings and password settings. If you are attempting to configure a setting that is in the Security category and not listed in this section, you should check the chapter on Advanced Security for multiple MFPs. To set the basic required settings in this category follow the steps in the sections below.
The Bootloader password protects features, such as the MFP reset options that are available on the MFP control panel. These features are not commonly known, but they can severely affect the MFPs if they are executed improperly. The Bootloader password is not configured by default.
Once you configure the bootloader password, the bootloader features will be inaccessible permanently without it. The only way to restore the default setting and clear the password is to provide the correct password and set it with a blank password. Be very careful to remember the configured bootloader password. A hardware replacement may be required to recover from a forgotten Bootloader Password. Type a password of 9 to 16 numeric digits in the New Password field and repeat it exactly in the Repeat Password field. Note: To reset (clear) this password, click to select Bootloader Password, type the correct current password, and leave the New Password and Repeat Password fields blank. Then click Configure, and the bootloader password will be cleared in the MFPs.
Embedded Web Server Password
You can configure many of the settings in this checklist using the Embedded Web Server. To protect your MFP while configuring this checklist using Web Jetadmin it is important to set the Embedded Web Password. To do this, follow these instructions. Click Embedded Web Server Password under the Security category. Type a password of 9 to 16 characters in the Embedded Web Server Password field (you should always type the maximum number of characters for best security). This setting requires users to log on for parts of the EWS that provide configuration options. Repeat the password exactly in the Repeat Password field. Note: The Embedded Web Server Password is synchronized with the Device Password (appears later in this checklist). If you change either the Embedded Web Server password or the Device Password, the MFP will configure both to be the same. PJL Password
The PJL password protects the default features on the MFP that can be changed by sending PJL commands to the MFP. The PJL
password is required for administrative PJL commands that are used to modify feature settings. If you do not set this password,
you are vulnerable to having your device settings including your control panel display altered. To set the PJL Password:
Click PJL Password under the Security category. Type a password that is any number between 1 and 2147483647 that is at least nine digits in length, and repeat it in the Repeat
PJL Password field. Do not use the same PJL password for all of your print devices as this can significantly increase the risk of
having your PJL password guessed by an attacker.
If you have problems configuring this password try configuring it through the EWS.
Printer Firmware Update
HP recommends updating firmware whenever new firmware is available, but you should keep Printer Firmware Update disabled
until you plan to use it. To disable Printer Firmware Update:
Click to select Printer Firmware Update (Figure 37) and select Disable.
Secure Disk Password
The Secure Disk Password option (Figure 39) allows you to configure the password for a secure disk. If you change the password,
no data on the secure disk is lost.
If you are configuring multiple devices and are not sure whether a manual password has been set on any of those devices it is
recommended you skip this step in the configuration.
Figure 39: The Secure Disk Encryption Mode option.
Apply the Changes
Click the Apply button located in the bottom right hand corner to apply the settings to the selected devices
Review your settings and then click the Configure Devices button to execute the configuration Secure File Erase Mode
This setting determines the level of overwriting applied to delete files during routine functions. This includes removal of files for
the Secure Storage Erase function. The settings are:
Non-secure Fast Erase does a standard erase with no additional security.
Secure Fast Erase overwrites files using one pass. This takes some extra time, but it provides reasonable security.
Secure Sanitizing Erase overwrites files with three passes. It noticeably slows the MFP, but it ensures that files are completely
Use Secure Sanitizing Erase to meet stringent security requirements such as Department of Defense standards. Secure File Erase requires that the File System Password be configured. If you are following this checklist in order this should not
be an issue.
To set the Secure File Erase Mode follow these instructions:
Click to select Secure File Erase Mode (Figure 47) and view the options in the dropdown menu. Select Secure Fast Erase or Secure Sanitizing Erase if you require maximum security.
Apply the Changes
Click the Apply button located in the bottom right hand corner to apply the settings to the selected devices. This will open the
configure devices dialogue box.
Review your settings and then click the Configure Devices button to execute the configuration. Disabling EWS Config
EWS Config was required for configuring this checklist, but it should be disabled during normal use of the MFPs. To disable EWS
Go to the Network category and click to select Enable Features Click to disable EWS Config.
3. Security features
IP Security (IPsec) protocols that control IP-based network traffic to and from the product. IPsec provides host-to-host authentication, data integrity, and encryption of network communications. For products that are connected to the network and have an HP Jetdirect print server, you can configure IPsec by using the Networking tab in the HP Embedded Web Server. Sign in to the product Some features on the product control panel can be secured so that unauthorized people cannot use them. When a feature is secured, the product prompts you to sign in before you can use it. You can also sign in without waiting for a prompt by touching the Sign In button on the Home screen. Typically, you use the same user name and password that you use to sign in to your computer on the network. After you have signed in to the product, a Sign Out button displays on the control panel.
Assign a system password
Assign an administrator password for access to the product and the HP Embedded Web Server so that unauthorized users cannot change the product settings.1.Open the Embedded Web Server by entering the IP address into the address line of a Web browser.2. Click the Security tab.3. Open the General Security menu.4. In the Username field, enter the name to associate with the password.5. Enter the password in the New Password field, and then enter it again in the Verify Password field. If you are changing an existing password, you must first enter the existing password in the Old
Password field. 6. Click the Apply button. Make note of the password and store it in a safe place.
HP High Performance Secure Hard Disks
The hard disk provides hardware-based encryption so you can securely store sensitive data This hard disk uses Advanced Encryption Standard (AES) Use the Security menu in the HP Embedded Web Server to configure the disk
4. Maintenance mode access
5. Reset Factory defaults
1. From the Home screen on the control panel, touch the Administration button. 2. Open the following menus: ● General Settings ● Restore Factory Settings 3. A message advises that the reset function might result in loss of data. Touch the Reset button to complete the process. NOTE: The product restarts automatically after the reset operation completes.
6. Hard disk failure codes
The firmware for the resides on the Hard Drive (HDD) or Solid State Disk (SSD) connected to the formatter. 99.09.XX errors are displayed which indicates action needs to be taken relative to the HDD, SSD, or the firmware. The majority of 99.09.XX errors DO NOT require formatter or disk replacement but are a result of formatter or disk replacement. See below for actions to take for 99.09.XX errors on these products. ***In most cases, a USB thumbdrive with the printer’s specific firmware .bdl file will be needed***
99.09.62 – Unknown Disk
Encryption mismatch between the HDD and the formatter. This typically happens because an HDD was swapped into a device from another device or replaced.
If the HDD is desired to be used in this device, perform the following actions from the Preboot Menu
“Administrator”> “Manage Disk”>”Boot Device”>Erase / unlock. This item reinitializes the disk and cleans all disk partitions. This item also unencrypts the hard drive from the previous formatter. Selecting the Erase and unlock item removes all data. A confirmation prompt is provided. May take an hour to complete. The system is not bootable after this and a 99.09.67 error displays. A firmware download must be done.
If the error 99.09.62 remains, repeat Erase/Unlock and cycle power (off/on) when procedure is complete. Then Download, Option - USB Thumb drive (download firmware).
Select the Lock Disk item to lock (mate) a new secure disk to this product. The secure disk already locked to this product will remain accessible to this product. Use this function to have more than one encrypted disk accessible by the product when using them interchangeably. How to open the Preboot menu: 1. Turn the product on. 2. (Full touchscreen) HP logo displays on the product control panel. When a "1/8" with an underscore displays HP logo to open the Preboot menu. For panels with numeric keypad, press cancel (“X” button) when 1/8 appears. 3. Use the arrow buttons on the touchscreen to navigate the Preboot menu. 4. Touch the OK button to select a menu item.
99.09.63 – Incorrect Disk
This error indicates the expected encrypted HDD is not present. This is expected behavior when installing a new HDD in a device where the previous HDD was encrypted. Perform the following actions from the Preboot Menu under the “Administrator”>” Manage disk” option:
Clear disk password. Download, Option - USB Thumb drive (download firmware). If the error persists, perform an Erase/Unlock procedure then Download, Option - USB Thumb drive (download firmware). The Erase and unlock item removes all data. A confirmation prompt is provided. This procedure may take an hour to complete. The system is not bootable after this action and a 99.09.67 error displays on the control panel. A firmware download must be performed. If the error message 99.09.63 remains, repeat Erase/Unlock and cycle power (off/on) when procedure is
complete. Then Download, Option - USB Thumb drive (download firmware).
99.09.66 – No Disk Installed
This is an error indicating one of the following: HDD or SSD is not installed or SSD is not connected properly or HDD or SSD has failed.
Ensure HDD or SSD is installed on the board Check all HDD/SSD connections to make sure they are all secure
Power Cycle the printer If all connections look good and error is still displayed, replace the HDD/SSD
99.09.67 – Disk is not bootable please download firmware
No firmware loaded on the disk. This is the result of installing a new disk or performing a “Format Disk” command.
Resolution: Perform the following action from the Preboot Menu under the “Administrator” option: Download, Option - USB Thumb drive (download firmware).
7. Service Mode Pin
The Service Mode Pin for the HP LaserJet Enterprise M806 (documented as 10080613) will not work on models that were manufactured during the first several months of production. The Service Mode Pin for these models was mistakenly set on the printer as 10086013. Solution: Starting with shipments in March 2014, the Service Mode Pin has been corrected to 10080613. • When trying to enter Service Mode, first try entering 10080613.• If that does not work, then enter 10086013.