Access Control - HP 635n - JetDirect IPv6/IPsec Print Server Administrator's Manual

Table 4-16 Certificate Configuration Screens (continued)
Import Certificate and Private Key screen. Use this screen to import a Jetdirect certificate and private key.
●
Export the Jetdirect certificate and private key screen. Use this screen to export the installed Jetdirect certificate and private
key to a file.
●

Access Control

NOTE:
If the IPsec/Firewall feature is available, it is recommended for use in place of the Access Control
List for improved security and performance.
Use this tab to display the Access Control List (ACL) on the HP Jetdirect print server. An access control
list (or host access list) specifies individual host systems, or networks of host systems, that will be
allowed to access the print server and the attached network device. Up to 10 entries can be included
on the list. If the list is empty (no hosts are listed), any supported system can access the print server.
By default, hosts with HTTP connections (for example, through the embedded Web server or the Internet
Printing Protocol) are allowed access to the print server regardless of access control list entries. To
disable access by HTTP hosts, clear the Allow Web Server (HTTP) access checkbox at the bottom of
the list.
CAUTION:
communicate with the HP Jetdirect print server if your system is not properly specified in the list,
or access through HTTP is disabled.
For use of the Access Control List as a security feature, see
on page
Host systems are specified by their IPv4 addresses or network number. If the network contains subnets,
an address mask may be used to identify whether the IP address entry designates an individual host
system or a group of host systems.
Examples. See the table of sample entries below:
IP Address
192.0.0.0
90 Chapter 4 Embedded Web Server (V.36.xx)
To install a certificate, it must be associated with a pending certificate request by the embedded Web server.
Import a Jetdirect certificate and private key. When imported, the existing certificate and private key will be
overwritten.
The file format must be PKCS#12 encoded (.pfx).
To import a certificate and private key, specify the name and path of the file that contains the certificate and
private key. Or, click Browse to browse your system for the file. Then enter the password that was used to
encrypt the private key.
Click Finish to complete the installation.
To export a certificate and private key, enter a password that will be used to encrypt the private key. You
must enter the password again to confirm it. Then click Save As to save the certificate and private key in a
file on your system. The file format will be PKCS#12 encoded (.pfx).
If this feature is supported on the print server and device, it is limited to IPv4 networks.
Use caution when using the access control list. You may lose your ability to
113.
Mask
255.0.0.0
Security Features (V.36.xx)
Description
Allow all hosts with network number 192.
ENWW