Postscript (R) Passwords - Xerox ColorQube 9201 System Administrator Manual

Security
(R)
PostScript
The PostScript language has some powerful utilities that could be used to compromise the security of a
system. These utilities can be password protected so as to prevent abuse. This feature is concerned
with the ability to set the various passwords. In addition, we have extended the PostScript language
with custom operators; the same passwords could be used to secure the custom extensions.
Without a password in place, anyone with slight knowledge of Postscript can potentially abuse the
system. They can use the Startjob and Exitserver operators, change the system parameters, and run
jobs that can re-define PostScript operators and so on.
There are three passwords defined in the PostScript Password page, as follows:
• Start Job Password - A write-only string. Authorizes the use of startjob and exitserver
• Run Start Job - An integer. Controls the execution of the Sys/Start file, which runs as an
unencapsulated job and loads definitions into VM. This parameter should only ever be set to zero
or one in normal use.
• System Parameters Password - A write-only string. Controls use of the setsystemparams and
setdevparams operators
At your Workstation:
1. Open the web browser and enter the IP address of the device in the Address bar, and press
[Enter].
2. Click on the [Properties] tab.
If prompted, enter the Administrator User ID and Password. The default is [admin] and [1111].
3.
4. Click on the [Login] button.
5. Click on the [Security] link.
6. Click [PostScript (R) Passwords] in the directory tree.
7. On the PostScript (R) Passwords page, in the Run Start Job area select either [Disabled] or
[Enabled] for StartupMode.
8. Enter details in the [Password] and [Retype Password] fields for System Parameters Password
and/or Start Job Password.
9. You can also check the Select to save new password checkbox for System Parameters Password
and/or Start Job Password.
10. When finished, click on the [Apply] button.
172 Xerox ColorQube™ 9201/9202/9203
System Administrator Guide
Passwords