Page 8 of 19
Embedded Web Server (EWS) multilevel access
The Embedded Web Server is a tool which enables direct management of a device such as an HP LaserJet
printer or an HP Designjet printer, however without any security being implemented this tool can also be
damaging as many features can be configured by a third-party using just a web browser and an IP connection
to the printer. To solve this security issue we have implemented two levels of access to our compatible HP
Designjets, they are as follows:
The Security page allows users to:
• Restrict access to the printer by setting an administrator user account
• We can now define two levels of access: Administrator and Guest
• If the two levels of access have been set, and the user has neither of the passwords they will not be
able to gain access to EWS information at all. See below
Administrator password
Access control is enabled by setting the Admin account password: that is, by specifying a password for the user
account Admin. Users will then have to provide the Admin password in order to perform any of the following
restricted operations
:
• Cancel, delete or preview a job in the job queue.
• Delete a stored job.
• Clear accounting information.
• Change printer’s settings on the Device Setup page.
• Update printer's firmware.
• Change printer's date and time.
• Change security settings.
• View protected printer information pages.
See next page