HP M527dn

HP Inc.
HP LaserJet Enterprise MFP M527 Series,
Color LaserJet Enterprise MFP M577 Series, and
PageWide Enterprise Color MFP 586 Series
Firmware with Jetdirect Inside Security Target
Version: 2.0 Copyright © 2008-2016 by atsec information security corporation and HP Inc. Page 10 of 98
Last update: 2016-06-07 or its wholly owned subsidiaries
 DNS server
 Syslog server
 WINS server
 One administrative client computer network connected to the TOE in the role of an Administrative
Computer
The following optional components are part of the Operational Environment:
 HP Print Drivers, including the HP Universal Print Driver, for client computers (for submitting print
job requests from client computers)
 HP Web Jetadmin fleet management tool
 Windows domain controller/Kerberos server
 LDAP server
 Client computers network connected to the TOE in a non-administrative computer role
 Remote file systems:
o SMB
o FTP
 Microsoft SharePoint (useful with flow models only)
 SMTP gateway
 Web browser
1.4.2 Intended method of use
[PP2600.2] is defined for a commercial information processing environment in which a moderate level of
document security, network security, and security assurance are required.
The TOE is intended to be used in non-hostile, networked environments where TOE users have direct
physical access to the HCDs for printing, copying, faxing, scanning, and storing documents. The physical
environment should be reasonably controlled and/or monitored where physical tampering of the HCDs
would be evident and noticed.
The TOE can be connected to multiple client computers via a local area network using HP's Jetdirect
Inside in the evaluated configuration. The evaluated configuration uses secure network mechanisms for
communication between the network computers and the TOE. The TOE is managed by one designated
administrative computer. The TOE is not intended be connected to the Internet.
The evaluated configuration contains a built-in user identification and authentication database (a.k.a. sign
in method) used for Local Device Sign In that is part of the TOE. It also supports a Windows domain
controller (via Kerberos) for a feature called Windows Sign In and a Lightweight Directory Access Protocol
(LDAP) authentication server for a feature called LDAP Sign In to identify and authenticate users. The
Windows domain controller and LDAP server are part of the Operational Environment.
The evaluated configuration supports the optional HP Web Jetadmin (WJA) fleet management tool for
administering the TOE. (If the HP WJA tool is to be used to administer the TOE, it must be installed on
the Administrative Computer.) This tool uses the Hypertext Transfer Protocol (HTTP), Hypertext Markup
Language (HTML), Simple Object Access Protocol (SOAP), Extensible Markup Language (XML), Open
Extensibility Platform device layer (OXPd) Web Services, WS* Web Services, and Simple Network
Management Protocol (SNMP) to communicate to the TOE. (The HP WJA tool is part of the Operational
Environment.) The evaluated configuration also supports the Embedded Web Server (EWS) interface for