HP Inc.
HP LaserJet Enterprise MFP M527 Series,
Color LaserJet Enterprise MFP M577 Series, and
PageWide Enterprise Color MFP 586 Series
Firmware with Jetdirect Inside Security Target
Version: 2.0 Copyright © 2008-2016 by atsec information security corporation and HP Inc. Page 26 of 98
Last update: 2016-06-07 or its wholly owned subsidiaries
Print job types that use Job Storage:
o Personal jobs – Print jobs from a client computer that are stored in Job Storage. In the
evaluated configuration, such jobs must be PIN protected with a Job PIN. These jobs are
held until the user logs in to the Control Panel and releases the job. For PIN protected
stored jobs, the user must be the job owner or know the Job PIN (or have administrator
privileges) in order to delete the job. These jobs are automatically deleted after printing or
if the HCD is turned off or after an administrator specified time interval. If the HCD
contains the HP High Performance Secure Hard Disk, the administrator can configure the
TOE to retain these jobs over a power cycle.
o Stored jobs – Print jobs such as a personnel form, time sheet, or calendar from a client
computer that are stored on the TOE and reprinted. In the evaluated configuration, such
jobs must be PIN protected with a Job PIN. The administrator can configure the TOE to
automatically delete these jobs after a specified time interval. For PIN protected stored
jobs, the user must be the job owner or know the Job PIN (or have administrator
privileges) in order to delete the job. If the HCD contains an eMMC, these jobs are
automatically deleted when the HCD is turned off.
o Encrypted stored print jobs – Print jobs like those described above but that require
higher than normal protection (for example, documents containing company or employee
confidential information). These jobs will be assigned a password by the submitter when
submitted to the TOE. The user must know the password of the job in order to print or
delete it. The administrator may delete it without knowing the password. If the HCD
contains an eMMC, these jobs are automatically deleted when the HCD is turned off.
Scan job types:
o Email jobs – Scan jobs that are scanned directly into an email and sent from the TOE to
an SMTP gateway.
o Save to Network Folder jobs – Scan jobs that are saved to a remote file system.
o Save to SharePoint jobs – Scan jobs that are saved to a SharePoint server.
Stored copy jobs – A copy job that a Control Panel user has stored on the TOE. Stored copy
jobs are scanned using the HCD scanner. In the evaluated configuration, users are required to
protect Stored Copy jobs with a 4-digit Job PIN. The user must be the job owner, know the Job
PIN of the job, or be an administrator in order to delete the job.
A user signed in at the Control Panel will be the owner of any created stored copy job. Ownership of a
print job sent from a client computer is defined as the username associated with the job when it is
submitted to the TOE. The username is specified outside of the TOE, in the Operational Environment, so
it can neither be confirmed nor denied by the TOE.
1.5.4.2.2 TSF Data
TSF Data are data created by and for the TOE and that might affect the operation of the TOE. This type
of data is comprised of two components: TSF Protected Data and TSF Confidential Data.
TSF Confidential Data are assets for which either disclosure or alteration by a user who
is neither an administrator nor the owner of the data would have an effect on the
operational security of the TOE.
TSF Protected Data are assets for which alteration by a user who is neither an
administrator nor the owner of the data would have an effect on the operational security