HP Inc.
HP LaserJet Enterprise MFP M527 Series,
Color LaserJet Enterprise MFP M577 Series, and
PageWide Enterprise Color MFP 586 Series
Firmware with Jetdirect Inside Security Target
Version: 2.0 Copyright © 2008-2016 by atsec information security corporation and HP Inc. Page 61 of 98
Last update: 2016-06-07 or its wholly owned subsidiaries
Verification of secrets (FIA_SOS.1) 6.1.4.3
The TSF shall provide a mechanism to verify that secrets meet the requirement: Job PINs
shall be 4 digits.
Timing of Control Panel authentication (FIA_UAU.1) 6.1.4.4
The TSF shall allow viewing of the Control Panel help screens and selection of a sign
in method on behalf of the Control Panel user to be performed before the user is
authenticated.
The TSF shall require each Control Panel user to be successfully authenticated before
allowing any other TSF-mediated actions on behalf of that user.
IPsec authentication before any action (FIA_UAU.2) 6.1.4.5
The TSF shall require each Network Client Computer, Administrative Computer, and
trusted IT product connection user to be successfully authenticated before allowing any
other TSF-mediated actions on behalf of that connection user.
Control Panel protected authentication feedback (FIA_UAU.7) 6.1.4.6
The TSF shall provide only asterisk characters for each
Access Code digit typed
Authentication password character typed
Job PIN digit typed
to the user while the Control Panel authentication is in progress.
Application Note: Job PINs are not used for authentication, but the digits are masked when entered.
Timing of Control Panel identification (FIA_UID.1) 6.1.4.7
The TSF shall allow viewing of the Control Panel help screens and selection of a sign
in method on behalf of the Control Panel user to be performed before the user is identified.
The TSF shall require each Control Panel user to be successfully identified before allowing
any other TSF-mediated actions on behalf of that user.
IPsec identification before any action (FIA_UID.2) 6.1.4.8
The TSF shall require each Network Client Computer, Administrative Computer, and trusted
IT product connection user to be successfully identified before allowing any other TSF-
mediated actions on behalf of that connection user.
To Next Page
Loading...