HP M527dn

HP Inc.
HP LaserJet Enterprise MFP M527 Series,
Color LaserJet Enterprise MFP M577 Series, and
PageWide Enterprise Color MFP 586 Series
Firmware with Jetdirect Inside Security Target
Version: 2.0 Copyright © 2008-2016 by atsec information security corporation and HP Inc. Page 83 of 98
Last update: 2016-06-07 or its wholly owned subsidiaries
This section maps to the following SFRs:
 FIA_ATD.1
 FIA_UAU.2
 FIA_UID.2
 FIA_USB.1
 FMT_SMR.1
7.1.4 Data protection and access control
Permission Sets 7.1.4.1
For Control Panel users, the TOE uses a user's User Role (as determined by each user's Permission Set)
to determine a user's access to many TOE functions. Only U.ADMINISTRATOR can create, modify, and
delete Permission Sets. In addition, only U.ADMINISTRATOR can create, modify, and delete the
Permission Set associations to users. By default, the TOE includes the following Permission Sets:
 Device Administrator (U.ADMINISTRATOR)
 Device User (U.NORMAL)
These default Permission Sets cannot be created, renamed or deleted. In addition, the permissions in
Device Administrator cannot be modified.
Permissions in a Permission Set include permissions as high-level as executing the Retrieve from Device
Memory application. They also include more granular permissions that control administrative functions
like the ability to delete any Job Storage job. Each permission in a Permission Set has two possible
values: allowed and disallowed.
This section maps to the following SFRs:
 FMT_MSA.1-perm
 FMT_SMF.1
Job PINs 7.1.4.2
Users can control access to each stored print and stored copy job that they place under the TOE's control
by assigning a Job PIN to each job. A Job PIN limits access to a stored print or stored copy job while the
job resides under the TOE's control and allows a user to control when the job is printed so that physical
access to the hard copies can be controlled by the user. A Job PIN must be 4 digits (0000-9999) in
length. Only one Job PIN is permitted per job.
A Job PIN can only be assigned to a job at job creation time. They cannot be assigned after the job
already resides under the TOE's control. A user assigns a Job Pin to a stored copy job via the Control
Panel. A user assigns a Job PIN to a print job at the client computer. The Job PIN is embedded in the
print job by the client computer prior to sending the print job to the TOE. Once the TOE receives a print
job containing a Job PIN, the TOE enforces the Job PIN embedded in that job.
Once a Job PIN is set on a job and the job resides under the TOE's control, the Job PIN cannot be
modified or deleted (i.e., the TOE does not provide the ability to manage Job PINs).
A job with a Job Encryption Password cannot be assigned a Job PIN.
This section maps to the following SFRs:
 FIA_SOS.1