HP Enterprise Embedded Web
HP Enterprise Embedded Web
the tabs are collapsed and available from the menu icon.
NOTE:
All features might not be available on every device.
For more information about the EWS, watch the following video.
User: Administrator
Pass: (blank)
4. If the web browser displays a message indicating that accessing the website
might not be safe, select the option to continue to the website.
NOTE:
Accessing this website will not harm the computer. This message is
received if the printer enforces HTTPS.
HTTPS encrypts web traffic between your computer and the printer
and requires a certificate to share keys between the computer and the
printer. The HP Jetdirect certificate is signed by your printer, which is
not recognized as a standard certificate authority that your computer
trusts. Because your computer cannot verify the identity of the
certificate issuer, you receive a security warning. This exception can
easily be bypassed, or you can issue a certificate to the printer from a
trusted certificate authority (CA) server.
EWS Tabs
The following tabs are available at the top of the EWS screen.
NOTE:
The tabs (and menus/features available on each tab) vary depending on the
printer model.
Information
View device information and printer usage statistics, such as a supplies status
page, job log, or configuration page.
If an administrator password is set in the EWS, the Information tab is the
only tab available when a user first accesses the EWS. To access the other
tabs, a user must sign in to the EWS with the password.
General
Configure general settings for the printer, set the date/time, configure energy
settings, upgrade the firmware, customize the Home screen and control panel
layout, and back up printer data.
Copy/Print
Configure default copy and print settings, manage stored jobs, configure
paper tray settings, restrict color printing/copying, and configure allowable
paper types.
Scan/Digital Send
Configure scan settings for scanning to various destinations, add address
book contacts, configure digital sending software, and set scanning
preferences.
Fax
Configure fax send and receive settings, quick sets, speed dials, and default
fax options.
Supplies
Configure low warning thresholds and printer behavior when supplies reach a
Very Low state.
Troubleshooting
Print various reports and pages (such as a Paper Path Page or Diagnostics
Page) to help troubleshoot printer issues, view diagnostic data, reset the
printer to factory default settings, and perform firmware updates.
Security
Set local administrator and remote configuration passwords, configure access
control settings and near-field communication (NFC), manage certificates and
remote apps, and protect stored data.
HP Web Services
Enable and configure HP Web Services for the printer, such as Smart Cloud
Print and HP JetAdvantage.
Networking
Configure and secure network settings for the printer when it is connected to
an IP-based network.
This tab does not appear if the printer is connected to other network types.
NOTE:
For more information, see the following HP Support playlist on YouTube: HP Embedded
Web Server Features and Settings
Change the order in which the items appear on the Home screen
Use the following steps to change the order in which menu items appear.
1. On the Home Screen Customization page, click and hold the cursor over a
menu item to be moved.
2. Drag the menu item to the new location, and then release the mouse button.
Example of moving a menu item
3. FutureSmart 3: Click the Apply button at the bottom of the EWS window to
save the changes.
FutureSmart 4: The updates are automatically saved.
2. To set wallpaper, click Set Wallpaper, browse to the image file, and then
click Open.
NOTE:
The wallpaper image is placed with the top-left corner of the picture in
the top-left corner of the control panel.
Language page
Customize the ordering information shown on the Supplies page
Use the Ordering Information page, located in the General tab, to add specific
supplies-ordering information that is displayed on the Supplies Status Page page.
To view the printer-specific supply information that can be added on this page,
click Shop for Supplies at the bottom of the page.
Ordering Information page
Networking Tab
Other Links
Networking Tab
This tab provides access to network configuration, security, and diagnostic parameters on
the HP Jetdirect print server.
Networking tab
Wireless Station
(Wireless print servers only.) Use this page to configure wireless station connection
settings required by your network. You can manually configure the settings, or run a wizard
that guides you through the wireless configuration process. Typically, you will provide the
following information about your wireless network:
Wireless network name (SSID) and network topology. Ad hoc and channel 11 are
selected by default.
Network security. Select from no security, WEP - Personal, WEP - Enterprise,
WPA/WPA2 - Personal, or WPA/WPA2 - Enterprise.
WEP - Personal. Select the authentication (Open System, Shared Key, or
Automatic), and enter the WEP key and key index.
WEP - Enterprise. Select the protocol (LEAP, PEAP, and EAP-TLS), and the
user name, password, server ID, encryption strength, and certification details.
WPA/WPA2 - Personal. Enter the passphrase.
WPA/WPA2 - Enterprise. Select the protocol (Auto, LEAP, PEAP, or EAP-TLS),
and enter the user name, password, server ID, encryption strength, and
certification details.
Wi-Fi Direct
HP Wi-Fi Direct is a feature that allows your Wi-Fi capable devices to make a wireless
network connection directly to your printer without using a wireless router or access point. A
print application must be installed in order to use the printer over the HP Wi-Fi Direct
connection.
Wi-Fi Direct Name: The unique name of the printer given by the user. This name is
used to identify the printer in the wireless network.
Connection Method:
o Advanced: This connection method includes security features such
as hiding the Wi-Fi Direct name in addition to authentication by the
user.
o Manual: This connection method requires simple authentication by the
user using a password.
o Auto: There will be no authentication. The mobile device can connect
automatically to the printer and print the document.
Password: The password given by the user for Advanced and Manual connections.
Channel: Allows the user to choose the frequency band at which the printer
operates.
IP Address: IP address to access the printer wirelessly.
Connected Clients: Identifies the IP addresses of the Connected Clients.
Wireless Direct
HP Wireless Direct is a feature that allows your Wi-Fi capable devices to make a wireless
network connection directly to your printer without using a wireless router or access point. A
print application must be installed in order to use the printer over the HP Wireless Direct
connection.
Wireless Direct Printing: Turn Wireless Direct Printing On/Off. User can enable it
with either of two options: On (No Security) or On (With Security).
Network Name (SSID): The unique name of the network given by the user, used to
identify the printer in the wireless network.
Allow Broadcast of Name (SSID): Allows the user to advertise or hide the network
name.
Passphrase: The password given by the user when Wireless Direct Printing is
enabled with Security.
Channel: Allows the user to choose among the channels which operate on 2.4 GHz
frequency band.
IP Address: IP address to access the printer wirelessly.
Connected Clients: Identifies the IP Addresses of the Connected Clients.
TCP/IP Settings
The configuration options available depend on your print server model. Use the tabs on this
page to view or configure TCP/IP (Transmission Control Protocol / Internet Protocol)
settings for IPv4 and IPv6 networks.
Summary. Provides a summary of the current TCP/IP configuration settings.
Network Identification. Provides access to identification settings such as the hostname,
IPv4/IPv6 Domain Names, FQDN update options, DNS and WINS(IPv4) server addresses,
and Bonjour Service Name.
HP Connection Inspector. An Intrusion Detection technique that focuses on identifying
malwares based on their behavioral patterns rather than on their signatures. This focuses
particularly on detecting and preventing malwares based on their network behaviors. Select
the Enable check box to enable this feature.
Protection Mode settings
o DNS Failure Threshold - Failure threshold value to enable throttle
mode for detecting false alarms.
o Monitoring Window - Time duration to monitor failed DNS queries
for enabling throttle mode.
o Protected Mode Duration - (Throttle mode duration) The duration
where the printer operates in a safe mode after and initial detection.
Remediation settings
o Number of Times in a Protected Mode - Maximum number of
times the printer can enter into Throttle mode before remediation
action.
o Cumulative Protected Mode Duration - Maximum duration the
printer can be in Throttle mode before remediation action.
Advanced settings
o White List / Exception List - White list table entries are
considered as safe DNS queries during throttling mode.
Restore settings
o To restore HP Connection Inspector to default values, click
the Restore Defaults button.
NOTE:
If you enter a value, click Apply to set it, or click Cancel to ignore the entry.
USE CAUTION when changing IP addresses; the connection to the Embedded
Web Server will be closed, and client printing may be affected. To re-establish a
connection, use the new IP address.
TCP/IP cannot be disabled. It is required for communication with the Embedded
Web Server.
TCP/IPv4. Allows you to configure IP version 4 (IPv4) parameters, including server-based
or manual IPv4 address settings. For Auto IP, a link-local address is assigned automatically
by the print server.
TCP/IPv6. Allows you to configure IP version 6 (IPv6) parameters, including server-based
or manual IPv6 address settings. Multiple IPv6 addresses may be configured. A stateful
address may be assigned, for example, from a DHCPv6 server. A stateless address, such
as a link-local address, is assigned automatically by the print server.
Config Precedence. Provides access to a configuration precedence table, to indicate
which configuration method has precedence over another.
Advanced. Provides access to other TCP/IP network settings, including idle timeout, LPD
banner page, FQDN Update Options, Web Proxy Server and Syslog Server settings. You
can also enable HP Customer Care Center logging.
Web Proxy Setup - Use this page when you must manually configure a proxy server for
use with HP Web Services. This might be necessary if you have issues when enabling HP
Web Services.
Proxy Server. Proxy server to use by embedded applications in your printer/MFP. Enter up
to 64 alphanumeric characters. A proxy server is typically used by network clients for
Internet access. It caches Web pages and provides a degree of Internet security for those
clients. Enter its IP address or FQDN. On some networks, you might need to contact your
ISP for the proxy server address.
Proxy Server Port. Port number used by the proxy server for client support. Enter a value
from 0 to 65535. The port number identifies the port reserved for proxy activity on your
network.
Proxy Server User Name. If a user account is set on the proxy server, enter the user
name.
Proxy Server Password. If a user account is set on the proxy server, enter the user
password.
Proxy Server Exception List. Web addresses, host names, or domain names not
requiring access through the proxy server. Use a semicolon (;) to separate addresses.
Network Settings
Use the tabs on this page to configure other network protocols. Depending on the print
server model, you can view or configure SNMP settings.
If you enter a value, click Apply to set it, or click Cancel to ignore the entry.
SNMP: Configure SNMP (Simple Network Management Protocol) operation. You may
enable or disable the SNMP v1/v2c or SNMP v3 agents on the print server. For SNMP
v1/v2c, you can choose to control access through custom SNMP community names and
selectable options for the Get Community Name "public". For SNMP v3, you may set up an
account that allows a management application to access the SNMP v3 agent.
Other Settings
Use the tabs on this page to configure general printing protocols and services supported by
the print server. Depending on the print server model, you can configure the following
items:
Misc. Settings. Enable or disable printing protocols and services. In addition, you can set
10/100/1000Base-T Link settings, assign a locally administered address, configure
networking features for supported multifunction/scanning devices, determine name
resolution, specify Bonjour priority service, and whether to clear device settings (Erase
Data) during a cold reset.
Firmware Upgrade. Upgrade your HP Jetdirect print server firmware. (For print servers
that support firmware upgrades.)
LPD Queues. Set up custom LPD (Line Printer Daemon) queues for printing.
USB Settings. (For HP Jetdirect external print servers with a USB printer port.) Configure
Universal Serial Bus port parameters for communications between the print server and
connected device. The configurable parameters available depend on the HP Jetdirect
model and firmware version.
Support Info. Specify the Support page links. Designate a Support contact or phone
number, or specify URL addresses for product and technical support.
Refresh Rate. Specifies the time interval (in seconds) for embedded Web page updates.
To disable the refresh rate, set this value to 0 (zero).
AirPrint
AirPrint™ enables easy network printing from Apple supported products with no need to
install drivers or download software. AirPrint works on wireless and wired networks and
over USB. AirPrint MUST be either enabled by default or the Printer MUST have a single
top-level menu item that enables all network interfaces, networking services, and printing
protocols required by AirPrint. The user can modify the AirPrint settings parameter using
Edit settings page.
Device Name: A unique name given to the printer by the User. The default name is
the Bonjour Service name of the printer.
Device Location: Describes the location of the printer.
Use Degrees Minutes Seconds: Describes the exact location of the printer by
mentioning latitude and longitude coordinate values in Degrees, Minutes, and
Seconds (DMS).
Use Decimal degrees: Describes the exact location of the printer by mentioning
latitude and longitude coordinate values in Decimal Degrees, (DD).
Select Language
This page appears if the Web pages support multiple languages. (Optionally, supported
languages can be selected through language preference settings in your browser. See your
browser's Help).
Setup
The printer has a feature that allows you to configure Google Cloud Print with your HP
printer using the HP Embedded Web Server (EWS). Google Cloud Print allows you to print
to your printer from anywhere with any web-connected device, such as your computer,
phone, or tablet.
NOTE:
4. When the claim sheet is retrieved from the Google Cloud, the EWS will
indicate that the sheet will print and prompt you to follow the instructions.
CAUTION:
Cancel registration
You can choose to cancel the Google Cloud Print registration after you have printed the
claim sheet. Click the Cancel Setup button, and then click Yes to confirm.
Web Proxy
Web Proxy Setup - Use this page when you must manually configure a proxy server for
use with HP Web Services. This might be necessary if you have issues when enabling HP
Web Services.
Proxy Server. Proxy server to use by embedded applications in your printer/MFP. Enter up
to 64 alphanumeric characters. A proxy server is typically used by network clients for
Internet access. It caches Web pages and provides a degree of Internet security for those
clients. Enter its IP address or FQDN. On some networks, you might need to contact your
ISP for the proxy server address.
Proxy Server Port. Port number used by the proxy server for client support. Enter a value
from 0 to 65535. The port number identifies the port reserved for proxy activity on your
network.
Proxy Server User Name. If a user account is set on the proxy server, enter the user
name.
Proxy Server Password. If a user account is set on the proxy server, enter the user
password.
Proxy Server Exception List. Web addresses, host names, or domain names not
requiring access through the proxy server. Use a semicolon (;) to separate addresses.
If you enter a value, click Apply to set it, or click Cancel to ignore the entry.
Please note:
USE CAUTION when changing IP addresses; the connection to the Embedded
Web Server will be closed, and client printing may be affected. To re-establish a
connection, use the new IP address.
TCP/IP cannot be disabled. It is required for communication with the Embedded
Web Server.
Security
The security features that may be configured depend on your particular HP Jetdirect print
server model.
Settings
This page provides a tab to run the Security Configuration Wizard, an interactive utility that
will help you configure security settings.
Please note: Do not use the Security Configuration Wizard if you configure security
settings using network management applications, such as HP Web Jetadmin.
In addition, tabs to view current settings and to restore security settings to factory-default
values are also provided.
Authorization
This page provides methods to control configuration management and use of this device.
Certificates. Request, install, and manage digital certificates on the HP Jetdirect print
server. Certificates are used to identify the Jetdirect print server both as a valid Web server
for network clients, and as a valid client requesting access on a secure network. By default,
the Jetdirect print server contains a self-signed preinstalled certificate. (When using the
self-signed certificate, you can select an encryption key length of 1024 or 2048 bits.)
Access Control.(For selected print servers on IPv4 networks only) Limit host access to
this device through an Access Control List (ACL). Each entry in the list consists of an IP
address, and a Mask (a Mask is usually used to identify a network or group of host
systems). Up to 10 entries can be entered. If the list is empty, any supported system may
access the device.
If you are using a Proxy Server or Network Address Translator for your HTTP connection,
ensure that HTTP connections are configured to bypass the Access Control List.
Secure Communication
This page provides settings to securely manage the network using a Web browser and the
HTTPS protocol.
To authenticate the HP Jetdirect Web Server when HTTPS is used, you can configure a
certificate or use the pre-installed, self-signed X.509 Certificate. The encryption strength
specifies which ciphers the Web server can use for secure communications.
Active Ciphers. Select the ciphers and SSL/TLS protocols that the Web server uses for
secure communications.
NOTE:
SSL might lose connectivity if an invalid cipher and protocol combination is
configured.
FIPS Configuration. Enable Federal Information Processing Standards (FIPS) mode. This
mode enforces the use of cryptographic suites and protocols to comply with the FIPS-140
standards for computer security.
NOTE:
The browser might lose connectivity during the reconfiguration process.
Troubleshooting Secure Communication. Enable the logging features to record events
that occur when the product makes connections (as a client) to a secure server (such as
email or network folder). These records can be used for troubleshooting secure connectivity
failures.
Mgmt. Protocols
This page allows you to configure and manage security protocols for this device.
Web Mgmt. Set the security management level for the Embedded Web Server. You can
allow traffic over both HTTP and HTTPS , or choose HTTPS only. For secure management,
HTTPS (Secure HTTP) is used to ensure secure communications between a Web browser
and the Embedded Web Server. For HTTPS, you may use the preinstalled Jetdirect
certificate (X.509) or configure a new one, and you can select an encryption level
(supported cipher suites are DES, RC4, 3DES).
The factory-default setting depends on the print server model and the features supported
by the device. Typically, the default setting is to allow traffic over HTTP and HTTPS.
However, for selected print server models on devices that support IPsec, the factory default
requires all traffic (except IPP traffic) to use HTTPS only.
SNMP. Configure SNMP (Simple Network Management Protocol) operation. You may
enable or disable the SNMP v1/v2c or SNMP v3 agents on the print server. For SNMP
v1/v2c, you can choose to control access through custom SNMP community names and
selectable options for the Get Community Name "public". For SNMP v3, you may set up an
account that allows a management application to access the SNMP v3 agent.
Other. Enable or disable printing protocols, print services, discovery protocols, name
resolution services, and configuration management protocols as desired for security. This
allows you to control access through protocols that may not be secure.
802.1X Authentication
This page allows you to configure 802.1X authentication settings on the Jetdirect print
server as required for client authentication on your network. In addition, you can reset the
802.1X authentication settings to factory-default values.
USE CAUTION when changing the 802.1X authentication settings; you may lose your
connection. If communication with the device is lost, you may need to reset the print server
to a factory-default state and reinstall the device.
Supported 802.1X authentication protocols and configuration settings depend on the print
server model and firmware version. Full-featured print servers support the following
protocols:
PEAP. Protected Extensible Authentication Protocol (PEAP) is a mutual
authentication protocol that uses digital certificates for network server
authentication and passwords for client authentication.
EAP-TLS. Extensible Authentication Protocol using Transport Layer Security (EAP-
TLS) is a mutual authentication protocol based on digital certificates for
authentication of both the client and the network authentication server.
Both PEAP and EAP-TLS use dynamic encryption keys for secure communications. If an
authentication failure occurs, you can select whether to connect anyway or block access.
Please note: Many infrastructure components, such as LAN switches, use 802.1X
protocols to control a port's access to the network. Before network installation on these
ports, you must initially configure the Jetdirect print server with 802.1X settings using an
isolated LAN, or directly using a cross-over cable.
IPsec / Firewall
A Firewall or IP Security (IPsec) policy allows you to control traffic to or from the device
using network-layer protocols. Either Firewall or IPsec / Firewall pages will appear
depending on whether IPsec is supported by the print server and device. If IPsec is not
supported, Firewall pages will be displayed and a Firewall policy can be configured.
Please note: Before you enable a Firewall or IPsec policy, you should secure access to
your configuration management settings (for example, through an administrator password).
This will ensure your policy is not easily disabled through Telnet, control panel menus, or
other management tools.
Firewall. Use this page to view or configure a Firewall policy. A Firewall policy
consists of up to 10 rules, where each rule specifies the IP addresses and
services allowed by the print server and device. To add a rule, click Add Rule.
This runs a wizard that will help you configure each rule.
IPsec / Firewall. (Selected HP Jetdirect models only) Use this page to view or
configure an IPsec / Firewall policy. An IPsec / Firewall policy consists of up to
10 rules. As with a Firewall policy, each rule specifies the IP addresses and
services allowed by the print server and device. With IPsec support, you can
apply IPsec authentication and encryption protocols for those addresses and
services. To add a rule, click Add Rule. This runs a wizard that will help you
configure each rule.
Announcement Agent
Use this page to enable or disable the HP Device Announcement Agent, to set the
configuration server, and to indicate whether to require mutual authentication using
certificates. When enabled (the default), the HP Device Announcement Agent sends an
announcement to a configuration server when the device first connects to your network.
The configuration server, such as the HP Imaging and Printing Security Center, then sends
the pre-established configuration settings to the device.
Diagnostics
Use these pages to troubleshoot or enhance network operation.
Network Statistics
Displays network statistics that have been collected and stored on the HP Jetdirect print
server. Network statistics are often useful to diagnose network performance and
operational problems.
Protocol Info
Provides a list of network configuration settings on the HP Jetdirect print server for each
protocol.
Configuration Page
Displays the HP Jetdirect configuration page, which contains HP Jetdirect status and
configuration information. See the HP Jetdirect documentation on your CD-ROM for a
detailed description of the configuration page contents.
Other Links
Learn about other resources available in the Networking tab.
Support
This page displays a list of resource links for additional help. The local and remote resource
links on this list may be configured configured using the Support Info page. To open this
page, select the Networking tab and choose the Other Settings menu, then select
the Support Info tab.
Firmware
Control panels
version
FutureSmart 3
FutureSmart 4
Security statements
The printer supports security standards and recommended protocols that help you
keep the printer secure, protect critical information on your network, and simplify
the way you monitor and maintain the printer.
Video overview
View information about how to set the printer's security features.
NOTE:
This video applies to multi-function printers (MFPs) with FutureSmart 4 firmware
installed.
NOTE:
NOTE:
Make note of the password and store it in a safe place. The
administrator password cannot be recovered. If the administrator
password is lost or forgotten, contact HP Support
at support.hp.com for the assistance required to completely reset the
printer.
NOTE:
1. Click the Security tab.
2. Open the Account Policy menu.
3. In the area labeled Local Administrator Password or the area
labeled Remote Configuration Password, select Enable account lockout.
4. In Maximum attempts, type the number of times an administrator can enter
an incorrect password before being locked out of the account.
NOTE:
The default number of attempts is 5. The allowable number of
attempts can range between 3 and 30.
5. In Lockout interval, type the number of seconds for which the account will
be locked.
NOTE:
6. In Reset lockout counter interval, type the number of seconds that must pass
after a failed log in attempt before the failed log in attempt counter resets to
0.
NOTE:
NOTE:
NOTE:
Windows
LDAP
Installed third-party sign-in solutions – See the documentation that came with
the third-party solution for information about setting up that sign-in method.
NOTE:
If DNS settings are not set appropriately, a fully-qualified domain
name might be required.
By default, the first domain added to the trusted domain list is automatically
selected as the Default Windows Domain. If other trusted domains have
been added, they can be selected as the default domain in the Default
Windows Domain field.
6. Select the Show Preferred Domain Servers check box to create a list of
preferred domain servers.
The specified Preferred Domain Servers will be used first, and if these
servers do not work, the firmware will find domain servers based on the
Trusted Domains list.
a. Enter the FQDN or IP address in the Preferred Domain
Servers field.
b. Click Add.
7. Verify the match and retrieval default attributes and update if necessary.
NOTE:
NOTE:
NOTE:
NOTE:
4. To require users to use the sign-in method set for each print feature, do not
check the check box for Allow users to choose alternate sign-in m
Step three: Set up the Job Status and Screen Behavior settings
Use the following steps to configure an automatic sign out from the printer.
1. Click the Automatically sign out check box, and click the radio button for
either Sign out immediately when job starts or Sign out after 10 seconds
with option to stay signed in.
2. Under Default Retain Settings Behavior, select the job types to retain settings
by clicking the following check boxes:
o Copy
o Digital Send
o Fax
Step four: Set up the default permissions for each sign-in method
Use the following steps to configure the default permission set type for Windows or LDAP
sign-in methods.
1. Set the default permissions for all users and groups by clicking the drop-down
lists for LDAP and Windows, and select the appropriate option.
2. If specific users or groups need different permissions from the default
permissions, click New.... The New User or Group to Permission Set
Relationship page opens.
a. From the User or Group drop-down list, select
either User or Group.
b. Using the Permission Set drop-down list, select either Device
Administrator or Device User.
c. From the Sign In Method drop-down list,
either LDAP or Windows.
d. In the Network User or Group Name field, enter a user or group
name.
e. Click OK.
Drive Status
Click the Security tab, and then select Protect Stored Data to access the Drive Status
in the EWS.
Drive status
The Drive Status area of the Protect Stored Data page contains the following
information about each drive installed on the printer:
Type of drive
Content on the drive
Serial number
Encryption status
If multiple drives are installed on the printer, use this Drive Status area to specify
which drive the printer uses by using the Use Drive... operation and also to perform
an Erase Drive... operation on a specified drive.
eMMC/SSD devices show Status Disk Cannot be encrypted for the encryption status.
This status is normal because these devices are not self-encrypting. All customer data
written to eMMC/SSD devices is encrypted.
eMMC/SSD drive encryption status
Job Data
Use the following steps to select a data erase mode.
Types of data erase modes available for performing a data erase operation for devices with
a hard disk drive:
NOTE:
The printer automatically restarts after the Erase Job Data operation
completes. The printer control panel displays the splash screen while
the operation is in progress. Erase Job Data operations can take
varying lengths of time, from minutes to hours, depending on the
amount of data being erased.
To change the data encryption algorithm on a printer with eMMC/SSD storage, select the
algorithm to use, and then click the Apply button at the bottom of the page.
Changing the encryption algorithm setting causes all stored jobs to be lost.
Printers with eMMC/SSD storage devices do not have data erase modes for job data.
However, they do have job encryption algorithm options.
NOTE:
NOTE:
o Off
(default)
o 30 minutes
o 1 hour
o 4 hours
o 1 day
o 1 week
o 4 weeks
o 3 days
Temporary Job Storage Limit - specify how many Quick Copy jobs can be
stored on the printer.
Job Sort Order - specify how stored jobs are sorted, either by Job
Name (default) or Date.
The job sort order also affects the jobs that are in the print queue on the
device.
Default Folder Name - specify the default folder where jobs are stored.
Standard Stored Job Retention - specify how long standard jobs are held
on the printer. The following settings are available:
o Off
(default)
o 30 minutes
o 1 hour
o 4 hours
o 1 day
o 1 week
o 4 weeks
o 3 days
Behavior when users are authenticated - define what users first see when
they enter the Retrieve from Device Memory app (FutureSmart 3) or the Print
from Job Storage app (FutureSmart 4) from the printer control panel. The
following settings are available:
o Default - when users enter the app from the printer control panel,
they see all folders inside the app.
o Assist users to their jobs - authenticated users entering the app
first see only their jobs.
Click the Apply button to save any changes made on the Protect Stored Data pa
Step two: Complete the setup
On the Protect Stored Data page, review the selected settings, and then click Apply to
complete the setup.
NOTE:
If the Trusted Platform Module (TPM) is installed, the private key may
be marked as exportable. However, if Mark private key as
exportable is selected, the private key will not be generated on the
TPM.
NOTE:
If the Trusted Platform Module (TPM) is installed, the private key may
be marked as exportable. However, if Mark private key as
exportable is selected, the private key will not be generated on the
TPM.
NOTE:
Install a certificate
Use the following steps to install a certificate.
1. In the left navigation pane, click Certificate Management.
2. Click Browse next to the Choose File field.
3. Locate the certificate for import, and then click Open.
NOTE:
4. If the certificate has a private key (for example, a .pfx file), enter the
password for the certificate in the Certificate Password field. Use the same
password used to encrypt the private key.
5. Click Import.
NOTE:
NOTE:
6. Click Import.
The printer supports the following import formats for certificates:
.DER (binary)
.CER (binary or Base64)
.PEM (Base64, installs single certificate)
Restrict email domains
Use the Email Domain Restriction page, located in the Security tab, to restrict the
domains to which the users are allowed to send email jobs and job notifications.
Email Domain Restriction page
After 8 hours has elapsed since the last print job. Dhalf, Dmax 43 seconds
Color Plane
After 15 minutes of continuous printing. Registration 38 seconds
(CPR)
Dhalf, Dmax
When Full Calibration is selected from the Color Plane 1 minute
control panel menu. Registration 21 seconds
(CPR)
When the printer needs to evaluate toner level in Cleaning, toner
45 seconds
print cartridge. level sensing
Cleaning primary
After a mis-print. 13 seconds
transfer
Clearing paper
After a paper jam. 28 seconds
path
1
Color Plane Registration (CPR): A method of aligning the 4 primary color planes.
4
Intermediate Transfer Belt (ITB): The medium onto which the print image is intermediately
formed and then transferred to print media.
Cleaning Cycles
The purpose of the cleaning cycle is to ensure the highest level of print quality by
eliminating excess toner and paper dust that accumulates in the primary transfer stage of
the electro photographic process.
Load Tray 1
Use the following steps to load Tray 1.
1. Open Tray 1.
2. Pull out the tray extension to support the paper and set the side guides to the
correct width.
3. Load paper in the tray.
4. Make sure the stack fits under the tabs on the guides and does not exceed the
load-level indicators.
5. Adjust the side guides so that they lightly touch the paper stack but do not bend
it.
NOTE:
NOTE:
To prevent jams, do not overfill the tray. Be sure the top of the stack is
below the tray full indicator.
NOTE:
4. Set the sleep timer and configure the printer to use 1 watt or less of
power
5. The printer has several options for the energy-saving sleep timer feature. The time
delay to enter the Sleep/Auto Off state is adjustable, and the power usage during
the Sleep/Auto Off state varies according to selection for the Wake/Auto On option.
6. NOTE:
7. HP does not recommend using deep sleep settings if you have Security Solutions
installed. In some situations, the printer does not wake from deep sleep. For
additional information, contact your HP representative.
8. NOTE:
9. The steps vary according to the type of control panel.
FutureSmart 4
FutureSmart 3
Use the following steps to manage the energy settings (FutureSmart 3).
FutureSmart 4
Use the following steps to manage the energy settings (FutureSmart 4).
1. From the Home screen on the printer control panel, open
the Settings menu.
2. Open the following menus:
a. General Settings
b. Energy Settings
c. Sleep Settings
3. Select Sleep after inactivity to specify the number of minutes the printer is
inactive before it enters sleep mode. Enter the appropriate time period.
NOTE:
The sleep-mode default time is 0 minutes. Zero (0) indicates that the
printer will go to sleep in less than 1 minute.
4. Select Auto Off after sleep to put the printer into a deeper power save
mode after a period of sleep. Enter the appropriate time period.
NOTE:
By default, the printer will wake from Auto Off in response to any
activity other than USB or Wi-Fi, but can be set to wake only to the
power button.
Control panels
Firmware
Control panel
version
FutureSmart 3
FutureSmart 4
1. In the address line of your web browser, type the IP address or host name of
the printer to open the EWS.
2. Click the General tab.
3. Open the Date/Time Settings menu.
4. In the area labeled Device Time, configure the date and time.
5. In the area labeled Date/Time Format, select the preferred date and time
formats.
6. In the area labeled Network Time Server, select whether or not the printer
should automatically synchronize with a Network Time Server. By
default, Automatically Synchronize with a Network Time Server is
selected.
7. Click the Apply button.
8. Set the sleep schedule
9. Use the Sleep Schedule feature to configure the printer to automatically wake or
go into Sleep/Auto Off mode at specific times on specific days of the week.
10. NOTE:
11. Configure the date and time settings before setting the Sleep Schedule feature.
Set the sleep schedule from the HP Embedded Web Server (EWS)
Use the following steps to set the sleep schedule.
NOTE:
The steps vary according to the type of control panel.
Control panels
Firmware
Control panel
version
FutureSmart 3
FutureSmart 4
1. In the address line of your web browser, type the IP address or host name of
the printer to open the EWS.
2. Click the General tab.
3. Open the Date/Time Settings menu.
4. In the area labeled Device Time, configure the date and time.
5. In the area labeled Date/Time Format, select the preferred date and time
formats.
6. In the area labeled Network Time Server, select whether or not the printer
should automatically synchronize with a Network Time Server. By
default, Automatically Synchronize with a Network Time Server is
selected.
7. Click the Apply button.
The power-button light can indicate the printer status. Use the following table to interpret
the printer status.
Printer status
Control-panel
Power-button status Printer status
status
Method one: Enable the USB port from the printer control panel
Learn how to enable the USB port from the control panel for either FutureSmart 3 or 4.
FutureSmart 3
Use the following steps to enabled the USB port from the control panel (FutureSmart 3).
1. From the Home screen on the printer control panel, select
the Administration button.
2. Open the following menus:
a. General Settings
b. Enable Retrieve from USB
3. Select the Enabled option, and then select the Save button or press
the OK button.
FutureSmart 4
Use the following steps to enabled the USB port from the control panel (FutureSmart 4).
1. From the Home screen on the printer control panel, navigate to and select
the Settings menu.
2. Open the following menus:
a. Copy/Print or Print
b. Enable Device USB
3. Select Enabled to enable the USB port.
Method two: Enable the USB port from the HP Embedded Web server
FutureSmart 3
Use the following procedure to enable the USB port from the EWS for FutureSmart 3.
1. In the address line of your web browser, type the IP address or host name of
the printer to open the EWS.
2. On the EWS Home page, open the Print tab.
3. On the left side of the screen, click Retrieve from USB Setup.
4. Select the Enable Retrieve from USB check box.
5. Click Apply.
FutureSmart 4
Use the following procedure to enable the USB port from the EWS for FutureSmart 4.
1. In the address line of your web browser, type the IP address or host name of
the printer to open the EWS.
2. On the navigation bar at the top of the EWS home page, click
the Copy/Print tab (for MFP models), or the Print tab (for SFP models).
3. In the left navigation pane, select Print from USB Drive Settings.
4. Select Enable Print from USB Drive, and then click Apply.
Introduction
The EWS provides two options for configuring job accounting.
Configure job accounting using a quota server
This option is for large businesses that utilize a quota server for job
accounting purposes, such as placing limits on the amount of printed or
scanned pages for users.
Configure server-less job accounting
Server-less Job Accounting (SJA) is designed for small businesses with fewer
than 10 printers. It provides simple statistics and quota functionality. SJA is
available in FutureSmart firmware v4.6.1 (Date Code 20180531) or later. SJA
includes the following:
o SJA provides the ability to track and report mono and color copied
sides, mono and color printed sides, scanned sides, and sent fax
sides. By design, there is no interaction with WJA, JAM, HP
Security Manager, HP Roam, HP Smart App, HPAC, HPCR, Active
Directory, proximity cards, or any other server-based solution.
o SJA utilizes existing local device user account configurations to
associate user accounts with User Access Codes. Administrators
can utilize generated user access codes or set unique access
codes (NOTE: Access codes can NOT be duplicated). Up to 2,000
local device users/accounts can be configured. Device User
Account information can be exported from, and imported to, other
printers.
o SJA can be configured with a local quota that can block guest
printing, copying, and digital sending. SJA with local quotas
provides the ability to track and limit, allow or deny, users the ability
print, copy, digital send, and fax.
NOTE:
For more information, see the white paper Server-less Job Accounting (SJA)
with Local Quotas.
Configure job accounting using a quota server
Connect to a quota server to ensure that each user stays within an acceptable range of
printed or scanned pages. Refer to documentation from the company providing the quota
server software for more information.
Prerequisites
HP FutureSmart version 4.6.1 or newer
HP Universal Print Driver (UPD) version 6.6.1
EWS Admin Password
NOTE:
You might find it easier to create additional users in Excel and then
import your list. The easiest way is to create one or two users,
select Export to create a .csv file, modify and add the users in
the .csv file, save the file, and then select Import to import the list to
the EWS.
5. Click Apply.
NOTE:
4. Make sure the Sign-In Method is set to Local Device, and then click Apply.
NOTE:
You can also reset credits for all users to defaults or set the job-in-
progress limit requirement to Finish or Stop print jobs after a limit has
been met. To make sure copy or print jobs can not be ran without a
code, you must default the Guest and Others account to 0 credits.
This will force the printer to delete any jobs not having a user code. In
the case of users that have no credits left, the printer will receive the
job, then delete it and it will display as Canceled in the Job Log.
5. Adjust the Device User settings and set custom limits for individual users as
needed.
NOTE:
There are three default users after Quotas are enabled. As new
device users are created, they will automatically display here with the
default credits set at the top of the page. As features are enabled
(Incoming Fax, ePrint, etc.) are enabled, those names will also
display here.
o Guest: This account is for any jobs done at the printer that
is requested by a non-authenticated user (a user without a
User Access Code)
o Others: This is less common and is used when a user is
authorized, but in a way not recognized by Server-less Job
Accounting and Local Quota (Example: User logged in
through third party solution, but no User Access Code
provided)
o Administrator: This is for the printer administrator account
o Incoming Fax - This is for tracking and possibly limiting
any incoming faxes to the printer
o ePrint: This is for tracking and possibly limiting the HP
ePrint service
6. To change the default amount of credits a user has, select the check box
next to the name and click Edit. After making all changes, click OK.
7. To reset the credits available for individual users, select the user you want to
change, and then click Reset. When prompted to confirm the credit reset,
click Reset.
8. To configure Quota credits (the number of credits each image will use),
under Usage Charges, adjust the Cost in Credits values, and click Apply.
Each printed, scanned, or blank side uses (1) one credit by default.
NOTE:
Digital Send is utilized for Scan to Folder, Scan to USB, and Scan to
Email. Setting the Empty Print side credit cost to 0 will not charge
users for blank printed sides.
In UPD versions earlier than 6.5, the driver will allow for
prints to be captured via Custom Name in Job Storage
(entry point for User Access Code) and in Job Storage
when enabled in the driver as Personal or Stored Job. In
UPD version 6.5, the driver will allow for a Custom Name in
Job Storage without having to enable Job Storage in the
driver. The Custom Name is the User Access Code.
NOTE:
NOTE:
After signing in, the quota credits are displayed in a banner at the top
of the control panel.
Configure printing
Use the following information to configure printing features using the EWS.
Step one: Configure the color settings using the Restrict Color feature
Configure the color settings as follows.
NOTE:
4. Select a Quick Set Type, and then click Next. The following Quick Set types
are available for selection, depending on your printer:
NOTE:
NOTE:
The settings available in the Quick Set Wizard vary by the type of
Quick Set being added. Refer to the tables in the Quick Set settings
and options section in Customize printer job short-cuts using Quick
Sets (c05388947) to see the available settings and options for each
type of Quick Set.
10. Review the summary of settings, and then click Finish to save the Quick
Set, or click Previous to edit the settings.
NOTE:
NOTE:
The settings available in the Quick Set Wizard vary by the type of
Quick Set being edited. Refer to the tables in the Quick Set settings
and options section in Customize printer job short-cuts using Quick
Sets (c05388947) to see the available settings and options for each
type of Quick Set.
NOTE:
NOTE:
The settings available in the Quick Set Wizard vary by the type of
Quick Set being copied. Refer to the tables in the Quick Set settings
and options section in Customize printer job short-cuts using Quick
Sets (c05388947) to see the available settings and options for each
type of Quick Set.
For more information about Quick Set settings and options, see Customize printer job
short-cuts using Quick Sets.
Set the default PCL, PostScript, and font settings for a printer
Use the PCL and PostScript Settings page, located in the Copy/Print tab, to set the
default PCL, PostScript, and font settings for print jobs on this printer.
NOTE:
The specific application or printer driver you use might override the settings
you configured on this page.
NOTE:
If you do not know the SMTP server name, SMTP port number, or
authentication information, contact the email/Internet service provider
or system administrator for the information. SMTP server names and
port names are typically found by doing an Internet search. For
example, use terms like "Gmail smtp server name" or "Yahoo smtp
server name" to search.
NOTE:
In most cases, the default port number does not need to be changed.
NOTE:
If you are using a hosted SMTP service such as gmail, verify the
SMTP address, port number, and SSL settings from the service
provider’s website or other sources. Typically, for gmail, the SMTP
address is smtp.gmail.com, port number 465, and the SSL should be
enabled. Please refer to online sources to confirm these server
settings are current and valid at the time of configuration.
NOTE:
NOTE:
Order supplies
Use the following information to order supplies.
Ordering supplies
Order through
service or support Contact an HP-authorized service or support provider.
providers
Configure copying
Use the following information to configure copy features for a printer using the EWS.
NOTE:
FutureSmart 3
Use the following steps for FutureSmart 3.
The printer has a feature that enables it to scan a document and send it to one or more
email addresses. To use this scan feature, the printer must be connected to a network;
however, the feature is not available until it has been configured.
There are two methods for configuring Scan to Email, the Scan to Email Setup Wizard for
basic and Email Setup for advanced. Use the following information to set up the Scan to
Email feature.
View a video demonstration on how to set up the Scan to Email feature on FutureSmart 3
printers
Administrators need the following information before beginning the configuration process.
Administrative access to the printer
DNS suffix (e.g., companyname.com)
SMTP server (e.g., smtp.mycompany.com)
NOTE:
If you do not know the SMTP server name, SMTP port number, or
authentication information, contact the email/Internet service provider
or system administrator for the information. SMTP server names and
port names are typically found by doing an Internet search. For
example, use terms like "Gmail smtp server name" or "Yahoo smtp
server name" to search.
NOTE:
For configuring the network settings for use with Office 365, see Step
four: Set up Send to E-mail using Office 365 Outlook (optional).
If the Domain Name suffix is not set up, use the IP address.
5. Click Apply.
6. Click OK.
NOTE:
NOTE:
NOTE:
Email settings
Option Description
NOTE:
From
(Required Create an e-mail account for the printer, and use
) this address for the default e-mail address.
NOTE:
Subject
Provide a default subject line for the e-mail messages.
(Optional)
Create a custom message.
Message
To use this message for all e-mails sent from the printer, clear
(Optional)
the User editable check box for Message.
Scan settings
Option Description
Select the default file type that the for the scanned
document:
o PDF
o JPEG
o TIFF
o MTIFF
o XPS
Default File Type o PDF/A
o Text (OCR)
o Unicode Text (OCR)
o RTF (OCR)
o Searchable PDF (OCR)
o Searchable PDF/A (OCR)
o HTML (OCR)
o CSV (OCR)
Default Resolution Select the default scan resolution for the scanned
document:
o 75 dpi
o 150 dpi
o 200 dpi
o 300 dpi
o 400 dpi
o 600 dpi
NOTE:
NOTE:
NOTE:
NOTE:
NOTE:
If the server requires authentication, a user
name and password for sending automatic
alerts and reports from the printer will be
required.
NOTE:
Quick Sets are optional short-cut jobs that can be accessed on the
main Home screen or within the Quick Sets application at the product.
oSelect an existing Quick Set under Quick Sets Application in the
table.
-OR-
o Click Add to start the Quick Set Wizard. Complete the following
information:
o Quick Set Title: Enter a title for the new Quick Set.
o Button Location: From the Button Location drop-
down list, select either Home Screen or Quick Sets
Application.
o Quick Set Description: Enter a description of the
Quick Set.
o Quick Set Start Option: To set how the Quick Set
starts, click either Enter application, and then user
presses Start or Start instantly upon selection.
5. In the Address and Message Field Control area, enter a Default
From: setting and any of the other optional settings.
Feature Description
Feature Description
Scan settings
Feature Description
Multi-feed
Select this setting to enable detection of multi-feed jobs.
Detection
File settings
Feature Description
Set the default file name prefix used for files saved to a
File Name Prefix
network folder.
Set the default file name suffix used for files saved to a
network folder.
File Name Suffix
Duplicate filename suffix default
[filename]_YYYYMMDDT
File Number Select a file name format for when the job is divided into
Format multiple files.
Color/Grayscale
Select the color/grayscale TIFF compression algorithm
TIFF
to be used to compress the generated TIFF file.
Compression
Disable OCR file Select this setting to prevent OCR file types from being
types available from the product control panel.
10. Review the selected options to verify that they are accurate, and then
click Apply to complete the setup.
Step four: Set up Send to E-mail to use Office 365 Outlook (optional)
Complete the following to enable the printer to send an email with an Office 365 Outlook
account from the control panel.
Microsoft Office 365 Outlook is a cloud-based email system provided by Microsoft which
uses Microsoft's Simple Mail Transfer Protocol (SMTP) server to send or receive emails.
You must have an email address account with Office 365 Outlook to configure the settings
in the EWS.
Configure the outgoing e-mail server (SMTP) to send an e-mail from an Office
If the Domain Name suffix is not set up, use the IP address.
5. Click Apply.
6. Click the Scan/Digital Send tab.
7. On the left navigation pane, click E-mail Setup.
8. On the E-mail Setup page, select the Enable Send to E-mail check box. If
this check box is not available, the feature is unavailable at the printer
control panel.
NOTE:
Some servers have problems sending or receiving e-mails that are
larger than 5 megabytes (MB). These problems can be prevented by
entering a number in Split emails if larger than (MB).
12. Select the Enable SMTP SSL Protocol check box, and then click Next.
13. On the Server Authentication Requirements dialog, complete the
following information:
a. Select Server requires authentication.
b. From the drop-down list, select Always use these credentials
c. In the Username field, type the Office 365 Outlook email
address.
d. In the Password field, type the Office 365 Outlook account
password, and then click Next.
14. On the Server Usage dialog, choose the printer functions that will send
email through this SMTP server, and then click the Next button.
15. On the Summary and Test dialog, enter a valid email address in the Send a
test email to: field, and then click Test.
16. Verify that all of the settings are correct, and then click Finish to complete
the outgoing email server set up.
FutureSmart 4
Use the following steps for FutureSmart 4.
The printer has a feature that enables it to scan a document and send it to one or more
email addresses. To use this scan feature, the printer must be connected to a network;
however, the feature is not available until it has been configured.
There are two methods for configuring Scan to Email, the Scan to Email Setup Wizard for
basic and Email Setup for advanced. Use the following information to set up the Scan to
Email feature.
Administrators need the following information before beginning the configuration process.
Administrative access to the printer
DNS suffix (e.g., companyname.com)
SMTP server (e.g., smtp.mycompany.com)
NOTE:
If you do not know the SMTP server name, SMTP port number, or
authentication information, contact the email/Internet service provider
or system administrator for the information. SMTP server names and
port names are typically found by doing an Internet search. For
example, use terms like "Gmail smtp server name" or "Yahoo smtp
server name" to search.
NOTE:
For configuring the network settings for use with Office 365, see "Step
five: Set up Scan to Email to use Office 365 Outlook (optional)."
NOTE:
If the Domain Name suffix is not set up, use the IP address.
5. Click Apply.
6. Click OK.