Password repeatedly set on Printer not working from client

[dallasjr]

I need to insure that my printers Network is secure. I have been setting a password on the printer.  Every time I set one and I am sure I am typing it correctly it will not accept it.  I have reset everything using an NVRAM reset to factory settings. Then I manually configure the wireless settings. My SSID is not broadcast for security reasons.  I enable security from the printer. The security is successfully enabled.  I go back to the tool box and try to administer the printer. When the security box appears it will NOT accept the password.

I have done this 5 times. Can someone help me please?

Thank you in advance

[John_Getzke]

> I have been setting a password on the printer.  

Which password?  Please describe the steps you are using to configure a password so we have a better understanding of what is going on.

> Then I manually configure the wireless settings. My SSID is not broadcast for security reasons.

Are you trying to setup a hidden wireless network on the printer or on your local network?  If you really want to secure your printer from malicious users the disabling wireless and running an Ethernet cable is the only option.  Physically securing the printer behind a locked door or an area with other security would be more effective.  HP printers also utilize the PIN print feature as well as other "pull printing" security features so that jobs are only printed when an authorized user is physically present.

>  I go back to the tool box and try to administer the printer. When the security box appears it will NOT accept the password.

The HP Toolbox software uses a direct connection over USB to access the printers Embedded Web Server.  This is to give USB connected administrators the same visibility as the network connected ones.  Passwords to log into the EWS are different than the WiFi credentials used to create a WiFi connection to the printer. 

If you are network connected to the printer then you can just log into the EWS by typing in teh IP address of the printer into a web browser.  This will give you access to the same options as the HP Toolbox.  However, you need to use the EWS admin password to get into the more interesting areas of the printer.

It might help if you provide us with a diagram of your intended connection scenario.  That or a list of your security requirements.  Most of the time when people refer to network security they are referancing a particular goverment or well known best practices document or guide.

[dallasjr]

I live in a 40 story high rise that has hundreds of wireless lans. There is a very high population of grad students with wonderful hacking skills.  The weakest part of my network is the wireless lan of my HP Laserjet Pro. I had credit card data stolen and it had to be from my wireless lan. I have stopped broadcasting my SSID and that has proven an effective tool for keeping things more secure. My printer is far from any hub I can use so wiring would be an issue.

I enabled the security feature from the printer on the keyscreen of the printer. I set the password on the printer itself. Now from the the tool box I can not change any setting on the printer remotely. A box pops up asking me for the password and yet it will not accept that password. I do not understand why it will not accept a password I know is correct.

Can you suggest any other way to secure the printer server besides cables?  Can I disable the SSID broadcast?

[John_Getzke]

Lets attempt to debnk and clarify a few things...

> I live in a 40 story high rise that has hundreds of wireless lans.

If that is the case then getting your devices off of Wireless should be more of a priority.  WiFi only has so many channels to work with, HP printers normally function off of 2.4 GHz which has considerably less options than the newer 5.0 GHz spectrum.  I think a cabled soltuion would not only be more secured but perform and maintain better for you too.

Just because your printer is Ethernet cable connected does not mean you cannot access it over WiFi.  Once your wireless client is connected to the same network as the printer you will be able to communicate with the printer. 

An example setup would be the following:

- Modem === Router === PC1

- Modem === Router ))) PC2

- Modem === Router === Printer

In this setup both PC1 and PC2 have full access to the printer, even though the printer is Ethernet cable connected to the router.  As long as the network knows where to go to find the printer you will be fine and can avoid broadcasting a 2nd unecessary wireless network in an already crowded wireless space.

> There is a very high population of grad students with wonderful hacking skills. 

That sounds like speculation and a misunderstanding of what hacking skills really are.  If you were in significant risk of hacking then wireless would be out of the question.  You would want to mitigate as many attack vectors as possible and wireless is simply not worth the risk.

> The weakest part of my network is the wireless lan of my HP Laserjet Pro. 

What is more important here, the convenience of having wireless or protecting your credit card information?

> I had credit card data stolen and it had to be from my wireless lan.

That sounds like speculation.  Your CC information can be obtained and stolen from anywhere.  People will willingly give that information away to poorly made social engineering attacks or mismanaged electronic services.

> I have stopped broadcasting my SSID and that has proven an effective tool for keeping things more secure. 

That sounds like the perception of security through obscurity, rather than results. 

> My printer is far from any hub I can use so wiring would be an issue.

If security is the primary concern then it is an issue worth investing into.  Any investments you make into setting up Ethernet cabling or an expanded home network would pale in comparison to the time and money sunk into identity theft. 

> I enabled the security feature from the printer on the keyscreen of the printer.

What security feature?  The admin Password?  The WiFi password? Both of these can be configured from the control panel of the printer and they are not related to each other.  Im guessing you have configured the WiFi password and may not be aware of what the admin password is.  By default the admin password is blank/empty. 

The admin password can only be reset by performing a Cold or NVRAM reset of the printer.

The WiFi password can be reset by performing a Restore Defaults request from the control panel of the printer.

You would have to let us know your specific model number for us to attempt to look up the COLD/NVRAM reset steps for you.  This information is only stored in special HP Service Manuals.

> I do not understand why it will not accept a password I know is correct.

It is likely that you are not entering the correct password due to a misunderstanding of the various passwords that are involved.

> Can you suggest any other way to secure the printer server besides cables?  

Nope.  You have made it clear that you are at a high risk of hackers and malicious users.  The priority should be to establish and maintain a cabled connection as soon as possible.

> Can I disable the SSID broadcast?

That would depend on the model.  You could try running the Wireless Setup Wizard from the control panel of the printer to see if it gives you the option to rename the SSID on the printer.  If so then try blanking it out and see if it will let you proceed.  Some printer models do not allow users to modify the SSID. 

[John_Getzke]

I took a peek through your history and can see you have asked about security for a M475 in the past:

https://h30434.www3.hp.com/t5/Printers-Archive-Read-Only/Closing-the-Open-Network-of-a-Printer/m-p/5...

It looks like in the past it was suggested to disable the Wireless Direct feature of your printer.  You should still be able to do that on the printer if that is your goal.

But now that I have more context I re-read your original post.  It looks like you are aware of the NVRAM reset steps, that means you should be wiping out the Admin password and WiFi password.  You are manually configuring the wireless settings but you also mention that your home network is set to a hidden SSID.  Thats where I was getting confused.  Your home network is already set to hidden and you are trying to get your printer to connect wirelessly to the existing home network.

Thus the password you need to enter in your scenario should be the home wifi password.  However when establishing a connnection to a hidden SSID you need to enter teh network name as well.  Your home network will listen to that request and respond if the network name matches, then prompt you for the password.

Anything done from the HP Toolbox may be referring to the Admin password, which should be blank by default.  You normally get prompted to enter the admin password when accessing the admin or login page of the Embedded Web Server.  However the EWS home page should be visible without a login.

[dallasjr]

I appologize for not being more clear. The printer is on my network no problem.  I connect to the hidden network with absolutely no problem.  The problem here is if I enable security on the printer (the menu setting is just that "Enable Security" with a yes no radio button.  If I set this password and try to use the toolbox from any pc it gives me a Windows login box. I use no username as the screen says and key in the password that works on the printer itself thats when it will not recognize this password.

I hope this makes it clear. I for the moment have disabled the security on the printer (with the password).

I am very grateful you have taken all this time to help.

[John_Getzke · Accepted solution]

I believe what you are referring to is the Product-Security feature, see page 23 of the User Guide:

http://h10032.www1.hp.com/ctg/Manual/c02666267

"Sets the product-security feature. If you select the On
setting, you must set a password."

There is more information on the Product Security feature on Page 233:

"Product security features

The product includes a password feature that restricts access to setup features while allowing basic

functions to continue. The password can be set from the EWS or the control panel.

Private receive can be used to store faxes on the product until you are at the product to print them.

Assign a system password

Assign a password for the product so that unauthorized users cannot change the product settings.

1. Open the HP Embedded Web Server by entering the product IP address into the address line of a Web browser.

2. Click the Settings tab.

3. On the left side of the window, click the Security menu.

4. In the Device Security Settings area, click the Configure . . . button.

5. In the Device Password area, type the password in the New Password box, and type it again in the Verify password box.

6. Click the Apply button. Make note of the password and store it in a safe place."

With this information it sounds like you are configuring an Admin password for the printer from the control panel.  If that is the case and the printer is network connected then you can verify by setting the Product-Securirty password, then logging into the EWS with the same password.  I would suspect you would be allowed to proceed to the admin area of the EWS if that is the case.

By comparison the HP Toolbox may not be equipped to handle authentication requests in the same way that a web browser can.  If that is the case then you will have to ignore using the HP toolbox to better utilize a custom Admin password on your printer.  This seems to be the direction HP is pushing users as opposed to configuring the printer through the HP toolbox utility.