The HP Color LaserJet Pro MFP M277dw might display an “Encryption Credentials Expired” or “Expired Credentials” message and fail to print.
The message indicates that the certificate used to establish a secure printing connection has expired or become corrupted. A valid certificate is required for secure connections such as AirPrint and Secure Internet Printing Protocol (IPPs).
Symptoms
The following symptoms might occur:
Encryption Credentials Expired appears when attempting to print.
Printing from macOS or iOS does not complete.
The printer remains available on the network but secure printing fails.
The printer certificate has expired or is no longer accepted by the operating system.
Access to certificate settings through the Embedded Web Server (EWS) is required.
Cause
The error can occur when the operating system rejects an expired or corrupted printer certificate.
The printer uses security certificates to establish encrypted connections. If the certificate is no longer valid, secure printing through AirPrint or IPPs can fail.
An incorrect printer date and time can also affect certificate validity because certificate creation and expiration depend on date and time information.
Troubleshooting Steps
1: Find the Printer IP Address
The printer must be connected to an IP-based network before the Embedded Web Server can be accessed.
On the HP Color LaserJet Pro MFP M277dw:
Make sure the printer is turned on and connected to the network.
From the printer Home screen, touch the Wireless icon if using Wi-Fi.
If the printer is connected through Ethernet, touch the Ethernet icon.
Locate the printer IP address or host name.
Write down the IP address.
An IP address normally appears in a format similar to:
192.168.1.xxx
The actual address depends on the local network.
2: Open the HP Embedded Web Server
The HP Embedded Web Server (EWS) is the printer's built-in configuration webpage.
Make sure the computer and printer are connected to the same local network.
Open a web browser.
Type the printer's IP address directly into the browser address bar.
Press Enter.
The printer's EWS should open.
Do not enter the IP address into a search engine.
If a browser security warning appears
A browser might indicate that the printer webpage is not secure because the printer certificate has expired or because a self-signed certificate is being used.
If the printer IP address is correct and the connection is to the intended printer on the local network, use the browser option to continue to the EWS.
3: Sign In to the EWS if Prompted
Some HP LaserJet printers require authentication before security settings can be changed.
If a Log In with PIN screen appears:
Open the printer cartridge door.
Locate the label inside the printer.
Find the factory credentials containing the Username and PIN.
Enter the requested credentials in the EWS.
Continue to the printer settings.
If the default PIN was previously changed, use the current administrator credentials.
4: Verify the Printer Date and Time
Before creating another certificate, make sure the printer clock is correct.
Open the printer EWS.
Select General.
Open Date and Time.
Check Current Printer Time.
Verify that the date, time, and related settings are correct.
If the time is incorrect, select Sync Now where available.
Confirm that the updated printer time is correct.
Correct date and time information is important because certificate validity is based on the printer's internal clock.
5: Generate a New Self-Signed Certificate
After confirming the printer date and time, create a new certificate.
Open the printer EWS.
Select Security.
Open Certificate Management.
Select Create.
Select Create a New Self-Signed Certificate.
Click Next.
Click Create.
Click OK when prompted.
Close the EWS after certificate generation completes.
Try printing again.
HP indicates that the newly generated certificate defaults to a validity period of 10 years from the valid date.
Note: EWS menu names and available options can vary depending on printer model and firmware version.
If the Error Continues
6: Remove and Re-add the Printer on macOS
A Mac might retain the previous printer certificate or configuration after the certificate is replaced.
Click the Spotlight icon.
Search for Printers & Scanners.
Open Printers & Scanners.
Select the HP Color LaserJet printer.
Click Remove Printer or the Remove button.
Confirm Remove Printer or Delete Printer when prompted.
Click Add Printer, Scanner, or Fax or the Add button.
Wait for the HP Color LaserJet Pro MFP M277dw to appear.
Select the printer.
Click Add.
Try printing again.
7: Update the Printer Firmware
If the error remains, check for printer firmware updates.
Open the printer EWS.
Select General.
Open Firmware Update.
Sign in using the printer PIN if prompted.
Select Check for Update.
If the EWS reports that the current firmware is up to date, continue to the next troubleshooting step.
If an Update button is available, select it to install the firmware.
Allow the update to finish completely.
Try printing again.
8: Remove the Old HP Certificate from macOS Keychain
If a new certificate has been created on the printer but the error continues, an older or corrupted HP certificate might still be stored in macOS.
Click the Spotlight icon.
Search for Keychain Access.
Open Keychain Access.
Select Login.
Select Certificates.
Look for an HP certificate containing the printer model name in the certificate filename.
Control-click the applicable HP certificate.
Delete the certificate.
Close Keychain Access.
Try printing again.
Only remove the certificate associated with the affected HP printer.
9: Reset the macOS Printing System
If printing still fails, reset the printing system.
Important: Resetting the macOS printing system removes configured printers and scanners and clears print jobs and saved print settings. The required printers and scanners must be added again afterward.
Open Printers & Scanners.
Reset the macOS printing system.
Allow macOS to remove the existing printer configurations.
