If you need to control access to hp Multifunction Printers (MFPs), Digital Senders and printers in your organization and your employees are equipped with a supported smartcard, install SecureJet Auth-SC. Employees will then use their corporate smartcard to get access to the device functions such as email, fax, copy, scan or secure mobile printing. No more login/password to type on the MFP or digital sender front panel, and secure user authentication on printers!
1 Million users&smartcards per device
 SecureJet Auth-SC is a sophisticated smartcards reader directly connected to the hp LaserJet printer, MFP or DigitalSender motherboard, combined with a software running inside the printer. It supports most standard smartcards, with X509 certificates, LDAP, CRL and OCSP validation and repudiation.
Up to 1 million users can be recognized per device. The smartcard contains all user information in a X509 certificate. That can be the user name, email address and login. It is also possible to read a user PID (unique identifier) from a X509 certificate inside the smartcard and validate it live against a LDAP or Active Directory server to obtain the user profile.
Thanks to its double factor security concept (one thing you have plus one thing you know), SecureJet Auth-SC offers the most secure and most flexible user authentication at the best price.
*: Live LDAP/AD validation requires SecureJet Print-PS
The authentication process is very simple:
On MFPs and Digital Senders, upon activation of an applicable function (copy, fax, email, secure printing etc) the SecureJet Auth-SC reader beeps and the MFP screen prompts the user to insert his smartcard in reader, and enter his card PIN code (numeric or alphanumeric). The user does so, the X509 certificate is decoded by SecureJet Auth-SC who verifies its repudiation against a CRL and validates it against ActiveDirectory, LDAP or SLAP.
Once the user is validated, SecureJet Auth then grants the access to the MFP function and supplies to the MFP the following user information:
- User full name
- User login
- User email address
That information will be reused by MFP functions such as hp Autostore or email
On MFPs the user name then shows up on the top left of the screen.
On printers, just insert the smartcard in the reader, enter its numeric PIN code on the built-in keypad, then select the job release or job deletion option on the same keypad.
User authentication using the smartcard X509 certificates
SecureJet Auth-SC uses X509 Certificates loaded in the smartcards:
-
SecureJet can optionally verify the repudiation of the certificate against an OCSP server or a CRL, providing a state of the art secure authentication.
-
SecureJet can perform on-line validation of the user identity against LDAP and ActiveDirectory, using SecureJet Print-PS as validation gateway. A user information from the smartcard X509 certificate (ie: employee number or email address) is submitted to one or more LDAP and Active Directory servers through SecureJet Print-PS, to find the user record matching that information. Active Directory or LDAP then returns the full user information such as his email address, login, full name, department name, domain etc. This solution is the best when there is a LDAP/AD database which can be accessed live and is fast as it allows to instantly repudiate a user using ActiveDirectory or LDAP.
-
 Users information such as email address, full name, department and login can be extracted directly from the X509 Certificate (if it in the certificate) and used directly for authentication. This solution is the fastest and best when there is a LDAP/AD database which cannot be accessed live due to bandwidth or security reasons. On the other hand, repudiating the smartcard requires is only possible by reprogramming or destroying it.
Authenticate for MFP applications
 The administrator can define for what MFP functions users must use their smartcard to get access. Upon smartcard validation, the MFP knows about the user name, login and email address. That information is then used by the MFP application such as email sending (FROM field), copy tracking or secure printing to reclaim the user print jobs.
Billing codes / matter codes to charge back the MFP usage
A billing code (also known as matter code) can also be entered during authentication on MFPs to bill-back the operation i.e. to a project or client. That entry can be made mandatory by including a list of numeric billing codes (4 to 19 digits each) in the SecureJet configuration. Up to 1 million predefined billing codes can be included in that list, per device.
Authenticate for Secure Printing
On printers and MFPs, Authentication can apply to SecureJet Secure Mobile Printing. Users can reclaim their print jobs stored on the printer/MFP disk or on remote servers, by authenticating using their smartcard . This feature requires the SecureJet Print-SMP module on the printer or MFP. Server-based retention requires additionally the SecureJet Print-PS server software. You will find more details about Secure Printing in the SecureJet Print-SMP and Print-PS information pages.
On MFPs, usable with all manageable functions
Authentication on MFPs can authenticate users for:
- Monochrome copy
- Color copy
- Fax sending
- Email sending
- Print jobs release (requires SecureJet Print SMP)
- Scan to folder
- hp DSS Workflow?
- hp Autostore?
- Job tracking
- and any other MFP function managed by the Authentication manager
Protecting email sending on MFPs by forcing the FROM field information
When SecureJet Auth is used to control MFP email sending, the FROM field is automatically filled with the user name and email address and cannot be edited. This ensure no spoofing is done when sending emails from MFPs.
Usage on single function printers
Authentication on single function printer can be used for:
Supported Smartcards
Please contact your Jetmobile certified VAR for any smartcards project to verify the compatibility with your smartcard. SecureJet-SC supports most Gemplus / Axalto / Gemalto Smartcards such as Cyberflex and Cryptoflex, other smartcards may be supported under certain conditions.
For clients not already equipped with smartcards and looking for a two-factor authentication process for a few users (less than 100), Jetmobile proposes its smartcard:
- The user information stored in the smartcard is accessed only after the user enters his PIN code.
- An administration software and card reader are available, allowing to program the user information in the smartcard.
The Intelligent SecureJet smartcard readers is designed and manufactured by Jetmobile. This guarantees a great look that fits well the printer and MFP design, plus availability, support and maintenance for multi-years support packs.
Simple to install
 SecureJet Auth-SC readers connect directly inside the MFP without needing any external box or interface. All the software is running inside the reader and printer or MFP and is stored on a memory card inserted inside the device. One some old printers, that memory card is a DIMM board. On some other, it is a CompactFlash card. On the most recent devices it is a host USB plug, similar to the USB plug on a PC. Unlike on a PC, that printer and MFP USB plug accepts a very limited number of devices and Jetmobile has developed a reader especially for the hp printing and imaging products.
System requirements
SecureJet Auth-SC supports most hp LaserJet printers, hp LaserJet MFPs, printers and Digital Senders.
Please read the SecureJet white paper for all information on pre-requirements
and special features
The SecureJet Auth-SC package includes
SecureJet Auth-SC reader
Cable routing adhesive brackets
MFP/printer internal memory card
Power supply (except for USB readers)
Setup guide
Regulation and compliance
CE and FCC Certified
WEEE and RoHS compliant
Part number: SJSC00** |
