
Whitelisting Presence
Whitelist refers to the list of CA certificates stored in the device certificate store that digital signatures
are validated against. DLLs and EXEs are allowed to load if they are signed with a certificate that
chains back to a certificate in the whitelist.
Whitelisting validates the integrity of firmware system files during the load process using a SHA-256
hash signed with HP’s digital signature. If validation fails the device reboots and holds at the preboot
menu to prevent a potential malware exploit from executing.
Digital signatures for HP and 3rd party developed solutions residing on the printing device are
validated using a SHA-256 hashing algorithm for HP firmware and a SHA1/256 hash for 3rd party
firmware. If validation fails during the load of HP firmware, the device will reboot. If validation fails
during the load of 3rd Party solution firmware, the firmware will not be loaded to prevent a malware
exploit.
Note: This cannot be turned on/off by user selection on the device.
General
Komentarze do niniejszej Instrukcji