Managing Printers in HP Workforce Experience

Introduction

HP Workforce Experience Platform (WXP) is a cloud-based IT infrastructure management platform offering AI-powered fleet management, employee engagement, secure digital workspaces, and endpoint security. It helps organizations manage print services across the organization from a centralized dashboard. WXP supports cloud-connected printers, simplifying centralized printer fleet management. You can gain enhanced visibility and control over your entire printer environment from a single platform.

This article provides a step-by-step guide to:

Target Audience

Primary audience:
- IT administrators and support personnel who set up and manage print services and resources leveraging the WXP platform (all roles).
- HP Partners who use the platform to manage print services for their customers.

Prerequisites

You are an existing HP Web Jetadmin customer.
You have an HP account and have been granted access to the WXP platform.
You must have administrator rights on the system installing Print Fleet Proxy.

Launching the WXP platform

To launch the WXP platform:

Managing Printers

The Printers page lets you manage and add to the printers in your fleet.

Working with the Printers’ List

The Printers tab on the Devices page lists all HP printers currently onboarded to WXP for your organization. Device onboarding typically occurs during the initial setup, but can be done at any time using the HP Smart app. The specific onboarding process varies by device model. If a device is pre-registered with HP, it's automatically associated with your organization's account and added to your managed devices list.

In the left menu, click Devices > Printers to view the Printers page. The Printers tab loads by default.

On the left side of the page, the Groups panel helps you organize devices into meaningful groups. You can also use groups to apply security policies to multiple devices simultaneously.

Currently, WXP only supports a flat group structure; every group is a child of the parent group All.

Selecting a checkbox next to a printer device displays the Actions dropdown menu at the bottom of the page, where you can move a device to a group, remove it from a group, or configure device settings.

Clicking on the Serial Number of a device in the list displays the Device Detail page. From this page, you can view general information about a device, configure device settings, or create a device-specific policy.

From the Printers list, you can:

Onboard new printers to be managed by HP Workforce Experience.
Configure printer-specific certificates and passwords.
Manage printer groups.
Access the Printers detail page for a specific printer, from which you can view general information about a printer, configure printer settings, or create a printer-specific policy.

You can modify which columns appear in the Printers list by selecting the gear icon , then selecting or deselecting columns as necessary.

Searching for Printers

The Search field allows you to search for a specific device in the list.

In the Search field, type a search string to search for a device, and press Enter. You can search for any identifying information: the Printer Name, Model, Location, etc. You can enter full or partial strings.

Onboarding Printers into HP Workforce Experience

The WXP platform allows you to initiate the onboarding process directly from the Printers or Pending Printers tabs. You can onboard printers in one of two ways through cloud-connected printers or through a Workforce Experience Print Fleet Proxy.

Onboarding Cloud-connected Printers

Onboarding cloud-connected printers requires you to supply the printer’s serial and model numbers. Currently, you can only onboard printers manually, up to ten at a time. In the future, you will be able to bulk onboard printers by uploading a CSV file containing the serial and model numbers of all the devices you want to onboard.

Note: Before a printer can be onboarded to the HP Workforce Experience platform through the cloud, you must enable HP Cloud Connection on the printer. (Older HP printer models may refer to HP Cloud Connection as Web Services.) You can enable HP Cloud Connection from the printer control panel or via the printer’s embedded web server.

To manually onboard printers on WXP:

1. Go to Devices > Printers. On the Printers page, above the printers list, click Add printers.

2. Select Connect through the cloud. The Add Printers dialog appears.

3. Click Enter manually.

The dialog displays Printer 1 where you can enter identifying information for the printer you want to onboard.

4. Enter the Serial Number and Product Number for the first printer you want to onboard.

5. To add another printer, select Add another printer, then repeat Step 4. You can add up to ten printers in a single request.

To remove a printer from the request, select the delete icon () adjacent to that printer.

6. When you have supplied printer information for all the printers you want to onboard, click Submit.

Once you submit the request, the printers included in the request are listed in the Pending Printers tab as the platform attempts to connect to the printers and complete the onboarding process.

7. Select the Pending Printers tab to monitor the status of your onboarding requests and address any issues as necessary.

Managing Pending Printers

The Pending Printers tab displays recently added cloud-connected printers. When you add cloud-connected printers to your Workforce Experience service, they initially appear in the Pending Printers list, with the date they were added and their corresponding status.

Pending printers can have one of the following status values:

Connected: The printer was successfully registered and onboarded. Connected printers remain in the Pending Printers list for five days after the initial onboarding date, but once connected, they are immediately available in the Printers tab as well.
Error: The printer could not be onboarded due to an error. There are a few reasons an error may occur: the product number or serial number is incorrect, or the printer might already be connected to another account.
Action Needed: The printer could not be onboarded because the HP cloud connection is not yet enabled.

To view the Pending Printers list, go to Devices > Printers, then select the Pending Printers tab.

Removing a Pending Printer

To stop a pending printer from being onboarded, you can remove a printer from the pending printers list. To remove a printer from the pending printers list:

1. Go to Devices > Printers, then select the Proxies tab. In the Pending Printers list, select one or more printers.

2. Click Delete.

3. In the confirmation dialog, click Delete to confirm the removal of the printer(s).

Configuring Printer-Specific Security Settings

Each printer has several settings that, for security reasons, cannot be included in a policy. These settings fall into two categories:

Certificates: Certificates help to ensure secure communication between the printer and other network resources. You can upload two types of certificates: a CA Certificate, which validates the identity of an entity; and an ID Certificate, which authenticates a claimed identity.
Passwords: Every HP printer can have several passwords, passphrases, or access codes set to secure various features of the printer. These include the embedded web server (EWS) password, Printer Job Language (PJL) password, SNMP passphrases, LDAP Admin password for Sign in Setup, and others. HP strongly recommends securing each of these features or disabling them if they are not required.

Policies have no way of storing and retrieving these printer-specific values securely, so you must set them for each printer individually. The HP Workforce Experience portal lets you easily modify these settings either via the Actions dropdown on the Printers list or via the Properties tab of the Device Details page.

To configure printer-specific security settings:

1. In the Printers list, check a device.

2. At the bottom of the window, from the Actions dropdown, select Configure, then click Continue. The Configure Device dialog appears.

3. To configure the certificate settings:

a. Expand the Network settings.

b. Select the Upload CA Certificate or Upload ID Certificate setting and then expand it to configure the setting.

c. Select File, browse to and select the certificate file you want to upload, then click Open.

d. When uploading an ID Certificate, set the certificate password.

4. To set one of the printer passwords:

a. Expand the Security settings.
b. Select the setting you want to configure and then expand it.
c. Enter a new password, passphrase, or access code as appropriate.

5. When you have finished configuring the necessary values, click Configure.

Managing Printer Groups

HP Workforce Experience lets you organize your printers into groups. Printer groups let you organize your printers into logical collections that are likely to have the same security or functionality restrictions and then apply a common security policy to the entire group.

A printer can only belong to one group. Currently, HP Workforce Experience only supports a flat group structure; every group is a child of the parent group, All.

Creating Printer Groups

To create a printer group:

1. In the Printers page, in Groups, click . The Create Group dialog appears.

2. Enter a Group Name.

3. Click Create.

Adding Printers to a Group

To add printers to a group:

1. In the printers list, check one or more printers that you want to add to a group.

2. At the bottom of the window, from the Actions dropdown, select Move to group, then click Continue.

The Move to Group dialog appears.

3. Select the group(s) you want to move the printer(s) to, then click Move.

Removing Printers from a Group

To remove printers from a group:

1. In Groups, select the group from which you want to remove printers.

2. In the Printers list, check one or more printers that you want to remove.

3. At the bottom of the window, from the Actions dropdown that appears, select Remove from group, then click Continue.

4. Select Remove to confirm the removal of the printer(s) from the group.

Renaming a Group

To rename a group:

1. On the Printers page, in Groups, select . The Edit Group dialog appears.

2. In the right Action page, select the Rename tab.

3. Under Groups, select the group you want to rename.

4. Enter a new Group Name, then click Rename.

5. Select Close to return to the Printers page.

Deleting a Group

To delete a group:

1. On the Printers page, in Groups, select . The Edit Group dialog appears.

2. In Groups, select the group you want to delete, then click Delete.

3. Select Delete to confirm the removal of the group.

Exporting the Printer List

You can export a list of the printers in your fleet to a CSV file, which you can open in an external app such as Excel. To export your printers:

1. Go to Devices > Printers. On the Printers page, click Export All.

2. In the Export Devices dialog, specify a file type (currently, the only supported export file type is CSV), then click Export.

Configuring Printer Settings

By selecting a printer in the printers list, you can view the Printer Details page. This page lets you view supply information for the printer as well as view general settings information, policy information, and event log data.

Note: For non-HP printers, Workforce Experience may be limited in the amount of printer information it can report.

This page contains several subtabs:

Overview: Displays general network and connectivity information for the printer.
Properties: Displays the printer’s property and setting values. Most of these values are informative only. However, if a setting is editable (for example, device passwords or certificates), you can also edit it from this tab.
Policies: Let’s you view the policies that have been assigned to this printer. You can view both the policies that have been assigned to the groups that the printer belongs to and, if one has been created, a printer-specific policy that applies only to this printer.

Printer-specific policies take precedence over policies assigned to a printer group and allow you to set settings that are unique to that printer (for example, permitting users to print color)

Workforce Experience will periodically assess the printer to ensure that it is compliant with both printer-specific policies and policies inherited from the group. If the printer is out of compliance, Workforce Experience can attempt to remediate any incorrect settings on your behalf.

HP Secure Fleet Manager Report: Allows you to view a security assessment report for the device.
Event Log: Allows you to view events and insights for this device.

Configuring a Printer-Specific Policy

A printer-specific policy is identical to a printer group policy, but they are defined within the Device Details page of a specific printer and is only assessed against that printer. A printer-specific policy takes precedence over any group policies that are inherited by the printer.

To create a Printer-Specific Policy:

1. Go to Devices > Printers. Click a printer to view details. Select Policies tab. This tab lists the compliance status for all assigned policies, then each of the policies in descending order of priority.

2. In the Device-specify policy setting page, click Edit. The Select Policy Settings page of the Edit Device-Specific Policy dialog appears.

This page contains a list of attributes that you can add to your policy.
The Category section at left lets you filter attributes by category to make it easier to locate an attribute of a specific type. You can also search for a specific attribute using the Search field.
For more information about an attribute, click .

3. In the list of attributes, check the attributes you want to include in your policy.

If you click a policy that is related to other attributes that you may want or need to include, those attributes are listed in the Related Items list. You can select the item to learn more about it; selecting Select automatically includes the attribute in the policy.

For example, when you add Printer Job Language (PJL) Access Commands, one related item is listed: Printer Job Language (PJL) Password. If you select the item in the Related Items list, an information dialog appears describing what the PJL Password is and how it is used.

Clicking Select adds the setting to your policy.

4. When you have added all the attributes you want, click Next. The Set Options page appears.

This page lets you configure the properties for each selected attribute.

5. To configure the properties for an attribute, select the attribute to expand it and display the properties for that attribute.

6. Configure the properties as necessary.

The security options are common to every setting that has them:
- Severity: Defines the relative security risk (Low, Medium, or High) should the setting be out of compliance.
- Ignore Unsupported Item: When enabled, this setting is ignored if the device does not support the feature.
- Ignore Unentitled item: When enabled, this setting is ignored if the feature is unentitled based on the HP service subscription.
- Remediation: When enabled, this setting is remediated if it is found to be out of compliance.
The setting properties are unique to each setting.

7. When you have configured the properties as necessary, click Create.

8. Workforce Experience attempts to validate the policy settings.

If validation succeeds, the Policy Created Successfully dialog appears. Click Done to confirm and complete the creation process.
If validation fails, you’ll receive a message identifying the issue with your policy. Address the issue, then click Create.

Viewing Printer Events

The Device Details page lets you access a log of events that have occurred on the printer. Printers record each event that occurs while they are powered on. These events can then be viewed in the event log to monitor the printer’s operation and gain insights into its performance.

Note: Currently, event log data is accessible only through the Workforce Experience Print Fleet Proxy. The portal does not display event logs for cloud-connected devices onboarded directly into Workforce Experience. Support for event logs for directly onboarded cloud devices will be added in a future release.

To view the event log:

1. In the Device Details page, select the Event Log tab. The event log appears.

2. In the Recommended action column, click Guide me for more information about the selected issue. A new browser tab is opened, displaying any troubleshooting information for the event.

3. Filter the events list as necessary:

a. At the top of the event log, select Filter. The Filter panel is displayed on the right side of the window.

b. In the Event Type dropdown, select the Event Type you want to display.

c. In the Timeframe dropdown, select the range of dates to display. You can choose one of the following options:

Last 7 days
Last 30 days
Last 60 days
Last 90 days
Custom

d. If you choose Custom, the Date selection widget appears. Select the start and end dates of the range to be displayed.

e. Click Clear All to remove all filters.

4. Modify which columns appear in the event log by selecting then selecting or unselecting columns as necessary.

Managing your Workforce Experience Print Fleet Proxies

The Print Proxies page of the HP Workforce Experience portal displays a list of all the Print Fleet Proxies you have installed and connected to Workforce Experience. When you connect a Print Fleet Proxy, the service is automatically associated with your organization’s HP Workforce Experience account and added to the Print Proxies list.

To view the Print Proxies page, in the left menu, go to Devices > Printers, then select the Print Proxies tab. The Print Proxies page appears.

The Print Proxies page displays a list of all the Print Fleet Proxies currently installed and connected to HP Workforce Experience. From this page, you can perform basic proxy management tasks, such as connecting a Print Fleet Proxy to the Workforce Experience Platform, editing proxy identifying information, or removing a proxy.

Searching for Proxies

The Search field allows you to search for a specific Print Fleet Proxy in the list.

To search for a Print Fleet Proxy, type a search string in the Search field and press Enter. You can search for any identifying information: the proxy name, the host name, etc. You can enter full or partial strings.

Connecting a Workforce Experience Print Fleet Proxy to the HP Workforce Experience Platform

If you have a Workforce Experience Print Fleet Proxy installed but it is not in your Proxies list, it means that the Print Fleet Proxy has not yet been connected to the HP Workforce Experience Platform. You can connect the proxy directly from the Print Proxies page. Once connected, the proxy onboards all the printers managed by the associated Web Jetadmin service into the Workforce Experience portal.

Note: To connect the Print Fleet Proxy, you’ll need access to its host computer to generate a verification code.

To connect a proxy:

1. Go to Devices > Printers, then select the Proxies tab. At the top of the Print Proxies list, click Add.

2. In the Code field of the Verify a Proxy dialog, enter your proxy’s verification code.

Note: If you don’t have a code, use the Workforce Experience Print Fleet Proxy tray app on the Web Jetadmin host to generate a new code now.

3. Click Verify.

The Proxy Verified dialog appears, requiring you to confirm that you want to allow the proxy installed on the specified computer to connect to your organization’s HP Workforce Experience account.

4. Click Allow to proceed.

The Proxy Connected dialog appears. This dialog displays identifying information for the proxy you’ve just connected to. By default, Workforce Experience identifies the proxy based on the name of the computer on which it is installed. If you want to give the proxy a different identifier, you can do that here.

5. If you choose, edit the Proxy name and provide a description, then click Done.

Modifying a Print Fleet Proxy

You can modify the Print Fleet Proxy name or description at any time. To edit a proxy:

1. Go to Devices > Printers, then select the Proxies tab. In the Proxies list, select the proxy that you want to edit.

2. At the bottom of the window, from the Actions dropdown, select Edit, then click Continue.

3. In the Edit a Proxy dialog, modify the Proxy Name or Description, then click Save.

Removing a Print Fleet Proxy

You can remove a proxy from the Print Proxies list at any time. Be aware that removing a proxy will also remove all the printers associated with that proxy from Workforce Experience as well, since the link between the HP Workforce Experience Platform and the HP Web Jetadmin service that manages those printers on-premises has been severed.

Note: Removing a Print Fleet Proxy in the portal only severs its connection to the HP Workforce Experience Platform. It does not uninstall the Print Fleet Proxy service from its host Web Jetadmin server. You can reconnect it at any time.

To remove a proxy:

1. Go to Devices > Printers, then select the Proxies tab. In the Print Proxies page, select one or more proxies that you want to remove.

2. At the bottom of the window, from the Actions dropdown, select Remove, then click Continue.

3. Click Remove to confirm the removal of the proxy.

Managing Printer Group Policies

The HP Workforce Experience Platform lets you define policies (that is, a collection of printer settings) and remotely apply those settings to a group of printers. You can create multiple policies and apply multiple policies to a group of devices.

Note: If you have a single printer that requires unique values, you can create a printer-specific policy. For more information, see Configuring a printer-specific policy.

To view the Policies page, in the left menu, go to Remediations > Policies.

Creating or Modifying a Policy

A policy defines values for a collection of printer settings. The Printer Policies page lets you create and modify a policy, which you can later assign to a printer group on the Assignment page.

There are three ways to create a policy:

Creating a new policy from scratch and adding and configuring attributes as desired.
Cloning an existing policy, then modifying the policy as necessary.
Importing a previously exported policy and then modifying the policy as necessary.

To view the Printer Policies page, in the left menu, go to Remediations > Policies, then select the Printer Policies tab. The Printer Policy page appears, displaying a list of all the available policies previously defined for your solution.

The Policies list provides some useful information at a glance. For example, you can see if the policy is Active (assigned to a printer group) and if so, to which group(s) it is assigned.

You can modify which columns appear in the Policies list by selecting then selecting or unselecting columns as necessary.

Creating a Policy

When creating a policy from scratch, you can add settings individually, or you can use a Policy Template, which allows you to start with a predefined collection of HP-recommended security settings and modify it as necessary.

Currently, the HP Workforce Experience portal includes the Essential Security template. The Essential Security template contains the necessary security settings required to maintain the minimal level of compliance necessary to protect your fleet.

To create a policy:

1. Go to Remediations > Policies, then select the Printer Policies tab. In the Printer Policies page, click Create. The Basic Information page of the Create Policy wizard appears.

2. Enter the basic information for the policy:

Policy Name: A unique descriptor for the policy.
Policy Setting Type: Select a predefined policy template as your starting point, which preselects and defines a group of settings, or select Skip Template to begin with no settings selected.
Note: An optional description or other useful information about the policy.

3. Click Next. The Select Policy Settings page appears.

This page contains a list of attributes that you can add to your policy.
The Category section at left lets you filter attributes by category to make it easier to locate an attribute of a specific type. You can also search for a specific attribute using the Search field.
For more information about an attribute, select .

4. In the list of attributes, check the attributes you want to include in your policy.

If you click a policy that is related to other attributes that you may want or need to include, those attributes are listed in the Related Items list. You can select the item to learn more about it; selecting Select automatically includes the attribute in the policy.

For example, when you add Printer Job Language (PJL) Access Commands, one related item is listed: Printer Job Language (PJL) Password. If you click the item in the Related Items list, an information dialog appears describing what the PJL Password is and how it is used.

5. When you have added all the attributes you want, select Next. The Set Options page appears. This page lets you configure the properties for each selected attribute.

6. To configure the properties for an attribute, select the attribute to expand it and display the properties for that attribute.

7. Configure the properties as necessary.

The security options are common to every setting that has them:
- Severity: Defines the relative security risk (Low, Medium, or High) should the setting be out of compliance.
- Ignore Unsupported Item: When enabled, this setting is ignored if the feature is unsupported by the device.
- Ignore Unentitled item: When enabled, this setting is ignored if the feature is unentitled based on the HP service subscription.
- Remediation: When enabled, this setting is remediated if it is found to be out of compliance.
The setting properties are unique to each setting.

When you have configured the properties as necessary, select Create.
Workforce Experience attempts to validate the policy settings. If validation succeeds, the Policy Created Successfully dialog appears. Click Done to confirm and complete the creation process.
If validation fails, you’ll receive a message identifying the issue with your policy. Address the issue, then select Create.

Cloning an Existing Policy

To quickly create a policy, you can clone an existing policy and modify only the settings that require different values. To clone a policy:

1. Go to Remediations > Policies, then select the Printer Policies tab. In the Policies list, select the check box beside the policy you want to clone. The select Action list appears at the bottom of the window.

2. At the bottom of the window, from the Actions dropdown, select Copy to Same Location, then click Continue. The new policy is added as an inactive policy in the Policies list and named <policy_name> (1).

3. Modify the policy as necessary.

Importing a Policy

If you are an HP Partner who is managing multiple customers, you may find that multiple customers require identical or very similar policies. Rather than having to create a new policy for each customer from scratch, the Workforce Experience portal includes Import and Export features that let you reuse a policy between customers.

Before you can import a policy into a customer account, you must already have a previously exported policy file available. First, create a policy for another customer, then export that policy. Once exported, the policy file can be imported into any number of other customer accounts.

To import a policy:

1. In the Workforce Experience portal, switch to the account of the customer for whom you want to import the policy.

2. Go to Remediations > Policies, then select the Printer Policies tab. In the Policies page, click Import.

3. In the Open File dialog, locate and select the policy JSON file, then select Open.

If HP Workforce Experience successfully validates that the file is the correct format, it is added to the Policies list.

4. Modify the policy as necessary.

Exporting a Policy

The Workforce Experience portal includes Import and Export features that let you reuse a policy between customers. To export a policy:

1. Go to Remediations > Policies, then select the Printer Policies tab. In the Policies list, select the check box beside the policy you want to export. The Select Action list appears at the bottom of the window.

3. Modify the policy as necessary.

Modifying a Policy

To modify a policy:

1. Go to Remediations > Policies, then select the Printer Policies tab. In the Policy list, click the policy you want to modify. The Policy Details page appears.

2. In the top Policy Overview section, click Edit. The Edit policy page appears.

3. In the upper panel, modify the Policy Name or Note as necessary.

4. In the Policy Settings panel, to change an existing attribute’s settings, select the attribute in the list to expand it, then modify the setting values as necessary.

5. To remove an attribute from the policy, select .

6. To add attributes to the policy, select Add. The Add Policy dialog appears. Attributes already added to the policy appear selected.

7. Select the attributes you want to add, then select Add.

Note: You can also unselect an attribute to remove it from the policy.

8. When you have made all the necessary changes to the policy, click Save.

9. In the confirmation dialog, select Save.

Deleting a Policy

You cannot delete Active policies (policies assigned to device group). To delete a policy that is currently active, you must first make it inactive by unassigning it from all device groups to which it is assigned.

To delete a policy:

1. Go to Remediations > Policies, then select the Printer Policies tab. In the Policies list, select the check box beside one or more inactive policies.

2. In the bottom of the window, from the Actions dropdown, select Remove, then click Continue.

3. In the confirmation dialog, select Remove to confirm the action.

Assigning Policies to Device Groups

The Assignments page lets you assign one or more policies to a group of devices.

To display the Assignments page, click Remediations > Policies, then select the Assignment tab.

The Assignments page contains two sections:

The left section displays the list of devices groups. This is the same list that you create and manage in the Devices page.
The right section displays the policies assigned to the selected device. If multiple policies are assigned to a group, HP Workforce Experience prioritizes them in the order they are listed.

Note that policies assigned to a parent group are automatically assigned to all child groups. Policies assigned to a parent group are applied with a lesser priority than those assigned directly to the child.

Prioritization of Multiple Policies

HP Workforce Experience uses priority logic when assessing a device against multiple policies. If two policies with conflicting values are assigned to the same group, then devices are assessed against the value of the policy with the highest priority, and the value in the other policy is ignored.

To determine priority, Workforce Experience uses a simple top-down prioritization. Policies are prioritized based on the order in which they are listed on the Assignments page. Policies assigned directly to the group receive the highest priority; policies inherited from the parent group are all displayed in a separate section and given the lowest priority.

For example, in the scenario below, HP Workforce Experience would give the highest priority to the Firmware Management policy. The Essential Security policy, inherited from the parent group, would be the lowest priority.

You can reorder policies to change their priority at any time using the Change Policy Priority button.

Assigning a Policy to a Group of Devices

To assign a policy to a group of devices:

1. In the Assignments page, from the Groups list at the left of the page, select the device group you want to add a policy to, then click Add. The Add Policy dialog appears.

2. Select one or more policies you want to assign to the device group, then click Add. The Assignments tab displays the selected policies added to the device group.

3. In the Policies list, use the adjacent Assess and Remediate dropdown to specify how HP Workforce Experience will act on each policy.

Assess and Remediate: Workforce Experience assesses the configuration of each device in the group for compliance with the policy, and attempts to remediate non-compliant settings. This is the default setting.
Assess Only: Workforce Experience assesses the configuration of each device in the group for compliance with the policy but makes no attempt to remediate non-compliant settings.

4. Prioritize the policies in the list as necessary. To re-order the policies:

a. In the list, select Change Policy Priority. The Change Policy Priority dialog appears.

b. Select a policy in the list, then use the up or down arrows to change its position in the list.

c. To back out of the priority changes that you’ve made, select Reset to Default to return to the original prioritization.

d. Once you have prioritized the policies in the order you want, click Save.

5. When you have finished assigning and prioritizing policies, click Assign to get a confirmation of policy assignment.

Getting Started with Workforce Experience Print Fleet Proxy

Getting started with Workforce Experience Print Fleet Proxy is a two-step process. You’ll need to:

1. Install a Workforce Experience Print Fleet Proxy on an HP Web Jetadmin host server.

2. Connect the Workforce Experience Print Fleet Proxy to HP Workforce Experience.

Installing a Workforce Experience Print Fleet Proxy

The Workforce Experience Print Fleet Proxy installer installs two components:

A background proxy service that passes information between an on-premises installation of HP Web Jetadmin and HP Workforce Experience in the cloud.
A tray application that communicates with the proxy service.

To install a Workforce Experience Print Fleet Proxy:

1. Download the Workforce Experience Print Fleet Proxy installer from the HP Workforce Experience portal:

a. Log in to the HP Workforce Experience portal.

b. Go to Devices > Printers. Select the Proxies tab. Click Print Fleet Proxy.

c. In the Add Devices dialog, select HP Fleet Proxy, click Download app.

2. Locate the WXP. PrintFleetProxy.x.x.xxx.msi in your Downloads folder, then right-click and select Install.

3. Accept the license agreement and select Next.

4. Follow the installation wizard as it allows you to view HP’s Privacy policy and select a destination folder. Select Continue as you complete each page.

5. On the Ready to Install page, click Install. The installer begins to install the Print Fleet Proxy components on the server.

6. When the installation is complete, click Finish.

After successful installation, the Print Fleet Proxy automatically starts and connects to the Web Jetadmin service.

To verify successful service installation: In Windows Task Manager, open the Services tab and find WXPPrintFleetProxyService. If the status is Running, the installation is successful.

The Print Fleet Proxy tray app also appears in your computer’s system tray, typically located in the bottom right corner of the page. If you selected Open Workforce Experience Print Fleet Proxy app, the Print Fleet Proxy tray app automatically opens, displaying the Welcome page.

7. Use the tray app to Connect your Workforce Experience Print Fleet Proxy to the HP Workforce Experience Platform.

Connecting Workforce Experience Print Fleet Proxy Service to the HP Workforce Experience Platform

After installation, the Workforce Experience Print Fleet Proxy automatically connects to the existing HP Web Jetadmin service on the server. However, you must still connect the proxy service to the HP Workforce Experience Platform to complete the communication.

To do this, first request an authorization code from the HP Workforce Experience Platform. Then, use this code to verify the Print Fleet Proxy when adding it to the platform. Once verified, the connection is complete, and the Print Fleet Proxy begins onboarding and syncing all devices associated with the Web Jetadmin service on the host server.

Note: Printer onboarding time to HP Workforce Experience depends on the number of printers managed by Web Jetadmin. While typically taking minutes, onboarding a large number of printers can take several hours.

To connect your Print Fleet Proxy to the HP Workforce Experience Platform:

1. In your Windows System tray, locate the Print Fleet Proxy service tray app icon and click the app. The first time you launch the app, the Welcome page appears.

2. Click Generate Code. The app (via the Print Fleet Proxy service) requests an authorization code from HP Workforce Experience.

3. Once it receives the code, the tray app displays the code and launches a browser window to redirect you to the HP Workforce Experience platform where you can complete the code verification process.

4. In the browser window, log into your HP account:

The Verify a Proxy dialog appears with the authorization code pre-populated.

6. Click Verify.

The Proxy Verified dialog appears, requiring you to confirm that you want to connect the proxy installed on the specified computer to your organization’s HP Workforce Experience account.

7. Click Allow to proceed.

The Proxy Connected dialog appears. This dialog displays identifying information for the proxy you’ve just connected to. By default, HP Workforce Experience identifies the proxy based on the name of the computer on which it is installed.

8. If you choose, edit the proxy name and provide a description, then click Done.

9. Once the verification process is complete, the HP Workforce Experience portal displays the Print Proxies page, with the proxy you just added displayed in a list with all the other Print Fleet Proxies previously registered to your organization.

Once the proxy is connected, it begins to synchronize all printer information between the Web Jetadmin Service and the HP Workforce Experience Platform.

Once printer synchronization is complete, you can open the HP Workforce Experience portal and begin managing your fleet. The Print Fleet Proxy synchronizes any changes you make to printer settings in HP Workforce Experience back to Web Jetadmin and vice versa.

10. If you return to the tray app, it should display the Proxy Status as connected.

If there was a problem connecting, the app will indicate Code Verification Failed. Click Generate Code to generate a new code and repeat the connection process.
After connecting the Print Fleet Proxy, use the tray app to monitor status and access the HP Workforce Experience portal.

Monitoring the Status of the Workforce Experience Print Fleet Proxy

At any time, you can open the tray app and see the status of the Workforce Experience Print Fleet Proxy. The app will display one of the following statuses:

Connected: The Print Fleet Proxy installed on this computer is successfully connected to and communicating with the HP Workforce Experience Platform.
Verification required: The Print Fleet Proxy installed on this computer was never verified and is therefore not connected. Click Generate Code to begin the connection process.
Verification failed: Your attempt to verify the Print Fleet Proxy installed on this computer failed. Click Generate Code to begin the connection process again.
Proxy removed: The Print Fleet Proxy installed on this computer was removed from HP Workforce Experience.
WJA is not working properly: There is an issue with the Web Jetadmin service that is preventing the Print Fleet Proxy from communicating with it.
Network error: A network issue is preventing the Print Fleet Proxy installed on this computer from communicating with Web Jetadmin or HP Workforce Experience.
Unknown: An unknown error is preventing the Print Fleet Proxy installed on this computer from operating as intended.

Launching the HP Workforce Experience Platform from the Workforce Experience Print Fleet Poxy service tray app

The Workforce Experience Print Fleet Proxy service tray app provides a direct link to the Print Proxies page in the HP Workforce Experience portal, giving you quick access without requiring you to launch the portal in your browser and then go to the Print Proxies page from the platform menu.

To launch the HP Workforce Experience portal from the tray app:

1. In your Windows System tray, locate and click the Print Fleet Proxy service tray app icon.

2. In the top-right corner of the app, select the Gear icon ( ), then select Digital Experience Platform. The HP Workforce Experience portal is launched with the Print Proxies page displayed.

Generating a New Verification Code

If, for any reason, the Workforce Experience Print Fleet Proxy becomes disconnected from the HP Workforce Experience Platform, you can generate a new Verification Code at any time to reconnect.

To generate a new Verification Code:

1. In your Windows System tray, locate and open the Print Fleet Proxy service tray app icon.

2. Select the Gear icon ( ) in the top-right corner of the app, then select Generate Code.

3. In the Print Proxies page of the HP Workforce Experience portal, add the proxy to the platform.

Troubleshooting the Proxy

By default, the Workforce Experience Print Fleet Proxy uses the Windows system proxy settings. (Note that it uses the proxy settings for the currently logged-in user, not the Local System account.)

If you are having issues with the Print Fleet Proxy communicating with HP Workforce Experience, it could be the result of the Windows system proxy settings being incorrectly defined for the current Windows user.

To correct this issue:

1. Stop the Workforce Experience Print Fleet Proxy service. In Services tab of Windows Task manager, right-click WXPPrintFleetProxyService, then click Stop.

2. Close the Print Fleet Proxy tray app. Select the gear icon ( ) in the top-right corner of the app, then select Quit.

3. In the Windows Settings app, open Network & Internet > Proxy, then update the proxy settings to the required values.

4. Restart the Workforce Experience Print Fleet Proxy service. In the Windows Task manager, go to the Services tab. Right-click WXPPrintFleetProxyService, then click Start.

5. Once the service is started, open the Print Fleet Proxy tray app, then generate a new verification code and reconnect to HP Workforce Experience.

Determining which Settings are Defined in HP Web Jetadmin

HP Web Jetadmin allows you to configure or enable hundreds of settings for the printers that are attached to it. Because HP Workforce Experience and the Print Fleet proxy are still new and evolving, they currently only support a fraction of the settings that you might have enabled in Web Jetadmin. While the number of supported settings in Workforce Experience is expected to increase with each new release, it will take many releases before it achieves settings parity with Web Jetadmin.

In the meantime, it might be helpful to know which settings you have set in Web Jetadmin to determine whether you are using settings that are not yet supported in Workforce Experience. To facilitate this, you can export your Group and Policy Associations from Web Jetadmin to an XLS spreadsheet.

IMPORTANT: If the device groups contain policies, you must export the device configuration templates separately.

To export device groups and policy associations from HP Web Jetadmin:

1. In the Device Management menu of the HP Web Jetadmin UI, right-click Groups, and then select Export groups. The Export Groups and Policy Associations wizard opens.

2. From the Available Groups list, select one or more device groups, and then select the arrow (>) button. Note: To select all the device groups, select the double arrow (>>) button.

3. To export any subgroups defined for the selected device groups, select the Include subgroups check box.

4. Select Next. The Confirm page opens.

5. Verify that the information is correct, and then select Export.

6. In the Save As window, browse to the location where you want to save the file, enter a file name in the File Name field, and then select Save.

7. On the Results page, select Done.

Supported HP Web Jetadmin settings

This release of Workforce Experience Print Fleet Proxy supports the following HP Web Jetadmin settings:

Setting	Description
Basic Device and Service Data
Cloud Logging	Specifies the cloud logging service location
Config Component	Specifies the configuration component.
Device Config	Specifies the device configuration.
Device Firmware Identifier	Specifies the unique identifier for the installed firmware.
Device Groups	Specifies the list of device groups a device belongs to.
Device Manufacturer	Specifies the manufacturer of the device.
Device UUID	Specifies the 36-character string that uniquely identifies the device.
Device UUID Key	Specifies the UUID key used for this device.
Display Name	Specifies the name of the device as it appears to users on the network.
Fleet Proxy	Specifies the fleet proxy being used to pass data between Web JetAdmin and HP Command Center.
Model Number	Specifies the model number of the device.
Serial Number	Specifies the serial number of the device.
Service ID	Specifies the Service ID of the device. The Service ID provides information about when the device was onboarded.
Copier Settings
Copy Background Cleanup	Specifies the default amount of background to be removed from the original document being scanned. For example, if a higher value is set then more of the background is removed from the original.
Copy Contrast	Specifies the default contrast (brightness) that the device uses to make copies. The device can make copies that are lighter or darker than the original.
Copy Darkness	Specifies the default amount of exposure that is applied to the scanned document. For example, a lower setting will cause the printed output to be lightened; a higher setting will cause the printed output to be darkened.
Copy Optimize Text/Picture	Optimizes the quality of copies based on the most common text or image type used in copy jobs. You can choose to optimize for photographs, printed pictures, text, or a mix of two or more content types.

Setting	Description
Copy Paper Tray Selection	Specifies the default input paper tray the device should use for a copy job.
Copy Sharpness	Specifies the default amount of sharpness to be applied to the original document being scanned. A higher value produces sharper copies.
Copy Stamps	Allows you to set up Copy Stamps to display in various positions on a page. These stamps can be placed in six locations using preset or custom content. To set up a copy stamp: 1. Select Edit beside the page location you want to place the stamp. 2. Select the Stamp Content. 3. Choose a Text Font, Text Size, and Text Color. 4. Check White Background if you want a white background placed behind the stamp. 5. Select Save.
Device Settings
Asset Number	A number assigned to the device by the organization for the purposes of tracking it.
AutoSend	Enables the device to periodically send usage information about the device’s configurations and supplies to a list of recipients. You can specify the frequency this information is sent and a custom list of recipients to send it to. If you are subscribed to a HP service like Instant Ink, you can also enable the Send to HP subsetting to proactively inform HP about the status of your printer’s supplies.
Company Name	The name of the organization that owns the device.
Contact Person	The person who should be contacted if there are any problems with the device or if you need support.
Date/Time Format	Specifies the format for dates and times as displayed on the device, complying with the format used by your organization.
Device Name	A name assigned to the device by the organization.
Device Location	The location of the device.
Device Firmware Date	Specifies the date the currently installed firmware was built.
Device Firmware Version	Specifies the version number of the currently installed firmware.
Enable Retrieve/Print From USB	Enables or disables the ability to print documents from a USB flash device.
Manual Feed Prompt	Specifies whether Manual Feed Prompt will be displayed always, or only if the tray is not loaded.
Override A4/Letter	When enabled, the device prints on letter-size paper when an A4 job is sent but no A4-size paper is loaded in the device, or on A4 paper when a letter-size job is sent but no letter-size paper is loaded.
Save to USB	Enables the Save to USB feature on the device. This feature provides the ability to save scanned documents on a USB flash drive that is inserted into the easy-access USB port on the device.
Size/Type Enabled	Specifies whether the device control panel displays the message “To change size or type press check”.
Retain Print Jobs	Specifies whether print jobs are stored on the device if the device has that ability. This feature is available on some printers that have mass storage capability. This allows you to store print jobs in the flash memory on a printer. This setting allows you to: · Store a print job on the printer. You can then call the print job from the printer control panel as needed. This feature is useful for storing forms and other commonly shared documents. · Store secure private copies to hold a print job until a user releases it by entering a personal identification number. Print one copy of a multiple-copy print job for proofing. The user can then release the remaining copies for printing or cancel them.

Setting	Description
	Caution: If this feature is disabled, the option appears on the printer driver user interface but does not store the print job on the printer. Note: WJA does not support the Standard Job Retention subsetting of the Retain Jobs setting. As a result, you must enable the Ignore Unsupported Item setting or the setting will never be compliant.
Temporary Store Job Retention	Specifies how long the printer holds a print job that has not printed before automatically deleting the print job. Caution: Selecting a value of Never Delete could cause the printer’s hard disk to fill up with print jobs that were held but never released for printing.
Tray 1 Mode / Manual Feed	Specifies how the devices prioritizes which paper to use. There are two options: · Cassette (Manual Feed Disabled): The device prioritizes by paper size first. · First (Manual Feed Enabled): The device always tries to use paper from that tray regardless of the media type or size specified.
Use Requested Tray	Specifies how the device handles jobs when a specific input tray is requested.
Digital Sending Settings
Send to Email	Enables the device to send scanned documents as an email. The device may require additional configuration settings in order to send email, such as an outgoing SMTP server or other default email settings. This feature eliminates the need to scan the media remotely, save it to file, and then send it in an email from a computer.
Save to Network Folder	Enables or disables the Save to Network Folder feature on the device. This feature provides the ability to save scanned documents in a shared folder on a network computer or server. If you enable this feature, the device might require additional configuration settings, such as DNS and WINS server settings.
Save to SharePoint	Enables or disables the Save to SharePoint® feature on the device. This feature provides the ability to save scanned documents directly on a Microsoft SharePoint site. If you enable this feature, the user does not need to scan a document to a network folder, USB flash drive, or email message, and then manually upload the file to the SharePoint site.
Save to USB	Enables or disables the Save to USB feature on the device. This feature provides the ability to save scanned documents on a USB flash drive that is inserted into the easy-access USB port on the device.
Embedded Web Server Settings
Time Servies	Specifies another machine on the network that can be accessed to obtain the correct time for an individual printer or printers in a device group. HP printers do not have an internal clock to keep track of the time; therefore, they need to connect to another machine on the network to obtain the current time.
Embedded Web Server Language Settings	Specifies what language the Embedded Web Server uses to display web pages.
Fax Settings
Fax Header Settings	Specifies information about the origin of sent faxes. You can include the Phone Number, Company Name, and Country/Region of origin.
Fax Send Settings	Specifies the most efficient settings for sending faxes from the digital send device. These settings affect how the device dials outbound faxes and how it behaves when the receiving line fails to answer the fax. These settings will ensure that most of the outbound faxes are received successfully while minimizing time spent attempting to send faxes to unreachable recipients.
IP Fax Settings	Specifies the Fax ID and Company Name included with faxes sent over IP. These settings are required when you select IP Fax as the Fax method in the Fax Send Settings.

Setting	Description
PC Fax Send	Specifies whether users can send faxes from their computer.
File System Settings
Secure File Erase Mode	Specifies the behavior of a secure storage erase operation and the erase operation that a printer automatically performs to make space available on a hard disk drive for incoming print jobs. The erase operations are designed to add available space to a device’s hard disk drive and to prevent unauthorized users from accessing confidential information from a device’s hard disk drive or other erasable storage device. The following are the supported secure file erase modes: · Non-secure Fast Erase: Erases the file system references to operations, such as completed print jobs. By erasing the references, space on the hard disk drive is made available. This is the fastest erase mode and the default mode. · Secure Fast Erase: Erases the file system references to operations and provides one layer of masking to hide data stored on the hard disk drive or other erasable storage devices. This mode is slower than the Non-secure Fast Erase but more secure. · Secure Sanitizing Erase: Erases the file system references to operations and provides multiple layers of masking to hide data stored on the hard disk drive or other erasable storage devices. This mode may introduce a significant performance impact to the device while the process is executing.
File System Access Protocols	Assesses file system access to the external storage device(s) through protocols and ports. Select the access method to assess: · PostScript (PS): Used by programs such as Adobe products for printing and access to fonts. · Printer Job Language (PJL): HP proprietary protocol used to manage print job configuration.
Firmware Settings
Auto Firmware Update	Note: Due to a limitation in the platform, this feature is not currently supported by Workforce Experience. Support should be added in a future release. Enables or disables the printer’s ability to automatically receive firmware updates. Printer security could be compromised if the firmware is not regularly updated.
Firmware Service	Specifies the Firmware Service URL from which devices the device can retrieve updated firmware.
Firmware Version	Specifies the version of the firmware on the device.
Update Type	Specifies whether the firmware is updated automatically or manually.
Network Settings
Network Enable Features 9100 Printing	Enables direct-mode printing over port 9100.
AirPrint	Enables instant wireless printing from iPad, iPhone, and iPod touch devices.
AirPrint Fax	Enables or disables sending faxes from an iPad, iPhone, iPod touch, or Macintosh computer to an AirPrint-enabled printer.
AirPrint Scan (eSCL/WebScan)	Enables sending scanned documents from an AirPrint-enabled printer to an iPad, iPhone, iPod touch, or Macintosh computer. Known Issue: Currently, there is a known issue in HP Web JetAdmin that prevents you from changing the AirPrint Scan (eSCL/WebScan) value from Enabled to Disabled. To set this value to Disabled, you must also change the AirPrint Secure Scan (Secure eSCL/WebScan) configuration setting at the same time.

Setting	Description
	When setting a policy in HP Command Center for AirPrint Scan (eSCL/WebScan) to Disabled state, ensure that it is paired with AirPrint Secure Scan (Secure eSCL/WebScan) as specified or the policy compliance will show Not Compliant.
AirPrint Secure Scan (Secure eSCL/WebScan)	Enables sending scanned documents securely from an AirPrint-enabled printer to an iPad, iPhone, iPod touch, or Macintosh computer.
Bonjour	Enables the Bonjour service, which allows the printer to be discovered by iOS devices and macOS computers.
FTP Printing	Enables printing over the File Transfer Protocol (FTP).
HP XML Services	Enables access to XML-based data on HP Jetdirect print servers.
IPP Fax Out	Enables sending faxes over the Internet Printing Protocol (IPP).
IPP Printing	Enables printing over the Internet Printing Protocol (IPP).
IPPS Printing	Enables secure IPP Printing over the HTTPS protocol.
LPD Printing	Enables printing through Line Printer Daemon (LPD). Line Printer Daemon (LPD) provides line printer spooling services for TCP/IP systems.
LLMNR	Enables Local Link Multicast Name Resolution, which performs name resolution without requiring a DNS server or DNS client configuration.
SLP Config	Enables discovery of the device using the Service Location Protocol, a passive discovery protocol used by some client applications to discover and identify devices.
Support Contact	Specifies the name of the person that users can contact for device support.
System Contact	Specifies the name of the person who owns or is responsible for the device. The system contact is useful when you need to dispatch repair personnel, have questions about device settings or usage, or need to report a problem with a device.
System Location	Identifies the system based on its location.
Telnet Config	Enables configuration of the device over Telnet, which provides additional access to print server configuration and management web pages.
TFTP Config File	Enables configuration the behavior of the TFTP Server.
Web Services Printing	Enables the Microsoft Web Services for Devices (WSD) Print services supported on the HP Jetdirect print server.
WINS Port	Enables Windows Internet Name Service (WINS) port configuration.
WINS Registration	Enables Windows Internet Name Service (WINS) registration.
WS-Discovery	Enables discovery of the device using WS-Discovery protocol, a multicast discovery protocol used to discover network-connected and PC-connected devices on both local and remote subnets.
Security Settings
Account Lockout	Enables the account lockout feature for the Local Administrator account on the devices. When enabled, if the local administrator reaches the maximum number of failed login attempts, the account is locked.
Check for Latest Firmware	When enabled, determines whether the device has the latest firmware and performs a security assessment of the installed firmware. The latest firmware on device ensures that device is better protected from security threats. The device must have web connectivity when the Firmware Index file source is set as "Web (hp.com)". This is because the check for latest firmware will be done against the version published at hp.com.
Device Announcement Agent	Enables the announcement agent, which allows users to automatically configure printer settings without administrator intervention. The agent sends an announcement to the configuration server, which pushes the configuration settings straight to the printer.

Setting	Description
	By default, the Device Announcement Agent uses the DNS hostname “hp-print-mgmt” to locate the configuration server. When using the default DNS hostname, authentication between the printer and configuration server can be enabled but is not required.
Digital Sending Service	The Digital Sending Service is an independent HP product that allows you to configure digital sending. If you select the Allow use of digital send service checkbox, the Digital Sending Service manages the device. If you select the Allow transfer to new digital send service checkbox, any Digital Sending Service can manage the device, even if another Digital Sending Service is currently managing the device.
Display Color Usage Job Log on Information Tab	Enables the Color Usage Job Log on the Information tab of the device’s Embedded Web Server (EWS) to monitor color print jobs processed by the printer.This log contains specific information about color print job processed through the printer, including date/time, the print job user, the print job name, the application the print job came from, and information about the number of sides and sheets for the print job.
Embedded Web Server (EWS) Admin Password	Specifies a password for the device’s embedded web server (EWS), which allows user to access the device configuration in a web browser by navigating to the device IP address.
Host USB Plug and Play	Enables the Host USB plug and play feature on the device. The Host USB plug and play feature is used to perform tasks such as scanning to a USB flash drive. Note: If this option is disabled, control-panel applications that require the Host USB plug and play feature, such as the Save To USB application, are automatically disabled.
LDAP Searching the Database	Specifies the root and attributes used to search the LDAP database for the user’s email.
LDAP Sign In Setup	Enables or disables LDAP sign-in method and specifies the settings that the device uses to establish a connection with the LDAP server, authenticate users, and search the LDAP server database.
Lockout Interval	Specifies the number of seconds local administrator account remains locked after reaching the Maximum Attempts value.
Maximum Attempts	Defines the number of times a local administrator can enter an incorrect password before being locked out of the account and how long the account remains locked.
Minimum Password Length	Specifies the minimum number of characters the local administrator password must contain. If password complexity is enabled, the password length can be from 3 to 32 characters. If password complexity is disabled, the password length can be from 0 to 32 characters.
Password Complexity	When enabled, the local administrator password must contain three of the following character types: uppercase letters, lowercase letters, numbers, and special characters.
Printer Firmware SHA1 Code Signing	Specifies which level of Secure Hash Algorithm (SHA) the device requires the firmware bundle be signed by in order to be installed on the device. If this setting is disabled, the device can only install firmware bundles that have been signed using the more secure SHA-2. If this setting is enabled, the device will install firmware bundles signed by SHA-1 or SHA2.
Printer Firmware Update (send as printjob)	Enable or disables the ability to update the device firmware by sending it as a print job to port 9100.
Printer Job Language (PJL) Access Commands	Enables or disables PJL Access commands. When enabled, the HP Embedded Web Server (EWS) permits access to PJL commands.
Printer Job Language (PJL) Password	When set, restricts access to PJL features of a device when the PJL Device Access (PJL) Commands setting is enabled. The PJL password is a numeric PIN. The PJL password is cleared by entering a zero (0) as the new password.
Remote Firmware Update (RFU)	Allows the firmware upgrade file to be downloaded from the Internet and installed remotely.

Setting	Description
Require HTTPS Redirect	When enabled, any HTTP requests accessing the device via a Web page are redirected through a secure port (HTTPS). HTTPS uses identity certificates in the device. Consider installing CA signed certificates before enabling this setting.
Reset Lockout Interval	Specifies the number of seconds that must pass after a failed login attempt occurs before the failed login attempt counter is reset to 0.
Service Access Code	Configures a service access code on the device. A service access code provides additional security for the device Service menu. Normally, the factory-default service PIN must be entered to access the System menu. When configured and enabled, the factory-default PIN is disabled and someone trying to access the Service menu would need to provide the Service Access Code before they are granted permission. Disabling Service Access Code restores the factory-default service PIN as the passcode.
SNMPv1/v2	Provides support for specific tools that rely on SNMPv1/v2 for device discovery and status. If you synchronize passwords using the HP Embedded Web Server (EWS), the Admin Password can also be used by other configuration tools such as Telnet, SNMPv1/v2, and HP Web Jetadmin. Printers connected to Web Jetadmin should have at least one SNMPv1/v2 and SNMPv3 enabled. Note: This feature is only available on some HP models.
SNMPv3	Note: Due to a limitation in the platform, this feature is not currently supported by Workforce Experience. Support should be added in a future release. Provides support for SNMPv3. SNMPv3 employs a user-based security model (RFC 2574) and features user authentication and data privacy through encryption. If your network environment has an HP Web Jetadmin installation, this setting can affect its functionality. Printers connected to Web Jetadmin should have at least one SNMPv1/v2 and SNMPv3 enabled. Before changing the number of Maximum attempts for logout to a lower value, ensure that the total number of EWS credentials stored in HP Web Jetadmin is not exceeding the final value of the Maximum attempt for logout. Otherwise, HP Web Jetadmin might display a device with a status communication error after discovering new devices. Note: If FIPS 140 is enabled, setting the SNMPv3 Encryption Algorithms to SHA-1/AES. MD5/DES is not allowed. Note: This feature is only available on some HP models.

Setting	Description
Upload CA Certificate	Specifies a certificate authority (CA) certificate to upload to the network interface card (NIC) on the device. You can upload root CA certificates and intermediate CA certificates. You cannot upload user certificates. An intermediate CA is a subordinate of a root CA. An intermediate CA is capable of signing and issuing identity certificates. The result is a certificate chain that begins at the root CA and ends with identity certificates. Intermediate CAs provide an added level of security that reduces the risk of the root CA being compromised. Federal Information Processing Standard (FIPS) supports only CA certificates that are signed by using the SHA-1 authentication protocol or later. To upload CA certificates when FIPS mode is enabled on the device, the CA certificates must be signed by using SHA-1 or later. If you upload a CA certificate that is signed by using the MD5 authentication protocol or earlier (MD2 or MD4) or is in the PFX format with the RC4 Message Authentication Code (MAC) verification, the configuration fails.
Upload ID Certificate	Specifies a valid HP Jetdirect certificate to upload to the authentication server and copy the certificate to the device. Some organizations require secure authentication for their devices. You can upload the HP Jetdirect certificate remotely to meet the security needs of your organization. Federal Information Processing Standard (FIPS) supports only HP Jetdirect certificates that are signed by using the SHA-1 authentication protocol or later. To upload HP Jetdirect certificates when FIPS mode is enabled on the device, the HP Jetdirect certificates must be signed by using SHA-1 or later. If you upload an HP Jetdirect certificate that is signed by using the MD5 authentication protocol or earlier (MD2 or MD4) or is in the PFX format with the RC4 Message Authentication Code (MAC) verification, the configuration fails.
Web Servies Settings
HP Jet Advantage (More Apps)	Enables or disables HP JetAdvantage on this printer. HP JetAdvantage is a cloud-based service that gives users access to additional printer features and applications. You can also specify whether users can create HP JetAdvantage account if they don’t have one.
Proxy Server	Specifies the printer’s web browser proxy settings. Enabling the Proxy Server setting lets you set the Proxy Server address and Proxy Port.
Smart Cloud Print	Enables or disables the Smart Cloud Print feature on the device. If Smart Cloud Print is enabled, users can access web-based applications that extend the capabilities of the device.

Legal Notices

The information contained in this document is proprietary to HP, Inc. and is tendered for purposes of review and evaluation only. This document shall not be reproduced, copied, or stored in any retrieval system, in whole or in part, nor shall the information contained herein be used by or disclosed to others except as expressly authorized by HP, Inc.

All rights to this document are reserved by HP, Inc.