HP CZ248A, CZ249A, CZ250A User Manual

HP COLOR LASERJET ENTERPRISE M680 MFP PRINTER SERIES Firmware Readme
Product Name(s): HP Color LaserJet M680dn HP Color LaserJet M680f HP Color
LaserJet M680z
Model Number(s): CZ248A, CZ249A, CZ250A
This document contains information for the firmware revision number:
Firmware Datecode: 20210317 Firmware Revision: 2309046_000279
HP Fleet Bundle Version Designation: FutureSmart Bundle Version 3.9.7
Description
-- What is included in the Firmware bundle?
-- Who needs this firmware?
-- Determining the current version level of your firmware
Enhancements and Fixes provided with this firmware revision Enhancements and Fixes provided with the previous revision(s)
Installation Instructions
-- Additional Information to know
-- Using the Embedded Web Server
-- Using the Walk up USB port
-- Web JetAdmin
FutureSmart Level Switching Procedures
-- Embedded Web Server (EWS)
-- Device Control Panel
-- Web JetAdmin
System Requirements Technical Assistance Customer Support Internet Additional Information Legal Statements
-- Trademark Notices
-- OPEN-SOURCE SOFTWARE LICENSE AGREEMENTS (In English)
-- License and Copyright
Description
This Readme file provides specific installation instructions and other information you should know before you perform a firmware update for your HP LaserJet Series printer or MFP. Installation instructions are provided for Single and Multiple Printer Updates.
This document provides specific update, installation and troubleshooting information. For additional information on the device features, refer to the online user guide found on the Windows Printing System Installer CD-ROM that came with your printer or at hp.com.
What is included in a Firmware bundle? The HP LaserJet printer firmware update file available from the hp web site contains firmware for the printer, embedded JetDirect (if applicable), HP paper handling accessories used with the device in one convenient download file. When the Remote Firmware Upgrade file is sent to the HP LaserJet Printer or MFP firmware for the engine and all connected accessories are upgraded.
Who needs this firmware? Similar to Hewlett Packard providing improved software for your HP LaserJet Printer or MFP, Hewlett Packard provides firmware updates for your printer periodically through its supported lifecycle. A firmware update may be necessary if it is determined that you may benefit from the resolution of any issue that is documented below. These updates are available on the HP support web site. Determining the current version level of your firmware
To determine the current level of firmware installed on the device: Go to the printer’s or MFP’s control panel.
1. Go to the printer’s control panel.
2. Scroll down and select the Administration application.
3. Select the Reports menu.
4. Select the Configuration/Status Pages menu.
5. Select the Configuration Page option.
6. Select the Print.
On the printed Configuration page look in the section marked "Device Information" for the Firmware Datecode and Firmware Revision. The Firmware Datecode and Firmware Revision will look something like this:
Firmware Datecode: 20140206 Firmware Revision: 2302253_422210
IMPORTANT NOTE:
This firmware file requires an interactive update method. You CANNOT update these Product(s)/Model(s) using the traditional FTP, LPR or Port 9100 methods of upgrading.
Please use one of the following methods listed below to update the firmware of this device.
Enhancements and Fixes provided with this Firmware revision
Firmware Datecode: 20210317 Firmware Revision: 2309046_000279
HP Fleet Bundle Version Designation: FutureSmart Bundle Version 3.9.7
For information on HP Security Bulletins addressed by firmware releases, please visit:
https://support.hp.com/security-bulletins
To initiate a subscription to receive future HP Security Bulletin alerts via email, visit:
https://www.hp.com/go/alerts
ENHANCEMENT:
Base:
No New Updates.
Digital Sending:
No New Updates.
Fax:
No New Updates.
Security/Authentication:
No New Updates.
Embedded JetDirect:
No New Updates.
FIXES:
Base:
HP Webservices will stop working and the printer will lose its connection to HP
Connected on the web. You may see an error "Could not communicate with HP Connected, or Unable to contact HP Connected" when you try to enable HP Web Services.
Third party solutions created in 2021 will not be able to load on the device
through the solution installer page.
Security/Authentication:
No New Updates.
Digital Sending:
No New Updates.
Fax:
No New Updates.
Embedded JetDirect:
No New Updates.
Current firmware revisions included in this firmware bundle:
DEVICE FIRMWARE REVISION
COMPONENT
FIRMWARE VERSION
HP Color LaserJet M680 SERIES
Firmware Datecode: 20210317 Firmware Revision: 2309046_000279
Embedded JetDirect:
JDI23900047
DC Controller:
5.49
CPB
2.176
SCB
xxxxFA1446AR 1.0
Fax
Ver11.4A
HP Fleet Release Designation
FutureSmart Bundle Version 3.9.7
MD5 checksum for .bdl file
cdc8c9264a800a3dc7d53c0eb66b9727
Enhancements and Fixes provided with this Firmware revision
Firmware Datecode: 20191213 Firmware Revision: 2309025_582101
HP Fleet Bundle Version Designation: FutureSmart Bundle Version 3.9.6
For information on HP Security Bulletins addressed by firmware releases, please visit:
https://support.hp.com/security-bulletins
To initiate a subscription to receive future HP Security Bulletin alerts via email, visit:
https://www.hp.com/go/alerts
ENHANCEMENT:
Base:
No New Updates.
Digital Sending:
No New Updates.
Fax:
No New Updates.
Security/Authentication:
No New Updates.
Embedded JetDirect:
No New Updates.
FIXES:
Base:
49.4A.04 error may occur intermittently when printing from certain types of
customized applications.
Security/Authentication:
No New Updates.
Digital Sending:
No New Updates.
Fax:
No New Updates.
Embedded JetDirect:
No New Updates.
Current firmware revisions included in this firmware bundle:
DEVICE FIRMWARE REVISION
COMPONENT
FIRMWARE VERSION
HP Color LaserJet M680 SERIES
Firmware Datecode: 20191213 Firmware Revision: 2309025_582101
Embedded JetDirect:
JDI23900042
DC Controller:
5.49
CPB
2.176
SCB
xxxxFA1446AR 1.0
Fax
Ver11.4A
HP Fleet Release Designation
FutureSmart Bundle Version 3.9.6
MD5 checksum for .bdl file
81ff8799b8573633d6aee1ce082f79df
Enhancements and Fixes provided with this Firmware revision
Firmware Datecode: 20190711 Firmware Revision: 2309021_581900
HP Fleet Bundle Version Designation: FutureSmart Bundle Version 3.9.5
ENHANCEMENT:
Base:
No new Updates
Digital Sending:
No new Updates
Fax:
No new Updates
Security/Authentication:
Added an updated digital signature verification for aftermarket solution bundles
during installation. Currently installed solutions are not affected. Customers and resellers should work with solution providers for an updated signature-compliant version of their software.
Embedded JetDirect:
No new Updates
FIXES:
Security/Authentication:
CVE-2019-6334 - Solution application signature checking may allow potential
execution of arbitrary code.
Base:
Some SmartCard solutions may fail to communicate with the card reader properly
causing the authentication dialog window to not appear.
Digital Sending:
Warning message may appear stating the recipients email address is not in the
address book.
Fax:
No New Updates
Embedded JetDirect:
No New Updates
Current firmware revisions included in this firmware bundle:
DEVICE FIRMWARE REVISION
COMPONENT
FIRMWARE VERSION
HP Color LaserJet M680 SERIES
Firmware Datecode: 20190711 Firmware Revision: 2309021_581900
Embedded JetDirect:
JDI23900041
DC Controller:
5.49
CPB
2.176
SCB
xxxxFA1446AR 1.0
Fax
Ver11.4A
HP Fleet Release Designation
FutureSmart Bundle Version 3.9.5
MD5 checksum for .bdl file
8cd1651b4b6889a825008b7ebf38f53c
Enhancements and Fixes provided with this Firmware revision
Firmware Datecode: 20190118 Firmware Revision: 2309010_581416
HP Fleet Bundle Version Designation: FutureSmart Bundle Version 3.9.4
ENHANCEMENT:
Base:
No new Updates
Digital Sending:
No new Updates
Fax:
No new Updates
Security/Authentication:
New security check will prevent installation of non-compliant aftermarket solution
bundles. Currently installed solutions are unaffected. Please work with solution providers for an updated signature-compliant version of their software.
Embedded JetDirect:
No new Updates
FIXES:
Security/Authentication:
No New Updates
Base:
Unable to configure Digital Send Software (DSS) workflows when Cross-site
Request Forgery (CSRF) is enabled.
Scan and Copy jobs may get cancelled when pressing the space bar on the slide
out keyboard.
Digital Sending:
Warning message may appear stating the recipients email address is not in the
address book.
Fax:
No New Updates
Embedded JetDirect:
TLS 1.0 and Multicast IPV4 settings do not get backed up and restored properly.
Current firmware revisions included in this firmware bundle:
DEVICE FIRMWARE REVISION
COMPONENT
FIRMWARE VERSION
HP Color LaserJet M680 SERIES
Firmware Datecode: 20190118 Firmware Revision: 2309010_581416
Embedded JetDirect:
JDI23900041
DC Controller:
5.49
CPB
2.176
SCB
xxxxFA1446AR 1.0
Fax
Ver11.4A
HP Fleet Release Designation
FutureSmart Bundle Version 3.9.4
MD5 checksum for .bdl file
9dbb50a3c9fa44c9e052e7f5204fda77
Enhancements and Fixes provided with this Firmware revision
Firmware Datecode: 20180605 Firmware Revision: 2308974_579771
HP Fleet Bundle Version Designation: FutureSmart Bundle Version 3.9.2
ENHANCEMENT:
Base:
No new Updates
Digital Sending:
No new Updates
Fax:
No new Updates
Security/Authentication:
Added a feature to prevent Cross-site Request Forgery (CSRF) exploits. This guards
against a malicious exploit where unauthorized commands are sent to the EWS using the logged-on administrator credentials.
Embedded JetDirect:
No new Updates
FIXES:
Security/Authentication:
CVE-2018-5923: Insecure Solution DLL Signature Validation. CVE-2015-9251: jQuery before version 1.12.0 and 3.0.0 may be vulnerable to
Cross-site Scripting (XSS) attacks.
Base:
Under certain conditions 49.38.07 error is seen after receiving a fax job. Secure Erase feature does not work properly after replacing the device’s Hard Disk
Drive (HDD).
Digital Sending:
No New Updates
Fax:
Fax icon is disabled and requires reconfiguration when you upgrade from
firmware version 3.8.7 to 3.9.
Embedded JetDirect:
Cisco "ARP Proxy" feature is causing devices to decline the DHCP offer. Syslog Priority setting is not filtering properly. Device loses network connection after re-negotiating the link speed.
Current firmware revisions included in this firmware bundle:
DEVICE FIRMWARE REVISION
COMPONENT
FIRMWARE VERSION
HP Color LaserJet M680 SERIES
Firmware Datecode: 20180605 Firmware Revision: 2308974_579771
Embedded JetDirect:
JDI23900022
DC Controller:
5.49
CPB
2.175
SCB
xxxxFA1446AR 1.0
Fax
Ver11.4A
HP Fleet Release Designation
FutureSmart Bundle Version 3.9.2
MD5 checksum for .bdl file
03b64e7d6100df865459296445f69763
Enhancements and Fixes provided with this Firmware revision
Firmware Datecode: 20180301 Firmware Revision: 2308955_579085
HP Fleet Bundle Version Designation: FutureSmart Bundle Version 3.9.1
ENHANCEMENT:
Base:
No new Updates
Digital Sending:
No new Updates
Fax:
No new Updates
Security/Authentication:
No new Updates
Embedded JetDirect:
No new Updates
FIXES:
Security/Authentication:
No New Updates
Base:
When printing from Mac OS High Sierra, error "undefinedresult, OFFENDING
COMMAND" is seen.
Unable to print certain PDF files from USB.
Digital Sending:
No New Updates
Fax:
No New Updates
Embedded JetDirect:
By default, the IPP queue was disabled and it was enabled only for CUPS client.
This change includes enabling IPP queue by default, which improves IPP/IPPS performance significantly.
Current firmware revisions included in this firmware bundle:
DEVICE FIRMWARE REVISION
COMPONENT
FIRMWARE VERSION
HP Color LaserJet M680 SERIES
Firmware Datecode: 20180301 Firmware Revision: 2308955_579085
Embedded JetDirect:
JDI23900015
DC Controller:
5.49
CPB
2.175
SCB
xxxxFA1446AR 1.0
Fax
Ver11.4A
HP Fleet Release Designation
FutureSmart Bundle Version 3.9.1
MD5 checksum for .bdl file
e2fa9226b95d68b60a7623eb5c91efe1
Enhancements and Fixes provided with this Firmware revision
Firmware Datecode: 20171213 Firmware Revision: 2308937_578496
HP Fleet Bundle Version Designation: FutureSmart Bundle Version 3.9
ENHANCEMENT:
Base:
The Backup and Restore feature has been expanded to include JDI settings.
Additionally, this feature has been expanded to allow creating a backup file and restoring that file to another device of the same model and firmware version as the backup file.
When the "Email Domain Restriction" feature is configured with only one domain,
the domain will autofill once the user selects the "@" symbol.
Added support for "Any Size/Any Type" in cassette trays. This feature increases the number of allowed PIN users in the device's local
address book; from 1000 to 2000.
Optimized JPEG decompression library improves performance of print jobs with
JPEG compressed images
Enhancement to include the ability to keep the control panel lit during printing.
Feature is only available to be turned on/off via XTP tickets.
Support added for USB Keyboard HP part number QY776AA#ABA. Support
added only for the keys also available on Flow model keyboards. All other keys are nonfunctional.
Users now have the ability to cancel digital sending, copy, print and fax jobs via
SNMP commands.
Added the ability to specify a custom sign-in message at the control panel if all of
its permissions have Guest locked. The default message in English is "Touch 'Sign in' to use the device." The ability to modify this message lets clients that have
badge authentication solutions or other types of custom messaging they wish to be displayed to show.
A new option has been added to delete the temporary jobs after 3 days. Error code “42.B0.01” will not be displayed in the event log for end customers. Added new feature to allow PCL 6 to suppress blank pages. Previously this feature
was only available with PCL5, now this functionality is also available with PCL6.
Changes in power management to meet new Blue Angel regulations.
Digital Sending:
Devices will accept a new hidden macro called "%HOME_FOLDER%" in the "UNC
Folder Path" with the "Save to Shared Folders" of the "Save to Network Folder" setup. When specified, the device will attempt to locate that user's personal share folder using the default attribute for Active Directory named "home directory" if the user authenticated with Windows or LDAP authentication. Alternatively, when specified the device will attempt to locate the value for the constant Home Folder Path which certain pull print & authentication solutions like HP Access Control and others populate. This allows for a different way to specify personal folders so that the other advanced features like specifying a sub folder or optionally using a service account can be used. This can be especially helpful for pull print and authentication solutions like HP Access Control in cases where network administrators want to allow end users to tap a badge (which does not have their password) to deliver jobs to their home folders without additional prompts. This also helps clients with Windows and LDAP authentication too even if not using a service account where end users want jobs delivered to a predictable subfolder (e.g. "scans") and not just their root home folder.
Fax:
No new Updates
Security/Authentication:
Users now have the ability to disable printing from Help. Added two new features to improve the private and usability of retrieving stored
jobs from the "Retrieve from Device Memory" application. Administrators can define what users first see when entering the "Retrieve from Device Memory" application. The default behavior has not changed, but administrators have a new setting in the embedded web server under "Security" [Tab] -> "Protect Stored Data" [Menu] -> "Managed Stored Jobs" [Section] called "Behavior when users are authenticated. If "Assist users to their jobs" is selected, users entering the application will immediately see their jobs provided a folder exists by their username (default behavior in the print driver when sending jobs) but can navigate back to the list of folders with jobs. Administrators will also note a new permission
that is not activated by default in the embedded web server under "Security" [Tab]
-> "Access Control" [Menu] -> "Sign In and Permission Policies" [Section] -> "Open from Device Memory application" [Control Panel Permission] for "Other Users' Jobs and Folders". If removing the permissions (e.g. for "Guest" and "Device User") a regular user will only be able to see their or guest jobs. If at the folder view they will only be able to see folders with at least one of their own jobs or a guest job within it except for the special folders like "Untitled" & "Stored Faxes". These two features can be used together to optimize the privacy & usability when users retrieve their stored jobs.
Allow for nested group behavior on the EWS: Security>Access Control>Windows
Setup. Nested AD groups may be configured to inherit parent permissions.
Allows for authentication at devices using AD credentials instead of local device
credentials via Web Jet Admin.
This firmware provides compatible HP and 3rd party solution software the ability
to establish HTTPs communications through the Jetdirect networking interface. The protocol and encryption parameters for these solutions are now configured using the Jetdirect networking settings, allowing access to updated Jetdirect protocols and encryption. This option is available to HP and 3rd party solutions using the HttpWebRequest Class connection methods.
This firmware addresses the following security issues: CVE-2005-4900– SHA-1 is
not collision resistant, allowing for context-dependent spoofing attacks. Cipher suites containing the SHA-1 hashing algorithm can now be disabled by setting
Encryption Strength to “High” within the “Mgmt. Protocols” page under the EWS
Networking tab. These cipher suites will remain enabled/active if Encryption
Strength is set to either “Medium” or “Low”. Note: For devices with Encryption Strength set to “High”, after installing this firmware the Encryption Strength setting will be changed to “Medium” to allow continued access to SHA-1 cipher suites.
Embedded JetDirect:
No new Updates
FIXES:
Base:
You may see a 49.00.FF error while performing a Direct TIFF print job. Setting Legacy resolution to 300 x 300 would not be retained after a power cycle. Print job size of 400mb or more not getting stored on the device disk memory. Disk resident fonts are not persistent after a power cycle. Localization issue with physical keyboard is resolved. Paper type is displayed incorrectly on control panel when using Chinese. Wrong translation of control panel buttons in Czech. Certain PDFs were not printed correctly, text on PDF was getting printed as blocks.
Improved Barcode scanning. Improvement in print performance of certain PDF files. Scanned output PDF documents fail PDF/1-b compliance with certain PDF test
tools.
You may see an Access Denied warning when trying to accesses the EWS even
prior to entering in a Password.
Under certain circumstances an SNMP GET request might receive a slow response
which exceeds all client retries and timeouts. Sometimes the printer would never respond. This fix ensures that these circumstances do not prevent timely SNMP responses.
Fixed an issue where Date and Time settings in EWS would not save when device
was set to a non-English language.
Intermixing of pages is seen when printing mopy jobs. Save To Network Folder application always prompts for password after successful
third party Kerberos authentication.
A 48.A1.01 error could be displayed if a Job Accounting solution was registered
as a 'critical client'. This error is normal in the case of lost communication to the solution server but was occurring inadvertently due to a corrupt job being tracked by the device.
Embedded EPrint setting intermittently shows state as "Not Supported" instead of
"Enabled/Disabled" via WJA.
Using the Pages per Sheet N-Up printing feature provided with any version of the
UPD PCL6 driver will give incorrect printed output.
You may see improvements printing certain fonts. After upgrading to Future Smart 3.8 firmware and performing a cold reset on the
MFP, ‘Remote Scan Request’ button no longer shows up on the Control Panel.
49.38.07 error is seen when printing certain jobs with "reverse page order"
setting enabled on a device without finisher.
PS Error seen when printing certain documents greater than 40 pages. Added a Web Service object for the "Security" -> "Web Scan Auto Capture Jobs:
Enable Remote User Auto Capture" feature which will allow Web Jet Admin to fleet manage this setting with XTP Tickets where reservation less scanning for Network TWAIN is required.
Event "31.03.34" will not be displayed in the event log. 49.4A.04 is seen when printing certain PDF files containing excessive numbers of
XObjects on one or more pages
Error 49.4A.04 is seen when reprinting certain jobs from Corel Draw. The PCL commands to call barcode fonts does not work when using asterisks 49.38.07 error is seen when printing certain PDF jobs in duplex. Removed possibility of a device hang that could occur during an HTTPS encrypted
scan to an aftermarket solution server destination.
Color mismatch while printing certain PDF documents and selecting the CMYK
profile in driver.
Device stops responding to SNMP requests when we go to Device tab in WJA. Address book search in Japanese for katakana-hiragana prolonged sound mark (-)
does not work well.
USB volume name is not getting displayed correctly in Korean and other 2 byte
languages.
Missing graphics on pages when printing certain PCL5 jobs. Improvements in small job print performance. The composition of PDF files can be unique to the application or MFP/MFD which
created it. Changes have been made to help increase the printing performance of several of these file types.
Recovered Ok and Cancel button functionality on physical keyboard when virtual
keyboard is disabled.
Digital Sending:
Intermittent send to folder failures due to dfs server referrals. In the previous firmware release, a feature was added to let administrators use the
Shared Folders (instead of the Personal Folders optionally) to allow end users to access their home folder this way. While configuring the feature in the Embedded Web Server worked as expected, an issue was discovered where configuring the same feature via Web Services (including future releases of Web Jet admin) were not resolving correctly for users at the control panel when they tried to use the feature. This is now fixed.
Fax:
When the user badges in with card authentication while an incoming fax is being
received, inactivity timeout doesn’t take effect thus not logging out the user.
Thumbnail resolution of the failed fax report has been improved.
Security/Authentication:
Resolved issue with Card Reader not responding intermittently with Card insert. Resolved issue where aftermarket authentication agents utilizing the OXPd protocol
could inadvertently remove guest permissions to tabs (e.g. the Information tab) on the EWS page.
"This firmware addresses the following security issue: CVE-2016-2183 – 3DES TLS/SSL Birthday Attacks on 64-bit Block Ciphers
(SWEET32) Vulnerability."
Re-added web services (removed in FS 3.8) to allow HP Jet Advantage Security
Manager to manage the state of the Information tab in the embedded web server.
Resolved redundant authentication prompts when accessing certain types of logs. Scan to network folder suddenly stops working for Windows 10 shares after
receiving Microsoft update 1703 or later.
This firmware addresses the following security issue: CVE-2017-2750 - Insecure
Solution DLL Signature Validation.
Added support for G&D FIPS-201 SIPR smartcards that are provisioned without
encipherment certificates.
When logging into the Embedded Web Server using Windows authentication, you
may not be able to see all the tabs or options that you have been granted access to.
This firmware addresses the following security issues: CVE-2017-13077:
Reinstallation of the pairwise encryption key (PTK-TK) in the 4-way handshake. CVE-2017-13078: Reinstallation of the group key (GTK) in the 4-way handshake. CVE-2017-13079: Reinstallation of the integrity group key (IGTK) in the 4-way handshake. CVE-2017-13080: Reinstallation of the group key (GTK) in the group key handshake. CVE-2017-13081: Reinstallation of the integrity group key (IGTK) in the group key handshake.
This firmware disables the "TFTP Configuration File" setting to prevent
unauthorized device resets.
Embedded JetDirect:
Fixed "IP Address/Subnet is out of range. Check the field. IP=x.x.x.x
Mask=x.x.x.x" error given when an IP address was entered with zero for the host number in the Access Control List.
Buffers expanded to hold large DNS responses (70+ records). Previously only
about 7 or 8 records were accepted.
Trying to connect via the FTP may fail with certain applications. Fixed an issue where Windows Authentication would hang the printer. Product was generating Certificate Signing Requests with version number other
than zero. RFC 2986 requires a version number of zero.
Product was generating Certificate Signing Requests with version number other
than zero. RFC 2986 requires a version number of zero.
Printer crashes with 81.09.00 Embedded Jetdirect Error message when user sets
Admin password from Telnet.
Under certain circumstances during initial power-on, the DCHP Discover message
is sent without a hostname (option 81). This fix ensures that option 81 is always present when applicable.
The password input for "Import Certificate and Private Key" has been expanded
beyond 16 characters.
Default name when saving a CSR (Certificate Signing Request) is no longer
"certificate.cer".
Under certain circumstances the certificate validity check performed during the IKE
portion of IPsec was done with the local printer time and not UTC time.
If a Jetdirect 2900w in installed and two different wired networks are connected to
the printer (one on the JD 2900w and one on the Jetdirect Inside connection), then it was possible (under certain circumstances) for the entire printer to become unresponsive.
This fix prevents the printer from resetting the connection during an intervention
event (paper out, paper jam, etc.) when printing using the LPD protocol.
Loading...
+ 42 hidden pages