HP 9200C Digital Sender Firmware Readme
HP 9200C Digital Sender Firmware Readme
IMPORTANT NOTE:
This firmware version installs code signing verification functionality.
Firmware signed by HP guarantees the integrity and authenticity of the
code; meaning that the firmware was produced by HP (authenticity) and
that the firmware has not been altered in any way (integrity).
ATTENTION: Once this firmware has been applied to your digital sender it
CANNOT BE DOWNGRADED to a previous unsigned version of firmware.
This document contains information for the firmware revision 20141218 09.271.3,
HP Fleet Release Designation Signed CPE 11.2.2, and any previous revisions if
applicable.
Contents
Description
Who needs this firmware?
Determining the current version level of your firmware
Enhancements and Fixes provided with this firmware revision
Description
This Readme file provides specific installation instructions and other information you should know
before you perform a firmware update for your HP 9200C Digital Sender.
This document provides specific update, installation and troubleshooting information. For
additional information on the device features, refer to the Documentation CD that came with your
HP 9200C Digital Sender.
Hewlett Packard provides firmware updates for your HP 9200C Digital Sender periodically
through its supported lifecycle. A firmware update may be necessary if it is determined that
you may benefit from the resolution of any issue that is documented below. Firmware
updates are available on the HP support web site.
The Configuration Page will be displayed on the front panel. Eight (8) lines beneath the
Device Information heading, Firmware Datecode will be displayed. The firmware date
code will look something like this: 20070606 09.081.4
ENHANCEMENTS:
FIXES OR IMPROVEMENTS:
Authentication/Security:
This firmware addresses the following security issue:
CVE-2014-0224 - SSL/TLS MITM vulnerability
CVE-2014-3566 SSLv3 POODLE (Padding Oracle on Downgraded
Legacy Encryption) Vulnerability
IMPORTANT NOTE:
This firmware version installs code signing verification functionality.
Firmware signed by HP guarantees the integrity and authenticity of the
code; meaning that the firmware was produced by HP (authenticity) and
that the firmware has not been altered in any way (integrity).
ATTENTION: Once this firmware has been applied to your digital sender it
CANNOT BE DOWNGRADED to a previous unsigned version of firmware.
This firmware is a signed version of the previous release (CPE 11.2). It contains
no other enhancements or fixes.
Enhancements
No new functionality or features are provided by this firmware release
Fixes or improvements
Fixes or improvements for the following issues are provided by this firmware
release:
Autosend and Embedded Email alert functionality may not work properly
on servers where SMTP Authentication is configured.
Embedded Send to Network Folder jobs could fail for users with
passwords containing ISO Latin-1 characters
Enhancements
No new functionality or features are provided by this firmware release
Fixes or improvements
Fixes or improvements for the following issues are provided by this firmware
release:
The device priority for name resolution transport (DNS or WINS) can be
configured for embedded Send to Network Folder
Excessive DNS traffic may be generated when the SMTP server under
Digital Sending -> Email Settings is configured by hostname instead of IP
address
The MFP User Credential form is now viewable for workflows configured
in HP MFP Digital Sending Software
Some embedded Send to Email digital send jobs may fail when configured
to use SMTP authentication and custom message body text is specified
When synchronizing with a network time server, the printer clock now copies the actual
time from the server. Previously it only corrected for drift within a small time range.
The configurable maximum attachment size for embedded send to email has been
increased
A change in the File Erase Mode may not be updated in the EWS without a power cycle
Digital Send jobs could have missing scan pages if a paper jam occurred during the scan
Boot-up hangs may be seen in the 6/C and 6/E process on machines more heavily used.
The Event Log may also show a 49.1D34 error.
After performing restore factory settings the Device Name is not changed to Factory
Default
Will not interoperate with Win2008 Release 2, receives Failure 823 error response
User is not prevented from installing identity certificate where a CA certificate is required
Authentication could fail if the user password contained the Euro character
A 49.4C02 error could occur when applying Kerberos configuration settings through HP
MFP Digital Sending Software
The Asset Field found in the products EWS (Embedded Web Server) which is used for
assigning Asset numbers to a device has been changed to allow support for more
characters.
LDAP authentication (Simple or Simple over SSL) could fail with an insufficient privileges
error in some configurations
A 49.4C02 error may be seen when "Disable Reverse DNS Lookups" is selected under
Settings -> Kerberos Authentication -> Advanced
There is now the option to specify a primary and backup LDAP server under Settings ->
Kerberos authentication. This feature reduces authentication failures related to
hostname resolution issues during the LDAP portion of the authentication cycle
Embedded send to network folder digital send jobs would fail when NTLMv2 is selected
as the password encryption method
The digital send log would incorrectly designate some failed digital send jobs as
successful
A 49.00FF error could be generated after an abnormal communication break between the
MFP and its configured DSS server
Embedded send to network folder digital send jobs may fail to create XML metadata files
Embedded send to network folder digital send jobs may generate metadata files with
truncated output
A 49.4C02 error may be seen when configuring Kerberos authentication through HP MFP
Digital Sending Software
A 49.4C02 error may be seen when trying to login after a power cycle or firmware update
when the MFP is configured for sign in at home screen
When DNS responses are returned as a stream (TCP) rather than a datagram (UDP),
JDI would wait forever for more data
When Web Jetadmin is on a different subnet than the printer and establishes an HTTPS
connection to query status, the JDI would mishandle the connection and hang
Some Embedded Send to Network Folder jobs would result in corrupt PDF output in the
destination directory
The configured time server set under Settings -> Date & Time -> Clock Drift Correction
would intermittently change from the configured setting.
When "Disable Reverse DNS Lookups" is enabled under Settings -> Kerberos
Authentication -> Advanced, the MFP could experience a 49.4C02 error
A potential for the Kerberos configuration on the MFP to become corrupt could generate
a 49.4C02 error on the MFP
Current firmware revisions included in this firmware bundle (Version 09.141.4)
Kerberos Authentication now supports the ability to specify multiple Kerberos domains
Send to FTP can now be configured to add a timestamp to the destination file name
Send to FTP can now be configured to disable the access verification (send FTP test file)
of the destination directory for every job
Under rare circumstances a user may not be able to initiate a send to FTP job if one is
already in progress
Embedded Send to Network Folder has added support for Distributed File System (DFS)
folder destinations
When the device is managed by HP Digital Sending Software 4.11 (or higher) it is now
possible to have jobs sent to email and folder OCR processed
Kerberos authentication fails when public credentials are used and Simple is configured
as the LDAP server bind method
MFPs could pass credentials multiple times when performing send to network folder
Use Defaults button in EWS Custom DST settings does not work.
SMTP server could be configured with a port number of 0 for Embedded Send to Email
The column name "Severity" is missing in the digital send log page of the embedded web
server
The device may display "Processing Digital Send job" indefinitely when sending jobs
through HP Digital Sending Software
The device may display "Digital Send Server not responding" when trying to scan to any
destination and the device is managed by HP Digital Sending Software
PML becomes non-responsive on MFP. MFP embedded web server does not appear;
only JetDirect embedded web server available.
Authentication Manager help page incorrectly displayed DSS Secondary Email as DSS
Secure Email
The help page under Settings>Security of the embedded web server has been modified
to better reflect product functionality
The ability to specify the number of visible digital send log entries was not available under
the Digital Sending>Log section of the Embedded Web Server.
When attempting embedded send to network folder, the MFP will become unresponsive if
the server hosting the destination directory is unavailable
In the past two FW revisions, an RFU did not automatically power cycle the device if the
PJL password was set. The FW upgrade did not happen until a manual power cycle.
When configured for LDAP Authentication, authentication can fail if the entered username
contains diacritic characters (For example , , ).
EWS Time Zone display Strings are displaying Junk characters for German and
Norwegian
Improper capitalization of some words in the Embedded Web Server under Digital
Sending/Addressing
Kerberos Authentication could successfully authenticate a user if date and/or hour on the
MFP were not correct in relation to the Kerberos authentication server
A 49.4C27 error can occur when LDAP Authentication is selected as the authentication
method and the user enters their email address in the username field and leaves the
password field blank
A security enhancement in a previous release may prevent the automatic power cycle at the end
of an RFU (Remote Firmware Upgrade). The firmware will not actually upgrade until the unit is
power cycled, although it will display Receiving Upgrade during transmission. This can be
avoided by clearing the PJL password prior to sending the upgrade, or by manually power cycling
the unit after sending the RFU file.
Front Panel Configuration Page view has incorrect translation for text of "Configuration
Page" in Czech
Digital Send client application may hang when you press the RESET or STOP buttons
after initiating a scan.
The firmware release prior to this one added the ability to automatic adjust the clock for
daylight saving time. With that release, if the MFP is turned off for the entire duration of
the time change (turned off before 2:00 AM, and on after 3:00 AM in the U.S.) the clock
will not adjust.
You may received an error while trying to delete an email distribution list which has long
entries.
Excessive DNS traffic when resolving LDAP, SMTP, and KDC server IP addresses may
cause the MFP to become slow or unresponsive
When sending an email, the time on the attached image's header may be ahead by one
hour of when the email is sent.
The Date/Time and Time Zone wizards no longer appear after a firmware upgrade, or
with new units. This allows complete remote management. Users must remember to set
the date, time, time zone, and DST behavior to insure correct time settings.
Setting the Compression Mode does not have any effect for Scan to Local Folder jobs.
NOTE: This firmware release has a new feature to automatically adjust for Daylight Saving Time.
After installation of the firmware, the Digital Sender may have a control panel screen prompt for
time zone or date and time. These screens will remain on the Digital Sender until action is taken
by the user.
No support for localized characters in the COMPANY NAME field of the FAX HEADER in
the EWS (only ASCII characters 32 to 127).
3rd party solutions developed using Simple Document Capture (SDC) will now work
correctly when the device is added to the Digital Sending Software (DSS).
MFP will roll to a different NTP server when configured by hostname if named server is not
available.
Long email addresses are truncated when they are added to the local address book. The
limit is now extended to 64 characters.
Event log may show values above 59 seconds instead of rolling to minutes.
Blank passwords not allowed for Embedded LDAP Authentication.
Possible 49.4c02 error while using Embedded send-to-folder.
Embedded LDAP over SSL Authentication does not work in Windows 2000 and Windows
2003 environments.
Homescreen image may be missing from the EWS Authentication Manager Help when
viewed through a Mozilla Firefox web browser.
Setting "Allow Use of Digital Send Service" to OFF clears default Subject for send to email
Time server IP address lost on FW upgrade
Now allow Web Jetadmin to set the clock forward or backward for daylight saving time
adjustment.
Embedded Send Network Folder - Add support for forward slash (/) characters in a UNC
path.
User PIN Authentication added.
Adding User Principle Name support to Embedded Kerberos Authentication.
Added Simple Address Book for fax and email. This feature can be managed from the
devices embedded web server.
Added the ability to set a Sleep time within the EWS during each day of the week. This is
the opposite setting a wake time in the morning.
Warning added when requesting Secure Storage Erase.
Administrator may restrict send-to-email to only send to addresses found in the Address
Book. To enable this, select "Use Address Book entries only" on the Email Settings page of
the MFP embedded web server.
Authentication Manager settings are now saved during a disk init or Secure Storage Erase
The following issues are resolved by this firmware release (20070213 09.071.8):
User-specified filename may be reset after selecting Folder Destination for Embedded
Send to Network Folder.
DSS Send to Network Folder file size setting may not work properly
The "date" field is missing in the SMTP header.
Intermittent loss of "Send to Network Folder" Jobs.
Embedded Kerberos Authentication will not resolve passwords with European characters.
Time stamp information missing from XML data.
LDAP performance may be slow In Enterprise Directories.
Wording changes on Secure Storage Erase selection in EWS.
Possible errors importing CSV address book entries.
Scan-to-local file fails when network not detected on bootup.
Possible "Processing Job" hang with send-to-email when there are delayed responses from
the SMTP server due to long distance or slow network.
Disk Initialization Clears Settings for Digital Send.
LDAP performance may be slow in Enterprise Directories
More complete user information is included in the log file for send-to-email jobs.
Front panel progress bar added for firmware upgrades.
Now log 49.FF81 errors to the device Event Log for better tracking of hard disk related
issues.
Added the ability to Backup and Restore the Fax Address Book & Fax Speed Dial list.
Firmware upgrades are now logged to the device Event Log.
Firmware version now included in all Event Log entries.
Added additional metadata keys to support 3rd party job accounting solutions.
New security page added to Embedded Web Server.
The following issues are resolved by this firmware release (20060914 09.062.0):
The following issues are resolved by this firmware release (20060411 09.051.6):
When performing an initialization of compact flash other than the boot flash, the compact
flash device does not have the file system automatically re-initialized when the printer
reboots to Ready.
MFP/Digital Sender displays a 49 SVC error while the user is configuring scan settings for
send-to-folder.
At the device front panel, a Help popup message is not cleared although the user navigated
away from it using the "back" button.
MFP/Digital Sender fails with 49 SVC error during multiple device upgrade from Web
JetAdmin.
For a short time after bootup, a user can populate the Email FROM: address even though
"Prevent Device user from changing the Default From: Address" is checked in the
Embedded Web Server.
MFP/Digital Sender front panel might lock up if front panel buttons are selected
immediately after an authentication failure.
MFP/Digital Sender fails with 49 SVC error when a very long name is used for SMTP
gateway at the front panel.
In the MFP/Digital Senders embedded web server, the 'Send to Folder Network Settings'
title is not localized in languages other than English.
Subsequent scan jobs may hang as a result of improper handling of an error event such as
an ADF Jam error.
For send-to-folder, using the "create directory based on username" feature, scan files may
become lost when the document name is not set to a unique value.
If the MFP/Digital Sender is used with HP MFP Digital Sending Software 4 (DSS4), and
authentication is not enabled within DSS4, authentication may get enabled in the upgrade
to the December 2005 version of firmware. Because authentication is not configured, users
will not be able to login and use digital sending features.
In the MFP/Digital Senders embedded web server, "Send E-mail" and "Send Fax" strings
are incorrect for French.
Users are not prompted to authenticate when accessing Autostore-provided icons at the
MFP/Digital Sender front panel even though Authentication has been configured through
DSS4. Upgrading to the December 2005 firmware version caused Authentication to
become disabled in the devices Authentication Manager requiring it to be reconfigured
through the devices embedded web server.
For the French language, the embedded web server tab for embedded send to network
folder is incorrectly labeled as Fax instead of Folder.
Pressing the Authentication Manager Apply button multiple times puts the device into a
Device Busy State, resulting in slow device performance and some inaccessible device
functions.
For send-to-folder, invalid characters (\, "", ;, etc....) are allowed for filenames after the user
enters special or ALT characters.
Scan-to-Filenet workflows have invalid metadata as a result of extra spaces inserted at the
head of metadata strings when values are selected from a string list.
MFP/Digital Sender posts a 49 SVC error on the front panel if the IP address was manually
changed multiple times in quick succession via the embedded web server.
PJL disk commands are accessible to unauthenticated users causing potential security
vulnerability.
MFP/Digital Sender fails with a 49 SVC error after a power cycle when Authentication
Manager "Log In At Walk Up" is set to "LDAP".
Special characters (\, "", ;, etc....) are allowed in the embedded web server fields for LDAP
server and SMTP gateway.
A Warming Up message is posted to the front panel continuously if the scanner lid was
opened while the device was in sleep mode and if the lid was closed and the start button
was pressed before the device came to a Ready state. The device must be power-cycled to
clear the Warming Up message.
For the Spanish language, at the device front panel, if you navigate into DIAGNOSTICS,
CONTROL PANEL, LEDs, you'll see a set of buttons. Two of the buttons to test are "Start
Green LED" and "Start Amber LED". Both buttons read "Start Green LED", although the
lower right button should say "Start Amber LED".
Some menu items are available at front panel without the user providing valid credentials
per "Log In At Walk Up" authentication.
The following issues are resolved by this firmware release (20051210 09.041.7):
The following issues are resolved by this firmware release (20050914 09.031.8):
Added support for SSL over LDAP. This support is provided via the JetDirect interface and
provides encryption for embedded LDAP Addressing as well as embedded LDAP
authentication
Added support for more "threads" in support of third party solutions.
Now show settings for Secure File Disk Erase on the Configuration screen.
Added ability for 9200C to identify itself to DSS for the purpose of auto-generating 9200C
licenses.
Added embedded send-to-folder.
Changed the layout of the Turkish Q keyboard.
Added usability when scrolling through the product menus.
The following issues are resolved by this firmware release (200500520 09.022.1):
IMPORTANT NOTE: With this firmware upgrade (09.011.5) we are upgrading many of the sub-
components of your product. As a result of this, it may be necessary to manually power-cycle the
product at the end of the upgrade process. Programming some sub-component may take some
additional time during the upgrade process, the message "To continue power off then on" may be
displayed on your product's Control Panel if your product's subcomponents require the upgrade.
[Note, some newer products may already have upgraded subcomponents.] At that time please
toggle the ON/OFF power switch to OFF, then ON. The product will then power up in its normal
sequence.
It is extremely important NOT to power OFF the product in the middle of the upgrade process.
New firmware for the MFP's Scanner/Controller PCA (corrected situation where premature
"ADF Output Bin Full" messages occurred.)
New hp Embedded JetDirect firmware included in this bundle.
Web Jetadmin unable to complete a remote firmware upgrade with control panel locked.
This revision changes how future upgrades will be handled, but upgrading to this revision
will still require a manual reboot.
Incorrect page counts in XML data (for Instant Support)were recorded.
Show Configuration menu did not display DIMMS slot information.
The following issues are resolved by this firmware release (20050125 09.011.5):
Fixed an issue where an LDAP hostname was not being resolved in the same way as a
SMTP hostname.
Fixed an issue where Active Directory was loosing a person object.
Changed the display message E-mail "Not Available" to "Not Configured".
Fixed an issue where 75dpi E-mails were being sent as 150dpi with a 75dpi header.
Fixed an issue where multiple copies of the same e-mail were being sent.
Added the functionality of automatically copying the sender of an e-mail, a direct copy of
the e-mail that was sent.
Fixed an issue where LDAP lookup no longer functions after executing a Find Send
Gateways without network connectivity.
Installation Instructions
NOTE: Please be aware that an update in some circumstance may require ten minutes or more
to complete.
Upgrading firmware to a single device
You can send an .RFU update to a device at any time; the device will wait for all I/O channels to
become idle before cycling power.
HP recommends printing a configuration page prior to performing any firmware update so that the
update can be verified by checking version numbers. To print the configuration page:
1. Open a web browser and type http://www.xxx.yyy.zzz where www.xxx.yyy.zzz is the
IP address of the device.
2. On the Information tab, select Configuration Page from the left vertical menu.
3. Within the web browser, select File, Print in order to print the configuration page.
The elapsed time for an update depends on the I/O transfer time as well as the time that it takes
for the device to reinitialize. The I/O transfer time will depend on a number of things including the
speed of the host computer sending the update and the I/O method (parallel, or network).
NOTE: When the upgrade process has completed the HP 9200C Digital Sender will reboot. Once
the device is back online view the Configuration Page to verify that the new firmware has been
installed.
NOTE: Make sure that the device is not in Powersave mode. Also make sure that any error
messages are cleared from the control panel display.
1. Insure the "Enable folder view for FTP sites" box is checked on the Advanced tab under
Tools/Internet Options.
2. Open the browser and type ftp://192.168.0.90 (this is an example).
3. Use the TCP/IP address of the device from step 1). The display will show a folder
labeled Port 1.
4. Open Windows Explorer and navigate to the directory where the .rfu file is located.
5. Drag the rfu file from Windows Explorer to the Port 1 folder in step 2.
6. Verify the devices control panel displays Performing Upgrade
NOTE: When the upgrade process has completed the HP 9200C Digital Sender will reboot. Once
the device is back online view the Configuration Page to verify that the new firmware has been
installed.
NOTE: Make sure that the device is not in Powersave mode. Also, make sure that any error
messages are cleared from the control panel display.
put C:\9200C\9200C_FW.RFU
8. Press ENTER.
9. Type "bye" at the command prompt once the download process begins and the firmware
is updated on the device
10. Press ENTER to exit the FTP session.
NOTE: When the upgrade process has completed the HP 9200C Digital Sender will reboot. Once
the device is back online, print a Configuration Page and verify that the new firmware has been
installed.
NOTE: Make sure that the device is not in Powersave mode. Also, make sure that any error
messages are cleared from the control panel display.
1. Open the Terminal application found in the Utilities folder; a terminal window will appear.
2. After the % symbol enter following information:
The terminal window will list that you are connected to the device and the JD FTP Server
is Ready.
3. Press the enter key twice. Both the Username and Password can be blank
4. Enter the following information after ftp>:
Note: To ensure that the entire proper path to the .rfu file is placed in the put command, type in
put and a space, then click and drag the .rfu file on to the terminal window. The complete path
to the file will be placed after the put command.
NOTE: When the upgrade process has completed the HP 9200C Digital Sender will reboot. Once
the device is back online view the Configuration Page to verify that the new firmware has been
installed.
4. Once you have selected your list or group that your device is located in highlight the
device(s) you want to update from populated Device List or Device Groups List on
the right hand section of the window.
5. Select "Update Printer Firmware from the Device Tools drop-down on the top right
hand section of the window.
6. Click the "Browse" button and locate the correct firmware image.
7. Select the file and Click on the "OK" button.
8. Select the "Update" button, found in the lower right portion of the window to start the
update process.
NOTE: Do not turn device off during the update process! When the update process is complete,
the HP 9200C Digital Sender will automatically reboot. If the firmware update process fails, Web
JetAdmin will provide notification with a page (screen) of information regarding the reason(s) for
failure. A link will be provided to attempt the process again.
NOTE: When the upgrade process has completed the HP 9200C Digital Sender will reboot. Once
the device is back online view the Configuration Page to verify that the new firmware has been
installed.
Troubleshooting a Firmware Update
The following table lists causes and results for possible interruptions to the firmware update.
CAUSE RESULT
Stop or Reset button selected from the device No upgrade has occurred.
control panel during upgrade. Resend upgrade
Break in I/O stream during send No upgrade has occurred.
(for example, parallel cable removed) Resend upgrade.
Power cycle during RECEIVING UPGRADE No upgrade has occurred.
Resend upgrade.
Power cycle during UPGRADING DEVICE Resend upgrade.
Power cycle during WAIT FOR DEVICE TO Upgrade completed.
REINITIALIZE
The following table lists possible reasons for the failure of a Remote Firmware Update and the
corrective action to take for each situation.
System Requirements
The RFU upgrade requires a network, USB port connection
Technical Assistance
Some of the services below are provided for the United States only. Similar services to those
listed below are available in other countries. See your HP 9200C Digital Sender user guide or
call your local authorized HP dealer.
Customer Support
See your HP 9200C Digital Sender user guide or call your local authorized HP dealer.
Internet
An anonymous FTP library service is available worldwide for around-the-clock-access to drivers
and technical support information for HP peripheral and computer products. Please note that
paths may change without notice. Access the Internet or FTP address and use the menus to
locate the software or support of your choice.
Additional Information
Refer to your devices user guide for additional methods of obtaining software and support
information.
Legal Statements
Trademark Notices
MS-DOS, Windows, Windows 2000, Excel 2000, Microsoft Office, Windows Server 2003,
Outlook, PScript and Internet Explorer are registered trademarks of Microsoft Corporation in
the United States and/or other countries.
PostScript is a registered trademark of Adobe Systems Incorporated.
Quark and QuarkXpress are trademarks of Quark Inc.
Mac, Macintosh and Safari are registered trademarks of Apple Computer, Inc.
The Adobe logo, Acrobat, the Adobe PDF logo, Distiller, and Reader are either registered
trademarks or trademarks of Adobe Systems Incorporated in the United States and/or other
countries.
Novell is a registered trademark of Novell, Inc., in the United States and other countries.
Netscape Navigator, is a registered trademark of Netscape Communications Corporation in
the United States and other countries.
The information contained herein is subject to change without notice. The only warranties for HP
products and services are set forth in the express warranty statements accompanying such
products and services. Nothing herein should be construed as constituting an additional
warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.