compliantservicecontrolmanager

HPWebJetadmin10.
4InstallationandSetupGuideCopyrightandLicenseCopyright2021HPDevelopmentCompany,L.
P.
Reproduction,adaptation,ortranslationwithoutpriorwrittenpermissionisprohibited,exceptasallowedunderthecopyrightlaws.
Theinformationcontainedhereinissubjecttochangewithoutnotice.
TheonlywarrantiesforHPproductsandservicesaresetforthintheexpresswarrantystatementsaccompanyingsuchproductsandservices.
Nothinghereinshouldbeconstruedasconstitutinganadditionalwarranty.
HPshallnotbeliablefortechnicaloreditorialerrorsoromissionscontainedherein.
PublicationDate:02/2021TrademarkCreditsMicrosoftandWindowsareeitherregisteredtrademarksortrademarksofMicrosoftCorporationintheUnitedStatesand/orothercountries.
VMwareisaregisteredtrademarkofVMware,Inc.
TableofcontentsInstallandSetUpHPWebJetadmin1SystemRequirements1HPWebJetadminServerApplication1HPWebJetadminClientApplication2VirtualMachine(OptionalPlatform)3ServerHardware3ClientHardware4Database4Network5InstallationsandUpgrades5ClientApplication5SupportedDevices5HostAccess6Client/ServerSecurity6InstallHPWebJetadmin6InstallHPWebJetadminfromtheCommandLine7InstallHPWebJetadmininBlockingMode9Post-installationTasks9RecommendedInitialConfigurationSteps10ConfiguretheHPWebJetadminServicetoRestartAutomatically10ConfigureHPWebJetadminandtheHPWSProAdapterServicetoBindtoaSpecificNIC11ConfiguretheHPWebJetadminClientConnectionandHPWSProAdaptertoUsetheCorrectIPAddress11HPWebJetadminAlertsandSNMPTrapsRegistration12HPWebJetadminWebService13Ports14ImplementSSL16EnableSecureSocketsLayer(SSL)16ImportantPointstoRememberWhenImplementingSSL17InstallaCertificateandEnableHTTPSontheServer18UseaSeparateInstanceofMicrosoftSQLServer18DeploytheSmartClient18ChangetheDefaultHTTPorHTTPSPortfortheHPWebJetadminSmartClientApplication19RuntheSmartClientApplicationinaWorkgroup19StartanHPWebJetadminClientSession20ConfigurethePortforEventNotifications21ENWWiiiConfiguretheFirewallSoftware21RestarttheHPWebJetadminServiceManually22BackUpandRestoreHPWebJetadmin22UpgradeHPWebJetadminWhentheHPWJAServiceRunsasaNetworkService(Default)22UpgradeHPWebJetadminWhentheHPWJAServiceRunsasaUserAccount23ImportFeaturePacks24EnableFIPSontheHPWebJetadminServer26UninstallHPWebJetadmin31ManageLicenses32AppendixAEnd-UserLicenseAgreement33Index34ivENWWInstallandSetUpHPWebJetadminWhenyouinstallHPWebJetadmin,youonlyneedtoinstallitononehardwareplatformthatmeetstherecommendedminimumrequirements(SystemRequirementsonpage1)andiscentrallyaccessibleonthenetwork.
YoumaythenaccessthesoftwarefromanysupportedWindowsdesktoponthenetworkandmanageallsupportednetwork-connectedperipherals.
HPWebJetadminoffersseveralinstallationoptions.
IfyouhaveinstalledapreviousversionofHPWebJetadmin,youcanchoosetoupgradethepreviousversionorinstallanewcopy.
UpgradinganolderversionpreservesyoursettingsfordiscoveryoptionsandgroupsandismostlikelythebestchoiceifyouhavealreadybeenusingHPWebJetadmin.
EveryreleaseofHPWebJetadmincontainsnewfeaturesandimprovementstoexistingfeatures.
InanenvironmentwhereapreviousreleaseofHPWebJetadminisintegratedintocriticalbusinessoperations,HPrecommendsthatyoufullytestandqualifyanewreleasebeforeimplementingthatreleaseintofullproduction.
ReadallofthesupportmaterialsbeforeyouimplementHPWebJetadmin.
ForcurrentinformationaboutHPWebJetadmin,seetheLateBreakingNewsforHPWebJetadmin10.
4andtheHPWebJetadmin10.
4SupportedDevicesReadme.
ThesedocumentsareavailablefromtheHPWebJetadminsupportpage(clicktheflagicononthebottomofthepage,andthenselectyourcountry/region).
SystemRequirementsHPWebJetadminincludesnetworkdevicecommunicationprotocolsandinternalcomponentsthatmanageapplicationanddevicedata.
ThesecomponentsextendthecapabilitiesofHPWebJetadminandimproveusageandperformanceindevicelists,columns,andfilteringfunctions.
HPWebJetadminissupportedonplatformsthathaveMicrosoftWindowsand.
NETFrameworkhigh-priorityupdates.
Duringeachdevelopmentcycle,HPregularlytestsHPWebJetadminonplatformsthathavethecurrentMicrosoftupdates.
HPinvestigatesallpost-releasesoftwareissuesthatcustomersreport.
Formoreinformationaboutthecurrentsoftwareissues,seetheLateBreakingNewsforHPWebJetadmin10.
4.
ThisdocumentisavailablefromtheHPWebJetadminsupportpage(inEnglish).
HPWebJetadminrequirestheWindowsHTTPSSLservice.
HPWebJetadminusesSSLtocommunicatewithnewerHPdevicesthroughport8050.
HPWebJetadminServerApplicationSupportedoperatingsystemsMicrosoftWindowsServer2019MicrosoftWindowsServer2016MicrosoftWindowsServer2012R2MicrosoftWindowsServer2012MicrosoftWindowsServer2008R2SP1ENWWSystemRequirements1MicrosoftWindows10(64-biteditiononly)MicrosoftWindow8.
1(64-biteditiononly)MicrosoftWindows7SP1(64-biteditiononly)FormoreinformationaboutaspecificMicrosoftoperatingsystem,gotowww.
microsoft.
com.
NotesHPnolongersupportsortestsHPWebJetadmininstallationsonMicrosoftoperatingsystemsthatwerereleasedpriortotheoperatingsystemsthataresupportedforthecurrentrelease.
BeginningwithHPWebJetadmin10.
3SR7,Microsoft.
NETFramework4.
5orlaterisrequiredbecauseHPWebJetadminsupportsTransportLayerSecurity(TLS)1.
1and1.
2.
Someoftheoperatingsystemsthatthecurrentreleasesupportsalreadyshipwith.
NETFramework4.
5orlater.
LocaladministratoraccessisrequiredtoinstallorupgradeHPWebJetadmin.
TheSQLExpresssilentinstallerrequiresthattheaccountyouusetoinstallHPWebJetadminhasAdministratorsrightsforthefollowingpoliciesinLocalSecurityPolicy>LocalPolicies>UserRightsAssignment:–Backupfilesanddirectories–Debugprograms–ManageauditingandsecuritylogBydefault,thelocalAdministratorsgrouphastheserights.
However,yournetworksecurityteammighthavechangedthem.
ProductionHPWebJetadmininstallationsarerestrictedtodedicatedhosts.
RunningHPWebJetadminonsystemsthatarealsomailservers,DNSservers,domaincontrollers,andsoonisnotsupported.
ThesystemaccountmustusealanguagethattheHPWebJetadmininstallersupports.
FormoreinformationaboutchangingthelanguagefortheWelcomescreen,newuseraccounts,andsystemaccounts,seethedocumentationfortheversionofMicrosoftWindowsthatyouareusing.
HPWebJetadminClientApplicationSupportedoperatingsystemsMicrosoftWindowsServer2019MicrosoftWindowsServer2016MicrosoftWindowsServer2012R2MicrosoftWindowsServer2012MicrosoftWindowsServer2008R2SP1MicrosoftWindows10MicrosoftWindows8.
1MicrosoftWindows7SP1FormoreinformationaboutaspecificMicrosoftoperatingsystem,gotowww.
microsoft.
com.
2InstallandSetUpHPWebJetadminENWWNotesBeginningwithHPWebJetadmin10.
3SR7,Microsoft.
NETFramework4.
5orlaterisrequiredbecauseHPWebJetadminsupportsTransportLayerSecurity(TLS)1.
1and1.
2.
Someoftheoperatingsystemsthatthecurrentreleasesupportsalreadyshipwith.
NETFramework4.
5orlater.
VirtualMachine(OptionalPlatform)RecommendedrequirementsHPrecommendsthefollowingvirtualizationsolutions:VMwareESXMicrosoftHyper-VNotesForaVMwareserver,thevirtualmachinenetworkmustbesettobridgedtofacilitateHPWebJetadmincommunications.
ItisveryimportanttoconfigureVMwaresothatitsguestorvirtualsystemshaveenoughresourcestosupportHPWebJetadminandMicrosoftSQLServer.
Toensurethattheappropriateresourcesareprovisioned,seethesupportdocumentationfortheversionofVMwareyouareusing.
ServerHardwareRecommendedrequirementsHPrecommendsthefollowinghardwareconfigurationfortheserver:4ormoreprocessorcores2.
8GHzorhigherprocessorspeed4GBormoreofRAM4GBofavailablestorageMinimumrequirementsAlthoughyoucanusethefollowinghardwareconfigurationfortheserver,HPdoesnotrecommendthatyouuseitforproductioninstallations.
HPdoesnottestHPWebJetadminonthishardwareconfigurationand,therefore,cannotguaranteetheresults.
2processorcores2.
33GHzprocessorspeed5GBofRAM(2GBisrequiredfortheHPWebJetadminService,and2GBisthedefaultSQLmemoryreservation)HPWebJetadminusesavalueof3,072MBtoqualifyasystemashaving3GBofRAM.
4GBofavailablestorageENWWSystemRequirements3NotesRecentsoftwareimprovementshaveincreasedresourcecapacityrequirements.
HPstronglyrecommendsthe64-biteditionsofWindowsand4GBormoreofRAMforproductionHPWebJetadmininstallations.
Storagerequirementsvarydependingontheimplementation,database,andmigrationfrompreviousversions.
NTFSistheonlysupportedfilesystem.
IftheHPWebJetadmininstallerdeterminesthatlessthan1GBofRAMisinstalled,theinstallerdisplaysamessagestatingthat3GBofRAMisrequired.
ClientHardwareRecommendedrequirementsHPrecommendsthefollowinghardwareconfigurationfortheclient:PCwith2.
4GHzprocessor64-bitsystemwith4GBofRAMClientdisplaywithaminimumresolutionof1024x768OptimizedforNormalfontsizeDefaultDPIonlyMinimumrequirementsAlthoughyoucanusethefollowinghardwareconfigurationfortheclient,HPdoesnotrecommendthatyouuseitforproductioninstallations.
HPdoesnottestHPWebJetadminonthishardwareconfigurationand,therefore,cannotguaranteetheresults.
PCwith1.
8GHzprocessor32-bitor64-bitsystemwith2GBofRAMClientdisplaywithaminimumresolutionof1024x768OptimizedforNormalfontsizeDefaultDPIonlyDatabaseFornewinstallationsofHPWebJetadmin10.
4SR8orlater,theinstallationpackageautomaticallyinstallsthedatabaseforMicrosoftSQLServer2012ExpressSP4(productversion11.
0.
7701.
0).
ExistinginstallationsofHPWebJetadminpriorto10.
4SR8andinstallationsthathavebeenupgradedto10.
4SR8orlaterusethedatabaseforMicrosoftSQLServer2008Express(productversion10.
00.
2531.
00).
SQLExpress2012SP4doesnotsupportTransportLayerSecurity(TLS)1.
2.
Formoreinformation,seetheFIX:YoucannotusetheTransportLayerSecurityprotocolversion1.
2toconnecttoaserverthatisrunningSQLServer2014orSQLServer2012documentontheMicrosoftsupportpage.
NOTE:HPsuccessfullytestedHPWebJetadminwithMicrosoftSQLServer2016.
4InstallandSetUpHPWebJetadminENWWTIP:FormoreinformationaboutconfiguringHPWebJetadmintouseaseparateMicrosoftSQLinstance,seetheUsingMicrosoftSQLServerwithHPWebJetadminwhitepaper.
ThiswhitepaperisavailablefromtheHPWebJetadminsupportpage(inEnglish).
NetworkTheHPWebJetadmininstallerrequiresoneactiveIPv4connection.
IfanactiveIPv4connectionisnotavailable,theinstallerfails.
ForfirmwareupgradeswithHPWebJetadmin,aminimumbandwidthof1MB/sisrequired.
Iftherearemultipledevicesupgradingatthesametime,thentheminimumbandwidthof1MB/swillbeequaltothenumberofconcurrentfirmwareupgrades.
Forexample,foursimultaneousupgradesrequiresatleast4MB/s.
InstallationsandUpgradesLocaladministratoraccessisrequiredtoinstallorupgradeHPWebJetadmin.
ClientApplicationTheHPWebJetadminclientapplicationrequiresasupportedwebbrowserandadisplaywithsupportedspecifications.
Thefollowingaretherequirements:MicrosoftInternetExplorer8,9,10,or11MicrosoftEdgeversion87.
0.
664.
60GoogleChromeversion89.
0.
4356.
6andlaterNOTE:TheMeta4ClickOnceLauncherextensionforChromeisrequired.
Toinstallthisextension,gototheChromewebstore.
Displaywithaminimumresolutionof1024x768NotesFormoreinformationabouttherequirementsandlimitationsofthewebbrowseryouareusing,seethesupportdocumentationfortheWindowsoperatingsystemyouareusing.
AdministratoraccessisnotrequiredtoruntheHPWebJetadminclientapplication.
Amaximumof15concurrentclientsessionsareallowed.
SupportedDevicesHPWebJetadminsupportsHPdevicesandthird-partydevicesthatareconnectedthroughHPJetdirectprintservers.
HPWebJetadminalsosupportsthird-partydevicesthatarestandardprinterMIBcompliantandareconnectedtothenetwork.
Forthird-partydevices,HPWebJetadminprovidesbasiccapabilitiesaswellasmorerobustcapabilitiesifthedevicesareusedwithHP-certifiedplug-insforHPWebJetadmin.
ENWWSystemRequirements5IMPORTANT:IfthefollowingdevicesuseaUniversalPlug-in(UPI),WS-Discoverymustbeenabledonthedevices:HPLaserJetProHPOfficejetProHPFutureSmartwithafirmwareversionearlierthan3.
2.
3IfWS-DiscoveryisdisabledonHPLaserJetProandHPOfficejetProdevices,HPWebJetadminusesthecorrectUPIanddisplaysastatusofDeviceCommunicationErrorforthedevicesafteradevicediscoveryorfullrefreshisperformed.
IfWS-DiscoveryisdisabledonHPFutureSmartdeviceswithafirmwareversionearlierthan3.
2.
3,HPWebJetadminusesagenericdevicemodelinsteadofthecorrectUPIafteradevicediscoveryorfullrefreshisperformed.
HostAccessFortheapplicationhost,localadministratoraccessisrequiredtoinstallorupgradeHPWebJetadmin.
Fortheclienthost,localuseraccessisrequiredtoaccesstheHPWebJetadminclientapplicationandadministratoraccessisrequiredtoinstallMicrosoft.
NETFramework.
Client/ServerSecurityMicrosoftdomainorlocallymanagedWindowsusersandpasswordsarerequired.
NotesHPtestsHPWebJetadmininMicrosoftActiveDirectorydomains.
UsersmustbeamemberofanHPWebJetadminserveradministratorgroupordesignatedasoneofthefollowingintheHPWebJetadminUsersettings:–Windowslocalsecuritygroup–ActiveDirectorysecuritygroup–Localindividualuseraccount–ActiveDirectorydomainuseraccountInstallHPWebJetadminToinstallHPWebJetadmin,performthefollowingsteps:1.
Gotowww.
hp.
com/go/webjetadmin,andthendownloadtheHPWebJetadminsoftware.
2.
Double-clicktheEXEfile.
3.
Followtheinstructionsinthewizard.
6InstallandSetUpHPWebJetadminENWW4.
Iftheinstallationstopswithawarningthatarebootisrequired,rebootthehostonwhichtheHPWebJetadmininstallerisrunning.
Thenrelaunchtheinstallertocontinuetheinstallation.
5.
Whentheinstallationiscomplete,clicktheFinishbutton.
IMPORTANT:IftheHPWebJetadmininstallerdoesnotinstallMicrosoftSQLServerExpressEdition,themostcommonreasonforthefailureisthatWindowsupdates,suchasservicepacksorhotfixes,wereinstalledonthemachineandthemachinewasnotrestartedaftertheupdatescompleted.
Restartthemachine,andtheninstallHPWebJetadminagain.
InstallHPWebJetadminfromtheCommandLineYoucaninstallHPWebJetadminfromacommandline,throughascript,orthroughanautomatedprocess.
Thefollowingisthecommandsyntax:.
exe[/L""][/S/v/qn].
exeSpecifiesthenameoftheEXEfilethatyoudownloadedfromwww.
hp.
com/go/webjetadmin.
/L""SpecifiestheIDofthelanguagetheinstalleruses(Optional).
IfthelanguagedialogisenabledandyouspecifyavalidlanguageID,theinstallerautomaticallysuppressesthelanguagedialog.
IfyouspecifyaninvalidlanguageIDoralanguageIDthattheinstallerdoesnotsupport,theinstallerignoresthisparameter.
ThefollowingarethelanguageIDs.
Thedefaultisthelocalsystemlanguage.
LanguageLanguageIDChinese(Simplified)2052Chinese(Traditional)1028English(Worldwide)1033French(European)1036German1031Italian1040Japanese1041Korean1042Portuguese(Brazilian)1046Russian1049Spanish(Mid-Atlantic)1034/S/v/qnPerformsasilentinstallation(Optional).
Toperformasilentinstallation,thefollowingpropertiesarerequired:ENWWInstallHPWebJetadminfromtheCommandLine7–WJA_EULA–ENABLE_ANONYMIZED_DATA_COLLECTION/V"[Property1=Value1][Property2=Value2][.
.
.
]"Specifiesalistofpropertiestheinstalleruses(Required).
Thefollowingarethepropertiesandvalues.
PropertyandValueDescriptionWJA_EULA=ACCEPT|REJECTSpecifieswhetheryouacceptorrejecttheHPWebJetadminEndUserLicenseAgreement(EULA).
Thispropertyisrequiredforsilentinstallations.
ENABLE_ANONYMIZED_DATA_COLLECTION=TRUE|FALSESpecifieswhethertheDataCollectionfeatureisenabledordisabled.
ThisfeaturecollectsdataaboutyourprintersandimplementationofHPWebJetadminandanonymizesthedata.
HPWebJetadminusesanInternetconnectiontotransmittheanonymizeddatatoHP.
HPusestheanonymizeddatatoimproveproductsandservices.
Thispropertyisrequiredforsilentinstallations.
IMPORTANT:HPiscommittedtoprotectingyourprivacyandtheintegrityofyourcomputer.
Youcanenableanddisablethisfeatureatanytime.
Yourname,address,emailaddress,andothersensitivedataarenotsenttoHP.
WJA_SKIP_DB_INSTALL=1|0Specifieswhetherthedatabaseinstallationisskipped.
Toskipthedatabaseinstallation,specify1.
Thispropertyisrequiredonlyifyouwanttheinstallertoskipthedatabaseinstallation.
INSTALLDIR=\"\"SpecifiestheHPWebJetadmininstallationpath.
Thefollowingisthedefaultpath:C:\ProgramFiles\HPInc\WebJetadmin10\Thispropertyisoptionalforsilentinstallations.
Thepathmustbeenclosedwith\".
Inaddition,thepropertiesspecifiedforthe/Voptionmustbeenclosedwithquotes.
Thefollowingisanexampleofthecorrectsyntax:/V"WJA_EULA=ACCEPTINSTALLDIR=\"C:\ProgramFiles\HPInc\WebJetadmin10\""CAUTION:Ifthepathcontainsspacesandisnotenclosedwith\",theinstallerfails.
DATABASEDIR=\"\"Specifiesthedatabaseinstallationpath.
Thefollowingisthedefaultpath:C:\ProgramFiles\MicrosoftSQLServer\Thispropertyisoptionalforsilentinstallations.
Ifthedirectorynamecontainsspaces,youmustusetheWindowsshort-pathnotation.
Tofindtheshort-pathnotation,issuethefollowingcommand:Dir*.
/xThepathmustbeenclosedwith\".
Inaddition,thepropertiesspecifiedforthe/Voptionmustbeenclosedwithquotes.
Thefollowingareexamplesofthecorrectsyntax:–/V"WJA_EULA=ACCEPTDATABASEDIR=\"C:\SQLServer\""–/V"WJA_EULA=ACCEPTDATABASEDIR=\"C:\Program~1\SQLServer\""8InstallandSetUpHPWebJetadminENWWPropertyandValueDescriptionCAUTION:Ifthepathcontainsspacesandisnotenclosedwith\",theinstallerfails.
Examplesofthecommand-linesyntaxThefollowingexamplesassumethatthenameoftheinstallationfileisWjaSetup-x64.
exe.
Toperformabasicsilentinstallation,enterthefollowingcommand:WjaSetup-x64.
exe/S/v/qn/V"WJA_EULA=ACCEPTENABLE_ANONYMIZED_DATA_COLLECTION=TRUE"TostarttheinstallerinSpanish,enterthefollowingcommand:WjaSetup-x64.
exe/L"1034"ToperformasilentinstallationwithHPWebJetadmininstalledonC:\WJA,enterthefollowingcommand:WjaSetup-x64.
exe/S/v/qn/V"WJA_EULA=ACCEPTENABLE_ANONYMIZED_DATA_COLLECTION=TRUEINSTALLDIR=\"C:\WJA\""ToperformasilentinstallationwithHPWebJetadmininstalledonC:\WJAandthedatabaseinstalledonC:\WJADB,enterthefollowingcommand:WjaSetup-x64.
exe/S/v/qn/V"WJA_EULA=ACCEPTENABLE_ANONYMIZED_DATA_COLLECTION=TRUEINSTALLDIR=\"C:\WJA\"DATABASEDIR=\"C:\WJADB\""Toperformasilentupgrade,enterthefollowingcommand:WjaSetup-x64.
exe/S/v/qn/V"WJA_EULA=ACCEPTENABLE_ANONYMIZED_DATA_COLLECTION=TRUEINSTALLDIR=\"C:\WJA\"DATABASEDIR=\"C:\WJADB\"WJA_BACKUP_CONFIRM=YES"InstallHPWebJetadmininBlockingModeYoucanrunasilentinstallationinblockingmodefromthecommandline.
Thefollowingisthecommandsyntax:start/waitThefollowingexamplesassumethatthenameoftheinstallationfileisWjaSetup-x64.
exe.
start/waitWjaSetup-x64.
exe/S/v/qn/V"WJA_EULA=ACCEPTINSTALLDIR=\"C:\wja\"DATABASEDIR=\"C:\wjadb\""start/wait"C:\temp\WjaSetup-x64.
exe/S/v/qn/V"WJA_EULA=ACCEPTENABLE_ANONYMIZED_DATA_COLLECTION=TRUEINSTALLDIR=\"C:\wja\"DATABASEDIR=\"C:\wjadb\"""Post-installationTasksTheHPWebJetadminserverwillstartautomaticallyasaMicrosoftService.
TheHPWebJetadminservercannotacceptHPWebJetadminclientconnectionsuntiltheHPWebJetadminserverhasfullyloadedallservicesintoENWWInstallHPWebJetadmininBlockingMode9memory.
DependentuponyourHPWebJetadminserveravailablesystemresources,itmaytake1-2minutesforallservicestocompletelyloadafterinitialserverinstallationorserverreboot.
ThefirsttimeyoulaunchHPWebJetadminafterinstallation,apop-updialogisdisplayedstatingthatnodeviceshavebeendiscovered.
Youcanopttolaunchdiscoverysettingsatthispoint.
Oncetheinstallationiscomplete,HPWebJetadmincanbelaunchedfromasupportedbrowserbyenteringthehostnameorIPaddressofthecomputeronwhichitisinstalled,followedbytheportnumberandpath.
TypicaldefaultportnumbersforWebserviceshaveavalueof80.
SinceHPWebJetadminmayberunningsimultaneouslywithanotherWebserviceonthesamecomputer,HPWebJetadminusesaportnumberof8000.
Ifdesired,theportvaluemaybealtered.
HereisanexampleoftheURLusedtoactivateHPWebJetadminonasupportedWindowsdesktop:http://myhost:8000RecommendedInitialConfigurationStepsAfterHPWebJetadminisinstalled,someoftheinitialstepsthatyoushouldtaketobeginmanagingdevicesandtheprintenvironmentincludeconfiguringtheoptionsthataresharedthroughoutHPWebJetadmin,runningadiscovery,andconfiguringvariousotherfeatures.
Sharedconfigurationoptionsincludethedatabase,network(forexample,SNMPandHTTPS),discovery,servermaintenance,andcredentials.
Toconfiguretheseoptions,gotoTools>Options>Shared,andthennavigatetotheappropriatecategory.
Formoreinformationaboutaspecificoption,seetheonlineHelpforthatoption.
FindingdevicesonthenetworkmightbeassimpleasenablingHPWebJetadmintopassivelylistenfordevicesonthenetwork.
FindingdevicesmightbeascomplexasworkingwiththeITteamtomaptheentireIPnetwork,andthenrunninganIPRangediscoverytocompileacompleteinventoryofnetwork-connecteddevices.
YoucanalsousemanyofthesamesettingsandtechniquestodiscoverPC-connecteddevices.
Beforeyouplanandimplementadevicediscoverystrategy,carefullyreviewtheinformationaboutdiscoveriesintheHPWebJetadmindocumentationandwhitepapers.
YoushouldconfigurefeaturessuchasRoles,Users,Alerts,andDeviceGroupsbeforeyoubeginusingHPWebJetadmin.
Formoreinformationaboutaspecificfeature,seetheappropriatesectionintheHPWebJetadmindocumentationandtheHPWebJetadminwhitepapers.
TheHPWebJetadmindocumentationandwhitepapersareavailablefromtheHPWebJetadminsupportpage(clicktheflagicononthebottomofthepage,andthenselectyourcountry/region).
ConfiguretheHPWebJetadminServicetoRestartAutomaticallyItisrecommendedtoconfigureHPWebJetadmintorestartautomaticallywhenevertheHPWebJetadminservicefails.
If,forexample,thedatabaseisinaccessible,theHPWebJetadminservicewillbestoppedandthenautomaticallyrestarted.
TheHPWebJetadminservicewillwaitforthedatabasetobecomeaccessibleandthentheHPWebJetadminservicebecomeslive.
HPWebJetadmininstallsanadditionalservicenamedHPWSProAdapter.
TheHPWSProAdapterservicefacilitatescommunicationwithcertainHPdevicemodelsandmustbeleftrunning.
YoumustalsoperformthestepsinthissectionfortheHPWSProAdapterservice.
ToconfiguretheHPWebJetadminservicetorestartautomatically,followthesesteps.
1.
AccesstheWindowsControlPanelandselectAdministrativeTools.
2.
SelectServicesandthenselectHPWJAService.
10InstallandSetUpHPWebJetadminENWW3.
Right-clickandselectPropertiesfromthemenu.
4.
ClicktheRecoverytab.
FortheFirstfailure,Secondfailure,andSubsequentfailures,selectRestarttheservice.
5.
ClickOK.
ConfigureHPWebJetadminandtheHPWSProAdapterServicetoBindtoaSpecificNICHPWebJetadmincanrunonamulti-homedserveroronaserverthathasmultiplenetworkinterfaces.
Inmanycases,amulti-homedserverisconnectedtomorethanonenetworkandhasmultipleIPaddresses.
Amulti-homedserverwithmultipleIPaddressescancauseproblemsbecauseHPWebJetadmintendstouseonlyoneaddressforvariousreasons.
HPWebJetadminisacollectionoffeaturesthatadministratorscanusetomanagedevices.
EachofthesefeaturesmightrequirecommunicationsonthenetworkorconveytheIPaddressthroughwhichcommunicationsshouldtakeplacetootherfeatureseitheronorofftheHPWebJetadminserver.
ThesefeaturesfacilitatelearningtheHPWebJetadminserverIPaddresswhentheHPWJAservicestarts.
ThesefeaturesdosoinisolationandmightnotselectthecorrectIPaddress.
ThefollowingtopicsdescribesituationswherefeaturesmightnotdetectandselectthecorrectIPaddressandprovideaworkaroundthatforcestheHPWJAserviceandHPWSProAdapterservicetoselectthecorrectIPaddress.
ConfiguretheHPWebJetadminClientConnectionandHPWSProAdaptertoUsetheCorrectIPAddressTheHPWebJetadminclientstartupisinitiatedfromawebbrowserbysendinganHTTPmessagetotheclienthost.
TheHTTPmessagepointstoaMicrosoft.
NETFrameworkremoteconnection.
TheclienthostusestheHTTPmessagetoinitiatearelativelysecureconnectiontotheHPWebJetadminserver.
HPWebJetadmincanbeinstalledonamulti-homedserverwithmultipleIPaddresses.
IftheHPWebJetadmin(HPWJA)serviceselectsoneoftheseIPaddressesandthesystemthathoststheclientcannotcommunicatebyusingthatIPaddress,the.
NETFrameworkremoteconnectionfails.
UsethefollowingstepstoconfiguretheHPWJAservicetousethecorrectIPaddress:1.
UseWindowsServiceManagertostoptheHPWJAservice.
CAUTION:BecarefulwhenstoppingtheHPWJAservice.
CriticaltasksmightberunningandclientsmightbeloggedintoHPWebJetadmin.
Toviewtherunningtasks,gotoApplicationManagement>Overview>ApplicationManagement-ActiveTasks.
Toviewtheclientsthatareloggedin,gotoApplicationManagement>Overview>ClientManagement-ActiveClients.
2.
UseNotepadorasimilareditortoopentheSystem.
Remoting.
configfile.
Thisconfigurationfileisavailableinthefollowingdirectory:C:\ProgramFiles\HPInc\WebJetadmin10\config\WjaServiceIMPORTANT:Makesurethattheeditoryouusehassufficientprivilegestoupdateandsavethefile.
3.
FindthefollowingcodeintheSystem.
Remoting.
configfile:ENWWPost-installationTasks114.
AddthemachineName="xxx.
xxx.
xxx.
xxx"entry,andchangethevaluetotheIPaddressoftheHPWebJetadminserverthatfacilitatesclientcommunication.
Thefollowingisanexampleoftheeditedcode:CAUTION:Makesurethatthenewentryandvalueareenteredexactlyasshownhere.
Usethequotesthattheeditorgenerates.
Donotcopyandpastethistextbecauseincorrectcharacters,suchasquotes,causetheHPWJAservicetofailatstartup.
ObservealloftherulesforeditingXML.
Ifthefileisincorrectlyformatted,theHPWebJetadminXMLparserfails.
5.
Closeandsavethefile.
6.
UseWindowsServiceManagertostarttheHPWJAservice.
HPWebJetadminAlertsandSNMPTrapsRegistrationInrarecases,HPWebJetadmindetectsandusesanincorrectIPaddressforSNMPtrapsregistrationatthedevice.
WhenHPWebJetadminalertsubscriptionsarecreated,HPWebJetadminregistersitsIPaddressintheSNMPtrapsdestinationtableontheHPdevice.
ThisregistrationcausesthedevicetosendanotificationintheformofSNMPtrappacketsbacktotheHPWebJetadminserver.
HPWebJetadminusesthesenotificationstotriggeralertsfordeviceconditionssuchastoneroutorpaperjam.
IfanHPWebJetadmininstanceonamulti-homedserverpopulatestheSNMPtrapsdestinationtablewiththeincorrectIPaddress,followthesestepstoforceHPWebJetadmintoselectandusethecorrectIPaddress:1.
StoptheHPWJAservicebyusingWindowsServiceManager.
CAUTION:BecarefulwhenstoppingtheHPWJAservice.
Theremightbecriticaltasksrunning.
ToviewtherunningtasksinHPWebJetadmin,gotoApplicationManagement>Overview>ApplicationManagement-ActiveTasks.
ToviewtheclientloginsinHPWebJetadmin,gotoApplicationManagement>Overview>ClientManagement-ActiveClients.
2.
OpenNotepadorasimilartexteditorthathastheappropriatecreateandeditpermissions.
3.
Enterthefollowingtext:HP.
Imaging.
Wjp.
Sdk.
Core.
Framework.
ConfigurationItemStringxxx.
xxx.
xxx.
xxxCAUTION:Makesurethatthenewfieldandvaluesareenteredexactlyasshownhere.
Usethequotemarksthattheeditorgenerates.
DonotcopyandpastefromthisdocumentbecauseincorrectcharacterscausetheHPWJAservicetofailatstartup.
ObservealltherulesregardingXMLediting.
Ifthefilesareincorrectlyformatted,theHPWebJetadminXMLparserfails.
12InstallandSetUpHPWebJetadminENWW4.
Changethexxx.
xxx.
xxx.
xxxentrytothecorrectHPWebJetadminserverIPaddressthroughwhichthedevicecancommunicate.
5.
SelectFile>SaveAs.
6.
OntheSaveaswindow,navigatetothefollowingdirectoryontheHPWebJetadminserverhost:C:\Windows\ServiceProfiles\NetworkService\AppData\Local\HPInc\HPWebJetadmin\WjaService\config7.
IntheFilenametextbox,enterHP.
Imaging.
Wjp.
Alerts.
Library.
AlertsHelpers.
config.
xml.
8.
FromtheSaveastypedrop-downlist,selectAllFiles(*.
*).
9.
ClickSave.
10.
StarttheHPWJAservicebyusingWindowsServiceManager.
HPWebJetadminnowusestheIPaddressspecifiedduringSNMPtrapsregistration.
YoumustupdateanySNMPtrapsregistrationscreatedpriortothisprocedurebyusingtheHPWebJetadminConfigurationfeatureorbycreatingadditionalalertssubscriptions.
HPWebJetadminWebServiceTheHPWebJetadminweborHTTPserviceusestheserverIPaddressesforvariousreasons,includingcommunicatingwithotherprocesses,nodes,services,andtheIPaddressoftheactualHTTPserver.
Inrarecases,HPWebJetadmindetectstheincorrectIPaddressonmulti-homedsystems.
AconfigurationfilethatincludestheHPWebJetadminIPaddressisbuiltduringthefirstHPWJAservicestartup.
FollowthesestepstocorrecttheIPaddressvalueintheconfigurationfile:1.
StoptheHPWJAservicebyusingWindowsServiceManager.
CAUTION:BecarefulwhenstoppingtheHPWJAservice.
Theremightbecriticaltasksrunning.
ToviewtherunningtasksinHPWebJetadmin,gotoApplicationManagement>Overview>ApplicationManagement-ActiveTasks.
ToviewtheclientloginsinHPWebJetadmin,gotoApplicationManagement>Overview>ClientManagement-ActiveClients.
2.
OpenNotepadorasimilartexteditorthathastheappropriatecreateandeditpermissions.
3.
SelectFile>Open.
4.
OntheOpenwindow,navigatetothefollowingdirectory:C:\Windows\ServiceProfiles\NetworkService\AppData\Local\HPInc\HPWebJetadmin\WjaService\config5.
OpentheHP.
Imaging.
Wjp.
Core.
WebServer.
config.
xmlfile.
6.
Findthefollowingportionofthefile:HP.
Imaging.
Wjp.
Sdk.
Core.
Framework.
ConfigurationItemStringxxx.
xxx.
xxx.
xxx7.
Changethexxx.
xxx.
xxx.
xxxentrytothecorrectserverIPaddress.
8.
SelectFile>Save.
9.
StarttheHPWJAservicebyusingWindowsServiceControlManager.
ENWWPost-installationTasks13HPWebJetadminnowusesthespecifiedIPaddresswithreferencetotheHTTPorwebservices.
PortsHPWebJetadminlistenscontinuouslyonseveralportsandopensotherportsforspecificfunctionality.
NOTE:HPWebJetadminusesInternetControlMessageProtocol(ICMP)inthediscoveryprocess.
HPWebJetadminsendsanICMPechorequesttodetermineiftheIPisactive.
ThefollowingtableliststheportsthatHPWebJetadminuses.
PortnumberTypeInbound(I)orOutbound(O)1Description69UDPITFTPIncomingPort:HPWebJetadminusesthisportasastagingareaforfirmwareimagesduringHPJetdirectfirmwareupdates.
ThroughSNMP,HPWebJetadmintriggersHPJetdirecttoretrievefirmwarethroughthisport.
80TCPOHPWebJetadminusesthisporttoqualifythelinktotheHPEmbeddedWebServeronthedeviceandtoretrievethefirmwareimagesfromtheweb.
161UDPOSNMP:HPWebJetadminandothermanagementapplicationsuseSNMPtocommunicatewithandmanagedevices.
HPWebJetadminusesthisportontheprintertoissueSetandGetcommandstotheSNMPagent.
427UDPISLPListen:HPJetdirect-connecteddevicesuseServiceLocationProtocol(SLP)toadvertisetheirexistence.
WhenthepassiveSLPdiscoveryfeatureisenabledonHPWebJetadmin,devicessendmulticastpacketstothisportontheHPWebJetadminserver.
443TCPOHTTPS:TheHPWebJetadminserviceandHPWSProAdapterservicesenddeviceconfigurationsandqueriestothisportoverHTTPS.
HPWSProAdapterusesthisporttocommunicatewithdevicesthatdonotsupportWebServicesandareconfiguredtoredirectallofthenetworktraffictoHTTPS.
843TCPOHPWebJetadminusesthisporttoconfiguresomesettings,suchasfaxanddigitalsending,onsomeHPMFPdevicemodels.
1433UDPOMicrosoftSQLServer:Bydefault,HPWebJetadmininstallstheSQLServerdatabaseonthesamehost.
Optionally,youcanconfigureHPWebJetadmintocommunicatewithaSQLServerdatabaseonadifferenthost.
HPWebJetadminusesthisporttofacilitatecommunicationwitharemoteSQLServerdatabase.
2493UDPI/OBuildMonitor:ThisisanHPWebJetadminserverportthatiskeptopen.
OtherHPWebJetadminserversusethisporttodiscoverrunninginstancesofHPWebJetadmin.
3329TCPIHPWebJetadminusesthisporttoreceivedeviceannouncementsfromHPJetAdvantageSecurityManager.
FormoreinformationaboutconfiguringHPJetAdvantageSecurityManagertoforwarddeviceannouncements,seetheHPJetAdvantageSecurityManagerdocumentation.
FormoreinformationaboutconfiguringHPWebJetadmintoreceiveforwardeddeviceannouncements,seetheonlineHelpfortheInstantonListenfeature.
37022UDPOWSDiscovery:HPWebJetadminusesthisporttoperformaWebServicesdiscoveryonnewerHPdevices.
39102,3911TCPOWSDiscovery:HPWebJetadminusesthisporttoretrievedetailsaboutthedeviceWebServicesduringadiscovery.
HPWebJetadminusesthesedetailstoestablishtheWScommunicationpathsthatitneedstomanagedevices.
14InstallandSetUpHPWebJetadminENWWPortnumberTypeInbound(I)orOutbound(O)1DescriptionHPWebJetadminusesport3910toretrieveprintrequestsandusesport3911toretrievetheprinterstatus.
4088TCPIRemoting:HPWebJetadminusesthisportastheprimarycommunicationchannelbetweenastartedHPWebJetadminclientanditscorrespondingHPWebJetadminserver.
4089TCPIClientEventNotification:HPWebJetadminusesthisporttocommunicatechangeeventsfromtheHPWebJetadminservertotheclient.
TheseeventstriggertheclienttopullupdatesfromtheserverthroughtheRemotinginterface.
InpreviousreleasesofHPWebJetadmin,Windowsassignedthisport.
76272TCPOWebServices(HTTPS):HPWebJetadminusesthisporttocommunicatewithHPFutureSmartdevicesandolderlaserdevicesforsomeoperations,suchasOXPd.
FordevicesthatdonotsupportWebServices,theHPWSProAdapterServiceactsasagatewaybetweenHPWebJetadminandthedevices.
TheHPWSProAdapterServicereceivesWebServicesrequestsfromHPWebJetadmin,andthensendsthetranslatedrequeststothedevicesoverport8080(anunsecureconnection,anHPEmbeddedWebServerpasswordisnotconfiguredonthedevices)orport443(asecureconnection,anHPEmbeddedWebServerpasswordisconfiguredonthedevices).
8000UDPOHPWebJetadminDiscoveryListen:HPWebJetadminusesthisportonremoteIPhoststodetectearlierversionsoftheHPWebJetadminsoftware.
8000TCPIWebServer:HPWebJetadminprovidesanHTTPlistenerfortheinitialclientlaunchandonlineHelpcontent.
8050TCPIDeviceEventingCallback(HTTPS):NewerHPdevicesuseaWSeventingprotocolformanagementcommunications.
8080TCPOHPWSProAdapter:HPWSProAdapterusesthisporttocommunicatewithdevicesthatdonotsupportWebServicesandarenotconfiguredtoredirectallofthenetworktraffictoHTTPS.
HPWebJetadminsendsdeviceconfigurationsandqueriestothisport.
8140TCPIOXPmWebServices(HTTP):ThisisthecommunicationportforHPOpenExtensibilityPlatform(managementoperations).
8143TCPIOXPmWebServices(HTTPS):ThisisasecurecommunicationportforHPOpenExtensibilityPlatform(managementoperations).
8443TCPISecureWebServer(HTTPS):HPWebJetadminprovidesasecureHTTPSlistenerfortheinitialclientlaunch,onlineHelpcontent,anddevicefiletransferoperations.
9100TCPOPrinterFirmwareUpgradeandTestFileOperation:HPWebJetadminusesthisprinterporttotransferprinterfirmwarefiles,testjobfiles,andPJLconfigurationfiles.
27892UDPITrapsListener:HPWebJetadminusesthisportforSNMP-basedalertsandforByUserDataCollections.
27893UDPIWSHelloListener:HPWebJetadminmonitorsthisportforincomingWSHellopacketsfromtheHPWSProProxyAgentsoftwarethatisinstalledonhostsintheenterprise.
WhenHPWebJetadmindetectsapacket,itfollowsuptodeterminewhetherthereareanyprinterstodiscoveronthesendinghost.
Formoreinformation,seetheHPWebJetadmin10.
4ProxyAgentsReadme.
ThisdocumentisavailablefromtheHPWebJetadminsupportpage(inEnglish).
ENWWPorts15PortnumberTypeInbound(I)orOutbound(O)1Description59113TCPOMicrosoftSQLServer:Bydefault,HPWebJetadmininstallstheSQLServerdatabaseonthesamehost.
Optionally,youcanconfigureHPWebJetadmintocommunicatewithaSQLServerdatabaseonadifferenthost.
HPWebJetadminusesthisporttofacilitatecommunicationwitharemoteSQLServerdatabase.
1TheI/OcolumnrepresentsthecommunicationdirectionwithrespecttotheHPWebJetadminserverhost.
HPWebJetadminusesrandomsourceportswhencommunicatingwithportsonremoteIPaddresses.
2HPWebJetadminusesports7627,3702,and3910internallytocommunicatewithdevices.
Toensurepropercommunication,theseportsmustbekeptopenforcommunicationdirectlywiththedeviceandwiththeinternalHPWSProAdapterservice.
PortsrequiredforaWMIdiscoveryWhenusingaWMIdiscoverytodiscoverprintersthatareconnectedtoaPCthatdoesnothaveanHPproxyinstalled,thefollowingportsmustbeopenedfortheWMIcommunication:DCOMportsWMIportsWMIconnectionapplications—UnsecApporWMI_OUTFormoreinformation,seetheSettingupaRemoteWMIConnectiondocumentontheMicrosoftwebsite.
OpentheportsintheWindowsfirewallbyusingabatchfileHPWebJetadminopenstheportslistedinthetabletocommunicatewithdevices.
However,thefirewallthatyouareusingmightblocktheconnectionandpreventHPWebJetadminfromcommunicatingwiththenetwork.
Insteadofaddingfirewallrulesfortheseportsoneatatime,youcancreateabatchfilethatopensalloftheportsthatHPWebJetadminrequiresfortheWindowsfirewallatonetime.
Forinstructions,seetheOpenHPWebJetadminRequiredPortsintheWindowsFirewallandPortsDiagramwhitepaperontheHPWebJetadminsupportpage(inEnglish).
ImplementSSLBydefault,theHPWebJetadminHTTPservicerunswithoutcertificates.
Ifyouaddacertificate,theHTTPserverrunsinHTTPSmodeandSecureSocketsLayer(SSL)communicationisenforced.
InHTTPSmode,theuserandtheHTTPserverareauthenticatedtooneanotherandthetrafficbetweenthemisencrypted.
ThisaddsanextralayerofsecuritytotheSmartClientdownloadandotherHTTPtransactions.
HPWebJetadmindoesnotself-generatecertificates.
Youmustobtainacertificatefromacertificateauthority(CA).
CAscanexistinsideoroutsideofanorganization.
ManycompanieshavetheirownCAs.
TheHPWebJetadminSigningRequestfeaturegeneratesafilethatyoucansendtotheCA.
WhentheCAsendsyouacertificate,usetheInstallCertificatefeaturetoenableHTTPS.
IMPORTANT:Fornewservercertificates,youmustinstall2048-bitcertificates.
Anypreviouslyinstalled1024-bitservercertificatescontinuetofunctioncorrectly.
EnableSecureSocketsLayer(SSL)HPWebJetadminadministratorsenableSSLbyaddingacertificatetotheHPWebJetadminapplication.
ThiscertificateforcesthebrowsertousethemoresecureHTTPSprotocolwhenauseraccessestheclientlogon16InstallandSetUpHPWebJetadminENWWpage.
TheadministratormustenableSSLfromtheconsoleorhostthatrunstheapplicationbyusingtheprocedureinInstallaCertificateandEnableHTTPSontheServeronpage18.
WhenaremoteadministratoraccessesTools>Options>Shared>Network>HTTPS,amessageappearsstatingthatcertificatescanonlybeinstalledfromanHPWebJetadminclientthatrunsontheconsoleorserverthathostsHPWebJetadmin.
Insomeenvironments,SSLisrequiredwhenanHTTPinterfaceorserviceisusedforcommunication.
Inthesecases,SSLcanbeenabledandenforcedbyHPWebJetadmin.
SSLprovidesahighlevelofassuranceregardingtheauthenticationandencryptionofHTTPcommunication.
Thatis,auserwhorequestsaccesstotheHPWebJetadminSmartClientdownloadcanbereasonablyassuredthatthesystemhostingHPWebJetadminisauthenticandthecommunicationbetweenthetwosystemsisencryptedsothatitcannotbeeasilyreadbyeavesdroppers.
TheSSLprotocolusescertificatestoaccommodatebothauthenticationandencryption.
HPWebJetadmincangenerateasigningrequestthatcanbeusedbyacertificateauthority(CA)togenerateacertificate.
UsingTools>Options>Shared>Network>HTTPS,theusercangenerateaSigningRequest.
OncetherequesthasbeenfulfilledbytheCA,thecertificateisreadytobeinstalledonHPWebJetadmin.
Remember,youmustbeattheapplicationconsoletouseTools>Options>Shared>Network>HTTPS.
UseInstallCertificatetobrowseanduploadthecertificatefile.
Oncethecertificateisinstalled,theHTTPserviceenforcesSSL.
AnybrowsercontactwithHPWebJetadminshouldindicateHTTPSontheURLwhenacertificateisinstalled.
UsingRemoveCertificateuninstallsthecertificateandSSLisnolongerenforced.
ImportantPointstoRememberWhenImplementingSSLClientcommunicationwithSSLenforcedrequiresoneormoreofthefollowingconsiderations.
Fornewservercertificates,youmustinstall2048-bitcertificates.
Anypreviouslyinstalled1024-bitservercertificatescontinuetofunctioncorrectly.
WhenSSLhasbeenimplementedonHPWebJetadminwithaninternalcertificateauthority(CA),theCA'sauthorizingcertificatemustbeinstalledintheclientbrowser.
IfthiscertificateisnotinstalledintheclientbrowsertheHPWebJetadminSmartClientpagewillfailtoloadupinSSLmode.
ProxyserverstendtousethestandardSSLport443.
IftheHPWebJetadminSmartClientpageisbeingcalledthroughaproxyserver,aredirecterrormayoccur.
ThisisduetotheURLbeingredirectedto443ratherthan8443whichistheportusedbytheHPWebJetadminSSL.
TheworkaroundforthisistoplacetheHPWebJetadminfullyqualifieddomainname(FQDN)intothebrowsersexceptionslistunderTools>InternetOptions>Connections>LANSettings>Advanced.
ThiscausesthebrowsertopullHTTPandHTTPScontentdirectlyfromtheHPWebJetadminserver.
TIP:HPWebJetadminHTTPandHTTPSportnumberscanbecustomizedtosomethingotherthan8000and8443.
WhenyouhaveimplementedSSLonHPWebJetadmin,aredirectoccurswhenthebrowserURLusesport8000.
Hereisanexample:TheknownURLpriortoSSLimplementationishttp://servername.
domain.
xxx:8000.
AfterSSLimplementation,HPWebJetadminwillredirectthistoanewURL:https://servername.
domain.
xxx:8443.
TheURLsshownhereuseFQDN.
InmostcasesthecertificateissuedandinstalledintheHPWebJetadminSSLimplementationwillcontainanFQDNforthehostonwhichHPWebJetadminisinstalled.
IfanonFQDNisusedinthebrowser,certificatefailurewilloccur.
Asageneralrule,formtheHPWebJetadminURLwithFQDNwhenHPWebJetadminisimplementedwithSSL.
ENWWImplementSSL17ToconfigureHTTPS,accessTools>Options>Shared>Network>HTTPS.
InstallaCertificateandEnableHTTPSontheServerToruntheHPWebJetadminHTTPserviceinHTTPSmode,youmustinstallacertificateontheHTTPserverandenableHTTPS.
YoucandisableHTTPSmodeatanytimebyremovingthecertificatefromtheHTTPserver.
YoucanuseHPWebJetadmintogeneratearequesttocreateacertificate,andthensendtherequesttoacertificateauthority(CA).
WhenyoureceivethecertificatefromtheCA,youcaninstallthecertificateontheHTTPserverandenableHTTPS.
ToconfigureHTTPSmode,performthefollowingsteps:1.
GotoTools>Options>Shared>Network>HTTPS.
2.
Performoneofthefollowingtasks:ToinstallacertificateandenableHTTPS,selectInstallCertificate.
ToremovetheinstalledcertificateanddisableHTTPS,selectRemoveCertificate.
Togenerateacertificaterequest,selectSigningRequest.
IMPORTANT:Fornewservercertificates,youmustinstall2048-bitcertificates.
Anypreviouslyinstalled1024-bitservercertificatescontinuetofunctioncorrectly.
3.
ClickApply.
UseaSeparateInstanceofMicrosoftSQLServerBydefault,HPWebJetadmininstallsandusesadatabasethatrunsunderMicrosoftSQLServerExpress.
AnexistinginstallationofHPWebJetadmincanbeconfiguredtousethefullversionofSQLServerinsteadofSQLServerExpress.
However,HPdoesnotsupportortestHPWebJetadmininstallationswithSQLServerdatabasesotherthantheversionlistedinDatabaseonpage4and,therefore,cannotguaranteetheresults.
FormoreinformationaboutconfiguringHPWebJetadmintouseaseparateMicrosoftSQLinstance,seetheUsingMicrosoftSQLServerwithHPWebJetadminwhitepaper.
ThiswhitepaperisavailablefromtheHPWebJetadminsupportpage(inEnglish).
DeploytheSmartClientHPWebJetadminusestheMicrosoftClickOnceSmartClienttechnology.
ThistechnologyrunsaMicrosoft.
NETFrameworkapplicationbyautomaticallydownloadingandstartingtheapplicationthroughawebbrowser.
TheSmartClientapplicationrunsasalocal.
NETFrameworkapplicationonthehostanduses.
NETRemotingtocommunicatewiththeHPWebJetadminservice.
ThefollowingdescribestheinteractionbetweentheHPWebJetadminserverandtheSmartClientapplication:TheSmartClientapplicationusesHTTPorHTTPStoinitiallycontacttheHPWebJetadminserver.
ThedefaultHTTPportis8000.
ThedefaultHTTPSportis8443.
Forinstructionsonchangingthedefaultports,18InstallandSetUpHPWebJetadminENWWseeChangetheDefaultHTTPorHTTPSPortfortheHPWebJetadminSmartClientApplicationonpage19.
TheHPWebJetadminservertransfersapproximately2MBoffilesfortheSmartClientapplicationtotheclient.
TheSmartClientapplicationrunsontheclientastheuserwhoisloggedintothecomputer,executescommandsthatdownloadapproximately50MBofHPWebJetadminclientfiles,andstartsthegraphicaluserinterfacefortheHPWebJetadminclientapplication.
Thewebbrowserisnowinactive.
AftertheSmartClientapplicationstarts,thewebbrowserisnolongerrequired.
AlthoughHPWebJetadminalsousesthewebbrowsertodeliveronlineHelpandproactiveProductUpdatenotifications,theHPWebJetadminclientapplicationrunslocallyonthecomputer.
TheHPWebJetadminserverdownloadsalloftherelevantinformationtotheclient.
Whennewinformationisavailable,theHPWebJetadminservercontactstheclientanddownloadsthenewinformation.
TheHPWebJetadmininstallerbuildsashortcutontheinstallationhosttohttp://:8000/,whereisthehostwhereHPWebJetadminisinstalled.
UsethisURLtoaccessHPWebJetadminremotelyfromanywhereonthecompany'sintranetorWAN.
TostarttheSmartClientsession,onlyawebbrowserisrequired.
AdministratorrightsarenotrequiredtorunSmartClientapplications.
However,.
NETFrameworkmustbeinstalled.
Localadministratorrightsmightberequiredtoinstall.
NETFramework.
Inmostcases,theSmartClientsessionstartsautomatically.
However,thelocalsecuritysettingsontheworkstationmightpreventtheapplicationfromstartingautomatically.
FormoreinformationaboutmanuallystartingtheSmartClient,seeStartanHPWebJetadminClientSessiononpage20.
Formoreinformationaboutchangingthelocalsecuritysettings,seetheMicrosoftdocumentation.
ChangetheDefaultHTTPorHTTPSPortfortheHPWebJetadminSmartClientApplicationUsethefollowingstepstochangethedefaultHTTPorHTTPSportthatisusedtostarttheHPWebJetadminSmartClientapplication:1.
UseNotepadorasimilartexteditortoopentheHP.
Imaging.
Wjp.
Core.
WebServer.
config.
xmlfile.
Thisconfigurationfileisavailableinthefollowingdirectory:C:\Windows\ServiceProfiles\NetworkService\AppData\Local\HPInc\HPWebJetadmin\WjaService\config2.
UpdatetheattributefortheHTTPorHTTPSportinthefollowingentries:HP.
Imaging.
Wjp.
Sdk.
Core.
Framework.
ConfigurationItemString8443HP.
Imaging.
Wjp.
Sdk.
Core.
Framework.
ConfigurationItemString80003.
Closeandsavethefile.
ENWWDeploytheSmartClient19RuntheSmartClientApplicationinaWorkgroupUsethefollowingstepstochangetheMicrosoftsecuritysettings:TIP:Formoreinformationaboutthesecuritypolicysettings,seetheMicrosoftdocumentation.
1.
OntheHPWebJetadminserver,gotoStart>ControlPanel>SystemandSecurity>AdministrativeTools,andthendouble-clickLocalSecurityPolicy.
2.
Intheleftnavigationpane,expandLocalPolicies,andthenselectSecurityOptions.
3.
Intherightpane,double-clickNetworkaccess:Sharingandsecuritymodelforlocalaccounts.
4.
Fromthelist,selecttheClassic-localusersauthenticateasthemselvesoption.
5.
ClicktheOKbutton.
StartanHPWebJetadminClientSessionAftertheHPWebJetadmininstallationiscomplete,youcanstartanHPWebJetadminclientsession.
Chooseoneofthefollowingmethods:OnthehostwhereHPWebJetadminisinstalled,gotoStart>AllPrograms>HPWebJetadmin10,andthenselectHPWebJetadmin.
Fromasupportedwebbrowser,browsetothefollowingURLonthehostwhereHPWebJetadminisinstalled:http://:8000Fromthecommandline,issuethefollowingcommand:rundll32dfshim.
dll,ShOpenVerbApplicationhttp://:8000/wja/wja.
applicationInternalErrorDetails=trueTostarttheHPWebJetadminclientsessioninaspecificlanguage,usethefollowingURLs.
IfthecorrespondingWindowslanguagepackisinstalled,theHPWebJetadminclientsessiondisplaysinthatlanguage.
IfthecorrespondingWindowslanguagepackisnotinstalled,theHPWebJetadminclientsessiondisplaysinamixtureofEnglishandthespecifiedlanguage.
LanguageURLChinese(Simplified)http://:8000/wja/wja.
applicationlang=zh-cnChinese(Traditional)http://:8000/wja/wja.
applicationlang=zh-twEnglish(Worldwide)http://:8000/wja/wja.
applicationlang=en-usFrench(European)http://:8000/wja/wja.
applicationlang=fr-frGermanhttp://:8000/wja/wja.
applicationlang=de-deItalianhttp://:8000/wja/wja.
applicationlang=it-itJapanesehttp://:8000/wja/wja.
applicationlang=ja-jpKoreanhttp://:8000/wja/wja.
applicationlang=ko-krPortuguese(Brazilian)http://:8000/wja/wja.
applicationlang=pt-pt20InstallandSetUpHPWebJetadminENWWLanguageURLRussianhttp://:8000/wja/wja.
applicationlang=ru-ruSpanish(Mid-Atlantic)http://:8000/wja/wja.
applicationlang=es-esInsomecases,youmightneedtoaddtheURLforHPWebJetadmintothetrustedsecurityzoneinthewebbrowser.
ConfigurethePortforEventNotificationsHPWebJetadmindirectsclientstoaTCPconnectiontoreceiveeventnotifications.
AftertheclientestablishestheTCPconnection,HPWebJetadminsendseventnotificationsthatprompttheclienttoupdateitselfviathestandardMicrosoft.
NETRemotingchannelonport4088.
TheHPWebJetadminservercommunicatestheportnumberthatisestablishedforeventnotificationstotheclientwhentheclientfirstestablishesaconnectiontotheHPWebJetadminserver.
TheportnumberthatHPWebJetadmincommunicatestotheclientissomewhatrandom,whichmightcauseaproblemifafirewallisconfiguredontheHPWebJetadminserver.
IfafirewallisconfiguredontheHPWebJetadminserver,theeventnotificationportmustbesettostaticandthefirewallmustbeconfiguredtoacceptconnectionsthroughthisport.
Ifafirewallisconfiguredontheclient,thefirewallontheclientdoesnothavetobeconfiguredtolaunchtheclient.
Usethefollowingstepstoconfigureastaticportforeventnotifications:CAUTION:BecarefulwhenrestartingtheHPWebJetadminservice.
CriticaltasksmightberunningandclientsmightbeloggedintoHPWebJetadmin.
Toviewtherunningtasks,gotoApplicationManagement>Overview>ApplicationManagement-ActiveTasks.
Toviewtheclientsthatareloggedin,gotoApplicationManagement>Overview>ClientManagement-ActiveClients.
1.
UseNotepadorasimilareditortocreateafilethatcontainsthefollowingXMLsection:HP.
Imaging.
Wjp.
Sdk.
Core.
Framework.
ConfigurationItemString8099Theportnumberspecifiedfortheattributecanbeanyunusedport.
2.
FromtheFilemenu,selectSave.
3.
OntheSaveAswindow,navigatetothefollowingdirectoryontheHPWebJetadminserver:C:\Windows\ServiceProfiles\NetworkService\AppData\Local\HPInc\HPWebJetadmin\WjaService\config4.
IntheFilenamebox,enterGlobal.
config.
xml,andthenclicktheSavebutton.
5.
RestarttheHPWebJetadminservice(HPWJAService).
Forinstructions,seeRestarttheHPWebJetadminServiceManuallyonpage22.
6.
Useanyfirewallapplicationorasimilarapplicationtoopentheport.
ENWWDeploytheSmartClient21ConfiguretheFirewallSoftwareYoumustconfigurethefirewallontheHPWebJetadminserverhosttoallowclienttrafficandothertraffictopassthroughthecorrectports.
ThefirewallmonitorsHPWebJetadminfortheportsthatitusesandallowstraffic.
Insomefirewallapplications,suchasMicrosoftFirewall,youcanspecifyaprogramorexecutablefileasafirewallexception.
Inthesecases,youcandefinethefollowingfileasanexception:C:\ProgramFiles\HPInc\WebJetadmin10\bin\HPWJAService.
exeThefirewallontheclientsystemdoesnotrequireanyspecialconsiderationbecausetheclientapplicationdoesnotlistentoaspecificport.
RestarttheHPWebJetadminServiceManuallyItmaybenecessarytostopandrestarttheHPWebJetadminservice.
Anexampleofthiswouldbewhenanetworkisswitchedfromhard-wiredtowireless.
Oncethenetworkisswitched,HPWebJetadminmustberestartedinorderfortheapplicationtorealizethechange.
CAUTION:RestartingHPWebJetadminservicesmayinterruptbackgroundtasksandusersessions.
Alwayschecktheapplicationbeforerestarting.
ToscriptthestopofallHPWebJetadminservices,usethesecommandstringsinthisorder:NetstopHPWSProAdapterNetstopHPWJAServiceNetstopmssql$HPWJAToscriptthestartofallHPWebJetadminservices,usethesecommandstringsinthisorder:Netstartmssql$HPWJANetstartHPWJAServiceNetstartHPWSProAdapter1.
UninstallHPWebJetadmin.
2.
UseWindowsServiceManagertosettheolderHPWebJetadminservice(listedasHPWebJetadminintheServicesMMC)toactivateandtoalsostarttheservice.
BackUpandRestoreHPWebJetadminScriptsforbackingupandrestoringHPWebJetadminareavailable.
ThesescriptsprovideexamplesoftherecommendedmethodforbackingupandrestoringtheHPWebJetadminsettingsanddata,includingtheMicrosoftSQLServerdatabase.
TheWJABackupRestoreInstructions_.
txtfileprovidesinstructionsforrunningthescripts.
Thescriptsandinstructionsareavailableinthefollowingdirectory:C:\ProgramFiles\HPInc\WebJetadmin10\WJABackupRestore22InstallandSetUpHPWebJetadminENWWUpgradeHPWebJetadminWhentheHPWJAServiceRunsasaNetworkService(Default)WhentheHPWJAservicerunsasanetworkservice,youcanusethedefaultproceduretoupgradeHPWebJetadmin.
IMPORTANT:IftheHPWJAservicerunsasauseraccount,followtheinstructionsintheUpgradeHPWebJetadminWhentheHPWJAServiceRunsasaUserAccounttopicinsteadoftheinstructionsinthistopic.
UsethefollowingstepstoupgradeHPWebJetadmin:1.
ObtaintheHPWebJetadmininstallationexecutablefromwww.
hp.
com/go/webjetadmin.
2.
BackupthecurrentHPWebJetadmininstallation.
TheWJABackupRestoreInstructions_.
txtfileprovidesinstructionsforbackingupHPWebJetadmin.
ThisfileislocatedinthefollowingdirectoryontheHPWebJetadminserver:C:\ProgramFiles\HPInc\WebJetadmin10\WJABackupRestore3.
InHPWebJetadmin,gotoHelp>About,andthenwritedownthecurrentversionas10.
4.
nnnnn(10.
4SRX),wherennnnnisthebuildnumberandXistheversion.
Thisinformationisrequiredifyouneedtoperformarecovery.
4.
GotoApplicationManagement>Overview>ApplicationManagement–ActiveTasks,andthencheckforanypausedorpendingtasks.
Youmuststoporresolvethesetasksbeforeyouruntheinstaller.
5.
RuntheinstallationexecutableonthesystemthathostsHPWebJetadmin.
UpgradeHPWebJetadminWhentheHPWJAServiceRunsasaUserAccountWhentheHPWJAservicerunsasauseraccountinsteadofasanetworkservice,additionalstepsarerequiredtoupgradeHPWebJetadmin.
Thisprocedureincludestheseadditionalsteps.
IMPORTANT:IftheHPWJAservicerunsasanetworkservice,followtheinstructionsinUpgradeHPWebJetadminWhentheHPWJAServiceRunsasaNetworkService(Default)insteadoftheinstructionsinthistopic.
UsethefollowingstepstoupgradeHPWebJetadmin:1.
ObtaintheHPWebJetadmininstallationexecutablefromwww.
hp.
com/go/webjetadmin.
2.
BackupthecurrentHPWebJetadmininstallation.
TheWJABackupRestoreInstructions_.
txtfileprovidesinstructionsforbackingupHPWebJetadmin.
ThisfileislocatedinthefollowingdirectoryontheHPWebJetadminserver:C:\ProgramFiles\HPInc\WebJetadmin10\WJABackupRestore3.
InHPWebJetadmin,gotoHelp>About,andthenwritedownthecurrentversionas10.
4.
nnnnn(10.
4SRX),wherennnnnisthebuildnumberandXistheversion.
Thisinformationisrequiredifyouneedtoperformarecovery.
4.
GotoApplicationManagement>Overview>ApplicationManagement–ActiveTasks,andthencheckforanypausedorpendingtasks.
Youmuststoporresolvethesetasksbeforeyouruntheinstaller.
ENWWUpgradeHPWebJetadminWhentheHPWJAServiceRunsasaNetworkService(Default)235.
InHPWebJetadmin,exportthedeviceconfigurationtemplates.
Usethefollowingfilename:ExportedTemplates_WJARunningAsUser_WJAversion10.
4srX(whereXistheHPWebJetadminversionyounotedinstep3)6.
Ifthereareothertemplates,suchasdiscoveryoralerts,thatareconfiguredwithpasswords,exportthosetemplatestofileswithfilenamessimilartothefilenameinstep5.
7.
ChangetheHPWebJetadminservicetorunasanetworkservice.
8.
RestarttheHPWebJetadminservice.
TheHPWebJetadminclientautomaticallycloses.
9.
StarttheHPWebJetadminclient.
10.
Importthetemplatesyouexportedinsteps5and6.
BesuretoselecttheOverwriteduplicatetemplatescheckbox.
11.
RuntheinstallationexecutableonthesystemthathostsHPWebJetadmin.
12.
InHPWebJetadmin,exportthedeviceconfigurationtemplates.
Usethefollowingfilename:ExportedTemplates_WJARunningAsNetworkService_WJAversion10.
4srY(whereYistheversionoftheupgradeyoujustinstalled)13.
Ifthereareothertemplates,suchasdiscoveryoralerts,thatareconfiguredwithpasswords,exportthosetemplatestofileswithfilenamessimilartothefilenameinstep12.
14.
ChangetheHPWebJetadminservicetorunasauseraccount.
15.
RestarttheHPWebJetadminservice.
TheHPWebJetadminclientautomaticallycloses.
16.
StarttheHPWebJetadminclient.
17.
IfanyoftheoriginalXTPticketsaremissing,importtheXTPtickets.
NOTE:IfXTPticketswereinstalledandHPWebJetadminwasrunningasauseraccountbeforeyoustartedtheupgrade,alltheXTPticketsinstalledduringtheupgradearemissingwhentheHPWebJetadminservicerunsasauseraccount.
18.
(Optional)InstalltheadditionalXTPticketsthatareincludedwiththecurrentFeaturePackandareonlyavailablewhentheHPWJAservicerunsasanetworkservice.
TheXTPticketsthatareprebundledwiththeFeaturePackarenotavailablewhenHPWebJetadminrunsasauseraccount.
YoumustimporttheseXTPticketsindividually.
ToobtainaZIPfilethatcontainsalltheprebundledXTPtickets,gotowww.
hp.
com/go/webjetadmin,clickDownloadnow,andthenclickSelect.
Followtheinstructionsprovided.
19.
Importthetemplatesthatyouexportedinsteps12and13.
20.
Addtheglobalcredentialsagain.
21.
Verifythatthecorrectsettingsareinthetemplatesandthetemplatesareworking.
ImportFeaturePacksFeaturePacksprovidesupportfordynamicallyaddingnewconfigurationoptionsandnewdeviceimagestoHPWebJetadmin.
FeaturePacksareimportedandappliedonanexistinginstallationofHPWebJetadmin.
ThismeansthatyoucangainaccesstothenewfunctionalitywithoutinstallingandqualifyinganewversionofthefullHPWebJetadminapplication.
HPWebJetadminAdministratorrightsarerequiredtoapplyFeaturePacks.
FeaturePacksarecumulative.
AnewFeaturePackincludesthenewfunctionalitythatisbeingreleasedandallofthefunctionalitythatwasreleasedinpreviousFeaturePacks.
24InstallandSetUpHPWebJetadminENWWEachFeaturePackhasaminimumversionofHPWebJetadminthatmustbeinstalledbeforetheFeaturePackcanbeimportedandapplied.
IfyouimportaFeaturePackonaversionofHPWebJetadminthatisearlierthantheminimumrequiredversion,HPWebJetadmindisplaysamessagethatspecifiestheminimumrequiredversion.
FeaturePacksareavailablefromwww.
hp.
com/go/webjetadminassignedHPBinary(HPb)files.
AfteryoudownloadanHPbfile,youmustimporttheHPbfileintotheexistinginstallationofHPWebJetadmin,andthenapplytheHPbfile.
YoumustrestarttheHPWebJetadminservicebeforethenewfunctionalityisavailableinHPWebJetadmin.
CAUTION:AfteraFeaturePackisapplied,itcannotberemovedfromHPWebJetadmin.
HPrecommendsthatyoubackupHPWebJetadminbeforeyouapplyaFeaturePack.
WhenaFeaturePackisinitiallyreleased,thesoftwareandonlineHelpforthenewfeaturesareavailableonlyinEnglish.
ThelocalizedsoftwareandonlineHelpforthenewfeatureswillbeprovidedatalatertime,eitherinanewFeaturePackoranewversionofHPWebJetadmin.
ImportandapplyaFeaturePackCAUTION:AfteraFeaturePackisapplied,itcannotberemovedfromHPWebJetadmin.
HPrecommendsthatyoubackupHPWebJetadminbeforeyouapplyaFeaturePack.
1.
Gotowww.
hp.
com/go/webjetadmin,andthendownloadtheHPWebJetadminFeaturePackfile.
2.
GotoTools>FeaturePacks.
3.
ClicktheImportbutton.
4.
OntheOpenwindow,browsetoandselecttheHPbfile,andthenclicktheOpenbutton.
5.
OntheSuccesswindow,clicktheOKbutton.
TheHPbfileislistedontheFeaturePackswindowwithastatusofImported(ApplyPending).
-or-IfaFeaturePackhasalreadybeenimported,buthasnotbeenappliedyet,HPWebJetadmindisplaystheWarningwindow.
TooverwritetheexistingFeaturePack,clicktheYesbutton.
Tocanceltheimportprocess,clicktheNobutton.
6.
SelecttheFeaturePackfromthelist,andthenclicktheApplybutton.
ThestatusoftheselectedFeaturePackmustbeImported.
7.
OntheConfirmFeaturePackapplywindow,clicktheOKbutton.
8.
OntheSuccesswindow,clicktheOKbutton.
TheFeaturePackislistedontheFeaturePackswindowwithastatusofApplied(ServiceRestartRequired).
9.
RestarttheHPWebJetadminservice(HPWJAService).
CAUTION:RestartingtheHPWebJetadminservicecaninterruptcriticalprocesses.
BeforeyourestarttheHPWebJetadminservice,usetheHPWebJetadminBroadcastMessagefeaturetonotifytheactiveusers,andthenmakesurethatalloftheusersareloggedoffandthattherearenoactivetasksrunningontheHPWebJetadminserver.
ENWWImportFeaturePacks25DeleteanimportedFeaturePack1.
GotoTools>FeaturePacks.
2.
SelecttheFeaturePackfromthelist,andthenclicktheDeletebutton.
ThestatusoftheselectedFeaturePackmustbeImported.
3.
OntheDeleteFeaturePackwindow,clicktheOKbutton.
4.
OntheSuccesswindow,clicktheOKbutton.
DisplaytheReleaseNotesforaFeaturePackTheReleaseNotesforFeaturePacksareprovidedonlyinEnglish.
1.
GotoTools>FeaturePacks.
2.
SelecttheFeaturePackfromthelist,andthenclicktheDetailsbutton.
TheReleaseNotesaredisplayedinNotepad.
EnableFIPSontheHPWebJetadminServerFederalInformationProcessingStandard(FIPS)canbeenabledonlyafteryouupgradetoHPWebJetadmin10.
4orlater.
ThistopicprovidesinstructionsforupgradingHPWebJetadmin,makingtherequiredchangestothesettingsinHPWebJetadmin,andthenenablingFIPS.
Theseinstructionsmustbefollowedintheorderprovided.
TheMD5andDESprotocolsareblockedafterFIPSisenabled.
CommunicationoverSNMPv1/SNMPv2isstillpossibleafterFIPSisenabled.
UpgradetoHPWebJetadmin10.
4orlater1.
OntheHPWebJetadminserver,gotowww.
hp.
com/go/webjetadmin,andthendownloadtheHPWebJetadminsoftware.
2.
Double-clicktheEXEfile.
3.
Followtheinstructionsinthewizard.
4.
Iftheinstallationstopswithawarningthatarebootisrequired,reboottheHPWebJetadminserver.
Launchtheinstalleragaintocontinuetheinstallation.
5.
Whentheinstallationiscomplete,clicktheFinishbutton.
MaketherequiredchangestothesettingsinHPWebJetadminandonthedevicesIfyouomitthefollowingsteps,HPWebJetadminmightnotbeabletocommunicatewiththedevicesafterFIPSisenabled.
HPWebJetadmindisplaysastatusofDeviceCommunicationErrorforthesedevices.
1.
IfHPWebJetadminhasalreadydiscovereddevicesbyusinganSNMPv3credentialthatspecifiestheMD5andDESprotocols,SNMPcommunicationwiththosedeviceswillnotworkafterFIPSisenabled.
TheSNMPv3credentialforthesedevicesmustbechangedtotheSHA-1andAES-128protocols.
However,youcannotuseHPWebJetadmintodetermineiftheSNMPv3credentialforthedevicesusestheMD5andDESprotocols.
UsethefollowingstepstoupdatetheSNMPv3credentialonallofthedevicesthatuseSNMPv3:26InstallandSetUpHPWebJetadminENWWa.
IntheDeviceManagementnavigationpane,right-clickConfiguration,andthenselectCreateconfigurationtemplate.
TheCreateDeviceConfigurationTemplatewizardstarts.
b.
OntheSelectTemplateModelspage,selectthedevicemodelstoconfigure,andthenclicktherightarrowbutton.
c.
Selectthenetworkcardstoconfigure,andthenclicktherightarrowbutton.
d.
ClicktheNextbutton.
e.
OntheSpecifytemplateoptionspage,enteranameforthetemplateintheNamebox(upto48characters).
f.
IntheDevicesettingsnavigationpane,gotoSecurity>SNMPVersionAccessControl.
g.
SelecttheModifySNMPv3option.
h.
IntheCurrentSNMPv3Credentialsection,entertheusername,authenticationprotocol,authenticationpassphrase,privacyprotocol,andprivacypassphrasethatarecurrentlyconfiguredforSNMPv3.
ThecurrentSNMPv3credentialsarerequired.
i.
IntheNewSNMPv3Credentialsection,selectSHA-1fromtheAuthenticationProtocollist,andselectAES-128fromthePrivacyProtocollist.
j.
Ifrequired,enterthenewvaluesfortheusername,authenticationpassphrase,andprivacypassphrase.
CAUTION:Tochangetheauthenticationandprivacypassphrases,thecurrentpassphrasesmustbespecifiedinthedeviceconfigurationtemplateevenifglobalSNMPv3credentialsarestoredinHPWebJetadmin.
Ifthecurrentpassphrasesarenotspecified,theconfigurationfails.
k.
ClicktheNextbutton.
l.
OntheConfirmpage,verifythattheinformationiscorrect,andthenclicktheCreateTemplatebutton.
m.
OntheResultspage,clicktheDonebutton.
n.
IntheDeviceManagementnavigationpane,right-clickConfiguration,andthenselectApplyconfigurationtemplate.
TheApplyDeviceConfigurationTemplatewizardstarts.
o.
Selectthedeviceconfigurationtemplatethatyoujustcreatedfromthelist,andthenclicktheNextbutton.
p.
OntheSelectdevicespage,selectthedevicestoconfigurefromtheAvailabledeviceslist,andthenclickthe>button.
q.
ClicktheNextbutton.
r.
OntheConfirmpage,verifythattheinformationiscorrect,andthenclicktheApplyTemplatebutton.
s.
OntheResultspage,clicktheDonebutton.
2.
UsethefollowingstepstodeletetheSNMPv3globalcredentialsthatusetheMD5andDESprotocols:a.
GotoTools>Options>Shared>Credentials>Device>SNMPv3.
b.
SelecttheSNMPv3credentialthatusestheMD5andDESprotocolsfromthelist,andthenclicktheRemovebutton.
c.
OntheConfirmDeletewindow,clicktheYesbutton.
d.
RepeatstepsbthroughcforeachSNMPv3credentialthatusestheMD5andDESprotocols.
3.
RunadiscoverytorediscoveralloftheSNMPv3-configureddevices.
ENWWEnableFIPSontheHPWebJetadminServer274.
TrapforwardingthatisconfiguredtouseSNMPv3credentialswiththeMD5andDESprotocolsdoesnotworkafterFIPSisenabled.
UseoneofthefollowingprocedurestoupdatethealertsubscriptionsthatareconfiguredtoforwardSNMPtrapstoaserverusingSNMPv3credentialswiththeSHA-1andAES-128protocols.
NOTE:Alertsubscriptionsthatareconfiguredtoonlywritealertstothealerthistorylogortosendemailnotificationswhenalertsoccurdonotneedtobeupdated.
UpdatethealertsubscriptionsthatwerecreatedbyusinganalertsubscriptiontemplatethatisconfiguredtoforwardSNMPtrapsa.
IntheDeviceManagementnavigationpane,gotoAlerts>AllSubscriptions.
b.
AtthetopoftheAllSubscriptionspane,clicktheExpandallbuttontodisplaythedetailsforeachalertsubscription.
c.
Toidentifythealertsubscriptiontemplatesthatmustbeupdated,lookforalertsthathaveSNMPv3TrapForwardingintheNotificationTypecolumnandhaveLinkedintheLinkedtoTemplatecolumn.
ThenameofthealertsubscriptiontemplateisshownintheSubscriptionNamecolumn.
d.
IntheDeviceManagementnavigationpane,gotoAlerts>Templates.
e.
IntheAlerts-SubscriptionTemplatespane,selectthealertsubscriptiontemplatefromthelist,andthenclicktheEditbutton.
TheEditSubscriptionTemplatewizardstarts.
f.
ClicktheNextbuttonuntiltheSpecifynotificationsettingspageappears.
g.
IntheSNMPv3credentialsection,selectSHA-1fromtheAuthenticationprotocollist,andselectAES-128fromthePrivacyprotocollist.
h.
Ifrequired,enterthenewvaluesfortheusername,authenticationpassphrase,andprivacypassphrase.
i.
ClicktheNextbuttonuntiltheConfirmpageappears.
j.
OntheConfirmpage,verifythattheinformationiscorrect,andthenclicktheSaveTemplatebutton.
k.
OntheResultspage,clicktheDonebutton.
AllofthealertsubscriptionsthatarelinkedtothisalertsubscriptiontemplateareautomaticallyupdatedwiththenewSNMPv3credentials.
l.
Repeatstepscthroughkforeachofthealertsubscriptiontemplates.
UpdatethealertsubscriptionsthatwerecreatedwithoutusinganalertsubscriptiontemplateandareconfiguredtoforwardSNMPtrapsa.
IntheDeviceManagementnavigationpane,gotoAlerts>AllSubscriptions.
b.
IntheAllSubscriptionspane,selectthealertsubscriptionfromthelist,andthenclicktheEditSubscriptionbutton.
TheEditSubscriptionwizardstarts.
c.
ClicktheNextbuttonuntiltheSpecifynotificationsettingspageappears.
d.
IntheSNMPv3credentialsection,selectSHA-1fromtheAuthenticationprotocollist,andselectAES-128fromthePrivacyprotocollist.
e.
Ifrequired,enterthenewvaluesfortheusername,authenticationpassphrase,andprivacypassphrase.
f.
ClicktheNextbuttonuntiltheConfirmpageappears.
g.
OntheConfirmpage,verifythattheinformationiscorrect,andthenclicktheEditSubscriptionbutton.
28InstallandSetUpHPWebJetadminENWWh.
OntheResultspage,clicktheDonebutton.
i.
Repeatstepsbthroughhforeachalertsubscriptionthatwascreatedwithoutusinganalertsubscriptiontemplate.
-or-Ifanyfuturechangesaremadetothealertsubscriptions,allofthealertsubscriptionsmustbechanged.
Topreventthisinthefuture,HPrecommendsthatyouusethefollowingstepstocreatenewalertsubscriptionsthatarelinkedtoalertsubscriptiontemplates:a.
IntheDeviceManagementnavigationpane,gotoAlerts>AllSubscriptions.
b.
IntheAllSubscriptionspane,selectthealertsubscriptionfromthelist,andthenclicktheUnsubscribebutton.
TheDeleteAlertSubscriptionswizardstarts.
c.
OntheConfirmpage,clicktheUnsubscribebutton.
d.
OntheResultspage,clicktheDonebutton.
e.
IntheDeviceManagementnavigationpane,gotoAlerts>Templates.
f.
IntheAlerts-SubscriptionTemplatespane,selectthealertsubscriptiontemplatefromthelist,andthenclicktheApplybutton.
TheApplyAlertSubscriptionTemplatewizardstarts.
NOTE:Ifanalertsubscriptiontemplateisnotavailable,createanalertsubscriptiontemplatethatmeetsyourspecificneeds.
g.
OntheSelectdevicespage,selectthedevicesfromtheAvailabledeviceslist,andthenclickthe>button.
h.
ClicktheNextbutton.
i.
Tolinktheselectedalertsubscriptiontemplatetothisalertsubscription,selecttheLinktemplatetosubscriptionoption.
Changesthataremadetotheselectedalertsubscriptiontemplateareautomaticallyappliedtothedevicesthatareassociatedwiththisalertsubscription.
-or-Tocreateanalertsubscriptionthatisnotlinkedtotheselectedalertsubscriptiontemplate,selecttheDoNOTlinktemplatetosubscriptionoption,andthenenteranameforthisalertsubscriptionintheSubscriptionnamebox.
Changesthataremadetothealertsubscriptiontemplatearenotappliedtothedevicesthatwerepreviouslyconfiguredwiththisalertsubscriptiontemplate.
j.
ClicktheNextbutton.
k.
OntheConfirmpage,verifythattheinformationiscorrect,andthenclicktheApplyTemplatebutton.
l.
OntheResultspage,clicktheDonebutton.
m.
Repeatstepsbthroughlforeachofthealertsubscriptionsthatwerecreatedwithoutusinganalertsubscriptiontemplate.
5.
OntheclientmachineswheretheHPWebJetadminclientislaunched,usethefollowingstepstoenabletheTLSprotocol:a.
Openasupportedwebbrowser.
b.
GotoTools>Internetoptions,andthenclicktheAdvancedtab.
c.
ScrolldowntotheSecuritysection,andthenselectthecheckboxesforoneormoreoftheTLSversions(TLS1.
0,TLS1.
1,andTLS1.
2).
6.
UsethefollowingstepstoverifythatthedevicesareconfiguredtocommunicatewiththeTLSprotocol:ENWWEnableFIPSontheHPWebJetadminServer29a.
Selectthedevicefromanydevicelist.
b.
OntheConfigtab,gotoNetwork>MgmtProtocol.
c.
VerifythatanyversionofTLS(TLS1.
0,TLS1.
1,andTLS1.
2)isenabled.
d.
Repeatstepsathroughcforeachdevice.
7.
UsethefollowingstepstoenableFIPS-140modeonthedevices.
EnablingFIPS-140modeaffectsonlythefollowingdeviceconfigurationoptions:SNMPVersionAccessControlconfigurationoption:TheSHA-1authenticationprotocolandAES-128privacyprotocolmustbeconfigured.
MgmtProtocolconfigurationoption:TheTLS1.
0,TLS1.
1,orTLS1.
2protocolmustbeenabled.
TIP:Thefollowingstepsarenotrequired.
However,youcanusethesestepstotroubleshootanyFIPS-relatedproblems.
a.
Selectthedevicefromanydevicelist.
b.
OntheConfigtab,gotoSecurity>FIPS-140Mode.
c.
SelecttheEnabledoption.
d.
ClicktheApplybutton.
e.
Repeatstepsathroughdforeachdevice.
Ifanyofthefollowingdeviceconfigurationoptionsareconfiguredonadevice,enablingFIPS-140modefailsforthatdevice:SNMPVersionAccessControlconfigurationoption:TheMD5authenticationandDESprivacyprotocolsmustnotbespecified.
IPsec/FirewallPolicyconfigurationoption:TheDES-CBC-MD5algorithmmustnotbespecifiedfortheKerberossetting.
UploadJetdirectCertificateconfigurationoption:CertificatesmustnotbesignedbyusingMD5orearlier(MD2orMD4).
UploadCACertificateconfigurationoption:CertificatesmustnotbesignedbyusingMD5orearlier(MD2orMD4).
MgmtProtocolconfigurationoption:TheSSL3.
0orearlierprotocolmustnotbeenabled.
HPWebJetadmindoesnotreporttheexactreasonforthefailure.
However,ifyouenableFIPS-140modebyusingthedeviceHPEmbeddedWebServer(EWS),theEWSdoesreporttheexactreasonforthefailure.
TheFIPS-140modesettingisavailableintheEWSfromtheNetworkingtab>Securitylink>Settingspage.
EnableFIPSontheHPWebJetadminserver1.
Stopthefollowingservices.
Theseservicesmustbestoppedinthespecifiedorder.
a.
HPWSProAdapterb.
HPWJAServicec.
mssql$HPWJA2.
UsethefollowingstepstoenableFIPSontheHPWebJetadminserverasalocalsecuritypolicy:30InstallandSetUpHPWebJetadminENWWTIP:FormoreinformationabouttheSystemcryptographysetting,seethe"Systemcryptography:UseFIPScompliantalgorithmsforencryption,hashing,andsigning"securitysettingeffectsinWindowsXPandinlaterversionsofWindowsdocumentontheMicrosoftsupportpage.
a.
GotoControlPanel>AdministrativeTools>LocalSecurityPolicy>LocalPolicies>SecurityOptions.
b.
Right-clickSystemcryptography:UseFIPScompliantalgorithmsforencryption,hashingandsigning,andthenselectProperties.
c.
OntheLocalSecuritySettingtab,selecttheEnabledoption,andthenclicktheOKbutton.
3.
Startthefollowingservices.
Theseservicesmustbestartedinthespecifiedorder.
a.
mssql$HPWJAb.
HPWJAServicec.
HPWSProAdapter4.
UsethefollowingstepstoverifythatHPWebJetadmincancommunicatewithallofthedevices:a.
IntheAllDeviceslist,lookforanydevicesthathaveDeviceCommunicationErrorintheStatuscolumn.
b.
VerifythatyoucanconfigureadevicebyusingHPWebJetadmin.
c.
IntheAllDeviceslist,right-clickadevice,andthenselectRefreshSelection(Full).
Verifythattherefreshcompleted.
IfthereareanydevicesthathaveastatusofDeviceCommunicationErrororyoucannotcompletestepborc,accessthedeviceEWS,andthenverifythefollowingsettings:ClicktheNetworkingtab,andthenclicktheNetworkSettingslink.
IfSNMPv3isenabled,verifythattheauthenticationprotocolisSHAxandtheprivacyprotocolisAES.
ClicktheSecuritytab,andthenclicktheCertificateManagementlink.
Selectacertificate,andthenclicktheViewDetailsbutton.
Verifythattheself-signedcertificateusesasignaturealgorithmotherthanMD5.
Repeatthisstepforeachself-signedcertificate.
UninstallHPWebJetadminWhenyouuninstallHPWebJetadmin,theMicrosoftSQLServerExpressEditioninstanceoftheHPWebJetadmindatabaseisalsoremoved.
YoucanrestoretheHPWebJetadmindatabaseifyourantheappropriatebackupproceduresandstoredthebackupfilesinasecurelocation.
TouninstallHPWebJetadmin,performthefollowingsteps:1.
GotoStart>ControlPanel>Uninstallaprogram.
2.
Right-clickHPWebJetadmin10.
4,andthenselectChange.
TheHPWebJetadmin10.
4-InstallShieldWizardstarts.
3.
ClicktheNextbutton.
4.
SelecttheRemoveoption,andthenclicktheNextbutton.
ENWWUninstallHPWebJetadmin315.
Followtheinstructionsinthewizard.
6.
ReviewtheMSI.
LOGfile,whereisarandomlygeneratedstring.
Thelogfileisavailableinthefollowingdirectory:C:\Users\\AppData\Local\TempTIP:YoucanuninstallHPWebJetadminfromthecommandline.
Forinstructions,seetheUninstallHPWebJetadminfromtheCommandLinewhitepaper.
ThiswhitepaperisavailablefromtheHPWebJetadminsupportpage(inEnglish).
ManageLicensesTherearesomefeaturesforHPWebJetadminthatrequirealicense.
Afteryouobtainthelicenseforafeature,youmustinstallthelicensetoenablethefunctionality.
Tomanagethelicenses,performthefollowingsteps:1.
GotoStart>AllPrograms>HPWebJetadmin10,andthenselectHPWebJetadminLicenseManager.
2.
Toinstallalicense,performthefollowingsteps:a.
ClicktheAddbutton.
b.
OntheEnterLicensewindow,enterthelicensekey,andthenclicktheApplybutton.
3.
Todeletealicense,selectthelicensefromthelist,andthenclicktheRemovebutton.
4.
Torefreshthelistoflicenses,clicktheRefreshbutton.
5.
ClicktheExitbutton.
6.
RestarttheHPWebJetadminservice(HPWJAService).
32InstallandSetUpHPWebJetadminENWWAEnd-UserLicenseAgreementWhenyoudownload,register,andinstallHPWebJetadmin,youmustreadtheEnd-UserLicenseAgreement(EULA)andacknowledgethatyouagreetotheterms.
AfterHPWebJetadminisinstalled,theEULAisavailablefromtheonlineHelp.
ToviewtheEULA,gotoHelp>About,andthenclicktheViewtheEnd-UserLicenseAgreementlink.
ENWW33IndexAaddressforcertificates17alertsselectingcorrectIPaddress12authorizingcertificate17automaticallyrestarting10BbackingupHPWebJetadmin22bindingtospecificNIC11CClickOnceSmartClientoverview18clientapplicationoperatingsystemrequirements2otherrequirements5clientconnectionselectingcorrectIPaddress11clienthardwarerequirements4clientports14clientsecurityrequirements6clientsessions,HPWebJetadminstarting20commandlineuninstallfrom31command-line,installingfrominblockingmode9syntax7configurationrecommendedinitialsteps10configurationfilecorrectingIPaddress13configuringautomaticservicerestart10Ddatabaserequirements4devicessupported5EEnd-UserLicenseAgreement(EULA)33eventnotificationsconfiguringport21FFeaturePacksimporting24ReleaseNotes24FIPSenablingonHPWebJetadminserver26firewallsoftware,configuring22Hhostaccessrequirements6HPWebJetadminclientsessionsstarting20HPWebJetadminserverenablingFIPS26HPWJAserviceselectingcorrectIPaddress11HTTPchangingthedefaultportfortheSmartClientapplication19HTTPSchangingthedefaultportfortheSmartClientapplication19configuring18IimportingFeaturePacks24Installationonehardwareplatform1upgrading1installationsubsequenttasks9installationrequirements5installingFeaturePacks24installingHPWebJetadminfromcommandline7fromcommandlineinblockingmode9recommendedinitialsteps10usinginstaller6IPaddressesselectingonmulti-homedservers11Llicenseagreement,software33LicenseManager32Mmanuallyrestarting22MicrosoftSQLServerusingseparateinstance18multi-homedserversselectingcorrectIPaddress11Nnetworkrequirements5NIC,bindingtospecific11Pportnumbers10standardSSLport17ports14eventnotifications21post-installationsteps10RReleaseNotesFeaturePacks24remoteports14requirements,system1restart10,22restoringHPWebJetadmin22SSecureSocketsLayer(SSL)implementing16securesocketslayer(SSL)17serverapplicationrequirements1serverhardwarerequirements3serversecurityrequirements6server,HPWebJetadminenablingFIPS2634IndexENWWservicerestartingautomatically10restartingmanually22SmartClientdeploying18SmartClientapplicationchangingdefaultHTTPandHTTPSports19runninginworkgroups20SNMPtrapsregistrationselectingcorrectIPaddress12softwarelicenseagreement33SQLServerusingseparateinstance18SSL(SecureSocketsLayer)implementing16SSL(securesocketslayer)17supporteddevices5systemrequirements1UuninstallingHPWebJetadminfromcommandline31fromControlPanel31upgraderequirements5upgrading1upgradingHPWebJetadminwhenHPWJAservicerunsasnetworkservice23whenHPWJAservicerunsasuseraccount23URLforcertificates17Vvirtualmachinerequirements3ENWWIndex35