HP has been a recognized leader in IT security, including imaging and printing security, for over 10 years. Built-in security controls and features are standard on all HP printers and MFPs with hard drives. Customers are concerned about the unauthorized access to sensitive information on the hard drives of these devices. “Secure File Erase” and “Secure Storage Erase” are available as free standard features on all printers and MFPs with hard drives.
HP continues to be proactive in educating customers about security risks and the features available to address them, and takes proactive steps to continuously maintain the security of devices in the field. HP Imaging and Printing Security Solutions work directly at the device and on the network to protect your information at rest and in motion and prevent unauthorized access. HP is the first imaging and printing company to have a Security Best Practices Checklist approved by the National Institute of Standards and Technology (NIST) and an Internet Protocol security (IPsec) solution approved by the U.S. Department of Defense. For more, see www.hp.com/go/secureprinting
. HP printers and MFPs do not store an image of every printed and copied document permanently on the hard drive. Temporary images required for document processing are automatically erased as soon as they are no longer needed. HP provides additional security features to prevent the retrieval of temporary images and user stored documents. By enabling HP’s “Secure Erase” features* this data cannot be recovered by forensics processes used in the news story.
. All currently produced HP MFPS and printers that have hard drives come standard with the “Secure Storage Erase” feature, which can be used to perform a secure erase of data on the hard drive. This practice is part of HP’s Security Best Practices Checklist. Additionally, the HP High-Performance Secure Hard Disk solution ensures data sent to the drive is encrypted.
. Documents can be stored on the device hard drive intentionally by customers when using the “Stored Jobs” feature. The system can be configured to automatically delete these jobs at 1 hour, 4-hour, 1 day, or 1 week intervals.
These jobs include Stored Jobs, Personal Jobs, Quick Copy Jobs, and Proof & Hold Jobs.
. The “Secure File Erase” feature when enabled ensures any hard drive information from print, copy, fax, and scan jobs is securely removed. When this data is deleted, the hard drive areas containing customer information are overwritten**, ensuring that the information cannot be recovered using diagnostic tools.
. Stored data can be protected using encryption. The HP High-Performance Secure Hard Disk solution protects data using encryption. All data written to the HP High-Performance Secure Hard Disk is encrypted; if the hard drive is removed from the system, the encrypted information on the drive is not readable.
Please contact your HP sales representative about the availability of this solution on your HP devices or please consult the following datasheet for availability. http://www.hp.com/hpinfo/newsroom/press_kits/2008/ipgconference/fs_highperformancesecureharddisk.pdf
. HP understands customer hard drives may contain sensitive business or technological information and employs standard industrial security measures to safeguard that information. Customers with regulatory or government requirements for data confidentiality are encouraged to securely erase all customer data before releasing the device.
Customers can use the “Secure Storage Erase” feature to securely delete all personal information from the hard drive before disposal, redeployment or end of lease return. All customer data on the hard drive is overwritten, ensuring the data is securely erased.
When using the “HP High-Performance Secure Hard Disk” solution, all data present on the drive can be deleted by using “Secure Hard Disk Erase/Unlock”, which performs a cryptographic erase. This feature of encrypted storage devices renders all data permanently unreadable by resetting the internal encryption keys.
: Additional hard drive sanitization procedures can be found at the Center for Magnetic Recording Research website at http://cmrr.ucsd.edu/people/Hughes/SecureErase.shtml
*Secure File Erase and Secure Storage Erase features not available for all models.
**Complies with 1) NIST Special Publication 800-88,Guidelines for Media Sanitization (current standard); 2) US Department of Defense 5220.22-M National Industrial Security Program Operating Manual (1997 edition)