File info: application/pdf · 47 pages · 379.93KB
HP COLOR LASERJET MANAGED FLOW MFP E876xx ...
additional information on the device features, refer to the online user guide found on the ... Device User List, Quick Sets, and Home Screen Customization.
HP COLOR LASERJET MANAGED FLOW MFP ...
HP COLOR LASERJET MANAGED FLOW MFP E876xx SERIES HP COLOR LASERJET MANAGED MFP E876xx SERIES Firmware Readme Product Name :
Full PDF Document
If the inline viewer fails, it will open the original document in compatibility mode automatically. You can also open the file directly.
Extracted Text
HP COLOR LASERJET MANAGED FLOW MFP E876xx SERIES HP COLOR LASERJET MANAGED MFP E876xx SERIES Firmware Readme Product Name(s): � HP Color LaserJet Managed Flow MFP E87640z � HP Color LaserJet Managed MFP E87640dn � HP Color LaserJet Managed Flow MFP E87650z � HP Color LaserJet Managed MFP E87650dn � HP Color LaserJet Managed Flow MFP E87660z � HP Color LaserJet Managed MFP E87660dn � Model Number(s): X3A86A � X3A87A � X3A89A � X3A90A � X3A92A � X3A93A This document contains information for the firmware revision number: Firmware Datecode: 20120212 Firmware Revision: 2407163_000224 HP Fleet Bundle Version Designation: FutureSmart Bundle Version 4.7.1 Description -- What is included in the Firmware bundle? -- Who needs this firmware? -- Determining the current version level of your firmware Enhancements and Fixes provided with this firmware revision Enhancements and Fixes provided with the previous revision(s) Installation Instructions -- Additional Information to know -- Using the Embedded Web Server -- Using the Walk up USB port -- Web JetAdmin FutureSmart Level Switching Procedures -- Embedded Web Server (EWS) -- Device Control Panel -- Web JetAdmin System Requirements Technical Assistance Customer Support Internet Additional Information Legal Statements -- Trademark Notices -- OPEN-SOURCE SOFTWARE LICENSE AGREEMENTS (In English) -- License and Copyright Description This Readme file provides specific installation instructions and other information you should know before you perform a firmware update for your HP LaserJet Series printer or MFP. Installation instructions are provided for Single and Multiple Printer Updates. This document provides specific update, installation and troubleshooting information. For additional information on the device features, refer to the online user guide found on the Windows Printing System Installer CD-ROM that came with your printer or at hp.com. What is included in a Firmware bundle? The HP LaserJet printer firmware update file available from the hp web site contains firmware for the printer, embedded JetDirect (if applicable), HP paper handling accessories used with the device in one convenient download file. When the Remote Firmware Upgrade file is sent to the HP LaserJet Printer or MFP firmware for the engine and all connected accessories are upgraded. Who needs this firmware? Similar to HP Inc. providing improved software for your HP LaserJet Printer or MFP, HP Inc. provides firmware updates for your printer periodically through its supported lifecycle. A firmware update may be necessary if it is determined that you may benefit from the resolution of any issue that is documented below. These updates are available on the HP support web site. Determining the current version level of your firmware To determine the current level of firmware installed on the device: Go to the printer's or MFP's control panel. 1. Go to the printer's control panel. 2. Swipe left and select the Reports application. 3. Select the Configuration/Status Pages menu. 4. Select the Configuration Page option. 5. Select the Print. On the printed Configuration page look in the section marked "Device Information" for the Firmware Datecode and Firmware Revision. The Firmware Datecode and Firmware Revision will look something like this: Firmware Datecode: 20170315 Firmware Revision: 2403276_005859 IMPORTANT NOTE: This firmware file requires an interactive update method. You CANNOT update these Product(s)/Model(s) using the traditional FTP, LPR or Port 9100 methods of upgrading. Please use one of the following methods listed below to update the firmware of this device. Enhancements and Fixes provided with this Firmware revision The following new functionality or features are provided by this firmware release: Firmware Datecode: 20120212 Firmware Revision: 2407163_000224 HP Fleet Bundle Version Designation: FutureSmart Bundle Version 4.7.1 ENHANCEMENT: Base: Added the UPC/A Font Added the ability to see scanning status on the Control Panel while performing a scan job. Italian language support added for the HP Accessibility Assistance. Added the ability to print on tab media. This feature can be configurable via the Paper/Quality tab under the Printing Preferences of the driver. Digital Sending: No New Updates Analog Fax: No New Updates Security/Authentication: New security check will prevent installation of non-compliant aftermarket solution bundles. Currently installed solutions are unaffected. Please work with solution providers for an updated signature-compliant version of their software. Embedded JetDirect: No New Updates FIXES: Base: An invalid status via SNMP Host Resources Mib may be seen when supplies are low. A 49.DE.05 Webkit encountered a fatal error, unable to recover error message may be observed when performing functions on the control panel with a pull-print solution installed. After a tray runs out of media the printer will prompt to load tray 1 even if another tray has similar media loaded. SafeNet AT SC650 v4.1 DoD SmartCard is not recognized. Embedded Web Server may hang with certain solutions installed when the Embedded Web Server is set to the Norwegian language. WS-Discovery packet causes 81.09.00 error. The "Use Requested Tray" setting within the Manage Trays section of the Embedded Web Page will temporarily change visually when setting tray size or type. A 49.4A.04 error may be seen intermittently when printing certain PDF files continuously for longer durations. The printer will sound like it is waking up and the power button LED will become solid and the Embedded Web Server will be active, but the control panel will remain dark and unresponsive. Digital Sending: Intermittently some pages are missing when performing Scan to Folder using 300 dpi and enabling High compression mode. An Operation Failed message is seen when typing in the email "to" field on devices managed by DSS. Analog Fax: No New Updates Security/Authentication: An invalid 33.05.21 Security Alert error occurs when waking device from sleep mode by opening the automatic document feeder. There is no prompt for PIN when accessing a function protected by Access Control with a DoD SmartCard installed. Embedded JetDirect: No New Updates Current firmware revisions included in this firmware bundle: DEVICE FIRMWARE REVISION COMPONENT FIRMWARE VERSION HP Color LaserJet Managed Flow MFP E876xx Series Firmware Datecode: 20120212 HP Color LaserJet Managed MFP E876xx Firmware Revision: 2407163_000224 Series Embedded JetDirect: JSI24070104 Engine Firmware Revision: V6.A1.00.951 SCB V3.00.00.64 12-18 Fax Ver11.4A Booklet Finisher or Stapler/Stacker Finisher V04.33 Inner Finisher V01.56 HP Fleet Release Designation Original Release FutureSmart 4.7.1 MD5 checksum for .bdl file 3e5477ce0e073c8f9304338413c9dcdb Enhancements and Fixes provided with this Firmware revision The following new functionality or features are provided by this firmware release: Firmware Datecode: 20181130 Firmware Revision: 2407071_037943 HP Fleet Bundle Version Designation: FutureSmart Bundle Version 4.7 ENHANCEMENT: Base: Added the ability to cancel all pending jobs at once. An access control setting "Details or Cancel any User's job" allows this to be restricted to logged-in users or administrators only. The checkbox "Show Preferred Domain Servers" has been added to the Windows Sign in Setup and Scan to Network Folder pages to allow the administrator to prioritize the order in which domain servers are tried. Added performance modification that reduces time to authenticate with a badge swipe. Added the ability to suppress blank pages for copies The Network Time Protocol server setting within the Embedded Web Server will no longer get auto deleted when the server cannot be reached after a few days. Added Job ID in Copy Archive meta data. Digital Sending: Added the ability to perform a Book Scan Mode for Digital Sending which is similar to the copy feature already present. Added the ability to perform 2-sided ID scans from within the Scan Mode menu for Embedded Digital Sending. Analog Fax: No New Updates Security/Authentication: No New Updates FIXES: Base: Barcodes generated with Code 128 font are not readable in certain conditions. Poor fusing may occur when coming out of sleep mode. A 49.38.0C error may occur when the printer is in a "Paper Out" condition and an IPDS print job is received. A paper jam in the buffer area is being reported as occurring in the booklet maker even when a booklet maker output device is not installed. Missing color planes, incorrect color output and/or ghosted images may be seen during long continuous periods of printing. The Home button will not return the control panel to the proper Home Screen unless the Reset button is pressed when using an aftermarket solution. The Date and Time may be incorrectly formatted when the localization functions of the JavaScript Date object are used. Fax Archive fails if the Job Statistics and Local Quota service are enabled. An incorrect load prompt may be seen in certain conditions when OCR scanning a document and then printing the same scanned document. Storing a Person Job within the drivers Job Storage feature may take more time then compared to a FutureSmart 3 device. Some SmartCard solutions may fail to communicate with the card reader properly causing the authentication dialog window to not appear. The device may hang and not print when using and IPDS solutions installed for printing from an IBM Host system. A 49 error is seen when upgrading firmware from FutureSmart 3 to FutureSmart 4 when keyboard layout is set to Portuguese ABNT2. A duplex scan with job reservation from a Network TWAN application will hang in the processing state and will not complete when no target is loaded in the ADF. A 49.38.11 may be seen on the control panel when printing emails with special characters. A 61.00.00 and 30.01.41 event may occur after the device wakes up from sleep and/or a scheduled wake event. The symptom of this event will temporarily go away if the device is power cycled. Digital Sending: Unable to delete fax speed dials when the device is being managed by Digital Send Software. Analog Fax: No New Updates Security/Authentication: Authentication agent Sign-In performance may be slow when using an aftermarket solution. Under certain circumstances the SIPR/NIPR card reader would go offline and require power cycle. A 403 error may occur on the control panel or solution server when using a nondefault administrator role with an aftermarket solution. Embedded JetDirect: Manual configuration settings may not be reported properly on the network configuration page when the network is disconnected. Current firmware revisions included in this firmware bundle: DEVICE FIRMWARE REVISION COMPONENT FIRMWARE VERSION HP Color LaserJet Managed Flow MFP Firmware Datecode: 20181130 E876xx Series HP Color LaserJet Managed MFP E876xx Series Embedded JetDirect: Engine Firmware Revision: SCB Fax Booklet Finisher or Stapler/Stacker Finisher Inner Finisher HP Fleet Release Designation MD5 checksum for .bdl file Firmware Revision: 2407071_037943 JSI24070006 V6.A1.00.902 V3.00.00.63 09-05 Ver11.4A V04.32 V01.56 Original Release FutureSmart 4.7 cf3626ffb1e2b4953aaa74a63e4640b2 Enhancements and Fixes provided with this Firmware revision The following new functionality or features are provided by this firmware release: Firmware Datecode: 20180830 Firmware Revision: 2406314_034189 HP Fleet Bundle Version Designation: FutureSmart Bundle Version 4.6.4 ENHANCEMENT: Base: Added a check box selection next to the file name in Print from Job Storage. End users can now select one or more files to include in a job. Added a job masking feature to the Print from Job Storage application which prevents jobs that are password or PIN protected from showing up on the print jobs list. The end user must first enter the password or PIN number to access protected jobs. Added French and Spanish language support to the HP Accessibility Assistant. Added the ability to Hide or Show the Help Menus on the front control panel. Added the ability to retrieve a network folder path from the contacts application instead of having to type the path in each time for scan to network folder. Improved the time it takes for the printer to boot to a Ready state from the powered off state. This change also reduced the amount of time it takes to get the first page out for a copy or print job just after turning on the device. Added the Rotate offset feature which provides the ability to sort copy and print jobs without a finisher present. Digital Sending: No New Updates Analog Fax: No New Updates Security/Authentication: Added support to resolve "CWE-693 Protection Mechanism Failure" by providing "Strict-Transport-Security", "Content-Security-Policy" and "X-Content-Type-Options" HTTP security header support. FIXES: Base: A 65.00.A1 error may occur after paper jam in right door is present and while a copy job is in progress. A 48.A1.01 error can intermittently occur when connected to a critical-client job accounting solution because a job was not properly marked as acknowledged. HP recommends unsubscribing/re-subscribing the job accounting solution after installing this firmware to ensure all legacy un-acknowledged jobs have been properly marked in the system. A 61.00.00 error may be seen on the control panel once every 24 hours after upgrading to FutureSmart Bundle Version 4.6.2. A badge reader solutions may become non-functional when swiping a badge during an error condition. A delay in printing may be seen after first power on when comparing the same activity with previous versions of firmware Automatic population of group fax number when a single number is selected or entered. Certain files may print slower after upgrading to FutureSmart Bundle Version 4.6.2 or 4.6.2.1. Certain PDF's which contain masks with 1 bit per color components and have been created from scanned image may print slowly. Colors and images may appear darker than usual and the green color bar is missing from the Color Band test. Control Panel status message for the Output Device top cover and front door may display the incorrect status of being open when actually closed. Print Color/Monochrome Impressions may increment differently from the HP LaserJet fleet with specific combinations of document content and driver settings. Stored Jobs won't print the number of copies which were entered if the "Done" button is not pressed first. Supply memory error may occur when the printer has a jam present and the printer wakes up from sleep. The device may display "Please Wait.. Checking Printer" on the control panel and a copy or print job cannot be initiated after upgrading to FuturSmart Bundle Version 4.6.2 Unable to print multiple copies when using Personal Job with Encryption (with password) and the PostScript UPD drivers. Within the Embedded Web Server (EWS), for the Job Statistics and Quota Settings configuration pages, some text/numeric strings are incorrectly translated for Simple Chinese language. While under the management of a Quota service, large print jobs may become unresponsive to a Cancel Job request. Added the ability to perform the Rotate Offset function which allow the device to sort copy or print jobs without a finisher attached. Digital Sending: A 49.38.03 error may occur when performing a Digital Send Software Local Address Book search. Importing fax speed dials have missing entries for the Japanese region. Unable to configure fax speed dials when device is managed by Digital Send Software. Analog Fax: Fax confirmation prints the company name mirrored for Hebrew and other Right to Left languages Security/Authentication: Under certain circumstances the SIPR/NIPR card reader would go offline and require power cycle. Embedded JetDirect: An HTTP error 400 "Bad Request" may be seen when user tries to configure the Jetdirect 2700w in the Embedded Web Server. Association/authentication problems with Jetdirect 2900nw and a wireless network when 802.11r fast roaming is enabled. Some solutions may take longer to retrieve list of jobs by enabling Session caching for the IP address in addition to host name-based caching. When using Google Cloud Printing and scaling a page from A4/Letter to A3/Ledger the page will not scale and will be rotated 90 degrees. Current firmware revisions included in this firmware bundle: DEVICE FIRMWARE REVISION COMPONENT HP Color LaserJet Managed Flow MFP E876xx Series HP Color LaserJet Managed MFP E876xx Series Embedded JetDirect: Engine Firmware Revision: SCB Fax Booklet Finisher or Stapler/Stacker Finisher Inner Finisher HP Fleet Release Designation MD5 checksum for .bdl file FIRMWARE VERSION Firmware Datecode: 20180830 Firmware Revision: 2406314_034189 JSI24060402 V6.A1.00.86 V3.00.00.61 07-10 Ver11.4A V04.32 V01.56 Original Release FutureSmart 4.6.4 1bd20d2a0856684da473aa214559d657 Enhancements and Fixes provided with this Firmware revision The following new functionality or features are provided by this firmware release: Firmware Datecode: 20180720 Firmware Revision: 2406210_000016 HP Fleet Bundle Version Designation: FutureSmart Bundle Version 4.6.2.1 ENHANCEMENT: Base: No New Updates Digital Sending: No New Updates Analog Fax: No New Updates Security/Authentication: No New Updates FIXES: Base: After upgrading to 4.6.2, the device may display "Please Wait.. Checking Printer..." on the control panel and a copy or print job cannot be initiated. A 61.00.00 error may be seen on the control panel once every 24 hours after upgrading to FutureSmart Bundle Version 4.6.2. Digital Sending: No New Updates Analog Fax: No New Updates Security/Authentication: No New Updates Embedded JetDirect: No New Updates Current firmware revisions included in this firmware bundle: DEVICE FIRMWARE REVISION COMPONENT FIRMWARE VERSION HP Color LaserJet Managed Flow MFP E876xx Series Firmware Datecode: 20180720 HP Color LaserJet Managed MFP E876xx Firmware Revision: 2406210_000016 Series Embedded JetDirect: JSI24060206 Engine Firmware Revision: V6.A1.00.802 SCB V3.00.00.58 02-28 Fax Ver11.4A Booklet Finisher or Stapler/Stacker Finisher V04.31 Inner Finisher V01.56 HP Fleet Release Designation Original Release FutureSmart 4.6.2.1 MD5 checksum for .bdl file f9d7f3a144d446cc1807b95a5983c161 Enhancements and Fixes provided with this Firmware revision The following new functionality or features are provided by this firmware release: Firmware Datecode: 20180627 Firmware Revision: 2406206_031922 HP Fleet Bundle Version Designation: FutureSmart Bundle Version 4.6.2 ENHANCEMENT: Base: Adds an option in EWS to remove the job cancel button (red X) on the control panel. Added an option where Remote control panel screen can now be suppressed at the control panel. Added ability to allow users to cancel A3 jobs on A4 printers, mainly targeted for Pull printing customers. Added Import/Export feature from the control panel to USB drive of Address Book, Device User List, Quick Sets, and Home Screen Customization. Added the capability to create and enforce Local Quota for Server-Less Job Accounting that allow/limit/deny usage based on User Access Code. Added ability wherein when Local Quota is enabled, non-authenticated users, "guest" or "other" accounts will not be allowed to print, copy, or scan by default. The defaults for these non-authenticated users is Action=Stop and all quota credits=0 for prints, copies, and scans. Added the ability to reset Job Statistics from the Control Panel and print the Job Statistics report from the Control Panel and EWS (/w Admin Credentials) for Server-less Job Accounting. Added the ability for an accessory to automatically update to the currently loaded firmware bundle after attaching the accessory to the engine and power cycling the device. Reloading the firmware after the accessory is attached is no longer required. Add the ability to use an IP address in the IPPS configuration with HTTPS Digital Sending: Adds job build functionality (non-image preview) for scan jobs. Enhancements to offline Address Book and Device User list editing and import. Added "Image Shift" feature to Copy and Scan to USB. Added support for Network Folder path in Contacts and allow users to save a Network Folder path in an individual contact record. Analog Fax: Added ability to send long page faxes up to 28 inches. Added the ability to click on a speed dial entry to directly apply the fax number to the dialing list which will eliminate extra steps needed to complete the task. Security/Authentication: Adds the ability to use an IP address in the IPPS configuration with HTTPS Added "Enable PS privileged operators" setting in the EWS Security/General Tab. When disabled (the default) the PostScript administrative passwords "SystemParamsPassword" and "StartJobPassword" are disabled and cannot be set. Any PS operator requiring these administrative passwords will not execute and return an error. When enabled both passwords default to "0" (zero) and can be set separately to an alphanumeric value. Embedded JetDirect: Added a feature that allows configuring the complexity for SNMPv3 passphrase Authentication and privacy protocols FIXES: Base: The configurable default setting for a copy job destination will not retain after a power cycle. Incorrect jam clearing instruction when jam occurs in the HCI Tray 4. Supplies Memory error seen after opening and closing the front door or top cover of Large Capacity Tray 49.38.07 errors may be seen when receiving faxes Error seen while enabling ePrint when device is set to "Norwegian" language. Certain barcode doesn't print correctly when using Direct PDF print. You may see a Data Received Warning and a very long pause between jobs when trying to send direct PDF file over a USB connection. After setting the Time format to a 24 Hour Clock you will see the format change back to a 12 Hour clock after a power cycle. USB hubs cannot be attached in series. Remove extra hubs" message may been seen intermittently on the control panel. 63.4D.01 or 63.4D.02 error may be seen when coming out of deep sleep mode and a warning already exists on the control panel. "Edge-to-Edge" configuration is listed under Copy Settings on Current Settings Page, and within embedded Help menu on device, even though the device does not support the "Edge-to-Edge" feature. Changing "Use Requested Tray" will not stick if Access control menu "Ability to modify tray size and type settings" is locked even when signed in as Administrator. When quickly using the remote control panel provided in the Embedded Web Server an administrator may see keyboard characters dropping or characters being presented out of order on the actual control panel screen. Enabling or Disabling the Restrict Color feature within the Embedded Web Server will not work if there is a leading or trailing space in the application name coming from the PJL Jobacct info in the driver. When "PJL Drive Access" Setting is enabled/disabled via WJA, the setting is not retained after a power cycle. A finisher jam may occur while trying to punch and staple the same document. Digital Sending: 49.38.07 error is seen under some conditions when the user was typing an email address into the scan-to-email TO: field. 44.01.3F events are seen in event log when performing scan to email with LDAP. 49.DE.11 error may be seen during LDAP search in certain conditions. Analog Fax: Fax header in Japanese displays square boxes for certain characters. Security/Authentication: When the Device Guest does not have the Print in Color permission in Access Control and users cannot select Alternate Sign In Methods, jobs sent to the device using the HP Universal Printer Driver will print in color again. A user's domain account may get locked out prematurely when attempting to log in at the printer due to entering an incorrect Windows domain credential. Card swipes may be lost or delayed when initiating an authentication session. CVE-2015-9251: jQuery before version 1.12.0 and 3.0.0 may be vulnerable to Cross-site Scripting (XSS) attacks. EWS>Security>Access Control default sign-in method for the HP AC Secure Pull Print button is reset to "Local Device" from "HPAC - DRA Server" following a firmware upgrade. CVE-2018-5923 - Solution application signature checking may allow potential execution of arbitrary code. Embedded JetDirect: No longer possible for the device to lose network connection after re-negotiating the link speed. Jetdirect 3000w not recognized by products localized for Japan. Device might exhibit a 81.09.00 error associated with certain HP AC authentication use cases involving multiple servers behind a network load balancer. Current firmware revisions included in this firmware bundle: DEVICE FIRMWARE REVISION COMPONENT FIRMWARE VERSION HP Color LaserJet Managed Flow MFP E876xx Series HP Color LaserJet Managed MFP E876xx Firmware Datecode: 20180627 Firmware Revision: 2406206_031922 Series Embedded JetDirect: JSI24060206 Engine Firmware Revision: V6.A1.00.80 SCB V3.00.00.58 02-28 Fax Ver11.4A Booklet Finisher or Stapler/Stacker Finisher V04.31 Inner Finisher V01.56 HP Fleet Release Designation Original Release FutureSmart 4.6.2 MD5 checksum for .bdl file 40b9723a065d9405bd366910ef38c0b7 Enhancements and Fixes provided with this Firmware revision The following new functionality or features are provided by this firmware release: Firmware Datecode: 20180510 Firmware Revision: 2406048_029615 HP Fleet Bundle Version Designation: FutureSmart Bundle Version 4.6.0.1 ENHANCEMENT: Base: Added a status popup on UI with "cancel" button while waiting for the quota server to respond. Improvements made to print speeds for complex jobs containing raster/photographic data. The improvement will vary based on the image size and content of each printed page. Pages containing larger raster/photographic images may benefit more from this firmware change. Pages containing only Text or Vector images will continue to have the same performance as previous firmware bundles. Added support for HP Accessibility Assistant Accessory. Print Engine Failure Sensor enabled (previously disabled). Digital Sending: No New Updates Analog Fax: No New Updates Security/Authentication: Added additional security measures to Cross-site Request Forgery (CSRF) prevention feature that may affect installation or configuration of new or previously installed Level 1 extensibility solution bundles. Temporarily disabling the CSRF feature may be required to complete installing and configuring these solutions. CVE-2017-15361 ROCA- Vulnerable RSA generation (TPM only) Embedded JetDirect: Added patch method for SNMP configuration. Updated certificates for Google Cloud Print. FIXES: Base: Fixed a defect where when a device is configured to send AutoSend updates daily, the device may hang after several days of use when coming out of sleep mode. Fixed a defect where you may see a 49.38.07 error message on the control panel when trying to retrieve a stored job and simultaneously using the scan functionality. Fixed a defect where the printable "Current Settings" page did not correctly represent the established value for 'Auto Off After Sleep'. Improvements made to USB firmware download time. It can be seen on the next upgrade after installing FutureSmart Bundle Version 4.6 or greater. Fixed a defect where a 49 error is seen when upgrading from FS3 to FS4 firmware with stored jobs on device. Fixed a defect where after clearing a paper jam from the High Capacity Output Finisher you still see a 13.84.D1 error. Fixed a defect where a printed cleaning page is seen in the middle of a print or copy job. Fixed a defect where in certain cases a 10.xx.03 error appears and is not able to be cleared from the control panel. Fixed a defect where it would prevent a proximity card reader from properly communicating with the printer running solutions using OXPd 1.7-based authentication. Digital Sending: Fixed a defect where very large OCR digital send jobs performed on the MFP may cause the device to become unusable. This behavior can be identified by the Message Center Job status scan count not keeping pace with the actual pages processing through the Automatic Document Feeder. Analog Fax: No New Updates Security/Authentication: Fixed a defect where Card-Swipe initiated authentication would intermittently delay initialization of an authentication session, resulting in 'lost' card swipes or sign-in when the user is in the middle of attempting to enter credentials manually. Fixed Security Defect CVE-2017-15361 ROCA- Vulnerable RSA generation (TPM only) Fixed a defect where the default sign in method changes from DSS to Local Device when device is rebooted. Embedded JetDirect: Fixed a defect where Cisco "ARP Proxy" feature was causing devices to decline the DHCP offer. Fixed a defect where Syslog Priority setting was not filtering properly. The fix restores proper operation. CCC events will still be reported regardless of priority when the "Enhanced security event logging" option is selected. Fixed a defect where only one stored IPP/IPPS print job was allowed at a time. Fixed a defect where Wireless option is not showing under Information tab. Fixed a defect where network connection is lost when forced to downshift due to poor quality signal. Fixed a defect where Jetdirect configuration page layout for Japanese (and other 2 byte languages) is unreadable. Current firmware revisions included in this firmware bundle: DEVICE FIRMWARE REVISION COMPONENT HP Color LaserJet Managed Flow MFP E876xx Series HP Color LaserJet Managed MFP E876xx Series Embedded JetDirect: Engine Firmware Revision: SCB Fax Booklet Finisher or Stapler/Stacker Finisher Inner Finisher HP Fleet Release Designation MD5 checksum for .bdl file FIRMWARE VERSION Firmware Datecode: 20180510 Firmware Revision: 2406048_029615 JSI24060004 V6.A1.00.68 V3.00.00.58 02-28 Ver11.4A V04.28 V01.53 Original Release FutureSmart 4.6.0.1 b31dac820fe3728ada6da33e788d7b9d Enhancements and Fixes provided with this Firmware revision The following new functionality or features are provided by this firmware release: Firmware Datecode: 20180227 Firmware Revision: 2405420_027501 HP Fleet Bundle Version Designation: FutureSmart Bundle Version 4.5.5 ENHANCEMENT: Base: This firmware will add the ability to select the "Use the Scan Mode Prompt for additional Pages" feature to add pages to a copy job (formally known as Job Build) Hard disk drive for the Main board was not reflected on the Configuration page. Provided ability to scan A3 originals which are 900mm (90cm) long through the ADF. Provides the ability to configure, through permissions on the EWS access control page, to force a sign in before any functionality can be accessed. This is done by restricting the guest user from being able to access all items in the list. When a product has been configured this way, users need to sign in before the home screen will display. Digital Sending: Added an option to block the creation of custom quickset. Analog Fax: No New Updates Security/Authentication: No New Updates Embedded JetDirect: No New Updates FIXES: Base: This firmware revision decreases the possibility of toner replenishment errors occurring by modifying the time the toner supply auger is actuated. When changing the default number of copies from either the control panel or EWS the copy count does not get reflected on the home screen. Incomplete error message was displayed on control panel when a Multi-Feed Jam was detected in the Automatic Document Feeder - ADF The SNMP OID prtMarkerProcessColorants (.1.3.6.1.2.1.43.10.2.1.6) now contains values which are appropriate for monochrome devices. Performance improvements to reduce the time taken to sign in an authenticated user. When Alternative Letterhead Mode (ALM) is enabled and a Tray is set to Preprinted (or Letterhead), and a PCL5 print job is sent to the printer that includes Paper Size and Tray Source but no Paper Type command, the Job should inherit Paper Type from the Tray setting and process the page using ALM logic. Instead, the printer crashes with a 49.38.07 error and a reboot is required. This defect has been addressed. When printing from Mac OSX High Sierra, error "undefinedresult, OFFENDING COMMAND" is seen. A 49.38.02 error may be seen on the control panel when upgrading firmware. You may see a 42.26.00 error when printing certain files through direct PDF print path. Finisher jam messaging not in the correct order to help with clearing a 13.84.A2 jam Device may not wake up from sleep after sleeping for a long period of time. Control panel will be dim and unresponsive. Consumables report as "unknown" after performing a Factory Reset on the product from the Embedded Web Server. Resolved issue where interaction with aftermarket authentication solutions could intermittently prevent triggering of the device Inactivity Timeout. You may see ADF skew greater than anticipated when scanning at 120 pages per minute You may see a 49.38.07 error under certain circumstances when printing from Tray1. When printing multiple raw direct print PDF files through an SAP print queue only first PDF is printed at the device. When device language is set to French and when performing scan to email, the virtual keyboard showing wrong layout setting is resolved. Image Registration values won't increment completely when the control panel language is set to other languages than English. The Danish keyboard does not contain Danish characters in FutureSmart 4 Unable to print certain PDFs from USB. Return to "Home" view upon badge authentication - In this release, the device front panel will return to the primary "Home" screen upon authentication. This behavior is more consistent with the front panel behavior in FutureSmart 3 during authentication. A 10.0X.03 Supply Memory Errors may show on the control panel after turning the device off and or the supply door is open/closed when the setting for "Managed Supplies" -> "Store Usage Data" is set to "Not on supplies". This change in firmware will only keep this issue from happening and will not solve this problem for a device in this state. Fewer events will be reported as "Please wait. Calibrating". The Main Board hard drive status was not being displayed on Configuration Page. A 49.38.07 error may be presented on the control panel or internal pages may not print if there is a prompt to load Letter Any in tray one when printing internal pages. This was due being allowed to set "Any" as the default paper type. Resolved an issue wherein when DSS is added or managing a device, it required the device to ping the DSS server every time prior to allow an authentication to occur. This led to increased authentication times. On the initial setup screen the Time Zone drop down menu has been placed before the selection for the Hours:Minutes. When changing the printer or MFP's Image registration values for trays in the Embedded Web Server you will see an error message presented on the EWS screen. This is seen when the language is set to something other than English. A 49.DE.11 error may be presented on the control panel when retrieving stored jobs or performing other activities with the fax functionality. Devices running FutureSmart 4.5.4 firmware which are reset thru a format disk, partial clean or cold reset are no longer able to configure SNMP v1/v2 to readwrite via WJA Digital Sending: Orientation of pages in the scanned output is incorrect when performing Digital Send jobs with Content Orientation set to "Automatically Detect". Operation Failed message on UI during address lookup on devices with windows embedded auth/DSS email/DSS ldap addressing. In certain circumstances, a user would be prompted for credentials when they try to use the "Browse" feature during a scan-to-folder operation. This would happen even when the "Always use these credentials" option was chosen and valid credentials had been entered into the setup. This fix makes sure that the Browse feature utilizes these credentials whenever possible. Performing a Scan to Network folder job with custom subfolder option of UserName generates sub folders with every new scan when settings are retained. Analog Fax: No New Updates Security/Authentication: No New Updates Embedded JetDirect: If a Domain Controller (DC) refused a connection with the printer (i.e. sent RST in response to SYN or just did not respond), the printer would go to the "scheduled" status (a "try again later" strategy). This fix has the printer get the next DC in the DNS SRV query response and try it. If all DCs in the SRV query response reject connection attempts, then the printer goes to the "scheduled" status. Printer is showing offline after registering to Google Cloud Print. Current firmware revisions included in this firmware bundle: DEVICE FIRMWARE REVISION COMPONENT FIRMWARE VERSION HP Color LaserJet Managed Flow MFP E876xx Series HP Color LaserJet Managed MFP E876xx Firmware Datecode: 20180227 Firmware Revision: 2405420_027501 Series Embedded JetDirect: JSI24050504 Engine Firmware Revision: V6.A1.00.62 SCB V3.00.00.57 02-02 Fax Ver11.4A Booklet Finisher or Stapler/Stacker Finisher V04.25 Inner Finisher V01.53 HP Fleet Release Designation Original Release FutureSmart 4.5.5 MD5 checksum for .bdl file 1a5642482cc6f5c3a0c70d3a293a9458 Enhancements and Fixes provided with this Firmware revision The following new functionality or features are provided by this firmware release: Firmware Datecode: 20171205 Firmware Revision: 2405347_024814 HP Fleet Bundle Version Designation: FutureSmart Bundle Version 4.5.2 ENHANCEMENT: Base: An additional field is added in EWS to configure the Custom media type to True/False for asymmetric media type. This setting when enabled, determines if Alternative Letterhead Mode when enabled, should be applied on this specific User defined media type or not. Provides the ability to disable the default SNMPv3 passphrase complexity. Embedded Job Accounting with Statistics - a simple server-less embedded solution that provides ability to track, report and account for individual use via PIN on the MFP and via HP UPD. Improvements to reduce the occurrence of System Busy message seen during Digital Send and Copy jobs. Digital Sending: The length of the Quickset name has been increased to 100 characters and the description field has been increased to 300 characters Analog Fax: No New Updates Security/Authentication: Increased number of certificates allowed in the certificate store to 200 Embedded JetDirect: No New Updates FIXES: Base: Certain Direct PDF printing causes middle of page to no longer be gradient. Printer reports itself as wrong model speed in driver or OID value even though the printer print and copies at correct speed. Copy or Scanning pages with light pastel colors may reproduce as grayscale image. Time/clock may be off by one hour in southern hemisphere time zones Device may not wake up from sleep after sleeping for a long period of time. Control panel will be dim and unresponsive. You may see a 33.05.06 Security Alert during the firmware upgrade process and not be able to boot to the Ready status. The device can be recovered by reloading this firmware from USB Thumbdrive through the preboot menus. Message Center instructions missing. Improvements to address book performance. A slight decrease in Quick Set entry time has been added in this release. A slight decrease to first copy page out time is provided in this firmware release. Physical and virtual keyboards on Workflow device are not synchronizing when pressing the caps lock. Increased the number of pages between the Almost Full and Full indications for the Toner Collection unit. Additional debugging has been added to help verify the cause of 81.0B.00 events After Restoring a FutureSmart 4 product using Back Up/Restore, when changing Control Panel Localization using the Info button some application names get stuck and do not revert to Default localization. This is now corrected and working as expected. A 61.00.01 error will be posted in the Event Log when the side High Capacity Input tray is detached. Incomplete error message was displayed on control panel when a Multi-Feed Jam was detected in the Automatic Document Feeder (ADF) After a firmware upgrade is performed a USB error or message may see on the control panel followed by a 99.00.FF event. Digital Sending: Improvements to the overall digital send and copy performance experience. Operation Failed message on UI during address lookup on devices with windows embedded auth/DSS email/DSS ldap addressing. Scan quality improvements for jobs scanned with high compression. When a scan to ftp quickset is moved from the "quick set" folder to home screen and then subsequently edited, attempts to use this quickset button trigger "a folder path is required" error. Analog Fax: No New Updates Security/Authentication: Shortened timeout and added descriptive error for the case where a server completes the TCP handshake with the server but fails to negotiate the SMB protocol. This firmware addresses the following security issues: CVE-2017-13077: Reinstallation of the pairwise encryption key (PTK-TK) in the 4-way handshake. CVE-2017-13078: Reinstallation of the group key (GTK) in the 4-way handshake. CVE-2017-13079: Reinstallation of the integrity group key (IGTK) in the 4-way handshake. CVE-2017-13080: Reinstallation of the group key (GTK) in the group key handshake. CVE-2017-13081: Reinstallation of the integrity group key (IGTK) in the group key handshake. EWS page for setting up Smart Card authentication was changed to indicate that hostnames for authentication servers need to be entered, not "Trusted Domains". In the embedded web server under the security tab and access control menu, removed the individual sign-in methods for the Embedded Web Server (EWS). These controls offered no advantage since access is determined by the initial signin to the embedded web server. The default sign-in method for the EWS remains if wanting to change the sign-in prompt to for example request Windows or LDAP authentication instead. This firmware disables the "TFTP Configuration File" setting to prevent unauthorized device resets. Embedded JetDirect: No New Updates Current firmware revisions included in this firmware bundle: DEVICE FIRMWARE REVISION COMPONENT FIRMWARE VERSION HP Color LaserJet Managed Flow MFP E876xx Series Firmware Datecode: 20171205 HP Color LaserJet Managed MFP E876xx Firmware Revision: 2405347_024814 Series Embedded JetDirect: JSI24050258 Engine Firmware Revision: V6.A1.10.13 SCB V3.00.00.54 09-20 Fax Booklet Finisher or Stapler/Stacker Finisher Inner Finisher HP Fleet Release Designation MD5 checksum for .bdl file Ver11.4A V04.24 V01.53 Original Release FutureSmart 4.5.2 753ce45832258279c7bbdffbf7c3684b Enhancements and Fixes provided with this Firmware revision The following new functionality or features are provided by this firmware release: Firmware Datecode: 20171025 Firmware Revision: 2405129_000034 HP Fleet Bundle Version Designation: FutureSmart Bundle Version 4.5 ENHANCEMENT: Base: Added two new features to improve the private and usability of retrieving stored jobs. Administrators can define what users first see when entering the "Print from Job Storage" application. Administrators have a new setting in the embedded web server under "Security" [Tab] -> "Protect Stored Data" [Menu] -> "Managed Stored Jobs" [Section] called "Behavior when users are authenticated. If "Assist users to their jobs" is selected, users entering the application will immediately see their jobs provided a folder exists by their username (default behavior in the print driver when sending jobs). Administrators will also note a new permission that is not activated by default in the embedded web server under "Security" [Tab] -> "Access Control" [Menu] -> "Sign In and Permission Policies" [Section] -> "Print from Job Storage application" [Control Panel Permission] for "Other Users' Jobs and Folders". If removing the permissions (e.g. for "Guest" and "Device User") a regular user will only be able to see their or guest jobs. Job log size was increased. Ability to schedule and perform a HDD clean via an internal schedule set by XTP tickets. Added a "3 days" setting in Temporary/Standard Stored Job Retention. Added support for Chinese, Japanese, Korean keyboards. Changes in power management to meet new Blue Angel regulations. Detailed status on the state of job is shown in Job Details for Active Jobs and Completed jobs. Added functionality wherein users will be prevented from creating a one-touch Quick Set that cannot be started because the Quick Set does not have everything needed to start the job saved in the Quick Set. New Web Print Platform (WPP) architecture designed to address issues with current architecture. Supports many services in addition to ePrint. Provides simplified printer registration protocol for improved reliability. Supports web sockets tunnel infrastructure as alternative to XMPP and HTTP signaling for notifications. Functionality added to allow users to be able to perform copy watermarks and stamps. Added the ability to allow certain quicksets to be triggered via keyboard shortcuts from compatible USB keyboards to better enable clients with accessibility requirements. Added the ability to disable the "Shop for Supplies" links in the embedded web server. Increased the number of border colors to choose from for the Welcome message that can be displayed at the control panel. On the soft keyboard that is displayed on all FutureSmart 4 device control panels, the location of the backslash "\" character has moved to make it faster and easier to access. Support included for Hebrew and Arabic on the device's Control Panel. Added support for German Swiss characters and symbols to the virtual keyboard. The Backup and Restore feature has been expanded to include JDI settings. Additionally, this feature has been expanded to allow creating a backup file and restoring that file to another device of the same model and firmware version as the backup file. Role-Based Access to EWS provides ability to limit access to EWS items via defined roles. Added the ability within the Embedded Web Server Remote Control Panel to press and hold down your mouse key over the virtual keyboard to show alternative or optional characters. "The Quick View feature is now supported and it may help increase print speed with PDF files that have been created by scanning the content with high compression on a Multifunction Product. The following steps need to be performed to take advantage of this feature: 1. Install the PCL 6 HP Universal Print Driver Version 6.4.1 or greater. 2. After the printer driver is connected to the printer the drivers Automatic Configuration feature must be performed. This setting can be found in the Device Settings Tab. 3. Lastly select "Quick View" from the Print Quality drop down option found in the drivers Printing Preferences to ensure that the feature is used while printing." Apps/Icons hidden in FutureSmart 3 will appear in FutureSmart 4 after an upgrade. Added Booklet Fold Calibration functionality. This functionality provides ability to set different Fold Line Shift for different Media Size. The Line Shift is applicable to a family of Media Size. A reboot warning will be displayed after performing a Restore in the Embedded Web Server. Digital Sending: User prompted to add contacts when sending to an email address not already stored in contacts list. Added a usability improvement for customers using certain pull print & authentication solutions (such as HP Access Control) which populate the username, domain & home folder path as attributes. In these environments if the user preauthenticates with their badge (taps first) before entering a Save to Network Folder application quick set configured with Personal Share & verify access, the device will only require the user's password. End users now have the ability to browse network folders from the Send to Network Folder application for CIFS and DFS connections (but not FTP) provided they have "Ability to edit the network folder path" enabled by their network administrator. Added Email Domain Restriction feature which allows the administrator to restrict the e-mail addresses that can be used in scan to Email jobs (To/Cc/Bcc) and email job notifications, by restricting the domains to which emails can be sent. Added additional text to email notifications when users select job notifications for Save to Network Folder jobs. The text now includes the full path that the job was sent to. TWAIN scanning support on Network connected MFPs. The scan can be initiated using an HP or non HP TWAIN client application. The feature would also support 'Job Reservations' to complete the remote scan requests from the Control Panel of the MFP. Analog Fax: No New Updates Security/Authentication: For NIPRNet Smartcard authentication, added ability to choose alphanumeric or numeric keyboard as default for password entry. "Secure by Default Initiative: This firmware introduces updated security settings defaults to increase out-of-box security and reduce the device security attack surface. The updated security settings and defaults are: SNMPv1/v2: Read-only access (previously Read-write access) PJL/PS File System Access Settings: Disabled (previously Enabled) PJL Device Access Commands: Disabled (previously Enabled) Encryption Strength: RC4 and 3DES ciphersuites Disabled (previously Enabled) Minimum password Length and Complexity: Enabled (new FutureSmart 4 feature) Administrative password Lockout: Enabled (new FutureSmart 4 feature) Cross-Site Request Forgery Prevention: Enabled (new FutureSmart 4 feature) Note: Updating to this firmware version from FutureSmart 3 bundles or FutureSmart 4 bundles before version 4.5 will not update the security settings to the new defaults. Performing a Reset Factory Settings, Format Disk or Partial Clean command will update the security settings to the new defaults, overwriting any previously configured setting. Devices with FutureSmart 4.5 out-of-the-box, or upgraded FutureSmart 4.5 devices which have been factory reset, will have new security standards, such as SNMPv1/v2 set to read-only. In order to be able to configure those devices HP Web Jetadmin 10.4r2 with FP6 or higher is required. FP6 and HP Web Jetadmin 10.4SR3 (bundled with FP6) will be released end of November 2017. Security Manager v3.1, releasing mid-November 2017, is also required to manage some of the new security settings/behaviors." HP Connection Inspector is a new embedded security feature that detects a network attack using DNS Network Anomaly Detection algorithms. It ensures that devices are not trying to connect to Malware Command and Control Centers on the Internet. When a Network Anomaly is detected the device will enter a DNS protected mode preventing unknown DNS requests. If certain parameters are exceeded, it will reboot the device to a known good condition, and provides alert notifications which can be monitored by Security Information Event Management applications, including HP ArcSight and SPLUNK. TLS 1.2 support for L1 solutions. This firmware provides compatible HP and 3rd party solution software the ability to support TLS 1.2 based encryption by routing outbound HTTPS connections through the Jetdirect networking interface. No partner solution changes are required to support this change. Support for 3072 bit and 4096 bit key lengths with RSA-based certificates NSA announced changes to the Commercial National Security Algorithm Suite (CNSS) that specify RSA key lengths should have a minimum size of 3072 bits with 4096 bits also acceptable. This firmware supports selecting 3072-bit and 4096-bit keys for self-signed certificates and certificate signing requests generated on the device. Larger key sizes for imported certificates were supported in previous firmware versions. Embedded JetDirect: No New Updates FIXES: Base: Side high capacity input will not upgrade with a normal firmware upgrade procedure. With this firmware, the firmware will have to be installed twice to upgrade the sHCI. After that, all other upgrades will work as normal. Incorrect Chinese localization for the Embedded Web Server Email and Scan to Folder Quick Setup Wizards Internal Disk not functional error may appear on the control panel intermittently. Disk not functional error may appear on the control panel after a firmware upgrade. A 49.DE.01 error will be seen on the control panel when attempting to print 200 stored jobs at once You may see a ITB cleaning failure which results in waste toner contamination on the printed pages. After connecting the printer to a network to start the LPDC process, the printer repeatedly reboots with the new product wizard displaying again after each reboot. Not all RAM was being reported correctly on the configuration page. Disk not functional error may appear on the control panel intermittently after a partial clean. You may see an image shift while performing Mixed Letter/Legal digital send jobs. When using USTATUS you may see an error � PJL Info Status Response Invalid. You may see a 49.38.07 error after receiving a toner replenishment error. When a Searchable PDF (OCR) is created with "Multiple Files" option, only the text on first page is OCR'ed and not the rest of the pages. If any of the guest access controls for control panel functions are modified while the product is asleep, the setting now takes effect on wake-up without having to press reset manually. Resolved an issue where welcome screen used in addition to a badge reader causes the badge to not log a user into the device. Keyboard layout on the control panel did not indicated when Caps Locks were enabled. The "Clearing Settings" message seems to appear for no apparent reason. Placed a limit on requested refresh rate of animated GIFs in aftermarket solutions to ensure system performance is not compromised during high load scenarios. You may see a 49.DE.01 when accessing Quicksets on the front control panel. Not able to save Moscow as your time zone within the EWS or Control Panel. A reoccurrence of a 61.00.00 information event may be seen multiple times the event log. Graphical animation is missing when encountering a 10.01.90 error. Fixed an issue with guest user permissions during address book import/export operation. On boot up you may encounter one of the following errors - 61.00.00, 30.01.41 or 99.05.06 - in certain situations/circumstances. During card-swipe based authentication used by some aftermarket solution providers, an extra UI form not intended for viewing would be shown during the sign-in process. This extra form is now hidden. A 66.90.21 error may appear on the control panel when an external finisher is attached. Web JetAdmin Feature Pack 4 template change moves all icons from two other screens to home screen. Messages for what you can see with the Job log through Access control is confusing. Upgrading to FutureSmart 4 from FutureSmart 3 causes the New Printer Wizard to initiate. Keyboard for numeric keyboard stays gray. Improvement in accuracy of Fuser cycle count. Copy or Scanning pages with light pastel colors may reproduce as grayscale image. Not able to change density settings with in the Service Tools menu. Improvement in color plane registration when printing in 1200 dpi. Missing graphics on pages when printing certain PCL5 jobs. Improvements in print performance of certain types of jobs. Improvements in small job print performance. Digital Sending: Fixed email quicksets with "Start instantly when selected from the Home Screen" where "At least one of the following is required: To, CC or BCC" was appearing unexpectedly if using the "User's address (sign-in required)". This message should no longer appear provided the user's sign in information is complete. Folder Path invalid error is seen when folder path has a leading "/". A 49.38.03 error is seen when adding a contact to the local address book using the prompt after sending an email using DSS. Processing hang is seen intermittently when performing back to back Scan to email jobs. Passwords are typically not included in the user's badge for badge authentication nor conveyed in the solution itself (e.g. when using HP Access Control and other pull print solutions). The Save to Network Folder application often is configured to use the user's credentials to connect to the folder path (e.g. saving to the user's home directory). It cannot do so without the user's password. In FutureSmart 3.7.3 and later, HP added a feature to prompt for the password more intelligently for the Save to Network Folder application. This feature was added to FutureSmart 4 as well, but some improvements were required for the new UI to prompt for all configurations correctly (whether using regular shared folders, personal folders or the %HOME_FOLDER% macro for the folder path in shared folders) as well as cases where verify access is disabled (not recommended). When performing scan-to-folder feature using preview functionality, the 2nd job is overwritten by 3rd job and so on. Improvements to the overall digital send and copy performance experience. Errors 44.03.0B (Scanning Failed. All pages were blank) and 44.03.06 (Digital Send image processing error) are seen while performing Scan to Email and Scan to Network Folder jobs. When a scan to ftp quickset is moved from the "quick set" folder to home screen and then subsequently edited, attempts to use this quickset button trigger "a folder path is required" error. Invalid email address error is displayed when utilizing user's signed in credentials (sign in is required) in a Send To Email job. Despite the error, recipient fields are populated properly and the email is sent once the message is dismissed by clicking OK. Scan To Folder prompting for username and domain when already authenticated. Should only prompt for password. Analog Fax: A logging behavior has been corrected where the device Error Log may include 44.91.08 LAN Fax Configuration Errors even though LAN Fax is not enabled. Security/Authentication: This firmware addresses the following security issues: CVE-2017-11103 - Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks. Resolved an issue reading some installed security certificates which prevented successful certificate validation and could lead to a 45.00.33 SSL fingerprint error. Fixed an issue where scan to network folder suddenly stops working for Windows 10 shares after receiving Microsoft update 1703 or later. This firmware addresses the following security issues: CVE-2017-9765 - Integer overflow in SOAP (Simple Object Access Protocol) function allows execution of arbitrary code or Denial of Service, aka Devil's Ivy attack. This firmware addresses the following security issue: CVE-2017-2750 - Insecure Solution DLL Signature Validation. Added support for G&D FIPS-201 SIPR smartcards that are provisioned without encipherment certificates. Embedded JetDirect: 81.09.00 error was occurring intermittently on reboot Updates to HTTPS communications for embedded aftermarket solutions. Current firmware revisions included in this firmware bundle: DEVICE FIRMWARE REVISION COMPONENT FIRMWARE VERSION HP Color LaserJet Managed Flow MFP E876xx Series Firmware Datecode: 20171025 HP Color LaserJet Managed MFP E876xx Firmware Revision: 2405129_000034 Series Embedded JetDirect: JSI24050132 Engine Firmware Revision: V6.A1.00.54 SCB V3.00.00.54 09-20 Fax Ver11.4A Booklet Finisher or Stapler/Stacker Finisher V04.24 Inner Finisher V01.53 HP Fleet Release Designation MD5 checksum for .bdl file Original Release FutureSmart 4.5 7d11d30fbdb411125c00115c86965e3f Enhancements and Fixes provided with this Firmware revision The following new functionality or features are provided by this firmware release: Firmware Datecode: 20171002 Firmware Revision: 2403325_000091 HP Fleet Bundle Version Designation: FutureSmart Bundle Version 4.3.0.4 ENHANCEMENT: Base: No New Updates Digital Sending: No New Updates Analog Fax: No New Updates Security/Authentication: No New Updates Embedded JetDirect: No New Updates FIXES: Base: Color table update to improve flesh tones consistency with other HP Inc. products. Digital Sending: No New Updates Analog Fax: No New Updates Security/Authentication: No New Updates Embedded JetDirect: No New Updates Current firmware revisions included in this firmware bundle: DEVICE FIRMWARE REVISION COMPONENT FIRMWARE VERSION HP Color LaserJet Managed Flow MFP E876xx Series Firmware Datecode: 20171002 HP Color LaserJet Managed MFP E876xx Firmware Revision: 2403325_000091 Series Embedded JetDirect: JSI24r10033 Engine Firmware Revision: V6.A1.20.03 SCB V3.00.00.47 02-09 Fax Ver11.4 Booklet Finisher or Stapler/Stacker Finisher V04.22 Inner Finisher V01.52 HP Fleet Release Designation Original Release FutureSmart 4.3.0.4 Enhancements and Fixes provided with this Firmware revision The following new functionality or features are provided by this firmware release: Firmware Datecode: 20170724 Firmware Revision: 2403321_000076 HP Fleet Bundle Version Designation: FutureSmart Bundle Version 4.3.0.3 ENHANCEMENT: Base: No New Updates Digital Sending: No New Updates Analog Fax: No New Updates Security/Authentication: No New Updates Embedded JetDirect: No New Updates FIXES: Base: You may see a ITB cleaning failure which results in waste toner contamination on the printed pages. Internal Disk not functional error may appear on the control panel intermittently. Disk not functional error may appear on the control panel after a firmware upgrade. Digital Sending: No New Updates Analog Fax: No New Updates Security/Authentication: This firmware addresses the following security issues: CVE-2017-11103 - Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks. Embedded JetDirect: No New Updates Current firmware revisions included in this firmware bundle: DEVICE FIRMWARE REVISION COMPONENT FIRMWARE VERSION HP Color LaserJet Managed Flow MFP E876xx Series Firmware Datecode: 20170724 HP Color LaserJet Managed MFP E876xx Firmware Revision: 2403321_000076 Series Embedded JetDirect: JSI24r10033 Engine Firmware Revision: V6.A1.20.03 SCB V3.00.00.47 02-09 Fax Ver11.4 Booklet Finisher or Stapler/Stacker Finisher V04.22 Inner Finisher V01.52 HP Fleet Release Designation Original Release FutureSmart 4.3.0.3 Enhancements and Fixes provided with this Firmware revision The following new functionality or features are provided by this firmware release: Firmware Datecode: 20170526 Firmware Revision: 2403317_000025 HP Fleet Bundle Version Designation: FutureSmart Bundle Version 4.3.0.2 ENHANCEMENT: Base: Improvement to color plane registration when printing in 1200 dpi Digital Sending: No New Updates Analog Fax: No New Updates Security/Authentication: No New Updates Embedded JetDirect: No New Updates FIXES: Base: A 66.90.21 error may appear on the control panel when an external finisher is attached. In the Event Log only, you may see a 42.B0.01 due to missing localized text. Digital Sending: No New Updates Analog Fax: No New Updates Security/Authentication: No New Updates Embedded JetDirect: No New Updates Current firmware revisions included in this firmware bundle: DEVICE FIRMWARE REVISION COMPONENT FIRMWARE VERSION HP Color LaserJet Managed Flow MFP E876xx Series Firmware Datecode: 20170526 HP Color LaserJet Managed MFP E876xx Firmware Revision: 2403317_00025 Series Embedded JetDirect: JSI24r10033 Engine Firmware Revision: V6.A1.00.36 SCB V3.00.00.47 02-09 Fax Ver11.4 Booklet Finisher or Stapler/Stacker Finisher V04.22 Inner Finisher V01.52 HP Fleet Release Designation Original Release FutureSmart 4.3.0.2 Enhancements and Fixes provided with this Firmware revision The following new functionality or features are provided by this firmware release: Firmware Datecode: 20170404 Firmware Revision: 2403300_006052 HP Fleet Bundle Version Designation: FutureSmart Bundle Version 4.3.0.1 ENHANCEMENT: Base: No New Updates Digital Sending: No New Updates Analog Fax: No New Updates Security/Authentication: No New Updates Embedded JetDirect: No New Updates FIXES: Base: A print quality optimization has been made that will improve process neutrals, highly saturated colors and flesh tones Digital Sending: No New Updates Analog Fax: No New Updates Security/Authentication: No New Updates Embedded JetDirect: No New Updates Current firmware revisions included in this firmware bundle: DEVICE FIRMWARE REVISION COMPONENT FIRMWARE VERSION HP Color LaserJet Managed Flow MFP E876xx Series HP Color LaserJet Managed MFP E876xx Series Firmware Datecode: 20170404 Firmware Revision: 2403300_006052 Embedded JetDirect: JSI24r10033 Engine Firmware Revision: V6.A1.00.28 SCB V3.00.00.47 02-09 Fax Ver11.4 Booklet Finisher or Stapler/Stacker Finisher V3.0-0.6 Inner Finisher V3.0-0.6 HP Fleet Release Designation Original Release FutureSmart 4.3.0.1 Enhancements and Fixes provided with this Firmware revision The following new functionality or features are provided by this firmware release: Firmware Datecode: 20170321 Firmware Revision: 2403293_005973 HP Fleet Bundle Version Designation: FutureSmart Bundle Version 4.3 ENHANCEMENT: Base: No New Updates -- Original Release Digital Sending: No New Updates -- Original Release Analog Fax: No New Updates -- Original Release Security/Authentication: No New Updates -- Original Release Embedded JetDirect: No New Updates -- Original Release FIXES: Base: No New Updates -- Original Release Digital Sending: No New Updates -- Original Release Analog Fax: No New Updates -- Original Release Security/Authentication: No New Updates -- Original Release Embedded JetDirect: No New Updates -- Original Release Current firmware revisions included in this firmware bundle: DEVICE FIRMWARE REVISION COMPONENT FIRMWARE VERSION HP Color LaserJet Managed Flow MFP E876xx Series HP Color LaserJet Managed MFP E876xx Series Embedded JetDirect: Engine Firmware Revision: SCB Fax Booklet Finisher or Stapler/Stacker Finisher Inner Finisher HP Fleet Release Designation Firmware Datecode: 20170321 Firmware Revision: 2403293_005973 JSI24r10033 V6.A1.00.27 V3.00.00.47 02-09 Ver11.4 V3.0-0.6 V3.0-0.6 Original Release FutureSmart 4.3 No Previous Releases -- Original Version Installation Instructions NOTE: Please be aware that an update in some circumstances may require 30 minutes or more to complete. You can send the firmware update to a device at any time; the device will wait for all I/O channels to become idle before cycling power. Please print a configuration page prior to performing any firmware update. To print the configuration page: 1. Go to the printer's control panel. 2. Swipe left and select the Reports menu. 3. Select the Configuration/Status Pages menu. 4. Select the Configuration Page option. 5. Select the Print. On the printed Configuration page look in the section marked "Device Information" for the Firmware Datecode and Firmware Revision. The Firmware Datecode and Firmware Revision will look something like this: Firmware Datecode: 20170315 Firmware Revision: 2403276_005859 The elapsed time for an update depends on the I/O transfer time as well as the time that it takes for the printer to reinitialize. The I/O transfer time depend on the speed of the host computer sending the update and the I/O method (USB or network). The re-initialization time will depend on the specific hardware configuration of the printer, such as the number of EIO devices installed, the presence of external paper handling devices, and the amount of memory installed. Finally, any print jobs ahead of the firmware job in the queue will be printed before the update is processed. NOTE: When the update process has completed the LaserJet will need to be rebooted. Once the printer is back online, print a Configuration Page and verify that the new firmware has been installed. Additional information to know The firmware file will be in the following file format "xxxxxxx.bdl" where "xxx" indicates the firmware file name and the ".bdl" is the files extension. This file requires an interactive update method. You cannot update the printer using the traditional FTP, LPR or Port 9100 methods of upgrading. Please use one of the following methods listed below to update the firmware of this device. How to perform firmware upgrades. Embedded Web Server: (control panel is at a Ready screen) After uncompressing the file you will see a xxxxxxx.bdl file. 1. Open an Internet Browser Window. 2. Enter the IP address in the URL line. 3. Select the Firmware Upgrade link from within the General tab. 4. Select Choose File and browse to the location that the firmware upgrade file was downloaded to, and then select the firmware file. 5. Select the Install button to perform the upgrade. NOTE: Do not close the Browser Window or interrupt communication until the Embedded Web Server displays the Confirmation Page. 6. The printer will automatically reboot unless you are downgrading. If downgrading Firmware you will be prompted to select the Rollback option. NOTE: Please be aware that an update in some circumstances may require 30 minutes or more to complete. Once the printer or MFP is back online, print a Configuration Page and verify that the new firmware has been installed. Walk-up USB thumb drive: (Standard control panel menu) After uncompressing the file you will see a xxxxxxx.bdl file. 1. Copy the xxxxxxx.bdl file to a portable USB flash memory storage device (thumb drive). NOTE: USB Flash Drives that are not in a Fat32 format or having a CD formatted partition may not be recognized by the printer. You may need to try a different USB flash drive. 2. Turn the printer ON. 3. Swipe to the left and select the Support Tools application. 4. Select the Maintenance menu 5. Select the USB Firmware Upgrade menu. 6. Insert the portable USB storage device with the xxxxxxx.bdl file on it into the USB port on the front control panel of the product. 7. Select the xxxxxxx.bdl file you would like to use. NOTE: If there is more than one xxxxxxx.bdl file on the storage device, make sure that you select the correct file for this product. 8. Select the Install button on the bottom of the screen. 9. Select the Upgrade, Re-install or Downgrade option depending on the task you are performing. The firmware upload process will begin. When the upload is complete, the printer will reboot automatically and start the upgrade process. NOTE: The upgrade process may take up to 30 minutes to complete. Please do not interrupt the updating process. Once the printer or MFP is back online, print a Configuration Page and verify that the new firmware has been installed. Pre-Boot walk-up USB thumb drive: (control panel Pre-Boot menu) NOTE: Only to be used if the printer is not able to boot to READY After uncompressing the file you will see a xxxxxxx.bdl file. 1. Copy the xxxxxxx.bdl file to a portable USB flash memory storage device (thumb drive). NOTE: USB Flash Drives that are not in a Fat32 format or having a CD formatted partition may not be recognized by the printer. You may need to try a different USB flash drive. 2. Turn the printer ON. 3. Press the HP logo in the middle of the screen when you see the "1/8" under the logo. 4. Press the Down arrow to highlight Administrator, and then press OK. 5. Press the Down arrow to highlight Download, and then press OK. 6. Insert the portable USB storage device with the xxxxxxx.bdl file on it. 7. Press the Down arrow to highlight USB Thumbdrive, and then press OK. 8. Press the Down arrow to highlight the xxxxxxx.bdl file, and then press OK. NOTE: Please make sure the firmware file is located in the root directory of the flash drive. If you have more than one .bdl file on your USB flash drive, select the file you want loaded and press OK. Please be patient since this may take up to 10 minutes to complete. 9. When the message Complete appears on the control panel display, power cycle the printer. 10. The printer will start the upgrade process and will continue to boot to the Ready state. NOTE: Please be patient since this may take up to 30 minutes to complete. Once the printer or MFP is back online, print a Configuration Page and verify that the new firmware has been installed. Web Jetadmin (Supported with version 10.4 SR1 with FP4 or newer) Please visit www.hp.com and type "Web Jet Admin" in the "Search" Box to find more information about new releases of Web Jetadmin and the release note information for those releases. Upgrading Firmware: 1. Start Web Jetadmin 10.4 SR1 with FP4 or newer 2. From the "Device Management" section, select "All Devices" (or the appropriate device group). An "All Devices" list will appear in the center window. 3. Find your device in the list, or type the IP address of the device in the Quick Device Discovery section in the lower-left of the screen (this will highlight your device in the device list). You can sort the device list by clicking on a column name at the top. 4. If your device list is sorted my model number, you may select multiple devices with the same model number by Control-Click or Shift-Click. 5. Right-click on the device and select "Upgrade firmware...". 6. An Upgrade Firmware window will appear. Select "Device firmware" and click "Next" 7. A list of available firmware will appear. If the correct version is listed, click "Next", and the upgrade process will start. NOTE: If the correct firmware version does not appear within the list, you will need to manually upload it into WJA. New firmware may be available on an FTP site prior to appearing on hp.com. The instructions below allow you to upload a firmware file from your local PC to WJA 10.4 SR1 with FP4 or newer Uploading new firmware files into WJA: 1. Click on "Firmware/Firmware Repository" in the "Device Management" pane 2. A "Firmware Repository" window will appear in the center of the screen 3. Click on "Upload" in the upper-right of the window 4. Browse to the .bdl file on your local PC 5. Click "Upload" 6. Once the .bdl file is uploaded, go back to step 2 in the first section and complete steps 2 through 6. NOTE: Do not turn printer off during the update process! When the update process is complete, the printer will automatically reboot. If the firmware update process fails, Web JetAdmin will provide notification with a page (screen) of information regarding the reason(s) for failure. A link will be provided to attempt the process again. System Requirements The Firmware upgrade process requires a network or USB port connection. Technical Assistance Some of the services below are provided for the United States only. Similar services to those listed below are available in other countries. See your printer's user guide or call your local authorized HP dealer. Customer Support See your printer's user guide or call your local authorized HP dealer. Internet An anonymous FTP library service is available worldwide for around-the-clock-access to drivers and technical support information for HP peripheral and computer products. Please note that paths may change without notice. Access the Internet or FTP address and use the menus to locate the software or support of your choice. URL for HP Color LaserJet Managed Flow MFP E876xx Series Support: URL for Firmware downloads: www.hp.com/support/colorljE87600mfp URL for Support: http://www.hp.com/go/support URL for Access HP: http://www.hp.com FTP address: ftp.hp.com Login: anonymous Password: your Internet email address Additional Information Refer to your printer's user guide for additional methods of obtaining software and support information, such as printer driver distribution centers other online services, fax services, and other online support. Legal Statements Trademark Notices MS-DOS, Windows, Windows 2000, Excel 2000, Microsoft Office, Windows Server 2003, Outlook, PScript and Internet Explorer are registered trademarks of Microsoft Corporation in the United States and/or other countries. PostScript is a registered trademark of Adobe Systems Incorporated. Quark and QuarkXpress are trademarks of Quark Inc. Mac, Macintosh and Safari are registered trademarks of Apple Computer, Inc. The Adobe logo, Acrobat, the Adobe PDF logo, Distiller, and Reader are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States and/or other countries. Novell is a registered trademark of Novell, Inc., in the United States and other countries. Netscape Navigator, is a registered trademark of Netscape Communications Corporation in the United States and other countries. License and Copyright � Copyright 2017 HP Inc., L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein