SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBPI03583 rev. 1 - ROCA - Vulnerable RSA Generation: HP Trusted Platform Module (TPM) Accessory and Certain HP Enterprise Printer and MFP Products, Certain HP PageWide Printer and MFP Products with Standard TPM

note:

All printer versions prior to the firmware versions listed are potentially impacted.

note:

The TPM firmware is only bundled with the FutureSmart 4 printer firmware.

1. Click Support/Software & Drivers.
2. Click Printer.
3. Enter the appropriate printer name listed in the table below into the search field.
4. Click Submit.
5. Click the appropriate product.
6. Under Firmware, select the appropriate firmware update, and then click Download.

1. When generating a certificate via the printer Embedded Web Server, select Make the certificate Exportable. This will not use TPM certificate generation functions. Instructions are located in the document: Install, view, and manage certificates to ensure data security in the HP Embedded Web Server (EWS).
2. Use HP Security Manager to generate and manage certificate requests. Instructions can be found in the HP JetAdvantage Security Manager Certificate Management (in English).
3. Generate a new RSA certificate outside the device (e.g. via a Hardware Security Module) and import the certificate to the device. Certificates may be imported to the HP printer via the printer Embedded Web Server. Instructions to import a certificate are located in the document: Install, view, and manage certificates to ensure data security in the HP Embedded Web Server (EWS).

note:

For firmware marked with an asterisk (*), please contact HP support to obtain the firmware update. HP contact information can be found at www.hp.com under Contact HP.