Hard Disk Security

What you need to know — and do — to keep your information safe

With their ability to quickly process multiple tasks and run innovative software solutions, like business apps, automated workflow and content management, Lexmark printers and multifunction products (MFPs) bring more productivity and efficiency to your workday.

To meet today's complex printing requirements. Lexmark equips its devices with non-volatile memory to store essential system information when the devices are powered off. In addition, some Lexmark devices may also be equipped with a hard disk. The hard disk is used to buffer jobs, collate large jobs, or store forms, fonts or macros. To run some print apps or printer software solutions, a hard disk is required. Based upon your business or mission, at times the hard disk may contain confidential information.

To help you keep your data safe, Lexmark provides the following safeguards and advanced security tools as standard features of our products:


Secure Architecture

Out of the box, the firmware functionality of Lexmark devices helps to thwart malicious intent by restricting the ability to extract information, create folders, share the hard disk, create a network file share, or FTP information to the hard disk directly from a client device. 


Encryption

Hard disk encryption using the 256-bit Advanced Encryption Standard (AES) provides an additional layer of security by scrambling all data that is active, at rest, or left on the hard disk by a previous job. When you enable this feature, an encryption key unique to the specific printer or MFP and hard disk is created. The intent is that if the hard disk is stolen or removed, it will not yield usable information.

AES data encryption is so strong, it is the standard selected by the U.S. Government to protect its most highly classified information. 


Hard Disk Wiping

Hard disk wiping removes latent data associated with your print, copy, scan and fax jobs from the disk. The data is cleared away by overwriting the entire hard disk up to three times, removing traces of buffered information. The disk wiping process can be set to automatically wipe after each use or scheduled to run at specified intervals. It can also be activated manually through the devices operator panel, although Lexmark does not recommend our customers rely on the manual method. Additionally, Lexmark offers an out-of-service wipe that will sanitize all data on the hard disk, including fonts, forms and embedded solution data. This method is highly recommended when the device is taken out of service or removed from a secure location.

Lexmark's wiping process adheres to the guidelines established by the National Institute of Standards and Technology and the U.S. Department of Defense 5220.22M.
 


Erasing non-volatile memory

Many models in Lexmark's current lineup include a feature called Wipe All Settings. This feature erases the content stored on the various forms of non-volatile memory contained in the device. 


Physical Locks

Lexmark devices can be physically secured with Kensington-style laptop cable locks. This lets you secure the metal housing that contains the hard disk and other critical components to effectively deter tampering and theft. 


How to minimize security risks to your printer or MFP

First, determine if your printer or MFP has a hard disk drive installed.

View a list of Lexmark products that support a hard disk, either standard or optional, and their hard disk security features. If the hard disk for your Lexmark printer or MFP is optional, there are two ways to determine whether the hard disk is installed:

From the printer or MFPs operator panel or touch screen, select Menus and then select the Menu Settings Page. If a hard disk has been installed, it will be listed under Installed Features.

If your printer or MFP is connected to a network and you know its IP address, you can view the devices Web page. Select the Reports tab, and then Device Settings to view the Installed Features.

Next, enable Hard Disk Encryption and Hard Disk Wiping.

Currently hard disk encryption and hard disk wiping are not default settings for Lexmark devices. Instructions for enabling these security features are provided in the following guides:

Download Lexmark Memory Guide v 2.3: Lexmark C734, C736, C792, C925, T650, T652, T654, T656, X463, X464, X466, X651, X652, X654, X656, X658, X734, X736, X738, W850, X860, X862, X864, X792, X925

Download Lexmark Memory Guide v 1.3: Lexmark C780, C782, C935, T640, T642, T644, X646, X772, X782, X850, X852, X854, X940, X945
 


Lexmark's recommendations for end of life

When it's time to trade in, donate, recycle or dispose of your printer or MFP, Lexmark highly recommends you do one or more of the following actions:

  • If you are leasing your Lexmark device, please contact your lease program administrator for guidance.
  • If you own your Lexmark device and plan to temporarily take it out of service, we recommend that you perform a manual disk wipe using the Multiple Pass method and perform the Wipe All Settings operation (if that feature is provided on your model).
  • If you own your Lexmark device and want to donate it or permanently retire it by recycling it or disposing of it, we recommend that you perform a Complete Disk Wipe (this is sometimes referred to as an Out-of-Service or End-of-Life disk wipe) and perform the Wipe All Settings operation. These operations will erase the entire contents of the hard disk and flash memory. If the model you own does not support disk wiping or the Wipe All Settings operation, Lexmark recommends removing and destroying the hard disk and system controller.

These documents describe how hard disk memory and non-volatile memory is implemented in Lexmark devices and outlines the steps you can take to protect sensitive data:

Download Lexmark Memory Guide v 2.3: Lexmark C734, C736, C792, C925, T650, T652, T654, T656, X463, X464, X466, X651, X652, X654, X656, X658, X734, X736, X738, W850, X860, X862, X864, X792, X925

Download Lexmark Memory Guide v 1.3: Lexmark C780, C782, C935, T640, T642, T644, X646, X772, X782, X850, X852, X854, X940, X945


To learn more about Lexmark's solutions, contact us today.