Is PaperCut compatible with SNMPv3?
on 10 August 2020 10:58 PM
“Our organization is interested in using SNMPv3 exclusively as it is regarded as more secure than older versions. Does PaperCut support this protocol?”
SNMP (Simple Network Management Protocol) makes it easy for administrators to scan their network and discover what devices are connected, and in the case of printers find out details like model, serial number, toner levels and device errors.
Older versions of SNMP, including SNMPv1 and SNMPv2c require the device and server to use a shared secret called a “community string” in order to communicate. The community string typically defaults to “public” for data retrieval. However, the SNMPv1/v2c protocol sends the community string in clear text and can potentially be discovered with packet sniffing thereby reducing its security.
SNMPv3 on the other hand was designed with security in mind and uses authentication and data encryption. In particular it requires the following parameters:
Although the context name allows a device to partition up its exported information and only allow access for different data in different contexts, printers typically don’t utilise this feature and rather just have one context name set for access to everything. For example of context names on different devices:
PaperCut uses SNMP in various parts of the product. It is used by the PaperCut Print Provider and by the PaperCut Application Server.
SNMP in Print Provider
SNMP in Application Server
Prior to PaperCut 19.0, PaperCut only uses SNMPv3 for configuring Xerox devices in Xerox EIP1.0 and possibly in EIP1.5+ (using SNMPv2c or SNMPv3). For the rest of SNMP retrieval in PaperCut we used SNMPv1.
From PaperCut 19.0, PaperCut is capable of using SNMPv3 in all parts of the Application Server but not the Print Provider. SNMPv3 support for the Print Provider will come in a release beyond 19.0. Using SNMPv3 will require adding the SNMPv3 parameters on the device and in PaperCut in the Printer Details and Device Details admin web pages.
If you turn off SNMPv1/2c on your printers in PaperCut 19.0 and just configure SNMPv3, then the SNMP calls used in the Print Provider will stop working. This will prevent:
If you turn off SNMPv1/2c on your printers in PaperCut 19.x (beyond 19.0 when SNMPv3 is supported in the Print Provider) and just configure SNMPv3, then the following will be affected: