A large format printer on your network is a computer that happens to print. It stores job files on its hard drive, talks to every workstation that sends it a drawing, and often sits in a shared corridor where anyone can pick up what comes out of it. Left unmanaged, it is a way into your network for attackers and a way out for confidential drawings. Canon builds a lot of protection into its imagePROGRAF printers, and much of it costs nothing to use. Here is what it covers, and the one free step we recommend every Canon owner takes today.

Why printer firmware updates matter

Firmware is the software that runs the printer itself. Canon releases updates to fix faults, extend the working life of the machine and close security gaps as they are found. A recent update for the imagePROGRAF PRO-560, for example, improved the security of its wireless LAN settings.

The catch is that an update only protects you once it is installed. A 2025 HP Wolf Security study of more than 800 IT and security decision-makers found that just 36% apply printer firmware updates without delay. That leaves a lot of printers running old code with known weaknesses, and attackers now use automated and AI-assisted tools to scan networks for exactly these devices.

How to use the free Canon Firmware Update Tool

The Canon Firmware Update Tool works with all current and recent Canon printers. It is completely free and takes a few minutes to set up:

  1. Go to Canon's software download page.
  2. Select your printer model.
  3. Click Firmware Update Tool, then download and install it.

 

Once installed, the tool checks for new firmware automatically, tells the operator when an update is ready and guides them through installing it. Some updates improve the health and lifespan of the printer. Others deliver the latest imagePROGRAF security upgrades.

A few habits keep updating trouble-free. Let any running print job finish first, close other programs on the computer, and never switch the printer off part way through, as an interrupted update can stop the printer from starting. If anything does go wrong, our plotter and printer repairs team can offer technical support and advice.

Security built into the imagePROGRAF hardware

Firmware keeps the printer current. The hardware itself carries a set of security features that administrators can reach through the Security Settings menu on the control panel. Canon groups them into five areas.

Secure storage. Print jobs left on a hard disk are a common source of leaks, particularly when an old printer is sold on or scrapped. imagePROGRAF models with a hard drive use a self-encrypting HDD with AES 256 encryption. It covers every file on the drive, including the operating system, so the data stays protected even when the drive is taken out. Jobs can be permanently erased at any time using one of four erasure levels. The highest complies with the German Federal Government's VS-ITR guidelines, which makes it the setting to run before a printer reaches end of life.

Shielded interface. Every unused port is a possible way in. Network administrators can:

•      disable individual protocols to block unwanted communication

•      switch off the internet connection entirely, so the printer works as a standalone device with no wired LAN, Wi-Fi or AirPrint access

•      disable USB drives and block firmware updates via USB

•      physically remove the Wi-Fi module on sites where Wi-Fi is not allowed

 

Encrypted communication. Data travelling between a workstation and the printer can be intercepted if the connection is left open. imagePROGRAF printers support IEEE 802.1X authentication, so a device cannot join a protected network until its credentials have been checked. EAP-TLS, EAP-TTLS and PEAP are supported, with up to five CA certificates per printer. SNMPv3 protects device management traffic, and TLS 1.3 secures connections to the Remote UI and to Canon's remote service server. Administrators can set the minimum to TLS 1.2 to refuse older, weaker connections. IPSec can also encrypt jobs sent from a PC on IPv6 networks, as it is not available over IPv4.

Protected print. Plenty of data leaks happen on paper. Someone picks up the wrong drawing, or a job sits in the output tray for an hour after its owner forgets it. PIN code printing holds a job until the correct code of up to seven digits is entered on the printer's panel. On the TX series, the optional stacker delivers prints face down so passers-by cannot read them. Businesses already running Canon's uniFLOW On-Premise or Hybrid can also release jobs by tapping an ID card on a reader mounted beside the control panel.

Controlled management. Security settings only help if they stay set. Administrators can lock the control panel so users cannot change configurations, and the Load, Feed and Cut buttons still work so printing carries on. The Remote UI has separate user levels. Standard users can check status, change media settings or reprint saved jobs, and only the administrator can change security, network, firmware and language settings. IP information can also be hidden from the control panel display.

Which imagePROGRAF models have which features?

Not every feature appears on every model. The fuller security set, including encrypted storage and secure erasure, is one of the main things separating the TX series from the TM series, and we cover the rest of the differences in our TM vs TX comparison. If security is a priority for your print room, check the spec sheet for the exact model or ask us before you buy.

You can browse our Canon large format printers and technical CAD printers, or read our wide format printer buying guide for the other factors worth weighing up.

Keep your Canon printer secure with Prizma Graphics

Installing the Firmware Update Tool is the quickest win, and it costs nothing. For longer-term peace of mind, we offer annual all-inclusive service contracts, parts supply and technical support for Canon, HP and other leading large format brands. Get in touch with our team or call us on 01296 393700 to talk through your printer, your security needs or a replacement.