HP dc73 Manual de usuario

ProtectToolsUser Guide

Achieving key security objectivesThe HP ProtectTools modules can work together to provide solutions for a variety of security issues,including the fol

financial services, an executive, or R&D team, or private information such as patient records or personalfinancial data. The following features he

Additional security elementsAssigning security rolesIn managing computer security (particularly for large organizations), one important practice is to

HP ProtectTools password Set in this HP ProtectToolsmoduleFunctionOwner password Embedded Security, by ITadministratorProtects the system and the TPM

Creating a secure passwordWhen creating passwords, you must first follow any specifications that are set by the program. Ingeneral, however, consider

Setting backup options1. Select Start > All Programs > HP ProtectTools Security Manager.2. In the left pane, click HP ProtectTools, and then cli

Configuring settings1. Select Start > All Programs > HP ProtectTools Security Manager.2. In the left pane, click HP ProtectTools, and then click

2 Credential Manager for HPProtectToolsCredential Manager for HP ProtectTools protects against unauthorized access to your computer usingthe following

Setup proceduresLogging on to Credential MangerDepending on the configuration, you can log on to Credential Manager in any of the following ways:●Cred

Logging on for the first timeBefore you begin, you must be logged on to Windows with an administrator account, but not logged onto Credential Manager.

© Copyright 2007 Hewlett-PackardDevelopment Company, L.P.Microsoft and Windows are U.S. registeredtrademarks of Microsoft Corporation. Intel isa trade

Setting up the fingerprint reader1. After logging on to Credential Manager, swipe your finger across the fingerprint reader. TheCredential Manager Reg

General tasksAll users have access to the “My Identity” page in Credential Manager. From the “My Identity” page, youcan perform the following tasks:●C

Managing identityClearing an identity from the systemNOTE: This does not affect your Windows user account.1. Select Start > All Programs > HP Pr

Locking the computerThis feature is available if you log on to Windows using Credential Manager. To secure your computerwhen you are away from your de

3. In the right pane, click Windows Logon, and then click Add a Network Account. The Add NetworkAccount Wizard opens.4. Follow the on-screen instructi

Using manual (drag and drop) registration1. Select Start > All Programs > HP ProtectTools Security Manager.2. In the left pane, click Credential

Importing an application1. Select Start > All Programs > HP ProtectTools Security Manager.2. In the left pane, click Credential Manager, and the

Restricting access to an application1. Select Start > All Programs > HP ProtectTools Security Manager.2. In the left pane, click Credential Mana

7. When you select Restricted, the following settings are available:a. If you want to restrict usage based on time, day, or date, click the Schedule t

Advanced tasks (administrator only)The “Authentication and Credentials” page and the “Advanced Settings” page of Credential Managerare available only

Table of contents1 Introduction to securityHP ProtectTools features ...

Configuring custom authentication requirementsIf the set of authentication credentials you want is not listed on the Authentication tab of the“Authent

Configuring Credential Manager settingsFrom the “Settings” page, you can access and modify various settings using the following tabs:●General—Allows y

Example 2—Using the “Advanced Settings” page to require user verification beforeSingle Sign On1. Select Start > All Programs > HP ProtectTools S

3 Embedded Security for HPProtectToolsNOTE: The integrated Trusted Platform Module (TPM) embedded security chip must be installed inyour computer to u

Setup proceduresCAUTION: To reduce security risk, it is highly recommended that your IT administrator immediatelyinitialize the embedded security chip

Initializing the embedded security chipIn the initialization process for Embedded Security, you will perform the following tasks:●Set an owner passwor

Setting up the basic user accountSetting up a basic user account in Embedded Security accomplishes the following tasks:●Produces a Basic User Key that

General tasksAfter the basic user account is set up, you can perform the following tasks:●Encrypting files and folders●Sending and receiving encrypted

Changing the Basic User Key passwordTo change the Basic User Key password:1. Select Start > All Programs > HP ProtectTools Security Manager.2. I

Advanced tasksBacking up and restoringThe Embedded Security backup feature creates an archive that contains certification information to berestored in

Using manual (drag and drop) registration ... 19Managing applications and credentials ...

Changing the owner passwordTo change the owner password:1. Select Start > All Programs > HP ProtectTools Security Manager.2. In the left pane, c

Migrating keys with the Migration WizardMigration is an advanced administrator task that allows the management, restoration, and transfer ofkeys and c

4 Java Card Security for HP ProtectToolsJava Card Security for HP ProtectTools manages the Java Card setup and configuration for computersequipped wit

General tasksThe “General” page allows you to perform the following tasks:●Change a Java Card PIN●Select the card reader or smart card keyboardNOTE: T

Advanced tasks (administrators only)The “Advanced” page allows you to perform the following tasks:●Assign a Java Card PIN●Assign a name to a Java Card

Assigning a name to a Java CardYou must assign a name to a Java Card before it can be used for power-on authentication.To assign a name to a Java Card

Enabling Java Card power-on authentication and creating an administrator Java CardTo enable Java Card power-on authentication:1. Select Start > All

Creating a user Java CardNOTE: Power-on authentication and an administrator card must be set up in order to create a userJava Card.To create a user Ja

5 BIOS Configuration for HPProtectToolsBIOS Configuration for HP ProtectTools provides access to the Computer Setup utility security andconfiguration

General tasksBIOS Configuration allows you to manage various computer settings that would otherwise be accessibleonly by pressing F10 at startup and e

Disabling Java Card power-on authentication ... 415 BIOS Configuration for HP ProtectToolsGeneral tas

Enabling and disabling system configuration optionsNOTE: Some of the items listed below may not be supported by your computer.To enable or disable dev

◦SATA Native Mode◦Dual Core CPU◦Automatic Intel® SpeedStep Functionality Support◦Fan Always on While on AC Power◦BIOS DMA Data Transfers◦Intel or AMD

Advanced tasksManaging HP ProtectTools add-on module settingsSome of the features of HP ProtectTools Security Manager can be managed in BIOS Configura

Enabling and disabling power-on authentication support for Embedded SecurityEnabling this option allows the system to use the TPM embedded security ch

Enabling and disabling DriveLock hard drive protectionDriveLock is an industry-standard security feature that prevents unauthorized access to the data

Managing Computer Setup passwordsYou can use BIOS Configuration to set and change the power-on and setup passwords in ComputerSetup, and also to manag

3. In the right pane, next to Setup Password, click Set.4. Type and confirm the password in the Enter Password and Confirm Password boxes.5. Click OK

3. In the right pane, under Password Options, enable or disable Require password on restart.4. Click Apply, and then click OK in the HP ProtectTools w

6 Drive Encryption for HP ProtectToolsCAUTION: If you decide to uninstall the Drive Encryption module, you must first decrypt all encrypteddrives. If

Encryption managementEncrypting a drive1. Select Start > All Programs > HP ProtectTools Security Manager.2. In the left pane, click Drive Encryp

vi ENWW

User managementAdd a user1. Select Start > All Programs > HP ProtectTools Security Manager.2. In the left pane, click Drive Encryption, and then

RecoveryThe following two safety measures are available to you:●If you forget your password, you cannot access your encrypted drives. You may, however

7 TroubleshootingCredential Manager for ProtectToolsShort description Details SolutionUsing Credential ManagerNetwork Accounts option,a user can selec

Short description Details SolutionWindows password from CredentialManager, the administrator gets an errorlogon failure: User account restriction.loca

Short description Details SolutionCredential Manager notbeing set as primary logonin Windows 2000.During Windows 2000 install, the logonpolicy is set

Short description Details SolutionRestoring EmbeddedSecurity causesCredential Manager to fail.Credential Manager fails to register anycredentials afte

Embedded Security for ProtectToolsShort description Details SolutionEncrypting folders, subfolders, and files on PSDcauses error message.If the user c

Short description Details Solutiontakes longer when Symantec Antivirus orNorton Antivirus is running.Cannot save emergencyrecovery archive toremovable

Short description Details SolutionMicrosoft EFS does notfully work in Windows2000.An administrator can access encryptedinformation on the system witho

Short description Details Solutiondoes not ship 128-MB configurations by default withsecurity modules).EFS User Authentication(password request) times

1 Introduction to securityHP ProtectTools Security Manager software provides security features that help protect againstunauthorized access to the com

Short description Details SolutionPSD is disabled andcannot be deleted afterformatting the hard driveon which the PSD wasgeneratedThe PSD is disabled

Short description Details SolutionClick here if you want to backup to atemporary archive until the BackupArchive is accessible again. If theAutomatic

MiscellaneousSoftware Impacted—Short descriptionDetails SolutionHP ProtectTools SecurityManager—Warningreceived: The securityapplication can not beins

Software Impacted—Short descriptionDetails SolutionAllow Security Manager to complete services loadingmessage (seen at top of Security Manager window)

GlossaryAuthentication Process of verifying whether a user is authorized to perform a task, for example, accessing acomputer, modifying settings for a

Migration A task that allows the management, restoration, and transfer of keys and certificates.Network account Windows user or administrator account,

IndexAaccesspreventing unauthorized 4accessing HP ProtectToolsSecurity 3accountbasic user 30Credential Manager 13administrator tasksCredential Manager

Embedded Security 34Embedded Security,permanently 34Java Card power-onauthentication 41power-on authentication 46smart card authentication 46stringent

propertiesapplication 19authentication 23credential 24Rrecovering encrypted data 55registeringapplication 18credentials 13restrictingaccess to sensiti

HP ProtectTools featuresThe following table details the key features of HP ProtectTools modules:Module Key featuresCredential Manager for HP ProtectTo

Accessing HP ProtectTools SecurityTo access HP ProtectTools Security from Windows® Control Panel:▲Select Start > All Programs > HP ProtectTools