HP 2 Base Model manual Additional security elements, Assigning security roles

Page 18

Additional security elements

Assigning security roles

In managing computer security (particularly for large organizations), one important practice is to divide responsibilities and rights among various types of administrators and users.

NOTE: In a small organization or for individual use, these roles may all be held by the same person.

For HP ProtectTools, the security duties and privileges can be divided into the following roles:

●Security officer—Defines the security level for the company or network and determines the security features to deploy, such as Drive Encryption or Embedded Security.

NOTE: Many of the features in HP ProtectTools can be customized by the security officer in cooperation with HP. For more information, see the HP Web site at http://www.hp.com.

●IT administrator—Applies and manages the security features defined by the security officer. Can also enable and disable some features. For example, if the security officer has decided to deploy smart cards, the IT administrator can enable both password and smart card mode.

●User—Uses the security features. For example, if the security officer and IT administrator have enabled smart cards for the system, the user can set the smart card PIN and use the card for authentication.

CAUTION: Administrators are encouraged to follow “best practices” in restricting end-user privileges and restricting user access.

Unauthorized users should not be granted administrative privileges.

Managing HP ProtectTools passwords

Most of the HP ProtectTools Security Manager features are secured by passwords. The following table lists the commonly used passwords, the software module where the password is set, and the password function.

The passwords that are set and used by IT administrators only are indicated in this table as well. All other passwords may be set by regular users or administrators.

HP ProtectTools password

Set in the following

Function

 

module

 

 

 

 

Windows Logon password

Windows® Control Panel or

Can be used for manual logon and for

 

HP ProtectTools Security

authentication to access various Security

 

Manager

Manager features.

 

 

 

Security Manager Backup and

Security Manager, by

Protects access to the Security Manager

Recovery password

individual user

Backup and Recovery file.

 

 

 

Smart card PIN

Credential Manager

Can be used as multifactor authentication.

 

 

Can be used as Windows authentication.

 

 

Authenticates users of Drive Encryption, if

 

 

the smart card token is selected.

 

 

 

Emergency Recovery Token

Embedded Security, by IT

Protects access to the Emergency

password

administrator

Recovery Token, which is a backup file for

 

 

the embedded security chip.

 

 

 

10 Chapter 1 Introduction to security

Page 17 Page 19
Image 18
Page 17 Page 19
Contents HP ProtectTools First Edition January Document Part Number Table of contents HP ProtectTools Security Manager Drive Encryption for HP ProtectTools select models only File Sanitizer for HP ProtectTools 100 102 107112 Application Features Introduction to securityHP ProtectTools features Module Key featuresHP ProtectTools features Credential Manager for HP ProtectTools Drive Encryption for HP ProtectToolsDevice Access Manager for HP ProtectTools File Sanitizer for HP ProtectToolsPrivacy Manager for HP ProtectTools Computrace for HP ProtectTools formerly LoJack ProEmbedded Security for HP ProtectTools select models only Page Restricting access to sensitive data Achieving key security objectivesProtecting against targeted theft Creating strong password policies Managing HP ProtectTools passwords Additional security elementsAssigning security roles Additional security elements Creating a secure password Backing up and restoring HP ProtectTools credentialsGetting started with the Setup Wizard Page HP ProtectTools Security Manager Administrative Console Opening HP ProtectTools Administrative Console Using Administrative Console Security Users CredentialsConfiguring your system Setting up authentication for your computerLogon Policy Settings Managing usersSession Policy Credentials SpareKeyFingerprints Smart card FaceGeneral tab Configuring your applicationsUpdates and Messages Applications tabHP ProtectTools Security Manager Opening Security Manager Using the Security Manager dashboard Security Applications Status HP ProtectTools desktop gadgetBlue-OK Password Manager My LogonsAdding logons Editing logons Using the Logons menu Organizing logons into categoriesManaging your logons Assessing your password strength Password Manager icon settingsVeriSign Identity Protection VIP Click Add LogonClick Continue Settings Changing your Windows passwordCredential Manager Setting up your SpareKey Enrolling your fingerprintsUnder Central Management, click Setup Wizard Setting up a smart cardClick the Administration tab Initializing the smart cardConfiguring the smart card Enrolling scenes for face logonAdvanced User Settings Click Create PINClick OK HP ProtectTools Security Manager Setting your preferences Your personal ID cardFingerprint tab Backing up and restoring your data Show scan quality feedbackClick Back up data Click Restore data Drive Encryption for HP ProtectTools select models only Opening Drive Encryption Activating Drive Encryption for standard hard drives Click FeaturesGeneral tasks Activating Drive Encryption for self-encrypting drivesSoftware encryption Hardware encryptionDeactivating Drive Encryption Logging in after Drive Encryption is activatedSmart cards Pcmcia readersUSB readers Displaying encryption status Click SettingsProtect your data by encrypting your hard drive Under My Data, click Drive EncryptionManaging Drive Encryption administrator task Advanced tasksBackup and recovery administrator task Recovering encryption keysBacking up encryption keys Privacy Manager for HP ProtectTools select models only Opening Privacy Manager Requesting a Privacy Manager Certificate Setup proceduresManaging Privacy Manager Certificates Click Request a Privacy Manager CertificateSetting up a Privacy Manager Certificate Importing a third-party certificateRenewing a Privacy Manager Certificate Setting a default Privacy Manager CertificateViewing Privacy Manager Certificate details Click Certificate detailsRevoking your Privacy Manager Certificate Deleting a Privacy Manager CertificateRestoring a Privacy Manager Certificate Click AdvancedManaging Trusted Contacts Adding Trusted ContactsAdding a Trusted Contact Adding Trusted Contacts using Microsoft Outlook contacts Viewing Trusted Contact details Deleting a Trusted ContactChecking revocation status for a Trusted Contact Using Privacy Manager in Microsoft Outlook Configuring Privacy Manager for Microsoft OutlookSigning and sending an e-mail message Using Privacy Manager in a Microsoft Office 2007 document Sealing and sending an e-mail messageViewing a sealed e-mail message Configuring Privacy Manager for Microsoft Office Signing a Microsoft Office documentEncrypting a Microsoft Office document Adding a suggested signers signature lineRemoving encryption from a Microsoft Office document Sending an encrypted Microsoft Office documentViewing a signed Microsoft Office document Viewing an encrypted Microsoft Office document Backing up Privacy Manager Certificates and Trusted Contacts Restoring Privacy Manager Certificates and Trusted ContactsCentral administration of Privacy Manager File Sanitizer for HP ProtectTools Shredding Free space bleaching Opening File Sanitizer Setting a shred schedule Setting a free space bleaching scheduleCustomizing a shred profile Selecting or creating a shred profileSelecting a predefined shred profile High Security Medium Security Low SecurityCustomizing a simple delete profile Page Using a key sequence to initiate shredding Using the File Sanitizer icon Manually shredding one assetManually shredding all selected items Viewing the log files Manually activating free space bleachingAborting a shred or free space bleaching operation Click Bleach NowDevice Access Manager for HP ProtectTools select models only Opening Device Access Manager Configuring device access Simple ConfigurationDevice Class Configuration Starting the background servicePage Denying access to a user or group Allowing access for a user or a groupDevice class All devices Individual device Allowing access to a specific device for one user of a group Jita Configuration Removing settings for a user or a groupResetting the configuration Creating a Jita for a user or group Creating an extendable Jita for a user or groupDisabling a Jita for a user or group Advanced Settings Device Administrators groupESATA Support Unmanaged Device ClassesPage Theft recovery Go to https//cc.absolute.comEmbedded Security for HP ProtectTools select models only Enabling the embedded security chip in Computer Setup Initializing the embedded security chip Setting up the basic user account Using the personal secure drive Encrypting files and foldersSending and receiving encrypted e-mail Changing the Basic User Key password Creating a backup file Restoring certification data from the backup fileBacking up and restoring Changing the owner password Resetting a user passwordMigrating keys with the Migration Wizard Localized password exceptions Page Bios Special key handlingBios What to do when a password is rejected Glossary Emergency recovery archive Cryptographic service provider CSPDevice access control policy CryptographyFingerprint Power-on authenticationEncryption File System EFS Free space bleachingRevocation password RebootRestore Sata device modeToken Windows administratorSuggested signer Trusted ContactIndex Jita FacePage
Related manuals
Manual 87 pages 16.32 Kb
Top Page Image Contents