HP 2 Base Model manual Backup and recovery administrator task, Backing up encryption keys

Page 58

NOTE: Dynamic partitions are not supported. If a partition is displayed as available, but it cannot be encrypted when selected, the partition is dynamic. A dynamic partition results from shrinking a partition to create a new partition within Disk Management.

A warning is displayed if a partition will be converted to a dynamic partition.

Backup and recovery (administrator task)

When Drive Encryption is activated, administrators can use the Encryption Key Backup page to back up encryption keys to removable media and to perform a recovery.

Backing up encryption keys

Administrators can back up the encryption key for an encrypted drive on a removable storage device.

CAUTION: Be sure to keep the storage device containing the backup key in a safe place, because if you forget your password, lose your smart card, or do not have a finger registered, this device provides your only access to your hard drive.

1.Open HP ProtectTools Administrative Console.

2.In the left pane, click the + icon to the left of Drive Encryption to display the available options.

3.Click Encryption Key Backup.

4.Insert the storage device being used to back up the encryption key.

5.Under Drive, select the check box for the device where you want to back up your encryption key.

6.Click Backup Keys.

7.Read the information on the page that is displayed, and then click Next. The encryption key is saved on the storage device you selected.

Recovering encryption keys

Administrators can recover an encryption key from the removable storage device where it was saved previously:

1.Turn on the computer.

2.Insert the removable storage device that contains your backup key.

3.When the Drive Encryption for HP ProtectTools login dialog box opens, click Options.

4.Click Recovery.

5.Select the file that contains your backup key or click Browse to search for it, and then click Next.

6.When the confirmation dialog box opens, click OK. Your computer starts.

NOTE: It is highly recommended that you reset your password after performing a recovery.

50 Chapter 5 Drive Encryption for HP ProtectTools (select models only)

Image 58
Contents HP ProtectTools First Edition January Document Part Number Table of contents HP ProtectTools Security Manager Drive Encryption for HP ProtectTools select models only File Sanitizer for HP ProtectTools 100 107 102112 Application Features Introduction to securityHP ProtectTools features Module Key featuresHP ProtectTools features Credential Manager for HP ProtectTools Drive Encryption for HP ProtectToolsDevice Access Manager for HP ProtectTools File Sanitizer for HP ProtectToolsComputrace for HP ProtectTools formerly LoJack Pro Privacy Manager for HP ProtectToolsEmbedded Security for HP ProtectTools select models only Page Achieving key security objectives Restricting access to sensitive dataProtecting against targeted theft Creating strong password policies Additional security elements Managing HP ProtectTools passwordsAssigning security roles Additional security elements Creating a secure password Backing up and restoring HP ProtectTools credentialsGetting started with the Setup Wizard Page HP ProtectTools Security Manager Administrative Console Opening HP ProtectTools Administrative Console Using Administrative Console Security Users CredentialsSetting up authentication for your computer Configuring your systemLogon Policy Managing users SettingsSession Policy SpareKey CredentialsFingerprints Smart card FaceGeneral tab Configuring your applicationsUpdates and Messages Applications tabHP ProtectTools Security Manager Opening Security Manager Using the Security Manager dashboard HP ProtectTools desktop gadget Security Applications StatusBlue-OK Password Manager My LogonsAdding logons Editing logons Organizing logons into categories Using the Logons menuManaging your logons Assessing your password strength Password Manager icon settingsClick Add Logon VeriSign Identity Protection VIPClick Continue Changing your Windows password SettingsCredential Manager Setting up your SpareKey Enrolling your fingerprintsUnder Central Management, click Setup Wizard Setting up a smart cardClick the Administration tab Initializing the smart cardConfiguring the smart card Enrolling scenes for face logonAdvanced User Settings Click Create PINClick OK HP ProtectTools Security Manager Your personal ID card Setting your preferencesFingerprint tab Show scan quality feedback Backing up and restoring your dataClick Back up data Click Restore data Drive Encryption for HP ProtectTools select models only Opening Drive Encryption Activating Drive Encryption for standard hard drives Click FeaturesGeneral tasks Activating Drive Encryption for self-encrypting drivesSoftware encryption Hardware encryptionDeactivating Drive Encryption Logging in after Drive Encryption is activatedPcmcia readers Smart cardsUSB readers Displaying encryption status Click SettingsProtect your data by encrypting your hard drive Under My Data, click Drive EncryptionManaging Drive Encryption administrator task Advanced tasksRecovering encryption keys Backup and recovery administrator taskBacking up encryption keys Privacy Manager for HP ProtectTools select models only Opening Privacy Manager Requesting a Privacy Manager Certificate Setup proceduresManaging Privacy Manager Certificates Click Request a Privacy Manager CertificateSetting up a Privacy Manager Certificate Importing a third-party certificateRenewing a Privacy Manager Certificate Setting a default Privacy Manager CertificateViewing Privacy Manager Certificate details Click Certificate detailsRevoking your Privacy Manager Certificate Deleting a Privacy Manager CertificateRestoring a Privacy Manager Certificate Click AdvancedAdding Trusted Contacts Managing Trusted ContactsAdding a Trusted Contact Adding Trusted Contacts using Microsoft Outlook contacts Deleting a Trusted Contact Viewing Trusted Contact detailsChecking revocation status for a Trusted Contact Configuring Privacy Manager for Microsoft Outlook Using Privacy Manager in Microsoft OutlookSigning and sending an e-mail message Sealing and sending an e-mail message Using Privacy Manager in a Microsoft Office 2007 documentViewing a sealed e-mail message Configuring Privacy Manager for Microsoft Office Signing a Microsoft Office documentEncrypting a Microsoft Office document Adding a suggested signers signature lineSending an encrypted Microsoft Office document Removing encryption from a Microsoft Office documentViewing a signed Microsoft Office document Viewing an encrypted Microsoft Office document Backing up Privacy Manager Certificates and Trusted Contacts Restoring Privacy Manager Certificates and Trusted ContactsCentral administration of Privacy Manager File Sanitizer for HP ProtectTools Shredding Free space bleaching Opening File Sanitizer Setting a shred schedule Setting a free space bleaching scheduleCustomizing a shred profile Selecting or creating a shred profileSelecting a predefined shred profile High Security Medium Security Low SecurityCustomizing a simple delete profile Page Using a key sequence to initiate shredding Manually shredding one asset Using the File Sanitizer iconManually shredding all selected items Viewing the log files Manually activating free space bleachingAborting a shred or free space bleaching operation Click Bleach NowDevice Access Manager for HP ProtectTools select models only Opening Device Access Manager Configuring device access Simple ConfigurationDevice Class Configuration Starting the background servicePage Allowing access for a user or a group Denying access to a user or groupDevice class All devices Individual device Allowing access to a specific device for one user of a group Removing settings for a user or a group Jita ConfigurationResetting the configuration Creating a Jita for a user or group Creating an extendable Jita for a user or groupDisabling a Jita for a user or group Advanced Settings Device Administrators groupESATA Support Unmanaged Device ClassesPage Theft recovery Go to https//cc.absolute.comEmbedded Security for HP ProtectTools select models only Enabling the embedded security chip in Computer Setup Initializing the embedded security chip Setting up the basic user account Encrypting files and folders Using the personal secure driveSending and receiving encrypted e-mail Changing the Basic User Key password Restoring certification data from the backup file Creating a backup fileBacking up and restoring Changing the owner password Resetting a user passwordMigrating keys with the Migration Wizard Localized password exceptions Page Bios Special key handlingBios What to do when a password is rejected Glossary Emergency recovery archive Cryptographic service provider CSPDevice access control policy CryptographyFingerprint Power-on authenticationEncryption File System EFS Free space bleachingRevocation password RebootRestore Sata device modeToken Windows administratorSuggested signer Trusted ContactIndex Jita FacePage
Related manuals
Manual 87 pages 16.32 Kb