HP ProtectTools Troubleshooting Guide

		HP ProtectTools Troubleshooting Guide

Software	Details	Solution / Workaround
Impacted-Short
description

HP ProtectTools Embedded Security—The PSD password box is no longer displayed when the system becomes active after Standby status

When a user logs on the system after creating a PSD, the TPM asks for the basic user password. If the user does not enter the password and the system goes into Standby, the password dialog box is no longer available when the user resumes.

This is by design.

The user has to log off and back on to view the PSD password box again.

HP ProtectTools Embedded Security—No password required to change the Security Platform Policies

Access to Security Platform Policies (both Machine and User) does not require a TPM password for users who have administrative rights on the system.

This is by design.

Any administrator can modify the Security Platform Policies with or without TPM user initialization.

HP ProtectTools Embedded Security—Microsoft EFS does not fully work in Windows 2000

An administrator can access encrypted information on the system without knowing the correct password. If the administrator enters an incorrect password or cancels the password dialog, the encrypted file will open as if the administrator had entered the correct password. This happens regardless of the security settings used when encrypting the data.

The Data Recovery Policy is automatically configured to designate an administrator as a recovery agent. When a user key cannot be retrieved (as in the case of entering the wrong password or canceling the Enter Password dialog), the file is automatically decrypted with a recovery key.

This is due to the Microsoft EFS. Please refer to Microsoft Knowledge Base Technical Article Q257705 for more information.

The documents cannot be opened by a non-administrator user.

HP ProtectTools Embedded Security—When viewing a certificate, it shows as non-trusted.

After setting up HP ProtectTools and running the User Initialization Wizard, the user has the ability to view the certificate issued; however, when viewing the certificate, it shows as non-trusted. While the certificate can be installed at this point by clicking the install button, installing it does not make it trusted.

Self-signed certificates are not trusted. In a properly configured enterprise environment, EFS certificates are issued by online Certification Authorities and are trusted.

Technical Reference Guide