Manuals / HP / Computer Equipment / Tablet

HP 2 Base Model manual Embedded Security for HP ProtectTools select models only

Models: 2

1 124

Download 124 pages 56.13 Kb

Page 101

10Embedded Security for HP ProtectTools (select models only)

10Embedded Security for HP ProtectTools (select models only)

NOTE: The integrated Trusted Platform Module (TPM) embedded security chip must be installed in your computer to use Embedded Security for HP ProtectTools.

Embedded Security for HP ProtectTools protects against unauthorized access to user data or credentials. This software module provides the following security features:

●Enhanced Microsoft® Encryption File System (EFS) file and folder encryption

●Creation of a personal secure drive (PSD) for protecting user data

●Data management functions, such as backing up and restoring the key hierarchy

●Support for third-party applications (such as Microsoft Outlook and Internet Explorer) for protected digital certificate operations when using the Embedded Security software

The TPM embedded security chip enhances and enables other HP ProtectTools Security Manager security features. For example, Credential Manager for HP ProtectTools can use the embedded chip as an authentication factor when the user logs on to Windows.

93

Image 101

HP 2 Base Model manual Embedded Security for HP ProtectTools select models only

Contents

Getting Started HP ProtectToolsCopyright 2011 Hewlett-Packard Development Company, L.P Table of contents 4 HP ProtectTools Security Manager 6 Privacy Manager for HP ProtectTools select models only 5 Drive Encryption for HP ProtectTools select models only7 File Sanitizer for HP ProtectTools 9 Theft recovery 8 Device Access Manager for HP ProtectTools select models onlyChanging the owner password Resetting a user passwordMigrating keys with the Migration Wizard Application 1 Introduction to securityFeatures Key features HP ProtectTools featuresChapter 1 Introduction to security ModulePrivacy Manager for HP ProtectTools select models Key featuresModule Drive Encryption for HP ProtectTools HP ProtectTools security product description and common use examplesCredential Manager for HP ProtectTools File Sanitizer for HP ProtectTools Device Access Manager for HP ProtectToolsEmbedded Security for HP ProtectTools select models only Privacy Manager for HP ProtectToolsComputrace for HP ProtectTools formerly LoJack Pro HP ProtectTools security product description and common use examples Preventing unauthorized access from internal or external locations Restricting access to sensitive dataAchieving key security objectives Protecting against targeted theftCreating strong password policies Assigning security roles Managing HP ProtectTools passwordsAdditional security elements Additional security elements HP ProtectTools passwordSet in the following FunctionBacking up and restoring HP ProtectTools credentials Creating a secure password2 Getting started with the Setup Wizard 2. Read the Welcome screen, and then click Next 3 HP ProtectTools Security Manager Administrative Console Opening HP ProtectTools Administrative Console Increase system security Require strong authentication Using Administrative ConsoleManage HP ProtectTools users See how you can centrally manage HP ProtectToolsSetting up authentication for your computer Configuring your systemFor administrators of this computer For users who are not administratorsManaging users SettingsSession Policy Require one of the specified credentialsFingerprints CredentialsSpareKey Face Smart cardUpdates and Messages Configuring your applicationsGeneral tab Applications tab4 HP ProtectTools Security Manager Opening Security Manager Using the Security Manager dashboard Blue-OK Security Applications StatusHP ProtectTools desktop gadget My Logons Password ManagerFor Web pages or programs where a logon has not yet been created For a Web site, click Add domain name to Password Manager For Web pages or programs where a logon has already been createdFor a program, click Add this logon screen to Password Manager Adding logonsEditing logons Managing your logons Using the Logons menuOrganizing logons into categories Password Manager icon settings Assessing your password strengthClick Continue VeriSign Identity Protection VIPClick Add Logon Credential Manager SettingsChanging your Windows password Enrolling your fingerprints Setting up your SpareKey7. Click the Administration tab Setting up a smart card1. Under Central Management, click Setup Wizard Initializing the smart cardEnrolling scenes for face logon Configuring the smart cardClick Create PIN Advanced User SettingsPrompt to update scenes when logon fails-If face logon is unsuccessful but you enter your password successfully, you may be prompted to save a series of images to increase the chances of successful face logon in the future Your personal ID card Setting your preferencesGeneral tab Appearance-Show icon in taskbar notification area Fingerprint tab3. Click Back up data Backing up and restoring your dataShow scan quality feedback 3. Click Restore data 5 Drive Encryption for HP ProtectTools select models only Opening Drive Encryption Opening Drive Encryption2. In the left pane, click Drive Encryption General tasks 3. Click FeaturesActivating Drive Encryption for standard hard drives Activating Drive Encryption for self-encrypting drivesHardware encryption Software encryption3. Click Features 3. Click Features3. Click Features Deactivating Drive EncryptionLogging in after Drive Encryption is activated USB readers Smart cardsPCMCIA readers Protect your data by encrypting your hard drive 2. Click SettingsDisplaying encryption status 2. Under My Data, click Drive Encryption3. Click Settings Managing Drive Encryption administrator taskAdvanced tasks Encrypting or decrypting individual drives software encryption onlyRecovering encryption keys Backup and recovery administrator task3. Click Encryption Key Backup 6. Click Backup Keys6 Privacy Manager for HP ProtectTools select models only Opening Privacy Manager Managing Privacy Manager Certificates Setup proceduresRequesting a Privacy Manager Certificate 2. Click Request a Privacy Manager CertificateImporting a third-party certificate Setting up a Privacy Manager CertificateObtaining a preassigned Corporate Privacy Manager Certificate Viewing Privacy Manager Certificate details Setting a default Privacy Manager CertificateRenewing a Privacy Manager Certificate 3. Click Certificate detailsRestoring a Privacy Manager Certificate Deleting a Privacy Manager CertificateRevoking your Privacy Manager Certificate 2. Click AdvancedAdding a Trusted Contact Managing Trusted ContactsAdding Trusted Contacts Adding Trusted Contacts using Microsoft Outlook contacts Deleting a Trusted Contact Viewing Trusted Contact detailsChecking revocation status for a Trusted Contact 3. Click Contact detailsConfiguring Privacy Manager for Microsoft Outlook Using Privacy Manager in Microsoft OutlookSigning and sending an e-mail message General tasksViewing a sealed e-mail message Using Privacy Manager in a Microsoft Office 2007 documentSealing and sending an e-mail message Signing a Microsoft Office document Configuring Privacy Manager for Microsoft OfficeAdding a suggested signers signature line Encrypting a Microsoft Office documentViewing a signed Microsoft Office document Removing encryption from a Microsoft Office documentSending an encrypted Microsoft Office document Viewing an encrypted Microsoft Office document Advanced tasks Backing up Privacy Manager Certificates and Trusted ContactsRestoring Privacy Manager Certificates and Trusted Contacts Central administration of Privacy Manager 7 File Sanitizer for HP ProtectTools Shredding Free space bleaching 2. Click File Sanitizer Opening File SanitizerSetup procedures Setting a shred scheduleSetting a free space bleaching schedule Selecting a predefined shred profile Selecting or creating a shred profileCustomizing a shred profile High Security Medium Security Low SecurityCustomizing a simple delete profile 4. To protect assets from automatic deleting Setup proceduresb. Click Open, and then click OK 5. Click Applyon page Using a key sequence to initiate shreddingGeneral tasks Manually shredding all selected items Using the File Sanitizer iconManually shredding one asset Aborting a shred or free space bleaching operation Manually activating free space bleachingViewing the log files 2. Click Bleach Now8 Device Access Manager for HP ProtectTools select models only Opening Device Access Manager Simple Configuration Setup ProceduresConfiguring device access Starting the background service Device Class ConfigurationMaintenance 2. Click Administrative Tools, and then click Services 3. Select the HP ProtectTools Device Locking/Auditing serviceProtection may also be applied to specific devices The Device Class Configuration view has the following sectionsSetup Procedures Allowing access for a user or a group Denying access to a user or groupDevice class All devices Individual device Device class All devices Individual deviceDevice class All devices Individual device Allowing access to a class of devices for one user of a groupAllowing access to a specific device for one user of a group Removing settings for a user or a group JITA ConfigurationResetting the configuration Device class All devices Individual deviceCreating an extendable JITA for a user or group Creating a JITA for a user or groupDisabling a JITA for a user or group Device Administrators group Advanced SettingsUnmanaged Device Classes eSATA SupportBattery Advanced power management APM support Miscellaneous Computer Hard disk controller HDC Human interface device HID class PowerDecoder Display Processor System Unknown Volume Volume snapshot Net service Net trans SCSI adapter9 Theft recovery 10 Embedded Security for HP ProtectTools select models only Setup procedures Enabling the embedded security chip in Computer SetupInitializing the embedded security chip Setting up the basic user account Encrypting files and folders Using the personal secure driveSending and receiving encrypted e-mail Apply changes to this folder onlyChanging the Basic User Key password Restoring certification data from the backup file Creating a backup fileBacking up and restoring Advanced tasksResetting a user password Changing the owner passwordAdvanced tasks Migrating keys with the Migration Wizard11 Localized password exceptions Password changes using keyboard layout that is also supported Special key handling Special key handling BIOSLanguage WindowsWhat to do when a password is rejected See Windows administrator administratorauthentication background servicedevice access control policy cryptographic service provider CSPemergency recovery archive cryptographyEncryption File System EFS power-on authenticationfingerprint free space bleachingrestore rebootrevocation password SATA device modesuggested signer Windows administratortoken See security logon methodIndex F face J JITAPage