Creating strong password policies | HP 2 Base Model specification

private information such as patient records or personal financial records. The following features help prevent unauthorized access:

●The pre-boot authentication feature, if enabled, helps prevent access to the operating system. Refer to the following chapters:

◦Password Manager for HP ProtectTools

◦Embedded Security for HP ProtectTools

◦Drive Encryption for HP ProtectTools

●Password Manager helps ensure that an unauthorized user cannot get passwords or access to password-protected applications.

●Device Access Manager for HP ProtectTools allows IT managers to restrict access to writable devices so sensitive information cannot be copied from the hard drive.

●File Sanitizer allows secure deletion of data by shredding critical files and folders or bleaching deleted assets on the hard drive (writing over data that has been deleted but is still recoverable).

●Privacy Manager allows you to obtain Certificates of Authority when using Microsoft e-mail or Microsoft Office documents, making the process of sending and saving important information safe and secure.

Creating strong password policies

If a company policy goes into effect that requires the use of strong password policy for dozens of Web-based applications and databases, Security Manager provides a protected repository for passwords and Single Sign On convenience.

Achieving key security objectives

9

Image 17

HP 2 Base Model manual Creating strong password policies

Contents

HP ProtectTools First Edition January Document Part Number Table of contents HP ProtectTools Security Manager Drive Encryption for HP ProtectTools select models only File Sanitizer for HP ProtectTools 100 112 102107 Introduction to security Application Features Module Key features HP ProtectTools features HP ProtectTools features Drive Encryption for HP ProtectTools Credential Manager for HP ProtectTools File Sanitizer for HP ProtectTools Device Access Manager for HP ProtectTools Embedded Security for HP ProtectTools select models only Privacy Manager for HP ProtectToolsComputrace for HP ProtectTools formerly LoJack Pro Page Protecting against targeted theft Restricting access to sensitive dataAchieving key security objectives Creating strong password policies Assigning security roles Managing HP ProtectTools passwordsAdditional security elements Additional security elements Backing up and restoring HP ProtectTools credentials Creating a secure password Getting started with the Setup Wizard Page HP ProtectTools Security Manager Administrative Console Opening HP ProtectTools Administrative Console Security Users Credentials Using Administrative Console Logon Policy Configuring your systemSetting up authentication for your computer Session Policy SettingsManaging users Fingerprints CredentialsSpareKey Face Smart card Updates and Messages Configuring your applicationsGeneral tab Applications tab HP ProtectTools Security Manager Opening Security Manager Using the Security Manager dashboard Blue-OK Security Applications StatusHP ProtectTools desktop gadget My Logons Password Manager Adding logons Editing logons Managing your logons Using the Logons menuOrganizing logons into categories Password Manager icon settings Assessing your password strength Click Continue VeriSign Identity Protection VIPClick Add Logon Credential Manager SettingsChanging your Windows password Enrolling your fingerprints Setting up your SpareKey Click the Administration tab Setting up a smart cardUnder Central Management, click Setup Wizard Initializing the smart card Enrolling scenes for face logon Configuring the smart card Click Create PIN Advanced User Settings Click OK HP ProtectTools Security Manager Fingerprint tab Setting your preferencesYour personal ID card Click Back up data Backing up and restoring your dataShow scan quality feedback Click Restore data Drive Encryption for HP ProtectTools select models only Opening Drive Encryption General tasks Click FeaturesActivating Drive Encryption for standard hard drives Activating Drive Encryption for self-encrypting drives Hardware encryption Software encryption Logging in after Drive Encryption is activated Deactivating Drive Encryption USB readers Smart cardsPcmcia readers Protect your data by encrypting your hard drive Click SettingsDisplaying encryption status Under My Data, click Drive Encryption Advanced tasks Managing Drive Encryption administrator task Backing up encryption keys Backup and recovery administrator taskRecovering encryption keys Privacy Manager for HP ProtectTools select models only Opening Privacy Manager Managing Privacy Manager Certificates Setup proceduresRequesting a Privacy Manager Certificate Click Request a Privacy Manager Certificate Importing a third-party certificate Setting up a Privacy Manager Certificate Viewing Privacy Manager Certificate details Setting a default Privacy Manager CertificateRenewing a Privacy Manager Certificate Click Certificate details Restoring a Privacy Manager Certificate Deleting a Privacy Manager CertificateRevoking your Privacy Manager Certificate Click Advanced Adding a Trusted Contact Managing Trusted ContactsAdding Trusted Contacts Adding Trusted Contacts using Microsoft Outlook contacts Checking revocation status for a Trusted Contact Viewing Trusted Contact detailsDeleting a Trusted Contact Signing and sending an e-mail message Using Privacy Manager in Microsoft OutlookConfiguring Privacy Manager for Microsoft Outlook Viewing a sealed e-mail message Using Privacy Manager in a Microsoft Office 2007 documentSealing and sending an e-mail message Signing a Microsoft Office document Configuring Privacy Manager for Microsoft Office Adding a suggested signers signature line Encrypting a Microsoft Office document Viewing a signed Microsoft Office document Removing encryption from a Microsoft Office documentSending an encrypted Microsoft Office document Viewing an encrypted Microsoft Office document Restoring Privacy Manager Certificates and Trusted Contacts Backing up Privacy Manager Certificates and Trusted Contacts Central administration of Privacy Manager File Sanitizer for HP ProtectTools Shredding Free space bleaching Opening File Sanitizer Setting a free space bleaching schedule Setting a shred schedule Selecting a predefined shred profile Selecting or creating a shred profileCustomizing a shred profile High Security Medium Security Low Security Customizing a simple delete profile Page Using a key sequence to initiate shredding Manually shredding all selected items Using the File Sanitizer iconManually shredding one asset Aborting a shred or free space bleaching operation Manually activating free space bleachingViewing the log files Click Bleach Now Device Access Manager for HP ProtectTools select models only Opening Device Access Manager Simple Configuration Configuring device access Starting the background service Device Class ConfigurationPage Device class All devices Individual device Denying access to a user or groupAllowing access for a user or a group Allowing access to a specific device for one user of a group Resetting the configuration Jita ConfigurationRemoving settings for a user or a group Creating an extendable Jita for a user or group Creating a Jita for a user or group Disabling a Jita for a user or group Device Administrators group Advanced Settings Unmanaged Device Classes ESATA SupportPage Go to https//cc.absolute.com Theft recovery Embedded Security for HP ProtectTools select models only Enabling the embedded security chip in Computer Setup Initializing the embedded security chip Setting up the basic user account Sending and receiving encrypted e-mail Using the personal secure driveEncrypting files and folders Changing the Basic User Key password Backing up and restoring Creating a backup fileRestoring certification data from the backup file Resetting a user password Changing the owner password Migrating keys with the Migration Wizard Localized password exceptions Page Special key handling Bios Bios What to do when a password is rejected Glossary Device access control policy Cryptographic service provider CSPEmergency recovery archive Cryptography Encryption File System EFS Power-on authenticationFingerprint Free space bleaching Restore RebootRevocation password Sata device mode Suggested signer Windows administratorToken Trusted Contact Index Face JitaPage