HP 2 Base Model manual

5Drive Encryption for HP ProtectTools (select models only)

Drive Encryption for HP ProtectTools provides complete data protection by encrypting your computer hard drive. When Drive Encryption is activated, you must log in at the Drive Encryption login screen, which is displayed before the Windows® operating system starts.

The HP ProtectTools Security Manager Setup Wizard allows Windows administrators to activate Drive Encryption, back up the encryption key, and select or deselect drive(s). Refer to the

HP ProtectTools Security Manager software Help for more information.

The following tasks can be performed with Drive Encryption:

●Selecting Drive Encryption settings:

◦Activating a TPM-protected password

◦Encrypting or decrypting individual drives or partitions using software encryption

◦Encrypting or decrypting individual self-encrypting drives using hardware encryption

◦Adding further security by disabling Sleep or Standby to ensure that Drive Encryption pre- boot authentication is always required

NOTE: Only internal SATA and external eSATA hard drives can be encrypted.

●Creating backup keys

●Recovering a Drive Encryption key

●Enabling Drive Encryption pre-boot authentication using a password, registered fingerprint, or smart card PIN

42 Chapter 5 Drive Encryption for HP ProtectTools (select models only)

Image 50

HP 2 Base Model manual Drive Encryption for HP ProtectTools select models only

Contents

HP ProtectTools First Edition January Document Part Number Table of contents HP ProtectTools Security Manager Drive Encryption for HP ProtectTools select models only File Sanitizer for HP ProtectTools 100 112 102107 Application Features Introduction to security HP ProtectTools features Module Key features HP ProtectTools features Credential Manager for HP ProtectTools Drive Encryption for HP ProtectTools Device Access Manager for HP ProtectTools File Sanitizer for HP ProtectTools Embedded Security for HP ProtectTools select models only Privacy Manager for HP ProtectToolsComputrace for HP ProtectTools formerly LoJack Pro Page Protecting against targeted theft Restricting access to sensitive dataAchieving key security objectives Creating strong password policies Assigning security roles Managing HP ProtectTools passwordsAdditional security elements Additional security elements Creating a secure password Backing up and restoring HP ProtectTools credentials Getting started with the Setup Wizard Page HP ProtectTools Security Manager Administrative Console Opening HP ProtectTools Administrative Console Using Administrative Console Security Users Credentials Logon Policy Configuring your systemSetting up authentication for your computer Session Policy SettingsManaging users Fingerprints CredentialsSpareKey Smart card Face General tab Configuring your applicationsUpdates and Messages Applications tab HP ProtectTools Security Manager Opening Security Manager Using the Security Manager dashboard Blue-OK Security Applications StatusHP ProtectTools desktop gadget Password Manager My Logons Adding logons Editing logons Managing your logons Using the Logons menuOrganizing logons into categories Assessing your password strength Password Manager icon settings Click Continue VeriSign Identity Protection VIPClick Add Logon Credential Manager SettingsChanging your Windows password Setting up your SpareKey Enrolling your fingerprints Under Central Management, click Setup Wizard Setting up a smart cardClick the Administration tab Initializing the smart card Configuring the smart card Enrolling scenes for face logon Advanced User Settings Click Create PIN Click OK HP ProtectTools Security Manager Fingerprint tab Setting your preferencesYour personal ID card Click Back up data Backing up and restoring your dataShow scan quality feedback Click Restore data Drive Encryption for HP ProtectTools select models only Opening Drive Encryption Activating Drive Encryption for standard hard drives Click FeaturesGeneral tasks Activating Drive Encryption for self-encrypting drives Software encryption Hardware encryption Deactivating Drive Encryption Logging in after Drive Encryption is activated USB readers Smart cardsPcmcia readers Displaying encryption status Click SettingsProtect your data by encrypting your hard drive Under My Data, click Drive Encryption Managing Drive Encryption administrator task Advanced tasks Backing up encryption keys Backup and recovery administrator taskRecovering encryption keys Privacy Manager for HP ProtectTools select models only Opening Privacy Manager Requesting a Privacy Manager Certificate Setup proceduresManaging Privacy Manager Certificates Click Request a Privacy Manager Certificate Setting up a Privacy Manager Certificate Importing a third-party certificate Renewing a Privacy Manager Certificate Setting a default Privacy Manager CertificateViewing Privacy Manager Certificate details Click Certificate details Revoking your Privacy Manager Certificate Deleting a Privacy Manager CertificateRestoring a Privacy Manager Certificate Click Advanced Adding a Trusted Contact Managing Trusted ContactsAdding Trusted Contacts Adding Trusted Contacts using Microsoft Outlook contacts Checking revocation status for a Trusted Contact Viewing Trusted Contact detailsDeleting a Trusted Contact Signing and sending an e-mail message Using Privacy Manager in Microsoft OutlookConfiguring Privacy Manager for Microsoft Outlook Viewing a sealed e-mail message Using Privacy Manager in a Microsoft Office 2007 documentSealing and sending an e-mail message Configuring Privacy Manager for Microsoft Office Signing a Microsoft Office document Encrypting a Microsoft Office document Adding a suggested signers signature line Viewing a signed Microsoft Office document Removing encryption from a Microsoft Office documentSending an encrypted Microsoft Office document Viewing an encrypted Microsoft Office document Backing up Privacy Manager Certificates and Trusted Contacts Restoring Privacy Manager Certificates and Trusted Contacts Central administration of Privacy Manager File Sanitizer for HP ProtectTools Shredding Free space bleaching Opening File Sanitizer Setting a shred schedule Setting a free space bleaching schedule Customizing a shred profile Selecting or creating a shred profileSelecting a predefined shred profile High Security Medium Security Low Security Customizing a simple delete profile Page Using a key sequence to initiate shredding Manually shredding all selected items Using the File Sanitizer iconManually shredding one asset Viewing the log files Manually activating free space bleachingAborting a shred or free space bleaching operation Click Bleach Now Device Access Manager for HP ProtectTools select models only Opening Device Access Manager Configuring device access Simple Configuration Device Class Configuration Starting the background servicePage Device class All devices Individual device Denying access to a user or groupAllowing access for a user or a group Allowing access to a specific device for one user of a group Resetting the configuration Jita ConfigurationRemoving settings for a user or a group Creating a Jita for a user or group Creating an extendable Jita for a user or group Disabling a Jita for a user or group Advanced Settings Device Administrators group ESATA Support Unmanaged Device ClassesPage Theft recovery Go to https//cc.absolute.com Embedded Security for HP ProtectTools select models only Enabling the embedded security chip in Computer Setup Initializing the embedded security chip Setting up the basic user account Sending and receiving encrypted e-mail Using the personal secure driveEncrypting files and folders Changing the Basic User Key password Backing up and restoring Creating a backup fileRestoring certification data from the backup file Changing the owner password Resetting a user password Migrating keys with the Migration Wizard Localized password exceptions Page Bios Special key handling Bios What to do when a password is rejected Glossary Emergency recovery archive Cryptographic service provider CSPDevice access control policy Cryptography Fingerprint Power-on authenticationEncryption File System EFS Free space bleaching Revocation password RebootRestore Sata device mode Token Windows administratorSuggested signer Trusted Contact Index Jita FacePage