Manuals / HP / Computer Equipment / Tablet

HP 2 Base Model manual Drive Encryption for HP ProtectTools select models only

Models: 2

1 124

Download 124 pages 56.13 Kb

Page 50

5Drive Encryption for HP ProtectTools (select models only)

5Drive Encryption for HP ProtectTools (select models only)

Drive Encryption for HP ProtectTools provides complete data protection by encrypting your computer hard drive. When Drive Encryption is activated, you must log in at the Drive Encryption login screen, which is displayed before the Windows® operating system starts.

The HP ProtectTools Security Manager Setup Wizard allows Windows administrators to activate Drive Encryption, back up the encryption key, and select or deselect drive(s). Refer to the

HP ProtectTools Security Manager software Help for more information.

The following tasks can be performed with Drive Encryption:

●Selecting Drive Encryption settings:

◦Activating a TPM-protected password

◦Encrypting or decrypting individual drives or partitions using software encryption

◦Encrypting or decrypting individual self-encrypting drives using hardware encryption

◦Adding further security by disabling Sleep or Standby to ensure that Drive Encryption pre- boot authentication is always required

NOTE: Only internal SATA and external eSATA hard drives can be encrypted.

●Creating backup keys

●Recovering a Drive Encryption key

●Enabling Drive Encryption pre-boot authentication using a password, registered fingerprint, or smart card PIN

42 Chapter 5 Drive Encryption for HP ProtectTools (select models only)

Image 50

HP 2 Base Model manual Drive Encryption for HP ProtectTools select models only

Contents

HP ProtectTools Getting StartedCopyright 2011 Hewlett-Packard Development Company, L.P Table of contents 4 HP ProtectTools Security Manager 5 Drive Encryption for HP ProtectTools select models only 6 Privacy Manager for HP ProtectTools select models only7 File Sanitizer for HP ProtectTools Changing the owner password 8 Device Access Manager for HP ProtectTools select models only9 Theft recovery Resetting a user passwordMigrating keys with the Migration Wizard Application 1 Introduction to securityFeatures Chapter 1 Introduction to security HP ProtectTools featuresKey features ModulePrivacy Manager for HP ProtectTools select models Key featuresModule Drive Encryption for HP ProtectTools HP ProtectTools security product description and common use examplesCredential Manager for HP ProtectTools Device Access Manager for HP ProtectTools File Sanitizer for HP ProtectToolsEmbedded Security for HP ProtectTools select models only Privacy Manager for HP ProtectToolsComputrace for HP ProtectTools formerly LoJack Pro HP ProtectTools security product description and common use examples Achieving key security objectives Restricting access to sensitive dataPreventing unauthorized access from internal or external locations Protecting against targeted theftCreating strong password policies Assigning security roles Managing HP ProtectTools passwordsAdditional security elements Set in the following HP ProtectTools passwordAdditional security elements FunctionCreating a secure password Backing up and restoring HP ProtectTools credentials2 Getting started with the Setup Wizard 2. Read the Welcome screen, and then click Next 3 HP ProtectTools Security Manager Administrative Console Opening HP ProtectTools Administrative Console Manage HP ProtectTools users Using Administrative ConsoleIncrease system security Require strong authentication See how you can centrally manage HP ProtectToolsFor administrators of this computer Configuring your systemSetting up authentication for your computer For users who are not administratorsSession Policy SettingsManaging users Require one of the specified credentialsFingerprints CredentialsSpareKey Smart card FaceGeneral tab Configuring your applicationsUpdates and Messages Applications tab4 HP ProtectTools Security Manager Opening Security Manager Using the Security Manager dashboard Blue-OK Security Applications StatusHP ProtectTools desktop gadget My Logons Password ManagerFor Web pages or programs where a logon has not yet been created For a program, click Add this logon screen to Password Manager For Web pages or programs where a logon has already been createdFor a Web site, click Add domain name to Password Manager Adding logonsEditing logons Managing your logons Using the Logons menuOrganizing logons into categories Assessing your password strength Password Manager icon settingsClick Continue VeriSign Identity Protection VIPClick Add Logon Credential Manager SettingsChanging your Windows password Setting up your SpareKey Enrolling your fingerprints1. Under Central Management, click Setup Wizard Setting up a smart card7. Click the Administration tab Initializing the smart cardConfiguring the smart card Enrolling scenes for face logonAdvanced User Settings Click Create PINPrompt to update scenes when logon fails-If face logon is unsuccessful but you enter your password successfully, you may be prompted to save a series of images to increase the chances of successful face logon in the future General tab Appearance-Show icon in taskbar notification area Setting your preferencesYour personal ID card Fingerprint tab3. Click Back up data Backing up and restoring your dataShow scan quality feedback 3. Click Restore data 5 Drive Encryption for HP ProtectTools select models only Opening Drive Encryption Opening Drive Encryption2. In the left pane, click Drive Encryption Activating Drive Encryption for standard hard drives 3. Click FeaturesGeneral tasks Activating Drive Encryption for self-encrypting drives3. Click Features Software encryptionHardware encryption 3. Click Features3. Click Features Deactivating Drive EncryptionLogging in after Drive Encryption is activated USB readers Smart cardsPCMCIA readers Displaying encryption status 2. Click SettingsProtect your data by encrypting your hard drive 2. Under My Data, click Drive EncryptionAdvanced tasks Managing Drive Encryption administrator task3. Click Settings Encrypting or decrypting individual drives software encryption only3. Click Encryption Key Backup Backup and recovery administrator taskRecovering encryption keys 6. Click Backup Keys6 Privacy Manager for HP ProtectTools select models only Opening Privacy Manager Requesting a Privacy Manager Certificate Setup proceduresManaging Privacy Manager Certificates 2. Click Request a Privacy Manager CertificateImporting a third-party certificate Setting up a Privacy Manager CertificateObtaining a preassigned Corporate Privacy Manager Certificate Renewing a Privacy Manager Certificate Setting a default Privacy Manager CertificateViewing Privacy Manager Certificate details 3. Click Certificate detailsRevoking your Privacy Manager Certificate Deleting a Privacy Manager CertificateRestoring a Privacy Manager Certificate 2. Click AdvancedAdding a Trusted Contact Managing Trusted ContactsAdding Trusted Contacts Adding Trusted Contacts using Microsoft Outlook contacts Checking revocation status for a Trusted Contact Viewing Trusted Contact detailsDeleting a Trusted Contact 3. Click Contact detailsSigning and sending an e-mail message Using Privacy Manager in Microsoft OutlookConfiguring Privacy Manager for Microsoft Outlook General tasksViewing a sealed e-mail message Using Privacy Manager in a Microsoft Office 2007 documentSealing and sending an e-mail message Configuring Privacy Manager for Microsoft Office Signing a Microsoft Office documentEncrypting a Microsoft Office document Adding a suggested signers signature lineViewing a signed Microsoft Office document Removing encryption from a Microsoft Office documentSending an encrypted Microsoft Office document Viewing an encrypted Microsoft Office document Advanced tasks Backing up Privacy Manager Certificates and Trusted ContactsRestoring Privacy Manager Certificates and Trusted Contacts Central administration of Privacy Manager 7 File Sanitizer for HP ProtectTools Shredding Free space bleaching Opening File Sanitizer 2. Click File SanitizerSetup procedures Setting a shred scheduleSetting a free space bleaching schedule Customizing a shred profile Selecting or creating a shred profileSelecting a predefined shred profile High Security Medium Security Low SecurityCustomizing a simple delete profile b. Click Open, and then click OK Setup procedures4. To protect assets from automatic deleting 5. Click Applyon page Using a key sequence to initiate shreddingGeneral tasks Manually shredding all selected items Using the File Sanitizer iconManually shredding one asset Viewing the log files Manually activating free space bleachingAborting a shred or free space bleaching operation 2. Click Bleach Now8 Device Access Manager for HP ProtectTools select models only Opening Device Access Manager Simple Configuration Setup ProceduresConfiguring device access Maintenance 2. Click Administrative Tools, and then click Services Device Class ConfigurationStarting the background service 3. Select the HP ProtectTools Device Locking/Auditing serviceProtection may also be applied to specific devices The Device Class Configuration view has the following sectionsSetup Procedures Device class All devices Individual device Denying access to a user or groupAllowing access for a user or a group Device class All devices Individual deviceDevice class All devices Individual device Allowing access to a class of devices for one user of a groupAllowing access to a specific device for one user of a group Resetting the configuration JITA ConfigurationRemoving settings for a user or a group Device class All devices Individual deviceCreating a JITA for a user or group Creating an extendable JITA for a user or groupDisabling a JITA for a user or group Advanced Settings Device Administrators groupeSATA Support Unmanaged Device ClassesDecoder Display Processor System Unknown Volume Volume snapshot Hard disk controller HDC Human interface device HID class PowerBattery Advanced power management APM support Miscellaneous Computer Net service Net trans SCSI adapter9 Theft recovery 10 Embedded Security for HP ProtectTools select models only Enabling the embedded security chip in Computer Setup Setup proceduresInitializing the embedded security chip Setting up the basic user account Sending and receiving encrypted e-mail Using the personal secure driveEncrypting files and folders Apply changes to this folder onlyChanging the Basic User Key password Backing up and restoring Creating a backup fileRestoring certification data from the backup file Advanced tasksChanging the owner password Resetting a user passwordMigrating keys with the Migration Wizard Advanced tasks11 Localized password exceptions Password changes using keyboard layout that is also supported Special key handling Language BIOSSpecial key handling WindowsWhat to do when a password is rejected authentication administratorSee Windows administrator background serviceemergency recovery archive cryptographic service provider CSPdevice access control policy cryptographyfingerprint power-on authenticationEncryption File System EFS free space bleachingrevocation password rebootrestore SATA device modetoken Windows administratorsuggested signer See security logon methodIndex J JITA F facePage