Manuals / HP / Computer Equipment / Tablet

HP 2 Base Model manual Backup and recovery administrator task, Backing up encryption keys

Models: 2

1 124

Download 124 pages 56.13 Kb

Page 58

Backup and recovery (administrator task)

NOTE: Dynamic partitions are not supported. If a partition is displayed as available, but it cannot be encrypted when selected, the partition is dynamic. A dynamic partition results from shrinking a partition to create a new partition within Disk Management.

A warning is displayed if a partition will be converted to a dynamic partition.

Backup and recovery (administrator task)

When Drive Encryption is activated, administrators can use the Encryption Key Backup page to back up encryption keys to removable media and to perform a recovery.

Backing up encryption keys

Administrators can back up the encryption key for an encrypted drive on a removable storage device.

CAUTION: Be sure to keep the storage device containing the backup key in a safe place, because if you forget your password, lose your smart card, or do not have a finger registered, this device provides your only access to your hard drive.

1.Open HP ProtectTools Administrative Console.

2.In the left pane, click the + icon to the left of Drive Encryption to display the available options.

3.Click Encryption Key Backup.

4.Insert the storage device being used to back up the encryption key.

5.Under Drive, select the check box for the device where you want to back up your encryption key.

6.Click Backup Keys.

7.Read the information on the page that is displayed, and then click Next. The encryption key is saved on the storage device you selected.

Recovering encryption keys

Administrators can recover an encryption key from the removable storage device where it was saved previously:

1.Turn on the computer.

2.Insert the removable storage device that contains your backup key.

3.When the Drive Encryption for HP ProtectTools login dialog box opens, click Options.

4.Click Recovery.

5.Select the file that contains your backup key or click Browse to search for it, and then click Next.

6.When the confirmation dialog box opens, click OK. Your computer starts.

NOTE: It is highly recommended that you reset your password after performing a recovery.

50 Chapter 5 Drive Encryption for HP ProtectTools (select models only)

Image 58

HP 2 Base Model manual Backup and recovery administrator task, Backing up encryption keys, Recovering encryption keys

Contents

HP ProtectTools Getting StartedCopyright 2011 Hewlett-Packard Development Company, L.P Table of contents 4 HP ProtectTools Security Manager 5 Drive Encryption for HP ProtectTools select models only 6 Privacy Manager for HP ProtectTools select models only7 File Sanitizer for HP ProtectTools Changing the owner password 8 Device Access Manager for HP ProtectTools select models only9 Theft recovery Resetting a user passwordMigrating keys with the Migration Wizard Features 1 Introduction to securityApplication Chapter 1 Introduction to security HP ProtectTools featuresKey features ModuleModule Key featuresPrivacy Manager for HP ProtectTools select models Credential Manager for HP ProtectTools HP ProtectTools security product description and common use examplesDrive Encryption for HP ProtectTools Device Access Manager for HP ProtectTools File Sanitizer for HP ProtectToolsComputrace for HP ProtectTools formerly LoJack Pro Privacy Manager for HP ProtectToolsEmbedded Security for HP ProtectTools select models only HP ProtectTools security product description and common use examples Achieving key security objectives Restricting access to sensitive dataPreventing unauthorized access from internal or external locations Protecting against targeted theftCreating strong password policies Additional security elements Managing HP ProtectTools passwordsAssigning security roles Set in the following HP ProtectTools passwordAdditional security elements FunctionCreating a secure password Backing up and restoring HP ProtectTools credentials2 Getting started with the Setup Wizard 2. Read the Welcome screen, and then click Next 3 HP ProtectTools Security Manager Administrative Console Opening HP ProtectTools Administrative Console Manage HP ProtectTools users Using Administrative ConsoleIncrease system security Require strong authentication See how you can centrally manage HP ProtectToolsFor administrators of this computer Configuring your systemSetting up authentication for your computer For users who are not administratorsSession Policy SettingsManaging users Require one of the specified credentialsSpareKey CredentialsFingerprints Smart card FaceGeneral tab Configuring your applicationsUpdates and Messages Applications tab4 HP ProtectTools Security Manager Opening Security Manager Using the Security Manager dashboard HP ProtectTools desktop gadget Security Applications StatusBlue-OK For Web pages or programs where a logon has not yet been created Password ManagerMy Logons For a program, click Add this logon screen to Password Manager For Web pages or programs where a logon has already been createdFor a Web site, click Add domain name to Password Manager Adding logonsEditing logons Organizing logons into categories Using the Logons menuManaging your logons Assessing your password strength Password Manager icon settingsClick Add Logon VeriSign Identity Protection VIPClick Continue Changing your Windows password SettingsCredential Manager Setting up your SpareKey Enrolling your fingerprints1. Under Central Management, click Setup Wizard Setting up a smart card7. Click the Administration tab Initializing the smart cardConfiguring the smart card Enrolling scenes for face logonAdvanced User Settings Click Create PINPrompt to update scenes when logon fails-If face logon is unsuccessful but you enter your password successfully, you may be prompted to save a series of images to increase the chances of successful face logon in the future General tab Appearance-Show icon in taskbar notification area Setting your preferencesYour personal ID card Fingerprint tabShow scan quality feedback Backing up and restoring your data3. Click Back up data 3. Click Restore data 5 Drive Encryption for HP ProtectTools select models only 2. In the left pane, click Drive Encryption Opening Drive EncryptionOpening Drive Encryption Activating Drive Encryption for standard hard drives 3. Click FeaturesGeneral tasks Activating Drive Encryption for self-encrypting drives3. Click Features Software encryptionHardware encryption 3. Click FeaturesLogging in after Drive Encryption is activated Deactivating Drive Encryption3. Click Features PCMCIA readers Smart cardsUSB readers Displaying encryption status 2. Click SettingsProtect your data by encrypting your hard drive 2. Under My Data, click Drive EncryptionAdvanced tasks Managing Drive Encryption administrator task3. Click Settings Encrypting or decrypting individual drives software encryption only3. Click Encryption Key Backup Backup and recovery administrator taskRecovering encryption keys 6. Click Backup Keys6 Privacy Manager for HP ProtectTools select models only Opening Privacy Manager Requesting a Privacy Manager Certificate Setup proceduresManaging Privacy Manager Certificates 2. Click Request a Privacy Manager CertificateObtaining a preassigned Corporate Privacy Manager Certificate Setting up a Privacy Manager CertificateImporting a third-party certificate Renewing a Privacy Manager Certificate Setting a default Privacy Manager CertificateViewing Privacy Manager Certificate details 3. Click Certificate detailsRevoking your Privacy Manager Certificate Deleting a Privacy Manager CertificateRestoring a Privacy Manager Certificate 2. Click AdvancedAdding Trusted Contacts Managing Trusted ContactsAdding a Trusted Contact Adding Trusted Contacts using Microsoft Outlook contacts Checking revocation status for a Trusted Contact Viewing Trusted Contact detailsDeleting a Trusted Contact 3. Click Contact detailsSigning and sending an e-mail message Using Privacy Manager in Microsoft OutlookConfiguring Privacy Manager for Microsoft Outlook General tasksSealing and sending an e-mail message Using Privacy Manager in a Microsoft Office 2007 documentViewing a sealed e-mail message Configuring Privacy Manager for Microsoft Office Signing a Microsoft Office documentEncrypting a Microsoft Office document Adding a suggested signers signature lineSending an encrypted Microsoft Office document Removing encryption from a Microsoft Office documentViewing a signed Microsoft Office document Viewing an encrypted Microsoft Office document Restoring Privacy Manager Certificates and Trusted Contacts Backing up Privacy Manager Certificates and Trusted ContactsAdvanced tasks Central administration of Privacy Manager 7 File Sanitizer for HP ProtectTools Shredding Free space bleaching Opening File Sanitizer 2. Click File SanitizerSetting a free space bleaching schedule Setting a shred scheduleSetup procedures Customizing a shred profile Selecting or creating a shred profileSelecting a predefined shred profile High Security Medium Security Low SecurityCustomizing a simple delete profile b. Click Open, and then click OK Setup procedures4. To protect assets from automatic deleting 5. Click ApplyGeneral tasks Using a key sequence to initiate shreddingon page Manually shredding one asset Using the File Sanitizer iconManually shredding all selected items Viewing the log files Manually activating free space bleachingAborting a shred or free space bleaching operation 2. Click Bleach Now8 Device Access Manager for HP ProtectTools select models only Opening Device Access Manager Configuring device access Setup ProceduresSimple Configuration Maintenance 2. Click Administrative Tools, and then click Services Device Class ConfigurationStarting the background service 3. Select the HP ProtectTools Device Locking/Auditing serviceSetup Procedures The Device Class Configuration view has the following sectionsProtection may also be applied to specific devices Device class All devices Individual device Denying access to a user or groupAllowing access for a user or a group Device class All devices Individual deviceAllowing access to a specific device for one user of a group Allowing access to a class of devices for one user of a groupDevice class All devices Individual device Resetting the configuration JITA ConfigurationRemoving settings for a user or a group Device class All devices Individual deviceCreating a JITA for a user or group Creating an extendable JITA for a user or groupDisabling a JITA for a user or group Advanced Settings Device Administrators groupeSATA Support Unmanaged Device ClassesDecoder Display Processor System Unknown Volume Volume snapshot Hard disk controller HDC Human interface device HID class PowerBattery Advanced power management APM support Miscellaneous Computer Net service Net trans SCSI adapter9 Theft recovery 10 Embedded Security for HP ProtectTools select models only Enabling the embedded security chip in Computer Setup Setup proceduresInitializing the embedded security chip Setting up the basic user account Sending and receiving encrypted e-mail Using the personal secure driveEncrypting files and folders Apply changes to this folder onlyChanging the Basic User Key password Backing up and restoring Creating a backup fileRestoring certification data from the backup file Advanced tasksChanging the owner password Resetting a user passwordMigrating keys with the Migration Wizard Advanced tasks11 Localized password exceptions Password changes using keyboard layout that is also supported Special key handling Language BIOSSpecial key handling WindowsWhat to do when a password is rejected authentication administratorSee Windows administrator background serviceemergency recovery archive cryptographic service provider CSPdevice access control policy cryptographyfingerprint power-on authenticationEncryption File System EFS free space bleachingrevocation password rebootrestore SATA device modetoken Windows administratorsuggested signer See security logon methodIndex J JITA F facePage