HP ProtectTools
Getting Started
Copyright 2011 Hewlett-Packard Development Company, L.P
Table of contents
4 HP ProtectTools Security Manager
5 Drive Encryption for HP ProtectTools select models only
6 Privacy Manager for HP ProtectTools select models only
7 File Sanitizer for HP ProtectTools
Changing the owner password
8 Device Access Manager for HP ProtectTools select models only
9 Theft recovery
Resetting a user password
Migrating keys with the Migration Wizard
Application
1 Introduction to security
Features
Chapter 1 Introduction to security
HP ProtectTools features
Key features
Module
Privacy Manager for HP ProtectTools select models
Key features
Module
Drive Encryption for HP ProtectTools
HP ProtectTools security product description and common use examples
Credential Manager for HP ProtectTools
Device Access Manager for HP ProtectTools
File Sanitizer for HP ProtectTools
Embedded Security for HP ProtectTools select models only
Privacy Manager for HP ProtectTools
Computrace for HP ProtectTools formerly LoJack Pro
HP ProtectTools security product description and common use examples
Achieving key security objectives
Restricting access to sensitive data
Preventing unauthorized access from internal or external locations
Protecting against targeted theft
Creating strong password policies
Assigning security roles
Managing HP ProtectTools passwords
Additional security elements
Set in the following
HP ProtectTools password
Additional security elements
Function
Creating a secure password
Backing up and restoring HP ProtectTools credentials
2 Getting started with the Setup Wizard
2. Read the Welcome screen, and then click Next
3 HP ProtectTools Security Manager Administrative Console
Opening HP ProtectTools Administrative Console
Manage HP ProtectTools users
Using Administrative Console
Increase system security Require strong authentication
See how you can centrally manage HP ProtectTools
For administrators of this computer
Configuring your system
Setting up authentication for your computer
For users who are not administrators
Session Policy
Settings
Managing users
Require one of the specified credentials
Fingerprints
Credentials
SpareKey
Smart card
Face
General tab
Configuring your applications
Updates and Messages
Applications tab
4 HP ProtectTools Security Manager
Opening Security Manager
Using the Security Manager dashboard
Blue-OK
Security Applications Status
HP ProtectTools desktop gadget
My Logons
Password Manager
For Web pages or programs where a logon has not yet been created
For a program, click Add this logon screen to Password Manager
For Web pages or programs where a logon has already been created
For a Web site, click Add domain name to Password Manager
Adding logons
Editing logons
Managing your logons
Using the Logons menu
Organizing logons into categories
Assessing your password strength
Password Manager icon settings
Click Continue
VeriSign Identity Protection VIP
Click Add Logon
Credential Manager
Settings
Changing your Windows password
Setting up your SpareKey
Enrolling your fingerprints
1. Under Central Management, click Setup Wizard
Setting up a smart card
7. Click the Administration tab
Initializing the smart card
Configuring the smart card
Enrolling scenes for face logon
Advanced User Settings
Click Create PIN
Prompt to update scenes when logon fails-If face logon is unsuccessful but you enter your password successfully, you may be prompted to save a series of images to increase the chances of successful face logon in the future
General tab Appearance-Show icon in taskbar notification area
Setting your preferences
Your personal ID card
Fingerprint tab
3. Click Back up data
Backing up and restoring your data
Show scan quality feedback
3. Click Restore data
5 Drive Encryption for HP ProtectTools select models only
Opening Drive Encryption
Opening Drive Encryption
2. In the left pane, click Drive Encryption
Activating Drive Encryption for standard hard drives
3. Click Features
General tasks
Activating Drive Encryption for self-encrypting drives
3. Click Features
Software encryption
Hardware encryption
3. Click Features
3. Click Features
Deactivating Drive Encryption
Logging in after Drive Encryption is activated
USB readers
Smart cards
PCMCIA readers
Displaying encryption status
2. Click Settings
Protect your data by encrypting your hard drive
2. Under My Data, click Drive Encryption
Advanced tasks
Managing Drive Encryption administrator task
3. Click Settings
Encrypting or decrypting individual drives software encryption only
3. Click Encryption Key Backup
Backup and recovery administrator task
Recovering encryption keys
6. Click Backup Keys
6 Privacy Manager for HP ProtectTools select models only
Opening Privacy Manager
Requesting a Privacy Manager Certificate
Setup procedures
Managing Privacy Manager Certificates
2. Click Request a Privacy Manager Certificate
Importing a third-party certificate
Setting up a Privacy Manager Certificate
Obtaining a preassigned Corporate Privacy Manager Certificate
Renewing a Privacy Manager Certificate
Setting a default Privacy Manager Certificate
Viewing Privacy Manager Certificate details
3. Click Certificate details
Revoking your Privacy Manager Certificate
Deleting a Privacy Manager Certificate
Restoring a Privacy Manager Certificate
2. Click Advanced
Adding a Trusted Contact
Managing Trusted Contacts
Adding Trusted Contacts
Adding Trusted Contacts using Microsoft Outlook contacts
Checking revocation status for a Trusted Contact
Viewing Trusted Contact details
Deleting a Trusted Contact
3. Click Contact details
Signing and sending an e-mail message
Using Privacy Manager in Microsoft Outlook
Configuring Privacy Manager for Microsoft Outlook
General tasks
Viewing a sealed e-mail message
Using Privacy Manager in a Microsoft Office 2007 document
Sealing and sending an e-mail message
Configuring Privacy Manager for Microsoft Office
Signing a Microsoft Office document
Encrypting a Microsoft Office document
Adding a suggested signers signature line
Viewing a signed Microsoft Office document
Removing encryption from a Microsoft Office document
Sending an encrypted Microsoft Office document
Viewing an encrypted Microsoft Office document
Advanced tasks
Backing up Privacy Manager Certificates and Trusted Contacts
Restoring Privacy Manager Certificates and Trusted Contacts
Central administration of Privacy Manager
7 File Sanitizer for HP ProtectTools
Shredding
Free space bleaching
Opening File Sanitizer
2. Click File Sanitizer
Setup procedures
Setting a shred schedule
Setting a free space bleaching schedule
Customizing a shred profile
Selecting or creating a shred profile
Selecting a predefined shred profile
High Security Medium Security Low Security
Customizing a simple delete profile
b. Click Open, and then click OK
Setup procedures
4. To protect assets from automatic deleting
5. Click Apply
on page
Using a key sequence to initiate shredding
General tasks
Manually shredding all selected items
Using the File Sanitizer icon
Manually shredding one asset
Viewing the log files
Manually activating free space bleaching
Aborting a shred or free space bleaching operation
2. Click Bleach Now
8 Device Access Manager for HP ProtectTools select models only
Opening Device Access Manager
Simple Configuration
Setup Procedures
Configuring device access
Maintenance 2. Click Administrative Tools, and then click Services
Device Class Configuration
Starting the background service
3. Select the HP ProtectTools Device Locking/Auditing service
Protection may also be applied to specific devices
The Device Class Configuration view has the following sections
Setup Procedures
Device class All devices Individual device
Denying access to a user or group
Allowing access for a user or a group
Device class All devices Individual device
Device class All devices Individual device
Allowing access to a class of devices for one user of a group
Allowing access to a specific device for one user of a group
Resetting the configuration
JITA Configuration
Removing settings for a user or a group
Device class All devices Individual device
Creating a JITA for a user or group
Creating an extendable JITA for a user or group
Disabling a JITA for a user or group
Advanced Settings
Device Administrators group
eSATA Support
Unmanaged Device Classes
Decoder Display Processor System Unknown Volume Volume snapshot
Hard disk controller HDC Human interface device HID class Power
Battery Advanced power management APM support Miscellaneous Computer
Net service Net trans SCSI adapter
9 Theft recovery
10 Embedded Security for HP ProtectTools select models only
Enabling the embedded security chip in Computer Setup
Setup procedures
Initializing the embedded security chip
Setting up the basic user account
Sending and receiving encrypted e-mail
Using the personal secure drive
Encrypting files and folders
Apply changes to this folder only
Changing the Basic User Key password
Backing up and restoring
Creating a backup file
Restoring certification data from the backup file
Advanced tasks
Changing the owner password
Resetting a user password
Migrating keys with the Migration Wizard
Advanced tasks
11 Localized password exceptions
Password changes using keyboard layout that is also supported
Special key handling
Language
BIOS
Special key handling
Windows
What to do when a password is rejected
authentication
administrator
See Windows administrator
background service
emergency recovery archive
cryptographic service provider CSP
device access control policy
cryptography
fingerprint
power-on authentication
Encryption File System EFS
free space bleaching
revocation password
reboot
restore
SATA device mode
token
Windows administrator
suggested signer
See security logon method
Index
J JITA
F face
Page