Getting Started
HP ProtectTools
Copyright 2011 Hewlett-Packard Development Company, L.P
Table of contents
4 HP ProtectTools Security Manager
6 Privacy Manager for HP ProtectTools select models only
5 Drive Encryption for HP ProtectTools select models only
7 File Sanitizer for HP ProtectTools
9 Theft recovery
8 Device Access Manager for HP ProtectTools select models only
Changing the owner password
Resetting a user password
Migrating keys with the Migration Wizard
Features
1 Introduction to security
Application
Key features
HP ProtectTools features
Chapter 1 Introduction to security
Module
Module
Key features
Privacy Manager for HP ProtectTools select models
Credential Manager for HP ProtectTools
HP ProtectTools security product description and common use examples
Drive Encryption for HP ProtectTools
File Sanitizer for HP ProtectTools
Device Access Manager for HP ProtectTools
Computrace for HP ProtectTools formerly LoJack Pro
Privacy Manager for HP ProtectTools
Embedded Security for HP ProtectTools select models only
HP ProtectTools security product description and common use examples
Preventing unauthorized access from internal or external locations
Restricting access to sensitive data
Achieving key security objectives
Protecting against targeted theft
Creating strong password policies
Additional security elements
Managing HP ProtectTools passwords
Assigning security roles
Additional security elements
HP ProtectTools password
Set in the following
Function
Backing up and restoring HP ProtectTools credentials
Creating a secure password
2 Getting started with the Setup Wizard
2. Read the Welcome screen, and then click Next
3 HP ProtectTools Security Manager Administrative Console
Opening HP ProtectTools Administrative Console
Increase system security Require strong authentication
Using Administrative Console
Manage HP ProtectTools users
See how you can centrally manage HP ProtectTools
Setting up authentication for your computer
Configuring your system
For administrators of this computer
For users who are not administrators
Managing users
Settings
Session Policy
Require one of the specified credentials
SpareKey
Credentials
Fingerprints
Face
Smart card
Updates and Messages
Configuring your applications
General tab
Applications tab
4 HP ProtectTools Security Manager
Opening Security Manager
Using the Security Manager dashboard
HP ProtectTools desktop gadget
Security Applications Status
Blue-OK
For Web pages or programs where a logon has not yet been created
Password Manager
My Logons
For a Web site, click Add domain name to Password Manager
For Web pages or programs where a logon has already been created
For a program, click Add this logon screen to Password Manager
Adding logons
Editing logons
Organizing logons into categories
Using the Logons menu
Managing your logons
Password Manager icon settings
Assessing your password strength
Click Add Logon
VeriSign Identity Protection VIP
Click Continue
Changing your Windows password
Settings
Credential Manager
Enrolling your fingerprints
Setting up your SpareKey
7. Click the Administration tab
Setting up a smart card
1. Under Central Management, click Setup Wizard
Initializing the smart card
Enrolling scenes for face logon
Configuring the smart card
Click Create PIN
Advanced User Settings
Prompt to update scenes when logon fails-If face logon is unsuccessful but you enter your password successfully, you may be prompted to save a series of images to increase the chances of successful face logon in the future
Your personal ID card
Setting your preferences
General tab Appearance-Show icon in taskbar notification area
Fingerprint tab
Show scan quality feedback
Backing up and restoring your data
3. Click Back up data
3. Click Restore data
5 Drive Encryption for HP ProtectTools select models only
2. In the left pane, click Drive Encryption
Opening Drive Encryption
Opening Drive Encryption
General tasks
3. Click Features
Activating Drive Encryption for standard hard drives
Activating Drive Encryption for self-encrypting drives
Hardware encryption
Software encryption
3. Click Features
3. Click Features
Logging in after Drive Encryption is activated
Deactivating Drive Encryption
3. Click Features
PCMCIA readers
Smart cards
USB readers
Protect your data by encrypting your hard drive
2. Click Settings
Displaying encryption status
2. Under My Data, click Drive Encryption
3. Click Settings
Managing Drive Encryption administrator task
Advanced tasks
Encrypting or decrypting individual drives software encryption only
Recovering encryption keys
Backup and recovery administrator task
3. Click Encryption Key Backup
6. Click Backup Keys
6 Privacy Manager for HP ProtectTools select models only
Opening Privacy Manager
Managing Privacy Manager Certificates
Setup procedures
Requesting a Privacy Manager Certificate
2. Click Request a Privacy Manager Certificate
Obtaining a preassigned Corporate Privacy Manager Certificate
Setting up a Privacy Manager Certificate
Importing a third-party certificate
Viewing Privacy Manager Certificate details
Setting a default Privacy Manager Certificate
Renewing a Privacy Manager Certificate
3. Click Certificate details
Restoring a Privacy Manager Certificate
Deleting a Privacy Manager Certificate
Revoking your Privacy Manager Certificate
2. Click Advanced
Adding Trusted Contacts
Managing Trusted Contacts
Adding a Trusted Contact
Adding Trusted Contacts using Microsoft Outlook contacts
Deleting a Trusted Contact
Viewing Trusted Contact details
Checking revocation status for a Trusted Contact
3. Click Contact details
Configuring Privacy Manager for Microsoft Outlook
Using Privacy Manager in Microsoft Outlook
Signing and sending an e-mail message
General tasks
Sealing and sending an e-mail message
Using Privacy Manager in a Microsoft Office 2007 document
Viewing a sealed e-mail message
Signing a Microsoft Office document
Configuring Privacy Manager for Microsoft Office
Adding a suggested signers signature line
Encrypting a Microsoft Office document
Sending an encrypted Microsoft Office document
Removing encryption from a Microsoft Office document
Viewing a signed Microsoft Office document
Viewing an encrypted Microsoft Office document
Restoring Privacy Manager Certificates and Trusted Contacts
Backing up Privacy Manager Certificates and Trusted Contacts
Advanced tasks
Central administration of Privacy Manager
7 File Sanitizer for HP ProtectTools
Shredding
Free space bleaching
2. Click File Sanitizer
Opening File Sanitizer
Setting a free space bleaching schedule
Setting a shred schedule
Setup procedures
Selecting a predefined shred profile
Selecting or creating a shred profile
Customizing a shred profile
High Security Medium Security Low Security
Customizing a simple delete profile
4. To protect assets from automatic deleting
Setup procedures
b. Click Open, and then click OK
5. Click Apply
General tasks
Using a key sequence to initiate shredding
on page
Manually shredding one asset
Using the File Sanitizer icon
Manually shredding all selected items
Aborting a shred or free space bleaching operation
Manually activating free space bleaching
Viewing the log files
2. Click Bleach Now
8 Device Access Manager for HP ProtectTools select models only
Opening Device Access Manager
Configuring device access
Setup Procedures
Simple Configuration
Starting the background service
Device Class Configuration
Maintenance 2. Click Administrative Tools, and then click Services
3. Select the HP ProtectTools Device Locking/Auditing service
Setup Procedures
The Device Class Configuration view has the following sections
Protection may also be applied to specific devices
Allowing access for a user or a group
Denying access to a user or group
Device class All devices Individual device
Device class All devices Individual device
Allowing access to a specific device for one user of a group
Allowing access to a class of devices for one user of a group
Device class All devices Individual device
Removing settings for a user or a group
JITA Configuration
Resetting the configuration
Device class All devices Individual device
Creating an extendable JITA for a user or group
Creating a JITA for a user or group
Disabling a JITA for a user or group
Device Administrators group
Advanced Settings
Unmanaged Device Classes
eSATA Support
Battery Advanced power management APM support Miscellaneous Computer
Hard disk controller HDC Human interface device HID class Power
Decoder Display Processor System Unknown Volume Volume snapshot
Net service Net trans SCSI adapter
9 Theft recovery
10 Embedded Security for HP ProtectTools select models only
Setup procedures
Enabling the embedded security chip in Computer Setup
Initializing the embedded security chip
Setting up the basic user account
Encrypting files and folders
Using the personal secure drive
Sending and receiving encrypted e-mail
Apply changes to this folder only
Changing the Basic User Key password
Restoring certification data from the backup file
Creating a backup file
Backing up and restoring
Advanced tasks
Resetting a user password
Changing the owner password
Advanced tasks
Migrating keys with the Migration Wizard
11 Localized password exceptions
Password changes using keyboard layout that is also supported
Special key handling
Special key handling
BIOS
Language
Windows
What to do when a password is rejected
See Windows administrator
administrator
authentication
background service
device access control policy
cryptographic service provider CSP
emergency recovery archive
cryptography
Encryption File System EFS
power-on authentication
fingerprint
free space bleaching
restore
reboot
revocation password
SATA device mode
suggested signer
Windows administrator
token
See security logon method
Index
F face
J JITA
Page