Device Access Manager for HP ProtectTools select models only | HP 2

8Device Access Manager for HP ProtectTools (select models only)

HP ProtectTools Device Access Manager controls access to data by disabling data transfer devices.

NOTE: Some human interface/input devices, such as a mouse, keyboard, TouchPad, and fingerprint reader, are not controlled by Device Access Manager. For more information, refer to Unmanaged Device Classes on page 90.

Windows® operating system administrators use HP ProtectTools Device Access Manager to control access to the devices on a system and to protect against unauthorized access:

●Device profiles are created for each user, to define the devices that they are allowed or denied permission to access.

●Just-in-time authentication (JITA) allows predefined users to authenticate themselves in order to access devices which are otherwise denied.

●Administrators and trusted users can be excluded from the restrictions on device access imposed by Device Access Manager by adding them to the Device Administrators group. This group's membership is managed using Advanced Settings.

●Device access can be granted or denied on the basis of group membership or for individual users.

●For device classes such as CD-ROM drives and DVD drives, read access and write access can be allowed or denied separately.

79

Image 87

HP 2 Base Model manual Device Access Manager for HP ProtectTools select models only

Contents

HP ProtectTools First Edition January Document Part Number Table of contents HP ProtectTools Security Manager Drive Encryption for HP ProtectTools select models only File Sanitizer for HP ProtectTools 100 102 107112 Introduction to security Application Features Module Key features HP ProtectTools features HP ProtectTools features Drive Encryption for HP ProtectTools Credential Manager for HP ProtectTools File Sanitizer for HP ProtectTools Device Access Manager for HP ProtectTools Privacy Manager for HP ProtectTools Computrace for HP ProtectTools formerly LoJack ProEmbedded Security for HP ProtectTools select models only Page Restricting access to sensitive data Achieving key security objectivesProtecting against targeted theft Creating strong password policies Managing HP ProtectTools passwords Additional security elementsAssigning security roles Additional security elements Backing up and restoring HP ProtectTools credentials Creating a secure password Getting started with the Setup Wizard Page HP ProtectTools Security Manager Administrative Console Opening HP ProtectTools Administrative Console Security Users Credentials Using Administrative Console Configuring your system Setting up authentication for your computerLogon Policy Settings Managing usersSession Policy Credentials SpareKeyFingerprints Face Smart card Applications tab Configuring your applicationsUpdates and Messages General tab HP ProtectTools Security Manager Opening Security Manager Using the Security Manager dashboard Security Applications Status HP ProtectTools desktop gadgetBlue-OK My Logons Password Manager Adding logons Editing logons Using the Logons menu Organizing logons into categoriesManaging your logons Password Manager icon settings Assessing your password strength VeriSign Identity Protection VIP Click Add LogonClick Continue Settings Changing your Windows passwordCredential Manager Enrolling your fingerprints Setting up your SpareKey Initializing the smart card Setting up a smart cardClick the Administration tab Under Central Management, click Setup Wizard Enrolling scenes for face logon Configuring the smart card Click Create PIN Advanced User Settings Click OK HP ProtectTools Security Manager Setting your preferences Your personal ID cardFingerprint tab Backing up and restoring your data Show scan quality feedbackClick Back up data Click Restore data Drive Encryption for HP ProtectTools select models only Opening Drive Encryption Activating Drive Encryption for self-encrypting drives Click FeaturesGeneral tasks Activating Drive Encryption for standard hard drives Hardware encryption Software encryption Logging in after Drive Encryption is activated Deactivating Drive Encryption Smart cards Pcmcia readersUSB readers Under My Data, click Drive Encryption Click SettingsProtect your data by encrypting your hard drive Displaying encryption status Advanced tasks Managing Drive Encryption administrator task Backup and recovery administrator task Recovering encryption keysBacking up encryption keys Privacy Manager for HP ProtectTools select models only Opening Privacy Manager Click Request a Privacy Manager Certificate Setup proceduresManaging Privacy Manager Certificates Requesting a Privacy Manager Certificate Importing a third-party certificate Setting up a Privacy Manager Certificate Click Certificate details Setting a default Privacy Manager CertificateViewing Privacy Manager Certificate details Renewing a Privacy Manager Certificate Click Advanced Deleting a Privacy Manager CertificateRestoring a Privacy Manager Certificate Revoking your Privacy Manager Certificate Managing Trusted Contacts Adding Trusted ContactsAdding a Trusted Contact Adding Trusted Contacts using Microsoft Outlook contacts Viewing Trusted Contact details Deleting a Trusted ContactChecking revocation status for a Trusted Contact Using Privacy Manager in Microsoft Outlook Configuring Privacy Manager for Microsoft OutlookSigning and sending an e-mail message Using Privacy Manager in a Microsoft Office 2007 document Sealing and sending an e-mail messageViewing a sealed e-mail message Signing a Microsoft Office document Configuring Privacy Manager for Microsoft Office Adding a suggested signers signature line Encrypting a Microsoft Office document Removing encryption from a Microsoft Office document Sending an encrypted Microsoft Office documentViewing a signed Microsoft Office document Viewing an encrypted Microsoft Office document Restoring Privacy Manager Certificates and Trusted Contacts Backing up Privacy Manager Certificates and Trusted Contacts Central administration of Privacy Manager File Sanitizer for HP ProtectTools Shredding Free space bleaching Opening File Sanitizer Setting a free space bleaching schedule Setting a shred schedule High Security Medium Security Low Security Selecting or creating a shred profileSelecting a predefined shred profile Customizing a shred profile Customizing a simple delete profile Page Using a key sequence to initiate shredding Using the File Sanitizer icon Manually shredding one assetManually shredding all selected items Click Bleach Now Manually activating free space bleachingAborting a shred or free space bleaching operation Viewing the log files Device Access Manager for HP ProtectTools select models only Opening Device Access Manager Simple Configuration Configuring device access Starting the background service Device Class ConfigurationPage Denying access to a user or group Allowing access for a user or a groupDevice class All devices Individual device Allowing access to a specific device for one user of a group Jita Configuration Removing settings for a user or a groupResetting the configuration Creating an extendable Jita for a user or group Creating a Jita for a user or group Disabling a Jita for a user or group Device Administrators group Advanced Settings Unmanaged Device Classes ESATA SupportPage Go to https//cc.absolute.com Theft recovery Embedded Security for HP ProtectTools select models only Enabling the embedded security chip in Computer Setup Initializing the embedded security chip Setting up the basic user account Using the personal secure drive Encrypting files and foldersSending and receiving encrypted e-mail Changing the Basic User Key password Creating a backup file Restoring certification data from the backup fileBacking up and restoring Resetting a user password Changing the owner password Migrating keys with the Migration Wizard Localized password exceptions Page Special key handling Bios Bios What to do when a password is rejected Glossary Cryptography Cryptographic service provider CSPDevice access control policy Emergency recovery archive Free space bleaching Power-on authenticationEncryption File System EFS Fingerprint Sata device mode RebootRestore Revocation password Trusted Contact Windows administratorSuggested signer Token Index Face JitaPage