Manuals / HP / Computer Equipment / Tablet

HP 2 manual Creating a JITA for a user or group, Creating an extendable JITA for a user or group

Models: 2

1 124

Download 124 pages 56.13 Kb

Page 95

The JITA period can also be extended, if configured to do so. In this scenario, 1 minute before the JITA period is about to expire, users can click the prompt to extend their access without having to re- authenticate.

Whether the user is given a limited or unlimited JITA period, as soon as the user logs off the system or another user logs in, the JITA period expires. The next time the user logs in and attempts to access a JITA-enabled device, a prompt to enter credentials is displayed.

JITA is available for the following device classes:

●DVD/CD-ROM drives

●Removable media

Creating a JITA for a user or group

Administrators can allow users or groups to access devices using just-in-time authentication.

1.In the left pane of HP ProtectTools Administrative Console, click Device Access Manager, and then click JITA Configuration.

2.From the device’s drop-down menu, select either Removable media or DVD/CD-ROM drives.

3.Click + to add a user or group to the JITA configuration.

4.Select the Enabled check box.

5.Set the JITA period to the required time.

6.Click Apply.

The user must log out and then log in again for the new JITA setting to be applied.

Creating an extendable JITA for a user or group

Administrators can allow user or group access to devices using just-in-time authentication that the user can extend before it expires.

1.In the left pane of HP ProtectTools Administrative Console, click Device Access Manager, and then click JITA Configuration.

2.From the device’s drop-down menu, select either removable media or DVD/CD-ROM drives.

3.Click + to add a user or group to the JITA configuration.

4.Select the Enabled check box.

5.Set the JITA period to the required time.

6.Select the Extendable check box.

7.Click Apply.

The user must log out and then log in again for the new JITA setting to be applied.

Setup Procedures 87

Image 95

HP 2 Base Model manual Creating a JITA for a user or group, Creating an extendable JITA for a user or group

Contents

Getting Started HP ProtectToolsCopyright 2011 Hewlett-Packard Development Company, L.P Table of contents 4 HP ProtectTools Security Manager 6 Privacy Manager for HP ProtectTools select models only 5 Drive Encryption for HP ProtectTools select models only7 File Sanitizer for HP ProtectTools Resetting a user password 8 Device Access Manager for HP ProtectTools select models only9 Theft recovery Changing the owner passwordMigrating keys with the Migration Wizard Application 1 Introduction to securityFeatures Module HP ProtectTools featuresKey features Chapter 1 Introduction to securityPrivacy Manager for HP ProtectTools select models Key featuresModule Drive Encryption for HP ProtectTools HP ProtectTools security product description and common use examplesCredential Manager for HP ProtectTools File Sanitizer for HP ProtectTools Device Access Manager for HP ProtectToolsEmbedded Security for HP ProtectTools select models only Privacy Manager for HP ProtectToolsComputrace for HP ProtectTools formerly LoJack Pro HP ProtectTools security product description and common use examples Protecting against targeted theft Restricting access to sensitive dataPreventing unauthorized access from internal or external locations Achieving key security objectivesCreating strong password policies Assigning security roles Managing HP ProtectTools passwordsAdditional security elements Function HP ProtectTools passwordAdditional security elements Set in the followingBacking up and restoring HP ProtectTools credentials Creating a secure password2 Getting started with the Setup Wizard 2. Read the Welcome screen, and then click Next 3 HP ProtectTools Security Manager Administrative Console Opening HP ProtectTools Administrative Console See how you can centrally manage HP ProtectTools Using Administrative ConsoleIncrease system security Require strong authentication Manage HP ProtectTools usersFor users who are not administrators Configuring your systemSetting up authentication for your computer For administrators of this computerRequire one of the specified credentials SettingsManaging users Session PolicyFingerprints CredentialsSpareKey Face Smart cardApplications tab Configuring your applicationsUpdates and Messages General tab4 HP ProtectTools Security Manager Opening Security Manager Using the Security Manager dashboard Blue-OK Security Applications StatusHP ProtectTools desktop gadget My Logons Password ManagerFor Web pages or programs where a logon has not yet been created Adding logons For Web pages or programs where a logon has already been createdFor a Web site, click Add domain name to Password Manager For a program, click Add this logon screen to Password ManagerEditing logons Managing your logons Using the Logons menuOrganizing logons into categories Password Manager icon settings Assessing your password strengthClick Continue VeriSign Identity Protection VIPClick Add Logon Credential Manager SettingsChanging your Windows password Enrolling your fingerprints Setting up your SpareKeyInitializing the smart card Setting up a smart card7. Click the Administration tab 1. Under Central Management, click Setup WizardEnrolling scenes for face logon Configuring the smart cardClick Create PIN Advanced User SettingsPrompt to update scenes when logon fails-If face logon is unsuccessful but you enter your password successfully, you may be prompted to save a series of images to increase the chances of successful face logon in the future Fingerprint tab Setting your preferencesYour personal ID card General tab Appearance-Show icon in taskbar notification area3. Click Back up data Backing up and restoring your dataShow scan quality feedback 3. Click Restore data 5 Drive Encryption for HP ProtectTools select models only Opening Drive Encryption Opening Drive Encryption2. In the left pane, click Drive Encryption Activating Drive Encryption for self-encrypting drives 3. Click FeaturesGeneral tasks Activating Drive Encryption for standard hard drives3. Click Features Software encryptionHardware encryption 3. Click Features3. Click Features Deactivating Drive EncryptionLogging in after Drive Encryption is activated USB readers Smart cardsPCMCIA readers 2. Under My Data, click Drive Encryption 2. Click SettingsProtect your data by encrypting your hard drive Displaying encryption statusEncrypting or decrypting individual drives software encryption only Managing Drive Encryption administrator task3. Click Settings Advanced tasks6. Click Backup Keys Backup and recovery administrator taskRecovering encryption keys 3. Click Encryption Key Backup6 Privacy Manager for HP ProtectTools select models only Opening Privacy Manager 2. Click Request a Privacy Manager Certificate Setup proceduresManaging Privacy Manager Certificates Requesting a Privacy Manager CertificateImporting a third-party certificate Setting up a Privacy Manager CertificateObtaining a preassigned Corporate Privacy Manager Certificate 3. Click Certificate details Setting a default Privacy Manager CertificateViewing Privacy Manager Certificate details Renewing a Privacy Manager Certificate2. Click Advanced Deleting a Privacy Manager CertificateRestoring a Privacy Manager Certificate Revoking your Privacy Manager CertificateAdding a Trusted Contact Managing Trusted ContactsAdding Trusted Contacts Adding Trusted Contacts using Microsoft Outlook contacts 3. Click Contact details Viewing Trusted Contact detailsDeleting a Trusted Contact Checking revocation status for a Trusted ContactGeneral tasks Using Privacy Manager in Microsoft OutlookConfiguring Privacy Manager for Microsoft Outlook Signing and sending an e-mail messageViewing a sealed e-mail message Using Privacy Manager in a Microsoft Office 2007 documentSealing and sending an e-mail message Signing a Microsoft Office document Configuring Privacy Manager for Microsoft OfficeAdding a suggested signers signature line Encrypting a Microsoft Office documentViewing a signed Microsoft Office document Removing encryption from a Microsoft Office documentSending an encrypted Microsoft Office document Viewing an encrypted Microsoft Office document Advanced tasks Backing up Privacy Manager Certificates and Trusted ContactsRestoring Privacy Manager Certificates and Trusted Contacts Central administration of Privacy Manager 7 File Sanitizer for HP ProtectTools Shredding Free space bleaching 2. Click File Sanitizer Opening File SanitizerSetup procedures Setting a shred scheduleSetting a free space bleaching schedule High Security Medium Security Low Security Selecting or creating a shred profileSelecting a predefined shred profile Customizing a shred profileCustomizing a simple delete profile 5. Click Apply Setup procedures4. To protect assets from automatic deleting b. Click Open, and then click OKon page Using a key sequence to initiate shreddingGeneral tasks Manually shredding all selected items Using the File Sanitizer iconManually shredding one asset 2. Click Bleach Now Manually activating free space bleachingAborting a shred or free space bleaching operation Viewing the log files8 Device Access Manager for HP ProtectTools select models only Opening Device Access Manager Simple Configuration Setup ProceduresConfiguring device access 3. Select the HP ProtectTools Device Locking/Auditing service Device Class ConfigurationStarting the background service Maintenance 2. Click Administrative Tools, and then click ServicesProtection may also be applied to specific devices The Device Class Configuration view has the following sectionsSetup Procedures Device class All devices Individual device Denying access to a user or groupAllowing access for a user or a group Device class All devices Individual deviceDevice class All devices Individual device Allowing access to a class of devices for one user of a groupAllowing access to a specific device for one user of a group Device class All devices Individual device JITA ConfigurationRemoving settings for a user or a group Resetting the configurationCreating an extendable JITA for a user or group Creating a JITA for a user or groupDisabling a JITA for a user or group Device Administrators group Advanced SettingsUnmanaged Device Classes eSATA SupportNet service Net trans SCSI adapter Hard disk controller HDC Human interface device HID class PowerBattery Advanced power management APM support Miscellaneous Computer Decoder Display Processor System Unknown Volume Volume snapshot9 Theft recovery 10 Embedded Security for HP ProtectTools select models only Setup procedures Enabling the embedded security chip in Computer SetupInitializing the embedded security chip Setting up the basic user account Apply changes to this folder only Using the personal secure driveEncrypting files and folders Sending and receiving encrypted e-mailChanging the Basic User Key password Advanced tasks Creating a backup fileRestoring certification data from the backup file Backing up and restoringResetting a user password Changing the owner passwordAdvanced tasks Migrating keys with the Migration Wizard11 Localized password exceptions Password changes using keyboard layout that is also supported Special key handling Windows BIOSSpecial key handling LanguageWhat to do when a password is rejected background service administratorSee Windows administrator authenticationcryptography cryptographic service provider CSPdevice access control policy emergency recovery archivefree space bleaching power-on authenticationEncryption File System EFS fingerprintSATA device mode rebootrestore revocation passwordSee security logon method Windows administratorsuggested signer tokenIndex F face J JITAPage