Enabling security features

The security features enabled here apply to all users of this computer.

1.In the left pane of the Administrative Console, expand Security, and click on Features.

2.To enable a security feature, click the corresponding check box next to Windows Logon Security and/or Protect data (activates Drive Encryption).

Windows Logon Security - protects your Windows account(s) by requiring the use of specific credentials for access.

Protect data - protects your data by encrypting your hard drive(s) using Drive Encryption for HP ProtectTools, making the information unreadable by those without proper authorization.

3.Click the Next button.

4.Click the Finish button.

Defining Security Manager authentication policies

Security Manager authentication policies for this computer are defined on two tabs, Logon and Session, which specify the credentials required to authenticate each class of user when accessing the computer and HP ProtectTools applications during a user session.

Logon tab

To specify the credentials required to access the computer, decrypt the hard drive, and log on to Windows:

1.In the left pane of the Administrative Console, expand Security and click on Authentication.

2.On the Logon tab, select a category of user from the drop-down list.

3.In the Policy section, specify the authentication credential(s) required for the selected category of user by clicking the check box or boxes next to the listed credentials. You must specify at least one credential.

4.In the Policy section drop-down list, choose whether ANY (only one) of the specified credentials are required, or if ALL of the specified credentials are required in order to authenticate a user.

5.Click the Apply button.

NOTE: If the Policy is set to “ALL of the specified credentials are required to authenticate” and the system is configured for both password and Smart Card and the Smart Card is damaged or lost, all administrators could be locked out of Windows and require special tools to regain access.

Session tab

To define policies governing the credentials required to authenticate a user when logging on to HP ProtectTools applications during a Windows session:

1.In the left pane of the Administrative Console, expand Security and click on Authentication.

2.On the Session tab, select a category of user.

3.In the Policy section, specify the authentication credential(s) required for the selected category of user by clicking the check box or boxes next to the listed credentials. You must specify at least one credential.

14 Chapter 2 HP ProtectTools Security Manager Administrative Console

ENWW