Compaq nc6400 ProtectTools

Compaq nc6400 - Notebook PC Manual

Compaq nc6400 manual content summary:

  • Compaq nc6400 | ProtectTools - Page 1
    ProtectTools Getting Started
  • Compaq nc6400 | ProtectTools - Page 2
    in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. First Edition: March 2006 Document Part Number: 406816-001
  • Compaq nc6400 | ProtectTools - Page 3
    the administrator or user card password 13 General tasks ...14 Updating BIOS smart card settings 14 Selecting the smart card reader 14 Changing a name to a Java Card 22 Setting power-on authentication 22 Enabling Java Card power-on authentication and creating an administrator Java Card
  • Compaq nc6400 | ProtectTools - Page 4
    Smart card or Java Card power-on authentication support ...41 Enabling and disabling power-on authentication support for Embedded Security ...42 Enabling and disabling Automatic DriveLock hard drive protection 43 Managing Computer Setup passwords 43 Setting the power-on password 44 Changing the
  • Compaq nc6400 | ProtectTools - Page 5
    fingerprints 49 Set up the fingerprint reader 50 Use your registered fingerprint to log on to windows to Windows with Credential Manager 55 Adding accounts 56 Removing manual (drag and drop) registration 57 Managing applications and credentials 58 Modifying application properties 58 Removing
  • Compaq nc6400 | ProtectTools - Page 6
    vi ENWW
  • Compaq nc6400 | ProtectTools - Page 7
    ProtectTools ● BIOS Configuration for ProtectTools ● Credential Manager for ProtectTools The software modules available software modules may be preinstalled, preloaded, or available for download from the HP Web site. Visit http://www.hp.com for more information. NOTE The instructions in this guide
  • Compaq nc6400 | ProtectTools - Page 8
    Security Manager To access the ProtectTools Security Manager from the Microsoft® Windows® Control Panel: ▲ Select Start > All Programs > HP ProtectTools Security Manager. NOTE After you have configured the Credential Manager module, you can also open ProtectTools by logging on to Credential Manager
  • Compaq nc6400 | ProtectTools - Page 9
    passwords, the software module where the Setup setup password Set in this ProtectTools module BIOS Configuration, by IT administrator Function Protects access to the Computer Setup utility. NOTE Also known as BIOS administrator, f10 Setup, or Security Setup password Power-on password BIOS
  • Compaq nc6400 | ProtectTools - Page 10
    Manager Credential Manager recovery file Credential Manager, by IT password administrator Windows logon password Windows Control Panel Protects the system and the TPM chip from unauthorized access to all owner functions of Embedded Security. This password offers 2 options: ● It can be
  • Compaq nc6400 | ProtectTools - Page 11
    Creating a secure password When creating passwords, you must first follow any specifications that are set by the program. In general, however, consider the following guidelines to help you create strong passwords and reduce the chances of your
  • Compaq nc6400 | ProtectTools - Page 12
    6 Chapter 1 Introduction ENWW
  • Compaq nc6400 | ProtectTools - Page 13
    be used with other ProtectTools modules, such as Credential Manager for ProtectTools. ● Work with the Computer Setup utility to enable smart card authentication in a power-on environment, and to configure smart card. ● Back up and restore smart card BIOS passwords stored on the smart card. ENWW 7
  • Compaq nc6400 | ProtectTools - Page 14
    the smart card into the reader. 2. Select Start > All Programs > HP ProtectTools Security Manager. 3. In the left pane, select Smart Card Security, and then select Smart Card. 4. In the right pane, click Initialize. 5. Type your name in the first box in the Initialize the smart card dialog box.
  • Compaq nc6400 | ProtectTools - Page 15
    NOTE Enabling this setting allows you to use a smart card for power-on authentication. The smart card BIOS security mode features are unavailable until you enable smart card power-on authentication support. 2. Enable smart card BIOS security mode in Smart Card Security. Refer to "Enabling smart card
  • Compaq nc6400 | ProtectTools - Page 16
    . 3. In the right pane, under BIOS Security Mode, click Enable. 4. Click Next. 5. Enter the Computer Setup setup password at the prompt, and then click Next. 6. Insert the new administrator smart card, and follow the on-screen instructions. The instructions vary and may include the following tasks
  • Compaq nc6400 | ProtectTools - Page 17
    the smart card administrator password. NOTE The following procedure updates the smart card administrator password stored on the card and in Computer Setup. To change the smart card administrator password: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select
  • Compaq nc6400 | ProtectTools - Page 18
    BIOS. 3. In the right pane, under BIOS Security Mode, next to BIOS user card, click the Set button. NOTE If there is already a user password in Computer Setup on the card, the BIOS Password Wizard opens. 6. In the BIOS Password Wizard, you can either ● Enter a password manually. ● Generate a random
  • Compaq nc6400 | ProtectTools - Page 19
    HP ProtectTools Security Manager. 3. In the left pane, select Smart Card Security, and then select BIOS. 4. In the right pane, under BIOS Password on Smart Card, click Store. 5. In the BIOS Password Wizard, you can either ● Enter a password manually or User for the type of card. 7. Under
  • Compaq nc6400 | ProtectTools - Page 20
    Updating BIOS smart card settings To require a smart card PIN when you restart the computer: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Smart Card Security, and then select BIOS. 3. In the right pane, under Smart Card BIOS PIN. 4. Type your current
  • Compaq nc6400 | ProtectTools - Page 21
    does not match a smart card with updated information, immediately create a new recovery file and store it recovery file: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, Also, a recovery file saved on the hard drive may be accessible to others, posing a
  • Compaq nc6400 | ProtectTools - Page 22
    ● Access to a computer with Smart Card Security software installed ● Smart card recovery file ● Smart card : 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane will be prompted to initialize it. For detailed instructions on initializing the smart card, refer to "
  • Compaq nc6400 | ProtectTools - Page 23
    information, refer to "Restoring smart card data," earlier in this chapter. To create a replacement smart card with a manually generated smart card password: 1. Initialize a new smart card. For instructions, refer to "Initializing the smart card," earlier in this chapter. 2. Store the administrator
  • Compaq nc6400 | ProtectTools - Page 24
    18 Chapter 2 Smart Card Security for ProtectTools ENWW
  • Compaq nc6400 | ProtectTools - Page 25
    smart card reader. With Java Card Security, you can ● Access Java Card security features. ● Work with the Computer Setup utility to enable Java Card authentication in a power-on environment, and to configure separate Java Cards for an administrator and a user. This requires a user to insert the
  • Compaq nc6400 | ProtectTools - Page 26
    a Java Card PIN To change a Java Card PIN: NOTE The Java Card PIN must be between 4 and 8 numeric characters. 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Java Card Security, and then select General. 3. Insert a Java Card (with an existing PIN) into
  • Compaq nc6400 | ProtectTools - Page 27
    setup password in order to get to the "Advanced" page. Assigning a Java Card PIN You must assign a PIN to a Java Card before it can be used for power-on authentication. To assign a Java Card PIN: NOTE The Java Card PIN must be between 4 and 8 numeric characters. 1. Select Start > All Programs > HP
  • Compaq nc6400 | ProtectTools - Page 28
    steps: 1. Enable Java Card power-on authentication support in BIOS Configuration or Computer Setup. Refer to "Enabling and disabling Smart card or Java Card power-on authentication support," in Chapter 5, "BIOS Configuration for ProtectTools." 2. Enable Java Card power-on authentication in Java Card
  • Compaq nc6400 | ProtectTools - Page 29
    To enable Java Card power-on authentication: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Java Card Security, and then select Advanced. 3. When the Computer Setup Password dialog box displays, enter your Computer Setup setup password, and then click
  • Compaq nc6400 | ProtectTools - Page 30
    disable Java Card power-on authentication, the use of the Java Card is no longer needed to access the computer. 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Java Card Security, and then select Advanced. 3. When the Setup Password dialog box displays
  • Compaq nc6400 | ProtectTools - Page 31
    displays, enter your Computer Setup setup password, and then click OK. 4. In the right pane, under Recovery, click Create. 5. Enter the file path and file name in the Filename box. CAUTION To avoid loss of access to the computer, do not save the recovery file on the computer hard drive; you will not
  • Compaq nc6400 | ProtectTools - Page 32
    software installed Setup setup password, and then click OK. 4. Insert the diskette or other media containing the Java Card recovery file. 5. Insert a Java Card into the reader. If the card has not been assigned a PIN, you will be prompted to create a PIN. For detailed instructions replacement
  • Compaq nc6400 | ProtectTools - Page 33
    software module provides the following security features: ● Enhanced Microsoft Encryption File System (EFS) file and folder encryption ● Creation of a personal secure drive Windows. On select models, the TPM embedded security chip also enables enhanced BIOS security features accessed through BIOS
  • Compaq nc6400 | ProtectTools - Page 34
    Select Embedded security device state and change to Enable. 7. Press f10 to accept the changes to the Embedded Security configuration. 8. To save your preferences and exit Computer Setup, use the arrow keys to select File > Save Changes and Exit. Then follow the on-screen instructions. 28 Chapter
  • Compaq nc6400 | ProtectTools - Page 35
    Click Next. 3. Set and confirm an owner password, and then click Next. The Setup Emergency Recovery dialog box opens. 4. Click Next and then click Finish. You can start the wizard manually to set up a basic user account at any time by following the instructions in the next section. ● If you want to
  • Compaq nc6400 | ProtectTools - Page 36
    open, select Start > All Programs > HP ProtectTools Security Manager. 2. In the left one from a certification authority. For instructions on configuring your e-mail and obtaining the appropriate certificate, and then click Next. 10. Select the drive letter and label for the PSD, and then click Next.
  • Compaq nc6400 | ProtectTools - Page 37
    and folders. ● Sending and receiving encrypted e-mail. Using the Personal Secure Drive After setting up the PSD, you are prompted to enter the Basic User the PSD directly from Windows Explorer. Encrypting files and folders When working with encrypted files in Windows XP Professional, consider the
  • Compaq nc6400 | ProtectTools - Page 38
    the Basic User Key password: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Embedded Security, and then select User Settings. 3. In the right pane, under Basic User Key password, click Change. 4. Type the old password, and then set and confirm the new
  • Compaq nc6400 | ProtectTools - Page 39
    restore data from the backup file: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Embedded Security, and the initialization wizard, click Finish, and then follow the on-screen instructions to complete the initialization. For more information, refer to "
  • Compaq nc6400 | ProtectTools - Page 40
    levels: ● Temporary disabling-With this option, embedded security is automatically reenabled on Windows restart. This option is available to all users by default. ● Permanent disabling-With this option, the owner password is required to reenable Embedded Security. This option is available only to
  • Compaq nc6400 | ProtectTools - Page 41
    Migrating keys with the Migration Wizard Migration is an advanced administrator task that allows the management, restoration, and transfer of keys and certificates. For details on migration, refer to the Embedded Security online Help. ENWW Advanced tasks 35
  • Compaq nc6400 | ProtectTools - Page 42
    36 Chapter 4 Embedded Security for ProtectTools ENWW
  • Compaq nc6400 | ProtectTools - Page 43
    security and configuration settings. This gives users Windows access to system security features that are managed by Computer Setup. With BIOS Configuration, you can ● Manage power-on passwords and administrator passwords. ● Configure other power-on authentication features, such as enabling smart
  • Compaq nc6400 | ProtectTools - Page 44
    restart the computer. To manage boot options: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration. 3. Enter your Computer Setup administrator password at the BIOS the boot order by selecting a boot device, and then clicking the up arrow or
  • Compaq nc6400 | ProtectTools - Page 45
    may not be supported by your computer. To enable or disable devices or security options: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration. 3. Enter your Computer Setup administrator password at the BIOS administrator password prompt
  • Compaq nc6400 | ProtectTools - Page 46
    Mode ● Dual Core CPU ● Automatic Intel® SpeedStep Functionality Support ● Fan Always on While on AC Power ● BIOS DMA Data Transfers ● Intel or AMD PSAE Execution Disable ● Built-In Device Options ● Embedded WLAN Device Radio ● Embedded WWAN Device Radio ● Embedded Bluetooth® Device Radio ● LAN/WLAN
  • Compaq nc6400 | ProtectTools - Page 47
    Security for ProtectTools module. To enable smart card power-on authentication support: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration. 3. Enter your Computer Setup administrator password at the BIOS administrator password prompt
  • Compaq nc6400 | ProtectTools - Page 48
    Security for ProtectTools module. To enable power-on authentication support for embedded security: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration. 3. Enter your Computer Setup administrator password at the BIOS administrator password
  • Compaq nc6400 | ProtectTools - Page 49
    undo a password setting without supplying the previous password. The power-on password can protect your notebook from unauthorized use. NOTE After you have set a power-on password, the Set button on the "Passwords" page is replaced by a Change button. The Computer Setup setup password protects the
  • Compaq nc6400 | ProtectTools - Page 50
    After you have set a setup password, the Set button on the "Passwords" page is replaced by a Change button. Setting the power-on password To set the power-on password: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration, and then select
  • Compaq nc6400 | ProtectTools - Page 51
    by requiring users to enter a power-on, TPM, or smart card password when Windows restarts. To enable or disable power-on authentication on Windows restart: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration, and then select Security
  • Compaq nc6400 | ProtectTools - Page 52
    3. In the right pane, under Password Options, enable or disable Require password on restart. 4. Click Apply, and then click OK in the ProtectTools window to save your changes. 46 Chapter 5 BIOS Configuration for ProtectTools ENWW
  • Compaq nc6400 | ProtectTools - Page 53
    to log on to Windows. For additional information, refer to "Registering credentials" later in this chapter. ● Single Sign On feature that automatically remembers credentials for Web sites, applications, and protected network resources. ● Support for optional security devices, such as smart cards
  • Compaq nc6400 | ProtectTools - Page 54
    the Log On link on the upper right side of the window. 2. Click Next. 3. Type your user name in the User name box, and then click Next. 4. Enter a password in the Password box, and then click Next. 5. Follow the on-screen instructions for logging on with your selected authentication method. 6. Click
  • Compaq nc6400 | ProtectTools - Page 55
    type screen instructions HP computer with an integrated fingerprint reader or if you are using an optional fingerprint reader, 2 steps are required for logon to Windows using a fingerprint reader. ● Set up the fingerprint reader. ● Use your registered fingerprint to log on to Windows. ENWW Setup
  • Compaq nc6400 | ProtectTools - Page 56
    Windows user name. 4. On the "Enter Password" page, type the user's Windows password, if one has been established. Otherwise, click Finish. 5. On the "My Services and Applications" page, click Register Fingerprints same finger on the fingerprint sensor until the finger on the screen turns green. NOTE
  • Compaq nc6400 | ProtectTools - Page 57
    your fingerprints, restart Windows. 2. In the upper-left corner of the screen, click Log on to Credential Manager. 3. At the Credential Manager Logon Wizard dialog box, instead of clicking a user name, swipe any of your registered fingers to log on to Windows. 4. Type your Windows password
  • Compaq nc6400 | ProtectTools - Page 58
    The token is saved either on the computer hard drive or in the Windows registry. When you log on with a HP ProtectTools Security Manager. 2. In the left pane, select Credential Manager, and then select My Identity. 3. In the right pane, under I Want To, click Change Windows Logon Password. 4. Type
  • Compaq nc6400 | ProtectTools - Page 59
    click Next. 6. On the "Device Type" page, select the device type you want to use to store the backup, and then click Next. NOTE You will need to know the password or PIN code for the device you select for the backup file. 7. Follow the on-screen instructions for the device you selected, and then
  • Compaq nc6400 | ProtectTools - Page 60
    Identity. 4. Click Next. 5. On the "Device Type" page, select the device type where the backup was stored, and then click Next. 6. Follow the on-screen instructions for the device you selected, and then click Finish. 7. Click Yes at the confirmation dialog box. Removing an identity from the system
  • Compaq nc6400 | ProtectTools - Page 61
    > HP ProtectTools Windows user account as the network account for the Network Logon service Windows network or local account. 1. From the Windows logon screen, click Log on to Credential Manager. 2. Click Next on the "Welcome" page, if it is displayed. 3. Type instructions for the authentication method you
  • Compaq nc6400 | ProtectTools - Page 62
    right pane, under Microsoft Network Logon, click Add a Network Account. 4. Type the user name for the new account in the User name box. 5. Removing accounts You can remove local or domain accounts after logging on to Credential Manager. To remove an account: 1. Select Start > All Programs > HP
  • Compaq nc6400 | ProtectTools - Page 63
    for multiple Internet and Windows applications, and automatically enters . Using manual (drag and drop) registration 1. Select Start > All Programs > HP ProtectTools Security Registration" page of the SSO Registration Wizard, select the type of activity you want to automate. NOTE In most cases
  • Compaq nc6400 | ProtectTools - Page 64
    the name and description for the application. 8. Click Finish. 9. Type the logon credential-for example, the user name and password-into the your changes. Removing applications from Single Sign On To remove applications from Single Sign On: 1. Select Start > All Programs > HP ProtectTools Security
  • Compaq nc6400 | ProtectTools - Page 65
    . Then click More, and then click Import Application. 5. Follow the on-screen instructions to complete the import. 6. Click OK. Modifying credentials To modify credentials: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Credential Manager, and then
  • Compaq nc6400 | ProtectTools - Page 66
    or administrators log on: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Credential Manager the category (Users or Administrators) from the category list. 5. Click the type or combination of authentication methods from the list. 6. Click OK. 7. Click
  • Compaq nc6400 | ProtectTools - Page 67
    . To configure the credentials: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Credential Manager, 4. Click the credential type you want to modify. ● To register the credential, click Register, and then follow the on-screen instructions. ● To delete the
  • Compaq nc6400 | ProtectTools - Page 68
    handles detection of logon screens, automatic logon to registered dialogs, and password display. ● Services and Applications-Allows you to view the available services and modify the settings for those services. ● Biometric Settings-Allows you to select the fingerprint reader software and adjust the
  • Compaq nc6400 | ProtectTools - Page 69
    logging on to a registered dialog box or Web page: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Credential Manager, and then select Advanced then click OK to save your changes. 6. Restart the computer. ENWW Advanced tasks (administrator only) 63
  • Compaq nc6400 | ProtectTools - Page 70
    64 Chapter 6 Credential Manager for ProtectTools ENWW
  • Compaq nc6400 | ProtectTools - Page 71
    entering the correct TPM Basic User Key password, the BIOS unlocks the hard drive for the user. Biometric Category of authentication credentials that use a physical feature, such as a fingerprint, to identify a user. BIOS profile Group of BIOS configuration settings that can be saved and applied to
  • Compaq nc6400 | ProtectTools - Page 72
    device that stores identifying information about a user. Like a smart card or biometric reader, it is used to authenticate the owner to a computer. Virtual token Security feature that works very much like a smart card and reader. The token is saved either on the computer hard drive or in the Windows
  • Compaq nc6400 | ProtectTools - Page 73
    55 M managing identity 53 N network account 56 O owner password changing 34 definition 4 setting 29 P passwords guidelines 5 managing 3 personal secure drive (PSD) 31 power-on authentication enabling and disabling 41 on Windows restart 45 power-on password definition 3 setting and changing 44 ENWW
  • Compaq nc6400 | ProtectTools - Page 74
    W Windows logon password 4 Windows network account 56 R recovery identity 54 smart cards 16 registering application 57 credentials 49 S security setup password 3 Single Sign On automatic registration 57 exporting applications 58 manual registration 57 modifying application properties 58 removing
  • Compaq nc6400 | ProtectTools - Page 75
  • Compaq nc6400 | ProtectTools - Page 76
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76

ProtectTools
Getting Started