Compaq nc6400 ProtectTools - Page 71

Glossary

Authentication

Process of verifying whether a user is authorized to perform a task, for example, accessing a

computer, modifying settings for a particular program, or viewing secured data.

Automatic DriveLock

Security feature that causes the DriveLock passwords to be generated and protected by

the TPM Embedded Security chip. When the user is authenticated by the TPM embedded security chip during

startup by entering the correct TPM Basic User Key password, the BIOS unlocks the hard drive for the user.

Biometric

Category of authentication credentials that use a physical feature, such as a fingerprint, to identify a

user.

BIOS profile

Group of BIOS configuration settings that can be saved and applied to other accounts.

BIOS security mode

Setting in Smart Card Security that, when enabled, requires the use of a smart card and

a valid PIN for user authentication.

Certification authority

Service that issues the certificates required to run a public key infrastructure.

Credentials

Method by which a user proves eligibility for a particular task in the authentication process.

Cryptographic service provider (CSP)

Provider or library of cryptographic algorithms that can be used in a

well-defined interface to perform particular cryptographic functions.

Cryptography

Practice of encrypting and decrypting data so that it can be decoded only by specific individuals.

Decryption

Procedure used in cryptography to convert encrypted data into plain text.

Digital certificate

Electronic credentials that confirm the identity of an individual or a company by binding the

identity of the digital certificate owner to a pair of electronic keys that are used to sign digital information.

Digital signature

Data sent with a file that verifies the sender of the material, and that the file has not been

modified after it was signed.

Domain

Group of computers that are part of a network and share a common directory database. Domains are

uniquely named, and each has a set of common rules and procedures.

DriveLock

Security feature that links the hard drive to a user and requires the user to correctly enter the

DriveLock password when the computer starts up.

Emergency recovery archive

Protected storage area that allows the re-encryption of basic user keys from one

platform owner key to another.

Encryption

Procedure, such as use of an algorithm, employed in cryptography to convert plain text into cipher

text in order to prevent unauthorized recipients from reading that data. There are many types of data encryption,

and they are the basis of network security. Common types include Data Encryption Standard and public-key

encryption.

Encryption File System (EFS)

System that encrypts all files and subfolders within the selected folder.

ENWW

Glossary

65

Section	Page
Introduction	7
Accessing the ProtectTools Security Manager	8
Understanding security roles	8
Managing ProtectTools passwords	9
Creating a secure password	11
Smart Card Security for ProtectTools	13
Initializing the smart card	14
Smart card BIOS security mode	15
Enabling smart card BIOS security mode and setting the smart card administrator password	16
Disabling smart card BIOS security mode	16
Changing the smart card administrator password	17
Setting and changing the smart card user password	18
Storing the administrator or user card password	19
General tasks	20
Updating BIOS smart card settings	20
Selecting the smart card reader	20
Changing the smart card PIN	20
Backing up and restoring smart cards	21
Creating a recovery file	21
Restoring smart card data	22
Creating a backup smart card	23
Java Card Security for ProtectTools	25
General tasks	26
Changing a Java Card PIN	26
Selecting the smart card reader	26
Advanced tasks (administrators only)	27
Assigning a Java Card PIN	27
Assigning a name to a Java Card	28
Setting power-on authentication	28
Enabling Java Card power-on authentication and creating an administrator Java Card	29
Creating a user Java Card	30
Disabling Java Card power-on authentication	30
Backing up and restoring Java Cards	31
Creating a recovery file	31
Restoring Java Card data	32
Creating a backup Java Card	32
Embedded Security for ProtectTools	33
Setup procedures	34
Enabling the embedded security chip	34
Initializing the embedded security chip	35
Setting up the basic user account	36
General tasks	37
Using the Personal Secure Drive	37
Encrypting files and folders	37
Sending and receiving encrypted e-mail	37
Changing the Basic User Key password	38
Advanced tasks	39
Backing up and restoring	39
Creating a backup file	39
Restoring certification data from the backup file	39
Changing the owner password	40
Resetting a user password	40
Enabling and disabling Embedded Security	40
Permanently disabling Embedded Security	40
Enabling Embedded Security after permanent disable	40
Migrating keys with the Migration Wizard	41
BIOS Configuration for ProtectTools	43
General tasks	44
Managing boot options	44
Enabling and disabling system configuration options	45
Advanced tasks	47
Managing ProtectTools settings	47
Enabling and disabling Smart card or Java Card power-on authentication support	47
Enabling and disabling power-on authentication support for Embedded Security	48
Enabling and disabling Automatic DriveLock hard drive protection	49
Managing Computer Setup passwords	49
Setting the power-on password	50
Changing the power-on password	50
Setting the setup password	50
Changing the setup password	51
Setting password options	51
Enabling and disabling stringent security	51
Enabling and disabling power-on authentication on Windows restart	51
Credential Manager for ProtectTools	53
Setup procedures	54
Logging on to Credential Manger	54
Logging on for the first time	54
Using the Credential Manager Logon Wizard	54
Creating a new account	55
Registering credentials	55
Registering fingerprints	55
Set up the fingerprint reader	56
Use your registered fingerprint to log on to windows	57
Registering a smart card or token	57
Registering other credentials	57
General tasks	58
Creating a virtual token	58
Changing the Windows logon password	58
Changing a token PIN	59
Managing identity	59
Backing up an identity	59
Restoring an Identity	60
Removing an identity from the system	60
Locking the computer	61
Using Microsoft Network Logon	61
Logging on to Windows with Credential Manager	61
Adding accounts	62
Removing accounts	62
Setting a default user	62
Using Single Sign On	63
Registering a new application	63
Using automatic registration	63
Using manual (drag and drop) registration	63
Managing applications and credentials	64
Modifying application properties	64
Removing applications from Single Sign On	64
Exporting applications	64
Importing applications	65
Modifying credentials	65
Advanced tasks (administrator only)	66
Specifying how users and administrators log on	66
Configuring custom authentication requirements	67
Configuring credential properties	67
Configuring Credential Manager settings	68
Example 1—Using the “Advanced Settings” page to allow Windows logon from Credential Manager	68
Example 2—Using the “Advanced Settings” page to require user verification before Single Sign On	69
Glossary	71

Compaq nc6400 ProtectTools - Page 71

Glossary, Automatic DriveLock

Page 71 highlights