Compaq nc6400 ProtectTools - Page 72

Identity

In the ProtectTools Credential Manager, a group of credentials and settings that is handled like an

account or profile for a particular user.

Java Card

Small piece of hardware, similar in size and shape to a credit card, which stores identifying information

about the owner. Used to authenticate the owner to a computer.

Migration

A task that allows the management, restoration, and transfer of keys and certificates.

Network account

Windows user or administrator account, either on a local computer, in a workgroup, or on a

domain.

Personal secure drive (PSD)

Provides a protected storage area for sensitive information.

Power-on authentication

Security feature that requires some form of authentication, such as a smart card,

security chip, or password, when the computer is turned on.

Public Key Infrastructure (PKI)

Standard that defines the interfaces for creating, using, and administering

certificates and cryptographic keys.

Reboot

Process of restarting the computer.

Single Sign On

Feature that stores authentication information and allows you to use the Credential Manager to

access Internet and Windows applications that require password authentication.

Smart card

Small piece of hardware, similar in size and shape to a credit card, which stores identifying

information about the owner. Used to authenticate the owner to a computer.

Smart card administrator password

Password that links an administrator smart card with the computer in

Computer Setup for identification at startup or restart. This password can be set manually by the administrator or

randomly generated.

Smart card user password

Password that links a user smart card with the computer in Computer Setup for

identification at startup or restart. This password can be set manually by the administrator or randomly generated.

Stringent security

Security feature in BIOS Configuration that provides enhanced protection for the power-on

and administrator passwords and other forms of power-on authentication.

Trusted Platform Module (TPM) embedded security chip (select models only)

Integrated security chip that

can protect highly sensitive user information from malicious attackers. It is the root-of-trust in a given platform. The

TPM provides cryptographic algorithms and operations that meets the Trusted Computing Group (TCG)

specifications.

USB token

Security device that stores identifying information about a user. Like a smart card or biometric reader,

it is used to authenticate the owner to a computer.

Virtual token

Security feature that works very much like a smart card and reader. The token is saved either on

the computer hard drive or in the Windows registry. When you log on with a virtual token, you are asked for a user

PIN to complete the authentication.

Windows user account

Profile for an individual authorized to log on to a network or to an individual computer.

66

Glossary

ENWW

Section	Page
Introduction	7
Accessing the ProtectTools Security Manager	8
Understanding security roles	8
Managing ProtectTools passwords	9
Creating a secure password	11
Smart Card Security for ProtectTools	13
Initializing the smart card	14
Smart card BIOS security mode	15
Enabling smart card BIOS security mode and setting the smart card administrator password	16
Disabling smart card BIOS security mode	16
Changing the smart card administrator password	17
Setting and changing the smart card user password	18
Storing the administrator or user card password	19
General tasks	20
Updating BIOS smart card settings	20
Selecting the smart card reader	20
Changing the smart card PIN	20
Backing up and restoring smart cards	21
Creating a recovery file	21
Restoring smart card data	22
Creating a backup smart card	23
Java Card Security for ProtectTools	25
General tasks	26
Changing a Java Card PIN	26
Selecting the smart card reader	26
Advanced tasks (administrators only)	27
Assigning a Java Card PIN	27
Assigning a name to a Java Card	28
Setting power-on authentication	28
Enabling Java Card power-on authentication and creating an administrator Java Card	29
Creating a user Java Card	30
Disabling Java Card power-on authentication	30
Backing up and restoring Java Cards	31
Creating a recovery file	31
Restoring Java Card data	32
Creating a backup Java Card	32
Embedded Security for ProtectTools	33
Setup procedures	34
Enabling the embedded security chip	34
Initializing the embedded security chip	35
Setting up the basic user account	36
General tasks	37
Using the Personal Secure Drive	37
Encrypting files and folders	37
Sending and receiving encrypted e-mail	37
Changing the Basic User Key password	38
Advanced tasks	39
Backing up and restoring	39
Creating a backup file	39
Restoring certification data from the backup file	39
Changing the owner password	40
Resetting a user password	40
Enabling and disabling Embedded Security	40
Permanently disabling Embedded Security	40
Enabling Embedded Security after permanent disable	40
Migrating keys with the Migration Wizard	41
BIOS Configuration for ProtectTools	43
General tasks	44
Managing boot options	44
Enabling and disabling system configuration options	45
Advanced tasks	47
Managing ProtectTools settings	47
Enabling and disabling Smart card or Java Card power-on authentication support	47
Enabling and disabling power-on authentication support for Embedded Security	48
Enabling and disabling Automatic DriveLock hard drive protection	49
Managing Computer Setup passwords	49
Setting the power-on password	50
Changing the power-on password	50
Setting the setup password	50
Changing the setup password	51
Setting password options	51
Enabling and disabling stringent security	51
Enabling and disabling power-on authentication on Windows restart	51
Credential Manager for ProtectTools	53
Setup procedures	54
Logging on to Credential Manger	54
Logging on for the first time	54
Using the Credential Manager Logon Wizard	54
Creating a new account	55
Registering credentials	55
Registering fingerprints	55
Set up the fingerprint reader	56
Use your registered fingerprint to log on to windows	57
Registering a smart card or token	57
Registering other credentials	57
General tasks	58
Creating a virtual token	58
Changing the Windows logon password	58
Changing a token PIN	59
Managing identity	59
Backing up an identity	59
Restoring an Identity	60
Removing an identity from the system	60
Locking the computer	61
Using Microsoft Network Logon	61
Logging on to Windows with Credential Manager	61
Adding accounts	62
Removing accounts	62
Setting a default user	62
Using Single Sign On	63
Registering a new application	63
Using automatic registration	63
Using manual (drag and drop) registration	63
Managing applications and credentials	64
Modifying application properties	64
Removing applications from Single Sign On	64
Exporting applications	64
Importing applications	65
Modifying credentials	65
Advanced tasks (administrator only)	66
Specifying how users and administrators log on	66
Configuring custom authentication requirements	67
Configuring credential properties	67
Configuring Credential Manager settings	68
Example 1—Using the “Advanced Settings” page to allow Windows logon from Credential Manager	68
Example 2—Using the “Advanced Settings” page to require user verification before Single Sign On	69
Glossary	71

Compaq nc6400 ProtectTools - Page 72

Public Key Infrastructure PKI

Page 72 highlights