Compaq tc4400 Reference Guide ProtectTools Security Manager

Compaq tc4400 Manual

Compaq tc4400 manual content summary:

  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 1
    Reference Guide ProtectTools Security Manager Document Part Number: 389171-003 February 2006
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 2
    Copyright 2005, 2006 Hewlett-Packard Development Company, L.P. Microsoft and Windows are U.S. registered services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Reference Guide
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 3
    changing the smart card user password 2-7 Storing the administrator or user card password . . . . 2-8 General tasks 2-10 Updating BIOS smart card settings 2-10 Selecting the smart card reader 2-10 Changing the smart card PIN 2-11 Backing up and restoring smart cards 2-11 Reference Guide iii
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 4
    4-6 Using the Personal Secure Drive 4-6 Encrypting files and folders 4-6 Sending and receiving encrypted e-mail 4-7 Changing the Basic User Key password 4-7 Advanced tasks 4-8 Backing up and restoring 4-8 Changing the owner password 4-10 Resetting a user password 4-10 Enabling and disabling
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 5
    the Windows logon password 6-10 administrator only 6-22 Specifying how users and administrators log on . . . 6-22 Configuring custom authentication requirements . . 6-23 Configuring Credential Manager properties 6-24 Configuring Credential Manager settings 6-25 Glossary Index Reference Guide
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 6
    Card Security for ProtectTools ■ Embedded Security for ProtectTools ■ BIOS Configuration for ProtectTools ■ Credential Manager for ProtectTools The software or available for download from the HP Web site. Visit http://www.hp.com for more information. ✎ The instructions in this guide are written with
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 7
    the Microsoft® Windows® Control Panel: » Select Start > All Programs > HP ProtectTools Security Manager. ✎ After you have configured the Credential Manager module, you can also open ProtectTools by logging on to Credential Manager directly from the Windows logon screen
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 8
    to deploy, such as smart cards, biometric readers, or USB tokens. ✎ Many of the features in ProtectTools can be customized by the security officer in cooperation with HP. For more information, visit http://www.hp.com. ■ IT administrator-Applies and manages the security features defined by the
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 9
    only are indicated in this table as well. All other passwords may be set by regular users or administrators. ProtectTools Password Computer Setup setup password ✎ Also known as BIOS administrator, f10 Setup, or Security Setup password. Power-on password Set in this ProtectTools Module Function
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 10
    ✎ Also known as BIOS user card password. Smart card PIN Smart card recovery file password Set in this ProtectTools Module Smart Card Security, by IT administrator Smart Card Security Smart Card Security Smart Card Security Function Used for smart card power-on (BIOS) authentication. Allows access
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 11
    password ✎ Also known as Embedded Security password. Emergency Recovery Token password ✎ Also known as Emergency Recovery Token Key password. Owner password Set in this ProtectTools Module Java Card Security Embedded Security Embedded Security, by IT administrator for power- Emergency Recovery Token
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 12
    ■ It can be used in place of the Windows logon process, allowing access to Windows and Credential Manager simultaneously. Credential Manager, by IT administrator Protects access to the Credential Manager recovery file. Windows Control Panel Can be used in manual logon or saved on the smart card
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 13
    Creating a Secure Password When creating passwords, you must first follow any specifications that are set by the program. In general, however, consider the following guidelines to help you create strong passwords and reduce the chances of your password being compromised: ■ Use passwords with more
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 14
    cards for an administrator and a user. This requires a user to insert the smart card and optionally enter a PIN prior to allowing the operating system to load. ■ Set and change the password used to authenticate users of the smart card. ■ Back up and restore smart card BIOS passwords stored on the
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 15
    card: 1. Insert the smart card into the reader. 2. Select Start > All Programs > HP ProtectTools Security Manager. 3. In the left pane, select Smart Card Security, and then select The count for these attempts resets after the correct PIN is entered. 7. Click OK to complete the initialization. 2-2
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 16
    mode features are unavailable until you enable smart card power-on authentication support. 2. Enable smart card BIOS security mode in Smart Card Security. Refer to "Enabling smart card BIOS security mode and setting the smart card administrator password," later in this chapter. 3. Set the smart card
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 17
    the smart card" for detailed instructions. ❏ Setting the smart card administrator password. Refer to "Storing the administrator or user card password" for detailed instructions. ❏ Creating a recovery file. Refer to "Creating a recovery file" for detailed instructions. 2-4 Reference Guide
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 18
    pane, select Smart Card Security, and then select BIOS. 3. In the right pane, under BIOS Security Mode, click Disable. 4. Insert the card containing the current smart card administrator password, and then click Next. 5. Enter the smart card PIN at the prompt and click Finish. Reference Guide 2-5
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 19
    . To change the smart card administrator password: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Smart Card Security, and then select BIOS. 3. In the right pane, under BIOS Security Mode, next to BIOS administrator card, click Change. 4. Enter the
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 20
    the card, the BIOS Password Wizard opens. 6. In the BIOS Password Wizard, you can either ❏ Enter a password manually. ❏ Generate a random 32-byte password. ✎ Using a known password enables you to create duplicate cards without using a recovery file. Generating a random password offers more security
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 21
    information, refer to "Creating a recovery file," later in this chapter. 9. Enter the smart card PIN in the Finish dialog box, and then click Finish. Storing the administrator or user card password If you want to create a backup card and have already set the administrator password, you can store the
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 22
    Card, click Store. 5. In the BIOS Password Wizard, you can either ❏ Enter a password manually. ❏ Generate a random 32-byte password. ✎ Using a known password enables you to create duplicate cards without using a recovery file. Generating a random password offers more security; however, you must
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 23
    HP ProtectTools Security Manager. 2. In the left pane, select Smart Card Security, and then select BIOS. 3. In the right pane, under Smart Card BIOS Password select the smart card reader: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Smart Card
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 24
    1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left recovery file and store it in a safe place. If you keep a backup smart card, you must also update the information on the backup smart card by restoring the new recovery file onto the backup smart card. Reference Guide
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 25
    to the computer, do not save the recovery file on the computer hard drive; you will not be able to access the file without the smart card. Also, a recovery file saved on the hard drive may be accessible to others, posing a security risk. 6. Set and confirm a recovery file password, and then click OK
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 26
    installed ■ Smart card recovery file ■ Smart card recovery file password ■ Smart card To restore a smart card: 1. Select Start > All Programs > HP recovery file. 4. Insert a smart card into the reader. If the card is not initialized, you will be prompted to initialize it. For detailed instructions
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 27
    a replacement smart card with a manually generated smart card password: 1. Initialize a new smart card. For instructions, refer to "Initializing the smart card," earlier in this chapter. 2. Store the administrator or user card password on the new smart card. For instructions, refer to "Storing the
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 28
    Cards for an administrator and a user. This requires a user to insert the Java Card and enter a PIN to allow the operating system to load. ■ Set and change the PIN used to authenticate users of the Java Card. ■ Back up and restore power-on authentication data on the Java Card. Reference Guide 3-1
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 29
    PIN: ✎ The Java Card PIN must be between 4 and 8 numeric characters. 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Java Card Security, and then select General. 3. Insert a Java PIN again in the Confirm New PIN box. 7. Click OK. 3-2 Reference Guide
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 30
    Card Security, some of the features may be unavailable or incorrectly displayed. To select the smart card reader: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Java Card Security, and then select General. 3. Insert the Java Card into the smart card
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 31
    for ProtectTools Advanced tasks (administrators only) The "Advanced" page allows you to perform the following tasks: ■ Assign a Java Card PIN ■ Assign a name to a Java Card ■ Set power-on authentication ■ Back up and restore Java Cards ✎ You must have a Computer Setup setup password in order to get
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 32
    power-on authentication. To assign a name to a Java Card: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Java Card Security, and then select Advanced. 3. When the Setup Password dialog box displays, enter your Computer Setup setup password Guide 3-5
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 33
    and disabling Smart card or Java Card power-on authentication support," in Chapter 5, "BIOS Configuration for ProtectTools." 2. Enable Java Card power-on authentication in Java Card Security. Refer to "Enabling Java Card power-on authentication and creating an administrator Java Card," later in this
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 34
    Card power-on authentication and creating an administrator Java Card To enable Java Card power-on authentication: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Java Card Security, and then select Advanced. 3. When the Computer Setup Password dialog
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 35
    Confirm password box. c. Enter the Java Card PIN. d. Click OK. 7. When you are prompted to create a recovery file, refer to "Creating a recovery file," or you can click Cancel and create a recovery file at a later time. Creating a user Java Card ✎ Power-on authentication and an administrator card
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 36
    needed to access the computer. To disable Java Card power-on authentication: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Java Card Security, and then select Advanced. 3. When the Setup Password dialog box displays, enter your Computer Setup setup
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 37
    > HP ProtectTools Security Manager. 2. In the left pane, select Java Card Security, and then select Advanced. 3. When the Setup Password dialog box displays, enter your Computer Setup setup password, and then click OK. 4. In the right pane, under Recovery, click Create. 3-10 Reference Guide
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 38
    to access the file without the Java Card. Also, a recovery file saved on the hard drive may be accessible to others, posing a security risk. 6. Enter a recovery file password in the Recovery file password box, and then enter it again in the Confirm password box. 7. Enter the Java Card PIN, and then
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 39
    instructions on assigning a PIN to the Java Card, refer to "Assigning a Java Card PIN," earlier in this chapter. 6. In the right pane, under Recovery, click Restore. 7. Ensure that the correct recovery file name is selected, and enter the recovery file password appropriate recovery file onto
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 40
    Trusted Platform Module (TPM) embedded security chip must be installed in your computer to use Embedded Security for ProtectTools. Embedded a personal secure drive (PSD) for protecting user data ■ Data management functions, such as backing up and restoring the key hierarchy ■ Support for third-party
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 41
    " message is displayed in the lower-left corner of the screen. 2. If you have not set a setup password, use the arrow keys to select Security > Setup password, and then press enter. 3. Type your password in the New password and Verify new password boxes, and then press f10. 4. In the Security menu
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 42
    Next. The Setup Emergency Recovery dialog box opens. 4. Click Next to accept the default recovery archive location, or click the Browse button to choose a different location, and then click Next. 5. Set and confirm the emergency recovery token password, and then click Next. Reference Guide 4-3
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 43
    recovery manually to set up a basic user account at any time by following the instructions password to protect the Basic User Key. ■ Sets up a personal secure drive HP ProtectTools Security Manager. 2. In the left pane, select Embedded Security, and then select User Settings. 4-4 Reference Guide
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 44
    5. Set and confirm the Basic User Key password, and then click Next. 6. Click Next one from a certification authority. For instructions on configuring your e-mail and obtaining the appropriate certificate, and then click Next. 10. Select the drive letter and label for your PSD, and then click Next.
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 45
    Drive After setting up the PSD, you are prompted to enter the Basic User Key password at the next logon. If the Basic User Key password is entered correctly, you can access the PSD directly from Windows Explorer. Encrypting files and folders When working with encrypted files in Windows XP recovery
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 46
    > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Embedded Security, and then select User Settings. 3. In the right pane, under Basic User Key password, click Change. 4. Type the old password, and then set and confirm the new password. 5. Click OK. Reference Guide 4-7
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 47
    a backup file To create a backup file: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Embedded Security, and then select saved. 5. Select whether to add the emergency recovery archive to the backup data. 6. Click Next. 7. Click Finish. 4-8 Reference
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 48
    data from the backup file: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Embedded Security, the initialization wizard, click Finish, and then follow the on-screen instructions to complete the initialization. For more information, refer to "Setting
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 49
    option, embedded security is automatically reenabled on Windows restart. This option is available to all users by default. ■ Permanent disabling-With this option, the owner password is required to reenable Embedded Security. This option is available only to administrators. 4-10 Reference Guide
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 50
    > All Programs > HP ProtectTools Security Manager. Disable. 4. Enter your owner password at the prompt, and Select Start > All Programs > HP ProtectTools Security Manager. 2. In password at the prompt, and then click OK. Migrating keys with the Migration Wizard Migration is an advanced administrator
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 51
    BIOS Configuration, you can ■ Manage power-on passwords and setup passwords. ■ Configure other power-on authentication features, such as enabling smart card passwords and embedded security authentication support. ■ Enable and disable hardware features, such as CD-ROM boot or different hardware ports
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 52
    use BIOS Configuration HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration. 3. Enter your Computer Setup setup password at the BIOS administrator password prompt, and click OK. ✎ The BIOS administrator password order by selecting a boot device, and then clicking the up
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 53
    may not be supported by your computer. To enable or disable system configuration options: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration. 3. Enter your Computer Setup setup password at the BIOS administrator password prompt, and then
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 54
    Intel® SpeedStep Functionality Support ◆ Fan Always on While on AC Power ◆ BIOS DMA Data Transfers ◆ Intel or AMD PSAE Execution Disable ❏ Built-In Device Options ◆ Embedded WLAN Device Radio ◆ Embedded WWAN Device Radio ◆ Embedded Bluetooth® Device Radio ◆ LAN/WLAN Switching ◆ Wake on LAN from Off
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 55
    for ProtectTools module. To enable smart card power-on authentication support: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration. 3. Enter your Computer Setup setup password at the BIOS administrator password prompt, and then click OK
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 56
    module. To enable power-on authentication support for embedded security: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration. 3. Enter your Computer Setup setup password at the BIOS administrator password prompt, and then click
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 57
    . To enable or disable Automatic DriveLock protection: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. Select BIOS Configuration in the left pane. 3. Enter your Computer Setup setup password at the BIOS administrator password prompt, and then click OK. Reference Guide 5-7
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 58
    clicking the Apply or OK button in the ProtectTools window. Make sure you remember what password you have set, because you will not be able to undo a password setting without supplying the previous password. The power-on password can protect your notebook from unauthorized use. ✎ After you have set
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 59
    Click Apply, and then click OK in the ProtectTools window to save your changes. Changing the power-on password To change the power-on password: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration, and then select Security. 3. In the right
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 60
    Apply, and then click OK in the ProtectTools window to save your changes. Changing the setup password To change the Computer Setup setup password: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration, and then select Security. 3. In the
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 61
    provides enhanced protection for the power-on and administrator passwords and other forms of power-on authentication. To enable or disable stringent security: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration, and then select Security
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 62
    by requiring users to enter a power-on, TPM, or smart card password when Windows restarts. To enable or disable power-on authentication on Windows restart: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration, and then select Security
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 63
    to log on to Windows. For additional information, refer to "Registering credentials" later in this chapter. ■ Single Sign On feature that automatically remembers credentials for Web sites, applications, and protected network resources. ■ Support for optional security devices, such as smart cards
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 64
    screen to log in to Credential Manager, you are logged in to Windows at the same time. Logging on for the first time The first time you open Credential Manager, log on with your regular Windows Logon password. A Credential Manager account is then automatically created with your Windows Guide
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 65
    in any of the following ways: ❏ From the Windows logon screen ❏ From the notification area, by double-clicking the window. 2. Click Next. 3. Enter your user name in the User name box, and then click Next. 4. Enter a password in the Password box, and then Next. 5. Follow the on-screen instructions
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 66
    to create a new user account. Before you begin, you must be logged on to Windows with an administrator account, but not logged on to Credential Manager. To create a new account: 1. click Next. 6. Follow the on-screen instructions to register the selected credentials. 7. Click Finish. 6-4 Reference
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 67
    to log on to Microsoft Windows using a registered fingerprint in ProtectTools Security Manager instead of using a Windows password. If you are using an HP computer with an integrated fingerprint reader upper-right corner of the page. The Credential Manager Logon Wizard opens. Reference Guide 6-5
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 68
    Windows user name. 4. On the "Enter Password" page, enter the user's Windows password, if one has been established. Otherwise, click Finish. 5. On the "My Services and Applications" page, click Register Fingerprints. ✎ By default finger on the screen and then click Start Over. 6-6 Reference Guide
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 69
    . 2. In the upper-left corner of the screen, click Log on to Credential Manager. 3. At the Credential Manager Logon Wizard dialog box, instead of clicking a user name, swipe any of your registered fingers to log on to Windows. 4. Enter your Windows password to associate the fingerprint with the
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 70
    Follow the on-screen instructions to complete the registration. Registering other credentials To register other credentials: 1. Select Start > All Programs > HP ProtectTools Security Manager and then click Next. 5. Follow the on-screen instructions to complete the registration. 6-8 Reference Guide
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 71
    authentication credentials. ■ Manage passwords. ■ Manage Microsoft Network accounts. ■ Manage single sign on credentials. Creating a virtual token A virtual token works very much like a smart card or USB token. The token is saved either on the computer hard drive or in the Windows registry. When you
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 72
    Changing the Windows logon password You can change your Windows logon password from the "My Identity" page in Credential Manager. 1. Select Start > All Programs > HP ProtectTools Security the PIN, and then click Next. 6. Follow the on-screen instructions to complete the PIN change. 6-10 Reference
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 73
    Type" page, select the device type you want to use to store the backup, and then click Next. ✎ You will need to know the password or PIN code for the device you select for the backup file. 7. Follow the on-screen instructions for the device you selected, and then click Finish. Reference Guide 6-11
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 74
    the on-screen instructions for the device you selected, and then click Finish. 7. Click Yes at the confirmation dialog box. Removing an identity from does not affect the Windows user account. To remove your identity from the system: 1. Select Start > All Programs > HP ProtectTools Security Manager.
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 75
    gaining access to your computer. Only you and members of the administrators group on your computer can unlock it. ✎ For added security . The Windows logon screen is displayed. You must use a Windows password or the Credential Manager Logon Wizard to unlock the computer. Reference Guide 6-13
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 76
    Manager to log on to a Windows network or local account. 1. From the Windows logon screen, select Log on to Credential Manager. 2. Click Next on the "Welcome" page, if it is displayed. 3. Type your user name in the User name box. ✎ If you want this to be the default user name, select Use this name
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 77
    5. Click the domain from the list of available domains. 6. Type and confirm the password. ✎ If you want this to be your default user account, select Use these credentials by default. 7. Click Finish. Removing accounts You can remove local or domain accounts after logging on to Credential Manager. To
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 78
    the account you want to remove, and then click Remove. 5. In the confirmation dialog box, click Yes. Setting a default user You can set or change the default user after logging on to Credential Manager. To set a default user: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 79
    On feature that stores user names and passwords for multiple Internet and Windows applications, and automatically enters logon credentials on to Credential Manager. You can also register an application manually. Using automatic registration To register an application with automatic registration:
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 80
    complete the registration. Using manual (drag and drop) registration 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. from the wizard page over the area of the application where the password box is located. Release the pointer when the area is highlighted. Reference Guide
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 81
    credential-for example, the user name and password-into the application box. 10. In : 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left Removing applications from Single Sign On To remove applications from Single Sign On: 1. Select Start > All Programs > HP
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 82
    4. Click the application entry you want to remove, and then click Remove. 5. Click Yes in the confirmation dialog an application: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select screen instructions to complete the export. 6. Click OK. 6-20 Reference
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 83
    the on-screen instructions to complete the import. 6. Click OK. Modifying credentials To modify credentials: 1. Select Start > All Programs > HP ProtectTools Security Unused Credentials ❏ Edit Credentials 6. Follow the on-screen instructions. 7. Click OK to save changes. Reference Guide 6-21
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 84
    , you can specify which type or combination of credentials are required of either users or administrators. To specify how users or administrators log on: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Credential Manager, and then select Authentication
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 85
    To configure custom requirements: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Credential click the Authentication tab. 4. Click the category (Users or Administrators) from the category list. 5. Click Custom from the list . Reference Guide 6-23
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 86
    . To configure the credentials: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select Credential Manager, ❏ To register the credential, click Register, and then follow the on-screen instructions. ❏ To delete the credential, click Clear, and then click Yes in
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 87
    user, such as how it handles detection of logon screens, automatic logon to registered dialogs, and password display. ■ Services and Applications-Allows you to view the available services and modify the settings for those services. ■ Biometric Settings-Allows you to select the fingerprint reader
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 88
    "Advanced Settings" Page to allow Windows logon from Credential Manager To enable logging on to Windows from Credential Manager: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the Apply, and then click OK to save your changes. 6. Restart the computer. 6-26 Reference Guide
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 89
    Basic User Key password, the BIOS unlocks the hard drive for the user BIOS security mode-Setting in Smart Card Security that, when enabled, requires the use of a smart card and a valid PIN for user authentication. Certification authority-Service process. Cryptographic service provider (CSP)-Provider
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 90
    specific individuals. Decryption-Procedure used in cryptography to convert encrypted data into plain text. DriveLock-Security feature that links the hard drive to a user and requires the user to correctly enter the DriveLock password and procedures. Emergency recovery archive-Protected storage Guide
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 91
    startup or restart. This password can be set manually by the administrator or randomly generated. Stringent security-Security feature in BIOS Configuration that provides enhanced protection for the power-on and setup passwords and other forms of power-on authentication. Reference Guide Glossary-3
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 92
    device that stores identifying information about a user. Like a smart card or biometric reader, it is used to authenticate the owner to a computer. Virtual token-Security feature that works very much like a smart card and reader. The token is saved either on the computer hard drive or in the Windows
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 93
    Setup administrator password changing 5-10 definition 1-4 setting 5-10 Credential Manager account 6-4 logon password 1-7 logon wizard 6-3 recovery file password 1-7 Credential Manager for ProtectTools 6-1 D default user 6-16 disabling Automatic DriveLock 5-7 Java Card power-on authentication
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 94
    5-3 E Embedded Security for ProtectTools 4-1 emergency recovery 4-3 emergency recovery token password definition 1-6 setting 4-3 enabling Automatic DriveLock 5-7 power-on authentication 5-5 smart card authentication 5-5 smart card BIOS security 2-3 stringent security 5-11 system configuration
  • Compaq tc4400 | Reference Guide ProtectTools Security Manager - Page 95
    6-20 manual registration 6-18 modifying application properties 6-19 removing applications 6-19 smart card administrator password changing 2-6 definition 1-5 setting 2-3 smart card BIOS security 2-3 smart card PIN changing 2-11 definition 1-5 smart card reader, selecting 3-3 smart card recovery file
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95

Reference Guide
ProtectTools Security Manager
Document Part Number: 389171-003
February 2006