HP Brio ba600 hp brio ba200, ba400, ba600, hp kayak xu800, xm600, ProtectTools - Page 52

Make screen saver secure, Allow unauthenticated shutdown, Potential security impact: Medium

Page 52 highlights

4 Managing Security and Smart Cards Managing Security: Configuration Settings ; Make screen saver secure If you select this option, the PC automatically locks when the screen saver comes on. Default value: ; Potential security impact: Medium Implications: Value Security Level Provided Implications ON (checked) Higher OFF (unchecked) Lower The PC automatically locks when the screen saver comes on. This means that, if the screen saver comes on, the user must enter their PIN to regain access to the PC (or the Windows screen saver password, if they set a screen saver password). Also, if the user removes their smart card when the screen saver is on, no other valid smart card holders can subsequently gain access to the PC. This is appropriate for higher security, since the PC will lock automatically when it is not being used (and possibly unattended). Note that the Windows screen saver must be set for this to work. If the screen saver comes on, the user or anyone else may be able to gain access to the PC simply by moving the cursor or mouse (if there is no Windows screen saver password). This setting is perhaps appropriate for environments where the user rarely leaves their desk, or where ease of use (quicker access to the PC) is more important. ; Allow unauthenticated shutdown If you set this option, anybody can shut down the PC, even if they are not logged on. Default value: † Potential security impact: Medium Implications: Value Security Level Provided Implications ON (checked) Lower Anyone can shut down the PC. 52

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80

4
Managing Security and Smart Cards
Managing Security: Configuration Settings
52
Make screen saver secure
If you select this option, the PC automatically locks when the screen
saver comes on.
Default value:
Potential security impact: Medium
Implications:
Allow unauthenticated shutdown
If you set this option, anybody can shut down the PC, even if they are
not logged on.
Default value:
±
Potential security impact: Medium
Implications:
;
;
Value
Security Level
Provided
Implications
ON (checked)
Higher
The PC automatically locks when the screen saver comes on. This means
that, if the screen saver comes on, the user must enter their PIN to regain
access to the PC (or the Windows screen saver password, if they set a screen
saver password).
Also, if the user removes their smart card when the screen saver is on, no
other valid smart card holders can subsequently gain access to the PC.
This is appropriate for higher security, since the PC will lock automatically
when it is not being used (and possibly unattended).
Note that the Windows screen saver must be set for this to work.
OFF (unchecked)
Lower
If the screen saver comes on, the user or anyone else may be able to gain
access to the PC simply by moving the cursor or mouse (if there is no
Windows screen saver password).
This setting is perhaps appropriate for environments where the user rarely
leaves their desk, or where ease of use (quicker access to the PC) is more
important.
;
Value
Security Level
Provided
Implications
ON (checked)
Lower
Anyone can shut down the PC.