HP EliteBook 8470p HP ProtectTools Getting Started

HP EliteBook 8470p Manual

Get HP EliteBook 8470p PDF manuals and user guides View all HP EliteBook 8470p manuals
Add to My Manuals
Save this manual to your list of manuals

HP EliteBook 8470p manual content summary:

  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 1
    HP ProtectTools Getting Started
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 2
    countries and is used under license. Microsoft, Windows, and Windows Vista are U.S. registered trademarks of Microsoft Corporation. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 3
    Wizard ...13 3 Easy Setup Guide for Small Business ...15 Getting started ...16 Password Manager ...17 Viewing and managing the saved authentications in Password Manager 17 File Sanitizer for HP ProtectTools ...18 Device Access Manager for HP ProtectTools 19 Drive Encryption for HP ProtectTools 20
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 4
    Administrative Console ...22 Configuring your system ...23 Setting up Fingerprints ...25 Face ...26 Smart card ...26 Initializing the smart card 26 Registering the smart card 27 Configuring the smart card 28 Contactless card 28 Proximity card 28 Bluetooth Adding logons 37 Editing logons ...39 iv
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 5
    tasks ...54 Activating Drive Encryption for standard hard drives 54 Activating Drive Encryption for self-encrypting drives 55 Deactivating Drive Encryption 56 Logging in after Drive Encryption is activated 57 Protect your data by encrypting your hard drive 58 Displaying encryption status 58 v
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 6
    or decrypting individual drive partitions (software encryption only) ...61 Performing an HP SpareKey Recovery 61 Backup and recovery (administrator task 61 Backing up encryption keys 61 Recovering access to an activated computer using backup keys 62 Recovering encryption keys 63 7 Privacy
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 7
    Excel document ...75 Adding suggested signers to a Microsoft Word or Microsoft Excel document 75 Adding a suggested signer's signature key sequence to initiate shredding 86 Using the File Sanitizer icon 87 Manually shredding one asset 87 Manually shredding all selected items 87 Manually
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 8
    certification data from the backup file 107 Changing the owner password 107 Resetting a user password 107 Migrating keys with the Migration Wizard 107 12 Localized password exceptions ...109 Windows IMEs not supported at the Preboot Security level or the HP Drive Encryption level ......... 109
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 9
    Password changes using keyboard layout that is also supported 110 Special key handling ...111 What to do when a password is rejected 113 13 Related documentation ...115 Glossary ...117 Index ...123 ix
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 10
    x
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 11
    Features ● Requires Microsoft Windows administrator rights to access. ● Provides access to modules that are configured by an administrator and , or available for download from the HP website. For more information, go to http://www.hp.com. NOTE: The instructions in this guide are written with the
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 12
    Computrace for HP ProtectTools. ● Configure Preferences and Backup and Restore options. Credential Manager General users can perform the following functions: ● Change user names and passwords. ● Configure and change user credentials such as a Windows password, fingerprint, face images, smart card
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 13
    access to devices based on user models only) profiles. ● Prevents unauthorized users from removing data using external storage media, and from introducing viruses into the system from external media. ● Allows administrators to disable access to communication devices for specific individuals
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 14
    (usually a password) and an administrative backup to gain access if passwords are lost, names and passwords, Password Manager can be configured to display them. Password Manager can also be used to so secure that even if someone steals the hard drive, they cannot decrypt the data or read it.
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 15
    hard drive. The doctor activates Drive Encryption, which requires pre-boot authentication before Windows login. Once set up, the hard drive cannot be accessed without a password before the operating system starts. The doctor could further enhance drive be configured to run either manually or
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 16
    Device Access Manager to disable the USB ports and CD burners so they cannot be used. Even though the USB ports are blocked, mouse and keyboards issues them service that can track the location of a stolen computer whenever the user accesses the Internet. Example 1: A school principal instructed
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 17
    models only) on page 53. ● Encryption helps ensure that data cannot be accessed even if the hard drive is removed and installed into an unsecured system. ● The Personal Secure Drive feature, provided by the Embedded Security for HP ProtectTools module, encrypts sensitive data to help ensure that
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 18
    a writable device such as a CD. The following feature helps restrict access to data: ● Device Access Manager for HP ProtectTools allows IT managers to restrict access to communication devices so that sensitive information cannot be copied from the hard drive. See Device Class Configuration on page
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 19
    to deploy, such as Drive Encryption or Embedded Security. officer. Can also enable and disable some features. For example, if Windows Logon password Security Manager Backup and Recovery password Smart card PIN Set in the following module Function Windows® Control Panel or Can be used for manual
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 20
    , also protects access to the computer contents when the computer is turned on, restarted, or restored from hibernation. Protects access to the Emergency Recovery Key, which is a backup file for the embedded security chip. Protects the system and the TPM chip from unauthorized access to all owner
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 21
    : ● Use Drive Encryption for HP ProtectTools to select and back up HP ProtectTools credentials. ● Use the Backup and Recovery tool in HP ProtectTools Security Manager as a central location from which you can back up and restore security credentials from some of the installed
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 22
    12 Chapter 1 Introduction to security
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 23
    Setup Wizard guides you through icon to run the Security Manager Setup Wizard to configure authentication credentials for the computer. The Setup Wizard display further details on the Security Applications Status page. NOTE: The HP ProtectTools desktop gadget icon is not available in Windows
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 24
    box to enable one or more of the following options: ● Windows password ● Fingerprints (select models only) ● Face (select models only) ● only) ● Bluetooth (select models only) ● PIN (select models only) 6. If you are prompted to enroll your fingerprints, follow the on-screen instructions, and then
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 25
    to fine-tune your preferences and set your access control. This Easy Setup Guide will focus on getting each module running with the least amount of setup ? or Help button in the upper right corner. This button will automatically provide information to help you with the currently displayed window. 15
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 26
    to prevent unauthorized access while logged into Windows and should be used when high security is needed or if users are away from their systems frequently throughout the day. If you -down menu under Policy. 4. Click the Apply button when complete. 16 Chapter 3 Easy Setup Guide for Small Business
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 27
    OK button. 4. Password Manager can also save your user name and passwords for network shares or mapped network drives. Viewing supports the launching of saved sites from Windows. To open Password Manager, use one of the following two methods: ● Use the keyboard combination of ctrl+Windows logo key 17
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 28
    erase manually or button. 2. Select the items on the right side of the Available shred options window . 4. Click the Apply button when you have selected everything button immediately erases the items selected in the Delete Settings window you just configured. 6. A small popup bubble is displayed
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 29
    your data will remain secured on the hard drive and not walk out the door of your business. An example would be to allow a user access to your data but block them from copying it to a CD, personal music player, or USB memory device. Below is an easy way to set this up. 1. Click Start
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 30
    encrypt, and then click Next. 7. The Drive Encryption configuration window requires a USB flash drive to store the encryption recovery key. Keep this recovery key safe and secure because it is used to recover data or access the drive if the pre-boot password is lost or fails. 8. Click Next, complete
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 31
    the following tasks: ● Enabling or disabling security features ● Specifying required credentials for authentication ● Managing users of the computer ● Adjusting device-specific parameters ● Configuring installed Security Manager applications ● Adding additional Security Manager applications 21
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 32
    . ● Data-allows you to configure settings for Drive Encryption and Embedded Security (select models only). ● Computer-allows you to configure settings for Device Access Manager ● Communications-allows you to configure settings for Privacy Manager ● Central Management-Displays tabs for learning about
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 33
    Configuring your system The System group is accessed from the menu panel on the left side of HP ProtectTools Administrative Console. You can use the applications in this group to manage the policies and settings for the computer, its users, and its devices a credential, to display the edit dialog.
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 34
    click Add, or right-click a credential, to display the edit dialog. 4. To require a combination of , and then click Delete. 6. Click Yes on the configuration dialog. 7. To confirm whether users can log on, click Windows logon if authentication was already performed at the BIOS level or at the Drive
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 35
    to type their own passphrase. 2. To allow SpareKey recovery for Windows logon, select the check box. 3. Click Apply. Fingerprints If a fingerprint reader is installed or connected to the computer, the Fingerprints page displays the following tabs: ● Enrollment-Choose the minimum and maximum number
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 36
    lighting conditions Windows. Initializing the smart card HP ProtectTools Security Manager can support a number of different smart cards. The number and type of characters used as PIN numbers may vary. The manufacturer of the smart card should provide tools to install installed. 1. Obtain and install
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 37
    displayed when you insert the smart card into the reader (for example: Start > Programs > ActivIdentity > ActivClient > PIN initialization tool). b. Follow the on-screen instructions Windows password, and then click Next. 4. In the SpareKey page, click Skip SpareKey Setup (unless you want to update
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 38
    types of contactless cards are supported by HP ProtectTools: ● Contactless HID iCLASS memory cards ● Contactless MiFare Classic 1k, 4k, and mini memory cards ▲ To set up your contactless card, place it very close to the reader, follow the on-screen instructions, and then click Apply. Proximity
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 39
    tabs that allow you to customize the behavior of currently installed HP ProtectTools Security Manager applications. ▲ In the left it, or clear the check box to disable the setting. 2. Click Apply. Applications tab Administrators can enable or disable the following applications: ● Status-Select the
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 40
    Administrators can perform the following operations: ● Enable ● Disable Data The Data section of the left panel of Administrative Console allows you to configure settings for the following applications: ● Drive Encryption-Configure settings and display drive status. For more information, see the
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 41
    the use of third-party certificates By default, only special Comodo-issued certificates can be used. Select this setting to allow use of any certificate with signature, encryption, and email protection capabilities, and an exportable Private Key, and then click Apply. For more information, see the
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 42
    32 Chapter 4 HP ProtectTools Security Manager Administrative Console
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 43
    download from the Web: ● Manage your logon and passwords. ● Easily change your Windows® operating system password. ● Set program preferences. ● Use fingerprints ProtectTools desktop gadget icon. ● Press the hotkey combination ctrl+Windows logo key+h to open the Password Manager Quick Links menu. For
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 44
    HP ProtectTools Security Manager. The dashboard displays the following components: ● ID Card-Displays the Windows user name and a selected picture identifying the logged on user account. ● Security Applications-Displays an expanding menu of links for configuring the following categories of security
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 45
    your name is displayed. By default, your full Windows user name and the picture you selected during Windows setup are shown. To change the displayed name: 1. Open status of your installed security applications. ◦ Red-Warning ◦ Yellow-Attention: not configured ◦ Blue-OK Your personal ID card 35
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 46
    Manager Setup Wizard to configure authentication credentials for the computer. The Setup Wizard is displayed in a separate window. ◦ Enroll now-A by authenticating with your Windows password, your fingerprint, your face, smart card, proximity card, contactless card, Bluetooth phone, or PIN.
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 47
    Password Manager. ● Open Password Manager-Launches Password Manager. ● Help-Displays the Security Manager Help. NOTE: The administrator of this computer may Security Manager to require more than one credential when verifying your identity. Adding logons You can easily add a logon for a website or a
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 48
    display this dialog box by clicking Add Logon from the Password Manager Manage tab, using the ctrl+Windows logo key Identity Protection (VIP) is available. When supported by the site, you can also choose to use (fingerprints, face, smart card, proximity card, contactless card, Bluetooth phone,
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 49
    Manager hotkey combination (ctrl+Windows logo key+h is the factory setting). To change the hotkey combination, on the Security Manager dashboard, click Password Manager, and then click Settings. 2. Swipe your fingerprint (on computers with a built-in or connected fingerprint reader), or enter your
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 50
    logon. 2. Press and hold the left mouse button. 3. Drag the logon into the list of categories than one category, and you can display all of your logons by clicking instructions: ◦ Open-Open a website or program for which you have an existing logon. ◦ Add-Add a logon. For more information, see Adding
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 51
    . ◦ Follow the on-screen instructions. For more information, see Adding logons on page 37. ◦ The Password Manager icon is displayed whenever this website logon or program screen is opened. Do not prompt to add logons for logon screens-Select the radio button. 2. To access additional Password
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 52
    plus sign is displayed whenever a website disable this feature, clear the check box beside Prompt to add logons for logon screens. 2. Open Password Manager with ctrl+win+h-The default hotkey that opens the Password Manager Quick Links menu is ctrl+Windows logo key drop or manually enter the
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 53
    , and may include the following: ● Password ● SpareKey ● Fingerprints ● Face ● Smart card ● Contactless Card ● Proximity Card ● Bluetooth ● PIN To enroll or change a credential, click the link and follow the on-screen instructions. Changing your Windows password Security Manager makes changing your
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 54
    boot logon screen or the Windows Welcome screen. Enrolling your fingerprints If the administrator selected Fingerprints on the Choose your credentials screen and if your computer has a fingerprint reader built in or connected, the Getting Started wizard guides . ● The lighting is quite different
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 55
    , and then click Face. 3. Click Advanced, and then configure additional options. For more information, see Advanced User Settings on Camera icon to resume the authentication process. NOTE: If lighting is insufficient, and you are not able to log on using Face Recognition, you can enter your Windows
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 56
    screen background color manually, click the Light bulb icon. Learning , or clear the check box to disable an option. These settings apply only logon succeeds or fails. ● Prompt to update scenes when logon fails-If face logon is up a smart card If a smart card reader is built in or connected to your
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 57
    , place it very close to the reader, and then follow the on-screen instructions. Proximity card A proximity card is a small plastic card containing a computer chip. If a proximity card reader is connected to the computer, if the administrator has installed the associated driver from the My Logons 47
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 58
    to the reader, and then follow the on-screen instructions. Bluetooth If the administrator has enabled Bluetooth as an authentication credential, you can set up a Bluetooth phone in conjunction with other credentials for additional security. NOTE: Only Bluetooth phone devices are supported. 1. Be
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 59
    , and then click Preferences. Available settings are displayed on two tabs: General and Fingerprint. General tab Appearance-Show icon in taskbar notification area ● To enable displaying the icon on the taskbar, select the check box. ● To disable displaying the icon on the taskbar, clear the check
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 60
    tab is available only if the computer has a fingerprint reader and the correct driver is installed. ● Quick Actions-Use Quick Actions to select the Security Manager task to be performed when you hold down a designated key while swiping your fingerprint. To assign a Quick Action to one of the
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 61
    . 2. On the left panel of the dashboard, click Advanced, and then click Backup and Restore. 3. Click Restore data. 4. Select the previously created storage file. to restore data. In most cases, you will select all of the modules listed. 7. Verify your Windows password. 8. Click Finish. My Logons 51
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 62
    52 Chapter 5 HP ProtectTools Security Manager
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 63
    self-encrypting drives using hardware encryption ◦ Adding further security by disabling Sleep or Standby to ensure that Drive Encryption pre- boot authentication is always required NOTE: Only internal SATA and external eSATA hard drives can be encrypted. ● Creating backup keys ● Recovering access
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 64
    backup. 7. Under Back up Drive Encryption keys, select the check box for the storage device where the encryption key will be saved. 8. Click Next. NOTE: You are prompted to restart the computer. After restart, the Drive Encryption pre-boot screen is displayed, requiring authentication before Windows
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 65
    check box for the hard drive that you want to encrypt, and then click Next. 6. To back up the encryption key, insert the storage device into the appropriate slot. NOTE: To save the encryption key, you must use a USB storage device with the FAT32 or FAT16 format. A USB memory stick, Secure Digital
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 66
    backup. 8. Under Back up Drive Encryption keys, select the check box for the storage device where the encryption key will be saved. 9. Click Apply. NOTE: You are prompted to restart the computer. Drive Encryption pre-boot will be displayed, requiring authentication before Windows will start. Drive
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 67
    the Disable Sleep Mode for Added Security option, which prevents Sleep or Standby from occurring when enabled. When waking from Hibernation, Drive Encryption pre-boot authentication is displayed for both software or hardware encryption. NOTE: If the Windows administrator has enabled BIOS Pre-boot
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 68
    Gemalto CyberFlex Access 2 Internal readers ● Alcor Internal USB reader ● Ricoh NOTE: If the recovery key is used to log in at the Drive Encryption login screen, additional credentials are required at Windows logon to access user accounts. Protect your data by encrypting your hard drive It is highly
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 69
    is Disabled, Drive Encryption has not yet been activated by the Windows administrator and is not protecting the hard drive. Use the HP ProtectTools Security Manager Setup Wizard to activate Drive Encryption. ● If the status is Enabled, Drive Encryption has been activated and configured. The drive is
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 70
    hard drive is removed and installed in another computer, access to the drive is denied. CAUTION: TPM ownership cannot be shared with Windows Console is displayed. b. In the Actions pane, click Initialize TPM. The TPM Initialization Wizard starts. c. Follow the on-screen instructions to turn on the
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 71
    to each hard drive you want to encrypt or decrypt, and then click Apply. NOTE: When a partition is being encrypted or decrypted, a progress bar displays the percentage of partition encrypted and the time remaining to complete the process. NOTE: Dynamic partitions are not supported. If a partition
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 72
    be secure, because the storage device allows access to Windows. NOTE: To save the encryption key, you must use a USB storage device with the FAT32 or FAT16 format. A USB memory stick, Secure Digital (SD) Memory Card, or MultiMedia Card (MMC) may be used for backup. 1. Click Start, click All Programs
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 73
    where it was saved previously: 1. Turn on the computer. 2. Insert the removable storage device that contains your backup key. 3. When the Drive Encryption for HP ProtectTools login dialog box opens, click Options. 4. Click Recovery. 5. Select the file that contains your backup key or click Browse to
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 74
    64 Chapter 6 Drive Encryption for HP ProtectTools (select models only)
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 75
    HP ProtectTools Security Manager, which includes the following security login methods: ● Fingerprint authentication ● Windows® password ● Smart card ● Face recognition You may use any of the taskbar, click Privacy Manager for HP ProtectTools, and then click Configuration. Opening Privacy Manager 65
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 76
    called public key infrastructure (PKI). PKI requires users to obtain cryptographic keys and a Privacy Manager Certificate issued by a on page 69 ● Revoking your Privacy Manager Certificate on page 69 Installing a Privacy Manager Certificate Before you can use the Privacy Manager features, you
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 77
    backup file, or click Browse to search for a location. CAUTION: Be sure that you save the file to a location other than your hard drive and put it in a safe place. This file should be for your use only, and is required in case you need to restore your Privacy Manager Certificate and associated keys
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 78
    you save the file to a location other than your hard drive and put it in a safe place. This file should be for your use only, and is required in case you need to restore your Privacy Manager Certificate and associated keys. Viewing Privacy Manager Certificate details 1. Open Privacy Manager, and
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 79
    you encrypted with that certificate. If you have accidentally deleted a Privacy Manager Certificate, you can restore it using the backup file that you created when you installed the certificate. See Restoring a Privacy Manager Certificate on page 69 for more information. To delete a Privacy Manager
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 80
    your chosen security login method. 6. Follow the on-screen instructions. Managing Trusted Contacts Trusted Contacts are users with whom you installed. For information on installing the alternate client, access the DigitalPersona website at http://digitalpersona.com/privacymanager/download. Adding
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 81
    Contact request. Click OK to launch the Certificate Request Wizard. See Installing a Privacy Manager Certificate on page 66 for more information. 7. that the recipient has been successfully added to your Trusted Contacts list. 9. Click OK. Adding Trusted Contacts using Microsoft Outlook contacts
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 82
    . A dialog box opens, confirming that the recipient has been successfully added to your Trusted Contacts list. 8. Click OK. Viewing Trusted Contact Trusted Contacts. 2. Click a Trusted Contact. 3. Click the Advanced button. The Advanced Trusted Contact Management dialog box opens. 4. Click Check
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 83
    installed, a Privacy button is displayed on the Microsoft Outlook toolbar, and a Send Securely button is displayed you to send a Trusted Contact invitation. See Adding a Trusted Contact on page 70 for more Configuring Privacy Manager for Microsoft Outlook on page 73 for more information. Configuring
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 84
    you install your Privacy Manager Certificate, a Sign and Encrypt button is displayed on line is added when a Microsoft Word or Microsoft Excel document is signed or encrypted. To turn this option Managing Trusted Contacts on page 70, or Configuring Privacy Manager for Microsoft Office on page 75
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 85
    actions you want to configure, and then click OK follow these steps: 1. Click the Office button in the upper-left corner of the Signing. NOTE: A check mark is displayed next to Add Signature Line Before login method. Adding suggested signers to instructions to sign by a specific date. General tasks 75
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 86
    of the suggested signer. 5. In the box under Instructions to the signer, enter a message for this suggested in place of a title, and is either deleted or replaced by the user's title when the document is signed. able to display the date and/or title in the signature line. 8. Click OK. Adding a
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 87
    . NOTE: To select multiple Trusted Contact names, hold down the ctrl key, and then click the individual names. 4. Click OK. If you displayed in the status bar at the bottom of the document window. 1. Click the Digital Signatures icon to toggle display of the Signatures dialog box, which displays
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 88
    Manager Certificate, and Privacy Manager must be installed on his or her computer. In addition file to a network location or any removable storage device, and then restore the file to the new Open Privacy Manager, and then click Migration. 2. Click Backup. 3. On the Select Data page, select the data
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 89
    Privacy Manager may be part of a centralized installation that has been customized by your administrator. One or more of the following features may be either enabled or disabled: ● Certificate use policy-You may be restricted to the use of Privacy Manager Certificates issued by Comodo, or you may be
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 90
    80 Chapter 7 Privacy Manager for HP ProtectTools (select models only)
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 91
    , or Manually shredding all selected items on page 87. NOTE: A .dll file is shredded and removed from the system only if it has been moved to the Recycle Bin. Free space bleaching Deleting an asset in Windows does not completely remove the contents of the asset from your hard drive. Windows deletes
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 92
    hard drive until another asset overwrites that same area on the hard drive the Windows Recycle Bin, or by deleting the assets manually. manually at any time. For more information, see Manually shredding one asset on page 87. NOTE: A scheduled task starts at a specific time. If the system is turned
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 93
    . If the system is turned off or is in Standby at the scheduled time, File Sanitizer will not attempt to relaunch the task. 1. Open File Sanitizer, and then click Bleaching. 2. To schedule a future time to bleach your hard drive, select the Activate Scheduler check box, enter your Windows password
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 94
    asset, and then click Delete. 4. Selected items will be shredded, and a confirmation message will be displayed. Unchecked items will be shredded without a confirmation message. Select the check box to display a confirmation message before shredding the item, or clear the check box to shred the item
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 95
    performed occasionally on the assets that have been deleted manually or by using the Windows Recycle Bin. 1. Open File Sanitizer, click Settings message will be displayed. Unchecked items will be shredded without a confirmation message. Select the check box to display a confirmation message
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 96
    shredding. For details, see Using a key sequence to initiate shredding on page 86. ● Use the File Sanitizer icon to initiate shredding-This feature is similar to the drag-and-drop feature in Windows. For details, see Using the File Sanitizer icon on page 87. ● Manually shred a specific asset or all
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 97
    or - 1. Open File Sanitizer, and then click Shred. 2. Click the Browse button. 3. When the Browse dialog box opens, navigate to the asset you want to click OK. 4. When the confirmation dialog box opens, click Yes. Manually shredding all selected items 1. Right-click the HP ProtectTools icon in
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 98
    Shred now button. 3. When the confirmation dialog box opens, click Yes. Manually activating free is in progress, a message is displayed above the HP ProtectTools Security Manager generated. The log files are always updated according to the latest shred or located on the hard drive: ● C:\Program
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 99
    to data by disabling data transfer devices. NOTE: Some human interface/input devices, such as a mouse, keyboard, TouchPad, and fingerprint reader, are not controlled by Device Access Manager. For more information, see Unmanaged Device Classes on page 99. Windows® operating system administrators use
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 100
    the Simple Configuration view to allow or deny access to the following classes of devices for all non-Device Administrators: ● All removable media (diskettes, USB flash drives, and so on) ● All DVD/CD-ROM drives ● All serial and parallel ports ● All Bluetooth® devices NOTE: If Bluetooth devices are
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 101
    . To determine whether the background service is running, open a command prompt window, and then type sc query flcdlock. To determine whether the device driver is running, open a command prompt window, and then type sc query damdrv. Device Class Configuration Administrators can view and modify lists
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 102
    The Device Class Configuration view has the following sections: ● Device List-Shows all the device classes and devices that are installed on the system or that may have been installed on the system previously. ◦ Protection is usually applied for a device class. A selected user or group will be able
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 103
    Class Configuration. 2. In the device list, click one of the following: ● Device class ● All devices ● Individual device 3. Click Add. The Select Users or Groups dialog box opens. 4. Click Advanced, and then click Find Now to search for users or groups to add. 5. Click a user or a group to be added
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 104
    In the left pane of HP ProtectTools Administrative Console, click Device Access Manager, and then click Device Class Configuration. 2. In the device list, click the device class that you want to configure. ● Device class ● All devices ● Individual device 3. Under User/Groups, select the group to be
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 105
    Simple Configuration policy is configured to deny all non-Device Administrators access to the DVD/CD-ROM drive. ● Result-A JITA-enabled user who attempts to access the DVD/CD-ROM drive receives the same "access denied" message as a non-JITA-enabled user. Then a balloon message is displayed, asking
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 106
    -enabled device, a prompt to enter credentials is displayed. JITA is available for the following device classes: ● DVD/CD-ROM drives ● Removable click Device Access Manager, and then click JITA Configuration. 2. From the device's drop-down menu, select either removable media or DVD/CD-ROM drives.
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 107
    of HP ProtectTools Administrative Console, click Device Access Manager, and then click JITA Configuration. 2. From the device's drop-down menu, select either removable media or DVD/CD-ROM drives. 3. Select the user or group whose JITA you wish to disable. 4. Clear the Enabled check box. 5. Click
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 108
    prompt window with Administrator privileges, and then type: sc start flcdlock Press enter. 2. When the services are started, the drive list can be edited. Enter the drive letters of devices that you do not want Device Access Manager to control. The drive letters are displayed for physical hard disks
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 109
    Manager does not manage the following device classes: ● Input/output devices ◦ Biometric ◦ Mouse ◦ Keyboard ◦ Printer ◦ Plug and play (PnP) printers ◦ Printer upgrade ◦ Infrared human interface devices ◦ Smart card reader ◦ Multi-port serial ◦ Disk drive ◦ Floppy disk controller (FDC) Advanced
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 110
    (HID) class ● Power ◦ Battery ◦ Advanced power management (APM) support ● Miscellaneous ◦ Computer ◦ Decoder ◦ Display ◦ Processor ◦ System ◦ Unknown ◦ Volume ◦ Volume snapshot ◦ Security devices ◦ Security accelerator ◦ Intel® unified display driver ◦ Media driver ◦ Medium changer ◦ Multifunction
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 111
    and recovering the computer. If configured, Computrace can continue to function even if the hard drive is erased or replaced. To activate Computrace for HP your credit card payment information, or enter a prepurchased Product Key. The Activation Wizard securely processes the transaction and sets up
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 112
    102 Chapter 10 Theft recovery (select models only)
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 113
    be installed System (EFS) file and folder encryption ● Creation of a personal secure drive (PSD) for protecting user data ● Data management functions, such as backing up and restoring the key hierarchy ● Support to Windows. archive and configuring user ROM and setting up the TPM chip may
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 114
    on or restarting the computer, and then pressing f10 while the "f10 = ROM Based Setup" message is displayed in the lower-left corner of the screen. 2. If you have not set an administrator password, use the arrow keys to select Security, select Setup password, and then press enter. 3. Type your
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 115
    from a certification authority. For instructions on configuring your email and obtaining a digital drive After setting up the PSD, you are prompted to type the Basic User Key password at the next logon. If the Basic User Key password is entered correctly, you can access the PSD directly from Windows
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 116
    Drives case of emergency. Creating a backup file To create a backup file: 1. Click Start, click All Programs, click Security and Protection, and then click HP ProtectTools Administrative Console. 2. In the left pane, click Embedded Security, and then click Backup. 3. Follow the on-screen instructions
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 117
    . 3. In the right pane, click Restore all. The HP Embedded Security for ProtectTools Backup Wizard opens. 4. Follow the on-screen instructions. Changing the owner password Administrators can change the owner password: 1. Click Start, click All Programs, click Security and Protection, and then click
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 118
    108 Chapter 11 Embedded Security for HP ProtectTools (select models only)
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 119
    keyboard. IMEs are not supported at the Preboot Security or HP Drive Encryption level. A Windows password cannot be entered with an IME at the Preboot Security or HP Drive Encryption login screen, and doing so may result in a lockout situation. In some cases, Microsoft® Windows does not display
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 120
    as U.S. English (409), and then the user changes the password using a different keyboard layout that is also supported, such as Latin American (080A), the password change will work in HP Drive Encryption, but it will fail in the BIOS if the user uses characters that exist in the latter but not in
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 121
    while pressing the shift key for lower case and the shift key and caps lock key for upper case in BIOS Preboot Security and HP Drive Encryption. Numeric passwords must be entered using the numeric keypad. ● Korean When a user selects a supported Korean keyboard layout and then enters a password
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 122
    the soft keyboard. ◦ The ţ dead key generates two characters. Drive Encryption n/a n/a The ż key is rejected. The ţ key generates two n/a characters. The żŻ key is rejected in and n/a Windows, and the alt key Š keys are rejected in the generates a dead key in the BIOS. BIOS. For Windows XP
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 123
    Add button to add a supported keyboard (add U.S. keyboards under Chinese Input Language). 4. Set the supported keyboard for default input. 5. Restart HP ProtectTools, and then enter the password again. ● A user is using a character that is not supported. To resolve this issue: 1. Change the Windows
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 124
    114 Chapter 12 Localized password exceptions
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 125
    13 Related documentation For more information about Security Manager for HP ProtectTools: ● To access this guide, select Start, click Help and Support, and then click User Guides. ● On the Web, go to http://www.hp.com/services/protecttools (English only). 115
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 126
    116 Chapter 13 Related documentation
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 127
    the same computer or another one. biometric Category of authentication credentials that use a physical feature, such as a fingerprint, to identify a user. certification authority (CA) A service that issues the certificates required to run a public key infrastructure. credentials The means by which
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 128
    again at the Windows logon screen. DriveLock A security feature that links the hard drive to a user and requires the user to correctly type the DriveLock password when the computer starts up. emergency recovery archive A protected storage area that allows the reencryption of Basic User Keys from one
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 129
    A group of users that have the same level of access or denial to a device class or a specific device. HP SpareKey Recovery The ability to access your computer by answering security questions correctly. ID card A Windows desktop gadget that serves to visually identify your desktop with your user name
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 130
    a document is signed, the signer's name and verification method are displayed. The signing date and the signer's title can also be included. simple delete Deletion of the Windows reference to an asset. The asset content remains on the hard drive until obscuring data is written over it by free space
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 131
    a user, by storing information specific to the host system, such as encryption keys, digital certificates, and passwords. A TPM minimizes the manage other users. Windows Logon Security Protects your Windows account(s) by requiring the use of specific credentials for access. Windows user account The
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 132
    122 Glossary
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 133
    account, basic user 104 activating Drive Encryption for self- encrypting drives 55 Drive Encryption for standard hard drives 54 free space bleaching 88 adding signature line 75 suggested signer's signature line 76 suggested signers 75 Administrative Console configuring 23 using 22 Advanced Settings
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 134
    53 files and folders 105 hard drive 58 hard drive partitions 61 encryption hardware 55, 56, 58 removing 77 software 55, 56, 58, 61 encryption key backing up 61 recovering 63 encryption status, displaying 58 enrolling fingerprints 44 scenes 44 eSATA 99 Excel, adding signature line 75 excluding assets
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 135
    Device Access Manager for HP ProtectTools 89 Drive Encryption 54 File Sanitizer for HP ProtectTools 82 HP ProtectTools Administrative Console 22 Privacy Manager 65 Security Manager 33 owner password changing 107 setting 104 P password Basic User Key 106 changes using different keyboard layouts
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 136
    key handling 111 specify security settings 24 suggested signer adding 75 adding signature line 76 U unauthorized access, preventing 8 unmanaged device classes 99 updates Microsoft Office document 77 W Windows Logon password 9 wizard, HP ProtectTools Setup 13 Word, adding signature line 75 T theft
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 137
  • HP EliteBook 8470p | HP ProtectTools Getting Started - Page 138
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
HP ProtectTools
Getting Started