Home » HP Manuals » Laptops » HP ProBook 4525s » Manual Viewer

HP ProBook 4525s HP ProtectTools User Guide - Windows XP, Windows Vista, Windo - Page 13

Additional security elements, Assigning security roles, Managing HP ProtectTools passwords, CAUTION - recovery

Add to My Manuals
Save this manual to your list of manuals

Page 13 highlights

Additional security elements Assigning security roles In managing computer security (particularly for large organizations), one important practice is to divide responsibilities and rights among various types of administrators and users. NOTE: In a small organization or for individual use, these roles may all be held by the same person. For HP ProtectTools, the security duties and privileges can be divided into the following roles: ● Security officer-Defines the security level for the company or network and determines the security features to deploy, such as Java™ Cards, biometric readers, or USB tokens. NOTE: Many of the features in HP ProtectTools can be customized by the security officer in cooperation with HP. For more information, see the HP Web site at http://www.hp.com. ● Administrator-Applies and manages the security features defined by the security officer. Can also enable and disable some features. For example, if the security officer has decided to deploy Java Cards, the IT administrator can enable Java Card BIOS security mode. ● User-Uses the security features. For example, if the security officer and IT administrator have enabled Java Cards for the system, the user can set the Java Card PIN and use the card for authentication. CAUTION: Administrators are encouraged to follow "best practices" in restricting end-user privileges and restricting user access. Unauthorized users should not be granted administrative privileges. Managing HP ProtectTools passwords Most of the HP ProtectTools Security Manager features are secured by passwords. The following table lists the commonly used passwords, the software module where the password is set, and the password function. The passwords that are set and used by IT administrators only are indicated in this table as well. All other passwords may be set by regular users or administrators. HP ProtectTools password Windows Logon password Security Manager Backup and Recovery password Java™ Card PIN Set in the following module Function Windows® Control Panel or Can be used for manual logon and for HP ProtectTools Security authentication to access various Security Manager Manager features. Security Manager, by individual user Protects access to the Security Manager Backup and Recovery file. Java Card Security Protects access to the Java Card contents and authenticates users of the Java Card. When used for power-on authentication, the Java Card PIN also protects access to the Computer Setup utility and to the computer contents. Authenticates users of Drive Encryption, if the Java Card token is selected. Additional security elements 5

Section	Page
Introduction to security	9
HP ProtectTools features	10
Achieving key security objectives	11
Protecting against targeted theft	11
Restricting access to sensitive data	11
Preventing unauthorized access from internal or external locations	11
Creating strong password policies	12
Additional security elements	13
Assigning security roles	13
Managing HP ProtectTools passwords	13
Creating a secure password	14
Backing up and restoring HP ProtectTools credentials	14
Getting started with the Setup Wizard	15
HP ProtectTools Security Manager Administrative Console	17
Opening the Administrative Console	18
Using the Administrative Console	19
Configuring your system	20
Setting up authentication for your computer	21
Logon Policy	21
Session Policy	21
Settings	22
Managing users	23
Specifying device settings	24
Fingerprints	24
Smart card	24
Face	24
Advanced settings	25
Configuring your applications	26
General tab	27
Applications tab	28
Management tools	29
Updates and Messages	30
HP ProtectTools Security Manager	31
Opening HP ProtectTools Security Manager	32
Using the Security Manager dashboard	33
Setup procedures	34
Registering credentials	34
Enrolling your fingerprints	34
Enrolling scenes	34
Advanced User Settings	35
Changing your Windows password	35
Setting up a smart card	36
General tasks	37
Password Manager	37
For Web pages or programs where a logon has not yet been created	37
For Web pages or programs where a logon has already been created	37
Adding logons	38
Editing logons	39
Using the Logons menu	39
Organizing logons into categories	39
Managing your logons	40
Assessing your password strength	40
Password Manager icon settings	41
Settings	41
Credentials	41
Your personal ID card	42
Setting your preferences	42
General	42
Fingerprint	43
Backing up and restoring your data	43
Discover more	44
Updates and Messages	44
Security Applications Status	44
Drive Encryption for HP ProtectTools (select models only)	45
Setup procedures	46
Opening Drive Encryption	46
General tasks	47
Activating Drive Encryption	47
Deactivating Drive Encryption	47
Logging in after Drive Encryption is activated	47
Protect your data by encrypting your hard drive	48
Displaying encryption status	48
Advanced tasks	49
Managing Drive Encryption (administrator task)	49
Encrypting or decrypting individual drives	49
Backup and recovery (administrator task)	49
Creating backup keys	49
Performing a recovery	50
Privacy Manager for HP ProtectTools (select models only)	51
Setup procedures	52
Opening Privacy Manager	52
Managing Privacy Manager Certificates	52
Requesting and installing a Privacy Manager Certificate	52
Requesting a Privacy Manager Certificate	53
Obtaining a preassigned Privacy Manager Corporate Certificate	53
Installing a Privacy Manager Certificate	53
Viewing Privacy Manager Certificate details	54
Renewing a Privacy Manager Certificate	54
Setting a default Privacy Manager Certificate	54
Deleting a Privacy Manager Certificate	54
Restoring a Privacy Manager Certificate	55
Revoking your Privacy Manager Certificate	55
Managing Trusted Contacts	55
Adding Trusted Contacts	56
Adding a Trusted Contact	56
Adding Trusted Contacts using Microsoft Outlook contacts	57
Viewing Trusted Contact details	57
Deleting a Trusted Contact	58
Checking revocation status for a Trusted Contact	58
General tasks	59
Using Privacy Manager in Microsoft Outlook	59
Configuring Privacy Manager for Microsoft Outlook	59
Signing and sending an e-mail message	59
Sealing and sending an e-mail message	60
Viewing a sealed e-mail message	60
Using Privacy Manager in a Microsoft Office 2007 document	60
Configuring Privacy Manager for Microsoft Office	61
Signing a Microsoft Office document	61
Adding a signature line when signing a Microsoft Word or Microsoft Excel document	61
Adding suggested signers to a Microsoft Word or Microsoft Excel document	61
Adding a suggested signer's signature line	62
Encrypting a Microsoft Office document	62
Removing encryption from a Microsoft Office document	63
Sending an encrypted Microsoft Office document	63
Viewing a signed Microsoft Office document	63
Viewing an encrypted Microsoft Office document	64
Using Privacy Manager in Windows Live Messenger	64
Starting a Privacy Manager Chat session	64
Configuring Privacy Manager for Windows Live Messenger	65
Chatting in the Privacy Manager Chat window	65
Viewing chat history	66
Reveal all sessions	66
Reveal sessions for a specific account	67
View a session ID	67
View a session	67
Search sessions for specific text	67
Delete a session	67
Add or remove columns	68
Filter displayed sessions	68
Displaying sessions for a specific account	68
Displaying sessions for a range of dates	68
Displaying sessions that are saved in a folder other than the default folder	68
Advanced tasks	69
Migrating Privacy Manager Certificates and Trusted Contacts to a different computer	69
Backing up Privacy Manager Certificates and Trusted Contacts	69
Restoring Privacy Manager Certificates and Trusted Contacts	69
Central administration of Privacy Manager	70
File Sanitizer for HP ProtectTools	71
Shredding	72
Free space bleaching	73
Setup procedures	74
Opening File Sanitizer	74
Setting a shred schedule	74
Setting a free space bleaching schedule	74
Selecting or creating a shred profile	75
Selecting a predefined shred profile	75
Customizing a shred profile	75
Customizing a simple delete profile	76
General tasks	77
Using a key sequence to initiate shredding	77
Using the File Sanitizer icon	78
Manually shredding one asset	78
Manually shredding all selected items	78
Manually activating free space bleaching	79
Aborting a shred or free space bleaching operation	79
Viewing the log files	79
Device Access Manager for HP ProtectTools (select models only)	80
Setup Procedures	81
Opening Device Access Manager	81
Configuring device access	81
Device administrators group	81
Simple Configuration	81
Starting background service	82
Device Class Configuration	83
Denying access to a user or group	84
Allowing access for a user or a group	85
Removing access for a user or a group	85
Allowing access to a class of devices for one user of a group	86
Allowing access to a specific device for one user of a group	86
Resetting the configuration	86
Advanced tasks	88
Controlling access to the configuration settings	88
Granting access to an existing group or user	88
Denying access to an existing group or user	89
Adding a new group or user	89
Removing group or user access	89
Related documentation	89
LoJack Pro for HP ProtectTools	90
Troubleshooting	91
HP ProtectTools Security Manager	91
Device Access Manager for HP ProtectTools	93
Miscellaneous	95
Glossary	96

Match case Limit results 1 per page

Additional security elements

Assigning security roles

In managing computer security (particularly for large organizations), one important practice is to divide

responsibilities and rights among various types of administrators and users.

NOTE:

In a small organization or for individual use, these roles may all be held by the same person.

For HP ProtectTools, the security duties and privileges can be divided into the following roles:

●

Security officer—Defines the security level for the company or network and determines the security

features to deploy, such as Java™ Cards, biometric readers, or USB tokens.

NOTE:

Many of the features in HP ProtectTools can be customized by the security officer in

cooperation with HP. For more information, see the HP Web site at

http://www.hp.com

●

Administrator—Applies and manages the security features defined by the security officer. Can also

enable and disable some features. For example, if the security officer has decided to deploy Java

Cards, the IT administrator can enable Java Card BIOS security mode.

●

User—Uses the security features. For example, if the security officer and IT administrator have

enabled Java Cards for the system, the user can set the Java Card PIN and use the card for

authentication.

CAUTION:

Administrators are encouraged to follow “best practices” in restricting end-user privileges

and restricting user access.

Unauthorized users should not be granted administrative privileges.

Managing HP ProtectTools passwords

Most of the HP ProtectTools Security Manager features are secured by passwords. The following table

lists the commonly used passwords, the software module where the password is set, and the password

function.

The passwords that are set and used by IT administrators only are indicated in this table as well. All

other passwords may be set by regular users or administrators.

HP ProtectTools password

Set in the following

module

Function

Windows Logon password

Windows® Control Panel or

HP ProtectTools Security

Manager

Can be used for manual logon and for

authentication to access various Security

Manager features.

Security Manager Backup and

Recovery password

Security Manager, by

individual user

Protects access to the Security Manager

Backup and Recovery file.

Java™ Card PIN

Java Card Security

Protects access to the Java Card contents

and authenticates users of the Java Card.

When used for power-on authentication, the

Java Card PIN also protects access to the

Computer Setup utility and to the computer

contents.

Authenticates users of Drive Encryption, if

the Java Card token is selected.

Additional security elements