HP ProBook 4540s HP ProtectTools Getting Started - Page 70

Using Enhanced Security with TPM (select models only) After the Trusted Platform Module (TPM) is activated and the Drive Encryption Enhanced Security with TPM functionality is selected, the Drive Encryption password is protected by the TPM security chip. If the hard drive is removed and installed in another computer, access to the drive is denied. CAUTION: TPM ownership cannot be shared with Windows TPM.msc and Embedded Security. Use of Embedded Security for HP ProtectTools is highly recommended. If Embedded Security for HP ProtectTools is enabled on the computer, and TPM.msc takes ownership, you are locked out of the computer. NOTE: Because the password is protected by the TPM security chip, if the hard drive is moved to another computer, data cannot be accessed unless the TPM settings are migrated to that computer. To activate the TPM security chip, follow these steps: NOTE: The TPM option must be enabled in BIOS Setup. ▲ Use Embedded Security for HP ProtectTools. For more information, see the Embedded Security software Help. - or - ▲ Use TPM.msc: a. Click Start, type tpm.msc in the Search box, and then press enter. TPM Management Console is displayed. b. In the Actions pane, click Initialize TPM. The TPM Initialization Wizard starts. c. Follow the on-screen instructions to turn on the TPM security hardware, create a TPM password, and take ownership of the TPM. To activate enhanced security with TPM, follow these steps: NOTE: If your computer does not have a TPM security chip, or if TPM has not been activated, this option is not available. 1. Click Start, click All Programs, click Security and Protection, and then click HP ProtectTools Administrative Console. 2. In the left pane, click the + icon to the left of Drive Encryption to display the available options. 3. Click Settings. 4. Select the Enhance security with TPM check box. 60 Chapter 6 Drive Encryption for HP ProtectTools (select models only)