Home » Compaq Manuals » Desktops » Compaq 8000 » Manual Viewer

Compaq 8000 HP ProtectTools Guide - Page 12

Protecting against targeted theft, Restricting access to sensitive data - hp pro

UPC - 884420665106

Add to My Manuals
Save this manual to your list of manuals

Page 12 highlights

● Creating strong password policies ● Addressing regulatory security mandates Protecting against targeted theft An example of this type of incident would be the targeted theft of a computer or its confidential data and customer information. This can easily occur in open office environments or in unsecured areas. The following features help protect the data if the computer is stolen: ● The pre-boot authentication feature, if enabled, helps prevent access to the operating system. See the following chapters: ◦ Password Manager for HP ProtectTools on page 21 ◦ Embedded Security for HP ProtectTools on page 53 ◦ Drive Encryption for HP ProtectTools on page 26 ● DriveLock helps ensure that data cannot be accessed even if the hard drive is removed and installed into an unsecured system. ● The Personal Secure Drive feature, provided by the Embedded Security for HP ProtectTools module, encrypts sensitive data to help ensure it cannot be accessed without authentication. See the following chapter: ◦ Embedded Security for HP ProtectTools on page 53 ● LoJack Pro can track the computer's location after a theft. See the following chapter: ◦ LoJack Pro for HP ProtectTools on page 62 Restricting access to sensitive data Suppose a contract auditor is working on site and has been given computer access to review sensitive financial data; you do not want the auditor to be able to print the files or save them to a writeable device such as a CD. The following feature helps restrict access to data: Device Access Manager for HP ProtectTools allows IT managers to restrict access to writeable devices so sensitive information cannot be printed or copied from the hard drive onto removable media. See Device class configuration (advanced) on page 60. 4 Chapter 1 Introduction to security ENWW

Section	Page
Introduction to security	9
HP ProtectTools features	10
Accessing HP ProtectTools Security	11
Achieving key security objectives	11
Protecting against targeted theft	12
Restricting access to sensitive data	12
Preventing unauthorized access from internal or external locations	13
Creating strong password policies	13
Additional security elements	14
Assigning security roles	14
Managing HP ProtectTools passwords	14
Creating a secure password	15
Backing up credentials and settings	16
HP ProtectTools Security Manager Administrative Console	17
About HP ProtectTools Administrative Console	17
Using the Administrative Console	17
Getting Started - Setup Wizard	18
Configuring your system	18
Enabling security features	19
Defining Security Manager authentication policies	19
Logon tab	19
Session tab	20
Defining Settings	20
Managing Users	20
Adding a user	20
Removing a user	21
Checking user status	21
Specifying device settings	21
Configuring Applications Settings	21
Encrypting Drives	22
Managing Device Access	22
HP ProtectTools Security Manager	23
Logging in after Security Manager is configured	23
Managing passwords	24
Setting credentials	24
Changing your Windows password	24
Setting up a Smart Card	24
Managing communication privacy	25
Shredding or bleaching files	25
Viewing drive encryption status	25
Viewing device access	25
Activating theft recovery	26
Adding applications	26
Setting preferences	26
Backup and Restore	26
Backing up your data	27
Restoring your data	27
Changing your Windows user name and picture	27
Password Manager for HP ProtectTools	29
Adding logons	30
Editing logons	31
Using the Logons menu	31
Organizing logons into categories	31
Managing your logons	32
Assessing your password strength	32
Password Manager Icon settings	32
Drive Encryption for HP ProtectTools	34
Setup procedures	35
Opening Drive Encryption	35
General tasks	35
Activating Drive Encryption	35
Deactivating Drive Encryption	35
Logging in after Drive Encryption is activated	35
Advanced tasks	36
Managing Drive Encryption (administrator task)	36
Activating a TPM-protected password	36
Encrypting or decrypting individual drives	36
Backup and recovery (administrator task)	36
Creating backup keys	36
Privacy Manager for HP ProtectTools	38
Opening Privacy Manager	38
Setup procedures	39
Managing Privacy Manager Certificates	39
Requesting and installing a Privacy Manager Certificate	39
Requesting a Privacy Manager Certificate	39
Installing a Privacy Manager Certificate	39
Viewing Privacy Manager Certificate details	40
Renewing a Privacy Manager Certificate	40
Setting a default Privacy Manager Certificate	40
Deleting a Privacy Manager Certificate	40
Restoring a Privacy Manager Certificate	41
Revoking your Privacy Manager Certificate	41
Managing Trusted Contacts	41
Adding Trusted Contacts	42
Adding a Trusted Contact	42
Adding Trusted Contacts using your Microsoft Outlook address book	43
Viewing Trusted Contact details	43
Deleting a Trusted Contact	43
Checking revocation status for a Trusted Contact	44
General tasks	44
Using Privacy Manager in Microsoft Office	44
Using Privacy Manager in Microsoft Outlook	47
Using Privacy Manager in Windows Live Messenger	48
Advanced tasks	53
Migrating Privacy Manager Certificates and Trusted Contacts to a different computer	53
Exporting Privacy Manager Certificates and Trusted Contacts	53
Importing Privacy Manager Certificates and Trusted Contacts	53
File Sanitizer for HP ProtectTools	54
Setup procedures	55
Opening File Sanitizer	55
Setting a free space bleaching schedule	55
Setting a shred schedule	55
Selecting or creating a shred profile	56
Selecting a predefined shred profile	56
Customizing an advanced security shred profile	56
Customizing a simple delete profile	57
General tasks	57
Using a key sequence to initiate shredding	57
Using the File Sanitizer icon	58
Manually shredding one asset	58
Manually shredding all selected items	59
Manually activating free space bleaching	59
Aborting a shred or free space bleaching operation	59
Viewing the log files	59
Java Card Security for HP ProtectTools	60
Assigning a Java Card PIN	60
Embedded Security for HP ProtectTools	61
Setup procedures	62
Enabling the embedded security chip in Computer Setup	62
Installing Embedded Security for HP ProtectTools	62
Initializing the embedded security chip	63
Setting up the basic user account	63
General tasks	64
Using the Personal Secure Drive	64
Encrypting files and folders	64
Sending and receiving encrypted e-mail	64
Advanced tasks	65
Backing up and restoring	65
Creating a backup file	65
Restoring certification data from the backup file	65
Changing the owner password	65
Resetting a user password	65
Migrating keys with the Migration Wizard	65
Device Access Manager for HP ProtectTools	67
Starting background service	67
Simple configuration	67
Device class configuration (advanced)	68
Adding a user or a group	68
Removing a user or a group	68
Denying or allowing access to a user or group	68
User access settings (advanced)	69
Adding a user or group	69
Removing a user or group	69
Allowing or Denying Permissions	69
LoJack Pro for HP ProtectTools	70
Glossary	71

Match case Limit results 1 per page

●

Creating strong password policies

●

Addressing regulatory security mandates

Protecting against targeted theft

An example of this type of incident would be the targeted theft of a computer or its confidential data and

customer information. This can easily occur in open office environments or in unsecured areas. The

following features help protect the data if the computer is stolen:

●

The pre-boot authentication feature, if enabled, helps prevent access to the operating system. See

the following chapters:

◦

Password Manager for HP ProtectTools

on page

◦

Embedded Security for HP ProtectTools

on page

◦

Drive Encryption for HP ProtectTools

on page

●

DriveLock helps ensure that data cannot be accessed even if the hard drive is removed and

installed into an unsecured system.

●

The Personal Secure Drive feature, provided by the Embedded Security for HP ProtectTools

module, encrypts sensitive data to help ensure it cannot be accessed without authentication. See

the following chapter:

◦

Embedded Security for HP ProtectTools

on page

●

LoJack Pro can track the computer's location after a theft. See the following chapter:

◦

LoJack Pro for HP ProtectTools

on page

Restricting access to sensitive data

Suppose a contract auditor is working on site and has been given computer access to review sensitive

financial data; you do not want the auditor to be able to print the files or save them to a writeable device

such as a CD. The following feature helps restrict access to data:

Device Access Manager for HP ProtectTools allows IT managers to restrict access to writeable devices

so sensitive information cannot be printed or copied from the hard drive onto removable media. See

Device class configuration (advanced)

on page

Chapter 1

Introduction to security

ENWW