Compaq dc5850 HP Protect Tools Guide

Compaq dc5850 - Microtower PC Manual

Get Compaq dc5850 - Microtower PC PDF manuals and user guides View all Compaq dc5850 manuals
Add to My Manuals
Save this manual to your list of manuals

Compaq dc5850 manual content summary:

  • Compaq dc5850 | HP Protect Tools Guide - Page 1
    HP ProtectTools User Guide
  • Compaq dc5850 | HP Protect Tools Guide - Page 2
    Packard Development Company, L.P. Microsoft and Windows are U.S. registered trademarks of Microsoft HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP
  • Compaq dc5850 | HP Protect Tools Guide - Page 3
    9 Restoring credentials 10 Configuring settings 10 2 Credential Manager for HP ProtectTools Setup procedures ...12 Logging on to Credential Manager 12 Using 13 Using your registered fingerprint to log on to Windows 13 Registering a Java Card, USB eToken, or virtual token 13 Registering a
  • Compaq dc5850 | HP Protect Tools Guide - Page 4
    Settings" page to allow Windows logon from Credential Manager 23 Card Security for HP ProtectTools General tasks ...31 Changing a Java Card PIN 31 Selecting the card reader 31 Advanced tasks (administrators only 32 Assigning a Java Card PIN 32 Assigning a name to a Java Card 32 Setting power
  • Compaq dc5850 | HP Protect Tools Guide - Page 5
    Disabling Java Card power-on authentication 34 5 BIOS Configuration for HP ProtectTools File ...36 Storage ...37 Security ...38 Power ...39 Advanced ...40 6 Device Access Manager for HP ProtectTools Starting background service ...42 Simple configuration ...43 Device class configuration (advanced
  • Compaq dc5850 | HP Protect Tools Guide - Page 6
    vi
  • Compaq dc5850 | HP Protect Tools Guide - Page 7
    from the HP Web site. For select HP Compaq Desktops, HP ProtectTools is available as an after market option. Visit http://www.hp.com for more information. NOTE: The instructions in this guide are written with the assumption that you have already installed the applicable HP ProtectTools software
  • Compaq dc5850 | HP Protect Tools Guide - Page 8
    like EFS (Windows Encrypting File System locally on a PC. TPM provides secure Card can be used to access Credential Manager, Drive Encryption, HP BIOS, or any number of third party access points. ● BIOS Configuration provides access to power-on user and administrator password management. ● BIOS
  • Compaq dc5850 | HP Protect Tools Guide - Page 9
    Device Access Manager provides customizable control of data storage and transmission hardware (USB, COM & LPT ports, personal music players, CD drives, network interface cards, etc.) ● Device Access Manager can also manage users and user groups to provide read, write, allow or deny access to data on
  • Compaq dc5850 | HP Protect Tools Guide - Page 10
    by logging on to Credential Manager directly from the Windows logon screen. For more information, refer to "Logging on to Windows with Credential Manager on page 15." For Windows Vista, the administrator must use the "HP ProtectTools Security Manager for Administrators" when accessing Drive
  • Compaq dc5850 | HP Protect Tools Guide - Page 11
    Java Card on page 32" ◦ "Device Access Manager for HP ProtectTools on page 41 " ◦ "Drive Encryption for HP ProtectTools working onsite and has been given computer access to review sensitive financial data; you do not want the contractor and installed into an unsecured system. Refer to "Security
  • Compaq dc5850 | HP Protect Tools Guide - Page 12
    See the following procedures: ◦ "Assigning a name to a Java Card on page 32" ◦ "Drive Encryption for HP ProtectTools on page 46" ● Embedded Security for HP ProtectTools helps protect sensitive user data or credentials stored locally on a PC using the following procedures: ◦ Embedded Security "Setup
  • Compaq dc5850 | HP Protect Tools Guide - Page 13
    Card BIOS security mode. ● User-Uses the security features. For example, if the security officer and IT administrator have enabled Java Cards for the system, the user can set the Java Card PIN and use the card for authentication. Managing HP ProtectTools passwords Most of the HP used for power-on
  • Compaq dc5850 | HP Protect Tools Guide - Page 14
    Setup password NOTE: Also known as BIOS administrator, F10 Setup, or Security Setup password Power-on password Windows Logon password Set in this HP ProtectTools Function module Embedded Security, by IT administrator Java Card Security Protects the system and the TPM chip from unauthorized
  • Compaq dc5850 | HP Protect Tools Guide - Page 15
    , and then click Backup and Restore. 3. In the right pane, click Backup Options. The HP ProtectTools Backup Wizard opens. 4. Follow the on-screen instructions. 5. After you set and confirm the Storage File Password, select Remember all passwords and authentication values for future automated
  • Compaq dc5850 | HP Protect Tools Guide - Page 16
    settings for Scheduled Task Completed, Idle Time, and Power Management. 10. Click Apply, and then click OK HP ProtectTools Restore Wizard opens. Follow the on-screen instructions. Configuring settings 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click HP
  • Compaq dc5850 | HP Protect Tools Guide - Page 17
    as using a Smart Card or biometric reader to log on to Windows. For additional information, refer to "Registering credentials on page 12." ● Single Sign On feature that automatically remembers credentials for Web sites, applications, and protected network resources. ● Support for optional security
  • Compaq dc5850 | HP Protect Tools Guide - Page 18
    the notification area, by double-clicking the HP ProtectTools Security Manager icon ● From the "Credential Manager" page of ProtectTools Security Manager, by clicking the Log On link in the upper-right corner of the window 2. Follow the on-screen instructions to log on to Credential Manager. Logging
  • Compaq dc5850 | HP Protect Tools Guide - Page 19
    Smart Card or Token. The Credential Manager Registration Wizard opens. 4. Follow the on-screen instructions. Registering a USB eToken 1. Be sure that the USB eToken drivers are installed. NOTE: Refer to the USB eToken user guide for more information. 2. Select Start > All Programs > HP ProtectTools
  • Compaq dc5850 | HP Protect Tools Guide - Page 20
    works very much like a Java Card or USB eToken. The token is saved either on the computer hard drive or in the Windows registry. When you log on with 4. Follow the on-screen instructions. Changing the Windows logon password 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In
  • Compaq dc5850 | HP Protect Tools Guide - Page 21
    for the first time, the system automatically adds your local Windows user account as the account for the Windows Logon service. Logging on to Windows with Credential Manager You can use Credential Manager to log on to a Windows network or local account. 1. If you have registered your fingerprint to
  • Compaq dc5850 | HP Protect Tools Guide - Page 22
    Services and Applications. 3. In the right pane, click Windows Logon, and then click Add a Network Account. The Add Network Account Wizard opens. 4. Follow the on-screen instructions On to validate your authentication credentials with a Java Card, a fingerprint reader, or a token before logging on
  • Compaq dc5850 | HP Protect Tools Guide - Page 23
    Wizard opens. 4. Follow the on-screen instructions. Managing applications and credentials Modifying application properties 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Credential Manager, and then click Services and Applications. 3. In the right pane
  • Compaq dc5850 | HP Protect Tools Guide - Page 24
    > Export Script. 5. Follow the on-screen instructions to complete the export. 6. Click OK. Importing an application 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Credential Manager, and then click Services and Applications. 3. In the right pane, under
  • Compaq dc5850 | HP Protect Tools Guide - Page 25
    opens. 6. Follow the on-screen instructions. Removing protection from an application To remove restrictions from an application: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Credential Manager, and then click Services and Applications. 3. In the right
  • Compaq dc5850 | HP Protect Tools Guide - Page 26
    the Advanced tab and select the period of inactivity. 8. Click OK to close the application Properties dialog box. 9. Click OK. 20 Chapter 2 Credential Manager for HP ProtectTools
  • Compaq dc5850 | HP Protect Tools Guide - Page 27
    of credentials are required of either users or administrators. To specify how users or administrators log on: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Credential Manager, and then click Authentication and Credentials. 3. In the right pane, click
  • Compaq dc5850 | HP Protect Tools Guide - Page 28
    and Applications-Allows you to view the available services and modify the settings for those services. ● Security-Allows you to select the fingerprint reader software and adjust the security level of the fingerprint reader. ● Smart Cards and Tokens-Allows you to view and modify properties for
  • Compaq dc5850 | HP Protect Tools Guide - Page 29
    Example 1-Using the "Advanced Settings" page to allow Windows logon from Credential Manager 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Credential Manager, and then click Settings. 3. In the right pane, click the General tab. 4. Under Select the
  • Compaq dc5850 | HP Protect Tools Guide - Page 30
    the key hierarchy ● Support for third-party applications HP ProtectTools can use the embedded chip as an authentication factor when the user logs on to Windows. On select models, the TPM embedded security chip also enables enhanced BIOS security features accessed through BIOS Configuration for HP
  • Compaq dc5850 | HP Protect Tools Guide - Page 31
    Computer Setup utility. This procedure cannot be performed in BIOS Configuration for HP ProtectTools. To enable the embedded security chip: 1. File > Save Changes and Exit. Then follow the on-screen instructions. Initializing the embedded security chip In the initialization process for Embedded
  • Compaq dc5850 | HP Protect Tools Guide - Page 32
    User Initialization Wizard is not open, select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Embedded Security, The Embedded Security User Initialization Wizard opens. 4. Follow the on-screen instructions. NOTE: To use secure e-mail, you must first configure the
  • Compaq dc5850 | HP Protect Tools Guide - Page 33
    consider the following rules: ● Only files and folders on Windows partitions can be encrypted. Files and folders on MS-DOS To change the Basic User Key password: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Embedded Security, and then click
  • Compaq dc5850 | HP Protect Tools Guide - Page 34
    the on-screen instructions. Changing the owner password To change the owner password: 1. Select Start > All Programs > HP ProtectTools Security Manager. disabling-With this option, embedded security is automatically reenabled on Windows restart. This option is available to all users by default.
  • Compaq dc5850 | HP Protect Tools Guide - Page 35
    then click OK. Enabling Embedded Security after permanent disable To enable Embedded Security after permanently disabling it: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Embedded Security, and then click Advanced. 3. In the right pane, under Embedded
  • Compaq dc5850 | HP Protect Tools Guide - Page 36
    Manager, Drive Encryption, HP BIOS, or any number of third party access points. With Java Card Security, you can accomplish the following tasks: ● Access Java Card Security features ● Work with the Computer Setup utility to enable Java Card authentication in a power-on environment ● Configure
  • Compaq dc5850 | HP Protect Tools Guide - Page 37
    , some of the features may be unavailable or incorrectly displayed. In addition, the card reader drivers must be correctly installed, as shown in Windows Device Manager. To select the card reader: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Java
  • Compaq dc5850 | HP Protect Tools Guide - Page 38
    only) The "Advanced" page allows you to perform the following tasks: ● Assign a Java Card PIN ● Assign a name to a Java Card ● Set power-on authentication ● Back up and restore Java Cards NOTE: You must have Windows administrator privileges in order to display the "Advanced" page. Assigning a Java
  • Compaq dc5850 | HP Protect Tools Guide - Page 39
    click OK and follow the on-screen instructions in the HP ProtectTools Backup Wizard to create a recovery file now. NOTE: For more information, see "HP ProtectTools Backup and Restore on page 9." Creating a user Java Card NOTE: Power-on authentication and an administrator card must be set up in order
  • Compaq dc5850 | HP Protect Tools Guide - Page 40
    Type a PIN for the user Java Card, and then click OK. Disabling Java Card power-on authentication When you disable Java Card power-on authentication, the use of the Java Card is no longer needed to access the computer. 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left
  • Compaq dc5850 | HP Protect Tools Guide - Page 41
    security and configuration settings giving users Windows access to system security features that are managed by Computer Setup. The options within BIOS Configuration for HP ProtectTools are: ● File ● Storage ● Security ● Power ● Advanced NOTE: Support for specific Computer Setup options may vary
  • Compaq dc5850 | HP Protect Tools Guide - Page 42
    option within BIOS Configuration for HP ProtectTools provides system information such as processor type, system BIOS name and version, chassis, serial number, etc. The only File data that can be edited is the asset tracking number. All other data is read only. 36 Chapter 5 BIOS Configuration for
  • Compaq dc5850 | HP Protect Tools Guide - Page 43
    Storage The Storage option within BIOS Configuration for HP ProtectTools provides information about all bootable devices configured in the computer system and allows you to specify settings for these devices. The settings accessible in
  • Compaq dc5850 | HP Protect Tools Guide - Page 44
    Security option within BIOS Configuration for HP ProtectTools is the central location for all settings related to security and passwords. The settings included are: ● Setup Password ● Power-On Password ● Password Options ● Smart Cover (some models) ● Device Security ● Network Service Boot ● System
  • Compaq dc5850 | HP Protect Tools Guide - Page 45
    Power The Power option within BIOS Configuration for HP ProtectTools provides settings that control power management at a hardware level. Settings included are: ● OS Power Management ● Hardware Power Management ● Thermal Power 39
  • Compaq dc5850 | HP Protect Tools Guide - Page 46
    The settings within the Advanced option of BIOS Configuration for HP ProtectTools are intended for advanced users. These settings include: ● Power-On Options ● Execute Memory Test (some models) ● BIOS Power-On ● Onboard Devices ● PCI Devices ● PCI VGA Configuration ● Bus Options ● Device Options
  • Compaq dc5850 | HP Protect Tools Guide - Page 47
    to administrators only. Device Access Manager provides customizable control of data storage and transmission hardware (USB, COM & LPT ports, CD drives, network interface cards, personal music players, etc.) Device Access Manager can also manage users and user groups to provide read, write, allow or
  • Compaq dc5850 | HP Protect Tools Guide - Page 48
    must be running. When you first attempt to apply device profiles, HP ProtectTools Security Manager opens a dialog box to ask if you would like to start the background service. Click Yes to start the background service and set it to start automatically whenever the system boots. 42 Chapter 6 Device
  • Compaq dc5850 | HP Protect Tools Guide - Page 49
    of device for all non-administrators: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Device Access Manager, to deny access. 4. Click Apply. NOTE: If background service is not running, it attempts to start now. Click Yes to allow it. 5. Click
  • Compaq dc5850 | HP Protect Tools Guide - Page 50
    specific users or groups of users to be granted or denied access to types of devices. Some classes allow the option to configure Read Only or Write access. Adding a user or a group 1. Select Start > All Programs > HP 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left
  • Compaq dc5850 | HP Protect Tools Guide - Page 51
    to all other members of that user's group for all devices in the class. To allow access to a specific device for one user but not the group: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Device Access Manager, and then click Device Class Configuration
  • Compaq dc5850 | HP Protect Tools Guide - Page 52
    7 Drive Encryption for HP ProtectTools Drive encryption for HP ProtectTools can encode every bit of to access the data on encrypted drives unless you have registered with the Drive Encryption recovery service (see "Recovery on page 49"). Reinstalling the Drive Encryption module will not enable you
  • Compaq dc5850 | HP Protect Tools Guide - Page 53
    , click Drive Encryption, and then click Encryption Management. 3. In the right pane, click Activate. The Drive Encryption for HP ProtectTools Wizard opens. 4. Follow the on-screen instructions to activate encryption. NOTE: You will need to specify a diskette, flash storage device, or some other USB
  • Compaq dc5850 | HP Protect Tools Guide - Page 54
    a user as follows: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click Drive Windows Password, and then click Next. 5. Select a new authentication method, and then click Finish. 6. If you selected a Java Card as the authentication method, type the Java Card
  • Compaq dc5850 | HP Protect Tools Guide - Page 55
    encrypted drives. You may, however, register with the Drive Encryption recovery service to enable you to access your computer if you forget your password. then click Next. The Drive Encryption for HP ProtectTools Wizard opens. 5. Follow the on-screen instructions to back up the Drive Encryption keys.
  • Compaq dc5850 | HP Protect Tools Guide - Page 56
    Sign On, which is available in the Credential Manager help files. If a specific Single Sign On cannot be disabled for a given application, call HP Service and Support and request 3rd level support through your HP Service contact. No option to Browse for Virtual Token during the login process
  • Compaq dc5850 | HP Protect Tools Guide - Page 57
    see the Microsoft Windows login. User can log in at this point. ● With Java Card/token, the following workaround allows the user to enable/disable opening of Credential Manager upon Java Card insertion. 1. Click Advanced Settings. 2. Click Service & Applications. 3. Click Java Cards and Tokens
  • Compaq dc5850 | HP Protect Tools Guide - Page 58
    The purpose of the alert is to notify the user that Java Card authentication is available, if it is configured. Unable to log into Credential Manager after transitioning from sleep mode to hibernation on Windows XP Service Pack 1 only. After allowing system to transition into hibernation and sleep
  • Compaq dc5850 | HP Protect Tools Guide - Page 59
    installation. The TPM embedded security chip can be enabled in the BIOS Computer Setup utility, BIOS Configuration for ProtectTools, or HP with EFS in Windows 2000 are not shown highlighted in green. Encrypted folders with EFS are highlighted in green in Windows XP, but not in Windows 2000. This
  • Compaq dc5850 | HP Protect Tools Guide - Page 60
    , this does not occur. This is as designed. It is a feature of EFS in Windows 2000. EFS in Windows XP, by default, will not let the user open files/folders without a password. Software should not be installed on a restore with FAT32 partition. If the user attempts to restore the hard drive using
  • Compaq dc5850 | HP Protect Tools Guide - Page 61
    Perform the following procedure to recover from the power loss: NOTE: Use the Arrow keys to removed by a user who knows the password. However, HP strongly recommends having the Computer Setup (F10) Utility password only in the first administrator account on Windows 2000. The Data Recovery Policy is
  • Compaq dc5850 | HP Protect Tools Guide - Page 62
    RAM. Root Cause suspicion is a timing issue in low memory configurations. Integrated graphics uses UMA architecture taking 8 MB of memory encouraged to increase memory configuration (HP does not ship installation wizard are truncated. HP password to be supplied. Secure e-mail is supported, even if
  • Compaq dc5850 | HP Protect Tools Guide - Page 63
    PC overwrites Emergency Recovery and Emergency Token files. The new files are useless for recovery. Running Large Scale Deployment on any previously initialized HP process proceeds. ● Resets the chip to factory settings in the BIOS. ● Reboots the computer. ● Begins to restore Embedded Security.
  • Compaq dc5850 | HP Protect Tools Guide - Page 64
    TPM in BIOS: Open the created manually. HP HP Notebook 1.1B implementations, as well as supporting HP Desktop 1.2 implementations. HP will address this issue in future releases. This option to disable is still supported in the software interface for TPM 1.1 platforms. 58 Chapter 8 Troubleshooting
  • Compaq dc5850 | HP Protect Tools Guide - Page 65
    Spec. Version = 1.2 ● Vendor = Broadcom Corporation ● FW Version = 2.18 (or greater) ● TPM Device driver library version 2.0.0.9 (or greater) 5. If the FW version does not match 2.18, download and update the TPM firmware. The TPM Firmware SoftPaq is a support download available at http://www.hp
  • Compaq dc5850 | HP Protect Tools Guide - Page 66
    TPM password, but, if the user presses F10 to access the BIOS, Read rights access only is granted. To be able to write to BIOS, the user must enter the BIOS password instead of the TPM password at the Power-on Authentication window. The BIOS asks for both the old and new passwords through Computer
  • Compaq dc5850 | HP Protect Tools Guide - Page 67
    settings that can be saved and applied to other accounts. BIOS security mode Setting in Java Card Security that, when enabled, requires the use of a Java Card and a valid PIN for user authentication. Certification authority Service that issues the certificates required to run a public key
  • Compaq dc5850 | HP Protect Tools Guide - Page 68
    media. This method is standard with Windows Vista and Windows XP. Personal secure drive (PSD) Provides a protected storage area for sensitive information. Power-on authentication Security feature that requires some form of authentication, such as a Java Card, security chip, or password, when the
  • Compaq dc5850 | HP Protect Tools Guide - Page 69
    26 Credential Manager 12 administrator tasks Credential Manager 21 Java Card 32 advanced BIOS configuration for HP ProtectTools 40 advanced tasks Credential Manager 21 Device Access Manager 44 Embedded Security 28 Java Card 32 B background service, Device Access Manager 42 backing up and restoring
  • Compaq dc5850 | HP Protect Tools Guide - Page 70
    Embedded Security, permanently 29 Java Card power-on authentication 34 Drive Encryption for HP ProtectTools adding a user 48 changing a token 48 changing authentication 48 changing encryption 47 decrypting a drive 47 Drive Encryption keys 49 Drive Encryption recovery service 49 encrypting a drive 47
  • Compaq dc5850 | HP Protect Tools Guide - Page 71
    18 manual registration 17 modifying application properties 17 removing applications 17 storage BIOS configuration for HP ProtectTools 37 T targeted theft, protecting against 5 token, Credential Manager 13 TPM chip enabling 25 initializing 25 troubleshooting Credential Manager for HP ProtectTools
  • Compaq dc5850 | HP Protect Tools Guide - Page 72
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
HP ProtectTools
User Guide