Home » Compaq Manuals » Desktops » Compaq dc7900 » Manual Viewer

Compaq dc7900 HP ProtectTools User Guide - Page 22

HP ProtectTools Security Manager for Administrators, CAUTION

Add to My Manuals
Save this manual to your list of manuals

Page 22 highlights

5. One or more of the following pages will be displayed, depending on the levels of security you chose in step 4. ● Protect your Windows account - The Windows password is required because Security Manager must synchronize the password for each level of security. Enter and confirm a Windows password, or enter your password if one has already been established, and then click Next. ● Protect your system before Windows start-up (optional) - If you or the user knows the BIOS administrator password, the BIOS administrator password can be entered. If the BIOS administrator password is entered, the Windows administrator or user becomes a BIOS administrator. NOTE: If a BIOS administrator password does not exist, you must establish one before you can continue. When a BIOS administrator password is entered, you will become a BIOS administrator. Enter and confirm a BIOS administrator password, or enter the password if one has already been established. Then click Next. ● Protect your data by encrypting your hard drive - You must use a USB storage device to save the encryption key. Select the drive(s) to be encrypted (at least one drive must be selected), insert the storage device into the appropriate slot, select the storage device where the encryption key will be saved, then click Next. 6. Choose one or more security login methods on the "Set Security Login Methods" page. a. Under Step 1, select one or more security login methods. NOTE: The selections apply to both administrators and users. b. Under Step 2, if you want to increase security, select the check box to require all of the security login methods you selected under Step 1 when logging in to the computer. If you want any one of the selected security login methods to be permissible when logging in to the computer, do not select the check box. CAUTION: If you select the check box and a user has not yet configured his or her login methods (Windows password, fingerprint authentication, and/or the HP ProtectTools Java™ Card), that user will not be able to log in to the computer. It is recommended that all users first configure their login methods before this option is selected. c. Click Next. A summary page opens, allowing you to review your selections. 7. Click Enable on the "Review and Enable Security Settings" page. When you click Enable, the computer sets your security choices. You will not be able to return to any of the preceding wizard pages until security setup is complete. After you complete the wizard, you can change your settings by running the wizard again. 12 Chapter 2 HP ProtectTools Security Manager for Administrators ENWW

Section	Page
Introduction to security	11
HP ProtectTools features	12
Accessing HP ProtectTools Security	14
Achieving key security objectives	14
Protecting against targeted theft	15
Restricting access to sensitive data	15
Preventing unauthorized access from internal or external locations	15
Creating strong password policies	16
Additional security elements	17
Assigning security roles	17
Managing HP ProtectTools passwords	17
Creating a secure password	19
Backing up and restoring HP ProtectTools credentials	19
Backing up credentials and settings	19
HP ProtectTools Security Manager for Administrators	20
About HP ProtectTools Security Manager for Administrators	20
Getting Started - Configuring HP ProtectTools Security Manager for Administrators	21
Getting Started - Configuring user security login methods	23
Logging in after Security Manager is configured	24
Administrator Tools - Managing users (administrator task)	25
Adding a user	25
Removing a user	25
Checking user status	26
Backup and Restore	26
Using the Backup wizard	27
Security Modules	27
File Location	27
Backup Complete	28
Using the Restore wizard	28
File Location	28
Security Modules	28
Confirmation	29
Restore Complete	29
Settings	29
Credential Manager for HP ProtectTools	30
Setup procedures	30
Logging on to Credential Manager	30
Using the Credential Manager Logon Wizard	31
Registering credentials	31
Registering fingerprints	31
Setting up the fingerprint reader	31
Using your registered fingerprint to log on to Windows	31
Registering a Smart Card or Token	32
Registering other credentials	32
General tasks	33
Creating a virtual token	33
Changing the Windows logon password	33
Changing a token PIN	33
Locking the computer (workstation)	34
Using Windows Logon	34
Logging on to Windows with Credential Manager	34
Using Single Sign On	35
Registering a new application	35
Using automatic registration	35
Using manual (drag and drop) registration	36
Managing applications and credentials	36
Modifying application properties	36
Removing an application from Single Sign On	36
Exporting an application	36
Importing an application	37
Modifying credentials	37
Using Application Protection	38
Restricting access to an application	38
Removing protection from an application	38
Changing restriction settings for a protected application	39
Advanced tasks (administrator only)	39
Configuring credential properties	39
Configuring Credential Manager settings	40
Example 1—Using the “Advanced Settings” page to allow Windows logon from Credential Manager	40
Example 2—Using the “Advanced Settings” page to require user verification before Single Sign On	41
Drive Encryption for HP ProtectTools	42
Setup procedures	42
Opening Drive Encryption	42
General tasks	42
Activating Drive Encryption	42
Deactivating Drive Encryption	42
Logging in after Drive Encryption is activated	42
Advanced tasks	43
Managing Drive Encryption (administrator task)	43
Activating a TPM-protected password	43
Encrypting or decrypting individual drives	43
Backup and recovery (administrator task)	43
Creating backup keys	43
Registering for online recovery	44
Managing an existing online recovery account	45
Performing a recovery	45
Privacy Manager for HP ProtectTools	47
Opening Privacy Manager	47
Setup procedures	48
Managing Privacy Manager Certificates	48
Requesting and installing a Privacy Manager Certificate	48
Requesting a Privacy Manager Certificate	48
Installing a Privacy Manager Certificate	48
Viewing Privacy Manager Certificate details	49
Renewing a Privacy Manager Certificate	49
Setting a default Privacy Manager Certificate	49
Deleting a Privacy Manager Certificate	49
Restoring a Privacy Manager Certificate	50
Revoking your Privacy Manager Certificate	50
Managing Trusted Contacts	50
Adding Trusted Contacts	51
Adding a Trusted Contact	51
Adding Trusted Contacts using your Microsoft Outlook address book	52
Viewing Trusted Contact details	52
Deleting a Trusted Contact	52
Checking revocation status for a Trusted Contact	53
General tasks	53
Using Privacy Manager in Microsoft Office	53
Using Privacy Manager in Microsoft Outlook	56
Using Privacy Manager in Windows Live Messenger	57
Advanced tasks	62
Migrating Privacy Manager Certificates and Trusted Contacts to a different computer	62
Exporting Privacy Manager Certificates and Trusted Contacts	62
Importing Privacy Manager Certificates and Trusted Contacts	62
File Sanitizer for HP ProtectTools	63
Setup procedures	64
Opening File Sanitizer	64
Setting a free space bleaching schedule	64
Selecting or creating a shred profile	64
Selecting a predefined shred profile	64
Customizing a shred profile	65
Customizing a simple delete profile	65
Setting a shred schedule	66
Setting a free space bleaching schedule	67
Selecting or creating a shred profile	67
Selecting a predefined shred profile	67
Customizing a shred profile	67
Customizing a simple delete profile	68
General tasks	69
Using a key sequence to initiate shredding	69
Using the File Sanitizer icon	69
Manually shredding one asset	70
Manually shredding all selected items	70
Manually activating free space bleaching	70
Aborting a shred or free space bleaching operation	71
Viewing the log files	71
Java Card Security for HP ProtectTools	72
General tasks	72
Changing a Java Card PIN	72
Selecting the card reader	73
Advanced tasks (administrators only)	73
Assigning a Java Card PIN	73
Assigning a name to a Java Card	74
Setting power-on authentication	74
Enabling Java Card power-on authentication and creating an administrator Java Card	75
Creating a user Java Card	76
Disabling Java Card power-on authentication	76
BIOS Configuration for HP ProtectTools	77
General tasks	78
Accessing BIOS Configuration	78
Viewing or changing settings	79
File	79
Storage	79
Security	79
Power	80
Advanced	80
Embedded Security for HP ProtectTools	81
Setup procedures	82
Enabling the embedded security chip in Computer Setup	82
Initializing the embedded security chip	83
Setting up the basic user account	83
General tasks	84
Using the Personal Secure Drive	84
Encrypting files and folders	84
Sending and receiving encrypted e-mail	84
Changing the Basic User Key password	85
Advanced tasks	85
Backing up and restoring	85
Creating a backup file	85
Restoring certification data from the backup file	85
Changing the owner password	86
Resetting a user password	86
Enabling and disabling Embedded Security	86
Permanently disabling Embedded Security	86
Enabling Embedded Security after permanent disable	86
Migrating keys with the Migration Wizard	87
Device Access Manager for HP ProtectTools	88
Starting background service	88
Simple configuration	88
Device class configuration (advanced)	89
Adding a user or a group	89
Removing a user or a group	89
Denying access to a user or group	89
Troubleshooting	90
Credential Manager for HP ProtectTools	90
Embedded Security for HP ProtectTools	93
Device Access Manager for HP ProtectTools	99
Miscellaneous	100
Glossary	103

Match case Limit results 1 per page

One or more of the following pages will be displayed, depending on the levels of security you chose

in step 4.

●

Protect your Windows account - The Windows password is required because Security

Manager must synchronize the password for each level of security.

Enter and confirm a Windows password, or enter your password if one has already been

established, and then click

●

Protect your system before Windows start-up (optional) - If you or the user knows the BIOS

administrator password, the BIOS administrator password can be entered. If the BIOS

administrator password is entered, the Windows administrator or user becomes a BIOS

administrator.

NOTE:

If a BIOS administrator password does not exist, you must establish one before you

can continue. When a BIOS administrator password is entered, you will become a BIOS

administrator.

Enter and confirm a BIOS administrator password, or enter the password if one has already

been established. Then click

●

Protect your data by encrypting your hard drive - You must use a USB storage device to save

the encryption key. Select the drive(s) to be encrypted (at least one drive must be selected),

insert the storage device into the appropriate slot, select the storage device where the

encryption key will be saved, then click

Choose one or more security login methods on the “Set Security Login Methods” page.

Under Step 1, select one or more security login methods.

NOTE:

The selections apply to both administrators and users.

Under Step 2, if you want to increase security, select the check box to require

all

of the security

If you want

any one

of the selected security login methods to be permissible when logging in

to the computer, do not select the check box.

CAUTION:

If you select the check box and a user has not yet configured his or her login

methods (Windows password, fingerprint authentication, and/or the HP ProtectTools Java™

Card), that user will not be able to log in to the computer. It is recommended that all users first

configure their login methods before this option is selected.

Click

. A summary page opens, allowing you to review your selections.

Click

Enable

on the “Review and Enable Security Settings” page.

When you click

Enable

, the computer sets your security choices. You will not be able to return to

any of the preceding wizard pages until security setup is complete. After you complete the wizard,

you can change your settings by running the wizard again.

Chapter 2

HP ProtectTools Security Manager for Administrators

ENWW