Compaq dc7900 HP ProtectTools User Guide - Page 5

Table of contents

1

Introduction to security

HP ProtectTools features

.....................................................................................................................

2

Accessing HP ProtectTools Security

....................................................................................................

4

Achieving key security objectives

.........................................................................................................

4

Protecting against targeted theft

..........................................................................................

5

Restricting access to sensitive data

.....................................................................................

5

Preventing unauthorized access from internal or external locations

...................................

5

Creating strong password policies

.......................................................................................

6

Additional security elements

.................................................................................................................

7

Assigning security roles

.......................................................................................................

7

Managing HP ProtectTools passwords

................................................................................

7

Creating a secure password

...............................................................................

9

Backing up and restoring HP ProtectTools credentials

.......................................................

9

Backing up credentials and settings

....................................................................

9

2

HP ProtectTools Security Manager for Administrators

About HP ProtectTools Security Manager for Administrators

............................................................

10

Getting Started - Configuring HP ProtectTools Security Manager for Administrators

........................

11

Getting Started - Configuring user security login methods

.................................................................

13

Logging in after Security Manager is configured

................................................................................

14

Administrator Tools - Managing users (administrator task)

................................................................

15

Adding a user

.....................................................................................................................

15

Removing a user

................................................................................................................

15

Checking user status

.........................................................................................................

16

Backup and Restore

...........................................................................................................................

16

Using the Backup wizard

....................................................................................................................

17

Security Modules

...............................................................................................................

17

File Location

......................................................................................................................

17

Backup Complete

..............................................................................................................

18

Using the Restore wizard

...................................................................................................................

18

File Location

......................................................................................................................

18

Security Modules

...............................................................................................................

18

Confirmation

......................................................................................................................

19

Restore Complete

..............................................................................................................

19

ENWW

v

Section	Page
Introduction to security	11
HP ProtectTools features	12
Accessing HP ProtectTools Security	14
Achieving key security objectives	14
Protecting against targeted theft	15
Restricting access to sensitive data	15
Preventing unauthorized access from internal or external locations	15
Creating strong password policies	16
Additional security elements	17
Assigning security roles	17
Managing HP ProtectTools passwords	17
Creating a secure password	19
Backing up and restoring HP ProtectTools credentials	19
Backing up credentials and settings	19
HP ProtectTools Security Manager for Administrators	20
About HP ProtectTools Security Manager for Administrators	20
Getting Started - Configuring HP ProtectTools Security Manager for Administrators	21
Getting Started - Configuring user security login methods	23
Logging in after Security Manager is configured	24
Administrator Tools - Managing users (administrator task)	25
Adding a user	25
Removing a user	25
Checking user status	26
Backup and Restore	26
Using the Backup wizard	27
Security Modules	27
File Location	27
Backup Complete	28
Using the Restore wizard	28
File Location	28
Security Modules	28
Confirmation	29
Restore Complete	29
Settings	29
Credential Manager for HP ProtectTools	30
Setup procedures	30
Logging on to Credential Manager	30
Using the Credential Manager Logon Wizard	31
Registering credentials	31
Registering fingerprints	31
Setting up the fingerprint reader	31
Using your registered fingerprint to log on to Windows	31
Registering a Smart Card or Token	32
Registering other credentials	32
General tasks	33
Creating a virtual token	33
Changing the Windows logon password	33
Changing a token PIN	33
Locking the computer (workstation)	34
Using Windows Logon	34
Logging on to Windows with Credential Manager	34
Using Single Sign On	35
Registering a new application	35
Using automatic registration	35
Using manual (drag and drop) registration	36
Managing applications and credentials	36
Modifying application properties	36
Removing an application from Single Sign On	36
Exporting an application	36
Importing an application	37
Modifying credentials	37
Using Application Protection	38
Restricting access to an application	38
Removing protection from an application	38
Changing restriction settings for a protected application	39
Advanced tasks (administrator only)	39
Configuring credential properties	39
Configuring Credential Manager settings	40
Example 1—Using the “Advanced Settings” page to allow Windows logon from Credential Manager	40
Example 2—Using the “Advanced Settings” page to require user verification before Single Sign On	41
Drive Encryption for HP ProtectTools	42
Setup procedures	42
Opening Drive Encryption	42
General tasks	42
Activating Drive Encryption	42
Deactivating Drive Encryption	42
Logging in after Drive Encryption is activated	42
Advanced tasks	43
Managing Drive Encryption (administrator task)	43
Activating a TPM-protected password	43
Encrypting or decrypting individual drives	43
Backup and recovery (administrator task)	43
Creating backup keys	43
Registering for online recovery	44
Managing an existing online recovery account	45
Performing a recovery	45
Privacy Manager for HP ProtectTools	47
Opening Privacy Manager	47
Setup procedures	48
Managing Privacy Manager Certificates	48
Requesting and installing a Privacy Manager Certificate	48
Requesting a Privacy Manager Certificate	48
Installing a Privacy Manager Certificate	48
Viewing Privacy Manager Certificate details	49
Renewing a Privacy Manager Certificate	49
Setting a default Privacy Manager Certificate	49
Deleting a Privacy Manager Certificate	49
Restoring a Privacy Manager Certificate	50
Revoking your Privacy Manager Certificate	50
Managing Trusted Contacts	50
Adding Trusted Contacts	51
Adding a Trusted Contact	51
Adding Trusted Contacts using your Microsoft Outlook address book	52
Viewing Trusted Contact details	52
Deleting a Trusted Contact	52
Checking revocation status for a Trusted Contact	53
General tasks	53
Using Privacy Manager in Microsoft Office	53
Using Privacy Manager in Microsoft Outlook	56
Using Privacy Manager in Windows Live Messenger	57
Advanced tasks	62
Migrating Privacy Manager Certificates and Trusted Contacts to a different computer	62
Exporting Privacy Manager Certificates and Trusted Contacts	62
Importing Privacy Manager Certificates and Trusted Contacts	62
File Sanitizer for HP ProtectTools	63
Setup procedures	64
Opening File Sanitizer	64
Setting a free space bleaching schedule	64
Selecting or creating a shred profile	64
Selecting a predefined shred profile	64
Customizing a shred profile	65
Customizing a simple delete profile	65
Setting a shred schedule	66
Setting a free space bleaching schedule	67
Selecting or creating a shred profile	67
Selecting a predefined shred profile	67
Customizing a shred profile	67
Customizing a simple delete profile	68
General tasks	69
Using a key sequence to initiate shredding	69
Using the File Sanitizer icon	69
Manually shredding one asset	70
Manually shredding all selected items	70
Manually activating free space bleaching	70
Aborting a shred or free space bleaching operation	71
Viewing the log files	71
Java Card Security for HP ProtectTools	72
General tasks	72
Changing a Java Card PIN	72
Selecting the card reader	73
Advanced tasks (administrators only)	73
Assigning a Java Card PIN	73
Assigning a name to a Java Card	74
Setting power-on authentication	74
Enabling Java Card power-on authentication and creating an administrator Java Card	75
Creating a user Java Card	76
Disabling Java Card power-on authentication	76
BIOS Configuration for HP ProtectTools	77
General tasks	78
Accessing BIOS Configuration	78
Viewing or changing settings	79
File	79
Storage	79
Security	79
Power	80
Advanced	80
Embedded Security for HP ProtectTools	81
Setup procedures	82
Enabling the embedded security chip in Computer Setup	82
Initializing the embedded security chip	83
Setting up the basic user account	83
General tasks	84
Using the Personal Secure Drive	84
Encrypting files and folders	84
Sending and receiving encrypted e-mail	84
Changing the Basic User Key password	85
Advanced tasks	85
Backing up and restoring	85
Creating a backup file	85
Restoring certification data from the backup file	85
Changing the owner password	86
Resetting a user password	86
Enabling and disabling Embedded Security	86
Permanently disabling Embedded Security	86
Enabling Embedded Security after permanent disable	86
Migrating keys with the Migration Wizard	87
Device Access Manager for HP ProtectTools	88
Starting background service	88
Simple configuration	88
Device class configuration (advanced)	89
Adding a user or a group	89
Removing a user or a group	89
Denying access to a user or group	89
Troubleshooting	90
Credential Manager for HP ProtectTools	90
Embedded Security for HP ProtectTools	93
Device Access Manager for HP ProtectTools	99
Miscellaneous	100
Glossary	103

Compaq dc7900 HP ProtectTools User Guide - Page 5

Table of contents

Page 5 highlights