Home » HP Manuals » Inkjet Printers » HP 5850 » Manual Viewer

HP 5850 HP Protect Tools Guide - Page 11

Achieving key security objectives, Protecting against targeted theft - review

UPC - 844844844303

Add to My Manuals
Save this manual to your list of manuals

Page 11 highlights

Achieving key security objectives The HP ProtectTools modules can work together to provide solutions for a variety of security issues, including the following key security objectives: ● Protecting against targeted theft ● Restricting access to sensitive data ● Preventing unauthorized access from internal or external locations ● Creating and using strong passwords Protecting against targeted theft An example of this type of incident would be the targeted theft of a computer containing confidential data and customer information in a cubicle or open environment. The following features help protect against targeted theft: ● The pre-boot authentication feature, if enabled, helps prevent access to the operating system. See the following procedures: ◦ "Assigning a name to a Java Card on page 32" ◦ "Device Access Manager for HP ProtectTools on page 41 " ◦ "Drive Encryption for HP ProtectTools on page 46" ● DriveLock helps ensure that data cannot be accessed even if the hard drive is removed and installed into an unsecured system. Refer to "Security on page 38". ● The Personal Secure Drive feature, provided by the Embedded Security for HP ProtectTools module, encrypts sensitive data to help ensure it cannot be accessed without authentication. See the following procedures: ◦ Embedded Security "Setup procedures on page 25" ◦ "Using the Personal Secure Drive on page 27" Restricting access to sensitive data Suppose a contractor is working onsite and has been given computer access to review sensitive financial data; you do not want the contractor to be able to print the files or save them to a writeable device such as a CD. The following feature helps restrict access to data: ● Device Access Manager for HP ProtectTools allows IT managers to restrict access to writeable devices so sensitive information cannot be printed or copied from the hard drive onto removable media. See "Device class configuration (advanced) on page 44." ● DriveLock helps ensure that data cannot be accessed even if the hard drive is removed and installed into an unsecured system. Refer to "Security on page 38". Achieving key security objectives 5

Section	Page
Introduction to security	7
HP ProtectTools features	8
Accessing HP ProtectTools Security	10
Achieving key security objectives	11
Protecting against targeted theft	11
Restricting access to sensitive data	11
Preventing unauthorized access from internal or external locations	12
Creating and using strong passwords	12
Additional security elements	13
Assigning security roles	13
Managing HP ProtectTools passwords	13
Creating a secure password	14
HP ProtectTools Backup and Restore	15
Backing up credentials and settings	15
Restoring credentials	16
Configuring settings	16
Credential Manager for HP ProtectTools	17
Setup procedures	18
Logging on to Credential Manager	18
Using the Credential Manager Logon Wizard	18
Logging on for the first time	18
Registering credentials	18
Registering fingerprints	18
Setting up the fingerprint reader	19
Using your registered fingerprint to log on to Windows	19
Registering a Java Card, USB eToken, or virtual token	19
Registering a USB eToken	19
Registering other credentials	19
General tasks	20
Creating a virtual token	20
Changing the Windows logon password	20
Changing a token PIN	20
Managing identity	21
Clearing an identity from the system	21
Locking the computer	21
Using Windows Logon	21
Logging on to Windows with Credential Manager	21
Adding an account	22
Removing an account	22
Using Single Sign On	22
Registering a new application	22
Using automatic registration	22
Using manual (drag and drop) registration	23
Managing applications and credentials	23
Modifying application properties	23
Removing an application from Single Sign On	23
Exporting an application	24
Importing an application	24
Modifying credentials	24
Using Application Protection	25
Restricting access to an application	25
Removing protection from an application	25
Changing restriction settings for a protected application	25
Advanced tasks (administrator only)	27
Specifying how users and administrators log on	27
Configuring custom authentication requirements	27
Configuring credential properties	28
Configuring Credential Manager settings	28
Example 1—Using the “Advanced Settings” page to allow Windows logon from Credential Manager	29
Example 2—Using the “Advanced Settings” page to require user verification before Single Sign On	29
Embedded Security for HP ProtectTools	30
Setup procedures	31
Enabling the embedded security chip	31
Initializing the embedded security chip	31
Setting up the basic user account	32
General tasks	33
Using the Personal Secure Drive	33
Encrypting files and folders	33
Sending and receiving encrypted e-mail	33
Changing the Basic User Key password	33
Advanced tasks	34
Backing up and restoring	34
Creating a backup file	34
Restoring certification data from the backup file	34
Changing the owner password	34
Resetting a user password	34
Enabling and disabling Embedded Security	34
Permanently disabling Embedded Security	35
Enabling Embedded Security after permanent disable	35
Migrating keys with the Migration Wizard	35
Java Card Security for HP ProtectTools	36
General tasks	37
Changing a Java Card PIN	37
Selecting the card reader	37
Advanced tasks (administrators only)	38
Assigning a Java Card PIN	38
Assigning a name to a Java Card	38
Setting power-on authentication	38
Enabling Java Card power-on authentication and creating an administrator Java Card	39
Creating a user Java Card	39
Disabling Java Card power-on authentication	40
BIOS Configuration for HP ProtectTools	41
File	42
Storage	43
Security	44
Power	45
Advanced	46
Device Access Manager for HP ProtectTools	47
Starting background service	48
Simple configuration	49
Device class configuration (advanced)	50
Adding a user or a group	50
Removing a user or a group	50
Denying access to a user or group	50
Allowing access to a device class for one user of a group	50
Allowing access to a specific device for one user of a group	51
Drive Encryption for HP ProtectTools	52
Encryption management	53
User management	54
Recovery	55
Troubleshooting	56
Credential Manager for HP ProtectTools	56
Embedded Security for HP ProtectTools	59
Miscellaneous	65
Glossary	67

Match case Limit results 1 per page

Achieving key security objectives

The HP ProtectTools modules can work together to provide solutions for a variety of security issues,

including the following key security objectives:

●

Protecting against targeted theft

●

Restricting access to sensitive data

●

Preventing unauthorized access from internal or external locations

●

Creating and using strong passwords

Protecting against targeted theft

An example of this type of incident would be the targeted theft of a computer containing confidential

data and customer information in a cubicle or open environment. The following features help protect

against targeted theft:

●

The pre-boot authentication feature, if enabled, helps prevent access to the operating system. See

the following procedures:

◦

“

Assigning a name to a Java Card

on page

”

◦

“

Device Access Manager for HP ProtectTools

on page

”

◦

“

Drive Encryption for HP ProtectTools

on page

”

●

DriveLock helps ensure that data cannot be accessed even if the hard drive is removed and

installed into an unsecured system. Refer to “

Security

on page

”.

●

The Personal Secure Drive feature, provided by the Embedded Security for HP ProtectTools

module, encrypts sensitive data to help ensure it cannot be accessed without authentication. See

the following procedures:

◦

Embedded Security “

Setup procedures

on page

”

◦

“

Using the Personal Secure Drive

on page

”

Restricting access to sensitive data

Suppose a contractor is working onsite and has been given computer access to review sensitive financial

data; you do not want the contractor to be able to print the files or save them to a writeable device such

as a CD. The following feature helps restrict access to data:

●

Device Access Manager for HP ProtectTools allows IT managers to restrict access to writeable

devices so sensitive information cannot be printed or copied from the hard drive onto removable

media. See “

Device class configuration (advanced)

on page

.”

●

DriveLock helps ensure that data cannot be accessed even if the hard drive is removed and

installed into an unsecured system. Refer to “

Security

on page

”.

Achieving key security objectives