HP Dc5850 HP Protect Tools Guide - Page 59

Short description Details Solution Restoring Embedded Credential Manager fails to register any The HP Credential Manager for ProtectTools fails to Security causes credentials after the ROM is restored to access the TPM if the ROM was reset to factory settings Credential Manager to fail. factory settings. after the Credential Manager installation. The TPM embedded security chip can be enabled in the BIOS Computer Setup utility, BIOS Configuration for ProtectTools, or HP Client Manager. To enable the TPM embedded security chip: 1. Open Computer Setup by turning on or restarting the computer, and then pressing F10 while the F10 = ROM Based Setup message is displayed in the lower-left corner of the screen. 2. Use the arrow keys to select Security > Setup Password. Set a password. 3. Select Embedded Security Device. 4. Use the arrow keys to select Embedded Security Device-Disable. Use the arrow keys to change it to Embedded Security Device-Enable. 5. Select Enable > Save changes and exit. HP is investigating resolution options for future customer software releases. Security Restore Identity process loses association with virtual token. When user restores identity, Credential Manager can lose association with the location of the virtual token at login screen. Even though Credential Manager has the virtual token registered, user must reregister the token to restore association. This is currently by design. When uninstalling Credential Manager without keeping identities, the system (server) part of the token is destroyed, so the token cannot be used anymore for logon, even if the client part of the token is restored through identity restore. HP is investigating long-term options for resolution. Embedded Security for HP ProtectTools Short description Details Solution Encrypting folders, sub folders, and files on PSD causes error message. If the user copies files and folders to the PSD and tries to encrypt folders/files or folders/subfolders, the Error Applying Attributes message appears. The user can encrypt the same files on the C:\ drive on an extra installed hard drive. This is as designed. Moving files/folders to the PSD automatically encrypts them. There is no need to "double-encrypt" the files/ folders. Attempting to double-encrypt them using on the PSD using EFS will produce this error message. Cannot Take Ownership With Another OS In MultiBoot Platform. If a drive is set up for multiple OS boot, ownership can only be taken with the platform initialization wizard in one operating system. This is as designed, for security reasons. Unauthorized administrator can view, delete, rename, or move the contents of encrypted EFS folders. Encrypting a folder does not stop an unauthorized user with administrative rights to view, delete, or move contents of the folder. This is as designed. It is a feature of EFS, not the Embedded Security TPM. Embedded Security uses Microsoft EFS software, and EFS preserves file/folder access rights for all administrators. Encrypted folders with EFS in Windows 2000 are not shown highlighted in green. Encrypted folders with EFS are highlighted in green in Windows XP, but not in Windows 2000. This is as designed. It is a feature of EFS that it does not highlight encrypted folders in Windows 2000, but it does in Windows XP. Embedded Security for HP ProtectTools 53