HP Dc5850 HP Protect Tools Guide - Page 62

Click Yes to, open Embedded Security

Page 62 highlights

Short description Details Solution certificate, it shows as non-trusted. While the certificate can be installed at this point by clicking the install button, installing it does not make it trusted. Intermittent encrypt and decrypt error occurs: The process cannot access the file because it is being used by another process. Extremely intermittent error during file encryption or decryption occurs due to the file being used by another process, even though that file or folder is not being processed by the operating system or other applications. To resolve the failure: 1. Restart the system. 2. Log off. 3. Log back in. Data loss in removable storage occurs if storage is removed prior to new data generation or transfer. Removing storage mediums such as a MultiBay hard drive still shows PSD availability and does not generate errors while adding/modifying data to the PSD. After system restart, the PSD does not reflect file changes that occurred while the removable storage was not available. The issue is only experienced if the user accesses the PSD, then removes the hard drive before completing new data generation or transfer. If the user attempts to access the PSD when the removable hard drive is not present, an error message is displayed stating that the device is not ready. During uninstall, if user has not initialized the Basic User and opens the Administration tool, the Disable option is not available and Uninstaller will not continue until the Administration tool is closed. The user has the option of uninstalling either without disabling the TPM or by first disabling the TPM (through Admin. tool), then uninstalling. Accessing the Admin tool requires Basic User Key initialization. If basic initialization has not occurred, all options are inaccessible to the user. Since the user has explicitly chosen to open the Admin tool (by clicking Yes in the dialog box prompting Click Yes to open Embedded Security Administration tool), uninstall waits until the Admin tool is closed. If user clicks No in that dialog box, then the Admin tool does not open at all and uninstall proceeds. The Admin tool is used for disabling the TPM chip, but that option is not available unless the Basic User Key has already been initialized. If it has not, then select OK or Cancel in order to continue with the uninstallation process. Intermittent system lockup occurs after creating PSD on 2 users accounts and using fast-user-switching in 128-MB system configurations. System may lock up with a black screen and non-responding keyboard and mouse instead of showing welcome (logon) screen when using fast-switching with minimal RAM. Root Cause suspicion is a timing issue in low memory configurations. Integrated graphics uses UMA architecture taking 8 MB of memory, leaving only 120 available to user. This 120 MB is shared by both users who are logged in and are fast-user-switching when error is generated. Workaround is to reboot system and customer is encouraged to increase memory configuration (HP does not ship 128-MB configurations by default with security modules). EFS User Authentication The EFS User Authentication password This is by design-to avoid issues with Microsoft EFS, (password request) times reopens after clicking OK or returning a 30-second watchdog timer was created to generate out with access denied. from standby state after timeout. the error message). Minor truncation during setup of Japanese is observed in functional description Functional descriptions during custom setup option during installation wizard are truncated. HP will correct this in a future release. EFS Encryption works without entering password in the prompt. By allowing prompt for User password to time out, encryption is still capable on a file or folder. The ability to encrypt does not require password authentication, since this is a feature of the Microsoft EFS encryption. The decryption will require the user password to be supplied. Secure e-mail is supported, even if Embedded security software and the wizard do not control settings of an e- This behavior is as designed. Configuration of TPM email settings does not prohibit editing encryption 56 Chapter 8 Troubleshooting

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72

Short description
Details
Solution
certificate, it shows as non-trusted. While
the certificate can be installed at this
point by clicking the install button,
installing it does not make it trusted.
Intermittent encrypt and
decrypt error occurs:
The
process cannot access
the file because it is
being used by another
process.
Extremely intermittent error during file
encryption or decryption occurs due to
the file being used by another process,
even though that file or folder is not being
processed by the operating system or
other applications.
To resolve the failure:
1.
Restart the system.
2.
Log off.
3.
Log back in.
Data loss in removable
storage occurs if storage
is removed prior to new
data generation or
transfer.
Removing storage mediums such as a
MultiBay hard drive still shows PSD
availability and does not generate errors
while adding/modifying data to the PSD.
After system restart, the PSD does not
reflect file changes that occurred while
the removable storage was not available.
The issue is only experienced if the user accesses the
PSD, then removes the hard drive before completing
new data generation or transfer. If the user attempts to
access the PSD when the removable hard drive is not
present, an error message is displayed stating that
the
device is not ready
.
During uninstall, if user
has not initialized the
Basic User and opens the
Administration tool, the
Disable
option is not
available and Uninstaller
will not continue until the
Administration tool is
closed.
The user has the option of uninstalling
either without disabling the TPM or by
first disabling the TPM (through Admin.
tool), then uninstalling. Accessing the
Admin tool requires Basic User Key
initialization. If basic initialization has not
occurred, all options are inaccessible to
the user.
Since the user has explicitly chosen to
open the Admin tool (by clicking
Yes
in
the dialog box prompting
Click Yes to
open Embedded Security
Administration tool
), uninstall waits
until the Admin tool is closed. If user
clicks
No
in that dialog box, then the
Admin tool does not open at all and
uninstall proceeds.
The Admin tool is used for disabling the TPM chip, but
that option is not available unless the Basic User Key
has already been initialized. If it has not, then select
OK
or
Cancel
in order to continue with the
uninstallation process.
Intermittent system lockup
occurs after creating PSD
on 2 users accounts and
using fast-user-switching
in 128-MB system
configurations.
System may lock up with a black screen
and non-responding keyboard and
mouse instead of showing welcome
(logon) screen when using fast-switching
with minimal RAM.
Root Cause suspicion is a timing issue in low memory
configurations.
Integrated graphics uses UMA architecture taking 8 MB
of memory, leaving only 120 available to user. This 120
MB is shared by both users who are logged in and are
fast-user-switching when error is generated.
Workaround is to reboot system and customer is
encouraged to increase memory configuration (HP
does not ship 128-MB configurations by default with
security modules).
EFS User Authentication
(password request) times
out with
access denied
.
The EFS User Authentication password
reopens after clicking
OK
or returning
from standby state after timeout.
This is by design—to avoid issues with Microsoft EFS,
a 30-second watchdog timer was created to generate
the error message).
Minor truncation during
setup of Japanese is
observed in functional
description
Functional descriptions during custom
setup option during installation wizard
are truncated.
HP will correct this in a future release.
EFS Encryption works
without entering password
in the prompt.
By allowing prompt for User password to
time out, encryption is still capable on a
file or folder.
The ability to encrypt does not require password
authentication, since this is a feature of the Microsoft
EFS encryption. The decryption will require the user
password to be supplied.
Secure e-mail is
supported, even if
Embedded security software and the
wizard do not control settings of an e-
This behavior is as designed. Configuration of TPM e-
mail settings does not prohibit editing encryption
56
Chapter 8
Troubleshooting