HP EliteDesk 800 G1 Ultra-slim PC Client Security Commercial Managed IT Softwa - Page 34

Appendix A - Frequently Asked Questions

Page 34 highlights

Appendix A - Frequently Asked Questions Q. What authentication technologies are supported by HP Client Security? A. HP Client Security Manager is a security platform that has been designed to easily grow with the user's needs. It supports the following authentication technologies currently, but may support additional technologies as they become available.  Password  Fingerprint  Smart Card, Contactless Card, Proximity Card  Bluetooth  PIN Q. How does Smart Card security compare to fingerprint security? A. HP Client Security supports both Smart Card authentication and fingerprint authentication. Since both devices store secrets using hardware protection, they have similar levels of security. Smart cards may be a better fit for large organizations with the infrastructure to support creation and enrollment of certificates. Smaller organizations may prefer the convenience of fingerprint authentication. HP business notebooks offer both integrated Smart Card readers as well as integrated fingerprint reader sensors. HP's fingerprint sensors provide higher security than many external fingerprint scanners. This higher security includes an on-sensor credential vault and on-sensor match before credential release. Smart cards store credentials on the card and use a PIN to release the credentials. NOTE A very high level of security can be achieved by requiring both Smart Card AND fingerprint authentication for access to critical assets. Q. Is there a cost associated with HP Client Security? A. HP Client Security and security modules are available as standard security features on most business notebooks. On business desktops or workstations, some modules are available at additional cost. Q. Can Smart Cards be used for pre-boot authentication? A. Smart cards are not supported in BIOS. However, Drive Encryption login has select Smart Card support. Q. How can I tell if my PC contains a TPM embedded security chip? In general, if the PC contains a TPM embedded security chip, it will be listed in the Windows Device Manager, under the category Security Devices. On business PC's, the TPM embedded security chip will be listed as Infineon Trusted Platform Module. However, TPM may be hidden/disabled in BIOS. 34

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37

34
Appendix A - Frequently Asked Questions
Q. What authentication technologies are supported by HP Client Security?
A. HP Client Security Manager is a security platform that has been designed to easily grow with the user's
needs. It supports the following authentication technologies currently, but may support additional
technologies as they become available.
Password
Fingerprint
Smart Card, Contactless Card, Proximity Card
Bluetooth
PIN
Q. How does Smart Card security compare to fingerprint security?
A. HP Client Security supports both Smart Card authentication and fingerprint authentication. Since both
devices store secrets using hardware protection, they have similar levels of security.
Smart cards may be a
better fit for large organizations with the infrastructure to support creation and enrollment of certificates.
Smaller organizations may prefer the convenience of fingerprint authentication.
HP business notebooks offer both integrated Smart Card readers as well as integrated fingerprint reader
sensors.
HP’s fingerprint sensors provide higher security than many external fingerprint scanners.
This
higher security includes an on-sensor credential vault and on-sensor match before credential release.
Smart cards store credentials on the card and use a PIN to release the credentials.
NOTE
A very high level of security can be achieved by requiring both Smart Card AND fingerprint
authentication for access to critical assets.
Q. Is there a cost associated with HP Client Security?
A. HP Client Security and security modules are available as standard security features on most business
notebooks. On business desktops or workstations, some modules are available at additional cost.
Q. Can Smart Cards be used for pre-boot authentication?
A. Smart cards are not supported in BIOS. However, Drive Encryption login has select Smart Card support.
Q. How can I tell if my PC contains a TPM embedded security chip?
In general, if the PC contains a TPM embedded security chip, it will be listed in the Windows Device Manager,
under the category
Security Devices
. On business PC’s, the TPM embedded security chip will be listed as
Infineon Trusted Platform Module
. However, TPM may be hidden/disabled in BIOS.