HP EliteDesk 800 G1 Ultra-slim PC Client Security Commercial Managed IT Softwa - Page 6

Layer, Data protection, Description

Page 6 highlights

Layer Hardware-based Data protection HP File Sanitizer 5 (See HP File Sanitizer on page 21) HP Trust Circles 6 (See HP Trust Circles on page 22) HP Disk Sanitizer External Edition HP Privacy Manager 7 (End of Life) Common Criteria EAL4+ Certified TPM Self-Encrypting Drives (SEDs) Secure Erase 8 Description unauthorized access. Starting with new 2013 PCs, HP Drive Encryption is FIPS 140-2 L1 certified. • With Drive Encryption, authentication (a password, smart card or fingerprint) is required before Windows will even start • Encrypted drives removed from the system cannot be read by another PC without proper authorization • HW encryption supported with Self-Encrypting Hard Drives (SEDs). • HP Drive Encryption provided with new 2013 PCs is powered by WinMagic. 1. For enterprise level manageability, HP Drive Encryption is upgradeable to WinMagic SecureDoc Enterprise. HP offers licensing for HP and non-HP PCs. 2. For HP Drive Encryption on PCs released prior to 2013, DigitalPersona Pro Workgroup offers enterprise level manageability. You can permanently erase individual files, folders and personal information from the internal hard drive on your PC. Only supports traditional hard drives. HP Trust Circles protects accidental data leakage by allowing only members of a Trust Circle to access specified documents. Assign folder(s) to each Trust Circles, and all files placed in those folders are encrypted so that only the contacts assigned to the Trust Circle can access them. • When included, HP Trust Circles Standard supports creating up to 5 Trust Circles with up to 5 contacts per Trust Circle. Software that will permanently destroy data on standard hard drives in preparation for system disposal or redeployment. A printable report is generated for this operation. Protect supported Microsoft Office® files and emails sent in Microsoft Outlook® by allowing only your selected Trusted Contacts to access the information. • Creates a digital identity that is verified by authentication to help prevent supported Microsoft Office files from getting into the wrong hands by encrypting for selected trusted contacts only • No longer offered with new HP Business PCs. A Common Criteria certification Evaluation Assurance Level 4+ (EAL4+) Trusted Platform Module (TPM) provides hardware-based encryption keys and more secure storage. Encrypts and decrypts data as it is being written to, or read from the drive. Users get faster encryption performance than that of software-based only encryption solutions. Permanently destroys data on your hard drive (HDD or SSD) in preparation for system redeployment or disposal. Once executed, the hard drive controller will completely rewrite all the data on the drive and cannot be recovered even with advanced data recovery tools. Meets NIST 800-88 Secure Erase guidelines. 1. Self-Encrypting Drives (SEDs) are not supported if the encryption is enabled. 2. Automatic DriveLock will work on another HP Business PC when the BIOS passwords are the same. Requires user set up. 3. For the use cases outlined in the DOD 5220.22-M Supplement. Not supported on HP Business Desktops. HP Business Desktops support HP Disk Sanitizer External Edition available from hp.com. 4. Requires Windows. Data is protected prior to Drive Encryption login. Turning the PC off or into hibernate logs out of Drive Encryption and prevents data access. 6

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37

6
Layer
Data protection
Description
unauthorized access.
Starting with new 2013 PCs, HP Drive
Encryption is FIPS 140-2 L1 certified.
With Drive Encryption, authentication (a password, smart card
or fingerprint) is required before Windows will even start
Encrypted drives removed from the system cannot be read by
another PC without proper authorization
HW encryption supported with Self-Encrypting Hard Drives
(SEDs).
HP Drive Encryption provided with new 2013 PCs is powered by
WinMagic.
1.
For enterprise level manageability, HP Drive Encryption is
upgradeable to WinMagic SecureDoc Enterprise.
HP offers
licensing for HP and non-HP PCs.
2.
For HP Drive Encryption on PCs released prior to 2013,
DigitalPersona Pro Workgroup offers enterprise level
manageability.
HP File Sanitizer
5
(See
HP File Sanitizer
on page 21
)
You can permanently erase individual files, folders and personal
information from the internal hard drive on your PC.
Only supports
traditional hard drives.
HP Trust Circles
6
(See
HP Trust Circles
on page 22)
HP Trust Circles protects accidental data leakage by allowing only
members of a Trust Circle to access specified documents. Assign
folder(s) to each Trust Circles, and all files placed in those folders are
encrypted so that only the contacts assigned to the Trust Circle can
access them.
When included, HP Trust Circles Standard supports creating up
to 5 Trust Circles with up to 5 contacts per Trust Circle.
HP Disk Sanitizer External Edition
Software that will permanently destroy data on standard hard drives
in preparation for system disposal or redeployment.
A printable report is generated for this operation.
HP Privacy Manager
7
(End of Life)
Protect supported Microsoft Office® files and emails sent in Microsoft
Outlook® by allowing only your selected Trusted Contacts to access
the information.
Creates a digital identity that is verified by authentication to
help prevent supported Microsoft Office files from getting into
the wrong hands by encrypting for selected trusted contacts
only
No longer offered with new HP Business PCs.
Hardware-based
Common Criteria EAL4+ Certified
TPM
A Common Criteria certification Evaluation Assurance Level 4+
(EAL4+) Trusted Platform Module (TPM) provides hardware-based
encryption keys and more secure storage.
Self-Encrypting Drives (SEDs)
Encrypts and decrypts data as it is being written to, or read from the
drive.
Users get faster encryption performance than that of
software-based only encryption solutions.
Secure Erase
8
Permanently destroys data on your hard drive (HDD or SSD) in
preparation for system redeployment or disposal. Once executed, the
hard drive controller will completely rewrite all the data on the drive
and cannot be recovered even with advanced data recovery tools.
Meets NIST 800-88 Secure Erase guidelines.
1.
Self-Encrypting Drives (SEDs) are not supported if the encryption is enabled.
2.
Automatic DriveLock will work on another HP Business PC when the BIOS passwords are the same. Requires user set up.
3.
For the use cases outlined in the DOD 5220.22-M Supplement.
Not supported on HP Business Desktops.
HP Business Desktops
support HP Disk Sanitizer External Edition available from hp.com.
4.
Requires Windows.
Data is protected prior to Drive Encryption login.
Turning the PC off or into hibernate logs out of Drive
Encryption and prevents data access.