Home » HP Manuals » Laptops » HP FH554AT » Manual Viewer

HP FH554AT ProtectTools (Select Models Only) - Windows Vista - Page 46

Enabling and disabling Automatic DriveLock hard drive protection, Managing Computer Setup passwords

UPC - 884420136132

Add to My Manuals
Save this manual to your list of manuals

Page 46 highlights

Enabling and disabling Automatic DriveLock hard drive protection When this option is enabled, the DriveLock passwords will be automatically generated and set in the drive, and protected by the TPM embedded security chip. NOTE The automatically generated passwords will not be set in the drive until the computer is restarted and you successfully enter the TPM embedded security password at the password prompt. The option to enable Automatic DriveLock is unavailable unless ● The computer has a TPM security chip installed and initialized. For instructions on how to enable and initialize the TPM security chip, refer to "Enabling the embedded security chip" and "Initializing the embedded security chip" in Chapter 4, "Embedded Security for HP ProtectTools." ● No DriveLock passwords have already been enabled. NOTE If you have already manually set DriveLock passwords on the computer, you must first disable them before you can set Automatic DriveLock protection. To enable or disable Automatic DriveLock protection: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, click BIOS Configuration. 3. Enter your Computer Setup administrator password at the BIOS administrator password prompt, and then click OK. 4. In the left pane, click Security. 5. Under Embedded Security, click Enable next to Automatic DriveLock Support. NOTE To disable automatic DriveLock protection for Embedded Security, click Disable. 6. Click Apply, and then click OK in the HP ProtectTools window to save your changes. Managing Computer Setup passwords You can use BIOS Configuration to set and change the power-on and setup passwords in Computer Setup, and also to manage various password settings. CAUTION The passwords you set through the "Passwords" page in BIOS Configuration are saved immediately upon clicking the Apply or OK button in the HP ProtectTools window. Make sure you remember what password you have set, because you will not be able to undo a password setting without supplying the previous password. The power-on password can protect your notebook from unauthorized use. NOTE After you have set a power-on password, the Set button on the "Passwords" page is replaced by a Change button. The Computer Setup setup password protects the configuration settings and system identification information in Computer Setup. After this password is set, it must be entered to access Computer Setup. 40 Chapter 5 BIOS Configuration for HP ProtectTools ENWW

Section	Page
Introduction	7
Accessing the HP ProtectTools Security Manager	8
Understanding security roles	8
Managing HP ProtectTools passwords	9
Creating a secure password	11
Smart Card Security for HP ProtectTools	12
Initializing the smart card	13
Smart card BIOS security mode	14
Enabling smart card BIOS security mode and setting the smart card administrator password	15
Disabling smart card BIOS security mode	15
Changing the smart card administrator password	16
Setting and changing the smart card user password	17
Storing the administrator or user card password	18
General tasks	19
Updating BIOS smart card settings	19
Selecting the smart card reader	19
Changing the smart card PIN	19
Backing up and restoring smart cards	20
Creating a recovery file	20
Restoring smart card data	21
Creating a backup smart card	22
Java Card Security for HP ProtectTools	23
General tasks	24
Changing a Java Card PIN	24
Selecting the smart card reader	24
Advanced tasks (administrators only)	25
Assigning a Java Card PIN	25
Assigning a name to a Java Card	26
Setting power-on authentication	26
Enabling Java Card power-on authentication and creating an administrator Java Card	27
Creating a user Java Card	28
Disabling Java Card power-on authentication	28
Backing up and restoring Java Cards	29
Creating a recovery file	29
Restoring Java Card data	30
Creating a backup Java Card	30
Embedded Security for HP ProtectTools	31
Setup procedures	32
Enabling the embedded security chip	32
Initializing the embedded security chip	33
Setting up the basic user account	34
General tasks	35
Using the Personal Secure Drive	35
Encrypting files and folders	35
Sending and receiving encrypted e-mail	35
Changing the Basic User Key password	36
Advanced tasks	37
Backing up and restoring	37
Creating a backup file	37
Restoring certification data from the backup file	37
Changing the owner password	38
Resetting a user password	38
Enabling and disabling Embedded Security	38
Permanently disabling Embedded Security	38
Enabling Embedded Security after permanent disable	38
Migrating keys with the Migration Wizard	39
BIOS Configuration for HP ProtectTools	40
General tasks	41
Managing boot options	41
Enabling and disabling system configuration options	42
Advanced tasks	44
Managing HP ProtectTools settings	44
Enabling and disabling smart card or Java Card power-on authentication support	44
Enabling and disabling power-on authentication support for Embedded Security	45
Enabling and disabling Automatic DriveLock hard drive protection	46
Managing Computer Setup passwords	46
Setting the power-on password	47
Changing the power-on password	47
Setting the setup password	47
Changing the setup password	48
Setting password options	48
Enabling and disabling stringent security	48
Enabling and disabling power-on authentication on Windows restart	48
Credential Manager for HP ProtectTools	50
Setup procedures	51
Logging on to Credential Manger	51
Using the Credential Manager Logon Wizard	51
Logging on for the first time	52
Registering credentials	52
Registering fingerprints	52
Setting up the fingerprint reader	53
Using your registered fingerprint to log on to Windows	53
Registering a Java Card, smart card, token, or virtual token	53
Registering a USB eToken	54
Registering other credentials	54
General tasks	55
Creating a virtual token	55
Changing the Windows logon password	55
Changing a token PIN	56
Managing identity	56
Backing up an identity	56
Restoring an Identity	57
Clearing an identity from the system	57
Locking the computer	58
Using Windows Logon	58
Logging on to Windows with Credential Manager	58
Adding an account	59
Removing an account	59
Using Single Sign On	59
Registering a new application	59
Using automatic registration	60
Using manual (drag and drop) registration	60
Managing applications and credentials	61
Modifying application properties	61
Removing an application from Single Sign On	61
Exporting an application	61
Importing an application	62
Modifying credentials	62
Using Application Protection	63
Restricting access to an application	63
Removing protection from an application	63
Changing restriction settings for a protected application	64
Advanced tasks (administrator only)	65
Specifying how users and administrators log on	65
Configuring custom authentication requirements	66
Configuring credential properties	66
Configuring Credential Manager settings	67
Example 1—Using the “Advanced Settings” page to allow Windows logon from Credential Manager	67
Example 2—Using the “Advanced Settings” page to require user verification before Single Sign On	68
Device Access Manager for HP ProtectTools	69
Starting background service	70
Simple configuration	71
Device class configuration (advanced)	72
Adding a user or a group	72
Removing a user or a group	72
Denying access to a user or group	72
Allowing access to a device class for one user of a group	72
Allowing access to a specific device for one user of a group	73
Glossary	74

Match case Limit results 1 per page

Enabling and disabling Automatic DriveLock hard drive protection

When this option is enabled, the DriveLock passwords will be automatically generated and set in the

drive, and protected by the TPM embedded security chip.

NOTE

The automatically generated passwords will not be set in the drive until the computer is

restarted and you successfully enter the TPM embedded security password at the password

prompt.

The option to enable Automatic DriveLock is unavailable unless

●

The computer has a TPM security chip installed and initialized. For instructions on how to enable

and initialize the TPM security chip, refer to "

Enabling the embedded security chip

" and "

Initializing

the embedded security chip

" in Chapter 4, “

Embedded Security for HP ProtectTools

.”

●

No DriveLock passwords have already been enabled.

NOTE

If you have already manually set DriveLock passwords on the computer, you must first

disable them before you can set Automatic DriveLock protection.

To enable or disable Automatic DriveLock protection:

Select

Start > All Programs > HP ProtectTools Security Manager

In the left pane, click

BIOS Configuration

Enter your Computer Setup administrator password at the BIOS administrator password prompt,

and then click

In the left pane, click

Security

Under

Embedded Security

, click

Enable

next to

Automatic DriveLock Support

NOTE

To disable automatic DriveLock protection for Embedded Security, click

Disable

Click

Apply

, and then click

in the HP ProtectTools window to save your changes.

Managing Computer Setup passwords

You can use BIOS Configuration to set and change the power-on and setup passwords in Computer

Setup, and also to manage various password settings.

CAUTION

The passwords you set through the “Passwords” page in BIOS Configuration are

saved immediately upon clicking the

Apply

button in the HP ProtectTools window. Make

sure you remember what password you have set, because you will not be able to undo a

password setting without supplying the previous password.

The power-on password can protect your notebook from unauthorized use.

NOTE

After you have set a power-on password, the Set button on the “Passwords” page is

replaced by a Change button.

The Computer Setup setup password protects the configuration settings and system identification

information in Computer Setup. After this password is set, it must be entered to access Computer Setup.

Chapter 5

BIOS Configuration for HP ProtectTools

ENWW