Home » HP Manuals » Laptops » HP Nc6400 » Manual Viewer

HP Nc6400 ProtectTools - Page 49

Enabling and disabling Automatic DriveLock hard drive protection, Managing Computer Setup passwords - power supply

Add to My Manuals
Save this manual to your list of manuals

Page 49 highlights

Enabling and disabling Automatic DriveLock hard drive protection When this option is enabled, the DriveLock passwords will be automatically generated and set in the drive, and protected by the TPM embedded security chip. NOTE The automatically generated passwords will not be set in the drive until the computer is restarted and you successfully enter the TPM embedded security password at the password prompt. The option to enable Automatic DriveLock is unavailable unless ● The computer has a TPM security chip installed and initialized. For instructions on how to enable and initialize the TPM security chip, refer to "Enabling the embedded security chip " and "Initializing the embedded security chip" in Chapter 4, "Embedded Security for ProtectTools." ● No DriveLock passwords have already been enabled. NOTE If you have already manually set DriveLock passwords on the computer, you must first disable them before you can set Automatic DriveLock protection. To enable or disable Automatic DriveLock protection: 1. Select Start > All Programs > HP ProtectTools Security Manager. 2. In the left pane, select BIOS Configuration. 3. Enter your Computer Setup administrator password at the BIOS administrator password prompt, and then click OK. 4. In the left pane, select Security. 5. Under Embedded Security, select Enable next to Automatic DriveLock Support. NOTE To disable automatic DriveLock protection for Embedded Security, select Disable. 6. Click Apply, and then click OK in the ProtectTools window to save your changes. Managing Computer Setup passwords You can use BIOS Configuration to set and change the power-on and setup passwords in Computer Setup, and also to manage various password settings. CAUTION The passwords you set through the "Passwords" page in BIOS Configuration are saved immediately upon clicking the Apply or OK button in the ProtectTools window. Make sure you remember what password you have set, because you will not be able to undo a password setting without supplying the previous password. The power-on password can protect your notebook from unauthorized use. NOTE After you have set a power-on password, the Set button on the "Passwords" page is replaced by a Change button. The Computer Setup setup password protects the configuration settings and system identification information in Computer Setup. After this password is set, it must be entered to access Computer Setup. ENWW Advanced tasks 43

Section	Page
Introduction	7
Accessing the ProtectTools Security Manager	8
Understanding security roles	8
Managing ProtectTools passwords	9
Creating a secure password	11
Smart Card Security for ProtectTools	13
Initializing the smart card	14
Smart card BIOS security mode	15
Enabling smart card BIOS security mode and setting the smart card administrator password	16
Disabling smart card BIOS security mode	16
Changing the smart card administrator password	17
Setting and changing the smart card user password	18
Storing the administrator or user card password	19
General tasks	20
Updating BIOS smart card settings	20
Selecting the smart card reader	20
Changing the smart card PIN	20
Backing up and restoring smart cards	21
Creating a recovery file	21
Restoring smart card data	22
Creating a backup smart card	23
Java Card Security for ProtectTools	25
General tasks	26
Changing a Java Card PIN	26
Selecting the smart card reader	26
Advanced tasks (administrators only)	27
Assigning a Java Card PIN	27
Assigning a name to a Java Card	28
Setting power-on authentication	28
Enabling Java Card power-on authentication and creating an administrator Java Card	29
Creating a user Java Card	30
Disabling Java Card power-on authentication	30
Backing up and restoring Java Cards	31
Creating a recovery file	31
Restoring Java Card data	32
Creating a backup Java Card	32
Embedded Security for ProtectTools	33
Setup procedures	34
Enabling the embedded security chip	34
Initializing the embedded security chip	35
Setting up the basic user account	36
General tasks	37
Using the Personal Secure Drive	37
Encrypting files and folders	37
Sending and receiving encrypted e-mail	37
Changing the Basic User Key password	38
Advanced tasks	39
Backing up and restoring	39
Creating a backup file	39
Restoring certification data from the backup file	39
Changing the owner password	40
Resetting a user password	40
Enabling and disabling Embedded Security	40
Permanently disabling Embedded Security	40
Enabling Embedded Security after permanent disable	40
Migrating keys with the Migration Wizard	41
BIOS Configuration for ProtectTools	43
General tasks	44
Managing boot options	44
Enabling and disabling system configuration options	45
Advanced tasks	47
Managing ProtectTools settings	47
Enabling and disabling Smart card or Java Card power-on authentication support	47
Enabling and disabling power-on authentication support for Embedded Security	48
Enabling and disabling Automatic DriveLock hard drive protection	49
Managing Computer Setup passwords	49
Setting the power-on password	50
Changing the power-on password	50
Setting the setup password	50
Changing the setup password	51
Setting password options	51
Enabling and disabling stringent security	51
Enabling and disabling power-on authentication on Windows restart	51
Credential Manager for ProtectTools	53
Setup procedures	54
Logging on to Credential Manger	54
Logging on for the first time	54
Using the Credential Manager Logon Wizard	54
Creating a new account	55
Registering credentials	55
Registering fingerprints	55
Set up the fingerprint reader	56
Use your registered fingerprint to log on to windows	57
Registering a smart card or token	57
Registering other credentials	57
General tasks	58
Creating a virtual token	58
Changing the Windows logon password	58
Changing a token PIN	59
Managing identity	59
Backing up an identity	59
Restoring an Identity	60
Removing an identity from the system	60
Locking the computer	61
Using Microsoft Network Logon	61
Logging on to Windows with Credential Manager	61
Adding accounts	62
Removing accounts	62
Setting a default user	62
Using Single Sign On	63
Registering a new application	63
Using automatic registration	63
Using manual (drag and drop) registration	63
Managing applications and credentials	64
Modifying application properties	64
Removing applications from Single Sign On	64
Exporting applications	64
Importing applications	65
Modifying credentials	65
Advanced tasks (administrator only)	66
Specifying how users and administrators log on	66
Configuring custom authentication requirements	67
Configuring credential properties	67
Configuring Credential Manager settings	68
Example 1—Using the “Advanced Settings” page to allow Windows logon from Credential Manager	68
Example 2—Using the “Advanced Settings” page to require user verification before Single Sign On	69
Glossary	71

Match case Limit results 1 per page

Enabling and disabling Automatic DriveLock hard drive protection

When this option is enabled, the DriveLock passwords will be automatically generated and set in the

drive, and protected by the TPM embedded security chip.

NOTE

The automatically generated passwords will not be set in the drive until the computer is

restarted and you successfully enter the TPM embedded security password at the password

prompt.

The option to enable Automatic DriveLock is unavailable unless

●

The computer has a TPM security chip installed and initialized. For instructions on how to enable

and initialize the TPM security chip, refer to “

Enabling the embedded security chip

” and “

Initializing

the embedded security chip

” in Chapter 4, “

Embedded Security for ProtectTools

.”

●

No DriveLock passwords have already been enabled.

NOTE

If you have already manually set DriveLock passwords on the computer, you must first

disable them before you can set Automatic DriveLock protection.

To enable or disable Automatic DriveLock protection:

Select

Start > All Programs > HP ProtectTools Security Manager

In the left pane, select

BIOS Configuration

Enter your Computer Setup administrator password at the BIOS administrator password prompt,

and then click

In the left pane, select

Security

Under

Embedded Security

, select

Enable

next to

Automatic DriveLock Support

NOTE

To disable automatic DriveLock protection for Embedded Security, select

Disable

Click

Apply

, and then click

in the ProtectTools window to save your changes.

Managing Computer Setup passwords

You can use BIOS Configuration to set and change the power-on and setup passwords in Computer

Setup, and also to manage various password settings.

CAUTION

The passwords you set through the “Passwords” page in BIOS Configuration are

saved immediately upon clicking the

Apply

button in the ProtectTools window. Make sure

you remember what password you have set, because you will not be able to undo a password

setting without supplying the previous password.

The power-on password can protect your notebook from unauthorized use.

NOTE

After you have set a power-on password, the Set button on the “Passwords” page is

replaced by a Change button.

The Computer Setup setup password protects the configuration settings and system identification

information in Computer Setup. After this password is set, it must be entered to access Computer Setup.

ENWW

Advanced tasks