HP Pro 3505 HP ProtectTools Security Software,Version 6.0 User Guide
HP Pro 3505 Manual
View all HP Pro 3505 manuals
Add to My Manuals
Save this manual to your list of manuals |
HP Pro 3505 manual content summary:
- HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 1
HP ProtectTools Security Software, Version 6.0 User Guide - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 2
herein is subject to change without notice. Microsoft, Windows and Windows Vista are either trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries. The only warranties for HP products and services are set forth in the express warranty statements - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 3
About This Book This guide provides basic information for upgrading this computer model. WARNING! Text set off in this manner indicates that failure to follow directions could result in bodily harm or loss of life. - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 4
iv About This Book ENWW - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 5
HP ProtectTools 3 Embedded Security for HP ProtectTools 4 Drive Encryption for HP ProtectTools 4 File Sanitizer for HP ProtectTools 5 Device Access Manager for HP ProtectTools 5 Privacy Manager for HP ProtectTools 5 Computrace for HP ProtectTools (formerly known as LoJack Pro 6 Accessing HP - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 6
Drives ...17 Managing Device Access ...17 3 HP ProtectTools Security Manager ...18 Logging in after Security Manager is configured 18 Managing passwords ...19 Setting credentials ...19 Changing your Windows password 19 Setting up a Smart Card ...19 Initializing the Smart Card 20 Registering - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 7
administrator task 30 Activating a TPM-protected password 30 Encrypting or decrypting individual drives 31 Backup and recovery (administrator task 31 Creating backup keys 31 6 Privacy Manager for HP ProtectTools ...32 Opening Privacy Manager ...32 Setup procedures ...32 Managing Privacy Manager - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 8
the File Sanitizer icon 46 Manually shredding one asset 47 Manually shredding all selected items 47 Manually activating free space bleaching 47 Resetting a user password 52 Migrating keys with the Migration Wizard 52 9 Device Access Manager for HP ProtectTools 53 Starting background service - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 9
Creating an extendable JITA for a user or group 55 Disabling a JITA for a user or group 56 Advanced Settings ...56 10 Computrace for HP ProtectTools ...57 Glossary ...58 Index ...62 ENWW ix - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 10
x ENWW - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 11
Desktop systems do not currently support fingerprint devices. HP ProtectTools software modules may be preinstalled, preloaded, or available as a configurable option or as an after market option. Visit http://www.hp.com for more information. NOTE: The instructions in this guide are written with the - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 12
HP ProtectTools (part of Security Manager) Drive Encryption for HP ProtectTools Privacy Manager for HP ProtectTools File Sanitizer for HP change user credentials such as Windows password and Smart Card. ● Acts as a hard drive. ● Offers the option to activate SED drives (Self Encrypting Drives), - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 13
to schedule when access is provided to hardware. ● Provides secure asset tracking. ● Can monitor user activity along with hardware and software changes. ● Remains active even if the hard drive is reformatted or replaced. ● Requires separate purchase of tracking and tracing subscription to activate - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 14
Doctor wants to make sure only he can access any data on his computer hard drive. The Doctor activates Drive Encryption which enables preboot or requiring authentication before Windows login. Once set up, the hard drive cannot be opened without a password before it even boots to the operating system - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 15
uses File Sanitizer to "Shred" deleted files so it is almost impossible to recover. Normally when Windows deletes data, it actually does not erase the data from the hard drive. Instead, it marks the hard drive sectors as available for future use. Until the data is written over, it can be easily - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 16
as LoJack Pro) Computrace for HP ProtectTools is a service that can track the location of a stolen computer whenever the user accesses the Internet. Example 1: A school principal instructed the IT department to keep track of all the computers at his school. After the inventory of the PCs was made - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 17
hard drive is removed and installed into an unsecured system. ● The Personal Secure Drive feature, provided by the Embedded Security for HP HP ProtectTools on page 57 Restricting access to sensitive data Suppose a contract auditor is working on site and has been given computer access to review - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 18
access to an unsecured business PC presents a very tangible risk to critical data such as information from financial services, an executive, or from the hard drive. See the following chapter: ◦ Device Access Manager for HP ProtectTools on page 53 ● The Personal Secure Drive feature encrypts - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 19
be held by the same person. For HP ProtectTools, the security duties and privileges can be divided into the following roles: ● Security officer-Defines the security level for the company or network and determines the security features to deploy, such as Drive Encryption or Embedded Security. ● IT - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 20
or Security Setup password Power-on password Windows Logon password Set in this HP ProtectTools module Smart Card Security BIOS, by IT administrator Function Can be used as a multifactor authentication option. Can be used as a Windows authentication. Authenticates users of Drive Encryption, if the - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 21
and settings You can back up credentials in the following ways: ● Use Drive Encryption for HP ProtectTools to select and back up HP ProtectTools credentials. You can also register for Online Drive Encryption Key Recovery Service to store a backup copy of your encryption key, which will enable you - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 22
HP ProtectTools Security Manager. To open the console: ● Select Start > All Programs > HP > HP authentication devices such as smart card readers. ● Applications - Includes Provides tools for managing drive encryptions and backing up and of devices that could compromise PC security and set access - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 23
and all users who share the computer. The first time that you log on to Windows, you will be prompted to set up HP ProtectTools Security Manager. Click OK to launch the Security Manager Setup wizard, which will guide you through the basic steps in configuring the program. NOTE: You can also launch - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 24
HP ProtectTools applications during a user session. Logon tab To specify the credentials required to access the computer, decrypt the hard drive, and log on to Windows must specify at least one credential. 4. In the Policy section drop-down list, choose whether ANY (only one) of the specified - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 25
One Step logon setting allows users of this computer to skip Windows logon if authentication was performed at the BIOS or encrypted disk level. Managing Users Within the Users application, Windows to the Drive Encryption logon list. Before you add a user, that user must already have a Windows user - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 26
is removed. However, the computer will lock only if the smart card was used as an authentication credential when logging on to Windows. 1. Click Start, click All Programs, click HP, and then click HP ProtectTools Administrative Console. 2. In the Administrative Console left pane, expand Devices and - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 27
Encrypting Drives Drive Encryption for HP ProtectTools allows you to encrypt computer hard drives, making the hard drive unreadable and inaccessible to any unauthorized person who might try to access it even if the drive has been removed from the computer or sent to a data recovery service. To - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 28
of the configured security login methods is permissible, users may log in using any one of the security login methods when the HP Drive Encryption login screen opens. This action logs the user in to Windows. ● If the HP Password Manager level of security has been configured and all of the security - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 29
your new password in the New Windows password and Confirm new password boxes. 5. Click Change. Setting up a Smart Card Smart Card is an integrated part of Security Manager. Smart Card setup and configuration is used with the HP Smart Card keyboard. The Smart Card is a personal security device that - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 30
is selected and click Next. 6. In the Smart card window, enter your PIN number and click Next. 7. Click Finish. To register the Smart Card in Security Manager: 1. Click Start, click All Programs, click HP, and then click HP ProtectTools Security Manager. 2. In Security Manager, expand Credentials - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 31
used space on the hard drive using a process referred HP ProtectTools, refer to File Sanitizer for HP ProtectTools on page 43. Viewing drive encryption status Drive Encryption is set up by the Windows theft recovery HP ProtectTools utilizes Computrace by Absolute Software to remotely monitor, manage, - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 32
up your data daily. Backups can also be used to migrate from one computer to another, also sometimes called importing and exporting. Remember though computer after reinstalling the operating system, the system must have HP ProtectTools Security Manager already installed before restoring the data from - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 33
was previously created through Security Manager's Backup and Restore feature. To restore your data: 1. Click Start, click All Programs, click HP, and then click HP ProtectTools Security Manager. 2. In the Security Manager left pane, click Advanced, and then click Backup and Restore. 3. Click Restore - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 34
picture: 1. Click on the upper left section of Security Manager with your user name and picture. 2. To change your user name, type a name in the Windows user name box. 3. To change your picture, click the Choose Picture button and browse to select a picture. 4. Click the Save button to save your - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 35
or program, navigate to the logon screen and log you in automatically. To verify your identity you will use your HP ProtectTools credentials, such as your Windows password or smart card, depending on your computer configuration. This means that you will use the same credentials to log on to all - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 36
than one credential the Password Manager icon, and then select one of the following, depending on whether card. ● Click the arrows to the right of a logon field to populate it with one . 5. Enter the Windows password and click the Windows password and click the green arrow. 26 Chapter 4 Password Manager - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 37
If you want to view the password for this logon, click Show password. The Windows password is required to see the password. 5. Click OK. Using the Logons menu to keep your logons in order. It's a simple matter of creating one or more categories and drag-and-dropping your logons into the desired - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 38
and intuitive, from one central location. Your a logon - Click Add Logon and follow the on-screen instructions. ● Edit a logon - Select a logon and click Edit the on-screen instructions. Assessing your Password Manager makes monitoring and improving your Windows password > green arrow > Settings - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 39
hard drives ● Gives you easy password access and pre-boot authentication ● Supports Microsoft Windows XP, Windows Vista, and Windows 7 ● Makes use of the Trusted Platform Module (TPM) embedded security chip if equipped and configured with TPM Various tasks can be performed in Drive Encryption for HP - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 40
to view the encryption status of all of the hard drives on the computer. Activating a TPM-protected password Use Embedded Security for HP ProtectTools to activate the TPM. After activation, logging in at the Drive Encryption logon screen requires the Windows user name and password. NOTE: Because the - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 41
allows Windows administrators to back up and recover encryption keys. Creating backup keys CAUTION: Be sure to keep the storage device containing the backup key in a safe place, because if you forget your password or lose your Smart Card, this device provides your only access to your hard drive - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 42
Office documents, and Instant Messenger. Privacy Manager leverages the security infrastructure provided by HP ProtectTools Security Manager, which includes the following security logon methods: ● Windows password ● Smart card You may use any of the above security logon methods in Privacy Manager - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 43
CAUTION: Be sure that you save the file to a location other than your hard drive and put it in a safe place. This file should be for your use only choose to begin the Trusted Contact invitation process, follow the on-screen instructions. - or - If you click Cancel, refer to Managing Trusted Contacts - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 44
screen instructions to purchase a new Privacy Manager Certificate. NOTE: The Privacy Manager Certificate renewal process does not replace than one Privacy Manager Certificate on your computer that was installed from within Privacy Manager, you can specify one as Manager for HP ProtectTools ENWW - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 45
your chosen security logon method. 6. Follow the on-screen instructions. Managing Trusted Contacts Trusted Contacts are users with whom you have exchanged Privacy Manager Certificates, enabling you to securely communicate with one another. Adding Trusted Contacts 1. You send an e-mail invitation - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 46
dialog box opens, read the text, and then click OK. An e-mail is automatically generated. 4. Enter one or more e-mail addresses of the recipients you want to add as Trusted Contacts. 5. Edit the text and using your chosen security logon method. 36 Chapter 6 Privacy Manager for HP ProtectTools ENWW - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 47
NOTE: When the e-mail is received by the Trusted Contact recipient, the recipient must open the e-mail and click Accept in the lower-right corner of the e-mail, and then click OK when the confirmation dialog box opens. 7. When you receive an e-mail response from a recipient accepting the invitation - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 48
Office document 1. Right-click the HP ProtectTools icon in the notification area Microsoft Word or Microsoft Excel document You can add more than one signature line to your document by appointing suggested signers. A suggested instructions to sign by a specific date. 38 Chapter 6 Privacy Manager for - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 49
signer, enter the name of the suggested signer. 5. In the box under Instructions to the signer, enter a message for this suggested signer. NOTE: This message will appear in place of a title, and is either deleted or replaced by the user's title when the document is signed. 6. Select the Show - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 50
Attach the Microsoft Office document. 4. Refer to Sealing and sending an e-mail message for further instructions. Viewing a signed Microsoft Office document NOTE: You do not need to have a Privacy Manager Certificate Microsoft Office document. 40 Chapter 6 Privacy Manager for HP ProtectTools ENWW - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 51
Using Privacy Manager in Microsoft Outlook When Privacy Manager is installed, a Privacy button is displayed on the Microsoft Outlook toolbar, and a Send Securely button is displayed on the toolbar of each Microsoft Outlook e-mail message. NOTE: If you are using Microsoft Office 2007, you must have - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 52
to a different computer. To do this, export them as a password-protected file to a network location or any removable storage device, and then import the file to the new computer. Exporting . 5. On the "Migration File Import" page, click Finish. 42 Chapter 6 Privacy Manager for HP ProtectTools ENWW - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 53
hard drive until another asset overwrites that same area on the hard drive with new information. Shredding is different than a standard Windows delete File Sanitizer: 1. Click Start, click All Programs, click HP, and then click HP ProtectTools Security Manager. 2. In the Security Manager left pane, - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 54
click Bleaching. 2. Select the Activate Scheduler check box, enter your Windows password, and then enter a day and time to bleach your hard drive. 3. Click the Save icon. NOTE: The free space bleaching operation that are selected for shredding. 44 Chapter 7 File Sanitizer for HP ProtectTools ENWW - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 55
To select a predefined shred profile: 1. In the Security Manager left pane, expand File Sanitizer and click Settings. 2. Click a predefined shred profile. 3. Click View Details to view the list of assets that are selected for shredding. 4. Under Shred the following, select the check box next to each - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 56
dialog box opens, click Yes. Using the File Sanitizer icon CAUTION: Shredded assets cannot be recovered. Carefully consider which items you select for manual shredding. 1. Navigate to the document or folder you want to shred. 2. Drag the asset to the File Sanitizer icon on the desktop. 3. When - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 57
cannot be recovered. Carefully consider which items you select for manual shredding. 1. Right-click the HP ProtectTools icon in the notification area, at the far right of the taskbar, highlight File Sanitizer, and then click Shred One. 2. When the Browse dialog box opens, navigate to the asset - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 58
is in progress, a message above the HP ProtectTools Security Manager icon in the notification area shredded or bleached do not appear in the log files. One log file is created for shred operations and another log Both log files are located on the hard drive at: ● C:\Program Files\Hewlett-Packard - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 59
computer to use Embedded Security for HP ProtectTools. Most HP commercial desktop computers include the Infineon TPM Windows Home versions) ● Creation of a personal secure drive (PSD) for protecting user data ● Data management functions, such as backing up and restoring the key hierarchy ● Support - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 60
area, at the far right of the taskbar, and then select Embedded Security Initialization. The HP ProtectTools Embedded Security Initialization Wizard opens. 2. Follow the on-screen instructions. Setting up the basic user account Setting up a basic user account in Embedded Security accomplishes - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 61
must obtain one from a certification authority. For instructions on configuring and receiving encrypted e-mail Using the Personal Secure Drive After setting up the PSD, you are prompted to NOTE: Encrypting files and folders is not supported on Windows Home versions. To encrypt files and folders: - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 62
click Configure. The HP Embedded Security for HP ProtectTools Backup Wizard opens. 4. Follow the on-screen instructions. Restoring certification data from new owner password. 5. Click OK. Resetting a user password An administrator can help a user to reset a forgotten password. For more information, - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 63
will work in Microsoft Windows Vista Home version if you use DOS commands for the user setup. Refer to the Device Access Manager help file for instructions. Starting background service For device profiles to be applied, the HP ProtectTools Device Locking/Auditing background service must be running - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 64
NOTE: If background service is not running, it attempts to start now. Click Yes to allow of devices. Adding a user or a group 1. Click Start, click All Programs, click HP, and then click HP ProtectTools Administrative Console. 2. In the left pane, expand Device Access Manager, and then click Device - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 65
authenticates to Security Manager they will be granted access to the DVD/CD-ROM drive. The JITA period can be authorized for a set number of minutes or 0 using just-in-time authentication. 1. In the left pane of HP ProtectTools Administrative Console, click Device Access Manager, and then click - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 66
authenticate to Security Manager and access the device. One minute before the JITA period is about to In the left pane of HP ProtectTools Administrative Console, click Device drive letters, the Device Access Manager background services need to be running. The easiest way to start these services - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 67
Computrace for HP ProtectTools to monitor or manage the computer. If the system is misplaced or stolen, the Customer Center can assist local authorities to locate and recover the computer. If configured, Computrace can continue to function even if the hard drive is erased or replaced. To activate - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 68
that the user sets in File Sanitizer for HP ProtectTools. Automatic Technology Manager (ATM). Allows network administrators to manage systems remotely at the BIOS level. bleaching. see free space bleaching. certification authority. Service that issues the certificates required to run a public - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 69
Manager Certificates and Trusted Contacts. network account. Windows user or administrator account, either on a local computer, in a workgroup, or on a domain. personal secure drive (PSD). Provides a protected storage area for sensitive information. power-on authentication. Security feature that - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 70
A task that allows the user to decrypt one or more chat history sessions, displaying the Contact Screen Name(s) in of the Windows reference to an asset. The asset content remains on the hard drive until obscuring data is written over it by free space bleaching. Smart Card. A removable card that is - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 71
for the HP ProtectTools Embedded Security Drive Encryption. They can only enroll (with administrator approval) and log in. Windows administrator. A user with full rights to modify permissions and manage other users. Windows user account. Profile for an individual authorized to log on to a network - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 72
Windows password 19 common use examples 3 Computer Setup administrator password 10 Computrace for HP ProtectTools common use examples 6 configuring users 13 controlling device access 53 D data, restricting access to 7 decrypting a drive 29 Device Access Manager for HP ProtectTools background service - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 73
changing Windows user name 24 changing your picture 24 device access 21 drive encryption status 21 logging in 18 managing communication privacy 20 managing passwords 19 preferences 22 setting credentials 19 shredding or bleaching files 21 theft recovery 21 HP ProtectTools Security Manager - HP Pro 3505 | HP ProtectTools Security Software,Version 6.0 User Guide - Page 74
password 10 shred profile customizing 45 predefined 44 selecting or creating 44 simple delete profile customizing 45 smart card initializing 20 PIN 10 registering 20 setting up 19 T targeted theft, protecting against 7, 57 TPM chip enabling 49 initializing 50 tracking a computer 57 U unauthorized
HP ProtectTools Security Software,
Version 6.0
User Guide